mirror of
https://github.com/PR0M3TH3AN/SeedPass.git
synced 2026-10-30 09:22:03 +00:00
thePR0M3TH3ANandClaude Fable 5
b4f20d417a
Expanded the cross-implementation suite from 19 to 30 checks so every feature is exercised against the other implementation, not just the ones that were convenient: G edits (modify / archive / links) made by either side are seen by the other H deterministic conflict merge produces byte-identical output on both sides I an Argon2id-protected Python profile unlocks in TS J the encrypted config file interoperates both directions Entry coverage in phases A/B now spans every creatable kind, including a policy-constrained password and an imported (non-deterministic) TOTP. Two real bugs this surfaced, both fixed: - Password entries carrying a `policy` block derived the WRONG password in TS. Python's _generate_password_for_entry merges the entry's overrides onto the base policy before deriving; TS ignored the block entirely, so any entry created with policy flags produced a different password. core now exposes passwordPolicyFromRecord and the CLI applies it. - TS could not read a Python-written config file: Python wraps it in the kdf/ct JSON envelope (same class as the snapshot bug fixed last commit). loadConfig now parses the envelope; regression test included. One behavioral divergence found and deliberately NOT papered over: Python generates TOTP codes with pyotp defaults (6 digits / 30s) even when the entry records different values, so an imported 8-digit/45s secret yields different codes in each implementation -- and Python's would be rejected by the issuing service. The suite now reports it as a [DIVERGE] line rather than a pass or a failure, and the matrix records it as awaiting a product decision. TS behavior is believed correct. 173 core + 47 CLI tests green; 30/30 cross-implementation checks green with 2 documented divergences. Co-Authored-By: Claude Fable 5 <[email protected]>
SeedPass Docs
This directory contains SeedPass project documentation.
Start Here
dev_control_center.md(single source to decide what to do next)
Agent and Autonomy Docs
agent_autonomy_security_plan.mdpolicy_as_code.mdsync_conflict_contract.md
Core Security Docs
security_readiness_checklist.mdthreat_model.mdcrypto_key_management_review.mdsecret_handling_local_exposure_review.mdauth_lock_unlock_access_review.mdsupply_chain_release_integrity.mdrelease_verification_runbook.mdrelease_protection_policy.mdoperational_runbooks.mdstaged_rollout_runbook.md
Architecture and Product Docs
ARCHITECTURE.mdSPEC.mdtypescript_web_extension_port_plan.mdentry_types.mdentry_graph.mdtui_v3_plan.md(active roadmap for scratch rebuild)tui_v2_plan.md(legacy logic reference)tui_v2_parity_checklist.mdtui_v2_parity_backlog.mdtui_v2_legacy_parity_matrix.mdtui_v2_ui_refresh_plan.mdsemantic_vector_index_plan.mdtui_v2_cutover_decision.mdtui_v2_large_vault_validation.mdsecurity.mdnostr_setup.mdnostr_namespace_reset.mdpackaging.md
QA and Testing Docs
TEST_INVENTORY.md(central index of all tests and runners)agent_testing_roadmap.mdai_agent_tui_testing.mdagent_test_format.mdinstaller_testing.mdkb_scale_validation.mdci-health-2026-02-19.mdagent-handoffs/README.md
Discoverability Commands
seedpass --helpseedpassseedpass tui2seedpass --legacy-tuiseedpass legacyseedpass <group> --helpseedpass tui2 --helpseedpass tui2 --checkseedpass capabilities --format jsonseedpass agent bootstrap-context