nebula-notebook 0.2.29 → 0.2.31

package/node-server/dist/auth/auth-service.js

@@ -180,7 +180,8 @@ class AuthService {
             return;
         }
         const issuer = 'NebulaNotebook';
-        const accountName = 'local';
+        // host:port so several Nebula installs are distinguishable in the app.
+        const accountName = (0, setup_qr_1.accountLabel)(os.hostname(), process.env.PORT || process.env.NODE_SERVER_PORT || 3000);
         const otpAuthUrl = otplib_1.authenticator.keyuri(accountName, issuer, this.config.totpSecret);
         console.log((0, setup_qr_1.buildSetupInstructions)(this.config.totpSecret, otpAuthUrl, (0, setup_qr_1.renderQr)(otpAuthUrl, 'small')));
     }

package/node-server/dist/auth/setup-qr.d.ts

@@ -8,5 +8,13 @@
  * scan depends on any glyph, only on color support.
  */
 export type QrMode = 'small' | 'big';
+/**
+ * The otpauth account label. Every install used to render the same
+ * "NebulaNotebook: local" entry, so a user running Nebula in two places got
+ * two indistinguishable authenticator entries — and no way to tell which
+ * 6-digit code belongs to which server. Host:port makes them self-labeling.
+ * Colons are separators in the otpauth label grammar, so they are replaced.
+ */
+export declare function accountLabel(host: string, port: number | string): string;
 export declare function renderQr(otpAuthUrl: string, mode: QrMode): string;
 export declare function buildSetupInstructions(secret: string, otpAuthUrl: string, qrString: string): string;

package/node-server/dist/auth/setup-qr.js

@@ -42,9 +42,21 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.accountLabel = accountLabel;
 exports.renderQr = renderQr;
 exports.buildSetupInstructions = buildSetupInstructions;
 const qrcode = __importStar(require("qrcode-terminal"));
+/**
+ * The otpauth account label. Every install used to render the same
+ * "NebulaNotebook: local" entry, so a user running Nebula in two places got
+ * two indistinguishable authenticator entries — and no way to tell which
+ * 6-digit code belongs to which server. Host:port makes them self-labeling.
+ * Colons are separators in the otpauth label grammar, so they are replaced.
+ */
+function accountLabel(host, port) {
+    const clean = (host || '').trim().replace(/:/g, '-') || 'local';
+    return `${clean}:${port}`;
+}
 function renderQr(otpAuthUrl, mode) {
     let out = '';
     // qrcode-terminal invokes the callback synchronously.

package/node-server/dist/scripts/show-auth-qr.js

@@ -10,7 +10,6 @@ const otplib_1 = require("otplib");
 const setup_qr_1 = require("../auth/setup-qr");
 const AUTH_CONFIG_FILE = path_1.default.join(os_1.default.homedir(), '.nebula', 'auth.json');
 const ISSUER = 'NebulaNotebook';
-const ACCOUNT_NAME = 'local';
 function fail(message) {
     console.error(message);
     process.exit(1);
@@ -44,7 +43,7 @@ function main() {
     if (!secret) {
         fail(`[Auth] Missing "totpSecret" in ${AUTH_CONFIG_FILE}`);
     }
-    const otpAuthUrl = otplib_1.authenticator.keyuri(ACCOUNT_NAME, ISSUER, secret);
+    const otpAuthUrl = otplib_1.authenticator.keyuri((0, setup_qr_1.accountLabel)(os_1.default.hostname(), process.env.PORT || 3000), ISSUER, secret);
     if (args.includes('--url')) {
         console.log(otpAuthUrl);
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nebula-notebook",
-  "version": "0.2.29",
+  "version": "0.2.31",
   "description": "AI-native notebook computing environment — real Jupyter kernels, real filesystem, built to be driven by agents (Claude Code / Codex) via MCP",
   "type": "module",
   "license": "MIT",