release(v1.7.38-alpha): onboarding auto-heal + silent returning logins + app-store trim

- auth.rs now infers onboarding-complete from setup_complete + password_hash so nodes stop bouncing users through the intro wizard after browser clear / update / reboot; the flag self-heals to disk on next check - frontend: "backend uncertain" no longer defaults to /onboarding/intro — useOnboarding returns null + callers poll / retry instead of flashing the wizard - login sounds (synthwave, welcome voice, pop, whoosh, oomph) gated by isFirstInstallPhase(); typing sounds unaffected - removed FIPS app, Nostr Relay, Nostr VPN, Routstr, Penpot from catalog, frontend config, Rust AppMetadata + install dispatch + install_penpot_stack; docker/fips-ui + docker/nostr-vpn-ui + apps/penpot dirs and 5 icons deleted; 15 image versions deleted from tx1138, .168, gitea-local registries (.160 Gitea was 502 at release time — follow-up) - AIUI baked into frontend release tarball via demo/aiui/; deploy-to-target falls back to demo/aiui/ when the AIUI sibling checkout is missing - prebuild hook syncs app-catalog/catalog.json → public/catalog.json so the two copies can no longer drift (was the source of the "apps still visible" bug — public/ had stale data) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-22 13:02:24 -04:00
parent cfc98c600e
commit 36a6101026
40 changed files with 317 additions and 1447 deletions
--- a/neode-ui/src/views/GoalDetail.vue
+++ b/neode-ui/src/views/GoalDetail.vue
@@ -178,7 +178,6 @@ const APP_ICON_MAP: Record<string, string> = {
  fedimint: '/assets/img/app-icons/fedimint.png',
  mempool: '/assets/img/app-icons/mempool.webp',
  electrs: '/assets/img/app-icons/electrs.svg',
-  'nostr-rs-relay': '/assets/img/app-icons/nostr-rs-relay.svg',
 }

 function stepIconUrl(step: GoalStep): string | undefined {
--- a/neode-ui/src/views/Kiosk.vue
+++ b/neode-ui/src/views/Kiosk.vue
@@ -99,7 +99,6 @@ const launchableApps = computed<KioskApp[]>(() => {
    'filebrowser': '/app/filebrowser/',
    'searxng': '/app/searxng/',
    'ollama': '/app/ollama/',
-    'penpot': '/app/penpot/',
    'onlyoffice': '/app/onlyoffice/',
    'portainer': '/app/portainer/',
    'uptime-kuma': '/app/uptime-kuma/',
@@ -108,7 +107,6 @@ const launchableApps = computed<KioskApp[]>(() => {
    'fedimint': '/app/fedimint/',
    'fedimint-gateway': '/app/fedimint-gateway/',
    'dwn': '/app/dwn/',
-    'nostr-rs-relay': '/app/nostr-rs-relay/',
    'indeedhub': 'http://localhost:8190',
    'botfights': 'http://localhost:9100',
    'nwnn': 'https://nwnn.l484.com',
--- a/neode-ui/src/views/RootRedirect.vue
+++ b/neode-ui/src/views/RootRedirect.vue
@@ -50,11 +50,14 @@ async function quickHealthCheck(): Promise<boolean> {
 }

 async function checkOnboarded(): Promise<boolean> {
+  // No hard timeout here. isOnboardingComplete() already retries with
+  // backoff (see useOnboarding.ts). A 3s Promise.race that resolves to
+  // `false` on timeout was previously the main cause of the intro
+  // flashing on already-onboarded nodes after browser-clear / reboot /
+  // update: if the backend was slow to warm up, we'd force a 'false'
+  // and route the user back through the setup wizard.
  try {
-    const result = await Promise.race([
-      isOnboardingComplete(),
-      new Promise<boolean>((resolve) => setTimeout(() => resolve(false), 3000)),
-    ])
+    const result = await isOnboardingComplete()
    log('checkOnboarded', { result })
    return result
  } catch (e) {
--- a/neode-ui/src/views/appDetails/appDetailsData.ts
+++ b/neode-ui/src/views/appDetails/appDetailsData.ts
@@ -34,7 +34,6 @@ export const ROUTE_TO_PACKAGE_KEY: Record<string, string> = {
  searxng: 'searxng',
  ollama: 'ollama',
  onlyoffice: 'onlyoffice',
-  penpot: 'penpot',
  nextcloud: 'nextcloud',
  vaultwarden: 'vaultwarden',
  jellyfin: 'jellyfin',
@@ -79,7 +78,6 @@ export const APP_URLS: Record<string, { dev: string; prod: string }> = {
  'ollama': { dev: 'http://localhost:11434', prod: 'http://localhost:11434' },
  'searxng': { dev: 'http://localhost:8888', prod: 'http://localhost:8888' },
  'onlyoffice': { dev: 'http://localhost:9980', prod: 'http://localhost:9980' },
-  'penpot': { dev: 'http://localhost:9001', prod: 'http://localhost:9001' },
  'nextcloud': { dev: 'http://localhost:8085', prod: 'http://localhost:8085' },
  'vaultwarden': { dev: 'http://localhost:8082', prod: 'http://localhost:8082' },
  'jellyfin': { dev: 'http://localhost:8096', prod: 'http://localhost:8096' },
--- a/neode-ui/src/views/appSession/appSessionConfig.ts
+++ b/neode-ui/src/views/appSession/appSessionConfig.ts
@@ -24,7 +24,6 @@ export const APP_PORTS: Record<string, number> = {
  'searxng':       8888,
  'ollama':        11434,
  'onlyoffice':    8044,
-  'penpot':        9001,
  'nextcloud':     8085,
  'vaultwarden':   8082,
  'jellyfin':      8096,
@@ -38,10 +37,6 @@ export const APP_PORTS: Record<string, number> = {
  'fedimint':      8175,
  'fedimintd':     8175,
  'fedimint-gateway': 8176,
-  'nostr-rs-relay': 18081,
-  'nostr-vpn':     8201,
-  'fips':          8202,
-  'routstr':       8200,
  'indeedhub':     7778,
  'botfights':     9100,
  'gitea':         3000,
@@ -87,14 +82,10 @@ export const HTTPS_PROXY_PATHS: Record<string, string> = {
  'dwn': '/app/dwn/',
  'btcpay-server': '/app/btcpay/',
  'nextcloud': '/app/nextcloud/',
-  'penpot': '/app/penpot/',
  'grafana': '/app/grafana/',
  'indeedhub': '/app/indeedhub/',
  'botfights': '/app/botfights/',
  'gitea': '/app/gitea/',
-  'routstr': '/app/routstr/',
-  'nostr-vpn': '/app/nostr-vpn/',
-  'fips': '/app/fips/',
 }

 /** External HTTPS apps -- always loaded directly */
@@ -112,9 +103,8 @@ export const APP_TITLES: Record<string, string> = {
  'bitcoin-knots': 'Bitcoin Knots', 'bitcoin-core': 'Bitcoin Core',
  'btcpay-server': 'BTCPay Server', 'indeedhub': 'Indeehub',
  'botfights': 'BotFights', 'gitea': 'Gitea', '484-kitchen': '484 Kitchen', 'arch-presentation': 'Presentation',
-  'nostr-vpn': 'Nostr VPN', 'fips': 'FIPS', 'routstr': 'Routstr',
  'homeassistant': 'Home Assistant', 'uptime-kuma': 'Uptime Kuma',
-  'nginx-proxy-manager': 'Nginx Proxy Manager', 'nostr-rs-relay': 'Nostr Relay',
+  'nginx-proxy-manager': 'Nginx Proxy Manager',
  'call-the-operator': 'Call The Operator', 'syntropy-institute': 'Syntropy Institute',
  't-zero': 'T-Zero', 'nostrudel': 'noStrudel',
 }
@@ -128,12 +118,10 @@ export const NEW_TAB_APPS = new Set([
  'vaultwarden',
  'nextcloud',
  'uptime-kuma',
-  'penpot',
  'portainer',
  'onlyoffice',
  'nginx-proxy-manager',
  'tailscale',
-  'routstr',
 ])

 /** Sites known to block iframes -- skip the timeout and go straight to fallback */
--- a/neode-ui/src/views/appSession/useAppIdentity.ts
+++ b/neode-ui/src/views/appSession/useAppIdentity.ts
@@ -15,7 +15,7 @@ export interface SelectedIdentity {
 }

 function isIdentityAwareApp(id: string): boolean {
-  return id === 'indeedhub' || id === 'nostrudel' || id === 'routstr'
+  return id === 'indeedhub' || id === 'nostrudel'
 }

 export function useAppIdentity(
--- a/neode-ui/src/views/apps/appsConfig.ts
+++ b/neode-ui/src/views/apps/appsConfig.ts
@@ -8,11 +8,9 @@ import { PackageState, type PackageDataEntry } from '@/types/api'
 export const SERVICE_NAMES = new Set([
  'dwn', 'archy-mempool-db', 'archy-btcpay-db', 'archy-nbxplorer', 'archy-tor',
  'immich_postgres', 'immich_redis',
-  'penpot-postgres', 'penpot-valkey', 'penpot-backend', 'penpot-exporter',
  'mysql-mempool', 'mempool-api', 'archy-mempool-web',
  'archy-bitcoin-ui', 'archy-lnd-ui', 'archy-electrs-ui',
  'indeedhub-postgres', 'indeedhub-redis', 'indeedhub-minio',
-  'archy-nostr-vpn-ui', 'archy-fips-ui',
  'indeedhub-api', 'indeedhub-ffmpeg',
  'indeedhub-relay', 'indeedhub-build_api_1', 'indeedhub-build_ffmpeg-worker_1',
  'indeedhub-build_postgres_1', 'indeedhub-build_redis_1', 'indeedhub-build_minio_1',
@@ -39,8 +37,7 @@ export const APP_CATEGORY_MAP: Record<string, string> = {
  'nextcloud': 'data', 'vaultwarden': 'data', 'filebrowser': 'data', 'cryptpad': 'data',
  'homeassistant': 'home', 'lorabell': 'home', 'endurain': 'home',
  'searxng': 'community', 'ollama': 'community', 'grafana': 'data',
-  'nostr-rs-relay': 'nostr', 'nostrudel': 'nostr',
-  'nostr-vpn': 'networking', 'fips': 'networking', 'routstr': 'community',
+  'nostrudel': 'nostr',
  'tailscale': 'networking', 'nginx-proxy-manager': 'networking', 'portainer': 'networking',
  'uptime-kuma': 'networking', 'dwn': 'data',
  'botfights': 'community', 'nwnn': 'l484', '484-kitchen': 'l484',
@@ -99,7 +96,7 @@ export const WEB_ONLY_APPS: Record<string, PackageDataEntry> = {
 export const TAB_LAUNCH_APPS = new Set([
  'btcpay-server', 'grafana', 'photoprism', 'homeassistant',
  'vaultwarden', 'nextcloud', 'uptime-kuma', 'portainer',
-  'cryptpad', 'nginx-proxy-manager', 'tailscale', 'routstr',
+  'cryptpad', 'nginx-proxy-manager', 'tailscale',
 ])

 export function opensInTab(id: string): boolean {
--- a/neode-ui/src/views/discover/curatedApps.ts
+++ b/neode-ui/src/views/discover/curatedApps.ts
@@ -86,7 +86,6 @@ export function getCuratedAppList(): MarketplaceApp[] {
    { id: 'searxng', title: 'SearXNG', version: '2024.1.0', description: 'Privacy-respecting metasearch engine. Search the internet without being tracked or profiled.', icon: '/assets/img/app-icons/searxng.png', author: 'SearXNG', dockerImage: `${R}/searxng:latest`, repoUrl: 'https://github.com/searxng/searxng' },
    { id: 'ollama', title: 'Ollama', version: '0.5.4', description: 'Run AI models locally. Llama, Mistral, and more — on your hardware, completely private.', icon: '/assets/img/app-icons/ollama.png', author: 'Ollama', dockerImage: `${R}/ollama:latest`, repoUrl: 'https://github.com/ollama/ollama' },
    { id: 'cryptpad', title: 'CryptPad', version: '2024.12.0', description: 'End-to-end encrypted documents, spreadsheets, and presentations. Zero-knowledge collaboration.', icon: '/assets/img/app-icons/cryptpad.webp', author: 'XWiki SAS', dockerImage: `${R}/cryptpad:2024.12.0`, repoUrl: 'https://github.com/cryptpad/cryptpad' },
-    { id: 'penpot', title: 'Penpot', version: '2.4', description: 'Open-source design platform. Self-hosted alternative to Figma for design and prototyping.', icon: '/assets/img/app-icons/penpot.webp', author: 'Penpot', dockerImage: `${R}/penpot-frontend:2.4`, repoUrl: 'https://github.com/penpot/penpot' },
    { id: 'nextcloud', title: 'Nextcloud', version: '28', description: 'Your own private cloud. File sync, calendars, contacts — all on your hardware.', icon: '/assets/img/app-icons/nextcloud.webp', author: 'Nextcloud', dockerImage: `${R}/nextcloud:28`, repoUrl: 'https://github.com/nextcloud/server' },
    { id: 'vaultwarden', title: 'Vaultwarden', version: '1.30.0', description: 'Self-hosted password vault. Bitwarden-compatible with zero-knowledge encryption.', icon: '/assets/img/app-icons/vaultwarden.webp', author: 'Vaultwarden', dockerImage: `${R}/vaultwarden:1.30.0-alpine`, repoUrl: 'https://github.com/dani-garcia/vaultwarden' },
    { id: 'jellyfin', title: 'Jellyfin', version: '10.8.13', description: 'Free media server. Stream your movies, music, and photos to any device.', icon: '/assets/img/app-icons/jellyfin.webp', author: 'Jellyfin', dockerImage: `${R}/jellyfin:10.8.13`, repoUrl: 'https://github.com/jellyfin/jellyfin' },
@@ -99,12 +98,8 @@ export function getCuratedAppList(): MarketplaceApp[] {
    { id: 'tailscale', title: 'Tailscale', version: '1.78.0', description: 'Zero-config VPN. Secure remote access with WireGuard mesh networking.', icon: '/assets/img/app-icons/tailscale.webp', author: 'Tailscale', dockerImage: `${R}/tailscale:stable`, repoUrl: 'https://github.com/tailscale/tailscale' },
    { id: 'electrumx', title: 'ElectrumX', version: '1.18.0', description: 'Electrum protocol server. Index the blockchain for fast wallet lookups, privately.', icon: '/assets/img/app-icons/electrumx.webp', author: 'Luke Childs', dockerImage: `${R}/electrumx:v1.18.0`, repoUrl: 'https://github.com/spesmilo/electrumx' },
    { id: 'fedimint', title: 'Fedimint', version: '0.10.0', description: 'Federated Bitcoin mint. Private, scalable Bitcoin through federated guardians.', icon: '/assets/img/app-icons/fedimint.png', author: 'Fedimint', dockerImage: `${R}/fedimintd:v0.10.0`, repoUrl: 'https://github.com/fedimint/fedimint' },
-    { id: 'nostr-rs-relay', title: 'Nostr Relay', version: '0.9.0', category: 'nostr', description: 'Your own Nostr relay. Store events locally, relay for friends, publish over Tor.', icon: '/assets/img/app-icons/nostr-rs-relay.svg', author: 'scsiblade', dockerImage: `${R}/nostr-rs-relay:0.9.0`, repoUrl: 'https://sr.ht/~gheartsfield/nostr-rs-relay/' },
    { id: 'indeedhub', title: 'Indeehub', version: '1.0.0', description: 'Bitcoin documentary streaming with Nostr identity. Stream sovereignty content.', icon: '/assets/img/app-icons/indeedhub.png', author: 'Indeehub Team', dockerImage: `${R}/indeedhub:1.0.0`, repoUrl: 'https://github.com/indeedhub/indeedhub' },
    { id: 'dwn', title: 'Decentralized Web Node', version: '0.4.0', description: 'Own your data with DID-based access control. Sync across devices, sovereign.', icon: '/assets/img/app-icons/dwn.svg', author: 'TBD', dockerImage: `${R}/dwn-server:main`, repoUrl: 'https://github.com/TBD54566975/dwn-server' },
-    { id: 'nostr-vpn', title: 'Nostr VPN', version: '0.3.7', category: 'networking', description: 'Tailscale-style mesh VPN with Nostr control plane. Peer discovery and key exchange over relays, WireGuard tunnels.', icon: '/assets/img/app-icons/nostr-vpn.svg', author: 'Martti Malmi', dockerImage: `${R}/nostr-vpn:v0.3.7`, repoUrl: 'https://github.com/mmalmi/nostr-vpn' },
-    { id: 'fips', title: 'FIPS', version: '0.1.0', category: 'networking', description: 'Free Internetworking Peering System. Self-organizing encrypted mesh network with Nostr identity.', icon: '/assets/img/app-icons/fips.svg', author: 'Jim Corgan', dockerImage: `${R}/fips:v0.1.0`, repoUrl: 'https://github.com/jmcorgan/fips' },
-    { id: 'routstr', title: 'Routstr', version: '0.4.3', category: 'community', description: 'Decentralized AI inference proxy. Pay-per-request with Cashu ecash, provider discovery via Nostr.', icon: '/assets/img/app-icons/routstr.svg', author: 'Routstr', dockerImage: `${R}/routstr:v0.4.3`, repoUrl: 'https://github.com/routstr/routstr-core' },
    { id: 'nostrudel', title: 'noStrudel', version: '0.40.0', category: 'nostr', description: 'Feature-rich Nostr web client. Browse feeds, post notes, manage relays with NIP-07.', icon: '/assets/img/app-icons/nostrudel.svg', author: 'hzrd149', dockerImage: '', repoUrl: 'https://github.com/hzrd149/nostrudel', webUrl: 'https://nostrudel.ninja' },
    { id: 'botfights', title: 'BotFights', version: '1.0.0', category: 'community', description: 'Bot arena + 2-player arcade fighter with controller support. AI bots battle in trivia, humans duke it out with controllers.', icon: '/assets/img/app-icons/botfights.svg', author: 'BotFights', dockerImage: `${R}/botfights:1.1.0`, repoUrl: 'https://botfights.net' },
    { id: 'gitea', title: 'Gitea', version: '1.23', category: 'development', description: 'Self-hosted Git service with container registry, CI/CD, issue tracking, and package hosting.', icon: '/assets/img/app-icons/gitea.svg', author: 'Gitea', dockerImage: 'docker.io/gitea/gitea:1.23', repoUrl: 'https://gitea.com' },
@@ -139,9 +134,6 @@ export const INSTALLED_ALIASES: Record<string, string[]> = {
  tailscale: ['tailscale'],
  ollama: ['ollama'],
  indeedhub: ['indeedhub'],
-  'nostr-vpn': ['nostr-vpn'],
-  fips: ['fips'],
-  routstr: ['routstr'],
  botfights: ['botfights'],
 }

--- a/neode-ui/src/views/marketplace/marketplaceData.ts
+++ b/neode-ui/src/views/marketplace/marketplaceData.ts
@@ -54,9 +54,6 @@ export const INSTALLED_ALIASES: Record<string, string[]> = {
  filebrowser: ['filebrowser'],
  tailscale: ['tailscale'],
  ollama: ['ollama'],
-  'nostr-vpn': ['nostr-vpn'],
-  fips: ['fips'],
-  routstr: ['routstr'],
 }

 /** Get app tier classification (matches backend get_app_tier) */
@@ -240,17 +237,6 @@ export function getCuratedAppList(): MarketplaceApp[] {
      manifestUrl: undefined,
      repoUrl: 'https://github.com/cryptpad/cryptpad'
    },
-    {
-      id: 'penpot',
-      title: 'Penpot',
-      version: '2.4',
-      description: 'Open-source design and prototyping platform. Self-hosted alternative to Figma.',
-      icon: '/assets/img/app-icons/penpot.webp',
-      author: 'Penpot',
-      dockerImage: 'docker.io/penpotapp/frontend:2.4',
-      manifestUrl: undefined,
-      repoUrl: 'https://github.com/penpot/penpot'
-    },
    {
      id: 'nextcloud',
      title: 'Nextcloud',
@@ -405,42 +391,6 @@ export function getCuratedAppList(): MarketplaceApp[] {
      manifestUrl: undefined,
      repoUrl: 'https://github.com/TBD54566975/dwn-server'
    },
-    {
-      id: 'nostr-vpn',
-      title: 'Nostr VPN',
-      version: '0.3.7',
-      category: 'networking',
-      description: 'Tailscale-style mesh VPN with Nostr control plane. Peer discovery and key exchange over relays, WireGuard tunnels.',
-      icon: '/assets/img/app-icons/nostr-vpn.svg',
-      author: 'Martti Malmi',
-      dockerImage: `${REGISTRY}/nostr-vpn:v0.3.7`,
-      manifestUrl: undefined,
-      repoUrl: 'https://github.com/mmalmi/nostr-vpn'
-    },
-    {
-      id: 'fips',
-      title: 'FIPS',
-      version: '0.1.0',
-      category: 'networking',
-      description: 'Free Internetworking Peering System. Self-organizing encrypted mesh network with Nostr identity.',
-      icon: '/assets/img/app-icons/fips.svg',
-      author: 'Jim Corgan',
-      dockerImage: `${REGISTRY}/fips:v0.1.0`,
-      manifestUrl: undefined,
-      repoUrl: 'https://github.com/jmcorgan/fips'
-    },
-    {
-      id: 'routstr',
-      title: 'Routstr',
-      version: '0.4.3',
-      category: 'community',
-      description: 'Decentralized AI inference proxy. Pay-per-request with Cashu ecash, provider discovery via Nostr.',
-      icon: '/assets/img/app-icons/routstr.svg',
-      author: 'Routstr',
-      dockerImage: `${REGISTRY}/routstr:v0.4.3`,
-      manifestUrl: undefined,
-      repoUrl: 'https://github.com/routstr/routstr-core'
-    },
    {
      id: 'nostrudel',
      title: 'noStrudel',
@@ -454,18 +404,6 @@ export function getCuratedAppList(): MarketplaceApp[] {
      repoUrl: 'https://github.com/hzrd149/nostrudel',
      webUrl: 'https://nostrudel.ninja'
    },
-    {
-      id: 'nostr-rs-relay',
-      title: 'Nostr Relay',
-      version: '0.9.0',
-      category: 'nostr',
-      description: 'Run your own Nostr relay. Store your events locally, relay for friends, and publish over Tor. A sovereign relay for your sovereign node.',
-      icon: '/assets/img/app-icons/nostr-rs-relay.svg',
-      author: 'scsiblade',
-      dockerImage: 'docker.io/scsibug/nostr-rs-relay:0.9.0',
-      manifestUrl: undefined,
-      repoUrl: 'https://sr.ht/~gheartsfield/nostr-rs-relay/'
-    },
    {
      id: 'botfights',
      title: 'BotFights',
--- a/neode-ui/src/views/settings/AccountInfoSection.vue
+++ b/neode-ui/src/views/settings/AccountInfoSection.vue
@@ -180,6 +180,18 @@ init()
              </button>
            </div>
            <div class="overflow-y-auto flex-1 min-h-0 space-y-6 pr-1">
+              <!-- v1.7.38-alpha -->
+              <div>
+                <div class="flex items-center gap-2 mb-3">
+                  <span class="text-xs font-mono px-2 py-0.5 rounded bg-orange-500/20 text-orange-300">v1.7.38-alpha</span>
+                  <span class="text-xs text-white/40">Apr 22, 2026</span>
+                </div>
+                <div class="space-y-3 text-sm text-white/80 pl-3 border-l border-white/10">
+                  <p>Signing in is quiet now. The intro music, welcome voice, and transition sounds belong to the first-boot cinematic and only play before you've finished onboarding — every login after that is silent. Typing sounds in the search bar and on the dashboard are unaffected.</p>
+                  <p>Fixed a bug where clearing your browser cache, updating the node, or rebooting could bounce you back through the onboarding wizard even though your node was already fully set up. The node now self-heals: if your password is set, it knows you've been through onboarding and takes you straight to the login screen. No more starting over.</p>
+                  <p>Trimmed the App Store. FIPS, Nostr Relay, Nostr VPN, Routstr, and Penpot have been removed from the catalog and their container images deleted from our registries. Your node's native FIPS transport is untouched — this is just the app-store entries going away.</p>
+                </div>
+              </div>
              <!-- v1.7.37-alpha -->
              <div>
                <div class="flex items-center gap-2 mb-3">