types.ts

1export interface Canary {2  webhookUrl: string;3  label?: string;4  lastPinged?: number;5  pingCount?: number;6}78export interface VaultEntry {9  id: string; // crypto.randomUUID()10  type?: "login" | "note" | "passkey"; // defaults to "login" for existing entries11  title: string;12  username?: string; // only for login entries13  password?: string; // only for login entries14  url?: string; // only for login entries15  totp?: string; // base32 seed, stored encrypted — only for login entries16  notes?: string;17  breach?: number; // HIBP exposure count; 0 or undefined = clean — only for login entries18  canary?: Canary;19  createdAt: number; // Date.now()20  modifiedAt: number;21  deletedAt?: number;22  tags?: string[];23  rpId?: string;24  rpName?: string;25  credentialId?: string;26  publicKeyCose?: string;27  privateKeyJwk?: JsonWebKey;28  userHandle?: string;29  userName?: string;30  userDisplayName?: string;31  algorithm?: -7 | -8;32  signCount?: number;33  aaguid?: string;34  backupEligible?: boolean;35  backupState?: boolean;36  lastUsedAt?: number;37}3839export interface LegacyVaultEntry {40  id: string;41  title: string;42  username: string;43  password: string;44  url: string;45  totp?: string;46  notes?: string;47  breach?: number;48  created: number;49  updated: number;50  deletedAt?: number;51}5253export interface PasskeyEntry extends VaultEntry {54  type: "passkey";55  rpId: string;56  rpName: string;57  credentialId: string;58  publicKeyCose: string;59  privateKeyJwk: JsonWebKey;60  userHandle: string;61  userName: string;62  userDisplayName: string;63  algorithm: -7 | -8;64  signCount: number;65  aaguid: string;66  backupEligible: boolean;67  backupState: boolean;68  lastUsedAt?: number;69}7071export interface PendingPasskeyRequest {72  requestId: number;73  type: "create" | "get";74  rpId: string;75  rpName: string;76  userName: string;77  userDisplayName?: string;78}7980export interface PasskeyProviderState {81  supported: boolean;82  enabled: boolean;83  attached: boolean;84  browserLabel: string;85  statusLabel: string;86  conflict?: string;87}8889export interface StoredVault {90  version: 1; // AAD for AES-GCM --- prevents downgrade91  salt: string; // hex --- 16 bytes, CSPRNG, stored not secret92  nonce: string; // hex --- 12 bytes, CSPRNG, fresh per write93  ciphertext: string; // hex --- AES-256-GCM output94  tag: string; // hex --- 16-byte GCM auth tag95}9697// Background-bound message types — sent from popup/content scripts,98// handled in src/background/messages.ts. Everything in this group must99// have a matching case in that file's switch statement.100export type MessageType =101  | "UNLOCK"102  | "LOCK"103  | "IS_UNLOCKED"104  | "HAS_VAULT"105  | "GET_ENTRIES"106  | "ADD_ENTRY"107  | "BATCH_ADD_ENTRIES"108  | "RESTORE_ENTRIES"109  | "CLEAR_VAULT_ENTRIES"110  | "UPDATE_ENTRY"111  | "DELETE_ENTRY"112  | "AUTOFILL_QUERY"113  | "COPY"114  | "CREATE_VAULT"115  | "GET_ENTRY_FOR_FILL"116  | "CHECK_BREACH"117  | "CHECK_ALL_BREACHES"118  | "GET_SETTINGS"119  | "UPDATE_SETTINGS"120  | "FIRE_CANARY_PING"121  | "ACTIVATE_LICENSE"122  | "GET_LICENSE"123  | "IS_DURESS_ENABLED"124  | "SETUP_DURESS"125  | "DISABLE_DURESS"126  | "VERIFY_MAIN_PASSWORD"127  | "CHANGE_PASSWORD"128  | "GET_SITE_PASSWORD_POLICY"129  | "GET_SYNC_STATE"130  | "TRIGGER_SYNC"131  | "START_PAIRING"132  | "CANCEL_PAIRING"133  | "ACCEPT_PAIRING"134  | "REMOVE_PAIRED_DEVICE"135  | "REMOVE_TRUSTED_NETWORK"136  | "MARK_NETWORK_TRUSTED"137  | "GET_PENDING_PASSKEY"138  | "APPROVE_PASSKEY"139  | "DENY_PASSKEY"140  | "DELETE_PASSKEY"141  | "GET_PASSKEYS"142  | "GET_PASSKEY_PROVIDER_STATE"143  | "SET_PASSKEY_PROVIDER_ENABLED"144  | "GET_DELETED_ENTRIES"145  | "RESTORE_ENTRY"146  | "PURGE_ENTRY"147  | "PURGE_EXPIRED_TRASH"148  | "LIST_VAULT_SNAPSHOTS"149  | "RESTORE_VAULT_SNAPSHOT"150  | "COUNT_DUPLICATES"151  | "DEDUPLICATE_ENTRIES"152  // Content-script-bound message types — sent BY the background TO content153  // scripts. They never reach messages.ts's switch. Kept in this union so154  // existing call sites type-check; do not add cases for them in the155  // background handler.156  | "PING"            // background → content: liveness probe157  | "SUMMON_AUTOFILL" // background → content: open the in-page palette158  | "VAULT_LOCKED"    // background → content/popup: vault just locked159  | "VAULT_UNLOCKED"; // background → content/popup: vault just unlocked160161export const ACCENT_COLORS = [162  { name: "peach",    hex: "#E8956D" },163  { name: "rose",     hex: "#E8909A" },164  { name: "plum",     hex: "#C49AC8" },165  { name: "lavender", hex: "#9FA8D4" },166  { name: "sky",      hex: "#85BAD4" },167  { name: "mint",     hex: "#7EC8A4" },168  { name: "sage",     hex: "#9AB87A" },169  { name: "butter",   hex: "#D4B96A" },170  { name: "sand",     hex: "#C8A882" },171  { name: "clay",     hex: "#C4826A" },172  { name: "slate",    hex: "#8A9EAA" },173  { name: "stone",    hex: "#A89E92" },174] as const;175176export type AccentColorName = typeof ACCENT_COLORS[number]["name"];177178export interface PasswordPolicy {179  minLength?: number;180  maxLength?: number;181  requiresUppercase?: boolean;182  requiresLowercase?: boolean;183  requiresNumbers?: boolean;184  requiresSymbols?: boolean;185  forbidsSymbols?: boolean;186  allowedSymbols?: string;187}188189export interface Message {190  type: MessageType;191  payload?: unknown;192}193194export interface MessageResponse {195  ok: boolean;196  data?: unknown;197  error?: string;198}