What's Changed
- feat(sync): connecting a device joins the account's vaults instead of minting a second pack by @alchaplinsky in #483
- feat(workspace): every vault in the account on every device by @alchaplinsky in #484
- feat(workspace): add the account's other vaults with the password that just opened one by @alchaplinsky in #485
- feat(sync): publish writes after 2s and rerun a sync a write asked for mid-run by @alchaplinsky in #486
- feat(compact): one grey ground for the phone shell, white fields on it by @alchaplinsky in #487
- fix(autolock): lock on resume when the absence outlasted the timeout, arm from unlock by @alchaplinsky in #489
- fix(commands): narrow what scan_image and read_env_file will read by @alchaplinsky in #494
- fix(favicon): keep the icon cache inside the encrypted vault by @alchaplinsky in #491
- fix(import): cap the legacy .swftx backup size before reading it by @alchaplinsky in #496
- feat(security): privacy screen over the unlocked vault while unfocused by @alchaplinsky in #488
- fix(security): drop unused clipboard grant, cap response bodies, harden clipboard and keychain by @alchaplinsky in #493
- fix(oauth): a foreign loopback callback no longer aborts the sign-in by @alchaplinsky in #495
- fix(crypto): zeroize the derived SQLCipher key and legacy secret copies by @alchaplinsky in #497
- fix(passkeys): keep the private key in the core on reveal, merge it back on save by @alchaplinsky in #492
- fix(auth): checkpoint after rekey, retire the token file's generation on reseal by @alchaplinsky in #490
- docs(threat-model): match the document to the code by @alchaplinsky in #498
- chore(release): bump version to 1.0.0-alpha.2 by @alchaplinsky in #499
Full Changelog: v1.0.0-alpha.1...v1.0.0-alpha.2