From 33ab4fe11396d9ff92883ec439edbc96498f6514 Mon Sep 17 00:00:00 2001
From: Avi <avi@aiolabs.com>
Date: Wed, 30 Sep 2026 11:58:56 -0500
Subject: [PATCH] docs(checkpoint): Step 7 done, Forgejo push restored @
 7891ccc

---
 CHECKPOINT-encryption.md | 47 +++++++++++++++++++++++++++++++++++++---
 1 file changed, 44 insertions(+), 3 deletions(-)

diff --git a/CHECKPOINT-encryption.md b/CHECKPOINT-encryption.md
index f957c83..633fa80 100644
--- a/CHECKPOINT-encryption.md
+++ b/CHECKPOINT-encryption.md
@@ -69,12 +69,53 @@
 - Live confirmation of the backfill rename: pair/keep a fresh Amber account
   with no kind-0, publish kind-0 from Amber, confirm the Keynctr row renames
   itself within ~5 min without restarting the app.
-- Step 4 permissions UI follow-ups, Step 5 KDF, Step 7 rename/hygiene
-  (unchanged from previous checkpoint).
-- `package.json` `homepage` still points at github.com/avi/Keynctr (Step 7).
+- Step 4 permissions UI follow-ups (interactive grant editing in the approval
+  modal) — the only buildable step left.
+- Live pass: KDF migration on a real unlock + second-Amber account switching.
 
 ---
 
+# Checkpoint — Step 7 rename/hygiene + Forgejo push restored (2026-09-30)
+
+## Where things are
+- Project: `/home/avi/Projects/Keynctr`, branch `master` @ **`7891ccc`**
+  ("docs: Step 7 rename/hygiene pass"). Previous: `c553dd5` (KDF upgrade
+  m=64MiB/t=3 + transparent migration, Sep 30), `5e91914` (launcher), theme
+  commits, identity backfill.
+- **Forgejo push unblocked**: token supplied per-use via
+  `git -c http.extraHeader="Authorization: Bearer <token>" push origin master`
+  (token supplied in chat, NOT stored anywhere — revoke when convenient).
+  `a6182e3..c553dd5` pushed; remote master verified == local. Token is
+  single-use-per-invocation; re-ask for it next push unless the user stores one.
+- Step 7 done in `7891ccc`: `frontend/package.json` homepage ->
+  `https://git.atitlan.io/avi/Keynctr`; README retitled Keynctr, all
+  `[YOUR_FORGEJO_INSTANCE_URL]`/`<OWNER>/<REPO>` placeholders resolved, clone
+  dir + packaged binary name fixed (`keynectr`), data-dir default
+  `~/.local/share/keynectr` (code auto-migrates the legacy dir), stale test
+  counts refreshed (cargo 225 unit + 6 e2e; npm 139 tests / 19 files), project
+  layout updated (audit/bunker/feed/updates, signer/ dir, Feed + SignerMode
+  screens). PRODUCT.md data-dir corrected.
+- `tests/tmp_kdf_probe.rs` (throwaway probe) deleted; not part of the suite.
+- Release binary rebuilt from c553dd5 (Sep 30 11:23).
+
+## Verified
+- `cargo test`: 225 unit + 6 e2e, 0 failed. `cargo clippy --all-targets`: 0.
+  `cargo fmt --check`: clean. Frontend: 139/19 vitest green, typecheck, lint,
+  format:check clean (docs-only commit; no code touched).
+- Push verified by `git ls-remote` readback (remote master == c553dd5 at push).
+
+## How to resume
+- GUI: `cd ~/Projects/Keynctr/frontend && npx vite --port 5173` then
+  `NOSTR_GUI_DEV_URL=http://localhost:5173 KEYNCTR_ENABLE_GPU=1 npx electron .`
+- Push: token needed per use (`http.extraHeader` form above), or user stores
+  one / registers the SSH key.
+
+## Outstanding / next steps
+- Live pass (user): KDF migration on a real unlock; second-Amber switch +
+  backfill rename confirmation; publish kind-0 to primal/damus.
+- Step 4 remainder: interactive grant editing in the approval modal.
+- No CI workflow yet — `.forgejo/workflows/ci.yml` badge stays commented.
+
 # Checkpoint — permissions UI + updater fix + Workshop theme (2026-09-27 night)
 
 ## Where things are