codeep 3.2.1 → 3.2.2

package/dist/renderer/main.js

@@ -17,7 +17,7 @@ import { getCurrentVersion, checkForUpdates, getUpdateInstructions } from '../ut
 import { getProviderList, isNoApiKeyProvider, resolveReasoningTier } from '../config/providers.js';
 import { getSessionStats, getCostBreakdown, getRecordCount } from '../utils/tokenTracker.js';
 import { getGitStatus, isGitRepository } from '../utils/git.js';
-import { reportStats, syncSession, generateProjectId } from '../utils/codeepCloud.js';
+import { reportStats, syncSession, generateProjectId, ensureDeviceRegistered } from '../utils/codeepCloud.js';
 import { expandFileAndFolderMentions, expandGitMentions } from '../utils/mentions.js';
 import { expandWebMentions } from '../utils/webFetch.js';
 import { handleCommand as dispatchCommand } from './commands.js';
@@ -627,6 +627,10 @@ Commands (in chat):
         return;
     }
     await loadAllApiKeys();
+    // Re-announce this device to the dashboard. Cheap, fire-and-forget, and it
+    // repairs a machine whose one registration at link time happened to fail —
+    // which until now left it syncing, unlisted, and impossible to revoke.
+    ensureDeviceRegistered();
     let apiKey = await loadApiKey();
     if (!apiKey && !isNoApiKeyProvider(config.get('provider'))) {
         const newKey = await showLoginFlow();

package/dist/utils/codeepCloud.d.ts

@@ -42,9 +42,7 @@ export interface StatsPayload {
     cacheReadTokens?: number;
     estimatedCost?: number;
 }
-/**
- * Generate a stable project ID from the project root path.
- */
+export declare function ensureDeviceRegistered(): void;
 export declare function generateProjectId(projectRoot: string): string;
 /**
  * Fire-and-forget stats report. Only sends if github_id is configured.

package/dist/utils/codeepCloud.js

@@ -51,10 +51,18 @@ export async function runAccountFlow() {
         console.error('\n  Could not reach codeep.dev. Check your internet connection.\n');
         return;
     }
+    // Say that the browser can be somewhere else, because it can and nothing
+    // said so. On a server there is no browser to open, and "paste the URL
+    // manually" reads as "into this machine's browser" — which is how people
+    // end up signing in to GitHub on a box they did not want their account on.
+    // The code grants nothing by itself: it is claimed by whoever opens it while
+    // already signed in, and it expires in five minutes.
     const url = `${API_BASE}/auth/cli?code=${code}`;
-    console.log('\n  Opening browser...');
+    console.log('\n  Open this link to approve — on this machine, or any device');
+    console.log('  where you are already signed in to codeep.dev:\n');
     console.log(`  ${url}\n`);
-    console.log('  If the browser did not open, paste the URL above manually.\n');
+    console.log('  The link expires in 5 minutes. This machine then gets its own');
+    console.log('  token, revocable from Settings -> Connected devices.\n');
     openBrowser(url);
     // Poll for authorization
     process.stdout.write('  Waiting for GitHub login');
@@ -100,6 +108,41 @@ export async function runAccountFlow() {
 /**
  * Generate a stable project ID from the project root path.
  */
+/**
+ * Tell the server this device exists, on every start.
+ *
+ * Registration used to happen once, at link time, inside a `catch {}` that
+ * ignored failures — so a network blip during `codeep account` left a machine
+ * with a working token and no `user_devices` row. It synced fine, did not
+ * appear under Connected devices, and could not be revoked, because Revoke
+ * deletes a row that was never written. That is the worst of the three
+ * outcomes: working, invisible, and permanent.
+ *
+ * Repeating it makes a missed registration self-heal on the next run, and
+ * turns `last_seen` into something true — it previously only moved at link
+ * time, so the dashboard's "last seen" was really "linked".
+ *
+ * Once per process, fire-and-forget: it is a heartbeat, not a gate, and must
+ * never delay or fail a start. The next start retries it anyway.
+ */
+let deviceRegistered = false;
+export function ensureDeviceRegistered() {
+    if (deviceRegistered)
+        return;
+    const syncToken = getSyncToken();
+    if (!syncToken)
+        return; // not linked; nothing to register
+    deviceRegistered = true;
+    void fetch(`${API_BASE}/api/auth/cli/device`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'x-sync-token': syncToken },
+        body: JSON.stringify({ deviceId: getDeviceId(), hostname: hostname() }),
+    }).catch(() => {
+        // Allow the next call in this process to try again — a start that fails
+        // here should not mark the device as registered for good.
+        deviceRegistered = false;
+    });
+}
 export function generateProjectId(projectRoot) {
     // Normalize: remove trailing slash, resolve to real path format
     const normalized = projectRoot.replace(/\/+$/, '').toLowerCase();

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "3.2.1";
+export declare const VERSION = "3.2.2";

package/dist/version.js

@@ -1,4 +1,4 @@
 // AUTO-GENERATED by scripts/gen-version.js — do not edit by hand.
 // Baked from package.json at build time so the bun-compiled binary reports
 // the right version (it has no package.json on disk to read at runtime).
-export const VERSION = '3.2.1';
+export const VERSION = '3.2.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeep",
-  "version": "3.2.1",
+  "version": "3.2.2",
   "description": "AI-powered coding assistant built for the terminal. Multiple LLM providers, project-aware context, and a seamless development workflow.",
   "type": "module",
   "main": "dist/index.js",