4 Commits

Include renames

Author	SHA1	Message	Date
samiandClaude Opus 5.5	86c21f3bff	Removed devices: reset the device key and id in place, then set up again ... DeviceKey implements kv-ffi's DeviceSigner.reset(): it deletes the key material (TPM key, DPAPI file, Secret Service / keychain entry, or key file) and the device-id and store files, then creates a new key with a new id in the best store available. The core calls it on device_revoked and retries a setup code's ticket once, so a fresh Add-a-device code signs a removed computer straight in. DeviceRevoked explains how to set it up again; the fingerprint shown refreshes. Removing a device warns that it must be set up again as a new one. Test: end to end through kv-sync's test server (new dev-dependency). The Windows TPM/DPAPI paths could not be compiled here (no Windows SDK for ring). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-20 22:35:13 +09:00
samiandClaude Opus 5.5	e19370f261	Sync with the server and scan-to-join onboarding ... - Device key (DeviceSigner): Windows TPM via CNG with a DPAPI-sealed software fallback, Linux Secret Service with a 0600 file fallback (warned in Settings), macOS keychain for dev runs. The store used is recorded; no silent switching. - SyncService (Tauri-free): server URL and pins, create account with the server's setup code, sync after unlock/save/browser save, every 15 min while unlocked and on demand, status events, integrity alarm, device list with fingerprint approval and revoke. - Onboarding: "Use my phone" (join_start/poll, QR rendered locally, 6-digit code), Emergency Kit from PDF/PNG/JPEG (hayro + rqrr), paste setup code, new account. Then only the master password. - From a signed-in desktop: "Add a phone or tablet" QR with countdown (cancel, lock and quit revoke the ticket) and "Approve a computer" via pasted join code. - KESTROVE_DATA_DIR / KESTROVE_DEVICE_NAME for a second instance; ignored live test drives three instances against a real server. - deny: ignore three unmaintained notices for zbus 5 sub-crates (Linux keyring). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-18 07:51:06 +09:00
samiandClaude Opus 5.5	7701b65087	Update Cargo.lock for core passkey and import dependencies ... Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-17 08:23:40 +09:00
samiandClaude Opus 5.5	923c466dea	M3: working desktop app + browser pairing channel ... - Builds and runs (tauri build --debug); placeholder icons; persistent VaultCore::open in the OS app-data dir; Secret Key remembered on the device; tray keeps the app serving the extension. - Auto-lock: idle (system idle on Windows/macOS, in-app activity on Linux), screen lock, sleep. - Local IPC for kestrove-nmh: 0700 dir + 0600 Unix socket with peer-uid checks; Windows named pipe (first instance, local only, user DACL, client SID check) behind cfg. - Pairing channel: X25519 → HKDF → 6-word fingerprint confirmed in both UIs, per-connection session keys, AES-256-GCM with strict counters. Test vectors shared with kestrove-browser. - Broker: query/fill/totp/save with origin re-checks; pairing and save prompts in the UI. - kestrove-nmh relays ciphertext only; native-host installers for Linux/macOS/Windows. - Tests: unit tests, tests/nmh_stdio.rs (real kestrove-nmh over stdio), examples/test-host. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-16 20:13:54 +09:00