@ai-matrx/vault 0.1.9 → 0.1.11

package/dist/index.d.cts

@@ -122,6 +122,19 @@ declare function locationFromParams(params: URLSearchParams, itemId?: string | n
 declare function locationToParams(loc: VaultLocation): URLSearchParams;
 /** The one search every list shares: name, type, tags, URLs, then plaintext custom fields. */
 declare function matchesQuery(item: VaultItem, query: string): boolean;
+/**
+ * The authenticator's own storage on an item (the seed, digits, period, issuer…): shown only as the
+ * one "One-time password" row, never as loose fields — and always kept when the item is saved.
+ */
+/**
+ * A vault item a host keeps for itself, never shown in any list (the desktop app's Touch ID key:
+ * its one-time-password factor's secret, so each of the person's computers can read it). Marked by
+ * this tag; the person's own vault holds it like any other item, encrypted by the server.
+ */
+declare const HIDDEN_ITEM_TAG = "matrx:hidden";
+declare const isHiddenItem: (item: {
+    tags?: readonly string[] | null;
+}) => boolean;
 /** An item's website as people read it: `github.com` (no scheme, no `www.`), or "" when it has none. */
 declare function loginSiteOf(item: Pick<VaultItem, "loginUrls">): string;
 declare function sortItems(items: readonly VaultItem[], sort: VaultSort): VaultItem[];
@@ -228,8 +241,13 @@ interface IdentityAccount {
 }
 interface VaultIdentity {
     account(): Promise<IdentityAccount>;
-    /** Leaves the page for the provider and comes back to the same address (the URL carries everything). */
-    withProvider(provider: string): Promise<void>;
+    /**
+     * Confirms with that provider. On the web it leaves the page and comes back to the same address
+     * (resolves with nothing: the page is going away). A host that confirms IN PLACE (the desktop's
+     * Touch ID, a browser sign-in it waits for) resolves `"confirmed"`, and the gate closes and runs
+     * the refused call again — one confirmation, never a second click.
+     */
+    withProvider(provider: string): Promise<void | "confirmed">;
     withPassword(password: string): Promise<void>;
     sendEmailCode(): Promise<void>;
     withEmailCode(code: string): Promise<void>;
@@ -1247,4 +1265,4 @@ declare function GenerateButton({ onUse, label, limits, disabled }: {
     disabled?: boolean;
 }): react.JSX.Element | null;
 
-export { type ApiVaultPortOptions, CATEGORIES, type CategoryId, type CopyOptions, DEFAULT_LOCATION, type DefinitionField, type FieldHandling, type FieldKind, GenerateButton, type IdentityAccount, type IdentityMethod, type ItemDraft, LOCKED_MESSAGE, type NoticeKind, type Notify, type SaveResult, type SupabaseAuthLike, type TotpReading, type UriMatchMode, type UrlGuess, VaultApp, type VaultAppProps, type VaultAttachment, type VaultAuthenticator, type VaultClipboard, type VaultCustomField, type VaultDefinition, type VaultField, type VaultHostCapabilities, type VaultIdentity, type VaultItem, type VaultItemCapabilities, type VaultKnobs, type VaultLayout, type VaultLocation, type VaultLock, VaultLockedError, type VaultOrganizationRef, type VaultOwner, type VaultPort, type VaultSelection, type VaultSnapshot, type VaultSort, type VaultUserStateDoor, categoryOf, copyValue, createApiVaultPort, createSupabaseIdentity, createVaultKnobs, guardPort, inferFromUrl, locationFromParams, locationToParams, loginSiteOf, matchesQuery, needsRecentSignIn, parseDefinitions, sortItems };
+export { type ApiVaultPortOptions, CATEGORIES, type CategoryId, type CopyOptions, DEFAULT_LOCATION, type DefinitionField, type FieldHandling, type FieldKind, GenerateButton, HIDDEN_ITEM_TAG, type IdentityAccount, type IdentityMethod, type ItemDraft, LOCKED_MESSAGE, type NoticeKind, type Notify, type SaveResult, type SupabaseAuthLike, type TotpReading, type UriMatchMode, type UrlGuess, VaultApp, type VaultAppProps, type VaultAttachment, type VaultAuthenticator, type VaultClipboard, type VaultCustomField, type VaultDefinition, type VaultField, type VaultHostCapabilities, type VaultIdentity, type VaultItem, type VaultItemCapabilities, type VaultKnobs, type VaultLayout, type VaultLocation, type VaultLock, VaultLockedError, type VaultOrganizationRef, type VaultOwner, type VaultPort, type VaultSelection, type VaultSnapshot, type VaultSort, type VaultUserStateDoor, categoryOf, copyValue, createApiVaultPort, createSupabaseIdentity, createVaultKnobs, guardPort, inferFromUrl, isHiddenItem, locationFromParams, locationToParams, loginSiteOf, matchesQuery, needsRecentSignIn, parseDefinitions, sortItems };

package/dist/index.d.ts

@@ -122,6 +122,19 @@ declare function locationFromParams(params: URLSearchParams, itemId?: string | n
 declare function locationToParams(loc: VaultLocation): URLSearchParams;
 /** The one search every list shares: name, type, tags, URLs, then plaintext custom fields. */
 declare function matchesQuery(item: VaultItem, query: string): boolean;
+/**
+ * The authenticator's own storage on an item (the seed, digits, period, issuer…): shown only as the
+ * one "One-time password" row, never as loose fields — and always kept when the item is saved.
+ */
+/**
+ * A vault item a host keeps for itself, never shown in any list (the desktop app's Touch ID key:
+ * its one-time-password factor's secret, so each of the person's computers can read it). Marked by
+ * this tag; the person's own vault holds it like any other item, encrypted by the server.
+ */
+declare const HIDDEN_ITEM_TAG = "matrx:hidden";
+declare const isHiddenItem: (item: {
+    tags?: readonly string[] | null;
+}) => boolean;
 /** An item's website as people read it: `github.com` (no scheme, no `www.`), or "" when it has none. */
 declare function loginSiteOf(item: Pick<VaultItem, "loginUrls">): string;
 declare function sortItems(items: readonly VaultItem[], sort: VaultSort): VaultItem[];
@@ -228,8 +241,13 @@ interface IdentityAccount {
 }
 interface VaultIdentity {
     account(): Promise<IdentityAccount>;
-    /** Leaves the page for the provider and comes back to the same address (the URL carries everything). */
-    withProvider(provider: string): Promise<void>;
+    /**
+     * Confirms with that provider. On the web it leaves the page and comes back to the same address
+     * (resolves with nothing: the page is going away). A host that confirms IN PLACE (the desktop's
+     * Touch ID, a browser sign-in it waits for) resolves `"confirmed"`, and the gate closes and runs
+     * the refused call again — one confirmation, never a second click.
+     */
+    withProvider(provider: string): Promise<void | "confirmed">;
     withPassword(password: string): Promise<void>;
     sendEmailCode(): Promise<void>;
     withEmailCode(code: string): Promise<void>;
@@ -1247,4 +1265,4 @@ declare function GenerateButton({ onUse, label, limits, disabled }: {
     disabled?: boolean;
 }): react.JSX.Element | null;
 
-export { type ApiVaultPortOptions, CATEGORIES, type CategoryId, type CopyOptions, DEFAULT_LOCATION, type DefinitionField, type FieldHandling, type FieldKind, GenerateButton, type IdentityAccount, type IdentityMethod, type ItemDraft, LOCKED_MESSAGE, type NoticeKind, type Notify, type SaveResult, type SupabaseAuthLike, type TotpReading, type UriMatchMode, type UrlGuess, VaultApp, type VaultAppProps, type VaultAttachment, type VaultAuthenticator, type VaultClipboard, type VaultCustomField, type VaultDefinition, type VaultField, type VaultHostCapabilities, type VaultIdentity, type VaultItem, type VaultItemCapabilities, type VaultKnobs, type VaultLayout, type VaultLocation, type VaultLock, VaultLockedError, type VaultOrganizationRef, type VaultOwner, type VaultPort, type VaultSelection, type VaultSnapshot, type VaultSort, type VaultUserStateDoor, categoryOf, copyValue, createApiVaultPort, createSupabaseIdentity, createVaultKnobs, guardPort, inferFromUrl, locationFromParams, locationToParams, loginSiteOf, matchesQuery, needsRecentSignIn, parseDefinitions, sortItems };
+export { type ApiVaultPortOptions, CATEGORIES, type CategoryId, type CopyOptions, DEFAULT_LOCATION, type DefinitionField, type FieldHandling, type FieldKind, GenerateButton, HIDDEN_ITEM_TAG, type IdentityAccount, type IdentityMethod, type ItemDraft, LOCKED_MESSAGE, type NoticeKind, type Notify, type SaveResult, type SupabaseAuthLike, type TotpReading, type UriMatchMode, type UrlGuess, VaultApp, type VaultAppProps, type VaultAttachment, type VaultAuthenticator, type VaultClipboard, type VaultCustomField, type VaultDefinition, type VaultField, type VaultHostCapabilities, type VaultIdentity, type VaultItem, type VaultItemCapabilities, type VaultKnobs, type VaultLayout, type VaultLocation, type VaultLock, VaultLockedError, type VaultOrganizationRef, type VaultOwner, type VaultPort, type VaultSelection, type VaultSnapshot, type VaultSort, type VaultUserStateDoor, categoryOf, copyValue, createApiVaultPort, createSupabaseIdentity, createVaultKnobs, guardPort, inferFromUrl, isHiddenItem, locationFromParams, locationToParams, loginSiteOf, matchesQuery, needsRecentSignIn, parseDefinitions, sortItems };