Password Vault entities and VAULT_* access-log events (TPVAULT)

Shipped

November 6, 2026 at 6:54 PM UTC

Author

Kamo

Commit

ca8e81f

Seven tables for the Password Vault (vaults, items, encrypted fields, an append-only access log, shares, emergency requests, known devices), declared here so KamoInitializer can recreate them; DDL applied by hand first (vaultservice docs/sql). Ciphertext columns carry @JsonIgnore and are pinned in **************** which was red on main for three kamoai cipher columns that are now guarded too.