Bundle encrypted exports as .zip with decryption tool and README for future-proof access

Author: BSVanon

web/package-lock.json

@@ -24,6 +24,7 @@
     "bs58check": "^3.0.1",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "jszip": "^3.10.1",
     "lucide-react": "^0.553.0",
     "next": "^16.0.7",
     "react": "19.2.0",

web/package.json

@@ -16,6 +16,7 @@ import type { UtxoDossier, ProofArchive } from "@/core/dossier/types";
 import { getHeaderByHeight } from "@/core/headers/store";
 import { Beef } from "@bsv/sdk";
 import { Label } from "@/components/ui/label";
+import JSZip from "jszip";
 
 type SortOption = "newest" | "oldest" | "value-high" | "value-low" | "label-asc" | "label-desc";
 
@@ -313,8 +314,38 @@ export default function DossiersPage() {
         result.set(iv, salt.length);
         result.set(new Uint8Array(encrypted_data), salt.length + iv.length);
 
-        blob = new Blob([result], { type: "application/octet-stream" });
-        filename = `chronicle-utxos-${selected.size}-${new Date().toISOString().slice(0, 10)}.enc`;
+        // Create zip with encrypted file + decryption tool
+        const zip = new JSZip();
+        const baseName = `chronicle-utxos-${selected.size}-${new Date().toISOString().slice(0, 10)}`;
+        zip.file(`${baseName}.enc`, result);
+        
+        // Fetch and include the decryption tool
+        const decryptToolResponse = await fetch("/decrypt-tool.html");
+        const decryptToolHtml = await decryptToolResponse.text();
+        zip.file("decrypt-tool.html", decryptToolHtml);
+        
+        // Add a README
+        zip.file("README.txt", `Chronicle Cold Vault - Encrypted Export
+========================================
+
+This archive contains:
+- ${baseName}.enc - Your encrypted UTXO data
+- decrypt-tool.html - Standalone decryption tool
+
+To decrypt:
+1. Open decrypt-tool.html in any modern web browser
+2. Select the .enc file
+3. Enter your passphrase
+4. Download the decrypted JSON
+
+Encryption: AES-256-GCM with PBKDF2 (100,000 iterations, SHA-256)
+
+Exported: ${new Date().toISOString()}
+UTXOs: ${selected.size}
+`);
+        
+        blob = await zip.generateAsync({ type: "blob" });
+        filename = `${baseName}-encrypted.zip`;
       } else {
         blob = new Blob([json], { type: "application/json" });
         filename = `chronicle-utxos-${selected.size}-${new Date().toISOString().slice(0, 10)}.json`;
@@ -385,15 +416,7 @@ export default function DossiersPage() {
                     autoComplete="new-password"
                   />
                   <p className="text-xs text-muted-foreground">
-                    💡 Save the{" "}
-                    <a 
-                      href="/decrypt-tool.html" 
-                      target="_blank" 
-                      className="text-primary underline"
-                    >
-                      standalone decryption tool
-                    </a>{" "}
-                    alongside your encrypted backup for future access without Chronicle.
+                    � Encrypted exports include a standalone decryption tool in the .zip for future-proof access.
                   </p>
                 </div>
               )}

web/src/app/dossiers/page.tsx

@@ -15,6 +15,7 @@ import { useHeaderStore } from "@/contexts/header-store-context";
 import { exportHeaderStore, importHeaderStore } from "@/core/headers/store";
 import { markExportPerformed, saveDossiersBatch } from "@/core/dossier/store";
 import type { UtxoDossier, ProofArchive, Bucket } from "@/core/dossier/types";
+import JSZip from "jszip";
 
 type ArchiveData = {
   version: number;
@@ -147,17 +148,48 @@ export default function ExportPage() {
       result.set(iv, salt.length);
       result.set(new Uint8Array(encrypted), salt.length + iv.length);
 
-      const blob = new Blob([result], { type: "application/octet-stream" });
+      // Create zip with encrypted file + decryption tool
+      const zip = new JSZip();
+      const baseName = `chronicle-archive-${new Date().toISOString().slice(0, 10)}`;
+      zip.file(`${baseName}.enc`, result);
+      
+      // Fetch and include the decryption tool
+      const decryptToolResponse = await fetch("/decrypt-tool.html");
+      const decryptToolHtml = await decryptToolResponse.text();
+      zip.file("decrypt-tool.html", decryptToolHtml);
+      
+      // Add a README
+      zip.file("README.txt", `Chronicle Cold Vault - Encrypted Full Backup
+=============================================
+
+This archive contains:
+- ${baseName}.enc - Your encrypted Chronicle data (dossiers, BEEF proofs, headers)
+- decrypt-tool.html - Standalone decryption tool
+
+To decrypt:
+1. Open decrypt-tool.html in any modern web browser
+2. Select the .enc file
+3. Enter your passphrase
+4. Download the decrypted JSON
+
+Encryption: AES-256-GCM with PBKDF2 (100,000 iterations, SHA-256)
+
+Exported: ${new Date().toISOString()}
+Dossiers: ${dossiers.length}
+BEEF Archives: ${archives.length}
+`);
+
+      const blob = await zip.generateAsync({ type: "blob" });
       const url = URL.createObjectURL(blob);
       const a = document.createElement("a");
       a.href = url;
-      a.download = `chronicle-archive-${new Date().toISOString().slice(0, 10)}.enc`;
+      a.download = `${baseName}-encrypted.zip`;
       a.click();
       URL.revokeObjectURL(url);
 
       // Mark export performed for reminder tracking
       markExportPerformed(dossiers.length);
-      setStatus("Encrypted archive exported successfully.");
+      setStatus("Encrypted archive exported successfully (zip with decryption tool).");
       setPassphrase("");
     } catch (e) {
       setStatus(`Encryption error: ${e instanceof Error ? e.message : "Unknown"}`);
@@ -434,6 +466,13 @@ export default function ExportPage() {
             )}
           </div>
           <Button onClick={handleExportEncrypted}>Export Encrypted</Button>
+          <p className="text-xs text-muted-foreground">
+            📦 Encrypted exports are bundled as a .zip with a standalone{" "}
+            <a href="/decrypt-tool.html" target="_blank" className="text-primary underline">
+              decryption tool
+            </a>{" "}
+            for future-proof access without Chronicle.
+          </p>
         </CardContent>
       </Card>