hap-cli 0.7.1__tar.gz → 0.8.0__tar.gz

{hap_cli-0.7.1 → hap_cli-0.8.0}/MANIFEST.in

@@ -11,3 +11,8 @@ include sources/v3-api-schema/INDEX.json
 include hap_cli/README.md
 include hap_cli/README_CN.md
 recursive-include hap_cli/locale *.json
+
+# edit-spec schemas are canonical in the hap-cli-app-editor skill; ship them
+# in the sdist so setup.py's build step can mirror them into
+# hap_cli/core/editor/editspec/ for the ``hap app-editor`` runtime loader.
+recursive-include skills/hap-cli-app-editor/scripts/editspec *.json

{hap_cli-0.7.1 → hap_cli-0.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: hap-cli
-Version: 0.7.1
+Version: 0.8.0
 Summary: CLI harness for MingDAO HAP - Enterprise no-code platform
 Author: hap-cli
 License: Apache-2.0
@@ -63,10 +63,32 @@ command — it falls back to a paste prompt for the token shown on the success
 page.
 
 ```bash
-hap auth whoami        # current user + current organization
-hap auth logout        # clear the saved token
+hap auth whoami        # current user + current environment/account + org
+hap auth logout        # log out the current account
 ```
 
+#### Multiple environments / accounts
+
+You can stay logged in to several environments (MingDAO SaaS, Nocoly, self-hosted) and
+several accounts at once. Each is saved under a name and you switch between them:
+
+```bash
+hap auth login mingdao --profile work-prod        # log in and save under a name
+hap auth login https://hap.example.com --profile onprem
+# Omit --profile and the name is derived from the login address, so logging
+# into a new environment never overwrites one you already saved.
+
+hap auth accounts                  # list saved environments/accounts (current marked *)
+hap auth use work-prod             # switch the environment/account used next
+hap --profile onprem app list      # use one environment/account for a single command
+HAP_PROFILE=onprem hap app list    # default a whole shell session to one
+
+hap auth logout -p onprem          # log out a specific account
+hap auth logout --all              # log out every account
+```
+
+Profile resolution order: `--profile` > the `HAP_PROFILE` env var > the current profile.
+
 ### 2. Pick an organization and app
 
 ```bash
@@ -113,9 +135,11 @@ discover every subcommand.
 
 | Command | Description |
 |---|---|
-| `auth login [SERVER]` | Browser login (use `--token` for scripted login) |
-| `auth logout` | Clear the saved auth token |
-| `auth whoami` | Show current user and current organization |
+| `auth login [SERVER]` | Browser login (`--token` for scripted login; `--profile NAME` saves under a name, auto-named if omitted; `--force` repoints an existing name) |
+| `auth accounts` | List saved environments/accounts (current marked `*`) |
+| `auth use NAME` | Switch the environment/account used next |
+| `auth logout` | Log out the current account (`-p NAME` for a specific one, `-a/--all` for every one) |
+| `auth whoami` | Show current user, current environment/account, and current organization |
 | `auth list-my-orgs` | List every org for the current account (current marked `*`) |
 | `auth set-current-org ORG_ID` | Switch the saved current organization |
 

{hap_cli-0.7.1/hap_cli → hap_cli-0.8.0}/README.md

@@ -34,10 +34,32 @@ command — it falls back to a paste prompt for the token shown on the success
 page.
 
 ```bash
-hap auth whoami        # current user + current organization
-hap auth logout        # clear the saved token
+hap auth whoami        # current user + current environment/account + org
+hap auth logout        # log out the current account
 ```
 
+#### Multiple environments / accounts
+
+You can stay logged in to several environments (MingDAO SaaS, Nocoly, self-hosted) and
+several accounts at once. Each is saved under a name and you switch between them:
+
+```bash
+hap auth login mingdao --profile work-prod        # log in and save under a name
+hap auth login https://hap.example.com --profile onprem
+# Omit --profile and the name is derived from the login address, so logging
+# into a new environment never overwrites one you already saved.
+
+hap auth accounts                  # list saved environments/accounts (current marked *)
+hap auth use work-prod             # switch the environment/account used next
+hap --profile onprem app list      # use one environment/account for a single command
+HAP_PROFILE=onprem hap app list    # default a whole shell session to one
+
+hap auth logout -p onprem          # log out a specific account
+hap auth logout --all              # log out every account
+```
+
+Profile resolution order: `--profile` > the `HAP_PROFILE` env var > the current profile.
+
 ### 2. Pick an organization and app
 
 ```bash
@@ -84,9 +106,11 @@ discover every subcommand.
 
 | Command | Description |
 |---|---|
-| `auth login [SERVER]` | Browser login (use `--token` for scripted login) |
-| `auth logout` | Clear the saved auth token |
-| `auth whoami` | Show current user and current organization |
+| `auth login [SERVER]` | Browser login (`--token` for scripted login; `--profile NAME` saves under a name, auto-named if omitted; `--force` repoints an existing name) |
+| `auth accounts` | List saved environments/accounts (current marked `*`) |
+| `auth use NAME` | Switch the environment/account used next |
+| `auth logout` | Log out the current account (`-p NAME` for a specific one, `-a/--all` for every one) |
+| `auth whoami` | Show current user, current environment/account, and current organization |
 | `auth list-my-orgs` | List every org for the current account (current marked `*`) |
 | `auth set-current-org ORG_ID` | Switch the saved current organization |
 

{hap_cli-0.7.1 → hap_cli-0.8.0}/app_live_tests/harness.py

@@ -53,11 +53,14 @@ def hap(args: list[str], *, check: bool = True) -> Any:
 
 
 def editor(args: list[str]) -> tuple[int, str, str]:
-    """Run the editor skill (``python -m scripts <args>``) in the skill dir."""
-    py = config.PYTHON_BIN or sys.executable
-    argv = [py, "-m", "scripts", *args]
+    """Run the editor via the installed CLI: ``hap app-editor <args>``.
+
+    The editor engine was migrated into hap-cli, so the entry point is now
+    the real command (not ``python -m scripts``).
+    """
+    argv = [config.HAP_BIN, "app-editor", *args]
     proc = subprocess.run(argv, capture_output=True, text=True,
-                          cwd=str(config.SKILL_DIR), timeout=config.TIMEOUT)
+                          timeout=config.TIMEOUT)
     return proc.returncode, proc.stdout, proc.stderr
 
 

{hap_cli-0.7.1 → hap_cli-0.8.0}/app_live_tests/smoke.py

@@ -415,6 +415,88 @@ def case_application(app_id: str, section_id: str) -> None:
     check("section gone after delete", renamed not in _sections(app_id))
 
 
+def case_app_usage(app_id: str, section_id: str) -> None:
+    """`hap app usage` — org overview + app-scoped + range variants.
+
+    Regression: --range used to be a raw day count passed straight through
+    as the dayRange enum (default 7 → out-of-range → 参数错误 / 服务异常).
+    """
+    print("scenario: app usage (org overview + app-scoped + ranges)")
+    _, org_id = state.ensure_app()
+
+    overview = hap(["app", "usage", "--org-id", org_id])
+    check("org-wide usage returns a dict", isinstance(overview, dict),
+          f"got {type(overview).__name__}: {overview!r}")
+    check("org-wide usage has 'app' bucket",
+          isinstance(overview, dict) and "app" in overview,
+          f"keys={list(overview) if isinstance(overview, dict) else overview!r}")
+
+    scoped = hap(["app", "usage", "--org-id", org_id, "--app-id", app_id])
+    check("app-scoped usage returns a dict", isinstance(scoped, dict),
+          f"got {type(scoped).__name__}: {scoped!r}")
+
+    # Every range label must be accepted by the server (no 参数错误).
+    for label in ("7d", "30d", "90d", "6m", "1y"):
+        res = hap(["app", "usage", "--org-id", org_id, "--range", label], check=False)
+        check(f"usage --range {label} accepted", isinstance(res, dict),
+              f"got {res!r}")
+
+
+def _exports(app_id: str) -> list[dict]:
+    data = hap(["app", "exports", app_id], check=False)
+    if isinstance(data, dict):
+        data = data.get("list", data.get("exports", []))
+    return data if isinstance(data, list) else []
+
+
+def case_app_export(app_id: str, section_id: str) -> None:
+    """`hap app export` — structure-only batch export.
+
+    Regression: the wrapper sent {appIds:[...]} but BatchExportApp wants
+    {projectId, appConfigs:[{appId, exampleType, sheetConfig}]} → 服务异常.
+    """
+    print("scenario: app export (structure only)")
+    _, org_id = state.ensure_app()
+
+    res = hap(["app", "export", app_id, "--org-id", org_id], check=False)
+    # The fix is proven by the call NOT raising 服务异常 and returning a
+    # truthy payload (the server accepts the export request).
+    check("export request accepted (no 服务异常)",
+          res not in (None, {}, False) or res is True,
+          f"got {res!r}")
+
+
+def case_app_logs(app_id: str, section_id: str) -> None:
+    """`hap app logs APP_ID` must filter to that app, not return the whole org.
+
+    Regression: the wrapper called the legacy GetLogs with a singular appId
+    that GetGlobalLogs ignores, so every call returned the org-wide logs.
+    """
+    print("scenario: app logs (app filter vs org-wide)")
+    _, org_id = state.ensure_app()
+
+    scoped = hap(["app", "logs", app_id, "--org-id", org_id, "-n", "10"])
+    org_wide = hap(["app", "logs", "--org-id", org_id, "-n", "10"])
+
+    check("logs envelope has list+allCount",
+          isinstance(scoped, dict) and "list" in scoped and "allCount" in scoped,
+          f"got {scoped!r}")
+    # The whole point: scoping to one app returns fewer rows than org-wide.
+    s_count = scoped.get("allCount", 0) if isinstance(scoped, dict) else 0
+    o_count = org_wide.get("allCount", 0) if isinstance(org_wide, dict) else 0
+    check("app filter narrows result (scoped < org-wide)", s_count < o_count,
+          f"scoped allCount={s_count} not < org-wide allCount={o_count}")
+    # No row may belong to a *different* app (some rows carry no app
+    # metadata at all — those are fine; foreign app ids are not).
+    rows = scoped.get("list", []) if isinstance(scoped, dict) else []
+    def _row_app(r):
+        a = r.get("application")
+        return a.get("id") if isinstance(a, dict) else a
+    foreign = {_row_app(r) for r in rows} - {app_id, None, ""}
+    check("no scoped row belongs to another app", not foreign,
+          f"foreign apps: {sorted(foreign)}")
+
+
 _CASES = {
     "worksheet": case_worksheet,
     "field": case_field,
@@ -427,6 +509,9 @@ _CASES = {
     "workflow": case_workflow,
     "node": case_node,
     "application": case_application,
+    "app-usage": case_app_usage,
+    "app-export": case_app_export,
+    "app-logs": case_app_logs,
 }
 
 

{hap_cli-0.7.1 → hap_cli-0.8.0/hap_cli}/README.md

@@ -34,10 +34,32 @@ command — it falls back to a paste prompt for the token shown on the success
 page.
 
 ```bash
-hap auth whoami        # current user + current organization
-hap auth logout        # clear the saved token
+hap auth whoami        # current user + current environment/account + org
+hap auth logout        # log out the current account
 ```
 
+#### Multiple environments / accounts
+
+You can stay logged in to several environments (MingDAO SaaS, Nocoly, self-hosted) and
+several accounts at once. Each is saved under a name and you switch between them:
+
+```bash
+hap auth login mingdao --profile work-prod        # log in and save under a name
+hap auth login https://hap.example.com --profile onprem
+# Omit --profile and the name is derived from the login address, so logging
+# into a new environment never overwrites one you already saved.
+
+hap auth accounts                  # list saved environments/accounts (current marked *)
+hap auth use work-prod             # switch the environment/account used next
+hap --profile onprem app list      # use one environment/account for a single command
+HAP_PROFILE=onprem hap app list    # default a whole shell session to one
+
+hap auth logout -p onprem          # log out a specific account
+hap auth logout --all              # log out every account
+```
+
+Profile resolution order: `--profile` > the `HAP_PROFILE` env var > the current profile.
+
 ### 2. Pick an organization and app
 
 ```bash
@@ -84,9 +106,11 @@ discover every subcommand.
 
 | Command | Description |
 |---|---|
-| `auth login [SERVER]` | Browser login (use `--token` for scripted login) |
-| `auth logout` | Clear the saved auth token |
-| `auth whoami` | Show current user and current organization |
+| `auth login [SERVER]` | Browser login (`--token` for scripted login; `--profile NAME` saves under a name, auto-named if omitted; `--force` repoints an existing name) |
+| `auth accounts` | List saved environments/accounts (current marked `*`) |
+| `auth use NAME` | Switch the environment/account used next |
+| `auth logout` | Log out the current account (`-p NAME` for a specific one, `-a/--all` for every one) |
+| `auth whoami` | Show current user, current environment/account, and current organization |
 | `auth list-my-orgs` | List every org for the current account (current marked `*`) |
 | `auth set-current-org ORG_ID` | Switch the saved current organization |
 

{hap_cli-0.7.1 → hap_cli-0.8.0}/hap_cli/README_CN.md

@@ -30,10 +30,30 @@ hap auth login https://your-server.com --token YOUR_TOKEN
 浏览器流程会打开 HAP 登录页并捕获令牌。如果 CLI 收不到回调（无 GUI、网络受限），中断命令即可回退到粘贴登录页显示的令牌。
 
 ```bash
-hap auth whoami        # 当前用户与当前组织
-hap auth logout        # 清除已保存的令牌
+hap auth whoami        # 当前用户、当前环境/账号与当前组织
+hap auth logout        # 登出当前账号
 ```
 
+#### 多环境 / 多账号
+
+可同时授权多个环境（MingDAO SaaS、Nocoly、私有部署）与多个账号，各存成一个具名档案，长期共存、随时切换：
+
+```bash
+hap auth login mingdao --profile work-prod        # 登录并起名保存
+hap auth login https://hap.example.com --profile onprem
+# 省略 --profile 时按登录地址自动起名，登录新环境不会覆盖已保存的
+
+hap auth accounts                  # 列出所有环境/账号，当前的带 *
+hap auth use work-prod             # 切换当前使用的环境/账号
+hap --profile onprem app list      # 只让这一条命令临时用某个环境/账号
+HAP_PROFILE=onprem hap app list    # 整个终端会话默认用某个环境/账号
+
+hap auth logout -p onprem          # 登出指定账号
+hap auth logout --all              # 登出全部账号
+```
+
+档案选择优先级：`--profile` > 环境变量 `HAP_PROFILE` > 当前档案。
+
 ### 2. 选定组织和应用
 
 ```bash
@@ -77,9 +97,11 @@ hap --json worksheet record list WORKSHEET_ID
 
 | 命令 | 说明 |
 |---|---|
-| `auth login [SERVER]` | 浏览器登录（`--token` 走非交互） |
-| `auth logout` | 清除已保存的令牌 |
-| `auth whoami` | 当前用户与当前组织 |
+| `auth login [SERVER]` | 浏览器登录（`--token` 走非交互；`--profile NAME` 存成具名档案，省略则自动起名；`--force` 重指向已有名字） |
+| `auth accounts` | 列出所有环境/账号，当前的标 `*` |
+| `auth use NAME` | 切换当前使用的环境/账号 |
+| `auth logout` | 登出当前账号（`-p NAME` 指定，`-a/--all` 全部） |
+| `auth whoami` | 当前用户、当前环境/账号与当前组织 |
 | `auth list-my-orgs` | 当前账号所属组织（当前组织标 `*`） |
 | `auth set-current-org ORG_ID` | 切换默认组织 |
 

{hap_cli-0.7.1 → hap_cli-0.8.0}/hap_cli/__init__.py

@@ -1,3 +1,3 @@
 """CLI harness for MingDAO HAP (hap-cli)."""
 
-__version__ = "0.7.1"
+__version__ = "0.8.0"

{hap_cli-0.7.1 → hap_cli-0.8.0}/hap_cli/commands/app_cmd.py

@@ -404,12 +404,34 @@ def app_restore(ctx, app_id, org_id, backup_id, file_url, file_name, no_data, as
 
 @app.command("export")
 @click.argument("app_ids", nargs=-1, required=True)
+@org_id_option()
+@click.option(
+    "--include-data/--no-data",
+    default=False,
+    help="Include up to 10000 records per table (default: structure only).",
+)
+@click.option(
+    "--password",
+    default="",
+    help="Protect the exported package with an import password.",
+)
 @pass_context
-def app_export(ctx, app_ids):
-    """Export applications (batch)."""
+def app_export(ctx, app_ids, org_id, include_data, password):
+    """Export one or more applications.
+
+    Exports run against an organization — pass --org-id or rely on the
+    current one. By default only the app structure is exported; use
+    --include-data to bundle sample records.
+    """
     try:
         session = ctx.get_session()
-        data = app_mod.export_apps(session, list(app_ids))
+        data = app_mod.export_apps(
+            session,
+            require_api_project_id(session, org_id),
+            list(app_ids),
+            example_type=1 if include_data else 0,
+            password=password,
+        )
         ctx.output(data, lambda d: click.echo(f"Export started: {d}"))
     except Exception as e:
         ctx.handle_error(e)
@@ -447,16 +469,39 @@ def app_backup_logs(ctx, app_id, org_id, page_size, page):
 # ── Usage & Logs ─────────────────────────────────────────────────────────
 
 
+# CLI time-window labels → the server's dayRange enum (0=7d,1=month,
+# 2=quarter,3=half-year,4=year). Evidence: pd-openweb
+# src/pages/Admin/app/useAnalytics/util.js selectDateList.
+_USAGE_RANGE = {"7d": 0, "30d": 1, "90d": 2, "6m": 3, "1y": 4}
+
+
 @app.command("usage")
 @org_id_option()
-@click.option("--app-id", "-a", default="", help="Filter by app ID")
-@click.option("--days", "-d", default=7, type=int, help="Day range (default 7)")
+@click.option("--app-id", "-a", default="", help="Show stats for a single app (omit for the whole org)")
+@click.option(
+    "--range",
+    "time_range",
+    type=click.Choice(list(_USAGE_RANGE.keys())),
+    default="7d",
+    help="Time window: 7d / 30d / 90d / 6m / 1y (default 7d)",
+)
 @pass_context
-def app_usage(ctx, org_id, app_id, days):
-    """Get application usage statistics."""
+def app_usage(ctx, org_id, app_id, time_range):
+    """Get application usage statistics for an organization.
+
+    Without --app-id you get an organization-wide overview; pass --app-id
+    to focus on one application.
+    """
     try:
         session = ctx.get_session()
-        data = app_mod.get_usage_stats(session, require_api_project_id(session, org_id), app_id=app_id, day_range=days)
+        data = app_mod.get_usage_stats(
+            session,
+            require_api_project_id(session, org_id),
+            app_id=app_id,
+            day_range=_USAGE_RANGE[time_range],
+            # isApp mirrors the frontend: true only when scoped to one app.
+            is_app=bool(app_id),
+        )
         ctx.output(data, lambda d: output_json(d))
     except Exception as e:
         ctx.handle_error(e)
@@ -465,17 +510,25 @@ def app_usage(ctx, org_id, app_id, days):
 @app.command("logs")
 @click.argument("app_id", required=False, default="")
 @click.option("--org-id", default="", help="Organization ID (falls back to default)")
+@click.option("--start", default="", help="Window start 'YYYY-MM-DD HH:MM:SS' (default: last 30 days)")
+@click.option("--end", default="", help="Window end 'YYYY-MM-DD HH:MM:SS' (default: now)")
 @click.option("--page-size", "-n", default=50, help="Items per page")
 @click.option("--page", "-p", default=1, help="Page number")
 @pass_context
-def app_logs(ctx, app_id, org_id, page_size, page):
-    """Get application operation logs (org-wide; pass APP_ID to filter)."""
+def app_logs(ctx, app_id, org_id, start, end, page_size, page):
+    """Get operation logs for an organization.
+
+    Pass APP_ID to see only that app's logs; omit it for the whole
+    organization. Defaults to the last 30 days unless --start/--end given.
+    """
     try:
         session = ctx.get_session()
         data = app_mod.get_app_logs(
             session,
             project_id=require_api_project_id(session, org_id),
             app_id=app_id,
+            start=start,
+            end=end,
             page_index=page,
             page_size=page_size,
         )

hap_cli-0.8.0/hap_cli/commands/app_editor_cmd.py

@@ -0,0 +1,137 @@
+"""CLI commands for fine-grained HAP app element editing (``hap app-editor``).
+
+Thin Click layer over the editor engine in ``hap_cli.core.editor``:
+edit-spec validation, live inspection, dry-run planning, and applying
+single-element changes (worksheet / field / view / role / custom-action /
+workflow / custom-page / component / chatbot / node / app / section).
+
+The edit-spec schemas are documented and shipped with the
+``hap-cli-app-editor`` skill; this command resolves them at runtime.
+"""
+import json
+
+import click
+
+from hap_cli.context import pass_context
+from hap_cli.core.editor import apply as apply_mod
+from hap_cli.core.editor import editspec, planner
+from hap_cli.core.editor.errors import EditorError, EditSpecError
+from hap_cli.core.editor.reader import AppIndex
+from hap_cli.utils.options import org_id_option
+
+
+@click.group("app-editor", help="Fine-grained edit of an existing HAP app's "
+                                "elements via a structured edit-spec.")
+def app_editor():
+    pass
+
+
+@app_editor.command("validate")
+@click.argument("spec_path", type=click.Path(exists=True, dir_okay=False))
+@pass_context
+def app_editor_validate(ctx, spec_path):
+    """Validate an edit-spec locally (no API calls)."""
+    try:
+        editspec.load_spec(spec_path)
+    except EditSpecError as exc:
+        if ctx.json_mode:
+            ctx.output({"valid": False, "problems": exc.problems})
+        else:
+            click.echo("edit-spec invalid:", err=True)
+            for p in exc.problems:
+                click.echo(f"  - {p}", err=True)
+        raise SystemExit(2)
+    ctx.output({"valid": True}, lambda d: click.echo("edit-spec OK"))
+
+
+def _resolve_app_ref(spec, app_override):
+    return app_override or spec.get("app")
+
+
+@app_editor.command("inspect")
+@click.argument("app_ref")
+@org_id_option()
+@pass_context
+def app_editor_inspect(ctx, app_ref, org_id):
+    """Print the live name->id structure of an app (worksheets, views,
+    roles, workflows, pages, ...) — author edit-specs against it."""
+    try:
+        session = ctx.get_session()
+        idx = AppIndex.load(session, app_ref, org_id)
+        ctx.output(idx.summary(),
+                   lambda d: click.echo(json.dumps(d, ensure_ascii=False, indent=2)))
+    except EditorError as e:
+        ctx.handle_error(e)
+    except Exception as e:  # noqa: BLE001
+        ctx.handle_error(e)
+
+
+@app_editor.command("plan")
+@click.argument("spec_path", type=click.Path(exists=True, dir_okay=False))
+@click.option("--app", "app_override", default="",
+              help="Override the spec's target app (id or name).")
+@org_id_option()
+@pass_context
+def app_editor_plan(ctx, spec_path, app_override, org_id):
+    """Dry run: validate, read live structure, and show what apply would do."""
+    try:
+        spec = editspec.load_spec(spec_path)
+        session = ctx.get_session()
+        idx = AppIndex.load(session, _resolve_app_ref(spec, app_override), org_id)
+        planned = planner.build_plan(spec, idx)
+        ctx.output(
+            {"ops": [{"index": p.index, "type": p.op.get("type"),
+                      "actions": [a.description for a in p.actions]}
+                     for p in planned]},
+            lambda d: click.echo(planner.render_plan(planned)))
+    except EditSpecError as exc:
+        for p in exc.problems:
+            click.echo(f"  - {p}", err=True)
+        raise SystemExit(2)
+    except Exception as e:  # noqa: BLE001
+        ctx.handle_error(e)
+
+
+@app_editor.command("apply")
+@click.argument("spec_path", type=click.Path(exists=True, dir_okay=False))
+@click.option("--app", "app_override", default="",
+              help="Override the spec's target app (id or name).")
+@org_id_option()
+@click.option("--continue", "cont", is_flag=True, default=False,
+              help="Keep going after an op fails (default: stop).")
+@pass_context
+def app_editor_apply(ctx, spec_path, app_override, org_id, cont):
+    """Apply an edit-spec against the live app, op by op."""
+    try:
+        spec = editspec.load_spec(spec_path)
+        session = ctx.get_session()
+        idx = AppIndex.load(session, _resolve_app_ref(spec, app_override), org_id)
+
+        def _echo(outcome):
+            if not ctx.json_mode:
+                mark = "OK " if outcome.status == "ok" else "ERR"
+                tail = f" — {outcome.detail}" if outcome.detail else ""
+                click.echo(f"  [{mark}] [{outcome.index}] {outcome.op_type}{tail}")
+
+        outcomes = apply_mod.apply_spec(spec, idx, continue_on_error=cont,
+                                        on_outcome=_echo)
+        errors = [o for o in outcomes if o.status == "error"]
+        ctx.output(
+            {"applied": len(outcomes) - len(errors), "total": len(outcomes),
+             "failed": len(errors),
+             "outcomes": [{"index": o.index, "type": o.op_type,
+                           "status": o.status, "detail": o.detail}
+                          for o in outcomes]},
+            lambda d: click.echo(
+                f"applied {d['applied']}/{d['total']} ops"
+                + (f", {d['failed']} failed" if d['failed'] else "")))
+        if errors:
+            raise SystemExit(1)
+    except EditSpecError as exc:
+        for p in exc.problems:
+            click.echo(f"  - {p}", err=True)
+        raise SystemExit(2)
+    except SystemExit:
+        raise
+    except Exception as e:  # noqa: BLE001
+        ctx.handle_error(e)