@odla-ai/cli 0.29.0 → 0.30.1

package/dist/index.d.cts

@@ -594,9 +594,8 @@ interface ProvisionOptions {
      * true records an explicit request; false is the only production suppression. */
     open?: boolean;
     /** Cap the handshake-approval wait, in seconds. When it elapses the command
-     * exits with the pending handshake persisted; rerunning resumes it. Defaults
-     * to the handshake's own expiry on an interactive terminal and 90 seconds
-     * everywhere else (agent tool shells kill long-running commands). */
+     * exits pending; rerunning requests a new code. Defaults to the handshake's
+     * own expiry on an interactive terminal and 90 seconds everywhere else. */
     wait?: number;
     /** Test/embedding override for opening the approval URL. Defaults to the OS browser opener. */
     openApprovalUrl?: (url: string) => Promise<void>;
@@ -629,6 +628,8 @@ interface ProvisionPlan {
 interface SmokeOptions {
     configPath: string;
     env?: string;
+    /** Verify the deployed Worker without reading local db/o11y credentials. */
+    runtime?: boolean;
     /** Developer-token override used only for owner-visible calendar health. */
     token?: string;
     /** Existing odla account email used only when a fresh device handshake is required. */
@@ -931,8 +932,9 @@ declare function initProject(options: InitOptions): void;
  * this is an identity hint, never a password or session credential.
  * @param options.requestGrant Ignore ambient/cached credentials and request a
  * fresh owner-reviewed app.manage grant for this exact app.
- * @param options.pushSecrets Preflight Wrangler, then push each env's configured
- *   Worker secrets immediately after credential provisioning.
+ * @param options.pushSecrets Preflight Wrangler, then stage one target-bound
+ *   credential set through the handshake-authorized Registry and transfer it
+ *   to the Worker over stdin without writing plaintext under `.odla`.
  * @param options.writeDevVars `true`/a path writes `.dev.vars`; `writeCredentials: false` skips the creds file.
  * @param options.yes Required for a non-dry-run plan containing `prod` or
  *   `production`; callers must show and review `dryRun` output first.
@@ -1254,10 +1256,10 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  * Verify a live, already-provisioned environment end-to-end. Resolves the target
  * env (`options.env`, else `dev`, else the first declared env). Explicit `prod`
  * remains addressable after one-shot `provision --live` even when ordinary
- * provision defaults stay dev-only. Reads the local credentials file and checks
- * that it belongs to this app and holds the credentials required by the enabled
- * services — otherwise it throws pointing the user at
- * `odla-ai provision --write-dev-vars`.
+ * provision defaults stay dev-only. Local mode reads the private service
+ * credentials and performs direct db checks. `runtime` mode never reads those
+ * values: it verifies Registry state, the deployed Worker link, anonymous
+ * integration probes, and owner-visible calendar health instead.
  *
  * It then makes service-aware network calls: fetches the registry public-config
  * (and, when `ai.provider` is configured, asserts the live provider matches);

package/dist/index.d.ts

@@ -594,9 +594,8 @@ interface ProvisionOptions {
      * true records an explicit request; false is the only production suppression. */
     open?: boolean;
     /** Cap the handshake-approval wait, in seconds. When it elapses the command
-     * exits with the pending handshake persisted; rerunning resumes it. Defaults
-     * to the handshake's own expiry on an interactive terminal and 90 seconds
-     * everywhere else (agent tool shells kill long-running commands). */
+     * exits pending; rerunning requests a new code. Defaults to the handshake's
+     * own expiry on an interactive terminal and 90 seconds everywhere else. */
     wait?: number;
     /** Test/embedding override for opening the approval URL. Defaults to the OS browser opener. */
     openApprovalUrl?: (url: string) => Promise<void>;
@@ -629,6 +628,8 @@ interface ProvisionPlan {
 interface SmokeOptions {
     configPath: string;
     env?: string;
+    /** Verify the deployed Worker without reading local db/o11y credentials. */
+    runtime?: boolean;
     /** Developer-token override used only for owner-visible calendar health. */
     token?: string;
     /** Existing odla account email used only when a fresh device handshake is required. */
@@ -931,8 +932,9 @@ declare function initProject(options: InitOptions): void;
  * this is an identity hint, never a password or session credential.
  * @param options.requestGrant Ignore ambient/cached credentials and request a
  * fresh owner-reviewed app.manage grant for this exact app.
- * @param options.pushSecrets Preflight Wrangler, then push each env's configured
- *   Worker secrets immediately after credential provisioning.
+ * @param options.pushSecrets Preflight Wrangler, then stage one target-bound
+ *   credential set through the handshake-authorized Registry and transfer it
+ *   to the Worker over stdin without writing plaintext under `.odla`.
  * @param options.writeDevVars `true`/a path writes `.dev.vars`; `writeCredentials: false` skips the creds file.
  * @param options.yes Required for a non-dry-run plan containing `prod` or
  *   `production`; callers must show and review `dryRun` output first.
@@ -1254,10 +1256,10 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  * Verify a live, already-provisioned environment end-to-end. Resolves the target
  * env (`options.env`, else `dev`, else the first declared env). Explicit `prod`
  * remains addressable after one-shot `provision --live` even when ordinary
- * provision defaults stay dev-only. Reads the local credentials file and checks
- * that it belongs to this app and holds the credentials required by the enabled
- * services — otherwise it throws pointing the user at
- * `odla-ai provision --write-dev-vars`.
+ * provision defaults stay dev-only. Local mode reads the private service
+ * credentials and performs direct db checks. `runtime` mode never reads those
+ * values: it verifies Registry state, the deployed Worker link, anonymous
+ * integration probes, and owner-visible calendar health instead.
  *
  * It then makes service-aware network calls: fetches the registry public-config
  * (and, when `ai.provider` is configured, asserts the live provider matches);

package/dist/index.js

@@ -56,7 +56,7 @@ import {
   startHostedSecurityJob,
   surfacePaths,
   validateInvocation
-} from "./chunk-YTVLTADT.js";
+} from "./chunk-7V7WVTDT.js";
 import {
   exitCodeFor,
   redactSecrets