@ai-matrx/vault 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+## 0.1.0 — 2026-10-16
+
+First release: the full Vault workspace replacing the web app's `features/secrets` screens, the
+extension's vault side panel and the desktop's vault import.
+
+### Consumer action
+
+- Install `@ai-matrx/vault`; render `VaultApp` with `createApiVaultPort(api, { userState, platformDoor, passkeys })` and host capabilities (`identity`, `knobs`, `openUrl`, and per host `page`/`fill`/`capture`/`fillSetup`/`newPasswordFields` or `nativeProvider`/`nativeImport`).
+- Add `@source "../node_modules/@ai-matrx/vault/dist"` (path relative to the stylesheet) so Tailwind emits the package's classes.
+- Vite hosts: `optimizeDeps.exclude: ["@ai-matrx/vault"]` (keeps the import workers' URLs).
+- Delete the host's own vault screens and client once adopted (no twins).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AI Matrix Engine
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,29 @@
-# Temporary Holding Version
+# @ai-matrx/vault
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The AI Matrx Vault: one password-manager workspace for the web app, the browser extension and the
+desktop app — logins, API keys and secrets, one-time passwords, sharing, secure links, history,
+files, trash, import/export/backup — over the AI Matrx server.
+
+```tsx
+import { VaultApp, createApiVaultPort, createSupabaseIdentity, createVaultKnobs } from "@ai-matrx/vault";
+
+const port = createApiVaultPort(api, { userState: supabase, platformDoor: supabase.schema("platform"), passkeys: supabase.auth });
+const host = {
+  identity: createSupabaseIdentity(supabase.auth),
+  knobs: createVaultKnobs(supabase, { organizationId, userId }),
+  openUrl: (url: string) => window.open(url, "_blank", "noopener"),
+};
+
+<VaultApp port={port} host={host} location={location} onLocationChange={(next, how) => writeToUrl(next, how)} notify={toast} />;
+```
+
+- **Hosts own identity only**: their `Api` (`@ai-matrx/api`), their Supabase client, the address.
+- **The address carries everything** (`locationToParams` / `locationFromParams`): vault, view, search,
+  sort, item, edit/new, the open panel.
+- **Extension**: pass `page`, `fill`, `capture`, `fillSetup`, `newPasswordFields` (types in
+  `extension/host.ts`) and start at `view=page`.
+- **Desktop**: pass `nativeProvider` and `nativeImport`.
+- **Styling**: Tailwind utilities on the design-system tokens — add `@source "…/node_modules/@ai-matrx/vault/dist"` to the host stylesheet.
+- **Workers**: the import parsers run in module workers at `dist/io/*.worker.js` (`new Worker(new URL(…, import.meta.url))`). A Vite host excludes the package from dependency pre-bundling (`optimizeDeps.exclude: ["@ai-matrx/vault"]`) so the URLs stay intact.
+
+Local mechanics and rules: `FEATURE.md`.