r-zakarya c559e75310 feat(sync): enforce strong sync password (§1.4/§4) ...

The sync password is the only thing protecting the remote snapshot, but it
accepted 8 chars. Gate raised to 12+ chars AND computeStrength >= 50 (reused
from app.js — no zxcvbn dependency).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-09 21:52:51 +01:00

..

tests

feat(crypto): encrypt site/title/tags at rest too (CODE_AUDIT §1.3)

2026-07-09 11:25:13 +01:00

app-legacy.js

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

app.backup.js

feat(sync): include avatar in sync snapshot + auto-backup (multi-device)

2026-07-08 20:06:31 +01:00

app.crypto.js

perf(crypto): derive Argon2id via argon2idAsync (unfreeze unlock UI)

2026-07-08 19:41:59 +01:00

app.favicon.js

refactor(js): extract favicon module + add faviconHost tests (§3.1)

2026-07-05 16:58:16 +01:00

app.health.js

refactor(js): extract vault-health module from app.js monofile (§3.1)

2026-07-08 15:07:42 +01:00

app.import.js

feat(crypto): encrypt site/title/tags at rest too (CODE_AUDIT §1.3)

2026-07-09 11:25:13 +01:00

app.js

refactor(db): drop cleartext site/username column refs (columns removed)

2026-07-09 21:25:35 +01:00

app.overlays.js

refactor(js): extract quick-search overlay cluster from app.js (§3.1)

2026-07-08 18:43:55 +01:00

app.sync.js

feat(sync): enforce strong sync password (§1.4/§4)

2026-07-09 21:52:51 +01:00

app.totp.js

refactor(js): extract TOTP module + add RFC 6238 tests (§3.1)

2026-07-05 16:35:29 +01:00

argon2.js

perf(crypto): derive Argon2id via argon2idAsync (unfreeze unlock UI)

2026-07-08 19:41:59 +01:00