r-zakarya
49efccdd59
URL and token are no longer constants. They sit in settings.bin, sealed with the no-auth Keystore AES key - deliberately weaker than the vault: they must be readable to rebuild a vault that no longer exists, and a bearer token only opens ENCRYPTED data, worthless without the sync password that stays in the guarded vault. Retyping 64 hex characters after every cache purge was the real risk: the risk of writing them down elsewhere. They are saved only after a fetch that worked - proven settings, not typed ones. The token and sync password moved to the gitignored local include, as first-run defaults only. Tracked source now carries no secret, and leaving them empty is a viable configuration: the app asks. Theme: Delphi's Dark.style, copied into the repo and linked as a resource rather than deployed as a file - this project's deployment puts nothing beside the app, which is the same hole that forces the manifest and dex staging. A failure to load is never fatal; the default look is ugly but works. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
87 lines
1.8 KiB
Plaintext
87 lines
1.8 KiB
Plaintext
|
|
vault-error.log
|
|
|
|
# Vault database — contains user secrets (encrypted but still secret).
|
|
# Auto-created on first run by the Delphi/PHP backend via InitDatabase().
|
|
# Never track this file. Use vault.db.example for schema reference if needed.
|
|
vault.db
|
|
vault.db-journal
|
|
vault.db-wal
|
|
vault.db-shm
|
|
|
|
# Delphi build artifacts
|
|
*.dcu
|
|
*.dcp
|
|
*.dpu
|
|
*.local
|
|
*.identcache
|
|
*.dsk
|
|
*.~dsk
|
|
*.~*
|
|
*.~bpl
|
|
*.~dll
|
|
*.~exe
|
|
*.exe
|
|
*.dll
|
|
*.bpl
|
|
*.so
|
|
*.dylib
|
|
__history/
|
|
__recovery/
|
|
Win32/
|
|
Win64/
|
|
OSX64/
|
|
Android/
|
|
iOSDevice64/
|
|
|
|
# Debug logs (created at runtime next to the exe)
|
|
pm-debug.log
|
|
|
|
# Asset build log (regenerated by BuildAssets.cmd/ps1)
|
|
delphi-backend/assets/build.log
|
|
|
|
# Embedded-assets output (regenerated by BuildAssets before every Delphi build,
|
|
# then linked into the exe — the files themselves are throwaway intermediates).
|
|
delphi-backend/assets/assets.res
|
|
delphi-backend/assets/assets.rc
|
|
delphi-backend/assets/assets.inc
|
|
|
|
# Local-only debug / packaging artefacts next to the exe.
|
|
delphi-backend/build.log
|
|
delphi-backend/config.txt
|
|
delphi-backend/PMServer.rar
|
|
|
|
# Quick-unlock DPAPI blob — device-bound, MUST NOT be committed.
|
|
delphi-backend/quickunlock.bin
|
|
|
|
# Vault backup copies users keep next to the exe while testing.
|
|
delphi-backend/vault*.db
|
|
delphi-backend/vault - Copie*.db
|
|
|
|
# Screenshots / scratch images dropped in the repo root during dev.
|
|
*.png
|
|
*.jpg
|
|
*.jpeg
|
|
|
|
# Delphi build artifacts
|
|
delphi-backend/*.vrc
|
|
delphi-backend/*.$manifest
|
|
|
|
# PHP sync endpoint — holds the bearer token / the snapshot itself
|
|
server-php/config.php
|
|
vault-data/
|
|
|
|
# Sorties de compilation Android (regenerees a chaque build)
|
|
Android/
|
|
Android64/
|
|
*.o
|
|
*.apk
|
|
*.apk.idsig
|
|
pmserverApk.res
|
|
|
|
# Mot de passe de sync du banc d'essai - jamais versionne
|
|
android-client/PMA.LocalConfig.inc
|
|
# Genere depuis theme.rc + pm-dark.style, tous deux suivis (voir README).
|
|
android-client/theme/theme.RES
|
|
android-client/theme/theme.res
|