@gravity-rail/cli 0.33.1 → 0.35.0

package/dist/lib.js

@@ -153,7 +153,6 @@ function findDef(defs, arg) {
 }
 
 // src/lib/global-options.ts
-var MAX_COMMAND_WORDS = 4;
 function parseGlobalOptions(argv, spec) {
   let env = spec.defaultEnv;
   let profile;
@@ -220,9 +219,6 @@ function parseGlobalOptions(argv, spec) {
       rest.push(arg);
     }
   }
-  while (commandWords.length > MAX_COMMAND_WORDS) {
-    rest.unshift(commandWords.pop());
-  }
   return {
     opts: { env, profile, apiUrl, outputFormat, jq, verbose, allowWrite },
     commandWords,
@@ -958,7 +954,7 @@ var CommandRegistry = class {
   /** Resolve command words to a CommandDef using longest-match.
    *  Supports {param} path segments that match any word and extract as pathParams. */
   resolve(words) {
-    for (let len = Math.min(words.length, 4); len >= 1; len--) {
+    for (let len = words.length; len >= 1; len--) {
       const key = words.slice(0, len).join(" ");
       const cmd = this.commands.get(key);
       if (cmd) {
@@ -3840,8 +3836,8 @@ function parseBindingsFile(payload) {
       if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
         throw new CLIError(`${where}: each binding must be a JSON object.`);
       }
-      const record = entry;
-      const value = record.value;
+      const record2 = entry;
+      const value = record2.value;
       if (typeof value !== "string" && typeof value !== "boolean") {
         throw new CLIError(`${where}: "value" must be a string or a boolean.`);
       }
@@ -3849,14 +3845,14 @@ function parseBindingsFile(payload) {
         throw new CLIError(`${where}: "value" must not be empty.`);
       }
       const binding = {
-        entityType: requireString2(record.entityType, "entityType", where),
-        sourceUuid: requireString2(record.sourceUuid, "sourceUuid", where),
-        fieldPath: requireString2(record.fieldPath, "fieldPath", where),
+        entityType: requireString2(record2.entityType, "entityType", where),
+        sourceUuid: requireString2(record2.sourceUuid, "sourceUuid", where),
+        fieldPath: requireString2(record2.fieldPath, "fieldPath", where),
         value
       };
-      const parentKind = optionalString2(record.parentKind, "parentKind", where);
+      const parentKind = optionalString2(record2.parentKind, "parentKind", where);
       if (parentKind !== void 0) binding.parentKind = parentKind;
-      const parentUuid = optionalString2(record.parentUuid, "parentUuid", where);
+      const parentUuid = optionalString2(record2.parentUuid, "parentUuid", where);
       if (parentUuid !== void 0) binding.parentUuid = parentUuid;
       return binding;
     });
@@ -12572,6 +12568,7 @@ var operatorGroupsDomain = {
 };
 
 // src/domains/org.ts
+import { ApiError as ApiError2 } from "@gravity-rail/sdk";
 var ORG_COLUMNS = [
   { header: "ID", getValue: (item) => String(item.organizationId ?? "") },
   { header: "NAME", getValue: (item) => item.organizationName || "" },
@@ -12619,6 +12616,95 @@ var DOMAIN_UUID_ARG = {
 function pluralize(count, singular, plural = `${singular}s`) {
   return count === 1 ? singular : plural;
 }
+var CHILD_HOST_COLUMNS = [
+  { header: "HOST", getValue: (item) => item.domain },
+  { header: "STATUS", getValue: (item) => item.status },
+  { header: "UUID", getValue: (item) => item.orgDomainUuid },
+  { header: "CREATED", getValue: (item) => String(item.createdAt) }
+];
+var CHILD_HOST_ROW_COLUMNS = [
+  { header: "HOST", getValue: (row) => row.host },
+  { header: "STATUS", getValue: (row) => row.status },
+  { header: "DETAIL", getValue: (row) => row.detail ?? "", maxWidth: 80 }
+];
+var CHILD_HOSTING_ARG = {
+  name: "child-hosting",
+  description: "Child-hosting mode: the domain hosts children under its *.<domain> wildcard (see `site children`)",
+  isFlag: true
+};
+var PARENT_DOMAIN_UUID_ARG = {
+  ...DOMAIN_UUID_ARG,
+  description: "OrgDomain UUID of the child-hosting parent"
+};
+var LABEL_ARGS = [
+  { name: "label", description: "Host label, e.g. clinic-a (repeatable)", repeatable: true },
+  {
+    name: "labels-file",
+    description: "File with one label per line; blank lines and # comments are skipped"
+  }
+];
+async function readLabelsFile(filePath) {
+  const { readFile } = await import("fs/promises");
+  let raw;
+  try {
+    raw = await readFile(filePath, "utf8");
+  } catch (err) {
+    throw new CLIError(
+      `Could not read --labels-file ${filePath}: ${err?.code ?? "unknown error"}`
+    );
+  }
+  return raw.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
+}
+async function collectLabels(args) {
+  const raw = [...repeatedValues(args, "label")];
+  const labelsFile = args["labels-file"];
+  if (typeof labelsFile === "string" && labelsFile) {
+    raw.push(...await readLabelsFile(labelsFile));
+  }
+  const labels = [...new Set(raw.map((label) => label.trim().toLowerCase()).filter(Boolean))];
+  if (labels.length === 0) {
+    throw new CLIError("Give at least one --label, or a --labels-file with one label per line.");
+  }
+  return labels;
+}
+var detailOf = (err) => err instanceof Error ? err.message : String(err);
+function record(rows, row) {
+  rows.push(row);
+  stderr(`${row.host}: ${row.status}${row.detail ? ` (${row.detail})` : ""}`);
+}
+function reportRows(rows, opts, verb) {
+  outputData(rows, opts, CHILD_HOST_ROW_COLUMNS);
+  if (rows.some((row) => row.status === "pending")) {
+    hint(opts, [
+      "New hosts verify on their own once their certificates issue, usually within minutes.",
+      "Check with `gr org domains site children list`."
+    ]);
+  }
+  const failed = rows.filter((row) => row.status === "error").length;
+  if (failed > 0) {
+    throw new CLIError(
+      `${failed} of ${rows.length} ${pluralize(rows.length, "host")} could not be ${verb}.`
+    );
+  }
+}
+async function removeChildHost(client, orgRef, host, confirm) {
+  try {
+    const result2 = await client.disableOrgDomainSite(orgRef, host.orgDomainUuid, confirm);
+    if (!result2.ok) {
+      const { siteCount } = result2.impact;
+      const sites = `${siteCount} ${pluralize(siteCount, "site")}`;
+      return {
+        host: host.domain,
+        status: "error",
+        detail: confirm ? `Still routes ${sites} after a confirmed disable; it was not removed.` : `Still routes ${sites}; re-run with --confirm to remove it anyway.`
+      };
+    }
+  } catch (err) {
+    if (!(err instanceof ApiError2 && err.statusCode === 404)) throw err;
+  }
+  await client.deleteOrgDomain(orgRef, host.orgDomainUuid);
+  return { host: host.domain, status: "removed" };
+}
 function emailVerifyCommand(path4, description) {
   return {
     path: path4,
@@ -12822,19 +12908,42 @@ var domainCommands = [
 `);
     }
   },
+  {
+    path: ["org", "domains", "site", "preflight"],
+    description: "Check the DNS that enabling sites needs, without enabling; exits non-zero until it resolves",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG, CHILD_HOSTING_ARG],
+    examples: [
+      "yarn gr org domains site preflight --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID",
+      "yarn gr org domains site preflight --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --child-hosting"
+    ],
+    handler: async (hctx) => {
+      const result2 = await requireAuth(hctx.ctx).apiClient.preflightOrgDomainSite(
+        requireOrgRef(hctx.args),
+        requireDomainUuid(hctx.args),
+        { childHosting: hctx.args["child-hosting"] === true }
+      );
+      outputSingle(result2, hctx.ctx);
+      if (!result2.dnsReady) {
+        throw new CLIError("DNS is not ready yet. Publish the records above, then re-run.");
+      }
+    }
+  },
   {
     path: ["org", "domains", "site", "enable"],
-    description: "Enable custom site CNAME verification on a verified organization domain",
+    description: "Enable custom site routing on a verified organization domain, or with --child-hosting as a parent for hosts under its wildcard",
     mutates: true,
     requiresWorkspace: false,
-    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG],
+    args: [ORG_UUID_ARG2, DOMAIN_UUID_ARG, CHILD_HOSTING_ARG],
     examples: [
-      "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write"
+      "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --allow-write",
+      "yarn gr org domains site enable --org-uuid $ORG_UUID --domain-uuid $DOMAIN_UUID --child-hosting --allow-write"
     ],
     handler: async (hctx) => {
       const result2 = await requireAuth(hctx.ctx).apiClient.enableOrgDomainSite(
         requireOrgRef(hctx.args),
-        requireDomainUuid(hctx.args)
+        requireDomainUuid(hctx.args),
+        { childHosting: hctx.args["child-hosting"] === true }
       );
       outputSingle(result2, hctx.ctx);
     }
@@ -12897,6 +13006,103 @@ var domainCommands = [
       process.stdout.write(`Disabled site routing for org domain ${domainUuid}
 `);
     }
+  },
+  {
+    path: ["org", "domains", "site", "children", "list"],
+    description: "List the hosts beneath a child-hosting parent domain, with their status",
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG2, PARENT_DOMAIN_UUID_ARG],
+    examples: [
+      "yarn gr org domains site children list --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID"
+    ],
+    handler: async (hctx) => {
+      const result2 = await requireAuth(hctx.ctx).apiClient.listOrgDomainSiteChildHosts(
+        requireOrgRef(hctx.args),
+        requireDomainUuid(hctx.args)
+      );
+      outputData(result2.items, hctx.ctx, CHILD_HOST_COLUMNS);
+    }
+  },
+  {
+    path: ["org", "domains", "site", "children", "add"],
+    description: "Add hosts beneath a child-hosting parent domain, one at a time; exits non-zero if any fail",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [ORG_UUID_ARG2, PARENT_DOMAIN_UUID_ARG, ...LABEL_ARGS],
+    examples: [
+      "yarn gr org domains site children add --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --label clinic-a --label clinic-b --allow-write",
+      "yarn gr org domains site children add --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --labels-file labels.txt --allow-write"
+    ],
+    handler: async (hctx) => {
+      const client = requireAuth(hctx.ctx).apiClient;
+      const orgRef = requireOrgRef(hctx.args);
+      const parentUuid = requireDomainUuid(hctx.args);
+      const labels = await collectLabels(hctx.args);
+      const parent = await client.getOrgDomain(orgRef, parentUuid);
+      const rows = [];
+      for (const label of labels) {
+        try {
+          const created = await client.createOrgDomainSiteChildHost(orgRef, parentUuid, {
+            label
+          });
+          record(rows, { host: created.domain, status: created.status });
+        } catch (err) {
+          record(rows, {
+            host: `${label}.${parent.domain}`,
+            status: "error",
+            detail: detailOf(err)
+          });
+        }
+      }
+      reportRows(rows, hctx.ctx, "added");
+    }
+  },
+  {
+    path: ["org", "domains", "site", "children", "remove"],
+    description: "Remove hosts from a child-hosting parent domain (certificate, routing and registration); exits non-zero if any fail",
+    mutates: true,
+    requiresWorkspace: false,
+    args: [
+      ORG_UUID_ARG2,
+      PARENT_DOMAIN_UUID_ARG,
+      ...LABEL_ARGS,
+      {
+        name: "confirm",
+        description: "Also remove hosts that still route sites",
+        isFlag: true
+      }
+    ],
+    examples: [
+      "yarn gr org domains site children remove --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --label clinic-a --allow-write",
+      "yarn gr org domains site children remove --org-uuid $ORG_UUID --domain-uuid $PARENT_UUID --labels-file labels.txt --confirm --allow-write"
+    ],
+    handler: async (hctx) => {
+      const client = requireAuth(hctx.ctx).apiClient;
+      const orgRef = requireOrgRef(hctx.args);
+      const parentUuid = requireDomainUuid(hctx.args);
+      const labels = await collectLabels(hctx.args);
+      const confirm = hctx.args.confirm === true;
+      const { items } = await client.listOrgDomainSiteChildHosts(orgRef, parentUuid);
+      const hostsByLabel = new Map(items.map((host) => [host.label, host]));
+      const rows = [];
+      for (const label of labels) {
+        const host = hostsByLabel.get(label);
+        if (!host) {
+          record(rows, {
+            host: label,
+            status: "error",
+            detail: "No host with this label under this domain."
+          });
+          continue;
+        }
+        try {
+          record(rows, await removeChildHost(client, orgRef, host, confirm));
+        } catch (err) {
+          record(rows, { host: host.domain, status: "error", detail: detailOf(err) });
+        }
+      }
+      reportRows(rows, hctx.ctx, "removed");
+    }
   }
 ];
 var orgDomain = {
@@ -16447,9 +16653,9 @@ ${PHONE_NUMBER_FIELD_REFERENCE}`,
             workspace,
             payload
           );
-          const record = asPhoneRecord(result2);
-          const warnings = collectPhoneNumberWarnings(record);
-          outputData([record], ctx, COLUMNS26);
+          const record2 = asPhoneRecord(result2);
+          const warnings = collectPhoneNumberWarnings(record2);
+          outputData([record2], ctx, COLUMNS26);
           if (warnings.length > 0) {
             process.stderr.write("\nWarnings after create:\n");
             for (const w of warnings) {
@@ -20295,17 +20501,17 @@ function parseUiPromptResponse(content) {
     return null;
   }
   if (!parsed || typeof parsed !== "object") return null;
-  const record = parsed;
-  const hasChoice = record.chosenValue !== void 0;
-  const hasValues = record.values !== void 0;
-  if (record.status === "declined") {
+  const record2 = parsed;
+  const hasChoice = record2.chosenValue !== void 0;
+  const hasValues = record2.values !== void 0;
+  if (record2.status === "declined") {
     return hasChoice || hasValues ? null : { promptId, kind, body: { status: "declined" } };
   }
-  if (record.status !== "submitted" || hasChoice === hasValues) return null;
+  if (record2.status !== "submitted" || hasChoice === hasValues) return null;
   if (hasChoice) {
-    return typeof record.chosenValue === "string" ? { promptId, kind, body: { status: "submitted", chosenValue: record.chosenValue } } : null;
+    return typeof record2.chosenValue === "string" ? { promptId, kind, body: { status: "submitted", chosenValue: record2.chosenValue } } : null;
   }
-  const values = parseFormValues(record.values);
+  const values = parseFormValues(record2.values);
   return values ? { promptId, kind, body: { status: "submitted", values } } : null;
 }
 function parseFormValues(raw) {
@@ -21320,8 +21526,8 @@ async function handleUIChoiceTerminal(payload) {
 }
 
 // src/lib/ui-prompt-presented.ts
-function optionalString3(record, key) {
-  const value = record[key];
+function optionalString3(record2, key) {
+  const value = record2[key];
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 var CONNECT_TOOL_NAME = /^connect_[a-z0-9_]+_account$/;
@@ -21331,14 +21537,14 @@ function isUiPromptToolName(name) {
 }
 function parseConnect(value) {
   if (!value || typeof value !== "object") return void 0;
-  const record = value;
-  const appSlug = optionalString3(record, "appSlug");
+  const record2 = value;
+  const appSlug = optionalString3(record2, "appSlug");
   if (!appSlug) return void 0;
   return {
     appSlug,
-    connectionUuid: optionalString3(record, "connectionUuid") ?? "",
-    label: optionalString3(record, "label") ?? appSlug,
-    expiresInMinutes: typeof record.expiresInMinutes === "number" ? record.expiresInMinutes : 0
+    connectionUuid: optionalString3(record2, "connectionUuid") ?? "",
+    label: optionalString3(record2, "label") ?? appSlug,
+    expiresInMinutes: typeof record2.expiresInMinutes === "number" ? record2.expiresInMinutes : 0
   };
 }
 function parseUiPromptPresented(content) {
@@ -21353,24 +21559,24 @@ function parseUiPromptPresented(content) {
     }
   }
   if (!value || typeof value !== "object") return null;
-  const record = value;
-  if (record.status !== "presented") return null;
-  const promptId = optionalString3(record, "promptId");
-  const kind = record.kind;
+  const record2 = value;
+  if (record2.status !== "presented") return null;
+  const promptId = optionalString3(record2, "promptId");
+  const kind = record2.kind;
   if (!promptId || !isUiPromptKind(kind)) return null;
-  const connect = parseConnect(record.connect);
+  const connect = parseConnect(record2.connect);
   if (kind === "inline_connect" && !connect) return null;
   return {
     status: "presented",
     promptId,
     kind,
-    userPrompt: optionalString3(record, "userPrompt"),
-    openuiMarkup: optionalString3(record, "openuiMarkup"),
-    description: optionalString3(record, "description"),
-    multi: record.multi === true,
+    userPrompt: optionalString3(record2, "userPrompt"),
+    openuiMarkup: optionalString3(record2, "openuiMarkup"),
+    description: optionalString3(record2, "description"),
+    multi: record2.multi === true,
     // LLM-facing guidance. The CLI never renders it, but it is part of the
     // result, so it travels rather than being dropped on the floor.
-    instructions: typeof record.instructions === "string" ? record.instructions : "",
+    instructions: typeof record2.instructions === "string" ? record2.instructions : "",
     ...connect ? { connect } : {}
   };
 }
@@ -21461,9 +21667,9 @@ async function runConciergeAguiLoop(client, initialMessages, onEvent, opts) {
         const type = event.type?.toLowerCase() ?? "";
         if (type === "tool_call_start") {
           hasToolCalls = true;
-          const record = event;
-          const callId = record.toolCallId ?? record.tool_call_id;
-          const name = record.toolCallName ?? record.tool_call_name ?? record.toolName;
+          const record2 = event;
+          const callId = record2.toolCallId ?? record2.tool_call_id;
+          const name = record2.toolCallName ?? record2.tool_call_name ?? record2.toolName;
           if (typeof callId === "string" && typeof name === "string") {
             toolCallNames.set(callId, name);
           }