@glyphteck/veyl 0.64.0 → 0.65.1

package/dist/account.js

@@ -39793,10 +39793,24 @@ function openAccount(options = {}) {
       finishOperation();
     }
   }
-  async function changeVaultPassword({ currentPassword, newPassword } = {}) {
+  function vaultPasswordOperationContext() {
     if (state.lockState !== "unlocked" || !state.session) {
       throw vaultPasswordChangeError("locked", "unlocked vault required");
     }
+    const uid = profileUid();
+    const session = state.session;
+    const observedVault = state.vault;
+    if (!observedVault)
+      throw vaultPasswordChangeError("vault-required", "vault not ready");
+    return {
+      uid,
+      session,
+      observedVault,
+      isCurrent: () => !closed && !operationBarrier.blocksOperations && state.uid === uid && state.session === session && state.vault === observedVault && !session.closed && cloud.auth.user?.uid === uid
+    };
+  }
+  async function changeVaultPassword({ currentPassword, newPassword } = {}) {
+    const { uid, session, observedVault, isCurrent } = vaultPasswordOperationContext();
     const finishOperation = operationBarrier.begin("vault password", {
       busyError: () => vaultPasswordChangeError("busy", "vault password change already in progress")
     });
@@ -39816,12 +39830,6 @@ function openAccount(options = {}) {
       if (!isPasswordStrengthAcceptable(getPasswordStrength(next, [state.user?.username]))) {
         throw vaultPasswordChangeError("weak", "new password is too weak");
       }
-      const uid = profileUid();
-      const session = state.session;
-      const observedVault = state.vault;
-      if (!observedVault)
-        throw vaultPasswordChangeError("vault-required", "vault not ready");
-      const isCurrent = () => !closed && !operationBarrier.blocksOperations && state.uid === uid && state.session === session && !session.closed && cloud.auth.user?.uid === uid;
       const prepared = await vaultCrypto.rewrapVaultPassword(observedVault, current, next, {
         expectedVaultPK: session.vaultPK
       });
@@ -39839,6 +39847,33 @@ function openAccount(options = {}) {
       finishOperation();
     }
   }
+  async function verifyVaultPasswordForChange(currentPassword) {
+    const { observedVault, isCurrent } = vaultPasswordOperationContext();
+    const finishOperation = operationBarrier.begin("vault password verification", {
+      busyError: () => vaultPasswordChangeError("busy", "vault password operation already in progress")
+    });
+    try {
+      if (typeof vaultCrypto.verifyVaultPassword !== "function") {
+        throw vaultPasswordChangeError("unsupported", "vault password verification unavailable");
+      }
+      const current = normalizePassword(currentPassword);
+      if (!current)
+        throw vaultPasswordChangeError("current-required", "current password required");
+      let verified = false;
+      try {
+        verified = await vaultCrypto.verifyVaultPassword(observedVault, current);
+      } catch (cause) {
+        throw vaultPasswordChangeError("incorrect-current", "incorrect current password", cause);
+      }
+      if (!verified)
+        throw vaultPasswordChangeError("incorrect-current", "incorrect current password");
+      if (!isCurrent())
+        throw vaultPasswordChangeError("account-changed", "account changed during password verification");
+      return { verified: true };
+    } finally {
+      finishOperation();
+    }
+  }
   function setAgreementContract(value) {
     nextAgreement = agreementContract(value);
     return nextAgreement;
@@ -40000,6 +40035,7 @@ function openAccount(options = {}) {
     unlock,
     acceptAgreement,
     createVault,
+    verifyVaultPasswordForChange,
     changeVaultPassword,
     delete: deleteAccount,
     lock,

package/dist/cli.js

@@ -43779,10 +43779,24 @@ function openAccount(options = {}) {
       finishOperation();
     }
   }
-  async function changeVaultPassword({ currentPassword, newPassword } = {}) {
+  function vaultPasswordOperationContext() {
     if (state.lockState !== "unlocked" || !state.session) {
       throw vaultPasswordChangeError("locked", "unlocked vault required");
     }
+    const uid = profileUid();
+    const session = state.session;
+    const observedVault = state.vault;
+    if (!observedVault)
+      throw vaultPasswordChangeError("vault-required", "vault not ready");
+    return {
+      uid,
+      session,
+      observedVault,
+      isCurrent: () => !closed && !operationBarrier.blocksOperations && state.uid === uid && state.session === session && state.vault === observedVault && !session.closed && cloud.auth.user?.uid === uid
+    };
+  }
+  async function changeVaultPassword({ currentPassword, newPassword } = {}) {
+    const { uid, session, observedVault, isCurrent } = vaultPasswordOperationContext();
     const finishOperation = operationBarrier.begin("vault password", {
       busyError: () => vaultPasswordChangeError("busy", "vault password change already in progress")
     });
@@ -43802,12 +43816,6 @@ function openAccount(options = {}) {
       if (!isPasswordStrengthAcceptable(getPasswordStrength(next, [state.user?.username]))) {
         throw vaultPasswordChangeError("weak", "new password is too weak");
       }
-      const uid = profileUid();
-      const session = state.session;
-      const observedVault = state.vault;
-      if (!observedVault)
-        throw vaultPasswordChangeError("vault-required", "vault not ready");
-      const isCurrent = () => !closed && !operationBarrier.blocksOperations && state.uid === uid && state.session === session && !session.closed && cloud.auth.user?.uid === uid;
       const prepared = await vaultCrypto.rewrapVaultPassword(observedVault, current, next, {
         expectedVaultPK: session.vaultPK
       });
@@ -43825,6 +43833,33 @@ function openAccount(options = {}) {
       finishOperation();
     }
   }
+  async function verifyVaultPasswordForChange(currentPassword) {
+    const { observedVault, isCurrent } = vaultPasswordOperationContext();
+    const finishOperation = operationBarrier.begin("vault password verification", {
+      busyError: () => vaultPasswordChangeError("busy", "vault password operation already in progress")
+    });
+    try {
+      if (typeof vaultCrypto.verifyVaultPassword !== "function") {
+        throw vaultPasswordChangeError("unsupported", "vault password verification unavailable");
+      }
+      const current = normalizePassword(currentPassword);
+      if (!current)
+        throw vaultPasswordChangeError("current-required", "current password required");
+      let verified = false;
+      try {
+        verified = await vaultCrypto.verifyVaultPassword(observedVault, current);
+      } catch (cause) {
+        throw vaultPasswordChangeError("incorrect-current", "incorrect current password", cause);
+      }
+      if (!verified)
+        throw vaultPasswordChangeError("incorrect-current", "incorrect current password");
+      if (!isCurrent())
+        throw vaultPasswordChangeError("account-changed", "account changed during password verification");
+      return { verified: true };
+    } finally {
+      finishOperation();
+    }
+  }
   function setAgreementContract(value) {
     nextAgreement = agreementContract(value);
     return nextAgreement;
@@ -43986,6 +44021,7 @@ function openAccount(options = {}) {
     unlock,
     acceptAgreement,
     createVault,
+    verifyVaultPasswordForChange,
     changeVaultPassword,
     delete: deleteAccount,
     lock,
@@ -54026,7 +54062,7 @@ var package_default;
 var init_package2 = __esm(() => {
   package_default = {
     name: "veyl",
-    version: "0.64.0",
+    version: "0.65.1",
     packageManager: "bun@1.4.0",
     private: true,
     license: "UNLICENSED",

package/dist/index.js

@@ -43778,10 +43778,24 @@ function openAccount(options = {}) {
       finishOperation();
     }
   }
-  async function changeVaultPassword({ currentPassword, newPassword } = {}) {
+  function vaultPasswordOperationContext() {
     if (state.lockState !== "unlocked" || !state.session) {
       throw vaultPasswordChangeError("locked", "unlocked vault required");
     }
+    const uid = profileUid();
+    const session = state.session;
+    const observedVault = state.vault;
+    if (!observedVault)
+      throw vaultPasswordChangeError("vault-required", "vault not ready");
+    return {
+      uid,
+      session,
+      observedVault,
+      isCurrent: () => !closed && !operationBarrier.blocksOperations && state.uid === uid && state.session === session && state.vault === observedVault && !session.closed && cloud.auth.user?.uid === uid
+    };
+  }
+  async function changeVaultPassword({ currentPassword, newPassword } = {}) {
+    const { uid, session, observedVault, isCurrent } = vaultPasswordOperationContext();
     const finishOperation = operationBarrier.begin("vault password", {
       busyError: () => vaultPasswordChangeError("busy", "vault password change already in progress")
     });
@@ -43801,12 +43815,6 @@ function openAccount(options = {}) {
       if (!isPasswordStrengthAcceptable(getPasswordStrength(next, [state.user?.username]))) {
         throw vaultPasswordChangeError("weak", "new password is too weak");
       }
-      const uid = profileUid();
-      const session = state.session;
-      const observedVault = state.vault;
-      if (!observedVault)
-        throw vaultPasswordChangeError("vault-required", "vault not ready");
-      const isCurrent = () => !closed && !operationBarrier.blocksOperations && state.uid === uid && state.session === session && !session.closed && cloud.auth.user?.uid === uid;
       const prepared = await vaultCrypto.rewrapVaultPassword(observedVault, current, next, {
         expectedVaultPK: session.vaultPK
       });
@@ -43824,6 +43832,33 @@ function openAccount(options = {}) {
       finishOperation();
     }
   }
+  async function verifyVaultPasswordForChange(currentPassword) {
+    const { observedVault, isCurrent } = vaultPasswordOperationContext();
+    const finishOperation = operationBarrier.begin("vault password verification", {
+      busyError: () => vaultPasswordChangeError("busy", "vault password operation already in progress")
+    });
+    try {
+      if (typeof vaultCrypto.verifyVaultPassword !== "function") {
+        throw vaultPasswordChangeError("unsupported", "vault password verification unavailable");
+      }
+      const current = normalizePassword(currentPassword);
+      if (!current)
+        throw vaultPasswordChangeError("current-required", "current password required");
+      let verified = false;
+      try {
+        verified = await vaultCrypto.verifyVaultPassword(observedVault, current);
+      } catch (cause) {
+        throw vaultPasswordChangeError("incorrect-current", "incorrect current password", cause);
+      }
+      if (!verified)
+        throw vaultPasswordChangeError("incorrect-current", "incorrect current password");
+      if (!isCurrent())
+        throw vaultPasswordChangeError("account-changed", "account changed during password verification");
+      return { verified: true };
+    } finally {
+      finishOperation();
+    }
+  }
   function setAgreementContract(value) {
     nextAgreement = agreementContract(value);
     return nextAgreement;
@@ -43985,6 +44020,7 @@ function openAccount(options = {}) {
     unlock,
     acceptAgreement,
     createVault,
+    verifyVaultPasswordForChange,
     changeVaultPassword,
     delete: deleteAccount,
     lock,
@@ -54025,7 +54061,7 @@ var package_default;
 var init_package2 = __esm(() => {
   package_default = {
     name: "veyl",
-    version: "0.64.0",
+    version: "0.65.1",
     packageManager: "bun@1.4.0",
     private: true,
     license: "UNLICENSED",

package/docs/api.md

@@ -109,6 +109,8 @@ await account.profile.setAvatar(preparedWebpBytes);
 
 await account.createVault(password);
 const session = await account.unlock(password);
+await account.verifyVaultPasswordForChange(currentPassword);
+await account.changeVaultPassword({ currentPassword, newPassword });
 const unsubscribeChat = account.chat.subscribe(() => {
   console.log(account.chat.getSnapshot().chats);
 });
@@ -152,7 +154,7 @@ unsubscribe();
 await account.close();
 ```
 
-`openAccount()` owns authenticated user observation, username and avatar publication, vault observation and creation, vault unlock/lock, encrypted settings/network selection, presence, late wallet readiness, public Bitcoin data, support/report commands, chat and peer/profile composition, account switching, and secret-bearing session teardown. Focused-chat presence is separately owned by the chat session's encrypted ephemeral live transport. The account snapshot exposes `user`, `vault`, `vaultReady`, `vaultError`, `session`, `wallet`, `walletError`, `network`, and `lockState`; stable domain owners such as `bitcoin` and `support` live directly on the returned account owner.
+`openAccount()` owns authenticated user observation, username and avatar publication, vault observation and creation, vault unlock/lock, encrypted settings/network selection, presence, late wallet readiness, public Bitcoin data, support/report commands, chat and peer/profile composition, account switching, and secret-bearing session teardown. Focused-chat presence is separately owned by the chat session's encrypted ephemeral live transport. The account snapshot exposes `user`, `vault`, `vaultReady`, `vaultError`, `session`, `wallet`, `walletError`, `network`, and `lockState`; stable domain owners such as `bitcoin` and `support` live directly on the returned account owner. Graphical password-change flows call `verifyVaultPasswordForChange(currentPassword)` before revealing the new-password step, then call the atomic `changeVaultPassword({ currentPassword, newPassword })` command. Both are account-bound local decryptions; the first immediately clears its temporary seed, while the second preserves and verifies the existing Vault Signature identity before replacing the authoritative ciphertext.
 
 `account.profile` owns the server mutation after a platform has prepared avatar bytes or collected a username. Browser canvas work and native image manipulation remain platform-local; both then call the same `setAvatar`, `clearAvatar`, or `setUsername` command. Successful avatar commands update the shared user owner before returning.
 

package/package.json

@@ -42,5 +42,5 @@
         "start": "node src/cli.js",
         "lint": "eslint src --quiet"
     },
-    "version": "0.64.0"
+    "version": "0.65.1"
 }