@papervault/core 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papervault/core",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Crypto + Shamir Secret Sharing + printable HTML page generation for PaperVault disaster-recovery kits. Produces vaults that unlock at papervault.xyz.",
   "type": "module",
   "main": "./src/index.js",

package/src/kit.js

@@ -30,6 +30,27 @@ function pickThreeColors() {
     return picked;
 }
 
+/**
+ * Compute per-entry char contribution (matches countUserContent semantics:
+ * all non-empty string fields except `kind`). Returns entries sorted by
+ * char count descending — used to call out the biggest offenders when a
+ * vault exceeds MAX_STORAGE.
+ */
+function summarizeCharsPerEntry(secrets) {
+    if (!Array.isArray(secrets)) return [];
+    return secrets.map(s => {
+        let chars = 0;
+        if (s && typeof s === 'object') {
+            for (const [key, val] of Object.entries(s)) {
+                if (key === 'kind') continue;
+                if (typeof val === 'string' && val) chars += val.length;
+            }
+        }
+        const name = s?.name ?? s?.label ?? s?.service ?? s?.title ?? '<unnamed>';
+        return { name, chars };
+    }).sort((a, b) => b.chars - a.chars);
+}
+
 /**
  * @typedef {object} KitPage
  * @property {'vault'|'key'} kind
@@ -106,10 +127,24 @@ export async function createKit(opts) {
         throw new Error('createKit: no secrets to back up.');
     }
     if (userChars > LIMITS.MAX_STORAGE) {
+        // Surface entry SIZES (not names): error messages can flow into
+        // audit logs and MCP responses, where plaintext names would
+        // undercut our "names hashed by default" promise. Sizes alone
+        // let the user identify the heaviest entries when they inspect
+        // their own source.
+        const numEntries = Array.isArray(secrets) ? secrets.length : 0;
+        const freeTextChars = (freeText && typeof freeText === 'string') ? freeText.length : 0;
+        const sizes = summarizeCharsPerEntry(secrets).slice(0, 5).map(t => t.chars);
+        const breakdown = [
+            `${numEntries} entr${numEntries === 1 ? 'y' : 'ies'}`,
+            freeTextChars > 0 ? `freeText (${freeTextChars} chars)` : null,
+        ].filter(Boolean).join(' + ');
+        const sizesStr = sizes.length > 0 ? `Largest entries by chars: ${sizes.join(', ')}. ` : '';
         throw new Error(
-            `createKit: ${userChars} chars of secret content exceeds the ${LIMITS.MAX_STORAGE}-char limit. ` +
-            `This matches papervault.xyz's storage cap so the QR codes stay scannable. ` +
-            `Trim the secrets, split into multiple vaults, or remove low-priority entries.`
+            `createKit: ${userChars}/${LIMITS.MAX_STORAGE} chars used (${breakdown}). ` +
+            sizesStr +
+            `Matches papervault.xyz so QR codes stay scannable on paper. ` +
+            `Drop or shorten entries${freeTextChars > 0 ? ' or freeText' : ''}, or split across multiple vaults.`
         );
     }