ciphermesh 2.13.0 → 2.14.0

package/CHANGELOG.md

@@ -3,6 +3,75 @@
 Notable changes per release. Older versions are reconstructed from the git
 history — the commit bodies and pull requests remain the fuller record.
 
+## 2.14.0
+
+**The chat, read properly.** Three things a user reported in the same session:
+notifications wrecking the screen, Shift+Enter sending instead of breaking a
+line, and long messages running the whole width of the terminal.
+
+### Changed
+
+- **Messages are laid out as blocks.** A header naming the sender, then the text
+  wrapped at 65 % of the window (78 columns at most) and indented under it,
+  instead of one line handed to the terminal's own wrapping and left to run into
+  the border. Own messages are no longer right-aligned — everything starts at the
+  same column and a coloured rule down the left says what a message is: yellow
+  when it mentions you, magenta for a DM, the accent for your own.
+
+  Runs from one sender fold under a single header, but only inside the same
+  minute, so folding a run never costs you a timestamp. Notices — system, error,
+  `/me`, tombstones — share the gutter and wrap with a hanging indent, though at
+  the window's width rather than the reading width, so `/help`'s table is not
+  folded in half on a window with room to spare.
+
+  Everything is laid out again when the terminal is resized, stored room buffers
+  included, so the scrollback is never left measured for a window you no longer
+  have.
+
+### Added
+
+- **Shift+Enter inserts a newline.** A terminal cannot tell it from Enter unless
+  asked, so CipherMesh now negotiates the kitty keyboard protocol and xterm's
+  `modifyOtherKeys` on startup and undoes both on the way out. What the terminal
+  reports back is decoded ahead of the UI's key parser, which could not read it —
+  and without that step would have typed `13;2u` into the composer.
+
+  **Alt+Enter was broken too** and works now, on every terminal, protocol or not;
+  Ctrl+J still does the same. `CIPHERMESH_LEGACY_KEYS=1` turns the negotiation off
+  for terminals that dislike it.
+
+### Fixed
+
+- **Desktop notifications no longer wreck the chat on Windows.** SnoreToast, the
+  back-end behind `node-notifier`, ignores the pipes it is given when
+  notifications are disabled for the application and writes its diagnostics to
+  the attached console instead — the one the chat is drawn on. A room could
+  become unreadable, one burst per incoming message, with `/notify off` the only
+  way out.
+
+  Notifications are now delivered on Windows by a detached helper with no console
+  of its own, so nothing it prints can reach the terminal. The first refusal also
+  mutes them for the session and says so once, in one line with the reason
+  summarised rather than the raw command line; sound alerts keep working and
+  `/notify on` retries. And they are rate-limited to one per three seconds, which
+  was the other half of the complaint.
+
+### Internal
+
+- **`docs/ARCHITECTURE.md` matches the code again, and a test keeps it that
+  way.** It listed `play-sound` as a production dependency, which it is not, and
+  omitted seven of the eleven that are; its directory tree named files that do
+  not exist and 2 of the 27 modules under `src/shared/`; about half the document
+  was still Portuguese; and it called the project SecureLAN Chat, three renames
+  later. `test/architecture-doc.test.js` now fails on any of those — the same
+  shape as the command-list check, for the same reason.
+
+- The UI can be tested headlessly. `UI` takes the streams blessed drives, so the
+  layout — wrapping, alignment, relayout — runs against a fake terminal instead
+  of only being checked by eye.
+
+- eslint 10.9.1, github/codeql-action 4.37.9.
+
 ## 2.13.0
 
 **Multi-device.** One identity, several devices, and none of them holding a copy

package/README.md

@@ -54,7 +54,7 @@ forwarding, survives CGNAT).
 | 🗂️  | **Encrypted local history** | Opt-in (passphrase only), Argon2id + XSalsa20-Poly1305, `/search` & `/export`                                                                                                                                 |
 | 🖼️  | **Image previews**          | Received photos render right in the chat as colored half-blocks                                                                                                                                               |
 | 📎  | **Resumable transfers**     | Lost chunks are re-requested; reconnects resume from where they stopped                                                                                                                                       |
-| 💬  | **Modern chat feel**        | Right-aligned own messages, per-user emoji avatars, replies with quotes, `:fire:` → 🔥                                                                                                                        |
+| 💬  | **Modern chat feel**        | Messages laid out as wrapped blocks with a coloured rule on your own, per-user emoji avatars, replies with quotes, `:fire:` → 🔥                                                                                                                        |
 | 🎞️  | **Animated UI**             | Splash intro, reconnect spinner, live transfer bars (shimmer + ETA), a lock-closing handshake on connect, and a pulsing "new messages ↓" pill                                                                 |
 | 👻  | **Deniable & ephemeral**    | Symmetric-crypto deniable mode; ephemeral messages _burn away_ char-by-char when they expire                                                                                                                  |
 | 🔒  | **Private rooms**           | `/create <room> <password>` — zero-knowledge: the password never leaves your machine (Argon2id → Ed25519 challenge-response) and room content gets an extra symmetric layer the relay can't fake its way into |
@@ -302,13 +302,14 @@ A green **✓** next to a name marks a SAS-verified peer; a red **✗** flags a
 | `/react <emoji>`                        | React to the last message — the emoji lands **on the message**, with a count when several people react                                                                                 |
 | `/edit` `/delete`                       | Edit or delete your last message — the **original line is rewritten in place** (marked _(edited)_) or replaced by a tombstone, instead of a new line you have to mentally staple to it |
 | `/pin` `/unpin` `/pins`                 | Pin messages                                                                                                                                                                           |
-| `/sound` `/notify`                      | Sound / desktop notifications                                                                                                                                                          |
+| `/sound`                                | Sound alerts on incoming messages                                                                                                                                                      |
+| `/notify`                               | Desktop notifications — rate-limited, and muted for the session (with a line saying why) if the OS refuses them                                                                         |
 | `/dnd [on\|off\|mentions\|HH:MM-HH:MM]` | Do-not-disturb, mentions-only, or quiet hours                                                                                                                                          |
 | `/clear`                                | Clear the chat                                                                                                                                                                         |
 
 </details>
 
-Typing `:fire:` anywhere becomes 🔥 (Tab autocompletes shortcodes). **Ctrl+K** opens a fuzzy command palette, **Ctrl+E** an emoji picker. PageUp/PageDown scroll the history. **Alt+Enter** (or Shift+Enter where the terminal supports it, plus Ctrl+J) inserts a newline for multi-line messages; Enter sends. Pasting multi-line text (code included) keeps its line breaks — paste, check, Enter. Markdown works: \`code\`, **bold**, _italic_, links, plus fenced \`\`\` code blocks and | tables |. Received images preview inline (half-blocks) and render full-res with `/img` on kitty/iTerm2. Day separators and message grouping keep the log clean.
+Typing `:fire:` anywhere becomes 🔥 (Tab autocompletes shortcodes). **Ctrl+K** opens a fuzzy command palette, **Ctrl+E** an emoji picker. PageUp/PageDown scroll the history. **Shift+Enter** inserts a newline for multi-line messages — CipherMesh negotiates the kitty keyboard protocol / `modifyOtherKeys` on startup so the terminal can tell it apart from Enter, and **Alt+Enter** and **Ctrl+J** do the same on terminals that support neither (`CIPHERMESH_LEGACY_KEYS=1` turns the negotiation off). Enter sends. Pasting multi-line text (code included) keeps its line breaks — paste, check, Enter. Markdown works: \`code\`, **bold**, _italic_, links, plus fenced \`\`\` code blocks and | tables |. Received images preview inline (half-blocks) and render full-res with `/img` on kitty/iTerm2. Messages are laid out as blocks — a header naming the sender, then the text wrapped well short of the window and indented under it, with a coloured rule down the left of your own, of DMs and of anything that mentions you. Day separators and message grouping keep the log clean.
 
 ### First run & config file
 

package/README.pt-BR.md

@@ -54,7 +54,7 @@ forwarding, imune a CGNAT).
 | 🗂️  | **Histórico local cifrado**   | Opt-in (só com passphrase), Argon2id + XSalsa20-Poly1305, `/search` e `/export`                                                                                                                                |
 | 🖼️  | **Preview de imagens**        | Fotos recebidas renderizam no chat em half-blocks coloridos                                                                                                                                                    |
 | 📎  | **Transferências com resume** | Chunks perdidos são re-pedidos; reconexão retoma de onde parou                                                                                                                                                 |
-| 💬  | **Cara de app moderno**       | Suas mensagens à direita, avatar de emoji por usuário, reply com citação, `:fire:` → 🔥                                                                                                                        |
+| 💬  | **Cara de app moderno**       | Mensagens em blocos com quebra de linha e uma barra colorida nas suas, avatar de emoji por usuário, reply com citação, `:fire:` → 🔥                                                                                                                        |
 | 🎞️  | **Interface animada**         | Splash na abertura, spinner de reconexão, barra de transferência viva (shimmer + ETA), cadeado fechando no handshake e um selo pulsante "novas mensagens ↓"                                                    |
 | 👻  | **Deniable e efêmeras**       | Modo de negação plausível (crypto simétrica); mensagens efêmeras _queimam_ caractere a caractere ao expirar                                                                                                    |
 | 🔒  | **Salas privadas**            | `/create <sala> <senha>` — zero-knowledge: a senha nunca sai da sua máquina (Argon2id → challenge-response Ed25519) e o conteúdo da sala ganha uma camada simétrica extra que nem um relay malicioso atravessa |
@@ -302,14 +302,15 @@ Um **✓** verde ao lado de um nome indica um peer verificado por SAS; um **✗*
 | `/react <emoji>`                        | Reage à última mensagem — o emoji aparece **na própria mensagem**, com contagem quando várias pessoas reagem                                                                                    |
 | `/edit` `/delete`                       | Edita ou apaga sua última mensagem — a **linha original é reescrita no lugar** (marcada _(edited)_) ou vira uma lápide, em vez de uma linha nova que você precisa juntar mentalmente à original |
 | `/pin` `/unpin` `/pins`                 | Fixa mensagens                                                                                                                                                                                  |
-| `/sound` `/notify`                      | Notificações sonoras / desktop                                                                                                                                                                  |
+| `/sound`                                | Alertas sonoros ao receber mensagens                                                                                                                                                            |
+| `/notify`                               | Notificações de desktop — com limite de frequência, e silenciadas na sessão (com uma linha a dizer porquê) se o SO as recusar                                                                                                                                                                  |
 | `/dnd [on\|off\|mentions\|HH:MM-HH:MM]` | Não perturbe, só menções, ou horário silencioso                                                                                                                                                 |
 | `/clear`                                | Limpa o chat                                                                                                                                                                                    |
 
 </details>
 
 Digitar `:fire:` em qualquer lugar vira 🔥 (Tab autocompleta shortcodes).
-**Ctrl+K** abre uma paleta de comandos fuzzy, **Ctrl+E** um seletor de emoji. PageUp/PageDown rolam o histórico. **Alt+Enter** (ou Shift+Enter onde o terminal suporta, além de Ctrl+J) insere uma nova linha para mensagens de várias linhas; Enter envia. Colar texto multi-linha (código incluso) preserva as quebras — cola, confere, Enter. Markdown funciona: \`código\`, **negrito**, _itálico_, links, além de blocos de código \`\`\` e | tabelas |. Imagens recebidas têm preview inline (half-blocks) e renderizam em alta resolução com `/img` no kitty/iTerm2. Separadores de dia e agrupamento de mensagens deixam o log limpo.
+**Ctrl+K** abre uma paleta de comandos fuzzy, **Ctrl+E** um seletor de emoji. PageUp/PageDown rolam o histórico. **Shift+Enter** insere uma nova linha para mensagens de várias linhas — o CipherMesh negocia o kitty keyboard protocol / `modifyOtherKeys` no arranque para o terminal conseguir distingui-lo do Enter, e **Alt+Enter** e **Ctrl+J** fazem o mesmo em terminais que não suportam nenhum dos dois (`CIPHERMESH_LEGACY_KEYS=1` desliga a negociação). Enter envia. Colar texto multi-linha (código incluso) preserva as quebras — cola, confere, Enter. Markdown funciona: \`código\`, **negrito**, _itálico_, links, além de blocos de código \`\`\` e | tabelas |. Imagens recebidas têm preview inline (half-blocks) e renderizam em alta resolução com `/img` no kitty/iTerm2. As mensagens são desenhadas em blocos — um cabeçalho com o remetente e, por baixo, o texto quebrado bem antes da largura da janela, com uma barra colorida à esquerda nas suas, nas DMs e em tudo o que te mencione. Separadores de dia e agrupamento de mensagens deixam o log limpo.
 
 ### Primeira execução & arquivo de config