ciphermesh 2.7.0 → 2.7.2

package/CHANGELOG.md

@@ -3,6 +3,36 @@
 Notable changes per release. Older versions are reconstructed from the git
 history — the commit bodies and pull requests remain the fuller record.
 
+## 2.7.2
+
+### Fixed
+
+- **The standalone binaries now run on machines other than the one that built
+  them.** `sodium-native` resolves its prebuilt addon at runtime, which bun
+  cannot follow, so the addon was never embedded — the binary kept an absolute
+  path back to the build checkout and died with `Cannot find addon` anywhere
+  else. Every binary published before this, including the relay binaries dating
+  back to 2.3.0, was affected (#427).
+
+  The verification was the deeper problem: it ran the binary _on the runner that
+  built it_, where the addon resolved through `node_modules`, so every check
+  passed while every download was broken. CI now hides the build tree before
+  running anything, and the cross-compiled binary is executed under Rosetta
+  rather than merely asserting its architecture.
+
+  **If you downloaded a binary from an earlier release, replace it.**
+
+## 2.7.1
+
+### Fixed
+
+- The banner no longer reads a font from disk. `figlet.textSync` loads
+  `fonts/ANSI Shadow.flf` at startup — fine under Node, fatal inside a compiled
+  binary, where the file does not exist and the process died before printing
+  anything. The word never changes, so the art is now the constant it always
+  was, pinned against figlet's own output by a test. figlet moved to a
+  devDependency and the 1.11.4 hold is gone (#414).
+
 ## 2.7.0
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ciphermesh",
-  "version": "2.7.0",
+  "version": "2.7.2",
   "description": "Secure terminal chat for the local network (LAN) with real end-to-end encryption (E2EE) using libsodium",
   "type": "module",
   "main": "src/client/index.js",
@@ -57,7 +57,6 @@
     "bonjour-service": "1.4.4",
     "boxen": "8.0.1",
     "chalk": "^5.4.1",
-    "figlet": "1.11.3",
     "gradient-string": "3.0.0",
     "jimp": "1.6.1",
     "node-notifier": "10.0.1",
@@ -68,6 +67,7 @@
   "devDependencies": {
     "@eslint/js": "10.0.1",
     "eslint": "10.8.0",
+    "figlet": "^1.11.4",
     "globals": "^17.7.0",
     "prettier": "^3.9.5"
   },

package/src/shared/banner.js

@@ -1,4 +1,3 @@
-import figlet from 'figlet';
 import gradient from 'gradient-string';
 import chalk from 'chalk';
 import boxen from 'boxen';
@@ -7,8 +6,36 @@ const neon = gradient(['#00ff9f', '#00b8ff', '#7b2dff', '#ff2dff']);
 const cyber = gradient(['#f72585', '#7209b7', '#3a0ca3', '#4361ee', '#4cc9f0']);
 const mint = gradient(['#00ff9f', '#00b8ff']);
 
+/**
+ * "CipherMesh" in figlet's ANSI Shadow, rendered once and kept.
+ *
+ * It used to be generated at startup with `figlet.textSync`, which reads the
+ * font file from disk — fine under Node, fatal inside a compiled binary, where
+ * `fonts/ANSI Shadow.flf` does not exist and the process dies before printing
+ * anything (issue #414). The word never changes, so there is nothing to
+ * generate: the art is the constant it always was.
+ *
+ * `test/banner.test.js` pins it against figlet's own output, so a change here
+ * has to be deliberate.
+ */
+const ART = [
+  ' ██████╗██╗██████╗ ██╗  ██╗███████╗██████╗ ███╗   ███╗███████╗███████╗██╗  ██╗',
+  '██╔════╝██║██╔══██╗██║  ██║██╔════╝██╔══██╗████╗ ████║██╔════╝██╔════╝██║  ██║',
+  '██║     ██║██████╔╝███████║█████╗  ██████╔╝██╔████╔██║█████╗  ███████╗███████║',
+  '██║     ██║██╔═══╝ ██╔══██║██╔══╝  ██╔══██╗██║╚██╔╝██║██╔══╝  ╚════██║██╔══██║',
+  '╚██████╗██║██║     ██║  ██║███████╗██║  ██║██║ ╚═╝ ██║███████╗███████║██║  ██║',
+  ' ╚═════╝╚═╝╚═╝     ╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝╚═╝     ╚═╝╚══════╝╚══════╝╚═╝  ╚═╝',
+  // figlet pads the block to a seventh, blank line. It is not decoration: the
+  // animations count lines to move the cursor back up (`\x1b[${N + 1}A`), so
+  // dropping it would shift every redraw by one row.
+  ' '.repeat(78),
+].join('\n');
+
+/** Byte-for-byte what `figlet.textSync('CipherMesh', { font: 'ANSI Shadow' })` returns. */
+export const LOGO_ART = ART;
+
 function logo() {
-  return neon(figlet.textSync('CipherMesh', { font: 'ANSI Shadow' }));
+  return neon(LOGO_ART);
 }
 
 export function serverBanner(port, network, tls = false) {
@@ -80,7 +107,7 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // Animated splash: the neon gradient "flows" through the ANSI-Shadow logo for
 // ~1s, then settles. Runs before the TUI (plain terminal output).
 export async function animatedBanner(subtitle = '  ░▒▓  End-to-End Encrypted Chat  ▓▒░') {
-  const art = figlet.textSync('CipherMesh', { font: 'ANSI Shadow' }).replace(/\n+$/, '');
+  const art = ART;
   const artLines = art.split('\n');
   const N = artLines.length;
 
@@ -132,7 +159,7 @@ function mixHex(a, b, t) {
 // Goodbye animation on /quit: the neon logo fades to black over ~0.8s while a
 // farewell line shows, then the process exits. Static fallback on non-TTY.
 export async function farewellBanner(message = '  🔒 Session ended — keys wiped from memory') {
-  const art = figlet.textSync('CipherMesh', { font: 'ANSI Shadow' }).replace(/\n+$/, '');
+  const art = ART;
   const N = art.split('\n').length;
 
   if (!process.stdout.isTTY) {