@odla-ai/cli 0.27.14 → 0.27.17

package/README.md

@@ -344,6 +344,7 @@ npx odla-ai whoami
 npx odla-ai setup
 npx odla-ai init --app-id my-app --name "My App"
 npx odla-ai doctor
+npx odla-ai ai models --env dev # exact models this app may select; no admin grant
 npx odla-ai config diff --json
 npx odla-ai config plan --json > .odla/config-plan.json
 npx odla-ai config apply --plan .odla/config-plan.json --json
@@ -387,6 +388,16 @@ npx odla-ai skill install
 npx odla-ai version
 ```
 
+Before a non-dry provisioning run, the executable verifies two independent
+things: its CLI version matches the current release, and every external
+`@odla-ai/*` runtime module resolves to the exact version pinned in that CLI's
+manifest. The command graph is imported only after both checks pass. A stale
+workspace-linked module is reported with its resolved package path and the
+agent is told to update/rebase the worktree, run `npm ci`, and rebuild. Released
+CLI dependencies are exact pins, so the printed `npm exec --package=...`
+recovery command installs the same dependency graph exercised by the release
+tarball test rather than reusing an arbitrary compatible older module.
+
 `agent jobs` is the remote-operator view of commit-trigger delivery. It reads
 content-free lifecycle metadata—job id, trigger, entity reference, state,
 attempts, timing, and bounded error/status codes—using an audience-bound
@@ -743,7 +754,10 @@ otherwise. It never follows an arbitrary shell working directory. Studio display
 exact scope, only an admin can approve it, and it expires after ~15 minutes;
 policy, credential, and usage capabilities are separate and cannot act as the
 approver on ordinary app/db/o11y routes. `admin ai models` reads the server
-catalog. `admin ai set security` updates discovery and independent validation
+catalog. For app code and provisioning, `ai models [--env dev] [--json]` reads
+the app-safe public configuration and lists only the hosted models that exact
+app may select (or the configured provider's local catalog in BYOK mode), with
+the default and generic capabilities. `admin ai set security` updates discovery and independent validation
 together with expected revisions; a concurrent edit returns 409 and reloads
 instead of being overwritten. `admin ai usage` requests its own read-only
 capability and lists metadata-only events and status aggregates; narrow it with