Documentation

Architecture for operators and contributors

Apps

pnpm dev:web — Next.js vault at port 3000/3001.

pnpm dev:api — Hono API on Cloudflare Workers locally at port 8787.

pnpm dev:extension — MV3 extension via WXT.

Crypto

Master key: Argon2id. Vault: XChaCha20-Poly1305. Login: SRP-6a. Optional 2FA: TOTP.

API

Base path /api/v1. Health: GET /health. Authenticated routes send Authorization: Bearer <token>.

Email and billing

Sign-up requires mail secrets on the API: GMAIL_USER + GMAIL_APP_PASSWORD (or RESEND_API_KEY). With Stripe test keys unset, checkout uses /billing/checkout.