otpGarmin - OTP Wallet for Garmin Connect IQ: offline one-time passwords and barcodes.

	Commit message (Collapse)	Author	Age	Files	Lines
*	feat(ui): show QR codes, encoded once with progress and cached sealed per entry	cirakg	9 days	1	-0/+34
\| \| \| \|	Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
*	feat(storage): add keyed secret fingerprints to record headers	cirakg	9 days	1	-0/+19
\| \| \| \| \| \| \| \|	An 8-byte HMAC of kind, type and secret (key derived from the device key) in header tag 13 lets imports find duplicates of locked entries while the watch is locked. Vault gains anyHeader() and storage(). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
*	feat(ui): add the list, OTP detail, PIN entry, menu, info screens and glance	cirakg	10 days	1	-1/+13
\| \| \| \| \| \| \| \| \| \| \| \|	List with live codes and countdowns, adaptive rows and lazy headers; OTP detail with ring or bar, next code and HOTP next; PIN keypad or button selector with create, unlock, change, lockout display and pending promotion; native menu; glance with the entry count; self-test after the first frame; option properties with defaults. Codes are computed one per timer event, apart from drawing, for the watchdog. A UI-test build (uitest.jungle) starts with fake entries, PIN 123456 and a frozen clock. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
*	feat(storage): add the encrypted vault, PIN keys, lockout, session and ↵	cirakg	10 days	1	-0/+393
	migrations Records are one ByteArray each: a readable TLV header plus an encrypt-then-MAC box whose aad binds the entry ID and the header. The device key seals unlocked entries and pending items; a random master key, wrapped under a PBKDF2 PIN key, seals locked ones. Wrong PINs are counted before the check, with delays on the trusted clock and an uptime fallback. Bytes.toUtf8 validates UTF-8 first, because the native conversion crashes on invalid input. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>