otpGarmin/source/storage, branch v0.6.0

feat(ui): show QR codes, encoded once with progress and cached sealed per entry

2026-10-20T04:56:58+00:00

Co-Authored-By: Claude Opus 5.5

feat(storage): add keyed secret fingerprints to record headers

2026-10-19T23:51:05+00:00

An 8-byte HMAC of kind, type and secret (key derived from the device key) in header tag 13 lets imports find duplicates of locked entries while the watch is locked. Vault gains anyHeader() and storage(). Co-Authored-By: Claude Opus 5.5

feat(ui): add the list, OTP detail, PIN entry, menu, info screens and glance

2026-10-19T20:28:09+00:00

List with live codes and countdowns, adaptive rows and lazy headers; OTP detail with ring or bar, next code and HOTP next; PIN keypad or button selector with create, unlock, change, lockout display and pending promotion; native menu; glance with the entry count; self-test after the first frame; option properties with defaults. Codes are computed one per timer event, apart from drawing, for the watchdog. A UI-test build (uitest.jungle) starts with fake entries, PIN 123456 and a frozen clock. Co-Authored-By: Claude Opus 5.5

feat(storage): add the encrypted vault, PIN keys, lockout, session and migrations

2026-10-19T13:27:37+00:00

Records are one ByteArray each: a readable TLV header plus an encrypt-then-MAC box whose aad binds the entry ID and the header. The device key seals unlocked entries and pending items; a random master key, wrapped under a PBKDF2 PIN key, seals locked ones. Wrong PINs are counted before the check, with delays on the trusted clock and an uptime fallback. Bytes.toUtf8 validates UTF-8 first, because the native conversion crashes on invalid input. Co-Authored-By: Claude Opus 5.5