codeep 3.2.0 → 3.2.2

package/dist/renderer/agentExecution.js

@@ -456,14 +456,17 @@ export async function executeAgentTask(task, dryRun, ctx) {
         // even if the user switched model mid-session. Only this run's delta
         // (since tokenReportStart) is reported; the cumulative store is preserved.
         const costBreakdown = getCostBreakdown(tokenReportStart);
+        // Consumed exactly once per run, before anything branches on it: the notice
+        // path is conditional (no credentials, or a run too short to notify), and
+        // reading it inside that branch left the stat blind on every run that did
+        // not send a notification.
+        const startedFromPhone = takeRunFromPhone();
         // Told once the run is over, and only when it ran long enough that you
         // could plausibly have stopped watching. Awaited so the process does not
         // exit from under the request, but never allowed to fail the run.
         if (noticeCredentials) {
             const elapsedMs = Date.now() - runStartedAt;
-            // Consumed once per run either way, so a phone-started run cannot leave
-            // the flag set for whatever the terminal does next.
-            const fromPhone = takeRunFromPhone();
+            const fromPhone = startedFromPhone;
             // The one-minute threshold exists so a phone is not buzzed about work you
             // watched finish. It has no business gating a run the phone itself asked
             // for: that answer was wanted whether it took ten seconds or ten minutes,
@@ -486,6 +489,10 @@ export async function executeAgentTask(task, dryRun, ctx) {
             }
         }
         const sharedFields = {
+            // `fromPhone` is read above, where the notice consumes it. Captured here
+            // too because the stats event is the only place it can answer anything
+            // later — see docs/ios-decision.md.
+            fromPhone: startedFromPhone,
             sessionId,
             sessionName: displayName,
             messageCount: app.getMessages().length,

package/dist/renderer/main.js

@@ -17,7 +17,7 @@ import { getCurrentVersion, checkForUpdates, getUpdateInstructions } from '../ut
 import { getProviderList, isNoApiKeyProvider, resolveReasoningTier } from '../config/providers.js';
 import { getSessionStats, getCostBreakdown, getRecordCount } from '../utils/tokenTracker.js';
 import { getGitStatus, isGitRepository } from '../utils/git.js';
-import { reportStats, syncSession, generateProjectId } from '../utils/codeepCloud.js';
+import { reportStats, syncSession, generateProjectId, ensureDeviceRegistered } from '../utils/codeepCloud.js';
 import { expandFileAndFolderMentions, expandGitMentions } from '../utils/mentions.js';
 import { expandWebMentions } from '../utils/webFetch.js';
 import { handleCommand as dispatchCommand } from './commands.js';
@@ -627,6 +627,10 @@ Commands (in chat):
         return;
     }
     await loadAllApiKeys();
+    // Re-announce this device to the dashboard. Cheap, fire-and-forget, and it
+    // repairs a machine whose one registration at link time happened to fail —
+    // which until now left it syncing, unlisted, and impossible to revoke.
+    ensureDeviceRegistered();
     let apiKey = await loadApiKey();
     if (!apiKey && !isNoApiKeyProvider(config.get('provider'))) {
         const newKey = await showLoginFlow();

package/dist/utils/codeepCloud.d.ts

@@ -23,6 +23,15 @@ export interface StatsPayload {
     projectId?: string;
     language?: string;
     isGit?: boolean;
+    /**
+     * Whether this run was started from a phone rather than at the terminal.
+     *
+     * Recorded to answer whether a Codeep iOS app is worth building with
+     * behaviour instead of opinion: "would you like an iOS app?" costs nothing
+     * to say yes to, while actually driving a run from a phone — which the
+     * Telegram inbox has allowed since 3.1.0 — is a thing somebody did.
+     */
+    fromPhone?: boolean;
     inputTokens?: number;
     outputTokens?: number;
     /** Anthropic prompt caching: tokens written to cache (billed ~1.25× input).
@@ -33,9 +42,7 @@ export interface StatsPayload {
     cacheReadTokens?: number;
     estimatedCost?: number;
 }
-/**
- * Generate a stable project ID from the project root path.
- */
+export declare function ensureDeviceRegistered(): void;
 export declare function generateProjectId(projectRoot: string): string;
 /**
  * Fire-and-forget stats report. Only sends if github_id is configured.

package/dist/utils/codeepCloud.js

@@ -51,10 +51,18 @@ export async function runAccountFlow() {
         console.error('\n  Could not reach codeep.dev. Check your internet connection.\n');
         return;
     }
+    // Say that the browser can be somewhere else, because it can and nothing
+    // said so. On a server there is no browser to open, and "paste the URL
+    // manually" reads as "into this machine's browser" — which is how people
+    // end up signing in to GitHub on a box they did not want their account on.
+    // The code grants nothing by itself: it is claimed by whoever opens it while
+    // already signed in, and it expires in five minutes.
     const url = `${API_BASE}/auth/cli?code=${code}`;
-    console.log('\n  Opening browser...');
+    console.log('\n  Open this link to approve — on this machine, or any device');
+    console.log('  where you are already signed in to codeep.dev:\n');
     console.log(`  ${url}\n`);
-    console.log('  If the browser did not open, paste the URL above manually.\n');
+    console.log('  The link expires in 5 minutes. This machine then gets its own');
+    console.log('  token, revocable from Settings -> Connected devices.\n');
     openBrowser(url);
     // Poll for authorization
     process.stdout.write('  Waiting for GitHub login');
@@ -100,6 +108,41 @@ export async function runAccountFlow() {
 /**
  * Generate a stable project ID from the project root path.
  */
+/**
+ * Tell the server this device exists, on every start.
+ *
+ * Registration used to happen once, at link time, inside a `catch {}` that
+ * ignored failures — so a network blip during `codeep account` left a machine
+ * with a working token and no `user_devices` row. It synced fine, did not
+ * appear under Connected devices, and could not be revoked, because Revoke
+ * deletes a row that was never written. That is the worst of the three
+ * outcomes: working, invisible, and permanent.
+ *
+ * Repeating it makes a missed registration self-heal on the next run, and
+ * turns `last_seen` into something true — it previously only moved at link
+ * time, so the dashboard's "last seen" was really "linked".
+ *
+ * Once per process, fire-and-forget: it is a heartbeat, not a gate, and must
+ * never delay or fail a start. The next start retries it anyway.
+ */
+let deviceRegistered = false;
+export function ensureDeviceRegistered() {
+    if (deviceRegistered)
+        return;
+    const syncToken = getSyncToken();
+    if (!syncToken)
+        return; // not linked; nothing to register
+    deviceRegistered = true;
+    void fetch(`${API_BASE}/api/auth/cli/device`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'x-sync-token': syncToken },
+        body: JSON.stringify({ deviceId: getDeviceId(), hostname: hostname() }),
+    }).catch(() => {
+        // Allow the next call in this process to try again — a start that fails
+        // here should not mark the device as registered for good.
+        deviceRegistered = false;
+    });
+}
 export function generateProjectId(projectRoot) {
     // Normalize: remove trailing slash, resolve to real path format
     const normalized = projectRoot.replace(/\/+$/, '').toLowerCase();

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "3.2.0";
+export declare const VERSION = "3.2.2";

package/dist/version.js

@@ -1,4 +1,4 @@
 // AUTO-GENERATED by scripts/gen-version.js — do not edit by hand.
 // Baked from package.json at build time so the bun-compiled binary reports
 // the right version (it has no package.json on disk to read at runtime).
-export const VERSION = '3.2.0';
+export const VERSION = '3.2.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeep",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "description": "AI-powered coding assistant built for the terminal. Multiple LLM providers, project-aware context, and a seamless development workflow.",
   "type": "module",
   "main": "dist/index.js",