@ai-matrx/vault 0.0.0 → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+## 0.1.1 — 2026-10-16
+
+- zip.js is imported one way only (static). A static and a dynamic import of it in one bundle made
+  Next 16 Turbopack fail the host build (`ModuleId not found for ident … @zip.js/zip.js/lib/core/util/default-mime-type.js`).
+
+### Consumer action
+
+- None; update to latest.
+
+## 0.1.0 — 2026-10-16
+
+First release: the full Vault workspace replacing the web app's `features/secrets` screens, the
+extension's vault side panel and the desktop's vault import.
+
+### Consumer action
+
+- Install `@ai-matrx/vault`; render `VaultApp` with `createApiVaultPort(api, { userState, platformDoor, passkeys })` and host capabilities (`identity`, `knobs`, `openUrl`, and per host `page`/`fill`/`capture`/`fillSetup`/`newPasswordFields` or `nativeProvider`/`nativeImport`).
+- Add `@source "../node_modules/@ai-matrx/vault/dist"` (path relative to the stylesheet) so Tailwind emits the package's classes.
+- Vite hosts: `optimizeDeps.exclude: ["@ai-matrx/vault"]` (keeps the import workers' URLs).
+- Delete the host's own vault screens and client once adopted (no twins).

package/README.md

@@ -1,3 +1,29 @@
 # @ai-matrx/vault
 
-Name reservation only. This bootstrap has no usable API and must not be adopted. Real implementations will be released through trusted publishing.
+The AI Matrx Vault: one password-manager workspace for the web app, the browser extension and the
+desktop app — logins, API keys and secrets, one-time passwords, sharing, secure links, history,
+files, trash, import/export/backup — over the AI Matrx server.
+
+```tsx
+import { VaultApp, createApiVaultPort, createSupabaseIdentity, createVaultKnobs } from "@ai-matrx/vault";
+
+const port = createApiVaultPort(api, { userState: supabase, platformDoor: supabase.schema("platform"), passkeys: supabase.auth });
+const host = {
+  identity: createSupabaseIdentity(supabase.auth),
+  knobs: createVaultKnobs(supabase, { organizationId, userId }),
+  openUrl: (url: string) => window.open(url, "_blank", "noopener"),
+};
+
+<VaultApp port={port} host={host} location={location} onLocationChange={(next, how) => writeToUrl(next, how)} notify={toast} />;
+```
+
+- **Hosts own identity only**: their `Api` (`@ai-matrx/api`), their Supabase client, the address.
+- **The address carries everything** (`locationToParams` / `locationFromParams`): vault, view, search,
+  sort, item, edit/new, the open panel.
+- **Extension**: pass `page`, `fill`, `capture`, `fillSetup`, `newPasswordFields` (types in
+  `extension/host.ts`) and start at `view=page`.
+- **Desktop**: pass `nativeProvider` and `nativeImport`.
+- **Styling**: Tailwind utilities on the design-system tokens — add `@source "…/node_modules/@ai-matrx/vault/dist"` to the host stylesheet.
+- **Workers**: the import parsers run in module workers at `dist/io/*.worker.js` (`new Worker(new URL(…, import.meta.url))`). A Vite host excludes the package from dependency pre-bundling (`optimizeDeps.exclude: ["@ai-matrx/vault"]`) so the URLs stay intact.
+
+Local mechanics and rules: `FEATURE.md`.