@odla-ai/cli 0.38.0 → 0.38.2

package/dist/bin.js

@@ -174,7 +174,7 @@ function absoluteEntryPath(entryPath) {
 
 // src/bin.ts
 var argv = process.argv.slice(2);
-requireCurrentCliForProvision(argv).then(() => requireCoherentProvisionRuntime(argv)).then(async () => (await import("./cli-DZKEPGBZ.js")).runCli()).catch((err) => {
+requireCurrentCliForProvision(argv).then(() => requireCoherentProvisionRuntime(argv)).then(async () => (await import("./cli-LGYDXY5R.js")).runCli()).catch((err) => {
   console.error(redactSecrets(`odla-ai: ${err instanceof Error ? err.message : String(err)}`));
   process.exitCode = exitCodeFor(err);
 });

package/dist/{chunk-DKOJBWRJ.js → chunk-HETCZVFB.js}

@@ -1771,7 +1771,11 @@ async function resolveOperatorContext(parsed, options = {}) {
   const appEnvironment = clean2(process11.env.ODLA_APP_ID);
   const appValue = appFlag ?? appEnvironment ?? profile.value?.app ?? loaded?.app.id ?? null;
   const appSource = appFlag ? "flag" : appEnvironment ? "environment" : profile.value?.app ? "profile" : loaded ? "config" : "unresolved";
-  if (appValue) assertOperatorName(appValue, "app");
+  if (appValue) {
+    for (const id2 of options.allowAppList ? appValue.split(",") : [appValue]) {
+      assertOperatorName(id2.trim(), "app");
+    }
+  }
   if (options.requireApp && !appValue) {
     throw new Error(
       "app context is unresolved; pass --app <id>, set ODLA_APP_ID, select --context <name>, or run inside a project with odla.config.mjs"
@@ -13610,7 +13614,11 @@ async function revoke(parsed, deps, cfg, doFetch, out, json) {
   if (json) out.log(JSON.stringify({ deviceId, revoked: true }, null, 2));
 }
 async function scopedToken2(parsed, deps, cfg, doFetch, out, label, scope = "app:device:enroll") {
-  const { credentials } = await resolveOperatorContext(parsed, { allowMissingConfig: true });
+  const { credentials } = await resolveOperatorContext(parsed, {
+    allowMissingConfig: true,
+    // A device is granted the apps named in ONE approval, so --app is a list here.
+    allowAppList: true
+  });
   const scopedTokenFile = credentials.scopedTokenFile;
   return getScopedPlatformToken({
     platform: cfg.platformUrl,
@@ -15400,4 +15408,4 @@ export {
   isTerminalHostedSecurityStatus,
   runCli
 };
-//# sourceMappingURL=chunk-DKOJBWRJ.js.map
+//# sourceMappingURL=chunk-HETCZVFB.js.map