Repository navigation
PassVault v2.2.3-server
中文
这是 Linux/SQLite 服务器版 v2.2.3 的当前完整发行,替换此前的 v2.2.3-server 服务器归档。Cloudflare v2.2.3 的 tag、源码和资产保持不变。
服务器版能力
- 安全分享 v1/v2、附件对象上传、匿名领取、撤销与过期清理。
- 独立于密码库用户的 Admin 身份、凭据、Cookie 和会话。
- 概览、用户、注册、运维、安全、审计和设置七个 Admin 页面。
- Admin 可在设置页修改自身密码;成功后撤销全部 Admin 会话。
- 配额、封禁、会话撤销、用户删除/导出、邀请、维护修复和安全事件管理。
- 文件生命周期 fence、删除 outbox、启动协调和维护修复,保护附件和分享对象与 SQLite 状态一致。
- 移动优先 Admin 布局;改密入口位于设置页,避免 iPhone Safari 窄屏页头异常。
安全与兼容性
- Admin 身份体系与密码库用户完全隔离。
- Admin 密码使用持久化 scrypt verifier;原始密码不进入日志、审计或 URL。
- Cloudflare Worker、D1/R2 schema、Vault Key、KEK、主密码和加密协议均未修改。
- 归档不包含生产环境变量、数据库、附件、备份、日志、部署证据、Git 元数据或依赖目录。
验证
- 完整候选全仓门禁:681 tests / 679 pass / 0 fail / 2 skip,自然 exit 0。
- 替换命名及打包闭包定向门禁:48 pass / 0 fail / 2 skip。
- 从干净提交生成的 Linux 归档重新解压后:84/84 测试通过。
- lint、文档检查、typecheck、build、归档边界与
SHA256SUMS校验全部通过。
发行资产
pass-vault-v2-linux-2.2.3.tar.gzpass-vault-v2-linux-2.2.3.zipSHA256SUMS
sha256sum -c SHA256SUMSEnglish
This is the current complete Linux/SQLite server release for v2.2.3 and replaces the previous v2.2.3-server server archives. The Cloudflare v2.2.3 tag, source, and assets remain unchanged.
Server-edition capabilities
- Secure sharing v1/v2, attachment-object uploads, anonymous claims, revocation, and expiry cleanup.
- Admin identity, credentials, cookies, and sessions fully isolated from vault users.
- Seven Admin pages: Overview, Users, Registration, Operations, Security, Audit, and Settings.
- Administrators can change their own password from Settings; success revokes all Admin sessions.
- Quota, suspension, session revocation, user deletion/export, invitation, maintenance repair, and security-event management.
- File-lifecycle fences, deletion outbox, startup reconciliation, and maintenance repair to keep attachment/share objects consistent with SQLite state.
- Mobile-first Admin layout with password management in Settings, avoiding narrow-header defects on iPhone Safari.
Security and compatibility
- The Admin identity system is fully separate from vault users.
- Admin passwords use a persistent scrypt verifier; plaintext passwords are not written to logs, audit records, or URLs.
- The Cloudflare Worker, D1/R2 schema, Vault Key, KEK, master password, and encryption protocols are unchanged.
- Archives exclude production environment files, databases, attachments, backups, logs, deployment evidence, Git metadata, and dependency directories.
Verification
- Full candidate repository gate: 681 tests / 679 pass / 0 fail / 2 skip, natural exit 0.
- Replacement-name and package-closure focused gate: 48 pass / 0 fail / 2 skip.
- Fresh extraction of the Linux package from the clean release commit: 84/84 tests passed.
- Lint, documentation checks, typecheck, build, archive-boundary checks, and
SHA256SUMSverification all passed.
Release assets
pass-vault-v2-linux-2.2.3.tar.gzpass-vault-v2-linux-2.2.3.zipSHA256SUMS
sha256sum -c SHA256SUMS