@ai-matrx/vault 0.1.10 → 0.1.11

package/CHANGELOG.md

@@ -2,14 +2,37 @@
 
 ### Unreleased
 
+- Hidden items: an item tagged `HIDDEN_ITEM_TAG` (`"matrx:hidden"`, `isHiddenItem`) is a host's own and is never listed, not even in Trash (the desktop app keeps its Touch ID key there). Consumer action: none.
+
 - **Confirm in place.** `VaultIdentity.withProvider` may resolve `"confirmed"` when the host confirms without leaving the page (the desktop's Touch ID); "Confirm it's you" then closes and runs the refused call again — one confirmation, the value appears. Before, the dialog stayed open and the person had to cancel and press reveal again. Labels for `touch_id` ("Touch ID") and `browser`. Guard: `src/auth/identity-gate.test.tsx` (fails on the old gate). **Consumer action:** Matrx Desktop: return `"confirmed"` from `withProvider` once the confirmation succeeded in place. Web app and extension: none.
 - **`VaultApp look="web"|"desktop"`.** The same screens and features, two skins: `"web"` (default) is the website's and the extension's look, unchanged; `"desktop"` draws the workspace in the desktop standard through `@ai-matrx/design-system`'s `LookScope` — the system font and Apple text styles, AppKit-size controls, System Settings/Passwords grouped boxes (no border, hairlines between rows, bold section titles), the source list's open row in the accent, and every panel as a modal macOS sheet, light and dark. The playground's Desktop host uses it. Guard: `src/look.test.tsx`. **Consumer action:** Matrx Desktop: pass `look="desktop"` to `<VaultApp>` (Account › Vault). Web app and extension: none.
 
-## 0.1.10
+## 0.1.11
 
 UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
 Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
 
+## 0.1.10
+
+SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,
+so they may include breaking API changes. Consumer action is UNKNOWN: read the diff before upgrading.
+Diff: `git diff 95a286343b 92167249a3 -- apps/shared/vault/src`
+
+Changed shipped source files (35):
+- `apps/shared/vault/src/FieldRows.tsx`
+- `apps/shared/vault/src/ItemPane.tsx`
+- `apps/shared/vault/src/NewItemFlow.tsx`
+- `apps/shared/vault/src/Sidebar.tsx`
+- `apps/shared/vault/src/VaultApp.tsx`
+- `apps/shared/vault/src/activity/ActivityPanel.tsx`
+- `apps/shared/vault/src/activity/FilesSection.tsx`
+- `apps/shared/vault/src/activity/HistoryPanel.tsx`
+- `apps/shared/vault/src/auth/IdentityGate.tsx`
+- `apps/shared/vault/src/auth/identity.ts`
+- `apps/shared/vault/src/authenticator/AddOtpPanel.tsx`
+- `apps/shared/vault/src/authenticator/AuthenticatorView.tsx`
+- ...and 23 more
+
 ## 0.1.9
 
 SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,

package/dist/index.cjs

@@ -138,6 +138,7 @@ __export(src_exports, {
   CATEGORIES: () => CATEGORIES,
   DEFAULT_LOCATION: () => DEFAULT_LOCATION,
   GenerateButton: () => GenerateButton,
+  HIDDEN_ITEM_TAG: () => HIDDEN_ITEM_TAG,
   LOCKED_MESSAGE: () => LOCKED_MESSAGE,
   VaultApp: () => VaultApp,
   VaultLockedError: () => VaultLockedError,
@@ -148,6 +149,7 @@ __export(src_exports, {
   createVaultKnobs: () => createVaultKnobs,
   guardPort: () => guardPort,
   inferFromUrl: () => inferFromUrl,
+  isHiddenItem: () => isHiddenItem,
   locationFromParams: () => locationFromParams,
   locationToParams: () => locationToParams,
   loginSiteOf: () => loginSiteOf,
@@ -856,6 +858,8 @@ function matchesQuery(item, query) {
   if (!q) return true;
   return [item.name, item.definitionLabel, ...item.tags, ...item.loginUrls, ...item.custom.map((c) => `${c.label} ${c.value}`)].some((h) => h.toLowerCase().includes(q));
 }
+var HIDDEN_ITEM_TAG = "matrx:hidden";
+var isHiddenItem = (item) => (item.tags ?? []).includes(HIDDEN_ITEM_TAG);
 var isAuthenticatorStorage = (key) => key === "totp_seed" || key.startsWith("totp_") || key === "authenticator_last_time_step";
 function loginSiteOf(item) {
   const raw = item.loginUrls[0];
@@ -8846,7 +8850,7 @@ function createApiVaultPort(api, options = {}) {
       lists.forEach((l, i) => {
         const sharedList = i === lists.length - 1;
         for (const w of l.items) {
-          if (seen.has(w.id) || deleted.has(w.id)) continue;
+          if (seen.has(w.id) || deleted.has(w.id) || isHiddenItem(w)) continue;
           const owner = sharedList ? orgOf(w.organization_id, null, false) : orgOf(w.organization_id, w.user_id, i === 0);
           const item = itemOf(w, sharedList && !w.organization_id ? { kind: "shared", label: "Shared with me", organizationId: null } : owner, defs, auth);
           (isDeleted(w) ? deleted : seen).set(w.id, item);