jhkaktus 535a9c9db0 feat: client logic for setup vs unlock flow and wrong-passphrase handling ...

ui.js now (a) decides setup-vs-unlock from GET /api/records emptiness,
(b) runs the setup flow (double entry check, min length, TOCTOU re-check
that the DB stayed empty), (c) detects a fully failed unlock (all rows
undecryptable = wrong passphrase) and returns to a clean state, and
(d) blocks double submits while Argon2id derives the key.

Verified: node --check passes, live server serves both screens and a
crypto roundtrip proves setup passphrase unlocks on second visit while
a wrong passphrase is rejected.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>

2026-10-11 00:30:51 +02:00

..

static

feat: client logic for setup vs unlock flow and wrong-passphrase handling

2026-10-11 00:30:51 +02:00

__init__.py

feat: encrypted records storage model + SQLite layer (ciphertext-only)

2026-10-10 23:56:12 +02:00

app.py

feat: Flask API for encrypted records (CRUD + replay protection)

2026-10-10 23:59:19 +02:00

storage.py

feat: encrypted records storage model + SQLite layer (ciphertext-only)

2026-10-10 23:56:12 +02:00

test_integrity.py

feat: integrity tests – replay, stale-delete and duplicate detection

2026-10-11 00:03:15 +02:00