@odla-ai/cli 0.27.6 → 0.27.8

package/README.md

@@ -466,7 +466,10 @@ shown-once credential.
    Studio shows the immutable project-derived agent handle, project, and
    capability request without mutation controls. The owner approves that exact
    request or declines it with an explanation which the CLI returns to the
-   calling agent; a different identity or access set requires a new request.
+   calling agent; a different identity or access set requires a new request. If
+   the exact project id does not exist yet, approval reserves that id for this
+   credential instead of failing: the credential may create only that app once,
+   and Registry binds its reviewed grant to the new app incarnation.
    Every real CLI handshake prints exactly one canonical `/studio?code=…` URL
    and attempts to open it — including from CI, SSH, display-less, scripted,
    and agent-driven shells. Only `--no-open` suppresses the attempt. Browser
@@ -477,7 +480,8 @@ shown-once credential.
    Outside an interactive terminal the approval wait is capped (90 seconds by
    default; `--wait <seconds>` overrides), and a still-pending handshake exits
    with code 75 — approve at the URL, then re-run to collect the token.
-2. Creates the platform app if needed.
+2. Creates the platform app if needed. For a new id, this consumes the exact-id
+   reservation approved in step 1; it is not ambient project-creation authority.
 3. Enables configured services in every configured environment. Calendar
    config is normalized per env and fixed to Google read-only access.
 4. Mints or reuses each env's configured service credentials: an odla-db app
@@ -554,7 +558,13 @@ or approved-but-uncollected request can be active for that user.
 For an ordinary request, Studio also requires at least one exact project
 selection. The credential receives project metadata, PM, discussion, and
 brand-candidate editing grants only for those projects, never ambient owner
-access, app administration, or brand approval.
+access, app administration, or brand approval. A selected id that does not yet
+exist is a one-time bootstrap reservation: the credential may create that exact
+app, after which the grant is bound to its new lifetime. A 404 from the approve
+action is a routing regression; missing, archived, foreign, changed, or raced
+requests must produce a specific conflict or denial. The reservation authorizes
+only that bootstrap creation; later service, configuration, and administrative
+mutations still require their normal capabilities and human checkpoints.
 
 Developer grants are tracked by id, owner, label, scopes, creation/expiry,
 last use, and revocation state. The plaintext token is delivered once to the

package/REQUIREMENTS.md

@@ -46,6 +46,11 @@ Agnacl, but none should mention or special-case Agnacl.
   controls. Approval accepts the request digest exactly; denial requires a
   bounded, non-secret explanation returned to the polling agent. Any changed
   scope, project, or capability requires a fresh request.
+- An approved exact project id may be absent at review time. Collection must
+  reserve that id for the approved credential, which may create only that app
+  once; creation binds the reviewed grant to the new app incarnation. Existing
+  foreign or archived ids remain unapprovable. Approval precondition failures
+  must return an actionable conflict—never a route-like 404.
 - Only one claimed pending or approved-but-uncollected request may be active per
   user. Unclaimed issued codes must not occupy that slot.
 - Every real CLI handshake must attempt to open that canonical approval URL,

package/dist/bin.cjs

@@ -518,7 +518,7 @@ var SCOPE_PURPOSE = {
   "platform:status:read": "read the platform fleet health and deployment snapshot",
   "app:config:read": "compare checked-in intent with an exact-id app Registry configuration",
   "app:config:write": "apply or inspect one revision-bound configuration operation for an app you own",
-  "platform:runbook:write": "add or edit odla's operational runbooks",
+  "platform:runbook:write": "read and edit all of odla's operational runbooks, including admin-visible content",
   "platform:ai:policy:write": "change System AI model routing",
   "platform:ai:policy:read": "read System AI model routing",
   "platform:ai:credential:write": "replace a stored AI provider key",
@@ -12067,8 +12067,13 @@ async function whoamiCommand(parsed, deps = {}) {
   out.log(`admin:      ${identity.admin ? "yes" : "no"}`);
   if (identity.scopes.length) out.log(`scopes:     ${identity.scopes.join(", ")}`);
   if (!identity.admin) {
-    out.log("\nYou can read platform runbooks but not edit them. A handshake-minted");
-    out.log("device token never carries admin \u2014 sign in to Studio as an admin to edit.");
+    if (identity.scopes.includes("platform:runbook:write")) {
+      out.log("\nThis exact scope can read and edit all platform runbook content.");
+      out.log("The device token is not ambient admin and cannot change visibility.");
+    } else {
+      out.log("\nYou can read operator-visible platform runbooks but not edit them.");
+      out.log("Use a platform-admin-approved runbook write request to edit.");
+    }
   }
 }