otpGarmin, branch v0.5.0

docs: record M5 results; bump to 0.5.0

2026-10-19T23:51:05+00:00

Co-Authored-By: Claude Opus 5.5

test(import): cover parsers, importer and a seeded fuzz corpus; import 100 entries in the UI flow

2026-10-19T23:51:05+00:00

Co-Authored-By: Claude Opus 5.5

feat(settings): apply the Import form from the phone and show results

2026-10-19T23:51:05+00:00

Import group in the app settings; the processor runs after the first frame and on settings changes, clears the fields, writes the status, remembers form hashes and opens the results screen. Co-Authored-By: Claude Opus 5.5

feat(import): parse otpauth URIs and unencrypted Aegis JSON in resumable steps

2026-10-19T23:51:05+00:00

Streaming JSON tokenizer with depth and length limits and native skipping of long strings; Aegis reader for database versions 1-3 with groups and encrypted-export detection; otpauth parser with ';' separators and Steam; import job with Replace mode, duplicate and replacement checks, a sealed multi-part buffer and a report. Google Authenticator exports deferred. Co-Authored-By: Claude Opus 5.5

feat(storage): add keyed secret fingerprints to record headers

2026-10-19T23:51:05+00:00

An 8-byte HMAC of kind, type and secret (key derived from the device key) in header tag 13 lets imports find duplicates of locked entries while the watch is locked. Vault gains anyHeader() and storage(). Co-Authored-By: Claude Opus 5.5

docs: record M4 results and simulator findings; bump to 0.4.0

2026-10-19T20:28:09+00:00

Co-Authored-By: Claude Opus 5.5

test(ui): drive the simulator with a scripted flow and check every screen

2026-10-19T20:28:09+00:00

tools/ui_flow.py clicks buttons and taps from the device files, waits for DIAG shown lines and compares 10 screens per watch with goldens on four test and three spot-check devices. Adds the fixture-wrap generator, UI logic tests and driver tests; the launcher opens apps from their glance. Co-Authored-By: Claude Opus 5.5

feat(ui): add the list, OTP detail, PIN entry, menu, info screens and glance

2026-10-19T20:28:09+00:00

List with live codes and countdowns, adaptive rows and lazy headers; OTP detail with ring or bar, next code and HOTP next; PIN keypad or button selector with create, unlock, change, lockout display and pending promotion; native menu; glance with the entry count; self-test after the first frame; option properties with defaults. Codes are computed one per timer event, apart from drawing, for the watchdog. A UI-test build (uitest.jungle) starts with fake entries, PIN 123456 and a frozen clock. Co-Authored-By: Claude Opus 5.5

perf(crypto): XOR PBKDF2 blocks as 32-bit words and step 100 iterations

2026-10-19T20:28:09+00:00

200 byte-wise iterations in one event tripped the 120,000-bytecode watchdog on the Forerunner 255S profile. Word-wise XOR makes PBKDF2 2.3x faster (22 ms per 1000 iterations in the simulator). Co-Authored-By: Claude Opus 5.5

docs: document the storage format and record M3 results; bump to 0.3.0

2026-10-19T13:27:37+00:00

Co-Authored-By: Claude Opus 5.5