feat: entry templates + tag autocomplete + slideover push + robustness bundle
- Entry templates: new vault_entries.template column drives a typed
sub-kind ('credit-card', 'ssh-key', 'server', 'recovery-codes'). Card
+ table label off the template, badge reads "credit card" instead of
"note". Templates seed kind=note (no site/password required), use
custom_fields with optional dropdown options (brand, month/year,
protocol). Round-tripped across export/import/duplicate/master-pw
rotation, preserved by partial PUTs via a HasTemplate flag.
- Custom fields: support per-field `options[]` rendering as <select>
(card brand, expiry MM/YYYY, SSH/server protocol).
- Tags: existing-tag autocomplete dropdown under the chip input,
filtered against what's already selected.
- Search history: per-query X for individual delete + 1s debounced
commit (no Enter required).
- Slideover: clicking outside closes again (drag-selection respected
via mousedown origin tracker), Esc closes, X closes. App shell is
pushed left by 420px when the panel is open so the table / pagination
/ sort / search stay visible and interactive.
- Export/import: JSON now round-trips custom_fields, attachments
(decrypted to base64, re-encrypted under current key on restore),
icon_b64, and template. CSV warning lists what's not included.
- Auto-backup: same payload shape as user-driven export.
- Notes: import (JSON + CSV) accepts kind=note with empty site,
preserves title/template/custom_fields. CSV parser detects kind/
template columns.
- Bulk-import response returns `ids[]` parallel to input so the
client can map back to new entry IDs (drives attachment restore).
- Move-to-folder bugs fixed: moveEntryToFolder, batchMoveToFolder,
addTag, batchAddTag were all silently wiping TOTP / custom_fields
/ kind / template via partial PUT. Now re-ship full payload.
- Master-pw rotation: server mints a fresh session token + csrf so
the very next request after rotation no longer ESessionRejects.
Client adopts the new pair. Attachments are re-encrypted client-side
during rotation (GET old → decrypt with old key → encrypt with new
→ PUT). New endpoints: GET /attachments/all, PUT /attachments/:id.
- Duplicate: carries icon_b64 + template + attachments to the copy.
- HandleCreateEntry: accepts icon_b64.
- FireDAC param fix: all blob/icon/custom_fields params use ftMemo +
.Value assignment so SQLite TEXT no longer truncates to 4000 chars
(deepseek's 200+ KB favicon was being wiped on lock/unlock).
- HandleSetEntryIcon cap: 262144 → 524288 chars (base64 of a 256 KB
raw fetch overflows the old cap, fails silently in saveEntryIcon).
- Native save dialog: surfaces server errors instead of swallowing.
- Modals: reauth (export) + backup-password prompt support inline
error display, retry up to 5 attempts, then hard-stop.
- Keyboard cursor (j/k): bootstraps to current page, auto-paginates
when the cursor crosses a page boundary, Enter opens slideover.
- Slideover focuses Title on edit-open so j/k → Enter → type Just
Works.
- TOTP tool: Esc closes the modal.
- App version + launch mode (auto/manual): exposed via bridge,
surfaced in Settings → Account. Autostart launches suppress the
first-time tray balloon.
- Passkey button hidden (Delphi backend stubs WebAuthn at 501).
- TEST_PLAN.md captured for regression coverage.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
r-zakarya
@@ -178,6 +178,11 @@ type
|
||||
// the tray icon mute. Configured from the JS settings panel.
|
||||
property ShowNotifications: Boolean
|
||||
read FShowNotifications write FShowNotifications;
|
||||
// Already-shown flag for the one-time "still running in the tray"
|
||||
// balloon. Exposed so the host can pre-mark it true on autostart
|
||||
// launches (the user didn't actively minimise — no need to inform them).
|
||||
property BalloonShown: Boolean
|
||||
read FBalloonShown write FBalloonShown;
|
||||
// Fired on main thread when the autofill hotkey fires.
|
||||
// Args: (ATargetHWND, AWindowTitle). Handler calls ExecuteJavaScript
|
||||
// to let JS match the title against vault entries.
|
||||
|
||||
@@ -306,6 +306,14 @@ begin
|
||||
// the "aged password" badge. Legacy rows: NULL → JS falls back to
|
||||
// updated_at, then created_at.
|
||||
AddColumnIfMissing('vault_entries', 'password_changed_at', 'DATETIME');
|
||||
// Pinned entries float to the top of every view, regardless of sort.
|
||||
// Independent from favorite (which is a filter, not a sort override).
|
||||
AddColumnIfMissing('vault_entries', 'pinned', 'INTEGER DEFAULT 0');
|
||||
// Template identifier: empty/NULL = generic login or note; otherwise a
|
||||
// string like 'credit-card', 'ssh-key', 'server', 'recovery-codes'.
|
||||
// Drives the card/table label so notes-with-fields read as "Credit card"
|
||||
// instead of the generic "Encrypted note" placeholder.
|
||||
AddColumnIfMissing('vault_entries', 'template', 'TEXT');
|
||||
// Per-folder customisation. NULL = no override → JS uses the default
|
||||
// accent + i-folder symbol.
|
||||
AddColumnIfMissing('folders', 'color', 'TEXT');
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
unit PM.Favicon;
|
||||
unit PM.Favicon;
|
||||
|
||||
{
|
||||
Favicon proxy — fetches a website's icon and returns a base64 data URI
|
||||
@@ -44,7 +44,7 @@ const
|
||||
HTTP_TIMEOUT_MS = 5000;
|
||||
// DDG returns a generic placeholder for unknown domains. Bigger threshold
|
||||
// than 100 to avoid treating its blank globe glyph as a real icon.
|
||||
MIN_REAL_ICON_BYTES = 500;
|
||||
MIN_REAL_ICON_BYTES = 300;
|
||||
// Privacy stance: DDG-only fetches. We don't fall back to the site's
|
||||
// own /favicon.ico because that would leak DNS to every domain stored
|
||||
// in the vault. For sites DDG doesn't index, the user can upload a
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
unit PM.QuickUnlock;
|
||||
unit PM.QuickUnlock;
|
||||
|
||||
{
|
||||
Quick unlock — persistent on-device cache of the vault key, encrypted
|
||||
@@ -85,18 +85,42 @@ function CryptUnprotectData(pDataIn: PDataBlob; ppszDataDescr: PPWideChar;
|
||||
function LocalFree(hMem: HLOCAL): HLOCAL; stdcall;
|
||||
external 'kernel32.dll' name 'LocalFree';
|
||||
|
||||
var LoadedConfig:Boolean=False;
|
||||
StorageDir_:String='';
|
||||
// ---------------------------------------------------------------------------
|
||||
// Storage helpers
|
||||
// ---------------------------------------------------------------------------
|
||||
|
||||
procedure LoadConfig;
|
||||
begin
|
||||
if LoadedConfig then
|
||||
exit;
|
||||
Var ConfigList := TStringList.Create;
|
||||
try
|
||||
StorageDir_ := TPath.Combine(ExtractFileDir(ParamStr(0)),'config.txt');
|
||||
if TFile.Exists(StorageDir_) then
|
||||
begin
|
||||
ConfigList.LoadFromFile(StorageDir_);
|
||||
StorageDir_ := ConfigList.Values['PathUnlock'];
|
||||
if StorageDir_.ToLower.Equals('same') then
|
||||
StorageDir_ := ExtractFileDir(ParamStr(0))
|
||||
end
|
||||
else
|
||||
StorageDir_ := '';
|
||||
finally
|
||||
FreeAndNil(ConfigList);
|
||||
LoadedConfig :=True;
|
||||
end;
|
||||
end;
|
||||
function StorageDir: string;
|
||||
begin
|
||||
// %LOCALAPPDATA%\PMServer — per-user, roaming-disabled. DPAPI keys live
|
||||
// alongside the user profile so they survive Windows updates but not
|
||||
// a profile reset.
|
||||
Result := TPath.Combine(
|
||||
GetEnvironmentVariable('LOCALAPPDATA'),
|
||||
'PMServer');
|
||||
LoadConfig;
|
||||
if StorageDir_.IsEmpty then
|
||||
Result := TPath.Combine(GetEnvironmentVariable('LOCALAPPDATA'),'PMServer')
|
||||
else
|
||||
Result :=StorageDir_;
|
||||
end;
|
||||
|
||||
function StorageFile: string;
|
||||
|
||||
Reference in New Issue
Block a user