stardance has been extended another month! the new deadline is october 31 :)

You are browsing as a guest. Sign up (or log in) to start making projects!

Enclave Messenger

By @Pradhya

  • 15 Devlogs
  • 54 Total hours

Its a messenger that can send messages via whatever!
Now in open beta!

Source
Open comments for this post

@Pradhya on Enclave Messenger

10h 14m 50s logged

Haiii again!
Whats done!

Security review of the messenger by Claude and fixes for what it found:

  • the passphrase no longer goes in the URL (it used to end up in logs), it is sent in a header now
  • running with –host lan now needs a one-time access code, and debug mode is forced off there
  • plugins are not run until I explicitly trust them, and the trust is tied to the plugin’s file hash, so editing it cancels the trust
  • addresses that other peers give us are checked before we connect

UI/UX Changes

  • Messages now have clear stats if they were delivered(directly), sent via a peer, or unsent/failed
  • Failed messages now have a retry button to attempt to re send it.
  • Settings menu has a copy user-id/enclave-id and a qr code too to add them to their peers
  • User profiles can now be easily backed up and restored through the web ui
  • Ive tried adding plugins, still need to test it and move everything to a plugin based system…

Misc but important

  • INSTALLATION: you can now use pip/pipx to install it, but youll need to use pipx install . because i want to fix some bugs before publishing it to pypi.

  • DATA MIGRATION: the way that the messenger stores data and where it stores data has been changed so if the pe-em detects any data in the folders that the messenger prev used, then it will move it but not delete the data from the prev dir, which was ~/.enclave-messenger

  • EXECUTABLES: the exeuatables for windows, linux and mac will still be built, but only the linux one will be properly tested because i only have a ubuntu install, i dont have a mac nor enough system resources to test windows or run a mac vm.

  • CHECKS: Claude added like 200 checks and like a ci job that runs them all.

BuGs

  • The lan scanner was looking at the wrong port, ugh
  • The windows executable did not start the bluetooth and sms plugins
  • Profiles were broken on the windows executable. (Ugh i hate windows)
  • set.py (the setup file) did the setup properly, but didnt save the profile stuff like name but that never got noticed because core.py fixed it when either web.py or tui.py was launched.
  • QR Code doesnt render

Website

  • I still kinda have to redo it all,
  • Update the info on the website.
  • Etc
0
0
20
Open comments for this post

@Pradhya on Enclave Messenger

4h 51m 19s logged

Im finally done with all of the PLANNED docs, i still have to add some docs for stuff like DHT, hosting, etc and i have to make plugins, remove in-built stuff stuff, etc

0
0
19
Open comments for this post

@Pradhya on Enclave Messenger

1h 45m 57s logged

So im still not done with all the docs, i have like 5 files left to complete. But, i managed to style my mkdocs site and it looks pretty similar to the messenger site…
I like the installation one the most.
Yay!

0
0
42
Open comments for this post

@Pradhya on Enclave Messenger

10h 21m 27s logged

i somehow broke the web ui while trying to add profiles so im also adding a cli and a tui
its not a good idea but its an idea
The tui will probably look like this.

So, the todo is now to fix the web ui, make the tui and add profiles so the reviewers can check it out

The below screenshot is from noterooms cli by me!

0
0
8
Open comments for this post

@Pradhya on Enclave Messenger

1h 21m 7s logged

I need to make these test better on my laptop… TADC ep9 kinda made me go off track but it was good. I think that was the most i cried while watching a movie. Well, leave that behind. Also, i think its all in one line because i can’t make a new line on mobile. And i think i messed up my ears. Ouch

0
0
10
Ship #1 Changes requested

@Pradhya on Enclave Messenger

What it is

A fully offline, peer-to-peer encrypted messenger that runs over Bluetooth (RFCOMM) and local network — zero internet required, zero servers. Messages are end-to-end encrypted, and the UI runs as a local web app in your browser.
What was built

Bluetooth node — discovers peers via SDP UUID, connects via RFCOMM

Web UI — a polished chat interface with dark/light mode, animated splash screen, message bubbles, peer list with live scan

End-to-end encryption — passphrase-based, messages show enc/decrypted badges

Multi-transport system — send messages to phone numbers when Bluetooth and LAN isn't available

Plugin system — extensible architecture with manifest-based permissions, security watchdog

Signed update system — RSA-4096 signed manifests + SHA-256 file hashes so updates can be verified without internet

What was challenging

Bluetooth peer discovery without internet — SDP/RFCOMM is finicky, BlueZ on Linux requires careful pairing/trust setup

Coordinating encryption across peers who may be offline — tokens stored locally, decrypted on-demand when passphrase is entered

Plugin security in CPython — no real sandbox exists, so the security model relies on scoped PluginCore objects.

What to be proud of

The UI is genuinely polished — smooth animations, staggered reveals, real-time WebSocket updates

The update system is cryptographically sound for an offline-first app

To test it

Requirements:

Linux (BlueZ), Python 3.11+, Bluetooth adapter

pip install -r requirements.txt

Setup:

python set.py — configure identity + passphrase

python main.py — starts the node + web UI (visit localhost:5000)

Enter your passphrase in the unlock modal to start the Bluetooth node

Click scan network in the peers panel to find other Enclave instances nearby

Open a chat, send a message — it'll show enc if stored encrypted, decrypted once unlocked

Two-device test: Run on two Linux machines with Bluetooth, make sure they’re paired, both run main.py — they should discover each other automatically.

  • 3 devlogs
  • 11h
Try project → See source code →
Open comments for this post

@Pradhya on Enclave Messenger

8h 43m 26s logged

Dev-log 3

What has been done

  • Made the settings look a bit better
  • Added better plugin support
  • Added a built-in Bluetooth support on Linux(Ubuntu)
  • Fixed a security bug where if the host/core was already unlocked, any password was allowed
  • Made the onbording process easier
  • Added a reset file for development and to delete all chat, config, etc made by any files in the repo.
  • Moved the web page to a file in ./templates from ./web.py . The entire file was just a string…
  • Kinda fixed the message bubbles.
  • Made a tool to verify if the files you have are by me for p2p updates

What is in progress as of now

  • Make a plugin manager
  • Create documentations
  • Add cross support for apps like blechat and silence
  • Make the UI/UX better
  • Etc

also, for why im doing this, see this

0
0
9

Delete project?

Are you sure you want to permanently delete this project? This action cannot be undone.

All devlogs, followers, and associated data will be removed.

Followers

Loading…