@homespunapps/cli 1.6.78 → 1.6.80

package/dist/argv.js

@@ -75,6 +75,21 @@ export const BOOLEAN_FLAGS = new Set([
     // `homespun credentials mint --members`: opt the credential into the app's
     // member directory in its boot/hello payloads.
     "members",
+    // `homespun apps transfer <app> --show`: print the app's pending ownership
+    // transfer instead of starting or withdrawing one. Named "show" rather than
+    // "status", which "apps list --status <value>" and "connections deliveries
+    // --status <value>" already own as a value flag under the same name.
+    "show",
+    // `homespun apps transfer <app> --cancel`: withdraw the app's pending
+    // ownership transfer.
+    "cancel",
+    // `homespun apps transfer <app> --to <email> --keep-as-member`: the
+    // recipient becomes the owner, the current owner stays on as a plain
+    // member. Default when neither this nor --remove-me is given.
+    "keep-as-member",
+    // `homespun apps transfer <app> --to <email> --remove-me`: the current
+    // owner is removed the moment the recipient accepts the transfer.
+    "remove-me",
 ]);
 /**
  * Flags that may be repeated, accumulating one value per occurrence instead

package/dist/commands/apps.js

@@ -26,7 +26,7 @@ export async function runApps(args) {
         return;
     }
     if (verb === undefined) {
-        fail("missing verb: homespun apps <list|show|audit|update|share-link|delete|wake|watch|domain>", "invalid_args");
+        fail("missing verb: homespun apps <list|show|audit|update|share-link|delete|wake|watch|domain|transfer>", "invalid_args");
     }
     const sub = {
         positionals: args.positionals.slice(1),
@@ -61,8 +61,10 @@ export async function runApps(args) {
             return runWatch(sub);
         case "domain":
             return runDomain(sub);
+        case "transfer":
+            return runTransfer(sub);
         default:
-            fail(`unknown verb '${verb}': homespun apps <list|show|audit|update|share-link|delete|deleted|restore|purge|wake|watch|domain>`, "invalid_args");
+            fail(`unknown verb '${verb}': homespun apps <list|show|audit|update|share-link|delete|deleted|restore|purge|wake|watch|domain|transfer>`, "invalid_args");
     }
 }
 // ---------------------------------------------------------------------------
@@ -560,3 +562,98 @@ async function runDomain(args) {
         failFromError(e);
     }
 }
+// ---------------------------------------------------------------------------
+// `homespun apps transfer <app> --to <email> [--keep-as-member|--remove-me]`
+//                          `<app> --show` | `<app> --cancel`  (issue #1847)
+//
+// Transferring an app is a two-party job, same shape as `domain` above: this
+// side only ever mints or withdraws a PENDING transfer. Ownership does not
+// move until the recipient accepts it by email, so the initiating path's
+// output has to say that in plain words: a caller reading only a JSON blob
+// back has no way to tell "the app moved" from "an invite went out".
+//
+// Flag naming note: the inspection mode is `--show`, not `--status`. `apps
+// list --status <value>` and `connections deliveries --status <value>`
+// already own `status` as a VALUE flag, and the argv parser has one global
+// boolean-flags set shared by every noun/verb (see BOOLEAN_FLAGS in
+// argv.ts), so there is no per-command scoping that would let `--status` be
+// a bare boolean here and a value flag there. `--show` says the same thing
+// without the collision.
+// ---------------------------------------------------------------------------
+const TRANSFER_USAGE = "usage: homespun apps transfer <app> --to <email> [--keep-as-member|--remove-me] | homespun apps transfer <app> --show | homespun apps transfer <app> --cancel";
+/** Render a pending transfer for the human-readable (non `--json`) path. */
+function describeTransfer(transfer) {
+    const stay = transfer.keepAsMember
+        ? "you will stay on as a member once they accept"
+        : "you will be removed from the app once they accept";
+    return (`transfer pending to ${transfer.toEmail}, sent ${transfer.createdAt}, ` +
+        `expires ${transfer.expiresAt}: ${stay}. ` +
+        "Nothing has moved yet: the recipient has to accept it by email first.");
+}
+async function runTransfer(args) {
+    assertKnownFlags(args, ...specFor("apps", "transfer"));
+    const appArg = args.positionals[0];
+    if (!appArg)
+        fail(TRANSFER_USAGE, "invalid_args");
+    const to = args.flags.get("to");
+    const show = args.bools.has("show");
+    const cancel = args.bools.has("cancel");
+    const keepAsMember = args.bools.has("keep-as-member");
+    const removeMe = args.bools.has("remove-me");
+    const modeCount = [to !== undefined, show, cancel].filter(Boolean).length;
+    if (modeCount === 0)
+        fail(TRANSFER_USAGE, "invalid_args");
+    if (modeCount > 1) {
+        fail("--to, --show and --cancel are mutually exclusive", "invalid_args");
+    }
+    if (keepAsMember && removeMe) {
+        fail("--keep-as-member and --remove-me are mutually exclusive", "invalid_args");
+    }
+    if ((keepAsMember || removeMe) && to === undefined) {
+        fail("--keep-as-member and --remove-me only apply when initiating a transfer with --to", "invalid_args");
+    }
+    const client = makeClient(args);
+    const id = await resolveAppId(client, appArg);
+    const json = args.bools.has("json");
+    try {
+        if (show) {
+            const { transfer } = await client.getAppTransfer(id);
+            if (json) {
+                printJson({ transfer });
+            }
+            else if (!transfer) {
+                process.stdout.write("no ownership transfer is pending for this app\n");
+            }
+            else {
+                process.stdout.write(describeTransfer(transfer) + "\n");
+            }
+            return;
+        }
+        if (cancel) {
+            await client.cancelAppTransfer(id);
+            if (json) {
+                printJson({ cancelled: true, app_id: id });
+            }
+            else {
+                process.stdout.write("the pending transfer, if any, has been withdrawn\n");
+            }
+            return;
+        }
+        // initiate: keepAsMember defaults to true (--remove-me is the only way
+        // to opt out), matching the relay's own default.
+        const { transfer } = await client.createAppTransfer(id, {
+            email: to,
+            keepAsMember: !removeMe,
+        });
+        if (json) {
+            printJson({ transfer });
+        }
+        else {
+            process.stdout.write(describeTransfer(transfer) + "\n");
+            process.stdout.write(`Check its status with 'homespun apps transfer ${appArg} --show', or withdraw it with 'homespun apps transfer ${appArg} --cancel'.\n`);
+        }
+    }
+    catch (e) {
+        failFromError(e);
+    }
+}

package/dist/help-catalog.js

@@ -31,7 +31,7 @@ const APPS = {
     noun: "apps",
     tagline: "app lifecycle management",
     group: "app",
-    rootSummary: "App lifecycle: list, show, audit (security review of your apps' collection permissions), update, delete, deleted (what is in the trash), restore, purge (destroy a deleted app for good), wake, domain (custom domains), watch (stream the app's change feed as JSON-lines).",
+    rootSummary: "App lifecycle: list, show, audit (security review of your apps' collection permissions), update, delete, deleted (what is in the trash), restore, purge (destroy a deleted app for good), wake, domain (custom domains), watch (stream the app's change feed as JSON-lines), transfer (hand ownership to another human).",
     verbs: [
         {
             verb: "list",
@@ -152,12 +152,43 @@ const APPS = {
                 },
             ],
         },
+        {
+            verb: "transfer",
+            positionals: "<app>",
+            summary: "Hands app ownership to another human. Nothing moves until they accept the invite by email; e.g. `homespun apps transfer shop --to new-owner@example.com`, then check it with `homespun apps transfer shop --show` or pull it back with `homespun apps transfer shop --cancel`.",
+            flags: [
+                {
+                    name: "to",
+                    value: "<email>",
+                    description: "Invite this email to take ownership",
+                },
+            ],
+            bools: [
+                {
+                    name: "keep-as-member",
+                    description: "Stay on as a member once accepted (default when neither this nor --remove-me is given)",
+                },
+                {
+                    name: "remove-me",
+                    description: "Be removed from the app once accepted",
+                },
+                {
+                    name: "show",
+                    description: "Show the pending transfer instead of starting one",
+                },
+                {
+                    name: "cancel",
+                    description: "Withdraw the pending transfer",
+                },
+            ],
+        },
     ],
     notes: [
         "<app> accepts either the app_id or its slug (resolved via GET /v1/apps?slug= when it does not look like a cuid).",
         'watch streams the app\'s change feed as JSON-lines on stdout, one compact SerializedFeedEntry object per line, identical whether served over the live WebSocket (primary) or the long-poll fallback (used automatically when the WS upgrade fails, for example a locked-down network blocks outbound WS). A dormancy transition mid-watch emits a single {"type":"_dormant"} line and exits 0.',
+        "transfer prints a plain-language explanation by default (what will happen, that the recipient must accept by email, and that ownership has not moved yet), not just a JSON object; pass --json for the raw { transfer } record instead. audit does the same: a human report by default, --json for the machine one.",
     ],
-    outputNote: 'Output is JSON, and JSON-lines for watch. Errors go to stderr as {"error":{"code","message"}} with a non-zero exit.',
+    outputNote: 'Output is JSON, JSON-lines for watch, and a human-readable report by default for audit and transfer (pass --json for the raw object on those two). Errors go to stderr as {"error":{"code","message"}} with a non-zero exit.',
 };
 const DATA = {
     noun: "data",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homespunapps/cli",
-  "version": "1.6.78",
+  "version": "1.6.80",
   "description": "Command-line client for the Homespun relay: deploy a real multi-user web app from your agent, then keep reading and writing its data.",
   "license": "MIT",
   "type": "module",
@@ -36,7 +36,7 @@
     "test:unit": "vitest run"
   },
   "dependencies": {
-    "@homespunapps/core": "^1.6.78",
+    "@homespunapps/core": "^1.6.80",
     "qrcode-terminal": "^0.12.0"
   },
   "devDependencies": {