familysync

Files

T

Lucas Berger d6d91201b1 feat(01-03): implement AES-256-GCM app-password encryption (T-03-01)

- encryptPassword: randomBytes(12) IV, aes-256-gcm, returns JSON {iv,authTag,ciphertext}
- decryptPassword: verifies GCM auth tag; throws on tamper
- Key from APP_PASSWORD_ENCRYPTION_KEY env (64-char hex); validated on each call
- No logging of plaintext or key

2026-06-04 10:27:40 -04:00

src

feat(01-03): implement AES-256-GCM app-password encryption (T-03-01)

2026-06-04 10:27:40 -04:00

tests

test(01-03): add failing tests for AES-256-GCM crypto helpers

2026-06-04 10:26:59 -04:00

Dockerfile

fix(01-01): build Docker image from repo-root pnpm workspace context

2026-06-04 10:17:06 -04:00

drizzle.config.ts

feat(01-01): Drizzle schema + DB client + /health slice (GREEN)