@ai-matrx/vault 0.1.12 → 0.1.14

package/dist/index.d.cts

@@ -86,6 +86,8 @@ interface VaultItem {
     accessMode: string | null;
     /** The person who owns the item (`user_id`). For the person's own items this is them. */
     ownerUserId: string | null;
+    /** The whole item is turned off (an item restored from Trash comes back off): nothing can use it until it is turned on. */
+    turnedOff?: boolean;
     /** Set when the item is in the trash: what restoring it needs. */
     deletion: {
         deletionId: string | null;
@@ -742,6 +744,8 @@ interface ItemSettingsPatch {
     browserFillEnabled?: boolean;
     /** The complete list of websites (used to add a promoted address). */
     loginUrls?: string[];
+    /** Turn the whole item on (true) or off (false). */
+    active?: boolean;
 }
 interface NewFieldInput {
     key: string;
@@ -1274,7 +1278,7 @@ interface SharingPortOptions {
 /**
  * THE vault client for every host: a VaultPort over the generated `@ai-matrx/api`. The web app, the
  * extension and the desktop app hand it their own `Api` (their own sign-in and organization) and get
- * identical behaviour; none of them keeps a hand-written vault client.
+ * identical behavior; none of them keeps a hand-written vault client.
  */
 
 interface ApiVaultPortOptions {
@@ -1300,7 +1304,7 @@ declare function IdentityGate({ identity, children }: {
     identity: VaultIdentity | undefined;
     children: ReactNode;
 }): react.JSX.Element;
-/** True for the rejection a cancelled confirmation produces (callers stay quiet about it). */
+/** True for the rejection a canceled confirmation produces (callers stay quiet about it). */
 declare const wasCancelled: (e: unknown) => boolean;
 
 /** Reads the organization's ceilings. Raw knob values are fine: they are validated here. */

package/dist/index.d.ts

@@ -86,6 +86,8 @@ interface VaultItem {
     accessMode: string | null;
     /** The person who owns the item (`user_id`). For the person's own items this is them. */
     ownerUserId: string | null;
+    /** The whole item is turned off (an item restored from Trash comes back off): nothing can use it until it is turned on. */
+    turnedOff?: boolean;
     /** Set when the item is in the trash: what restoring it needs. */
     deletion: {
         deletionId: string | null;
@@ -742,6 +744,8 @@ interface ItemSettingsPatch {
     browserFillEnabled?: boolean;
     /** The complete list of websites (used to add a promoted address). */
     loginUrls?: string[];
+    /** Turn the whole item on (true) or off (false). */
+    active?: boolean;
 }
 interface NewFieldInput {
     key: string;
@@ -1274,7 +1278,7 @@ interface SharingPortOptions {
 /**
  * THE vault client for every host: a VaultPort over the generated `@ai-matrx/api`. The web app, the
  * extension and the desktop app hand it their own `Api` (their own sign-in and organization) and get
- * identical behaviour; none of them keeps a hand-written vault client.
+ * identical behavior; none of them keeps a hand-written vault client.
  */
 
 interface ApiVaultPortOptions {
@@ -1300,7 +1304,7 @@ declare function IdentityGate({ identity, children }: {
     identity: VaultIdentity | undefined;
     children: ReactNode;
 }): react.JSX.Element;
-/** True for the rejection a cancelled confirmation produces (callers stay quiet about it). */
+/** True for the rejection a canceled confirmation produces (callers stay quiet about it). */
 declare const wasCancelled: (e: unknown) => boolean;
 
 /** Reads the organization's ceilings. Raw knob values are fine: they are validated here. */

package/dist/index.js

@@ -684,7 +684,7 @@ function SecretRow({ port, item, field, extra, onTurnOn }) {
   const [error, setError] = useState5(null);
   const sealed = field.handling === "sealed";
   const visible = field.handling === "visible";
-  const off = field.active === false;
+  const off = field.active === false || item.turnedOff === true;
   const canSee = !sealed && !off && (visible ? item.capabilities.canUse : item.capabilities.canReveal);
   useEffect5(() => {
     if (!visible || !canSee) return;
@@ -4088,7 +4088,7 @@ import { BlobReader as BlobReader2, ZipReader as ZipReader2 } from "@zip.js/zip.
 var safe = (value) => Number.isSafeInteger(value) && value >= 0;
 var unsafeName = (name) => /[\\\0-\x1F\x7F-\x9F]/.test(name);
 function stopIfCancelled(signal) {
-  if (signal?.aborted) throw new Error("The archive import was cancelled.");
+  if (signal?.aborted) throw new Error("The archive import was canceled.");
 }
 function hasWarnings(reader, entry) {
   return Boolean(reader.warnings?.length || entry.warnings?.length);
@@ -4189,7 +4189,7 @@ async function openBoundedZip(file, limits, signal) {
     };
   } catch (error) {
     await reader.close();
-    if (signal?.aborted) throw new Error("The archive import was cancelled.");
+    if (signal?.aborted) throw new Error("The archive import was canceled.");
     throw error;
   }
 }
@@ -4228,7 +4228,7 @@ async function readDashlaneCsvArchive(file, limits, signal) {
     return { credentialsText, omittedCsvCount };
   } catch (error) {
     credentialsText = void 0;
-    if (signal?.aborted) throw new Error("The Dashlane import was cancelled.");
+    if (signal?.aborted) throw new Error("The Dashlane import was canceled.");
     throw error;
   } finally {
     credentialsText = void 0;
@@ -4363,7 +4363,7 @@ function hasValidStructuredImportFileNotices(value, maxCount) {
 }
 
 // src/io/parse-source.ts
-var cancelled = () => new Error("The import was cancelled.");
+var cancelled = () => new Error("The import was canceled.");
 function parseStructured(source, file, limits, signal) {
   const descriptor = structuredImportSource(source);
   if (!descriptor) return Promise.reject(new Error("This kind of file cannot be imported."));
@@ -5770,13 +5770,19 @@ function ItemPane(props) {
     }
   }
   const offFields = item ? item.fields.filter((f) => !f.active) : [];
+  const itemOff = item?.turnedOff === true;
   const seedField = item?.fields.find((f) => f.key === OTP_SEED_KEY) ?? null;
   const canTurnOn = Boolean(item && canEdit);
   async function turnOn(fields) {
-    if (!item || fields.length === 0) return;
+    if (!item) return;
     setError(null);
     try {
+      if (item.turnedOff) await confirmed(() => port.fields.updateItem(item, { active: true }));
       for (const f of fields) await confirmed(() => port.fields.updateField(item, f.id, { active: true }));
+      if (fields.some((f) => f.key === OTP_SEED_KEY)) {
+        const codes = await port.authenticator.get(item);
+        if (codes && !codes.enabled) await confirmed(() => port.authenticator.setEnabled(item, true));
+      }
       onChanged();
     } catch (e) {
       if (!wasCancelled(e)) setError(e instanceof Error ? e.message : "It could not be turned on.");
@@ -5879,8 +5885,8 @@ function ItemPane(props) {
     header,
     error ? /* @__PURE__ */ jsx26("div", { role: "alert", className: "border-b border-border bg-muted px-5 py-2 text-sm text-destructive", children: error }) : null,
     notice && !editing ? /* @__PURE__ */ jsx26("div", { role: "status", className: "border-b border-border bg-muted px-5 py-2 text-sm text-warning", children: notice }) : null,
-    item && !editing && offFields.length > 0 ? /* @__PURE__ */ jsxs24("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-5 py-2 text-sm", children: [
-      /* @__PURE__ */ jsx26("span", { className: "min-w-0 flex-1 truncate text-warning", children: offFields.length === 1 ? "1 field is turned off" : `${offFields.length} fields are turned off` }),
+    item && !editing && (itemOff || offFields.length > 0) ? /* @__PURE__ */ jsxs24("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-5 py-2 text-sm", children: [
+      /* @__PURE__ */ jsx26("span", { className: "min-w-0 flex-1 truncate text-warning", children: offFields.length === 0 ? "This item is turned off" : offFields.length === 1 ? "1 field is turned off" : `${offFields.length} fields are turned off` }),
       canTurnOn ? /* @__PURE__ */ jsx26(TurnOnButton, { label: "all fields", onTurnOn: () => turnOn(offFields) }) : null
     ] }) : null,
     /* @__PURE__ */ jsx26("div", { className: "min-h-0 flex-1 overflow-y-auto", children: /* @__PURE__ */ jsx26("div", { className: "mx-auto flex w-full max-w-3xl flex-col gap-5 px-3 py-4 sm:px-6 sm:py-6", children: editing ? /* @__PURE__ */ jsxs24(Fragment16, { children: [
@@ -6983,7 +6989,7 @@ var plural2 = (n, one) => `${n} ${one}${n === 1 ? "" : "s"}`;
 function terminalMessage(s) {
   if (s.phase === "completed") return `Imported ${plural2(s.committed, "passkey")}.`;
   if (s.phase === "partial") return `${s.committed} imported; ${s.unsupported + s.failed + s.uncertain + s.not_attempted} need attention.`;
-  if (s.phase === "cancelled") return "Import cancelled. Nothing else will be imported.";
+  if (s.phase === "cancelled") return "Import canceled. Nothing else will be imported.";
   if (s.phase === "unavailable") return "Passkey import is unavailable here.";
   if (s.phase === "failed") return "The import did not finish. Recover it before using a new file.";
   return s.message;
@@ -7168,7 +7174,7 @@ function useNativeImport(bridge, stillAllowed, onImported) {
       present(g, { kind: "status", status: result, message: terminalMessage(result) });
       if (!done && ACTIVE_PHASES.has(result.phase)) schedulePoll(active.id);
     } catch (e) {
-      keepOperation(g, fail(e, "The import could not be cancelled."));
+      keepOperation(g, fail(e, "The import could not be canceled."));
     } finally {
       if (current(g)) setBusy(false);
     }
@@ -8460,6 +8466,7 @@ function createFieldsPort(ctx) {
       if (patch.uriMatchMode !== void 0) body.uri_match_mode = patch.uriMatchMode;
       if (patch.browserFillEnabled !== void 0) body.browser_fill_enabled = patch.browserFillEnabled;
       if (patch.loginUrls !== void 0) body.login_urls = patch.loginUrls;
+      if (patch.active !== void 0) body.status = patch.active ? "active" : "disabled";
       await account3.updateItem(api, { path: { item_id: item.id }, body }, ctx.optsFor(item));
       return reread(item);
     },
@@ -8872,6 +8879,7 @@ function itemOf(w, owner, defs, auth) {
     uriMatchMode: MATCH_MODES2.find((m) => m === w.uri_match_mode) ?? "host",
     browserFillEnabled: w.browser_fill_enabled ?? true,
     accessMode: w.access_mode ?? null,
+    turnedOff: w.status === "disabled",
     ownerUserId: w.user_id ?? null,
     deletion: recovery?.state === "deleted" ? { deletionId: typeof recovery.deletion_id === "string" ? recovery.deletion_id : null, deletedAt: typeof recovery.deleted_at === "string" ? recovery.deleted_at : null } : null,
     updatedAt: w.updated_at,
@@ -8931,9 +8939,12 @@ function createApiVaultPort(api, options = {}) {
       const authP = retrying(() => apps2.listAuthenticators(api));
       const userP = retrying(() => account9.listItems(api, { query: { principal_type: "user" } }));
       const sharedP = retrying(() => account9.sharedWithMe(api));
+      const quiet = (p) => void p.catch(() => void 0);
+      [catalogP, authP, userP, sharedP].forEach(quiet);
       const org = options.organizations ? null : await retrying(() => platform.listMyOrganizations(api));
       orgs = [...new Map((options.organizations ?? (org?.organizations ?? []).filter((o) => !o.archived_at).map((o) => ({ id: o.id, name: o.name }))).map((o) => [o.id, o])).values()];
       const orgListsP = orgs.map((o) => retrying(() => account9.listItems(api, { query: { principal_type: "organization", organization_id: o.id } }, { organizationId: o.id })));
+      orgListsP.forEach(quiet);
       const [catalog, mine] = await Promise.all([catalogP, userP]);
       const [authSettled, sharedSettled, ...orgSettled] = await Promise.allSettled([authP, sharedP, ...orgListsP]);
       const unavailable = [];