Mockup 1: Sign in
Status, from /shipped/: shipped v0.1.5 Design mockups: ten screens as static pictures in a mini browser frame and as ASCII art, each linked to the intent it realises · proposed Sign in and out with Google and email/password against the chosen environment · proposed Passkey with WebAuthn PRF derives the keyring wrapping key; RP ID secrets.sgit.ai · proposed Entries: six kinds kept apart, vault list, entry page, copy and reveal, lock timers
What secrets.sgit.ai/app/ is meant to look like, from section 6.2 of the brief. A static picture: nothing on it works, the values are invented, and the screen itself is proposed.
The first screen of the app. The environment badge is always visible; prod is neutral, anything else is coloured so nobody enters a real secret into dev by mistake. Popup sign-in is the default; redirect is a switch on the Environment page. After sign-in the page routes to setup when there is no keyring and to unlock when there is.
Sign in
Environment: dev · sgit-secrets-dev · change on the Environment page
Sign in with Googleor with an email address
Sign in Create accountThe same screen as ASCII
┌─ secrets.sgit.ai/app/ ───────────────────────────────────────────┐ │ secrets.sgit.ai [dev] Vault Devices Env Acc │ ├──────────────────────────────────────────────────────────────────┤ │ │ │ ┌──────────────────────────────────────────┐ │ │ │ Sign in │ │ │ │ Environment: [dev] sgit-secrets-dev │ │ │ │ │ │ │ │ [ Sign in with Google ] │ │ │ │ or with an email address │ │ │ │ Email ┌──────────────────────────┐ │ │ │ │ │ dinis@example.com │ │ │ │ │ Password ┌──────────────────────────┐ │ │ │ │ │ •••••••••••• │ │ │ │ │ [ Sign in ] Create account │ │ │ │ ! The login decides which paths you may │ │ │ │ touch; your passkey opens them. │ │ │ └──────────────────────────────────────────┘ │ └──────────────────────────────────────────────────────────────────┘
Intent it realises
Open each in the review navigator: sign-in · flow.first-run · flow.returning.