chore: sign v1.7.103-alpha OTA manifest

Also folds the Cargo.lock version bump that create-release.sh missed. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
chore: release v1.7.103-alpha
2026-07-18 07:48:56 -04:00 · 2026-07-18 07:30:25 -04:00 · 2026-07-18 07:01:45 -04:00 · 2026-07-18 07:01:45 -04:00 · 2026-07-18 11:54:12 +01:00 · 2026-07-18 11:54:12 +01:00
11 changed files with 84 additions and 52 deletions
@@ -741,7 +741,16 @@ private fun buildAutoLoginScript(password: String): String {
            var setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value').set;
            setter.call(el, pw);
            el.dispatchEvent(new Event('input', { bubbles: true }));
-            el.dispatchEvent(new KeyboardEvent('keydown', { key: 'Enter', bubbles: true }));
+            // Let Vue re-render before submitting: a synchronous Enter arrives
+            // while the login button is still disabled, and the web UI's
+            // controller-nav "Enter in input clicks the next enabled button"
+            // pattern then hits Replay Intro instead — restarting the intro
+            // cinematic on every connect (two frames = value flush + render).
+            requestAnimationFrame(function () {
+                requestAnimationFrame(function () {
+                    el.dispatchEvent(new KeyboardEvent('keydown', { key: 'Enter', bubbles: true }));
+                });
+            });
        }, 1500);
    })();
    """.trimIndent()
@@ -1,5 +1,11 @@
 # Changelog

+## v1.7.103-alpha (2026-07-18)
+
+- Connecting from the phone app no longer replays the intro cinematic on a loop: signing in after scanning the pairing QR could accidentally trigger "Replay Intro" instead of logging you in. The companion app now lands you straight on your dashboard, and the Android app waits for the login screen to be ready before it types your password.
+- Pressing Enter in any password box now does what you expect — it signs you in or moves to the next field, and can no longer "click" a nearby button by mistake when using a controller or the companion app.
+- The public demo no longer interrupts you with an "Update Available" popup that reset the site back to the intro — demo visitors simply get the newest version on their next visit.
+
 ## v1.7.102-alpha (2026-07-17)

 - The password you choose during setup is now truly your node's password: it also becomes the system login for console and SSH access, instead of leaving the factory default in place. If you ever renamed your node and the TV screen went black on the next boot, that's fixed too — renaming no longer breaks the kiosk display.
@@ -95,7 +95,7 @@ dependencies = [

 [[package]]
 name = "archipelago"
-version = "1.7.102-alpha"
+version = "1.7.103-alpha"
 dependencies = [
 "anyhow",
 "archipelago-container",
@@ -1,6 +1,6 @@
 [package]
 name = "archipelago"
-version = "1.7.102-alpha"
+version = "1.7.103-alpha"
 edition = "2021"
 description = "Archipelago Bitcoin Node OS - Native backend"
 authors = ["Archipelago Team"]
@@ -1,12 +1,12 @@
 {
  "name": "neode-ui",
-  "version": "1.7.102-alpha",
+  "version": "1.7.103-alpha",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "neode-ui",
-      "version": "1.7.102-alpha",
+      "version": "1.7.103-alpha",
      "dependencies": {
        "@types/dompurify": "^3.0.5",
        "@vue-leaflet/vue-leaflet": "^0.10.1",
@@ -1,7 +1,7 @@
 {
  "name": "neode-ui",
  "private": true,
-  "version": "1.7.102-alpha",
+  "version": "1.7.103-alpha",
  "type": "module",
  "scripts": {
    "start": "./start-dev.sh",
@@ -26,6 +26,7 @@
 import { ref, onMounted } from 'vue'
 import BaseModal from '@/components/BaseModal.vue'
 import { useLoginTransitionStore } from '@/stores/loginTransition'
+import { IS_DEMO } from '@/composables/useDemoIntro'

 const showUpdatePrompt = ref(false)
 let updateCallback: (() => Promise<void>) | null = null
@@ -53,6 +54,12 @@ function reloadAfterCinematic() {
 }

 onMounted(() => {
+  // The public demo has no version to update to — the prompt is noise, and
+  // both accept-paths end in a reload that replays the demo intro ("the site
+  // just reset itself"). skipWaiting/clientsClaim are off, so ignoring the
+  // waiting worker is safe: this page keeps its complete old cache, and the
+  // new build activates on the next visit.
+  if (IS_DEMO) return
  // Listen for service worker updates
  if ('serviceWorker' in navigator) {
    // On the very first visit the page loads with no controlling SW; the
@@ -64,6 +64,7 @@
              type="password"
              autocomplete="new-password"
              data-form-type="other"
+              data-controller-no-submit
              class="w-full px-4 py-3 bg-transparent border border-white/20 rounded-lg text-white placeholder-white/40 focus:outline-none focus:border-white/40 focus:ring-1 focus:ring-white/20 transition-colors"
              :placeholder="t('login.enterPasswordSetup')"
              @keydown.enter="confirmPasswordInputRef?.focus()"
@@ -83,6 +84,7 @@
              type="password"
              autocomplete="new-password"
              data-form-type="other"
+              data-controller-no-submit
              class="w-full px-4 py-3 bg-transparent border border-white/20 rounded-lg text-white placeholder-white/40 focus:outline-none focus:border-white/40 focus:ring-1 focus:ring-white/20 transition-colors"
              :placeholder="t('login.confirmPasswordPlaceholder')"
              @keydown.enter="handleSetupWithSound"
@@ -127,6 +129,7 @@
              pattern="[0-9]*"
              maxlength="8"
              autocomplete="one-time-code"
+              data-controller-no-submit
              :aria-label="t('login.totpLabel')"
              class="w-full px-4 py-3 bg-transparent border border-white/20 rounded-lg text-white text-center text-2xl tracking-[0.5em] placeholder-white/40 focus:outline-none focus:border-orange-400/60 focus:ring-1 focus:ring-orange-400/30 transition-colors"
              :placeholder="useBackupCode ? 'XXXX-XXXX' : '000000'"
@@ -165,6 +168,12 @@
            🎮 Demo mode — Password: <span class="font-mono font-semibold">{{ DEMO_PASSWORD }}</span>
          </div>

+          <!-- All auth inputs opt out of controller-nav's Enter→click-next-button
+               pattern (data-controller-no-submit): they submit via their own Enter
+               handlers, and while the submit button is still disabled the "next
+               focusable" is Replay Intro — the companion's auto-login injects
+               Enter before Vue re-enables the button, which replayed the intro
+               in a loop on every app connect. -->
          <div class="mb-6">
            <label for="login-password" class="block text-sm font-medium text-white/80 mb-2">
              {{ t('login.password') }}
@@ -175,6 +184,7 @@
              type="password"
              autocomplete="current-password"
              data-form-type="other"
+              data-controller-no-submit
              class="w-full px-4 py-3 bg-transparent border border-white/20 rounded-lg text-white placeholder-white/40 focus:outline-none focus:border-white/40 focus:ring-1 focus:ring-white/20 transition-colors"
              :placeholder="t('login.enterPasswordPlaceholder')"
              @keydown.enter="handleLoginWithSound"
@@ -362,6 +362,18 @@ init()
              </button>
            </div>
            <div class="overflow-y-auto flex-1 min-h-0 space-y-6 pr-1">
+              <!-- v1.7.103-alpha -->
+              <div>
+                <div class="flex items-center gap-2 mb-3">
+                  <span class="text-xs font-mono px-2 py-0.5 rounded bg-orange-500/20 text-orange-300">v1.7.103-alpha</span>
+                  <span class="text-xs text-white/40">July 18, 2026</span>
+                </div>
+                <div class="space-y-3 text-sm text-white/80 pl-3 border-l border-white/10">
+                  <p>Connecting from the phone app no longer replays the intro cinematic on a loop: signing in after scanning the pairing QR could accidentally trigger "Replay Intro" instead of logging you in. The companion app now lands you straight on your dashboard, and the Android app waits for the login screen to be ready before it types your password.</p>
+                  <p>Pressing Enter in any password box now does what you expect — it signs you in or moves to the next field, and can no longer "click" a nearby button by mistake when using a controller or the companion app.</p>
+                  <p>The public demo no longer interrupts you with an "Update Available" popup that reset the site back to the intro — demo visitors simply get the newest version on their next visit.</p>
+                </div>
+              </div>
              <!-- v1.7.102-alpha -->
              <div>
                <div class="flex items-center gap-2 mb-3">
@@ -1,35 +1,29 @@
 {
  "changelog": [
-    "The password you choose during setup is now truly your node's password: it also becomes the system login for console and SSH access, instead of leaving the factory default in place. If you ever renamed your node and the TV screen went black on the next boot, that's fixed too — renaming no longer breaks the kiosk display.",
-    "Setting up Lightning is now a guided journey: a fund-your-wallet step that shows a live countdown while Bitcoin syncs, suggested channels you can open straight into the Zeus mobile wallet with one tap, and a \"finish setup\" prompt that walks you to the end — goals now complete when you've actually done the steps, not just when apps happen to be running.",
-    "Pair your phone by pointing it at the screen: the companion app now connects by scanning a QR code — scan, and it fills in your node's address and logs you in. The App Store has a banner to grab the Android app, and the pairing flow can now also set up secure remote access so your phone reaches home from anywhere.",
-    "First installs are far more dependable: app downloads that stall now retry instead of hanging forever (the old \"first install fails, the second works\" pattern), big multi-part apps show their real download progress instead of sitting at \"Preparing\", Lightning no longer fails its first install over temporary hiccups, and a brand-new node now comes up with its core apps — file cloud and ecash wallet — even with no internet connection.",
-    "The installer image is about 160MB smaller and gets to a working screen faster, because the apps bundled for offline setup are now compressed.",
-    "The first-run experience keeps its magic: the typing intro is back on fresh installs and can no longer be cut short by a mid-play refresh — updates now politely wait for the cinematic to finish — and dark backgrounds stay dark instead of flashing black or white.",
-    "Your backups now include your secrets — including the key that protects your Lightning wallet's recovery seed — and there's a Download button to take a copy off the node; the seed-backup reminder now actually opens the backup flow when you tap it.",
-    "Networking Profits grew into a full dashboard, network cards keep their action buttons in reach on every screen size, \"Connect to Mesh\" goes to the right page instead of a dead end, and the identity pages got a round of mobile polish.",
-    "Behind the scenes: apps that report their own health are no longer second-guessed by a port probe (fewer false \"restarting\" states), and pressing arrow keys or a gamepad is once again the only thing that shows the controller focus ring."
+    "Connecting from the phone app no longer replays the intro cinematic on a loop: signing in after scanning the pairing QR could accidentally trigger \"Replay Intro\" instead of logging you in. The companion app now lands you straight on your dashboard, and the Android app waits for the login screen to be ready before it types your password.",
+    "Pressing Enter in any password box now does what you expect — it signs you in or moves to the next field, and can no longer \"click\" a nearby button by mistake when using a controller or the companion app.",
+    "The public demo no longer interrupts you with an \"Update Available\" popup that reset the site back to the intro — demo visitors simply get the newest version on their next visit."
  ],
  "components": [
    {
-      "current_version": "1.7.102-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.102-alpha/archipelago",
+      "current_version": "1.7.103-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.103-alpha/archipelago",
      "name": "archipelago",
-      "new_version": "1.7.102-alpha",
-      "sha256": "13218bfac5f3e1b641edebac0fcccb483fb4500d764369da4947a467762f2e5a",
-      "size_bytes": 49951520
+      "new_version": "1.7.103-alpha",
+      "sha256": "b1a30287c1a694186e092d1746ed7cd647c4d2615edc59132cdc323ea5958ac4",
+      "size_bytes": 49949048
    },
    {
-      "current_version": "1.7.102-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.102-alpha/archipelago-frontend-1.7.102-alpha.tar.gz",
-      "name": "archipelago-frontend-1.7.102-alpha.tar.gz",
-      "new_version": "1.7.102-alpha",
-      "sha256": "663cf9a35d98fa6dad2d7fb2906e4a939a906382f2e9729156c3630e282cdc94",
-      "size_bytes": 174594796
+      "current_version": "1.7.103-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.103-alpha/archipelago-frontend-1.7.103-alpha.tar.gz",
+      "name": "archipelago-frontend-1.7.103-alpha.tar.gz",
+      "new_version": "1.7.103-alpha",
+      "sha256": "0544897a1d365fda8f7113eb80d76c5edcf50d539588af2886764546f02f52bf",
+      "size_bytes": 174592877
    }
  ],
-  "release_date": "2026-07-17",
-  "signature": "999e50b9aff22f544677986ca8c686614d8c3d4cbe501c2d5de86d2a1ea56fc731bb9434d722c41c7a124932f98e629706b41a64f57551e69529be59fe671d04",
+  "release_date": "2026-07-18",
+  "signature": "39d3f161437a03d44a71cf87c0622d6c00cec2ec587e9e1533128f279c9b0e09c34c51465f2ee79983a3f76f080e909b836a0a74e9d16009cdcf528a7dc0830c",
  "signed_by": "did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur",
-  "version": "1.7.102-alpha"
+  "version": "1.7.103-alpha"
 }
@@ -1,35 +1,29 @@
 {
  "changelog": [
-    "The password you choose during setup is now truly your node's password: it also becomes the system login for console and SSH access, instead of leaving the factory default in place. If you ever renamed your node and the TV screen went black on the next boot, that's fixed too — renaming no longer breaks the kiosk display.",
-    "Setting up Lightning is now a guided journey: a fund-your-wallet step that shows a live countdown while Bitcoin syncs, suggested channels you can open straight into the Zeus mobile wallet with one tap, and a \"finish setup\" prompt that walks you to the end — goals now complete when you've actually done the steps, not just when apps happen to be running.",
-    "Pair your phone by pointing it at the screen: the companion app now connects by scanning a QR code — scan, and it fills in your node's address and logs you in. The App Store has a banner to grab the Android app, and the pairing flow can now also set up secure remote access so your phone reaches home from anywhere.",
-    "First installs are far more dependable: app downloads that stall now retry instead of hanging forever (the old \"first install fails, the second works\" pattern), big multi-part apps show their real download progress instead of sitting at \"Preparing\", Lightning no longer fails its first install over temporary hiccups, and a brand-new node now comes up with its core apps — file cloud and ecash wallet — even with no internet connection.",
-    "The installer image is about 160MB smaller and gets to a working screen faster, because the apps bundled for offline setup are now compressed.",
-    "The first-run experience keeps its magic: the typing intro is back on fresh installs and can no longer be cut short by a mid-play refresh — updates now politely wait for the cinematic to finish — and dark backgrounds stay dark instead of flashing black or white.",
-    "Your backups now include your secrets — including the key that protects your Lightning wallet's recovery seed — and there's a Download button to take a copy off the node; the seed-backup reminder now actually opens the backup flow when you tap it.",
-    "Networking Profits grew into a full dashboard, network cards keep their action buttons in reach on every screen size, \"Connect to Mesh\" goes to the right page instead of a dead end, and the identity pages got a round of mobile polish.",
-    "Behind the scenes: apps that report their own health are no longer second-guessed by a port probe (fewer false \"restarting\" states), and pressing arrow keys or a gamepad is once again the only thing that shows the controller focus ring."
+    "Connecting from the phone app no longer replays the intro cinematic on a loop: signing in after scanning the pairing QR could accidentally trigger \"Replay Intro\" instead of logging you in. The companion app now lands you straight on your dashboard, and the Android app waits for the login screen to be ready before it types your password.",
+    "Pressing Enter in any password box now does what you expect — it signs you in or moves to the next field, and can no longer \"click\" a nearby button by mistake when using a controller or the companion app.",
+    "The public demo no longer interrupts you with an \"Update Available\" popup that reset the site back to the intro — demo visitors simply get the newest version on their next visit."
  ],
  "components": [
    {
-      "current_version": "1.7.102-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.102-alpha/archipelago",
+      "current_version": "1.7.103-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.103-alpha/archipelago",
      "name": "archipelago",
-      "new_version": "1.7.102-alpha",
-      "sha256": "13218bfac5f3e1b641edebac0fcccb483fb4500d764369da4947a467762f2e5a",
-      "size_bytes": 49951520
+      "new_version": "1.7.103-alpha",
+      "sha256": "b1a30287c1a694186e092d1746ed7cd647c4d2615edc59132cdc323ea5958ac4",
+      "size_bytes": 49949048
    },
    {
-      "current_version": "1.7.102-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.102-alpha/archipelago-frontend-1.7.102-alpha.tar.gz",
-      "name": "archipelago-frontend-1.7.102-alpha.tar.gz",
-      "new_version": "1.7.102-alpha",
-      "sha256": "663cf9a35d98fa6dad2d7fb2906e4a939a906382f2e9729156c3630e282cdc94",
-      "size_bytes": 174594796
+      "current_version": "1.7.103-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.103-alpha/archipelago-frontend-1.7.103-alpha.tar.gz",
+      "name": "archipelago-frontend-1.7.103-alpha.tar.gz",
+      "new_version": "1.7.103-alpha",
+      "sha256": "0544897a1d365fda8f7113eb80d76c5edcf50d539588af2886764546f02f52bf",
+      "size_bytes": 174592877
    }
  ],
-  "release_date": "2026-07-17",
-  "signature": "999e50b9aff22f544677986ca8c686614d8c3d4cbe501c2d5de86d2a1ea56fc731bb9434d722c41c7a124932f98e629706b41a64f57551e69529be59fe671d04",
+  "release_date": "2026-07-18",
+  "signature": "39d3f161437a03d44a71cf87c0622d6c00cec2ec587e9e1533128f279c9b0e09c34c51465f2ee79983a3f76f080e909b836a0a74e9d16009cdcf528a7dc0830c",
  "signed_by": "did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur",
-  "version": "1.7.102-alpha"
+  "version": "1.7.103-alpha"
 }
Author	SHA1	Message	Date
archipelagoandClaude Fable 5	573b469191	chore: sign v1.7.103-alpha OTA manifest Demo images / Build & push demo images (push) Successful in 2m53s Details Also folds the Cargo.lock version bump that create-release.sh missed. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 07:48:56 -04:00
archipelago	401f92a24f	chore: release v1.7.103-alpha	2026-07-18 07:30:25 -04:00
archipelagoandClaude Fable 5	dc0adbef70	docs: v1.7.103-alpha changelog + What's New sync Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 07:01:45 -04:00
archipelagoandClaude Fable 5	537c9fa70b	fix(demo): suppress the PWA update prompt + reload on the public demo The SW-update modal is noise on the demo (nothing to update to) and both accept-paths end in a reload that replays the intro from scratch. With skipWaiting/clientsClaim off, ignoring the waiting worker is safe — the new build activates on the visitor's next session. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 07:01:45 -04:00
DorianandClaude Fable 5	b6468ebf3c	fix(android): let Vue re-render before auto-login submits the password Dispatch the Enter keydown two frames after the input event so the login button is enabled when it arrives. Keeps auto-login working against nodes running older web builds where controller-nav's Enter-in-input pattern would otherwise click Replay Intro (see the matching web-ui fix). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 11:54:12 +01:00
DorianandClaude Fable 5	70587210fb	fix(ui): stop controller-nav Enter from clicking Replay Intro on auth inputs The companion's auto-login fills the password and dispatches Enter in the same tick, before Vue re-enables the disabled submit button. Controller-nav's 'Enter in input clicks the next enabled button' pattern then hit the Replay Intro button — clearing neode_intro_seen and hard-navigating to /, so every app connect replayed the intro cinematic in a loop. The auth inputs all have their own Enter handlers, so they opt out via data-controller-no-submit. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 11:54:12 +01:00