@odla-ai/cli 0.34.0 → 0.34.1

package/dist/{cli-IN6WGMSY.js → cli-NKNQLWOM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "./chunk-LGNNX6AP.js";
+} from "./chunk-RUEM7ZTA.js";
 import {
   exitCodeFor
 } from "./chunk-UKLSRQ5J.js";
@@ -9,4 +9,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=cli-IN6WGMSY.js.map
+//# sourceMappingURL=cli-NKNQLWOM.js.map

package/dist/index.cjs

@@ -127,9 +127,10 @@ function approvalLines(prompt) {
     lines.push(`   No browser was opened (${prompt.browserSkipped}).`);
   }
   lines.push("");
-  lines.push("   AGENTS: use browser control to open the URL above now; do not wait silently.");
-  lines.push("   If browser control is unavailable, give the exact URL to the human verbatim.");
-  lines.push("   You cannot approve it yourself, retry it away, or start a substitute handshake.");
+  lines.push("   AGENTS: immediately give the human this URL as a clickable approval action and repeat the code.");
+  lines.push("   Keep this CLI process running and wait on this same process; the CLI owns protocol polling.");
+  lines.push("   Do not use OS open, browser control, curl, a shell wait loop, detached execution, or a substitute handshake.");
+  lines.push("   You cannot approve it yourself. If this process exits, a later invocation creates a new code.");
   lines.push("");
   return lines;
 }
@@ -4910,18 +4911,29 @@ For work that creates an odla app or adds odla services, read and follow
 \`.agents/skills/odla-o11y-debug/SKILL.md\`.
 
 Track the work in odla's PM as you go. Before project-mutating work, run
-\`npx @odla-ai/cli pm next --app <appId>\`, confirm alignment to an open goal,
+\`npx --yes @odla-ai/cli@latest pm next --app <appId>\`, confirm alignment to an open goal,
 and atomically claim a refined Ready task. Record decisions when you make them
 and file bugs when you notice them. The conventions and the full command set are
 in \`.agents/skills/odla/references/pm.md\`.
 
-Use the human's signed-in odla account email for device authorization; never
-infer it from git config, commit metadata, or GitHub. If authorization is not
-already active, run
-\`npx @odla-ai/cli auth login --app <appId> --email <odla-account>\` and open
-the exact Studio URL it prints. Never file an odla project or product defect in
-GitHub Issues: run \`npx @odla-ai/cli bug report --app <appId> ...\` so the bug
-lands in odla PM with the rest of the project's goals, tasks, and decisions.
+Use the human's known signed-in odla account email for device authorization;
+never infer it from git config, commit metadata, or GitHub. If authorization is
+not already active, run this exact command as one foreground process:
+
+\`npx --yes @odla-ai/cli@latest auth login --app <appId> --email <odla-account> --no-open --wait 600\`
+
+When it prints the approval URL and code, immediately give the human a clickable
+link, name the code they must verify, and tell them to click **Approve**. Keep
+that CLI process running and wait on the same tool process for its result. The
+CLI owns protocol polling: never call the OS \`open\` command, use browser
+control, curl a handshake endpoint, build a shell wait/poll loop, detach the
+process, or start another handshake while it is alive. The device code exists
+only in that process. If it exits 75 before approval, the old code cannot be
+collected; start one fresh foreground command and surface its new URL.
+
+Never file an odla project or product defect in GitHub Issues: run
+\`npx --yes @odla-ai/cli@latest bug report --app <appId> ...\` so the bug lands
+in odla PM with the rest of the project's goals, tasks, and decisions.
 
 The setup runbooks and their references are installed in this repository, pinned
 to this CLI version. Use them as your setup context.
@@ -4933,9 +4945,9 @@ When this repository has an \`appId\`, pass it: app-scoped discovery includes
 that project's instructions plus the shared platform procedures.
 
 \`\`\`
-npx odla-ai runbook ask "<what you are about to do>" --app <appId>
-npx odla-ai runbook list
-npx odla-ai runbook get <slug>
+npx --yes @odla-ai/cli@latest runbook ask "<what you are about to do>" --app <appId>
+npx --yes @odla-ai/cli@latest runbook list
+npx --yes @odla-ai/cli@latest runbook get <slug>
 \`\`\`
 
 Never scrape odla.ai HTML for any of this. The CLI reads the same content
@@ -10087,8 +10099,8 @@ Usage:
   odla-ai runbook revert <slug> --version <n> [--app <id>]
   odla-ai runbook rm <slug> [--app <id>]
   odla-ai capabilities [--json]
-  odla-ai code connect [--env dev|prod] [--email <odla-account>] [--engine auto|container|podman|docker] [--slots <1-64>] [--once]
-  odla-ai admin ai show [--context <name>] [--platform https://odla.ai] [--email <odla-account>] [--json]
+  odla-ai code connect [--env dev|prod] [--email <odla-account>] [--no-open] [--engine auto|container|podman|docker] [--slots <1-64>] [--once]
+  odla-ai admin ai show [--context <name>] [--platform https://odla.ai] [--email <odla-account>] [--no-open] [--json]
   odla-ai admin ai models [--context <name>] [--provider <id>] [--json]
   odla-ai admin ai set <purpose> [--context <name>] [--provider <id>] [--model <id>] [--enabled|--no-enabled]
     [--max-input-bytes <n>] [--max-output-tokens <n>] [--max-calls-per-run <n>] [--json]
@@ -10107,7 +10119,7 @@ Usage:
   odla-ai security report <job-id> [--json]
   odla-ai security run [target] --ack-redacted-source [--env dev] [--profile odla] [--fail-on high]
   odla-ai security run [target] --self --ack-redacted-source
-  odla-ai provision [--live] [--config odla.config.mjs] [--email <odla-account>] [--request-grant] [--wait <seconds>] [--dry-run] [--push-secrets] [--rotate-o11y-token] [--write-dev-vars[=path]] [--yes]
+  odla-ai provision [--live] [--config odla.config.mjs] [--email <odla-account>] [--request-grant] [--no-open] [--wait <seconds>] [--dry-run] [--push-secrets] [--rotate-o11y-token] [--write-dev-vars[=path]] [--yes]
   odla-ai credentials list [--config odla.config.mjs] [--env dev] [--all] [--json]
   odla-ai credentials revoke <receipt-id> [--config odla.config.mjs] [--json]
   odla-ai smoke [--config odla.config.mjs] [--env dev] [--runtime] [--email <odla-account>] [--no-open]
@@ -10122,7 +10134,7 @@ function printHelp(output = console) {
   output.log(`odla-ai
 ${USAGE_SECTION}
 Commands:
-  auth         Start a fresh, exact-project agent authorization in the browser.
+  auth         Start a fresh, exact-project agent authorization for human review.
                The email is the signed-in odla account, never git or GitHub
                identity. The approval screen confirms the agent name first.
   agent        Inspect durable agent wakeups and explicitly requeue a
@@ -10252,23 +10264,25 @@ Safety:
   the metadata file. Flags and specific ODLA_* scope variables beat a selected
   context, which beats project config. There is no ambient current context.
   "context show" reports only provenance and cache state and never authenticates.
-  Every real CLI handshake prints one canonical /studio?code= approval URL and
-  attempts to open it \u2014 including in CI, SSH, display-less, and agent-driven
-  shells. Only --no-open suppresses the attempt. Browser launch is best-effort:
-  agents with browser control must open that exact URL immediately; otherwise
-  they must give it to the human verbatim. A device code remains only in the
-  running process. Outside an interactive terminal the wait is capped (90s by
-  default, --wait <seconds> to change); a still-pending handshake then exits
-  with code 75. Rerunning always requests and opens a new code; older clients'
-  persisted pending state is discarded.
+  Every real CLI handshake prints one canonical /studio?code= approval URL.
+  Interactive humans may let the CLI attempt its best-effort browser launch.
+  Agent-driven commands must pass --no-open --wait 600, immediately surface the
+  exact URL and code as a clickable human approval action, and keep that CLI
+  process alive. Wait only on that same process: the CLI owns protocol polling.
+  Do not call OS open, use browser control, curl handshake endpoints, build a
+  shell wait loop, detach the command, or start a substitute handshake. The
+  device code remains only in the running process. If the process exits 75, its
+  old code cannot be collected; a later invocation requests a new code. Older
+  clients' persisted pending state is discarded.
   A fresh device handshake requires --email <odla-account> or ODLA_USER_EMAIL.
   The email is a non-secret identity hint: never provide a password or session
   token. It is the email shown by the signed-in odla account \u2014 never infer it
   from git config, a commit author, or GitHub. The matching account must already exist, be signed in, explicitly
   review the exact code, and finish any current request before claiming another.
-  Use "auth login --app <id> --email <odla-account>" when an outside agent needs
-  a deliberate fresh request; it ignores cached credentials and opens the same
-  focused authorization sequence used by every first-time command.
+  Use "auth login --app <id> --email <odla-account> --no-open --wait 600" when
+  an outside agent needs a deliberate fresh request; it ignores cached
+  credentials and uses the same focused authorization sequence as every
+  first-time command.
   If provision reports that the current agent principal has no live app.manage
   grant, run it once with --request-grant. That flag ignores ODLA_DEV_TOKEN and
   the local cache, prints and opens a fresh exact-project owner-review URL, then
@@ -13684,7 +13698,7 @@ async function runbookImpact(ctx, options, deps = {}) {
 
 // src/runbook-lint.ts
 function invocationsIn(body) {
-  const re = /(`|npx[^\S\n]+)?(?:@odla-ai\/cli(?:@[\w.-]+)?|odla-ai)((?:[^\S\n]+[a-z][\w-]*)+)/g;
+  const re = /(`|npx[^\S\n]+(?:--yes[^\S\n]+)?)?(?:@odla-ai\/cli(?:@[\w.-]+)?|odla-ai)((?:[^\S\n]+[a-z][\w-]*)+)/g;
   const found = [];
   for (const match of body.matchAll(re)) {
     if (!match[1]) continue;
@@ -13880,7 +13894,8 @@ var ALLOWED2 = [
   "base",
   "requires",
   "platform",
-  "context"
+  "context",
+  "open"
 ];
 function requireSlug(slug, action2) {
   if (!slug) throw new Error(`"runbook ${action2}" needs a slug, e.g. "odla-ai runbook ${action2} release"`);
@@ -13908,6 +13923,7 @@ async function buildContext3(parsed, deps, action2) {
     };
   }
   const needsCapability = WRITES2.has(action2) && !dryRun && appId === PLATFORM_SCOPE && !stringOpt(parsed.options.token);
+  const open = parsed.options.open === false ? false : parsed.options.open === true ? true : void 0;
   const token = needsCapability ? await getScopedPlatformToken({
     platform: cfg.platformUrl,
     scope: "platform:runbook:write",
@@ -13915,6 +13931,7 @@ async function buildContext3(parsed, deps, action2) {
     label: `odla CLI (runbook ${action2})`,
     fetch: doFetch,
     stdout: out,
+    open,
     openApprovalUrl: deps.openUrl,
     // A project, named context, or the global operator context owns the
     // exact-scope cache; it never follows an arbitrary shell directory.
@@ -13926,11 +13943,7 @@ async function buildContext3(parsed, deps, action2) {
       configPath: cfg.configPath,
       token: stringOpt(parsed.options.token),
       email: stringOpt(parsed.options.email),
-      // Let the normal browser policy decide (it already suppresses tests,
-      // CI and SSH). Hardcoding `false` meant a first-time handshake printed
-      // a link and opened nothing — the one moment a browser is the whole
-      // point.
-      open: void 0
+      open
     },
     doFetch,
     out