Public, free to read, reuse, and adapt — Kirk Patrick Miller's notice for this edition. Not a patent grant.
FLINT_NEXT_ENCRYPT_CHATS_LOCALLY_v0.1.txt · c07
62a5e976c2 · words 738 · characters 49415–55996
Previous section · Next section
Exact section text · Full source · Source index
const sm = await V.sealFor('FreeLatticeMemory/conversations', mi);
+ assert.ok(!JSON.stringify(sm).includes('bees'), 'memory index copy sealed');
+ eq(await V.openFor('FreeLatticeMemory/conversations', sm), mi, 'memory index opens');
+ assert.strictEqual(await V.sealFor('FreeLatticeDB/meta', { key: 'k', value: 1 }).then((x) => x.sealed), undefined, 'uncovered stores pass through');
+
+ // 2. tamper / AAD: moved record shows locked, blob kept, write-back restores it
+ const moved = Object.assign({}, sealed, { conversationId: 'c2' });
+ const lockedView = await V.openFor('FreeLatticeDB/messages', moved);
+ assert.strictEqual(lockedView.content, V.LOCKED_TEXT, 'tampered record reads as locked, no throw');
+ const back = await V.sealFor('FreeLatticeDB/messages', Object.assign({}, lockedView, { content: 'overwrite attempt' }));
+ eq(back.sealed, sealed.sealed, 'locked placeholder never overwrites the sealed blob');
+ assert.ok(!('content' in back) && !('_flLocked' in back), 'placeholder text is not stored');
+
+ // 3. migration: mixed records, verify then swap
+ const rows = [
+ { id: 1, conversationId: 'c1', role: 'user', content: 'one', timestamp: 't1' },
+ { id: 2, conversationId: 'c1', role: 'assistant', content: 'two', timestamp: 't2' },
+ Object.assign({ id: 3 }, sealed)
+ ];
+ const ad = memAdapter(rows, 'id');
+ const r1 = await V.migrate('FreeLatticeDB/messages', ad);
+ assert.strictEqual(r1.sealed, 2, 'two plain records sealed');
+ assert.strictEqual(r1.already, 1, 'already-sealed record left alone');
+ assert.ok(rows.every((r) => r.sealed), 'every record sealed');
+ const all = await V.openAll('FreeLatticeDB/messages', rows);
+ eq(all.map((r) => r.content), ['one', 'two', 'my secret garden note'], 'all open to the original text');
+ // compare-and-swap skip
+ const rows2 = [{ id: 9, conversationId: 'c9', role: 'user', content: 'nine', timestamp: 't9' }];
+ const ad2 = memAdapter(rows2, 'id');
+ const realCas = ad2.cas;
+ ad2.cas = async (snap, next) => { rows2[0].content = 'nine, edited'; return realCas(snap, next); };
+ const r2 = await V.migrate('FreeLatticeDB/messages', ad2);
+ assert.strictEqual(r2.sealed, 0, 'changed record skipped, not clobbered');
+ assert.strictEqual(rows2[0].content, 'nine, edited', 'the newer plain text survives');
+
+ // 4. same key store, new page load: same key ID, still opens
+ const V2 = makeVault({ keyStore: ks });
+ await V2.init();
+ assert.strictEqual(V2.status().kid, V.status().kid, 'key persists across loads');
+ assert.strictEqual((await V2.openFor('FreeLatticeDB/messages', sealed)).content, msg.content, 'opens after reload');
+
+ // 5. key missing (fresh key store): old records locked, kept; new key, new ID
+ const V3 = makeVault({ keyStore: memKeyStore() });
+ await V3.init();
+ assert.notStrictEqual(V3.status().kid, V.status().kid, 'a new key gets a new ID');
+ const lk = await V3.openFor('FreeLatticeDB/messages', sealed);
+ assert.strictEqual(lk.content, V3.LOCKED_TEXT, 'missing key: shown as locked');
+ const rows3 = [Object.assign({ id: 5 }, sealed)];
+ const before = JSON.stringify(rows3);
+ await V3.migrate('FreeLatticeDB/messages', memAdapter(rows3, 'id'));
+ assert.strictEqual(JSON.stringify(rows3), before, 'missing key: sealed records never rewritten');
+
+ // 6. no WebCrypto: honest passthrough
+ const V4 = makeVault({ noCrypto: true });
+ await V4.init();
+ assert.strictEqual(V4.status().mode, 'unavailable', 'unavailable without WebCrypto');
+ const p = await V4.sealFor('FreeLatticeDB/messages', msg);
+ assert.strictEqual(p.content, msg.content, 'stays plain and readable');
+ assert.ok(/not sealed/.test(await V4.renderStatus()), 'status says plainly it is not sealed');
+
+ // 7. backup dump opens sealed stores
+ const dump = await V.openDump({ name: 'FreeLatticeDB', stores: { messages: [sealed], meta: [{ key: 'a' }] } });
+ assert.strictEqual(dump.stores.messages[0].content, msg.content, 'backup file carries readable chats');
+
+ // 8. static locks
+ assert.ok(block.includes('stops casual reading') && block.includes('compromised device'), 'honest note in code');
+ assert.ok(app.includes("if (el) el.textContent = text;"), 'status uses textContent');
+ assert.ok(app.includes('id="flChatSealStatus"'), 'status line in Memory Vault');
+ assert.ok(!/\u2014/.test(block), 'no em dash in the new block');
+ assert.ok(!/confirm\(/.test(block), 'no confirm()');
+ const rootIndex = path.join(ROOT, 'index.html');
+ if (fs.existsSync(rootIndex)) assert.strictEqual(fs.readFileSync(rootIndex, 'utf8'), app, 'root index.html == docs/app.html');
+ const privacy = fs.readFileSync(path.join(ROOT, 'docs', 'privacy.html'), 'utf8');
+ assert.ok(privacy.includes('v-encrypt-chats-locally-v0.1') && privacy.includes('They are not locked with a password by default.'), 'privacy: Newer line layered, older line kept');
+ // This brick never needs fl-connect.js or sw.js. (Other queued bricks may change them,
+ // so check for this brick's fingerprints rather than diffing against main.)
+ for (const rel of ['docs/modules/fl-connect.js', 'docs/sw.js', 'sw.js']) {
+ const fp = path.join(ROOT, rel);
+ if (fs.existsSync(fp)) assert.ok(!/FLChatVault|encrypt-chats-locally/.test(fs.readFileSync(fp, 'utf8')), rel + ' untouched by this brick');
+ }
+
+ console.log('SMOKE_OK encrypt chats locally v0.1');
+})().catch((err) => { console.error('SMOKE_FAIL encrypt chats locally v0.1:', err && err.message); process.exit(1); });
diff --git a/index.html b/index.html
index 50035267..b719395c 100644
--- a/index.html
+++ b/index.html
@@ -18078,6 +18078,8 @@ textarea.ag-input { min-height: 60px; resize: vertical; font-family: inherit; }
<div id="flVaultSummary" style="font-size:0.82rem;color:var(--text-muted);margin-bottom:14px;line-height:1.6;">
<span id="flVaultLastSaved">Checking...</span>
</div>
+ <!-- v-encrypt-chats-locally-v0.1: filled with textContent by FLChatVault.renderStatus() -->
+ <div id="flChatSealStatus" style="font-size:0.8rem;color:var(--text-muted);margin:-6px 0 14px;line-height:1.6;">Checking the chat seal...</div>
<div class="fl-backup-section">
<div class="fl-backup-row" style="gap:10px;">
<button class="fl-backup-btn" onclick="FlBackup.exportData()" style="background:rgba(212,160,23,0.12);border-color:rgba(212,160,23,0.3);font-weight:600;">
@@ -25605,6 +25607,358 @@ async function phiHashData(data) {
return Array.from(new Uint8Array(hashBuffer)).map(b => b.toString(16).padStart(2, '0')).join('');
}