- Sign key dropdown was empty when switching from openpgpjs to CLI because
RefreshLibrary never repopulated it with native GPG keys; now calls
RefreshListSign on library switch and resets the "sign" sentinel to "0".
- Library dropdown did not persist the selection on change, causing pgpLibrary
to revert to "openpgpjs" on reload and triggering the PassphraseModal
unexpectedly during CLI decryption; fixed by calling saveSettings() in
the dropdown onChange handler.
- Sign key dropdown appeared twice when RefreshListSign was called concurrently
(e.g. from display() and RefreshLibrary); fixed with a generation counter
that discards stale async results before addDropdown() is called.
- Encrypt with openpgpjs + signing enabled threw "signing key is not decrypted"
when the passphrase field was left blank; EncryptText() now resolves the
passphrase from cache/settings or prompts via PassphraseModal before calling
gpgEncrypt(), and caches it after a successful sign+encrypt.
in settings. Selecting the "openpgpjs" GPG Library now performs all
crypto in-app via OpenPGP.js instead of the native gpg binary, so the
plugin works on mobile (Android/iOS) as well as desktop. The native
"CLI commands" path is unchanged and remains the choice for OS keychain
and YubiKey users.]
feat: implement OpenPGP.js backend for mobile support
The pgpLibrary setting and its "openpgpjs" option already existed in
1.1.5, but choosing it hid the native UI without providing an
implementation. This adds that implementation as an opt-in second
backend, leaving the native gpg path fully intact.
Changes:
- src/openpgp.ts: OpenPGP.js getListPublicKey/gpgEncrypt/gpgDecrypt,
an in-memory passphrase cache, and browser-safe base64 helpers.
- src/PassphraseModal.ts: prompts for the private-key passphrase
(mobile has no pinentry/gpg-agent).
- src/gpg.ts: the three crypto functions dispatch on settings.pgpLibrary;
child_process is now required lazily so the module loads on mobile.
- src/Settings.ts: adds pgpPublicKeyArmored, pgpPrivateKeyArmored,
pgpPassphrase, pgpPassphraseCacheMinutes; guards process.platform.
- src/SettingsTab.ts: renders armored-key/passphrase/cache UI in the
openpgpjs branch (instead of only hiding native settings); fs is now
required lazily; hides the native sign toggle in openpgpjs mode.
- src/EncryptModal.ts / src/DecryptPreviewModal.ts: openpgpjs branches
(single configured key, passphrase prompt + cache, browser-safe base64).
- manifest.json: isDesktopOnly false. styles.css: .gpg-key-textarea.
- README.md: documents the openpgpjs library option.
The base64 wire format is identical between backends, so blocks encrypted
with native gpg and with OpenPGP.js are interchangeable for the same key.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
