Block a user
fix: correct set-password docstring (scrypt, not bcrypt)
fix: unify PIN hashing across CLI, FSM, and web (closes #2)
feat: wire MQTT → SSE bridge so the event timeline updates live (closes #1)
test: isolate VIGILAR_CONFIG via autouse session fixture (fixes #3)
fix: correct set-password docstring (scrypt, not bcrypt)
pytest rewrites config/vigilar.toml in place — test isolation bug
PIN hashing is a three-way mismatch: CLI, FSM, and web arm/disarm all incompatible
broadcast_sse_event is never called — live event timeline is dead