You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Correct the App Preview API-key procedure for organization- and app-bound RBAC bindings.
Document the split between the app-level app_preview grant and the automatic, channel-scoped channel_preview grant created only when the key creates a channel.
Document per-key bundle ownership and the ownership-checked channel delete --delete-bundle cleanup flow, with an explicit availability gate until the companion release is deployed.
State the enforced mutation boundary: a preview key cannot manage an existing default/main channel, another preview key's channel, or another key's bundle.
Clarify that app_preview retains app-level read access, so the feature provides lifecycle/write isolation rather than strict channel-read isolation.
Dependency
Documents the companion implementation in Cap-go/capgo.app#2698. The special preview cleanup is explicitly marked unavailable until that implementation is released.
Validation
bunx prettier --write on the touched documentation files
bun run ci:verify:docs
Focused desktop and mobile visual comparison of /docs/webapp/api-keys/
Visual diff
Generated with bun run visual-diff:compare (2 screenshots, fuzz 1%).
The documentation defines the App Preview RBAC role, updates API key scoping and setup instructions, and clarifies preview channel and owned bundle deletion behavior.
Documents the app_preview and channel_preview roles, their permissions and exclusions, preview bindings, and organization provisioning requirements.
API key scope and setup apps/docs/src/content/docs/docs/webapp/api-keys.mdx, apps/docs/src/content/docs/docs/public-api/api-keys.mdx
Explains organization-wide and selected-app scopes, App Preview assignment, secure key handling, and preview workflow setup.
Preview channel and bundle cleanup guidance apps/docs/src/content/docs/docs/cli/reference/channel.mdx, apps/docs/src/content/docs/docs/webapp/channels.mdx, apps/docs/src/content/docs/docs/webapp/api-keys.mdx
Clarifies that App Preview keys can atomically delete their own preview channel and owned bundle with --delete-bundle, but cannot affect other channels or bundles.
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment and assigning reviewers for human review of this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/docs/src/content/docs/docs/webapp/api-keys.mdx`:
- Line 50: Update the App Developer role description in the API keys
documentation to remove the claim that it can manage app configuration; describe
only deployment and channel-settings access, or explicitly distinguish those
permissions from app settings, consistent with the organization roles
documentation.
- Around line 41-43: Update the organization-creation guidance in the API key
documentation to state that org.create requires an org-scoped org_admin or
org_super_admin binding, explicitly mapping the dashboard’s “Admin” role to the
appropriate binding when applicable. Preserve the existing permission and
automatic Super Admin assignment details.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
Push a commit to this branch (recommended)
Create a new PR with the fixes
ℹ️ Review info⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro
Run ID: e4438429-294f-4d2e-b4d0-e673d9c10e17
📥 Commits
Reviewing files that changed from the base of the PR and between ffa58c6 and 4e6cb7d.
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Not approving because Cursor Bugbot did not complete successfully (skipped due to usage limit). Human review is needed for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver External
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver External
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver External
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned.
Sent by Cursor Approval Agent: Pull Request Approver External
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned for this documentation-only PR.
Sent by Cursor Approval Agent: Pull Request Approver
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/docs/src/content/docs/docs/cli/reference/channel.mdx`:
- Around line 59-65: Remove or clearly mark the unsupported --delete-bundle App
Preview cleanup flow in
apps/docs/src/content/docs/docs/cli/reference/channel.mdx lines 59-65,
apps/docs/src/content/docs/docs/webapp/organization-roles.mdx line 117,
apps/docs/src/content/docs/docs/public-api/api-keys.mdx lines 53 and 126,
apps/docs/src/content/docs/docs/webapp/api-keys.mdx lines 65-91, and
apps/docs/src/content/docs/docs/webapp/channels.mdx line 91; do not present it
as available until the companion implementation is released.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
Push a commit to this branch (recommended)
Create a new PR with the fixes
ℹ️ Review info⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro
Run ID: 952480ab-8661-4249-9e3f-035b2656badc
📥 Commits
Reviewing files that changed from the base of the PR and between 4e6cb7d and 012e0bb.
The reason will be displayed to describe this comment to others. Learn more.
Risk: low. Cursor Bugbot did not complete successfully (skipped due to usage limit), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned.
Sent by Cursor Approval Agent: Pull Request Approver
The reason will be displayed to describe this comment to others. Learn more.
Risk: low. Cursor Bugbot did not complete successfully (skipped), so automated review is unavailable for this run. Leaving a non-blocking comment; human reviewers are already assigned.
Sent by Cursor Approval Agent: Pull Request Approver External
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
riderx
force-pushed
the
codex/docs-app-preview-api-key
branch
from
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Summary
app_previewgrant and the automatic, channel-scopedchannel_previewgrant created only when the key creates a channel.channel delete --delete-bundlecleanup flow, with an explicit availability gate until the companion release is deployed.app_previewretains app-level read access, so the feature provides lifecycle/write isolation rather than strict channel-read isolation.Dependency
Documents the companion implementation in Cap-go/capgo.app#2698. The special preview cleanup is explicitly marked unavailable until that implementation is released.
Validation
bunx prettier --writeon the touched documentation filesbun run ci:verify:docs/docs/webapp/api-keys/Visual diff
Generated with
bun run visual-diff:compare(2 screenshots, fuzz 1%).