r-zakarya f3a8631440 docs(android): the cache chain is verified on device ...

Write with no prompt, read under the device credential, cache surviving a cold start with no derivation, and a silent 304. Records the three traps that hid behind it, none of which the compiler could see.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-15 14:28:58 +01:00

android-client

docs(android): the cache chain is verified on device

2026-08-15 14:28:58 +01:00

css

fix(list): keep the header gap constant when it sticks

2026-08-02 00:09:33 +01:00

delphi-backend

feat(backup): include the trash in exports and auto-backups

2026-08-07 15:04:41 +01:00

js

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

server-php

fix(sync-php): read Authorization via getallheaders and tolerate ETag forms

2026-08-14 17:58:48 +01:00

.gitattributes

fix(android): overload both Cipher.init declarations, restore CRLF line endings

2026-08-15 00:49:37 +01:00

.gitignore

feat(android): prefill the sync password from a local, untracked include

2026-08-15 01:04:08 +01:00

AndroidManifest.template.xml

fix(android): declare FMX's biometric activity, and stop LoadVault from deleting the cache

2026-08-15 14:11:20 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

feat(backup): include the trash in exports and auto-backups

2026-08-07 15:04:41 +01:00

CODE_AUDIT.md

fix(kdf): neutralize the /migrate-kdf endpoint server-side (6c-1 / 6c-4)

2026-07-20 05:43:39 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

feat(autofill): Ctrl+Shift+T types the 2FA code

2026-07-25 16:53:00 +01:00

mainApk.fmx

feat(android): crypto self-test harness on the new FMX project

2026-08-14 18:29:12 +01:00

mainApk.pas

fix(android): declare FMX's biometric activity, and stop LoadVault from deleting the cache

2026-08-15 14:11:20 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

pmserverApk.deployproj

docs(android): the adb reverse tunnel dies with the USB link

2026-08-15 13:00:28 +01:00

pmserverApk.dpr

feat(android): folder filter, icons, sort, template, updated_at, FLAG_SECURE

2026-08-15 11:23:29 +01:00

pmserverApk.dproj

fix(android): declare KeySpec so the native PBKDF2 call resolves, and report why it fails

2026-08-14 23:22:56 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SCENARIOS.md

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

24 MiB

Languages

Pascal 46.7%

JavaScript 35.4%

HTML 9.4%

CSS 4.9%

PHP 2.1%

Other 1.4%