Initial ClawVault: entry model, L1 crypto, CRUD API, web UI, extension scaffold
Features:
- Two-tier encryption (L1 server-side, L2 client-side placeholder)
- SQLite with WAL mode
- HKDF per-entry key derivation
- zstd + AES-256-GCM encryption
- HMAC-SHA256 blind indexes for search
- Session-based auth
- Full CRUD API
- Password generator (random + passphrase)
- TOTP generation (L1 only, L2 returns flag)
- LLM import endpoint (Fireworks)
- LLM field mapping endpoint
- MCP JSON-RPC endpoint with 5 tools
- Vanilla JS web UI (Tailwind, dark theme)
- Chrome extension scaffold (MV3)
- Audit logging
Day 2: WebAuthn PRF, extension autofill, full L2 flow
0ff6db74cb