@odla-ai/cli 0.11.0 → 0.11.2

package/dist/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "./chunk-KUQCJ6KA.js";
+} from "./chunk-DC4MIB4X.js";
 
 // src/bin.ts
 runCli().catch((err) => {

package/dist/{chunk-KUQCJ6KA.js → chunk-DC4MIB4X.js}

@@ -210,12 +210,16 @@ function handshakeEmail(value, cached) {
   }
   return email;
 }
-function approvalBrowser(options) {
+function approvalBrowser(options, host = {}) {
   if (options.open === true) return { open: true, mode: "forced" };
   if (options.open === false) return { open: false, reason: "disabled by --no-open" };
-  if (process3.env.CI) return { open: false, reason: "CI environment" };
-  const interactive = options.interactive ?? Boolean(process3.stdin.isTTY && process3.stdout.isTTY);
-  if (!interactive) return { open: false, reason: "non-interactive shell; pass --open to force" };
+  const env = host.env ?? process3.env;
+  if (env.CI) return { open: false, reason: "CI environment" };
+  if (env.SSH_CONNECTION || env.SSH_TTY) return { open: false, reason: "SSH session; pass --open to force" };
+  const platform = host.platform ?? process3.platform;
+  if (platform !== "darwin" && platform !== "win32" && !env.DISPLAY && !env.WAYLAND_DISPLAY) {
+    return { open: false, reason: "no graphical display; pass --open to force" };
+  }
   return { open: true, mode: "auto" };
 }
 function handshakeUrl(platformUrl, userCode) {
@@ -286,8 +290,9 @@ async function scopedToken(platform, scope, options, doFetch, out) {
     onCode: async ({ userCode, expiresIn, verificationUriComplete }) => {
       const approvalUrl = verificationUriComplete ?? handshakeUrl(audience, userCode);
       out.log(`Review, then approve scoped request ${userCode} at ${approvalUrl} within ${Math.floor(expiresIn / 60)}m.`);
-      const shouldOpen = options.open === true || options.open !== false && !process4.env.CI && Boolean(process4.stdin.isTTY && process4.stdout.isTTY);
-      if (shouldOpen) await (options.openApprovalUrl ?? openUrl)(approvalUrl).catch(() => void 0);
+      if (approvalBrowser({ open: options.open }).open) {
+        await (options.openApprovalUrl ?? openUrl)(approvalUrl).catch(() => void 0);
+      }
     }
   });
   const tokens = cache?.platform === audience ? { ...cache.tokens ?? {} } : {};
@@ -1249,7 +1254,6 @@ async function lifecycleContext(options) {
       token: options.token,
       email: options.email,
       open: options.open,
-      interactive: options.interactive,
       openApprovalUrl: options.openConsentUrl
     },
     doFetch,
@@ -1258,7 +1262,7 @@ async function lifecycleContext(options) {
   return { cfg, ctx: { platform: cfg.platformUrl, appId: cfg.app.id, env, token, fetch: doFetch }, out };
 }
 function connectionOptions(options, out) {
-  const browser = approvalBrowser({ configPath: "odla.config.mjs", open: options.open, interactive: options.interactive });
+  const browser = approvalBrowser({ open: options.open });
   return {
     out,
     open: browser.open,
@@ -2125,7 +2129,6 @@ ${env}: credentials are already saved; retry "odla-ai secrets push --env ${env}$
           { platform: cfg.platformUrl, appId: cfg.app.id, env, token, fetch: doFetch },
           {
             open: options.open,
-            interactive: options.interactive,
             openConsentUrl: options.openApprovalUrl,
             wait: options.calendarPollWait,
             pollTimeoutMs: options.calendarPollTimeoutMs,
@@ -3019,7 +3022,6 @@ async function smoke(options) {
         token: options.token,
         email: options.email,
         open: options.open,
-        interactive: options.interactive,
         openApprovalUrl: options.openApprovalUrl
       },
       doFetch,
@@ -3307,8 +3309,9 @@ Safety:
   Provision caches the approved developer token and service credentials under
   .odla/ with mode 0600, and init adds those paths to .gitignore. Secret push
   preflights Wrangler before any shown-once issuance or destructive rotation.
-  Provision opens the approval page automatically in interactive terminals;
-  use --open to force browser launch or --no-open to suppress it.
+  Provision opens the approval page in your browser automatically whenever the
+  machine can show one, including agent-driven runs; only CI, SSH, and
+  display-less hosts skip it. Use --open to force or --no-open to suppress.
   A fresh device handshake requires --email <odla-account> or ODLA_USER_EMAIL.
   The email is a non-secret identity hint: never provide a password or session
   token. The matching account must already exist, be signed in, explicitly
@@ -4014,4 +4017,4 @@ export {
   smoke,
   runCli
 };
-//# sourceMappingURL=chunk-KUQCJ6KA.js.map
+//# sourceMappingURL=chunk-DC4MIB4X.js.map