# ClawVault

A personal vault with two-tier encryption for AI assistants.

## Features

- **Two-tier encryption**: L1 (server-side, AI-readable) + L2 (client-side only)
- **Single binary**: Go, cross-compiles, one port (default 8765)
- **Single file**: SQLite database, portable
- **LLM-powered import**: Parse any password manager export format
- **LLM field mapping**: Smart autofill via Chrome extension
- **MCP endpoint**: AI assistant integration
- **TOTP generation**: Live TOTP codes for L1 entries

## Quick Start

```bash
# Generate vault key
export VAULT_KEY=$(openssl rand -hex 32)
export PORT=8765
export DB_PATH=./clawvault.db

# Run
./clawvault
```

## Building

```bash
CGO_ENABLED=1 go build ./cmd/clawvault
```

## API Endpoints

- `GET /health` - Health check
- `POST /api/auth/setup` - Initialize session
- `GET/POST /api/entries` - CRUD entries
- `GET /api/search?q=` - Search entries
- `GET /api/generate` - Password generator
- `POST /api/import` - LLM import
- `GET /api/ext/totp/:id` - TOTP codes
- `GET /api/ext/match?url=` - URL matching
- `POST /api/ext/map` - LLM field mapping
- `POST /mcp` - MCP JSON-RPC endpoint
- `GET /api/audit` - Audit log

## Chrome Extension

Load `/extension` as unpacked extension in Chrome.

## License

Private - Johan Jongsma