@ai-matrx/vault 0.1.11 → 0.1.13

package/CHANGELOG.md

@@ -1,6 +1,18 @@
 # Changelog
 
-### Unreleased
+## 0.1.13
+
+- **Turn on also turns the item on.** A restore leaves the whole item disabled (`status: "disabled"`), not only its fields, so a turned-on field still answered "not found". `VaultItem.turnedOff` reads it; every **Turn on** turns the item on first (`fields.updateItem(item, { active: true })` → `status: "active"`), and turning the one-time password on also re-enables its codes. An off item says "This item is turned off" and its rows read Turned off. Guard: `src/restored-item.test.tsx`, `src/fields/fields.test.ts`. Consumer action: none.
+- **A dead session no longer throws a burst of unhandled rejections**: `load()` answers every part it started, so only the one "You've been signed out" shows. Guard: `src/load-dead-session.test.ts`. Consumer action: none.
+
+## 0.1.12
+
+- **Restored items are repairable in place.** An item back from Trash says "N fields are turned off" with **Turn on** (all), and each off row has its own **Turn on**; the one-time password reads "Turned off" + Turn on instead of "Set up" (which invited replacing a 2FA secret it still has), and editing it says "Paste a new key to replace". Plain words in settings: "One-time password key" (was "Totp seed"), "Always shown / Hidden / Never shown" (was "Anyone / On request / Sealed"), "Turned on" (was "Active"). Guard: `src/restored-item.test.tsx`. Consumer action: none.
+- **Continue with Google checks who came back.** `createSupabaseIdentity` remembers the person across the provider redirect (`sessionStorage`, `CONFIRM_RETURN_KEY`) and `VaultIdentity.checkReturn()` (run by `IdentityGate` on load) refuses a different account: it is signed out of THIS device through the new `onDifferentPerson(message)` option (default `auth.signOut({ scope: "local" })`) and a "Different account" dialog says so. Guard: `src/auth/identity.test.ts`, `src/auth/identity-gate.test.tsx`. **Consumer action:** web app: pass `onDifferentPerson` running the app's device-scoped sign-out. Extension and desktop: none (they check in place).
+- **`IdentityGate`, `useConfirmed`, `wasCancelled` are exported**, so a host screen outside the workspace (the web app's secure-link sender) confirms through the ONE gate. Consumer action: web app: delete its own password-only confirm dialog.
+- **`VaultHostCapabilities.signIn`**: when the vault cannot open because the session ended (a 401 after the refresh failed), it says "You've been signed out." with **Sign in**. Consumer action: hosts with a sign-in page pass `signIn`.
+- **Owner always shown**: search and category rows name the owner whenever the vault being browsed mixes owners (`ItemList showOwner`); the one-time passwords view always titles its owner groups; Trash rows read type · owner · deleted date (`trashLineOf`). Guard: `src/owner-shown.test.tsx`, `src/lists/logic.test.ts`.
+- Sort by website groups by site (`siteDomainOf`: `accounts.google.com` → `google.com`), and the item letter is the site's. Save to: organizations alphabetical, same-named ones told apart. Keyboard: `/` focuses search, Esc closes the open item; "Confirm it's you" focuses the password field. Panel footers: actions always right, Done on Activity and Password history. The server's recent-sign-in refusal is now a 403 (aidream 1db125d32a); `needsRecentSignIn` already read the code. Consumer action: none.
 
 - Hidden items: an item tagged `HIDDEN_ITEM_TAG` (`"matrx:hidden"`, `isHiddenItem`) is a host's own and is never listed, not even in Trash (the desktop app keeps its Touch ID key there). Consumer action: none.
 
@@ -9,8 +21,14 @@
 
 ## 0.1.11
 
-UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
-Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
+SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,
+so they may include breaking API changes. Consumer action is UNKNOWN: read the diff before upgrading.
+Diff: `git diff 92167249a3 62116d54f1 -- apps/shared/vault/src`
+
+Changed shipped source files (3):
+- `apps/shared/vault/src/api-port.ts`
+- `apps/shared/vault/src/index.ts`
+- `apps/shared/vault/src/model.ts`
 
 ## 0.1.10