@novacraft-engineering/pulsar-cli 1.4.0 → 1.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@novacraft-engineering/pulsar-cli",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Pulsar OTA release CLI — bundle, hash, and ship React Native updates over-the-air.",
   "type": "module",
   "bin": {

package/pulsar.js

@@ -42,14 +42,16 @@ function loadConfig() {
   return {
     apiUrl: process.env.PULSAR_API_URL || fromFile.apiUrl,
     token: process.env.PULSAR_TOKEN || fromFile.token,
+    deviceId: fromFile.deviceId,
   };
 }
 
 function saveConfig(config) {
   // The config holds a bearer token — keep the dir and file owner-only so other local users on a
   // shared host can't read the session.
+  const deviceId = config.deviceId || loadConfig().deviceId;
   fs.mkdirSync(CONFIG_DIR, {recursive: true, mode: 0o700});
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), {mode: 0o600});
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify({...config, deviceId}, null, 2), {mode: 0o600});
   try { fs.chmodSync(CONFIG_FILE, 0o600); } catch { /* best-effort on pre-existing files */ }
 }
 
@@ -347,8 +349,9 @@ async function cmdLogin(args) {
 
   const email = await prompt('Email: ');
   const password = await prompt('Password: ', true);
-  const {token, user} = await api('/auth/login', {method: 'POST', body: {email, password}, allowAnonymous: true});
-  saveConfig({apiUrl, token});
+  const deviceId = loadConfig().deviceId || crypto.randomBytes(16).toString('hex');
+  const {token, user} = await api('/auth/login', {method: 'POST', body: {email, password}, headers: {'x-device-id': deviceId}, allowAnonymous: true});
+  saveConfig({apiUrl, token, deviceId});
   console.log(`✓ logged in as ${user.email} (${user.platformRole})`);
 }