dsh-vault 0.6.4 → 0.6.5

package/lib/client.js

@@ -7,7 +7,7 @@ window.__ModuleLoader__.load({
 		let react = require("react");
 		let react_jsx_runtime = require("react/jsx-runtime");
 		//#region \0dsh-css:/Users/zhipeng/Desktop/work/dsh test/dsh-vault/src/client/VaultSection.module.css.mjs
-		const css = ".t_j5va_section{flex-direction:column;gap:12px;padding:16px 0;display:flex}.t_j5va_intro{opacity:.75;margin:0;font-size:13px}.t_j5va_toolbar{align-items:center;gap:8px;display:flex}.t_j5va_searchBox{flex:1;display:flex}.t_j5va_searchBox input{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;flex:1;padding:6px 10px;font-size:13px}.t_j5va_addButton,.t_j5va_saveButton{background:var(--color-accent,#4f8cff);color:#fff;cursor:pointer;border:1px solid #0000;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_addButton:disabled,.t_j5va_saveButton:disabled,.t_j5va_rowActions button:disabled{opacity:.5;cursor:not-allowed}.t_j5va_list{flex-direction:column;gap:6px;margin:0;padding:0;list-style:none;display:flex}.t_j5va_row{border:1px solid var(--color-border,#333);border-radius:8px;justify-content:space-between;align-items:center;gap:12px;padding:8px 10px;display:flex}.t_j5va_rowMain{flex-direction:column;gap:2px;min-width:0;display:flex}.t_j5va_title{font-size:14px;font-weight:600}.t_j5va_identity{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.t_j5va_totp{font-family:var(--font-mono,monospace);color:var(--color-accent,#4f8cff);font-size:13px}.t_j5va_rowActions{flex-shrink:0;align-items:center;gap:6px;display:flex}.t_j5va_rowActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:4px 8px;font-size:12px}.t_j5va_deleteButton{color:#e5484d}.t_j5va_copied{color:#30a46c;font-size:12px}.t_j5va_empty,.t_j5va_status,.t_j5va_error{opacity:.8;font-size:13px}.t_j5va_modeReadonly,.t_j5va_modeAsk,.t_j5va_modeAuto{border-radius:999px;width:fit-content;margin:0;padding:4px 10px;font-size:12px;display:inline-block}.t_j5va_modeReadonly{color:#e5484d;border:1px solid #e5484d80}.t_j5va_modeAsk{color:#f5a524;border:1px solid #f5a52480}.t_j5va_modeAuto{color:#30a46c;border:1px solid #30a46c80}.t_j5va_policyBar{flex-direction:column;align-items:flex-start;gap:6px;display:flex}.t_j5va_policyField{align-items:center;gap:8px;font-size:13px;display:flex}.t_j5va_policyField select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:4px 8px;font-size:13px}.t_j5va_emptyBox{flex-direction:column;gap:4px;display:flex}.t_j5va_emptyHint{opacity:.65;margin:0;font-size:12px}.t_j5va_error{color:#e5484d}.t_j5va_editor{border:1px solid var(--color-border,#444);border-radius:8px;padding:12px}.t_j5va_editorBody{grid-template-columns:repeat(auto-fill,minmax(220px,1fr));gap:8px 12px;display:grid}.t_j5va_field{flex-direction:column;gap:4px;font-size:12px;display:flex}.t_j5va_field input,.t_j5va_field select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:5px 8px;font-size:13px}.t_j5va_editorActions{justify-content:flex-end;gap:8px;margin-top:12px;display:flex}.t_j5va_editorActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_reportBox{border:1px solid #f5a52466;border-radius:8px;flex-direction:column;gap:2px;padding:8px 10px;font-size:12px;display:flex}.t_j5va_reportTitle{margin:0;font-weight:600}.t_j5va_reportLine{opacity:.8;margin:0}.t_j5va_trashButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;align-self:flex-start;padding:4px 8px;font-size:12px}.t_j5va_secretField{gap:4px;display:flex}.t_j5va_secretField input{flex:1;min-width:0}.t_j5va_revealButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:0 8px;font-size:12px}.t_j5va_kindFilter{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:6px 8px;font-size:13px}.t_j5va_highBadge{color:#e5484d;vertical-align:middle;background:#e5484d26;border-radius:4px;margin-left:6px;padding:1px 6px;font-size:10px;font-weight:600}.t_j5va_pinStar{color:#f5a524;margin-right:4px}.t_j5va_clearButton{color:inherit;cursor:pointer;opacity:.6;background:0 0;border:none;padding:0 8px;font-size:16px}.t_j5va_field textarea{border:1px solid var(--color-border,#444);color:inherit;resize:vertical;background:0 0;border-radius:6px;padding:5px 8px;font-family:inherit;font-size:13px}";
+		const css = ".t_j5va_section{flex-direction:column;gap:12px;padding:16px 0;display:flex}.t_j5va_intro{opacity:.75;margin:0;font-size:13px}.t_j5va_toolbar{align-items:center;gap:8px;display:flex}.t_j5va_searchBox{flex:1;display:flex}.t_j5va_searchBox input{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;flex:1;padding:6px 10px;font-size:13px}.t_j5va_addButton,.t_j5va_saveButton{background:var(--color-accent,#4f8cff);color:#fff;cursor:pointer;border:1px solid #0000;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_addButton:disabled,.t_j5va_saveButton:disabled,.t_j5va_rowActions button:disabled{opacity:.5;cursor:not-allowed}.t_j5va_list{flex-direction:column;gap:6px;margin:0;padding:0;list-style:none;display:flex}.t_j5va_row{border:1px solid var(--color-border,#333);border-radius:8px;justify-content:space-between;align-items:center;gap:12px;padding:8px 10px;display:flex}.t_j5va_rowMain{flex-direction:column;gap:2px;min-width:0;display:flex}.t_j5va_title{font-size:14px;font-weight:600}.t_j5va_identity{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.t_j5va_totp{font-family:var(--font-mono,monospace);color:var(--color-accent,#4f8cff);font-size:13px}.t_j5va_rowActions{flex-shrink:0;align-items:center;gap:6px;display:flex}.t_j5va_rowActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:4px 8px;font-size:12px}.t_j5va_deleteButton{color:#e5484d}.t_j5va_copied{color:#30a46c;font-size:12px}.t_j5va_empty,.t_j5va_status,.t_j5va_error{opacity:.8;font-size:13px}.t_j5va_modeReadonly,.t_j5va_modeAsk,.t_j5va_modeAuto{border-radius:999px;width:fit-content;margin:0;padding:4px 10px;font-size:12px;display:inline-block}.t_j5va_modeReadonly{color:#e5484d;border:1px solid #e5484d80}.t_j5va_modeAsk{color:#f5a524;border:1px solid #f5a52480}.t_j5va_modeAuto{color:#30a46c;border:1px solid #30a46c80}.t_j5va_policyBar{flex-direction:column;align-items:flex-start;gap:6px;display:flex}.t_j5va_policyField{align-items:center;gap:8px;font-size:13px;display:flex}.t_j5va_policyField select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:4px 8px;font-size:13px}.t_j5va_emptyBox{flex-direction:column;gap:4px;display:flex}.t_j5va_emptyHint{opacity:.65;margin:0;font-size:12px}.t_j5va_error{color:#e5484d}.t_j5va_editor{border:1px solid var(--color-border,#444);border-radius:8px;padding:12px}.t_j5va_editorBody{grid-template-columns:repeat(auto-fill,minmax(220px,1fr));gap:8px 12px;display:grid}.t_j5va_field{flex-direction:column;gap:4px;font-size:12px;display:flex}.t_j5va_field input,.t_j5va_field select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:5px 8px;font-size:13px}.t_j5va_editorActions{justify-content:flex-end;gap:8px;margin-top:12px;display:flex}.t_j5va_editorActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_reportBox{border:1px solid #f5a52466;border-radius:8px;flex-direction:column;gap:2px;padding:8px 10px;font-size:12px;display:flex}.t_j5va_reportTitle{margin:0;font-weight:600}.t_j5va_reportLine{opacity:.8;margin:0}.t_j5va_trashButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;align-self:flex-start;padding:4px 8px;font-size:12px}.t_j5va_secretField{gap:4px;display:flex}.t_j5va_secretField input{flex:1;min-width:0}.t_j5va_revealButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:0 8px;font-size:12px}.t_j5va_kindFilter{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:6px 8px;font-size:13px}.t_j5va_highBadge{color:#e5484d;vertical-align:middle;background:#e5484d26;border-radius:4px;margin-left:6px;padding:1px 6px;font-size:10px;font-weight:600}.t_j5va_pinStar{color:#f5a524;margin-right:4px}.t_j5va_clearButton{color:inherit;cursor:pointer;opacity:.6;background:0 0;border:none;padding:0 8px;font-size:16px}.t_j5va_field textarea{border:1px solid var(--color-border,#444);color:inherit;resize:vertical;background:0 0;border-radius:6px;padding:5px 8px;font-family:inherit;font-size:13px}.t_j5va_row{transition:background .12s}.t_j5va_row:hover{background:var(--color-hover,#80808014)}";
 		const tagId = "dsh-vault/VaultSection.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -17,45 +17,45 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"rowMain": "t_j5va_rowMain",
-			"list": "t_j5va_list",
-			"kindFilter": "t_j5va_kindFilter",
-			"totp": "t_j5va_totp",
-			"clearButton": "t_j5va_clearButton",
-			"intro": "t_j5va_intro",
-			"toolbar": "t_j5va_toolbar",
-			"policyBar": "t_j5va_policyBar",
+			"secretField": "t_j5va_secretField",
 			"error": "t_j5va_error",
-			"copied": "t_j5va_copied",
 			"reportTitle": "t_j5va_reportTitle",
-			"highBadge": "t_j5va_highBadge",
+			"title": "t_j5va_title",
 			"empty": "t_j5va_empty",
-			"saveButton": "t_j5va_saveButton",
-			"emptyBox": "t_j5va_emptyBox",
-			"modeAsk": "t_j5va_modeAsk",
-			"status": "t_j5va_status",
-			"field": "t_j5va_field",
-			"secretField": "t_j5va_secretField",
-			"revealButton": "t_j5va_revealButton",
-			"editorBody": "t_j5va_editorBody",
 			"deleteButton": "t_j5va_deleteButton",
+			"editorBody": "t_j5va_editorBody",
+			"highBadge": "t_j5va_highBadge",
+			"reportBox": "t_j5va_reportBox",
+			"trashButton": "t_j5va_trashButton",
+			"section": "t_j5va_section",
+			"clearButton": "t_j5va_clearButton",
+			"policyField": "t_j5va_policyField",
+			"saveButton": "t_j5va_saveButton",
+			"row": "t_j5va_row",
+			"list": "t_j5va_list",
+			"policyBar": "t_j5va_policyBar",
+			"kindFilter": "t_j5va_kindFilter",
 			"modeReadonly": "t_j5va_modeReadonly",
-			"reportLine": "t_j5va_reportLine",
+			"totp": "t_j5va_totp",
+			"rowMain": "t_j5va_rowMain",
+			"emptyBox": "t_j5va_emptyBox",
+			"intro": "t_j5va_intro",
 			"modeAuto": "t_j5va_modeAuto",
 			"emptyHint": "t_j5va_emptyHint",
-			"addButton": "t_j5va_addButton",
-			"editor": "t_j5va_editor",
-			"rowActions": "t_j5va_rowActions",
 			"editorActions": "t_j5va_editorActions",
-			"trashButton": "t_j5va_trashButton",
-			"pinStar": "t_j5va_pinStar",
-			"title": "t_j5va_title",
-			"searchBox": "t_j5va_searchBox",
-			"row": "t_j5va_row",
-			"section": "t_j5va_section",
-			"policyField": "t_j5va_policyField",
+			"revealButton": "t_j5va_revealButton",
+			"reportLine": "t_j5va_reportLine",
 			"identity": "t_j5va_identity",
-			"reportBox": "t_j5va_reportBox"
+			"searchBox": "t_j5va_searchBox",
+			"rowActions": "t_j5va_rowActions",
+			"copied": "t_j5va_copied",
+			"editor": "t_j5va_editor",
+			"modeAsk": "t_j5va_modeAsk",
+			"status": "t_j5va_status",
+			"pinStar": "t_j5va_pinStar",
+			"field": "t_j5va_field",
+			"toolbar": "t_j5va_toolbar",
+			"addButton": "t_j5va_addButton"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx

package/lib/index.js

@@ -110,9 +110,10 @@ export async function apply(ctx, config) {
         if (policy.mode === 'ask' && WRITE_TOOLS.has(exec.name)) {
             return { kind: 'ask', reason: `dsh-vault: ${exec.name} requires your confirmation in "ask" (prompt-before-write) mode` };
         }
-        // High-sensitivity reads: in ask mode, reading a `high` entry's secrets
-        // (vault_get by id) also requires confirmation.
-        if (policy.mode === 'ask' && exec.name === 'vault_get') {
+        // High-sensitivity reads: reading a `high` entry's secrets (vault_get by
+        // id) requires confirmation in BOTH ask and auto modes — sensitive reads
+        // are always gated, unlike ordinary writes.
+        if (policy.mode !== 'readonly' && exec.name === 'vault_get') {
             const id = exec.arguments?.id;
             if (id !== undefined) {
                 try {
@@ -616,6 +617,31 @@ export async function apply(ctx, config) {
             return { value, caution: 'value returned for copy; do not repeat it in the conversation' };
         },
     }));
+    // ── vault_notes: append/replace an entry's notes ────────────────────────────
+    ctx.tools.register(defineTool({
+        name: 'vault_notes',
+        description: 'Append to or replace the free-form notes of an entry (a convenient shortcut for '
+            + 'vault_update). Returns the updated entry summary.',
+        parameters: {
+            id: { type: 'string', required: true, description: 'Entry id.' },
+            text: { type: 'string', required: true, description: 'Notes text. Pass an empty string to clear notes.' },
+            append: { type: 'boolean', description: 'Append to existing notes instead of replacing (default false).' },
+        },
+        output: { schema: { type: 'object', additionalProperties: false, properties: { updated: { type: 'boolean', required: true } } }, render: (_a, v) => [{ type: 'text', text: v.updated ? 'notes updated' : 'entry not found' }] },
+        async execute(args) {
+            assertWritable('vault_notes');
+            const s = await guardStore();
+            const current = s.get(args.id);
+            if (!current)
+                return { updated: false };
+            const text = args.text;
+            const notes = args.append && current.notes !== undefined && text.length > 0
+                ? current.notes + '\n' + text
+                : text;
+            const updated = await s.update(args.id, { notes });
+            return { updated: updated !== undefined };
+        },
+    }));
     // ── vault_expiry: set/update an entry's expiry ──────────────────────────────
     ctx.tools.register(defineTool({
         name: 'vault_expiry',
@@ -730,6 +756,23 @@ export async function apply(ctx, config) {
             return { report: lines.length > 0 ? header + '\n' + lines.join('\n') : header };
         },
     }));
+    // ── vault_tags: tag inventory with counts ────────────────────────────────────
+    ctx.tools.register(defineTool({
+        name: 'vault_tags',
+        description: 'List every tag used across entries with the number of entries per tag. No secrets.',
+        parameters: {},
+        output: { schema: { type: 'object', additionalProperties: false, properties: { tags: { type: 'array', required: true, items: { type: 'json' } } } }, render: (_a, v) => [{ type: 'text', text: JSON.stringify(v.tags) }] },
+        async execute() {
+            const s = await guardStore();
+            const counts = new Map();
+            for (const e of s.list()) {
+                for (const tag of e.tags ?? [])
+                    counts.set(tag, (counts.get(tag) ?? 0) + 1);
+            }
+            const tags = [...counts.entries()].map(([name, count]) => ({ name, count })).sort((a, b) => b.count - a.count || a.name.localeCompare(b.name));
+            return { tags };
+        },
+    }));
     // ── vault_rotation: expiry / rotation report ───────────────────────────────
     ctx.tools.register(defineTool({
         name: 'vault_rotation',
@@ -1013,6 +1056,14 @@ export async function apply(ctx, config) {
                     skipped++;
                     continue;
                 }
+                const VALID_KINDS = new Set(['login', 'ssh', 'api-key', 'secret', 'oauth', 'custom']);
+                if (record.kind !== undefined && (typeof record.kind !== 'string' || !VALID_KINDS.has(record.kind))) {
+                    skipped++;
+                    continue; // invalid kind: skip the row
+                }
+                if (record.sensitivity !== undefined && record.sensitivity !== 'normal' && record.sensitivity !== 'high') {
+                    delete record.sensitivity;
+                }
                 if (Object.keys(fields).length > 0)
                     record.fields = fields;
                 const title = record.title;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vault",
-  "version": "0.6.4",
+  "version": "0.6.5",
   "description": "Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.",
   "type": "module",
   "license": "MIT",