Teampass Laravel Package

Debug Issue

Systematically debug issues using graph-powered code navigation

claude-code

Explore Codebase

Navigate and understand codebase structure using the knowledge graph

claude-code

prepare-release

Prepare, cut and publish a TeamPass release following the 3.2.1.x model — scope the commit range, decide the version number, run the release gate, bump the version constants, refresh the Docker image (version arg and base image), regenerate the integrity checksums, finish git flow manually, draft the GitHub release notes, and update the teampass.net changelog. Use when asked to prepare a release, cut a version, bump TP_VERSION_MINOR, or publish release notes.

claude-code

Refactor Safely

Plan and execute safe refactoring using dependency analysis

claude-code

Review Changes

Perform a structured code review using change detection and impact

claude-code

Api Reference

Routes are available both with and without the v1 prefix — BaseController::getUriSegments() strips only /v1/:

cursor

Architecture Api Idempotency

TeamPass accepts an optional Idempotency-Key on POST /item/create and DELETE /item/delete. It is intended for offline clients that may lose an HTTP response and must retry without creating a second item or deleting a restored item again.

cursor

Architecture Encryption

Note: decryptUserObjectKeyWithMigration() must be used in new code (auto-upgrades v1→v3 sharekeys). decryptUserObjectKey() (non-migration-aware) is still present in many read paths — existing call sites to watch.

cursor

Architecture Extension Autoconfig

Lets a logged-in TeamPass user set up the browser extension in one click instead of filling the extension Options page by hand (server URL, auth mode, credentials, licence triplet). The password is never transmitted — a Personal Access Token (PAT) carries a token-unlockable copy of the user's...

cursor

Architecture Item Revisions

Gives every item a monotonic revision ID so an offline client (the mobile vault) can tell which of its cached items are stale, decide which side is newer, and pull only what changed.

cursor

Architecture Lapr

Agentless, push-based rotation of local Linux account passwords over SSH, driven from TeamPass. Reuses the existing item encryption model (objectKey + per-user RSA sharekeys), the background-task pipeline, and phpseclib3. No parallel secret store, no new crypto primitive.

cursor

Architecture Licence Trial

Lets an administrator request a 30-day evaluation licence for the browser extension from Settings → API → Licence, instead of writing to the maintainer who ran things/licence-server-api/register-licence.sh by hand.

cursor

Architecture Php Fpm

TeamPass runs under any PHP SAPI (Apache modphp, php-fpm/fpm-fcgi, CLI). PHP-FPM is the recommended production setup. The code does not require modphp — apacherequestheaders() is only a guarded fallback in app/api/inc/jwtutils.php. These notes cover the FPM-specific code paths.

cursor

Architecture Secure Send Audit

securesendaudit is the structured, metadata-only journal of Secure Send operations. It is separate from otv, which holds disposable encrypted links, and from the existing logitems audit under the OTV system account.

cursor

Architecture Websocket

Real-time synchronization layer built on Ratchet 0.4.4 (PHP) + ReactPHP event loop. The WebSocket server runs as a separate daemon alongside the web app.

cursor