Quick form now drives the one shared engine through commands only, so it and the
console give identical results (form == console).
- password hook answers only the "/" prompt, so read_master climbs and computes
every ^parent from a single root master (Req 4)
- new master in the field is authoritative via `unpass`; empty field reuses the
stored session master, so later names generate without re-typing it (Req 1/2)
- `unpass` with no name now clears ALL cached masters (real command, not a private
hook) so the form stays reproducible in the console
- result colour = root master marked correct (correct / / uncorrect /), derived
live from the engine; black otherwise (Req 3)
- Mark-correct toggle button; click the master to reveal it; honest memory-only hint
- master stays in memory only, never written to storage; only the one-way correct
hash is saved on the device
parser: bare-name forms now keep a trailing comment, and a ^-led token is never a
name, so `name ^parent` / `name MODE ^parent` link the parent instead of qpname
reading it as prefix+name (was silently mis-stored).
The brand only reloaded the tool and the byline was hidden on mobile, so there
was no easy way back. Add a pill back link (href='../') as the first header item,
shown on every width; drop the wordmark below 540px so it still fits on phones.
- App icon = the official Kaizenkodo ensō (logo/current/exports/tight) with a key
inside: cream bg for the home-screen/app icon, transparent for the header +
favicons. Source: assets/enso-base.png + icon-source.svg / enso-mark.svg.
- Attribution: a 'by Kaizenkodo' header link and a footer line, both to kaizenkodo.no.
- PWA install: manifest (standalone, start_url/scope '../', maskable icons) + iOS
metas (apple-mobile-web-app-capable/title/status-bar) so it adds to the iPhone
home screen and runs as a standalone app.
On narrow screens the result row (tag + password + len + buttons) wrapped
awkwardly. Reorder under @media: password on its own full-width line, then a
tidy meta line (result + len ........ Copy / Store).
The result password was a fixed 19px with white-space:pre, so it overflowed the
card on phones. Scope .result .secret to a dynamic font (clamp 13-19px, ~15px at
390px) that wraps (pre-wrap + overflow-wrap:anywhere + min-width:0). Desktop is
unchanged (fits one line at 19px); the console gen-table keeps its pre alignment.
iOS Safari auto-zooms (and stays zoomed) when a focused input is under 16px.
Bumped the form inputs (15px) and modal textareas (13px) to 16px; the console
input inherits the base. No viewport user-scalable hack (keeps pinch-zoom).
The master and pass-overlay inputs are now type=text with a CSS visual mask
(-webkit-text-security) instead of type=password, so the browser never treats
them as password fields — no autofill, no save prompt, no 'suggest strong
password'. Added autocomplete=off + autocapitalize/autocorrect off and
data-1p-ignore / data-lpignore / data-bwignore on the name + master + pass.
Matches the prefix-name default, the README, and the app's own help text (which
already says the default is six memorable words). Explicit modes are unaffected,
so existing catalogs round-trip unchanged.
main is a grid; its items default to min-width:auto, so the console card (pre /
no-wrap lines) refused to shrink and pushed the whole page wider than the phone
screen, clipping the About panel text. Set grid-template-columns: minmax(0,1fr)
so cards shrink to the viewport and the console scrolls internally instead.
- Make the privacy promise true: bundle the fonts (Poppins/Inter/JetBrains Mono
latin subsets + the text-security mask font) under helwasm/assets/fonts/ and
drop the Google Fonts + jsDelivr links. The page now makes zero external
requests once loaded — it talks to no third party.
- Say it plainly throughout the UI: a "Private by design" callout in the About
panel, the meta description, the quick-gen and console hints, and the footer —
nothing you type leaves the browser, no server, no account, no tracking.
- About panel (collapsible, closed by default with a pulsing "Help" badge)
explaining the tool; the `help` command now prints a full command reference
instead of "HELP" (benefits the CLI too).
- Live generation as you type; Store button; masked output that stays mono-width
(gen masks only the password column, never the header); command history with
Up/Down (persisted); console auto-scroll; Export fixed (uses `dump`); Import.
- Name field normalizes to its canonical parsed form on blur; quick-gen and Store
resolve the real entry name, so a leading prefix like `*P0 test1` is handled
correctly (new hel_parse / hel_parse_name wasm helpers).
- Parser: prefix-only forms now parse with defaults - `*P0 test1` ->
`*P0 test1 R 99 <today>`, `*P0 test1 R`, `*P0 test1 20R` - via new qpname/npname
rules mirroring qname/nname; the fully-qualified form is unchanged.
- Favicons + web app manifest + enso asset; pkg rebuilt.
Run the real hel core in the browser via WebAssembly, replacing the plain-JS
ooke.github.io/sk reimplementation so the web and the CLI share one generator.
- hel core: new storage module (native fs / wasm localStorage) backs
init/source/dump/correct; the pipe and pb branches are gated out of wasm;
the wasm editor is completed (EditorRef) and its password prompt no longer
blocks the single JS thread (synchronous hel_get_password instead of a
thread::sleep poll).
- helwasm: hel_load_script for bulk import, a panic hook in hel_init, dropped
the ok_add / web-sys leftovers; build.sh runs wasm-bindgen into a committed
pkg/ so GitHub Pages can serve the static dir with no CI.
- UI: rewritten index.html + style.css in the kaizenkodo.org style — responsive,
masked-but-copyable passwords with click-to-reveal, a quick-generate card plus
a full command console, localStorage persistence, and paste import/export.
Oleksandr Kozachuk
Oleksandr Kozachuk