* Open the first card's TOTP detail and return its Delete button. Under D-5 * Delete is reached straight from the read-only detail (no edit step).

Open the form in manual mode and return the modal root.

Parse a language string to a `Bip39Language` enum value. Accepts lowercase English names: `"english"`, `"japanese"`, `"korean"`, `"spanish"`, `"chine

Helper: performs the re-auth reveal flow and waits for revealed data to appear.

Shared vault lock logic used by both the `lock_vault` IPC command and the tray menu's "Lock Vault" action. Cancels the auto-lock timer, drops the vau

* Process inline markdown elements within already-escaped text. * * The input is guaranteed HTML-escaped by `renderMarkdown`. Every replacement * b

Append a `u32` big-endian length prefix followed by `field` to `out`. # Errors Returns [`VaultError::Export`] if `field` exceeds [`MAX_FIELD_LEN`] o

Read one `u32 BE`-prefixed field and advance the cursor. # Errors Returns [`VaultError::Import`] if the buffer is truncated or the declared length e

Create a realistic vault header with the given slots.

Returns the current schema version (`PRAGMA user_version`). # Errors Returns [`VaultError::Database`] if the pragma query fails.

Create a vault in `dir` and immediately unlock it. Returns the open `VaultDb` and the session master key.

Split the name field and issuer field intelligently. Google Auth often encodes names as "issuer:account" in the `name` field while also providing a s

Validate that a Base32-encoded secret is well-formed and non-empty. # Errors Returns an error string if the secret is empty or contains invalid Base

Build a full migration URI from OTP parameters.

Build a `ValidationReportDto` from parsed entries, duplicates, and categorized info.

Calibrate one tier by timing a single-iteration derivation and scaling `t_cost` toward `target_ms`. Because Argon2id time is ~linear in `t_cost`, `t

Validate attachment sizes in a parsed payload. Rejects any attachment whose decoded `data` exceeds [`IMPORT_MAX_ATTACHMENT_BYTES`] or whose `size_byt

The secret-gating predicate that `get_entry` (IPC command) applies before returning `EntryDetailDto`. Mirrors the exact `extract_secret` match block

Compute the keyed MAC over the authenticated header subset. Derives a MAC key from the master key via BLAKE3-KDF (context [`HEADER_MAC_CONTEXT`]), th

Derive the vault's long-term hybrid KEM and signing keypairs from the master key. Both derivations are deterministic: the same master key and fixed c

Extract an issuer from `OtpParameters`.

Extract a display name from `OtpParameters`.

Extract the secret string from `EntryData` for the detail DTO.

Append the trailing signature to a signed portion, producing the final envelope bytes. # Errors Returns [`VaultError::Export`] if the signature fail

Get an attachment's metadata and decrypted content. Reads the encrypted BLOB, derives the entry-specific key, and decrypts. The returned `Vec<u8>` co

Insert a key slot record into the `key_slots` table. Stores the wrapped key as binary (nonce || ciphertext || tag), the Argon2id salt, and the KDF pa

* Check if `query` is a subsequence of `text` (chars appear in order). * Returns true if every character of query appears in text in order.

Serialize a serde value to JSON bytes, mapping failures to an export error.

Build a minimal `ExportPayload` with a single attachment whose `data` field has the given byte count.

Build a JSON-encoded `RATE_LIMITED` error with the actual remaining milliseconds.

Parse a separator string from the frontend into a [`PassphraseSeparator`].

Helper: performs the re-auth reveal flow with TOTP-linked credential.

Record user activity (resets the inactivity countdown).

Record a failed unlock attempt in the header.

Remove the biometric slot from an existing vault. Removes the biometric slot from the vault header and deletes the corresponding record from the `key