doomain 0.1.22 → 0.1.24

package/README.md

@@ -438,7 +438,7 @@ The API checks configured provider accounts, tolerates failures from individual
 
 ## Command Reference
 
-Run `doomain help <command>` for oclif-generated help.
+Use `doomain --help`, `doomain -h`, or `doomain help <command>` for oclif-generated help. Use `doomain --version`, `doomain -v`, or `doomain version` to print the installed version.
 
 ### `doomain`
 

package/dist/commands/auth/clerk.js

@@ -2,6 +2,7 @@ import * as p from '@clack/prompts';
 import { Command, Flags } from '@oclif/core';
 import { createClerkPlatformClient } from '../../lib/clerk.js';
 import { getConfigPath, maskSecret, updateConfig } from '../../lib/config.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { jsonFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 function value(input, message) {
@@ -42,8 +43,8 @@ export default class AuthClerk extends Command {
             appId = value(appId, 'Missing Clerk application id. Pass --app or set CLERK_APPLICATION_ID.');
             if (!platformApiKey.startsWith('ak_'))
                 throw new Error('Clerk Platform API keys must start with ak_.');
-            await createClerkPlatformClient({ platformApiKey }).fetchApplication(appId);
-            await updateConfig((config) => ({ ...config, clerk: { appId, platformApiKey } }));
+            await runDoomainEffect(createClerkPlatformClient({ platformApiKey }, { transportErrorCode: 'CLERK_AUTH_FAILED' }).fetchApplication(appId));
+            await runDoomainEffect(updateConfig((config) => ({ ...config, clerk: { appId, platformApiKey } }), 'CLERK_AUTH_FAILED'));
             out.result({ clerk: { appId, platformApiKey: maskSecret(platformApiKey) }, configPath: getConfigPath() });
             out.success(`Clerk credentials saved to ${getConfigPath()}.`);
         }

package/dist/commands/auth/logout/clerk.js

@@ -1,5 +1,6 @@
 import { Command } from '@oclif/core';
 import { getConfigPath, updateConfig } from '../../../lib/config.js';
+import { runDoomainEffect } from '../../../lib/effect.js';
 import { jsonFlag } from '../../../lib/flags.js';
 import { createOutput, outputError } from '../../../lib/output.js';
 export default class AuthLogoutClerk extends Command {
@@ -10,11 +11,11 @@ export default class AuthLogoutClerk extends Command {
         const out = createOutput({ json: flags.json });
         try {
             let removed = false;
-            await updateConfig((config) => {
+            await runDoomainEffect(updateConfig((config) => {
                 removed = config.clerk !== undefined;
                 const { clerk: _clerk, ...next } = config;
                 return next;
-            });
+            }, 'MISSING_CREDENTIALS'));
             const environmentOverrides = ['CLERK_PLATFORM_API_KEY', 'CLERK_APPLICATION_ID'].filter((key) => process.env[key]);
             out.result({ configPath: getConfigPath(), environmentOverrides, removed, service: 'clerk' });
             if (environmentOverrides.length > 0)

package/dist/commands/auth/logout/vercel.js

@@ -1,5 +1,6 @@
 import { Command } from '@oclif/core';
 import { getConfigPath, updateConfig } from '../../../lib/config.js';
+import { runDoomainEffect } from '../../../lib/effect.js';
 import { jsonFlag } from '../../../lib/flags.js';
 import { createOutput, outputError } from '../../../lib/output.js';
 function envOverrides() {
@@ -16,11 +17,11 @@ export default class AuthLogoutVercel extends Command {
         const out = createOutput({ json: flags.json });
         try {
             let removed = false;
-            await updateConfig((config) => {
+            await runDoomainEffect(updateConfig((config) => {
                 removed = config.vercel !== undefined;
                 const { vercel: _vercel, ...next } = config;
                 return next;
-            });
+            }, 'MISSING_CREDENTIALS'));
             const overrides = envOverrides();
             out.result({ configPath: getConfigPath(), environmentOverrides: overrides, removed, service: 'vercel' });
             if (overrides.length > 0)

package/dist/commands/auth/vercel.js

@@ -1,6 +1,7 @@
 import * as p from '@clack/prompts';
 import { Command, Flags } from '@oclif/core';
 import { getConfigPath, maskSecret, updateConfig } from '../../lib/config.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { jsonFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { createVercelClient } from '../../lib/vercel.js';
@@ -61,7 +62,7 @@ export default class AuthVercel extends Command {
         try {
             let token = flags.token;
             let teamId = flags['team-id'] || process.env.VERCEL_TEAM_ID?.trim() || undefined;
-            const globalTokens = token ? [] : await listGlobalVercelTokens();
+            const globalTokens = token ? [] : await runDoomainEffect(listGlobalVercelTokens());
             if (!token) {
                 if (out.json) {
                     token = globalTokens[0]?.token;
@@ -76,7 +77,7 @@ export default class AuthVercel extends Command {
             if (!out.json && teamId === undefined) {
                 const spinner = p.spinner();
                 spinner.start('Loading Vercel teams');
-                const teams = await createVercelClient({ token }).listTeams();
+                const teams = await runDoomainEffect(createVercelClient({ token }, { transportErrorCode: 'MISSING_CREDENTIALS' }).listTeams());
                 spinner.stop(`Loaded ${teams.length} Vercel team${teams.length === 1 ? '' : 's'}`);
                 const selected = await p.select({
                     message: 'Select Vercel account/team',
@@ -91,10 +92,10 @@ export default class AuthVercel extends Command {
                 }
                 teamId = selected === PERSONAL_ACCOUNT ? undefined : selected;
             }
-            await updateConfig((config) => ({
+            await runDoomainEffect(updateConfig((config) => ({
                 ...config,
                 vercel: { token, teamId },
-            }));
+            }), 'MISSING_CREDENTIALS'));
             out.result({ configPath: getConfigPath(), vercel: { token: maskSecret(token), teamId } });
             out.success(`Vercel credentials saved to ${getConfigPath()}.`);
         }

package/dist/commands/clerk/domains/add.js

@@ -1,6 +1,7 @@
 import * as p from '@clack/prompts';
 import { Args, Command, Flags } from '@oclif/core';
 import { addClerkProductionDomain } from '../../../lib/clerk-domain.js';
+import { runDoomainEffect } from '../../../lib/effect.js';
 import { accountFlag, jsonFlag, providerFlag } from '../../../lib/flags.js';
 import { createOutput, outputError } from '../../../lib/output.js';
 function recordLine(record) {
@@ -61,7 +62,7 @@ export default class ClerkDomainsAdd extends Command {
             }
             spinner = out.spinner();
             spinner.start(flags['dry-run'] ? 'Checking Clerk production setup' : 'Creating Clerk production setup');
-            const result = await addClerkProductionDomain({
+            const result = await runDoomainEffect(addClerkProductionDomain({
                 account: flags.account,
                 app: flags.app,
                 confirmDnsOverride: out.json
@@ -81,7 +82,7 @@ export default class ClerkDomainsAdd extends Command {
                 provider: flags.provider,
                 timeoutSeconds: flags.timeout,
                 wait: flags.wait,
-            });
+            }));
             spinner.stop(flags['dry-run'] ? 'Clerk production setup is available' : 'Clerk production domain configured');
             out.result(result);
             if (!out.json) {

package/dist/commands/dns/diagnose.js

@@ -1,5 +1,6 @@
 import { Args, Command, Flags } from '@oclif/core';
 import { diagnoseDns } from '../../lib/diagnose-dns.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { accountFlag, jsonFlag, providerFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 export default class DnsDiagnose extends Command {
@@ -24,13 +25,13 @@ export default class DnsDiagnose extends Command {
         const spinner = out.json ? undefined : out.spinner();
         try {
             spinner?.start(`Diagnosing ${args.domain}`);
-            const result = await diagnoseDns({
+            const result = await runDoomainEffect(diagnoseDns({
                 account: flags.account,
                 domain: args.domain,
                 provider: flags.provider,
                 recordType: flags.type,
                 target: flags.target,
-            });
+            }));
             spinner?.stop('DNS diagnosis complete');
             out.result(result);
             out.info(`Provider: ${result.provider}/${result.account} (${result.zoneDomain})`);

package/dist/commands/dns/point.js

@@ -1,6 +1,7 @@
 import * as p from '@clack/prompts';
 import { Args, Command, Flags } from '@oclif/core';
 import { normalizeDnsValue } from '../../lib/dns-records.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { accountFlag, jsonFlag, providerFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { pointDomain } from '../../lib/point-domain.js';
@@ -97,14 +98,17 @@ export default class DnsPoint extends Command {
                 spinner = out.spinner();
                 spinner.start(`Pointing ${args.domain}`);
             }
-            const result = await pointDomain({
+            const result = await runDoomainEffect(pointDomain({
                 account: flags.account,
                 confirmDnsOverride: out.json
                     ? undefined
                     : async (warning) => {
                         spinner?.stop('Existing DNS target found');
                         p.note(conflictNote(warning), 'DNS already points elsewhere');
-                        const confirmed = await p.confirm({ message: `Override DNS for ${warning.domain}?`, initialValue: false });
+                        const confirmed = await p.confirm({
+                            message: `Override DNS for ${warning.domain}?`,
+                            initialValue: false,
+                        });
                         if (confirmed === true)
                             spinner?.start(`Pointing ${warning.domain}`);
                         return confirmed === true;
@@ -119,7 +123,7 @@ export default class DnsPoint extends Command {
                 timeoutSeconds: flags.timeout,
                 ttl: flags.ttl,
                 wait: flags.wait,
-            });
+            }));
             if (flags['dry-run']) {
                 out.result(result);
                 if (!out.json)

package/dist/commands/dns/remove.js

@@ -1,5 +1,6 @@
 import * as p from '@clack/prompts';
 import { Args, Command, Flags } from '@oclif/core';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { accountFlag, jsonFlag, providerFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { removeDomain } from '../../lib/remove-domain.js';
@@ -36,7 +37,7 @@ export default class DnsRemove extends Command {
         const spinner = flags['dry-run'] || out.json ? undefined : out.spinner();
         try {
             spinner?.start(`Inspecting ${args.domain}`);
-            const result = await removeDomain({
+            const result = await runDoomainEffect(removeDomain({
                 account: flags.account,
                 allMatching: flags['all-matching'],
                 confirmMultiple: out.json
@@ -58,7 +59,7 @@ export default class DnsRemove extends Command {
                 provider: flags.provider,
                 recordType: flags.type,
                 value: flags.value,
-            });
+            }));
             spinner?.stop(result.removed === 0 ? 'No matching records found' : 'DNS records removed');
             out.result(result);
             if (flags['dry-run'] && !out.json)

package/dist/commands/domains/find.js

@@ -1,5 +1,6 @@
 import { Args, Command } from '@oclif/core';
-import { findDomainProvider } from '../../lib/domain-provider.js';
+import { findDomainProviderEffect } from '../../lib/domain-provider.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { DoomainError } from '../../lib/errors.js';
 import { accountFlag, domainFlag, jsonFlag, providerFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
@@ -26,7 +27,7 @@ export default class DomainsFind extends Command {
             const domain = flags.domain ?? args.domain;
             if (!domain)
                 throw new DoomainError('MISSING_ARGUMENT', 'Domain is required. Pass it as an argument or use --domain.');
-            const result = await findDomainProvider({ account: flags.account, domain, provider: flags.provider });
+            const result = await runDoomainEffect(findDomainProviderEffect({ account: flags.account, domain, provider: flags.provider }));
             const account = result.isDefaultAccount ? result.provider : `${result.provider}/${result.account}`;
             out.info(`${result.domain} is managed by ${account} in DNS zone ${result.zoneDomain}.`);
             for (const warning of result.warnings) {

package/dist/commands/domains/list.js

@@ -1,18 +1,24 @@
 import { Command } from '@oclif/core';
+import { Effect } from 'effect';
 import { loadConfig } from '../../lib/config.js';
+import { runDoomainEffect, trySync } from '../../lib/effect.js';
+import { DoomainError } from '../../lib/errors.js';
 import { accountFlag, domainFlag, jsonFlag, providerFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { DEFAULT_PROVIDER_ACCOUNT, isDefaultProviderAccount, listConfiguredProviderAccounts, normalizeProviderAccount, } from '../../lib/providers/core/config.js';
 import { createProvider, getProviderDefinition } from '../../lib/providers/registry.js';
 import { normalizeDomain } from '../../lib/validate.js';
-async function resolveZones(provider, domain) {
+function resolveZones(provider, domain) {
     if (!domain)
         return provider.listZones();
-    const normalized = normalizeDomain(domain);
-    const zone = await provider.getZone(normalized);
-    if (!zone)
-        throw new Error(`${provider.name} does not have a DNS zone for ${normalized}.`);
-    return [zone];
+    return Effect.gen(function* () {
+        const normalized = yield* trySync(() => normalizeDomain(domain), 'DOMAIN_LINK_FAILED');
+        const zone = yield* provider.getZone(normalized);
+        if (!zone) {
+            return yield* Effect.fail(new DoomainError('DOMAIN_LINK_FAILED', `${provider.name} does not have a DNS zone for ${normalized}.`));
+        }
+        return [zone];
+    });
 }
 export default class DomainsList extends Command {
     static description = 'List DNS zones and records for a provider.';
@@ -26,36 +32,43 @@ export default class DomainsList extends Command {
         const { flags } = await this.parse(DomainsList);
         const out = createOutput({ json: flags.json });
         try {
-            const config = await loadConfig();
-            const providerId = flags.provider ?? process.env.DOOMAIN_PROVIDER ?? config.defaults?.provider ?? 'spaceship';
-            const definition = getProviderDefinition(providerId);
-            const account = flags.account ? normalizeProviderAccount(flags.account) : undefined;
-            const accounts = account
-                ? [{ account, isDefaultAccount: isDefaultProviderAccount(account), providerId: definition.id }]
-                : listConfiguredProviderAccounts(config, definition);
-            const selectedAccounts = accounts.length > 0
-                ? accounts
-                : [{ account: DEFAULT_PROVIDER_ACCOUNT, isDefaultAccount: true, providerId: definition.id }];
-            const results = [];
-            for (const selectedAccount of selectedAccounts) {
-                const provider = await createProvider(definition.id, { account: selectedAccount.account });
-                const zones = await resolveZones(provider, flags.domain);
-                for (const zone of zones) {
-                    const records = await provider.listRecords(zone);
-                    results.push({
+            const { definition, results, selectedAccounts } = await runDoomainEffect(Effect.gen(function* () {
+                const config = yield* loadConfig();
+                const providerId = flags.provider ?? process.env.DOOMAIN_PROVIDER ?? config.defaults?.provider ?? 'spaceship';
+                const definition = yield* trySync(() => getProviderDefinition(providerId), 'DOMAIN_LINK_FAILED');
+                const account = flags.account
+                    ? yield* trySync(() => normalizeProviderAccount(flags.account), 'DOMAIN_LINK_FAILED')
+                    : undefined;
+                const accounts = account
+                    ? [{ account, isDefaultAccount: isDefaultProviderAccount(account), providerId: definition.id }]
+                    : yield* trySync(() => listConfiguredProviderAccounts(config, definition), 'DOMAIN_LINK_FAILED');
+                const selectedAccounts = accounts.length > 0
+                    ? accounts
+                    : [{ account: DEFAULT_PROVIDER_ACCOUNT, isDefaultAccount: true, providerId: definition.id }];
+                const results = [];
+                for (const selectedAccount of selectedAccounts) {
+                    const provider = yield* createProvider(definition.id, {
                         account: selectedAccount.account,
-                        isDefaultAccount: selectedAccount.isDefaultAccount,
-                        provider: provider.id,
-                        records,
-                        zone,
+                        transportErrorCode: 'DOMAIN_LINK_FAILED',
                     });
-                    const accountLabel = selectedAccount.isDefaultAccount
-                        ? provider.id
-                        : `${provider.id}/${selectedAccount.account}`;
-                    out.info(`${zone.name} (${records.length} records) via ${accountLabel}`);
-                    for (const record of records)
-                        out.info(`  ${record.type} ${record.name} -> ${record.value}`);
+                    const zones = yield* resolveZones(provider, flags.domain);
+                    for (const zone of zones) {
+                        results.push({
+                            account: selectedAccount.account,
+                            isDefaultAccount: selectedAccount.isDefaultAccount,
+                            provider: provider.id,
+                            records: yield* provider.listRecords(zone),
+                            zone,
+                        });
+                    }
                 }
+                return { definition, results, selectedAccounts };
+            }));
+            for (const result of results) {
+                const accountLabel = result.isDefaultAccount ? result.provider : `${result.provider}/${result.account}`;
+                out.info(`${result.zone.name} (${result.records.length} records) via ${accountLabel}`);
+                for (const record of result.records)
+                    out.info(`  ${record.type} ${record.name} -> ${record.value}`);
             }
             out.result({
                 ...(selectedAccounts.length === 1

package/dist/commands/link.js

@@ -1,5 +1,6 @@
 import * as p from '@clack/prompts';
 import { Args, Command, Flags } from '@oclif/core';
+import { runDoomainEffect } from '../lib/effect.js';
 import { accountFlag, apexFlag, domainFlag, jsonFlag, projectFlag, providerFlag, subdomainFlag } from '../lib/flags.js';
 import { linkDomain } from '../lib/link-domain.js';
 import { createOutput, outputError } from '../lib/output.js';
@@ -77,7 +78,7 @@ export default class Link extends Command {
         const domain = flags.domain ?? args.domain;
         try {
             if (flags['dry-run']) {
-                const result = await linkDomain({ ...flags, domain, dryRun: true, timeoutSeconds: flags.timeout });
+                const result = await runDoomainEffect(linkDomain({ ...flags, domain, dryRun: true, timeoutSeconds: flags.timeout }));
                 out.result(result);
                 if (!out.json) {
                     p.note(dryRunPreview(result), 'Dry run');
@@ -88,7 +89,7 @@ export default class Link extends Command {
             out.intro('Doomain');
             spinner = out.spinner();
             spinner.start('Linking Vercel project and domain');
-            const result = await linkDomain({
+            const result = await runDoomainEffect(linkDomain({
                 ...flags,
                 domain,
                 confirmDnsOverride: out.json
@@ -110,7 +111,7 @@ export default class Link extends Command {
                 dryRun: false,
                 progress: out.json ? undefined : ({ message }) => spinner?.message(message),
                 timeoutSeconds: flags.timeout,
-            });
+            }));
             spinner.stop(result.vercel.verified ? 'Domain linked and verified' : 'Domain linked');
             out.result(result);
             out.outro(result.vercel.verified

package/dist/commands/projects/list.js

@@ -1,4 +1,5 @@
 import { Command, Flags } from '@oclif/core';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { jsonFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { createVercelClient, resolveVercelConfig } from '../../lib/vercel.js';
@@ -12,8 +13,10 @@ export default class ProjectsList extends Command {
         const { flags } = await this.parse(ProjectsList);
         const out = createOutput({ json: flags.json });
         try {
-            const vercel = createVercelClient(await resolveVercelConfig());
-            const projects = await vercel.listProjects(flags.search);
+            const vercel = createVercelClient(await runDoomainEffect(resolveVercelConfig()), {
+                transportErrorCode: 'PROJECT_NOT_FOUND',
+            });
+            const projects = await runDoomainEffect(vercel.listProjects(flags.search));
             for (const project of projects)
                 out.info(`${project.name} (${project.id})`);
             out.result({ projects });

package/dist/commands/providers/connect.js

@@ -1,10 +1,12 @@
 import * as p from '@clack/prompts';
 import { Args, Command, Flags } from '@oclif/core';
 import { getConfigPath, loadConfig, maskSecret, updateConfig } from '../../lib/config.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { accountFlag, jsonFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { DEFAULT_PROVIDER_ACCOUNT, isDefaultProviderAccount, listConfiguredProviderAccounts, normalizeProviderAccount, providerAccountHasCredentials, withProviderAccountCredentials, } from '../../lib/providers/core/config.js';
 import { getProviderDefinition, listProviderDefinitions } from '../../lib/providers/registry.js';
+import { fetchPublicIp } from '../../lib/public-ip.js';
 function requireString(value, message) {
     if (typeof value === 'string' && value.trim())
         return value.trim();
@@ -25,23 +27,6 @@ function legacyFlagValue(flags, credential) {
     const value = flags[key];
     return typeof value === 'string' && value.trim() ? value.trim() : undefined;
 }
-async function fetchPublicIp() {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 2000);
-    try {
-        const response = await fetch('https://api.ipify.org', { signal: controller.signal });
-        if (!response.ok)
-            return undefined;
-        const ip = (await response.text()).trim();
-        return ip || undefined;
-    }
-    catch {
-        return undefined;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
 function credentialInitialValue(credential, detectedPublicIp) {
     if (credential.key !== 'clientIp')
         return undefined;
@@ -91,7 +76,7 @@ async function confirmProviderAccountOverwrite(definition, account) {
     return value;
 }
 async function promptProvider() {
-    const config = await loadConfig();
+    const config = await runDoomainEffect(loadConfig());
     const selected = await p.select({
         message: 'Choose DNS provider',
         options: listProviderDefinitions().map((definition) => ({
@@ -148,7 +133,7 @@ export default class ProvidersConnect extends Command {
             if (!account)
                 return;
             const isDefaultAccount = isDefaultProviderAccount(account);
-            const currentConfig = await loadConfig();
+            const currentConfig = await runDoomainEffect(loadConfig());
             if (!out.json && providerAccountHasCredentials(currentConfig, definition.id, account)) {
                 const overwrite = await confirmProviderAccountOverwrite(definition, account);
                 if (!overwrite)
@@ -156,7 +141,7 @@ export default class ProvidersConnect extends Command {
             }
             const passedCredentials = parseCredentialFlags(flags.credential);
             const credentials = {};
-            const detectedPublicIp = !out.json && usesClientIp(definition) ? await fetchPublicIp() : undefined;
+            const detectedPublicIp = !out.json && usesClientIp(definition) ? await runDoomainEffect(fetchPublicIp()) : undefined;
             if (!out.json)
                 showSetupGuide(definition, detectedPublicIp);
             for (const credential of definition.credentials) {
@@ -189,7 +174,13 @@ export default class ProvidersConnect extends Command {
             if (!flags['no-verify']) {
                 spinner = out.json ? undefined : out.spinner();
                 spinner?.start(`Verifying ${definition.displayName} credentials`);
-                const zones = await definition.create({ credentials, debug: process.env.DOOMAIN_DEBUG === '1' }).listZones();
+                const zones = await runDoomainEffect(definition
+                    .create({
+                    credentials,
+                    debug: process.env.DOOMAIN_DEBUG === '1',
+                    transportErrorCode: 'MISSING_CREDENTIALS',
+                })
+                    .listZones());
                 domainCount = zones.length;
                 spinner?.stop(`Verified ${definition.displayName} credentials and found ${domainCount} domain${domainCount === 1 ? '' : 's'}`);
                 spinner = undefined;
@@ -206,14 +197,14 @@ export default class ProvidersConnect extends Command {
                 }
                 setDefault = value;
             }
-            await updateConfig((config) => ({
+            await runDoomainEffect(updateConfig((config) => ({
                 ...config,
                 defaults: setDefault ? { ...config.defaults, provider: definition.id } : config.defaults,
                 providers: {
                     ...config.providers,
                     [definition.id]: withProviderAccountCredentials(config.providers?.[definition.id], account, credentials),
                 },
-            }));
+            }), 'MISSING_CREDENTIALS'));
             out.result({
                 account,
                 configPath: getConfigPath(),

package/dist/commands/providers/disconnect.js

@@ -1,5 +1,6 @@
 import { Args, Command } from '@oclif/core';
 import { getConfigPath, updateConfig } from '../../lib/config.js';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { accountFlag, jsonFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { isDefaultProviderAccount, normalizeProviderAccount } from '../../lib/providers/core/config.js';
@@ -28,7 +29,7 @@ export default class ProvidersDisconnect extends Command {
             const definition = getProviderDefinition(args.provider);
             const account = flags.account ? normalizeProviderAccount(flags.account) : undefined;
             let removed = false;
-            await updateConfig((config) => {
+            await runDoomainEffect(updateConfig((config) => {
                 const providers = { ...config.providers };
                 const provider = providers[definition.id];
                 if (!account) {
@@ -71,7 +72,7 @@ export default class ProvidersDisconnect extends Command {
                     defaults: Object.keys(defaults).length > 0 ? defaults : undefined,
                     providers: Object.keys(providers).length > 0 ? providers : undefined,
                 };
-            });
+            }, 'PROVIDER_NOT_FOUND'));
             const overrides = envOverrides(definition);
             out.result({
                 account,

package/dist/commands/providers/status.js

@@ -1,4 +1,5 @@
 import { Command, Flags } from '@oclif/core';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { jsonFlag } from '../../lib/flags.js';
 import { createOutput } from '../../lib/output.js';
 import { listProviderStatuses } from '../../lib/providers/status.js';
@@ -22,7 +23,7 @@ export default class ProvidersStatus extends Command {
         const out = createOutput({ json: flags.json });
         const spinner = out.json || flags['no-verify'] ? undefined : out.spinner();
         spinner?.start('Checking DNS providers');
-        const providers = await listProviderStatuses({ verify: !flags['no-verify'] });
+        const providers = await runDoomainEffect(listProviderStatuses({ verify: !flags['no-verify'] }));
         spinner?.stop('Checked DNS providers');
         for (const provider of providers) {
             out.info(`${provider.displayName} (${provider.accountLabel}) - ${formatStatus(provider)}${provider.isPreferredProvider ? ' [preferred provider]' : ''}`);

package/dist/commands/providers/verify.js

@@ -1,4 +1,5 @@
 import { Args, Command } from '@oclif/core';
+import { runDoomainEffect } from '../../lib/effect.js';
 import { accountFlag, jsonFlag } from '../../lib/flags.js';
 import { createOutput, outputError } from '../../lib/output.js';
 import { isDefaultProviderAccount, normalizeProviderAccount } from '../../lib/providers/core/config.js';
@@ -17,8 +18,8 @@ export default class ProvidersVerify extends Command {
         const out = createOutput({ json: flags.json });
         try {
             const account = normalizeProviderAccount(flags.account);
-            const provider = await createProvider(args.provider, { account });
-            const health = await provider.verifyCredentials();
+            const provider = await runDoomainEffect(createProvider(args.provider, { account, transportErrorCode: 'PROVIDER_AUTH_FAILED' }));
+            const health = await runDoomainEffect(provider.verifyCredentials());
             out.result({ account, health, isDefaultAccount: isDefaultProviderAccount(account), provider: provider.id });
             out.success(`${provider.name} credentials verified.`);
         }

package/dist/commands/schema.js

@@ -1,5 +1,6 @@
 import { Args, Command } from '@oclif/core';
 import { getCommandSchemaForAgents } from '../lib/command-schema.js';
+import { runDoomainEffect } from '../lib/effect.js';
 import { jsonFlag } from '../lib/flags.js';
 import { createOutput, outputError } from '../lib/output.js';
 export default class Schema extends Command {
@@ -14,7 +15,7 @@ export default class Schema extends Command {
         const { args, flags } = await this.parse(Schema);
         const out = createOutput({ json: flags.json });
         try {
-            const schema = await getCommandSchemaForAgents(args.command);
+            const schema = await runDoomainEffect(getCommandSchemaForAgents(args.command));
             if (!schema)
                 throw new Error(`Unknown command schema: ${args.command}`);
             if (!out.json)

package/dist/commands/update.js

@@ -1,4 +1,5 @@
 import { Command } from '@oclif/core';
+import { runDoomainEffect } from '../lib/effect.js';
 import { jsonFlag } from '../lib/flags.js';
 import { createOutput, outputError } from '../lib/output.js';
 import { installLatestVersion } from '../lib/self-update.js';
@@ -14,7 +15,7 @@ export default class Update extends Command {
         const spinner = out.spinner();
         try {
             spinner.start('Downloading the latest doomain version from npm');
-            const result = await installLatestVersion();
+            const result = await runDoomainEffect(installLatestVersion());
             spinner.stop('Installed the latest doomain version');
             out.result(result);
             out.success('Installed the latest doomain version from npm.');

package/dist/commands/verify.js

@@ -1,4 +1,5 @@
 import { Command } from '@oclif/core';
+import { runDoomainEffect } from '../lib/effect.js';
 import { apexFlag, domainFlag, jsonFlag, projectFlag, subdomainFlag } from '../lib/flags.js';
 import { detectLocalVercelProject } from '../lib/local-vercel.js';
 import { createOutput, outputError } from '../lib/output.js';
@@ -23,8 +24,10 @@ export default class Verify extends Command {
             const project = flags.project ?? detectLocalVercelProject()?.projectId;
             if (!project)
                 throw new Error('Missing --project and no local .vercel/project.json was found.');
-            const vercel = createVercelClient(await resolveVercelConfig());
-            const result = await vercel.verifyProjectDomain(project, target.fullDomain);
+            const vercel = createVercelClient(await runDoomainEffect(resolveVercelConfig()), {
+                transportErrorCode: 'DOMAIN_VERIFY_FAILED',
+            });
+            const result = await runDoomainEffect(vercel.verifyProjectDomain(project, target.fullDomain));
             out.result({ project, domain: target.fullDomain, vercel: result });
             out.success(`Verification requested for ${target.fullDomain}.`);
         }

package/dist/commands/version.d.ts

@@ -0,0 +1,5 @@
+import { Command } from '@oclif/core';
+export default class Version extends Command {
+    static description: string;
+    run(): Promise<void>;
+}

package/dist/commands/version.js

@@ -0,0 +1,8 @@
+import { Command } from '@oclif/core';
+export default class Version extends Command {
+    static description = 'Display the installed doomain version.';
+    async run() {
+        await this.parse(Version);
+        this.log(this.config.userAgent);
+    }
+}