@rubytech/create-maxy-code 0.1.484 → 0.1.485

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.484",
+  "version": "0.1.485",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/cloudflare/mcp/__tests__/template-config.test.ts

@@ -144,3 +144,29 @@ describe('device binding', () => {
     expect(text).toMatch(/accountId\s+TEXT NOT NULL DEFAULT ''/)
   })
 })
+
+const portalJs = () => readFileSync(join(TEMPLATE, 'portal.js'), 'utf8')
+const indexHtml = () => readFileSync(join(TEMPLATE, 'index.html'), 'utf8')
+
+describe('login error surfacing and passcode reveal (Task 1872)', () => {
+  it('maps each auth failure to a distinct message, not one opaque string', () => {
+    const js = portalJs()
+    expect(js).not.toMatch(/That did not work\./)
+    expect(js).toContain('Too many attempts. Try again later.')
+    expect(js).toContain('Enter both your name and your passcode.')
+    expect(js).toContain('That name and passcode did not match.')
+    expect(js).toContain('Something went wrong. Please try again in a moment.')
+    expect(js).toContain('Could not reach the server. Check your connection and try again.')
+  })
+
+  it('logs the status and error on the auth failure path', () => {
+    expect(portalJs()).toMatch(/console\.error\(\s*'\[data-portal\] auth failed'/)
+  })
+
+  it('ships a reveal control bound to the passcode field', () => {
+    const html = indexHtml()
+    expect(html).toMatch(/id="dp-reveal"/)
+    expect(html).toMatch(/aria-controls="dp-passcode"/)
+    expect(portalJs()).toMatch(/dp-reveal/)
+  })
+})

package/payload/platform/plugins/cloudflare/skills/data-portal/template/index.html

@@ -18,14 +18,22 @@
         <label class="dp-label" for="dp-owner">Your name</label>
         <input class="dp-input" id="dp-owner" name="owner" autocomplete="username" required />
         <label class="dp-label" for="dp-passcode">Passcode</label>
-        <input
-          class="dp-input"
-          id="dp-passcode"
-          name="passcode"
-          type="password"
-          autocomplete="current-password"
-          required
-        />
+        <div class="dp-field">
+          <input
+            class="dp-input"
+            id="dp-passcode"
+            name="passcode"
+            type="password"
+            autocomplete="current-password"
+            required
+          />
+          <button
+            type="button"
+            class="dp-reveal"
+            id="dp-reveal"
+            aria-controls="dp-passcode"
+          >Show passcode</button>
+        </div>
         <button class="dp-btn" type="submit">Sign in</button>
       </form>
 

package/payload/platform/plugins/cloudflare/skills/data-portal/template/portal.css

@@ -178,3 +178,28 @@ body {
   cursor: pointer;
   text-align: left;
 }
+
+/* Passcode field with its reveal control. The passcode is transcribed out of
+   band, so being able to check what was typed is the point of the toggle.
+   Reuses existing variables and declares no new :root value, which
+   portal-brand-css.mjs would drop. */
+.dp-field {
+  display: flex;
+  gap: 0.5rem;
+  align-items: stretch;
+}
+
+.dp-field .dp-input {
+  flex: 1;
+}
+
+.dp-reveal {
+  border: 1px solid var(--dp-rule);
+  border-radius: 0.375rem;
+  background: transparent;
+  color: var(--dp-muted);
+  padding: 0.375rem 0.625rem;
+  font: inherit;
+  cursor: pointer;
+  white-space: nowrap;
+}

package/payload/platform/plugins/cloudflare/skills/data-portal/template/portal.js

@@ -192,6 +192,13 @@
       });
   }
 
+  function authFailureMessage(status) {
+    if (status === 429) return 'Too many attempts. Try again later.';
+    if (status === 400) return 'Enter both your name and your passcode.';
+    if (status === 401) return 'That name and passcode did not match.';
+    return 'Something went wrong. Please try again in a moment.';
+  }
+
   loginEl.addEventListener('submit', function (e) {
     e.preventDefault();
     say('Signing in…');
@@ -209,12 +216,12 @@
         });
       })
       .then(function (res) {
-        if (res.s === 429) {
-          say('Too many attempts. Try again later.');
-          return;
-        }
         if (!res.d.ok) {
-          say('That did not work.');
+          // The server returns the same denial for a wrong passcode and an
+          // unknown owner on purpose, so the message stays single and the
+          // console carries only the status class, never the reason.
+          console.error('[data-portal] auth failed', { status: res.s, error: res.d.error });
+          say(authFailureMessage(res.s));
           return;
         }
         document.getElementById('dp-passcode').value = '';
@@ -223,11 +230,20 @@
         say('');
         return refresh();
       })
-      .catch(function () {
-        say('That did not work.');
+      .catch(function (err) {
+        console.error('[data-portal] auth failed', { status: 'network', error: err });
+        say('Could not reach the server. Check your connection and try again.');
       });
   });
 
+  var revealEl = document.getElementById('dp-reveal');
+  var passcodeInput = document.getElementById('dp-passcode');
+  revealEl.addEventListener('click', function () {
+    var revealed = passcodeInput.type === 'text';
+    passcodeInput.type = revealed ? 'password' : 'text';
+    revealEl.textContent = revealed ? 'Show passcode' : 'Hide passcode';
+  });
+
   document.getElementById('dp-upload').addEventListener('submit', function (e) {
     e.preventDefault();
     var input = document.getElementById('dp-file');

package/payload/server/server.js

@@ -4107,7 +4107,8 @@ async function sendPaused(sock, to) {
   } catch {
   }
 }
-async function sendReadReceipt(sock, chatJid, messageIds, participant) {
+async function sendReadReceipt(sock, chatJid, messageIds, participant, accountId) {
+  const idTag = messageIds[0] ?? "?";
   try {
     await sock.readMessages([
       ...messageIds.map((id) => ({
@@ -4116,7 +4117,13 @@ async function sendReadReceipt(sock, chatJid, messageIds, participant) {
         participant
       }))
     ]);
-  } catch {
+    console.error(
+      `[whatsapp:receipt] op=ack account=${accountId ?? "?"} jid=${chatJid} id=${idTag} ok=true`
+    );
+  } catch (err) {
+    console.error(
+      `[whatsapp:receipt] op=ack account=${accountId ?? "?"} jid=${chatJid} id=${idTag} ok=false reason=${String(err).slice(0, 120)}`
+    );
   }
 }
 async function sendMediaMessage(sock, to, media, opts) {
@@ -6148,7 +6155,7 @@ function monitorInbound(conn) {
                 const sendReceipts = whatsAppConfig.accounts?.[conn.accountId]?.sendReadReceipts ?? whatsAppConfig.sendReadReceipts ?? true;
                 const sendAppendReceipt = () => {
                   if (sendReceipts && msgKeyId) {
-                    sendReadReceipt(sock2, remoteJid, [msgKeyId], participant);
+                    sendReadReceipt(sock2, remoteJid, [msgKeyId], participant, conn.accountId);
                   }
                 };
                 const accepted = appendMediaQueue.schedule(async () => {
@@ -6200,7 +6207,8 @@ function monitorInbound(conn) {
               sock,
               remoteJid,
               [msg.key.id],
-              isGroupJid(remoteJid) ? msg.key.participant ?? void 0 : void 0
+              isGroupJid(remoteJid) ? msg.key.participant ?? void 0 : void 0,
+              conn.accountId
             );
           }
           const decision = evaluateSelfChatCommand({
@@ -6361,39 +6369,12 @@ async function handleInboundMessage(conn, msg) {
     console.error(`${TAG17} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
     return;
   }
-  let mediaResult;
-  if (extracted.mediaType && conn.sock) {
-    const maxMb = whatsAppConfig.mediaMaxMb ?? 50;
-    mediaResult = await downloadInboundMedia(msg, conn.sock, {
-      maxBytes: maxMb * 1024 * 1024
-    });
-    if (!mediaResult) {
-      console.error(`${TAG17} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
-    }
-  }
   const isGroup = isGroupJid(remoteJid);
   const senderJid = isGroup ? msg.key.participant ?? remoteJid : remoteJid;
   const senderPhone = await resolveJidToE164(senderJid, conn.lidMapping) ?? senderJid;
   const lidCapture = lidCaptureFor(senderJid, senderPhone);
   if (lidCapture) recordLidMapping(lidCapture.numericLid, lidCapture.e164);
   const selfPhone = conn.selfPhone ?? "";
-  if (extracted.mediaType === "audio" && mediaResult?.path) {
-    const conversationKey = isGroup ? remoteJid : senderPhone;
-    const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
-    let resolvePending;
-    const sttPending = new Promise((resolve39) => {
-      resolvePending = resolve39;
-    });
-    if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
-    try {
-      const sttResult = await transcribe(mediaResult.path, mediaResult.mimetype);
-      if (sttResult?.text) {
-        extracted.text = sttResult.text;
-      }
-    } finally {
-      resolvePending();
-    }
-  }
   let accessResult;
   if (isGroup) {
     accessResult = checkGroupAccess({ groupJid: remoteJid });
@@ -6409,7 +6390,7 @@ async function handleInboundMessage(conn, msg) {
     });
   }
   console.error(
-    `${TAG17} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
+    `${TAG17} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
   );
   if (!accessResult.allowed && accessResult.reason === "account-manager-unresolved") {
     console.error(
@@ -6431,7 +6412,34 @@ async function handleInboundMessage(conn, msg) {
   }
   const sendReceipts = whatsAppConfig.accounts?.[conn.accountId]?.sendReadReceipts ?? whatsAppConfig.sendReadReceipts ?? true;
   if (sendReceipts && msg.key.id) {
-    sendReadReceipt(conn.sock, remoteJid, [msg.key.id], isGroup ? senderJid : void 0);
+    sendReadReceipt(conn.sock, remoteJid, [msg.key.id], isGroup ? senderJid : void 0, conn.accountId);
+  }
+  let mediaResult;
+  if (extracted.mediaType && conn.sock) {
+    const maxMb = whatsAppConfig.mediaMaxMb ?? 50;
+    mediaResult = await downloadInboundMedia(msg, conn.sock, {
+      maxBytes: maxMb * 1024 * 1024
+    });
+    if (!mediaResult) {
+      console.error(`${TAG17} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
+    }
+  }
+  if (extracted.mediaType === "audio" && mediaResult?.path) {
+    const conversationKey = isGroup ? remoteJid : senderPhone;
+    const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
+    let resolvePending;
+    const sttPending = new Promise((resolve39) => {
+      resolvePending = resolve39;
+    });
+    if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
+    try {
+      const sttResult = await transcribe(mediaResult.path, mediaResult.mimetype);
+      if (sttResult?.text) {
+        extracted.text = sttResult.text;
+      }
+    } finally {
+      resolvePending();
+    }
   }
   const reply = async (text) => {
     if (isGroupJid(remoteJid)) {