Move Odoo preview planning into Launchplane driver

[shiny-code-bot]

Intent

Move Odoo isolated preview apply/destroy planning out of tenant workflows and into Launchplane-owned Odoo driver routes.

Finish Line

Odoo tenant repos stop constructing provider preview plans.

Current Status

State: Tenant isolated preview apply and isolated preview destroy adoption are merged. Launchplane service support and authz grants are deployed: PR #927 added POST /v1/drivers/odoo/preview-apply-inputs; PR #930 granted CM/OPW preview workflows odoo_preview_apply_inputs.read for both pull_request and workflow_dispatch callers; PR #931 added inventory-backed Odoo preview target discovery so Launchplane can reuse existing preview targets and plan destroys only after proving the matching compose and hostname.

Tenant repos now use Launchplane apply-inputs for manual isolated apply and manual isolated destroy instead of constructing provider dry-run plans locally. Apply adoption: CM PR cbusillo/odoo-tenant-cm#52 merged as b9e3cfd; OPW PR cbusillo/odoo-tenant-opw#44 merged as 47e22b3. Destroy adoption: CM PR cbusillo/odoo-tenant-cm#53 merged as 8c8bbfb; OPW PR cbusillo/odoo-tenant-opw#45 merged as 5435808.

Next action: Audit the remaining Odoo repo workflow surface for non-preview infra wiring that Launchplane should own next, starting with stable post-deploy/promotion/rollback, runtime config, and any lingering tenant-side Dokploy or environment target assumptions.

Blocked by: No native issue blocker.

Waiting for: Selection of the next Odoo infra ownership slice.

Last verified: 2026-05-27. Launchplane PR #931 merged as 5f9025a; post-merge CI, Security, CodeQL, and Deploy Launchplane passed. CM #53 post-merge CI/Security passed. OPW #45 post-merge CI/Security passed.

Acceptance Criteria

• Launchplane returns a ready or blocked Odoo preview apply/destroy plan without tenant-authored provider operation JSON.
• Preview URL, target IDs, environment IDs, compose/domain names, and secret-bearing env overlays are derived by Launchplane records and driver policy.
• Tenant repos supply only product key, PR/source facts, preview slug or PR number, artifact manifest/image reference, and optional product-smoke facts.
• Existing preview-apply remains fail-closed and only accepts Launchplane-generated ready plans or an explicitly compatible transition shape.

[shiny-code-bot]

Closeout update: Odoo preview planning has moved into Launchplane-owned driver routes and the tenant workflows no longer construct provider preview plans locally.

Evidence:

• Launchplane PR Add Odoo preview apply inputs route #927 added POST /v1/drivers/odoo/preview-apply-inputs.
• Launchplane PR Discover Odoo preview targets for apply inputs #931 added inventory-backed Odoo preview target discovery.
• Launchplane PR Allow Odoo preview destroy without image input #953 allowed dry-run destroy apply without requiring tenants to fabricate an image reference.
• Launchplane PR Remove Odoo preview refresh destroy aliases #964 removed the old Odoo preview refresh/destroy compatibility aliases after tenant adoption.
• CM and OPW preview workflows now call preview-apply-inputs plus preview-apply for refresh and destroy, and the old local payload/provider-plan builders were removed.

Remaining Odoo tenant thinning belongs in #908; broader ownership follow-up remains tracked by #898/#900/#904.

[shiny-code-bot]

Closing because the preview-planning finish line is now satisfied; follow-up tenant handoff thinning continues in #908.