@odla-ai/cli 0.16.2 → 0.16.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -29,8 +29,8 @@ For a project you keep working in, install it as a dev dependency so the
29
29
  shorter `npx odla-ai` form works and the version is pinned by your lockfile:
30
30
 
31
31
  ```bash
32
- npm view @odla-ai/cli@0.16.2 version
33
- npm i -D --save-exact @odla-ai/cli@0.16.2
32
+ npm view @odla-ai/cli@0.16.4 version
33
+ npm i -D --save-exact @odla-ai/cli@0.16.4
34
34
  ```
35
35
 
36
36
  ## Prerequisites
@@ -95,7 +95,8 @@ command copied from **Studio → Code → Terminal** while your shell is in the
95
95
  local Git checkout. `--platform`, `--app-id`, and `--env` make the requested
96
96
  scope unambiguous; without an explicit app, the CLI can infer it from
97
97
  `odla.config.mjs` or the Git remote. The terminal proves its isolation engine,
98
- prepares the pinned Pi and build images, and sends an outbound
98
+ builds the CLI-bundled Pi adapter into a content-addressed local image, prepares
99
+ the digest-pinned build images, and sends an outbound
99
100
  `app:code:host:connect` request to odla. The app owner approves that real
100
101
  request in Studio. The browser never mints or displays a host bearer.
101
102
 
@@ -105,9 +106,11 @@ the original checkout is never mounted into Pi. Pi receives no network,
105
106
  provider credential, or container-engine socket and accesses source only
106
107
  through the typed CaMeL broker. The session records the trusted Git base,
107
108
  developer-patch digest, snapshot digest, and the combined checkpoint patch.
108
- Later local edits do not silently alter an active session. Use `--engine
109
- docker` only after reviewing that daemon boundary. `--once` proves enrollment
110
- and one heartbeat without accepting queued work.
109
+ Later local edits do not silently alter an active session. The Pi adapter does
110
+ not come from a private registry and `code connect` never logs the developer
111
+ into one; the only first-run image download is its public, digest-pinned Node
112
+ base. Use `--engine docker` only after reviewing that daemon boundary. `--once`
113
+ proves enrollment and one heartbeat without accepting queued work.
111
114
 
112
115
  The approval and host credential records live in odla-ai/db and store hashes,
113
116
  not plaintext. The collected host bearer exists only in the running CLI