@odla-ai/cli 0.5.0 → 0.6.0

package/README.md

@@ -7,9 +7,11 @@
 
 Project-neutral provisioning CLI for odla apps. It creates and validates an
 `odla.config.mjs`, then uses that config to register an app, enable services,
-push odla-db schema/rules, configure platform AI, configure Clerk auth, record
+push odla-db schema/rules, configure per-app BYOK AI, configure Clerk auth, record
 deployment links, provision o11y ingest credentials, and transfer local or
-deployed Worker secrets without printing them.
+deployed Worker secrets without printing them. It also gives platform admins a
+scoped System AI control surface and gives app owners a provider-key-free
+hosted security command.
 
 It does not know about any specific app. App identity, environments, services,
 schema, rules, auth, AI provider, and links all come from config.
@@ -27,8 +29,8 @@ For a project you keep working in, install it as a dev dependency so the
 shorter `npx odla-ai` form works and the version is pinned by your lockfile:
 
 ```bash
-npm view @odla-ai/cli@0.5.0 version
-npm i -D --save-exact @odla-ai/cli@0.5.0
+npm view @odla-ai/cli@0.6.0 version
+npm i -D --save-exact @odla-ai/cli@0.6.0
 ```
 
 ## Prerequisites
@@ -57,6 +59,11 @@ npx odla-ai provision --dry-run
 npx odla-ai provision --write-dev-vars --push-secrets
 npx odla-ai smoke --env dev
 npx odla-ai secrets push --env dev
+npx odla-ai security run . --env dev --ack-redacted-source
+npx odla-ai admin ai show
+npx odla-ai admin ai set security.discovery --provider anthropic --model claude-opus-4-8 --enabled
+npx odla-ai admin ai credentials
+npx odla-ai admin ai credential set anthropic --from-env ANTHROPIC_API_KEY
 npx odla-ai skill install
 npx odla-ai version
 ```
@@ -117,17 +124,30 @@ when provisioning has not written `.odla/credentials.local.json`.
 
 The bundled build/migration skills add a passive pre-ship gate with
 `@odla-ai/security`: after the exact-version availability check, run
-`npm i -D --save-exact @odla-ai/security@0.1.0`, then
+`npm i -D --save-exact @odla-ai/security@0.2.0`, then
 `npx odla-security scan . --profile odla --out .odla/security/pre-ship --fail-on high --fail-on-candidates critical`.
-This is a separate binary, not a hidden `odla-ai` subcommand; it makes no model
-calls and does not execute target code.
+The passive scan remains a separate binary: it makes no model calls and does
+not execute target code. After explicit redacted-source approval,
+`odla-ai security run . --env dev --ack-redacted-source` adds hosted discovery
+and independent validation. The CLI obtains/reuses app-owner auth and the
+platform supplies bounded role grants; it never requests provider keys.
+Early-access run ceilings are rolling; a `429` includes the platform's safe
+retry hint, which the CLI surfaces without echoing arbitrary response text.
 Before installing the exact release, require
-`npm view @odla-ai/security@0.1.0 version` to succeed before installation. An
+`npm view @odla-ai/security@0.2.0 version` to succeed before installation. An
 exact-version `E404` means the release is unavailable, not that the security
 preflight passed, and does not prove the package name is absent. odla's own
 engineering environment uses an equivalent internal gate; customer projects
 should use the published `odla-security` command above.
 
+`admin ai show|set|credentials|credential set` manages platform-funded System
+AI (`o11y.triage`, `security.discovery`, `security.validation`). It uses a
+separate, mode-`0600` `.odla/admin-token.local.json` cache. Studio displays the
+exact scope, only an admin can approve it, and it expires after ~15 minutes;
+the token never becomes ambient admin. Credential writes accept only
+`--from-env <NAME>` or `--stdin` and never place the value in argv, output, or
+the cache. System AI and each app's BYOK AI are separate vault/funding paths.
+
 `secrets push --env <env>` is the narrower recovery/retry command. It moves the
 configured env's odla-db key and/or o11y ingest token from
 `.odla/credentials.local.json` into the deployed Worker by piping each value
@@ -149,7 +169,8 @@ agent owns application semantics: installing `@odla-ai/o11y`, wrapping the
 Worker with `withObservability`, and choosing useful spans, metrics, errors, and
 LLM-usage records. The human owns the device approval, production consent, and
 explicit destructive rotation. Studio is where people view telemetry and
-perform manual recovery; its token control is not the normal setup path.
+perform manual recovery, configure System AI, and inspect app/run-attributed
+platform usage; its o11y token control is not the normal setup path.
 Run `npx odla-ai capabilities` for the human-readable contract or add `--json`
 when an agent or tool needs to branch on it without scraping prose.