Lockcli v1.1.1

New Features

• Copy password to clipboard (auto-clear after 30s)
• Automatic migration with lockcli update
• CLI commands: --version, --help, update

Critical Fixes

Vulnerability	Fix
Static salt "lockcli-salt"	Unique random salt per user (32 bytes)
AES-256-CBC (no integrity)	AES-256-GCM with authentication tag
bcrypt 10 rounds (weak)	bcrypt 14 rounds

Lockcli v1.2.0

Summary

• Export vault (lockcli export [file] + menu TUI) — exports encrypted vault to JSON
• Import vault (lockcli import <file> [--replace] + menu TUI) — merge or replace modes
• GitGuardian fix — hardcoded test passwords replaced with dynamically built constants
• Added .gitguardian.yml to exclude test files from secret scanning
• Updated CHANGELOG, README, package.json to v1.2.0

Export/Import Details

Feature	CLI	TUI
Export	lockcli export [file]	Menu → "Exporter le vault"
Import (merge)	lockcli import file.json	Menu → "Importer un vault" → Fusionner
Import (replace)	lockcli import file.json --replace	Menu → "Importer un vault" → Remplacer

• Exported passwords stay AES-256-GCM encrypted (no plaintext)
• Merge mode skips services that already exist
• Replace mode requires confirmation

Initial Release

• Local CLI password manager
• bcrypt for master password
• AES-256 encryption for credentials