4 Commits

Include renames

Author	SHA1	Message	Date
samiandClaude Opus 5.5	cf61f385d3	src-tauri: follow kv-ffi to uniffi 0.32.2; drop the bincode and paste deny ignores ... uniffi 0.32 drops bincode (RUSTSEC-2025-0141) and paste (RUSTSEC-2024-0436). The basic-toml ignore (RUSTSEC-2026-0374) stays: askama_derive 0.16 in uniffi_bindgen 0.32 still depends on it. No source changes needed. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-20 23:25:22 +09:00
samiandClaude Opus 5.5	27294e338c	deny: ignore RUSTSEC-2026-0374 (basic-toml unmaintained, build-time via uniffi_bindgen) ... No known vulnerability and no safe upgrade; only askama_derive 0.12 in uniffi_bindgen 0.28's code generator uses it. Goes away with a uniffi upgrade. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-20 22:42:24 +09:00
samiandClaude Opus 5.5	e19370f261	Sync with the server and scan-to-join onboarding ... - Device key (DeviceSigner): Windows TPM via CNG with a DPAPI-sealed software fallback, Linux Secret Service with a 0600 file fallback (warned in Settings), macOS keychain for dev runs. The store used is recorded; no silent switching. - SyncService (Tauri-free): server URL and pins, create account with the server's setup code, sync after unlock/save/browser save, every 15 min while unlocked and on demand, status events, integrity alarm, device list with fingerprint approval and revoke. - Onboarding: "Use my phone" (join_start/poll, QR rendered locally, 6-digit code), Emergency Kit from PDF/PNG/JPEG (hayro + rqrr), paste setup code, new account. Then only the master password. - From a signed-in desktop: "Add a phone or tablet" QR with countdown (cancel, lock and quit revoke the ticket) and "Approve a computer" via pasted join code. - KESTROVE_DATA_DIR / KESTROVE_DEVICE_NAME for a second instance; ignored live test drives three instances against a real server. - deny: ignore three unmaintained notices for zbus 5 sub-crates (Linux keyring). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-18 07:51:06 +09:00
samiandClaude Opus 5.5	62f2dc3dca	CI: valid YAML, pinned actions, fmt, cargo deny and npm audit ... The old workflow was invalid YAML (unquoted ${{ }} in a flow mapping) and never ran. deny.toml: allows BSL-1.0 (arboard's Windows deps) and CDLA-Permissive-2.0 (webpki-roots); ignores three unmaintained-crate notices for build-time proc-macros (uniffi 0.28, glib-macros 0.18) that need upstream upgrades. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-17 00:53:36 +09:00