Soterios Credential Safety
+Configure breach monitoring and desktop integration
+ +
+
+
+ Breach Monitoring
+
+
+
+
+
+ Check passwords against Have I Been Pwned
+ Uses k-anonymity (only first 5 hash chars sent). Never sends full password.
+
+
+
+
+
+ Auto-check on password fields
+ Show breach indicator automatically when you enter a password
+
+
+
+
+
+ Show Soterios icon in password fields
+ Click to manually check any password
+
+
+
+ Desktop App Integration
+
+
+
+
+
+ Notify Soterios desktop app of leaks
+ Sends breach alerts to the desktop app via native messaging
+ Settings saved
+
+
+ Note: Desktop integration requires the Soterios native messaging host installed. The installer sets this up automatically. If desktop notifications don't work, reinstall Soterios or run
+
+
+
+
\ No newline at end of file
diff --git a/browser-extension/options.js b/browser-extension/options.js
new file mode 100644
index 0000000..562e5bc
--- /dev/null
+++ b/browser-extension/options.js
@@ -0,0 +1,50 @@
+const DEFAULTS = {
+ hibpEnabled: true,
+ autoCheck: true,
+ showIcon: true,
+ notifyDesktop: true
+};
+
+function loadSettings() {
+ chrome.storage.sync.get(DEFAULTS, settings => {
+ Object.keys(DEFAULTS).forEach(key => {
+ const el = document.getElementById(key);
+ if (el) el.setAttribute('aria-checked', settings[key]);
+ });
+ });
+}
+
+function saveSettings() {
+ const settings = {};
+ Object.keys(DEFAULTS).forEach(key => {
+ const el = document.getElementById(key);
+ if (el) settings[key] = el.getAttribute('aria-checked') === 'true';
+ });
+ chrome.storage.sync.set(settings, () => {
+ const msg = document.getElementById('savedMsg');
+ msg.classList.add('show');
+ setTimeout(() => msg.classList.remove('show'), 1500);
+ chrome.runtime.sendMessage({ type: 'SETTINGS_UPDATED', settings });
+ });
+}
+
+function setupToggles() {
+ document.querySelectorAll('.toggle').forEach(btn => {
+ btn.addEventListener('click', () => {
+ const checked = btn.getAttribute('aria-checked') === 'true';
+ btn.setAttribute('aria-checked', !checked);
+ saveSettings();
+ });
+ btn.addEventListener('keydown', e => {
+ if (e.key === ' ' || e.key === 'Enter') {
+ e.preventDefault();
+ btn.click();
+ }
+ });
+ });
+}
+
+document.addEventListener('DOMContentLoaded', () => {
+ loadSettings();
+ setupToggles();
+});
\ No newline at end of file
diff --git a/browser-extension/package.json b/browser-extension/package.json
new file mode 100644
index 0000000..5466349
--- /dev/null
+++ b/browser-extension/package.json
@@ -0,0 +1,14 @@
+{
+ "name": "soterios-browser-extension",
+ "version": "1.0.0",
+ "description": "Soterios Credential Safety Browser Extension",
+ "private": true,
+ "scripts": {
+ "build:icons": "node tools/build-icons.js",
+ "package": "npm run build:icons && cd browser-extension && zip -r ../soterios-extension.zip . -x '*.DS_Store' 'icons/*.svg' 'tools/*'",
+ "install:host": "node tools/install-native-host.js"
+ },
+ "devDependencies": {
+ "svgexport": "^0.4.2"
+ }
+}
\ No newline at end of file
diff --git a/browser-extension/popup.html b/browser-extension/popup.html
new file mode 100644
index 0000000..1ea5687
--- /dev/null
+++ b/browser-extension/popup.html
@@ -0,0 +1,63 @@
+
+
+
+
+
+
+
+ node tools/install-native-host.js as admin.
+
+ 
+
+
+
+ Soterios Credential Safety
+
+
+
+ Check a Password
+
+
+
+
+
+
+
+
+ Settings
+
+
+
+
\ No newline at end of file
diff --git a/browser-extension/popup.js b/browser-extension/popup.js
new file mode 100644
index 0000000..8400b6f
--- /dev/null
+++ b/browser-extension/popup.js
@@ -0,0 +1,85 @@
+const HIBP_API = 'https://api.pwnedpasswords.com/range/';
+
+async function sha1(str) {
+ const buf = new TextEncoder().encode(str);
+ const hash = await crypto.subtle.digest('SHA-1', buf);
+ return Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('').toUpperCase();
+}
+
+async function checkPwned(password) {
+ const hash = await sha1(password);
+ const prefix = hash.slice(0, 5);
+ const suffix = hash.slice(5);
+ const resp = await fetch(`${HIBP_API}${prefix}`);
+ const text = await resp.text();
+ const lines = text.trim().split('\n');
+ for (const line of lines) {
+ const [suf, count] = line.split(':');
+ if (suf === suffix) return parseInt(count, 10);
+ }
+ return 0;
+}
+
+function showResult(count) {
+ const result = document.getElementById('result');
+ if (count === 0) {
+ result.className = 'result safe';
+ result.innerHTML = `
+ Desktop App
+
+
+ Checking connection...
+
+ ✓ Not found in breaches
+ This password was not found in the HIBP database (${count} occurrences).
+ `;
+ } else {
+ result.className = 'result pwned';
+ result.innerHTML = `
+ ⚠ Found in ${count} breach${count > 1 ? 'es' : ''}
+ This password appears in known data breaches. Do not use it. Generate a new one in the Soterios app.
+ `;
+ }
+ result.style.display = 'block';
+}
+
+async function checkConnection() {
+ try {
+ const resp = await fetch('http://localhost:17234/api/health', { method: 'GET', timeout: 1000 });
+ if (resp.ok) {
+ document.getElementById('statusDot').classList.remove('offline');
+ document.getElementById('statusText').textContent = 'Soterios app connected';
+ } else throw new Error();
+ } catch {
+ document.getElementById('statusDot').classList.add('offline');
+ document.getElementById('statusText').textContent = 'Soterios app not running';
+ }
+}
+
+document.getElementById('checkBtn').addEventListener('click', async () => {
+ const input = document.getElementById('passwordInput');
+ const btn = document.getElementById('checkBtn');
+ const loader = document.getElementById('loader');
+ const pwd = input.value;
+
+ if (!pwd) return;
+
+ btn.disabled = true;
+ loader.classList.add('active');
+ document.getElementById('result').style.display = 'none';
+
+ try {
+ const count = await checkPwned(pwd);
+ showResult(count);
+ } catch (e) {
+ document.getElementById('result').className = 'result pwned';
+ document.getElementById('result').innerHTML = 'Error
Could not check password.
';
+ document.getElementById('result').style.display = 'block';
+ } finally {
+ btn.disabled = false;
+ loader.classList.remove('active');
+ }
+});
+
+document.getElementById('openOptions').addEventListener('click', (e) => {
+ e.preventDefault();
+ chrome.runtime.openOptionsPage();
+});
+
+checkConnection();
+setInterval(checkConnection, 30000);
\ No newline at end of file
diff --git a/src/main/ipcHandlers.js b/src/main/ipcHandlers.js
index 68cbfec..fb5e891 100644
--- a/src/main/ipcHandlers.js
+++ b/src/main/ipcHandlers.js
@@ -766,6 +766,23 @@ function registerIpcHandlers(mainWindow, services) {
return { found: count > 0, count };
});
+ ipcMain.handle('credential-leak:notify', async (_event, payload) => {
+ if (!payload?.password) return { ok: false, error: 'Missing password' };
+ const sha = crypto.createHash('sha1').update(payload.password).digest('hex').toUpperCase();
+ const alert = {
+ level: 'danger',
+ source: 'Browser Extension',
+ title: 'Credential Leak Detected',
+ message: `Password found in ${payload.count} breach${payload.count > 1 ? 'es' : ''} via browser extension`,
+ detail: `SHA-1 prefix: ${sha.slice(0, 5)}... | Breaches: ${payload.count}`,
+ timestamp: new Date().toISOString(),
+ metadata: { source: 'browser-extension', hashPrefix: sha.slice(0, 5), count: payload.count }
+ };
+ db.addAlert(alert);
+ if (services.eventBus) services.eventBus.emit('alert:new', alert);
+ return { ok: true };
+ });
+
ipcMain.handle('xon:email', async (_event, email) => {
if (!email) return { found: false, breaches: [] };
if (!db.getSetting('feature.externalLookups', true)) throw new Error('External lookups are disabled in Settings.');
diff --git a/src/main/main.js b/src/main/main.js
index 35f7826..b425bd8 100644
--- a/src/main/main.js
+++ b/src/main/main.js
@@ -580,7 +580,27 @@ function buildAppMenu() {
app.setAppUserModelId('com.soterios.app');
+const gotTheLock = app.requestSingleInstanceLock();
+if (!gotTheLock) {
+ app.quit();
+ process.exit(0);
+}
+
+app.on('second-instance', (_event, commandLine) => {
+ if (mainWindow) {
+ if (mainWindow.isMinimized()) mainWindow.restore();
+ mainWindow.focus();
+ const url = commandLine.find(arg => arg.startsWith('soterios://'));
+ if (url) mainWindow.webContents.send('protocol-url', url);
+ }
+});
+
app.whenReady().then(async () => {
+ // Register custom protocol for browser extension communication
+ if (process.platform === 'win32') {
+ app.setAsDefaultProtocolClient('soterios');
+ }
+
const dbPath = path.join(app.getPath('userData'), 'soterios.db');
// File logging is opt-in via SOTERIOS_LOG_FILE (path or "1" for the default log file).
const logConfig = { level: process.env.SOTERIOS_LOG_LEVEL || 'info' };
diff --git a/tools/build-icons.js b/tools/build-icons.js
new file mode 100644
index 0000000..35cea89
--- /dev/null
+++ b/tools/build-icons.js
@@ -0,0 +1,22 @@
+const { execSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+
+const sizes = [16, 32, 48, 128];
+const svgPath = path.join(__dirname, '../browser-extension/icons/icon.svg');
+const iconsDir = path.join(__dirname, '../browser-extension/icons');
+
+if (!fs.existsSync(svgPath)) {
+ console.error('icon.svg not found');
+ process.exit(1);
+}
+
+for (const size of sizes) {
+ const outPath = path.join(iconsDir, `icon${size}.png`);
+ try {
+ execSync(`npx -y svgexport "${svgPath}" "${outPath}" ${size}:${size}`, { stdio: 'inherit' });
+ console.log(`Generated ${outPath}`);
+ } catch (e) {
+ console.error(`Failed to generate ${size}px icon:`, e.message);
+ }
+}
\ No newline at end of file
diff --git a/tools/install-native-host.js b/tools/install-native-host.js
new file mode 100644
index 0000000..d55afee
--- /dev/null
+++ b/tools/install-native-host.js
@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+/**
+ * Install Soterios Native Messaging Host
+ * Run as Administrator on Windows
+ */
+
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+
+const EXTENSION_ID = process.env.EXTENSION_ID || 'YOUR_EXTENSION_ID_HERE';
+const IS_WIN = process.platform === 'win32';
+
+function main() {
+ const extDir = path.resolve(__dirname, '..', 'browser-extension');
+ const manifestPath = path.join(extDir, 'native-host-manifest.json');
+ const batPath = path.join(extDir, 'native-host.bat');
+ const jsPath = path.join(extDir, 'native-host.js');
+
+ if (!fs.existsSync(manifestPath) || !fs.existsSync(batPath) || !fs.existsSync(jsPath)) {
+ console.error('Extension files not found. Run from project root.');
+ process.exit(1);
+ }
+
+ let manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+ manifest.allowed_origins = [manifest.allowed_origins[0].replace('
+
+
+
+
+
+ ${escapeHtml(t('settings.networkPerimeterMap.label'))}
+ ${escapeHtml(t('settings.networkPerimeterMap.desc'))}
+
+
@@ -384,6 +399,33 @@ window.Pages.settings = {
container.querySelector('#externalLookupsToggle').addEventListener('change', (event) => saveFeature('externalLookups', event.target.checked, event.target));
container.querySelector('#geoLookupToggle').addEventListener('change', (event) => saveFeature('geoLookup', event.target.checked, event.target));
container.querySelector('#networkPerimeterMapToggle').addEventListener('change', (event) => saveFeature('networkPerimeterMap', event.target.checked, event.target));
+ container.querySelector('#browserExtensionToggle').addEventListener('change', async (event) => {
+ const checked = event.target.checked;
+ const statusEl = container.querySelector('#featureToggleStatus');
+ statusEl.textContent = '';
+ event.target.disabled = true;
+ try {
+ await Api.updateSettings({ features: { browserExtension: checked } });
+ if (checked) {
+ statusEl.textContent = t('settings.browserExtension.installing');
+ const result = await window.api.invoke('browserExtension:installNativeHost');
+ if (result.ok) {
+ statusEl.textContent = t('settings.browserExtension.installed');
+ } else {
+ event.target.checked = false;
+ await Api.updateSettings({ features: { browserExtension: false } });
+ statusEl.textContent = result.error || t('settings.browserExtension.installFailed');
+ }
+ } else {
+ statusEl.textContent = t('settings.featureSaved');
+ }
+ } catch (err) {
+ event.target.checked = !checked;
+ statusEl.textContent = err.message || String(err);
+ } finally {
+ event.target.disabled = false;
+ }
+ });
container.querySelector('#notificationsToggle').addEventListener('change', async (event) => {
const checked = event.target.checked;
const statusEl = container.querySelector('#notificationStatus');
From 4fe4ec22e2b5428d7aef3157892e745e94220647 Mon Sep 17 00:00:00 2001
From: Chris <185133702+chrisriv10@users.noreply.github.com>
Date: Tue, 21 Jul 2026 19:17:12 -0500
Subject: [PATCH 3/8] Enhance tray dashboard: health score, RTP status, quick
scan, network sparkline
- healthSummary.js: Return RTP, firewall, network stats, last scan
- trayDashboard.html: Health score badge, RTP indicator, sparkline, quick scan button
- trayDashboard.js: Already passes enhanced summary
---
src/main/healthSummary.js | 50 +++++++-
src/ui/pages/trayDashboard.html | 208 +++++++++++++++++++++++++++++---
src/ui/pages/trayDashboard.js | 166 +++++++++++++++++++++++++
3 files changed, 406 insertions(+), 18 deletions(-)
create mode 100644 src/ui/pages/trayDashboard.js
diff --git a/src/main/healthSummary.js b/src/main/healthSummary.js
index df30525..ad64678 100644
--- a/src/main/healthSummary.js
+++ b/src/main/healthSummary.js
@@ -19,10 +19,56 @@ async function getTrayHealthSummary(db, toolRegistry) {
}
const disk = result.data.breakdown?.disk;
+
+ // RTP status
+ let rtp = { enabled: false };
+ try {
+ const { RealTimeWatcher } = require('../security/RealTimeWatcher');
+ // Check if RTP is enabled in settings
+ const rtpEnabled = db.getSetting('feature.realtimeProtection', false);
+ rtp = { enabled: rtpEnabled };
+ } catch (_) {}
+
+ // Firewall status
+ let firewall = { active: false };
+ try {
+ const { execFile } = require('child_process');
+ const { promisify } = require('util');
+ const execFileAsync = promisify(execFile);
+ const { stdout } = await execFileAsync('netsh', ['advfirewall', 'show', 'allprofiles', 'state'], { timeout: 5000 });
+ firewall = { active: /ON|ENABLED/i.test(stdout) };
+ } catch (_) {}
+
+ // Network traffic history (last 24h)
+ let network = { rxKBs: 0, txKBs: 0, history: [] };
+ try {
+ const history = db.getNetworkHistory ? db.getNetworkHistory(24 * 60) : []; // last 24h, 1 sample per min
+ if (history.length) {
+ const latest = history[history.length - 1];
+ network.rxKBs = Math.round((latest.rx_bytes || 0) / 1024);
+ network.txKBs = Math.round((latest.tx_bytes || 0) / 1024);
+ network.history = history.slice(-60).map(h => (h.tx_bytes + h.rx_bytes) / 1024); // last 60 samples for sparkline
+ }
+ } catch (_) {}
+
+ // Last scan info
+ let lastScan = null;
+ if (latest) {
+ lastScan = {
+ timestamp: latest.timestamp,
+ filesScanned: latest.files_scanned,
+ threatsFound: latest.threats_found
+ };
+ }
+
return {
score: result.data.score,
- detail: disk?.reason || 'Protection and resource summary ready.'
+ detail: disk?.reason || 'Protection and resource summary ready.',
+ rtp,
+ firewall,
+ network,
+ lastScan
};
}
-module.exports = { getTrayHealthSummary };
+module.exports = { getTrayHealthSummary };
\ No newline at end of file
diff --git a/src/ui/pages/trayDashboard.html b/src/ui/pages/trayDashboard.html
index e4b198c..1a6e3e0 100644
--- a/src/ui/pages/trayDashboard.html
+++ b/src/ui/pages/trayDashboard.html
@@ -11,6 +11,13 @@
--text: #f2f5f8;
--muted: #aab4bf;
--accent: #58a6ff;
+ --accent-bg: rgba(88,166,255,0.15);
+ --danger: #f85149;
+ --danger-bg: rgba(248,81,73,0.15);
+ --ok: #3fb950;
+ --ok-bg: rgba(63,185,80,0.15);
+ --spark-rx: #58a6ff;
+ --spark-tx: #f85149;
}
html, body {
margin: 0;
@@ -27,15 +34,46 @@
box-shadow: 0 12px 32px rgba(0,0,0,0.35);
color: var(--text);
}
- .title { font-size: 14px; font-weight: 700; margin-bottom: 4px; }
+ .header { display: flex; align-items: center; justify-content: space-between; margin-bottom: 8px; }
+ .title { font-size: 14px; font-weight: 700; }
+ .status-badge {
+ display: inline-flex;
+ align-items: center;
+ gap: 4px;
+ padding: 2px 8px;
+ border-radius: 999px;
+ font-size: 11px;
+ font-weight: 600;
+ }
+ .status-badge.active { background: var(--ok-bg); color: #3fb950; }
+ .status-badge.inactive { background: var(--danger-bg); color: #f85149; }
+ .status-dot {
+ width: 6px; height: 6px; border-radius: 50%;
+ background: currentColor;
+ }
+ .score-row { display: flex; align-items: baseline; gap: 12px; margin: 8px 0 4px; }
.score {
font-size: 42px;
font-weight: 700;
color: var(--accent);
line-height: 1;
+ }
+ .score-detail { font-size: 12px; color: var(--muted); line-height: 1.5; }
+ .rtp-row { display: flex; align-items: center; gap: 8px; padding: 8px 0; border-top: 1px solid var(--border); }
+ .rtp-label { font-size: 12px; color: var(--muted); flex: 1; }
+ .sparkline {
+ height: 40px;
margin: 8px 0;
+ position: relative;
+ }
+ .sparkline canvas { width: 100%; height: 100%; }
+ .sparkline-labels {
+ display: flex;
+ justify-content: space-between;
+ font-size: 9px;
+ color: var(--muted);
+ margin-top: 2px;
}
- .meta { font-size: 12px; color: var(--muted); line-height: 1.5; }
.actions { display: flex; gap: 8px; margin-top: 14px; }
button {
flex: 1;
@@ -46,40 +84,178 @@
padding: 8px 10px;
font-size: 12px;
cursor: pointer;
+ transition: background 0.15s, border-color 0.15s;
}
+ button:hover { background: rgba(255,255,255,0.08); }
button.primary {
background: var(--accent);
border-color: transparent;
color: #0b0e14;
font-weight: 600;
}
+ button.primary:hover { background: #4a9eff; }
+ button.secondary:hover { background: var(--danger-bg); border-color: var(--danger); color: var(--danger); }
+
+
+ ${escapeHtml(t('settings.browserExtension.label'))}
+ ${escapeHtml(t('settings.browserExtension.desc'))}
+
-
+
-System Health
- --
-
+
+
+
+ System Health
+
+
+ RTP
+
+
+
+ --
+ Loading summary...
+
+
+ Network
+
+
+
+
+
+ 0 KB/s
+ 0 KB/s
+
+
-
-
+
+
+