@opensesame-labs/web-pwa 0.0.0-alpha.0

package/dist/contact.html

@@ -0,0 +1,37 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="Contact the OpenSesame project for support, security reports, and corrections." />
+    <link rel="canonical" href="https://opensesame-labs.github.io/OpenSesame/contact.html" />
+    <title>Contact — OpenSesame</title>
+    <style>
+      body { margin: 0; padding: 3rem 1.5rem; background: #0f172a; color: #f8fafc; font-family: ui-sans-serif, system-ui, sans-serif; line-height: 1.65; }
+      main { max-width: 46rem; margin: 0 auto; }
+      h1 { margin-top: 0; font-size: clamp(2rem, 6vw, 3.5rem); line-height: 1.05; }
+      h2 { margin-top: 2.25rem; font-size: 1.25rem; }
+      a { color: #5eead4; }
+      nav { margin-top: 2.5rem; padding-top: 1.25rem; border-top: 1px solid #334155; }
+    </style>
+  </head>
+  <body>
+    <main>
+      <p><a href="./">OpenSesame</a></p>
+      <h1>Contact</h1>
+      <p>OpenSesame is an open-source project. Use the public repository for support, bug reports, documentation corrections, and security reports.</p>
+      <h2>Security reports</h2>
+      <p>Do not open a public issue for a vulnerability. Follow the <a href="https://github.com/OpenSesame-Labs/OpenSesame/blob/main/SECURITY.md">security policy</a> and use the repository's private vulnerability reporting channel.</p>
+      <h2>Support and corrections</h2>
+      <p>Open an issue in the <a href="https://github.com/OpenSesame-Labs/OpenSesame/issues">issue tracker</a>. For documentation corrections, name the page and the exact sentence that is wrong.</p>
+      <h2>Project</h2>
+      <p>Source: <a href="https://github.com/OpenSesame-Labs/OpenSesame">github.com/OpenSesame-Labs/OpenSesame</a></p>
+      <nav aria-label="Related pages">
+        <a href="./about.html">About</a> ·
+        <a href="./privacy.html">Privacy</a> ·
+        <a href="./llms.txt">Agent guide</a> ·
+        <a href="./">Open the vault</a>
+      </nav>
+    </main>
+  </body>
+</html>

package/dist/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="OpenSesame"><rect width="64" height="64" fill="#141414"/><rect x="14" y="14" width="25.41" height="36" fill="#fafafa"/><rect x="45.13" y="14" width="4.87" height="36" fill="#8f8f8f"/></svg>

package/dist/index.html

@@ -0,0 +1,150 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
+    <!--
+      frame-ancestors is deliberately absent: browsers ignore it from a <meta>
+      tag and only warn. Serve it as a real header where the host allows one;
+      main.tsx refuses to render in a frame regardless.
+    -->
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'sha256-6DtvkkhQ3dSqcKgUYs1uu2b7053J7K0tPxCHpnbYiN4='; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: blob:; connect-src 'self' data: http: https: ws: wss:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; form-action 'self' https://github.com; frame-src 'none'"    />
+    <script src="/OpenSesame/browser-schema-config.js"></script>
+    <meta name="referrer" content="no-referrer" />
+    <meta name="color-scheme" content="light dark" />
+    <meta
+      name="theme-color"
+      media="(prefers-color-scheme: light)"
+      content="#fafafa"
+    />
+    <meta
+      name="theme-color"
+      media="(prefers-color-scheme: dark)"
+      content="#0f0f0f"
+    />
+    <meta
+      name="description"
+      content="OpenSesame — an end-to-end-encrypted vault for passwords, passkeys, and agent secrets, with an auth broker for static sites."
+    />
+    <link rel="icon" href="data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA2NCA2NCIgcm9sZT0iaW1nIiBhcmlhLWxhYmVsPSJPcGVuU2VzYW1lIj48cmVjdCB3aWR0aD0iNjQiIGhlaWdodD0iNjQiIGZpbGw9IiMxNDE0MTQiLz48cmVjdCB4PSIxNCIgeT0iMTQiIHdpZHRoPSIyNS40MSIgaGVpZ2h0PSIzNiIgZmlsbD0iI2ZhZmFmYSIvPjxyZWN0IHg9IjQ1LjEzIiB5PSIxNCIgd2lkdGg9IjQuODciIGhlaWdodD0iMzYiIGZpbGw9IiM4ZjhmOGYiLz48L3N2Zz4K" type="image/svg+xml" />
+    <link rel="apple-touch-icon" href="/OpenSesame/icon-192.png" />
+    <link rel="canonical" href="https://opensesame-labs.github.io/OpenSesame/" />
+    <link rel="alternate" type="text/markdown" href="./index.md" title="OpenSesame in Markdown" />
+    <meta name="is-agentic-site-type" content="app" />
+    <meta name="application-name" content="OpenSesame" />
+    <meta name="robots" content="index, follow" />
+    <meta property="og:type" content="website" />
+    <meta property="og:title" content="OpenSesame — encrypted vault and agent auth broker" />
+    <meta property="og:description" content="An end-to-end-encrypted vault for passwords, passkeys, and agent secrets, with an auth broker for static sites." />
+    <meta property="og:url" content="https://opensesame-labs.github.io/OpenSesame/" />
+    <meta name="twitter:card" content="summary" />
+    <script type="application/ld+json">
+      {
+        "@context": "https://schema.org",
+        "@graph": [
+          {
+            "@type": "Organization",
+            "@id": "https://opensesame-labs.github.io/OpenSesame/#organization",
+            "name": "OpenSesame",
+            "url": "https://opensesame-labs.github.io/OpenSesame/",
+            "sameAs": ["https://github.com/OpenSesame-Labs/OpenSesame"]
+          },
+          {
+            "@type": "WebSite",
+            "@id": "https://opensesame-labs.github.io/OpenSesame/#website",
+            "name": "OpenSesame",
+            "url": "https://opensesame-labs.github.io/OpenSesame/",
+            "description": "An end-to-end-encrypted vault for passwords, passkeys, and agent secrets, with an auth broker for static sites.",
+            "publisher": { "@id": "https://opensesame-labs.github.io/OpenSesame/#organization" }
+          },
+          {
+            "@type": "SoftwareApplication",
+            "@id": "https://opensesame-labs.github.io/OpenSesame/#application",
+            "name": "OpenSesame",
+            "url": "https://opensesame-labs.github.io/OpenSesame/",
+            "applicationCategory": "SecurityApplication",
+            "operatingSystem": "Any",
+            "description": "A local-first encrypted vault with passkeys, an auth broker for static sites, and scoped secrets for agents.",
+            "isPartOf": { "@id": "https://opensesame-labs.github.io/OpenSesame/#website" },
+            "sameAs": ["https://github.com/OpenSesame-Labs/OpenSesame"]
+          }
+        ]
+      }
+    </script>
+    <style>
+      .static-door { box-sizing: border-box; min-height: 100vh; margin: 0; padding: clamp(2rem, 8vw, 6rem); display: grid; place-content: center; gap: 1rem; background: #0f172a; color: #f8fafc; font-family: ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif; }
+      .static-door * { box-sizing: border-box; }
+      .static-door__eyebrow { margin: 0; color: #5eead4; font: 600 0.75rem/1.4 ui-monospace, SFMono-Regular, Menlo, monospace; letter-spacing: 0.18em; text-transform: uppercase; }
+      .static-door h1 { max-width: 17ch; margin: 0; font-size: clamp(2.25rem, 7vw, 4.5rem); line-height: 0.98; letter-spacing: -0.04em; }
+      .static-door__lede { max-width: 58ch; margin: 0; color: #cbd5e1; font-size: clamp(1rem, 2vw, 1.25rem); line-height: 1.6; }
+      .static-door__facts { max-width: 58ch; margin: 0; padding-left: 1.1rem; color: #cbd5e1; line-height: 1.6; }
+      .static-door__links { display: flex; flex-wrap: wrap; gap: 0.75rem 1.25rem; margin-top: 0.5rem; }
+      .static-door a { color: #5eead4; text-underline-offset: 0.2em; }
+      .static-door a:focus-visible { outline: 2px solid #5eead4; outline-offset: 4px; }
+    </style>
+    <title>OpenSesame — encrypted vault and agent auth broker</title>
+    <script type="module" crossorigin src="/OpenSesame/assets/main-BrkS-iow.js"></script>
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/native-worker-noble-ciphers-708367a7-BPuD3lXB.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/native-worker-noble-hashes-b1a58353-IgGIMWEC.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/native-worker-bytes-a0e18d71-DFmKzL3P.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/vault-ui-seam-BQGS7RR6.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/model-provider-B6oAnQX9.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/hosted-model-authority-CcNPE44H.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/native-worker-zod-jitless-ba55e4a3-DZHC6DC7.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/native-worker-zod-5c0ed887-B342B6ko.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/identity-BVf8yWa4.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/signals-DdOHdr--.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/drop-open-BjgdLxWM.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/react-dom-BwC4eQlG.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/seams-DJ_lslby.js">
+    <link rel="modulepreload" crossorigin href="/OpenSesame/assets/react-router-XsJY84ug.js">
+    <link rel="stylesheet" crossorigin href="/OpenSesame/assets/main-BKK5N8Uh.css">
+  <link rel="manifest" href="/OpenSesame/manifest.webmanifest"></head>
+  <body>
+    <!--
+      THESIS: A real end-to-end-encrypted vault. The master password derives the key that decrypts
+        every item; nothing else does, and nothing leaves the device. Four audiences, one store:
+        humans keep passwords and passkeys, agents draw scoped grants, websites authenticate
+        against it, developers govern it.
+      OWN-WORLD: Password-manager canon (Bitwarden / 1Password craft bar) in OpenSesame navy and
+        teal. Three-pane desktop frame — navy rail, list, detail. System UI stack; mono reserved
+        for codes, digests, and measurements. Light and dark both first-class.
+      STORY: Create or unlock the vault → land on the item list → reveal, copy, generate, rotate →
+        step sideways into Agents, Sites, or Authority when the same identity governs more than
+        passwords.
+      FIRST VIEWPORT: The unlock card, stating plainly that there is no recovery, over a navy
+        ground. First run adds a strength meter and an explicit acknowledgement.
+      FORM: Canon taken by the user's own words ("it's a Bitwarden alternative"), executed at full
+        fidelity — no irony, no smuggled quirk. Craft bar: Bitwarden, 1Password.
+      FINISH: pending — full redesign in flight; DESIGN.md rewritten from the built result.
+    -->
+    <div id="root">
+      <main class="static-door">
+        <p class="static-door__eyebrow">OpenSesame</p>
+        <h1>An encrypted vault for people, agents, and websites.</h1>
+        <p class="static-door__lede">
+          OpenSesame is a local-first, end-to-end-encrypted vault. Your master
+          password derives the key that opens it; the server never sees that
+          key. Keep passwords, passkeys, cards, notes, and agent secrets in one
+          place, then let a website or an approved agent ask for a narrow,
+          time-boxed grant instead of your password.
+        </p>
+        <ul class="static-door__facts">
+          <li>Passwords, passkeys, TOTP, cards, and secure notes.</li>
+          <li>An auth broker for static sites, with scoped share grants.</li>
+          <li>Agent access that is explicit, auditable, and revocable.</li>
+        </ul>
+        <nav class="static-door__links" aria-label="OpenSesame resources">
+          <a href="./">Open the vault</a>
+          <a href="./llms.txt">Agent guide (llms.txt)</a>
+          <a href="./about.html">About</a>
+          <a href="./privacy.html">Privacy</a>
+          <a href="https://github.com/OpenSesame-Labs/OpenSesame">Source code</a>
+          <a href="https://github.com/OpenSesame-Labs/OpenSesame/tree/main/docs">Documentation</a>
+        </nav>
+      </main>
+    </div>
+</body>
+</html>

package/dist/index.md

@@ -0,0 +1,22 @@
+# OpenSesame
+
+An encrypted vault for people, agents, and websites.
+
+OpenSesame is a local-first, end-to-end-encrypted vault. Your master password derives the key that opens it; the server never sees that key. Keep passwords, passkeys, cards, notes, and agent secrets in one place, then let a website or an approved agent ask for a narrow, time-boxed grant instead of your password.
+
+## What it does
+
+- Stores passwords, passkeys, TOTP secrets, cards, and secure notes.
+- Acts as an auth broker for static sites with scoped share grants.
+- Gives agents explicit, auditable, and revocable access.
+- Runs in the browser with no server-side vault key and no password recovery.
+
+## Start
+
+- [Open the vault](https://opensesame-labs.github.io/OpenSesame/)
+- [Read the agent guide](https://opensesame-labs.github.io/OpenSesame/llms.txt)
+- [About](https://opensesame-labs.github.io/OpenSesame/about.html)
+- [Privacy](https://opensesame-labs.github.io/OpenSesame/privacy.html)
+- [Contact](https://opensesame-labs.github.io/OpenSesame/contact.html)
+- [Source code](https://github.com/OpenSesame-Labs/OpenSesame)
+- [Documentation](https://github.com/OpenSesame-Labs/OpenSesame/tree/main/docs)

package/dist/licenses/saml-xml.txt

@@ -0,0 +1,315 @@
+Third-party notices for the optional browser SAML XML-signature adapter.
+
+The adapter uses native browser DOM and WebCrypto. Its browser library closure
+and locked Node parser peer have the following permissive licenses.
+
+========================================================================
+xmldsigjs 3.0.0 — LICENSE
+========================================================================
+# MIT License
+
+Copyright (c) 2015-2025 Peculiar Ventures LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+xml-core 3.0.0 — LICENSE
+========================================================================
+# MIT License
+
+Copyright (c) 2015-2025 Peculiar Ventures LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+pkijs 3.4.1 — LICENSE
+========================================================================
+Copyright (c) 2014, GlobalSign
+Copyright (c) 2015-2019, Peculiar Ventures
+All rights reserved.
+
+Author 2014-2019, Yury Strozhevsky
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice, this
+  list of conditions and the following disclaimer in the documentation and/or
+  other materials provided with the distribution.
+
+* Neither the name of the {organization} nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+========================================================================
+asn1js 3.0.10 — LICENSE
+========================================================================
+Copyright (c) 2014, GMO GlobalSign
+Copyright (c) 2015-2022, Peculiar Ventures
+All rights reserved.
+
+Author 2014-2019, Yury Strozhevsky
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice, this
+  list of conditions and the following disclaimer in the documentation and/or
+  other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+========================================================================
+pvtsutils 1.3.6 — LICENSE
+========================================================================
+MIT License
+
+Copyright (c) 2017-2024 Peculiar Ventures, LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+pvutils 1.2.0 — LICENSE
+========================================================================
+MIT License
+
+Copyright (c) 2016-2019, Peculiar Ventures
+All rights reserved.
+
+Author 2016-2019, Yury Strozhevsky
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+========================================================================
+tslib 2.8.1 — LICENSE.txt
+========================================================================
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+========================================================================
+tslib 2.8.1 — CopyrightNotice.txt
+========================================================================
+/******************************************************************************
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+***************************************************************************** */
+
+
+
+========================================================================
+xpath 0.0.34 — LICENSE
+========================================================================
+MIT License
+
+Copyright (c) 2018 Cameron McCormack
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+========================================================================
+bytestreamjs 2.0.1 — LICENSE
+========================================================================
+Copyright (c) 2016-2022, Peculiar Ventures
+All rights reserved.
+
+Author 2016-2019, Yury Strozhevsky
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice, this
+  list of conditions and the following disclaimer in the documentation and/or
+  other materials provided with the distribution.
+
+* Neither the name of the {organization} nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+========================================================================
+@noble/hashes 1.8.0 — LICENSE
+========================================================================
+The MIT License (MIT)
+
+Copyright (c) 2022 Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+========================================================================
+@xmldom/xmldom 0.9.12 — LICENSE
+========================================================================
+Copyright 2019 - present Christopher J. Brody and other contributors, as listed in: https://github.com/xmldom/xmldom/graphs/contributors
+Copyright 2012 - 2017 @jindw <jindw@xidea.org> and other contributors, as listed in: https://github.com/jindw/xmldom/graphs/contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/dist/llms.txt

@@ -0,0 +1,35 @@
+# OpenSesame
+
+OpenSesame is a local-first, end-to-end-encrypted vault for passwords, passkeys, cards, notes, and agent secrets, with an auth broker for static websites.
+
+## When to use OpenSesame
+
+Use OpenSesame when a person or an agent needs a credential, a passkey, or a scoped secret and the credential must stay on the device that owns it. Use it to unlock a personal vault, to approve a narrow share grant for another person, application, or agent, or to authenticate a static site without handing that site a password.
+
+Do not use OpenSesame as a hosted password database. There is no server-side vault key and no password recovery. The vault is encrypted in the browser; losing every enrolled unlock method loses the vault.
+
+## Main pages
+
+- [Vault](https://opensesame-labs.github.io/OpenSesame/)
+- [About](https://opensesame-labs.github.io/OpenSesame/about.html)
+- [Privacy](https://opensesame-labs.github.io/OpenSesame/privacy.html)
+- [Contact](https://opensesame-labs.github.io/OpenSesame/contact.html)
+- [Source code](https://github.com/OpenSesame-Labs/OpenSesame)
+- [Documentation](https://github.com/OpenSesame-Labs/OpenSesame/tree/main/docs)
+- [Security policy](https://github.com/OpenSesame-Labs/OpenSesame/blob/main/SECURITY.md)
+- [Markdown home](https://opensesame-labs.github.io/OpenSesame/index.md)
+- [Sitemap](https://opensesame-labs.github.io/OpenSesame/sitemap.xml)
+- [Robots](https://opensesame-labs.github.io/OpenSesame/robots.txt)
+
+## For agents
+
+OpenSesame exposes no unauthenticated write API. An agent receives a scoped grant only after a person approves it; the grant names the resource, policy, and lifetime. Prefer the documented local workflows and the share-grant model over guessing at routes.
+
+The public site is a static PWA. It does not expose a server-side data API, an MCP endpoint, or a hosted credential store. The authoritative integration details live in the repository documentation.
+
+## Site identity
+
+- Name: OpenSesame
+- Type: application
+- Canonical URL: https://opensesame-labs.github.io/OpenSesame/
+- Repository: https://github.com/OpenSesame-Labs/OpenSesame

package/dist/manifest.webmanifest

@@ -0,0 +1 @@
+{"name":"OpenSesame","short_name":"OpenSesame","description":"End-to-end-encrypted vault for passwords, passkeys, and agent secrets","start_url":"./","display":"standalone","background_color":"#fafafa","theme_color":"#fafafa","lang":"en","scope":"./","id":"./","dir":"ltr","categories":["productivity","security","utilities"],"display_override":["standalone","minimal-ui"],"launch_handler":{"client_mode":"navigate-existing"},"handle_links":"preferred","prefer_related_applications":false,"icons":[{"src":"icon-192.png","sizes":"192x192","type":"image/png","purpose":"any"},{"src":"icon-512.png","sizes":"512x512","type":"image/png","purpose":"any"},{"src":"icon-512.png","sizes":"512x512","type":"image/png","purpose":"maskable"},{"src":"icon.svg","sizes":"any","type":"image/svg+xml","purpose":"any"}],"shortcuts":[{"name":"Vault","short_name":"Vault","url":"./"},{"name":"Access","short_name":"Access","url":"./access"},{"name":"Identity","short_name":"Identity","url":"./identity"},{"name":"Wallet","short_name":"Wallet","url":"./wallet"},{"name":"Settings","short_name":"Settings","url":"./settings"}],"file_handlers":[{"action":"./","accept":{"application/x-keepass2":[".kdbx"],"application/json":[".json"],"application/zip":[".1pux",".zip"],"text/csv":[".csv"],"text/plain":[".env"]}}],"share_target":{"action":"./share-target","method":"POST","enctype":"multipart/form-data","params":{"title":"title","text":"text","url":"url","files":[{"name":"files","accept":["application/x-keepass2","application/json","application/zip","text/csv","text/plain"]}]}}}

package/dist/onepassword/LICENSE-0.5.0.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 1Password
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.