OptionalconfigOptionalfetchdefaults to globalThis.fetch
Optionalheadersextra headers for every request (e.g. User-Agent in Node)
the hosted issuer, e.g. https://accounts.openvireo.com
OptionalofflineKeep what this device needs to unlock and open vaults without the network, all of it in
storage and none of it in clear: the discovery document, the wrapped keyset and KDF params, the
vault list as GET /vaults returned it (encrypted names, sealed keys), and per vault the sync
state (whose base copy is the server's encrypted .kdbx) plus local edits not yet uploaded, as a
.kdbx encrypted with the vault key. When a server can't be reached, connect, unlock,
listVaults and openVault fall back to it and offline turns true; reconnect goes back
online. Vaults no longer listed once online, and everything on sign-out, are dropped.
Optionalstoragesessions, trusted-device Secret Keys and sync state (default: memory)
skip discovery (tests)