johan
/
clawvault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Imported from bare git on Zurich
1 Commit 1 Branch 0 Tags 62 KiB
Go 54.5%
HTML 33.9%
JavaScript 11.6%
Go to file
James (AI) 0ff6db74cb Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 
Features:
- Two-tier encryption (L1 server-side, L2 client-side placeholder)
- SQLite with WAL mode
- HKDF per-entry key derivation
- zstd + AES-256-GCM encryption
- HMAC-SHA256 blind indexes for search
- Session-based auth
- Full CRUD API
- Password generator (random + passphrase)
- TOTP generation (L1 only, L2 returns flag)
- LLM import endpoint (Fireworks)
- LLM field mapping endpoint
- MCP JSON-RPC endpoint with 5 tools
- Vanilla JS web UI (Tailwind, dark theme)
- Chrome extension scaffold (MV3)
- Audit logging

Day 2: WebAuthn PRF, extension autofill, full L2 flow
 		2026-02-28 15:42:48 -05:00
api Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
cmd/clawvault Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
extension Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
lib Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
.gitignore Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
README.md Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
SPEC.md Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
go.mod Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00
go.sum Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold 2026-02-28 15:42:48 -05:00

README.md

ClawVault

A personal vault with two-tier encryption for AI assistants.

Features

  • Two-tier encryption: L1 (server-side, AI-readable) + L2 (client-side only)
  • Single binary: Go, cross-compiles, one port (default 8765)
  • Single file: SQLite database, portable
  • LLM-powered import: Parse any password manager export format
  • LLM field mapping: Smart autofill via Chrome extension
  • MCP endpoint: AI assistant integration
  • TOTP generation: Live TOTP codes for L1 entries

Quick Start

# Generate vault key
export VAULT_KEY=$(openssl rand -hex 32)
export PORT=8765
export DB_PATH=./clawvault.db

# Run
./clawvault

Building

CGO_ENABLED=1 go build ./cmd/clawvault

API Endpoints

  • GET /health - Health check
  • POST /api/auth/setup - Initialize session
  • GET/POST /api/entries - CRUD entries
  • GET /api/search?q= - Search entries
  • GET /api/generate - Password generator
  • POST /api/import - LLM import
  • GET /api/ext/totp/:id - TOTP codes
  • GET /api/ext/match?url= - URL matching
  • POST /api/ext/map - LLM field mapping
  • POST /mcp - MCP JSON-RPC endpoint
  • GET /api/audit - Audit log

Chrome Extension

Load /extension as unpacked extension in Chrome.

License

Private - Johan Jongsma