@tinycloud/cli 1.3.0-beta.47 → 1.3.0-beta.48

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/cli",
-  "version": "1.3.0-beta.47",
+  "version": "1.3.0-beta.48",
   "description": "TinyCloud CLI - manage data, delegations, and nodes from the terminal",
   "author": "TinyCloud, Inc.",
   "license": "EGPL",

package/skills/tc-cli/SKILL.md

@@ -74,7 +74,9 @@ Ask for the narrowest grant that does the job. The default is read-only, and one
 
 - `--preset apps-agent` is **read-only**: KV get and list, SQL read, on the `applications` space, up to 7 days. That is enough to pick up where the user left off by reading `knowledge/*` and querying the data. The node refuses a KV put or a SQL write under it.
 - `--app APP_ID` limits it to `APP_ID/` and is the recommended default. Repeat `--app` (up to 5) for a task that spans apps. Leave it off only to read every installed app; the command says so before the owner approves.
-- **Never request `--write`: don't request `--write` during the tiny-apps beta.** Use the read-only preset. If a task needs to change app data, tell the owner it cannot be done through the agent preset during the beta. For reference, `--preset apps-agent --write --app APP_ID` grants KV put only in `APP_ID/knowledge/` and `APP_ID/prefs/` plus SQL write in the named apps; it cannot change the app's code, its manifest or its install record (the share runner stores them as `APP_ID/app/manifest.json` and `APP_ID/app/install.json`; root-level `APP_ID/manifest.json` and `APP_ID/install.json` are refused too) (TC-1620), and every other file under `APP_ID/` stays read-only. It always needs `--app` and is never offered for the whole space. SQL write also lets the agent create, change or drop that app's tables (TC-1581 is the node-side fix that makes `sql/write` stop permitting DDL). It still cannot delete files, touch other apps or spaces, or read secrets.
+- **Write access only when the owner asks to change an installed app's data** (for example, log a meal). The agent requests it from its own profile with one command: `"$TC" --profile agent auth request --preset apps-agent --app APP_ID --write --emit req.json`. The owner approves it once, then the agent imports the grant as above. `--write` needs `--app`, and the grant lasts up to 7 days.
+- With `--write`, the agent can add and change that app's data: it writes files under `APP_ID/knowledge/` and `APP_ID/prefs/` and changes its tables. It cannot change the app's code, its manifest or its install record, and every other file under `APP_ID/` stays read-only. It cannot touch other apps, other spaces or secrets.
+- Before you request write access, confirm with the owner. The grant covers one named app: never ask for the whole space, and never a write without `--app`.
 - The preset cannot be combined with `--cap`, `--permission`, `--manifest` or `--expiry`, and device approval cannot grant it (SQL needs browser or `--paste`). The owner ends the grant with `tinycloud delegation revoke GRANT_CID`; the CID is in the `auth grant` output. Within its own grant the agent's key could pass the same access on to someone else, so keep the key and the grant file private.
 - The owner's `auth grant` prints every permission it is about to sign, built from the request file. A request that holds anything the preset could never grant (another service or space, delete, schema, delegation, a write without a named app, a KV put outside `APP_ID/knowledge/` and `APP_ID/prefs/`) is listed first, marked `!`, under "MORE than the apps-agent preset" and is signed only after `--yes` or an interactive confirmation; without a terminal it exits 2 and signs nothing. If the text shows a different lifetime or scope than the one you asked for, the request file was edited.
 - **A revoked or expired grant cannot be replaced in the same profile.** A delegate profile's session is its first imported grant; a later `auth import` succeeds but invocations keep using the first one, so `knowledge list` answers `AUTH_REQUIRED`. Create a new profile (`profile create`), make a new request from it and import the new grant there.