@@ -0,0 +38,4 @@
+- Cryptographically random
+- Unique per installation
+- Safely backed up
+

@@ -258,0 +299,4 @@
+  }
+});
+
+app.post("/encryption/migrate", async (req, res) => {

@@ -0,0 +104,4 @@
+        table: tableName
+      });
+      throw error;
+    }

@@ -0,0 +78,4 @@
+        await this.storeKey(environmentKey);
+        this.currentKey = environmentKey;
+        return environmentKey;
+      }

@@ -0,0 +111,4 @@
+    });
+
+    return newKey;
+  }

@@ -0,0 +213,4 @@
+      });
+      return null;
+    }
+  }

@@ -0,0 +84,4 @@
+    // Validate key strength
+    if (this.config.masterPassword.length < 16) {
+      throw new Error('Master password must be at least 16 characters long');
+    }

@@ -0,0 +112,4 @@
+      const backupPath = path.join(dataDir, `db-backup-${Date.now()}.sqlite`);
+
+      if (fs.existsSync(dbPath)) {
+        fs.copyFileSync(dbPath, backupPath);

@@ -0,0 +389,4 @@
+      console.error('Migration failed:', error.message);
+      process.exit(1);
+    });
+}

@@ -0,0 +38,4 @@
+    } catch {
+      return false;
+    }
+  }

@@ -0,0 +16,4 @@
+  private static readonly VERSION = 'v1';
+  private static readonly KEK_SALT = 'termix-kek-salt-v1';
+  private static readonly KEK_ITERATIONS = 50000;
+

@@ -0,0 +26,4 @@
+        process.cwd(),
+        this.getFileSystemFingerprint(),
+        this.getNetworkFingerprint()
+      ];

@@ -0,0 +112,4 @@
+      let encrypted = cipher.update(masterKey, 'hex', 'hex');
+      encrypted += cipher.final('hex');
+      const tag = cipher.getAuthTag();
+

@@ -254,0 +314,4 @@
+    } finally {
+      setEncryptionLoading(false);
+    }
+  };