## 1. Spec
- [x] 1.1 Update OpenSpec deltas for api/password-manager
- [x] 1.2 Update OpenAPI 3.1 contract (spec/openapi.yaml)

## 2. Database
- [x] 2.1 Add migrations for credential storage tables + indexes

## 3. Server
- [x] 3.1 Implement credential CRUD APIs
- [x] 3.2 Enable plaintext credential access
- [x] 3.3 Implement admin credential access APIs

## 4. Extension
- [x] 4.1 Add content script for detecting login forms
- [x] 4.2 Add save-credential prompt + confirm flow
- [x] 4.3 Add autofill selector UI on login fields

## 5. Web
- [x] 5.1 Add desktop-only password manager page
- [x] 5.2 Add session-based plaintext toggle
- [x] 5.3 Add admin view for all users

## 6. Tests
- [x] 6.1 API tests for CRUD + plaintext + admin access
- [x] 6.2 DB migration verification

## 7. Verification
- [x] 7.1 Specs updated in openspec/specs
- [x] 7.2 OpenAPI updated and validated
- [x] 7.3 DB migration applied
- [x] 7.4 Server tests executed