levix-bot 3.0.0-beta → 3.1.1-beta

package/app.cjs

@@ -292,6 +292,12 @@ app.get("/", noStore, (req, res) => {
   return res.render("login", { error: null });
 });
 
+app.get("/login", noStore, (req, res) => {
+  if (!secrets.hasDashboardPassword()) return res.redirect("/setup");
+  if (req.session.loggedIn) return res.redirect("/");
+  return res.render("login", { error: null });
+});
+
 app.post("/login", (req, res, next) => {
   if (!secrets.hasDashboardPassword()) return res.redirect("/setup");
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "levix-bot",
-  "version": "3.0.0-beta",
+  "version": "3.1.1-beta",
   "description": "A self-hosted personal WhatsApp bot with an AI agent, group moderation and a web control panel.",
   "main": "src/index.js",
   "scripts": {

package/src/bootstrap/panel.js

@@ -7,10 +7,21 @@
 import { createRequire } from "module";
 
 const require = createRequire(import.meta.url);
+const fs = require("node:fs");
 const logger = require("../utils/logger.cjs");
 const settings = require("../config/settings.cjs");
+const paths = require("../config/paths.cjs");
 const { attach } = require("./events.cjs");
 
+/** Unix socket path for the Android host. Bionic Node cannot bind TCP. */
+export function androidPanelSocketPath() {
+  return paths.dataPath("panel.sock");
+}
+
+export function isAndroidHost() {
+  return process.env.LEVIX_ANDROID === "1";
+}
+
 /**
  * Start the panel and bind its port.
  *
@@ -55,6 +66,7 @@ export async function bootstrapPanel({ core } = {}) {
 
   const port = settings.get("port");
   const host = resolveBindAddress();
+  const androidSock = isAndroidHost() ? androidPanelSocketPath() : null;
 
   await new Promise((resolve, reject) => {
     // "EADDRINUSE" plus a stack trace is not an answer anyone can act on, and
@@ -72,10 +84,19 @@ export async function bootstrapPanel({ core } = {}) {
       }
       reject(error);
     });
-    server.listen(port, host, resolve);
+    if (androidSock) {
+      try {
+        fs.unlinkSync(androidSock);
+      } catch {
+        // first run has no leftover socket
+      }
+      server.listen(androidSock, resolve);
+    } else {
+      server.listen(port, host, resolve);
+    }
   });
 
-  return { port, host, server };
+  return { port, host, server, socketPath: androidSock };
 }
 
 /**
@@ -89,15 +110,18 @@ export async function bootstrapPanel({ core } = {}) {
 export function resolveBindAddress() {
   const configured = settings.get("bind_address");
   if (configured) return configured;
-  // The phone is the host: keep the panel on loopback until a later phase
-  // opens it in a WebView. LAN bind stays an explicit setting.
-  if (process.env.LEVIX_ANDROID === "1") return "127.0.0.1";
+  // Desktop / Docker: every interface. Android never reaches this — it
+  // binds a unix socket instead (see androidPanelSocketPath). The WebView
+  // still opens http://127.0.0.1:port and the host serves that over the socket.
   return "0.0.0.0";
 }
 
 /** The address a person should type, given how this install is reachable. */
 export function panelUrl({ port, firstRun = false } = {}) {
   const domain = settings.get("public_domain");
-  const base = domain ? `https://${domain}` : `http://localhost:${port}`;
+  const host =
+    domain ||
+    (isAndroidHost() ? "127.0.0.1" : "localhost");
+  const base = domain ? `https://${host}` : `http://${host}:${port}`;
   return firstRun ? `${base}/setup` : base;
 }

package/src/index.js

@@ -194,9 +194,16 @@ async function startWithPanel({ open }) {
   try {
     panel = await bootstrapPanel({ core });
   } catch (error) {
-    if (error.code === "EADDRINUSE") {
+    if (error.code === "EADDRINUSE" || error.code === "ECONNREFUSED") {
       console.error(`\n  ${error.message}\n`);
       logger.error(error.message);
+      if (process.env.LEVIX_ANDROID === "1") {
+        // WhatsApp still works without the panel. process.exit here also
+        // trips pino's sonic-boom ("not ready yet") as a second crash.
+        console.log("Panel failed " + (error.code || error.message));
+        console.log("Levix ready");
+        return { ...core, panel: null, url: null };
+      }
       process.exit(1);
     }
     throw error;

package/src/utils/requestOrigin.cjs

@@ -78,7 +78,10 @@ function hasForwardingHeader(headers = {}) {
  * the right key for rate limiting a password or setup-code guess.
  */
 function clientAddress(req) {
-  return req?.socket?.remoteAddress || req?.connection?.remoteAddress || "";
+  const addr = req?.socket?.remoteAddress || req?.connection?.remoteAddress;
+  if (addr) return addr;
+  if (process.env.LEVIX_ANDROID === "1") return "127.0.0.1";
+  return "";
 }
 
 /**