- Make the privacy promise true: bundle the fonts (Poppins/Inter/JetBrains Mono
latin subsets + the text-security mask font) under helwasm/assets/fonts/ and
drop the Google Fonts + jsDelivr links. The page now makes zero external
requests once loaded — it talks to no third party.
- Say it plainly throughout the UI: a "Private by design" callout in the About
panel, the meta description, the quick-gen and console hints, and the footer —
nothing you type leaves the browser, no server, no account, no tracking.
- About panel (collapsible, closed by default with a pulsing "Help" badge)
explaining the tool; the `help` command now prints a full command reference
instead of "HELP" (benefits the CLI too).
- Live generation as you type; Store button; masked output that stays mono-width
(gen masks only the password column, never the header); command history with
Up/Down (persisted); console auto-scroll; Export fixed (uses `dump`); Import.
- Name field normalizes to its canonical parsed form on blur; quick-gen and Store
resolve the real entry name, so a leading prefix like `*P0 test1` is handled
correctly (new hel_parse / hel_parse_name wasm helpers).
- Parser: prefix-only forms now parse with defaults - `*P0 test1` ->
`*P0 test1 R 99 <today>`, `*P0 test1 R`, `*P0 test1 20R` - via new qpname/npname
rules mirroring qname/nname; the fully-qualified form is unchanged.
- Favicons + web app manifest + enso asset; pkg rebuilt.