dsh-vault 0.7.6 → 0.7.7

package/lib/client.js

@@ -17,50 +17,50 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"reportTitle": "t_j5va_reportTitle",
-			"footer": "t_j5va_footer",
+			"addButton": "t_j5va_addButton",
+			"modeReadonly": "t_j5va_modeReadonly",
 			"trashButton": "t_j5va_trashButton",
-			"kindFilter": "t_j5va_kindFilter",
-			"emptyHint": "t_j5va_emptyHint",
-			"reportLine": "t_j5va_reportLine",
-			"detailBox": "t_j5va_detailBox",
-			"status": "t_j5va_status",
+			"field": "t_j5va_field",
 			"secretField": "t_j5va_secretField",
-			"clearButton": "t_j5va_clearButton",
+			"highBadge": "t_j5va_highBadge",
+			"identity": "t_j5va_identity",
+			"detailBox": "t_j5va_detailBox",
+			"modeAsk": "t_j5va_modeAsk",
+			"reportTitle": "t_j5va_reportTitle",
+			"empty": "t_j5va_empty",
+			"dangerButton": "t_j5va_dangerButton",
+			"reportBox": "t_j5va_reportBox",
 			"policyField": "t_j5va_policyField",
-			"copied": "t_j5va_copied",
+			"rowActions": "t_j5va_rowActions",
+			"clearButton": "t_j5va_clearButton",
+			"title": "t_j5va_title",
+			"reportLine": "t_j5va_reportLine",
+			"saveButton": "t_j5va_saveButton",
+			"section": "t_j5va_section",
+			"list": "t_j5va_list",
 			"rowMain": "t_j5va_rowMain",
-			"detailItem": "t_j5va_detailItem",
-			"totp": "t_j5va_totp",
+			"deleteButton": "t_j5va_deleteButton",
+			"editor": "t_j5va_editor",
 			"revealButton": "t_j5va_revealButton",
+			"footer": "t_j5va_footer",
+			"toolbar": "t_j5va_toolbar",
+			"searchBox": "t_j5va_searchBox",
+			"copied": "t_j5va_copied",
+			"totp": "t_j5va_totp",
 			"error": "t_j5va_error",
-			"emptyBox": "t_j5va_emptyBox",
-			"modeAsk": "t_j5va_modeAsk",
 			"editorActions": "t_j5va_editorActions",
-			"list": "t_j5va_list",
-			"reportBox": "t_j5va_reportBox",
-			"deleteButton": "t_j5va_deleteButton",
-			"rowActions": "t_j5va_rowActions",
-			"toolbar": "t_j5va_toolbar",
-			"empty": "t_j5va_empty",
-			"row": "t_j5va_row",
-			"modeReadonly": "t_j5va_modeReadonly",
+			"kindFilter": "t_j5va_kindFilter",
+			"detailItem": "t_j5va_detailItem",
 			"kindIcon": "t_j5va_kindIcon",
 			"pinStar": "t_j5va_pinStar",
-			"dangerButton": "t_j5va_dangerButton",
-			"saveButton": "t_j5va_saveButton",
-			"field": "t_j5va_field",
-			"highBadge": "t_j5va_highBadge",
-			"addButton": "t_j5va_addButton",
 			"modeAuto": "t_j5va_modeAuto",
-			"identity": "t_j5va_identity",
-			"editor": "t_j5va_editor",
+			"row": "t_j5va_row",
 			"policyBar": "t_j5va_policyBar",
 			"intro": "t_j5va_intro",
+			"status": "t_j5va_status",
+			"emptyBox": "t_j5va_emptyBox",
 			"editorBody": "t_j5va_editorBody",
-			"section": "t_j5va_section",
-			"title": "t_j5va_title",
-			"searchBox": "t_j5va_searchBox"
+			"emptyHint": "t_j5va_emptyHint"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx

package/lib/index.js

@@ -390,6 +390,7 @@ export async function apply(ctx, config) {
             icon: { type: 'string', description: 'Optional emoji/icon shown in the UI (e.g. "🚀").' },
             color: { type: 'string', description: 'Optional accent color (e.g. "red", "#ff0000").' },
             favorite: { type: 'boolean', description: 'Pin/unpin the entry (favorites rank first in search).' },
+            resetRotation: { type: 'boolean', description: 'Reset the rotation timer now (sets updatedAt to now).' },
             otpSecret: { type: 'string', description: 'New TOTP secret.' },
             url: { type: 'string', description: 'New URL.' },
             notes: { type: 'string', description: 'New notes.' },
@@ -426,7 +427,10 @@ export async function apply(ctx, config) {
                     patch[key] = key === 'fields' ? cleanFieldsValue(value) ?? {} : value;
                 }
             }
-            const updated = await s.update(args.id, patch);
+            const updated = args.resetRotation === true
+                ? await s.update(args.id, patch).then(async (u) => { if (u)
+                    await s.markUsed(args.id); return u; })
+                : await s.update(args.id, patch);
             if (!updated)
                 return { found: false };
             emitAudit('write', 'vault_update', updated.id, updated.title);
@@ -1149,6 +1153,46 @@ export async function apply(ctx, config) {
             return { id: entry.id, title: entry.title };
         },
     }));
+    // ── vault_search_advanced: multi-criteria filter ────────────────────────────
+    ctx.tools.register(defineTool({
+        name: 'vault_search_advanced',
+        description: 'Search with multiple optional criteria: title substring, username/email substring, '
+            + 'kind, tag, and created-after (epoch millis). All provided criteria must match (AND). Returns secret-free summaries.',
+        parameters: {
+            title: { type: 'string', description: 'Title substring.' },
+            username: { type: 'string', description: 'Username/email substring.' },
+            kind: { type: 'string', enum: ['login', 'ssh', 'api-key', 'secret', 'oauth', 'custom'], description: 'Entry kind.' },
+            tag: { type: 'string', description: 'Exact tag.' },
+            createdAfter: { type: 'integer', description: 'Only entries created after this epoch millis.' },
+            limit: { type: 'number', description: 'Max results (default 20).' },
+        },
+        output: { schema: { type: 'object', additionalProperties: false, properties: { results: { type: 'array', required: true, items: { type: 'json' } } } }, render: (_a, v) => [{ type: 'text', text: JSON.stringify(v.results) }] },
+        async execute(args) {
+            const s = await guardStore();
+            return { results: s.advancedSearch({
+                    ...(args.title !== undefined ? { title: args.title } : {}),
+                    ...(args.username !== undefined ? { username: args.username } : {}),
+                    ...(args.kind !== undefined ? { kind: args.kind } : {}),
+                    ...(args.tag !== undefined ? { tag: args.tag } : {}),
+                    ...(args.createdAfter !== undefined ? { createdAfter: args.createdAfter } : {}),
+                    ...(args.limit !== undefined ? { limit: validateLimit(args.limit, 'vault_search_advanced') } : {}),
+                }) };
+        },
+    }));
+    // ── vault_count: lightweight entry count ────────────────────────────────────
+    ctx.tools.register(defineTool({
+        name: 'vault_count',
+        description: 'Return the number of active entries (optionally filtered by kind). Lightweight '
+            + 'alternative to vault_stats when you only need a count.',
+        parameters: { kind: { type: 'string', enum: ['login', 'ssh', 'api-key', 'secret', 'oauth', 'custom'], description: 'Count only this kind.' } },
+        output: { schema: { type: 'object', additionalProperties: false, properties: { count: { type: 'integer', required: true } } }, render: (_a, v) => [{ type: 'text', text: `${v.count} entries` }] },
+        async execute(args) {
+            const s = await guardStore();
+            const kind = args.kind;
+            const count = kind === undefined ? s.list().length : s.list().filter(e => (e.kind ?? 'login') === kind).length;
+            return { count };
+        },
+    }));
     // ── vault_rotation: expiry / rotation report ───────────────────────────────
     ctx.tools.register(defineTool({
         name: 'vault_rotation',

package/lib/store.js

@@ -360,6 +360,29 @@ export class VaultStore {
         }
         return report;
     }
+    /** Advanced multi-criteria search: title/username/kind/tag text + created-after. */
+    advancedSearch(criteria) {
+        const limit = criteria.limit ?? 20;
+        const t = criteria.title?.toLowerCase();
+        const u = criteria.username?.toLowerCase();
+        const results = [];
+        for (const entry of this.list()) {
+            if (results.length >= limit)
+                break;
+            if (t !== undefined && !entry.title.toLowerCase().includes(t))
+                continue;
+            if (u !== undefined && !(entry.username ?? entry.email ?? '').toLowerCase().includes(u))
+                continue;
+            if (criteria.kind !== undefined && (entry.kind ?? 'login') !== criteria.kind)
+                continue;
+            if (criteria.tag !== undefined && !(entry.tags ?? []).includes(criteria.tag))
+                continue;
+            if (criteria.createdAfter !== undefined && entry.createdAt < criteria.createdAfter)
+                continue;
+            results.push(toSummary(entry));
+        }
+        return results;
+    }
     /** Vault overview statistics (1Password-style): counts by kind, TOTP,
      * high-sensitivity, expired entries. No secrets. */
     stats() {
@@ -512,7 +535,10 @@ export class VaultStore {
             throw new Error('vault: export password must not be empty');
         const parsed = JSON.parse(blob);
         if (!parsed.kdf || !Array.isArray(parsed.entries)) {
-            throw new Error('vault: invalid export document');
+            throw new Error('vault: invalid export document — expected { kdf, entries[] } from vault_export');
+        }
+        if (parsed.entries.length === 0) {
+            return 0;
         }
         const exportKey = await deriveKey(exportPassword, parsed.kdf);
         let added = 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vault",
-  "version": "0.7.6",
+  "version": "0.7.7",
   "description": "Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.",
   "type": "module",
   "license": "MIT",