@hienlh/ppm 0.7.33 → 0.7.35

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.7.35] - 2026-03-23
+
+### Improved
+- **Cloud link auto-sync**: `ppm cloud link` detects active tunnel and sends heartbeat immediately — device shows online on cloud dashboard without restart
+
+## [0.7.34] - 2026-03-23
+
+### Added
+- **Device code login**: `ppm cloud login --device-code` for remote terminals (PPM terminal, SSH, headless). Enter 6-char code at ppm.hienle.tech/verify from any browser.
+- **Auto-detection**: CLI auto-picks browser flow on desktop, device code flow on remote sessions. Falls back to device code if browser fails.
+
 ## [0.7.33] - 2026-03-23
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.7.33",
+  "version": "0.7.35",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/cli/commands/cloud.ts

@@ -7,11 +7,13 @@ export function registerCloudCommands(program: Command): void {
 
   cmd
     .command("login")
-    .description("Sign in with Google (opens browser)")
+    .description("Sign in with Google")
     .option("--url <url>", "Cloud URL override")
+    .option("--device-code", "Force device code flow (for remote terminals)")
     .action(async (options) => {
       const {
         startLoginServer,
+        startDeviceCodeLogin,
         getCloudAuth,
         DEFAULT_CLOUD_URL,
       } = await import("../../services/cloud.service.ts");
@@ -31,8 +33,25 @@ export function registerCloudCommands(program: Command): void {
       }
 
       try {
-        const auth = await startLoginServer(cloudUrl);
-        console.log(`  ✓  Logged in as ${auth.email}\n`);
+        let auth;
+
+        // Use device code flow if: forced by flag, running in SSH/PPM terminal, or no display
+        const useDeviceCode = options.deviceCode || !process.env.DISPLAY && process.platform === "linux"
+          || process.env.PPM_TERMINAL === "1";
+
+        if (useDeviceCode) {
+          auth = await startDeviceCodeLogin(cloudUrl);
+        } else {
+          // Try browser flow, fall back to device code on failure
+          try {
+            auth = await startLoginServer(cloudUrl);
+          } catch {
+            console.log("  Browser login failed, switching to device code flow...\n");
+            auth = await startDeviceCodeLogin(cloudUrl);
+          }
+        }
+
+        console.log(`\n  ✓  Logged in as ${auth.email}\n`);
         console.log(`  Next: run 'ppm cloud link' to register this machine.\n`);
       } catch (err: unknown) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -70,7 +89,26 @@ export function registerCloudCommands(program: Command): void {
         console.log(`  ✓  Machine linked`);
         console.log(`     Name: ${device.name}`);
         console.log(`     ID: ${device.device_id}`);
-        console.log(`\n  Run 'ppm start --share' to sync tunnel URL to cloud.\n`);
+
+        // Auto-detect running tunnel and start heartbeat immediately
+        try {
+          const { resolve } = await import("node:path");
+          const { homedir } = await import("node:os");
+          const { existsSync, readFileSync } = await import("node:fs");
+          const statusFile = resolve(homedir(), ".ppm", "status.json");
+          if (existsSync(statusFile)) {
+            const status = JSON.parse(readFileSync(statusFile, "utf-8"));
+            if (status.shareUrl) {
+              const { sendHeartbeat } = await import("../../services/cloud.service.ts");
+              const ok = await sendHeartbeat(status.shareUrl);
+              if (ok) {
+                console.log(`\n  ➜  Cloud:   synced tunnel URL (${status.shareUrl})`);
+              }
+            }
+          }
+        } catch { /* non-blocking */ }
+
+        console.log();
       } catch (err: unknown) {
         const msg = err instanceof Error ? err.message : String(err);
         console.error(`  ✗  Link failed: ${msg}\n`);

package/src/services/cloud.service.ts

@@ -200,6 +200,82 @@ export async function startLoginServer(cloudUrl: string): Promise<CloudAuth> {
   });
 }
 
+/**
+ * Device code login flow (RFC 8628).
+ * Works from PPM terminal, SSH, or any remote session.
+ * User enters a short code on ppm.hienle.tech/verify from any browser.
+ */
+export async function startDeviceCodeLogin(cloudUrl: string): Promise<CloudAuth> {
+  // 1. Request device code
+  const res = await fetch(`${cloudUrl}/auth/device-code`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+  });
+
+  if (!res.ok) throw new Error(`Failed to initiate device code: ${res.status}`);
+
+  const data = await res.json() as {
+    device_code: string;
+    user_code: string;
+    verification_uri: string;
+    expires_in: number;
+    interval: number;
+  };
+
+  // 2. Display code to user
+  console.log(`\n  ┌──────────────────────────────────────────┐`);
+  console.log(`  │  Visit: ${data.verification_uri}`);
+  console.log(`  │  Enter code: ${data.user_code}`);
+  console.log(`  └──────────────────────────────────────────┘\n`);
+
+  // 3. Poll until approved or expired
+  const pollInterval = (data.interval || 5) * 1000;
+  const deadline = Date.now() + data.expires_in * 1000;
+
+  while (Date.now() < deadline) {
+    await Bun.sleep(pollInterval);
+
+    try {
+      const pollRes = await fetch(`${cloudUrl}/auth/device-code/poll`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ device_code: data.device_code }),
+      });
+
+      if (!pollRes.ok) {
+        if (pollRes.status === 410) throw new Error("Code expired. Try again.");
+        continue;
+      }
+
+      const result = await pollRes.json() as {
+        status: string;
+        access_token?: string;
+        email?: string;
+      };
+
+      if (result.status === "approved" && result.access_token && result.email) {
+        const auth: CloudAuth = {
+          access_token: result.access_token,
+          refresh_token: "",
+          email: result.email,
+          cloud_url: cloudUrl,
+          saved_at: new Date().toISOString(),
+        };
+        saveCloudAuth(auth);
+        return auth;
+      }
+
+      // Still pending — show dots
+      process.stdout.write(".");
+    } catch (err) {
+      if (err instanceof Error && err.message.includes("expired")) throw err;
+      // Network error — keep polling
+    }
+  }
+
+  throw new Error("Login timed out. Try again.");
+}
+
 // ─── Device Registration ────────────────────────────────────────────────
 
 /** Register or re-register this machine with cloud */