initializing local encrypted workbench...

[] DBALDO

Encrypted IndexedDB namespace lab with CRUD operations and key derivation inspector

STATE: DISCONNECTED
namespace: --
Key CRUD put / get / delete

Use a raw key and a payload. Payload accepts JSON when parseable; otherwise it is treated as plain text.

Last Result
Aguardando operacao...
Insert With UUID insert()

Creates a new record with an opaque UUID key and returns the generated key back to the workbench.

Insert Result
Nenhum UUID gerado ainda.
Namespace Tools list / keys / count / clear

Refresh the current namespace, count records, list keys, seed sample data and clear only this namespace.

count()
0
keys()
0
IndexedDB
iandara-dbaldo
Store
records
Key List
Nenhuma chave carregada.
Namespace Snapshot list() + log

Every mutation refreshes records, keys and counters. Existing records from another session may appear with opaque IDB keys when raw keys are not known in memory.

Records
Sem dados.
Event Log
aguardando conexao...
IndexedDB Shape opaque records

Dbaldo stores encrypted blobs under opaque IDB keys. The raw key and namespace are never written as clear text.

iandara-dbaldo / records
ns_prefix:sha512(raw_key + namespace) -> { b64: "...", h: "sha512..." }
ns_prefix:sha512(raw_key + namespace) -> { b64: "...", h: "sha512..." }
other_ns:sha512(raw_key + namespace) -> { b64: "...", h: "..." }
The integrity hash is computed as SHA-512(idb_key + ciphertext_b64) and checked during get() and list().
Derivation browser SHA-512

This card mirrors the exact derivation from packages/dbaldo/main.mjs.

Namespace Prefix
--
IDB Key
--
Namespace Isolation same raw key, different namespace

The same raw key must generate different opaque prefixes and different final IDB keys when the namespace changes.

Namespace A
--
Namespace B
--
Aguardando derivacao...