@ai-matrx/vault 0.1.12 → 0.1.14

package/CHANGELOG.md

@@ -1,6 +1,16 @@
 # Changelog
 
-### Unreleased
+## 0.1.14
+
+UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
+Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
+
+## 0.1.13
+
+- **Turn on also turns the item on.** A restore leaves the whole item disabled (`status: "disabled"`), not only its fields, so a turned-on field still answered "not found". `VaultItem.turnedOff` reads it; every **Turn on** turns the item on first (`fields.updateItem(item, { active: true })` → `status: "active"`), and turning the one-time password on also re-enables its codes. An off item says "This item is turned off" and its rows read Turned off. Guard: `src/restored-item.test.tsx`, `src/fields/fields.test.ts`. Consumer action: none.
+- **A dead session no longer throws a burst of unhandled rejections**: `load()` answers every part it started, so only the one "You've been signed out" shows. Guard: `src/load-dead-session.test.ts`. Consumer action: none.
+
+## 0.1.12
 
 - **Restored items are repairable in place.** An item back from Trash says "N fields are turned off" with **Turn on** (all), and each off row has its own **Turn on**; the one-time password reads "Turned off" + Turn on instead of "Set up" (which invited replacing a 2FA secret it still has), and editing it says "Paste a new key to replace". Plain words in settings: "One-time password key" (was "Totp seed"), "Always shown / Hidden / Never shown" (was "Anyone / On request / Sealed"), "Turned on" (was "Active"). Guard: `src/restored-item.test.tsx`. Consumer action: none.
 - **Continue with Google checks who came back.** `createSupabaseIdentity` remembers the person across the provider redirect (`sessionStorage`, `CONFIRM_RETURN_KEY`) and `VaultIdentity.checkReturn()` (run by `IdentityGate` on load) refuses a different account: it is signed out of THIS device through the new `onDifferentPerson(message)` option (default `auth.signOut({ scope: "local" })`) and a "Different account" dialog says so. Guard: `src/auth/identity.test.ts`, `src/auth/identity-gate.test.tsx`. **Consumer action:** web app: pass `onDifferentPerson` running the app's device-scoped sign-out. Extension and desktop: none (they check in place).
@@ -14,11 +24,6 @@
 - **Confirm in place.** `VaultIdentity.withProvider` may resolve `"confirmed"` when the host confirms without leaving the page (the desktop's Touch ID); "Confirm it's you" then closes and runs the refused call again — one confirmation, the value appears. Before, the dialog stayed open and the person had to cancel and press reveal again. Labels for `touch_id` ("Touch ID") and `browser`. Guard: `src/auth/identity-gate.test.tsx` (fails on the old gate). **Consumer action:** Matrx Desktop: return `"confirmed"` from `withProvider` once the confirmation succeeded in place. Web app and extension: none.
 - **`VaultApp look="web"|"desktop"`.** The same screens and features, two skins: `"web"` (default) is the website's and the extension's look, unchanged; `"desktop"` draws the workspace in the desktop standard through `@ai-matrx/design-system`'s `LookScope` — the system font and Apple text styles, AppKit-size controls, System Settings/Passwords grouped boxes (no border, hairlines between rows, bold section titles), the source list's open row in the accent, and every panel as a modal macOS sheet, light and dark. The playground's Desktop host uses it. Guard: `src/look.test.tsx`. **Consumer action:** Matrx Desktop: pass `look="desktop"` to `<VaultApp>` (Account › Vault). Web app and extension: none.
 
-## 0.1.12
-
-UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
-Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
-
 ## 0.1.11
 
 SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,

package/dist/index.cjs

@@ -749,7 +749,7 @@ function SecretRow({ port, item, field, extra, onTurnOn }) {
   const [error, setError] = (0, import_react5.useState)(null);
   const sealed = field.handling === "sealed";
   const visible = field.handling === "visible";
-  const off = field.active === false;
+  const off = field.active === false || item.turnedOff === true;
   const canSee = !sealed && !off && (visible ? item.capabilities.canUse : item.capabilities.canReveal);
   (0, import_react5.useEffect)(() => {
     if (!visible || !canSee) return;
@@ -4150,7 +4150,7 @@ var import_zip2 = require("@zip.js/zip.js");
 var safe = (value) => Number.isSafeInteger(value) && value >= 0;
 var unsafeName = (name) => /[\\\0-\x1F\x7F-\x9F]/.test(name);
 function stopIfCancelled(signal) {
-  if (signal?.aborted) throw new Error("The archive import was cancelled.");
+  if (signal?.aborted) throw new Error("The archive import was canceled.");
 }
 function hasWarnings(reader, entry) {
   return Boolean(reader.warnings?.length || entry.warnings?.length);
@@ -4251,7 +4251,7 @@ async function openBoundedZip(file, limits, signal) {
     };
   } catch (error) {
     await reader.close();
-    if (signal?.aborted) throw new Error("The archive import was cancelled.");
+    if (signal?.aborted) throw new Error("The archive import was canceled.");
     throw error;
   }
 }
@@ -4290,7 +4290,7 @@ async function readDashlaneCsvArchive(file, limits, signal) {
     return { credentialsText, omittedCsvCount };
   } catch (error) {
     credentialsText = void 0;
-    if (signal?.aborted) throw new Error("The Dashlane import was cancelled.");
+    if (signal?.aborted) throw new Error("The Dashlane import was canceled.");
     throw error;
   } finally {
     credentialsText = void 0;
@@ -4425,7 +4425,7 @@ function hasValidStructuredImportFileNotices(value, maxCount) {
 }
 
 // src/io/parse-source.ts
-var cancelled = () => new Error("The import was cancelled.");
+var cancelled = () => new Error("The import was canceled.");
 function parseStructured(source, file, limits, signal) {
   const descriptor = structuredImportSource(source);
   if (!descriptor) return Promise.reject(new Error("This kind of file cannot be imported."));
@@ -5832,13 +5832,19 @@ function ItemPane(props) {
     }
   }
   const offFields = item ? item.fields.filter((f) => !f.active) : [];
+  const itemOff = item?.turnedOff === true;
   const seedField = item?.fields.find((f) => f.key === OTP_SEED_KEY) ?? null;
   const canTurnOn = Boolean(item && canEdit);
   async function turnOn(fields) {
-    if (!item || fields.length === 0) return;
+    if (!item) return;
     setError(null);
     try {
+      if (item.turnedOff) await confirmed(() => port.fields.updateItem(item, { active: true }));
       for (const f of fields) await confirmed(() => port.fields.updateField(item, f.id, { active: true }));
+      if (fields.some((f) => f.key === OTP_SEED_KEY)) {
+        const codes = await port.authenticator.get(item);
+        if (codes && !codes.enabled) await confirmed(() => port.authenticator.setEnabled(item, true));
+      }
       onChanged();
     } catch (e) {
       if (!wasCancelled(e)) setError(e instanceof Error ? e.message : "It could not be turned on.");
@@ -5941,8 +5947,8 @@ function ItemPane(props) {
     header,
     error ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { role: "alert", className: "border-b border-border bg-muted px-5 py-2 text-sm text-destructive", children: error }) : null,
     notice && !editing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { role: "status", className: "border-b border-border bg-muted px-5 py-2 text-sm text-warning", children: notice }) : null,
-    item && !editing && offFields.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-5 py-2 text-sm", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "min-w-0 flex-1 truncate text-warning", children: offFields.length === 1 ? "1 field is turned off" : `${offFields.length} fields are turned off` }),
+    item && !editing && (itemOff || offFields.length > 0) ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-5 py-2 text-sm", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("span", { className: "min-w-0 flex-1 truncate text-warning", children: offFields.length === 0 ? "This item is turned off" : offFields.length === 1 ? "1 field is turned off" : `${offFields.length} fields are turned off` }),
       canTurnOn ? /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(TurnOnButton, { label: "all fields", onTurnOn: () => turnOn(offFields) }) : null
     ] }) : null,
     /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "min-h-0 flex-1 overflow-y-auto", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "mx-auto flex w-full max-w-3xl flex-col gap-5 px-3 py-4 sm:px-6 sm:py-6", children: editing ? /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(import_jsx_runtime26.Fragment, { children: [
@@ -7045,7 +7051,7 @@ var plural2 = (n, one) => `${n} ${one}${n === 1 ? "" : "s"}`;
 function terminalMessage(s) {
   if (s.phase === "completed") return `Imported ${plural2(s.committed, "passkey")}.`;
   if (s.phase === "partial") return `${s.committed} imported; ${s.unsupported + s.failed + s.uncertain + s.not_attempted} need attention.`;
-  if (s.phase === "cancelled") return "Import cancelled. Nothing else will be imported.";
+  if (s.phase === "cancelled") return "Import canceled. Nothing else will be imported.";
   if (s.phase === "unavailable") return "Passkey import is unavailable here.";
   if (s.phase === "failed") return "The import did not finish. Recover it before using a new file.";
   return s.message;
@@ -7230,7 +7236,7 @@ function useNativeImport(bridge, stillAllowed, onImported) {
       present(g, { kind: "status", status: result, message: terminalMessage(result) });
       if (!done && ACTIVE_PHASES.has(result.phase)) schedulePoll(active.id);
     } catch (e) {
-      keepOperation(g, fail(e, "The import could not be cancelled."));
+      keepOperation(g, fail(e, "The import could not be canceled."));
     } finally {
       if (current(g)) setBusy(false);
     }
@@ -8522,6 +8528,7 @@ function createFieldsPort(ctx) {
       if (patch.uriMatchMode !== void 0) body.uri_match_mode = patch.uriMatchMode;
       if (patch.browserFillEnabled !== void 0) body.browser_fill_enabled = patch.browserFillEnabled;
       if (patch.loginUrls !== void 0) body.login_urls = patch.loginUrls;
+      if (patch.active !== void 0) body.status = patch.active ? "active" : "disabled";
       await account3.updateItem(api, { path: { item_id: item.id }, body }, ctx.optsFor(item));
       return reread(item);
     },
@@ -8934,6 +8941,7 @@ function itemOf(w, owner, defs, auth) {
     uriMatchMode: MATCH_MODES2.find((m) => m === w.uri_match_mode) ?? "host",
     browserFillEnabled: w.browser_fill_enabled ?? true,
     accessMode: w.access_mode ?? null,
+    turnedOff: w.status === "disabled",
     ownerUserId: w.user_id ?? null,
     deletion: recovery?.state === "deleted" ? { deletionId: typeof recovery.deletion_id === "string" ? recovery.deletion_id : null, deletedAt: typeof recovery.deleted_at === "string" ? recovery.deleted_at : null } : null,
     updatedAt: w.updated_at,
@@ -8993,9 +9001,12 @@ function createApiVaultPort(api, options = {}) {
       const authP = retrying(() => apps2.listAuthenticators(api));
       const userP = retrying(() => account9.listItems(api, { query: { principal_type: "user" } }));
       const sharedP = retrying(() => account9.sharedWithMe(api));
+      const quiet = (p) => void p.catch(() => void 0);
+      [catalogP, authP, userP, sharedP].forEach(quiet);
       const org = options.organizations ? null : await retrying(() => platform.listMyOrganizations(api));
       orgs = [...new Map((options.organizations ?? (org?.organizations ?? []).filter((o) => !o.archived_at).map((o) => ({ id: o.id, name: o.name }))).map((o) => [o.id, o])).values()];
       const orgListsP = orgs.map((o) => retrying(() => account9.listItems(api, { query: { principal_type: "organization", organization_id: o.id } }, { organizationId: o.id })));
+      orgListsP.forEach(quiet);
       const [catalog, mine] = await Promise.all([catalogP, userP]);
       const [authSettled, sharedSettled, ...orgSettled] = await Promise.allSettled([authP, sharedP, ...orgListsP]);
       const unavailable = [];