@deepseek-ai/dsh-credentials-local 0.1.3-alpha.2 → 0.1.5-alpha.2

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/credentials/credentials-local/README.md
-README.md: 79c3bb5a2c7cd7ca76efaa02d2919dbdff79994f
-README.zh.md: c1f1a57850f2220a0f0c28fe2c50fbc7374f6968
+README.md: 5c343834ae77dc1623dac37d9f6c5b687e509421
+README.zh.md: 08b87022d7824bc920ca23875caa669c6506637f

package/README.md

@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-`dsh-credentials-local` is the product's default on-machine credential store: a private file under your harness home where API keys and other secrets live, written from a configuration UI and reloaded automatically when you edit the file yourself. The file is a versioned document with a `refs` section for key values and a `records` section for durable per-plugin credentials, so an authorization grant or provider environment survives restarts beside the keys. Keys come from four places in one fixed order: the environment you launch in wins, then the stored file, then your project's and your home `.env` files. A key you save takes effect immediately, even when an older key sits in a `.env`. Only your OS user can read the file, and the product never hands the agent the file's path.
+`dsh-credentials-local` keeps API keys and other secrets in a private file under your harness home. You can save credentials through the configuration UI or edit the file directly; changes reload automatically and saved values survive restarts. Credential lookup follows a fixed precedence: the launch environment wins, followed by the stored file, the project's `.env`, and the harness-home `.env`; a newly saved value immediately overrides older `.env` values. Only your OS user can read the file, but agent tool processes run as that same user, so this store cannot isolate secrets from the agent.
 
 ## Table of Contents
 

package/README.zh.md

@@ -9,7 +9,7 @@ kind: "package-reference"
 
 ## 概述
 
-`dsh-credentials-local` 是产品默认的本机凭据存储：harness home 下的一个私有文件，存放 API 密钥与其他机密，可由配置界面写入，你自己编辑该文件时也会自动重载。该文件是带版本的文档，含一个存放密钥值的 `refs` 分节和一个存放持久化按插件记录的 `records` 分节，因此授权 grant 或提供方环境值能与密钥一起跨重启保留。密钥来自四个位置，顺序固定：你启动时的环境优先，其次是存储文件，再次是项目和主目录的 `.env` 文件。你保存的密钥会立即生效，即使某个 `.env` 里还留着更旧的密钥。只有你的 OS 用户能读取该文件，而且产品绝不把文件路径交给 agent（智能体）。
+`dsh-credentials-local` 把 API 密钥和其他机密保存在 harness home 下的私有文件中。你可以通过配置界面保存凭据，也可以直接编辑文件；变更会自动重载，保存的值也会跨重启保留。凭据查找采用固定优先级：启动环境优先，其次是存储文件、项目 `.env` 和 harness home 的 `.env`；新保存的值会立即覆盖 `.env` 中的旧值。只有你的 OS 用户能读取该文件，但 agent（智能体）的工具进程以同一用户身份运行，因此该存储无法向 agent 隔离机密。
 
 ## 目录
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-credentials-local",
   "description": "File-backed credentials provider ($DSH_HOME/.env under the live process environment) for the DeepSeek Harness",
-  "version": "0.1.3-alpha.2",
+  "version": "0.1.5-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,10 +27,10 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-atomic-write": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-credentials": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-launch-environment": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-credentials": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-alpha.2",
     "@deepseek-ai/cordis": "^4.0.2"
   },
   "dependencies": {
@@ -39,10 +39,10 @@
     "@deepseek-ai/schemastery": "^3.18.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-atomic-write": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-credentials": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.3-alpha.2"
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-credentials": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-launch-environment": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-alpha.2",
+    "@deepseek-ai/cordis": "^4.0.2"
   }
 }