File size: 2,325 Bytes
5831249
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
# Black Dragon AI - App Details

## Name

Black Dragon AI

## Creator

Sir Roky

## Type

Local AI web app with Python backend and browser frontend.

## Current Local URL

```text
http://127.0.0.1:8787/
```

## Main Features

- Backend AI chat through backend-only API key
- Persistent backend memory
- Memory mode with view/save/clear controls
- Automatic simple personal-fact memory for clear user statements
- Creator identity lock
- Safe PC assistant
- Microsoft Defender scan integration
- Suspicious-file fallback scanner
- Voice input and voice output
- Live talk mode
- File/image attachment flow
- Scan-before-accept upload flow for text, image, and binary files
- Browser image lookup
- Browser/web app shortcuts
- Air Draw 2D-to-3D preview
- Notes section with typed notes and mouse/finger drawing notes
- Gaming Zone
- RAG-style text ingestion and search
- Compliance-style hash logs
- Prompt-injection firewall
- PII masking
- Feature registry for enterprise roadmap

## Backend Files

```text
backend/server.py
backend_data/black_dragon.db
backend_data/secrets.json
```

## Frontend File

```text
index.html
```

## Security Rules

- API key stays in backend only.
- Frontend has no API-key box.
- Terms and Privacy acceptance is required before interactive/sensitive actions.
- Dangerous PC commands are blocked.
- Uploaded files are scanned before being accepted.
- Notes are stored in the backend database.
- Browser image results are third-party/browser sourced.
- Every backend chat is mirrored to `%TEMP%\BlackDragonChats\`.
- The app requires the backend to be running; the frontend does not contain the API key.

## Known Production Notes

For a true public production deployment:

- move secrets to environment variables or a managed secret store,
- use HTTPS,
- configure authentication,
- configure a proper grievance/contact process,
- review Terms and Privacy Policy with a lawyer,
- deploy backend on a trusted server,
- add monitoring and backup,
- do not expose local PC-control endpoints publicly without authentication.

## APK Note

An APK wrapper can open the backend URL, but the backend must run on a reachable machine. For production phone use, deploy the backend as a public HTTPS server and rebuild the APK with that HTTPS URL. For local testing only, use the PC LAN IP or hotspot URL.