voidlogue-crypto 2.0.3 → 2.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "voidlogue-crypto",
-  "version": "2.0.3",
+  "version": "2.0.5",
   "description": "Open-source client-side cryptographic primitives for Voidlogue — published for independent audit and verification of privacy claims.",
   "main": "index.js",
   "type": "module",

package/src/vault.ts

@@ -175,8 +175,13 @@ export const Vault = {
 
     localStorage.setItem(`voidlogue_conv_${roomHash}`, JSON.stringify(blob));
 
-    const labelEntry = await encryptLabel(hint, key);
-    await this._updateIndex(roomHash, labelEntry);
+    // Only add labelled conversations to the index.
+    // Ghost (unlabelled) convos are stored in localStorage under their key
+    // but must NOT appear in the convlist so they stay hidden from the UI.
+    if (hint.trim()) {
+      const labelEntry = await encryptLabel(hint, key);
+      await this._updateIndex(roomHash, labelEntry);
+    }
     return true;
   },
 
@@ -254,16 +259,18 @@ export const Vault = {
     roomHash: string,
     email: string,
     codename: string,
-    newPin: string
+    newPin: string,
+    existingHintEntry?: LabelEntry
   ): Promise<boolean> {
-    const entry = this._getEncryptedHint(roomHash);
-    return this.save(
-      roomHash,
-      email,
-      codename,
-      newPin,
-      entry ? '(restored)' : ''
-    );
+    // Save as ghost (no hint) — avoids re-encrypting the label under the new
+    // PIN key, which would create a new index entry and make ghosts visible.
+    const ok = await this.save(roomHash, email, codename, newPin, '');
+    // If the caller supplies the original encrypted label entry, restore it
+    // verbatim — no re-encryption needed since labels are keyed independently.
+    if (ok && existingHintEntry?.encrypted) {
+      await this._updateIndex(roomHash, existingHintEntry);
+    }
+    return ok;
   },
 
   async updateLabel(