OptionalstartOffline: booleanReadonlyenabledReadonlyreadyResolves once startup key loading has finished
Readonlyunlocked$True once the data key is available in memory
A saved offline login exists, but this session has not unlocked it yet
Remove offline login completely; anything sealed becomes unreadable
Saved offline login matches this user
Drop the in-memory and device keys but keep the password copy (queued work stays recoverable)
Decrypt a value from IndexedDB. Unreadable values (old key / other user) return undefined.
Called after a successful online password login. Wraps the data key with the password so this user can sign in offline later.
Save the cached user profile (sealed when enabled)
The server confirmed this user's session: restart the offline window
Try to unlock offline with a password
Wait until the data key is available (resolves immediately when the vault is disabled)
False when offline login is disabled or the environment lacks WebCrypto/IndexedDB/localStorage