5 Commits

Include renames

Author	SHA1	Message	Date
samiandClaude Opus 5.5	86c21f3bff	Removed devices: reset the device key and id in place, then set up again ... DeviceKey implements kv-ffi's DeviceSigner.reset(): it deletes the key material (TPM key, DPAPI file, Secret Service / keychain entry, or key file) and the device-id and store files, then creates a new key with a new id in the best store available. The core calls it on device_revoked and retries a setup code's ticket once, so a fresh Add-a-device code signs a removed computer straight in. DeviceRevoked explains how to set it up again; the fingerprint shown refreshes. Removing a device warns that it must be set up again as a new one. Test: end to end through kv-sync's test server (new dev-dependency). The Windows TPM/DPAPI paths could not be compiled here (no Windows SDK for ring). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-20 22:35:13 +09:00
samiandClaude Opus 5.5	c4a677fc3d	Title bar in bg on Windows: theme colours on the native caption ... Tauri 2 overlays web content on the title bar only on macOS, so Windows and Linux keep the native title bar and window controls. On Windows 11 the caption, title and border now take the theme's bg and text (DWM), re-applied on every theme change and when the OS setting changes under "System", so the caption and the app header read as one custom title bar. Linux (GTK) keeps its own colours. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-20 21:36:31 +09:00
samiandClaude Opus 5.5	e19370f261	Sync with the server and scan-to-join onboarding ... - Device key (DeviceSigner): Windows TPM via CNG with a DPAPI-sealed software fallback, Linux Secret Service with a 0600 file fallback (warned in Settings), macOS keychain for dev runs. The store used is recorded; no silent switching. - SyncService (Tauri-free): server URL and pins, create account with the server's setup code, sync after unlock/save/browser save, every 15 min while unlocked and on demand, status events, integrity alarm, device list with fingerprint approval and revoke. - Onboarding: "Use my phone" (join_start/poll, QR rendered locally, 6-digit code), Emergency Kit from PDF/PNG/JPEG (hayro + rqrr), paste setup code, new account. Then only the master password. - From a signed-in desktop: "Add a phone or tablet" QR with countdown (cancel, lock and quit revoke the ticket) and "Approve a computer" via pasted join code. - KESTROVE_DATA_DIR / KESTROVE_DEVICE_NAME for a second instance; ignored live test drives three instances against a real server. - deny: ignore three unmaintained notices for zbus 5 sub-crates (Linux keyring). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-18 07:51:06 +09:00
samiandClaude Opus 5.5	923c466dea	M3: working desktop app + browser pairing channel ... - Builds and runs (tauri build --debug); placeholder icons; persistent VaultCore::open in the OS app-data dir; Secret Key remembered on the device; tray keeps the app serving the extension. - Auto-lock: idle (system idle on Windows/macOS, in-app activity on Linux), screen lock, sleep. - Local IPC for kestrove-nmh: 0700 dir + 0600 Unix socket with peer-uid checks; Windows named pipe (first instance, local only, user DACL, client SID check) behind cfg. - Pairing channel: X25519 → HKDF → 6-word fingerprint confirmed in both UIs, per-connection session keys, AES-256-GCM with strict counters. Test vectors shared with kestrove-browser. - Broker: query/fill/totp/save with origin re-checks; pairing and save prompts in the UI. - kestrove-nmh relays ciphertext only; native-host installers for Linux/macOS/Windows. - Tests: unit tests, tests/nmh_stdio.rs (real kestrove-nmh over stdio), examples/test-host. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-16 20:13:54 +09:00
samiandClaude Opus 5.5	d2cbd56ff7	Initial scaffold for kestrove-desktop ... Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-15 18:30:14 +09:00