M1: persistent vault, local unlock key, sync client, test vectors

kv-store: SQLite (bundled) and in-memory Store holding only ciphertext envelopes, with base copies for three-way merges and a 10-version history. kv-ffi: VaultCore::open(path); persisted account record; local unlock key (enable/unlock_with_local_key/disable); async sync API (configure_server, set_device_signer, register_account, login, sync_now, logout, devices); DeviceSigner foreign trait; IntegrityAlarm/PinMismatch/... error variants. kv-sync: reqwest + rustls (TLS 1.3 only, ring) with SPKI pinning; OPAQUE client on kv-proto's OpaqueSuite; RFC 9421 signing per kv_proto::httpsig; pull/push with If-Match, field-level three-way merge, edit-beats-delete; signed manifest (canonical CBOR, Merkle root, prev chain, Ed25519) with rollback/fork/Merkle checks as hard integrity alarms. Tested against a wiremock fake server, plus an #[ignore] test against kestrove-server. kv-crypto: gen-vectors example and tests reproducing kestrove-spec/vectors. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-15 21:52:14 +09:00
parent cbef689903
commit 2be9a3baad
35 changed files with 6832 additions and 183 deletions
@@ -0,0 +1,80 @@
+{
+  "description": "Autofill URL matching (docs/05): exact > host > domain (eTLD+1 via the PSL) > none. http items may match https pages, never the reverse.",
+  "vectors": [
+    {
+      "item_url": "https://example.com",
+      "level": "exact",
+      "page_url": "https://example.com/login"
+    },
+    {
+      "item_url": "example.com",
+      "level": "exact",
+      "page_url": "https://example.com/"
+    },
+    {
+      "item_url": "https://example.com:8443",
+      "level": "host",
+      "page_url": "https://example.com"
+    },
+    {
+      "item_url": "https://example.com",
+      "level": "domain",
+      "page_url": "https://login.example.com"
+    },
+    {
+      "item_url": "https://login.example.com",
+      "level": "domain",
+      "page_url": "https://example.com"
+    },
+    {
+      "item_url": "https://a.github.io",
+      "level": "none",
+      "page_url": "https://b.github.io"
+    },
+    {
+      "item_url": "https://example.com",
+      "level": "none",
+      "page_url": "https://example.com.evil.net"
+    },
+    {
+      "item_url": "https://example.com",
+      "level": "none",
+      "page_url": "http://example.com"
+    },
+    {
+      "item_url": "http://example.com",
+      "level": "host",
+      "page_url": "https://example.com"
+    },
+    {
+      "item_url": "https://example.co.uk",
+      "level": "none",
+      "page_url": "https://other.co.uk"
+    },
+    {
+      "item_url": "https://shop.example.co.uk",
+      "level": "domain",
+      "page_url": "https://www.example.co.uk/cart"
+    },
+    {
+      "item_url": "https://EXAMPLE.com",
+      "level": "exact",
+      "page_url": "https://example.COM/"
+    },
+    {
+      "item_url": "https://192.168.1.10:8080",
+      "level": "exact",
+      "page_url": "https://192.168.1.10:8080/admin"
+    },
+    {
+      "item_url": "not a url",
+      "level": "none",
+      "page_url": "https://example.com"
+    },
+    {
+      "item_url": "ftp://example.com",
+      "level": "none",
+      "page_url": "https://example.com"
+    }
+  ]
+}