Skip to content

Fix #1431 browser crypto boundary regression - #1432

Merged
BryanHarrisScripts merged 3 commits into
mainfrom
fix/1431-client-crypto-boundary
Aug 25, 2026
Merged

BryanHarrisScripts merged 3 commits into
mainfrom
fix/1431-client-crypto-boundary

Conversation

@BryanHarrisScripts

Copy link
Copy Markdown
Owner

Summary

Hotfix the real-machine regression found immediately after #1431 merged.

The new Foundations BUZZ Story Test client imported the Story Bridge adapter, which imported the Story Bridge core, which imported the Nostr signature verifier and node:crypto. Vite externalized node:crypto for browser compatibility and the PlotPickle login/runtime crashed before the user could reach the live test.

This fix:

  • removes Story Bridge request preparation from the client component;
  • adds a bounded localhost-only prepare action to the existing Story Bridge server gateway;
  • keeps Nostr/signature verification and Story Bridge request preparation server-side;
  • preserves the exact Add one-click BUZZ Story Bridge live proof #1431 live proof sequence and no-canon-write contract;
  • adds a regression guard that fails if the client live-test component references prepareStoryBridgeRequest, nostr-event-verification, or node:crypto again.

Relates to #1422 and repairs #1431. Do not close #1422 until the real Afterglow/Tamsin live test passes on Windows.

@BryanHarrisScripts
BryanHarrisScripts merged commit 9a18e6a into main Aug 25, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Phase 3 - Complete signed PlotPickle ↔ BUZZ Story Bridge exit proof

1 participant