prividium 0.14.1 → 0.15.1

package/README.md

@@ -551,6 +551,8 @@ prividium proxy \
 
 What happens:
 
+- Validates that `--user-panel-url` points to a Prividium™ User Panel before starting. Exits with an error if an Admin
+  Panel URL is detected; warns and continues if the URL cannot be reached or confirmed.
 - Prints a local URL to open in your browser for sign-in.
 - After successful sign-in, the proxy is available at `http://127.0.0.1:24101/rpc`.
 - All requests are forwarded to your `--rpc-url` with `Authorization: Bearer <token>`.
@@ -559,7 +561,8 @@ What happens:
 Flags:
 
 - `--rpc-url, -r` (string): Target Prividium™ RPC URL.
-- `--user-panel-url, -u` (string): URL used to log in to Prividium™.
+- `--user-panel-url, -u` (string): URL of the Prividium™ User Panel used for sign-in. The command validates this URL on
+  startup and exits with an error if it detects an Admin Panel URL.
 - `--port, -p` (number, default `24101`): Local proxy port. This has to match with the port configured in the admin
   panel, which by default uses this same port.
 - `--host, -h` (string, default `127.0.0.1`): host binded to server. By default only connections comming from local
@@ -574,6 +577,18 @@ Environment variables (optional):
 
 Precedence: CLI flags > environment variables > saved config file.
 
+### Local Development
+
+When running the full Prividium stack locally (`pnpm dev`), use:
+
+```bash
+npx prividium proxy \
+  --rpc-url http://localhost:8000 \
+  --user-panel-url http://localhost:3001
+```
+
+Point Foundry, Hardhat, or your scripts at `http://127.0.0.1:24101/rpc` after sign-in.
+
 ### Config Commands
 
 ```bash

package/dist/cli/commands/proxy.js

@@ -4,6 +4,41 @@ import { CreationWorkflow } from '../server/connection-workflow.js';
 import { buildServer } from '../server/server.js';
 import { gatherUrlConfig } from './utils/url-config.js';
 const DEFAULT_PORT = 24101;
+async function verifyUserPanelUrl(url) {
+    try {
+        const response = await fetch(url, { signal: AbortSignal.timeout(5000) });
+        const html = await response.text();
+        const metaMatch = html.match(/<meta\s+name="prividium-component"\s+content="([^"]*)"\s*\/?>/i);
+        if (metaMatch?.[1]) {
+            const component = metaMatch[1].toLowerCase();
+            if (component === 'admin-panel') {
+                log.error(`The --user-panel-url appears to point to an Admin Panel, not a User Panel.\n` +
+                    `  Provided URL: ${url}\n\n` +
+                    `Please provide the User Panel URL instead (typically a different port).`);
+                process.exit(1);
+            }
+            if (component !== 'user-panel') {
+                log.warn(`Could not confirm that --user-panel-url points to a Prividium User Panel.\n` +
+                    `  Provided URL: ${url}\n` +
+                    `  Detected component: "${metaMatch[1]}"\n` +
+                    `Proceeding anyway. If authentication hangs, verify this URL is correct.`);
+            }
+            return;
+        }
+        log.warn(`Could not confirm that --user-panel-url points to a Prividium User Panel.\n` +
+            `  Provided URL: ${url}\n` +
+            `Proceeding anyway. If authentication hangs, verify this URL is correct.`);
+    }
+    catch (error) {
+        if (error instanceof TypeError ||
+            (error instanceof DOMException && (error.name === 'TimeoutError' || error.name === 'AbortError'))) {
+            log.warn(`Could not reach --user-panel-url at ${url}.\n` +
+                `Proceeding anyway. If authentication hangs, verify this URL is correct.`);
+            return;
+        }
+        throw error;
+    }
+}
 function checkHostAndPortWarnings(host, port, allowExternalAccess) {
     if (port !== DEFAULT_PORT) {
         log.warn(`Non standard port detected: ${port}. Redirect from prividium auth might not work.`);
@@ -31,6 +66,8 @@ async function startServer(opts) {
         rpcUrlLabel: 'prividium rpc',
         logProvidedUrls: true
     });
+    await verifyUserPanelUrl(userPanelUrl);
+    checkHostAndPortWarnings(opts.host, opts.port, opts.allowExternalAccess);
     const app = buildServer({
         prividiumRpcUrl,
         userPanelUrl,
@@ -49,7 +86,6 @@ async function startServer(opts) {
             workflow.onError(err);
         }
     });
-    checkHostAndPortWarnings(opts.host, opts.port, opts.allowExternalAccess);
     await app.listen({
         port: opts.port,
         host: opts.host

package/dist/sdk/popup-auth.js

@@ -37,6 +37,15 @@ export class PopupAuth {
                     console.warn(`Received message from unexpected origin: ${event.origin}`);
                     return;
                 }
+                // Stop polling for popup.closed now that a definitive response
+                // has arrived. Otherwise, the callback page self-closes (~100ms
+                // after posting) while setToken() is still awaiting token
+                // expiration, and the poll can reject with "Authentication was
+                // cancelled" even though the token gets stored successfully.
+                if (checkInterval) {
+                    clearInterval(checkInterval);
+                    checkInterval = null;
+                }
                 // Handle error from callback
                 if (event.data.error) {
                     popup.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prividium",
-  "version": "0.14.1",
+  "version": "0.15.1",
   "type": "module",
   "bin": {
     "prividium": "bin/cli.js"