fluxy-bot 0.2.42 → 0.2.43

package/dist-fluxy/fluxy.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, interactive-widget=resizes-content" />
     <title>Fluxy Chat</title>
-    <script type="module" crossorigin src="/fluxy/assets/fluxy-Cfl58Zg0.js"></script>
+    <script type="module" crossorigin src="/fluxy/assets/fluxy-B20BJakh.js"></script>
     <link rel="modulepreload" crossorigin href="/fluxy/assets/globals--DVlL_N5.js">
     <link rel="stylesheet" crossorigin href="/fluxy/assets/globals-DMXu7CFU.css">
   </head>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fluxy-bot",
-  "version": "0.2.42",
+  "version": "0.2.43",
   "description": "Self-hosted AI bot — run your own AI assistant from anywhere",
   "type": "module",
   "license": "MIT",

package/supervisor/chat/fluxy-main.tsx

@@ -26,14 +26,21 @@ function LoginForm({ botName, onSuccess }: { botName: string; onSuccess: () => v
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify({ username, password }),
       });
+      const contentType = res.headers.get('content-type') || '';
+      if (!contentType.includes('application/json')) {
+        console.error(`[login] Non-JSON response: ${res.status} ${contentType}`);
+        setError(`Server error (${res.status})`);
+        return;
+      }
       const data = await res.json();
       if (data.ok) {
         onSuccess();
       } else {
         setError(data.error || 'Login failed');
       }
-    } catch {
-      setError('Connection error');
+    } catch (err) {
+      console.error('[login] Fetch error:', err);
+      setError('Connection error — check if server is running');
     } finally {
       setLoading(false);
     }

package/supervisor/index.ts

@@ -129,7 +129,10 @@ export async function startSupervisor() {
 
     // API routes → proxy to worker
     if (req.url?.startsWith('/api')) {
-      console.log(`[supervisor] → worker :${workerPort} | ${req.method} ${req.url}`);
+      const isAuthReq = req.url.startsWith('/api/auth/');
+      if (isAuthReq) console.log(`[supervisor] AUTH → worker :${workerPort} | ${req.method} ${req.url} | content-type: ${req.headers['content-type']} | content-length: ${req.headers['content-length']}`);
+      else console.log(`[supervisor] → worker :${workerPort} | ${req.method} ${req.url}`);
+
       if (!isWorkerAlive()) {
         console.log('[supervisor] Worker down — returning 503');
         res.writeHead(503, { 'Content-Type': 'text/html' });
@@ -140,6 +143,7 @@ export async function startSupervisor() {
       const proxy = http.request(
         { host: '127.0.0.1', port: workerPort, path: req.url, method: req.method, headers: req.headers },
         (proxyRes) => {
+          if (isAuthReq) console.log(`[supervisor] AUTH ← worker ${proxyRes.statusCode} | set-cookie: ${proxyRes.headers['set-cookie'] ? 'yes' : 'no'}`);
           res.writeHead(proxyRes.statusCode!, proxyRes.headers);
           proxyRes.pipe(res);
         },

package/worker/index.ts

@@ -40,22 +40,39 @@ app.use(express.json());
 // ── Auth endpoints (public) ──
 
 app.post('/api/auth/login', async (req, res) => {
+  log.ok(`[auth/login] POST received — body keys: ${Object.keys(req.body || {}).join(', ') || '(empty)'}`);
   const { username, password } = req.body;
-  if (!username || !password) { res.status(400).json({ error: 'Missing credentials' }); return; }
+  if (!username || !password) {
+    log.warn(`[auth/login] Missing credentials — username: ${!!username}, password: ${!!password}`);
+    res.status(400).json({ error: 'Missing credentials' }); return;
+  }
 
   const storedUser = getSetting('portal_user');
   const storedPass = getSetting('portal_pass');
+  log.ok(`[auth/login] Stored portal_user: ${storedUser || '(none)'}, portal_pass: ${storedPass ? 'set' : '(none)'}`);
   if (!storedUser || !storedPass) { res.status(401).json({ error: 'Portal not configured' }); return; }
 
-  if (username.trim().toLowerCase() !== storedUser.toLowerCase() || !verifyPassword(password, storedPass)) {
+  const usernameMatch = username.trim().toLowerCase() === storedUser.toLowerCase();
+  const passwordMatch = verifyPassword(password, storedPass);
+  log.ok(`[auth/login] username match: ${usernameMatch}, password match: ${passwordMatch}`);
+
+  if (!usernameMatch || !passwordMatch) {
     res.status(401).json({ error: 'Invalid username or password' });
     return;
   }
 
-  const token = await signToken({ sub: storedUser, role: 'owner' });
-  const secure = req.headers['x-forwarded-proto'] === 'https' || req.protocol === 'https';
-  res.setHeader('Set-Cookie', buildSessionCookie(token, secure));
-  res.json({ ok: true, username: storedUser });
+  try {
+    const token = await signToken({ sub: storedUser, role: 'owner' });
+    log.ok(`[auth/login] JWT signed OK (length: ${token.length})`);
+    const secure = req.headers['x-forwarded-proto'] === 'https' || req.protocol === 'https';
+    log.ok(`[auth/login] secure=${secure}, x-forwarded-proto=${req.headers['x-forwarded-proto']}`);
+    res.setHeader('Set-Cookie', buildSessionCookie(token, secure));
+    res.json({ ok: true, username: storedUser });
+    log.ok(`[auth/login] Success — response sent`);
+  } catch (err: any) {
+    log.warn(`[auth/login] JWT sign error: ${err.message}`);
+    res.status(500).json({ error: 'Internal error' });
+  }
 });
 
 app.get('/api/auth/me', async (req, res) => {