ciphermesh 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Felipe Kreulich
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,251 @@
+<div align="center">
+
+```
+ ██████╗██╗██████╗ ██╗  ██╗███████╗██████╗ ███╗   ███╗███████╗███████╗██╗  ██╗
+██╔════╝██║██╔══██╗██║  ██║██╔════╝██╔══██╗████╗ ████║██╔════╝██╔════╝██║  ██║
+██║     ██║██████╔╝███████║█████╗  ██████╔╝██╔████╔██║█████╗  ███████╗███████║
+██║     ██║██╔═══╝ ██╔══██║██╔══╝  ██╔══██╗██║╚██╔╝██║██╔══╝  ╚════██║██╔══██║
+╚██████╗██║██║     ██║  ██║███████╗██║  ██║██║ ╚═╝ ██║███████╗███████║██║  ██║
+ ╚═════╝╚═╝╚═╝     ╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝╚═╝     ╚═╝╚══════╝╚══════╝╚═╝  ╚═╝
+```
+
+### End-to-end encrypted terminal chat — the server can't read a single word.
+
+[![CI](https://github.com/FelipeKreulich/secret-chat-lan/actions/workflows/ci.yml/badge.svg)](https://github.com/FelipeKreulich/secret-chat-lan/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
+[![Node](https://img.shields.io/badge/node-%E2%89%A5%2020-brightgreen)](package.json)
+[![Crypto](https://img.shields.io/badge/E2EE-libsodium-7b2dff)](docs/ARCHITECTURE.md)
+
+**[🇧🇷 Leia em Português](README.pt-BR.md)** · [Setup Guide](docs/SETUP.md) · [Architecture](docs/ARCHITECTURE.md) · [Security Policy](SECURITY.md)
+
+<img src="docs/demo.svg" alt="CipherMesh terminal demo" width="720">
+
+</div>
+
+---
+
+```
+ You  ──[encrypted payload]──▶  Relay (blind)  ──[encrypted payload]──▶  Friend
+        Curve25519 + XSalsa20-Poly1305 · Double Ratchet · zero-knowledge
+```
+
+CipherMesh is a terminal chat where **encryption is the product**. Keys live in
+locked memory pages, every message gets a fresh ratchet key, and the relay
+server only ever sees ciphertext — it can't read, alter, or fake anything.
+Works on your LAN out of the box, and across the internet with
+[Tailscale](docs/SETUP.md#connecting-over-the-internet-tailscale) (no port
+forwarding, survives CGNAT).
+
+## ✨ Highlights
+
+|     | Feature | The gist |
+|-----|---------|----------|
+| 🔐 | **Real E2EE** | Curve25519 + XSalsa20-Poly1305 via libsodium, keys in `sodium_malloc` — never touch disk |
+| 🔄 | **Perfect Forward Secrecy** | Double Ratchet: one key per message, compromise today ≠ read yesterday |
+| 🕶️ | **Metadata resistance** | Fixed-bucket length padding on every ciphertext + opt-in cover traffic (`/cover`) to blur when you chat |
+| 🕵️ | **TOFU + SAS** | Key-change detection (MITM alarm) and 6-digit voice-verifiable codes |
+| 🌐 | **LAN & internet** | Auto-detects Tailscale, shows the reachable address in the banner |
+| 📨 | **Invites with QR** | `/invite` prints a `ciphermesh://` string + QR — paste it, you're in the right room |
+| ✓✓ | **Encrypted read receipts** | The ✓✓ travels as ordinary ciphertext — the server can't tell it apart |
+| 🗂️ | **Encrypted local history** | Opt-in (passphrase only), Argon2id + XSalsa20-Poly1305, `/search` & `/export` |
+| 🖼️ | **Image previews** | Received photos render right in the chat as colored half-blocks |
+| 📎 | **Resumable transfers** | Lost chunks are re-requested; reconnects resume from where they stopped |
+| 💬 | **Modern chat feel** | Right-aligned own messages, per-user emoji avatars, replies with quotes, `:fire:` → 🔥 |
+| 🎞️ | **Animated UI** | Splash intro, reconnect spinner, live transfer bars (shimmer + ETA), a lock-closing handshake on connect, and a pulsing "new messages ↓" pill |
+| 👻 | **Deniable & ephemeral** | Symmetric-crypto deniable mode; ephemeral messages *burn away* char-by-char when they expire |
+| 🛰️ | **Serverless P2P mode** | mDNS peer discovery on the LAN — no relay at all |
+
+## 🚀 Quick start
+
+Run it without cloning (once published to npm):
+
+```bash
+npx ciphermesh          # client (default)
+npx ciphermesh server   # relay server
+npx ciphermesh p2p      # serverless P2P
+```
+
+macOS/Linux with Homebrew (see [`Formula/ciphermesh.rb`](Formula/ciphermesh.rb)):
+
+```bash
+brew tap felipekreulich/ciphermesh
+brew install ciphermesh
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/FelipeKreulich/secret-chat-lan.git
+cd secret-chat-lan
+npm install
+```
+
+**Host** (one machine runs the relay):
+
+```bash
+npm run server          # or: docker compose up -d  |  npx ciphermesh server
+```
+
+Prefer a prebuilt image? Pull the relay from GHCR (published on each release):
+
+```bash
+docker run -p 3600:3600 ghcr.io/felipekreulich/secret-chat-lan:latest
+```
+
+**Everyone** (including the host):
+
+```bash
+npm run client          # nickname → passphrase (optional) → server address
+```
+
+On the same network, use the LAN IP from the server banner (`192.168.x.x:3600`).
+Across the internet, install [Tailscale](https://tailscale.com) on both sides
+and use the `Internet` address from the banner — full walkthrough in
+[docs/SETUP.md](docs/SETUP.md).
+
+Already in the chat? Run `/invite <your-ip>:3600` and send the string (or the
+QR code) to whoever you want to pull in.
+
+**No server at all?** `npm run p2p` — peers find each other via mDNS.
+
+## 💬 Commands
+
+<details>
+<summary><b>Essentials</b></summary>
+
+| Command | Description |
+|---------|-------------|
+| `/help` | All commands |
+| `/users` | Who's online (with away/status) |
+| `/msg <nick> <text>` | Private message (DM) |
+| `/reply <text>` | Reply quoting the last received message |
+| `/invite [host:port]` | Generate a `ciphermesh://` invite + QR code |
+| `/nick <new>` | Change nickname (before joining — recovers from "nickname taken") |
+| `/quit` | Leave |
+
+</details>
+
+<details>
+<summary><b>Rooms</b></summary>
+
+| Command | Description |
+|---------|-------------|
+| `/join <room>` | Enter/create a room |
+| `/rooms` | List rooms |
+| `/room` | Current room |
+| `/owner` | Room owner |
+| `/kick` `/mute` `/ban` | Owner moderation |
+
+</details>
+
+<details>
+<summary><b>Trust & security</b></summary>
+
+| Command | Description |
+|---------|-------------|
+| `/fingerprint [nick]` | Key fingerprint + a deterministic **randomart** picture of the key |
+| `/verify <nick>` | SAS code (~40-bit) + QR + key randomart for out-of-band verification |
+| `/verify-confirm <nick>` | Mark peer as verified |
+| `/trust <nick>` / `/trustlist` | Accept new key / trust status |
+| `/backup [path]` | Encrypted backup of identity + verified peers (restore at startup) |
+| `/deniable [on\|off]` | Plausible-deniability mode |
+| `/panic [yes]` | Duress wipe — securely erase all on-disk secrets (session, history, trust, keys) and exit |
+| `/cover [on\|constant\|off]` | Cover traffic — `on` = jittered decoys, `constant` = steady-rate paced channel |
+| `/theme [name]` | Nick colour theme: neon, matrix, mono, sunset, ocean |
+| `/ephemeral <30s\|5m\|1h\|off>` | Self-destructing messages |
+| `/receipts [on\|off]` | Send read receipts (✓✓) |
+| `/audit [n]` | Local audit log |
+
+</details>
+
+<details>
+<summary><b>History & files</b></summary>
+
+| Command | Description |
+|---------|-------------|
+| `/file <path>` | Offer a file (≤ 50MB) — the recipient must `/accept`; transfers resume |
+| `/voice [secs]` | Record & send an encrypted voice note (needs `sox`/`ffmpeg`; default 10s) |
+| `/play [path]` | Play the last received voice note (`afplay`/`sox`/`ffplay`) |
+| `/accept [id]` / `/reject [id]` | Accept / decline an incoming file offer |
+| `/img [path]` | Render the last received image in **full resolution** (kitty/iTerm2) |
+| `/search <term>` | Search the encrypted local history |
+| `/history [n]` | Last n messages from history |
+| `/retention <7d\|24h\|30m>` | Purge local history older than the given age |
+| `/export [path]` | Export history as .txt or .json (plaintext!) |
+
+</details>
+
+<details>
+<summary><b>Presence & fun</b></summary>
+
+| Command | Description |
+|---------|-------------|
+| `/away [reason]` / `/back` | Mark yourself away |
+| `/status <text\|off>` | Free-form status — emojis welcome (`/status :fire: coding`) |
+| `/react <emoji>` | React to the last message |
+| `/edit` `/delete` | Edit/delete your last message |
+| `/pin` `/unpin` `/pins` | Pin messages |
+| `/sound` `/notify` | Sound / desktop notifications |
+| `/dnd [on\|off\|mentions\|HH:MM-HH:MM]` | Do-not-disturb, mentions-only, or quiet hours |
+| `/clear` | Clear the chat |
+
+</details>
+
+Typing `:fire:` anywhere becomes 🔥 (Tab autocompletes shortcodes). **Ctrl+K** opens a fuzzy command palette, **Ctrl+E** an emoji picker. PageUp/PageDown scroll the history. **Alt+Enter** (or Shift+Enter where the terminal supports it, plus Ctrl+J) inserts a newline for multi-line messages; Enter sends. Markdown works: \`code\`, **bold**, *italic*, links, plus fenced \`\`\` code blocks and | tables |. Received images preview inline (half-blocks) and render full-res with `/img` on kitty/iTerm2. Day separators and message grouping keep the log clean.
+
+### Config file
+
+Drop a `~/.ciphermesh/config.json` to set defaults and skip the prompts. All keys are optional (unknown keys are ignored):
+
+```json
+{
+  "nickname": "felipe",
+  "server": "wss://100.x.y.z:3600",
+  "sound": false,
+  "notify": true,
+  "receipts": true,
+  "deniable": false,
+  "cover": "constant",
+  "theme": "matrix",
+  "autoAway": 10,
+  "dnd": "22:00-08:00"
+}
+```
+
+`nickname`/`server` pre-fill the prompts (press Enter to accept); the rest are applied at startup as if you'd run the matching `/sound`, `/cover`, `/theme`, … command. Themes: `neon` (default), `matrix`, `mono`, `sunset`, `ocean`.
+
+## 🔒 Security model
+
+- The relay is **zero-knowledge**: it routes ciphertext and metadata-padded
+  payloads, nothing else. Read receipts, reactions, presence — all of it is
+  indistinguishable ciphertext to the server.
+- **Traffic-analysis resistance**: every ciphertext is padded up to fixed
+  buckets so the relay can't read message length; file chunks are padded to a
+  uniform size so the exact file size doesn't leak either. `/cover on` adds
+  jittered decoy traffic and `/cover constant` paces your messages through a
+  steady-rate channel (decoys fill the idle slots) so the relay can't tell
+  active chatting from idle. Decoys are dropped silently by the receiver.
+- **Anti-replay** via monotonic nonces, **key rotation** every hour with a
+  grace window, **secure memory wipe** (`sodium_memzero`) after use.
+- **Duress wipe** (`/panic sim`): overwrites and deletes every on-disk secret
+  (session state, history, trust store, audit log), zeroes the in-memory keys,
+  and exits without saving — for a lost or seized device.
+- Session state and local history are encrypted at rest with
+  **Argon2id + XSalsa20-Poly1305** — no passphrase, no persistence.
+- Threat analysis and protocol details: [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md).
+  Found something? See [SECURITY.md](SECURITY.md).
+
+## 🧪 Development
+
+```bash
+npm run server:dev      # relay with auto-reload
+npm test                # 287 tests (crypto, ratchet, fuzz, controllers, transfers…)
+npm run validate        # lint + prettier + tests — what the CI runs
+```
+
+CI runs on every push/PR (Node 20 & 22). Tags `v*` trigger tests + a GitHub
+Release automatically.
+
+## 📄 License
+
+[MIT](LICENSE) — do good things with it.

package/README.pt-BR.md

@@ -0,0 +1,253 @@
+<div align="center">
+
+```
+ ██████╗██╗██████╗ ██╗  ██╗███████╗██████╗ ███╗   ███╗███████╗███████╗██╗  ██╗
+██╔════╝██║██╔══██╗██║  ██║██╔════╝██╔══██╗████╗ ████║██╔════╝██╔════╝██║  ██║
+██║     ██║██████╔╝███████║█████╗  ██████╔╝██╔████╔██║█████╗  ███████╗███████║
+██║     ██║██╔═══╝ ██╔══██║██╔══╝  ██╔══██╗██║╚██╔╝██║██╔══╝  ╚════██║██╔══██║
+╚██████╗██║██║     ██║  ██║███████╗██║  ██║██║ ╚═╝ ██║███████╗███████║██║  ██║
+ ╚═════╝╚═╝╚═╝     ╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝╚═╝     ╚═╝╚══════╝╚══════╝╚═╝  ╚═╝
+```
+
+### Chat de terminal com criptografia ponta-a-ponta — o servidor não lê uma palavra.
+
+[![CI](https://github.com/FelipeKreulich/secret-chat-lan/actions/workflows/ci.yml/badge.svg)](https://github.com/FelipeKreulich/secret-chat-lan/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
+[![Node](https://img.shields.io/badge/node-%E2%89%A5%2020-brightgreen)](package.json)
+[![Crypto](https://img.shields.io/badge/E2EE-libsodium-7b2dff)](docs/ARCHITECTURE.md)
+
+**[🇺🇸 Read in English](README.md)** · [Guia de Setup](docs/SETUP.md) · [Arquitetura](docs/ARCHITECTURE.md) · [Política de Segurança](SECURITY.md)
+
+<img src="docs/demo.svg" alt="Demo do CipherMesh no terminal" width="720">
+
+</div>
+
+---
+
+```
+ Você ──[payload cifrado]──▶  Relay (cego)  ──[payload cifrado]──▶  Amigo
+        Curve25519 + XSalsa20-Poly1305 · Double Ratchet · zero-knowledge
+```
+
+CipherMesh é um chat de terminal onde **a criptografia é o produto**. As chaves
+vivem em páginas de memória travadas, cada mensagem usa uma chave nova do
+ratchet, e o servidor de relay só enxerga ciphertext — não lê, não altera, não
+forja nada. Funciona na sua LAN de cara, e pela internet com
+[Tailscale](docs/SETUP.md#connecting-over-the-internet-tailscale) (sem port
+forwarding, imune a CGNAT).
+
+## ✨ Destaques
+
+|     | Feature | Resumo |
+|-----|---------|--------|
+| 🔐 | **E2EE de verdade** | Curve25519 + XSalsa20-Poly1305 via libsodium, chaves em `sodium_malloc` — nunca tocam o disco |
+| 🔄 | **Perfect Forward Secrecy** | Double Ratchet: uma chave por mensagem — comprometer hoje ≠ ler ontem |
+| 🕶️ | **Resistência a metadados** | Padding de comprimento em buckets fixos em todo ciphertext + cover traffic opcional (`/cover`) pra borrar quando você conversa |
+| 🕵️ | **TOFU + SAS** | Alarme de troca de chave (MITM) e código de 6 dígitos verificável por voz |
+| 🌐 | **LAN e internet** | Detecta Tailscale sozinho e mostra o endereço alcançável no banner |
+| 📨 | **Convites com QR** | `/invite` gera uma string `ciphermesh://` + QR — colou, caiu na sala certa |
+| ✓✓ | **Read receipts cifrados** | O ✓✓ viaja como ciphertext comum — o servidor não distingue de mensagem |
+| 🗂️ | **Histórico local cifrado** | Opt-in (só com passphrase), Argon2id + XSalsa20-Poly1305, `/search` e `/export` |
+| 🖼️ | **Preview de imagens** | Fotos recebidas renderizam no chat em half-blocks coloridos |
+| 📎 | **Transferências com resume** | Chunks perdidos são re-pedidos; reconexão retoma de onde parou |
+| 💬 | **Cara de app moderno** | Suas mensagens à direita, avatar de emoji por usuário, reply com citação, `:fire:` → 🔥 |
+| 🎞️ | **Interface animada** | Splash na abertura, spinner de reconexão, barra de transferência viva (shimmer + ETA), cadeado fechando no handshake e um selo pulsante "novas mensagens ↓" |
+| 👻 | **Deniable e efêmeras** | Modo de negação plausível (crypto simétrica); mensagens efêmeras *queimam* caractere a caractere ao expirar |
+| 🛰️ | **Modo P2P sem servidor** | Descoberta de peers via mDNS na LAN — sem relay nenhum |
+
+## 🚀 Começando
+
+Rode sem clonar (depois de publicado no npm):
+
+```bash
+npx ciphermesh          # cliente (padrão)
+npx ciphermesh server   # servidor relay
+npx ciphermesh p2p      # P2P sem servidor
+```
+
+macOS/Linux com Homebrew (veja [`Formula/ciphermesh.rb`](Formula/ciphermesh.rb)):
+
+```bash
+brew tap felipekreulich/ciphermesh
+brew install ciphermesh
+```
+
+Ou pelo código-fonte:
+
+```bash
+git clone https://github.com/FelipeKreulich/secret-chat-lan.git
+cd secret-chat-lan
+npm install
+```
+
+**Quem hospeda** (uma máquina roda o relay):
+
+```bash
+npm run server          # ou: docker compose up -d  |  npx ciphermesh server
+```
+
+Prefere imagem pronta? Baixe o relay do GHCR (publicado a cada release):
+
+```bash
+docker run -p 3600:3600 ghcr.io/felipekreulich/secret-chat-lan:latest
+```
+
+**Todo mundo** (incluindo quem hospeda):
+
+```bash
+npm run client          # nickname → passphrase (opcional) → endereço do servidor
+```
+
+Na mesma rede, use o IP da LAN que aparece no banner do servidor
+(`192.168.x.x:3600`). Pela internet, instalem [Tailscale](https://tailscale.com)
+dos dois lados e usem o endereço `Internet` do banner — passo a passo completo
+em [docs/SETUP.md](docs/SETUP.md).
+
+Já está no chat? Rode `/invite <seu-ip>:3600` e mande a string (ou o QR) pra
+quem você quiser puxar pra conversa.
+
+**Sem servidor nenhum?** `npm run p2p` — os peers se encontram via mDNS.
+
+## 💬 Comandos
+
+<details>
+<summary><b>Essenciais</b></summary>
+
+| Comando | Descrição |
+|---------|-----------|
+| `/help` | Todos os comandos |
+| `/users` | Quem está online (com away/status) |
+| `/msg <nick> <texto>` | Mensagem privada (DM) |
+| `/reply <texto>` | Responde citando a última mensagem recebida |
+| `/invite [host:porta]` | Gera convite `ciphermesh://` + QR code |
+| `/nick <novo>` | Troca de apelido (antes de entrar — recupera de "apelido em uso") |
+| `/quit` | Sair |
+
+</details>
+
+<details>
+<summary><b>Salas</b></summary>
+
+| Comando | Descrição |
+|---------|-----------|
+| `/join <sala>` | Entra/cria uma sala |
+| `/rooms` | Lista salas |
+| `/room` | Sala atual |
+| `/owner` | Dono da sala |
+| `/kick` `/mute` `/ban` | Moderação (dono da sala) |
+
+</details>
+
+<details>
+<summary><b>Confiança & segurança</b></summary>
+
+| Comando | Descrição |
+|---------|-----------|
+| `/fingerprint [nick]` | Fingerprint + um **randomart** determinístico da chave |
+| `/verify <nick>` | Código SAS (~40 bits) + QR + randomart da chave para verificar |
+| `/verify-confirm <nick>` | Marca o peer como verificado |
+| `/backup [caminho]` | Backup cifrado da identidade + peers verificados (restaura no startup) |
+| `/trust <nick>` / `/trustlist` | Aceita chave nova / status de confiança |
+| `/deniable [on\|off]` | Modo de negação plausível |
+| `/panic [sim]` | Wipe de coação — apaga com segurança todos os segredos do disco (sessão, histórico, confiança, chaves) e sai |
+| `/cover [on\|constant\|off]` | Cover traffic — `on` = iscas com jitter, `constant` = canal de taxa constante |
+| `/theme [nome]` | Tema de cores dos nicks: neon, matrix, mono, sunset, ocean |
+| `/ephemeral <30s\|5m\|1h\|off>` | Mensagens autodestrutivas |
+| `/receipts [on\|off]` | Envio de confirmação de leitura (✓✓) |
+| `/audit [n]` | Log de auditoria local |
+
+</details>
+
+<details>
+<summary><b>Histórico & arquivos</b></summary>
+
+| Comando | Descrição |
+|---------|-----------|
+| `/file <caminho>` | Oferece arquivo (≤ 50MB) — o destinatário precisa dar `/accept`; retoma |
+| `/voice [seg]` | Grava e envia nota de voz cifrada (precisa de `sox`/`ffmpeg`; default 10s) |
+| `/play [caminho]` | Toca a última nota de voz recebida (`afplay`/`sox`/`ffplay`) |
+| `/accept [id]` / `/reject [id]` | Aceita / recusa uma oferta de arquivo recebida |
+| `/img [caminho]` | Renderiza a última imagem recebida em **alta resolução** (kitty/iTerm2) |
+| `/retention <7d\|24h\|30m>` | Purga o histórico local mais antigo que o tempo dado |
+| `/search <termo>` | Busca no histórico local cifrado |
+| `/history [n]` | Últimas n mensagens do histórico |
+| `/export [caminho]` | Exporta o histórico em .txt ou .json (texto plano!) |
+
+</details>
+
+<details>
+<summary><b>Presença & diversão</b></summary>
+
+| Comando | Descrição |
+|---------|-----------|
+| `/away [motivo]` / `/back` | Marca/remove ausência |
+| `/status <texto\|off>` | Status livre — emoji à vontade (`/status :fire: codando`) |
+| `/react <emoji>` | Reage à última mensagem |
+| `/edit` `/delete` | Edita/apaga sua última mensagem |
+| `/pin` `/unpin` `/pins` | Fixa mensagens |
+| `/sound` `/notify` | Notificações sonoras / desktop |
+| `/dnd [on\|off\|mentions\|HH:MM-HH:MM]` | Não perturbe, só menções, ou horário silencioso |
+| `/clear` | Limpa o chat |
+
+</details>
+
+Digitar `:fire:` em qualquer lugar vira 🔥 (Tab autocompleta shortcodes).
+**Ctrl+K** abre uma paleta de comandos fuzzy, **Ctrl+E** um seletor de emoji. PageUp/PageDown rolam o histórico. **Alt+Enter** (ou Shift+Enter onde o terminal suporta, além de Ctrl+J) insere uma nova linha para mensagens de várias linhas; Enter envia. Markdown funciona: \`código\`, **negrito**, *itálico*, links, além de blocos de código \`\`\` e | tabelas |. Imagens recebidas têm preview inline (half-blocks) e renderizam em alta resolução com `/img` no kitty/iTerm2. Separadores de dia e agrupamento de mensagens deixam o log limpo.
+
+### Arquivo de config
+
+Crie um `~/.ciphermesh/config.json` para definir padrões e pular os prompts. Todas as chaves são opcionais (chaves desconhecidas são ignoradas):
+
+```json
+{
+  "nickname": "felipe",
+  "server": "wss://100.x.y.z:3600",
+  "sound": false,
+  "notify": true,
+  "receipts": true,
+  "deniable": false,
+  "cover": "constant",
+  "theme": "matrix",
+  "autoAway": 10,
+  "dnd": "22:00-08:00"
+}
+```
+
+`nickname`/`server` pré-preenchem os prompts (Enter aceita); o resto é aplicado na inicialização como se você tivesse rodado o comando `/sound`, `/cover`, `/theme`, … correspondente. Temas: `neon` (padrão), `matrix`, `mono`, `sunset`, `ocean`.
+
+## 🔒 Modelo de segurança
+
+- O relay é **zero-knowledge**: roteia ciphertext com padding anti-metadados e
+  nada mais. Read receipts, reações, presença — tudo é ciphertext
+  indistinguível pro servidor.
+- **Resistência a análise de tráfego**: todo ciphertext é paddado até buckets
+  de tamanho fixo (o relay não lê o comprimento da mensagem); chunks de arquivo
+  são paddados a um tamanho uniforme, então o tamanho exato do arquivo também
+  não vaza. `/cover on` adiciona iscas com jitter e `/cover constant` faz suas
+  mensagens saírem por um canal de taxa constante (iscas preenchem os slots
+  ociosos), pra ele não distinguir conversa ativa de ociosa. Iscas são
+  descartadas em silêncio.
+- **Anti-replay** com nonces monotônicos, **rotação de chaves** a cada hora com
+  janela de graça, **limpeza segura de memória** (`sodium_memzero`) após o uso.
+- **Wipe de coação** (`/panic sim`): sobrescreve e apaga todos os segredos do
+  disco (estado da sessão, histórico, confiança, auditoria), zera as chaves em
+  memória e sai sem salvar — para um device perdido ou apreendido.
+- Estado de sessão e histórico local são cifrados em repouso com
+  **Argon2id + XSalsa20-Poly1305** — sem passphrase, nada persiste.
+- Análise de ameaças e detalhes do protocolo: [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md).
+  Achou algo? Veja [SECURITY.md](SECURITY.md).
+
+## 🧪 Desenvolvimento
+
+```bash
+npm run server:dev      # relay com auto-reload
+npm test                # 287 testes (crypto, ratchet, fuzz, controllers, transferências…)
+npm run validate        # lint + prettier + testes — o mesmo que o CI roda
+```
+
+O CI roda em todo push/PR (Node 20 e 22). Tags `v*` disparam testes + GitHub
+Release automaticamente.
+
+## 📄 Licença
+
+[MIT](LICENSE) — faça coisas boas com isso.

package/bin/ciphermesh.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+// CipherMesh CLI entry point — dispatches to the client (default), the relay
+// server, or serverless P2P mode. Enables `npx ciphermesh` after publishing.
+import { readFileSync } from 'node:fs';
+
+const TARGETS = {
+  client: '../src/client/index.js',
+  server: '../src/server/index.js',
+  p2p: '../src/p2p/index.js',
+};
+
+const HELP = `CipherMesh — end-to-end encrypted terminal chat
+
+Usage:
+  ciphermesh [client]   connect to a relay server (default)
+  ciphermesh server     run the zero-knowledge relay server
+  ciphermesh p2p        serverless mode (mDNS peer discovery on the LAN)
+
+Options:
+  -h, --help            show this help
+  -v, --version         show the version
+`;
+
+const arg = process.argv[2];
+
+if (arg === '-h' || arg === '--help' || arg === 'help') {
+  process.stdout.write(HELP);
+} else if (arg === '-v' || arg === '--version') {
+  const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf-8'));
+  process.stdout.write(`${pkg.version}\n`);
+} else {
+  const target = TARGETS[arg] || TARGETS.client;
+  await import(new URL(target, import.meta.url).href);
+}