fix(release): generate TOTP after window search, not before

Author: m3nu

scripts/windows-sign.sh

@@ -145,9 +145,6 @@ take_screenshot "01-after-launch"
 
 # --- Automate login ---
 
-echo "==> Generating TOTP..."
-TOTP=$(oathtool --totp=sha256 -b --digits=6 "$CERTUM_TOTP_SECRET")
-
 echo "==> Searching for login window..."
 # Use --sync to wait for the window to appear (up to 30s)
 WINDOW_ID=$(timeout 30 xdotool search --sync --onlyvisible --name "SimplySign" 2>/dev/null | head -1 || true)
@@ -176,6 +173,10 @@ xdotool windowactivate --sync "$WINDOW_ID" 2>/dev/null || true
 sleep 1
 take_screenshot "03-before-login"
 
+# Generate TOTP as late as possible (right before typing, not before window search)
+echo "==> Generating TOTP..."
+TOTP=$(oathtool --totp=sha256 -b --digits=6 "$CERTUM_TOTP_SECRET")
+
 echo "==> Entering credentials..."
 # Click on the email field area (center of the window, upper portion)
 WX=$(xdotool getwindowgeometry --shell "$WINDOW_ID" 2>/dev/null | grep X= | cut -d= -f2 || echo 0)