doomain 0.1.13 → 0.1.15

package/README.md

@@ -13,6 +13,7 @@ Use the interactive wizard when working by hand. Use explicit commands with `--j
 - Vercel project detection from `.vercel/project.json`.
 - DNS provider inference by longest matching configured zone.
 - Dry-run plans before writing changes.
+- Safety checks before replacing DNS records that point elsewhere.
 - DNS propagation and Vercel verification wait loop.
 - DNS provider support for Spaceship, Namecheap, Cloudflare, and Hostinger.
 
@@ -40,7 +41,8 @@ The wizard will:
 4. Connect a DNS provider if none is configured.
 5. List domains from configured DNS providers.
 6. Preview the Vercel and DNS changes.
-7. Apply the changes and request Vercel verification.
+7. Warn if the current DNS target points elsewhere and ask before overriding it.
+8. Apply the changes and request Vercel verification.
 
 If you already know the target project and domain, run the link command directly:
 
@@ -84,6 +86,8 @@ Apply it:
 doomain link app.example.com --project my-vercel-project --json
 ```
 
+If JSON mode returns `DNS_TARGET_CONFLICT`, the current DNS target appears to point to another project or site. Re-run with `--force` only when you intend to replace that DNS target.
+
 ## Provider Setup
 
 Doomain stores local credentials in `~/.doomain/config.json` with `0600` file permissions. Environment variables override saved config values.
@@ -257,8 +261,10 @@ DNS conflict rules:
 
 - Existing exact records are skipped.
 - TXT records can coexist at the same name.
-- Same-name, same-type conflicts require `--force`.
-- CNAME slot conflicts require `--force` because a CNAME cannot share a name with most other record types.
+- Same-name, same-type conflicts trigger an interactive override prompt or require `--force` in JSON/non-interactive mode.
+- CNAME slot conflicts trigger an interactive override prompt or require `--force` in JSON/non-interactive mode because a CNAME cannot share a name with most other record types.
+
+For real links, Doomain inspects the target `A` or `CNAME` DNS slot before adding the domain to Vercel. In interactive mode, it shows the existing and desired records and asks whether to override. In JSON mode, it fails with `DNS_TARGET_CONFLICT` instead of prompting.
 
 Use `--force` only when you intend to replace conflicting DNS records or move an existing Vercel alias:
 
@@ -268,6 +274,8 @@ doomain link app.example.com --project my-app --force
 
 `--force` can remove an existing Vercel alias from another project and add it to the target project.
 
+Confirming the interactive DNS override only forces DNS writes. If Vercel says the domain is already assigned to another project, re-run with `--force` to move that Vercel alias.
+
 Namecheap note: Namecheap's API writes DNS through `setHosts`, which replaces the full host list. Doomain reads all existing records first, applies planned changes in memory, preserves unrelated records, then submits the complete final record set.
 
 ## JSON And Agent Usage
@@ -333,7 +341,7 @@ Common flags:
 - `-p, --project <project>`: Vercel project id or name.
 - `--provider <id>`: DNS provider id.
 - `--dry-run`: preview without writing.
-- `--force`: overwrite DNS conflicts and allow Vercel alias moves.
+- `--force`: overwrite DNS conflicts without prompting and allow Vercel alias moves.
 - `--wait`, `--no-wait`: wait for DNS and Vercel verification. Default is `--wait`.
 - `--timeout <seconds>`: wait timeout. Default is `300`.
 - `--json`: output one JSON object.
@@ -345,6 +353,7 @@ doomain link app.example.com --project my-app
 doomain link --domain example.com --subdomain app --project my-app
 doomain link --domain example.com --apex --project my-app
 doomain link app.example.com --project my-app --dry-run --json
+doomain link app.example.com --project my-app --force
 ```
 
 ### `doomain auth vercel`
@@ -567,6 +576,10 @@ DNS propagation timeout
 
 The DNS records may have been saved even if Vercel verification timed out. Check the domain in Vercel, inspect records with `doomain domains list`, or re-run verification with `doomain verify`.
 
+DNS target conflict
+
+The domain already has a conflicting `A` or `CNAME` record, which usually means it points to another project or site. In interactive mode, confirm the override only if you intend to replace that target. In JSON mode, re-run `doomain link` with `--force` to overwrite DNS.
+
 Domain already assigned to another Vercel project
 
 If you intend to move it, re-run `doomain link` with `--force`. This can remove the alias from the previous Vercel project.

package/dist/commands/link.js

@@ -1,6 +1,5 @@
 import { Args, Command, Flags } from '@oclif/core';
 import * as p from '@clack/prompts';
-import { DoomainError } from '../lib/errors.js';
 import { accountFlag, apexFlag, domainFlag, jsonFlag, projectFlag, providerFlag, subdomainFlag } from '../lib/flags.js';
 import { linkDomain } from '../lib/link-domain.js';
 import { createOutput, outputError } from '../lib/output.js';
@@ -27,6 +26,18 @@ function dnsOverrideNote(warning) {
         ...warning.desired.map((record) => `- ${recordLine(record)}`),
     ].join('\n');
 }
+function providerAccount(result) {
+    return result.isDefaultAccount ? result.provider : `${result.provider}/${result.account}`;
+}
+function dryRunPreview(result) {
+    const account = providerAccount(result);
+    return [
+        `Vercel: add ${result.domain} to ${result.project}`,
+        `DNS provider: ${account} (${result.zoneDomain})`,
+        ...result.records.map((record) => `DNS: ${recordLine(record)} in ${account}`),
+        `Actions: ${result.actions.join(', ')}`,
+    ].join('\n');
+}
 export default class Link extends Command {
     static description = 'Link a Vercel project to a domain and create DNS records.';
     static examples = [
@@ -59,14 +70,13 @@ export default class Link extends Command {
         let spinner;
         const domain = flags.domain ?? args.domain;
         try {
-            if (!domain) {
-                throw new DoomainError('MISSING_ARGUMENT', 'Domain is required. Use `doomain link <domain>` or pass --domain.');
-            }
             if (flags['dry-run']) {
                 const result = await linkDomain({ ...flags, domain, dryRun: true, timeoutSeconds: flags.timeout });
                 out.result(result);
-                if (!out.json)
+                if (!out.json) {
+                    p.note(dryRunPreview(result), 'Dry run');
                     out.success(`Dry run ready for ${result.domain}.`);
+                }
                 return;
             }
             out.intro('Doomain');

package/dist/lib/command-schema.js

@@ -8,6 +8,7 @@ export const commandSchemas = [
             'doomain link app.example.com --project my-app --json',
             'doomain link --domain app.example.com --project my-app --json',
             'doomain link --domain example.com --subdomain app --project my-app --json',
+            'doomain link --project my-app --json',
             'doomain link --provider spaceship --domain example.com --apex --project my-app --dry-run --json',
             'doomain link app.example.com --provider spaceship --account work --project my-app --json',
         ],
@@ -27,16 +28,42 @@ export const commandSchemas = [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
             { name: 'provider', type: 'string', description: 'DNS provider id. Inferred from the target domain when omitted.' },
             { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Defaults to the provider default account.' },
-            { name: 'domain', type: 'string', description: 'Target domain or base zone, for example app.example.com or example.com.' },
+            {
+                name: 'domain',
+                type: 'string',
+                description: 'Target domain or base zone, for example app.example.com or example.com. Optional when DOOMAIN_DOMAIN or a default domain is configured.',
+            },
             { name: 'subdomain', type: 'string', description: 'Subdomain to add.' },
             { name: 'apex', type: 'boolean', description: 'Use the root/apex domain.' },
             { name: 'project', type: 'string', description: 'Vercel project id/name. Optional when project inference succeeds.' },
             { name: 'dry-run', type: 'boolean', description: 'Preview changes without writing. Intended for human previews; agents should not use this unless explicitly asked.' },
-            { name: 'force', type: 'boolean', description: 'Overwrite conflicting DNS records.' },
-            { name: 'wait', type: 'boolean', description: 'Wait for DNS and Vercel verification.', default: true },
+            {
+                name: 'force',
+                type: 'boolean',
+                description: 'Move existing Vercel project domains and overwrite conflicting DNS records. Interactive DNS override confirmation does not move Vercel aliases; pass --force for that.',
+            },
+            { name: 'wait', type: 'boolean', description: 'Wait for DNS and Vercel verification. Use --no-wait to skip waiting.', default: true },
             { name: 'timeout', type: 'integer', description: 'Wait timeout in seconds.', default: 300 },
         ],
     },
+    {
+        name: 'schema',
+        description: 'Print machine-readable command schemas for agents.',
+        examples: ['doomain schema --json', 'doomain schema link --json'],
+        safeForAgents: true,
+        flags: [
+            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
+        ],
+    },
+    {
+        name: 'providers list',
+        description: 'List supported DNS providers.',
+        examples: ['doomain providers list --json'],
+        safeForAgents: true,
+        flags: [
+            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
+        ],
+    },
     {
         name: 'providers connect',
         description: 'Save DNS provider credentials locally after verifying them. Prompts for a provider when omitted.',
@@ -123,6 +150,42 @@ export const commandSchemas = [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
         ],
     },
+    {
+        name: 'domains list',
+        description: 'List DNS zones and records for a provider.',
+        examples: ['doomain domains list --json', 'doomain domains list --provider cloudflare --domain example.com --json'],
+        safeForAgents: true,
+        flags: [
+            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
+            { name: 'provider', type: 'string', description: 'DNS provider id. Defaults to DOOMAIN_PROVIDER, configured default provider, then spaceship.' },
+            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Omit to list all configured accounts for the provider.' },
+            { name: 'domain', type: 'string', description: 'Limit output to one DNS zone.' },
+        ],
+    },
+    {
+        name: 'projects list',
+        description: 'List Vercel projects.',
+        examples: ['doomain projects list --json', 'doomain projects list --search my-app --json'],
+        safeForAgents: true,
+        flags: [
+            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
+            { name: 'search', type: 'string', description: 'Filter projects by search term.' },
+        ],
+    },
+    {
+        name: 'verify',
+        description: 'Ask Vercel to verify a project domain.',
+        examples: ['doomain verify --domain app.example.com --project my-app --json', 'doomain verify --domain example.com --apex --project my-app --json'],
+        mutates: true,
+        safeForAgents: true,
+        flags: [
+            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
+            { name: 'domain', type: 'string', description: 'Target domain or base zone, for example app.example.com or example.com.', required: true },
+            { name: 'subdomain', type: 'string', description: 'Subdomain to verify.' },
+            { name: 'apex', type: 'boolean', description: 'Use the root/apex domain.' },
+            { name: 'project', type: 'string', description: 'Vercel project id/name. Optional when local .vercel/project.json is available.' },
+        ],
+    },
 ];
 export function getCommandSchema(name) {
     if (!name)

package/dist/lib/link-domain.js

@@ -495,8 +495,9 @@ async function resolveDnsForce(input, opts) {
     return true;
 }
 export async function createLinkPlan(input) {
+    const domain = await resolveConfiguredDomain(input.domain);
     const project = await resolveProject(input.project);
-    const resolved = await resolveProviderTarget(input);
+    const resolved = await resolveProviderTarget({ ...input, domain });
     const { account, accountInferred, isDefaultAccount, provider, providerInferred, target } = resolved;
     const record = planBaseRecord({ isApex: target.isApex, provider, recordName: target.recordName });
     return {

package/oclif.manifest.json

@@ -673,5 +673,5 @@
       ]
     }
   },
-  "version": "0.1.13"
+  "version": "0.1.15"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "doomain",
   "description": "Link your vercel project and domain in seconds",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "author": "Crafter Station",
   "packageManager": "bun@1.3.13",
   "bin": {