npm - fluxy-bot - Versions diffs - 0.7.4 → 0.7.6 - Mend

fluxy-bot 0.7.4 → 0.7.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/dist-fluxy/assets/{fluxy-C2_hZ0e0.js → fluxy-Bcd5tJrt.js} +25 -25
package/dist-fluxy/assets/{globals-DZhBbtf8.css → globals-Bs_wR6rP.css} +1 -1
package/dist-fluxy/assets/globals-CMrTFJSE.js +18 -0
package/dist-fluxy/assets/{onboard-LzOfScdU.js → onboard-BSlNrxVH.js} +1 -1
package/dist-fluxy/fluxy.html +3 -3
package/dist-fluxy/onboard.html +3 -3
package/package.json +1 -1
package/supervisor/chat/OnboardWizard.tsx +74 -10
package/supervisor/chat/src/components/LoginScreen.tsx +44 -1
package/dist-fluxy/assets/globals-C0DMRzvx.js +0 -18

package/dist-fluxy/assets/{onboard-LzOfScdU.js → onboard-BSlNrxVH.js} RENAMED Viewed

	@@ -1 +1 @@
1	- import{e as o,j as e,R as n,O as r}from"./globals-~~C0DMRzvx~~.js";function a(){const t=()=>{window.parent?.postMessage({type:"fluxy:onboard-complete"},"*")};return e.jsx(r,{onComplete:t,isInitialSetup:!0})}o.createRoot(document.getElementById("root")).render(e.jsx(n.StrictMode,{children:e.jsx(a,{})}));
1	+ import{e as o,j as e,R as n,O as r}from"./globals-CMrTFJSE.js";function a(){const t=()=>{window.parent?.postMessage({type:"fluxy:onboard-complete"},"*")};return e.jsx(r,{onComplete:t,isInitialSetup:!0})}o.createRoot(document.getElementById("root")).render(e.jsx(n.StrictMode,{children:e.jsx(a,{})}));

package/dist-fluxy/fluxy.html CHANGED Viewed

@@ -4,9 +4,9 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, interactive-widget=resizes-content" />
     <title>Fluxy Chat</title>
-    <script type="module" crossorigin src="/fluxy/assets/fluxy-C2_hZ0e0.js"></script>
-    <link rel="modulepreload" crossorigin href="/fluxy/assets/globals-C0DMRzvx.js">
-    <link rel="stylesheet" crossorigin href="/fluxy/assets/globals-DZhBbtf8.css">
+    <script type="module" crossorigin src="/fluxy/assets/fluxy-Bcd5tJrt.js"></script>
+    <link rel="modulepreload" crossorigin href="/fluxy/assets/globals-CMrTFJSE.js">
+    <link rel="stylesheet" crossorigin href="/fluxy/assets/globals-Bs_wR6rP.css">
   </head>
   <body class="bg-background text-foreground">
     <div id="root"></div>

package/dist-fluxy/onboard.html CHANGED Viewed

@@ -4,9 +4,9 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, interactive-widget=resizes-content" />
     <title>Fluxy Setup</title>
-    <script type="module" crossorigin src="/fluxy/assets/onboard-LzOfScdU.js"></script>
-    <link rel="modulepreload" crossorigin href="/fluxy/assets/globals-C0DMRzvx.js">
-    <link rel="stylesheet" crossorigin href="/fluxy/assets/globals-DZhBbtf8.css">
+    <script type="module" crossorigin src="/fluxy/assets/onboard-BSlNrxVH.js"></script>
+    <link rel="modulepreload" crossorigin href="/fluxy/assets/globals-CMrTFJSE.js">
+    <link rel="stylesheet" crossorigin href="/fluxy/assets/globals-Bs_wR6rP.css">
   </head>
   <body class="bg-background text-foreground">
     <div id="root"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "fluxy-bot",
-  "version": "0.7.4",
+  "version": "0.7.6",
   "releaseNotes": [
     "Fixed some bugs to iOs ",
     "2. ",

package/supervisor/chat/OnboardWizard.tsx CHANGED Viewed

@@ -174,11 +174,50 @@ export default function OnboardWizard({ onComplete, isInitialSetup = false, onSa
   // Sub-phase within step 3: 'password' | 'totp-setup' | 'recovery'
   const [step3Phase, setStep3Phase] = useState<'password' | 'totp-setup' | 'recovery'>('password');
+  // Clipboard feedback for TOTP secret copy
+  const [totpSecretCopied, setTotpSecretCopied] = useState(false);
   // Pre-fill guard
   const prefillDone = useRef(false);
   const isConnected = authState[provider] === 'connected';
+  // Persist/restore TOTP setup state across page reloads (mobile: OS suspends PWA on app-switch)
+  const TOTP_STORAGE_KEY = 'fluxy_totp_setup';
+  function saveTotpState() {
+    try {
+      sessionStorage.setItem(TOTP_STORAGE_KEY, JSON.stringify({
+        secret: totpSecret, qrUri: totpQrUri, otpauthUri: totpOtpauthUri, phase: step3Phase,
+        // Also persist password fields so user doesn't re-type after returning
+        portalPass, portalPassConfirm,
+      }));
+    } catch {}
+  }
+  function restoreTotpState() {
+    try {
+      const raw = sessionStorage.getItem(TOTP_STORAGE_KEY);
+      if (!raw) return false;
+      const saved = JSON.parse(raw);
+      if (saved.secret && saved.phase === 'totp-setup') {
+        setTotpSecret(saved.secret);
+        setTotpQrUri(saved.qrUri || '');
+        setTotpOtpauthUri(saved.otpauthUri || '');
+        setTotpEnabled(true);
+        setStep3Phase('totp-setup');
+        setStep(3);
+        if (saved.portalPass) { setPortalPass(saved.portalPass); setPortalPassConfirm(saved.portalPassConfirm || ''); }
+        return true;
+      }
+    } catch {}
+    return false;
+  }
+  function clearTotpStorage() {
+    try { sessionStorage.removeItem(TOTP_STORAGE_KEY); } catch {}
+  }
   // Pre-fill from existing settings (re-run wizard)
   useEffect(() => {
     fetch('/api/onboard/status')
@@ -204,6 +243,9 @@ export default function OnboardWizard({ onComplete, isInitialSetup = false, onSa
         // If user has existing handle, default to 'relay'; otherwise default to 'tunnel'
         if (!data.handle) setHandleChoice('tunnel');
         prefillDone.current = true;
+        // Restore TOTP setup state if returning from authenticator app
+        if (!data.totpEnabled) restoreTotpState();
       })
       .catch(() => { prefillDone.current = true; });
   }, []);
@@ -1258,6 +1300,7 @@ export default function OnboardWizard({ onComplete, isInitialSetup = false, onSa
                             setTotpCode('');
                             setTotpError('');
                             setStep3Phase('password');
+                            clearTotpStorage();
                           }}
                           className="w-7 h-7 rounded-full bg-white/[0.04] flex items-center justify-center text-white/40 hover:text-white/70 transition-colors shrink-0"
                         >
@@ -1280,20 +1323,39 @@ export default function OnboardWizard({ onComplete, isInitialSetup = false, onSa
                               <p className="text-white/40 text-[13px] leading-relaxed mb-4">
                                 Add Fluxy to your authenticator app, then enter the 6-digit code below to confirm.
                               </p>
+                              {/* Primary: copy secret key (doesn't leave the app) */}
+                              <button
+                                onClick={() => {
+                                  navigator.clipboard.writeText(totpSecret);
+                                  setTotpSecretCopied(true);
+                                  setTimeout(() => setTotpSecretCopied(false), 3000);
+                                }}
+                                className={`w-full py-3 text-[14px] font-medium rounded-xl transition-colors flex items-center justify-center gap-2 ${
+                                  totpSecretCopied
+                                    ? 'bg-emerald-500/10 text-emerald-400 border border-emerald-500/20'
+                                    : 'bg-white/[0.05] text-white/70 hover:bg-white/[0.08] border border-white/[0.08]'
+                                }`}
+                              >
+                                {totpSecretCopied ? (
+                                  <><Check className="h-4 w-4" />Secret key copied</>
+                                ) : (
+                                  <><Copy className="h-4 w-4" />Copy secret key</>
+                                )}
+                              </button>
+                              <p className="text-[11px] text-white/20 text-center mt-2">
+                                Paste it in your authenticator app → Add account → Enter key
+                              </p>
+                              {/* Secondary: deep link (saves state before leaving) */}
                               <a
                                 href={totpOtpauthUri}
-                                className="w-full py-3 bg-[#AF27E3]/10 hover:bg-[#AF27E3]/20 text-[#AF27E3] text-[14px] font-medium rounded-xl transition-colors flex items-center justify-center gap-2"
+                                onClick={() => saveTotpState()}
+                                className="w-full mt-3 py-2.5 text-[13px] text-white/30 hover:text-white/50 flex items-center justify-center gap-1.5 transition-colors"
                               >
-                                <Smartphone className="h-4 w-4" />
-                                Open in Authenticator
+                                <Smartphone className="h-3.5 w-3.5" />
+                                Or open directly in authenticator
                               </a>
-                              <button
-                                onClick={() => { navigator.clipboard.writeText(totpSecret); }}
-                                className="w-full mt-2 text-[11px] text-white/25 hover:text-white/40 flex items-center justify-center gap-1 py-1 transition-colors"
-                              >
-                                <Copy className="h-3 w-3" />
-                                Or copy secret key manually
-                              </button>
                             </div>
                           ) : (
                             <div className="mt-4 flex gap-4 items-start">
@@ -1353,6 +1415,7 @@ export default function OnboardWizard({ onComplete, isInitialSetup = false, onSa
                                       setTotpVerified(true);
                                       setRecoveryCodes(data.recoveryCodes || []);
                                       setStep3Phase('recovery');
+                                      clearTotpStorage();
                                     } else {
                                       setTotpError(data.error || 'Verification failed');
                                     }
@@ -1427,6 +1490,7 @@ export default function OnboardWizard({ onComplete, isInitialSetup = false, onSa
                         onClick={() => {
                           setRecoveryCodes([]);
                           setStep3Phase('password');
+                          clearTotpStorage();
                         }}
                         disabled={!recoveryCodesCopied}
                         className="w-full mt-3 py-3 bg-gradient-brand hover:opacity-90 text-white text-[14px] font-semibold rounded-full transition-colors flex items-center justify-center gap-2 disabled:opacity-40"

package/supervisor/chat/src/components/LoginScreen.tsx CHANGED Viewed

@@ -2,6 +2,8 @@ import { useState, useRef, useEffect, type KeyboardEvent } from 'react';
 import { Lock, LoaderCircle, ArrowRight, ArrowLeft, Shield, Check } from 'lucide-react';
 import { motion, AnimatePresence } from 'framer-motion';
+const LOGIN_STORAGE_KEY = 'fluxy_login_totp';
 interface Props {
   onLogin: (token: string) => void;
   totpEnabled?: boolean;
@@ -20,6 +22,21 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
   const [useRecovery, setUseRecovery] = useState(false);
   const totpInputRef = useRef<HTMLInputElement>(null);
+  // Restore TOTP phase after page reload (mobile: OS suspends PWA on app-switch)
+  useEffect(() => {
+    try {
+      const raw = sessionStorage.getItem(LOGIN_STORAGE_KEY);
+      if (!raw) return;
+      const saved = JSON.parse(raw);
+      if (saved.pendingToken && saved.expiresAt > Date.now()) {
+        setPendingToken(saved.pendingToken);
+        setPhase('totp');
+      } else {
+        sessionStorage.removeItem(LOGIN_STORAGE_KEY);
+      }
+    } catch {}
+  }, []);
   // Auto-focus TOTP input when switching to TOTP phase
   useEffect(() => {
     if (phase === 'totp') {
@@ -27,6 +44,20 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
     }
   }, [phase]);
+  function saveLoginState(token: string) {
+    try {
+      // Pending token has 5min server expiry — save with matching client expiry
+      sessionStorage.setItem(LOGIN_STORAGE_KEY, JSON.stringify({
+        pendingToken: token,
+        expiresAt: Date.now() + 4.5 * 60 * 1000,
+      }));
+    } catch {}
+  }
+  function clearLoginState() {
+    try { sessionStorage.removeItem(LOGIN_STORAGE_KEY); } catch {}
+  }
   const handleSubmit = async () => {
     if (!password.trim() || loading) return;
     setLoading(true);
@@ -41,9 +72,11 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
       const data = await res.json();
       if (res.ok && data.token) {
+        clearLoginState();
         onLogin(data.token);
       } else if (res.ok && data.requiresTOTP) {
         setPendingToken(data.pendingToken);
+        saveLoginState(data.pendingToken);
         setPhase('totp');
         setError('');
       } else {
@@ -69,6 +102,7 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
       const data = await res.json();
       if (res.ok && data.token) {
+        clearLoginState();
         onLogin(data.token);
       } else {
         setError(data.error || 'Invalid code');
@@ -87,6 +121,14 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
     }
   };
+  const handleBackToPassword = () => {
+    setPhase('password');
+    setError('');
+    setTotpCode('');
+    setUseRecovery(false);
+    clearLoginState();
+  };
   const inputCls = 'w-full bg-white/[0.05] border border-white/[0.08] text-white rounded-xl px-4 py-3 text-base outline-none input-glow placeholder:text-white/20 transition-all';
   return (
@@ -183,6 +225,7 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
                 }}
                 onKeyDown={handleKeyDown}
                 placeholder={useRecovery ? 'Recovery code' : '000000'}
+                autoFocus
                 className={inputCls + (useRecovery ? '' : ' tracking-[0.3em] text-center font-mono')}
               />
@@ -215,7 +258,7 @@ export default function LoginScreen({ onLogin, totpEnabled }: Props) {
               <div className="flex items-center gap-4 mt-4">
                 <button
-                  onClick={() => { setPhase('password'); setError(''); setTotpCode(''); setUseRecovery(false); }}
+                  onClick={handleBackToPassword}
                   className="text-[12px] text-white/30 hover:text-white/50 flex items-center gap-1 transition-colors"
                 >
                   <ArrowLeft className="h-3 w-3" />