upfynai-code 2.1.0 → 2.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "upfynai-code",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Upfyn-Code — Visual AI coding interface with Upfyn-Canvas whiteboard for AI coding assistants by Thinqmesh Technologies",
   "type": "module",
   "main": "server/index.js",

package/server/cli.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 /**
  * Upfyn-Code CLI
  * by Thinqmesh Technologies
@@ -184,7 +184,7 @@ Options:
 Examples:
   $ uc                              # Start with defaults
   $ uc --port 8080                  # Start on port 8080
-  $ uc connect --key rt_xxx         # Bridge to hosted server
+  $ uc connect --key upfyn_xxx      # Bridge to hosted server
   $ uc start --port 4000            # Explicit start command
   $ uc status                       # Show configuration
 

package/server/database/db.js

@@ -220,7 +220,7 @@ const runMigrations = async () => {
         // Relay token
         const tokens = await db.execute({ sql: 'SELECT id FROM relay_tokens WHERE user_id = ? LIMIT 1', args: [user.id] });
         if (tokens.rows.length === 0) {
-          const token = 'rt_' + crypto.randomBytes(32).toString('hex');
+          const token = 'upfyn_' + crypto.randomBytes(32).toString('hex');
           await db.execute({ sql: 'INSERT INTO relay_tokens (user_id, token, name) VALUES (?, ?, ?)', args: [user.id, token, 'default'] });
           backfilled++;
         }
@@ -567,7 +567,7 @@ const paymentDb = {
 // ─── Relay Tokens DB ────────────────────────────────────────────────────────────
 
 const relayTokensDb = {
-  generateToken: () => 'rt_' + crypto.randomBytes(32).toString('hex'),
+  generateToken: () => 'upfyn_' + crypto.randomBytes(32).toString('hex'),
 
   createToken: async (userId, name = 'default') => {
     const token = relayTokensDb.generateToken();

package/server/index.js

@@ -1228,7 +1228,7 @@ function handleChatConnection(ws) {
 // Handle relay WebSocket connections (local machine ↔ server bridge)
 async function handleRelayConnection(ws, token) {
     if (!token) {
-        ws.send(JSON.stringify({ type: 'error', error: 'Relay token required. Use ?token=rt_xxx' }));
+        ws.send(JSON.stringify({ type: 'error', error: 'Relay token required. Use ?token=upfyn_xxx' }));
         ws.close();
         return;
     }

package/server/mcp-server.js

@@ -474,12 +474,12 @@ export async function mountMcpServer(app, mcpServer, mcpServerFactory) {
       } catch (e) { /* fall through */ }
     }
 
-    // 2. Try Bearer token — supports JWT, relay token (rt_), or API key (up-cli-)
+    // 2. Try Bearer token — supports JWT, relay token (upfyn_/rt_), or API key (up-cli-)
     const authHeader = req.headers['authorization'];
     const token = authHeader && authHeader.split(' ')[1];
     if (token) {
-      // 2a. Relay token (rt_xxx) — same token used for CLI connect
-      if (token.startsWith('rt_')) {
+      // 2a. Relay token (upfyn_xxx or legacy rt_xxx) — same token used for CLI connect
+      if (token.startsWith('upfyn_') || token.startsWith('rt_')) {
         try {
           const tokenData = await relayTokensDb.validateToken(token);
           if (tokenData) {

package/server/middleware/auth.js

@@ -1,5 +1,5 @@
 import jwt from 'jsonwebtoken';
-import { userDb } from '../database/db.js';
+import { userDb, relayTokensDb } from '../database/db.js';
 import { IS_PLATFORM } from '../constants/config.js';
 
 const JWT_SECRET = process.env.JWT_SECRET?.trim();
@@ -127,6 +127,17 @@ const authenticateWebSocket = async (request) => {
 
   if (!token) return null;
 
+  // Relay token (upfyn_ prefix) — validate against DB, not JWT
+  if (token.startsWith('upfyn_') || token.startsWith('rt_')) {
+    try {
+      const tokenData = await relayTokensDb.validateToken(token);
+      if (tokenData) {
+        return { userId: Number(tokenData.user_id), username: tokenData.username };
+      }
+    } catch {}
+    return null;
+  }
+
   try {
     const decoded = jwt.verify(token, JWT_SECRET);
     // Validate against Turso — DB is source of truth

package/server/relay-client.js

@@ -6,7 +6,7 @@
  * Bridges Claude CLI, terminal, filesystem, and git to the web UI.
  *
  * Usage:
- *   upfynai-code connect --server https://upfynai.thinqmesh.com --key rt_xxx
+ *   upfynai-code connect --server https://upfynai.thinqmesh.com --key upfyn_xxx
  *   upfynai-code connect  (uses saved config from ~/.upfynai/config.json)
  */
 
@@ -217,7 +217,7 @@ export async function connectToServer(options = {}) {
   if (!relayKey) {
     console.error(c.red('No relay key provided.'));
     console.log('Generate a relay token from Settings > Relay Tokens in the web UI.');
-    console.log(`Then run: ${c.cyan('upfynai-code connect --key rt_your_token_here')}`);
+    console.log(`Then run: ${c.cyan('upfynai-code connect --key upfyn_your_token_here')}`);
     process.exit(1);
   }