@gravity-rail/cli 0.33.1 → 0.35.0

package/dist/gr.js

@@ -3230,7 +3230,7 @@ var init_libphonenumber_js = __esm({
   }
 });
 
-// ../sdk/dist/chunk-ZGXE5SVN.js
+// ../sdk/dist/chunk-3OQ6HJ3I.js
 function sanitizePhoneForBackend(phoneNumber) {
   try {
     let parsed = parsePhoneNumber4(phoneNumber);
@@ -4134,6 +4134,8 @@ function bindCommunicationsMethods(target, phoneNumbers, inboxes, notificationRu
   target.getChatEmails = inboxes.getChatEmails.bind(inboxes);
   target.replyToEmail = inboxes.replyToEmail.bind(inboxes);
   target.sendInboxEmail = inboxes.sendInboxEmail.bind(inboxes);
+  target.previewInboxEmail = inboxes.previewInboxEmail.bind(inboxes);
+  target.previewEmailReply = inboxes.previewEmailReply.bind(inboxes);
   target.getNotificationRules = notificationRules.getNotificationRules.bind(notificationRules);
   target.createNotificationRule = notificationRules.createNotificationRule.bind(notificationRules);
   target.updateNotificationRule = notificationRules.updateNotificationRule.bind(notificationRules);
@@ -4440,6 +4442,8 @@ function bindOrgMethods(target, org) {
   target.enableOrgDomainSite = org.enableOrgDomainSite.bind(org);
   target.getOrgDomainSite = org.getOrgDomainSite.bind(org);
   target.preflightOrgDomainSite = org.preflightOrgDomainSite.bind(org);
+  target.createOrgDomainSiteChildHost = org.createOrgDomainSiteChildHost.bind(org);
+  target.listOrgDomainSiteChildHosts = org.listOrgDomainSiteChildHosts.bind(org);
   target.verifyOrgDomainSite = org.verifyOrgDomainSite.bind(org);
   target.disableOrgDomainSite = org.disableOrgDomainSite.bind(org);
   target.getBusinessProfile = org.getBusinessProfile.bind(org);
@@ -4607,8 +4611,8 @@ function getRevisionState(workflow, revision) {
   };
 }
 var AbilitiesApi, AccessGrantsApi, AgentTasksApi, AgentsApi, AIModelsApi, ApiKeysApi, AppsApi, AssignmentsApi, VoiceApi, AuthApi, BuildersApi, CalendarsApi, CallsApi, CELApi, ChatsApi, ConfluenceApi, CustomToolkitsApi, DataTypesApi, DiscordBotsApi, SlackAppsApi, EventsApi, FeaturesApi, FhirConnectionsApi, InboundFaxStatus, DocumoFaxApi, HealthieApi, FilesApi, InboxesApi, InquiriesApi, AppConnectionsApi, McpServersApi, MemberImportValidationError, MembersApi, MondayIntegrationApi, NotificationRulesApi, OperatorApi, OrgApi, OAuthConnectionsApi, OAuthApi, PhoneNumbersApi, PronunciationsApi, PromptsApi, PersonasApi, QueriesApi, QualificationsApi, ReportsApi, SalesforceApi, ConnectionSyncApi, HubspotApi, SitesApi, SubscriptionsApi, SupportRequestsApi, CustomersApi, ResellersApi, SupervisorsApi, TasksApi, TemplatesApi, ToolkitsApi, JourneysApi, WorkflowsApi, WorkflowNotesApi, EventRuleObjectType, EventRuleEventType, EventRuleActionType, DriverMode, WorkspaceInvitationsApi, WorkspacesApi, DashboardsApi, DevicesApi, TeamsAppsApi, ExperimentsApi, PatientSyncConnectionsApi, ActivityApi, MotdApi, InterventionRequestsApi, MetricsApi, ProjectsApi, TrackedLinksApi, WORKSPACE_METHOD_NAMES, WORKSPACE_METHOD_NAME_SET, GravityRailClient, WIDGET_SLUGS, CHAT_TYPES, BUILTIN_ASSISTANT_CHAT_TYPES, MEMBER_AGENT_CHAT_TYPES, ActivityGrain, ActivityGroupBy, ActivityOpenItemOrder, ActivityWindowBasis;
-var init_chunk_ZGXE5SVN = __esm({
-  "../sdk/dist/chunk-ZGXE5SVN.js"() {
+var init_chunk_3OQ6HJ3I = __esm({
+  "../sdk/dist/chunk-3OQ6HJ3I.js"() {
     init_chunk_P2E6LU7I();
     init_libphonenumber_js();
     AbilitiesApi = class extends BaseApiClient {
@@ -5710,8 +5714,14 @@ var init_chunk_ZGXE5SVN = __esm({
         });
       }
       /** List all calendar event types in the workspace. */
-      async getEventTypes(wid) {
-        return this.fetch(`w/${wid}/calendar-event-types`);
+      async getEventTypes(wid, options) {
+        const params = new URLSearchParams();
+        if (options?.page !== void 0) params.set("page", String(options.page));
+        if (options?.pageSize !== void 0) params.set("pageSize", String(options.pageSize));
+        const query = params.size ? `?${params}` : "";
+        return this.fetch(
+          `w/${wid}/calendar-event-types${query}`
+        );
       }
       /** Get a single calendar event type by ID. */
       async getEventType(wid, id) {
@@ -6645,17 +6655,17 @@ var init_chunk_ZGXE5SVN = __esm({
         return this.fetch(`w/${wid}/data-types/records/${recordId}`);
       }
       /** Create a new data record under the specified data type. */
-      async createDataRecord(wid, dataTypeId, record) {
+      async createDataRecord(wid, dataTypeId, record2) {
         return this.fetch(`w/${wid}/data-types/${dataTypeId}/records`, {
           method: "POST",
-          body: JSON.stringify(record)
+          body: JSON.stringify(record2)
         });
       }
       /** Update an existing data record's field values. */
-      async updateDataRecord(wid, dataTypeId, recordId, record) {
+      async updateDataRecord(wid, dataTypeId, recordId, record2) {
         return this.fetch(`w/${wid}/data-types/${dataTypeId}/records/${recordId}`, {
           method: "PUT",
-          body: JSON.stringify(record)
+          body: JSON.stringify(record2)
         });
       }
       /** Delete a data record by ID. */
@@ -8012,6 +8022,32 @@ var init_chunk_ZGXE5SVN = __esm({
           body: JSON.stringify(body)
         });
       }
+      /**
+       * Render a compose or `email:send` template draft through the same
+       * outbound body-assembly seam (footer, layout wrapper, markdown fallback)
+       * as sending. Preview excludes delivery-specific MIME transformations,
+       * including inline-image content IDs.
+       */
+      async previewInboxEmail(wid, inboxId, body) {
+        return this.fetch(`w/${wid}/inboxes/${inboxId}/emails/preview`, {
+          method: "POST",
+          body: JSON.stringify(body)
+        });
+      }
+      /**
+       * Render a reply draft, including its quote, through outbound body
+       * assembly. Preview excludes delivery-specific MIME transformations,
+       * including inline-image content IDs.
+       */
+      async previewEmailReply(wid, inboxId, emailId, body) {
+        return this.fetch(
+          `w/${wid}/inboxes/${inboxId}/emails/${emailId}/reply-preview`,
+          {
+            method: "POST",
+            body: JSON.stringify(body)
+          }
+        );
+      }
       /**
        * Make a stored email's sender a Member of this workspace.
        *
@@ -9598,10 +9634,19 @@ var init_chunk_ZGXE5SVN = __esm({
       }
       /**
        * Enable custom site routing for a verified org domain.
+       *
+       * Pass `{ childHosting: true }` to enable the domain as a **parent**
+       * instead: it publishes one `*.<domain>` wildcard CNAME, serves nothing
+       * at its own name, and hosts are added beneath it afterwards. The mode
+       * is fixed at enable — disable and re-enable to change it.
+       *
+       * The request always carries a JSON body, `{}` by default: the route
+       * requires one as a CSRF barrier.
        */
-      async enableOrgDomainSite(orgIdOrUuid, domainUuid) {
+      async enableOrgDomainSite(orgIdOrUuid, domainUuid, options = {}) {
         return this.fetch(`o/${orgIdOrUuid}/domains/${domainUuid}/site`, {
-          method: "POST"
+          method: "POST",
+          body: JSON.stringify(options)
         });
       }
       /**
@@ -9613,12 +9658,15 @@ var init_chunk_ZGXE5SVN = __esm({
       /**
        * Pre-enable DNS check: is the site CNAME resolving to the routing
        * endpoint yet? Pure DNS — consumes no enable budget.
+       *
+       * Pass `{ childHosting: true }` to check the mode you intend to enable
+       * in: the wildcard is probed instead of the domain's own CNAME.
        */
-      async preflightOrgDomainSite(orgIdOrUuid, domainUuid) {
+      async preflightOrgDomainSite(orgIdOrUuid, domainUuid, options = {}) {
         return this.fetch(
           `o/${orgIdOrUuid}/domains/${domainUuid}/site/preflight`,
-          // Empty JSON body: the route requires one as a CSRF barrier.
-          { method: "POST", body: JSON.stringify({}) }
+          // JSON body, `{}` by default: the route requires one as a CSRF barrier.
+          { method: "POST", body: JSON.stringify(options) }
         );
       }
       /**
@@ -9630,6 +9678,27 @@ var init_chunk_ZGXE5SVN = __esm({
           { method: "POST" }
         );
       }
+      /**
+       * Create one child host beneath a child-hosting parent domain.
+       *
+       * The child gets its own CloudFront tenant and managed certificate and
+       * needs no customer DNS: the parent's wildcard CNAME already routes it.
+       */
+      async createOrgDomainSiteChildHost(orgIdOrUuid, parentDomainUuid, request) {
+        return this.fetch(
+          `o/${orgIdOrUuid}/domains/${parentDomainUuid}/site/children`,
+          { method: "POST", body: JSON.stringify(request) }
+        );
+      }
+      /**
+       * List the child hosts beneath a child-hosting parent domain, with live
+       * per-host status.
+       */
+      async listOrgDomainSiteChildHosts(orgIdOrUuid, parentDomainUuid) {
+        return this.fetch(
+          `o/${orgIdOrUuid}/domains/${parentDomainUuid}/site/children`
+        );
+      }
       /**
        * Disable custom site routing for an org domain.
        */
@@ -14696,10 +14765,12 @@ var init_chunk_ZGXE5SVN = __esm({
       "markEmailAsUnread",
       "markNotificationAsRead",
       "mergeMemberRoles",
+      "previewEmailReply",
       "previewImportMembers",
       "previewMemberWorkflowVoice",
       "previewRenameFieldSlug",
       "previewImportWorkspace",
+      "previewInboxEmail",
       "previewRoutineVoiceReadiness",
       "previewRoutineWorkflowAccess",
       "previewSchedule",
@@ -15317,6 +15388,8 @@ var init_chunk_ZGXE5SVN = __esm({
       enableOrgDomainSite;
       getOrgDomainSite;
       preflightOrgDomainSite;
+      createOrgDomainSiteChildHost;
+      listOrgDomainSiteChildHosts;
       verifyOrgDomainSite;
       disableOrgDomainSite;
       getBusinessProfile;
@@ -15640,6 +15713,8 @@ var init_chunk_ZGXE5SVN = __esm({
       getChatEmails;
       replyToEmail;
       sendInboxEmail;
+      previewInboxEmail;
+      previewEmailReply;
       getNotificationRules;
       createNotificationRule;
       updateNotificationRule;
@@ -16212,7 +16287,7 @@ var init_chunk_HRUMZ46V = __esm({
 var SEARCHABLE_EVENT_RULE_SOURCE_FIELDS, ActivityEventType, EntityKind;
 var init_dist = __esm({
   "../sdk/dist/index.js"() {
-    init_chunk_ZGXE5SVN();
+    init_chunk_3OQ6HJ3I();
     init_chunk_HRUMZ46V();
     init_chunk_P2E6LU7I();
     SEARCHABLE_EVENT_RULE_SOURCE_FIELDS = [
@@ -20949,7 +21024,6 @@ function findDef(defs, arg) {
 
 // src/lib/global-options.ts
 init_errors();
-var MAX_COMMAND_WORDS = 4;
 function parseGlobalOptions(argv, spec) {
   let env = spec.defaultEnv;
   let profile;
@@ -21016,9 +21090,6 @@ function parseGlobalOptions(argv, spec) {
       rest.push(arg);
     }
   }
-  while (commandWords.length > MAX_COMMAND_WORDS) {
-    rest.unshift(commandWords.pop());
-  }
   return {
     opts: { env, profile, apiUrl, outputFormat, jq, verbose, allowWrite },
     commandWords,
@@ -21486,7 +21557,7 @@ var CommandRegistry = class {
   /** Resolve command words to a CommandDef using longest-match.
    *  Supports {param} path segments that match any word and extract as pathParams. */
   resolve(words) {
-    for (let len = Math.min(words.length, 4); len >= 1; len--) {
+    for (let len = words.length; len >= 1; len--) {
       const key = words.slice(0, len).join(" ");
       const cmd = this.commands.get(key);
       if (cmd) {
@@ -24522,8 +24593,8 @@ function parseBindingsFile(payload) {
       if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
         throw new CLIError(`${where}: each binding must be a JSON object.`);
       }
-      const record = entry;
-      const value = record.value;
+      const record2 = entry;
+      const value = record2.value;
       if (typeof value !== "string" && typeof value !== "boolean") {
         throw new CLIError(`${where}: "value" must be a string or a boolean.`);
       }
@@ -24531,14 +24602,14 @@ function parseBindingsFile(payload) {
         throw new CLIError(`${where}: "value" must not be empty.`);
       }
       const binding = {
-        entityType: requireString2(record.entityType, "entityType", where),
-        sourceUuid: requireString2(record.sourceUuid, "sourceUuid", where),
-        fieldPath: requireString2(record.fieldPath, "fieldPath", where),
+        entityType: requireString2(record2.entityType, "entityType", where),
+        sourceUuid: requireString2(record2.sourceUuid, "sourceUuid", where),
+        fieldPath: requireString2(record2.fieldPath, "fieldPath", where),
         value
       };
-      const parentKind = optionalString2(record.parentKind, "parentKind", where);
+      const parentKind = optionalString2(record2.parentKind, "parentKind", where);
       if (parentKind !== void 0) binding.parentKind = parentKind;
-      const parentUuid = optionalString2(record.parentUuid, "parentUuid", where);
+      const parentUuid = optionalString2(record2.parentUuid, "parentUuid", where);
       if (parentUuid !== void 0) binding.parentUuid = parentUuid;
       return binding;
     });
@@ -33323,6 +33394,7 @@ var operatorGroupsDomain = {
 };
 
 // src/domains/org.ts
+init_dist();
 init_context();
 init_errors();
 init_output();
@@ -33373,6 +33445,95 @@ var DOMAIN_UUID_ARG = {
 function pluralize(count, singular, plural = `${singular}s`) {
   return count === 1 ? singular : plural;
 }
+var CHILD_HOST_COLUMNS = [
+  { header: "HOST", getValue: (item) => item.domain },
+  { header: "STATUS", getValue: (item) => item.status },
+  { header: "UUID", getValue: (item) => item.orgDomainUuid },
+  { header: "CREATED", getValue: (item) => String(item.createdAt) }
+];
+var CHILD_HOST_ROW_COLUMNS = [
+  { header: "HOST", getValue: (row) => row.host },
+  { header: "STATUS", getValue: (row) => row.status },
+  { header: "DETAIL", getValue: (row) => row.detail ?? "", maxWidth: 80 }
+];
+var CHILD_HOSTING_ARG = {
+  name: "child-hosting",
+  description: "Child-hosting mode: the domain hosts children under its *.<domain> wildcard (see `site children`)",
+  isFlag: true
+};
+var PARENT_DOMAIN_UUID_ARG = {
+  ...DOMAIN_UUID_ARG,
+  description: "OrgDomain UUID of the child-hosting parent"
+};
+var LABEL_ARGS = [
+  { name: "label", description: "Host label, e.g. clinic-a (repeatable)", repeatable: true },
+  {
+    name: "labels-file",
+    description: "File with one label per line; blank lines and # comments are skipped"
+  }
+];
+async function readLabelsFile(filePath) {
+  const { readFile } = await import('fs/promises');
+  let raw;
+  try {
+    raw = await readFile(filePath, "utf8");
+  } catch (err) {
+    throw new CLIError(
+      `Could not read --labels-file ${filePath}: ${err?.code ?? "unknown error"}`
+    );
+  }
+  return raw.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
+}
+async function collectLabels(args) {
+  const raw = [...repeatedValues(args, "label")];
+  const labelsFile = args["labels-file"];
+  if (typeof labelsFile === "string" && labelsFile) {
+    raw.push(...await readLabelsFile(labelsFile));
+  }
+  const labels = [...new Set(raw.map((label) => label.trim().toLowerCase()).filter(Boolean))];
+  if (labels.length === 0) {
+    throw new CLIError("Give at least one --label, or a --labels-file with one label per line.");
+  }
+  return labels;
+}
+var detailOf = (err) => err instanceof Error ? err.message : String(err);
+function record(rows, row) {
+  rows.push(row);
+  stderr2(`${row.host}: ${row.status}${row.detail ? ` (${row.detail})` : ""}`);
+}
+function reportRows(rows, opts, verb) {
+  outputData(rows, opts, CHILD_HOST_ROW_COLUMNS);
+  if (rows.some((row) => row.status === "pending")) {
+    hint(opts, [
+      "New hosts verify on their own once their certificates issue, usually within minutes.",
+      "Check with `gr org domains site children list`."
+    ]);
+  }
+  const failed = rows.filter((row) => row.status === "error").length;
+  if (failed > 0) {
+    throw new CLIError(
+      `${failed} of ${rows.length} ${pluralize(rows.length, "host")} could not be ${verb}.`
+    );
+  }
+}
+async function removeChildHost(client, orgRef, host, confirm) {
+  try {
+    const result2 = await client.disableOrgDomainSite(orgRef, host.orgDomainUuid, confirm);
+    if (!result2.ok) {
+      const { siteCount } = result2.impact;
+      const sites = `${siteCount} ${pluralize(siteCount, "site")}`;
+      return {
+        host: host.domain,
+        status: "error",
+        detail: confirm ? `Still routes ${sites} after a confirmed disable; it was not removed.` : `Still routes ${sites}; re-run with --confirm to remove it anyway.`
+      };
+    }
+  } catch (err) {
+    if (!(err instanceof ApiError && err.statusCode === 404)) throw err;
+  }
+  await client.deleteOrgDomain(orgRef, host.orgDomainUuid);
+  return { host: host.domain, status: "removed" };
+}
 function emailVerifyCommand(path4, description) {
   return {
     path: path4,
@@ -33576,19 +33737,42 @@ var domainCommands = [
 `);
     }
   },
+  {
+    path: ["org", "domains", "site", "preflight"],
+    description: "Check the DNS that enabling sites needs, without enabling; exits non-zero until it resolves",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG, CHILD_HOSTING_ARG],
+    examples: [
+      "yarn gr org domains site preflight --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID",
+      "yarn gr org domains site preflight --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --child-hosting"
+    ],
+    handler: async (hctx) => {
+      const result2 = await requireAuth(hctx.ctx).apiClient.preflightOrgDomainSite(
+        requireOrgRef(hctx.args),
+        requireDomainUuid(hctx.args),
+        { childHosting: hctx.args["child-hosting"] === true }
+      );
+      outputSingle(result2, hctx.ctx);
+      if (!result2.dnsReady) {
+        throw new CLIError("DNS is not ready yet. Publish the records above, then re-run.");
+      }
+    }
+  },
   {
     path: ["org", "domains", "site", "enable"],
-    description: "Enable custom site CNAME verification on a verified organization domain",
+    description: "Enable custom site routing on a verified organization domain, or with --child-hosting as a parent for hosts under its wildcard",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG, CHILD_HOSTING_ARG],
     examples: [
-      "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
+      "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write",
+      "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --child-hosting --allow-write"
     ],
     handler: async (hctx) => {
       const result2 = await requireAuth(hctx.ctx).apiClient.enableOrgDomainSite(
         requireOrgRef(hctx.args),
-        requireDomainUuid(hctx.args)
+        requireDomainUuid(hctx.args),
+        { childHosting: hctx.args["child-hosting"] === true }
       );
       outputSingle(result2, hctx.ctx);
     }
@@ -33651,6 +33835,103 @@ var domainCommands = [
       process.stdout.write(`Disabled site routing for org domain ${domainUuid}
 `);
     }
+  },
+  {
+    path: ["org", "domains", "site", "children", "list"],
+    description: "List the hosts beneath a child-hosting parent domain, with their status",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG2, PARENT_DOMAIN_UUID_ARG],
+    examples: [
+      "yarn gr org domains site children list --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID"
+    ],
+    handler: async (hctx) => {
+      const result2 = await requireAuth(hctx.ctx).apiClient.listOrgDomainSiteChildHosts(
+        requireOrgRef(hctx.args),
+        requireDomainUuid(hctx.args)
+      );
+      outputData(result2.items, hctx.ctx, CHILD_HOST_COLUMNS);
+    }
+  },
+  {
+    path: ["org", "domains", "site", "children", "add"],
+    description: "Add hosts beneath a child-hosting parent domain, one at a time; exits non-zero if any fail",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG2, PARENT_DOMAIN_UUID_ARG, ...LABEL_ARGS],
+    examples: [
+      "yarn gr org domains site children add --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --label clinic-a --label clinic-b --allow-write",
+      "yarn gr org domains site children add --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --labels-file labels.txt --allow-write"
+    ],
+    handler: async (hctx) => {
+      const client = requireAuth(hctx.ctx).apiClient;
+      const orgRef = requireOrgRef(hctx.args);
+      const parentUuid = requireDomainUuid(hctx.args);
+      const labels = await collectLabels(hctx.args);
+      const parent = await client.getOrgDomain(orgRef, parentUuid);
+      const rows = [];
+      for (const label of labels) {
+        try {
+          const created = await client.createOrgDomainSiteChildHost(orgRef, parentUuid, {
+            label
+          });
+          record(rows, { host: created.domain, status: created.status });
+        } catch (err) {
+          record(rows, {
+            host: `${label}.${parent.domain}`,
+            status: "error",
+            detail: detailOf(err)
+          });
+        }
+      }
+      reportRows(rows, hctx.ctx, "added");
+    }
+  },
+  {
+    path: ["org", "domains", "site", "children", "remove"],
+    description: "Remove hosts from a child-hosting parent domain (certificate, routing and registration); exits non-zero if any fail",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [
+      ORG_UUID_ARG2,
+      PARENT_DOMAIN_UUID_ARG,
+      ...LABEL_ARGS,
+      {
+        name: "confirm",
+        description: "Also remove hosts that still route sites",
+        isFlag: true
+      }
+    ],
+    examples: [
+      "yarn gr org domains site children remove --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --label clinic-a --allow-write",
+      "yarn gr org domains site children remove --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --labels-file labels.txt --confirm --allow-write"
+    ],
+    handler: async (hctx) => {
+      const client = requireAuth(hctx.ctx).apiClient;
+      const orgRef = requireOrgRef(hctx.args);
+      const parentUuid = requireDomainUuid(hctx.args);
+      const labels = await collectLabels(hctx.args);
+      const confirm = hctx.args.confirm === true;
+      const { items } = await client.listOrgDomainSiteChildHosts(orgRef, parentUuid);
+      const hostsByLabel = new Map(items.map((host) => [host.label, host]));
+      const rows = [];
+      for (const label of labels) {
+        const host = hostsByLabel.get(label);
+        if (!host) {
+          record(rows, {
+            host: label,
+            status: "error",
+            detail: "No host with this label under this domain."
+          });
+          continue;
+        }
+        try {
+          record(rows, await removeChildHost(client, orgRef, host, confirm));
+        } catch (err) {
+          record(rows, { host: host.domain, status: "error", detail: detailOf(err) });
+        }
+      }
+      reportRows(rows, hctx.ctx, "removed");
+    }
   }
 ];
 var orgDomain = {
@@ -34893,9 +35174,9 @@ ${PHONE_NUMBER_FIELD_REFERENCE}`,
             workspace,
             payload
           );
-          const record = asPhoneRecord(result2);
-          const warnings = collectPhoneNumberWarnings(record);
-          outputData([record], ctx, COLUMNS26);
+          const record2 = asPhoneRecord(result2);
+          const warnings = collectPhoneNumberWarnings(record2);
+          outputData([record2], ctx, COLUMNS26);
           if (warnings.length > 0) {
             process.stderr.write("\nWarnings after create:\n");
             for (const w of warnings) {
@@ -38801,17 +39082,17 @@ function parseUiPromptResponse(content) {
     return null;
   }
   if (!parsed || typeof parsed !== "object") return null;
-  const record = parsed;
-  const hasChoice = record.chosenValue !== void 0;
-  const hasValues = record.values !== void 0;
-  if (record.status === "declined") {
+  const record2 = parsed;
+  const hasChoice = record2.chosenValue !== void 0;
+  const hasValues = record2.values !== void 0;
+  if (record2.status === "declined") {
     return hasChoice || hasValues ? null : { promptId, kind, body: { status: "declined" } };
   }
-  if (record.status !== "submitted" || hasChoice === hasValues) return null;
+  if (record2.status !== "submitted" || hasChoice === hasValues) return null;
   if (hasChoice) {
-    return typeof record.chosenValue === "string" ? { promptId, kind, body: { status: "submitted", chosenValue: record.chosenValue } } : null;
+    return typeof record2.chosenValue === "string" ? { promptId, kind, body: { status: "submitted", chosenValue: record2.chosenValue } } : null;
   }
-  const values = parseFormValues(record.values);
+  const values = parseFormValues(record2.values);
   return values ? { promptId, kind, body: { status: "submitted", values } } : null;
 }
 function parseFormValues(raw) {
@@ -39809,8 +40090,8 @@ async function handleUIChoiceTerminal(payload) {
 }
 
 // src/lib/ui-prompt-presented.ts
-function optionalString3(record, key) {
-  const value = record[key];
+function optionalString3(record2, key) {
+  const value = record2[key];
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 var CONNECT_TOOL_NAME = /^connect_[a-z0-9_]+_account$/;
@@ -39820,14 +40101,14 @@ function isUiPromptToolName(name) {
 }
 function parseConnect(value) {
   if (!value || typeof value !== "object") return void 0;
-  const record = value;
-  const appSlug = optionalString3(record, "appSlug");
+  const record2 = value;
+  const appSlug = optionalString3(record2, "appSlug");
   if (!appSlug) return void 0;
   return {
     appSlug,
-    connectionUuid: optionalString3(record, "connectionUuid") ?? "",
-    label: optionalString3(record, "label") ?? appSlug,
-    expiresInMinutes: typeof record.expiresInMinutes === "number" ? record.expiresInMinutes : 0
+    connectionUuid: optionalString3(record2, "connectionUuid") ?? "",
+    label: optionalString3(record2, "label") ?? appSlug,
+    expiresInMinutes: typeof record2.expiresInMinutes === "number" ? record2.expiresInMinutes : 0
   };
 }
 function parseUiPromptPresented(content) {
@@ -39842,24 +40123,24 @@ function parseUiPromptPresented(content) {
     }
   }
   if (!value || typeof value !== "object") return null;
-  const record = value;
-  if (record.status !== "presented") return null;
-  const promptId = optionalString3(record, "promptId");
-  const kind = record.kind;
+  const record2 = value;
+  if (record2.status !== "presented") return null;
+  const promptId = optionalString3(record2, "promptId");
+  const kind = record2.kind;
   if (!promptId || !isUiPromptKind(kind)) return null;
-  const connect = parseConnect(record.connect);
+  const connect = parseConnect(record2.connect);
   if (kind === "inline_connect" && !connect) return null;
   return {
     status: "presented",
     promptId,
     kind,
-    userPrompt: optionalString3(record, "userPrompt"),
-    openuiMarkup: optionalString3(record, "openuiMarkup"),
-    description: optionalString3(record, "description"),
-    multi: record.multi === true,
+    userPrompt: optionalString3(record2, "userPrompt"),
+    openuiMarkup: optionalString3(record2, "openuiMarkup"),
+    description: optionalString3(record2, "description"),
+    multi: record2.multi === true,
     // LLM-facing guidance. The CLI never renders it, but it is part of the
     // result, so it travels rather than being dropped on the floor.
-    instructions: typeof record.instructions === "string" ? record.instructions : "",
+    instructions: typeof record2.instructions === "string" ? record2.instructions : "",
     ...connect ? { connect } : {}
   };
 }
@@ -39950,9 +40231,9 @@ async function runConciergeAguiLoop(client, initialMessages, onEvent, opts) {
         const type = event.type?.toLowerCase() ?? "";
         if (type === "tool_call_start") {
           hasToolCalls = true;
-          const record = event;
-          const callId = record.toolCallId ?? record.tool_call_id;
-          const name = record.toolCallName ?? record.tool_call_name ?? record.toolName;
+          const record2 = event;
+          const callId = record2.toolCallId ?? record2.tool_call_id;
+          const name = record2.toolCallName ?? record2.tool_call_name ?? record2.toolName;
           if (typeof callId === "string" && typeof name === "string") {
             toolCallNames.set(callId, name);
           }
@@ -43076,7 +43357,7 @@ init_concierge_api();
 
 // package.json
 var package_default = {
-  version: "0.33.1"};
+  version: "0.35.0"};
 
 // src/gr.ts
 var VERSION = package_default.version;