5 Commits

Include renames

Author	SHA1	Message	Date
samiandClaude Opus 5.5	a8f56ee00f	Sign in with Google, Apple…: remember prompt, item row, new-login picker ... Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-24 15:29:50 +07:00
samiandClaude Opus 5.5	6f06b1e631	Approve sites' passkey requests from the browser extension ... The app comes forward with a prompt to sign in with or save a passkey, confirmed with the master password (the user verification each use needs). Asked while locked: unlock, then it continues. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-24 15:02:10 +07:00
samiandClaude Opus 5.5	b1c98f6376	Multi-user servers: email and invite codes at sign-up and sign-in ... Create account takes an email and an invite or setup code (none with open sign-up), joins servers that already have accounts, and Settings shows the account email (admins manage people from the web vault). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-24 07:52:08 +07:00
samiandClaude Opus 5.5	e19370f261	Sync with the server and scan-to-join onboarding ... - Device key (DeviceSigner): Windows TPM via CNG with a DPAPI-sealed software fallback, Linux Secret Service with a 0600 file fallback (warned in Settings), macOS keychain for dev runs. The store used is recorded; no silent switching. - SyncService (Tauri-free): server URL and pins, create account with the server's setup code, sync after unlock/save/browser save, every 15 min while unlocked and on demand, status events, integrity alarm, device list with fingerprint approval and revoke. - Onboarding: "Use my phone" (join_start/poll, QR rendered locally, 6-digit code), Emergency Kit from PDF/PNG/JPEG (hayro + rqrr), paste setup code, new account. Then only the master password. - From a signed-in desktop: "Add a phone or tablet" QR with countdown (cancel, lock and quit revoke the ticket) and "Approve a computer" via pasted join code. - KESTROVE_DATA_DIR / KESTROVE_DEVICE_NAME for a second instance; ignored live test drives three instances against a real server. - deny: ignore three unmaintained notices for zbus 5 sub-crates (Linux keyring). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-18 07:51:06 +09:00
samiandClaude Opus 5.5	923c466dea	M3: working desktop app + browser pairing channel ... - Builds and runs (tauri build --debug); placeholder icons; persistent VaultCore::open in the OS app-data dir; Secret Key remembered on the device; tray keeps the app serving the extension. - Auto-lock: idle (system idle on Windows/macOS, in-app activity on Linux), screen lock, sleep. - Local IPC for kestrove-nmh: 0700 dir + 0600 Unix socket with peer-uid checks; Windows named pipe (first instance, local only, user DACL, client SID check) behind cfg. - Pairing channel: X25519 → HKDF → 6-word fingerprint confirmed in both UIs, per-connection session keys, AES-256-GCM with strict counters. Test vectors shared with kestrove-browser. - Broker: query/fill/totp/save with origin re-checks; pairing and save prompts in the UI. - kestrove-nmh relays ciphertext only; native-host installers for Linux/macOS/Windows. - Tests: unit tests, tests/nmh_stdio.rs (real kestrove-nmh over stdio), examples/test-host. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-16 20:13:54 +09:00