Decode

Decode is the workflow for opening existing .avk archives. It inspects the selected archive, asks for the required unlock material, and opens decoded contents in temporary preview sessions.

Decoded preview files are temporary. They are not permanent output unless the user explicitly saves a file or extracts the archive contents.

Archive Selection

Users select one .avk file to unlock. Where public route hints are available, the app inspects whether the archive expects:

• password
• keyphrase
• PQC protection
• embedded PQC
• external .avkkey
• TimeCapsule release

These hints help the UI show the relevant fields without fully unlocking the archive.

Password Unlock

If the archive was created with password protection, the user enters the password on the Decode page. Wrong passwords are mapped to a user-facing error rather than exposing low-level backend details.

Keyphrase Unlock

If the archive was created with keyphrase protection, the user enters the 21-word keyphrase. The UI includes helper behavior for the Avikal Hindi wordlist, including roman typing helper support where the workflow needs it.

When password and keyphrase protection are both enabled, both secrets are required.

External PQC Keyfile Unlock

For external PQC archives, users attach the matching .avkkey file. The app inspects the keyfile and detects whether it is:

• a normal external PQC keyfile
• a password-protected external PQC keyfile

If the keyfile has the second password layer, the Decode page shows the .avkkey password field. The archive cannot be unlocked without the matching keyfile and any required keyfile password.

Embedded PQC Unlock

For embedded PQC archives, no separate .avkkey file is required because the encrypted PQC bundle is inside the .avk archive.

The UI shows this distinction so users do not search for an external keyfile when the archive was created with embedded storage.

TimeCapsule Archives

When an archive is time-gated, Decode checks the release condition before opening the contents. If the release time has not arrived, or if clock checks fail, the backend returns a user-facing message.

TimeCapsule archives may also require password, keyphrase, PQC material, or a .avkkey depending on how they were created.

Preview Sessions

Decoded files are opened into temporary preview sessions. The user can:

• preview supported file types
• open files in the system viewer
• save individual files elsewhere
• extract all files
• close a preview tab and wipe that session

Temporary preview files are part of the local app workflow. Users should save or extract only the files they want to keep outside the preview session.

Multiple Decoded Archive Tabs

Decode supports multiple preview tabs. Users can unlock several archives one at a time and keep their decoded preview sessions open until each tab is manually closed.

Each tab represents a separate preview session that can be closed when it is no longer needed.

Cancellation And Cleanup

Long decode operations can be cancelled. The frontend asks the backend to cancel the active operation and clean up the partial preview session where possible.

Preview sessions can also be cleaned when closing tabs or from Settings through a global preview cleanup action.