@odla-ai/cli 0.38.1 → 0.38.3

package/dist/bin.cjs

@@ -10501,7 +10501,8 @@ async function codeConnect(options) {
   );
   try {
     const descriptor2 = localSource.descriptor;
-    const approval = await (options.getToken ?? getScopedPlatformToken)({
+    const device = options.getToken ? null : readDeviceCredential(platform);
+    const authorization = device ? (await mintDeviceSession(platform, device, doFetch)).token : await (options.getToken ?? getScopedPlatformToken)({
       platform,
       scope: "app:code:host:connect",
       email: options.email,
@@ -10515,7 +10516,7 @@ async function codeConnect(options) {
     const target = appId ? { appId } : { repository };
     const response2 = await doFetch(`${platform}/registry/code/hosts/connect`, {
       method: "POST",
-      headers: { authorization: `Bearer ${approval}`, "content-type": "application/json" },
+      headers: { authorization: `Bearer ${authorization}`, "content-type": "application/json" },
       body: JSON.stringify({ ...target, env: appEnv, name: hostName, platform: hostPlatform, slots }),
       redirect: "error",
       signal: options.signal
@@ -10637,6 +10638,7 @@ var init_code_connect = __esm({
     init_node();
     init_admin_ai_auth();
     init_config();
+    init_device_session();
     init_version();
     init_security_hosted_github();
     init_code_local_source();
@@ -11501,10 +11503,12 @@ Safety:
   release. A confirmed stale client stops with a safe npx rerun command; a
   workspace-linked client also identifies the worktree that must be updated.
   Run Code from a GitHub checkout already connected to an app in Studio; an
-  odla.config.mjs may select the app explicitly but is not required. Code host
-  approval and credential hashes live in odla-ai/db. The host
-  credential is never written under .odla/; it exists only in the foreground
-  "code connect" process and is rotated by the next approved connection.
+  odla.config.mjs may select the app explicitly but is not required. With an
+  enrolled code.session device, the Studio repository selection authorizes the
+  host's first connection and reconnects without another human approval. Without
+  an enrolled device, "code connect" falls back to the reviewed handshake. Host
+  credential hashes live in odla-ai/db; the credential itself is never written
+  under .odla/, exists only in the foreground process, and rotates on reconnect.
   "code repository bind" takes owner/name and resolves the two GitHub integers the
   bind route wants across every installation you have, refusing an ambiguous match
   rather than choosing one \u2014 the same repository name under two organizations is