1698 Commits

Author SHA1 Message Date
thePR0M3TH3AN
1301b79279 test: cover legacy index decryption fallback 2025-08-03 16:47:13 -04:00
thePR0M3TH3AN
e5ebfdcad4 Merge pull request #740 from PR0M3TH3AN/codex/update-restore-method-for-nostr
Use manager sync for Nostr restore with legacy notice
2025-08-03 16:38:46 -04:00
thePR0M3TH3AN
8e78a72257 Use manager sync for Nostr restore 2025-08-03 16:38:33 -04:00
thePR0M3TH3AN
041e40bc1b Merge pull request #739 from PR0M3TH3AN/codex/add-logging-for-manifest-filter-success
feat: add manifest identifier fallback logging
2025-08-03 16:31:59 -04:00
thePR0M3TH3AN
49675211e4 feat: add manifest identifier fallback logging 2025-08-03 16:28:05 -04:00
thePR0M3TH3AN
30261094d2 Merge pull request #738 from PR0M3TH3AN/codex/implement-legacy-key-fallback-in-snapshot-fetch
Add legacy key fallback when fetching Nostr snapshots
2025-08-03 15:56:28 -04:00
thePR0M3TH3AN
911fd6705d test: cover legacy key fallback 2025-08-03 15:55:45 -04:00
thePR0M3TH3AN
7bb67030cb Merge pull request #737 from PR0M3TH3AN/codex/add-legacy-nostr-key-generation-method
Add legacy Nostr key derivation
2025-08-03 15:08:29 -04:00
thePR0M3TH3AN
8568e38d36 Add legacy Nostr key derivation 2025-08-03 14:59:53 -04:00
thePR0M3TH3AN
675adfb84b Merge pull request #736 from PR0M3TH3AN/codex/fix-import-and-migration-for-older-index
nostr: support legacy manifest id
2025-08-03 14:38:01 -04:00
thePR0M3TH3AN
f0f7aee9e6 Merge pull request #735 from PR0M3TH3AN/codex/validate-path-argument-in-import-handler
Validate vault import path and extension
2025-08-03 14:32:43 -04:00
thePR0M3TH3AN
aa688bc49a test: add legacy manifest fallback test 2025-08-03 14:32:40 -04:00
thePR0M3TH3AN
77c4c33818 Validate import path and extension 2025-08-03 14:15:46 -04:00
thePR0M3TH3AN
d868d2204b Merge pull request #734 from PR0M3TH3AN/codex/add-password-authentication-for-specified-endpoints
Require password for sensitive read endpoints
2025-08-03 14:15:04 -04:00
thePR0M3TH3AN
3a19ef9c2a require password for sensitive read endpoints 2025-08-03 14:12:24 -04:00
thePR0M3TH3AN
68341db0fe Merge pull request #733 from PR0M3TH3AN/codex/use-hmac.compare_digest-for-token-verification
Use constant-time token comparison
2025-08-03 12:45:21 -04:00
thePR0M3TH3AN
3dc10ae448 Use constant-time token comparison 2025-08-03 12:39:43 -04:00
thePR0M3TH3AN
23a3ae3928 Merge pull request #732 from PR0M3TH3AN/codex/update-agents.md-with-migration-plan
docs: add migration guidance
2025-08-03 11:46:24 -04:00
thePR0M3TH3AN
f664a6c40f fix: migrate legacy nostr payloads 2025-08-03 11:41:06 -04:00
thePR0M3TH3AN
44ce005cdc test: cover legacy migration prompt and sync 2025-08-03 11:29:23 -04:00
thePR0M3TH3AN
01fe849f90 Merge pull request #731 from PR0M3TH3AN/codex/remove-sensitive-debug-logging
Remove sensitive debug logging
2025-08-03 11:05:13 -04:00
thePR0M3TH3AN
d75cc760d3 Remove sensitive debug logging 2025-08-03 11:02:36 -04:00
thePR0M3TH3AN
42aa945b00 Merge pull request #730 from PR0M3TH3AN/codex/update-readme-and-documentation
Clarify Nostr vault restoration requirements
2025-08-03 10:39:43 -04:00
thePR0M3TH3AN
a9c5deb800 Document restoration requirements 2025-08-03 10:38:55 -04:00
thePR0M3TH3AN
b72452a734 Merge pull request #729 from PR0M3TH3AN/codex/add-gitleaks-or-trufflehog-job
ci: add gitleaks scanning
2025-08-03 10:30:00 -04:00
thePR0M3TH3AN
2c44f51fc4 ci: add secret scanning 2025-08-03 10:27:13 -04:00
thePR0M3TH3AN
59c06041fd Merge pull request #728 from PR0M3TH3AN/codex/generate-new-requirements.lock-with-hashes
Use hashed requirements lock and enforce in CI
2025-08-03 10:20:32 -04:00
thePR0M3TH3AN
b0db9806b3 Regenerate lockfile with Python 3.11 2025-08-03 10:18:08 -04:00
thePR0M3TH3AN
6f885bd65e Use hashed requirements lock 2025-08-03 10:08:50 -04:00
thePR0M3TH3AN
c3ed4c08ee Merge pull request #727 from PR0M3TH3AN/codex/update-gui-to-install-pinned-toga-versions
feat: secure GUI backend installation
2025-08-03 09:59:32 -04:00
thePR0M3TH3AN
68f47052c3 feat: secure GUI backend installation 2025-08-03 09:57:32 -04:00
thePR0M3TH3AN
a16310b04b Merge pull request #726 from PR0M3TH3AN/codex/add-tests-for-key-derivation-with-fingerprints
Add fingerprint-based key derivation tests
2025-08-03 09:51:58 -04:00
thePR0M3TH3AN
1e544a7d41 test: add fingerprint consistency tests for key derivation 2025-08-03 09:49:21 -04:00
thePR0M3TH3AN
cb37783354 Merge pull request #725 from PR0M3TH3AN/codex/update-key-derivation-functions-to-use-fingerprint
Use fingerprint-based salt for password key derivation
2025-08-03 09:45:03 -04:00
thePR0M3TH3AN
5423c41b06 Include fingerprint salt in password key derivation 2025-08-03 09:37:59 -04:00
thePR0M3TH3AN
2794b67d83 Merge pull request #724 from PR0M3TH3AN/codex/replace-random.random-with-cryptographic-shuffle
Use HMAC-based deterministic shuffle
2025-08-03 09:27:11 -04:00
thePR0M3TH3AN
aad41929bf Use HMAC DRNG for RSA PGP keys 2025-08-03 09:24:50 -04:00
thePR0M3TH3AN
4f09ad5c26 Use HMAC-based deterministic shuffle 2025-08-03 09:15:43 -04:00
thePR0M3TH3AN
3cdf391742 Merge pull request #723 from PR0M3TH3AN/codex/switch-to-atomic-writes-in-fingerprint_manager-and-manager
Use atomic file writes for persistent data
2025-08-03 09:02:20 -04:00
thePR0M3TH3AN
032caed3d0 Add atomic write utility and tests 2025-08-03 08:57:04 -04:00
thePR0M3TH3AN
2294656f36 Merge pull request #722 from PR0M3TH3AN/codex/hash-jwt-in-start_server-and-update-checks
Hash JWT token in API
2025-08-03 08:51:15 -04:00
thePR0M3TH3AN
9d9f8a8bae Hash JWT token in API 2025-08-03 08:50:57 -04:00
thePR0M3TH3AN
9d80f7b607 Merge pull request #721 from PR0M3TH3AN/codex/add-rate-limiting-to-api
Add request rate limiting to API
2025-08-03 08:44:22 -04:00
thePR0M3TH3AN
e5f1158101 Test API rate limiting 2025-08-03 08:41:22 -04:00
thePR0M3TH3AN
c7df96aac5 Merge pull request #720 from PR0M3TH3AN/codex/set-up-dependabot-and-audit-workflow
chore: enable automated dependency auditing
2025-08-03 08:33:54 -04:00
thePR0M3TH3AN
5acd1d489d chore: add dependency auditing 2025-08-03 08:32:57 -04:00
thePR0M3TH3AN
f66e8b4776 Merge pull request #719 from PR0M3TH3AN/codex/update-dependencies-and-regenerate-lockfile
chore(deps): update aiohttp and python-multipart
2025-08-03 08:25:41 -04:00
thePR0M3TH3AN
10a03384d0 chore(deps): update aiohttp and python-multipart 2025-08-03 08:23:56 -04:00
thePR0M3TH3AN
7631d32bc6 Merge pull request #718 from PR0M3TH3AN/codex/replace-auto-install-logic-in-cli.gui
feat(cli): require manual GUI backend install
2025-08-03 08:17:57 -04:00
thePR0M3TH3AN
6dabbaa31e feat(cli): require manual GUI backend install 2025-08-03 08:17:41 -04:00