@ai-matrx/vault 0.1.38 → 0.1.40

package/CHANGELOG.md

@@ -1,28 +1,25 @@
 # Changelog
 
+## 0.1.40
+
+UNVERIFIED: this release has no Unreleased entry and the source comparison could not be made (the caller supplied no source comparison). Whether source changed is unknown; consumer action is unknown.
+Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault/src`.
+
+## 0.1.39
+
+- **Organization vaults never read as empty by mistake** (2026-10-23): a 404 from `GET /vault/organization-items` still falls back to one read per organization, but now says so once per port (new `ApiVaultPortOptions.onHostProblem(message, detail)`; without it, `console.warn`); an organization the server refused, names unavailable or leaves out is listed under `unavailable`, never shown as an empty vault; the camera note in Add authenticator is one line of 60 characters or fewer ("No camera. Paste the key or choose a QR image."). Proof: `src/organization-items-load.test.ts`, `src/first-code-closes.test.tsx`, `src/review-0-1-36.test.tsx`, `src/review-0-1-37.test.tsx`. Consumer action: needs `@ai-matrx/design-system` with the Select hint that never truncates (the release train publishes both); a host may pass `onHostProblem` to forward it to its error capture; nothing else.
+
+## 0.1.38
+
+- **Organization vaults never read as empty by mistake** (2026-10-23): a 404 from `GET /vault/organization-items` still falls back to one read per organization, but now says so once per port (new `ApiVaultPortOptions.onHostProblem(message, detail)`; without it, `console.warn`); an organization the server refused, names unavailable or leaves out is listed under `unavailable`, never shown as an empty vault; the camera note in Add authenticator is one line of 60 characters or fewer ("No camera. Paste the key or choose a QR image."). Proof: `src/organization-items-load.test.ts`, `src/first-code-closes.test.tsx`, `src/review-0-1-36.test.tsx`, `src/review-0-1-37.test.tsx`. Consumer action: needs `@ai-matrx/design-system` with the Select hint that never truncates (the release train publishes both); a host may pass `onHostProblem` to forward it to its error capture; nothing else.
+
 ## 0.1.38
 
 - **Website vault walk fixes** (2026-10-23): a row with an authenticator copies its one-time code from the hover quick actions ("One-time code copied"); "Add authenticator" shows the setup-key box first and starts the camera by itself only when the device has one, with the preview and any camera failure UNDER the box as a small note (no window over it; `hasCameraDevice()` in `authenticator/qr.ts`, `QrScanInline` replaces `QrScanPanel`); the first-code window closes when the person moves to another view, item, edit or panel (`useShownUntilMove`); the Vault switcher, Move to and Copy to list organizations recently used and non-empty first, then by name (`orderOrganizations`), tell same-named ones apart by short id (`organizationHints`) and show a search from `vault.organization_search_at` (new knob, default 8, read through `host.knobs`; `host.organizationSearchAt` overrides); after "Copy made in …" the panel offers Open copy (`ItemPanelProps.onOpenItem`); the load reads every organization vault in ONE request (`GET /vault/organization-items`) instead of one per organization, own items still first. Proof: `src/review-0-1-37.test.tsx`. Consumer action: needs `@ai-matrx/api` with `account.organizationItems` and `@ai-matrx/design-system` with Select `hint`/`searchAt` (the release train publishes all three); nothing else.
 
 ## 0.1.37
 
-SOURCE CHANGED WITH NO RELEASE NOTE. This release shipped source changes that nobody described in an Unreleased entry,
-so they may include breaking API changes. Consumer action is UNKNOWN: read the diff before upgrading.
-Diff: `git diff de2b958734 f00b99c3df -- apps/shared/vault/src`
-
-Changed shipped source files (12):
-- `apps/shared/vault/src/ItemList.tsx`
-- `apps/shared/vault/src/Sidebar.tsx`
-- `apps/shared/vault/src/VaultApp.tsx`
-- `apps/shared/vault/src/area-props.ts`
-- `apps/shared/vault/src/authenticator/Setup.tsx`
-- `apps/shared/vault/src/authenticator/qr.ts`
-- `apps/shared/vault/src/knobs.ts`
-- `apps/shared/vault/src/organizations.ts`
-- `apps/shared/vault/src/port.ts`
-- `apps/shared/vault/src/sharing/MovePanel.tsx`
-- `apps/shared/vault/src/sharing/logic.ts`
-- `apps/shared/vault/src/shown-until-move.ts`
+- **Website vault walk fixes, items 7-11** (2026-10-23): a row with an authenticator copies its one-time code from the hover quick actions; "Add authenticator" shows the setup-key box first and starts the camera only when the device has one (`hasCameraDevice()`); the first-code window closes when the person moves to another view, item, edit or panel (`useShownUntilMove`); the Vault switcher, Move to and Copy to list recently used and non-empty organizations first, then by name, with short ids for same-named ones and a search from `vault.organization_search_at` (`orderOrganizations`, `organizationHints`, `ORGANIZATION_SEARCH_AT_KNOB`); after "Copy made in ..." the panel offers Open copy (`ItemPanelProps.onOpenItem`). Proof: `src/review-0-1-37.test.tsx`. Consumer action: none.
 
 ## 0.1.36
 

package/dist/index.cjs

@@ -1928,6 +1928,11 @@ function useCanScan() {
   }, []);
   return ok;
 }
+var CAMERA_NOTES = {
+  blocked: "Camera blocked. Paste the key or choose a QR image.",
+  missing: "No camera. Paste the key or choose a QR image.",
+  failed: "Camera did not start. Paste the key or choose a QR image."
+};
 function QrScanInline({ onResult, onClose }) {
   const video = (0, import_react10.useRef)(null);
   const [error, setError] = (0, import_react10.useState)(null);
@@ -1973,7 +1978,7 @@ function QrScanInline({ onResult, onClose }) {
     }).catch((e) => {
       if (!live) return;
       const name = e?.name;
-      setError(name === "NotAllowedError" ? "Camera access was not allowed." : name === "NotFoundError" ? "No camera found." : "The camera could not start.");
+      setError(name === "NotAllowedError" ? CAMERA_NOTES.blocked : name === "NotFoundError" ? CAMERA_NOTES.missing : CAMERA_NOTES.failed);
     });
     return () => {
       live = false;
@@ -1983,10 +1988,7 @@ function QrScanInline({ onResult, onClose }) {
   if (error) {
     return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("p", { className: "flex items-center gap-2 px-1 pt-1 text-xs text-muted-foreground", role: "status", "data-camera-note": "", children: [
       /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CameraGlyph, { className: "size-3.5 shrink-0", "aria-hidden": true }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "min-w-0 flex-1 truncate", children: [
-        error,
-        " Paste the setup key or choose a QR image."
-      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "min-w-0 flex-1 truncate", children: error }),
       /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_controls6.Button, { variant: "quiet", onClick: onClose, children: "Dismiss" })
     ] });
   }
@@ -10025,6 +10027,13 @@ async function retrying(run, tries = 3) {
 }
 function createApiVaultPort(hostApi, options = {}) {
   const api = withServerReasons(hostApi);
+  let problemTold = false;
+  const hostProblem = (message2, detail) => {
+    if (problemTold) return;
+    problemTold = true;
+    if (options.onHostProblem) options.onHostProblem(message2, detail);
+    else console.warn(`[vault] ${message2}`, detail);
+  };
   let defs = /* @__PURE__ */ new Map();
   let auth = /* @__PURE__ */ new Map();
   let orgs = [];
@@ -10124,7 +10133,10 @@ function createApiVaultPort(hostApi, options = {}) {
         const one = await orgItemsP.then(
           (r) => r,
           (e) => {
-            if (e?.status === 404) return null;
+            if (e?.status === 404) {
+              hostProblem("GET /vault/organization-items answered 404; reading each organization vault separately", e);
+              return null;
+            }
             return "failed";
           }
         );
@@ -10132,8 +10144,8 @@ function createApiVaultPort(hostApi, options = {}) {
           const byOrg = one === "failed" ? /* @__PURE__ */ new Map() : new Map(one.views.map((v) => [v.organization_id, v.items]));
           const failed = one === "failed" ? new Set(orgs.map((o) => o.id)) : new Set(one.unavailable);
           const settled = orgs.map((o, i) => {
-            if (failed.has(o.id)) return Promise.reject(new Error(`${o.name} is unavailable`));
-            const items = byOrg.get(o.id) ?? [];
+            const items = byOrg.get(o.id);
+            if (failed.has(o.id) || items === void 0) return Promise.reject(new Error(`${o.name} is unavailable`));
             raw.orgLists[i] = { items, count: items.length };
             return Promise.resolve(raw.orgLists[i]);
           });