@odla-ai/cli 0.27.2 → 0.27.3

package/README.md

@@ -426,6 +426,10 @@ shown-once credential.
    `--email <account>` or `ODLA_USER_EMAIL`; the matching existing account must
    sign in, review the exact code, and approve it. Opening the URL alone does
    not claim the request.
+   Studio shows the immutable project and capability request without grant
+   checkboxes. The owner approves that exact request or declines it with an
+   explanation which the CLI returns to the calling agent; different access
+   requires a new request.
    Every real CLI handshake prints exactly one canonical `/studio?code=…` URL
    and attempts to open it — including from CI, SSH, display-less, scripted,
    and agent-driven shells. Only `--no-open` suppresses the attempt. Browser

package/REQUIREMENTS.md

@@ -42,6 +42,10 @@ Agnacl, but none should mention or special-case Agnacl.
   `<platform>/studio?code=…` URL. Optional server URL hints must not create a
   second CLI path. Opening it must not claim the request; the matching user must
   explicitly review that exact code before approval controls appear.
+- Studio must display the complete immutable request without grant-editing
+  controls. Approval accepts the request digest exactly; denial requires a
+  bounded, non-secret explanation returned to the polling agent. Any changed
+  scope, project, or capability requires a fresh request.
 - Only one claimed pending or approved-but-uncollected request may be active per
   user. Unclaimed issued codes must not occupy that slot.
 - Every real CLI handshake must attempt to open that canonical approval URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odla-ai/cli",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "description": "Agent-operable CLI for odla provisioning, calendar consent and sync lifecycle, System AI administration, Worker secrets, security jobs, and smoke checks.",
   "license": "MIT",
   "homepage": "https://odla.ai/docs/packages/cli",