@ai-matrx/vault 0.1.18 → 0.1.19

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.19
+
+UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
+Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
+
 ## 0.1.18
 
 - The Authenticator list keeps the code and its countdown ring apart at every width (the code column never squeezes), the list header lines up with the list on wide screens, and the Add authenticator panel's camera button is icon-only so the setup-key box has room on a phone. Consumer action: none.

package/dist/index.cjs

@@ -929,6 +929,7 @@ function locationFromParams(params, itemId = params.get("item")) {
     mode: mode === "edit" || mode === "new" ? mode : "view",
     kind: params.get("kind"),
     url: params.get("url") ?? "",
+    ...params.get("name") ? { name: params.get("name") ?? "" } : {},
     panel: params.get("panel")
   };
 }
@@ -941,6 +942,7 @@ function locationToParams(loc) {
   if (loc.mode !== "view") q.set("mode", loc.mode);
   if (loc.kind) q.set("kind", loc.kind);
   if (loc.url) q.set("url", loc.url);
+  if (loc.name) q.set("name", loc.name);
   if (loc.panel) q.set("panel", loc.panel);
   return q;
 }
@@ -1981,10 +1983,16 @@ function QrScanPanel({ open, onResult, onClose }) {
     /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-center text-xs text-muted-foreground", children: "Point at the site's QR code" })
   ] });
 }
-function OtpSetupRow({ value, onChange, label = "Authenticator", placeholder = "Paste setup key or otpauth link", disabled = false, autoFocus = false, onImage, onRecognized, status }) {
+function OtpSetupRow({ value, onChange, label = "Authenticator", placeholder = "Paste setup key or otpauth link", disabled = false, autoFocus = false, onImage, onRecognized, status, autoStartCamera = false }) {
   const file = (0, import_react10.useRef)(null);
   const canScan = useCanScan();
   const [scanning, setScanning] = (0, import_react10.useState)(false);
+  const autoStarted = (0, import_react10.useRef)(false);
+  (0, import_react10.useEffect)(() => {
+    if (!autoStartCamera || !canScan || disabled || autoStarted.current || value) return;
+    autoStarted.current = true;
+    setScanning(true);
+  }, [autoStartCamera, canScan, disabled, value]);
   const [reading, setReading] = (0, import_react10.useState)(false);
   const [imageError, setImageError] = (0, import_react10.useState)(null);
   const [dragging, setDragging] = (0, import_react10.useState)(false);
@@ -2369,6 +2377,7 @@ function AddOtpPanel({ port, items, definitions, itemId = null, onClose, onChang
               label: "Setup key",
               value: input,
               autoFocus: true,
+              autoStartCamera: true,
               disabled: busy,
               onChange: (v) => {
                 setImage(null);
@@ -3918,7 +3927,7 @@ var MAX_FAILURES_IN_A_ROW = 5;
 var failureText = (cause) => cause instanceof Error && cause.message ? cause.message : "The server refused this one.";
 async function runImport(input) {
   const { io, organizationId, lines, keys, confirmed } = input;
-  const result = { created: [], failed: [], withOtp: 0, stoppedEarly: false, untried: [] };
+  const result = { created: [], failed: [], withOtp: 0, needOtp: [], stoppedEarly: false, untried: [] };
   let streak = 0;
   for (let i = 0; i < lines.length; i += 1) {
     const line = lines[i];
@@ -3937,7 +3946,10 @@ async function runImport(input) {
     try {
       const made = await confirmed(() => io.createImported(command.body, organizationId, key));
       result.created.push(made);
-      if (command.hasOtp) result.withOtp += 1;
+      if (command.hasOtp) {
+        result.withOtp += 1;
+        result.needOtp.push(made);
+      }
       streak = 0;
     } catch (cause) {
       const reason = failureText(cause);
@@ -4537,8 +4549,9 @@ var STATE_BADGE = {
   unsupported: { text: "Not supported", tone: "neutral" }
 };
 var ME = "me";
-function ImportPanel({ port, host, items, organizations, onClose, onChanged, limits }) {
+function ImportPanel({ port, host, items, definitions, organizations, onClose, onChanged, limits }) {
   const confirmed = useConfirmed();
+  const [otpFor, setOtpFor] = (0, import_react20.useState)(null);
   const fileInput = (0, import_react20.useRef)(null);
   const abort = (0, import_react20.useRef)(null);
   const stop = (0, import_react20.useRef)(false);
@@ -4646,6 +4659,7 @@ function ImportPanel({ port, host, items, organizations, onClose, onChanged, lim
       failed: result.failed,
       skipped,
       withOtp: (previous?.withOtp ?? 0) + result.withOtp,
+      needOtp: [...previous?.needOtp ?? [], ...result.needOtp],
       untried: result.untried
     };
     setDone(merged);
@@ -4671,7 +4685,7 @@ function ImportPanel({ port, host, items, organizations, onClose, onChanged, lim
     setRunning({ done: 0, total: chosen });
     try {
       const made = await confirmed(() => port.io.importEnv(text, organizationId, injectSandbox));
-      setDone({ created: made, failed: [], skipped: draft.entries.length - chosen, withOtp: 0, untried: [] });
+      setDone({ created: made, failed: [], skipped: draft.entries.length - chosen, withOtp: 0, needOtp: [], untried: [] });
       if (made.length > 0) onChanged();
     } catch (cause) {
       setError(cause instanceof Error ? cause.message : "The import could not finish.");
@@ -4786,9 +4800,32 @@ function ImportPanel({ port, host, items, organizations, onClose, onChanged, lim
         plural(done.withOtp, "login"),
         " still need the one-time password added."
       ] }) }) : null,
+      done.needOtp.map((made) => {
+        const now = items.find((i) => i.id === made.id);
+        if (now?.authenticator) return null;
+        return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(VaultRow, { label: "Authenticator", children: /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("button", { type: "button", className: "truncate text-left text-primary hover:underline", onClick: () => setOtpFor(made.id), children: [
+          "Set up authenticator for ",
+          made.name
+        ] }) }, `otp:${made.id}`);
+      }),
       done.failed.map((f) => /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(VaultRow, { label: f.title, children: /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "block truncate text-destructive", title: f.reason, children: f.reason }) }, f.key))
     ] }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(ErrorLine, { message: error })
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(ErrorLine, { message: error }),
+    otpFor ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(
+      AddOtpPanel,
+      {
+        port,
+        items,
+        definitions,
+        itemId: otpFor,
+        onClose: () => setOtpFor(null),
+        onChanged,
+        onDone: () => {
+          setOtpFor(null);
+          onChanged();
+        }
+      }
+    ) : null
   ] });
 }
 function toggle(set, key, on) {
@@ -6410,6 +6447,13 @@ function ItemPane(props) {
 
 // src/ItemList.tsx
 var import_jsx_runtime28 = require("react/jsx-runtime");
+var RECOVERY_KEYS = /^recovery_codes?$/;
+function otherCopyFields(item, user, secret) {
+  if (!item.capabilities.canUse) return [];
+  return item.fields.filter(
+    (f) => f !== user && f !== secret && f.active !== false && f.handling !== "sealed" && (f.handling === "visible" || item.capabilities.canReveal) && !isAuthenticatorStorage(f.key) && !RECOVERY_KEYS.test(f.key)
+  );
+}
 var SORTS2 = [
   { value: "name", label: "Name A\u2013Z" },
   { value: "name-desc", label: "Name Z\u2013A" },
@@ -6422,7 +6466,7 @@ function subtitleOf(item, withOwner) {
   const what = loginSiteOf(item) || item.definitionLabel;
   return withOwner ? `${what} \xB7 ${item.owner.label}` : what;
 }
-function ItemList({ title, items, definitions, port, selectedId, onSelect, query, onQuery, sort, onSort, onNew, matchingIds, header, showOwner, canSortViewed = false }) {
+function ItemList({ title, items, definitions, port, selectedId, onSelect, query, onQuery, sort, onSort, onNew, matchingIds, header, showOwner, canSortViewed = false, onRefresh, refreshing = false, rowContextMenu = "package", rowMenuItems }) {
   const sorts = SORTS2.filter((s) => canSortViewed || s.value !== "viewed");
   const pinned = matchingIds ? items.filter((i) => matchingIds.has(i.id)) : [];
   const rest = matchingIds ? items.filter((i) => !matchingIds.has(i.id)) : items;
@@ -6443,7 +6487,7 @@ function ItemList({ title, items, definitions, port, selectedId, onSelect, query
     }
   };
   const mixedOwners = showOwner ?? new Set(items.map((i) => i.owner.organizationId ?? i.owner.kind)).size > 1;
-  const row = (i) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ListRow, { item: i, family: familyOf2(i.definitionKey), port, on: i.id === selectedId, onSelect, withOwner: mixedOwners }, i.id);
+  const row = (i) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ListRow, { item: i, family: familyOf2(i.definitionKey), port, on: i.id === selectedId, onSelect, withOwner: mixedOwners, ownContextMenu: rowContextMenu === "package", extra: rowMenuItems }, i.id);
   const sortLabel = sorts.find((s) => s.value === sort)?.label ?? "Name A\u2013Z";
   return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("section", { "aria-label": title, className: "flex h-full min-h-0 flex-col border-r border-border bg-background", children: [
     /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "flex flex-col gap-2 px-3 pb-2 pt-3", children: [
@@ -6458,9 +6502,12 @@ function ItemList({ title, items, definitions, port, selectedId, onSelect, query
           " ",
           items.length === 1 ? "item" : "items"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenu, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(SortGlyph, {}), "aria-label": `Sort: ${sortLabel}`, children: sortLabel }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuContent, { align: "end", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuRadioGroup, { value: sort, onValueChange: (v) => onSort(sorts.find((s) => s.value === v)?.value ?? "name"), children: sorts.map((s) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuRadioItem, { value: s.value, children: s.label }, s.value)) }) })
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("span", { className: "flex shrink-0 items-center gap-0.5", children: [
+          onRefresh ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(RefreshGlyph, { className: refreshing ? "animate-spin" : "" }), "aria-label": "Refresh", title: "Refresh the list", disabled: refreshing, onClick: onRefresh }) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenu, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(SortGlyph, {}), "aria-label": `Sort: ${sortLabel}`, children: sortLabel }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuContent, { align: "end", children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuRadioGroup, { value: sort, onValueChange: (v) => onSort(sorts.find((s) => s.value === v)?.value ?? "name"), children: sorts.map((s) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuRadioItem, { value: s.value, children: s.label }, s.value)) }) })
+          ] })
         ] })
       ] })
     ] }),
@@ -6475,7 +6522,7 @@ function ItemList({ title, items, definitions, port, selectedId, onSelect, query
     ] }) })
   ] });
 }
-function ListRow({ item, family, port, on, onSelect, withOwner }) {
+function ListRow({ item, family, port, on, onSelect, withOwner, ownContextMenu, extra }) {
   const confirmed = useConfirmed();
   const copy = useCopy();
   const notify = useNotify();
@@ -6500,67 +6547,93 @@ function ListRow({ item, family, port, on, onSelect, withOwner }) {
   const copyPassword = () => secret && void run("Password", () => port.reveal(item, secret.key), true);
   const copyCode = () => code && void run("One-time code", async () => (await port.authenticator.code(item)).code, true);
   const copyName = () => void copy(item.name, "Name", { secret: false });
-  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("li", { className: "group relative", "data-item": item.id, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(
-      "button",
-      {
-        type: "button",
-        "aria-current": on ? "true" : void 0,
-        "data-surface": on ? "primary" : void 0,
-        onClick: () => onSelect(item.id),
-        className: (0, import_design_system20.cn)("flex h-12 w-full items-center gap-3 rounded-lg px-2 pr-10 text-left", on ? "bg-primary text-primary-foreground" : "hover:bg-accent"),
-        children: [
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ItemIcon, { definitionKey: item.definitionKey, family, site: loginSiteOf(item), inverted: on }),
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "truncate text-sm font-medium", children: item.name }),
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: subtitleOf(item, withOwner) })
-          ] })
-        ]
-      }
-    ),
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "absolute right-1.5 top-1/2 flex -translate-y-1/2 items-center gap-0.5", "data-surface": on ? "primary" : void 0, children: [
-      user || secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: (0, import_design_system20.cn)("hidden items-center gap-0.5 rounded-md pl-2 [@media(hover:hover)]:group-hover:flex [@media(hover:hover)]:group-focus-within:flex", on ? "bg-primary" : "bg-accent"), "data-row-quick": "", children: [
-        user ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(UserGlyph, {}), "aria-label": `Copy ${user.label}`, disabled: busy, onClick: copyUser }) : null,
-        secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(KeyGlyph, {}), "aria-label": "Copy password", disabled: busy, onClick: copyPassword }) : null
-      ] }) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenu, { open: menuOpen, onOpenChange: setMenuOpen, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
-          import_controls23.Button,
+  const others = otherCopyFields(item, user, secret);
+  const custom = canUse ? item.custom.filter((c) => c.value) : [];
+  const hostEntries = extra?.(item) ?? [];
+  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(
+    "li",
+    {
+      className: "group relative",
+      "data-item": item.id,
+      onContextMenu: ownContextMenu ? (e) => {
+        e.preventDefault();
+        setMenuOpen(true);
+      } : void 0,
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(
+          "button",
           {
-            variant: "quiet",
-            icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(MoreGlyph, {}),
-            "aria-label": `Actions for ${item.name}`,
-            disabled: busy,
-            className: (0, import_design_system20.cn)("[@media(hover:hover)]:invisible [@media(hover:hover)]:group-hover:visible [@media(hover:hover)]:group-focus-within:visible", menuOpen && "[@media(hover:hover)]:visible")
+            type: "button",
+            "aria-current": on ? "true" : void 0,
+            "data-surface": on ? "primary" : void 0,
+            onClick: () => onSelect(item.id),
+            className: (0, import_design_system20.cn)("flex h-12 w-full items-center gap-3 rounded-lg px-2 pr-10 text-left", on ? "bg-primary text-primary-foreground" : "hover:bg-accent"),
+            children: [
+              /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ItemIcon, { definitionKey: item.definitionKey, family, site: loginSiteOf(item), inverted: on }),
+              /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("span", { className: "flex min-w-0 flex-1 flex-col leading-tight", children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "truncate text-sm font-medium", children: item.name }),
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("span", { className: "truncate text-xs text-muted-foreground", children: subtitleOf(item, withOwner) })
+              ] })
+            ]
           }
-        ) }),
-        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuContent, { align: "end", children: [
-          user ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyUser, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(UserGlyph, { className: "size-4" }),
-            "Copy ",
-            user.label.toLowerCase()
-          ] }) : null,
-          secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyPassword, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(KeyGlyph, { className: "size-4" }),
-            "Copy password"
-          ] }) : null,
-          code ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyCode, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ClockGlyph, { className: "size-4" }),
-            "Copy one-time code"
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "absolute right-1.5 top-1/2 flex -translate-y-1/2 items-center gap-0.5", "data-surface": on ? "primary" : void 0, children: [
+          user || secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: (0, import_design_system20.cn)("hidden items-center gap-0.5 rounded-md pl-2 [@media(hover:hover)]:group-hover:flex [@media(hover:hover)]:group-focus-within:flex", on ? "bg-primary" : "bg-accent"), "data-row-quick": "", children: [
+            user ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(UserGlyph, {}), "aria-label": `Copy ${user.label}`, disabled: busy, onClick: copyUser }) : null,
+            secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_controls23.Button, { variant: "quiet", icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(KeyGlyph, {}), "aria-label": "Copy password", disabled: busy, onClick: copyPassword }) : null
           ] }) : null,
-          user || secret || code ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuSeparator, {}) : null,
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: () => onSelect(item.id), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ChevronRightGlyph, { className: "size-4" }),
-            "Open"
-          ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyName, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_icons12.CopyIcon, { className: "size-4" }),
-            "Copy name"
+          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenu, { open: menuOpen, onOpenChange: setMenuOpen, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
+              import_controls23.Button,
+              {
+                variant: "quiet",
+                icon: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(MoreGlyph, {}),
+                "aria-label": `Actions for ${item.name}`,
+                disabled: busy,
+                className: (0, import_design_system20.cn)("[@media(hover:hover)]:invisible [@media(hover:hover)]:group-hover:visible [@media(hover:hover)]:group-focus-within:visible", menuOpen && "[@media(hover:hover)]:visible")
+              }
+            ) }),
+            /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuContent, { align: "end", children: [
+              user ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyUser, children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(UserGlyph, { className: "size-4" }),
+                "Copy ",
+                user.label.toLowerCase()
+              ] }) : null,
+              secret ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyPassword, children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(KeyGlyph, { className: "size-4" }),
+                "Copy password"
+              ] }) : null,
+              code ? /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyCode, children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ClockGlyph, { className: "size-4" }),
+                "Copy one-time code"
+              ] }) : null,
+              others.map((f) => /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: () => void run(f.label, () => port.reveal(item, f.key), f.handling !== "visible"), children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_icons12.CopyIcon, { className: "size-4" }),
+                "Copy ",
+                f.label.toLowerCase()
+              ] }, f.key)),
+              custom.map((c) => /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: () => void copy(c.value, c.label, { secret: false }), children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_icons12.CopyIcon, { className: "size-4" }),
+                "Copy ",
+                c.label.toLowerCase()
+              ] }, `custom:${c.key}`)),
+              user || secret || code || others.length > 0 || custom.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuSeparator, {}) : null,
+              /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: () => onSelect(item.id), children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(ChevronRightGlyph, { className: "size-4" }),
+                "Open"
+              ] }),
+              /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(import_design_system19.DropdownMenuItem, { onSelect: copyName, children: [
+                /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_icons12.CopyIcon, { className: "size-4" }),
+                "Copy name"
+              ] }),
+              hostEntries.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuSeparator, {}) : null,
+              hostEntries.map((h) => /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(import_design_system19.DropdownMenuItem, { onSelect: h.onSelect, children: h.label }, h.label))
+            ] })
           ] })
         ] })
-      ] })
-    ] })
-  ] });
+      ]
+    }
+  );
 }
 
 // src/lists/TrashView.tsx
@@ -8187,6 +8260,7 @@ var import_jsx_runtime40 = require("react/jsx-runtime");
 var FULL_AT = 1120;
 var SPLIT_AT = 640;
 var NO_HOST = {};
+var FOCUS_GAP_MS = 2e3;
 var ITEM_PANELS = {
   share: SharePanel,
   move: MovePanel,
@@ -8315,9 +8389,13 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
   const knobsRef = (0, import_react42.useRef)(host.knobs);
   knobsRef.current = host.knobs;
   const [signedOut, setSignedOut] = (0, import_react42.useState)(false);
-  const load = (0, import_react42.useCallback)(() => {
-    setError(null);
-    port.load().then((s) => {
+  const [refreshError, setRefreshError] = (0, import_react42.useState)(null);
+  const [refreshing, setRefreshing] = (0, import_react42.useState)(false);
+  const loadedAt = (0, import_react42.useRef)(0);
+  const inFlight = (0, import_react42.useRef)(false);
+  const apply = (0, import_react42.useCallback)(
+    (s) => {
+      loadedAt.current = Date.now();
       setSnap(s);
       setItems(s.items);
       setDeleted(s.deleted);
@@ -8325,15 +8403,71 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
         (rows) => setDeleted([...s.deleted, ...rows.filter((r) => !s.deleted.some((d) => d.id === r.id))]),
         () => void 0
       );
-    }).catch((e) => {
+    },
+    [port]
+  );
+  const refresh = (0, import_react42.useCallback)(() => {
+    if (inFlight.current) return;
+    inFlight.current = true;
+    setRefreshing(true);
+    port.load().then((s) => {
+      setRefreshError(null);
+      apply(s);
+    }).catch((e) => setRefreshError(plainLoadError(e instanceof Error && e.message ? e.message : "The vault could not be read."))).finally(() => {
+      inFlight.current = false;
+      setRefreshing(false);
+    });
+    port.lists.favorites?.list().then((ids) => setFavorites(new Set(ids)), () => void 0);
+    port.lists.recents?.list().then(setRecents, () => void 0);
+  }, [port, apply]);
+  const load = (0, import_react42.useCallback)(() => {
+    setError(null);
+    setRefreshError(null);
+    port.load().then(apply).catch((e) => {
       setSignedOut(e?.status === 401);
       setError(e instanceof Error ? e.message : "The vault could not be loaded.");
     });
     port.lists.favorites?.list().then((ids) => setFavorites(new Set(ids)), () => void 0);
     knobsRef.current?.().catch(() => void 0);
     port.lists.recents?.list().then(setRecents, () => void 0);
-  }, [port]);
+  }, [port, apply]);
   (0, import_react42.useEffect)(load, [load]);
+  const quietRef = (0, import_react42.useRef)({ loc, ready: false });
+  quietRef.current = { loc, ready: snap !== null && !error };
+  const [knobSeconds, setKnobSeconds] = (0, import_react42.useState)(null);
+  (0, import_react42.useEffect)(() => {
+    if (host.refreshSeconds !== void 0 || !knobsRef.current) return;
+    let live = true;
+    knobsRef.current().then(
+      (r) => {
+        const v = r["vault.list.refresh_seconds"];
+        if (live && typeof v === "number" && v > 0) setKnobSeconds(v);
+      },
+      () => void 0
+    );
+    return () => {
+      live = false;
+    };
+  }, [host.refreshSeconds]);
+  const everySeconds = host.refreshSeconds ?? knobSeconds;
+  (0, import_react42.useEffect)(() => {
+    const quietly = (minGapMs) => {
+      const { loc: here, ready } = quietRef.current;
+      if (!ready || document.visibilityState === "hidden" || dirty.current || here.mode !== "view") return;
+      if (Date.now() - loadedAt.current < minGapMs) return;
+      refresh();
+    };
+    const onBack = () => quietly(FOCUS_GAP_MS);
+    const onVisible = () => document.visibilityState === "visible" && onBack();
+    window.addEventListener("focus", onBack);
+    document.addEventListener("visibilitychange", onVisible);
+    const timer2 = everySeconds && everySeconds > 0 ? setInterval(() => quietly(0), everySeconds * 1e3) : null;
+    return () => {
+      window.removeEventListener("focus", onBack);
+      document.removeEventListener("visibilitychange", onVisible);
+      if (timer2) clearInterval(timer2);
+    };
+  }, [refresh, everySeconds]);
   const inventoryRef = (0, import_react42.useRef)(onInventory);
   inventoryRef.current = onInventory;
   (0, import_react42.useEffect)(() => {
@@ -8499,6 +8633,10 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
       onSort: (sort) => go({ sort }, "replace"),
       canSortViewed: port.lists.recents !== void 0,
       onNew: () => go({ itemId: null, mode: "new", kind: null, panel: null }),
+      onRefresh: refresh,
+      refreshing,
+      rowContextMenu: host.rowContextMenu ?? "package",
+      ...host.rowMenuItems ? { rowMenuItems: host.rowMenuItems } : {},
       ...matchingIds ? { matchingIds } : {},
       ...compactHeader ? { header: compactHeader } : {}
     }
@@ -8523,14 +8661,14 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
         host,
         organizations: orgs,
         defaultOwner: ownerDefault,
-        seed: { name: guess?.name ?? "", url: guess?.url ?? loc.url.trim() },
+        seed: { name: loc.name?.trim() || guess?.name || "", url: guess?.url ?? loc.url.trim() },
         onBack: () => go({ kind: null }),
         onMode: () => void 0,
         onSaved: (item, _wasNew, n, enrolled) => {
           replaceItem(item);
           dirty.current = false;
           if (enrolled) setFirstCode(item);
-          move({ ...loc, itemId: item.id, mode: "view", kind: null, url: "", panel: null }, "replace");
+          move({ ...loc, itemId: item.id, mode: "view", kind: null, url: "", name: "", panel: null }, "replace");
           setNotice(n);
           notify("Saved");
         },
@@ -8538,7 +8676,7 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
         onDirty: (d) => {
           dirty.current = d;
         },
-        onCancelNew: () => go({ mode: "view", kind: null, url: "", itemId: null }),
+        onCancelNew: () => go({ mode: "view", kind: null, url: "", name: "", itemId: null }),
         onPanel: () => void 0,
         onChanged: () => void 0
       },
@@ -8629,13 +8767,17 @@ function Workspace({ port, host = NO_HOST, layout = "auto", location, onLocation
   const grid = mode === "full" ? "grid-cols-[15rem_21rem_minmax(0,1fr)]" : mode === "split" ? "grid-cols-[19rem_minmax(0,1fr)]" : "grid-cols-1";
   const shown = panesShown(mode, specialView !== null, showingDetail);
   return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { ref: rootRef, className: "flex h-full min-h-0 w-full flex-col bg-background text-foreground", children: [
+    refreshError ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-4 py-2 text-sm", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("span", { className: "min-w-0 flex-1 truncate text-warning", title: refreshError, children: "Couldn\u2019t refresh. Showing what was loaded." }),
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("button", { type: "button", className: "shrink-0 text-primary hover:underline", onClick: refresh, children: "Try again" })
+    ] }) : null,
     snap.unavailable.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { role: "status", className: "flex items-center gap-3 border-b border-border bg-muted px-4 py-2 text-sm", children: [
       /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("span", { className: "min-w-0 flex-1 truncate text-warning", children: [
         "Couldn\u2019t load ",
         snap.unavailable.join(", "),
         ". Showing the rest."
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("button", { type: "button", className: "shrink-0 text-primary hover:underline", onClick: load, children: "Try again" })
+      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("button", { type: "button", className: "shrink-0 text-primary hover:underline", onClick: refresh, children: "Try again" })
     ] }) : null,
     /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: `grid min-h-0 w-full flex-1 ${grid} overflow-hidden`, children: [
       mode === "full" ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(