Commit Graph

Select branches

Hide Pull Requests

claude/bitlogin-protocol-spec-q18ust

cursor/pubkey-colon-events-96f3

dependabot/github_actions/actions/checkout-7.0.1

dependabot/github_actions/actions/setup-node-7.1.0

dependabot/github_actions/actions/upload-artifact-7.0.2

dependabot/github_actions/gitleaks/gitleaks-action-3.0.0

dependabot/npm_and_yarn/minor-and-patch-6502e0ca77

dependabot/npm_and_yarn/types/node-26.1.2

dependabot/npm_and_yarn/typescript-7.0.2

dependabot/npm_and_yarn/vite-8.2.0

dependabot/npm_and_yarn/vitest-4.1.10

main

security/entropy-audit-2026-07-31

#1

#10

#10/merge

#11

#12

#12/merge

#13

#13/merge

#14

#15

#15/merge

#16

#16/merge

#17

#18

#19

#19/merge

#2

#20

#21

#22

#22/merge

#23

#23/merge

#24

#24/merge

#25

#25/merge

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 3809f3cd39 Bump actions/setup-node from 4.4.0 to 7.1.0 dependabot/github_actions/actions/setup-node-7.1.0 dependabot[bot] 2026-10-16 20:53:38 +00:00
• c467fe5b2a Bump actions/upload-artifact from 4.6.2 to 7.0.2 dependabot/github_actions/actions/upload-artifact-7.0.2 dependabot[bot] 2026-10-16 20:53:33 +00:00
• f5b2f78da1 Add pubkey identity alias and colon-style DOM event aliases cursor/pubkey-colon-events-96f3 Cursor AgentandthePR0M3TH3AN 2026-10-08 19:14:25 +00:00
• 5be5072fe1 Bump the minor-and-patch group across 1 directory with 4 updates dependabot/npm_and_yarn/minor-and-patch-6502e0ca77 dependabot[bot] 2026-10-02 20:54:25 +00:00
• 6fc4ff09a9 docs: pointer to the SeedPass vault/identity spec for future managed-accounts work main thePR0M3TH3ANandClaude Opus 5 2026-08-18 14:21:03 -04:00
• ea77c4b9b4 Fix stale spec version in CONTRIBUTING.md (v0.4 -> v0.6) thePR0M3TH3ANandClaude Fable 5 2026-08-13 08:44:47 -04:00
• 0437448b70 Add repo memory layer and agent governance thePR0M3TH3ANandClaude Fable 5 2026-08-12 20:57:00 -04:00
• 3c572b34fa Add AGENTS.md agent guidance thePR0M3TH3ANandClaude Fable 5 2026-08-12 15:14:55 -04:00
• aba7d4cc13 site: tighten 'no server' to 'no account server' (relays are servers) thePR0M3TH3ANandClaude Opus 4.8 2026-08-12 08:37:40 -04:00
• 522d81ec56 docs: record design-review note (assurance bar before promotion) thePR0M3TH3ANandClaude Opus 4.8 2026-08-11 23:28:59 -04:00
• b8b19599e0 widget: headless signer — restore + sign without the custom element thePR0M3TH3ANandClaude Opus 4.8 2026-08-11 22:54:14 -04:00
• 38cfbb859e Bump vite from 6.4.3 to 8.2.1 dependabot/npm_and_yarn/vite-8.2.0 dependabot[bot] 2026-08-12 02:26:31 +00:00
• 5ae41ed9db widget: ship generated type declarations + typed element/events thePR0M3TH3ANandClaude Opus 4.8 2026-08-11 19:37:32 -04:00
• 1b39e0f60c widget: expose ::part() hooks for structural theming thePR0M3TH3ANandClaude Opus 4.8 2026-08-11 19:31:40 -04:00
• 86d7ee0114 widget: make an unmounted-widget teardown loud, not a silent hang thePR0M3TH3ANandClaude Opus 4.8 2026-08-11 19:25:59 -04:00
• c9791b9840 widget: lightweight, widget-free session reader thePR0M3TH3ANandClaude Opus 4.8 2026-08-11 19:22:06 -04:00
• 3fa8ea0b61 Add deferred BitBlocks compatibility-layer roadmap thePR0M3TH3AN 2026-08-10 12:27:32 -04:00
• b1a1bbbf3b Add additive browser-distribution and integrator-API roadmap thePR0M3TH3AN 2026-08-10 11:32:07 -04:00
• afb690db2e Bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 dependabot[bot] 2026-08-07 20:54:16 +00:00
• 6405080242 Bump actions/checkout from 4.4.0 to 7.0.1 dependabot/github_actions/actions/checkout-7.0.1 dependabot[bot] 2026-08-07 20:54:11 +00:00
• 5aa7d9ca15 Relay lists: drop a relay that cannot accept writes, widen for margin thePR0M3TH3ANandClaude Fable 5 2026-08-05 10:17:45 -04:00
• 30b4f34300 Recovery phrase is mandatory for passkey accounts thePR0M3TH3ANandClaude Fable 5 2026-08-04 15:41:24 -04:00
• 0f066750b6 Correct two errors in the superseded on-ramps doc thePR0M3TH3ANandClaude Fable 5 2026-08-04 15:17:12 -04:00
• 9534adf820 PK6: record concrete PRF provider support, including KeePassXC's absence thePR0M3TH3ANandClaude Fable 5 2026-08-04 15:12:34 -04:00
• 094fc243af Bump typescript from 5.9.3 to 7.0.2 dependabot/npm_and_yarn/typescript-7.0.2 dependabot[bot] 2026-08-04 18:59:44 +00:00
• 24ef4c4fc1 Bump vitest from 3.2.7 to 4.1.10 dependabot/npm_and_yarn/vitest-4.1.10 dependabot[bot] 2026-08-04 18:59:42 +00:00
• fa9e2d9665 Automated passkey e2e: real Chromium, real WebAuthn ceremonies, virtual PRF thePR0M3TH3ANandClaude Fable 5 2026-08-04 14:57:10 -04:00
• 25df5140b3 Audit round 3: live-sub budgets, revocation-before-courtesy, pending-key catch, CI semgrep, input bounds thePR0M3TH3ANandClaude Fable 5 2026-08-04 14:31:25 -04:00
• bb9788588f Audit round 2: resource ceilings, key lifecycle, local gate, courtesy logout thePR0M3TH3ANandClaude Fable 5 2026-08-04 13:56:29 -04:00
• f0b5f40fd4 Audit response: fix BL-16 through BL-20 and the low findings, same day thePR0M3TH3ANandClaude Fable 5 2026-08-04 13:10:20 -04:00
• 36cd3eb853 Sync dev docs with today's work: README, CHANGELOG, TODO, llms.txt cleanup thePR0M3TH3ANandClaude Fable 5 2026-08-04 12:58:32 -04:00
• 8079d90cf8 Replace OAuth on-ramps with passkey sign-in: zero registration, zero servers thePR0M3TH3ANandClaude Fable 5 2026-08-04 12:20:26 -04:00
• be5dd529e9 Record the Google rail's scoping and blast radius in §CO3.3 thePR0M3TH3ANandClaude Fable 5 2026-08-04 11:59:13 -04:00
• 37f5bbd243 Serverless 'Continue with Google': the credential lives in the user's own Drive thePR0M3TH3ANandClaude Fable 5 2026-08-04 11:48:51 -04:00
• ff1470a849 Centralized on-ramps, widget side: 'Use an account you already have' thePR0M3TH3ANandClaude Fable 5 2026-08-04 11:34:52 -04:00
• dc6490e46a Design doc: centralized OAuth on-ramps as a journey toward self-custody thePR0M3TH3ANandClaude Fable 5 2026-08-04 11:15:31 -04:00
• a7cf55ea84 window.bitlogin.activeMethod()/activeSession(): session state for every method thePR0M3TH3ANandClaude Fable 5 2026-08-04 10:58:14 -04:00
• 14d993d11a Screen headers with icon back buttons; tidy the sign-in screen thePR0M3TH3ANandClaude Fable 5 2026-08-04 10:50:58 -04:00
• 2e7b1e19e3 Welcome-screen polish: alternative methods behind a collapsed options menu thePR0M3TH3ANandClaude Fable 5 2026-08-04 10:45:17 -04:00
• 3f224b8cea Bump @types/node from 22.20.1 to 26.1.2 dependabot/npm_and_yarn/types/node-26.1.2 dependabot[bot] 2026-08-04 14:33:49 +00:00
• 49682dd75c NIP-46 sign-in: remote-signer sessions behind the same facade, memory-only thePR0M3TH3ANandClaude Fable 5 2026-08-04 10:31:36 -04:00
• b616068689 Service worker: precache with cache:'reload' so 304s can't bake stale headers thePR0M3TH3ANandClaude Fable 5 2026-08-04 10:05:14 -04:00
• 6b10f0b902 Fix live login: allow WASM compilation under the deployment CSP thePR0M3TH3ANandClaude Fable 5 2026-08-04 09:55:49 -04:00
• 0fec9c4182 Demo guide and llms.txt: document the extension sign-in method thePR0M3TH3ANandClaude Fable 5 2026-08-04 09:41:17 -04:00
• a7adef05f9 NIP-07 sign-in: delegate to an installed extension behind the same facade thePR0M3TH3ANandClaude Fable 5 2026-08-04 09:28:24 -04:00
• 20a3c50dc2 Design doc: the widget as the single login surface (NIP-07, NIP-46) thePR0M3TH3ANandClaude Fable 5 2026-08-04 09:20:49 -04:00
• 205b0678cc Pin that pre-removal passwords still sign in security/entropy-audit-2026-07-31 thePR0M3TH3ANandClaude Opus 5 2026-07-31 22:04:01 -04:00
• 98b2967116 Ban Math.random package-wide and enforce it in CI thePR0M3TH3ANandClaude Opus 5 2026-07-31 17:30:24 -04:00
• e131f0313b Take nonce and IV control off the public crypto surface thePR0M3TH3ANandClaude Opus 5 2026-07-31 17:20:05 -04:00
• b85e1572ea Pin fail-closed RNG behaviour and randomUniformInt's uniformity thePR0M3TH3ANandClaude Opus 5 2026-07-31 16:29:21 -04:00
• ba49673ef9 Entropy audit: RNG integration review and open hardening items thePR0M3TH3ANandClaude Opus 5 2026-07-31 16:26:35 -04:00
• 30d4ac4b83 Open items, and the standing rule about the derivation chain thePR0M3TH3ANandClaude Fable 5 2026-07-31 14:52:30 -04:00
• 6eb1d7d640 Pin the derivation chain, and stop Dependabot grouping crypto majors thePR0M3TH3ANandClaude Fable 5 2026-07-31 14:46:46 -04:00
• 7d2209d706 Second-audit hardening: phrase-gated sudo key, deterministic migration, policy tests thePR0M3TH3ANandClaude Fable 5 2026-07-31 13:54:36 -04:00
• efd994c4de Fix revoke-rebinds bug; correct the website's custody and revoke claims thePR0M3TH3ANandClaude Fable 5 2026-07-31 09:47:01 -04:00
• d040c2f5af Tier 1 hardening: no more silent hangs, no writes before consent thePR0M3TH3ANandClaude Fable 5 2026-07-31 09:40:49 -04:00
• b414cc53d2 Security audit: fix 8 findings across crypto, vault, and widget thePR0M3TH3ANandClaude Fable 5 2026-07-31 09:00:24 -04:00
• 2cf2ee9351 Widget: dispatch bitlogin-offer-pending when the offer screen shows thePR0M3TH3ANandClaude Fable 5 2026-07-30 23:43:55 -04:00
• 6b48de6168 Widget: offerNwcConnection() -- consent-gated offer-to-save thePR0M3TH3ANandClaude Fable 5 2026-07-30 21:17:06 -04:00
• 6841d647c2 Site: document requestNwcConnection and the Connection Vault thePR0M3TH3ANandClaude Fable 5 2026-07-30 14:14:00 -04:00
• c3e55add16 Widget: requestNwcConnection() -- vault authorization layer, reveal mode thePR0M3TH3ANandClaude Fable 5 2026-07-30 13:10:39 -04:00
• a465e1d8fa Implement the Connection Vault protocol layer (phases A-C) thePR0M3TH3ANandClaude Fable 5 2026-07-30 12:29:46 -04:00
• e9a5a41ff7 fix(widget): encrypt persistent session cache thePR0M3TH3AN 2026-07-25 22:25:50 -04:00
• fe9a7afde2 Add BitLogin documentation index thePR0M3TH3AN 2026-07-22 20:56:59 -04:00
• 82539c2057 Document relay and messaging portability thePR0M3TH3AN 2026-07-22 20:56:45 -04:00
• f656f014bb Document experimental portable entitlements thePR0M3TH3AN 2026-07-22 20:56:07 -04:00
• 66c97820db Document experimental portable application state thePR0M3TH3AN 2026-07-22 20:55:24 -04:00
• 6f0bc2a056 Document experimental multi-account switching thePR0M3TH3AN 2026-07-22 20:54:46 -04:00
• 0c9011e064 Document experimental S3C connection string format thePR0M3TH3AN 2026-07-22 17:41:33 -04:00
• 6000cfd06f Document experimental NWC Connection Vault profile thePR0M3TH3AN 2026-07-22 17:40:33 -04:00
• 98a8c60821 Document experimental BitLogin Connection Vault thePR0M3TH3AN 2026-07-22 17:39:45 -04:00
• 681cec7734 Document session persistence in README and CHANGELOG thePR0M3TH3ANandClaude Sonnet 5 2026-07-22 07:47:49 -04:00
• 9e3787d301 Add local session persistence so a page reload doesn't require re-login thePR0M3TH3ANandClaude Sonnet 5 2026-07-22 07:47:07 -04:00
• 92a87ff13e CHANGELOG: document the NIP-04 addition thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 23:29:10 -04:00
• 283840261f Add NIP-04 support for drop-in NIP-07 parity thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 23:28:51 -04:00
• 66cae69c7e README: document the wasm-unsafe-eval CSP requirement and the DOM-move gotcha thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 22:46:53 -04:00
• e3270012e9 CHANGELOG: document the style-src CSP fix thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 22:09:45 -04:00
• e8712f9aa9 Fix widget styles being silently dropped under strict style-src CSP thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 22:09:30 -04:00
• 863f035990 Add CHANGELOG.md and an "Updating your integration" README section thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 21:31:45 -04:00
• 681f622ef8 Expand built-in vault/discovery relay lists for redundancy thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 21:28:38 -04:00
• a4e9b1d2ae Fix .link buttons collapsing onto one line at wide --bl-max-width thePR0M3TH3AN 2026-07-21 19:17:32 -04:00
• b2f4b96b84 Simplify hero credential card example thePR0M3TH3AN 2026-07-21 18:48:54 -04:00
• ed8d8eb1be Stamp genuine successes with the brand's brass ring + checkmark thePR0M3TH3AN 2026-07-21 18:44:58 -04:00
• f725e2cd83 Drop the "B" monogram, use one true logo lockup everywhere thePR0M3TH3AN 2026-07-21 18:35:38 -04:00
• 2b272eb093 Give BitLogin a real vector logo, consistent across the site and widget thePR0M3TH3AN 2026-07-21 17:54:21 -04:00
• 01fc7c5ed3 Refuse to overwrite an existing account on register or password change thePR0M3TH3AN 2026-07-21 16:54:32 -04:00
• 8c01a121df Never overwrite an existing profile or relay list on import thePR0M3TH3AN 2026-07-21 16:39:00 -04:00
• 207f4cba10 Redesign demo site around a "one login, every site" pitch thePR0M3TH3AN 2026-07-21 16:17:37 -04:00
• ce6ade73b4 docs: bring the Integrate page and version references up to date thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 15:53:17 -04:00
• 1dbb4fca51 Fail closed (not open-and-crash) when window.nostr can't be claimed thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 15:44:52 -04:00
• 1eff23aca8 Expose widget theming as CSS custom properties, and a max-width override thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 15:05:55 -04:00
• 6640e7adf6 Link the GitHub repo and MIT license from the demo site footer thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 14:39:26 -04:00
• 1dc5e6802c Fail closed on credential-generation rollback; fix NIP-44 extended-length payloads thePR0M3TH3ANandClaude Sonnet 5 2026-07-21 14:36:35 -04:00
• e17885d0e5 update thePR0M3TH3AN 2026-07-21 13:03:12 -04:00
• b7f74041a5 Merge pull request #4 from PR0M3TH3AN/claude/bitlogin-protocol-spec-q18ust thePR0M3TH3AN 2026-07-21 13:00:42 -04:00
• 9408fef484 Add MIT license, CONTRIBUTING, and SECURITY docs for open-sourcing claude/bitlogin-protocol-spec-q18ust Claude 2026-07-21 16:54:55 +00:00
• ca2dc09bf6 Merge pull request #3 from PR0M3TH3AN/claude/bitlogin-protocol-spec-q18ust thePR0M3TH3AN 2026-07-21 12:44:05 -04:00
• a24719184e Add signer switching, manual-password parity, phrase-quiz split, and offline recovery import Claude 2026-07-21 16:41:35 +00:00
• 4a8dfb8cde Merge pull request #2 from PR0M3TH3AN/claude/bitlogin-protocol-spec-q18ust thePR0M3TH3AN 2026-07-21 11:58:34 -04:00
• 0801371566 Fix live-deployment bugs, add manual passwords, and improve integration support Claude 2026-07-21 15:35:10 +00:00