2 Commits

Include renames

Author	SHA1	Message	Date
thePR0M3TH3ANandClaude Fable 5	e84a7e1c0e	TS port slice 9: relay transport + nostr sync/restore — Milestone 5 complete ... - core RelayPool over the platform WebSocket (global in Node 22+/browsers, no dependency): multi-relay publish with per-relay OK collection, fetch aggregation until EOSE with dedupe and signature verification on ingest, connect timeouts, dead-relay tolerance. - Sync flows mirroring nostr/snapshot.py: publishSnapshot (chunk events -> manifest with HMAC identity + nonce), fetchLatestSnapshot (newest-first, per-chunk hash verify, falls through incomplete manifests), publishDelta, fetchDeltasSince (created_at replay order). - CLI nostr group: get-pubkey (matches app-1237 fixture npub), list/add/ remove-relay (config-backed, ws:// validation, last-relay guard), sync (publish local vault), restore (snapshot + delta merge -> local vault). - Tested against an in-process NIP-01 mock relay: core round trip incl. corrupted-chunk rejection, and CLI end-to-end sync -> destroy local vault -> restore with secrets intact. Transport tests are Node-only (jsdom WebSocket can't connect; real browsers come with Milestone 6). - 151 core + 32 CLI tests green. Milestone 5 CLI surface is complete. Co-Authored-By: Claude Fable 5 <[email protected]>	2026-08-14 14:51:18 -04:00
thePR0M3TH3ANandClaude Fable 5	ab569fe900	TS port slice 4: portable backup, CI, and the agent-blind CLI MVP ... - Portable backup (format_version 1): TS imports Python exports, re-exports byte-identically under pinned nonce/timestamp, verifies the canonical checksum, rejects tampering and unknown versions. - .github/workflows/ts-parity.yml: typecheck + Node/jsdom parity suite on js/ changes, plus a fixture-drift job that regenerates fixtures from Python and fails if the committed ones don't match (manifest commit field excluded by construction). - packages/cli — seedpass-js MVP implementing plan section 9.3: * reference-first output: entry list/get/search emit sp://entry/<id> refs and metadata; secret-bearing fields become has_* flags * 'entry reveal' is the only plaintext egress command * 'use --clipboard|--exec|--stdin-to' delivers secrets to sinks; --exec injects SEEDPASS_SECRET into the child env, never argv or stdout * vault export/import over portable backups; capabilities --format json * mnemonic comes from SEEDPASS_MNEMONIC env, never the command line - CLI tests prove the blindness properties: derived password matches the v2 fixture, TOTP at pinned time, secrets absent from all default output and from sink-delivery confirmations. - 125 core parity tests (Node + jsdom) + 11 CLI tests green. Co-Authored-By: Claude Fable 5 <[email protected]>	2026-08-13 10:40:56 -04:00