Haiii again!
Whats done!
Security review of the messenger by Claude and fixes for what it found:
- the passphrase no longer goes in the URL (it used to end up in logs), it is sent in a header now
- running with –host lan now needs a one-time access code, and debug mode is forced off there
- plugins are not run until I explicitly trust them, and the trust is tied to the plugin’s file hash, so editing it cancels the trust
- addresses that other peers give us are checked before we connect
UI/UX Changes
- Messages now have clear stats if they were delivered(directly), sent via a peer, or unsent/failed
- Failed messages now have a retry button to attempt to re send it.
- Settings menu has a copy user-id/enclave-id and a qr code too to add them to their peers
- User profiles can now be easily backed up and restored through the web ui
- Ive tried adding plugins, still need to test it and move everything to a plugin based system…
Misc but important
-
INSTALLATION: you can now use pip/pipx to install it, but youll need to use
pipx install .because i want to fix some bugs before publishing it to pypi. -
DATA MIGRATION: the way that the messenger stores data and where it stores data has been changed so if the pe-em detects any data in the folders that the messenger prev used, then it will move it but not delete the data from the prev dir, which was ~/.enclave-messenger
-
EXECUTABLES: the exeuatables for windows, linux and mac will still be built, but only the linux one will be properly tested because i only have a ubuntu install, i dont have a mac nor enough system resources to test windows or run a mac vm.
-
CHECKS: Claude added like 200 checks and like a ci job that runs them all.
BuGs
- The lan scanner was looking at the wrong port, ugh
- The windows executable did not start the bluetooth and sms plugins
- Profiles were broken on the windows executable. (Ugh i hate windows)
- set.py (the setup file) did the setup properly, but didnt save the profile stuff like name but that never got noticed because core.py fixed it when either web.py or tui.py was launched.
- QR Code doesnt render
Website
- I still kinda have to redo it all,
- Update the info on the website.
- Etc