chore: import upstream snapshot with attribution

shortcuts/apps/apps_openapi_key_disable.go

@@ -0,0 +1,33 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package apps
+
+import (
+	"context"
+
+	"github.com/larksuite/cli/shortcuts/common"
+)
+
+// AppsOpenAPIKeyDisable disables (status=0) an open API key — the minimal safety brake.
+var AppsOpenAPIKeyDisable = common.Shortcut{
+	Service:     appsService,
+	Command:     "+openapi-key-disable",
+	Description: "Disable an open API key (minimal safety brake)",
+	Risk:        "write",
+	Tips:        []string{"Example: lark-cli apps +openapi-key-disable --app-id <app_id> --key-id <key_id>"},
+	Scopes:      []string{"spark:app:write"},
+	AuthTypes:   []string{"user"},
+	HasFormat:   true,
+	Flags: []common.Flag{
+		{Name: "app-id", Desc: "app ID", Required: true},
+		{Name: "key-id", Desc: "API key ID", Required: true},
+	},
+	Validate: func(ctx context.Context, rctx *common.RuntimeContext) error { return oapiKeyValidateKeyID(rctx) },
+	DryRun: func(ctx context.Context, rctx *common.RuntimeContext) *common.DryRunAPI {
+		return common.NewDryRunAPI().PATCH(oapiKeyItemURL(rctx)).Desc("Disable open API key").Body(openAPIKeyStatusBody(keyStatusDisable))
+	},
+	Execute: func(ctx context.Context, rctx *common.RuntimeContext) error {
+		return execOpenAPIKeyStatus(rctx, keyStatusDisable)
+	},
+}