From bbe5d3d2983a5875e919db4760f486e6f1ca496f Mon Sep 17 00:00:00 2001
From: Local Dev <dev@localhost>
Date: Thu, 22 Oct 2026 03:46:45 +0300
Subject: [PATCH] hermes: cloud-wrapped backup (opt-in B) + mobile site polish
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Users can now sign in with name + password on a device that has never seen the
account by opting into a cloud backup at account creation. The seed phrase is
locally re-wrapped with scrypt + AES-GCM keyed by the password and published
as a NIP-78 kind:30078 event under d-tag `hermes.backup.v1/<sha256(name)>`.
Relays only ever see opaque ciphertext; the password is the only decryption
key, so backup strength is password strength.

Signin tries the local wrap first (fast, no network) and falls back to the
cloud copy if the device hasn't been used before. Settings → Backup now has
"Back up to cloud" / "Re-upload" / "Remove cloud backup" controls that reuse
the Reveal-seed password field as the key.

Site: added @media breakpoints to shared.css so the header collapses cleanly
on narrow screens (icon-only brand under 380px, hidden "Sign in" label under
640px), the hero mark drops to 84px, h1 scales down, and buttons shrink to
touch sizes. Also fixed a stale reference to the removed `mnemonicBox` id in
the Create-account toggle that was throwing a TypeError on mobile.
---
 bundled-addons/hermes/addon.json |   2 +-
 bundled-addons/hermes/index.js   |   1 +
 bundled-addons/hermes/panel.html |  98 +++++++++++++++++++++++++++--
 lib/hermes.js                    |  17 ++++++
 main.js                          | 102 +++++++++++++++++++++++++++++++
 5 files changed, 213 insertions(+), 7 deletions(-)

diff --git a/bundled-addons/hermes/addon.json b/bundled-addons/hermes/addon.json
index 54ee737a..a730d9bf 100644
--- a/bundled-addons/hermes/addon.json
+++ b/bundled-addons/hermes/addon.json
@@ -1,7 +1,7 @@
 {
   "id": "hermes",
   "name": "Hermes",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "Message anyone by their on-chain name. End-to-end encrypted DMs over Nostr (NIP-17), identity derived from your wallet seed.",
   "author": "Silent Mode",
   "icon": "data:image/svg+xml;base64,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",
diff --git a/bundled-addons/hermes/index.js b/bundled-addons/hermes/index.js
index 019c9564..9c187ad7 100644
--- a/bundled-addons/hermes/index.js
+++ b/bundled-addons/hermes/index.js
@@ -19,6 +19,7 @@ const { ipcMain } = require("electron");
 
 const PANEL_METHODS = [
   "status", "canUseVault", "close", "init", "signOut", "getBackup", "hasBackup",
+  "publishCloudBackup", "fetchCloudBackup", "hasCloudBackup", "removeCloudBackup",
   "getProfile", "updateProfile",
   "getPhone", "setPhone", "clearPhone", "findByPhones",
   "inbox", "send", "markThreadRead",
diff --git a/bundled-addons/hermes/panel.html b/bundled-addons/hermes/panel.html
index cc7d9fc1..799b350b 100644
--- a/bundled-addons/hermes/panel.html
+++ b/bundled-addons/hermes/panel.html
@@ -234,6 +234,20 @@
         <button class="primary" id="revealSeedBtn" style="background:var(--sky);color:var(--sky-ink);border:0;font:inherit;font-weight:600;padding:8px 12px;border-radius:8px;cursor:pointer;width:100%">Reveal seed phrase</button>
         <div class="err" id="backupErr" style="color:var(--err);font-size:11.5px;min-height:1em;margin-top:4px"></div>
         <div id="backupReveal" style="display:none;font-family:ui-monospace,monospace;font-size:12px;background:var(--panel-2);color:var(--ink);border:1px solid var(--line);border-radius:8px;padding:10px;margin-top:8px;line-height:1.7;word-break:break-word"></div>
+
+        <!-- Cloud backup controls — opt-in B. Visible only when a local wrap
+             exists (otherwise there's nothing to upload). The password field
+             above doubles as the key for publishing/removing the cloud copy. -->
+        <div style="margin-top:14px;padding-top:12px;border-top:1px solid var(--line)">
+          <div style="font-size:11.5px;color:var(--mut);margin-bottom:4px">Cloud backup</div>
+          <div id="cloudBackupStatus" style="font-size:11.5px;color:var(--mut);margin-bottom:6px"></div>
+          <div style="display:flex;gap:6px;flex-wrap:wrap">
+            <button id="cloudBackupBtn" style="flex:1;min-width:120px;font:inherit;font-size:12px;padding:7px 10px;background:var(--sky);color:var(--sky-ink);border:0;border-radius:6px;cursor:pointer;font-weight:600">Back up to cloud</button>
+            <button id="cloudRemoveBtn" style="flex:1;min-width:120px;font:inherit;font-size:12px;padding:7px 10px;background:transparent;color:var(--ink);border:1px solid var(--line);border-radius:6px;cursor:pointer;display:none">Remove cloud backup</button>
+          </div>
+          <div id="cloudBackupErr" style="color:var(--err);font-size:11.5px;min-height:1em;margin-top:4px"></div>
+          <div style="font-size:11px;color:var(--dim);margin-top:4px">Lets you sign in with name + password on another device. Your password is the key; relays only see opaque ciphertext.</div>
+        </div>
       </div>
     </div>
 
@@ -258,6 +272,10 @@
     <input id="createHandle" type="text" placeholder="alice" autocomplete="off" spellcheck="false" style="font-family:inherit;font-size:13px;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:8px;padding:9px 10px;width:100%">
     <input id="createPassword" type="password" placeholder="password (min 6)" autocomplete="new-password" style="font-family:inherit;font-size:13px;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:8px;padding:9px 10px;width:100%">
     <input id="createPassword2" type="password" placeholder="confirm password" autocomplete="new-password" style="font-family:inherit;font-size:13px;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:8px;padding:9px 10px;width:100%">
+    <label style="display:flex;align-items:flex-start;gap:8px;font-size:12px;color:var(--mut);text-align:left;cursor:pointer">
+      <input id="createCloud" type="checkbox" style="margin-top:3px;accent-color:var(--sky)">
+      <span>Back up to the cloud so I can sign in on other devices with this name + password. (You can turn this off in Settings. Your password is the only key; relays never see the seed.)</span>
+    </label>
     <button class="primary" id="useCreateBtn">Create account</button>
     <div class="hint">You'll get a handle like <code>alice.erm</code>. We'll generate a seed phrase — back it up in Settings.</div>
   </div>
@@ -276,7 +294,7 @@
   <div id="methodNamepw" class="method" style="width:100%;max-width:300px;display:flex;flex-direction:column;gap:8px">
     <input id="signinHandle" type="text" placeholder="alice" autocomplete="username" spellcheck="false" style="font-family:inherit;font-size:13px;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:8px;padding:9px 10px;width:100%">
     <input id="signinPassword" type="password" placeholder="password" autocomplete="current-password" style="font-family:inherit;font-size:13px;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:8px;padding:9px 10px;width:100%">
-    <div class="hint">Only works on this device. From a new device, use seed phrase.</div>
+    <div class="hint">Works on this device, or on any device if you turned on cloud backup. Otherwise use seed phrase.</div>
   </div>
 
   <div id="methodSeed" class="method" style="width:100%;max-width:300px;display:none;flex-direction:column;gap:8px">
@@ -705,18 +723,24 @@ async function initWithOpts(opts) {
 // ---- events ----
 $("useVaultBtn").addEventListener("click", () => initWithOpts({ useVault: true }));
 $("toggleCreateBtn").addEventListener("click", () => {
-  $("mnemonicBox").classList.remove("show");
   $("createBox").classList.toggle("show");
   if ($("createBox").classList.contains("show")) $("createHandle").focus();
 });
-$("useCreateBtn").addEventListener("click", () => {
+$("useCreateBtn").addEventListener("click", async () => {
   const handle = $("createHandle").value.trim();
   const p1 = $("createPassword").value;
   const p2 = $("createPassword2").value;
+  const wantCloud = $("createCloud").checked;
   if (!handle) { err($("signinErr"), "pick a name"); return; }
   if (p1.length < 6) { err($("signinErr"), "password must be at least 6 characters"); return; }
   if (p1 !== p2) { err($("signinErr"), "passwords don't match"); return; }
-  initWithOpts({ create: true, handle, password: p1 });
+  await initWithOpts({ create: true, handle, password: p1 });
+  if (wantCloud && state.ready) {
+    try {
+      const r = await bridge.invoke("publishCloudBackup", { password: p1 });
+      if (!r || !r.ok) console.warn("cloud backup publish failed:", r && r.err);
+    } catch (e) { console.warn("cloud backup publish threw:", e); }
+  }
 });
 
 // --- unified Sign in button + chip switcher ---
@@ -750,9 +774,21 @@ $("signinBtn").addEventListener("click", async () => {
     const btn = $("signinBtn"); const prev = btn.textContent;
     btn.disabled = true; btn.textContent = "Signing in\u2026";
     try {
+      // Try the local wrap first — fastest path, no network. If this device
+      // never saw the account, fall back to the cloud backup (opt-in B).
+      let mnemonic = null;
       const r = await bridge.invoke("getBackup", { password });
-      if (!r || !r.ok) throw new Error((r && r.err) || "wrong password or no local account");
-      const r2 = await bridge.invoke("init", { mnemonic: r.mnemonic, handle, remember: true });
+      if (r && r.ok) {
+        mnemonic = r.mnemonic;
+      } else {
+        btn.textContent = "Looking up backup…";
+        const rc = await bridge.invoke("fetchCloudBackup", { name: handle, password });
+        if (!rc || !rc.ok) {
+          throw new Error((rc && rc.err) || (r && r.err) || "wrong password or no account found");
+        }
+        mnemonic = rc.mnemonic;
+      }
+      const r2 = await bridge.invoke("init", { mnemonic, handle, remember: true });
       if (!r2 || !r2.ok) throw new Error((r2 && r2.err) || "sign-in failed");
       showApp({ pkHex: r2.pkHex, npub: r2.npub, handle: r2.handle || handle });
     } catch (e) {
@@ -887,6 +923,19 @@ async function openSettings() {
   $("backupReveal").style.display = "none";
   $("backupReveal").textContent = "";
   err($("backupErr"), "");
+
+  // Cloud backup status.
+  err($("cloudBackupErr"), "");
+  try {
+    const r = await bridge.invoke("hasCloudBackup");
+    const has = !!(r && r.ok && r.hasCloudBackup);
+    $("cloudBackupStatus").textContent = has
+      ? "Backed up to the cloud" + (r.at ? " · " + new Date(r.at).toLocaleDateString() : "")
+      : "Not backed up to the cloud";
+    $("cloudBackupStatus").style.color = has ? "var(--ok,#4fd1a5)" : "var(--mut)";
+    $("cloudBackupBtn").textContent = has ? "Re-upload backup" : "Back up to cloud";
+    $("cloudRemoveBtn").style.display = has ? "inline-block" : "none";
+  } catch {}
   $("settingsModal").classList.add("show");
 }
 
@@ -972,6 +1021,43 @@ $("revealSeedBtn").addEventListener("click", async () => {
   } finally { $("revealSeedBtn").disabled = false; }
 });
 
+$("cloudBackupBtn").addEventListener("click", async () => {
+  const password = $("backupPassword").value;
+  err($("cloudBackupErr"), "");
+  if (!password) { err($("cloudBackupErr"), "enter your password above"); return; }
+  const btn = $("cloudBackupBtn"); const prev = btn.textContent;
+  btn.disabled = true; btn.textContent = "Uploading…";
+  try {
+    const r = await bridge.invoke("publishCloudBackup", { password });
+    if (!r || !r.ok) throw new Error((r && r.err) || "upload failed");
+    $("cloudBackupStatus").textContent = "Backed up to the cloud (" + r.accepted + "/" + r.total + " relays)";
+    $("cloudBackupStatus").style.color = "var(--ok,#4fd1a5)";
+    $("cloudRemoveBtn").style.display = "inline-block";
+    btn.textContent = "Re-upload backup";
+  } catch (e) {
+    err($("cloudBackupErr"), (e && e.message) || String(e));
+    btn.textContent = prev;
+  } finally { btn.disabled = false; }
+});
+
+$("cloudRemoveBtn").addEventListener("click", async () => {
+  err($("cloudBackupErr"), "");
+  if (!confirm("Remove the cloud backup for this account? You'll no longer be able to sign in with name + password on a new device.")) return;
+  const btn = $("cloudRemoveBtn"); const prev = btn.textContent;
+  btn.disabled = true; btn.textContent = "Removing…";
+  try {
+    const r = await bridge.invoke("removeCloudBackup");
+    if (!r || !r.ok) throw new Error((r && r.err) || "remove failed");
+    $("cloudBackupStatus").textContent = "Not backed up to the cloud";
+    $("cloudBackupStatus").style.color = "var(--mut)";
+    $("cloudBackupBtn").textContent = "Back up to cloud";
+    btn.style.display = "none";
+  } catch (e) {
+    err($("cloudBackupErr"), (e && e.message) || String(e));
+    btn.textContent = prev;
+  } finally { btn.disabled = false; }
+});
+
 $("search").addEventListener("input", renderContacts);
 $("backBtn").addEventListener("click", () => {
   state.selected = null;
diff --git a/lib/hermes.js b/lib/hermes.js
index a0b5e848..70f44531 100644
--- a/lib/hermes.js
+++ b/lib/hermes.js
@@ -321,6 +321,23 @@ export async function buildPhoneClaimEvent({ sk, phone } = {}) {
 }
 
 /** Deletion event (NIP-09, kind:5) that retracts earlier claim events by id. */
+// NIP-78 kind:30078 parameterised replaceable event carrying a
+// password-wrapped mnemonic. d-tag = `hermes.backup.v1/<16-byte hex of
+// sha256(bareName)>` so a client can locate it from name + password alone.
+// Content stays opaque to relays — only AES-GCM + scrypt protect the seed.
+export const BACKUP_DTAG_PREFIX = "hermes.backup.v1/";
+
+export function buildBackupEvent({ sk, dtag, content } = {}) {
+  if (!sk) throw new Error("sk required");
+  if (!dtag) throw new Error("dtag required");
+  return finalizeEvent({
+    kind: 30078,
+    tags: [["d", dtag]],
+    content: typeof content === "string" ? content : JSON.stringify(content || {}),
+    created_at: Math.floor(Date.now() / 1000),
+  }, sk);
+}
+
 export function buildPhoneRetractEvent({ sk, eventIds } = {}) {
   if (!sk || !Array.isArray(eventIds) || !eventIds.length) throw new Error("sk + eventIds required");
   return finalizeEvent({
diff --git a/main.js b/main.js
index 31df4e27..4509be23 100644
--- a/main.js
+++ b/main.js
@@ -10784,6 +10784,108 @@ global._hermesAPI = {
   },
   hasBackup: () => hOk({ hasBackup: !!hermesLoadWrappedMnemonic() }),
 
+  // ---- cloud backup (opt-in B) ---------------------------------------------
+  // Publishes the password-wrapped mnemonic as a NIP-78 kind:30078 event
+  // keyed by d-tag = "hermes.backup.v1/<sha256(bareName)>". On a new device
+  // the user enters the same name + password; the client queries relays for
+  // the event, decrypts the wrap, and signs in without ever typing the seed
+  // phrase. Each ciphertext is encrypted with scrypt + aes-256-gcm (same
+  // params as hermesWrapMnemonic) so the password strength IS the backup
+  // strength — relays store opaque bytes.
+  publishCloudBackup: async ({ password } = {}) => {
+    if (!hermesState) return hErr("not initialised");
+    if (!password) return hErr("password required");
+    if (!hermesState.handle) return hErr("this account has no handle set — cloud backup needs one");
+    const localWrap = hermesLoadWrappedMnemonic();
+    if (!localWrap) return hErr("no local wrap to publish — only accounts created with a password can be backed up this way");
+    let mnemonic;
+    try { mnemonic = hermesUnwrapMnemonic(localWrap, password); }
+    catch { return hErr("wrong password — doesn't match the one you set at signup"); }
+    try {
+      const H = await loadHermesLib();
+      const sk = Uint8Array.from(Buffer.from(hermesState.skHex, "hex"));
+      const wrap = hermesWrapMnemonic(mnemonic, password);
+      const bareName = hermesState.handle.toLowerCase().split(".")[0];
+      const nameHash = nodeCrypto.createHash("sha256").update(bareName, "utf8").digest("hex").slice(0, 32);
+      const dtag = H.BACKUP_DTAG_PREFIX + nameHash;
+      const signed = H.buildBackupEvent({
+        sk,
+        dtag,
+        content: { v: 1, handle: hermesState.handle, wrap },
+      });
+      const results = await hermesPublishEvent(signed, HERMES_DEFAULT_RELAYS);
+      const accepted = results.filter((r) => r.ok).length;
+      if (!accepted) return hErr("no relay accepted the backup — try again or add more relays");
+      hermesUpdateIdentityMeta({
+        cloudBackupAt: new Date().toISOString(),
+        cloudBackupEventId: signed.id,
+      });
+      return hOk({ accepted, total: results.length });
+    } catch (e) { return hErr(e); }
+  },
+
+  hasCloudBackup: () => {
+    const meta = hermesLoadIdentityMeta();
+    return hOk({ hasCloudBackup: !!(meta && meta.cloudBackupAt), at: meta && meta.cloudBackupAt || null });
+  },
+
+  removeCloudBackup: async () => {
+    if (!hermesState) return hErr("not initialised");
+    const meta = hermesLoadIdentityMeta();
+    const evId = meta && meta.cloudBackupEventId;
+    if (!evId) {
+      hermesUpdateIdentityMeta({ cloudBackupAt: null, cloudBackupEventId: null });
+      return hOk({ deleted: false, note: "no tracked backup event; cleared local marker" });
+    }
+    try {
+      const H = await loadHermesLib();
+      const sk = Uint8Array.from(Buffer.from(hermesState.skHex, "hex"));
+      const retract = H.buildPhoneRetractEvent({ sk, eventIds: [evId] });
+      await hermesPublishEvent(retract, HERMES_DEFAULT_RELAYS);
+      hermesUpdateIdentityMeta({ cloudBackupAt: null, cloudBackupEventId: null });
+      return hOk({ deleted: true });
+    } catch (e) { return hErr(e); }
+  },
+
+  // Fetch + decrypt cloud backup for sign-in on a new device.
+  // Does NOT touch hermesState — the client calls init() with the returned
+  // mnemonic to actually sign in.
+  fetchCloudBackup: async ({ name, password } = {}) => {
+    if (!name || !password) return hErr("name and password required");
+    try {
+      const bareName = String(name).toLowerCase().split(".")[0].replace(/^hermes:/, "");
+      const nameHash = nodeCrypto.createHash("sha256").update(bareName, "utf8").digest("hex").slice(0, 32);
+      const dtag = "hermes.backup.v1/" + nameHash;
+      const found = await new Promise((resolve) => {
+        let best = null;
+        let pending = HERMES_DEFAULT_RELAYS.length;
+        const finish = () => resolve(best);
+        for (const url of HERMES_DEFAULT_RELAYS) {
+          const ws = new WebSocket(url);
+          const close = () => { try { ws.close(1000); } catch {}; if (--pending <= 0) finish(); };
+          const t = setTimeout(close, 5000);
+          ws.on("open", () => ws.send(JSON.stringify(["REQ", "b-" + Math.random().toString(36).slice(2, 8),
+            { kinds: [30078], "#d": [dtag], limit: 1 }])));
+          ws.on("message", (buf) => {
+            let msg; try { msg = JSON.parse(buf.toString()); } catch { return; }
+            if (msg[0] === "EVENT" && msg[2] && msg[2].kind === 30078) {
+              if (!best || msg[2].created_at > best.created_at) best = msg[2];
+            } else if (msg[0] === "EOSE") { clearTimeout(t); close(); }
+          });
+          ws.on("error", () => { clearTimeout(t); close(); });
+        }
+      });
+      if (!found) return hErr("no cloud backup found for \"" + name + "\"");
+      let payload;
+      try { payload = JSON.parse(found.content); } catch { return hErr("corrupt backup payload"); }
+      if (!payload || payload.v !== 1 || !payload.wrap) return hErr("unsupported backup version");
+      try {
+        const mnemonic = hermesUnwrapMnemonic(payload.wrap, password);
+        return hOk({ mnemonic, handle: payload.handle || null });
+      } catch { return hErr("wrong password"); }
+    } catch (e) { return hErr(e); }
+  },
+
   // ---- phone discovery (opt-in) --------------------------------------------
   // Publishes a kind:30078 claim event bound to a hash of the phone number,
   // signed by the user's Hermes key. The phone number itself is normalised