Repository navigation
BOT-2475: share apps with Buzz communities from the CLI - #38
Merged
Merged
Conversation
nathan-thillairajah
force-pushed
the
markS/bot-2475-community-cli
branch
3 times, most recently
from
October 29, 2026 15:39
287bc83 to
32b391b
Compare
kalvinnchau
reviewed
Oct 29, 2026
kalvinnchau
left a comment
kalvinnchau
left a comment
There was a problem hiding this comment.
🤖 One P2 integration issue: community grant/revoke cannot authenticate through the current Blox proxy credential path. Source-only review; runtime execution was intentionally out of scope.
kalvinnchau
previously approved these changes
Oct 29, 2026
nathan-thillairajah
force-pushed
the
markS/bot-2475-community-cli
branch
from
October 29, 2026 17:40
32b391b to
39980ed
Compare
Adds `bl apps community grant|revoke APP_ID COMMUNITY_ID`. Each command reads the grant's CAS inputs on the community sharing route and then applies the change with that revision, the same flow the retired workspace commands used. Kgoose swaps the CLI session for a community-bound credential on this route and checks membership before a grant. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Roxy only asks Kgoose for a sharing credential on workspace routes, so a proxied community request carries the owner's JWT and Compose refuses it. `bl apps community` now stops before any request in proxy mode and points at Share & manage or an approved ingress. The grant test no longer uses a canned proxy success. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
nathan-thillairajah
force-pushed
the
markS/bot-2475-community-cli
branch
from
October 29, 2026 17:48
39980ed to
d4b3950
Compare
nathan-thillairajah
changed the base branch from
codex/retire-workspace-sharing-cli-20261029
to
main
October 29, 2026 17:48
nathan-thillairajah
dismissed
kalvinnchau’s stale review
October 29, 2026 17:48
The base branch was changed.
kalvinnchau
approved these changes
Oct 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Builderlab is moving to one workspace per account, so an app is shared with its own workspace plus Buzz communities. #37 removes the workspace grant commands entirely. So far community sharing has only been possible in the Apps UI. Agents create and share most apps, so they need the same control from the CLI (BOT-2475).
This adds
bl apps community grant|revoke APP_ID COMMUNITY_ID. It follows the same pattern the removed workspace commands used: read the grant's revision, apply the change against that revision, and print the saved community list. No new auth path is needed. Kgoose already swaps a CLI session for a community-bound credential on this route and checks membership before a grant.bl apps handoffalready reportsshared_community_ids, so the result can be confirmed there.Until blockplat-compose#496 (BOT-2473) merges, Compose only accepts a grant on a restricted app. After it merges, a grant adds viewers without changing visibility. Server-side community sharing stays off until BOT-2472.
Stacked on #37. Tests cover the read-then-write requests with direct and proxied auth, server denials and conflicts (no retry), and malformed revision responses, which never lead to a write.
just testandjust lintpass.🤖 Generated with Claude Code