@inetafrica/open-claudia 2.2.1 → 2.2.2

package/core/actions.js

@@ -113,6 +113,7 @@ async function handleAction(envelope) {
       state.pendingVaultUnlock = false;
       state.pendingVaultAction = null;
       state.pendingVaultUnlockAt = 0;
+      state.pendingVaultUnlockAttempts = 0;
       return send("Cancelled.");
     }
     if (action === "create") {
@@ -120,6 +121,7 @@ async function handleAction(envelope) {
       if (vault.exists()) return send("Vault already exists.");
       state.pendingVaultUnlock = true;
       state.pendingVaultUnlockAt = Date.now();
+      state.pendingVaultUnlockAttempts = 3;
       state.pendingVaultAction = { type: "create" };
       return send("Pick a vault password and send it next.\n(Message will be deleted. Send /vault cancel to abort.)", {
         keyboard: { inline_keyboard: [[{ text: "Cancel", callback_data: "vault:cancel" }]] },

package/core/handlers.js

@@ -883,6 +883,7 @@ const PASSWORD_PROMPT_KB = { inline_keyboard: [[{ text: "Cancel", callback_data:
 function armVaultPrompt(state, action) {
   state.pendingVaultUnlock = true;
   state.pendingVaultUnlockAt = Date.now();
+  state.pendingVaultUnlockAttempts = 3;
   state.pendingVaultAction = action;
 }
 
@@ -925,6 +926,7 @@ register({
       state.pendingVaultUnlock = false;
       state.pendingVaultAction = null;
       state.pendingVaultUnlockAt = 0;
+      state.pendingVaultUnlockAttempts = 0;
       return send("Cancelled.");
     }
 

package/core/router.js

@@ -246,17 +246,19 @@ async function handleText(envelope) {
       state.pendingVaultUnlock = false;
       state.pendingVaultAction = null;
       state.pendingVaultUnlockAt = 0;
+      state.pendingVaultUnlockAttempts = 0;
       await send("Vault prompt timed out. Re-run the command.");
       return;
     }
     const password = envelope.text;
     await deleteMessage(envelope.messageId);
     const action = state.pendingVaultAction;
-    state.pendingVaultUnlock = false;
-    state.pendingVaultAction = null;
-    state.pendingVaultUnlockAt = 0;
 
     if (action && action.type === "create") {
+      state.pendingVaultUnlock = false;
+      state.pendingVaultAction = null;
+      state.pendingVaultUnlockAt = 0;
+      state.pendingVaultUnlockAttempts = 0;
       if (vault.exists()) { await send("Vault was created in another flow — re-run /vault."); return; }
       vault.create(password);
       await send("Vault created and unlocked.\n\nUse /vault set <name> <value>");
@@ -265,9 +267,27 @@ async function handleText(envelope) {
 
     const ok = vault.unlock(password);
     if (!ok) {
-      await send("Wrong password.");
+      const left = (state.pendingVaultUnlockAttempts || 1) - 1;
+      if (left > 0) {
+        state.pendingVaultUnlockAttempts = left;
+        state.pendingVaultUnlockAt = Date.now();
+        await send(`Wrong password. ${left} attempt${left === 1 ? "" : "s"} left.\nSend the password again or /vault cancel.`, {
+          keyboard: { inline_keyboard: [[{ text: "Cancel", callback_data: "vault:cancel" }]] },
+        });
+        return;
+      }
+      state.pendingVaultUnlock = false;
+      state.pendingVaultAction = null;
+      state.pendingVaultUnlockAt = 0;
+      state.pendingVaultUnlockAttempts = 0;
+      await send("Too many wrong attempts. Re-run /vault to try again.");
       return;
     }
+
+    state.pendingVaultUnlock = false;
+    state.pendingVaultAction = null;
+    state.pendingVaultUnlockAt = 0;
+    state.pendingVaultUnlockAttempts = 0;
     if (action.type === "list") {
       const entries = vault.list();
       const keys = Object.keys(entries);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "2.2.1",
+  "version": "2.2.2",
   "description": "Your always-on AI coding assistant — Claude Code, Cursor Agent, and OpenAI Codex via Telegram or Kazee Chat",
   "main": "bot.js",
   "bin": {