@ai-matrx/vault 0.1.10 → 0.1.12

package/CHANGELOG.md

@@ -2,14 +2,55 @@
 
 ### Unreleased
 
+- **Restored items are repairable in place.** An item back from Trash says "N fields are turned off" with **Turn on** (all), and each off row has its own **Turn on**; the one-time password reads "Turned off" + Turn on instead of "Set up" (which invited replacing a 2FA secret it still has), and editing it says "Paste a new key to replace". Plain words in settings: "One-time password key" (was "Totp seed"), "Always shown / Hidden / Never shown" (was "Anyone / On request / Sealed"), "Turned on" (was "Active"). Guard: `src/restored-item.test.tsx`. Consumer action: none.
+- **Continue with Google checks who came back.** `createSupabaseIdentity` remembers the person across the provider redirect (`sessionStorage`, `CONFIRM_RETURN_KEY`) and `VaultIdentity.checkReturn()` (run by `IdentityGate` on load) refuses a different account: it is signed out of THIS device through the new `onDifferentPerson(message)` option (default `auth.signOut({ scope: "local" })`) and a "Different account" dialog says so. Guard: `src/auth/identity.test.ts`, `src/auth/identity-gate.test.tsx`. **Consumer action:** web app: pass `onDifferentPerson` running the app's device-scoped sign-out. Extension and desktop: none (they check in place).
+- **`IdentityGate`, `useConfirmed`, `wasCancelled` are exported**, so a host screen outside the workspace (the web app's secure-link sender) confirms through the ONE gate. Consumer action: web app: delete its own password-only confirm dialog.
+- **`VaultHostCapabilities.signIn`**: when the vault cannot open because the session ended (a 401 after the refresh failed), it says "You've been signed out." with **Sign in**. Consumer action: hosts with a sign-in page pass `signIn`.
+- **Owner always shown**: search and category rows name the owner whenever the vault being browsed mixes owners (`ItemList showOwner`); the one-time passwords view always titles its owner groups; Trash rows read type · owner · deleted date (`trashLineOf`). Guard: `src/owner-shown.test.tsx`, `src/lists/logic.test.ts`.
+- Sort by website groups by site (`siteDomainOf`: `accounts.google.com` → `google.com`), and the item letter is the site's. Save to: organizations alphabetical, same-named ones told apart. Keyboard: `/` focuses search, Esc closes the open item; "Confirm it's you" focuses the password field. Panel footers: actions always right, Done on Activity and Password history. The server's recent-sign-in refusal is now a 403 (aidream 1db125d32a); `needsRecentSignIn` already read the code. Consumer action: none.
+
+- Hidden items: an item tagged `HIDDEN_ITEM_TAG` (`"matrx:hidden"`, `isHiddenItem`) is a host's own and is never listed, not even in Trash (the desktop app keeps its Touch ID key there). Consumer action: none.
+
 - **Confirm in place.** `VaultIdentity.withProvider` may resolve `"confirmed"` when the host confirms without leaving the page (the desktop's Touch ID); "Confirm it's you" then closes and runs the refused call again — one confirmation, the value appears. Before, the dialog stayed open and the person had to cancel and press reveal again. Labels for `touch_id` ("Touch ID") and `browser`. Guard: `src/auth/identity-gate.test.tsx` (fails on the old gate). **Consumer action:** Matrx Desktop: return `"confirmed"` from `withProvider` once the confirmation succeeded in place. Web app and extension: none.
 - **`VaultApp look="web"|"desktop"`.** The same screens and features, two skins: `"web"` (default) is the website's and the extension's look, unchanged; `"desktop"` draws the workspace in the desktop standard through `@ai-matrx/design-system`'s `LookScope` — the system font and Apple text styles, AppKit-size controls, System Settings/Passwords grouped boxes (no border, hairlines between rows, bold section titles), the source list's open row in the accent, and every panel as a modal macOS sheet, light and dark. The playground's Desktop host uses it. Guard: `src/look.test.tsx`. **Consumer action:** Matrx Desktop: pass `look="desktop"` to `<VaultApp>` (Account › Vault). Web app and extension: none.
 
-## 0.1.10
+## 0.1.12
 
 UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
 Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
 
+## 0.1.11
+
+SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,
+so they may include breaking API changes. Consumer action is UNKNOWN: read the diff before upgrading.
+Diff: `git diff 92167249a3 62116d54f1 -- apps/shared/vault/src`
+
+Changed shipped source files (3):
+- `apps/shared/vault/src/api-port.ts`
+- `apps/shared/vault/src/index.ts`
+- `apps/shared/vault/src/model.ts`
+
+## 0.1.10
+
+SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,
+so they may include breaking API changes. Consumer action is UNKNOWN: read the diff before upgrading.
+Diff: `git diff 95a286343b 92167249a3 -- apps/shared/vault/src`
+
+Changed shipped source files (35):
+- `apps/shared/vault/src/FieldRows.tsx`
+- `apps/shared/vault/src/ItemPane.tsx`
+- `apps/shared/vault/src/NewItemFlow.tsx`
+- `apps/shared/vault/src/Sidebar.tsx`
+- `apps/shared/vault/src/VaultApp.tsx`
+- `apps/shared/vault/src/activity/ActivityPanel.tsx`
+- `apps/shared/vault/src/activity/FilesSection.tsx`
+- `apps/shared/vault/src/activity/HistoryPanel.tsx`
+- `apps/shared/vault/src/auth/IdentityGate.tsx`
+- `apps/shared/vault/src/auth/identity.ts`
+- `apps/shared/vault/src/authenticator/AddOtpPanel.tsx`
+- `apps/shared/vault/src/authenticator/AuthenticatorView.tsx`
+- ...and 23 more
+
 ## 0.1.9
 
 SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,