doomain 0.1.18 → 0.1.20

package/dist/lib/command-schema.js

@@ -1,5 +1,47 @@
 import { listProviderStatuses } from './providers/status.js';
 export const commandSchemas = [
+    {
+        name: 'dns point',
+        description: 'Point a DNS name at an IP address or canonical hostname.',
+        examples: [
+            'doomain dns point app.example.com --target 203.0.113.10 --json',
+            'doomain dns point app.example.com --target origin.example.net --dry-run --json',
+            'doomain dns point example.com --target 203.0.113.10 --provider spaceship --account work --force --json',
+        ],
+        agentHint: 'Use this for non-Vercel infrastructure such as a VPS or load balancer. Run without --dry-run unless the user explicitly requests a preview; conflicts fail safely unless --force is explicit.',
+        agentInstructions: [
+            'When a user asks to point a domain at a VPS or hostname, run `doomain dns point <domain> --target <ip-or-hostname> --json`.',
+            'Pass --force only after the user has approved replacing an existing DNS target.',
+        ],
+        agentQuickstart: {
+            doNotPreflight: true,
+            preferredFirstCommand: 'doomain dns point <domain> --target <ip-or-hostname> --json',
+        },
+        mutates: true,
+        safeForAgents: true,
+        flags: [
+            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
+            { name: 'domain', type: 'string', description: 'Fully qualified apex or subdomain to point.', required: true },
+            { name: 'target', type: 'string', description: 'IPv4, IPv6, or hostname target.', required: true },
+            { name: 'type', type: 'string', description: 'A, AAAA, or CNAME. Inferred from the target when omitted.' },
+            {
+                name: 'provider',
+                type: 'string',
+                description: 'DNS provider id. Inferred from the target domain when omitted.',
+            },
+            { name: 'account', type: 'string', description: 'DNS provider profile/account alias.' },
+            { name: 'ttl', type: 'integer', description: 'DNS record TTL in seconds.', default: 300 },
+            { name: 'dry-run', type: 'boolean', description: 'Preview without writing.' },
+            { name: 'force', type: 'boolean', description: 'Overwrite conflicting DNS records.' },
+            {
+                name: 'wait',
+                type: 'boolean',
+                description: 'Wait for public DNS propagation. Use --no-wait to skip.',
+                default: true,
+            },
+            { name: 'timeout', type: 'integer', description: 'DNS propagation wait timeout in seconds.', default: 300 },
+        ],
+    },
     {
         name: 'link',
         description: 'Link a Vercel project to a domain and create DNS records.',
@@ -26,8 +68,16 @@ export const commandSchemas = [
         safeForAgents: true,
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'provider', type: 'string', description: 'DNS provider id. Inferred from the target domain when omitted.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Defaults to the provider default account.' },
+            {
+                name: 'provider',
+                type: 'string',
+                description: 'DNS provider id. Inferred from the target domain when omitted.',
+            },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Defaults to the provider default account.',
+            },
             {
                 name: 'domain',
                 type: 'string',
@@ -35,14 +85,27 @@ export const commandSchemas = [
             },
             { name: 'subdomain', type: 'string', description: 'Subdomain to add.' },
             { name: 'apex', type: 'boolean', description: 'Use the root/apex domain.' },
-            { name: 'project', type: 'string', description: 'Vercel project id/name. Optional when project inference succeeds.' },
-            { name: 'dry-run', type: 'boolean', description: 'Preview changes without writing. Intended for human previews; agents should not use this unless explicitly asked.' },
+            {
+                name: 'project',
+                type: 'string',
+                description: 'Vercel project id/name. Optional when project inference succeeds.',
+            },
+            {
+                name: 'dry-run',
+                type: 'boolean',
+                description: 'Preview changes without writing. Intended for human previews; agents should not use this unless explicitly asked.',
+            },
             {
                 name: 'force',
                 type: 'boolean',
                 description: 'Move existing Vercel project domains and overwrite conflicting DNS records. Interactive DNS override confirmation does not move Vercel aliases; pass --force for that.',
             },
-            { name: 'wait', type: 'boolean', description: 'Wait for DNS and Vercel verification. Use --no-wait to skip waiting.', default: true },
+            {
+                name: 'wait',
+                type: 'boolean',
+                description: 'Wait for DNS and Vercel verification. Use --no-wait to skip waiting.',
+                default: true,
+            },
             { name: 'timeout', type: 'integer', description: 'Wait timeout in seconds.', default: 300 },
         ],
     },
@@ -64,12 +127,33 @@ export const commandSchemas = [
         safeForAgents: true,
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'app', type: 'string', description: 'Clerk application id. Defaults to CLERK_APPLICATION_ID or saved Clerk config.' },
-            { name: 'provider', type: 'string', description: 'DNS provider id. Inferred from the target domain when omitted.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Defaults to the provider default account.' },
-            { name: 'dry-run', type: 'boolean', description: 'Check application eligibility and DNS zone without creating production.' },
+            {
+                name: 'app',
+                type: 'string',
+                description: 'Clerk application id. Defaults to CLERK_APPLICATION_ID or saved Clerk config.',
+            },
+            {
+                name: 'provider',
+                type: 'string',
+                description: 'DNS provider id. Inferred from the target domain when omitted.',
+            },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Defaults to the provider default account.',
+            },
+            {
+                name: 'dry-run',
+                type: 'boolean',
+                description: 'Check application eligibility and DNS zone without creating production.',
+            },
             { name: 'force', type: 'boolean', description: 'Overwrite DNS records that conflict with Clerk requirements.' },
-            { name: 'wait', type: 'boolean', description: 'Wait for Clerk DNS, SSL, and email DNS verification. Use --no-wait to skip waiting.', default: true },
+            {
+                name: 'wait',
+                type: 'boolean',
+                description: 'Wait for Clerk DNS, SSL, and email DNS verification. Use --no-wait to skip waiting.',
+                default: true,
+            },
             { name: 'timeout', type: 'integer', description: 'Wait timeout in seconds.', default: 300 },
         ],
     },
@@ -78,18 +162,14 @@ export const commandSchemas = [
         description: 'Print machine-readable command schemas for agents.',
         examples: ['doomain schema --json', 'doomain schema link --json'],
         safeForAgents: true,
-        flags: [
-            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-        ],
+        flags: [{ name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' }],
     },
     {
         name: 'providers list',
         description: 'List supported DNS providers.',
         examples: ['doomain providers list --json'],
         safeForAgents: true,
-        flags: [
-            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-        ],
+        flags: [{ name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' }],
     },
     {
         name: 'providers connect',
@@ -104,7 +184,11 @@ export const commandSchemas = [
         ],
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Defaults to the provider default account.' },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Defaults to the provider default account.',
+            },
             { name: 'credential', type: 'string', description: 'Provider credential as key=value. Can be repeated.' },
             { name: 'api-key', type: 'string', description: 'Spaceship API key.' },
             { name: 'api-secret', type: 'string', description: 'Spaceship API secret.' },
@@ -114,10 +198,18 @@ export const commandSchemas = [
     {
         name: 'providers add',
         description: 'Alias for providers connect.',
-        examples: ['doomain providers add', 'doomain providers add namecheap', 'doomain providers add spaceship --account work'],
+        examples: [
+            'doomain providers add',
+            'doomain providers add namecheap',
+            'doomain providers add spaceship --account work',
+        ],
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Defaults to the provider default account.' },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Defaults to the provider default account.',
+            },
             { name: 'credential', type: 'string', description: 'Provider credential as key=value. Can be repeated.' },
             { name: 'no-verify', type: 'boolean', description: 'Save credentials without verifying them first.' },
         ],
@@ -142,7 +234,11 @@ export const commandSchemas = [
         ],
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Omit to remove all accounts for the provider.' },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Omit to remove all accounts for the provider.',
+            },
         ],
     },
     {
@@ -156,7 +252,11 @@ export const commandSchemas = [
         ],
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Defaults to the provider default account.' },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Defaults to the provider default account.',
+            },
         ],
     },
     {
@@ -173,9 +273,7 @@ export const commandSchemas = [
         name: 'auth logout clerk',
         description: 'Remove saved Clerk credentials locally.',
         examples: ['doomain auth logout clerk --json'],
-        flags: [
-            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-        ],
+        flags: [{ name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' }],
     },
     {
         name: 'auth vercel',
@@ -184,16 +282,18 @@ export const commandSchemas = [
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
             { name: 'token', type: 'string', description: 'Vercel API token.' },
-            { name: 'team-id', type: 'string', description: 'Optional Vercel team id. Interactive mode can fetch and select it.' },
+            {
+                name: 'team-id',
+                type: 'string',
+                description: 'Optional Vercel team id. Interactive mode can fetch and select it.',
+            },
         ],
     },
     {
         name: 'auth logout vercel',
         description: 'Remove saved Vercel credentials locally.',
         examples: ['doomain auth logout vercel --json'],
-        flags: [
-            { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-        ],
+        flags: [{ name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' }],
     },
     {
         name: 'domains find',
@@ -219,8 +319,16 @@ export const commandSchemas = [
         safeForAgents: true,
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'provider', type: 'string', description: 'DNS provider id. Defaults to DOOMAIN_PROVIDER, configured default provider, then spaceship.' },
-            { name: 'account', type: 'string', description: 'DNS provider profile/account alias. Omit to list all configured accounts for the provider.' },
+            {
+                name: 'provider',
+                type: 'string',
+                description: 'DNS provider id. Defaults to DOOMAIN_PROVIDER, configured default provider, then spaceship.',
+            },
+            {
+                name: 'account',
+                type: 'string',
+                description: 'DNS provider profile/account alias. Omit to list all configured accounts for the provider.',
+            },
             { name: 'domain', type: 'string', description: 'Limit output to one DNS zone.' },
         ],
     },
@@ -237,15 +345,27 @@ export const commandSchemas = [
     {
         name: 'verify',
         description: 'Ask Vercel to verify a project domain.',
-        examples: ['doomain verify --domain app.example.com --project my-app --json', 'doomain verify --domain example.com --apex --project my-app --json'],
+        examples: [
+            'doomain verify --domain app.example.com --project my-app --json',
+            'doomain verify --domain example.com --apex --project my-app --json',
+        ],
         mutates: true,
         safeForAgents: true,
         flags: [
             { name: 'json', type: 'boolean', description: 'Output a single JSON object and never prompt.' },
-            { name: 'domain', type: 'string', description: 'Target domain or base zone, for example app.example.com or example.com.', required: true },
+            {
+                name: 'domain',
+                type: 'string',
+                description: 'Target domain or base zone, for example app.example.com or example.com.',
+                required: true,
+            },
             { name: 'subdomain', type: 'string', description: 'Subdomain to verify.' },
             { name: 'apex', type: 'boolean', description: 'Use the root/apex domain.' },
-            { name: 'project', type: 'string', description: 'Vercel project id/name. Optional when local .vercel/project.json is available.' },
+            {
+                name: 'project',
+                type: 'string',
+                description: 'Vercel project id/name. Optional when local .vercel/project.json is available.',
+            },
         ],
     },
 ];
@@ -266,7 +386,7 @@ async function configuredProviders() {
     }));
 }
 function withProviderConnections(schema, providers) {
-    if (schema.name !== 'link' && schema.name !== 'clerk domains add')
+    if (schema.name !== 'link' && schema.name !== 'clerk domains add' && schema.name !== 'dns point')
         return schema;
     return { ...schema, configuredProviders: providers };
 }

package/dist/lib/domain-provider.js

@@ -122,7 +122,9 @@ async function loadConfiguredProviderZones(providerId, accountInput, toleratePro
     const account = accountInput ? normalizeProviderAccount(accountInput) : undefined;
     if (providerId) {
         const definition = getProviderDefinition(providerId);
-        const accounts = account ? [explicitAccountRef(definition.id, account)] : listConfiguredProviderAccounts(config, definition);
+        const accounts = account
+            ? [explicitAccountRef(definition.id, account)]
+            : listConfiguredProviderAccounts(config, definition);
         const selectedAccounts = accounts.length > 0 ? accounts : [defaultAccountRef(definition.id)];
         const tolerateAccountErrors = tolerateProviderAccountErrors && !account && selectedAccounts.length > 1;
         const results = await Promise.all(selectedAccounts.map((ref) => tolerateAccountErrors ? loadProviderZonesSafely(definition, ref) : loadProviderZones(definition, ref)));
@@ -174,12 +176,17 @@ export async function resolveProviderTarget(input, options = {}) {
             domain: requested.fullDomain,
             recovery: 'Retry with --provider <id> --account <alias> only if another configured provider account owns this zone. Otherwise connect the DNS provider account that owns this domain.',
             searchedZones: zones.searched,
-            suggestedCommands: [`doomain link ${requested.fullDomain} --provider <id> --account <alias> --json`, 'doomain providers connect'],
+            suggestedCommands: [
+                `doomain link ${requested.fullDomain} --provider <id> --account <alias> --json`,
+                'doomain providers connect',
+            ],
         });
     }
     const bestLength = matches[0].zone.name.length;
     const bestMatches = matches.filter((candidate) => candidate.zone.name.length === bestLength);
-    const uniqueBestMatches = bestMatches.filter((candidate, index, candidates) => candidates.findIndex((item) => item.provider === candidate.provider && item.account === candidate.account && item.zone.name === candidate.zone.name) === index);
+    const uniqueBestMatches = bestMatches.filter((candidate, index, candidates) => candidates.findIndex((item) => item.provider === candidate.provider &&
+        item.account === candidate.account &&
+        item.zone.name === candidate.zone.name) === index);
     if (uniqueBestMatches.length > 1) {
         throw new DoomainError('PROVIDER_ZONE_AMBIGUOUS', `Multiple DNS provider accounts have a matching DNS zone for ${requested.fullDomain}. Pass --provider and --account to choose one.`, { candidates: candidateDetails(uniqueBestMatches), domain: requested.fullDomain });
     }

package/dist/lib/errors.d.ts

@@ -1,4 +1,4 @@
-export type DoomainErrorCode = 'CONFIG_NOT_FOUND' | 'CLERK_AUTH_FAILED' | 'CLERK_PRODUCTION_EXISTS' | 'DNS_TARGET_CONFLICT' | 'DOMAIN_LINK_FAILED' | 'DOMAIN_PROVIDER_DISCOVERY_FAILED' | 'DOMAIN_ALREADY_ASSIGNED' | 'DOMAIN_VERIFY_FAILED' | 'INVALID_INPUT' | 'MISSING_ARGUMENT' | 'MISSING_CREDENTIALS' | 'PROVIDER_API_ERROR' | 'PROVIDER_AUTH_FAILED' | 'PROVIDER_PERMISSION_DENIED' | 'PROVIDER_NOT_FOUND' | 'PROVIDER_RATE_LIMITED' | 'PROVIDER_RECORD_CONFLICT' | 'PROVIDER_UNSUPPORTED_RECORD' | 'PROVIDER_ZONE_AMBIGUOUS' | 'PROVIDER_ZONE_NOT_FOUND' | 'PROJECT_NOT_FOUND' | 'VERCEL_AUTH_FAILED' | 'VERCEL_PROJECT_NOT_LINKED';
+export type DoomainErrorCode = 'CONFIG_NOT_FOUND' | 'CLERK_AUTH_FAILED' | 'CLERK_PRODUCTION_EXISTS' | 'DNS_POINT_FAILED' | 'DNS_TARGET_CONFLICT' | 'DOMAIN_LINK_FAILED' | 'DOMAIN_PROVIDER_DISCOVERY_FAILED' | 'DOMAIN_ALREADY_ASSIGNED' | 'DOMAIN_VERIFY_FAILED' | 'INVALID_INPUT' | 'MISSING_ARGUMENT' | 'MISSING_CREDENTIALS' | 'PROVIDER_API_ERROR' | 'PROVIDER_AUTH_FAILED' | 'PROVIDER_PERMISSION_DENIED' | 'PROVIDER_NOT_FOUND' | 'PROVIDER_RATE_LIMITED' | 'PROVIDER_RECORD_CONFLICT' | 'PROVIDER_UNSUPPORTED_RECORD' | 'PROVIDER_ZONE_AMBIGUOUS' | 'PROVIDER_ZONE_NOT_FOUND' | 'PROJECT_NOT_FOUND' | 'VERCEL_AUTH_FAILED' | 'VERCEL_PROJECT_NOT_LINKED';
 export declare class DoomainError extends Error {
     readonly code: DoomainErrorCode;
     readonly details?: unknown;

package/dist/lib/flags.js

@@ -1,8 +1,14 @@
 import { Flags } from '@oclif/core';
 export const jsonFlag = Flags.boolean({ description: 'Output a single JSON object and never prompt.' });
-export const providerFlag = Flags.string({ description: 'DNS provider id. Inferred from the target domain when omitted.' });
-export const accountFlag = Flags.string({ description: 'DNS provider profile/account alias. Defaults to the provider default account.' });
-export const domainFlag = Flags.string({ description: 'Target domain or base zone, for example app.example.com or example.com.' });
+export const providerFlag = Flags.string({
+    description: 'DNS provider id. Inferred from the target domain when omitted.',
+});
+export const accountFlag = Flags.string({
+    description: 'DNS provider profile/account alias. Defaults to the provider default account.',
+});
+export const domainFlag = Flags.string({
+    description: 'Target domain or base zone, for example app.example.com or example.com.',
+});
 export const subdomainFlag = Flags.string({ description: 'Subdomain to add, for example app for app.example.com.' });
 export const apexFlag = Flags.boolean({ description: 'Use the root/apex domain instead of a subdomain.' });
 export const projectFlag = Flags.string({

package/dist/lib/link-domain.js

@@ -6,7 +6,7 @@ import { resolveProviderTarget } from './domain-provider.js';
 import { DoomainError } from './errors.js';
 import { detectLocalVercelProject } from './local-vercel.js';
 import { createProvider } from './providers/registry.js';
-import { createVercelClient, resolveVercelConfig, VERCEL_APEX_A_RECORD, VERCEL_CNAME_RECORD } from './vercel.js';
+import { createVercelClient, resolveVercelConfig, VERCEL_APEX_A_RECORD, VERCEL_CNAME_RECORD, } from './vercel.js';
 function cleanDnsValue(value) {
     return value.toLowerCase().replace(/\.$/, '');
 }
@@ -146,7 +146,7 @@ function collectVerificationRecords(raw, seen = new Set()) {
     const object = raw;
     const verification = object.verification;
     const records = Array.isArray(verification) ? verification : [];
-    const nested = Object.entries(object).flatMap(([key, value]) => (key === 'verification' ? [] : collectVerificationRecords(value, seen)));
+    const nested = Object.entries(object).flatMap(([key, value]) => key === 'verification' ? [] : collectVerificationRecords(value, seen));
     return [...records, ...nested];
 }
 function uniqueRecords(records) {
@@ -359,7 +359,12 @@ export async function linkDomain(input) {
     const zone = await resolveZone(provider, plan.zoneDomain);
     reportProgress(input, 'vercel:get-target', 'Reading Vercel DNS target');
     const cname = plan.isApex ? undefined : await vercel.getRecommendedCname(plan.domain);
-    const baseRecord = planBaseRecord({ isApex: plan.isApex, provider: plan.provider, recordName: plan.recordName, cname });
+    const baseRecord = planBaseRecord({
+        isApex: plan.isApex,
+        provider: plan.provider,
+        recordName: plan.recordName,
+        cname,
+    });
     const forceDns = await resolveDnsForce(input, { baseRecord, plan, provider, zone });
     reportProgress(input, 'vercel:add-domain', 'Adding domain to Vercel');
     const addResult = await vercel.addDomainToProject(plan.project, plan.domain, { force: input.force });
@@ -376,7 +381,9 @@ export async function linkDomain(input) {
     const dnsResult = await provider.applyChanges(zone, dnsPlan, { force: forceDns });
     const shouldWait = input.wait ?? true;
     if (shouldWait) {
-        reportProgress(input, 'dns:wait', verificationDnsRecords.length > 0 ? 'DNS records saved; asking Vercel to verify ownership' : 'DNS records saved; asking Vercel to verify');
+        reportProgress(input, 'dns:wait', verificationDnsRecords.length > 0
+            ? 'DNS records saved; asking Vercel to verify ownership'
+            : 'DNS records saved; asking Vercel to verify');
     }
     const waitResult = shouldWait
         ? await waitForVercelDomainReady({

package/dist/lib/point-domain.d.ts

@@ -0,0 +1,50 @@
+import { type ResolvedDnsTarget } from './domain-provider.js';
+import { type DnsOverrideWarning } from './link-domain.js';
+import type { DnsProvider, DnsRecordInput } from './providers/types.js';
+export type PointRecordType = 'A' | 'AAAA' | 'CNAME';
+export interface PointDomainInput {
+    account?: string;
+    domain: string;
+    dryRun?: boolean;
+    force?: boolean;
+    provider?: string;
+    recordType?: PointRecordType;
+    target: string;
+    timeoutSeconds?: number;
+    ttl?: number;
+    wait?: boolean;
+    confirmDnsOverride?: (warning: DnsOverrideWarning) => Promise<boolean>;
+    progress?: (message: string) => void;
+}
+export interface PointDomainResult {
+    account: string;
+    accountInferred: boolean;
+    domain: string;
+    dryRun: boolean;
+    isDefaultAccount: boolean;
+    provider: string;
+    providerInferred: boolean;
+    propagated: boolean;
+    record: DnsRecordInput;
+    skipped: DnsRecordInput[];
+    updated: boolean;
+    zoneDomain: string;
+}
+interface PointDomainDependencies {
+    createProvider: (provider: string, opts: {
+        account?: string;
+    }) => Promise<DnsProvider>;
+    resolve4?: (hostname: string) => Promise<string[]>;
+    resolve6?: (hostname: string) => Promise<string[]>;
+    resolveCname?: (hostname: string) => Promise<string[]>;
+    resolveTarget: (input: Pick<PointDomainInput, 'account' | 'domain' | 'provider'>) => Promise<ResolvedDnsTarget>;
+}
+export declare function createPointRecord(input: {
+    provider: string;
+    recordName: string;
+    recordType?: PointRecordType;
+    target: string;
+    ttl?: number;
+}): DnsRecordInput;
+export declare function pointDomain(input: PointDomainInput, dependencies?: PointDomainDependencies): Promise<PointDomainResult>;
+export {};