WHAT THIS ADD-ON IS
StackyOps Vault is a companion extension for StackyOps, a self-hosted team platform with a
built-in credential Vault. It has no standalone function: it must be paired with a
StackyOps server using a personal "device token" the user generates in the app (Settings →
Developer → Browser extension). It sends data to no server other than the one the user
configures.

WHAT CHANGED IN THIS VERSION
- Multi-org: a user in several orgs can pair one token per org and switch between them. A
new GET /api/v1/vault/session returns the token's org name to label each connection.
- The vault list now includes SERVER records in addition to CREDENTIAL logins.
- The pairing form remembers what you typed if the popup closes.

HOW TO TEST (a live demo is provided)
Server URL: https://stackyops.com
Pairing token: PASTE_A_TOKEN_HERE
Generate at https://stackyops.com -> Settings -> Developer -> Browser extension ->
"Connect a device", ideally in a demo workspace that already has a couple of saved logins
so the list isn't empty.

Steps:
1. Open the popup, paste the Server URL + token, click Connect.
2. The popup lists that org's logins/servers, with search and a best match for the
current site.
3. The switcher above the list shows the org name; "Add another org" pairs a second
token; you can switch between them.
4. Open an https login page -> "Fill" fills the form (never submits).
5. Type a login on a new site and submit -> a bar offers to save it.

SOURCE CODE
Provided in the uploaded source archive. No build step and nothing minified - the
JS/HTML/CSS shipped are the exact source. To reproduce (Node.js 18+, no npm packages): run
"node scripts/make-icons.mjs" then "node scripts/package.mjs". package.mjs copies the
files and, for Firefox, rewrites manifest.json (background service_worker -> background
scripts; adds browser_specific_settings). Nothing is minified, bundled, transpiled, or
templated.

PERMISSIONS
Host access to all https sites is required because a password manager must read login
forms on the sites the user visits to autofill saved logins and offer to save new ones. It
acts only while paired and enabled, reads a page only to fill or capture a login the user
chooses, and never auto-submits.

PRIVACY
No data is collected for the developer (excelit-it) or any third party. Credentials + the
current site's host go only to the StackyOps server the user configures; the token +
settings are stored in browser storage and sent only to that server as a Bearer token.