Unclear It's not confirmed what triggers this dialog or exactly what re-enrollment flow it walks the user through, since only the component's existence and loading pattern are evidenced.
What
- A new
DeviceReenrollDialogcomponent is now lazily loaded and shown using the same pattern as other auth/session dialogs, prompting the user to re-enroll their device when its credentials have expired or been invalidated. - A new
device_reenrolltelemetry/operation kind was added alongside the existing device-related kinds (device_key_store,device_mcp_host_consent,device_mcp_serving,device_registry_register). - When device registration is found to be revoked, the thrown error now includes the device's public key (SPKI, base64-encoded) as
refusedPublicKey, instead of a bare error with no details.
Why
This gives Claude Code a way to detect a revoked or invalid device registration, tell the user what happened, and walk them through re-enrolling the device instead of failing silently.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It's not confirmed what triggers this dialog or exactly what re-enrollment flow it walks the user through, since only the component's…