@ai-matrx/vault 0.1.37 → 0.1.39

package/CHANGELOG.md

@@ -1,9 +1,16 @@
 # Changelog
 
+## 0.1.39
+
+- **Organization vaults never read as empty by mistake** (2026-10-23): a 404 from `GET /vault/organization-items` still falls back to one read per organization, but now says so once per port (new `ApiVaultPortOptions.onHostProblem(message, detail)`; without it, `console.warn`); an organization the server refused, names unavailable or leaves out is listed under `unavailable`, never shown as an empty vault; the camera note in Add authenticator is one line of 60 characters or fewer ("No camera. Paste the key or choose a QR image."). Proof: `src/organization-items-load.test.ts`, `src/first-code-closes.test.tsx`, `src/review-0-1-36.test.tsx`, `src/review-0-1-37.test.tsx`. Consumer action: needs `@ai-matrx/design-system` with the Select hint that never truncates (the release train publishes both); a host may pass `onHostProblem` to forward it to its error capture; nothing else.
+
+## 0.1.38
+
+- **Website vault walk fixes** (2026-10-23): a row with an authenticator copies its one-time code from the hover quick actions ("One-time code copied"); "Add authenticator" shows the setup-key box first and starts the camera by itself only when the device has one, with the preview and any camera failure UNDER the box as a small note (no window over it; `hasCameraDevice()` in `authenticator/qr.ts`, `QrScanInline` replaces `QrScanPanel`); the first-code window closes when the person moves to another view, item, edit or panel (`useShownUntilMove`); the Vault switcher, Move to and Copy to list organizations recently used and non-empty first, then by name (`orderOrganizations`), tell same-named ones apart by short id (`organizationHints`) and show a search from `vault.organization_search_at` (new knob, default 8, read through `host.knobs`; `host.organizationSearchAt` overrides); after "Copy made in …" the panel offers Open copy (`ItemPanelProps.onOpenItem`); the load reads every organization vault in ONE request (`GET /vault/organization-items`) instead of one per organization, own items still first. Proof: `src/review-0-1-37.test.tsx`. Consumer action: needs `@ai-matrx/api` with `account.organizationItems` and `@ai-matrx/design-system` with Select `hint`/`searchAt` (the release train publishes all three); nothing else.
+
 ## 0.1.37
 
-UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
-Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
+- **Website vault walk fixes, items 7-11** (2026-10-23): a row with an authenticator copies its one-time code from the hover quick actions; "Add authenticator" shows the setup-key box first and starts the camera only when the device has one (`hasCameraDevice()`); the first-code window closes when the person moves to another view, item, edit or panel (`useShownUntilMove`); the Vault switcher, Move to and Copy to list recently used and non-empty organizations first, then by name, with short ids for same-named ones and a search from `vault.organization_search_at` (`orderOrganizations`, `organizationHints`, `ORGANIZATION_SEARCH_AT_KNOB`); after "Copy made in ..." the panel offers Open copy (`ItemPanelProps.onOpenItem`). Proof: `src/review-0-1-37.test.tsx`. Consumer action: none.
 
 ## 0.1.36
 

package/dist/index.cjs

@@ -1928,6 +1928,11 @@ function useCanScan() {
   }, []);
   return ok;
 }
+var CAMERA_NOTES = {
+  blocked: "Camera blocked. Paste the key or choose a QR image.",
+  missing: "No camera. Paste the key or choose a QR image.",
+  failed: "Camera did not start. Paste the key or choose a QR image."
+};
 function QrScanInline({ onResult, onClose }) {
   const video = (0, import_react10.useRef)(null);
   const [error, setError] = (0, import_react10.useState)(null);
@@ -1973,7 +1978,7 @@ function QrScanInline({ onResult, onClose }) {
     }).catch((e) => {
       if (!live) return;
       const name = e?.name;
-      setError(name === "NotAllowedError" ? "Camera access was not allowed." : name === "NotFoundError" ? "No camera found." : "The camera could not start.");
+      setError(name === "NotAllowedError" ? CAMERA_NOTES.blocked : name === "NotFoundError" ? CAMERA_NOTES.missing : CAMERA_NOTES.failed);
     });
     return () => {
       live = false;
@@ -1983,10 +1988,7 @@ function QrScanInline({ onResult, onClose }) {
   if (error) {
     return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("p", { className: "flex items-center gap-2 px-1 pt-1 text-xs text-muted-foreground", role: "status", "data-camera-note": "", children: [
       /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CameraGlyph, { className: "size-3.5 shrink-0", "aria-hidden": true }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "min-w-0 flex-1 truncate", children: [
-        error,
-        " Paste the setup key or choose a QR image."
-      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "min-w-0 flex-1 truncate", children: error }),
       /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_controls6.Button, { variant: "quiet", onClick: onClose, children: "Dismiss" })
     ] });
   }
@@ -10025,6 +10027,13 @@ async function retrying(run, tries = 3) {
 }
 function createApiVaultPort(hostApi, options = {}) {
   const api = withServerReasons(hostApi);
+  let problemTold = false;
+  const hostProblem = (message2, detail) => {
+    if (problemTold) return;
+    problemTold = true;
+    if (options.onHostProblem) options.onHostProblem(message2, detail);
+    else console.warn(`[vault] ${message2}`, detail);
+  };
   let defs = /* @__PURE__ */ new Map();
   let auth = /* @__PURE__ */ new Map();
   let orgs = [];
@@ -10072,6 +10081,8 @@ function createApiVaultPort(hostApi, options = {}) {
       const sharedP = retrying(() => account9.sharedWithMe(api));
       const quiet = (p) => void p.catch(() => void 0);
       [catalogP, authP, userP, sharedP].forEach(quiet);
+      const orgItemsP = retrying(() => account9.organizationItems(api));
+      quiet(orgItemsP);
       const raw = {
         orgLists: [],
         orgsKnown: options.organizations !== void 0,
@@ -10119,6 +10130,29 @@ function createApiVaultPort(hostApi, options = {}) {
         raw.orgLists = orgs.map(() => void 0);
         raw.orgsKnown = true;
         progress();
+        const one = await orgItemsP.then(
+          (r) => r,
+          (e) => {
+            if (e?.status === 404) {
+              hostProblem("GET /vault/organization-items answered 404; reading each organization vault separately", e);
+              return null;
+            }
+            return "failed";
+          }
+        );
+        if (one) {
+          const byOrg = one === "failed" ? /* @__PURE__ */ new Map() : new Map(one.views.map((v) => [v.organization_id, v.items]));
+          const failed = one === "failed" ? new Set(orgs.map((o) => o.id)) : new Set(one.unavailable);
+          const settled = orgs.map((o, i) => {
+            const items = byOrg.get(o.id);
+            if (failed.has(o.id) || items === void 0) return Promise.reject(new Error(`${o.name} is unavailable`));
+            raw.orgLists[i] = { items, count: items.length };
+            return Promise.resolve(raw.orgLists[i]);
+          });
+          settled.forEach(quiet);
+          progress();
+          return settled;
+        }
         return orgs.map((o, i) => {
           const p = retrying(() => account9.listItems(api, { query: { principal_type: "organization", organization_id: o.id } }, { organizationId: o.id }));
           const arrived = p.then((l) => {