@ai-matrx/vault 0.1.52 → 0.1.54

package/CHANGELOG.md

@@ -1,10 +1,21 @@
 # Changelog
 
-## 0.1.52
+## 0.1.54
 
 UNVERIFIED: this release has no Unreleased entry and the package-input comparison could not be made (the caller supplied no source comparison). Whether package inputs changed is unknown; consumer action is unknown.
 Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault`.
 
+## 0.1.53
+
+- Added the shared Password health view, durable scan recovery, explicit unchecked breach lookup, current-result accounting and existing editor remediation. Consumer action: adopt the compatible generated API with health stream types and runtime follower before this Vault package, and verify server support. Breach checks require explicit selection; unknown coverage remains visible. Installed and native acceptance remain separate.
+- Web workspace lifecycle now retires account/context caches and pending findings while same-user token refresh preserves in-place confirmation. Durable runtime notes restore progress counts. Consumer action: retire the complete host workspace on actor/context changes without keying it to ordinary bearer refresh.
+
+## 0.1.52
+
+- Added Password health with confirmed scans, address-backed recovery, count-only progress, current-result validation and links into the existing item editor. Breach lookup starts unchecked and requires explicit selection. The optional `VaultPort.health` supplies scan, resume, read, identify and follow operations; older custom ports show the view as unavailable.
+
+Consumer action: upgrade `@ai-matrx/api` to the current latest before adopting this package, including the account health endpoints, health stream types and runtime-operation follower, and verify that the server supports them. API-backed hosts receive the health port automatically. Custom hosts enabling it must supply the optional port and preserve `healthRequestId` and `healthExecutionId` through their location round trip. Keep the existing confirmation flow and explicit breach selection.
+
 ## 0.1.51
 
 - Recorded two-factor methods now show Not recorded for unsupported or duplicate metadata, in both draft and saved-item views. Existing `sms` and `push_or_other` values keep their meaning. Consumer action: none; no new stored value or choice is introduced.
@@ -348,6 +359,8 @@ Changed shipped source files (8):
 ## 0.1.7
 ### Unreleased
 
+- Saved health recovery shows Checking status while its read is pending. A missing execution or failed initial recovery read settles as Unavailable and keeps Retry available. Consumer action: none; the existing request/execution handle round trip is unchanged.
+
 - Host-held lock: `host.lock` (`VaultLock`: `locked`, `subscribe`, `unlock`, optional `lock` and
   `unlockLabel`). While locked the vault shows only "Vault locked" with Unlock, and every port call
   (areas included) is refused at call time (`guardPort`, `VaultLockedError`). "Lock" joins the

package/dist/index.cjs

@@ -682,7 +682,7 @@ function PasswordHealthView(props) {
   const latest = (0, import_react4.useRef)(props);
   latest.current = props;
   const [result, setResult] = (0, import_react4.useState)(null);
-  const [status, setStatus] = (0, import_react4.useState)("No report");
+  const [status, setStatus] = (0, import_react4.useState)(requestId || executionId ? "Checking status" : "No report");
   const [error, setError] = (0, import_react4.useState)(null);
   const [progress, setProgress] = (0, import_react4.useState)(null);
   const [busy, setBusy] = (0, import_react4.useState)(false);
@@ -734,6 +734,7 @@ function PasswordHealthView(props) {
       if (!owns(controller)) return;
       id = known.operations[0]?.execution_id;
       if (!id) {
+        setStatus("Unavailable");
         setError("Status unavailable");
         return;
       }
@@ -770,10 +771,12 @@ function PasswordHealthView(props) {
     const own = ownedAddress.current;
     if (own && own.request === requestId && own.execution === executionId && own.items === items && own.retry === retry && active.current && !active.current.signal.aborted) return;
     const controller = fresh();
+    setStatus(requestId || executionId ? "Checking status" : "No report");
     void recover(requestId, executionId, controller).catch((e) => {
       if (owns(controller)) {
         setResult(null);
         setError(problem(e));
+        setStatus((value) => value === "Checking status" ? "Unavailable" : value);
       }
     }).finally(() => {
       if (owns(controller)) setBusy(false);
@@ -861,6 +864,7 @@ function PasswordHealthView(props) {
       }
       setResult(null);
       setError(problem(e));
+      setStatus((value) => value === "Checking status" ? "Unavailable" : value);
     } finally {
       starting.current = false;
       if (owns(controller)) {
@@ -9683,7 +9687,7 @@ var import_account = require("@ai-matrx/api/account");
 var import_architecture = require("@ai-matrx/api/architecture");
 function createHealthPort(api) {
   return {
-    start: (requestId, signal, body) => (0, import_account.startPasswordHealthScan)(api, { body }, { requestId, signal, totalTimeoutMs: null }),
+    start: (requestId, signal, options) => (0, import_account.startPasswordHealthScan)(api, { body: options.check_breaches ? { check_breaches: true } : {} }, { requestId, signal, totalTimeoutMs: null }),
     resume: (executionId, requestId, signal) => (0, import_account.resumePasswordHealthScan)(api, { path: { execution_id: executionId } }, { requestId, signal, totalTimeoutMs: null }),
     read: (executionId, signal) => (0, import_account.getPasswordHealthScan)(api, { path: { execution_id: executionId } }, { signal }),
     identify: (requestId, signal) => (0, import_architecture.operationStatus)(api, { path: { request_id: requestId } }, { signal }),