@ai-matrx/vault 0.1.54 → 0.1.55

package/CHANGELOG.md

@@ -1,9 +1,12 @@
 # Changelog
 
+## 0.1.55
+
+- Password Health can discover a prior scan when neither request nor execution handle is available, and binds recovered results and progress to the originating health port. Consumer action: custom `HealthPort` implementations must provide `discover(cursor, signal)`; `createApiVaultPort` wires it automatically. Discovery returns authorized request/execution references only.
+
 ## 0.1.54
 
-UNVERIFIED: this release has no Unreleased entry and the package-input comparison could not be made (the caller supplied no source comparison). Whether package inputs changed is unknown; consumer action is unknown.
-Check the package's gitHead on npm against this version's gitHead: `git diff <previous gitHead> <this gitHead> -- apps/shared/vault`.
+- Saved health recovery shows Checking status while its read is pending. A missing execution or failed initial recovery read settles as Unavailable and keeps Retry available. Consumer action: none; the existing request/execution handle round trip is unchanged.
 
 ## 0.1.53
 
@@ -359,8 +362,6 @@ Changed shipped source files (8):
 ## 0.1.7
 ### Unreleased
 
-- Saved health recovery shows Checking status while its read is pending. A missing execution or failed initial recovery read settles as Unavailable and keeps Retry available. Consumer action: none; the existing request/execution handle round trip is unchanged.
-
 - Host-held lock: `host.lock` (`VaultLock`: `locked`, `subscribe`, `unlock`, optional `lock` and
   `unlockLabel`). While locked the vault shows only "Vault locked" with Unlock, and every port call
   (areas included) is refused at call time (`guardPort`, `VaultLockedError`). "Lock" joins the

package/dist/index.cjs

@@ -682,7 +682,7 @@ function PasswordHealthView(props) {
   const latest = (0, import_react4.useRef)(props);
   latest.current = props;
   const [result, setResult] = (0, import_react4.useState)(null);
-  const [status, setStatus] = (0, import_react4.useState)(requestId || executionId ? "Checking status" : "No report");
+  const [status, setStatus] = (0, import_react4.useState)("Checking status");
   const [error, setError] = (0, import_react4.useState)(null);
   const [progress, setProgress] = (0, import_react4.useState)(null);
   const [busy, setBusy] = (0, import_react4.useState)(false);
@@ -692,9 +692,13 @@ function PasswordHealthView(props) {
   }, [port]);
   const [retry, setRetry] = (0, import_react4.useState)(0);
   const active = (0, import_react4.useRef)(null);
-  const starting = (0, import_react4.useRef)(false);
+  const starting = (0, import_react4.useRef)(null);
   const ownedAddress = (0, import_react4.useRef)(null);
   const writeReference = (request, execution) => {
+    if (starting.current?.controller === active.current) {
+      starting.current.request = request;
+      starting.current.execution = execution;
+    }
     ownedAddress.current = { request, execution, items: latest.current.items, retry };
     latest.current.onReference(request, execution);
   };
@@ -722,7 +726,7 @@ function PasswordHealthView(props) {
     const value = await port.read(id, controller.signal);
     if (owns(controller)) {
       setStatus(STATUS_LABEL[value.execution_status]);
-      setResult({ value, items: inventory });
+      setResult({ value, items: inventory, port });
     }
     return value;
   };
@@ -740,6 +744,27 @@ function PasswordHealthView(props) {
       }
       writeReference(request, id);
     }
+    if (!id && !request) {
+      let cursor;
+      const seen = /* @__PURE__ */ new Set();
+      do {
+        const page = await port.discover(cursor, controller.signal);
+        if (!owns(controller)) return;
+        const reference = page.references[0];
+        if (reference) {
+          id = reference.execution_id;
+          writeReference(reference.request_id, reference.execution_id);
+          break;
+        }
+        cursor = page.continuation ?? void 0;
+        if (cursor && seen.has(cursor)) throw new Error("Report unavailable");
+        if (cursor) seen.add(cursor);
+      } while (cursor);
+      if (!id) {
+        setStatus("No report");
+        return;
+      }
+    }
     if (!id || !owns(controller)) return;
     const first = await read(id, controller);
     if (!owns(controller) || terminal(first.execution_status)) return;
@@ -749,7 +774,7 @@ function PasswordHealthView(props) {
         if (!owns(controller)) return;
         const detail = event.detail;
         if (event.kind === "note" && detail?.label === "password_health_progress" && detail.__kind === "password_health_progress" && typeof detail.checked === "number" && Number.isSafeInteger(detail.checked) && detail.checked >= 0 && typeof detail.skipped === "number" && Number.isSafeInteger(detail.skipped) && detail.skipped >= 0) {
-          setProgress({ checked: detail.checked, skipped: detail.skipped });
+          setProgress({ checked: detail.checked, skipped: detail.skipped, port });
         }
         const lifecycle = event.kind === "started" || event.kind === "resumed" ? "running" : event.kind === "created" ? "pending" : event.kind;
         const label = STATUS_LABEL[lifecycle];
@@ -764,14 +789,16 @@ function PasswordHealthView(props) {
     if (!inventoryReady) {
       ownedAddress.current = null;
       setResult(null);
-      if (!starting.current) active.current?.abort();
+      if (!starting.current || !owns(starting.current.controller)) active.current?.abort();
       return;
     }
-    if (!port || starting.current) return;
+    if (!port) return;
+    const start = starting.current;
+    if (start && owns(start.controller) && start.request === (requestId ?? "") && start.execution === (executionId ?? "")) return;
     const own = ownedAddress.current;
     if (own && own.request === requestId && own.execution === executionId && own.items === items && own.retry === retry && active.current && !active.current.signal.aborted) return;
     const controller = fresh();
-    setStatus(requestId || executionId ? "Checking status" : "No report");
+    setStatus("Checking status");
     void recover(requestId, executionId, controller).catch((e) => {
       if (owns(controller)) {
         setResult(null);
@@ -793,7 +820,7 @@ function PasswordHealthView(props) {
   const run = async (resume2) => {
     if (!port) return;
     const controller = fresh();
-    starting.current = true;
+    starting.current = { controller, request: "", execution: "" };
     const request = crypto.randomUUID();
     const options = { check_breaches: checkBreaches };
     let actualRequest = request;
@@ -822,7 +849,7 @@ function PasswordHealthView(props) {
           if (data && typeof data === "object" && "type" in data) {
             if (data.type === "vault_password_health_scan_reference") accept(data);
             if (data.type === "vault_password_health_progress") {
-              setProgress(data);
+              setProgress({ ...data, port });
               setStatus("Running");
             }
           }
@@ -866,20 +893,22 @@ function PasswordHealthView(props) {
       setError(problem(e));
       setStatus((value) => value === "Checking status" ? "Unavailable" : value);
     } finally {
-      starting.current = false;
+      if (starting.current?.controller === controller) starting.current = null;
       if (owns(controller)) {
         setBusy(false);
         if (startedItems !== latest.current.items) setRetry((v) => v + 1);
       }
     }
   };
-  const current = inventoryReady && result?.items === items && result.value.availability === "current" ? result.value.snapshot : null;
-  const available = result?.value.availability;
+  const ownedResult = port && result?.port === port ? result : null;
+  const shownProgress = port && progress?.port === port ? progress : null;
+  const current = inventoryReady && ownedResult?.items === items && ownedResult.value.availability === "current" ? ownedResult.value.snapshot : null;
+  const available = ownedResult?.value.availability;
   const outcomes = current?.check_breaches ? current.breach_outcomes ?? [] : [];
   const compromised = outcomes.filter((outcome) => outcome.status === "compromised").length;
   const notFound = outcomes.filter((outcome) => outcome.status === "not_found").length;
   const unknown = outcomes.filter((outcome) => outcome.status === "unknown").length;
-  const resume = result && ["failed", "cancelled"].includes(result.value.execution_status);
+  const resume = ownedResult && ["failed", "cancelled"].includes(ownedResult.value.execution_status);
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { className: "flex h-full min-h-0 flex-col gap-4 overflow-auto p-4", "aria-label": "Password health", children: [
     props.header,
     /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { className: "flex items-center justify-between gap-2", children: [
@@ -913,9 +942,9 @@ function PasswordHealthView(props) {
           /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_controls2.InfoHint, { text: "The breach lookup could not establish a result." })
         ] }), children: unknown })
       ] }) : null,
-      !current && progress ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(VaultRow, { label: "Checked", children: progress.checked }),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(VaultRow, { label: "Skipped", children: progress.skipped })
+      !current && shownProgress ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(VaultRow, { label: "Checked", children: shownProgress.checked }),
+        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(VaultRow, { label: "Skipped", children: shownProgress.skipped })
       ] }) : null,
       current ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
         /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(VaultRow, { label: "Checked", children: current.checked_subjects.length }),
@@ -9687,6 +9716,30 @@ var import_account = require("@ai-matrx/api/account");
 var import_architecture = require("@ai-matrx/api/architecture");
 function createHealthPort(api) {
   return {
+    discover: async (cursor, signal) => {
+      const stream = await (0, import_account.discoverPasswordHealthScans)(api, cursor ? { query: { cursor } } : void 0, { signal, totalTimeoutMs: null });
+      let page = null;
+      let ended = false;
+      try {
+        for await (const event of stream) {
+          if (signal.aborted || ended || event.event === "error") throw new Error("Report unavailable");
+          const data = event.data;
+          if (event.event === "completion" && data && typeof data === "object" && "status" in data && data.status !== "success") throw new Error("Report unavailable");
+          if (event.event === "end") {
+            if (!data || typeof data !== "object" || !("reason" in data) || data.reason !== "complete") throw new Error("Report unavailable");
+            ended = true;
+          }
+          if (event.event !== "data") continue;
+          if (!data || typeof data !== "object" || !("type" in data) || data.type !== "vault_password_health_discovery_page") continue;
+          if (page || !("__kind" in data) || data.__kind !== "password_health_discovery_page" || !("references" in data) || !Array.isArray(data.references) || data.references.some((ref) => !ref || typeof ref !== "object" || ref.__kind !== "password_health_discovery_reference" || typeof ref.request_id !== "string" || !ref.request_id || typeof ref.execution_id !== "string" || !ref.execution_id) || !("continuation" in data) || data.continuation !== null && (typeof data.continuation !== "string" || !data.continuation)) throw new Error("Report unavailable");
+          page = data;
+        }
+        if (signal.aborted || !ended || !page) throw new Error("Report unavailable");
+        return page;
+      } finally {
+        stream.cancel();
+      }
+    },
     start: (requestId, signal, options) => (0, import_account.startPasswordHealthScan)(api, { body: options.check_breaches ? { check_breaches: true } : {} }, { requestId, signal, totalTimeoutMs: null }),
     resume: (executionId, requestId, signal) => (0, import_account.resumePasswordHealthScan)(api, { path: { execution_id: executionId } }, { requestId, signal, totalTimeoutMs: null }),
     read: (executionId, signal) => (0, import_account.getPasswordHealthScan)(api, { path: { execution_id: executionId } }, { signal }),