@ai-matrx/vault 0.1.14 → 0.1.16

package/CHANGELOG.md

@@ -1,9 +1,40 @@
 # Changelog
 
+## 0.1.16
+
+- **The Authenticator is back as a first-class destination.** The codes view is named **Authenticator** everywhere (sidebar, view picker, title, empty state "Add authenticator"), and below the three-pane width (the floating window, tablets, phones) the compact header carries an **Authenticator** button beside the view picker, so it is one press away at every width. Searching "authenticator", "2fa", "totp" or "two-factor" finds every login with a code (`AUTHENTICATOR_WORDS`). Each code row shows the site's letter and, when the host gives `openItemInNewTab`, **Open in new tab**. Guard: `src/authenticator-restore.test.tsx`. **Consumer action:** web app: pass `host.openItemInNewTab` (opens `/vault/<id>` in a new tab). Extension and desktop: none.
+- **Camera scan and QR-image reading in every browser.** QR decoding goes through `@ai-matrx/capture/qr` (BarcodeDetector, then `jsqr`), so Safari (Mac, iPhone) and Firefox get the camera button and read QR images locally, as the old web Authenticator did. New dependency `@ai-matrx/capture`. Consumer action: none.
+- **Setting up reads as setting up an authenticator.** The setup row is labeled "Authenticator" ("Paste setup key or otpauth link", a visible **Scan** button); "Set up" on a saved login opens the authenticator setup for THAT login at once (no "Add to" choice); a save that set up an authenticator shows its first code (`ItemPane onSaved(…, enrolled)`, `FirstCodePanel`). Consumer action: none.
+- **Backup (recovery) codes on every login.** A website login (whose type does not declare `recovery_codes`) shows **Recovery codes** with Add, Show, Copy, Mark used and Replace; new and edit offer **Add backup codes** (stored one per line as their own encrypted `recovery_codes` field, also on create). Guard: `src/authenticator-restore.test.tsx`. Consumer action: none.
+- **Copy from the list on every screen.** Each row has a More button (always shown on touch screens, on hover or focus elsewhere) with **Copy username**, **Copy password**, **Copy one-time code**, Open and Copy name; the hover quick-copy buttons stay. Guard: `src/restored-features.test.tsx`. Consumer action: none.
+- **Sorts back: Name Z–A and Recently viewed** (`VaultSort` `name-desc`, `viewed`; `sortItems(items, sort, recents)`; Recently viewed only where the host keeps Recently opened). Name sorts compare numbers as numbers. Consumer action: none.
+- **Creating for someone else ends on what was sent** — name, item ID, whether the password was generated privately — with **Create another** (same type, recipient kept) and Done. Consumer action: none.
+- **Everything settable before the first save**: files (chosen, described and protected while creating, stored right after it saves; a refused file is said), a login's **Two-factor** method (text message / other), and More → Add → **Browser settings** (website matching, fill in browser; `ItemDraft.browser`). Consumer action: none.
+- **The custom-credential builder**: a new secret field (More → Add → Secret field) has a generator and its settings one press away — env key, who can see it (Always shown / Hidden / Never shown, sealing confirmed), use in sandbox (needs an env key); pasting `KEY=value` fills the env key, the value and the name (`NewSecretField.envKey/handling/injectIntoSandbox`, `secretFieldIn`, `parseEnvAssignment`). Consumer action: none.
+- **Field settings one press from each row in view mode** (the sliders on a secret's row open its env key / sandbox / who-can-see settings), and **Add file** on an item with no files without pressing Edit. Consumer action: none.
+- **Agent context for hosts**: `VaultApp onInventory({ items, definitions })` reports what the person can see; `vaultInventoryScope`, `vaultItemFacts`, `providerOf`, `itemIdAt` build the non-secret scope (count, names, providers, field KEYS; never values, notes, descriptions or custom values). **Consumer action:** web app: wrap the workspace in the v3 right-click menu + surface runtime for `matrx-user/vault` and fill its values from `onInventory`. Extension and desktop: none.
+- **`host.openWebVault`**: the extension's side panel offers **Open on the web** in the vault menu. **Consumer action:** extension: pass `openWebVault` (opens the website's `/vault`). Web app and desktop: none.
+
 ## 0.1.14
 
-UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
-Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
+SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,
+so they may include breaking API changes. Consumer action is UNKNOWN: read the diff before upgrading.
+Diff: `git diff b5002d632f 1c52fd1b8c -- apps/shared/vault/src`
+
+Changed shipped source files (19):
+- `apps/shared/vault/src/FieldRows.tsx`
+- `apps/shared/vault/src/NewItemFlow.tsx`
+- `apps/shared/vault/src/Sidebar.tsx`
+- `apps/shared/vault/src/activity/logic.ts`
+- `apps/shared/vault/src/api-port.ts`
+- `apps/shared/vault/src/auth/IdentityGate.tsx`
+- `apps/shared/vault/src/authenticator/Setup.tsx`
+- `apps/shared/vault/src/authenticator/TotpRows.tsx`
+- `apps/shared/vault/src/devices/logic.ts`
+- `apps/shared/vault/src/glyphs.tsx`
+- `apps/shared/vault/src/io/bounded-zip.ts`
+- `apps/shared/vault/src/io/dashlane-csv-archive.ts`
+- ...and 7 more
 
 ## 0.1.13