@heyquilt/seam 0.134.0 → 0.141.0

package/bin/seam.js

@@ -89,6 +89,9 @@ Docs: https://seam.heyquilt.com/docs
   seam org [new <slug> | show <org> | add <org> <member> [--role r] | remove <org> <member>]   orgs that own quilts
   seam app [list [--verified]] | new <handle> --name <n> [--org <org>] | show|edit|remove <handle>   apps: any tool that connects to Seam, with the permissions and events it asks for
   seam app key new|list <handle> | key remove <handle> <id>   an app's private keys (the private half shown once; up to ten live)
+  seam app install <handle> [--org <org>] [--repos all|a,b]   put an app on your account or an org you run, on all repos or chosen ones
+  seam app installs [--org <org>] | repos <installation> all|a,b | accept|pause|resume|uninstall <installation>   the apps installed there
+  seam app request <handle> --org <org> [--repos a,b] [-m <why>] | requests --org <org> [--all] | approve|decline <request> --org <org>   ask an org's admins for an app; they decide
   seam app manager add|remove <handle> <member or email>   people who edit an app without being its org's owners
   seam org domain add|check|remove <org> <domain>   verify an org by a TXT record at _seam-verify.<domain>
   seam org log <org> [-n <count>] [--before <id>]   what happened in an org: members, roles, teams, quilts (owners and admins)

package/lib/quilts/cli.js

@@ -11,7 +11,7 @@ import { startDaemon, askDaemon } from './daemon.js'
 import { rebuild as rebuildBlock, conflictStyle } from './block.js'
 import { describeRebuild, describeOpened } from './describe.js'
 import { findBlock, checkout, status as blockStatus, commitFolder, amendFolder, syncTo, localDiff, saveBlock, pull, toLineTip, restore, reset, clean, localChanges, bytesOf, livePatch } from './block.js'
-import { describeLog, describeShow, describeDiff, describeBlame, describeStatus, describeMerge, describeWrite, describeSquare, describeSquareStatus, describeEvents, describeTag, describeRelease, describeImport, describeImportRecord, describeRestore, describeReset, describeClean, describeLive, describeClaims, describeHandoff, describeFinished, describeResolutions, describeLiveSet, describeLiveJoin, describeMergeBase, describeStack, describeStackDiff, describeGrep, describeBisect, describeCheck, describeReviews, describeInterdiff, describeReviewed, describeSquareCheck, describePolicy, describeKeys, describeTokens, describeNewToken, describeBlock, describeBlocks, describeProtections, describeTeams, describeAccess, describeRedacted, describeRedactions, describeMetrics, describeSquarePolicy, describePolicyVersions, describeOrg, describeOrgs, describeOrgLog, describeOrgDomain, describeApp, describeApps, describeAppKey, describeOrgTeams, describeCheckRuns, describeRerun, describeAncestor, describeContains, describePipeline, describeWatches, describeSearch, describePublicReads } from './describe.js'
+import { describeLog, describeShow, describeDiff, describeBlame, describeStatus, describeMerge, describeWrite, describeSquare, describeSquareStatus, describeEvents, describeTag, describeRelease, describeImport, describeImportRecord, describeRestore, describeReset, describeClean, describeLive, describeClaims, describeHandoff, describeFinished, describeResolutions, describeLiveSet, describeLiveJoin, describeMergeBase, describeStack, describeStackDiff, describeGrep, describeBisect, describeCheck, describeReviews, describeInterdiff, describeReviewed, describeSquareCheck, describePolicy, describeKeys, describeTokens, describeNewToken, describeBlock, describeBlocks, describeProtections, describeTeams, describeAccess, describeRedacted, describeRedactions, describeMetrics, describeSquarePolicy, describePolicyVersions, describeOrg, describeOrgs, describeOrgLog, describeOrgDomain, describeApp, describeApps, describeAppKey, describeInstall, describeInstalls, describeRequest, describeRequests, describeOrgTeams, describeCheckRuns, describeRerun, describeAncestor, describeContains, describePipeline, describeWatches, describeSearch, describePublicReads } from './describe.js'
 import { verifyQuilt, describeVerify } from './attest.js'
 import { confirmWithLocalKey } from './linepolicy.js'
 import { describeAgentToken, describeAgentTokens } from './agent-tokens.js'
@@ -83,7 +83,7 @@ export function agentTokenExtras (flags) {
   return out
 }
 
-const VALUE_FLAGS = new Set(['--name', '--org', '--description', '--homepage', '--callback', '--setup', '--webhook', '--events', '--perm', '--authors', '--debounce', '-m', '--installation', '--quilts', '--message', '-n', '--max-count', '--into', '--onto', '--on-conflict', '--quilt', '--square', '--dir', '--line', '--task', '--level', '--title', '--slug', '--format', '--expect-tip', '--side', '--file', '--batch', '--to', '--note', '--after', '--kinds', '--webhook', '--secret', '--branch', '--from', '-S', '--run', '--marks', '--patch', '--on', '--path', '--checks', '--name', '--public-key', '--interval', '--credential', '--as', '--runners', '--run-key', '--state', '--tier', '--tiers', '--tests', '--ci-config', '--commit', '--check', '--log-url', '--at', '--human-only', '--keys', '--reason', '--without', '--allow', '--rules', '--org', '--role', '--agent', '--paths', '--squares', '--hours', '--pre-merge-checks', '--by', '--mode', '--machine', '--add', '--remove', '--exclude', '--max-fetch-bytes', '--expires', '--out', '--auto-combine', '--needs-stack', '--monotonic-stack', '--migrations-in-order', '--rule', '--bisect-width', '--classes', '--min-lines', '-L', '--ignore-rev', '--reverse', '--grep', '-G', '--author', '--on-behalf-of', '--since', '--until', '--group-by', '--cursor', '-U', '--unified', '--renames', '--config', '--only', '--listen', '--idle-exit', '--wait', '--days', '--with', '--stack', '--scope', '--suggest', '--to-line', '--approval-survives', '--stack-defaults', '--stack-keys', '--lfs-url', '--lfs-threshold', '--offset', '--length', '--rate', '--before'])
+const VALUE_FLAGS = new Set(['--repos', '--name', '--org', '--description', '--homepage', '--callback', '--setup', '--webhook', '--events', '--perm', '--authors', '--debounce', '-m', '--installation', '--quilts', '--message', '-n', '--max-count', '--into', '--onto', '--on-conflict', '--quilt', '--square', '--dir', '--line', '--task', '--level', '--title', '--slug', '--format', '--expect-tip', '--side', '--file', '--batch', '--to', '--note', '--after', '--kinds', '--webhook', '--secret', '--branch', '--from', '-S', '--run', '--marks', '--patch', '--on', '--path', '--checks', '--name', '--public-key', '--interval', '--credential', '--as', '--runners', '--run-key', '--state', '--tier', '--tiers', '--tests', '--ci-config', '--commit', '--check', '--log-url', '--at', '--human-only', '--keys', '--reason', '--without', '--allow', '--rules', '--org', '--role', '--agent', '--paths', '--squares', '--hours', '--pre-merge-checks', '--by', '--mode', '--machine', '--add', '--remove', '--exclude', '--max-fetch-bytes', '--expires', '--out', '--auto-combine', '--needs-stack', '--monotonic-stack', '--migrations-in-order', '--rule', '--bisect-width', '--classes', '--min-lines', '-L', '--ignore-rev', '--reverse', '--grep', '-G', '--author', '--on-behalf-of', '--since', '--until', '--group-by', '--cursor', '-U', '--unified', '--renames', '--config', '--only', '--listen', '--idle-exit', '--wait', '--days', '--with', '--stack', '--scope', '--suggest', '--to-line', '--approval-survives', '--stack-defaults', '--stack-keys', '--lfs-url', '--lfs-threshold', '--offset', '--length', '--rate', '--before'])
 
 export function parse (argv) {
   const pos = []; const flags = {}; const paths = []
@@ -635,6 +635,26 @@ export async function runSeamCommand (cmd, argv, { cwd = process.cwd(), token, o
         const r = act === 'new' ? await client.addAppKey(h) : act === 'list' ? await client.appKeys(h) : await client.removeAppKey(h, id)
         return print(r, describeAppKey(r))
       }
+      if (['request', 'requests', 'approve', 'decline'].includes(sub)) {
+        // seam app request <handle> --org <org> [--repos a,b] [-m <why>] | requests --org <org> [--all] | approve|decline <request id> --org <org>
+        const org = typeof flags['--org'] === 'string' ? flags['--org'] : null
+        if (!org || (sub !== 'requests' && !pos[1])) throw new Error('seam app request <handle> --org <org> [--repos a,b] [-m <why>] | requests --org <org> [--all] | approve|decline <request> --org <org>')
+        if (sub === 'requests') { const r = await client.orgRequests(org, { all: !!flags['--all'] }); return print(r, describeRequests(r)) }
+        const r = sub === 'request' ? await client.requestApp(pos[1], { org, repos: typeof flags['--repos'] === 'string' && flags['--repos'] !== 'all' ? flags['--repos'].split(',').map((x) => x.trim()).filter(Boolean) : 'all', ...(typeof flags['-m'] === 'string' ? { note: flags['-m'] } : {}) })
+          : await client.decideRequest(org, pos[1], sub)
+        return print(r, describeRequest(r))
+      }
+      if (['install', 'installs', 'repos', 'accept', 'pause', 'resume', 'uninstall'].includes(sub)) {
+        // seam app install <handle> [--org <org>] [--repos all|a,b] | installs [--org <org>] | repos <install id> all|a,b | pause|resume|uninstall <install id>
+        const repos = (v) => v == null || v === true || v === 'all' ? 'all' : String(v).split(',').map((x) => x.trim()).filter(Boolean)
+        const str = (f) => typeof flags[f] === 'string' ? flags[f] : undefined
+        if (sub === 'installs') { const r = str('--org') ? await client.orgInstallations(str('--org')) : await client.myInstallations(); return print(r, describeInstalls(r)) }
+        if (!pos[1] || (sub === 'repos' && !pos[2])) throw new Error('seam app install <handle> [--org <org>] [--repos all|<quilt>,<quilt>] | installs [--org <org>] | repos <installation> all|<quilt>,… | pause|resume|uninstall <installation>')
+        const r = sub === 'install' ? await client.installApp(pos[1], { ...(str('--org') ? { org: str('--org') } : {}), repos: repos(flags['--repos']) })
+          : sub === 'repos' ? await client.editInstallation(pos[1], { repos: repos(pos[2]) })
+            : sub === 'accept' ? await client.acceptInstallation(pos[1]) : sub === 'pause' ? await client.pauseInstallation(pos[1]) : sub === 'resume' ? await client.resumeInstallation(pos[1]) : await client.deleteInstallation(pos[1])
+        return print(r, describeInstall(r))
+      }
       if (sub === 'manager') {
         // seam app manager add|remove <handle> <person or email>
         const [, act, h, who] = pos
@@ -642,8 +662,10 @@ export async function runSeamCommand (cmd, argv, { cwd = process.cwd(), token, o
         const r = act === 'add' ? await client.addAppManager(h, who) : await client.removeAppManager(h, who)
         return print(r, describeApp(r))
       }
-      const usage = 'seam app [list [--verified]] | new <handle> --name <name> [--org <org>] | show <handle> | edit <handle> | remove <handle> | key new|list|remove <handle> [id] | manager add|remove <handle> <member>; new and edit take --name --description --homepage --callback --setup --webhook <url>, --events a,b, --perm contents=read,reviews=write, --public|--private, and edit --new-secret'
-      if (!['new', 'show', 'edit', 'remove'].includes(sub) || !pos[1]) throw new Error(usage)
+      const usage = 'seam app [list [--verified]] | new <handle> --name <name> [--org <org>] | show <handle> | edit <handle> | remove <handle> | key new|list|remove <handle> [id] | manager add|remove <handle> <member> | install <handle> [--org <org>] [--repos a,b] | installs [--org <org>] | repos|accept|pause|resume|uninstall <installation> | request <handle> --org <org> | requests --org <org> | approve|decline <request> --org <org> | disable <handle> [--reason <why>] | enable <handle> (Seam staff); new and edit take --name --description --homepage --callback --setup --webhook <url>, --events a,b, --perm contents=read,reviews=write, --public|--private, and edit --new-secret'
+      if (!['new', 'show', 'edit', 'remove', 'disable', 'enable'].includes(sub) || !pos[1]) throw new Error(usage)
+      if (sub === 'disable') { const r = await client.disableApp(pos[1], typeof flags['--reason'] === 'string' ? flags['--reason'] : undefined); return print(r, describeApp(r)) }
+      if (sub === 'enable') { const r = await client.enableApp(pos[1]); return print(r, describeApp(r)) }
       if (sub === 'show') { const r = await client.app(pos[1]); return print(r, describeApp(r)) }
       if (sub === 'remove') { const r = await client.deleteApp(pos[1]); return print(r, describeApp(r)) }
       const b = {}
@@ -657,6 +679,7 @@ export async function runSeamCommand (cmd, argv, { cwd = process.cwd(), token, o
       if (flags['--private']) b.public = false
       if (sub === 'new') { const r = await client.createApp({ handle: pos[1], name: b.name || pos[1], ...(str('--org') ? { org: str('--org') } : {}), ...b }); return print(r, describeApp(r)) }
       if (flags['--new-secret']) b.webhook_secret = true
+      if (str('--org') !== undefined) b.org = str('--org')
       const r = await client.editApp(pos[1], b)
       return print(r, describeApp(r))
     }

package/lib/quilts/client.js

@@ -317,10 +317,24 @@ export function quiltClient ({ api, token, fetch: fetchImpl = globalThis.fetch,
     editApp: (h, b) => call('PATCH', `/v1/apps/${enc(h)}`, b),
     addAppManager: (h, member) => call('POST', `/v1/apps/${enc(h)}/managers`, { member }),
     removeAppManager: (h, member) => call('DELETE', `/v1/apps/${enc(h)}/managers/${enc(member)}`),
+    installApp: (h, b = {}) => call('POST', `/v1/apps/${enc(h)}/installations`, b),
+    requestApp: (h, b) => call('POST', `/v1/apps/${enc(h)}/requests`, b),
+    orgRequests: (o, { all } = {}) => call('GET', `/v1/orgs/${enc(o)}/requests${all ? '?all=1' : ''}`),
+    decideRequest: (o, id, verdict) => call('POST', `/v1/orgs/${enc(o)}/requests/${enc(id)}/${verdict === 'decline' ? 'decline' : 'approve'}`, {}),
+    myInstallations: () => call('GET', '/v1/me/installations'),
+    orgInstallations: (o) => call('GET', `/v1/orgs/${enc(o)}/installations`),
+    installation: (id) => call('GET', `/v1/installations/${enc(id)}`),
+    editInstallation: (id, b) => call('PATCH', `/v1/installations/${enc(id)}`, b),
+    acceptInstallation: (id) => call('POST', `/v1/installations/${enc(id)}/accept`, {}),
+    pauseInstallation: (id) => call('POST', `/v1/installations/${enc(id)}/pause`, {}),
+    resumeInstallation: (id) => call('POST', `/v1/installations/${enc(id)}/resume`, {}),
+    deleteInstallation: (id) => call('DELETE', `/v1/installations/${enc(id)}`),
     appKeys: (h) => call('GET', `/v1/apps/${enc(h)}/keys`),
     addAppKey: (h) => call('POST', `/v1/apps/${enc(h)}/keys`, {}),
     removeAppKey: (h, id) => call('DELETE', `/v1/apps/${enc(h)}/keys/${enc(id)}`),
     deleteApp: (h) => call('DELETE', `/v1/apps/${enc(h)}`),
+    disableApp: (h, reason) => call('POST', `/v1/apps/${enc(h)}/disable`, reason ? { reason } : {}),
+    enableApp: (h) => call('POST', `/v1/apps/${enc(h)}/enable`, {}),
     createOrg: (b) => call('POST', '/v1/orgs', b),
     org: (o) => call('GET', `/v1/orgs/${enc(o)}`),
     addOrgDomain: (o, domain) => call('POST', `/v1/orgs/${enc(o)}/domains`, { domain }),

package/lib/quilts/describe.js

@@ -511,9 +511,11 @@ export function describeApp (a) {
   const perms = Object.entries(a.permissions || {}).filter(([, l]) => l !== 'none').map(([r, l]) => `${r} ${l}`)
   return [
     `${a.handle}: ${a.name}, ${a.public ? 'public' : 'private'}, owned by ${owner}`,
+    ...(a.disabled ? [`  Switched off by Seam${a.disabled.reason ? `: ${a.disabled.reason}` : ''}. It installs nowhere and its installs do nothing until Seam switches it on.`] : []),
     ...(a.description ? [`  ${a.description}`] : []),
     `  May: ${perms.length ? perms.join(', ') : 'nothing yet (every permission is none)'}`,
     `  Hears: ${a.events?.length ? a.events.join(', ') : 'no events'}`,
+    ...(a.installs != null ? [`  Installs: ${a.installs}`] : []),
     ...['homepage', 'callback_url', 'setup_url', 'webhook_url'].filter((k) => a[k]).map((k) => `  ${k}: ${a[k]}`),
     ...(a.managers?.length ? [`  Managers: ${a.managers.join(', ')}`] : []),
     ...(a.keys ? [`  Keys: ${a.keys.length ? a.keys.map((k) => k.id).join(', ') : 'none'}`] : []),
@@ -528,6 +530,32 @@ export function describeAppKey (k) {
   return k.keys.length ? k.keys.map((x) => `${x.id}  made ${new Date(x.created_at).toISOString().slice(0, 10)} by ${x.created_by}`).join('\n') : 'No keys.'
 }
 
+/** An app installed on an account or an org (19.4): where, on which repos, what it may do. */
+export function describeInstall (i) {
+  if (i.removed) return `Removed the installation ${i.id}: the app is off that account.`
+  const where = i.target?.kind === 'org' ? `the org ${i.target.slug || i.target.id}` : (i.target?.name || i.target?.id)
+  const perms = Object.entries(i.permissions || {}).filter(([, l]) => l !== 'none').map(([r, l]) => `${r} ${l}`)
+  return [
+    `${i.app?.handle || i.app?.id} on ${where}${i.paused ? ' (paused)' : ''}: installation ${i.id}`,
+    `  Repos: ${i.repos === 'all' ? 'all, and later ones' : i.repos.join(', ')}`,
+    `  May: ${perms.length ? perms.join(', ') : 'nothing'}`,
+    ...(i.pending_permissions ? [`  Asks for more, waiting for you to accept (seam app accept ${i.id}): ${Object.entries(i.pending_permissions).map(([r, l]) => `${r} ${l}`).join(', ')}`] : []),
+    ...(i.unverified ? ['  Unverified: the org that makes this app has no verified domain'] : []),
+    ...(i.disabled ? ['  Switched off by Seam: this install does nothing until Seam switches the app on'] : [])
+  ].join('\n')
+}
+/** A member's request for an app on an org (19.4), and what an admin decided. */
+export function describeRequest (r) {
+  const repos = r.repos === 'all' ? 'all repos' : r.repos.join(', ')
+  return [
+    `Request ${r.id}: ${r.app?.handle || r.app?.id} on ${repos}, asked by ${r.requested_by}: ${r.state}${r.decided_by ? ` by ${r.decided_by}` : r.state === 'pending' ? ' (the org\'s admins approve or decline it)' : ''}`,
+    ...(r.note ? [`  "${r.note}"`] : []),
+    ...(r.installation ? [`  Installed: installation ${r.installation.id}`] : [])
+  ].join('\n')
+}
+export const describeRequests = (r) => r.requests.length ? r.requests.map(describeRequest).join('\n') : 'No app requests.'
+export const describeInstalls = (r) => r.installations.length ? r.installations.map(describeInstall).join('\n\n') : 'No apps installed.'
+
 export const describeApps = (r) => r.apps.length ? r.apps.map((a) => describeApp(a)).join('\n\n') : 'No apps.'
 
 export function describeOrgLog (r) {
@@ -536,7 +564,8 @@ export function describeOrgLog (r) {
     if (x.kind === 'created') return `made the org ${d.slug}`
     if (x.kind === 'member') return d.role ? `${d.was ? `made ${d.member} ${d.role === 'admin' || d.role === 'owner' ? 'an' : 'a'} ${d.role} (was ${d.was})` : `added ${d.member} as ${d.role === 'member' ? 'a' : 'an'} ${d.role}`}` : `removed ${d.member} (was ${d.was})`
     if (x.kind === 'team') return d.members?.length ? `set the team ${d.name}: ${d.members.join(', ')}` : `removed the team ${d.name}`
-    if (x.kind.startsWith('app_')) return `${{ app_created: 'made', app_changed: 'changed', app_removed: 'removed', app_manager_added: `made ${d.member} a manager of`, app_manager_removed: `took ${d.member} off the managers of`, app_key_added: `made a key ${d.key_id} for`, app_key_removed: `removed the key ${d.key_id} of` }[x.kind] || x.kind}${x.kind.startsWith('app_key') || x.kind.startsWith('app_manager') ? '' : ' the app'} ${d.handle} ${d.handle}${d.fields?.length ? ` (${d.fields.join(', ')})` : ''}`
+    if (x.kind.startsWith('app_')) return `${{ app_created: 'made', app_changed: 'changed', app_removed: 'removed', app_manager_added: `made ${d.member} a manager of`, app_manager_removed: `took ${d.member} off the managers of`, app_key_added: `made a key ${d.key_id} for`, app_key_removed: `removed the key ${d.key_id} of`, app_moved_in: `moved in from ${d.from}` }[x.kind] || x.kind}${x.kind.startsWith('app_key') || x.kind.startsWith('app_manager') || x.kind === 'app_moved_in' ? '' : ' the app'} ${d.handle} ${d.handle}${d.fields?.length ? ` (${d.fields.join(', ')})` : ''}`
+    if (x.kind === 'app_installed' || x.kind === 'app_uninstalled' || x.kind.startsWith('install_')) return `${{ app_installed: 'installed', app_uninstalled: 'removed', install_requested: 'asked for', install_request_approved: 'approved the request for', install_request_declined: 'declined the request for', install_repos_changed: 'changed the repos of', install_paused: 'paused', install_permissions_accepted: 'accepted new permissions for', install_resumed: 'resumed' }[x.kind] || x.kind} the app ${d.handle}${['app_installed', 'install_repos_changed', 'install_requested'].includes(x.kind) ? ` (${d.repos ? d.repos.join(', ') : 'all repos'})` : ''}`
     if (x.kind.startsWith('domain_')) return `${{ domain_added: 'added', domain_verified: 'verified', domain_lost: 'lost (its record went away)', domain_removed: 'removed' }[x.kind] || x.kind} the domain ${d.domain}`
     if (x.kind === 'quilt_in') return `moved the quilt ${d.slug} in (from ${d.from})`
     if (x.kind === 'quilt_out') return `moved the quilt ${d.slug} out (to ${d.to})`

package/lib/quilts/tools.js

@@ -12,14 +12,14 @@ import { verifyQuilt, describeVerify } from './attest.js'
 import { codecFor, catBytes, grantSealed, describeSeal, startSealedIfNew } from './sealed.js'
 import { confirmWithLocalKey } from './linepolicy.js'
 import { describeAgentToken, describeAgentTokens } from './agent-tokens.js'
-import { eventLine, describeLog, describeShow, describeDiff, describeBlame, describeStatus, describeMerge, describeWrite, describeSquare, describeSquareStatus, describeEvents, describeTag, describeRelease, describeImport, describeImportRecord, describeRestore, describeReset, describeClean, describeLive, describeClaims, describeResolutions, describeLiveSet, describeLiveJoin, describeMergeBase, describeStack, describeStackDiff, describeGrep, describeBisect, describeCheck, describeReviews, describeInterdiff, describeReviewed, describeSquareCheck, describePolicy, describeKeys, describeTokens, describeNewToken, describeProtections, describeTeams, describeAccess, describeRedacted, describeRedactions, describeMetrics, describeSquarePolicy, describePolicyVersions, describeOrg, describeOrgs, describeOrgLog, describeOrgDomain, describeApp, describeApps, describeAppKey, describeOrgTeams, describeCheckRuns, describeRerun, describeHandoff, describeFinished, describeAncestor, describeContains, describePipeline, describeWatches, describeSearch, describePublicReads } from './describe.js'
+import { eventLine, describeLog, describeShow, describeDiff, describeBlame, describeStatus, describeMerge, describeWrite, describeSquare, describeSquareStatus, describeEvents, describeTag, describeRelease, describeImport, describeImportRecord, describeRestore, describeReset, describeClean, describeLive, describeClaims, describeResolutions, describeLiveSet, describeLiveJoin, describeMergeBase, describeStack, describeStackDiff, describeGrep, describeBisect, describeCheck, describeReviews, describeInterdiff, describeReviewed, describeSquareCheck, describePolicy, describeKeys, describeTokens, describeNewToken, describeProtections, describeTeams, describeAccess, describeRedacted, describeRedactions, describeMetrics, describeSquarePolicy, describePolicyVersions, describeOrg, describeOrgs, describeOrgLog, describeOrgDomain, describeApp, describeApps, describeAppKey, describeInstall, describeInstalls, describeRequest, describeRequests, describeOrgTeams, describeCheckRuns, describeRerun, describeHandoff, describeFinished, describeAncestor, describeContains, describePipeline, describeWatches, describeSearch, describePublicReads } from './describe.js'
 import { signWithLocalKey, localKey, makeLocalKey, signingKeyFile } from './signing.js'
 import { startDaemon, askDaemon } from './daemon.js'
 import { rebuild as rebuildBlock, conflictStyle } from './block.js'
 import { describeRebuild, describeOpened } from './describe.js'
 import { status as blockStatus, commitFolder, amendFolder, syncTo, pull, toLineTip, checkout, restore, reset, clean, localChanges, bytesOf, livePatch } from './block.js'
 
-export const SEAM_TOOLS = ['seam_quilts', 'seam_open_square', 'seam_squares', 'seam_log', 'seam_show', 'seam_diff', 'seam_blame', 'seam_cat', 'seam_ls', 'seam_commit', 'seam_merge', 'seam_rebase', 'seam_revert', 'seam_cherry_pick', 'seam_resolve', 'seam_square_status', 'seam_square_handoff', 'seam_abandon', 'seam_square_merged', 'seam_reopen', 'seam_fold', 'seam_split', 'seam_events', 'seam_events_webhook', 'seam_line_list', 'seam_line_new', 'seam_line_freeze', 'seam_line_unfreeze', 'seam_line_require', 'seam_reviews', 'seam_review', 'seam_tag_list', 'seam_tag', 'seam_release_list', 'seam_release', 'seam_import_git', 'seam_import_remote', 'seam_github', 'seam_github_import', 'seam_import_status', 'seam_import_authors', 'seam_import_poke', 'seam_import_cutover', 'seam_export_remote', 'seam_export_status', 'seam_restore', 'seam_reset', 'seam_clean', 'seam_live', 'seam_live_join', 'seam_live_set', 'seam_bisect', 'seam_grep', 'seam_search', 'seam_describe', 'seam_merge_base', 'seam_stack', 'seam_migrations_dir', 'seam_claims', 'seam_claim', 'seam_unclaim', 'seam_check', 'seam_resolutions', 'seam_forget_resolution', 'seam_sign', 'seam_keys', 'seam_key_add', 'seam_key_remove', 'seam_token_list', 'seam_token_new', 'seam_token_revoke', 'seam_protections', 'seam_protections_set', 'seam_team_set', 'seam_verify', 'seam_redact', 'seam_redactions', 'seam_seal', 'seam_secret_scanning', 'seam_public', 'seam_sealed', 'seam_policy', 'seam_line_policy_versions', 'seam_orgs', 'seam_org_log', 'seam_org_domain', 'seam_apps', 'seam_app', 'seam_app_key', 'seam_app_manager', 'seam_org_member', 'seam_org_team', 'seam_agent_token_new', 'seam_agent_token_list', 'seam_agent_token_revoke', 'seam_agents_make_lines', 'seam_checks', 'seam_check_rerun', 'seam_reparent', 'seam_archive', 'seam_unarchive', 'seam_hide', 'seam_unhide', 'seam_square_edit', 'seam_share', 'seam_unshare', 'seam_export_tarball', 'seam_claim_request', 'seam_claim_withdraw', 'seam_claim_handoff', 'seam_claim_finish', 'seam_blocks', 'seam_block_open', 'seam_block_touch', 'seam_block_close', 'seam_ancestor', 'seam_contains', 'seam_pipeline', 'seam_watch', 'seam_unwatch', 'seam_absorb', 'seam_interdiff', 'seam_apply_suggestion', 'seam_infra_paths', 'seam_owner_idle_hours', 'seam_public_reads', 'seam_export_archive', 'seam_metrics', 'seam_daemon', 'seam_block_rebuild', 'seam_clone', 'seam_pull', 'seam_member_add']
+export const SEAM_TOOLS = ['seam_quilts', 'seam_open_square', 'seam_squares', 'seam_log', 'seam_show', 'seam_diff', 'seam_blame', 'seam_cat', 'seam_ls', 'seam_commit', 'seam_merge', 'seam_rebase', 'seam_revert', 'seam_cherry_pick', 'seam_resolve', 'seam_square_status', 'seam_square_handoff', 'seam_abandon', 'seam_square_merged', 'seam_reopen', 'seam_fold', 'seam_split', 'seam_events', 'seam_events_webhook', 'seam_line_list', 'seam_line_new', 'seam_line_freeze', 'seam_line_unfreeze', 'seam_line_require', 'seam_reviews', 'seam_review', 'seam_tag_list', 'seam_tag', 'seam_release_list', 'seam_release', 'seam_import_git', 'seam_import_remote', 'seam_github', 'seam_github_import', 'seam_import_status', 'seam_import_authors', 'seam_import_poke', 'seam_import_cutover', 'seam_export_remote', 'seam_export_status', 'seam_restore', 'seam_reset', 'seam_clean', 'seam_live', 'seam_live_join', 'seam_live_set', 'seam_bisect', 'seam_grep', 'seam_search', 'seam_describe', 'seam_merge_base', 'seam_stack', 'seam_migrations_dir', 'seam_claims', 'seam_claim', 'seam_unclaim', 'seam_check', 'seam_resolutions', 'seam_forget_resolution', 'seam_sign', 'seam_keys', 'seam_key_add', 'seam_key_remove', 'seam_token_list', 'seam_token_new', 'seam_token_revoke', 'seam_protections', 'seam_protections_set', 'seam_team_set', 'seam_verify', 'seam_redact', 'seam_redactions', 'seam_seal', 'seam_secret_scanning', 'seam_public', 'seam_sealed', 'seam_policy', 'seam_line_policy_versions', 'seam_orgs', 'seam_org_log', 'seam_org_domain', 'seam_apps', 'seam_app', 'seam_app_key', 'seam_app_manager', 'seam_app_install', 'seam_app_request', 'seam_org_member', 'seam_org_team', 'seam_agent_token_new', 'seam_agent_token_list', 'seam_agent_token_revoke', 'seam_agents_make_lines', 'seam_checks', 'seam_check_rerun', 'seam_reparent', 'seam_archive', 'seam_unarchive', 'seam_hide', 'seam_unhide', 'seam_square_edit', 'seam_share', 'seam_unshare', 'seam_export_tarball', 'seam_claim_request', 'seam_claim_withdraw', 'seam_claim_handoff', 'seam_claim_finish', 'seam_blocks', 'seam_block_open', 'seam_block_touch', 'seam_block_close', 'seam_ancestor', 'seam_contains', 'seam_pipeline', 'seam_watch', 'seam_unwatch', 'seam_absorb', 'seam_interdiff', 'seam_apply_suggestion', 'seam_infra_paths', 'seam_owner_idle_hours', 'seam_public_reads', 'seam_export_archive', 'seam_metrics', 'seam_daemon', 'seam_block_rebuild', 'seam_clone', 'seam_pull', 'seam_member_add']
 
 /** What every agent is told about source control, in each MCP's instructions. */
 export const SEAM_GUIDE = 'Quilt source control (quilts): a quilt is a repository on the Quilt server; you work in a square (your own branch and working copy), commit save points in it, and merge it into main, where it becomes a patch. ' +
@@ -102,8 +102,10 @@ export const SEAM_DESCRIPTIONS = {
   seam_orgs: 'Your orgs (who may own quilts besides people), or one org with org: its members by role (owner, admin, member) and its quilts.',
   seam_org_log: 'What happened in an org, newest first: made, members added, removed or given a role, teams set, quilts moved in or out; who did it and when. Its admins and owners. before: a row id, for the page after.',
   seam_apps: 'Lists apps: the ones you change (yours, and your orgs\' where you are admin or owner), or with verified the public apps of verified orgs.',
-  seam_app: 'An app (any tool that connects to Seam): new makes one (owned by you, or by org when you are its admin or owner; a webhook secret Seam makes is shown once), show reads it (its public view when it is public and not yours), edit changes the fields given (permissions named change, the rest keep theirs; new_secret makes a new webhook secret), remove deletes it. Permissions are none, read or write for contents, squares, merges, lines, checks, reviews, claims, members and settings.',
+  seam_app: 'An app (any tool that connects to Seam): new makes one (owned by you, or by org when you are its admin or owner; a webhook secret Seam makes is shown once), show reads it (its public view when it is public and not yours), edit changes the fields given (permissions named change, the rest keep theirs; new_secret makes a new webhook secret), remove deletes it; disable (with a reason) and enable switch it off or on for everyone, for Seam staff only. Permissions are none, read or write for contents, squares, merges, lines, checks, reviews, claims, members and settings.',
   seam_app_key: 'An app\'s private keys (Ed25519): new makes one and answers its private half (PEM) this once, list gives the public halves, remove ends one. Up to ten live, for rotation. Its owner, managers, or its org\'s admins and owners.',
+  seam_app_install: 'Installs an app and manages its installations. install puts the app (handle) on your account, or on org when you are its admin or owner, on repos (quilt ids or slugs of that account) or all of them and later ones, with the permissions the app asks; an app from an org without a verified domain says unverified. list gives the apps on your account, or on org. show, repos (change which repos), accept (take the permissions the app added since: until then the install keeps its old set, listed as pending_permissions), pause, resume and remove take the installation id. Only the person, or the org\'s admins and owners.',
+  seam_app_request: 'Install requests on an org: ask (an org member who is not its admin asks for the app handle, on repos or all, with a note), list (the org\'s open requests, or all with all; its admins and owners), approve (installs it with the repos asked) or decline (id). An admin installs with seam_app_install instead.',
   seam_app_manager: 'Adds or removes a manager of an app (a person, by member id or email): managers edit the app and make its keys without being its org\'s owners. Its owner or its org\'s admins and owners.',
   seam_org_domain: 'Verifies an org by a domain it names: add gives the TXT record to put at _seam-verify.<domain>, check looks it up (the org is verified while one of its domains is; a verified domain is looked up again daily), remove drops it. An org\'s admin or owner who is a person.',
   seam_org_team: 'Sets an org\'s team (its members, replaced whole; [] removes it), which the protections of every quilt the org owns name as org_team:<name>. An org\'s admin or owner who is a person.',
@@ -234,8 +236,10 @@ export const SEAM_INPUTS = {
   seam_orgs: { org: z.string().max(100).optional() },
   seam_org_log: { org: z.string().max(100), limit: z.number().int().min(1).max(500).optional(), before: z.string().regex(/^\d{1,19}$/).optional() },
   seam_apps: { verified: z.boolean().optional() },
-  seam_app: { action: z.enum(['new', 'show', 'edit', 'remove']), handle: z.string().max(39), name: z.string().max(100).optional(), org: z.string().max(100).optional(), description: z.string().max(2000).optional(), homepage: z.string().max(2000).optional(), callback_url: z.string().max(2000).optional(), setup_url: z.string().max(2000).optional(), webhook_url: z.string().max(2000).optional(), webhook_secret: z.string().min(16).max(200).optional(), new_secret: z.boolean().optional(), events: z.array(z.string().max(50)).max(50).optional(), permissions: z.record(z.string().max(20), z.enum(['none', 'read', 'write'])).optional(), public: z.boolean().optional() },
+  seam_app: { action: z.enum(['new', 'show', 'edit', 'remove', 'disable', 'enable']), reason: z.string().max(500).optional().describe('Why, for disable'), handle: z.string().max(39), name: z.string().max(100).optional(), org: z.string().max(100).optional(), description: z.string().max(2000).optional(), homepage: z.string().max(2000).optional(), callback_url: z.string().max(2000).optional(), setup_url: z.string().max(2000).optional(), webhook_url: z.string().max(2000).optional(), webhook_secret: z.string().min(16).max(200).optional(), new_secret: z.boolean().optional(), events: z.array(z.string().max(50)).max(50).optional(), permissions: z.record(z.string().max(20), z.enum(['none', 'read', 'write'])).optional(), public: z.boolean().optional() },
   seam_app_key: { action: z.enum(['new', 'list', 'remove']), handle: z.string().max(39), id: z.string().max(100).optional() },
+  seam_app_install: { action: z.enum(['install', 'list', 'show', 'repos', 'accept', 'pause', 'resume', 'remove']), handle: z.string().max(39).optional().describe('The app, for install'), org: z.string().max(100).optional().describe('An org you administer, for install or list'), repos: z.union([z.literal('all'), z.array(z.string().max(200)).min(1).max(500)]).optional().describe('"all" (default) or quilts of the account'), id: z.string().max(100).optional().describe('The installation, for show, repos, pause, resume and remove') },
+  seam_app_request: { action: z.enum(['ask', 'list', 'approve', 'decline']), org: z.string().max(100), handle: z.string().max(39).optional().describe('The app, for ask'), repos: z.union([z.literal('all'), z.array(z.string().max(200)).min(1).max(500)]).optional(), note: z.string().max(1000).optional().describe('Why, for ask'), all: z.boolean().optional().describe('For list: decided ones too'), id: z.string().max(100).optional().describe('The request, for approve and decline') },
   seam_app_manager: { action: z.enum(['add', 'remove']), handle: z.string().max(39), member: z.string().max(200) },
   seam_org_domain: { org: z.string().max(100), action: z.enum(['add', 'check', 'remove']), domain: z.string().max(253) },
   seam_org_team: { org: z.string().max(100), name: z.string().max(63), members: z.array(z.string().max(200)).max(1000).describe('member ids (person:… or agent:…), every one in the org; [] removes the team') },
@@ -639,6 +643,9 @@ export async function runSeamTool (name, args, { client, found = null, hosted =
       case 'seam_app': {
         if (args.action === 'show') return describeApp(await client.app(args.handle))
         if (args.action === 'remove') return describeApp(await client.deleteApp(args.handle))
+        if (args.action === 'disable') return describeApp(await client.disableApp(args.handle, args.reason))
+        if (args.action === 'enable') return describeApp(await client.enableApp(args.handle))
+        delete args.reason
         const { action, handle, new_secret: fresh, ...b } = args
         if (action === 'new') return describeApp(await client.createApp({ handle, name: b.name || handle, ...b }))
         return describeApp(await client.editApp(handle, { ...b, ...(fresh ? { webhook_secret: true } : {}) }))
@@ -647,6 +654,21 @@ export async function runSeamTool (name, args, { client, found = null, hosted =
         if (args.action === 'remove' && !args.id) throw new Error('give the key id to remove')
         return describeAppKey(await (args.action === 'new' ? client.addAppKey(args.handle) : args.action === 'list' ? client.appKeys(args.handle) : client.removeAppKey(args.handle, args.id)))
       }
+      case 'seam_app_install': {
+        const { action, handle, org, repos, id } = args
+        if (action === 'list') return describeInstalls(await (org ? client.orgInstallations(org) : client.myInstallations()))
+        if (action === 'install') { if (!handle) throw new Error('give the app handle to install'); return describeInstall(await client.installApp(handle, { ...(org ? { org } : {}), repos: repos || 'all' })) }
+        if (!id) throw new Error('give the installation id')
+        if (action === 'repos') { if (!repos) throw new Error('give repos: "all" or quilts'); return describeInstall(await client.editInstallation(id, { repos })) }
+        return describeInstall(await (action === 'show' ? client.installation(id) : action === 'accept' ? client.acceptInstallation(id) : action === 'pause' ? client.pauseInstallation(id) : action === 'resume' ? client.resumeInstallation(id) : client.deleteInstallation(id)))
+      }
+      case 'seam_app_request': {
+        const { action, org, handle, repos, note, all, id } = args
+        if (action === 'list') return describeRequests(await client.orgRequests(org, { all: !!all }))
+        if (action === 'ask') { if (!handle) throw new Error('give the app handle to ask for'); return describeRequest(await client.requestApp(handle, { org, repos: repos || 'all', ...(note ? { note } : {}) })) }
+        if (!id) throw new Error('give the request id')
+        return describeRequest(await client.decideRequest(org, id, action))
+      }
       case 'seam_app_manager': return describeApp(await (args.action === 'add' ? client.addAppManager(args.handle, args.member) : client.removeAppManager(args.handle, args.member)))
       case 'seam_org_domain': return describeOrgDomain(await (args.action === 'add' ? client.addOrgDomain(args.org, args.domain) : args.action === 'check' ? client.checkOrgDomain(args.org, args.domain) : client.removeOrgDomain(args.org, args.domain)))
       case 'seam_org_team': return describeOrgTeams(await client.setOrgTeam(args.org, args.name, args.members))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyquilt/seam",
-  "version": "0.134.0",
+  "version": "0.141.0",
   "description": "seam: Seam's command. Git's verbs for source control that runs on the server, built for many agents and people at once.",
   "license": "UNLICENSED",
   "type": "module",