thandClaude Opus 4.7
d83de30d6d
Breaking wire-format change: dual-read (V1+V2) / single-write (V2) so existing user secrets, stored messages, and inter-tenant key keep working. Old clients and relays lose cross-version chat until both sides are upgraded. Relay - Switch clientEncrypt/masterEncrypt to AES-256-GCM with HKDF-derived per-ciphertext salts; keep CBC-V1 fallback on decrypt only. - On-bootstrap migration re-envelopes tenant secret_encrypted and the inter-tenant key to GCM-V2 (idempotent). - CORS: stop reflecting arbitrary Origin; allow own origin + optional RELAY_CORS_ORIGINS env allowlist; drop Access-Control-Allow-Credentials. - Generic error messages replace "no such user: <name>" enumeration. - Exception messages no longer echoed back; logged server-side. - Collab-lock max hold capped at 10min so a member can't grief-refresh forever. - Attachment filenames validated against hex.<ext> pattern. - Passwords min length 10; /api/account/password rate-limited. App / Electron client - Shared hyprcrdRelayEncrypt/Decrypt helpers (GCM-V2 write, V1 read). - Chat + collab-buckets plugins delegate to the shared helpers. - Poll + push + attachments migrated to the dual-format path. - /api/relay/settings GET returns has_key boolean; secret never echoed. - Setup endpoint now CSRF-checked. - SSRF: CURLOPT_PROTOCOLS restricted to HTTP(S) everywhere; bookmarks favicon fetch also blocks private/loopback/link-local. - Login / password-change rate limiter moved to DB-backed IP keying. - Passwords min length 10 throughout. - Zip import enforces per-file (25MB) and total (500MB) caps, extension allowlist, no-overwrite. - Verbose relay-push debug gated behind APP_DEBUG env. Version bumped to 2.0.0 (protocol-breaking). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
hyprcrd — Electron Desktop App
Wraps the PHP backend in an Electron shell. A static PHP binary is bundled per platform so users don't need PHP installed.
How it works
- On launch, the app starts PHP's built-in server on a random port (
127.0.0.1) router.phpreplaces Apache's.htaccessrewrite rules- A
BrowserWindowloadshttp://127.0.0.1:<port>/ - On quit, the PHP process is killed cleanly
User data (database + uploads) is stored outside the app bundle so it survives updates:
- Dev:
electron/appdata/ - Linux:
~/.config/hyprcrd/data/ - macOS:
~/Library/Application Support/hyprcrd/data/ - Windows:
%APPDATA%/hyprcrd/data/
Development
cd electron
npm install
npm start # launches the app using system or bundled PHP
Requires PHP 8.1+ with pdo_sqlite and zip extensions — either on
the system PATH or as a static binary in php-bin/<platform>/.
Bundling PHP
Static PHP binaries are not checked into git. Fetch them before building:
./fetch-php.sh # downloads ~20MB per platform from static-php-cli
Or place them manually (see php-bin/README.md for sources):
php-bin/linux/php
php-bin/darwin/php
php-bin/win32/php.exe
The app prefers the bundled binary. If none is found, it falls back to system PHP. If neither exists, a dialog tells the user what to install.
Building distributables
npm run dist
Uses electron-builder. Output:
| Platform | Format | Location |
|---|---|---|
| macOS | .dmg |
dist/ |
| Windows | NSIS | dist/ |
| Linux | AppImage | dist/ |
File structure
electron/
main.js Electron main process — spawns PHP, creates window
preload.js Exposes window.hyprcrdElectron (platform, isElectron)
router.php PHP built-in server router (replaces .htaccess)
fetch-php.sh Downloads static PHP binaries for all platforms
php-bin/ Platform-specific PHP binaries (gitignored)