UX polish for the unlock picker. No functional changes — behaviour and CLI surface identical to v0.4.2.
Changes
-
Picker header rewritten. The previous header explained the how (TAB/ENTER/ESC) but not the what and why. New header opens with the goal:
Pick which entries to cache for
kpxc get(mail, backup, SSH, ...).
Your selection is saved; the master password is discarded afterwards.TAB to mark · ENTER to confirm · ESC to cancel
Or mark the top option to cache the master password (full DB access). -
Sentinel renamed.
[ all entries -> master mode ](cryptic arrow + "instead") became★ Cache master password (full DB access). The leading★still cannot appear in keepassxc paths, so the exact-string compare against the user's selection stays unambiguous. -
First-run setup banner. On the very first
kpxc unlock(no scope file exists yet), kpxc prints a two-line preamble before opening the picker:First-time setup: pick which credentials to cache for CLI use.
Master password is discarded after this -- only your selections stay.Re-picks via
kpxc unlock --interactivedon't show the banner — the user already knows the drill.
Compatibility
Drop-in replacement for v0.4.2. No CLI, env-var, or scope-file changes.