peach-browser

@june

A free, open source, local-first password manager for Chrome, Firefox, and Android.

TypeScript

v5.3.12 · 1,780 saves · 70,179 lines · updated 3 weeks ago

393 files
00037996fdf3
back to HEAD
crypto-core/69.5 KB · 1 month ago
fixtures/4.3 KB · 1 month ago
icons/6.4 KB · 5 months ago
public/398.1 KB · 2 months ago
scripts/134.6 KB · 1 month ago
src/3.9 MB · 1 month ago
background/1.2 MB · 1 month ago
aes.test.ts2.2 KB · 6 months agoaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.3.9 KB · 2 months agoalarms.test.ts10.5 KB · 1 month agoalarms.ts2.3 KB · 1 month agoclipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten path7.1 KB · 4 months agoclipboard.test.ts10.1 KB · 4 months agoclipboard.tsClipboard write + reliable auto-clear — audit fix HV-2.8.5 KB · 4 months agocodex-handlers.test.tsTests for src/background/codex-handlers.ts.7.7 KB · 2 months agocodex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.10.2 KB · 2 months agocommands.test.ts1.6 KB · 1 month agocommands.tsKeyboard command handler — routing for summon-inline: 1.2.7 KB · 1 month agodevice-identity.test.ts2.2 KB · 2 months agodevice-identity.tsLocal-device identity helpers for the sync architecture.5.9 KB · 2 months agoentry.lock-port.test.tsThe lock-on-close onConnect listener accepts only our nonce'd "popup-<uuid>" port from the extension page and ignores anything else.4.9 KB · 1 month agoentry.ts5.4 KB · 1 month agohealth.test.ts4.2 KB · 5 months agohealth.tshealth.ts — Pro advanced vault health analysis.5.1 KB · 5 months agolicense.ts4.9 KB · 5 months agolicense.verification.test.tsT-009: License Ed25519 signature verification9.9 KB · 2 months agolocked-sync-spool.test.ts8.2 KB · 1 month agolocked-sync-spool.ts8.7 KB · 1 month agomesh-relay-listener.test.ts2.5 KB · 1 month agomesh-relay-listener.ts7.4 KB · 1 month agomessage-policy.test.ts6.8 KB · 1 month agomessage-policy.ts7.2 KB · 1 month agomessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.43.2 KB · 1 month agomessages.autolock-refresh.test.tsPB-26-107: passive page traffic must not refresh the auto-lock timer.5.3 KB · 1 month agomessages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitization7.1 KB · 4 months agomessages.create-vault-from-root-key.test.ts3.0 KB · 4 months agomessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERY10.7 KB · 1 month agomessages.entry-write-origin.test.tsPB-26-106: content-script entry mutations must be bound to the entry's own domain set.10.9 KB · 1 month agomessages.passkey-offer-decline.test.tsPB-26-109: the passkey offer-decline handler is page-relay, so any page's content script may send it.5.3 KB · 1 month agomessages.test.ts69.2 KB · 1 month agomessages.tsmessages.ts — the only background message handler.81.8 KB · 1 month agoml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weights7.7 KB · 4 months agoml.ts6.0 KB · 5 months agonotes.test.ts9.4 KB · 1 month agooffscreen.html310 B · 4 months agooffscreen.tsOffscreen document script — audit fix HV-2c.1.8 KB · 4 months agopair-secrets.test.ts10.5 KB · 1 month agopair-secrets.tspair-secrets.ts — PB-26-213: the reusable rendezvous secret must never sit in plaintext in chrome.storage.local.9.3 KB · 1 month agopaired-devices.test.ts16.4 KB · 1 month agopaired-devices.tsPaired-device registry — v3 sync.17.9 KB · 1 month agopasskey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.31.4 KB · 1 month agopasskey-crypto.test.ts6.0 KB · 6 months agopasskey-crypto.ts10.9 KB · 2 months agopasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-0092.8 KB · 5 months agopasskey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.19.1 KB · 1 month agopasskey.ed25519.test.tsT-015: Ed25519 passkey round-trip9.4 KB · 4 months agopasskey.ts47.7 KB · 1 month agopending-vouched-devices.test.ts1.7 KB · 2 months agopending-vouched-devices.tsPending vouched devices — audit fix MV-7.2.3 KB · 2 months agorecovery-pending.test.ts3.0 KB · 1 month agorecovery-pending.tsBackground-owned state set while the user has just created or rotated a vault identity and is confirming their recovery words.1.7 KB · 1 month agorecovery-words.test.ts19.4 KB · 1 month agorecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.19.6 KB · 1 month agorelay-adoption-bg.test.ts40.7 KB · 1 month agorelay-adoption-bg.ts24.4 KB · 1 month agoself-test.test.ts1.2 KB · 4 months agoself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.3.8 KB · 4 months agostorage-access.test.ts2.9 KB · 1 month agostorage-access.tsPB-26-203: the session-key escrow is only as trustworthy as the boundary around chrome.storage.session.1.5 KB · 1 month agosync-alarm.test.ts4.0 KB · 3 months agosync-alarm.tssync-alarm.ts — the 10-minute background sync tick.3.8 KB · 3 months agosync-alerts.test.ts1.9 KB · 2 months agosync-alerts.tsPending sync security alerts.2.7 KB · 2 months agosync-coordinator.test.ts23.9 KB · 1 month agosync-coordinator.tsVault sync — Phase 2 manifest-diff coordinator.22.0 KB · 1 month agosync-runner.test.ts14.4 KB · 1 month agosync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via setSyncRunner.8.1 KB · 1 month agosync-settings.test.ts3.4 KB · 2 months agosync-settings.ts4.6 KB · 2 months agosync-static.test.tsIV.7 — Static safety assertions for vault sync.3.9 KB · 2 months agosync-trigger.test.ts14.1 KB · 3 months agosync-trigger.tssync-trigger.ts — central sync dispatcher.12.0 KB · 3 months agosync-vault-adapter.test.ts49.2 KB · 1 month agosync-vault-adapter.tsProduction adapter that backs runSyncInitiator with the live vault.22.7 KB · 1 month agovault-createVaultFromRootKey.test.ts8.2 KB · 3 months agovault-history.test.tsVault history tests.10.1 KB · 4 months agovault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.34.3 KB · 1 month agovault.card-decline.test.tsPB-26-108: declined-card metadata must not be offline-enumerable.8.5 KB · 1 month agovault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed ranking8.9 KB · 2 months agovault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)9.0 KB · 2 months agovault.duress-adoption.test.ts4.3 KB · 3 months agovault.entry-id-namespace.test.ts4.2 KB · 1 month agovault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.2.3 KB · 4 months agovault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundary9.7 KB · 4 months agovault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pending9.6 KB · 2 months agovault.session-escrow.test.ts17.1 KB · 1 month agovault.sync-clamp.test.tsUnit tests for HV-1 — sync timestamp clamp + remote-mutation alerts.5.8 KB · 1 month agovault.test.ts56.2 KB · 1 month agovault.tombstone-ledger.test.ts5.8 KB · 1 month agovault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.124.3 KB · 1 month agovault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).7.7 KB · 1 month ago
content/486.8 KB · 1 month ago
passkey-toast/19.1 KB · 1 month ago
_setup.tsShared test harness for the AUTOFILL-TESTS draft suite.7.7 KB · 2 months ago_smoke.test.ts@vitest-environment jsdom995 B · 4 months agocontent-ml-detector.ts6.1 KB · 6 months agocontent.adversarial.test.ts@vitest-environment jsdom21.5 KB · 4 months agocontent.detect.test.ts@vitest-environment jsdom19.0 KB · 2 months agocontent.dismissal.test.ts@vitest-environment jsdom11.8 KB · 1 month agocontent.field-icon.test.ts@vitest-environment jsdom4.9 KB · 2 months agocontent.field-interaction.test.ts@vitest-environment jsdom11.4 KB · 1 month agocontent.fill.test.ts@vitest-environment jsdom9.1 KB · 1 month agocontent.form-action-gate.test.ts@vitest-environment jsdom6.6 KB · 1 month agocontent.initial-scan.test.ts@vitest-environment jsdom5.8 KB · 4 months agocontent.interaction.test.ts@vitest-environment jsdom5.3 KB · 2 months agocontent.message-routing.test.ts@vitest-environment jsdom11.5 KB · 1 month agocontent.policy.test.ts@vitest-environment jsdom5.3 KB · 2 months agocontent.save.test.ts@vitest-environment jsdom5.6 KB · 2 months agocontent.selector-ui.test.ts@vitest-environment jsdom10.1 KB · 1 month agocontent.totp-group-icon.test.ts@vitest-environment jsdom3.4 KB · 2 months agodetect.test.ts@vitest-environment jsdom7.5 KB · 2 months agodetect.ts16.4 KB · 2 months agofill.test.ts@vitest-environment jsdom8.8 KB · 1 month agofill.ts6.0 KB · 1 month agoidentity-helper.test.ts2.0 KB · 4 months agoidentity-helper.ts1.7 KB · 4 months agoindex.ts48.9 KB · 1 month agoinject.generator.test.ts@vitest-environment jsdom1.7 KB · 1 month agoinject.keyguard.test.ts@vitest-environment jsdom2.5 KB · 4 months agoinject.tsinject.ts — autofill icon + selector overlay, injected into pages.171.5 KB · 1 month agointeraction.test.ts@vitest-environment jsdom2.0 KB · 5 months agointeraction.ts1.8 KB · 4 months agopasskeys-firefox.test.ts@vitest-environment jsdom16.2 KB · 1 month agopasskeys-firefox.tspasskeys-firefox.ts — isolated-world WebAuthn interception for Firefox.16.3 KB · 1 month agopolicy.test.ts@vitest-environment jsdom3.6 KB · 6 months agopolicy.tspolicy.ts — page-scraping helpers for password requirements.6.0 KB · 2 months agosave.ts8.7 KB · 4 months ago
crypto/108.6 KB · 1 month ago
popup/1.2 MB · 1 month ago
codex/237.5 KB · 1 month ago
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.10.1 KB · 2 months agobrowser-bundle.test.ts674 B · 5 months agocodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.24.8 KB · 1 month agocodex.multistripe.test.tsT-017: Codex multi-stripe round-trip8.9 KB · 4 months agocodex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.9.9 KB · 5 months agocodex.test.ts20.8 KB · 2 months agoconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.601 B · 5 months agoerasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.13.9 KB · 5 months agogenerate.test.ts17.1 KB · 5 months agogenerate.tsgenerate.ts — full Codex generation pipeline.16.9 KB · 2 months agohelpers.tshelpers.ts — shared utilities for Codex generation and restoration.7.8 KB · 2 months agonode-wasm.tsNode-only WASM byte loader for Vitest.1.1 KB · 5 months agopdf-import.clamp.test.ts2.5 KB · 4 months agopdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression test4.6 KB · 4 months agopdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.13.5 KB · 2 months agopdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.25.5 KB · 2 months agopdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.1.4 KB · 5 months agopdf.tspdf.ts — render the printable Codex PDF.8.1 KB · 5 months agoreed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.5.2 KB · 4 months agorestore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.11.0 KB · 2 months agorestore.tsrestore.ts — Peach Codex restoration library (popup-side).16.5 KB · 1 month agors-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.2.4 KB · 5 months agoscan-limits.test.tsscan-limits.test.ts — PB-26-207 resource bounds on the Codex scan path.12.5 KB · 1 month agoscanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.1.8 KB · 5 months ago
components/84.9 KB · 1 month ago
styles/225.1 KB · 1 month ago
views/623.9 KB · 1 month ago
Add.tsx31.7 KB · 1 month agoAdoptVaultView.test.tsx@vitest-environment jsdom12.3 KB · 1 month agoAdoptVaultView.tsx13.1 KB · 1 month agoCodexGenerateView.test.tsx@vitest-environment jsdom2.1 KB · 5 months agoCodexGenerateView.tsxPeach Codex — generation view.24.2 KB · 2 months agoCodexRestoreView.test.tsx@vitest-environment jsdom6.6 KB · 2 months agoCodexRestoreView.tsxPeach Codex — restoration view.24.1 KB · 1 month agocontracts.test.tsx@vitest-environment jsdom59.6 KB · 1 month agoEntry.totp-params.test.tsx@vitest-environment jsdom4.5 KB · 1 month agoEntry.tsx81.3 KB · 1 month agoExport.csv.test.ts@vitest-environment jsdom1007 B · 2 months agoExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (if (signal()) return <X/>).21.2 KB · 1 month agoHealth.test.tsx@vitest-environment jsdom2.5 KB · 5 months agoHealth.tsx21.2 KB · 2 months agoImport.test.tsx@vitest-environment jsdom4.1 KB · 1 month agoImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.32.2 KB · 1 month agoInitialSyncView.test.tsx@vitest-environment jsdom1.3 KB · 3 months agoInitialSyncView.tsx1.7 KB · 3 months agoLock.test.tsx@vitest-environment jsdom5.6 KB · 1 month agoLock.tsx50.1 KB · 1 month agoNoteEditor.toHtml.test.ts@vitest-environment jsdom3.6 KB · 5 months agoNoteEditor.tsx7.6 KB · 2 months agoNotesEditor.tsx7.6 KB · 2 months agoNotesMode.tsx2.9 KB · 5 months agoNotesTOC.tsx4.6 KB · 2 months agoOnboarding.tsx7.4 KB · 2 months agoPairDevice.test.tsx@vitest-environment jsdom7.7 KB · 1 month agoPairDevice.tsxPairDevice — the pairing surface, opened from the Settings → Sync card.11.0 KB · 2 months agoPanic.tsx6.0 KB · 6 months agoPasskeyApproval.tsx2.1 KB · 6 months agoProCelebration.tsx646 B · 6 months agoRecoveryWordDisplay.tsx8.9 KB · 2 months agoRecoveryWordEntry.tsx11.4 KB · 4 months agoSettings.tsx98.5 KB · 1 month agoTrashView.tsx5.7 KB · 6 months agovault-search.test.ts3.4 KB · 2 months agovault-search.ts4.6 KB · 2 months agoVault.tsx26.3 KB · 1 month agoview-test-utils.tsx1.1 KB · 4 months agoWhatsNew.tsx1.4 KB · 1 month agozxcvbn-strength.test.tsLV-8: the @zxcvbn-ts replacement must score the master-password strength meter on the same 0-4 scale as the old zxcvbn, with dictionaries loaded (language-common is what keeps weak passwords from scoring optimistically).1.2 KB · 4 months ago
App.tsx81.7 KB · 1 month agocopy.tsPopup-side copy helper.1.6 KB · 1 month agofirefox-passkey.tsfirefox-passkey.ts — popup-context WebAuthn caller for the Firefox path.4.0 KB · 6 months agogenerator-policy.ts2.2 KB · 1 month agoimport.csv.formulainjection.test.tsT-021: CSV formula-injection on import (round-trip)6.1 KB · 4 months agoindex.html1.1 KB · 5 months agoindex.tsx155 B · 2 months ago
shared/855.1 KB · 1 month ago
noise-core-wasm/440.8 KB · 1 month ago
bridge.ts1.6 KB · 5 months agobrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.6.5 KB · 5 months agobrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.1.3 KB · 6 months agocodex-types.tscodex-types.ts — shared shapes for the Peach Codex.10.4 KB · 2 months agoconfig.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).827 B · 3 months agoconstant-time.test.ts1.9 KB · 3 months agoconstant-time.tsCompare fixed-format cryptographic values without data-dependent early exit.823 B · 3 months agodevice-manifest.test.ts9.8 KB · 2 months agodevice-manifest.tsDevice manifest — v2 brief §4.3.10.0 KB · 2 months agodomain.homograph.test.tsLV-2: homograph detector tests.906 B · 4 months agodomain.ts1.5 KB · 2 months agoeff-short-wordlist.test.ts458 B · 1 month agoeff-short-wordlist.txt7.0 KB · 1 month agofavicon.test.ts1.2 KB · 6 months agofavicon.tsResolves a favicon URL for a given domain.3.4 KB · 5 months agogenerate.empty-pool.test.tsT-025: generate.ts empty-pool guard and maximum-length boundary3.9 KB · 1 month agogenerate.test.ts2.3 KB · 1 month agogenerate.ts2.9 KB · 1 month agoimport-limits.tsImport-path resource bounds — audit fixes MV-4 (decompression bomb) and MV-5 (unbounded file/string allocation).1.4 KB · 2 months agoimport.test.ts8.4 KB · 2 months agoimport.tsany is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).14.2 KB · 2 months agoinitial-sync.test.ts911 B · 3 months agoinitial-sync.ts667 B · 3 months agomesh-peer-role.ts1.9 KB · 1 month agoml.ts1.4 KB · 6 months agonoise-blake2s-kat.test.ts3.3 KB · 1 month agonoise-core.ts4.0 KB · 1 month agonoise-js.test.tsNoise NK auth proof regression test.9.7 KB · 4 months agonoise-js.tsNoise NK initiator for browser-to-browser sync.12.6 KB · 1 month agonoise-kk.test.ts4.9 KB · 1 month agonoise-small-order-dh.test.tsPB-26-014 follow-up — the JS-side DH boundaries in noise-js.ts mirror the Rust core's small-order X25519 blocklist (libhydrogen's contributory-behaviour list).3.0 KB · 2 months agonoise.reject-zero-dh.test.tsPCH-02-009 regression tests — every Noise NK DH must reject an all-zero shared secret (low-order / identity peer point) instead of feeding it into the key schedule.2.6 KB · 2 months agopairing-dial.test.ts7.4 KB · 1 month agopairing-dial.tsThe WebSocket seam every relay-facing Peach flow shares.4.3 KB · 1 month agopairing-handshake.tsShared pairing primitives used by the live relay-adoption path.1.1 KB · 2 months agopairing-invitation.test.ts4.2 KB · 1 month agopairing-invitation.ts4.3 KB · 1 month agopasskey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.2.1 KB · 6 months agopasskey-utils.test.ts1.5 KB · 1 month agopasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.1.3 KB · 1 month agorecovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.20.0 KB · 2 months agorecovery-words.checksum.test.tsT-002: BIP39 checksum rejection4.6 KB · 4 months agorecovery-words.cross-platform.test.ts2.4 KB · 3 months agorecovery-words.integrity.test.tsT-001: BIP39 word-list integrity2.6 KB · 4 months agorecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)6.7 KB · 4 months agorecovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.6.3 KB · 4 months agorelease-notes.test.ts2.5 KB · 1 month agorelease-notes.tsBuild-time release notes for the "what's new" screen.2.3 KB · 1 month agorendezvous.test.ts3.1 KB · 3 months agorendezvous.ts5.9 KB · 3 months agoshortcuts.test.ts@vitest-environment jsdom4.0 KB · 6 months agoshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.6.7 KB · 6 months agostorage.ts537 B · 5 months agosync-identity.test.ts3.0 KB · 3 months agosync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.7.4 KB · 3 months agosync-kk-transport.test.ts16.3 KB · 2 months agosync-limits.tsSync trust + resource bounds — audit fixes HV-1 (timestamp clamp) and MV-3 (receive-path size bounds).4.5 KB · 1 month agosync-outcome.test.ts6.0 KB · 3 months agosync-outcome.tsWhy a sync run ended, in a form both the service worker and the popup can name.6.1 KB · 3 months agosync-padding.test.ts4.9 KB · 3 months agosync-padding.tsE7: frame padding at the relay boundary.4.6 KB · 3 months agosync-transport.tsWebSocket reconnect transport — Noise KK with both paired static keys.20.6 KB · 2 months agosync-types.tsVault sync — type definitions.7.5 KB · 2 months agosync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)10.9 KB · 2 months agotypes.tstypes.ts — cross-boundary types and the MessageType union.15.9 KB · 1 month agovault-adopt-snapshot.test.ts15.7 KB · 1 month agovault-adopt.test.ts33.7 KB · 1 month agovault-adopt.ts27.7 KB · 1 month ago
test/641 B · 2 months ago
tests/110.1 KB · 1 month ago
biome.json1.0 KB · 2 months agobun.lock135.8 KB · 2 months agoDockerfile.firefox-gate281 B · 1 month agokepr.build86 B · 2 months agoLICENSE34.3 KB · 4 months agomanifest.firefox.json2.0 KB · 1 month agomanifest.json1.6 KB · 1 month agopackage.json2.9 KB · 1 month agoplaywright.config.ts1.8 KB · 1 month agoREADME.mdA free, open source, local-first password manager for Chrome, Firefox, and Android.2.0 KB · 2 months agotsconfig.json521 B · 2 months agovite.config.ts3.6 KB · 1 month agovitest.config.ts526 B · 2 months ago
4cefcb6b900atighten PeachScript subview to match export password card pattern (peach-settings-input, password-stack, master-password labelled section, mismatch hint); surface real backend error code instead of swallowing as RESTORE_FAILED; bump 2.7.36 months ago24d24af0eefdadd peachscript tile to onboarding restore picker as primary option; add initialView prop to ImportView so callers can deep-link into a specific subview; bump 2.7.26 months agobce5897d91f7redesign Import view to mirror Export menu pattern: card menu (peachscript paste / backup file) routes into focused subviews; PeachScript is the primary import path; preserve onboarding header, replace warning, master-password creation, merge/replace flows; bump 2.7.16 months ago9d435183c145delete all CJK code: 9 crypto modules + tests, CJKImport view, all UI references in App/Lock/Import/Settings, CSS rules, and stale comments; rename peach-cjk-qr-card to peach-passkey-card; bump 2.7.06 months ago8b496c05bd31before full CJK removal6 months ago06d1cb878ddcremove deprecated CJK phrase button from Settings restore surface; legacy CJK import still reachable via Import.tsx fallback; bump 2.6.46 months agoed4ce861a751reset trash-confirm and inline edits on entry change so prompts don't persist across selection; bump 2.6.36 months ago1306d91f5d4afix CFF private dict so Chromium OTS sanitizer accepts the font; suppress export result group bottom border; bump 2.6.26 months ago29b9d815a1dfreplace 15 weak layer-4 glyphs with stronger runic forms per tuning brief6 months agof3478eae923bregenerate PeachScript-Regular.otf with 256 historical-runic glyphs across four authentic extension layers6 months agofc2b557daaafbefore peachscript v2 font regeneration6 months ago6fb3c1f9873elog rune canvas + password autofocus session6 months ago7988534357d6autofocus first password input and submit on Enter for peachscript and QR backup forms6 months agoc5d246f728d6replace static peachscript text with animated RuneCanvas — scrolling rows with accent embers6 months agof2a5092253bdAppearance: 4 display fonts (Cormorant Italic / Cormorant / Inter / System), 3 text sizes (small / default / large via zoom), reduce-motion toggle — all driven by data-attributes on html and CSS variables so desktop/mobile builds inherit the same plumbing (v2.6.0)6 months ago2d236b3fa7d9PeachScript display: 22px glyphs, accent-tinted surface and glow, fill remaining vertical space, hidden horizontal scroll, styled vertical scrollbar; export menu: distribute three format cards across the popup (v2.5.1)6 months ago337f921aba65remove CJKExport.tsx + cjkPassphrase + their tests; trim backup.ts; bump to v2.5.0; update Projects.md §3.7 and §7.5; session notes outcomes6 months ago964d7e074a21rewrite Export.tsx and Import.tsx as unified screens — PeachScript primary, QR + CSV secondary, legacy CJK collapsed in import6 months agoab37b5888acaadd peachQR.ts — standard QR encoder for printable backup with explicit capacity boundary (proprietary matrix code deferred)6 months ago38a1ce3728e4add peachPayload.ts — section-based binary format with shared string table, delta timestamps, raw UUID bytes, AES-256-GCM envelope under Argon2id6 months ago1ad3a3572756add peachScript.ts — PUA U+E000..U+E0FF byte-to-codepoint codec with full round-trip tests6 months ago3cd9c3a61b67before peach export system v2.5.0 — peachScript, QR, CSV, legacy CJK removal6 months ago1233f69caec8Sync screen redesign: full feature showcase for free users replacing sparse gate (v2.4.5)6 months agobddf8230659bnav_prev/nav_next shortcuts changed from ArrowUp/Down to ArrowLeft/Right (v2.4.4)6 months ago0f322cfe1208License screen: real PeachMark SVG replaces emoji, Get Peach Pro button shrunk (v2.4.3)6 months ago7faf15611234session notes and Projects.md updated with pro addendum decisions and State 11 (v2.4.2)6 months ago2c915c4eb112passkey Pro gate in inline popup (State 11), background sync pendingProNotice banner (v2.4.2)6 months agof87c03ab9e01license key included in CJK and encrypted JSON vault exports, restored on import (v2.4.1)6 months ago34d5c471b02cbefore pro addendum — license export, passkey gate, sync notice6 months agob44e8d8142ccPro activation celebration — plays once on first popup open after license activation6 months agof2a05b205496before Pro celebration view6 months ago1cce4388cf54identity helper State 10 complete — version bump, Projects.md §4.15, session notes outcomes (v2.4.0)6 months ago4b42e5fd90d4State 10 renderIdentityHelper() in inject.ts, openSignupSelector fetches GET_IDENTITIES and wires email→generator→save flow6 months ago5c84f57c81c7SavedIdentity type, GET_IDENTITIES in MessageType, getIdentities() in vault.ts, handler and tests in messages.ts6 months ago1697ce363850before identity helper State 106 months agod204c0a4c417feat: Pro gate — requirePro(), PRO_GATE_TRIGGERED, sync/passkeys/health/smart-change handler enforcement (v2.3.0)6 months ago83e4ac8c9fbfbefore pro tier master plan v2.3.06 months ago15583ef6c4c5phase C: rebind UI in Settings → Shortcuts (per-action chip with capture-mode 'Press a key…' state, conflict detection vs other bindings, per-row reset and reset-all), help dialog overlay (?), App.tsx applyShortcuts persists only deltas vs DEFAULT_BINDINGS so future default updates land for non-customized actions; updates contracts.test.tsx for new SettingsView props (v2.3.0)6 months agoa17baeac9c45phase B: wire popup keyboard handler through bindings — replace hardcoded switch with SHORTCUT_HANDLERS map + matchKeybinding loop, load active bindings from settings on init, add new actions (copy_totp, edit_entry, delete_entry, jump_vault, jump_settings, show_help), input-focus and entry-scope guards preserve existing behavior; type-to-search remains a behavior (not an action)6 months ago616b4528790dphase A: add shared/shortcuts.ts — ShortcutAction union of 13 actions, Keybinding type, DEFAULT_BINDINGS (c/u/t/n/e/d/L=ctrl-l/?=shift+?/↑↓/ctrl+1/ctrl+,), matchKeybinding/keybindingFromEvent/formatKeybinding/findConflict helpers; add shortcuts? to VaultSettings; 15 unit tests cover matcher/formatter/conflict/override merging6 months ago91c0d36709babefore mature shortcuts system overhaul6 months agoe7eb8d5166f4fix: light-theme contrast — settings section icons darken from pure peach to peach-on-ink mix with stronger bg tint; replace 4 hardcoded rgba(240,232,216,*) text-color rules with var(--peach-t0) so they follow theme (peach-restore-warning, domain-chip, tag-filter-chip selected, duress-status active); peach-info-notice bg moves from invisible cream-on-cream to surface-card token (v2.2.3)6 months agofdc41e4571bbfeat: Pro benefits promo on Account screen — Cormorant italic headline, mono tagline, three accent-icon benefit bullets (Sync, Passkeys, future features), accent CTA with glow, radial gradient backdrop, divider before activate-key flow (v2.2.2)6 months ago6dfe457ed344fix: replace stray Unicode ⓤ/ⓟ glyphs in silver-platter and card-platter copy buttons with plain text — Copy username / Copy password / Copy number / Copy CVC (v2.2.1)6 months ago7a3d55d3fcc1supersede 14:18 [PROGRESS] and [PLANS] with the closing OUTCOMES record for v2.2.0 (Pass 7 done, save 5b1bd9672185 tagged v2.2.0)6 months ago5b1bd9672185feat: inline popup complete redesign — first-class citizen of Peach (v2.2.0): bump 2.1.9 → 2.2.0 in package.json + both manifests, add Projects.md §4.14 (state machine, theme system, dismissal + fill-success lock model, card autofill wiring, deferred follow-ups), append session notes OUTCOMES6 months ago2f850bd105b2add TOTP tray to silver platter — ··· button expands tray with grouped TOTP code, accent-colored countdown ring, copy button; cleanupHooks ensures the 1s refresh interval is cleared on dismiss6 months agoe088bc468451add card silver platter (State 7): extend AUTOFILL_QUERY with kind=card, new showCardSelector + setupCardAutofill wiring with icon injection on cc-number, fillCardForm integration, dismissal + fill-success lock reuse6 months ago217979dbf3f7wip: record session progress (Passes 0–4 done) and remaining plan (Passes 5–7)6 months ago708e87ada524fill detected form fields after new-entry save in both login and signup modes; record into filledForms to suppress reopens6 months ago

← newerolder →

details

Peach

A free, open source, local-first password manager for Chrome, Firefox, and Android.

Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.

peachpasswords.com


Features

  • Passwords, cards, and secure notes — keep your private data together in one encrypted vault
  • Inline autofill — fill and save credentials without leaving the page
  • TOTP built in — generate two-factor codes without a separate authenticator
  • Password health — find weak, reused, and exposed passwords
  • Portable backups — export and restore with PeachScript or a .peach file

Peach Pro adds:

  • Peach Sync — end-to-end encrypted sync across paired devices
  • Passkeys — save and use passkeys in Chrome and Firefox
  • Peach Codex — print an encrypted, scannable backup of your vault
  • Advanced vault health, Canary Entries, and duress tools

See the Peach website for current availability and Pro details.


Install


Open Source

Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.

The source is hosted on Kepr, Asha Software's version control platform.


Security

Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.

Implementation details live alongside the code:


Building

bun install --frozen-lockfile
bun run build

Builds are written to dist-chrome/ and dist-firefox/.


Built by Asha Software · [email protected]