@hasna/domains 0.0.36 → 0.0.38

package/dist/cli/index.js

@@ -16256,6 +16256,9 @@ function normalizeDnsRecordType(value) {
   }
   return recordType3;
 }
+function getVcardPropertyValue(entry) {
+  return entry.length >= 4 ? entry[3] : entry[2];
+}
 async function rdapLookup(domainName) {
   const domain = normalizeDomainName(domainName);
   const url = `https://rdap.org/domain/${encodeURIComponent(domain)}`;
@@ -16304,17 +16307,19 @@ function extractRegistrantFromRdap(rdap) {
   for (const entry of vcard) {
     if (!Array.isArray(entry) || entry.length < 3)
       continue;
-    const [prop, _params, type] = entry;
+    const [prop] = entry;
+    const value = getVcardPropertyValue(entry);
     if (prop === "fn")
-      result.name = type ?? null;
+      result.name = typeof value === "string" ? value : null;
     else if (prop === "email")
-      result.email = type ?? null;
+      result.email = typeof value === "string" ? value : null;
     else if (prop === "tel")
-      result.phone = type ?? null;
+      result.phone = typeof value === "string" ? value : null;
     else if (prop === "org") {
-      result.organization = Array.isArray(type) ? type[0] ?? null : type ?? null;
+      const organization = Array.isArray(value) ? value[0] : value;
+      result.organization = typeof organization === "string" ? organization : null;
     } else if (prop === "n" && !result.name) {
-      const parts = Array.isArray(type) ? type.filter(Boolean) : [type];
+      const parts = Array.isArray(value) ? value.filter((part) => typeof part === "string" && part.length > 0) : typeof value === "string" ? [value] : [];
       result.name = parts.reverse().join(" ").trim() || null;
     }
   }
@@ -16331,8 +16336,10 @@ function extractRegistrarFromRdap(rdap) {
       if (entity.vcardArray?.[1]) {
         const vcard = entity.vcardArray[1];
         for (const entry of vcard) {
-          if (Array.isArray(entry) && entry[0] === "fn")
-            return entry[2] ?? null;
+          if (Array.isArray(entry) && entry[0] === "fn") {
+            const value = getVcardPropertyValue(entry);
+            return typeof value === "string" ? value : null;
+          }
         }
       }
       if (entity.remarks) {
@@ -28939,7 +28946,7 @@ var init_bowser = __esm(() => {
 
 // node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
 var require_client2 = __commonJS((exports) => {
-  var __dirname = "/home/hasna/.hasna/repos/worktrees/open-domains/282f5cec-baae-438a-beed-bdf090475f02/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
+  var __dirname = "/home/hasna/.hasna/repos/worktrees/domains/0a933b3e-a459-4bcb-b94d-6ab12a2ec235/node_modules/@aws-sdk/core/dist-cjs/submodules/client";
   var retry = require_retry();
   var protocols = require_protocols();
   var lambdaInvokeStore = require_invoke_store();
@@ -50208,6 +50215,7 @@ function createRoute53Provider(config2) {
   }
   return {
     name: "route53",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       return listDomainInventory();
     },
@@ -50577,16 +50585,51 @@ async function listRecordsByNameType(zoneId, type, name, config2) {
     proxied: r4.proxied
   }));
 }
-async function replaceRecordsByNameType(zoneId, records, config2) {
+function sameRecordIdentity(a4, b4) {
+  return a4.type === b4.type && a4.name === b4.name && a4.content === b4.content && (a4.priority ?? undefined) === (b4.priority ?? undefined);
+}
+function resolveDesiredProxied(records, existing) {
+  const omitted = records.filter((record) => record.proxied === undefined);
+  if (omitted.length === 0)
+    return records;
+  const { type, name } = records[0];
+  if (omitted.length === records.length) {
+    const proxyStates = new Set(existing.map((record) => record.proxied));
+    if (proxyStates.size > 1) {
+      throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name}: ` + "existing records have mixed proxied values while desired records omit proxied; " + "set proxied explicitly on every desired record");
+    }
+    const inherited = existing[0]?.proxied;
+    return inherited === undefined ? records : records.map((record) => ({ ...record, proxied: inherited }));
+  }
+  const existingHasProxyState = existing.some((record) => record.proxied !== undefined);
+  return records.map((record) => {
+    if (record.proxied !== undefined)
+      return record;
+    const matches = existing.filter((candidate) => sameRecordIdentity(candidate, record));
+    if (matches.length === 1 && matches[0].proxied !== undefined) {
+      return { ...record, proxied: matches[0].proxied };
+    }
+    if (!existingHasProxyState)
+      return record;
+    throw new Error(`Cannot safely preserve Cloudflare proxied state for ${type} ${name} record ${record.content}: ` + "omitted proxied does not resolve to exactly one existing value; " + "set proxied explicitly on this desired record");
+  });
+}
+async function prepareRecordsByNameType(zoneId, records, config2) {
   if (records.length === 0)
     return;
   const { type, name } = records[0];
   const existing = await listRecordsByNameType(zoneId, type, name, config2);
-  for (const record of existing) {
+  if (existing.length === records.length && records.every((record) => existing.some((candidate) => sameRecordIdentity(candidate, record) && candidate.ttl === record.ttl && (record.proxied === undefined || candidate.proxied === record.proxied)))) {
+    return;
+  }
+  return { existing, desired: resolveDesiredProxied(records, existing) };
+}
+async function replaceRecordsByNameType(zoneId, replacement, config2) {
+  for (const record of replacement.existing) {
     if (record.id)
       await deleteRecord2(zoneId, record.id, config2);
   }
-  for (const record of records) {
+  for (const record of replacement.desired) {
     await cfFetch(`/zones/${zoneId}/dns_records`, {
       method: "POST",
       body: {
@@ -50595,7 +50638,7 @@ async function replaceRecordsByNameType(zoneId, records, config2) {
         content: record.content,
         ttl: record.ttl ?? 1,
         priority: record.priority,
-        proxied: record.proxied ?? false
+        ...record.proxied === undefined ? {} : { proxied: record.proxied }
       },
       config: config2
     });
@@ -50630,6 +50673,7 @@ function createCloudflareProvider(config2) {
   const cfg = config2 ?? getConfig3();
   return {
     name: "cloudflare",
+    dnsWriteScope: "changed-groups",
     async listDomains() {
       const zones = await listZones(cfg);
       return zones.map(zoneToDomainInfo);
@@ -50680,7 +50724,8 @@ function createCloudflareProvider(config2) {
         name: r4.name,
         value: r4.content,
         ttl: r4.ttl === 1 ? 0 : r4.ttl,
-        priority: r4.priority
+        priority: r4.priority,
+        ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
       }));
     },
     async setDnsRecords(domain, records) {
@@ -50691,11 +50736,24 @@ function createCloudflareProvider(config2) {
       for (const r4 of records) {
         const key = `${r4.type}|${r4.name}`;
         const existing = grouped.get(key) ?? [];
-        existing.push({ type: r4.type, name: r4.name, content: r4.value, ttl: r4.ttl || 1, priority: r4.priority });
+        existing.push({
+          type: r4.type,
+          name: r4.name,
+          content: r4.value,
+          ttl: r4.ttl || 1,
+          priority: r4.priority,
+          ...r4.proxied === undefined ? {} : { proxied: r4.proxied }
+        });
         grouped.set(key, existing);
       }
+      const replacements = [];
       for (const group of grouped.values()) {
-        await replaceRecordsByNameType(zone.id, group, cfg);
+        const replacement = await prepareRecordsByNameType(zone.id, group, cfg);
+        if (replacement)
+          replacements.push(replacement);
+      }
+      for (const replacement of replacements) {
+        await replaceRecordsByNameType(zone.id, replacement, cfg);
       }
       return true;
     }
@@ -51383,6 +51441,65 @@ function compactHint(page, noun, detailHint, options = {}) {
 }
 var DEFAULT_LIST_LIMIT = 20, MAX_LIST_LIMIT = 200;
 
+// src/lib/stdout.ts
+import { writeSync } from "fs";
+import { format } from "util";
+function awaitDrain() {
+  Atomics.wait(backpressureWait, 0, 0, BACKPRESSURE_WAIT_MS);
+}
+function errorCodeOf(error) {
+  if (typeof error !== "object" || error === null)
+    return null;
+  const code = error.code;
+  return typeof code === "string" ? code : null;
+}
+function writeAllBytesSync(bytes, writer) {
+  let offset = 0;
+  while (offset < bytes.length) {
+    let accepted;
+    try {
+      accepted = writer(bytes.subarray(offset));
+    } catch (error) {
+      const code = errorCodeOf(error);
+      if (code === "EAGAIN" || code === "EWOULDBLOCK") {
+        awaitDrain();
+        continue;
+      }
+      if (code === "EPIPE" || code === "ERR_STREAM_DESTROYED")
+        return "reader-closed";
+      throw error;
+    }
+    if (accepted <= 0) {
+      awaitDrain();
+      continue;
+    }
+    offset += accepted;
+  }
+  return "complete";
+}
+function writeAllSync(text, writer) {
+  return writeAllBytesSync(Buffer.from(text, "utf8"), writer);
+}
+function writeStdout(text, writer = stdoutWriter) {
+  return writeAllSync(text, writer);
+}
+function formatLine(...args) {
+  return `${format(...args)}
+`;
+}
+function printLine(...args) {
+  return writeStdout(formatLine(...args));
+}
+function printErrorLine(...args) {
+  return writeAllSync(formatLine(...args), stderrWriter);
+}
+var BACKPRESSURE_WAIT_MS = 1, backpressureWait, fdWriter = (fd) => (chunk) => writeSync(fd, chunk), stdoutWriter, stderrWriter;
+var init_stdout = __esm(() => {
+  backpressureWait = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
+  stdoutWriter = fdWriter(1);
+  stderrWriter = fdWriter(2);
+});
+
 // src/db/history.ts
 function createHistoryEntry2(input) {
   return getStore().createHistoryEntry(input);
@@ -51772,22 +51889,22 @@ function registerMonitorCommand(program2) {
     try {
       const result = await monitorBrand(brand);
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        printLine(JSON.stringify(result, null, 2));
         return;
       }
       const page = pageItemsOrExit(result.alerts, { limit: opts.limit, all: opts.all });
-      console.log(`Monitor: ${result.brand}${result.stub ? " [stub]" : ""}`);
+      printLine(`Monitor: ${result.brand}${result.stub ? " [stub]" : ""}`);
       if (page.items.length === 0) {
-        console.log("No alerts.");
+        printLine("No alerts.");
         return;
       }
       for (const alert of page.items) {
-        console.log(`  ${alert.domain} [${alert.type}] registered:${alert.registered_at}`);
+        printLine(`  ${alert.domain} [${alert.type}] registered:${alert.registered_at}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "alert(s)", "Use --all for every alert or --json for full monitor details.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -51795,21 +51912,21 @@ ${compactHint(page, "alert(s)", "Use --all for every alert or --json for full mo
     try {
       const result = await getSimilarDomains(domain);
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        printLine(JSON.stringify(result, null, 2));
         return;
       }
       const page = pageItemsOrExit(result.similar, { limit: opts.limit, all: opts.all });
-      console.log(`Similar domains for ${result.domain}${result.stub ? " [stub]" : ""}:`);
+      printLine(`Similar domains for ${result.domain}${result.stub ? " [stub]" : ""}:`);
       if (page.items.length === 0) {
-        console.log("No similar domains found.");
+        printLine("No similar domains found.");
         return;
       }
       for (const name of page.items)
-        console.log(`  ${name}`);
-      console.log(`
+        printLine(`  ${name}`);
+      printLine(`
 ${compactHint(page, "domain(s)", "Use --all for every result or --json for full response metadata.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -51817,28 +51934,29 @@ ${compactHint(page, "domain(s)", "Use --all for every result or --json for full
     try {
       const result = await getThreatAssessment(domain);
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        printLine(JSON.stringify(result, null, 2));
         return;
       }
       const page = pageItemsOrExit(result.threats, { limit: opts.limit, all: opts.all });
-      console.log(`Threat assessment for ${result.domain}${result.stub ? " [stub]" : ""}: ${result.risk_level}`);
+      printLine(`Threat assessment for ${result.domain}${result.stub ? " [stub]" : ""}: ${result.risk_level}`);
       if (page.items.length === 0) {
-        console.log("No immediate threats detected.");
+        printLine("No immediate threats detected.");
       } else {
         for (const threat of page.items)
-          console.log(`  - ${truncateText(threat, 100)}`);
+          printLine(`  - ${truncateText(threat, 100)}`);
       }
-      console.log(`Recommendation: ${truncateText(result.recommendation, 140)}`);
-      console.log(`
+      printLine(`Recommendation: ${truncateText(result.recommendation, 140)}`);
+      printLine(`
 ${compactHint(page, "threat(s)", "Use --all for every threat or --json for the full assessment.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
 }
 var init_monitor = __esm(() => {
   init_brandsight();
+  init_stdout();
 });
 
 // src/cli/commands/sedo.ts
@@ -51851,7 +51969,7 @@ function parseSedoLimit(value, fallback) {
     return fallback;
   const parsed = Number(value);
   if (!Number.isInteger(parsed) || parsed < 0) {
-    console.error("--limit must be a non-negative integer");
+    printErrorLine("--limit must be a non-negative integer");
     process.exit(1);
   }
   return parsed;
@@ -51868,19 +51986,19 @@ function registerSedoCommand(program2) {
       maxPrice: opts.maxPrice ? parseInt(opts.maxPrice) : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
     } else {
       if (result.domains.length === 0) {
-        console.log(`No domains found for "${keyword}".`);
+        printLine(`No domains found for "${keyword}".`);
         return;
       }
-      console.log(`Sedo marketplace \u2014 "${keyword}" (${result.total} total):`);
+      printLine(`Sedo marketplace \u2014 "${keyword}" (${result.total} total):`);
       for (const d4 of result.domains) {
         const price = d4.price ? ` \u2014 ${d4.price.toLocaleString()} ${d4.currency || ""}`.trimEnd() : " \u2014 make offer";
         const premium = d4.isPremium ? " [PREMIUM]" : "";
-        console.log(`  ${d4.domain}${price}${premium}`);
+        printLine(`  ${d4.domain}${price}${premium}`);
       }
-      console.log(`
+      printLine(`
 Showing ${result.domains.length}/${result.total} marketplace result(s). Use --limit <n> for more or --json for full fields.`);
     }
   });
@@ -51888,12 +52006,12 @@ Showing ${result.domains.length}/${result.total} marketplace result(s). Use --li
     const { checkSedoStatus: checkSedoStatus2 } = await Promise.resolve().then(() => (init_sedo(), exports_sedo));
     const results = await checkSedoStatus2(domains);
     if (opts.json) {
-      console.log(JSON.stringify(results, null, 2));
+      printLine(JSON.stringify(results, null, 2));
     } else {
       for (const r4 of results) {
         const listed = r4.listed ? "listed" : "not listed";
         const sale = r4.forSale ? ` for sale (${r4.price || "?"} ${r4.currency || ""})` : "";
-        console.log(`  ${r4.domain}: ${listed}${sale}`);
+        printLine(`  ${r4.domain}: ${listed}${sale}`);
       }
     }
   });
@@ -51902,19 +52020,19 @@ Showing ${result.domains.length}/${result.total} marketplace result(s). Use --li
     const limit = parseSedoLimit(opts.limit, opts.json || opts.all ? 100 : 20);
     const domains = await listSedoPortfolio2({ limit });
     if (opts.json) {
-      console.log(JSON.stringify(domains, null, 2));
+      printLine(JSON.stringify(domains, null, 2));
     } else {
       if (domains.length === 0) {
-        console.log("No domains in your Sedo portfolio.");
+        printLine("No domains in your Sedo portfolio.");
         return;
       }
       const page = pageItemsOrExit(domains, { limit: opts.limit, all: opts.all });
-      console.log(`Sedo Portfolio:`);
+      printLine(`Sedo Portfolio:`);
       for (const d4 of page.items) {
         const sale = d4.forSale ? `[for sale ${d4.price || "?"} ${d4.currency || ""}]` : "";
-        console.log(`  ${d4.domain} ${sale}`);
+        printLine(`  ${d4.domain} ${sale}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "domain(s)", "Use --limit <n> for more or --json for full marketplace fields.", { paging: "limit" })}`);
     }
   });
@@ -51929,9 +52047,9 @@ ${compactHint(page, "domain(s)", "Use --limit <n> for more or --json for full ma
       buyNowPrice: opts.buyNowPrice ? parseInt(opts.buyNowPrice) : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
     } else {
-      console.log(`Added ${domain} to Sedo marketplace`);
+      printLine(`Added ${domain} to Sedo marketplace`);
     }
   });
   sedo.command("edit").description("Update an existing domain on Sedo").argument("<domain>", "Domain name to update").option("--price <n>", "New asking price").option("--currency <currency>", "Currency").option("--buy-now-price <n>", "New buy-it-now price").option("--json", "Output as JSON", false).action(async (domain, opts) => {
@@ -51943,18 +52061,18 @@ ${compactHint(page, "domain(s)", "Use --limit <n> for more or --json for full ma
       buyNowPrice: opts.buyNowPrice ? parseInt(opts.buyNowPrice) : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
     } else {
-      console.log(`Updated ${domain} on Sedo`);
+      printLine(`Updated ${domain} on Sedo`);
     }
   });
   sedo.command("remove").description("Remove a domain from Sedo marketplace").argument("<domain>", "Domain name to remove").action(async (domain) => {
     const { removeDomainFromSedo: removeDomainFromSedo2 } = await Promise.resolve().then(() => (init_sedo(), exports_sedo));
     const removed = await removeDomainFromSedo2(domain);
     if (removed) {
-      console.log(`Removed ${domain} from Sedo marketplace`);
+      printLine(`Removed ${domain} from Sedo marketplace`);
     } else {
-      console.error(`Failed to remove ${domain} from Sedo`);
+      printErrorLine(`Failed to remove ${domain} from Sedo`);
       process.exit(1);
     }
   });
@@ -51962,10 +52080,10 @@ ${compactHint(page, "domain(s)", "Use --limit <n> for more or --json for full ma
     const { checkSedoBlacklist: checkSedoBlacklist2 } = await Promise.resolve().then(() => (init_sedo(), exports_sedo));
     const results = await checkSedoBlacklist2(domains);
     if (opts.json) {
-      console.log(JSON.stringify(results, null, 2));
+      printLine(JSON.stringify(results, null, 2));
     } else {
       for (const r4 of results) {
-        console.log(`  ${r4.domain}: ${r4.blacklisted ? "BLACKLISTED" : "clean"}`);
+        printLine(`  ${r4.domain}: ${r4.blacklisted ? "BLACKLISTED" : "clean"}`);
       }
     }
   });
@@ -51974,13 +52092,15 @@ ${compactHint(page, "domain(s)", "Use --limit <n> for more or --json for full ma
     const price = parseInt(opts.price);
     const created = recordSedoPurchase2(domain, price, opts.orderId);
     if (opts.json) {
-      console.log(JSON.stringify(created, null, 2));
+      printLine(JSON.stringify(created, null, 2));
     } else {
-      console.log(`Recorded Sedo purchase: ${domain} for $${price}`);
+      printLine(`Recorded Sedo purchase: ${domain} for $${price}`);
     }
   });
 }
-var init_sedo2 = () => {};
+var init_sedo2 = __esm(() => {
+  init_stdout();
+});
 
 // src/db/owners.ts
 function createDomainOwner2(input) {
@@ -52073,7 +52193,7 @@ __export(exports_owner, {
 async function requireDomain2(identifier) {
   const details = await getDomainDetails2(identifier);
   if (!details) {
-    console.error(`Domain '${identifier}' not found.`);
+    printErrorLine(`Domain '${identifier}' not found.`);
     process.exit(1);
   }
   return details;
@@ -52084,21 +52204,21 @@ function registerOwnerCommand(program2) {
     if (opts.withDomains) {
       const results = await listDomainsWithOwners2();
       if (opts.json) {
-        console.log(JSON.stringify({ owners: results, count: results.length }, null, 2));
+        printLine(JSON.stringify({ owners: results, count: results.length }, null, 2));
         return;
       }
       const page2 = pageItemsOrExit(results, { limit: opts.limit, all: opts.all });
       if (page2.items.length === 0) {
-        console.log("No premium domain owners found.");
+        printLine("No premium domain owners found.");
         return;
       }
       for (const r4 of page2.items) {
         const verified = r4.verified ? " [verified]" : "";
         const org = r4.owner_organization ? ` @ ${r4.owner_organization}` : "";
         const email = opts.verbose && r4.owner_email ? ` email:${r4.owner_email}` : "";
-        console.log(`  ${r4.domain_name} (${r4.domain_status}) \u2014 ${r4.owner_name ?? r4.owner_email ?? "unknown"}${org}${verified}${email}`);
+        printLine(`  ${r4.domain_name} (${r4.domain_status}) \u2014 ${r4.owner_name ?? r4.owner_email ?? "unknown"}${org}${verified}${email}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page2, "domain(s) with owner info", "Use --verbose for email details or owner info <domain> for full details.", { paging: "limit" })}`);
       return;
     }
@@ -52108,87 +52228,87 @@ ${compactHint(page2, "domain(s) with owner info", "Use --verbose for email detai
       verified: opts.verifiedOnly ? true : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify({ owners, count: owners.length }, null, 2));
+      printLine(JSON.stringify({ owners, count: owners.length }, null, 2));
       return;
     }
     const page = pageItemsOrExit(owners, { limit: opts.limit, all: opts.all });
     if (page.items.length === 0) {
-      console.log("No owners found.");
+      printLine("No owners found.");
       return;
     }
     for (const o2 of page.items) {
       const verified = o2.verified ? " [verified]" : "";
       const org = o2.owner_organization ? ` @ ${o2.owner_organization}` : "";
-      console.log(`  ${truncateText(o2.owner_name ?? o2.owner_email ?? "unknown", 48)}${org} [${o2.source}]${verified}`);
+      printLine(`  ${truncateText(o2.owner_name ?? o2.owner_email ?? "unknown", 48)}${org} [${o2.source}]${verified}`);
       if (opts.verbose && o2.owner_email)
-        console.log(`    email: ${o2.owner_email}`);
+        printLine(`    email: ${o2.owner_email}`);
       if (opts.verbose && o2.owner_phone)
-        console.log(`    phone: ${o2.owner_phone}`);
+        printLine(`    phone: ${o2.owner_phone}`);
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "owner(s)", "Use --verbose for contact fields or owner get <id> for details.", { paging: "limit" })}`);
   });
   owner.command("get <ownerId>").description("Get owner details by ID").option("-j, --json", "Output JSON").action(async (ownerId, opts) => {
     const o2 = await getDomainOwner2(ownerId);
     if (!o2) {
-      console.error(`Owner '${ownerId}' not found.`);
+      printErrorLine(`Owner '${ownerId}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(o2, null, 2));
+      printLine(JSON.stringify(o2, null, 2));
       return;
     }
-    console.log(`
+    printLine(`
 Owner: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
     if (o2.owner_organization)
-      console.log(`  Organization: ${o2.owner_organization}`);
+      printLine(`  Organization: ${o2.owner_organization}`);
     if (o2.owner_email)
-      console.log(`  Email: ${o2.owner_email}`);
+      printLine(`  Email: ${o2.owner_email}`);
     if (o2.owner_phone)
-      console.log(`  Phone: ${o2.owner_phone}`);
-    console.log(`  Source: ${o2.source}`);
-    console.log(`  Verified: ${o2.verified ? "yes" : "no"}`);
+      printLine(`  Phone: ${o2.owner_phone}`);
+    printLine(`  Source: ${o2.source}`);
+    printLine(`  Verified: ${o2.verified ? "yes" : "no"}`);
     if (o2.contact_id)
-      console.log(`  Contacts ID: ${o2.contact_id}`);
+      printLine(`  Contacts ID: ${o2.contact_id}`);
     if (o2.notes)
-      console.log(`  Notes: ${truncateText(o2.notes, 160)}`);
-    console.log();
+      printLine(`  Notes: ${truncateText(o2.notes, 160)}`);
+    printLine();
   });
   owner.command("info <identifier>").description("Show owner info for a specific domain").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain2(identifier);
     const o2 = await getDomainOwnerByDomain2(details.domain.id);
     if (!o2) {
       if (opts.json) {
-        console.log(JSON.stringify({ domain: details.domain.name, owner: null }, null, 2));
+        printLine(JSON.stringify({ domain: details.domain.name, owner: null }, null, 2));
         return;
       }
-      console.log(`No owner info for ${details.domain.name}.`);
+      printLine(`No owner info for ${details.domain.name}.`);
       return;
     }
     const result = { domain: details.domain.name, owner: o2 };
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
       return;
     }
-    console.log(`
+    printLine(`
 Domain: ${details.domain.name} [${details.domain.status}]`);
-    console.log(`  Owner: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
+    printLine(`  Owner: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
     if (o2.owner_organization)
-      console.log(`  Organization: ${o2.owner_organization}`);
+      printLine(`  Organization: ${o2.owner_organization}`);
     if (o2.owner_email)
-      console.log(`  Email: ${o2.owner_email}`);
+      printLine(`  Email: ${o2.owner_email}`);
     if (o2.owner_phone)
-      console.log(`  Phone: ${o2.owner_phone}`);
-    console.log(`  Source: ${o2.source}`);
-    console.log(`  Verified: ${o2.verified ? "yes" : "no"}`);
+      printLine(`  Phone: ${o2.owner_phone}`);
+    printLine(`  Source: ${o2.source}`);
+    printLine(`  Verified: ${o2.verified ? "yes" : "no"}`);
     if (o2.contact_id)
-      console.log(`  Contacts ID: ${o2.contact_id}`);
-    console.log();
+      printLine(`  Contacts ID: ${o2.contact_id}`);
+    printLine();
   });
   owner.command("add <identifier>").description("Add owner info for a domain").option("--name <name>", "Owner name").option("--email <email>", "Owner email").option("--phone <phone>", "Owner phone").option("--organization <org>", "Owner organization").option("--source <source>", "Source (whois/manual/brandsight/import)", "manual").option("--contact-id <id>", "Link to existing open-contacts contact ID").option("--verified", "Mark as verified").option("--notes <text>", "Notes").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain2(identifier);
     if (!opts.name && !opts.email && !opts.organization && !opts.contactId) {
-      console.error("At least one of --name, --email, --organization, or --contact-id is required.");
+      printErrorLine("At least one of --name, --email, --organization, or --contact-id is required.");
       process.exit(1);
     }
     const input = {
@@ -52204,15 +52324,15 @@ Domain: ${details.domain.name} [${details.domain.status}]`);
     };
     const o2 = await createDomainOwner2(input);
     if (opts.json) {
-      console.log(JSON.stringify(o2, null, 2));
+      printLine(JSON.stringify(o2, null, 2));
       return;
     }
-    console.log(`Added owner for ${details.domain.name}: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
+    printLine(`Added owner for ${details.domain.name}: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
   });
   owner.command("update <ownerId>").description("Update owner info").option("--name <name>", "Owner name").option("--email <email>", "Owner email").option("--phone <phone>", "Owner phone").option("--organization <org>", "Owner organization").option("--contact-id <id>", "Link to open-contacts contact ID").option("--verified", "Mark as verified").option("--unverify", "Unmark as verified").option("--notes <text>", "Notes").option("-j, --json", "Output JSON").action(async (ownerId, opts) => {
     const existing = await getDomainOwner2(ownerId);
     if (!existing) {
-      console.error(`Owner '${ownerId}' not found.`);
+      printErrorLine(`Owner '${ownerId}' not found.`);
       process.exit(1);
     }
     const update = {};
@@ -52234,72 +52354,72 @@ Domain: ${details.domain.name} [${details.domain.status}]`);
       update.notes = opts.notes;
     const o2 = await updateDomainOwner2(ownerId, update);
     if (!o2) {
-      console.error("Update failed.");
+      printErrorLine("Update failed.");
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(o2, null, 2));
+      printLine(JSON.stringify(o2, null, 2));
       return;
     }
-    console.log(`Updated owner: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
+    printLine(`Updated owner: ${o2.owner_name ?? o2.owner_email ?? "unknown"}`);
   });
   owner.command("delete <ownerId>").description("Delete an owner record").option("-f, --force", "Required confirmation").action(async (ownerId, opts) => {
     if (!opts.force) {
-      console.error(`Refusing to delete owner '${ownerId}' without --force.`);
+      printErrorLine(`Refusing to delete owner '${ownerId}' without --force.`);
       process.exit(1);
     }
     const deleted = await deleteDomainOwner2(ownerId);
     if (!deleted) {
-      console.error(`Owner '${ownerId}' not found.`);
+      printErrorLine(`Owner '${ownerId}' not found.`);
       process.exit(1);
     }
-    console.log(`Deleted owner ${ownerId}`);
+    printLine(`Deleted owner ${ownerId}`);
   });
   owner.command("extract <identifier>").description("Extract owner info from WHOIS lookup").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain2(identifier);
     const whois = await whoisLookup(details.domain.name);
     if (!whois.raw) {
-      console.error("WHOIS returned no data.");
+      printErrorLine("WHOIS returned no data.");
       process.exit(1);
     }
     const o2 = await extractOwnerFromWhois(details.domain.name, whois.raw);
     if (!o2) {
-      console.log("No owner information found in WHOIS data.");
+      printLine("No owner information found in WHOIS data.");
       return;
     }
     if (opts.json) {
-      console.log(JSON.stringify(o2, null, 2));
+      printLine(JSON.stringify(o2, null, 2));
       return;
     }
-    console.log(`Extracted owner for ${details.domain.name}:`);
+    printLine(`Extracted owner for ${details.domain.name}:`);
     if (o2.owner_name)
-      console.log(`  Name: ${o2.owner_name}`);
+      printLine(`  Name: ${o2.owner_name}`);
     if (o2.owner_email)
-      console.log(`  Email: ${o2.owner_email}`);
+      printLine(`  Email: ${o2.owner_email}`);
     if (o2.owner_phone)
-      console.log(`  Phone: ${o2.owner_phone}`);
+      printLine(`  Phone: ${o2.owner_phone}`);
     if (o2.owner_organization)
-      console.log(`  Organization: ${o2.owner_organization}`);
-    console.log();
+      printLine(`  Organization: ${o2.owner_organization}`);
+    printLine();
   });
   owner.command("link <identifier>").description("Link domain owner to open-contacts contact").option("--contact-id <id>", "Existing contact ID in open-contacts").option("--auto", "Auto-create contact from owner info").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain2(identifier);
     const o2 = await getDomainOwnerByDomain2(details.domain.id);
     if (!o2) {
-      console.error(`No owner record for ${details.domain.name}. Add one first.`);
+      printErrorLine(`No owner record for ${details.domain.name}. Add one first.`);
       process.exit(1);
     }
     if (opts.contactId) {
       const updated = await updateDomainOwner2(o2.id, { contact_id: opts.contactId });
       if (!updated) {
-        console.error("Link failed.");
+        printErrorLine("Link failed.");
         process.exit(1);
       }
       if (opts.json) {
-        console.log(JSON.stringify(updated, null, 2));
+        printLine(JSON.stringify(updated, null, 2));
         return;
       }
-      console.log(`Linked ${details.domain.name} to contact ${opts.contactId}`);
+      printLine(`Linked ${details.domain.name} to contact ${opts.contactId}`);
       return;
     }
     if (opts.auto) {
@@ -52311,64 +52431,65 @@ Domain: ${details.domain.name} [${details.domain.status}]`);
           getContactByEmail: (email) => contacts.getContactByEmail(email)
         });
         if (!contactId) {
-          console.error("Could not create/find contact \u2014 owner has no email.");
+          printErrorLine("Could not create/find contact \u2014 owner has no email.");
           process.exit(1);
         }
         if (opts.json) {
-          console.log(JSON.stringify({ domain: details.domain.name, contact_id: contactId }, null, 2));
+          printLine(JSON.stringify({ domain: details.domain.name, contact_id: contactId }, null, 2));
           return;
         }
-        console.log(`Created/linked contact ${contactId} for ${details.domain.name}`);
+        printLine(`Created/linked contact ${contactId} for ${details.domain.name}`);
       } catch (e4) {
         const message = e4 instanceof Error ? e4.message : String(e4);
         if (typeof e4 === "object" && e4 !== null && "code" in e4 && e4.code === "MODULE_NOT_FOUND" || message.includes("@hasna/contacts")) {
-          console.error("@hasna/contacts is not installed. Install it alongside @hasna/domains, or pass --contact-id to link an existing contact ID.");
+          printErrorLine("@hasna/contacts is not installed. Install it alongside @hasna/domains, or pass --contact-id to link an existing contact ID.");
         } else {
-          console.error(`Failed to link to open-contacts: ${message}`);
+          printErrorLine(`Failed to link to open-contacts: ${message}`);
         }
         process.exit(1);
       }
       return;
     }
-    console.error("Use --contact-id <id> or --auto to link.");
+    printErrorLine("Use --contact-id <id> or --auto to link.");
     process.exit(1);
   });
   owner.command("whois <identifier>").description("WHOIS lookup and save owner info").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain2(identifier);
     const whois = await whoisLookup(details.domain.name);
     if (!whois.raw) {
-      console.error("WHOIS returned no data.");
+      printErrorLine("WHOIS returned no data.");
       process.exit(1);
     }
     const o2 = await extractOwnerFromWhois(details.domain.name, whois.raw);
     if (!o2) {
       if (opts.json) {
-        console.log(JSON.stringify({ domain: details.domain.name, owner: null }, null, 2));
+        printLine(JSON.stringify({ domain: details.domain.name, owner: null }, null, 2));
         return;
       }
-      console.log("No owner information found in WHOIS data.");
+      printLine("No owner information found in WHOIS data.");
       return;
     }
     if (opts.json) {
-      console.log(JSON.stringify(o2, null, 2));
+      printLine(JSON.stringify(o2, null, 2));
       return;
     }
-    console.log(`WHOIS owner for ${details.domain.name}:`);
+    printLine(`WHOIS owner for ${details.domain.name}:`);
     if (o2.owner_name)
-      console.log(`  Name: ${o2.owner_name}`);
+      printLine(`  Name: ${o2.owner_name}`);
     if (o2.owner_email)
-      console.log(`  Email: ${o2.owner_email}`);
+      printLine(`  Email: ${o2.owner_email}`);
     if (o2.owner_phone)
-      console.log(`  Phone: ${o2.owner_phone}`);
+      printLine(`  Phone: ${o2.owner_phone}`);
     if (o2.owner_organization)
-      console.log(`  Organization: ${o2.owner_organization}`);
-    console.log(`  Source: ${o2.source}`);
-    console.log();
+      printLine(`  Organization: ${o2.owner_organization}`);
+    printLine(`  Source: ${o2.source}`);
+    printLine();
   });
 }
 var init_owner = __esm(() => {
   init_owners();
   init_domains();
+  init_stdout();
 });
 
 // src/cli/commands/history.ts
@@ -52381,7 +52502,7 @@ function registerHistoryCommand(program2) {
   history.command("list <identifier>").description("List history entries for a domain").option("--type <type>", "Filter by type (whois/rdap/dns/ssl/reputation/exa_research)").option("--limit <n>", "Limit results", "20").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const domain = await getDomainDetails2(identifier);
     if (!domain) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     const entries = await getHistoryByDomain2(domain.domain.id, {
@@ -52389,94 +52510,95 @@ function registerHistoryCommand(program2) {
       limit: opts.limit ? parseInt(opts.limit) : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify({ domain: domain.domain.name, history: entries, count: entries.length }, null, 2));
+      printLine(JSON.stringify({ domain: domain.domain.name, history: entries, count: entries.length }, null, 2));
       return;
     }
     if (entries.length === 0) {
-      console.log(`No history entries for ${domain.domain.name}.`);
+      printLine(`No history entries for ${domain.domain.name}.`);
       return;
     }
-    console.log(`History for ${domain.domain.name}:`);
+    printLine(`History for ${domain.domain.name}:`);
     for (const e4 of entries) {
-      console.log(`  [${e4.created_at}] ${e4.snapshot_type} \u2014 ${e4.registrant_name ?? e4.registrant_email ?? "no owner info"}`);
+      printLine(`  [${e4.created_at}] ${e4.snapshot_type} \u2014 ${e4.registrant_name ?? e4.registrant_email ?? "no owner info"}`);
       if (e4.registrar)
-        console.log(`    Registrar: ${e4.registrar}`);
+        printLine(`    Registrar: ${e4.registrar}`);
       if (e4.notes)
-        console.log(`    Notes: ${truncateText(e4.notes, 120)}`);
+        printLine(`    Notes: ${truncateText(e4.notes, 120)}`);
     }
-    console.log(`
+    printLine(`
 ${entries.length} entry(ies). Use --limit <n> for a different page size or --json for full snapshots.`);
   });
   history.command("timeline").description("Show all domains with history changes").option("--limit <n>", "Limit number of displayed domains").option("--all", "Show all domains with history").option("-j, --json", "Output JSON").action(async (opts) => {
     const results = await listDomainsWithHistoryChanges2();
     if (opts.json) {
-      console.log(JSON.stringify({ domains: results, count: results.length }, null, 2));
+      printLine(JSON.stringify({ domains: results, count: results.length }, null, 2));
       return;
     }
     if (results.length === 0) {
-      console.log("No domains with history entries.");
+      printLine("No domains with history entries.");
       return;
     }
     const page = pageItemsOrExit(results, { limit: opts.limit, all: opts.all });
-    console.log("Domain History Timeline:");
+    printLine("Domain History Timeline:");
     for (const r4 of page.items) {
-      console.log(`  ${r4.domain_name} \u2014 ${r4.snapshot_count} snapshots, latest: ${r4.latest_snapshot_type} at ${r4.latest_snapshot_at}`);
+      printLine(`  ${r4.domain_name} \u2014 ${r4.snapshot_count} snapshots, latest: ${r4.latest_snapshot_type} at ${r4.latest_snapshot_at}`);
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "domain(s) with history", "Use history list <domain> for domain details or --json for full data.", { paging: "limit" })}`);
   });
   history.command("range").description("List history entries within a date range").requiredOption("--from <date>", "Start date (ISO)").requiredOption("--to <date>", "End date (ISO)").option("--domain <name>", "Filter by domain name").option("--limit <n>", "Limit number of displayed entries").option("--all", "Show all entries in range").option("--verbose", "Show truncated notes and registrar details").option("-j, --json", "Output JSON").action(async (opts) => {
     const entries = await getHistoryByDateRange2(opts.from, opts.to, opts.domain);
     if (opts.json) {
-      console.log(JSON.stringify({ history: entries, count: entries.length }, null, 2));
+      printLine(JSON.stringify({ history: entries, count: entries.length }, null, 2));
       return;
     }
     if (entries.length === 0) {
-      console.log(`No history entries between ${opts.from} and ${opts.to}.`);
+      printLine(`No history entries between ${opts.from} and ${opts.to}.`);
       return;
     }
     const page = pageItemsOrExit(entries, { limit: opts.limit, all: opts.all });
-    console.log(`History from ${opts.from} to ${opts.to}:`);
+    printLine(`History from ${opts.from} to ${opts.to}:`);
     for (const e4 of page.items) {
       const extra = opts.verbose ? ` registrar:${truncateText(e4.registrar ?? "-", 40)} notes:${truncateText(e4.notes ?? "-", 80)}` : "";
-      console.log(`  [${e4.created_at}] ${e4.snapshot_type} \u2014 domain ${e4.domain_id}${extra}`);
+      printLine(`  [${e4.created_at}] ${e4.snapshot_type} \u2014 domain ${e4.domain_id}${extra}`);
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "entry(s)", "Use --verbose for more columns or --json for full snapshots.", { paging: "limit" })}`);
   });
   history.command("delete <entryId>").description("Delete a history entry").option("-f, --force", "Required confirmation").action(async (entryId, opts) => {
     if (!opts.force) {
-      console.error(`Refusing to delete history '${entryId}' without --force.`);
+      printErrorLine(`Refusing to delete history '${entryId}' without --force.`);
       process.exit(1);
     }
     const deleted = await deleteHistoryEntry2(entryId);
     if (!deleted) {
-      console.error(`History entry '${entryId}' not found.`);
+      printErrorLine(`History entry '${entryId}' not found.`);
       process.exit(1);
     }
-    console.log(`Deleted history entry ${entryId}`);
+    printLine(`Deleted history entry ${entryId}`);
   });
   history.command("purge <identifier>").description("Delete all history for a domain").option("-f, --force", "Required confirmation").action(async (identifier, opts) => {
     if (!opts.force) {
-      console.error(`Refusing to purge history for '${identifier}' without --force.`);
+      printErrorLine(`Refusing to purge history for '${identifier}' without --force.`);
       process.exit(1);
     }
     const domain = await getDomainDetails2(identifier);
     if (!domain) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     const deleted = await deleteHistoryByDomain2(domain.domain.id);
     if (!deleted) {
-      console.error(`No history to purge for ${domain.domain.name}.`);
+      printErrorLine(`No history to purge for ${domain.domain.name}.`);
       process.exit(1);
     }
-    console.log(`Purged all history for ${domain.domain.name}`);
+    printLine(`Purged all history for ${domain.domain.name}`);
   });
 }
 var init_history2 = __esm(() => {
   init_history();
   init_domains();
+  init_stdout();
 });
 
 // src/db/domain-research.ts
@@ -52643,13 +52765,13 @@ function registerResearchCommand(program2) {
   research.command("exa <identifier>").description("Research a domain using Exa AI (ownership, company info, history)").option("--limit <n>", "Limit number of displayed web/company results").option("--all", "Show all returned research results").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const domain = await getDomainDetails2(identifier);
     if (!domain) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     try {
       const result = await researchDomain(domain.domain.name);
       if (opts.json) {
-        console.log(JSON.stringify({
+        printLine(JSON.stringify({
           domain: result.domain,
           summary: result.summary,
           results: result.results.map((r4) => ({ title: r4.title, url: r4.url, score: r4.score })),
@@ -52658,124 +52780,124 @@ function registerResearchCommand(program2) {
         }, null, 2));
         return;
       }
-      console.log(`Exa Research for ${result.domain}:`);
+      printLine(`Exa Research for ${result.domain}:`);
       if (result.summary)
-        console.log(`
+        printLine(`
   Summary: ${truncateText(result.summary, 240)}`);
       if (result.results.length > 0) {
         const page = pageItemsOrExit(result.results, { limit: opts.limit, all: opts.all });
-        console.log(`
+        printLine(`
   Web Results:`);
         for (const r4 of page.items) {
-          console.log(`    - ${truncateText(r4.title, 100)} (${r4.score.toFixed(2)})`);
-          console.log(`      ${r4.url}`);
+          printLine(`    - ${truncateText(r4.title, 100)} (${r4.score.toFixed(2)})`);
+          printLine(`      ${r4.url}`);
         }
-        console.log(`    ${compactHint(page, "web result(s)", "Use --all for every result or --json for structured output.", { paging: "limit" })}`);
+        printLine(`    ${compactHint(page, "web result(s)", "Use --all for every result or --json for structured output.", { paging: "limit" })}`);
       }
       if (result.companies.length > 0) {
         const page = pageItemsOrExit(result.companies, { limit: opts.limit, all: opts.all });
-        console.log(`
+        printLine(`
   Companies:`);
         for (const c4 of page.items) {
-          console.log(`    - ${c4.name}: ${c4.domain}`);
+          printLine(`    - ${c4.name}: ${c4.domain}`);
         }
-        console.log(`    ${compactHint(page, "company result(s)", "Use --all for every company or --json for structured output.", { paging: "limit" })}`);
+        printLine(`    ${compactHint(page, "company result(s)", "Use --all for every company or --json for structured output.", { paging: "limit" })}`);
       }
       if (result.savedHistory) {
-        console.log(`
+        printLine(`
   Saved to history: ${result.savedHistory.id}`);
       }
-      console.log();
+      printLine();
     } catch (error) {
-      console.error(`Research failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Research failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
   research.command("answer <identifier> <question>").description("Ask a specific question about a domain using Exa AI").option("-j, --json", "Output JSON").action(async (identifier, question, opts) => {
     const domain = await getDomainDetails2(identifier);
     if (!domain) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     try {
       const answer = await answerAboutDomain(domain.domain.name, question);
       if (opts.json) {
-        console.log(JSON.stringify({ domain: domain.domain.name, question, answer }, null, 2));
+        printLine(JSON.stringify({ domain: domain.domain.name, question, answer }, null, 2));
         return;
       }
       if (!answer) {
-        console.log("No answer found.");
+        printLine("No answer found.");
         return;
       }
-      console.log(`Q: ${question}`);
-      console.log(`A: ${answer}`);
+      printLine(`Q: ${question}`);
+      printLine(`A: ${answer}`);
     } catch (error) {
-      console.error(`Answer failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Answer failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
   research.command("reputation <identifier>").description("Check domain reputation and blacklist status").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const domain = await getDomainDetails2(identifier);
     if (!domain) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     const { reputation, dnsBlacklist } = await checkDomainReputation(domain.domain.name);
     if (opts.json) {
-      console.log(JSON.stringify({ domain: domain.domain.name, reputation, dnsBlacklist }, null, 2));
+      printLine(JSON.stringify({ domain: domain.domain.name, reputation, dnsBlacklist }, null, 2));
       return;
     }
-    console.log(`Reputation for ${domain.domain.name}:`);
+    printLine(`Reputation for ${domain.domain.name}:`);
     if (reputation) {
-      console.log(`  Blacklisted: ${reputation.is_blacklisted ? "yes" : "no"}`);
+      printLine(`  Blacklisted: ${reputation.is_blacklisted ? "yes" : "no"}`);
       if (reputation.threat_score !== null)
-        console.log(`  Threat Score: ${reputation.threat_score}`);
+        printLine(`  Threat Score: ${reputation.threat_score}`);
       if (reputation.spam_score !== null)
-        console.log(`  Spam Score: ${reputation.spam_score}`);
-      console.log(`  Malware: ${reputation.malware_detected ? "detected" : "clean"}`);
-      console.log(`  Phishing: ${reputation.phishing_detected ? "detected" : "clean"}`);
+        printLine(`  Spam Score: ${reputation.spam_score}`);
+      printLine(`  Malware: ${reputation.malware_detected ? "detected" : "clean"}`);
+      printLine(`  Phishing: ${reputation.phishing_detected ? "detected" : "clean"}`);
       if (reputation.last_checked_at)
-        console.log(`  Last Checked: ${reputation.last_checked_at}`);
+        printLine(`  Last Checked: ${reputation.last_checked_at}`);
     } else {
-      console.log("  No reputation data yet.");
+      printLine("  No reputation data yet.");
     }
-    console.log(`  DNS Blacklist: ${dnsBlacklist.listed ? `listed in ${dnsBlacklist.zones.join(", ")}` : "clean"}`);
+    printLine(`  DNS Blacklist: ${dnsBlacklist.listed ? `listed in ${dnsBlacklist.zones.join(", ")}` : "clean"}`);
   });
   research.command("blacklisted").description("List all blacklisted domains in the database").option("--limit <n>", "Limit number of displayed domains").option("--all", "Show all blacklisted domains").option("-j, --json", "Output JSON").action(async (opts) => {
     const domains = await listBlacklistedDomains2();
     if (opts.json) {
-      console.log(JSON.stringify({ domains, count: domains.length }, null, 2));
+      printLine(JSON.stringify({ domains, count: domains.length }, null, 2));
       return;
     }
     if (domains.length === 0) {
-      console.log("No blacklisted domains.");
+      printLine("No blacklisted domains.");
       return;
     }
     const page = pageItemsOrExit(domains, { limit: opts.limit, all: opts.all });
-    console.log("Blacklisted domains:");
+    printLine("Blacklisted domains:");
     for (const d4 of page.items) {
-      console.log(`  domain_id: ${d4.domain_id} (sources: ${truncateText(d4.blacklist_sources.join(", "), 100)})`);
+      printLine(`  domain_id: ${d4.domain_id} (sources: ${truncateText(d4.blacklist_sources.join(", "), 100)})`);
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "blacklisted domain(s)", "Use --all for every domain or --json for full source arrays.", { paging: "limit" })}`);
   });
   research.command("threats").description("List domains with high threat scores").option("--threshold <n>", "Minimum threat score", "70").option("--limit <n>", "Limit number of displayed domains").option("--all", "Show all matching domains").option("-j, --json", "Output JSON").action(async (opts) => {
     const threshold = parseInt(opts.threshold ?? "70");
     const domains = await listHighThreatDomains2(threshold);
     if (opts.json) {
-      console.log(JSON.stringify({ domains, threshold, count: domains.length }, null, 2));
+      printLine(JSON.stringify({ domains, threshold, count: domains.length }, null, 2));
       return;
     }
     if (domains.length === 0) {
-      console.log(`No domains with threat score >= ${threshold}.`);
+      printLine(`No domains with threat score >= ${threshold}.`);
       return;
     }
     const page = pageItemsOrExit(domains, { limit: opts.limit, all: opts.all });
-    console.log(`Domains with threat score >= ${threshold}:`);
+    printLine(`Domains with threat score >= ${threshold}:`);
     for (const d4 of page.items) {
-      console.log(`  domain_id: ${d4.domain_id} \u2014 score: ${d4.threat_score ?? "?"}`);
+      printLine(`  domain_id: ${d4.domain_id} \u2014 score: ${d4.threat_score ?? "?"}`);
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "domain(s)", "Use --all for every domain or --json for full reputation records.", { paging: "limit" })}`);
   });
 }
@@ -52783,6 +52905,7 @@ var init_research = __esm(() => {
   init_domain_research();
   init_domains();
   init_reputation();
+  init_stdout();
 });
 
 // src/cli/commands/outreach.ts
@@ -52795,7 +52918,7 @@ import { promisify as promisify3 } from "util";
 async function requireDomainOwner(identifier) {
   const owner = await getDomainOwnerByDomainName2(identifier);
   if (!owner) {
-    console.error(`No owner info found for '${identifier}'.`);
+    printErrorLine(`No owner info found for '${identifier}'.`);
     process.exit(1);
   }
   return owner;
@@ -52805,7 +52928,7 @@ function registerOutreachCommand(program2) {
   outreach.command("sms <identifier>").description("Send SMS to a domain owner").requiredOption("--message <text>", "SMS message body").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const owner = await requireDomainOwner(identifier);
     if (!owner.owner_phone) {
-      console.error(`No phone number for '${identifier}'.`);
+      printErrorLine(`No phone number for '${identifier}'.`);
       process.exit(1);
     }
     try {
@@ -52821,20 +52944,20 @@ function registerOutreachCommand(program2) {
       ], { encoding: "utf-8" });
       const result = JSON.parse(stdout);
       if (opts.json) {
-        console.log(JSON.stringify({ domain: identifier, to: owner.owner_phone, result }, null, 2));
+        printLine(JSON.stringify({ domain: identifier, to: owner.owner_phone, result }, null, 2));
       } else {
-        console.log(`SMS sent to ${owner.owner_name ?? owner.owner_email} (${owner.owner_phone}): "${opts.message}"`);
+        printLine(`SMS sent to ${owner.owner_name ?? owner.owner_email} (${owner.owner_phone}): "${opts.message}"`);
       }
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
-      console.error(`SMS send failed: ${msg}`);
+      printErrorLine(`SMS send failed: ${msg}`);
       process.exit(1);
     }
   });
   outreach.command("whatsapp <identifier>").description("Send WhatsApp message to a domain owner").requiredOption("--message <text>", "Message body").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const owner = await requireDomainOwner(identifier);
     if (!owner.owner_phone) {
-      console.error(`No phone number for '${identifier}'.`);
+      printErrorLine(`No phone number for '${identifier}'.`);
       process.exit(1);
     }
     try {
@@ -52850,20 +52973,20 @@ function registerOutreachCommand(program2) {
       ], { encoding: "utf-8" });
       const result = JSON.parse(stdout);
       if (opts.json) {
-        console.log(JSON.stringify({ domain: identifier, to: owner.owner_phone, result }, null, 2));
+        printLine(JSON.stringify({ domain: identifier, to: owner.owner_phone, result }, null, 2));
       } else {
-        console.log(`WhatsApp sent to ${owner.owner_name ?? owner.owner_email} (${owner.owner_phone}): "${opts.message}"`);
+        printLine(`WhatsApp sent to ${owner.owner_name ?? owner.owner_email} (${owner.owner_phone}): "${opts.message}"`);
       }
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
-      console.error(`WhatsApp send failed: ${msg}`);
+      printErrorLine(`WhatsApp send failed: ${msg}`);
       process.exit(1);
     }
   });
   outreach.command("email <identifier>").description("Send email to a domain owner").requiredOption("--subject <text>", "Email subject").requiredOption("--body <text>", "Email body (plain text)").option("--template <name>", "Use a template by name instead of --body").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const owner = await requireDomainOwner(identifier);
     if (!owner.owner_email) {
-      console.error(`No email for '${identifier}'.`);
+      printErrorLine(`No email for '${identifier}'.`);
       process.exit(1);
     }
     try {
@@ -52881,13 +53004,13 @@ function registerOutreachCommand(program2) {
       ], { encoding: "utf-8" });
       const result = JSON.parse(stdout);
       if (opts.json) {
-        console.log(JSON.stringify({ domain: identifier, to: owner.owner_email, result }, null, 2));
+        printLine(JSON.stringify({ domain: identifier, to: owner.owner_email, result }, null, 2));
       } else {
-        console.log(`Email sent to ${owner.owner_name ?? owner.owner_email} (${owner.owner_email}): "${opts.subject}"`);
+        printLine(`Email sent to ${owner.owner_name ?? owner.owner_email} (${owner.owner_email}): "${opts.subject}"`);
       }
     } catch (error) {
       const msg = error instanceof Error ? error.message : String(error);
-      console.error(`Email send failed: ${msg}`);
+      printErrorLine(`Email send failed: ${msg}`);
       process.exit(1);
     }
   });
@@ -52895,6 +53018,7 @@ function registerOutreachCommand(program2) {
 var execFileAsync2;
 var init_outreach = __esm(() => {
   init_owners();
+  init_stdout();
   execFileAsync2 = promisify3(execFile2);
 });
 
@@ -52934,22 +53058,22 @@ function registerWalletCommand(program2) {
     try {
       const cards = await getAvailableCards();
       if (opts.json) {
-        console.log(JSON.stringify(cards, null, 2));
+        printLine(JSON.stringify(cards, null, 2));
       } else {
         if (cards.length === 0) {
-          console.log("No active wallet cards found.");
+          printLine("No active wallet cards found.");
           return;
         }
         const page = pageItemsOrExit(cards, { limit: opts.limit, all: opts.all });
-        console.log("Available wallet cards:");
+        printLine("Available wallet cards:");
         for (const c4 of page.items) {
-          console.log(`  ${c4.brand} \u2022\u2022\u2022\u2022 ${c4.last_four} \u2014 ${c4.name} (${c4.balance} ${c4.currency})`);
+          printLine(`  ${c4.brand} \u2022\u2022\u2022\u2022 ${c4.last_four} \u2014 ${c4.name} (${c4.balance} ${c4.currency})`);
         }
-        console.log(`
+        printLine(`
 ${compactHint(page, "card(s)", "Use --all for every card or --json for full card fields.", { paging: "limit" })}`);
       }
     } catch (error) {
-      console.error(`Failed to list cards: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Failed to list cards: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
@@ -52961,15 +53085,15 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
       if (!cardId) {
         const cards = await getAvailableCards();
         if (cards.length === 0) {
-          console.error("No active wallet cards found. Add a card first.");
+          printErrorLine("No active wallet cards found. Add a card first.");
           process.exit(1);
         }
         if (cards.length === 1) {
           cardId = cards[0].external_id;
         } else {
-          console.error("Multiple cards available. Specify --card-id:");
+          printErrorLine("Multiple cards available. Specify --card-id:");
           for (const c4 of cards) {
-            console.log(`  ${c4.id}: ${c4.brand} \u2022\u2022\u2022\u2022 ${c4.last_four} (${c4.balance} ${c4.currency})`);
+            printLine(`  ${c4.id}: ${c4.brand} \u2022\u2022\u2022\u2022 ${c4.last_four} (${c4.balance} ${c4.currency})`);
           }
           process.exit(1);
         }
@@ -52977,16 +53101,16 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
       const wallets = getWalletsModule();
       const card = wallets.getCard(cardId);
       if (!card) {
-        console.error(`Card '${cardId}' not found.`);
+        printErrorLine(`Card '${cardId}' not found.`);
         process.exit(1);
       }
       if (card.balance < price) {
-        console.error(`Insufficient funds: need ${price} ${currency}, have ${card.balance} ${card.currency}`);
+        printErrorLine(`Insufficient funds: need ${price} ${currency}, have ${card.balance} ${card.currency}`);
         process.exit(1);
       }
       const existing = await getDomainByName2(name);
       if (existing) {
-        console.error(`Domain '${name}' already exists in portfolio.`);
+        printErrorLine(`Domain '${name}' already exists in portfolio.`);
         process.exit(1);
       }
       const domain = await createDomain2({
@@ -53010,13 +53134,13 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
         notes: `Purchased ${name} for ${price} ${currency} via wallet card ${cardId}`
       });
       if (opts.json) {
-        console.log(JSON.stringify({ domain, card_id: cardId, price, currency }, null, 2));
+        printLine(JSON.stringify({ domain, card_id: cardId, price, currency }, null, 2));
       } else {
-        console.log(`Purchased ${name} for ${price} ${currency} via wallet card`);
-        console.log(`  Added to portfolio as ${domain.id}`);
+        printLine(`Purchased ${name} for ${price} ${currency} via wallet card`);
+        printLine(`  Added to portfolio as ${domain.id}`);
       }
     } catch (error) {
-      console.error(`Wallet purchase failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Wallet purchase failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
@@ -53024,7 +53148,7 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
     const price = parseFloat(opts.price);
     const domain = await getDomainByName2(name);
     if (!domain) {
-      console.error(`Domain '${name}' not found in portfolio.`);
+      printErrorLine(`Domain '${name}' not found in portfolio.`);
       process.exit(1);
     }
     try {
@@ -53032,7 +53156,7 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
       if (!cardId) {
         const cards = await getAvailableCards();
         if (cards.length === 0) {
-          console.error("No active wallet cards found.");
+          printErrorLine("No active wallet cards found.");
           process.exit(1);
         }
         cardId = cards[0].external_id;
@@ -53040,11 +53164,11 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
       const wallets = getWalletsModule();
       const card = wallets.getCard(cardId);
       if (!card) {
-        console.error(`Card '${cardId}' not found.`);
+        printErrorLine(`Card '${cardId}' not found.`);
         process.exit(1);
       }
       if (card.balance < price) {
-        console.error(`Insufficient funds: need ${price} ${opts.currency}, have ${card.balance} ${card.currency}`);
+        printErrorLine(`Insufficient funds: need ${price} ${opts.currency}, have ${card.balance} ${card.currency}`);
         process.exit(1);
       }
       await createHistoryEntry2({
@@ -53060,13 +53184,13 @@ ${compactHint(page, "card(s)", "Use --all for every card or --json for full card
         purchase_price: price
       });
       if (opts.json) {
-        console.log(JSON.stringify({ domain: name, card_id: cardId, price, new_expiry: expiryDate.toISOString() }, null, 2));
+        printLine(JSON.stringify({ domain: name, card_id: cardId, price, new_expiry: expiryDate.toISOString() }, null, 2));
       } else {
-        console.log(`Renewed ${name} for ${price} ${opts.currency} via wallet card`);
-        console.log(`  New expiry: ${expiryDate.toISOString().split("T")[0]}`);
+        printLine(`Renewed ${name} for ${price} ${opts.currency} via wallet card`);
+        printLine(`  New expiry: ${expiryDate.toISOString().split("T")[0]}`);
       }
     } catch (error) {
-      console.error(`Wallet renewal failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Wallet renewal failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
@@ -53075,6 +53199,7 @@ var WALLET_MODULE_ENV = "DOMAINS_WALLET_MODULE";
 var init_wallet = __esm(() => {
   init_domains();
   init_history();
+  init_stdout();
 });
 
 // src/lib/provision-state.ts
@@ -53249,23 +53374,23 @@ function registerProvisionCommand(program2) {
         signals["publicNsAreCloudflare"] = false;
       }
     } catch (e4) {
-      console.error(`Error gathering signals: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error gathering signals: ${e4 instanceof Error ? e4.message : String(e4)}`);
     }
     const state = deriveDomainState(signals);
-    console.log(`
+    printLine(`
 Domain: ${name}`);
-    console.log(`State:  ${state}`);
-    console.log(`Signals: ${JSON.stringify(signals)}`);
+    printLine(`State:  ${state}`);
+    printLine(`Signals: ${JSON.stringify(signals)}`);
     const path = domainHappyPath();
     const idx = path.indexOf(state);
-    console.log(`Progress: ${idx >= 0 ? idx + 1 : "?"}/${path.length}  [${path.join(" \u2192 ")}]`);
+    printLine(`Progress: ${idx >= 0 ? idx + 1 : "?"}/${path.length}  [${path.join(" \u2192 ")}]`);
   });
   provision.command("daemon").description("Reconcile domains toward ready (CF zone + NS delegation + propagation)").option("--domains <list>", "Comma-separated domains (default: all active in the portfolio)").option("--once", "Run a single reconcile tick and exit").option("--interval <sec>", "Seconds between ticks", "30").option("--max-ticks <n>", "Stop after N ticks").action(async (opts) => {
     const { applyPurchaseProfile: applyPurchaseProfile2 } = await Promise.resolve().then(() => (init_config(), exports_config));
     applyPurchaseProfile2();
     const { makeDomainDaemonDeps: makeDomainDaemonDeps2 } = await Promise.resolve().then(() => (init_domain_daemon_deps(), exports_domain_daemon_deps));
     const { reconcileDomainTick: reconcileDomainTick2, runDomainDaemon: runDomainDaemon2 } = await Promise.resolve().then(() => (init_domain_daemon(), exports_domain_daemon));
-    const deps = { ...makeDomainDaemonDeps2(), log: (e4, d4) => console.log(`[${e4}] ${JSON.stringify(d4)}`) };
+    const deps = { ...makeDomainDaemonDeps2(), log: (e4, d4) => printLine(`[${e4}] ${JSON.stringify(d4)}`) };
     const listDomains4 = async () => {
       if (opts.domains)
         return opts.domains.split(",").map((d4) => d4.trim());
@@ -53274,16 +53399,16 @@ Domain: ${name}`);
     };
     if (opts.once) {
       const s2 = await reconcileDomainTick2(await listDomains4(), deps);
-      console.log(`\u2713 tick: ${s2.advanced} advanced, ${s2.ready} ready, ${s2.errors} errors (${s2.processed} processed)`);
+      printLine(`\u2713 tick: ${s2.advanced} advanced, ${s2.ready} ready, ${s2.errors} errors (${s2.processed} processed)`);
       return;
     }
-    console.log(`Domain provisioning daemon started (interval ${opts.interval}s). Ctrl-C to stop.`);
+    printLine(`Domain provisioning daemon started (interval ${opts.interval}s). Ctrl-C to stop.`);
     const total = await runDomainDaemon2(listDomains4, {
       ...deps,
       intervalSec: parseInt(opts.interval, 10),
       maxTicks: opts.maxTicks ? parseInt(opts.maxTicks, 10) : undefined
     });
-    console.log(`daemon stopped: ${total.advanced} advanced, ${total.ready} ready, ${total.errors} errors`);
+    printLine(`daemon stopped: ${total.advanced} advanced, ${total.ready} ready, ${total.errors} errors`);
   });
 }
 var CF_NS_SUFFIX2 = ".ns.cloudflare.com";
@@ -53291,6 +53416,7 @@ var init_provision = __esm(() => {
   init_provision_state();
   init_route53();
   init_cloudflare();
+  init_stdout();
 });
 
 // src/cli/tui/format.ts
@@ -54012,10 +54138,12 @@ __export(exports_interactive, {
 import chalk from "chalk";
 import { render } from "ink";
 import { jsxDEV as jsxDEV6 } from "react/jsx-dev-runtime";
-function assertInteractiveTty() {
+function assertInteractiveTty(emit = (line) => {
+  printErrorLine(line);
+}) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    console.error(chalk.red("Interactive mode requires a TTY terminal."));
-    console.error(chalk.dim("Use `domains domain list` or `domains domain get <name>` for non-interactive use."));
+    emit(chalk.red("Interactive mode requires a TTY terminal."));
+    emit(chalk.dim("Use `domains domain list` or `domains domain get <name>` for non-interactive use."));
     process.exit(1);
   }
 }
@@ -54029,6 +54157,7 @@ function registerInteractiveCommand(program2) {
 }
 var init_interactive = __esm(() => {
   init_App();
+  init_stdout();
 });
 
 // node_modules/@hasna/events/dist/commander.js
@@ -55589,6 +55718,7 @@ function getCapability(name) {
 }
 
 // src/cli/commands/domain.ts
+init_stdout();
 var DOMAIN_STATUS_HELP = DOMAIN_STATUSES.join("/");
 var DOMAIN_OFFER_STATUS_HELP = DOMAIN_OFFER_STATUSES.join("/");
 var DOMAIN_EMAIL_TYPE_HELP = DOMAIN_EMAIL_TYPES.join("/");
@@ -55615,7 +55745,7 @@ async function createDnsZoneForProvider(domain, provider) {
 async function requireDomain(identifier) {
   const details = await getDomainDetails2(identifier);
   if (!details) {
-    console.error(`Domain '${identifier}' not found.`);
+    printErrorLine(`Domain '${identifier}' not found.`);
     process.exit(1);
   }
   return details;
@@ -55631,7 +55761,7 @@ function registerDomainCommand(program2) {
       jsonLimit = opts.limit === undefined ? undefined : parseLimit(opts.limit, undefined, Infinity);
       offset = parseOffset(opts.offset);
     } catch (error) {
-      console.error(error instanceof Error ? error.message : String(error));
+      printErrorLine(error instanceof Error ? error.message : String(error));
       process.exit(1);
     }
     const filters = {
@@ -55648,7 +55778,7 @@ function registerDomainCommand(program2) {
         fallbackLimit: Infinity,
         maxLimit: Infinity
       });
-      console.log(JSON.stringify({
+      printLine(JSON.stringify({
         domains: jsonPage.items,
         count: jsonPage.shown,
         total: jsonPage.total,
@@ -55661,7 +55791,7 @@ function registerDomainCommand(program2) {
     }
     const page = pageItemsOrExit(domains, { limit, offset, all: opts.all });
     if (page.items.length === 0) {
-      console.log("No domains found.");
+      printLine("No domains found.");
       return;
     }
     for (const d4 of page.items) {
@@ -55670,47 +55800,47 @@ function registerDomainCommand(program2) {
       if (opts.verbose) {
         const registrar = d4.registrar ? ` reg:${truncateText(d4.registrar, 24)}` : "";
         const notes = d4.notes ? ` notes:${truncateText(d4.notes, 60)}` : "";
-        console.log(`  ${d4.name} [${d4.status}]${registrar}${exp}${premium}${notes}`);
+        printLine(`  ${d4.name} [${d4.status}]${registrar}${exp}${premium}${notes}`);
       } else {
-        console.log(`  ${d4.name} [${d4.status}]${exp}${premium}`);
+        printLine(`  ${d4.name} [${d4.status}]${exp}${premium}`);
       }
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "domain(s)", "Use --verbose for registrar/notes or domain get <id|name> for details.")}`);
   });
   domain.command("get <identifier>").description("Get a domain by ID or name").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await getDomainDetails2(identifier);
     if (!details) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(details, null, 2));
+      printLine(JSON.stringify(details, null, 2));
       return;
     }
     const d4 = details.domain;
-    console.log(`
+    printLine(`
 ${d4.name} [${d4.status}]`);
     if (d4.registrar)
-      console.log(`  Registrar:      ${d4.registrar}`);
+      printLine(`  Registrar:      ${d4.registrar}`);
     if (d4.expires_at)
-      console.log(`  Expires:        ${formatDate(d4.expires_at)}`);
+      printLine(`  Expires:        ${formatDate(d4.expires_at)}`);
     if (d4.purchase_date)
-      console.log(`  Purchased:      ${formatDate(d4.purchase_date)}`);
+      printLine(`  Purchased:      ${formatDate(d4.purchase_date)}`);
     if (d4.purchase_price !== null)
-      console.log(`  Purchase price: ${d4.purchase_price}`);
-    console.log(`  Auto-renew:     ${d4.auto_renew ? "yes" : "no"}`);
+      printLine(`  Purchase price: ${d4.purchase_price}`);
+    printLine(`  Auto-renew:     ${d4.auto_renew ? "yes" : "no"}`);
     if (d4.is_premium) {
-      console.log(`  Premium:        yes`);
+      printLine(`  Premium:        yes`);
       if (d4.premium_price !== null)
-        console.log(`  Premium ask:    ${d4.premium_price}`);
+        printLine(`  Premium ask:    ${d4.premium_price}`);
     }
     if (d4.standard_price !== null)
-      console.log(`  Standard price: ${d4.standard_price}`);
+      printLine(`  Standard price: ${d4.standard_price}`);
     if (d4.notes)
-      console.log(`  Notes:          ${truncateText(d4.notes, 160)}`);
+      printLine(`  Notes:          ${truncateText(d4.notes, 160)}`);
     if (details.offers.length > 0) {
-      console.log(`
+      printLine(`
 Offers:`);
       const offerPage = pageItemsOrExit(details.offers, { fallbackLimit: 5 });
       for (const offer of offerPage.items) {
@@ -55721,23 +55851,23 @@ Offers:`);
           offer.their_ask !== null ? `their=${offer.their_ask}` : null,
           offer.notes
         ].filter(Boolean);
-        console.log(`  - ${parts.join(" | ")}`);
+        printLine(`  - ${parts.join(" | ")}`);
       }
       if (offerPage.hasMore)
-        console.log(`  ${compactHint(offerPage, "offer(s)", "Use --json for the full offer history.", { paging: "none" })}`);
+        printLine(`  ${compactHint(offerPage, "offer(s)", "Use --json for the full offer history.", { paging: "none" })}`);
     }
     if (details.emails.length > 0) {
-      console.log(`
+      printLine(`
 Emails:`);
       const emailPage = pageItemsOrExit(details.emails, { fallbackLimit: 5 });
       for (const email of emailPage.items) {
         const threadPart = email.thread_id ? ` thread=${email.thread_id}` : "";
-        console.log(`  - ${email.type}: ${email.email_id}${threadPart}`);
+        printLine(`  - ${email.type}: ${email.email_id}${threadPart}`);
       }
       if (emailPage.hasMore)
-        console.log(`  ${compactHint(emailPage, "email link(s)", "Use --json for the full email list.", { paging: "none" })}`);
+        printLine(`  ${compactHint(emailPage, "email link(s)", "Use --json for the full email list.", { paging: "none" })}`);
     }
-    console.log();
+    printLine();
   });
   domain.command("add").description("Add a domain to the portfolio").requiredOption("--name <name>", "Domain name").option("--registrar <name>", "Registrar name").option("--status <s>", `Status (${DOMAIN_STATUS_HELP})`, "active").option("--expires <date>", "Expiry date (YYYY-MM-DD)").option("--premium", "Mark the domain as premium").option("--premium-price <price>", "Premium asking price").option("--standard-price <price>", "Standard registration price").option("--purchase-price <price>", "Acquisition price paid").option("--purchase-date <date>", "Purchase date (ISO or YYYY-MM-DD)").option("--notes <text>", "Notes").option("-j, --json", "Output JSON").action(async (opts) => {
     const premiumPrice = parseOptionalNumber(opts.premiumPrice, "--premium-price");
@@ -55756,10 +55886,10 @@ Emails:`);
       notes: opts.notes
     });
     if (opts.json) {
-      console.log(JSON.stringify(d4, null, 2));
+      printLine(JSON.stringify(d4, null, 2));
       return;
     }
-    console.log(`Created domain: ${d4.name} (${d4.id})`);
+    printLine(`Created domain: ${d4.name} (${d4.id})`);
   });
   domain.command("update <id>").description("Update a domain").option("--registrar <name>", "Registrar").option("--status <s>", `Status (${DOMAIN_STATUS_HELP})`).option("--expires <date>", "Expiry date").option("--premium <bool>", "Premium flag (true/false)").option("--premium-price <price>", "Premium asking price").option("--standard-price <price>", "Standard registration price").option("--purchase-price <price>", "Purchase price paid").option("--purchase-date <date>", "Purchase date").option("--notes <text>", "Notes").option("-j, --json", "Output JSON").action(async (id, opts) => {
     const premiumPrice = parseOptionalNumber(opts.premiumPrice, "--premium-price");
@@ -55777,23 +55907,23 @@ Emails:`);
       notes: opts.notes
     });
     if (!d4) {
-      console.error(`Domain '${id}' not found.`);
+      printErrorLine(`Domain '${id}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(d4, null, 2));
+      printLine(JSON.stringify(d4, null, 2));
       return;
     }
-    console.log(`Updated: ${d4.name}`);
+    printLine(`Updated: ${d4.name}`);
   });
   domain.command("delete <id>").description("Delete a domain from the portfolio").option("-f, --force", "Required confirmation for destructive delete").option("-j, --json", "Output JSON").action(async (id, opts) => {
     if (!opts.force) {
       const message = `Refusing to delete domain '${id}' without --force.`;
       if (opts.json) {
-        console.log(JSON.stringify({ deleted: false, id, error: message }, null, 2));
+        printLine(JSON.stringify({ deleted: false, id, error: message }, null, 2));
       } else {
-        console.error(message);
-        console.error("Re-run with --force to confirm deletion.");
+        printErrorLine(message);
+        printErrorLine("Re-run with --force to confirm deletion.");
       }
       process.exit(1);
     }
@@ -55801,105 +55931,105 @@ Emails:`);
     if (!deleted) {
       const message = `Domain '${id}' not found.`;
       if (opts.json) {
-        console.log(JSON.stringify({ deleted: false, id, error: message }, null, 2));
+        printLine(JSON.stringify({ deleted: false, id, error: message }, null, 2));
       } else {
-        console.error(message);
+        printErrorLine(message);
       }
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify({ deleted: true, id }, null, 2));
+      printLine(JSON.stringify({ deleted: true, id }, null, 2));
       return;
     }
-    console.log(`Deleted domain ${id}`);
+    printLine(`Deleted domain ${id}`);
   });
   domain.command("search <query>").description("Search domains by name, registrar, or notes").option("--limit <n>", "Limit number of displayed domains").option("--offset <n>", "Skip first N domains", "0").option("--all", "Show all matching domains").option("--verbose", "Show registrar and truncated notes").option("-j, --json", "Output JSON").action(async (query, opts) => {
     const results = await searchDomains2(query);
     if (opts.json) {
-      console.log(JSON.stringify({ results, count: results.length }, null, 2));
+      printLine(JSON.stringify({ results, count: results.length }, null, 2));
       return;
     }
     let page;
     try {
       page = pageItemsOrExit(results, { limit: opts.limit, offset: opts.offset, all: opts.all });
     } catch (error) {
-      console.error(error instanceof Error ? error.message : String(error));
+      printErrorLine(error instanceof Error ? error.message : String(error));
       process.exit(1);
     }
     for (const d4 of page.items) {
       const notes = opts.verbose && d4.notes ? ` \u2014 ${truncateText(d4.notes, 80)}` : "";
-      console.log(`  ${d4.name} [${d4.status}]${notes}`);
+      printLine(`  ${d4.name} [${d4.status}]${notes}`);
     }
     if (results.length === 0)
-      console.log("No results.");
+      printLine("No results.");
     else
-      console.log(`
+      printLine(`
 ${compactHint(page, "result(s)", "Use --verbose for notes or domain get <id|name> for details.")}`);
   });
   domain.command("expiring").description("List domains expiring soon").option("--days <n>", "Days threshold", "30").option("--limit <n>", "Limit number of displayed domains").option("--all", "Show all matching domains").option("-j, --json", "Output JSON").action(async (opts) => {
     const domains = await listExpiring2(parseInt(opts.days));
     if (opts.json) {
-      console.log(JSON.stringify(domains, null, 2));
+      printLine(JSON.stringify(domains, null, 2));
       return;
     }
     const page = pageItemsOrExit(domains, { limit: opts.limit, all: opts.all });
     if (page.items.length === 0) {
-      console.log(`No domains expiring within ${opts.days} days.`);
+      printLine(`No domains expiring within ${opts.days} days.`);
       return;
     }
-    console.log(`
+    printLine(`
 Expiring within ${opts.days} days:`);
     for (const d4 of page.items)
-      console.log(`  ${d4.name.padEnd(40)} expires ${formatDate(d4.expires_at)}`);
-    console.log(`
+      printLine(`  ${d4.name.padEnd(40)} expires ${formatDate(d4.expires_at)}`);
+    printLine(`
 ${compactHint(page, "domain(s)", "Use --all to display every expiring domain.", { paging: "limit" })}`);
   });
   domain.command("stats").description("Show portfolio statistics").option("-j, --json", "Output JSON").action(async (opts) => {
     const stats = await getDomainStats2();
     if (opts.json) {
-      console.log(JSON.stringify(stats, null, 2));
+      printLine(JSON.stringify(stats, null, 2));
       return;
     }
-    console.log("Domain Portfolio Stats:");
+    printLine("Domain Portfolio Stats:");
     for (const [k4, v2] of Object.entries(stats)) {
-      console.log(`  ${k4.replace(/_/g, " ")}: ${v2}`);
+      printLine(`  ${k4.replace(/_/g, " ")}: ${v2}`);
     }
   });
   domain.command("whois <name>").description("Run WHOIS lookup and update local DB record").option("-j, --json", "Output JSON").action(async (name, opts) => {
     try {
       const result = await whoisLookup(name);
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        printLine(JSON.stringify(result, null, 2));
         return;
       }
-      console.log(`
+      printLine(`
 WHOIS for ${result.domain} [${result.source}]:`);
-      console.log(`  Registrar: ${result.registrar ?? "unknown"}`);
-      console.log(`  Expires:   ${result.expires_at ?? "unknown"}`);
+      printLine(`  Registrar: ${result.registrar ?? "unknown"}`);
+      printLine(`  Expires:   ${result.expires_at ?? "unknown"}`);
       if (result.nameservers.length) {
-        console.log(`  NS: ${result.nameservers.join(", ")}`);
+        printLine(`  NS: ${result.nameservers.join(", ")}`);
       }
       const r4 = result.registrant;
       if (r4?.name || r4?.email || r4?.organization) {
-        console.log(`  Registrant:`);
+        printLine(`  Registrant:`);
         if (r4.name)
-          console.log(`    Name: ${r4.name}`);
+          printLine(`    Name: ${r4.name}`);
         if (r4.email)
-          console.log(`    Email: ${r4.email}`);
+          printLine(`    Email: ${r4.email}`);
         if (r4.phone)
-          console.log(`    Phone: ${r4.phone}`);
+          printLine(`    Phone: ${r4.phone}`);
         if (r4.organization)
-          console.log(`    Org: ${r4.organization}`);
+          printLine(`    Org: ${r4.organization}`);
       }
-      console.log();
+      printLine();
     } catch (error) {
-      console.error(`WHOIS lookup failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`WHOIS lookup failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
   domain.command("export").description("Export all domains as CSV or JSON").option("--format <fmt>", "Format: csv or json", "json").action(async (opts) => {
     const output = await exportPortfolio(opts.format);
-    console.log(output);
+    printLine(output);
   });
   domain.command("check <domains...>").description("Check domain availability via configured registrar").option("--provider <name>", "Registrar provider to use").option("-j, --json", "Output JSON").action(async (domains, opts) => {
     const cfg = loadConfig3();
@@ -55917,19 +56047,19 @@ WHOIS for ${result.domain} [${result.source}]:`);
         const error = reason instanceof Error ? reason.message : String(reason);
         output.push({ domain: domains[i4], error });
         if (!opts.json) {
-          console.error(`\u2717 ${domains[i4]}: ${error}`);
+          printErrorLine(`\u2717 ${domains[i4]}: ${error}`);
         }
         anyError = true;
       } else {
         const result = r4.value;
         output.push({ domain: result.domain, available: result.available });
         if (!opts.json) {
-          console.log(`${result.available ? "\u2713" : "\u2717"} ${result.domain} is ${result.available ? "available" : "not available"}`);
+          printLine(`${result.available ? "\u2713" : "\u2717"} ${result.domain} is ${result.available ? "available" : "not available"}`);
         }
       }
     }
     if (opts.json) {
-      console.log(JSON.stringify({
+      printLine(JSON.stringify({
         provider: providerName,
         count: output.length,
         ok: !anyError,
@@ -55938,11 +56068,11 @@ WHOIS for ${result.domain} [${result.source}]:`);
     } else {
       for (const result of output) {
         if (result.available !== undefined && "is_premium" in result && result.is_premium) {
-          console.log(`  Premium ask: ${result.premium_price ?? "unknown"}`);
+          printLine(`  Premium ask: ${result.premium_price ?? "unknown"}`);
         }
         if ("standard_price" in result && result.standard_price !== undefined) {
           const currency = "currency" in result && result.currency ? ` ${result.currency}` : "";
-          console.log(`  Standard price: ${result.standard_price}${currency}`);
+          printLine(`  Standard price: ${result.standard_price}${currency}`);
         }
       }
     }
@@ -55968,11 +56098,11 @@ WHOIS for ${result.domain} [${result.source}]:`);
       try {
         const provider = getDomainInventoryProvider(name);
         const result = await provider.syncToLocalDb({ getDomainByName: getDomainByName2, createDomain: createDomain2, updateDomain: updateDomain2 });
-        console.log(`\u2713 [${name}] Synced ${result.synced} (${result.created} new, ${result.updated} updated)`);
+        printLine(`\u2713 [${name}] Synced ${result.synced} (${result.created} new, ${result.updated} updated)`);
         if (result.errors.length > 0)
-          console.log(`  Errors: ${result.errors.join(", ")}`);
+          printLine(`  Errors: ${result.errors.join(", ")}`);
       } catch (e4) {
-        console.error(`\u2717 [${name}] ${e4 instanceof Error ? e4.message : String(e4)}`);
+        printErrorLine(`\u2717 [${name}] ${e4 instanceof Error ? e4.message : String(e4)}`);
       }
     }
   });
@@ -55981,14 +56111,14 @@ WHOIS for ${result.domain} [${result.source}]:`);
     const standardPrice = parseOptionalNumber(opts.standard, "--standard");
     const updated = await markDomainPremium2(identifier, premiumPrice, standardPrice);
     if (!updated) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(updated, null, 2));
+      printLine(JSON.stringify(updated, null, 2));
       return;
     }
-    console.log(`Marked ${updated.name} as premium at ${premiumPrice}`);
+    printLine(`Marked ${updated.name} as premium at ${premiumPrice}`);
   });
   domain.command("offer <identifier>").description("Record a negotiation step for a domain").option("--our <price>", "Our offer").option("--their <price>", "Their asking price").option("--status <status>", `Offer status (${DOMAIN_OFFER_STATUS_HELP})`, "pending").option("--notes <text>", "Negotiation notes").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain(identifier);
@@ -56003,37 +56133,37 @@ WHOIS for ${result.domain} [${result.source}]:`);
       await updateDomainLifecycleStatus2(details.domain.id, opts.their || opts.our ? "negotiating" : "offered");
     }
     if (opts.json) {
-      console.log(JSON.stringify(offer, null, 2));
+      printLine(JSON.stringify(offer, null, 2));
       return;
     }
-    console.log(`Logged offer for ${details.domain.name}: ${offer.status}`);
+    printLine(`Logged offer for ${details.domain.name}: ${offer.status}`);
   });
   domain.command("status <identifier> <status>").description("Update the lifecycle status of a domain").option("--notes <text>", "Optional note to store with the status change").option("-j, --json", "Output JSON").action(async (identifier, status, opts) => {
     const updated = await updateDomainLifecycleStatus2(identifier, status, opts.notes);
     if (!updated) {
-      console.error(`Domain '${identifier}' not found.`);
+      printErrorLine(`Domain '${identifier}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(updated, null, 2));
+      printLine(JSON.stringify(updated, null, 2));
       return;
     }
-    console.log(`Updated ${updated.name} to ${updated.status}`);
+    printLine(`Updated ${updated.name} to ${updated.status}`);
   });
   domain.command("emails <identifier>").description("Show email threads linked to a domain").option("-j, --json", "Output JSON").action(async (identifier, opts) => {
     const details = await requireDomain(identifier);
     const emails = await listDomainEmailLinks2(details.domain.id);
     if (opts.json) {
-      console.log(JSON.stringify({ domain: details.domain.name, emails, count: emails.length }, null, 2));
+      printLine(JSON.stringify({ domain: details.domain.name, emails, count: emails.length }, null, 2));
       return;
     }
     if (emails.length === 0) {
-      console.log(`No linked emails for ${details.domain.name}.`);
+      printLine(`No linked emails for ${details.domain.name}.`);
       return;
     }
     for (const email of emails) {
       const threadPart = email.thread_id ? ` (${email.thread_id})` : "";
-      console.log(`  ${email.type}: ${email.email_id}${threadPart}`);
+      printLine(`  ${email.type}: ${email.email_id}${threadPart}`);
     }
   });
   domain.command("link-email <identifier> <emailId>").description("Link an email or email thread to a domain").requiredOption("--type <type>", `Link type (${DOMAIN_EMAIL_TYPE_HELP})`).option("--thread-id <threadId>", "Email thread ID").option("-j, --json", "Output JSON").action(async (identifier, emailId, opts) => {
@@ -56045,25 +56175,25 @@ WHOIS for ${result.domain} [${result.source}]:`);
       type: opts.type
     });
     if (opts.json) {
-      console.log(JSON.stringify(link, null, 2));
+      printLine(JSON.stringify(link, null, 2));
       return;
     }
-    console.log(`Linked ${emailId} to ${details.domain.name}`);
+    printLine(`Linked ${emailId} to ${details.domain.name}`);
   });
   domain.command("renew <name>").description("Renew a domain via its registrar provider").option("--provider <name>", "Override provider").option("--years <n>", "Number of years to renew", "1").action(async (name, opts) => {
     const providerName = opts.provider ?? await autoDetectRegistrar(name, getDomainByName2) ?? loadConfig3().default_registrar;
     if (!providerName) {
-      console.error("Could not detect provider. Use --provider.");
+      printErrorLine("Could not detect provider. Use --provider.");
       process.exit(1);
     }
     const provider = getRegistrarProvider(providerName);
     const result = await provider.renewDomain(name, parseInt(opts.years, 10));
     if (result.success) {
-      console.log(`\u2713 Renewed: ${name}`);
+      printLine(`\u2713 Renewed: ${name}`);
       if (result.orderId)
-        console.log(`  Order: ${result.orderId}`);
+        printLine(`  Order: ${result.orderId}`);
     } else {
-      console.error(`\u2717 Renewal failed or not supported for ${providerName}`);
+      printErrorLine(`\u2717 Renewal failed or not supported for ${providerName}`);
       process.exit(1);
     }
   });
@@ -56080,13 +56210,13 @@ WHOIS for ${result.domain} [${result.source}]:`);
         auto_renew: opts.autoRenew ? opts.autoRenew === "true" : domainRecord.auto_renew
       });
       if (!purchased) {
-        console.error(`Domain '${name}' not found.`);
+        printErrorLine(`Domain '${name}' not found.`);
         process.exit(1);
       }
       if (opts.wait) {
         await updateDomainLifecycleStatus2(purchased.id, "active");
       }
-      console.log(`Recorded purchase for ${purchased.name} at ${recordedPrice}`);
+      printLine(`Recorded purchase for ${purchased.name} at ${recordedPrice}`);
       return;
     }
     const cfg = loadConfig3();
@@ -56094,44 +56224,44 @@ WHOIS for ${result.domain} [${result.source}]:`);
     const dnsProvider = opts.dns ?? cfg.default_dns ?? "cloudflare";
     const purchaseProfile = providerName === "route53" ? applyPurchaseProfile() : undefined;
     if (purchaseProfile)
-      console.log(`Using purchase AWS profile: ${purchaseProfile}`);
+      printLine(`Using purchase AWS profile: ${purchaseProfile}`);
     if (providerName !== "route53") {
       try {
         const capability = getCapability(providerName);
         if (!capability.canBuy) {
-          console.error(`Direct domain purchase is not supported for ${providerName}. ${capability.notes} Use route53 or record a marketplace/manual purchase with --price.`);
+          printErrorLine(`Direct domain purchase is not supported for ${providerName}. ${capability.notes} Use route53 or record a marketplace/manual purchase with --price.`);
           process.exit(1);
         }
         if (capability.gated && !opts.allowGated) {
-          console.error(`Registrar '${providerName}' is gated/enterprise-only. Pass --allow-gated only when this account is contract-approved. ${capability.notes}`);
+          printErrorLine(`Registrar '${providerName}' is gated/enterprise-only. Pass --allow-gated only when this account is contract-approved. ${capability.notes}`);
           process.exit(1);
         }
         const provider = getRegistrarProvider(providerName);
         if (!provider.registerDomain) {
-          console.error(`Direct domain purchase is not supported for ${providerName}. Use route53 or record a marketplace/manual purchase with --price.`);
+          printErrorLine(`Direct domain purchase is not supported for ${providerName}. Use route53 or record a marketplace/manual purchase with --price.`);
           process.exit(1);
         }
         const avail = await provider.checkAvailability(name);
         if (!avail.available) {
-          console.error(`\u2717 ${name} is not available`);
+          printErrorLine(`\u2717 ${name} is not available`);
           process.exit(1);
         }
-        console.log(`\u2713 Available via ${providerName}`);
+        printLine(`\u2713 Available via ${providerName}`);
         let contact;
         try {
           contact = resolveContact(opts);
         } catch (e4) {
-          console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+          printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
           process.exit(1);
         }
-        console.log(`Registering ${name} via ${providerName}...`);
+        printLine(`Registering ${name} via ${providerName}...`);
         const reg = await provider.registerDomain(name, contact, {
           years: parseInt(opts.years, 10),
           premiumPrice: avail.premium_price,
           autoRenew: opts.autoRenew ? opts.autoRenew === "true" : true
         });
         if (!reg.success) {
-          console.error(`\u2717 Registration failed via ${providerName}`);
+          printErrorLine(`\u2717 Registration failed via ${providerName}`);
           process.exit(1);
         }
         const existing = await getDomainByName2(name);
@@ -56149,45 +56279,45 @@ WHOIS for ${result.domain} [${result.source}]:`);
           await updateDomain2(existing.id, dbInput);
         else
           await createDomain2({ name, ...dbInput });
-        console.log(`\u2713 Registered and added to portfolio`);
+        printLine(`\u2713 Registered and added to portfolio`);
         if (reg.orderId)
-          console.log(`  Order: ${reg.orderId}`);
+          printLine(`  Order: ${reg.orderId}`);
         if (opts.delegate !== false) {
           if (!provider.updateNameservers) {
-            console.log(`  DNS: ${providerName} registration succeeded, but nameserver updates are not implemented for this provider.`);
+            printLine(`  DNS: ${providerName} registration succeeded, but nameserver updates are not implemented for this provider.`);
           } else {
             const zone = await createDnsZoneForProvider(name, dnsProvider);
             const nsUpdate = await provider.updateNameservers(name, zone.nameservers);
             const existing2 = await getDomainByName2(name);
             if (existing2)
               await updateDomain2(existing2.id, { nameservers: zone.nameservers });
-            console.log(`\u2713 ${dnsProvider} zone ${zone.zoneId}; nameservers updated${nsUpdate.operationId ? ` (op ${nsUpdate.operationId})` : ""}`);
+            printLine(`\u2713 ${dnsProvider} zone ${zone.zoneId}; nameservers updated${nsUpdate.operationId ? ` (op ${nsUpdate.operationId})` : ""}`);
           }
         }
         return;
       } catch (e4) {
-        console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+        printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
         process.exit(1);
       }
     }
     try {
       const avail = await checkAvailability3(name);
       if (!avail.available) {
-        console.error(`\u2717 ${name} is not available`);
+        printErrorLine(`\u2717 ${name} is not available`);
         process.exit(1);
       }
       const price = avail.price ? ` (USD ${avail.price}/yr)` : "";
-      console.log(`\u2713 Available${price}`);
+      printLine(`\u2713 Available${price}`);
       let contact;
       try {
         contact = resolveContact(opts);
       } catch (e4) {
-        console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+        printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
         process.exit(1);
       }
-      console.log(`Registering ${name}...`);
+      printLine(`Registering ${name}...`);
       const reg = await registerDomain2(name, contact, parseInt(opts.years));
-      console.log(`\u2713 Submitted (operation: ${reg.operationId})`);
+      printLine(`\u2713 Submitted (operation: ${reg.operationId})`);
       if (opts.wait) {
         let status = "IN_PROGRESS";
         while (status === "IN_PROGRESS" || status === "SUBMITTED") {
@@ -56196,12 +56326,12 @@ WHOIS for ${result.domain} [${result.source}]:`);
           status = s2.status;
           process.stdout.write(`  Status: ${status}\r`);
         }
-        console.log();
+        printLine();
         if (status !== "SUCCESSFUL") {
-          console.error(`\u2717 Registration ${status}`);
+          printErrorLine(`\u2717 Registration ${status}`);
           process.exit(1);
         }
-        console.log(`\u2713 Registration complete`);
+        printLine(`\u2713 Registration complete`);
       }
       const existing = await getDomainByName2(name);
       if (existing) {
@@ -56224,13 +56354,13 @@ WHOIS for ${result.domain} [${result.source}]:`);
           standard_price: avail.price ? Number(avail.price) : undefined
         });
       }
-      console.log(`\u2713 Added to portfolio`);
+      printLine(`\u2713 Added to portfolio`);
       if (opts.delegate !== false) {
         if (!opts.wait) {
-          console.log(`  DNS: run 'domains domain buy ${name} --wait' or delegate later \u2014 registration must finish before NS can change.`);
+          printLine(`  DNS: run 'domains domain buy ${name} --wait' or delegate later \u2014 registration must finish before NS can change.`);
         } else {
           try {
-            console.log(`Delegating DNS to ${dnsProvider}...`);
+            printLine(`Delegating DNS to ${dnsProvider}...`);
             const del = dnsProvider === "cloudflare" ? await delegateDomainToCloudflare(name, {
               createCloudflareZone: async (d4) => {
                 const z = await ensureZone(d4);
@@ -56245,17 +56375,17 @@ WHOIS for ${result.domain} [${result.source}]:`);
             const existing2 = await getDomainByName2(name);
             if (existing2)
               await updateDomain2(existing2.id, { nameservers: del.nameservers });
-            console.log(`\u2713 ${dnsProvider} zone ${del.zoneId}; nameservers \u2192 ${del.nameservers.join(", ")} (op ${del.operationId})`);
+            printLine(`\u2713 ${dnsProvider} zone ${del.zoneId}; nameservers \u2192 ${del.nameservers.join(", ")} (op ${del.operationId})`);
           } catch (e4) {
-            console.error(`\u26A0 DNS delegation failed (domain is registered): ${e4 instanceof Error ? e4.message : String(e4)}`);
-            console.error(`  Retry: create the DNS zone and point Route53 NS at it.`);
+            printErrorLine(`\u26A0 DNS delegation failed (domain is registered): ${e4 instanceof Error ? e4.message : String(e4)}`);
+            printErrorLine(`  Retry: create the DNS zone and point Route53 NS at it.`);
           }
         }
       }
       if (!opts.wait)
-        console.log(`  Check: domains r53 status ${reg.operationId}`);
+        printLine(`  Check: domains r53 status ${reg.operationId}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56263,34 +56393,34 @@ WHOIS for ${result.domain} [${result.source}]:`);
     const cfg = loadConfig3();
     const registrarName = opts.registrar ?? cfg.default_registrar ?? "route53";
     const dnsName = opts.dns ?? cfg.default_dns ?? "cloudflare";
-    console.log(`
+    printLine(`
 Setting up ${name}`);
-    console.log(`  Registrar: ${registrarName}  |  DNS: ${dnsName}
+    printLine(`  Registrar: ${registrarName}  |  DNS: ${dnsName}
 `);
     try {
       process.stdout.write(opts.wait ? "[1/5] Checking availability... " : "[1/4] Checking availability... ");
       const avail = await checkAvailability3(name);
       if (!avail.available) {
-        console.log("not available");
-        console.error(`\u2717 ${name} is not available`);
+        printLine("not available");
+        printErrorLine(`\u2717 ${name} is not available`);
         process.exit(1);
       }
       const price = avail.price ? `(USD ${avail.price}/yr)` : "";
-      console.log(`available ${price}`);
+      printLine(`available ${price}`);
       if (registrarName !== "route53") {
-        console.error("Direct domain purchase currently only supported via route53.");
+        printErrorLine("Direct domain purchase currently only supported via route53.");
         process.exit(1);
       }
       let contact;
       try {
         contact = resolveContact(opts);
       } catch (e4) {
-        console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+        printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
         process.exit(1);
       }
       process.stdout.write(opts.wait ? "[2/5] Registering domain... " : "[2/4] Registering domain... ");
       const reg = await registerDomain2(name, contact, parseInt(opts.years));
-      console.log(`submitted (${reg.operationId})`);
+      printLine(`submitted (${reg.operationId})`);
       if (opts.wait) {
         let status = "IN_PROGRESS";
         while (status === "IN_PROGRESS" || status === "SUBMITTED") {
@@ -56299,36 +56429,36 @@ Setting up ${name}`);
           status = s2.status;
           process.stdout.write(`  Waiting: ${status}...\r`);
         }
-        console.log();
+        printLine();
         if (status !== "SUCCESSFUL") {
-          console.error(`\u2717 Registration ${status}`);
+          printErrorLine(`\u2717 Registration ${status}`);
           process.exit(1);
         }
-        console.log("  Registration confirmed");
+        printLine("  Registration confirmed");
       }
       process.stdout.write(opts.wait ? "[3/5] Creating DNS zone... " : "[3/4] Creating DNS zone... ");
       let nameservers = [];
       if (dnsName === "cloudflare") {
         const zone = await ensureZone(name);
         nameservers = zone.nameservers ?? [];
-        console.log("ready (" + zone.id + ")");
+        printLine("ready (" + zone.id + ")");
       } else {
         const zone = await createHostedZone(name, "Managed by domains CLI");
         nameservers = zone.name_servers ?? [];
-        console.log(`created (${zone.id})`);
+        printLine(`created (${zone.id})`);
       }
       if (nameservers.length > 0) {
         if (opts.wait) {
           process.stdout.write("[4/5] Updating registrar nameservers... ");
           if (registrarName !== "route53") {
-            console.log("skipped");
-            console.error("Only Route53 nameserver delegation is currently implemented for setup.");
+            printLine("skipped");
+            printErrorLine("Only Route53 nameserver delegation is currently implemented for setup.");
             process.exit(1);
           }
           const nsUpdate = await updateNameservers2(name, nameservers);
-          console.log("submitted (" + nsUpdate.operationId + ")");
+          printLine("submitted (" + nsUpdate.operationId + ")");
         } else {
-          console.log("  Nameserver delegation skipped until registration completes; re-run with --wait or use domains r53 domain-info/status first.");
+          printLine("  Nameserver delegation skipped until registration completes; re-run with --wait or use domains r53 domain-info/status first.");
         }
       }
       process.stdout.write(opts.wait ? "[5/5] Adding to portfolio... " : "[4/4] Adding to portfolio... ");
@@ -56338,22 +56468,22 @@ Setting up ${name}`);
         await updateDomain2(existing.id, dbInput);
       else
         await createDomain2({ name, ...dbInput });
-      console.log("done");
-      console.log(`
+      printLine("done");
+      printLine(`
 \u2713 Setup complete for ${name}`);
       if (!opts.wait) {
-        console.log(`  \u26A0 Registration pending \u2014 check: domains r53 status ${reg.operationId}`);
-        console.log(`  \u26A0 If registration fails, clean up: domains zone delete <zoneId> --force`);
+        printLine(`  \u26A0 Registration pending \u2014 check: domains r53 status ${reg.operationId}`);
+        printLine(`  \u26A0 If registration fails, clean up: domains zone delete <zoneId> --force`);
       }
       if (nameservers.length > 0) {
-        console.log(`
+        printLine(`
   Point your registrar to these name servers:`);
         for (const ns of nameservers)
-          console.log(`    ${ns}`);
+          printLine(`    ${ns}`);
       }
-      console.log();
+      printLine();
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56378,13 +56508,16 @@ function normalizeDnsRecord(record, domain) {
   } else if (lowerName.endsWith(`.${normalizedDomain}`)) {
     name = name.replace(/\.$/, "").slice(0, -(normalizedDomain.length + 1));
   }
-  return {
+  const normalized = {
     type,
     name,
     value: String(record.value).trim(),
     ttl: Number.isFinite(record.ttl) && record.ttl > 0 ? Math.trunc(record.ttl) : 300,
     priority: record.priority
   };
+  if (record.proxied !== undefined)
+    normalized.proxied = record.proxied;
+  return normalized;
 }
 function parseDesiredDnsState(input, domainHint) {
   let parsed;
@@ -56415,7 +56548,8 @@ function parseDesiredDnsState(input, domainHint) {
         name: r4["name"],
         value: r4["value"],
         ttl: typeof r4["ttl"] === "number" ? r4["ttl"] : Number(r4["ttl"] ?? 300),
-        priority: r4["priority"] == null ? undefined : Number(r4["priority"])
+        priority: r4["priority"] == null ? undefined : Number(r4["priority"]),
+        proxied: typeof r4["proxied"] === "boolean" ? r4["proxied"] : undefined
       }, domain);
     })
   };
@@ -56424,7 +56558,7 @@ function identity(record) {
   return [record.type, record.name, record.value, record.priority ?? ""].join("\x00");
 }
 function sameMutableFields(a4, b4) {
-  return a4.ttl === b4.ttl;
+  return a4.ttl === b4.ttl && (b4.proxied === undefined || a4.proxied === b4.proxied);
 }
 function createDnsPlan(domain, current, desired) {
   const normalizedCurrent = current.map((record) => normalizeDnsRecord(record, domain));
@@ -56459,6 +56593,13 @@ function createDnsPlan(domain, current, desired) {
 function planHasChanges(plan) {
   return plan.creates + plan.updates + plan.deletes > 0;
 }
+function dnsRecordGroupKey(record) {
+  return `${record.type}\x00${record.name}`;
+}
+function selectChangedDnsRecords(plan, desired) {
+  const changedGroups = new Set(plan.operations.filter((operation) => operation.op !== "unchanged").map((operation) => dnsRecordGroupKey(operation.record)));
+  return desired.filter((record) => changedGroups.has(dnsRecordGroupKey(normalizeDnsRecord(record, plan.domain))));
+}
 function getDnsApplyBlockReason(plan, opts) {
   if (!planHasChanges(plan))
     return;
@@ -56472,6 +56613,7 @@ function getDnsApplyBlockReason(plan, opts) {
 }
 
 // src/cli/commands/dns.ts
+init_stdout();
 var SUPPORTED_DNS_TYPES = new Set(["A", "AAAA", "CNAME", "MX", "TXT", "NS", "SRV"]);
 function partitionPullableRecords(records) {
   const keep = [];
@@ -56486,49 +56628,50 @@ function partitionPullableRecords(records) {
   return { keep, skipped };
 }
 function printDnsPlan(plan) {
-  console.log(`DNS plan for ${plan.domain}: ${plan.creates} create, ${plan.updates} update, ${plan.deletes} delete, ${plan.unchanged} unchanged`);
+  printLine(`DNS plan for ${plan.domain}: ${plan.creates} create, ${plan.updates} update, ${plan.deletes} delete, ${plan.unchanged} unchanged`);
   for (const op of plan.operations) {
     if (op.op === "unchanged")
       continue;
     const priority = op.record.priority == null ? "" : ` priority=${op.record.priority}`;
     const currentTtl = op.current && op.current.ttl !== op.record.ttl ? ` ttl ${op.current.ttl}->${op.record.ttl}` : "";
-    console.log(`  ${op.op.toUpperCase()} ${op.record.type} ${op.record.name} ${op.record.value} ttl=${op.record.ttl}${priority}${currentTtl}`);
+    printLine(`  ${op.op.toUpperCase()} ${op.record.type} ${op.record.name} ${op.record.value} ttl=${op.record.ttl}${priority}${currentTtl}`);
   }
 }
-async function loadDnsPlan(domain, providerName, file) {
+async function loadDnsPlan(domain, providerName, file, resolveDnsProvider = getDnsProvider) {
   const desired = parseDesiredDnsState(readFileSync4(file, "utf-8"), domain);
   const planDomain = desired.domain ?? domain;
-  const provider = getDnsProvider(providerName);
+  const provider = resolveDnsProvider(providerName);
   const current = await provider.getDnsRecords(planDomain);
   return createDnsPlan(planDomain, current, desired.records);
 }
-function registerDnsCommands(program2) {
+function registerDnsCommands(program2, deps = {}) {
+  const resolveDnsProvider = deps.getDnsProvider ?? getDnsProvider;
   const dnsCmd = program2.command("dns").description("DNS record management");
   dnsCmd.command("plan <domain>").description("Preview desired DNS state changes from a JSON file without mutating provider records").requiredOption("--file <path>", "Desired DNS state JSON file").option("--provider <name>", "DNS provider \u2014 defaults to config default-dns").option("--json", "Output as JSON", false).action(async (domain, opts) => {
     const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
     try {
-      const plan = await loadDnsPlan(domain, providerName, opts.file);
+      const plan = await loadDnsPlan(domain, providerName, opts.file, resolveDnsProvider);
       if (opts.json)
-        console.log(JSON.stringify(plan, null, 2));
+        printLine(JSON.stringify(plan, null, 2));
       else
         printDnsPlan(plan);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
   dnsCmd.command("diff <domain>").description("Alias of dns plan: show live provider DNS drift against desired JSON state").requiredOption("--file <path>", "Desired DNS state JSON file").option("--provider <name>", "DNS provider \u2014 defaults to config default-dns").option("--json", "Output as JSON", false).action(async (domain, opts) => {
     const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
     try {
-      const plan = await loadDnsPlan(domain, providerName, opts.file);
+      const plan = await loadDnsPlan(domain, providerName, opts.file, resolveDnsProvider);
       if (opts.json)
-        console.log(JSON.stringify(plan, null, 2));
+        printLine(JSON.stringify(plan, null, 2));
       else
         printDnsPlan(plan);
       if (planHasChanges(plan))
         process.exitCode = 2;
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56537,12 +56680,12 @@ function registerDnsCommands(program2) {
     try {
       const desired = parseDesiredDnsState(readFileSync4(opts.file, "utf-8"), domain);
       const planDomain = desired.domain ?? domain;
-      const provider = getDnsProvider(providerName);
+      const provider = resolveDnsProvider(providerName);
       const current = await provider.getDnsRecords(planDomain);
       const plan = createDnsPlan(planDomain, current, desired.records);
       if (!planHasChanges(plan)) {
         if (opts.json)
-          console.log(JSON.stringify({ applied: false, reason: "no-changes", plan }, null, 2));
+          printLine(JSON.stringify({ applied: false, reason: "no-changes", plan }, null, 2));
         else
           printDnsPlan(plan);
         return;
@@ -56550,55 +56693,56 @@ function registerDnsCommands(program2) {
       const blockReason = getDnsApplyBlockReason(plan, { yes: opts.yes, allowDelete: opts.allowDelete });
       if (blockReason) {
         if (opts.json)
-          console.log(JSON.stringify({ applied: false, reason: blockReason, plan }, null, 2));
+          printLine(JSON.stringify({ applied: false, reason: blockReason, plan }, null, 2));
         else {
           printDnsPlan(plan);
           if (blockReason === "confirmation-required")
-            console.error("Refusing to apply without --yes.");
+            printErrorLine("Refusing to apply without --yes.");
           if (blockReason === "delete-confirmation-required")
-            console.error("Refusing to delete DNS records without --allow-delete.");
+            printErrorLine("Refusing to delete DNS records without --allow-delete.");
           if (blockReason === "delete-apply-unsupported")
-            console.error(`Refusing to apply delete plan on ${providerName}: this provider path cannot guarantee delete convergence without partial mutation yet.`);
+            printErrorLine(`Refusing to apply delete plan on ${providerName}: this provider path cannot guarantee delete convergence without partial mutation yet.`);
         }
         process.exit(1);
       }
-      await provider.setDnsRecords(planDomain, desired.records);
+      const recordsToApply = provider.dnsWriteScope === "changed-groups" ? selectChangedDnsRecords(plan, desired.records) : desired.records;
+      await provider.setDnsRecords(planDomain, recordsToApply);
       const verified = createDnsPlan(planDomain, await provider.getDnsRecords(planDomain), desired.records);
       if (planHasChanges(verified)) {
         if (opts.json)
-          console.log(JSON.stringify({ applied: false, provider: providerName, reason: "verification-failed", plan, verification: verified }, null, 2));
+          printLine(JSON.stringify({ applied: false, provider: providerName, reason: "verification-failed", plan, verification: verified }, null, 2));
         else {
           printDnsPlan(verified);
-          console.error(`Provider ${providerName} did not converge to the desired DNS state for ${planDomain}.`);
+          printErrorLine(`Provider ${providerName} did not converge to the desired DNS state for ${planDomain}.`);
         }
         process.exit(1);
       }
       if (opts.json)
-        console.log(JSON.stringify({ applied: true, provider: providerName, plan, verification: verified }, null, 2));
+        printLine(JSON.stringify({ applied: true, provider: providerName, plan, verification: verified }, null, 2));
       else {
         printDnsPlan(plan);
-        console.log(`\u2713 Applied and verified desired DNS state on ${providerName} for ${planDomain}`);
+        printLine(`\u2713 Applied and verified desired DNS state on ${providerName} for ${planDomain}`);
       }
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
   dnsCmd.command("list").description("List DNS records for a domain").argument("<domain-id>", "Domain ID").option("--type <type>", "Filter by record type (A/AAAA/CNAME/MX/TXT/NS/SRV)").option("--limit <n>", "Limit number of displayed records").option("--all", "Show all matching records").option("--json", "Output as JSON", false).action(async (domainId, opts) => {
     const records = await listDnsRecords2(domainId, opts.type);
     if (opts.json) {
-      console.log(JSON.stringify(records, null, 2));
+      printLine(JSON.stringify(records, null, 2));
     } else {
       const page = pageItemsOrExit(records, { limit: opts.limit, all: opts.all });
       if (page.items.length === 0) {
-        console.log("No DNS records found.");
+        printLine("No DNS records found.");
         return;
       }
       for (const r4 of page.items) {
         const priority = r4.priority !== null ? ` (priority: ${r4.priority})` : "";
-        console.log(`  ${r4.type}	${r4.name}	${truncateText(r4.value, 80)}	TTL:${r4.ttl}${priority}`);
+        printLine(`  ${r4.type}	${r4.name}	${truncateText(r4.value, 80)}	TTL:${r4.ttl}${priority}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "record(s)", "Use --all for every record or --json for full values.", { paging: "limit" })}`);
     }
   });
@@ -56612,9 +56756,9 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
       priority: opts.priority ? parseInt(opts.priority) : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify(record, null, 2));
+      printLine(JSON.stringify(record, null, 2));
     } else {
-      console.log(`Created DNS record: ${record.type} ${record.name} -> ${record.value} (${record.id})`);
+      printLine(`Created DNS record: ${record.type} ${record.name} -> ${record.value} (${record.id})`);
     }
   });
   dnsCmd.command("update").description("Update a DNS record").argument("<id>", "Record ID").option("--type <type>", "Record type").option("--name <name>", "Record name").option("--value <value>", "Record value").option("--ttl <ttl>", "TTL in seconds").option("--priority <n>", "Priority").option("--json", "Output as JSON", false).action(async (id, opts) => {
@@ -56631,21 +56775,21 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
       input.priority = parseInt(opts.priority);
     const record = await updateDnsRecord2(id, input);
     if (!record) {
-      console.error(`DNS record '${id}' not found.`);
+      printErrorLine(`DNS record '${id}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(record, null, 2));
+      printLine(JSON.stringify(record, null, 2));
     } else {
-      console.log(`Updated DNS record: ${record.type} ${record.name} -> ${record.value}`);
+      printLine(`Updated DNS record: ${record.type} ${record.name} -> ${record.value}`);
     }
   });
   dnsCmd.command("remove").description("Remove a DNS record").argument("<id>", "Record ID").action(async (id) => {
     const deleted = await deleteDnsRecord2(id);
     if (deleted) {
-      console.log(`Deleted DNS record ${id}`);
+      printLine(`Deleted DNS record ${id}`);
     } else {
-      console.error(`DNS record '${id}' not found.`);
+      printErrorLine(`DNS record '${id}' not found.`);
       process.exit(1);
     }
   });
@@ -56653,32 +56797,32 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
     try {
       const result = await checkDnsPropagation(domain, opts.record);
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        printLine(JSON.stringify(result, null, 2));
       } else {
-        console.log(`DNS Propagation for ${result.domain} (${result.record_type}):`);
-        console.log(`  Consistent: ${result.consistent ? "yes" : "NO"}`);
+        printLine(`DNS Propagation for ${result.domain} (${result.record_type}):`);
+        printLine(`  Consistent: ${result.consistent ? "yes" : "NO"}`);
         for (const s2 of result.servers) {
           const values = s2.values.length > 0 ? s2.values.join(", ") : "(empty)";
           const status = s2.status === "error" ? ` [ERROR: ${s2.error}]` : "";
-          console.log(`  ${s2.name} (${s2.server}): ${values}${status}`);
+          printLine(`  ${s2.name} (${s2.server}): ${values}${status}`);
         }
       }
     } catch (error) {
-      console.error(`DNS propagation check failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`DNS propagation check failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
   dnsCmd.command("export").description("Export DNS records as BIND zone file").argument("<domain-id>", "Domain ID").option("--output <file>", "Write to file instead of stdout").action(async (domainId, opts) => {
     const zone = await exportZoneFile(domainId);
     if (!zone) {
-      console.error(`Domain '${domainId}' not found.`);
+      printErrorLine(`Domain '${domainId}' not found.`);
       process.exit(1);
     }
     if (opts.output) {
       writeFileSync2(opts.output, zone, "utf-8");
-      console.log(`Exported zone file to ${opts.output}`);
+      printLine(`Exported zone file to ${opts.output}`);
     } else {
-      console.log(zone);
+      printLine(zone);
     }
   });
   dnsCmd.command("import").description("Import DNS records from a BIND zone file").argument("<domain-id>", "Domain ID").requiredOption("--file <path>", "Path to zone file").option("--json", "Output as JSON", false).action(async (domainId, opts) => {
@@ -56686,22 +56830,22 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
     try {
       content = readFileSync4(opts.file, "utf-8");
     } catch {
-      console.error(`Could not read file: ${opts.file}`);
+      printErrorLine(`Could not read file: ${opts.file}`);
       process.exit(1);
     }
     const result = await importZoneFile(domainId, content);
     if (!result) {
-      console.error(`Domain '${domainId}' not found.`);
+      printErrorLine(`Domain '${domainId}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
     } else {
-      console.log(`Imported ${result.imported} record(s), skipped ${result.skipped}`);
+      printLine(`Imported ${result.imported} record(s), skipped ${result.skipped}`);
       if (result.errors.length > 0) {
-        console.log("Errors:");
+        printLine("Errors:");
         for (const e4 of result.errors) {
-          console.log(`  - ${e4}`);
+          printLine(`  - ${e4}`);
         }
       }
     }
@@ -56709,42 +56853,42 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
   dnsCmd.command("discover-subdomains").description("Discover subdomains via certificate transparency logs (crt.sh)").argument("<domain>", "Domain name").option("--limit <n>", "Limit number of displayed subdomains").option("--all", "Show all discovered subdomains").option("--json", "Output as JSON", false).action(async (domain, opts) => {
     const result = await discoverSubdomains(domain);
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
     } else {
       if (result.error) {
-        console.error(`Discovery failed: ${result.error}`);
+        printErrorLine(`Discovery failed: ${result.error}`);
         process.exit(1);
       }
       if (result.subdomains.length === 0) {
-        console.log(`No subdomains found for ${domain}.`);
+        printLine(`No subdomains found for ${domain}.`);
         return;
       }
       const page = pageItemsOrExit(result.subdomains, { limit: opts.limit, all: opts.all });
-      console.log(`Subdomains for ${domain} (source: ${result.source}):`);
+      printLine(`Subdomains for ${domain} (source: ${result.source}):`);
       for (const s2 of page.items) {
-        console.log(`  ${s2}`);
+        printLine(`  ${s2}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --json for the full result.", { paging: "limit" })}`);
     }
   });
   dnsCmd.command("validate").description("Validate DNS records for common issues").argument("<domain-id>", "Domain ID").option("--json", "Output as JSON", false).action(async (domainId, opts) => {
     const result = await validateDns(domainId);
     if (!result) {
-      console.error(`Domain '${domainId}' not found.`);
+      printErrorLine(`Domain '${domainId}' not found.`);
       process.exit(1);
     }
     if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+      printLine(JSON.stringify(result, null, 2));
     } else {
-      console.log(`DNS Validation for ${result.domain_name}:`);
-      console.log(`  Valid: ${result.valid ? "yes" : "NO"}`);
+      printLine(`DNS Validation for ${result.domain_name}:`);
+      printLine(`  Valid: ${result.valid ? "yes" : "NO"}`);
       if (result.issues.length === 0) {
-        console.log("  No issues found.");
+        printLine("  No issues found.");
       } else {
         for (const issue of result.issues) {
           const prefix = issue.type === "error" ? "ERROR" : "WARN";
-          console.log(`  [${prefix}] ${issue.message}`);
+          printLine(`  [${prefix}] ${issue.message}`);
         }
       }
     }
@@ -56752,11 +56896,11 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
   dnsCmd.command("pull <domain>").description("Pull live DNS records from provider into local DB").option("--provider <name>", "DNS provider (route53, cloudflare) \u2014 defaults to config default-dns").action(async (domain, opts) => {
     const providerName = opts.provider ?? loadConfig3().default_dns ?? "route53";
     try {
-      const provider = getDnsProvider(providerName);
+      const provider = resolveDnsProvider(providerName);
       const records = await provider.getDnsRecords(domain);
       const dbDomain = await getDomainByName2(domain);
       if (!dbDomain) {
-        console.error(`Domain '${domain}' not found in local DB. Add it first: domains domain add --name ${domain}`);
+        printErrorLine(`Domain '${domain}' not found in local DB. Add it first: domains domain add --name ${domain}`);
         process.exit(1);
       }
       const { keep, skipped } = partitionPullableRecords(records);
@@ -56765,13 +56909,13 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
         await createDnsRecord2({ domain_id: dbDomain.id, type: r4.type, name: r4.name, value: r4.value, ttl: r4.ttl, priority: r4.priority });
         count++;
       }
-      console.log(`\u2713 Pulled ${count} record(s) from ${providerName} into local DB for ${domain}`);
+      printLine(`\u2713 Pulled ${count} record(s) from ${providerName} into local DB for ${domain}`);
       if (skipped.size > 0) {
         const summary = Array.from(skipped.entries()).map(([t2, n2]) => `${n2} ${t2}`).join(", ");
-        console.log(`  Skipped ${summary} record(s) (unsupported/provider-managed type).`);
+        printLine(`  Skipped ${summary} record(s) (unsupported/provider-managed type).`);
       }
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56780,13 +56924,13 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
     try {
       const records = await listDnsRecords2(domainId);
       if (records.length === 0) {
-        console.log("No local DNS records to push.");
+        printLine("No local DNS records to push.");
         return;
       }
       const dbDomain = await getDomain2(domainId) ?? (() => {
         throw new Error(`Domain '${domainId}' not found`);
       })();
-      const provider = getDnsProvider(providerName);
+      const provider = resolveDnsProvider(providerName);
       await provider.setDnsRecords(dbDomain.name, records.map((r4) => ({
         type: r4.type,
         name: r4.name,
@@ -56794,9 +56938,9 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
         ttl: r4.ttl,
         priority: r4.priority ?? undefined
       })));
-      console.log(`\u2713 Pushed ${records.length} record(s) to ${providerName} for ${dbDomain.name}`);
+      printLine(`\u2713 Pushed ${records.length} record(s) to ${providerName} for ${dbDomain.name}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56806,6 +56950,7 @@ ${compactHint(page, "subdomain(s)", "Use --all for every discovered name or --js
 init_config();
 init_route53();
 init_cloudflare();
+init_stdout();
 function resolveProvider(flag) {
   return flag ?? loadConfig3().default_dns ?? "route53";
 }
@@ -56821,24 +56966,24 @@ function registerZoneCommand(program2) {
         zones = await listHostedZones();
       }
       if (opts.json) {
-        console.log(JSON.stringify(zones, null, 2));
+        printLine(JSON.stringify(zones, null, 2));
         return;
       }
       const page = pageItemsOrExit(zones, { limit: opts.limit, all: opts.all });
       if (page.items.length === 0) {
-        console.log("No hosted zones.");
+        printLine("No hosted zones.");
         return;
       }
-      console.log(`
+      printLine(`
 Hosted Zones (${provider}):`);
       for (const z of page.items) {
         const extra = z.record_count !== undefined ? `  ${z.record_count} records` : "";
-        console.log(`  ${z.id.padEnd(32)} ${z.name}${extra}`);
+        printLine(`  ${z.id.padEnd(32)} ${z.name}${extra}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "zone(s)", "Use --all for every zone or zone info <zoneId> for details.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56847,23 +56992,23 @@ ${compactHint(page, "zone(s)", "Use --all for every zone or zone info <zoneId> f
     try {
       if (provider === "cloudflare") {
         const z = await createZone(domain);
-        console.log(`\u2713 Zone created: ${domain} (${z.id})`);
+        printLine(`\u2713 Zone created: ${domain} (${z.id})`);
         if (z.nameservers?.length) {
-          console.log(`  Name servers:`);
+          printLine(`  Name servers:`);
           for (const ns of z.nameservers)
-            console.log(`    ${ns}`);
+            printLine(`    ${ns}`);
         }
       } else {
         const z = await createHostedZone(domain, opts.comment);
-        console.log(`\u2713 Zone created: ${domain} (${z.id})`);
+        printLine(`\u2713 Zone created: ${domain} (${z.id})`);
         if (z.name_servers?.length) {
-          console.log(`  Name servers:`);
+          printLine(`  Name servers:`);
           for (const ns of z.name_servers)
-            console.log(`    ${ns}`);
+            printLine(`    ${ns}`);
         }
       }
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56874,44 +57019,44 @@ ${compactHint(page, "zone(s)", "Use --all for every zone or zone info <zoneId> f
         const zones = await listZones();
         const z = zones.find((z2) => z2.id === zoneId || z2.name === zoneId);
         if (!z) {
-          console.error(`Zone not found: ${zoneId}`);
+          printErrorLine(`Zone not found: ${zoneId}`);
           process.exit(1);
         }
         if (opts.json) {
-          console.log(JSON.stringify(z, null, 2));
+          printLine(JSON.stringify(z, null, 2));
           return;
         }
-        console.log(`
+        printLine(`
 Zone: ${z.name}`);
-        console.log(`  ID:     ${z.id}`);
-        console.log(`  Status: ${z.status}`);
+        printLine(`  ID:     ${z.id}`);
+        printLine(`  Status: ${z.status}`);
         if (z.nameservers?.length) {
-          console.log(`  Name servers:`);
+          printLine(`  Name servers:`);
           for (const ns of z.nameservers)
-            console.log(`    ${ns}`);
+            printLine(`    ${ns}`);
         }
-        console.log();
+        printLine();
       } else {
         const z = await getHostedZone(zoneId);
         if (opts.json) {
-          console.log(JSON.stringify(z, null, 2));
+          printLine(JSON.stringify(z, null, 2));
           return;
         }
-        console.log(`
+        printLine(`
 Zone: ${z.name}`);
-        console.log(`  ID:      ${z.id}`);
-        console.log(`  Records: ${z.record_count}`);
+        printLine(`  ID:      ${z.id}`);
+        printLine(`  Records: ${z.record_count}`);
         if (z.comment)
-          console.log(`  Comment: ${z.comment}`);
+          printLine(`  Comment: ${z.comment}`);
         if (z.name_servers?.length) {
-          console.log(`  Name servers:`);
+          printLine(`  Name servers:`);
           for (const ns of z.name_servers)
-            console.log(`    ${ns}`);
+            printLine(`    ${ns}`);
         }
-        console.log();
+        printLine();
       }
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56919,8 +57064,8 @@ Zone: ${z.name}`);
     const provider = resolveProvider(opts.provider);
     try {
       if (!opts.force) {
-        console.log(`Would delete zone: ${zoneId} (${provider})`);
-        console.log("Re-run with --force to confirm.");
+        printLine(`Would delete zone: ${zoneId} (${provider})`);
+        printLine("Re-run with --force to confirm.");
         return;
       }
       if (provider === "cloudflare") {
@@ -56928,9 +57073,9 @@ Zone: ${z.name}`);
       } else {
         await deleteHostedZone(zoneId);
       }
-      console.log(`\u2713 Zone deleted: ${zoneId}`);
+      printLine(`\u2713 Zone deleted: ${zoneId}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -56938,52 +57083,54 @@ Zone: ${z.name}`);
 
 // src/cli/commands/ssl.ts
 init_domains();
+init_stdout();
 function registerSslCommand(program2) {
   const ssl = program2.command("ssl").description("SSL certificate management");
   ssl.command("check <domain>").description("Check SSL certificate for a domain and update the local DB record").option("--json", "Output JSON").action(async (domain, opts) => {
     try {
       const result = await checkSsl(domain);
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        printLine(JSON.stringify(result, null, 2));
         return;
       }
-      console.log(`
+      printLine(`
 SSL Certificate for ${result.domain}:`);
       if (result.error) {
-        console.log(`  Error: ${result.error}`);
+        printLine(`  Error: ${result.error}`);
       } else {
-        console.log(`  Issuer:  ${result.issuer ?? "unknown"}`);
-        console.log(`  Expires: ${result.expires_at ? result.expires_at.split("T")[0] : "unknown"}`);
+        printLine(`  Issuer:  ${result.issuer ?? "unknown"}`);
+        printLine(`  Expires: ${result.expires_at ? result.expires_at.split("T")[0] : "unknown"}`);
       }
-      console.log();
+      printLine();
     } catch (error) {
-      console.error(`SSL check failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`SSL check failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
   ssl.command("expiring").description("List domains with SSL certificates expiring soon").option("--days <n>", "Days threshold", "30").option("--limit <n>", "Limit number of displayed domains").option("--all", "Show all matching domains").option("--json", "Output JSON").action(async (opts) => {
     const domains = await listSslExpiring2(parseInt(opts.days));
     if (opts.json) {
-      console.log(JSON.stringify(domains, null, 2));
+      printLine(JSON.stringify(domains, null, 2));
       return;
     }
     const page = pageItemsOrExit(domains, { limit: opts.limit, all: opts.all });
     if (page.items.length === 0) {
-      console.log(`No SSL certificates expiring within ${opts.days} days.`);
+      printLine(`No SSL certificates expiring within ${opts.days} days.`);
       return;
     }
-    console.log(`
+    printLine(`
 SSL expiring within ${opts.days} days:`);
     for (const d4 of page.items) {
       const exp = d4.ssl_expires_at ? formatDate(d4.ssl_expires_at) : "unknown";
-      console.log(`  ${d4.name.padEnd(40)} expires ${exp}`);
+      printLine(`  ${d4.name.padEnd(40)} expires ${exp}`);
     }
-    console.log(`
+    printLine(`
 ${compactHint(page, "domain(s)", "Use --all to display every matching SSL certificate.", { paging: "limit" })}`);
   });
 }
 
 // src/cli/commands/alerts.ts
+init_stdout();
 init_domains();
 function registerAlertCommands(program2) {
   const alertCmd = program2.command("alert").description("Alert management");
@@ -56994,40 +57141,41 @@ function registerAlertCommands(program2) {
       trigger_days_before: opts.daysBefore ? parseInt(opts.daysBefore) : undefined
     });
     if (opts.json) {
-      console.log(JSON.stringify(alert, null, 2));
+      printLine(JSON.stringify(alert, null, 2));
     } else {
       const daysBefore = alert.trigger_days_before ? ` (${alert.trigger_days_before} days before)` : "";
-      console.log(`Created alert: ${alert.type}${daysBefore} for domain ${alert.domain_id} (${alert.id})`);
+      printLine(`Created alert: ${alert.type}${daysBefore} for domain ${alert.domain_id} (${alert.id})`);
     }
   });
   alertCmd.command("list").description("List alerts for a domain").argument("<domain-id>", "Domain ID").option("--json", "Output as JSON", false).action(async (domainId, opts) => {
     const alerts = await listAlerts2(domainId);
     if (opts.json) {
-      console.log(JSON.stringify(alerts, null, 2));
+      printLine(JSON.stringify(alerts, null, 2));
     } else {
       if (alerts.length === 0) {
-        console.log("No alerts set.");
+        printLine("No alerts set.");
         return;
       }
       for (const a4 of alerts) {
         const daysBefore = a4.trigger_days_before ? ` (${a4.trigger_days_before} days before)` : "";
         const sent = a4.sent_at ? ` \u2014 sent ${a4.sent_at}` : "";
-        console.log(`  ${a4.type}${daysBefore}${sent}`);
+        printLine(`  ${a4.type}${daysBefore}${sent}`);
       }
     }
   });
   alertCmd.command("remove").description("Remove an alert").argument("<id>", "Alert ID").action(async (id) => {
     const deleted = await deleteAlert2(id);
     if (deleted) {
-      console.log(`Deleted alert ${id}`);
+      printLine(`Deleted alert ${id}`);
     } else {
-      console.error(`Alert '${id}' not found.`);
+      printErrorLine(`Alert '${id}' not found.`);
       process.exit(1);
     }
   });
 }
 
 // src/cli/commands/provider.ts
+init_stdout();
 function isAwsAccessDenied(error) {
   const msg = error instanceof Error ? error.message : String(error);
   return msg.includes("AccessDenied") || msg.includes("route53domains:ListDomains");
@@ -57037,21 +57185,21 @@ function registerProviderCommand(program2) {
   provider.command("list").description("Show all providers and their configuration status").option("-j, --json", "Output JSON").action((opts) => {
     const providers = getAvailableProviders();
     if (opts.json) {
-      console.log(JSON.stringify(providers, null, 2));
+      printLine(JSON.stringify(providers, null, 2));
       return;
     }
-    console.log(`
+    printLine(`
 Registrar / DNS Providers:`);
     for (const p2 of providers) {
       const status = p2.configured ? "\u2713 configured" : "\u2717 not configured";
       const type = p2.type === "full" ? "registrar + dns" : p2.type;
       const capabilities = [type, p2.inventory ? "inventory" : null].filter(Boolean).join(", ");
-      console.log(`  ${p2.name.padEnd(12)} [${capabilities}]  ${status}`);
+      printLine(`  ${p2.name.padEnd(12)} [${capabilities}]  ${status}`);
       if (!p2.configured) {
-        console.log(`    Missing: ${p2.envVars.join(", ")}`);
+        printLine(`    Missing: ${p2.envVars.join(", ")}`);
       }
     }
-    console.log();
+    printLine();
   });
   provider.command("test <name>").description("Live-test a provider's credentials").option("-j, --json", "Output JSON").action(async (name, opts) => {
     const providerName = name.toLowerCase();
@@ -57060,16 +57208,16 @@ Registrar / DNS Providers:`);
     if (!info) {
       const error = `Unknown provider: ${name}`;
       if (opts.json) {
-        console.log(JSON.stringify({ provider: providerName, ok: false, error }, null, 2));
+        printLine(JSON.stringify({ provider: providerName, ok: false, error }, null, 2));
       } else {
-        console.error(error);
+        printErrorLine(error);
       }
       process.exit(1);
     }
     if (!info.configured) {
       const error = `${providerName} is not configured. Set: ${info.envVars.join(", ")}`;
       if (opts.json) {
-        console.log(JSON.stringify({
+        printLine(JSON.stringify({
           provider: providerName,
           ok: false,
           configured: false,
@@ -57077,12 +57225,12 @@ Registrar / DNS Providers:`);
           error
         }, null, 2));
       } else {
-        console.error(`\u2717 ${error}`);
+        printErrorLine(`\u2717 ${error}`);
       }
       process.exit(1);
     }
     if (!opts.json) {
-      console.log(`Testing ${providerName}...`);
+      printLine(`Testing ${providerName}...`);
     }
     let registrarOk = null;
     let dnsOk = null;
@@ -57096,21 +57244,21 @@ Registrar / DNS Providers:`);
             await listRegisteredDomains2();
             registrarOk = true;
             if (!opts.json)
-              console.log("\u2713 Registrar connection OK");
+              printLine("\u2713 Registrar connection OK");
           } catch (error) {
             if (!isAwsAccessDenied(error))
               throw error;
             registrarOk = false;
             notes.push("route53domains-listdomains-access-denied");
             if (!opts.json)
-              console.log("\u2022 Route53 Domains registrar API is not available for these AWS credentials");
+              printLine("\u2022 Route53 Domains registrar API is not available for these AWS credentials");
           }
         } else {
           const reg = getRegistrarProvider(providerName);
           await reg.listDomains();
           registrarOk = true;
           if (!opts.json)
-            console.log("\u2713 Registrar connection OK");
+            printLine("\u2713 Registrar connection OK");
         }
       }
       if (info.type === "dns" || info.type === "full") {
@@ -57118,13 +57266,13 @@ Registrar / DNS Providers:`);
           dnsOk = null;
           notes.push("dns-not-probed-with-synthetic-invalid-domain");
           if (!opts.json)
-            console.log("\u2022 DNS not probed with synthetic invalid domain");
+            printLine("\u2022 DNS not probed with synthetic invalid domain");
         } else {
           const dns = getDnsProvider(providerName);
           await dns.getDnsRecords("__test_nonexistent_domain__.invalid");
           dnsOk = true;
           if (!opts.json)
-            console.log("\u2713 DNS connection OK");
+            printLine("\u2713 DNS connection OK");
         }
       }
       if (info.type === "marketplace") {
@@ -57134,10 +57282,10 @@ Registrar / DNS Providers:`);
         await listSedoPortfolio2({ limit: 1 });
         marketplaceOk = true;
         if (!opts.json)
-          console.log("\u2713 Marketplace connection OK");
+          printLine("\u2713 Marketplace connection OK");
       }
       if (opts.json) {
-        console.log(JSON.stringify({
+        printLine(JSON.stringify({
           provider: providerName,
           ok: true,
           configured: true,
@@ -57152,7 +57300,7 @@ Registrar / DNS Providers:`);
       const msg = e4 instanceof Error ? e4.message : String(e4);
       if (msg.includes("not found") || msg.includes("No hosted zone") || msg.includes("NXDOMAIN")) {
         if (opts.json) {
-          console.log(JSON.stringify({
+          printLine(JSON.stringify({
             provider: providerName,
             ok: true,
             configured: true,
@@ -57164,12 +57312,12 @@ Registrar / DNS Providers:`);
             ...notes.length > 0 ? { notes } : {}
           }, null, 2));
         } else {
-          console.log("\u2713 Connection OK (no domains yet)");
+          printLine("\u2713 Connection OK (no domains yet)");
         }
         return;
       }
       if (opts.json) {
-        console.log(JSON.stringify({
+        printLine(JSON.stringify({
           provider: providerName,
           ok: false,
           configured: true,
@@ -57180,7 +57328,7 @@ Registrar / DNS Providers:`);
           error: msg
         }, null, 2));
       } else {
-        console.error(`\u2717 ${providerName} test failed: ${msg}`);
+        printErrorLine(`\u2717 ${providerName} test failed: ${msg}`);
       }
       process.exit(1);
     }
@@ -57189,6 +57337,7 @@ Registrar / DNS Providers:`);
 
 // src/cli/commands/providers.ts
 init_config();
+init_stdout();
 init_domains();
 function registrarProviderNames() {
   return getAvailableProviders().filter((p2) => providerHasRegistrar(p2.name)).map((p2) => p2.name).join(", ");
@@ -57218,15 +57367,15 @@ function registerProviderCommands(program2) {
   program2.command("providers").description("Show which providers are configured").option("--json", "Output as JSON", false).action((opts) => {
     const providers = getAvailableProviders();
     if (opts.json) {
-      console.log(JSON.stringify(providers, null, 2));
+      printLine(JSON.stringify(providers, null, 2));
     } else {
-      console.log("Providers:");
+      printLine("Providers:");
       for (const p2 of providers) {
         const status = p2.configured ? "CONFIGURED" : "not configured";
         const capabilities = [p2.type, p2.inventory ? "inventory" : null].filter(Boolean).join(", ");
-        console.log(`  ${p2.name} [${capabilities}]: ${status}`);
+        printLine(`  ${p2.name} [${capabilities}]: ${status}`);
         if (!p2.configured) {
-          console.log(`    Accepted env: ${p2.envVars.join(", ")}`);
+          printLine(`    Accepted env: ${p2.envVars.join(", ")}`);
         }
       }
     }
@@ -57240,28 +57389,28 @@ function registerProviderCommands(program2) {
           updateDomain: updateDomain2
         });
         if (opts.json) {
-          console.log(JSON.stringify(result, null, 2));
+          printLine(JSON.stringify(result, null, 2));
         } else {
-          console.log(`Synced ${result.totalSynced} domain(s) from ${result.providers.length} provider(s)`);
+          printLine(`Synced ${result.totalSynced} domain(s) from ${result.providers.length} provider(s)`);
           for (const p2 of result.providers) {
-            console.log(`  ${p2.name}: ${p2.result.synced} synced (${p2.result.created} new, ${p2.result.updated} updated)`);
+            printLine(`  ${p2.name}: ${p2.result.synced} synced (${p2.result.created} new, ${p2.result.updated} updated)`);
           }
           if (result.totalErrors.length > 0) {
-            console.log("Errors:");
+            printLine("Errors:");
             for (const e4 of result.totalErrors) {
-              console.log(`  - ${e4}`);
+              printLine(`  - ${e4}`);
             }
           }
         }
       } catch (error) {
-        console.error(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
+        printErrorLine(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
         process.exit(1);
       }
       return;
     }
     const provider = (opts.provider || "").toLowerCase();
     if (!provider) {
-      console.error("Specify --provider <name> or --all");
+      printErrorLine("Specify --provider <name> or --all");
       process.exit(1);
     }
     try {
@@ -57272,17 +57421,17 @@ function registerProviderCommands(program2) {
         updateDomain: updateDomain2
       });
       if (opts.json) {
-        console.log(JSON.stringify({ provider, ...result }, null, 2));
+        printLine(JSON.stringify({ provider, ...result }, null, 2));
       } else {
-        console.log(`Synced ${result.synced} domain(s) from ${provider} (${result.created} new, ${result.updated} updated)`);
+        printLine(`Synced ${result.synced} domain(s) from ${provider} (${result.created} new, ${result.updated} updated)`);
         if (result.errors.length > 0) {
-          console.log("Errors:");
+          printLine("Errors:");
           for (const e4 of result.errors)
-            console.log(`  - ${e4}`);
+            printLine(`  - ${e4}`);
         }
       }
     } catch (error) {
-      console.error(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
@@ -57291,12 +57440,12 @@ function registerProviderCommands(program2) {
     if (!provider) {
       const detected = autoDetectRegistrar(name, getDomainByName2);
       if (!detected) {
-        console.error(`Could not auto-detect registrar for '${name}'. Use --provider.`);
+        printErrorLine(`Could not auto-detect registrar for '${name}'. Use --provider.`);
         process.exit(1);
       }
       provider = detected;
       if (!opts.json)
-        console.log(`Auto-detected registrar: ${provider}`);
+        printLine(`Auto-detected registrar: ${provider}`);
     }
     try {
       requireRegistrarProvider(provider);
@@ -57305,16 +57454,16 @@ function registerProviderCommands(program2) {
         throw new Error(`Renewal failed or is not supported for ${provider}`);
       }
       if (opts.json) {
-        console.log(JSON.stringify({ provider, ...result }, null, 2));
+        printLine(JSON.stringify({ provider, ...result }, null, 2));
       } else {
-        console.log(`Renewed ${result.domain} successfully via ${provider}`);
+        printLine(`Renewed ${result.domain} successfully via ${provider}`);
         if (result.chargedAmount)
-          console.log(`  Charged: $${result.chargedAmount}`);
+          printLine(`  Charged: $${result.chargedAmount}`);
         if (result.orderId)
-          console.log(`  Order ID: ${result.orderId}`);
+          printLine(`  Order ID: ${result.orderId}`);
       }
     } catch (error) {
-      console.error(`Renewal failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Renewal failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
@@ -57324,18 +57473,18 @@ function registerProviderCommands(program2) {
       requireRegistrarProvider(providerName);
       const result = await getRegistrarProvider(providerName).checkAvailability(name);
       if (opts.json) {
-        console.log(JSON.stringify({ provider: providerName, ...result }, null, 2));
+        printLine(JSON.stringify({ provider: providerName, ...result }, null, 2));
       } else {
-        console.log(`${result.domain} is ${result.available ? "AVAILABLE" : "NOT available"} (via ${providerName})`);
+        printLine(`${result.domain} is ${result.available ? "AVAILABLE" : "NOT available"} (via ${providerName})`);
         if (result.is_premium)
-          console.log(`  Premium ask: ${result.premium_price ?? "unknown"}`);
+          printLine(`  Premium ask: ${result.premium_price ?? "unknown"}`);
         if (result.standard_price !== undefined) {
           const currency = result.currency ? ` ${result.currency}` : "";
-          console.log(`  Standard price: ${result.standard_price}${currency}`);
+          printLine(`  Standard price: ${result.standard_price}${currency}`);
         }
       }
     } catch (error) {
-      console.error(`Availability check failed: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Availability check failed: ${error instanceof Error ? error.message : String(error)}`);
       process.exit(1);
     }
   });
@@ -57343,6 +57492,7 @@ function registerProviderCommands(program2) {
 
 // src/cli/commands/config.ts
 init_config();
+init_stdout();
 var VALID_KEYS = [
   "default-registrar",
   "default-dns",
@@ -57363,33 +57513,33 @@ function registerConfigCommands(program2) {
   config2.command("show").description("Show current configuration").option("--json", "Output JSON").action((opts) => {
     const cfg = loadConfig3();
     if (opts.json) {
-      console.log(JSON.stringify(cfg, null, 2));
+      printLine(JSON.stringify(cfg, null, 2));
       return;
     }
-    console.log(`
+    printLine(`
 Configuration:`);
-    console.log(`  default-registrar:    ${cfg.default_registrar ?? "(not set)"}`);
-    console.log(`  default-dns:          ${cfg.default_dns ?? "(not set)"}`);
-    console.log(`  purchase-aws-profile: ${cfg.purchase_aws_profile ?? "(not set)"}`);
+    printLine(`  default-registrar:    ${cfg.default_registrar ?? "(not set)"}`);
+    printLine(`  default-dns:          ${cfg.default_dns ?? "(not set)"}`);
+    printLine(`  purchase-aws-profile: ${cfg.purchase_aws_profile ?? "(not set)"}`);
     if (cfg.contact && Object.keys(cfg.contact).length > 0) {
-      console.log(`
+      printLine(`
   contact:`);
       for (const [k4, v2] of Object.entries(cfg.contact)) {
         if (v2)
-          console.log(`    ${k4}: ${v2}`);
+          printLine(`    ${k4}: ${v2}`);
       }
     } else {
-      console.log("  contact:           (not set)");
+      printLine("  contact:           (not set)");
     }
-    console.log();
+    printLine();
   });
   config2.command("set <key> <value>").description(`Set a config value. Keys: ${VALID_KEYS.join(", ")}`).action((key, value) => {
     const normalized = key.replace(/-/g, "_");
     try {
       setConfigKey(normalized, value);
-      console.log(`\u2713 Set ${key} = ${value}`);
+      printLine(`\u2713 Set ${key} = ${value}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -57403,13 +57553,14 @@ Configuration:`);
       delete cfg.contact[parts[1]];
     }
     saveConfig(cfg);
-    console.log(`\u2713 Unset ${key}`);
+    printLine(`\u2713 Unset ${key}`);
   });
 }
 
 // src/cli/commands/doctor.ts
 init_config();
 init_domains();
+init_stdout();
 import { execSync } from "child_process";
 function registerDoctorCommand(program2) {
   program2.command("doctor").description("Run diagnostics \u2014 check credentials, DB, and provider connectivity").option("--json", "Output structured JSON").action(async (opts) => {
@@ -57420,22 +57571,22 @@ function registerDoctorCommand(program2) {
     function section(name) {
       currentSection = name;
       if (!opts.json) {
-        console.log(`
+        printLine(`
 \u2500\u2500 ${name} \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
       }
     }
     function ok(msg) {
       checks.push({ section: currentSection, status: "pass", message: msg });
       if (!opts.json)
-        console.log(`  \u2713 ${msg}`);
+        printLine(`  \u2713 ${msg}`);
       passed++;
     }
     function fail(msg, fix) {
       checks.push({ section: currentSection, status: "fail", message: msg, fix });
       if (!opts.json) {
-        console.log(`  \u2717 ${msg}`);
+        printLine(`  \u2717 ${msg}`);
         if (fix)
-          console.log(`    \u2192 ${fix}`);
+          printLine(`    \u2192 ${fix}`);
       }
       failed++;
     }
@@ -57514,16 +57665,16 @@ function registerDoctorCommand(program2) {
       fail("whois not installed", "apt install whois  /  brew install whois");
     }
     if (opts.json) {
-      console.log(JSON.stringify({
+      printLine(JSON.stringify({
         passed,
         failed,
         healthy: failed === 0,
         checks
       }, null, 2));
     } else {
-      console.log(`
+      printLine(`
 ${"\u2500".repeat(45)}`);
-      console.log(`  ${passed} passed  /  ${failed} failed
+      printLine(`  ${passed} passed  /  ${failed} failed
 `);
     }
     if (failed > 0)
@@ -57532,6 +57683,7 @@ ${"\u2500".repeat(45)}`);
 }
 
 // src/cli/commands/mcp-install.ts
+init_stdout();
 import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
 import { dirname as dirname5, join as join4 } from "path";
@@ -57577,28 +57729,28 @@ function registerMcpCommand(program2) {
     mcpServers[MCP_SERVER_NAME] = { command: binary, args: [] };
     config2.mcpServers = mcpServers;
     writeFileSync3(configPath2, JSON.stringify(config2, null, 2), "utf-8");
-    console.log(`\u2713 MCP server registered: ${MCP_SERVER_NAME}`);
-    console.log(`  Config: ${configPath2}`);
-    console.log(`  Binary: ${binary}`);
-    console.log(`
+    printLine(`\u2713 MCP server registered: ${MCP_SERVER_NAME}`);
+    printLine(`  Config: ${configPath2}`);
+    printLine(`  Binary: ${binary}`);
+    printLine(`
   Restart Claude Code to activate.`);
   });
   mcp.command("uninstall").description("Remove domains MCP server from Claude Code config").option("--project", "Remove from project config instead of global").action((opts) => {
     const paths = getClaudeConfigPaths();
     const configPath2 = opts.project ? paths.project : paths.global;
     if (!existsSync3(configPath2)) {
-      console.log("Config file not found \u2014 nothing to remove.");
+      printLine("Config file not found \u2014 nothing to remove.");
       return;
     }
     const config2 = readConfig(configPath2);
     const mcpServers = config2.mcpServers;
     if (!mcpServers?.[MCP_SERVER_NAME]) {
-      console.log(`MCP server '${MCP_SERVER_NAME}' is not registered.`);
+      printLine(`MCP server '${MCP_SERVER_NAME}' is not registered.`);
       return;
     }
     delete mcpServers[MCP_SERVER_NAME];
     writeFileSync3(configPath2, JSON.stringify(config2, null, 2), "utf-8");
-    console.log(`\u2713 MCP server removed: ${MCP_SERVER_NAME}`);
+    printLine(`\u2713 MCP server removed: ${MCP_SERVER_NAME}`);
   });
   mcp.command("status").description("Check if domains MCP server is registered").option("-j, --json", "Output JSON").action((opts) => {
     const paths = getClaudeConfigPaths();
@@ -57628,22 +57780,22 @@ function registerMcpCommand(program2) {
       }
     }
     if (opts.json) {
-      console.log(JSON.stringify({ server: MCP_SERVER_NAME, checks: status }, null, 2));
+      printLine(JSON.stringify({ server: MCP_SERVER_NAME, checks: status }, null, 2));
       return;
     }
     for (const item of status) {
       if (!item.exists) {
-        console.log(`  ${item.scope}: not found`);
+        printLine(`  ${item.scope}: not found`);
         continue;
       }
       if (item.error) {
-        console.log(`  ${item.scope}: error reading config`);
+        printLine(`  ${item.scope}: error reading config`);
         continue;
       }
       if (item.registered) {
-        console.log(`  ${item.scope}: \u2713 registered`);
+        printLine(`  ${item.scope}: \u2713 registered`);
       } else {
-        console.log(`  ${item.scope}: \u2717 not registered`);
+        printLine(`  ${item.scope}: \u2717 not registered`);
       }
     }
   });
@@ -57652,6 +57804,7 @@ function registerMcpCommand(program2) {
 // src/cli/commands/serve.ts
 init_domains();
 init_version();
+init_stdout();
 function registerServeCommand(program2) {
   const packageVersion = getPackageVersion();
   program2.command("serve").description("Start HTTP API server").option("--port <n>", "Port to listen on", "3000").option("--host <h>", "Host to bind to", "127.0.0.1").action(async (opts) => {
@@ -57719,16 +57872,16 @@ function registerServeCommand(program2) {
         }
       }
     });
-    console.log(`\u2713 domains API server running at http://${opts.host}:${port}`);
-    console.log(`  GET  /health`);
-    console.log(`  GET  /domains`);
-    console.log(`  POST /domains`);
-    console.log(`  GET  /domains/:id`);
-    console.log(`  PUT  /domains/:id`);
-    console.log(`  DELETE /domains/:id`);
-    console.log(`  GET  /domains/:id/dns`);
-    console.log(`  POST /domains/:id/dns`);
-    console.log(`
+    printLine(`\u2713 domains API server running at http://${opts.host}:${port}`);
+    printLine(`  GET  /health`);
+    printLine(`  GET  /domains`);
+    printLine(`  POST /domains`);
+    printLine(`  GET  /domains/:id`);
+    printLine(`  PUT  /domains/:id`);
+    printLine(`  DELETE /domains/:id`);
+    printLine(`  GET  /domains/:id/dns`);
+    printLine(`  POST /domains/:id/dns`);
+    printLine(`
   Press Ctrl+C to stop.`);
     await new Promise(() => {});
   });
@@ -58104,6 +58257,7 @@ async function runMigrations(opts = {}) {
 }
 
 // src/cli/commands/db.ts
+init_stdout();
 function registerDbCommands(program2) {
   const db = program2.command("db").description("Cloud database migrations (Postgres / RDS)");
   db.command("migrate").description("Apply all pending migrations to the cloud Postgres (owner DSN)").option("--dry-run", "Report the plan without applying", false).option("--json", "Output JSON", false).action(async (opts) => {
@@ -58112,22 +58266,22 @@ function registerDbCommands(program2) {
       const pending = result.plan.filter((p2) => p2.state === "pending").map((p2) => p2.migration.id);
       const applied = result.applied.map((a4) => a4.id);
       if (opts.json) {
-        console.log(JSON.stringify({ ok: true, dryRun: result.dryRun, pending, applied }, null, 2));
+        printLine(JSON.stringify({ ok: true, dryRun: result.dryRun, pending, applied }, null, 2));
       } else if (result.dryRun) {
-        console.log(`Dry run \u2014 ${pending.length} pending migration(s):`);
+        printLine(`Dry run \u2014 ${pending.length} pending migration(s):`);
         for (const id of pending)
-          console.log(`  \u2022 ${id}`);
+          printLine(`  \u2022 ${id}`);
         if (pending.length === 0)
-          console.log("  (schema up to date)");
+          printLine("  (schema up to date)");
       } else {
-        console.log(`\u2713 migrations applied \u2014 ${applied.length} total, ${pending.length} were pending`);
+        printLine(`\u2713 migrations applied \u2014 ${applied.length} total, ${pending.length} were pending`);
       }
     } catch (e4) {
       const msg = e4 instanceof Error ? e4.message : String(e4);
       if (opts.json)
-        console.log(JSON.stringify({ ok: false, error: msg }, null, 2));
+        printLine(JSON.stringify({ ok: false, error: msg }, null, 2));
       else
-        console.error(`\u2717 migration failed: ${msg}`);
+        printErrorLine(`\u2717 migration failed: ${msg}`);
       process.exitCode = 1;
     }
   });
@@ -58137,18 +58291,18 @@ function registerDbCommands(program2) {
       const pending = result.plan.filter((p2) => p2.state === "pending").map((p2) => p2.migration.id);
       const applied = result.applied.map((a4) => a4.id);
       if (opts.json) {
-        console.log(JSON.stringify({ ok: true, pending, applied }, null, 2));
+        printLine(JSON.stringify({ ok: true, pending, applied }, null, 2));
       } else {
-        console.log(`Applied: ${applied.length}   Pending: ${pending.length}`);
+        printLine(`Applied: ${applied.length}   Pending: ${pending.length}`);
         for (const id of pending)
-          console.log(`  pending: ${id}`);
+          printLine(`  pending: ${id}`);
       }
     } catch (e4) {
       const msg = e4 instanceof Error ? e4.message : String(e4);
       if (opts.json)
-        console.log(JSON.stringify({ ok: false, error: msg }, null, 2));
+        printLine(JSON.stringify({ ok: false, error: msg }, null, 2));
       else
-        console.error(`\u2717 ${msg}`);
+        printErrorLine(`\u2717 ${msg}`);
       process.exitCode = 1;
     }
   });
@@ -58197,6 +58351,7 @@ async function setupDomainZone(domain, deps) {
 // src/cli/commands/route53.ts
 init_domains();
 init_config();
+init_stdout();
 function registerRoute53Commands(program2) {
   const r53 = program2.command("r53").description("AWS Route 53 \u2014 domain purchase, hosted zones & DNS");
   r53.command("check <domains...>").description("Check if one or more domains are available for purchase").action(async (domains) => {
@@ -58207,7 +58362,7 @@ function registerRoute53Commands(program2) {
         const r4 = results[i4];
         if (r4.status === "rejected") {
           const reason = r4.reason;
-          console.error(`\u2717 ${domains[i4]}: ${reason instanceof Error ? reason.message : String(reason)}`);
+          printErrorLine(`\u2717 ${domains[i4]}: ${reason instanceof Error ? reason.message : String(reason)}`);
           anyError = true;
           continue;
         }
@@ -58218,15 +58373,15 @@ function registerRoute53Commands(program2) {
           const ren = result.renewal_price ? `renew ${cur} ${result.renewal_price}` : "";
           const xfr = result.transfer_price ? `transfer ${cur} ${result.transfer_price}` : "";
           const pricing = [reg, ren, xfr].filter(Boolean).join("  /  ");
-          console.log(`\u2713 ${result.domain} is available${pricing ? `  (${pricing})` : ""}`);
+          printLine(`\u2713 ${result.domain} is available${pricing ? `  (${pricing})` : ""}`);
         } else {
-          console.log(`\u2717 ${result.domain} is not available`);
+          printLine(`\u2717 ${result.domain} is not available`);
         }
       }
       if (anyError)
         process.exit(1);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58234,36 +58389,36 @@ function registerRoute53Commands(program2) {
     try {
       const avail = await checkAvailability3(domain);
       if (!avail.available) {
-        console.error(`\u2717 ${domain} is not available for registration`);
+        printErrorLine(`\u2717 ${domain} is not available for registration`);
         process.exit(1);
       }
       let contact;
       try {
         contact = resolveContact(opts);
       } catch (e4) {
-        console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+        printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
         process.exit(1);
       }
-      console.log(`Registering ${domain}...`);
+      printLine(`Registering ${domain}...`);
       const result = await registerDomain2(domain, contact, parseInt(opts.years), opts.autoRenew);
-      console.log(`\u2713 Registration submitted: ${domain}`);
-      console.log(`  Operation ID: ${result.operationId}`);
-      console.log(`  Check status: domains r53 status ${result.operationId}`);
+      printLine(`\u2713 Registration submitted: ${domain}`);
+      printLine(`  Operation ID: ${result.operationId}`);
+      printLine(`  Check status: domains r53 status ${result.operationId}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
   r53.command("status <operationId>").description("Check domain registration status").action(async (operationId) => {
     try {
       const result = await getRegistrationStatus(operationId);
-      console.log(`Status: ${result.status}`);
+      printLine(`Status: ${result.status}`);
       if (result.domain)
-        console.log(`Domain: ${result.domain}`);
+        printLine(`Domain: ${result.domain}`);
       if (result.message)
-        console.log(`Message: ${result.message}`);
+        printLine(`Message: ${result.message}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58271,26 +58426,26 @@ function registerRoute53Commands(program2) {
     try {
       const domains = await listRegisteredDomains();
       if (opts.json) {
-        console.log(JSON.stringify(domains, null, 2));
+        printLine(JSON.stringify(domains, null, 2));
         return;
       }
       const page = pageItemsOrExit(domains, { limit: opts.limit, all: opts.all });
       if (page.items.length === 0) {
-        console.log("No registered domains.");
+        printLine("No registered domains.");
         return;
       }
-      console.log(`
+      printLine(`
 Registered Domains:`);
       for (const d4 of page.items) {
         const expiry = d4.expiry ? ` (expires ${d4.expiry.split("T")[0]})` : "";
         const renew = d4.auto_renew ? " [auto-renew]" : "";
         const lock = d4.transfer_lock ? " [locked]" : "";
-        console.log(`  ${d4.domain}${expiry}${renew}${lock}`);
+        printLine(`  ${d4.domain}${expiry}${renew}${lock}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "domain(s)", "Use --all for every Route53 domain or r53 domain-info <domain> for details.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58298,41 +58453,41 @@ ${compactHint(page, "domain(s)", "Use --all for every Route53 domain or r53 doma
     try {
       const detail = await getDomainDetail(domain);
       if (opts.json) {
-        console.log(JSON.stringify(detail, null, 2));
+        printLine(JSON.stringify(detail, null, 2));
         return;
       }
-      console.log(`
+      printLine(`
 Domain: ${detail.domain}`);
-      console.log(`  Created:       ${detail.created ? detail.created.split("T")[0] : "\u2014"}`);
-      console.log(`  Expires:       ${detail.expiry ? detail.expiry.split("T")[0] : "\u2014"}`);
-      console.log(`  Auto-renew:    ${detail.auto_renew ? "yes" : "no"}`);
-      console.log(`  Transfer lock: ${detail.transfer_lock ? "yes" : "no"}`);
+      printLine(`  Created:       ${detail.created ? detail.created.split("T")[0] : "\u2014"}`);
+      printLine(`  Expires:       ${detail.expiry ? detail.expiry.split("T")[0] : "\u2014"}`);
+      printLine(`  Auto-renew:    ${detail.auto_renew ? "yes" : "no"}`);
+      printLine(`  Transfer lock: ${detail.transfer_lock ? "yes" : "no"}`);
       if (detail.nameservers.length > 0) {
-        console.log(`  Name servers:`);
+        printLine(`  Name servers:`);
         for (const ns of detail.nameservers)
-          console.log(`    ${ns}`);
+          printLine(`    ${ns}`);
       }
-      console.log();
+      printLine();
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
   r53.command("zone-create <domain>").description("Create a hosted zone").option("--comment <text>", "Zone comment").action(async (domain, opts) => {
     try {
       const zone = await createHostedZone(domain, opts.comment);
-      console.log(`\u2713 Hosted zone created: ${domain}`);
-      console.log(`  Zone ID: ${zone.id}`);
+      printLine(`\u2713 Hosted zone created: ${domain}`);
+      printLine(`  Zone ID: ${zone.id}`);
       if (zone.name_servers && zone.name_servers.length > 0) {
-        console.log(`
+        printLine(`
   Name servers (set at your registrar):`);
         for (const ns of zone.name_servers) {
-          console.log(`    ${ns}`);
+          printLine(`    ${ns}`);
         }
       }
-      console.log();
+      printLine();
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58340,24 +58495,24 @@ Domain: ${detail.domain}`);
     try {
       const zones = await listHostedZones();
       if (opts.json) {
-        console.log(JSON.stringify(zones, null, 2));
+        printLine(JSON.stringify(zones, null, 2));
         return;
       }
       const page = pageItemsOrExit(zones, { limit: opts.limit, all: opts.all });
       if (page.items.length === 0) {
-        console.log("No hosted zones.");
+        printLine("No hosted zones.");
         return;
       }
-      console.log(`
+      printLine(`
 Hosted Zones:`);
       for (const z of page.items) {
         const comment = z.comment ? ` \u2014 ${truncateText(z.comment, 60)}` : "";
-        console.log(`  ${z.id}  ${z.name}  ${z.record_count} records${comment}`);
+        printLine(`  ${z.id}  ${z.name}  ${z.record_count} records${comment}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "zone(s)", "Use --all for every zone or r53 zone-info <zoneId> for details.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58365,24 +58520,24 @@ ${compactHint(page, "zone(s)", "Use --all for every zone or r53 zone-info <zoneI
     try {
       const zone = await getHostedZone(zoneId);
       if (opts.json) {
-        console.log(JSON.stringify(zone, null, 2));
+        printLine(JSON.stringify(zone, null, 2));
         return;
       }
-      console.log(`
+      printLine(`
 Hosted Zone: ${zone.name}`);
-      console.log(`  ID:      ${zone.id}`);
-      console.log(`  Records: ${zone.record_count}`);
+      printLine(`  ID:      ${zone.id}`);
+      printLine(`  Records: ${zone.record_count}`);
       if (zone.comment)
-        console.log(`  Comment: ${zone.comment}`);
+        printLine(`  Comment: ${zone.comment}`);
       if (zone.name_servers && zone.name_servers.length > 0) {
-        console.log(`  Name servers:`);
+        printLine(`  Name servers:`);
         for (const ns of zone.name_servers) {
-          console.log(`    ${ns}`);
+          printLine(`    ${ns}`);
         }
       }
-      console.log();
+      printLine();
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58390,18 +58545,18 @@ Hosted Zone: ${zone.name}`);
     try {
       const zone = await getHostedZone(zoneId);
       if (!opts.force) {
-        console.log(`Would delete hosted zone:`);
-        console.log(`  ID:      ${zone.id}`);
-        console.log(`  Domain:  ${zone.name}`);
-        console.log(`  Records: ${zone.record_count}`);
-        console.log(`
+        printLine(`Would delete hosted zone:`);
+        printLine(`  ID:      ${zone.id}`);
+        printLine(`  Domain:  ${zone.name}`);
+        printLine(`  Records: ${zone.record_count}`);
+        printLine(`
 This is irreversible. Re-run with --force to confirm.`);
         process.exit(0);
       }
       await deleteHostedZone(zoneId);
-      console.log(`\u2713 Hosted zone deleted: ${zone.name} (${zone.id})`);
+      printLine(`\u2713 Hosted zone deleted: ${zone.name} (${zone.id})`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58409,30 +58564,30 @@ This is irreversible. Re-run with --force to confirm.`);
     try {
       const zone = await findHostedZoneByDomain(domain);
       if (!zone) {
-        console.error(`No hosted zone found for ${domain}`);
+        printErrorLine(`No hosted zone found for ${domain}`);
         process.exit(1);
       }
       const records = await listRecords(zone.id);
       if (opts.json) {
-        console.log(JSON.stringify(records, null, 2));
+        printLine(JSON.stringify(records, null, 2));
         return;
       }
       const page = pageItemsOrExit(records, { limit: opts.limit, all: opts.all });
       if (page.items.length === 0) {
-        console.log("No records.");
+        printLine("No records.");
         return;
       }
-      console.log(`
+      printLine(`
 DNS Records for ${domain}:`);
       for (const r4 of page.items) {
         const val = r4.alias_target ? `ALIAS \u2192 ${r4.alias_target.dns_name}` : truncateText(r4.values.join(", "), 90);
         const ttl = r4.alias_target ? "" : `  TTL:${r4.ttl}`;
-        console.log(`  ${r4.type.padEnd(6)} ${r4.name.padEnd(40)}${ttl}  ${val}`);
+        printLine(`  ${r4.type.padEnd(6)} ${r4.name.padEnd(40)}${ttl}  ${val}`);
       }
-      console.log(`
+      printLine(`
 ${compactHint(page, "record(s)", "Use --all for every record or --json for full values.", { paging: "limit" })}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58443,20 +58598,20 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
     try {
       const isAlias = !!(opts.aliasZone && opts.aliasDns);
       if (!isAlias && (!opts.value || opts.value.length === 0)) {
-        console.error("Error: provide --value (repeatable) or both --alias-zone and --alias-dns");
+        printErrorLine("Error: provide --value (repeatable) or both --alias-zone and --alias-dns");
         process.exit(1);
       }
       const zone = await findHostedZoneByDomain(domain);
       if (!zone) {
-        console.error(`No hosted zone found for ${domain}`);
+        printErrorLine(`No hosted zone found for ${domain}`);
         process.exit(1);
       }
       const aliasTarget = isAlias ? { hosted_zone_id: opts.aliasZone, dns_name: opts.aliasDns } : undefined;
       await upsertRecord(zone.id, { name: opts.name, type: opts.type, ttl: parseInt(opts.ttl), values: opts.value, alias_target: aliasTarget });
       const desc = isAlias ? `alias \u2192 ${opts.aliasDns}` : `${opts.value.length} value(s)`;
-      console.log(`\u2713 Record upserted: ${opts.type} ${opts.name} (${desc})`);
+      printLine(`\u2713 Record upserted: ${opts.type} ${opts.name} (${desc})`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58464,14 +58619,14 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
     try {
       const zone = await findHostedZoneByDomain(domain);
       if (!zone) {
-        console.error(`No hosted zone found for ${domain}`);
+        printErrorLine(`No hosted zone found for ${domain}`);
         process.exit(1);
       }
       const records = await listRecords(zone.id);
       const normName = opts.name.endsWith(".") ? opts.name : `${opts.name}.`;
       const existing = records.find((r4) => r4.type === opts.type.toUpperCase() && (r4.name === opts.name || r4.name === normName));
       if (!existing) {
-        console.error(`\u2717 No ${opts.type} record found for ${opts.name} in zone ${domain}`);
+        printErrorLine(`\u2717 No ${opts.type} record found for ${opts.name} in zone ${domain}`);
         process.exit(1);
       }
       await deleteRecord(zone.id, {
@@ -58481,9 +58636,9 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
         values: existing.values,
         alias_target: existing.alias_target
       });
-      console.log(`\u2713 Record deleted: ${existing.type} ${existing.name}`);
+      printLine(`\u2713 Record deleted: ${existing.type} ${existing.name}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58493,23 +58648,23 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
       try {
         raw = readFileSync7(opts.file, "utf-8");
       } catch {
-        console.error(`Could not read file: ${opts.file}`);
+        printErrorLine(`Could not read file: ${opts.file}`);
         process.exit(1);
       }
       const records = JSON.parse(raw);
       if (!Array.isArray(records)) {
-        console.error("JSON file must be an array of record objects");
+        printErrorLine("JSON file must be an array of record objects");
         process.exit(1);
       }
       const zone = await findHostedZoneByDomain(domain);
       if (!zone) {
-        console.error(`No hosted zone found for ${domain}`);
+        printErrorLine(`No hosted zone found for ${domain}`);
         process.exit(1);
       }
       await upsertRecords(zone.id, records);
-      console.log(`\u2713 Upserted ${records.length} record(s) in ${domain}`);
+      printLine(`\u2713 Upserted ${records.length} record(s) in ${domain}`);
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58521,36 +58676,36 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
         createDomain: createDomain2,
         updateDomain: updateDomain2
       });
-      console.log(`\u2713 Synced ${result.synced} domains (${result.created} new, ${result.updated} updated)`);
+      printLine(`\u2713 Synced ${result.synced} domains (${result.created} new, ${result.updated} updated)`);
       if (result.errors.length > 0) {
-        console.log(`  Errors: ${result.errors.join(", ")}`);
+        printLine(`  Errors: ${result.errors.join(", ")}`);
       }
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
   r53.command("full-setup <domain>").description("Buy domain + create zone + sync to DB \u2014 all in one (contact defaults from: domains config set contact.*)").option("--email <email>", "Registrant email").option("--first-name <name>", "First name").option("--last-name <name>", "Last name").option("--phone <phone>", "Phone").option("--address <addr>", "Street address").option("--city <city>", "City").option("--state <state>", "State/province").option("--country <code>", "Country code").option("--zip <zip>", "ZIP code").option("--org <name>", "Organization name").option("--years <n>", "Registration years", "1").option("--wait", "Poll until registration completes (or fails)").action(async (domain, opts) => {
     try {
-      console.log(`[1/4] Checking availability...`);
+      printLine(`[1/4] Checking availability...`);
       const avail = await checkAvailability3(domain);
       if (!avail.available) {
-        console.error(`\u2717 ${domain} is not available`);
+        printErrorLine(`\u2717 ${domain} is not available`);
         process.exit(1);
       }
       const price = avail.price ? ` (${avail.currency ?? "USD"} ${avail.price}/yr)` : "";
-      console.log(`  \u2713 Available${price}`);
-      console.log(`[2/4] Registering domain...`);
+      printLine(`  \u2713 Available${price}`);
+      printLine(`[2/4] Registering domain...`);
       let contact;
       try {
         contact = resolveContact(opts);
       } catch (e4) {
-        console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+        printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
         process.exit(1);
       }
       const reg = await registerDomain2(domain, contact, parseInt(opts.years));
-      console.log(`  \u2713 Submitted (operation: ${reg.operationId})`);
-      console.log(`  Waiting for registration to complete...`);
+      printLine(`  \u2713 Submitted (operation: ${reg.operationId})`);
+      printLine(`  Waiting for registration to complete...`);
       let status = "IN_PROGRESS";
       while (status === "IN_PROGRESS" || status === "SUBMITTED") {
         await new Promise((r4) => setTimeout(r4, 1e4));
@@ -58558,13 +58713,13 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
         status = s2.status;
         process.stdout.write(`  Status: ${status}\r`);
       }
-      console.log();
+      printLine();
       if (status !== "SUCCESSFUL") {
-        console.error(`\u2717 Registration ${status}`);
+        printErrorLine(`\u2717 Registration ${status}`);
         process.exit(1);
       }
-      console.log(`  \u2713 Registration complete`);
-      console.log(`[3/4] Configuring hosted zone...`);
+      printLine(`  \u2713 Registration complete`);
+      printLine(`[3/4] Configuring hosted zone...`);
       const setup = await setupDomainZone(domain, {
         findExistingZone: async (d4) => {
           const z = await findHostedZoneByDomain(d4);
@@ -58582,8 +58737,8 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
           await updateNameservers2(d4, ns);
         }
       });
-      console.log(`  \u2713 Zone ${setup.created ? "created" : "reused"} (${setup.zoneId})` + (setup.nsUpdated ? ` \u2014 registry NS repointed to this zone` : ``));
-      console.log(`[4/4] Adding to local database...`);
+      printLine(`  \u2713 Zone ${setup.created ? "created" : "reused"} (${setup.zoneId})` + (setup.nsUpdated ? ` \u2014 registry NS repointed to this zone` : ``));
+      printLine(`[4/4] Adding to local database...`);
       createDomain2({
         name: domain,
         registrar: "AWS Route 53",
@@ -58591,20 +58746,20 @@ ${compactHint(page, "record(s)", "Use --all for every record or --json for full
         auto_renew: true,
         nameservers: setup.nameServers
       });
-      console.log(`  \u2713 Added to portfolio`);
-      console.log(`
+      printLine(`  \u2713 Added to portfolio`);
+      printLine(`
 \u2713 Full setup complete for ${domain}`);
-      console.log(`  Check: domains r53 status ${reg.operationId}`);
+      printLine(`  Check: domains r53 status ${reg.operationId}`);
       if (setup.nameServers && setup.nameServers.length > 0) {
-        console.log(`
+        printLine(`
   Name servers:`);
         for (const ns of setup.nameServers) {
-          console.log(`    ${ns}`);
+          printLine(`    ${ns}`);
         }
       }
-      console.log();
+      printLine();
     } catch (e4) {
-      console.error(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`Error: ${e4 instanceof Error ? e4.message : String(e4)}`);
       process.exit(1);
     }
   });
@@ -58971,6 +59126,7 @@ function coverageRegressions(current, baseline) {
 }
 
 // src/cli/commands/reconcile-expiry.ts
+init_stdout();
 var IANA_RDAP_BOOTSTRAP = "https://data.iana.org/rdap/dns.json";
 var TLD_WHOIS = {
   ag: "whois.nic.ag",
@@ -59065,18 +59221,18 @@ function registerReconcileExpiryCommand(program2) {
   program2.command("reconcile-expiry").description("READ-ONLY: compare each domain's REGISTRAR expiry against the REGISTRY's own expiry").option("--from <file>", "Registrar dump JSON (array of {domain, expiresAt, status, registrar})").option("--provider <name>", "Read the registrar inventory live via a configured provider").option("--bootstrap <file>", "Local RDAP bootstrap JSON (default: fetch from IANA)").option("--baseline <file>", "Prior run's JSON; enables coverage-regression detection").option("--only <list>", "Comma-separated domains, or a TLD like '.md'").option("--limit <n>", "Cap the number of domains checked").option("--sample <n>", "Deterministic every-Nth sample across the population").option("--rdap-delay <ms>", "Delay between RDAP queries", "1100").option("--whois-delay <ms>", "Delay between WHOIS queries", "2500").option("--self-test", "Run the pre-arm self-test and exit").option("--json", "Output JSON").action(async (opts) => {
     const arm = prearm();
     if (!opts.json) {
-      console.log("=== PRE-ARM SELF-TEST (two-sided) ===");
+      printLine("=== PRE-ARM SELF-TEST (two-sided) ===");
       for (const c4 of arm.cases)
-        console.log(`  [${c4.passed ? "PASS" : "FAIL"}] ${c4.name.padEnd(58)} -> ${c4.got}`);
-      console.log(`=== PRE-ARM ${arm.ok ? "PASS - instrument can fire AND can stay silent" : "FAIL - DO NOT TRUST ANY RESULT"} ===`);
+        printLine(`  [${c4.passed ? "PASS" : "FAIL"}] ${c4.name.padEnd(58)} -> ${c4.got}`);
+      printLine(`=== PRE-ARM ${arm.ok ? "PASS - instrument can fire AND can stay silent" : "FAIL - DO NOT TRUST ANY RESULT"} ===`);
     }
     if (!arm.ok) {
-      console.error("REFUSING TO RUN: pre-arm failed.");
+      printErrorLine("REFUSING TO RUN: pre-arm failed.");
       process.exit(3);
     }
     if (opts.selfTest) {
       if (opts.json)
-        console.log(JSON.stringify({ prearm: arm }, null, 2));
+        printLine(JSON.stringify({ prearm: arm }, null, 2));
       process.exit(0);
     }
     let rows;
@@ -59084,8 +59240,8 @@ function registerReconcileExpiryCommand(program2) {
       rows = await loadRows(opts);
     } catch (e4) {
       const configured = getAvailableProviders().filter((p2) => p2.configured).map((p2) => p2.name).join(", ") || "none";
-      console.error(`${e4 instanceof Error ? e4.message : String(e4)}`);
-      console.error(`configured providers: ${configured}`);
+      printErrorLine(`${e4 instanceof Error ? e4.message : String(e4)}`);
+      printErrorLine(`configured providers: ${configured}`);
       process.exit(2);
       return;
     }
@@ -59124,9 +59280,9 @@ function registerReconcileExpiryCommand(program2) {
       }
     };
     if (!opts.json) {
-      console.log(`
+      printLine(`
 REGISTRAR rows=${rows.length} unique=${unique.length} dupes_removed=${dupesRemoved}`);
-      console.log(`SELECTED=${selected.length}`);
+      printLine(`SELECTED=${selected.length}`);
     }
     const report = await reconcileExpiry(selected, deps);
     let regressed = [];
@@ -59137,40 +59293,40 @@ REGISTRAR rows=${rows.length} unique=${unique.length} dupes_removed=${dupesRemov
         report.exitCode = Math.max(report.exitCode, 2);
     }
     if (opts.json) {
-      console.log(JSON.stringify({ ...report, coverageRegressions: regressed, queries }, null, 2));
+      printLine(JSON.stringify({ ...report, coverageRegressions: regressed, queries }, null, 2));
       process.exit(report.exitCode);
       return;
     }
     const order = ["MATCH", "MISMATCH", "NOT_AT_REGISTRY", "UNVERIFIABLE_EXPECTED", "UNVERIFIABLE_UNEXPECTED"];
-    console.log(`
+    printLine(`
 === VERDICT TALLY (n=${report.records.length}) ===`);
     for (const k4 of order)
-      console.log(`  ${k4.padEnd(24)} ${String(report.tally[k4]).padStart(5)}`);
+      printLine(`  ${k4.padEnd(24)} ${String(report.tally[k4]).padStart(5)}`);
     const pct = report.records.length ? (100 * report.comparable / report.records.length).toFixed(1) : "0.0";
-    console.log(`COMPARABLE = ${report.comparable} of ${report.records.length} (${pct}%)`);
+    printLine(`COMPARABLE = ${report.comparable} of ${report.records.length} (${pct}%)`);
     const show = (title, rs) => {
       if (rs.length === 0)
         return;
-      console.log(`
+      printLine(`
 === ${title} ===`);
       for (const r4 of rs)
-        console.log(`  ${r4.domain.padEnd(26)} ${r4.why.slice(0, 120)}`);
+        printLine(`  ${r4.domain.padEnd(26)} ${r4.why.slice(0, 120)}`);
     };
     show("MISMATCHES", report.records.filter((r4) => r4.verdict === "MISMATCH"));
     show("NOT AT REGISTRY", report.records.filter((r4) => r4.verdict === "NOT_AT_REGISTRY"));
     show("UNVERIFIABLE / UNEXPECTED  (coverage loss - these are NOT clean)", report.records.filter((r4) => r4.verdict === "UNVERIFIABLE_UNEXPECTED"));
-    console.log(`
+    printLine(`
 REGISTRY EXPIRY WITHIN ${STALE_SOON_DAYS}d: ${report.expiringSoon.length}`);
     for (const r4 of report.expiringSoon) {
-      console.log(`   ${r4.domain.padEnd(26)} registry=${r4.registry} in ${r4.daysToRegistryExpiry}d  verdict=${r4.verdict}`);
+      printLine(`   ${r4.domain.padEnd(26)} registry=${r4.registry} in ${r4.daysToRegistryExpiry}d  verdict=${r4.verdict}`);
     }
     if (opts.baseline) {
-      console.log(`
+      printLine(`
 COVERAGE REGRESSION vs baseline: ${regressed.length}`);
       for (const d4 of regressed.slice(0, 20))
-        console.log(`   ${d4}  was comparable, now unverifiable`);
+        printLine(`   ${d4}  was comparable, now unverifiable`);
     }
-    console.log(`
+    printLine(`
 EXIT=${report.exitCode}`);
     process.exit(report.exitCode);
   });
@@ -59178,6 +59334,7 @@ EXIT=${report.exitCode}`);
 
 // src/cli/index.ts
 init_version();
+init_stdout();
 var OPTIONAL_GROUPS = [
   "brandsight",
   "events",
@@ -59238,7 +59395,7 @@ async function registerOptionalCommands(program2, groups) {
       const { registerEventsCommands: registerEventsCommands2 } = await Promise.resolve().then(() => (init_commander(), exports_commander));
       registerEventsCommands2(program2, { source: "domains" });
     } catch (error) {
-      console.error(`Events command group is enabled but @hasna/events could not be loaded: ${error instanceof Error ? error.message : String(error)}`);
+      printErrorLine(`Events command group is enabled but @hasna/events could not be loaded: ${error instanceof Error ? error.message : String(error)}`);
     }
   }
 }
@@ -59252,15 +59409,15 @@ function registerOptionalHelp(program2) {
       enable_some: "DOMAINS_COMMAND_GROUPS=marketplace,owner domains <command>"
     };
     if (opts.json) {
-      console.log(JSON.stringify(body, null, 2));
+      printLine(JSON.stringify(body, null, 2));
       return;
     }
-    console.log("Optional command groups:");
+    printLine("Optional command groups:");
     for (const group of body.available)
-      console.log(`  ${groups.has(group) ? "\u2713" : " "} ${group}`);
-    console.log(`
+      printLine(`  ${groups.has(group) ? "\u2713" : " "} ${group}`);
+    printLine(`
 Enable all:  DOMAINS_ENABLE_EXTRAS=1 domains <command>`);
-    console.log("Enable some: DOMAINS_COMMAND_GROUPS=marketplace,owner domains <command>");
+    printLine("Enable some: DOMAINS_COMMAND_GROUPS=marketplace,owner domains <command>");
   });
 }
 var program2 = new Command;