Skip to content

fix(cli): atlas issues-log UX batch (version verb, show alias, headless-honest messages, write-denial hint, OCI retry) - #608

Merged
adampullely merged 1 commit into
mainfrom
fix/cli-ux-atlas-log
Aug 3, 2026
Merged

fix(cli): atlas issues-log UX batch (version verb, show alias, headless-honest messages, write-denial hint, OCI retry)#608
adampullely merged 1 commit into
mainfrom
fix/cli-ux-atlas-log

Conversation

@adampullely

Copy link
Copy Markdown
Contributor

Five fixes from the atlas bootstrap post-mortem, each behaviorally verified:

  • E1 orun version subcommand (the missing spelling caused a needless reinstall mid-bootstrap).
  • E8 orun workspace show|current aliases the bare local show instead of resolving a workspace literally named "show".
  • E7 auth status reports ✓ headless: authenticated via ORUN_TOKEN when the env token is set; errNotLoggedIn no longer suggests setting a token that is already set and explains the actual gap.
  • A2 secrets write not_found hint tells the truth: denials are hidden as not_found; reads working = the scope exists = the key's role is below the ADMIN write floor.
  • C3 OCI ref resolution retries transient 5xx/timeout ×3 with backoff.

🤖 Generated with Claude Code

…eadless-honest auth, write-denial hint, OCI retry

Five papercuts that each cost a live headless bootstrap real time:

- `orun version` exists (E1): erroring on the spelling every other CLI
  accepts read as a broken install and triggered a needless reinstall.
- `orun workspace show`/`current` = the bare local show (E8): the
  remote resolver treated them as workspace NAMES and asked the backend
  for GET /organizations/show.
- `orun auth status` with ORUN_TOKEN set reports headless auth instead
  of 'not logged in' (E7); errNotLoggedIn stops suggesting 'set
  ORUN_TOKEN' when it IS set and explains what the token cannot do.
- secrets write not_found hint (A2): resource-hiding masks authz as
  not_found — the hint now says the likely truth (role below the ADMIN
  write floor; reads working prove the scope exists) instead of sending
  operators to check a scope that is fine.
- OCI ref resolve retries transient 5xx/timeouts ×3 with backoff (C3):
  a single GHCR 503 took down a whole apply and poisoned its retry.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@adampullely
adampullely merged commit 46252da into main Aug 3, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants