kleidos/web/assets/ at main · jmrp.io/kleidos · Tangled

jmrp.io / kleidos

0

[READ-ONLY] Mirror of https://github.com/jmrplens/kleidos. Kleidos — Hardware BLE password manager for ESP32-S3 (M5StickC Plus2, StickS3, M5Stack Gray, T-Deck, Cardputer) jmrplens.github.io/kleidos/

0

kleidos / web / assets /

at main 1 folder 3 files

José M. Requena Plens Harden clang-tidy and cppcheck with safety-aligned C++ checks 6w ago

Show device SVG mockups with composited app screenshots Each device card now displays the front.svg hardware mockup with the actual in-app screenshot overlaid precisely onto the screen area using computed viewBox percentages. All 7 devices marked as coming-soon. Screen overlay uses position:absolute with l/t/w/h derived from the inner screen rect coordinates in each device SVG viewBox. Also updates all device SVGs from cad-sources to latest versions.

1 month ago

Harden clang-tidy and cppcheck with safety-aligned C++ checks Enable a curated set of C++ Core Guidelines / HICPP checks aligned with safety-critical C++ review guidance: no owning raw pointers, no C-style memory management, no const-stripping casts, fully covered switch statements, member-initializer lists, virtual destructors, and no-definitions-in-headers. This is a best-effort OSS static-analysis hardening pass, not a certified compliance audit. Fix all 26 resulting findings so the new checks pass the blocking gate clean: - Replace static_cast downcast on AuthEntryUI with a virtual beginThreeButton() method (PinState, VaultState) - Convert AdminHttpResponse beginResponse()/send() to std::unique_ptr ownership and replace manual malloc/free with std::vector in SerialTransport and the runtime-stats endpoint - Remove const_cast from WiFi scan SSID setup using local buffers - Add switch defaults in DevicePanel and VaultState tab dispatch - Use member-initializer list in LittleFsGuard - Document unavoidable manual allocations and const-incorrect vendor APIs (NimBLE) with scoped NOLINT comments - Document intentionally-disabled noisy guideline families with rationale Run cppcheck at exhaustive check level. Add a --bg-mockup design token to replace a hardcoded hex that was blocking the design-token guard.

1 month ago

Add vault menu tests, fix case-insensitive icon classification, UI capture infrastructure - Add test_vault_menu native tests (23 tests): menu selection cycling, scroll window logic, credential icon classification, layout verification - Fix drawCredentialIcon() case-sensitivity bug: Gmail/GITHUB/Wifi now correctly match their icons using containsCI() with strncasecmp - Add Gmail as Google icon alias in credential icon classification - Add verifyIntegrity parameter to VaultStore::loadCredential() to skip HMAC verification during menu listing (O(n) vs O(n*PBKDF2)) - Add serial debug commands: SCREENSHOT, ADDCRED, GOTO, WIPEVAULT, PIN - Add PinEntryUI timing arc implementation with shake-to-clear - Add VaultStore encrypted credential storage with AES-256-CBC + HMAC - Add BLE HID multi-host support with keyboard layout system - Add WiFi admin portal with credential management API - Add TOTP generator and audit logging subsystems - Add native test suites: crypto, bruteforce, TOTP, keyboard layouts, shake logic, audit logic, vault JSON, password generator, holdbutton - Add on-device test suites: vault_store, bruteforce_device, audit_device - Add HAL abstractions: PowerManager, AudioFeedback, ShakeDetector, IMU - Add FSM state handlers: PinState, VaultState, BleHidState, AdminState - Add CI workflow, pre-commit config, developer documentation - Add scripts: serial_screenshot.py, serial_button_test.py - Restructure project: move prompts to .github/prompts/, add agents - Update platformio.ini with native test environment and build filters - Remove obsolete root-level prompt files and old docs

3 months ago

Harden clang-tidy and cppcheck with safety-aligned C++ checks Enable a curated set of C++ Core Guidelines / HICPP checks aligned with safety-critical C++ review guidance: no owning raw pointers, no C-style memory management, no const-stripping casts, fully covered switch statements, member-initializer lists, virtual destructors, and no-definitions-in-headers. This is a best-effort OSS static-analysis hardening pass, not a certified compliance audit. Fix all 26 resulting findings so the new checks pass the blocking gate clean: - Replace static_cast downcast on AuthEntryUI with a virtual beginThreeButton() method (PinState, VaultState) - Convert AdminHttpResponse beginResponse()/send() to std::unique_ptr ownership and replace manual malloc/free with std::vector in SerialTransport and the runtime-stats endpoint - Remove const_cast from WiFi scan SSID setup using local buffers - Add switch defaults in DevicePanel and VaultState tab dispatch - Use member-initializer list in LittleFsGuard - Document unavoidable manual allocations and const-incorrect vendor APIs (NimBLE) with scoped NOLINT comments - Document intentionally-disabled noisy guideline families with rationale Run cppcheck at exhaustive check level. Add a --bg-mockup design token to replace a hardcoded hex that was blocking the design-token guard.

1 month ago