dsh-vault 0.8.7 → 0.8.9

package/README-zh.md

@@ -49,15 +49,20 @@ dsh-vault 是一个面向 DeepSeek Harness 的安全加密插件：把你在使
 | `vault_restore` / `vault_purge` | 从回收站恢复 / 从磁盘永久移除 |
 | `vault_lock` / `vault_unlock` | 显式锁定保险库（清空内存密钥）/ 重新解锁 |
 | `vault_totp` | 为存储的 otpSecret（或直接传入的 Base32/otpauth URI）生成当前 6 位动态验证码 |
-| `vault_generate_password` | 生成强随机密码（长度/字符集/去歧义/分组可选；`group` 须为 ≥2 的整数） |
+| `vault_generate_password` | 生成强随机密码（长度/字符集/分组可选）**或易记口令短语**（`passphrase: true`，EFF 词表，`words`/`separator`/`wordDigits`） |
 | `vault_strength` | 零依赖密码强度评估（0–100 分，weak/fair/strong/very strong） |
 | `vault_rekey` | 原地升级 scrypt KDF 参数并重加密 |
+| `vault_backup` | 带时间戳的加密备份，支持保留策略：超过 `maxBackups`（默认 10）的旧备份自动清理 |
 | `vault_import_csv` | 从 CSV 批量导入凭据（自定义列变为 fields；`overwrite: true` 合并字段到已有条目，不再产生重复） |
 | `vault_apply_tags` | 按查询批量增/删/替换条目标签（支持 dry-run，不含密钥） |
 | `vault_totp_uri` | 为存储的或裸 TOTP 密钥生成 otpauth:// 配置 URI |
 | `vault_switch` / `vault_list` | 按名称切换当前保险库 / 列出可用保险库 |
-| `vault_rotation` | 报告已过期 / 待轮换 / 即将过期的凭据（不含密钥） |
+| `vault_rotation` | 报告已过期 / 待轮换 / 即将过期的凭据；`soonWindowDays`（1-90，默认 7）调整即将窗口（不含密钥） |
 | `vault_health` | 扫描弱密码与跨条目复用凭据（不含密钥） |
+| `vault_merge` | 合并一个条目到另一个；`keepSource: true` 保留源条目 |
+| `vault_quick_add` | 快速录入（标题 + 一个密钥），支持 tags/notes |
+| `vault_expiry` | 设置/清除过期（`expiresAt: 0` 移除） |
+| `vault_stats` | 概览计数，含 `trashCount`（不含密钥） |
 | `vault_export` / `vault_import` | 整库加密备份/迁移（独立导出密码） |
 | `vault_fill` | 按 host/URL/用户名/标题匹配条目并返回其凭据 |
 | `vault_env` | 把标记 env 的条目（tags 含 `env`）渲染为 `KEY=VALUE` 行 |

package/README.md

@@ -51,15 +51,20 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_restore` / `vault_purge` | Bring a trashed entry back / permanently remove it from disk |
 | `vault_lock` / `vault_unlock` | Explicitly lock the vault (wipe the in-memory key) / re-unlock it |
 | `vault_totp` | Generate the current 6-digit code for a stored otpSecret (or a bare Base32 / otpauth URI) |
-| `vault_generate_password` | Generate a strong random password (length/character classes/ambiguity exclusion/grouping; `group` must be an integer ≥ 2) |
+| `vault_generate_password` | Generate a strong random password (length/classes/grouping) **or a memorable passphrase** (`passphrase: true`, EFF-style word list, `words`/`separator`/`wordDigits`) |
 | `vault_strength` | Zero-dependency password strength estimate (score 0–100, weak/fair/strong/very strong) |
 | `vault_rekey` | Upgrade the vault to fresh scrypt KDF parameters in place |
+| `vault_backup` | Timestamped encrypted backup with retention: prunes old copies beyond `maxBackups` (default 10) |
 | `vault_import_csv` | Bulk-import credentials from a CSV file (custom columns become fields; `overwrite: true` merges fields into existing entries instead of duplicating) |
 | `vault_apply_tags` | Bulk add/remove/replace tags on every entry matching a query (dry-run supported, no secrets) |
 | `vault_totp_uri` | Build an otpauth:// provisioning URI for a stored or bare TOTP secret |
 | `vault_switch` / `vault_list` | Switch the active vault by name / list available vaults |
-| `vault_rotation` | Report expired / due-for-rotation / expiring-soon credentials (no secrets) |
+| `vault_rotation` | Report expired / due-for-rotation / expiring-soon credentials; `soonWindowDays` (1-90, default 7) tunes the soon horizon (no secrets) |
 | `vault_health` | Scan for weak passwords and credentials reused across entries (no secrets) |
+| `vault_merge` | Merge one entry into another; `keepSource: true` keeps the source after merging |
+| `vault_quick_add` | Fast capture (title + one secret) with optional tags/notes |
+| `vault_expiry` | Set/clear expiry (`expiresAt: 0` removes it) |
+| `vault_stats` | Overview counts incl. `trashCount` (no secrets) |
 | `vault_export` / `vault_import` | Portable encrypted backup/migration of the whole vault (separate export password) |
 | `vault_fill` | Find the entry matching a host/URL/username/title and return its credentials |
 | `vault_env` | Render env-flagged entries (tags contain `env`) as `KEY=VALUE` lines |

package/lib/client.js

@@ -7,7 +7,7 @@ window.__ModuleLoader__.load({
 		let react = require("react");
 		let react_jsx_runtime = require("react/jsx-runtime");
 		//#region \0dsh-css:/Users/zhipeng/Desktop/work/dsh test/dsh-vault/src/client/VaultSection.module.css.mjs
-		const css = ".t_j5va_section{flex-direction:column;gap:12px;padding:16px 0;display:flex}.t_j5va_intro{opacity:.75;margin:0;font-size:13px}.t_j5va_toolbar{align-items:center;gap:8px;display:flex}.t_j5va_searchBox{flex:1;display:flex}.t_j5va_searchBox input{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;flex:1;padding:6px 10px;font-size:13px}.t_j5va_addButton,.t_j5va_saveButton{background:var(--color-accent,#4f8cff);color:#fff;cursor:pointer;border:1px solid #0000;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_addButton:disabled,.t_j5va_saveButton:disabled,.t_j5va_rowActions button:disabled{opacity:.5;cursor:not-allowed}.t_j5va_list{flex-direction:column;gap:6px;margin:0;padding:0;list-style:none;display:flex}.t_j5va_row{border:1px solid var(--color-border,#333);border-radius:8px;justify-content:space-between;align-items:center;gap:12px;padding:8px 10px;display:flex}.t_j5va_rowMain{flex-direction:column;gap:2px;min-width:0;display:flex}.t_j5va_title{font-size:14px;font-weight:600}.t_j5va_identity{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.t_j5va_totp{font-family:var(--font-mono,monospace);color:var(--color-accent,#4f8cff);font-size:13px}.t_j5va_rowActions{flex-shrink:0;align-items:center;gap:6px;display:flex}.t_j5va_rowActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:4px 8px;font-size:12px}.t_j5va_deleteButton{color:#e5484d}.t_j5va_copied{color:#30a46c;font-size:12px}.t_j5va_empty,.t_j5va_status,.t_j5va_error{opacity:.8;font-size:13px}.t_j5va_modeReadonly,.t_j5va_modeAsk,.t_j5va_modeAuto{border-radius:999px;width:fit-content;margin:0;padding:4px 10px;font-size:12px;display:inline-block}.t_j5va_modeReadonly{color:#e5484d;border:1px solid #e5484d80}.t_j5va_modeAsk{color:#f5a524;border:1px solid #f5a52480}.t_j5va_modeAuto{color:#30a46c;border:1px solid #30a46c80}.t_j5va_policyBar{flex-direction:column;align-items:flex-start;gap:6px;display:flex}.t_j5va_policyField{align-items:center;gap:8px;font-size:13px;display:flex}.t_j5va_policyField select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:4px 8px;font-size:13px}.t_j5va_emptyBox{flex-direction:column;gap:4px;display:flex}.t_j5va_emptyHint{opacity:.65;margin:0;font-size:12px}.t_j5va_error{color:#e5484d}.t_j5va_editor{border:1px solid var(--color-border,#444);border-radius:8px;padding:12px}.t_j5va_editorBody{grid-template-columns:repeat(auto-fill,minmax(220px,1fr));gap:8px 12px;display:grid}.t_j5va_field{flex-direction:column;gap:4px;font-size:12px;display:flex}.t_j5va_field input,.t_j5va_field select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:5px 8px;font-size:13px}.t_j5va_editorActions{justify-content:flex-end;gap:8px;margin-top:12px;display:flex}.t_j5va_editorActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_reportBox{border:1px solid #f5a52466;border-radius:8px;flex-direction:column;gap:2px;padding:8px 10px;font-size:12px;display:flex}.t_j5va_reportTitle{margin:0;font-weight:600}.t_j5va_reportLine{opacity:.8;margin:0}.t_j5va_trashButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;align-self:flex-start;padding:4px 8px;font-size:12px}.t_j5va_secretField{gap:4px;display:flex}.t_j5va_secretField input{flex:1;min-width:0}.t_j5va_revealButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:0 8px;font-size:12px}.t_j5va_kindFilter{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:6px 8px;font-size:13px}.t_j5va_highBadge{color:#e5484d;vertical-align:middle;background:#e5484d26;border-radius:4px;margin-left:6px;padding:1px 6px;font-size:10px;font-weight:600}.t_j5va_pinStar{color:#f5a524;margin-right:4px}.t_j5va_clearButton{color:inherit;cursor:pointer;opacity:.6;background:0 0;border:none;padding:0 8px;font-size:16px}.t_j5va_field textarea{border:1px solid var(--color-border,#444);color:inherit;resize:vertical;background:0 0;border-radius:6px;padding:5px 8px;font-family:inherit;font-size:13px}.t_j5va_row{transition:background .12s}.t_j5va_row:hover{background:var(--color-hover,#80808014)}.t_j5va_healthBar{flex-wrap:wrap;gap:6px;margin:0 0 10px;display:flex}.t_j5va_badge{border:1px solid var(--dsh-color-border,#ddd);background:var(--dsh-color-surface-2,#f7f7f8);color:var(--dsh-color-text-2,#555);border-radius:999px;padding:4px 10px;font-size:12px;line-height:1}.t_j5va_badgeOk{color:#2e9e5b;border-color:#2e9e5b}.t_j5va_badgeWarn{color:#b57f1a;border-color:#c98a1b}.t_j5va_rowDue{border-left:3px solid #c98a1b}.t_j5va_rowExpired{border-left:3px solid #cf3d3d}.t_j5va_dueBadge{border-radius:999px;margin-left:6px;padding:3px 8px;font-size:11px;font-weight:600;line-height:1}.t_j5va_badgeDanger{color:#c03a3a;border-color:#cf3d3d}.t_j5va_footer{opacity:.6;margin:0;font-size:12px}.t_j5va_kindIcon{margin-right:4px;font-size:12px}.t_j5va_dangerButton{color:#e5484d;cursor:pointer;background:0 0;border:1px solid #e5484d80;border-radius:6px;align-self:flex-start;padding:4px 8px;font-size:12px}.t_j5va_rowMain{cursor:pointer}.t_j5va_detailBox{background:var(--color-hover,#8080800f);border-radius:6px;flex-wrap:wrap;grid-column:1/-1;gap:4px 12px;padding:6px 8px;font-size:12px;display:flex}.t_j5va_detailItem{opacity:.85}.t_j5va_sortButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:6px 10px;font-size:13px}";
+		const css = ".t_j5va_section{flex-direction:column;gap:12px;padding:16px 0;display:flex}.t_j5va_intro{opacity:.75;margin:0;font-size:13px}.t_j5va_toolbar{align-items:center;gap:8px;display:flex}.t_j5va_searchBox{flex:1;display:flex}.t_j5va_searchBox input{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;flex:1;padding:6px 10px;font-size:13px}.t_j5va_addButton,.t_j5va_saveButton{background:var(--color-accent,#4f8cff);color:#fff;cursor:pointer;border:1px solid #0000;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_addButton:disabled,.t_j5va_saveButton:disabled,.t_j5va_rowActions button:disabled{opacity:.5;cursor:not-allowed}.t_j5va_list{flex-direction:column;gap:6px;margin:0;padding:0;list-style:none;display:flex}.t_j5va_row{border:1px solid var(--color-border,#333);border-radius:8px;justify-content:space-between;align-items:center;gap:12px;padding:8px 10px;display:flex}.t_j5va_rowMain{flex-direction:column;gap:2px;min-width:0;display:flex}.t_j5va_title{font-size:14px;font-weight:600}.t_j5va_identity{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.t_j5va_totp{font-family:var(--font-mono,monospace);color:var(--color-accent,#4f8cff);font-size:13px}.t_j5va_rowActions{flex-shrink:0;align-items:center;gap:6px;display:flex}.t_j5va_rowActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:4px 8px;font-size:12px}.t_j5va_deleteButton{color:#e5484d}.t_j5va_copied{color:#30a46c;font-size:12px}.t_j5va_empty,.t_j5va_status,.t_j5va_error{opacity:.8;font-size:13px}.t_j5va_modeReadonly,.t_j5va_modeAsk,.t_j5va_modeAuto{border-radius:999px;width:fit-content;margin:0;padding:4px 10px;font-size:12px;display:inline-block}.t_j5va_modeReadonly{color:#e5484d;border:1px solid #e5484d80}.t_j5va_modeAsk{color:#f5a524;border:1px solid #f5a52480}.t_j5va_modeAuto{color:#30a46c;border:1px solid #30a46c80}.t_j5va_policyBar{flex-direction:column;align-items:flex-start;gap:6px;display:flex}.t_j5va_policyField{align-items:center;gap:8px;font-size:13px;display:flex}.t_j5va_policyField select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:4px 8px;font-size:13px}.t_j5va_emptyBox{flex-direction:column;gap:4px;display:flex}.t_j5va_emptyHint{opacity:.65;margin:0;font-size:12px}.t_j5va_error{color:#e5484d}.t_j5va_editor{border:1px solid var(--color-border,#444);border-radius:8px;padding:12px}.t_j5va_editorBody{grid-template-columns:repeat(auto-fill,minmax(220px,1fr));gap:8px 12px;display:grid}.t_j5va_checkField{align-items:center;gap:8px;font-size:13px;display:inline-flex}.t_j5va_field{flex-direction:column;gap:4px;font-size:12px;display:flex}.t_j5va_field input,.t_j5va_field select{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:5px 8px;font-size:13px}.t_j5va_editorActions{justify-content:flex-end;gap:8px;margin-top:12px;display:flex}.t_j5va_editorActions button{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:6px 12px;font-size:13px}.t_j5va_reportBox{border:1px solid #f5a52466;border-radius:8px;flex-direction:column;gap:2px;padding:8px 10px;font-size:12px;display:flex}.t_j5va_reportTitle{margin:0;font-weight:600}.t_j5va_reportLine{opacity:.8;margin:0}.t_j5va_reportSub{color:var(--dsh-color-text-2,#666);margin:2px 0 0 10px;font-size:12px}.t_j5va_trashButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;align-self:flex-start;padding:4px 8px;font-size:12px}.t_j5va_secretField{gap:4px;display:flex}.t_j5va_secretField input{flex:1;min-width:0}.t_j5va_revealButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:0 8px;font-size:12px}.t_j5va_kindFilter{border:1px solid var(--color-border,#444);color:inherit;background:0 0;border-radius:6px;padding:6px 8px;font-size:13px}.t_j5va_highBadge{color:#e5484d;vertical-align:middle;background:#e5484d26;border-radius:4px;margin-left:6px;padding:1px 6px;font-size:10px;font-weight:600}.t_j5va_pinStar{color:#f5a524;margin-right:4px}.t_j5va_clearButton{color:inherit;cursor:pointer;opacity:.6;background:0 0;border:none;padding:0 8px;font-size:16px}.t_j5va_field textarea{border:1px solid var(--color-border,#444);color:inherit;resize:vertical;background:0 0;border-radius:6px;padding:5px 8px;font-family:inherit;font-size:13px}.t_j5va_row{transition:background .12s}.t_j5va_row:hover{background:var(--color-hover,#80808014)}.t_j5va_healthBar{flex-wrap:wrap;gap:6px;margin:0 0 10px;display:flex}.t_j5va_badge{border:1px solid var(--dsh-color-border,#ddd);background:var(--dsh-color-surface-2,#f7f7f8);color:var(--dsh-color-text-2,#555);border-radius:999px;padding:4px 10px;font-size:12px;line-height:1}.t_j5va_backupButton{border:1px solid var(--dsh-color-border,#ccc);background:var(--dsh-color-surface-2,#f7f7f8);cursor:pointer;border-radius:999px;padding:4px 10px;font-size:12px;line-height:1}.t_j5va_badgeOk{color:#2e9e5b;border-color:#2e9e5b}.t_j5va_badgeWarn{color:#b57f1a;border-color:#c98a1b}.t_j5va_rowDue{border-left:3px solid #c98a1b}.t_j5va_rowExpired{border-left:3px solid #cf3d3d}.t_j5va_dueBadge{border-radius:999px;margin-left:6px;padding:3px 8px;font-size:11px;font-weight:600;line-height:1}.t_j5va_badgeDanger{color:#c03a3a;border-color:#cf3d3d}.t_j5va_footer{opacity:.6;margin:0;font-size:12px}.t_j5va_kindIcon{margin-right:4px;font-size:12px}.t_j5va_dangerButton{color:#e5484d;cursor:pointer;background:0 0;border:1px solid #e5484d80;border-radius:6px;align-self:flex-start;padding:4px 8px;font-size:12px}.t_j5va_rowMain{cursor:pointer}.t_j5va_detailBox{background:var(--color-hover,#8080800f);border-radius:6px;flex-wrap:wrap;grid-column:1/-1;gap:4px 12px;padding:6px 8px;font-size:12px;display:flex}.t_j5va_detailItem{opacity:.85}.t_j5va_sortButton{border:1px solid var(--color-border,#444);color:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:6px 10px;font-size:13px}";
 		const tagId = "dsh-vault/VaultSection.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -17,59 +17,62 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"highBadge": "t_j5va_highBadge",
 			"badge": "t_j5va_badge",
-			"badgeWarn": "t_j5va_badgeWarn",
-			"sortButton": "t_j5va_sortButton",
-			"status": "t_j5va_status",
+			"rowDue": "t_j5va_rowDue",
+			"healthBar": "t_j5va_healthBar",
+			"rowActions": "t_j5va_rowActions",
+			"row": "t_j5va_row",
+			"totp": "t_j5va_totp",
+			"rowMain": "t_j5va_rowMain",
+			"error": "t_j5va_error",
+			"policyBar": "t_j5va_policyBar",
+			"saveButton": "t_j5va_saveButton",
+			"checkField": "t_j5va_checkField",
+			"reportLine": "t_j5va_reportLine",
 			"editor": "t_j5va_editor",
 			"editorBody": "t_j5va_editorBody",
-			"section": "t_j5va_section",
-			"badgeOk": "t_j5va_badgeOk",
-			"modeAuto": "t_j5va_modeAuto",
-			"row": "t_j5va_row",
-			"searchBox": "t_j5va_searchBox",
+			"kindFilter": "t_j5va_kindFilter",
+			"detailBox": "t_j5va_detailBox",
 			"title": "t_j5va_title",
-			"identity": "t_j5va_identity",
+			"trashButton": "t_j5va_trashButton",
+			"empty": "t_j5va_empty",
+			"pinStar": "t_j5va_pinStar",
+			"clearButton": "t_j5va_clearButton",
 			"modeAsk": "t_j5va_modeAsk",
-			"addButton": "t_j5va_addButton",
-			"rowDue": "t_j5va_rowDue",
-			"list": "t_j5va_list",
-			"rowExpired": "t_j5va_rowExpired",
+			"deleteButton": "t_j5va_deleteButton",
+			"toolbar": "t_j5va_toolbar",
 			"emptyBox": "t_j5va_emptyBox",
-			"footer": "t_j5va_footer",
+			"addButton": "t_j5va_addButton",
+			"copied": "t_j5va_copied",
+			"modeReadonly": "t_j5va_modeReadonly",
+			"reportTitle": "t_j5va_reportTitle",
 			"revealButton": "t_j5va_revealButton",
-			"deleteButton": "t_j5va_deleteButton",
-			"empty": "t_j5va_empty",
-			"reportBox": "t_j5va_reportBox",
 			"badgeDanger": "t_j5va_badgeDanger",
-			"rowMain": "t_j5va_rowMain",
-			"editorActions": "t_j5va_editorActions",
+			"footer": "t_j5va_footer",
+			"modeAuto": "t_j5va_modeAuto",
+			"reportSub": "t_j5va_reportSub",
+			"dangerButton": "t_j5va_dangerButton",
 			"detailItem": "t_j5va_detailItem",
+			"identity": "t_j5va_identity",
+			"sortButton": "t_j5va_sortButton",
 			"field": "t_j5va_field",
-			"trashButton": "t_j5va_trashButton",
+			"reportBox": "t_j5va_reportBox",
+			"dueBadge": "t_j5va_dueBadge",
+			"searchBox": "t_j5va_searchBox",
 			"emptyHint": "t_j5va_emptyHint",
-			"detailBox": "t_j5va_detailBox",
-			"saveButton": "t_j5va_saveButton",
-			"pinStar": "t_j5va_pinStar",
-			"totp": "t_j5va_totp",
-			"copied": "t_j5va_copied",
-			"policyBar": "t_j5va_policyBar",
-			"kindFilter": "t_j5va_kindFilter",
+			"editorActions": "t_j5va_editorActions",
+			"list": "t_j5va_list",
+			"section": "t_j5va_section",
+			"policyField": "t_j5va_policyField",
 			"secretField": "t_j5va_secretField",
-			"kindIcon": "t_j5va_kindIcon",
-			"rowActions": "t_j5va_rowActions",
-			"clearButton": "t_j5va_clearButton",
-			"healthBar": "t_j5va_healthBar",
-			"dueBadge": "t_j5va_dueBadge",
-			"toolbar": "t_j5va_toolbar",
-			"dangerButton": "t_j5va_dangerButton",
+			"highBadge": "t_j5va_highBadge",
 			"intro": "t_j5va_intro",
-			"error": "t_j5va_error",
-			"reportTitle": "t_j5va_reportTitle",
-			"modeReadonly": "t_j5va_modeReadonly",
-			"policyField": "t_j5va_policyField",
-			"reportLine": "t_j5va_reportLine"
+			"status": "t_j5va_status",
+			"backupButton": "t_j5va_backupButton",
+			"badgeOk": "t_j5va_badgeOk",
+			"badgeWarn": "t_j5va_badgeWarn",
+			"rowExpired": "t_j5va_rowExpired",
+			"kindIcon": "t_j5va_kindIcon"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx
@@ -139,6 +142,22 @@ window.__ModuleLoader__.load({
 				key: "notes",
 				label: "fieldNotes"
 			},
+			{
+				key: "expiresAt",
+				label: "fieldExpiresAt"
+			},
+			{
+				key: "rotationDays",
+				label: "fieldRotationDays"
+			},
+			{
+				key: "sensitivity",
+				label: "fieldSensitivity"
+			},
+			{
+				key: "favorite",
+				label: "fieldFavorite"
+			},
 			{
 				key: "icon",
 				label: "fieldIcon"
@@ -172,7 +191,7 @@ window.__ModuleLoader__.load({
 		}
 		/** Render the Vault settings section. */
 		function VaultSection(props) {
-			const { t, config, setAccessMode, setAutoCapture, list, search, get, add, update, remove, trash, rotation, health, history, stats, backupStatus, recent, restore, undeleteAll, totp } = props;
+			const { t, config, setAccessMode, setAutoCapture, list, search, get, add, update, remove, trash, rotation, health, history, stats, backupStatus, backup, recent, restore, undeleteAll, totp } = props;
 			const searchId = (0, react.useId)();
 			const [query, setQuery] = (0, react.useState)("");
 			const [state, setState] = (0, react.useState)({ status: "loading" });
@@ -199,6 +218,24 @@ window.__ModuleLoader__.load({
 			const [backupInfo, setBackupInfo] = (0, react.useState)(null);
 			const [recentEntries, setRecentEntries] = (0, react.useState)([]);
 			const readonly = policy?.accessMode === "readonly";
+			/** Run an encrypted backup now and refresh the backup-age badge. */
+			async function backupNow() {
+				setBusy(true);
+				setMessage(null);
+				try {
+					const result = await backup(10);
+					setBackupInfo({
+						daysSinceBackup: 0,
+						backups: result.kept
+					});
+					setMessage(`${t("backupDone")} (${result.kept} kept, ${result.pruned} pruned)`);
+					refresh();
+				} catch {
+					setMessage(t("error"));
+				} finally {
+					setBusy(false);
+				}
+			}
 			(0, react.useEffect)(() => {
 				let current = true;
 				config().then((value) => {
@@ -316,7 +353,11 @@ window.__ModuleLoader__.load({
 						url: entry.url ?? "",
 						notes: entry.notes ?? "",
 						icon: entry.icon ?? "",
-						color: entry.color ?? ""
+						color: entry.color ?? "",
+						expiresAt: entry.expiresAt,
+						rotationDays: entry.rotationDays,
+						sensitivity: entry.sensitivity,
+						favorite: entry.favorite ?? false
 					});
 					setTagsDraft((entry.tags ?? []).join(", "));
 					setFieldsDraft(entry.fields !== void 0 ? Object.entries(entry.fields).map(([k, v]) => `${k}=${String(v)}`).join("\n") : "");
@@ -332,7 +373,7 @@ window.__ModuleLoader__.load({
 			}
 			/** Save the current form (create or update). */
 			async function save() {
-				if (!form.title.trim()) {
+				if (!(form.title ?? "").trim()) {
 					setMessage(t("error"));
 					return;
 				}
@@ -349,7 +390,7 @@ window.__ModuleLoader__.load({
 						fields[trimmed.slice(0, eq).trim()] = trimmed.slice(eq + 1).trim();
 					}
 					const patch = {
-						title: form.title.trim(),
+						title: (form.title ?? "").trim(),
 						...form.kind !== void 0 ? { kind: form.kind } : {},
 						...form.username !== void 0 ? { username: form.username } : {},
 						...form.email !== void 0 ? { email: form.email } : {},
@@ -367,6 +408,10 @@ window.__ModuleLoader__.load({
 						...form.notes !== void 0 ? { notes: form.notes } : {},
 						...form.icon !== void 0 ? { icon: form.icon } : {},
 						...form.color !== void 0 ? { color: form.color } : {},
+						...form.expiresAt !== void 0 ? { expiresAt: form.expiresAt } : {},
+						...form.rotationDays !== void 0 ? { rotationDays: form.rotationDays } : {},
+						...form.sensitivity !== void 0 ? { sensitivity: form.sensitivity } : {},
+						...form.favorite !== void 0 ? { favorite: form.favorite } : {},
 						tags,
 						fields
 					};
@@ -652,14 +697,21 @@ window.__ModuleLoader__.load({
 								className: VaultSection_module_css_default.reportTitle,
 								children: t("reportTitle")
 							}),
-							report.rotation.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+							report.rotation.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 								className: VaultSection_module_css_default.reportLine,
 								children: [
 									t("reportRotation"),
 									": ",
 									report.rotation.length
 								]
-							}),
+							}), report.rotation.slice(0, 8).map((item, i) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+								className: VaultSection_module_css_default.reportSub,
+								children: [
+									"· ",
+									String(item.title ?? "?"),
+									item.due === "expired" ? ` (${t("dueExpired")})` : item.due === "soon" ? ` (${t("dueExpiring")} ${item.daysLeft ?? 0}d)` : ` (${t("dueNow")})`
+								]
+							}, i))] }),
 							report.weak.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 								className: VaultSection_module_css_default.reportLine,
 								children: [
@@ -930,6 +982,13 @@ window.__ModuleLoader__.load({
 									backupInfo.daysSinceBackup,
 									"d"
 								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: VaultSection_module_css_default.backupButton,
+								onClick: () => void backupNow(),
+								disabled: busy,
+								children: t("backupNow")
 							})
 						]
 					}),
@@ -988,6 +1047,53 @@ window.__ModuleLoader__.load({
 											})),
 											children: revealed[field.key] ? t("hide") : t("show")
 										})]
+									}) : field.key === "expiresAt" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "datetime-local",
+										value: form.expiresAt !== void 0 ? new Date(form.expiresAt).toISOString().slice(0, 16) : "",
+										onChange: (event) => {
+											const raw = event.target.value;
+											const epoch = raw.length > 0 ? Date.parse(raw) : NaN;
+											setForm((previous) => ({
+												...previous,
+												expiresAt: Number.isNaN(epoch) ? void 0 : epoch
+											}));
+										}
+									}) : field.key === "rotationDays" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "number",
+										min: 0,
+										max: 3650,
+										placeholder: t("rotationClearHint"),
+										value: form.rotationDays ?? "",
+										onChange: (event) => {
+											const raw = event.target.value;
+											setForm((previous) => ({
+												...previous,
+												rotationDays: raw.length > 0 ? Number(raw) : void 0
+											}));
+										}
+									}) : field.key === "sensitivity" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+										value: form.sensitivity ?? "normal",
+										onChange: (event) => setForm((previous) => ({
+											...previous,
+											sensitivity: event.target.value === "high" ? "high" : "normal"
+										})),
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: "normal",
+											children: t("sensitivityNormal")
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: "high",
+											children: t("sensitivityHigh")
+										})]
+									}) : field.key === "favorite" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										className: VaultSection_module_css_default.checkField,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											type: "checkbox",
+											checked: form.favorite ?? false,
+											onChange: (event) => setForm((previous) => ({
+												...previous,
+												favorite: event.target.checked
+											}))
+										}), t("favoriteHint")]
 									}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 										type: "text",
 										value: form[field.key] ?? "",
@@ -1067,6 +1173,8 @@ window.__ModuleLoader__.load({
 			reportReused: "credentials reused across entries",
 			healthOk: "vault healthy",
 			healthBackup: "backup",
+			backupNow: "Backup now",
+			backupDone: "Backup created",
 			healthStrength: "strength",
 			dueExpired: "EXPIRED",
 			dueExpiring: "expires in",
@@ -1116,6 +1224,14 @@ window.__ModuleLoader__.load({
 			fieldNotes: "Notes",
 			fieldTags: "Tags",
 			fieldIcon: "Icon (emoji)",
+			fieldExpiresAt: "Expires at",
+			fieldRotationDays: "Rotation (days, 0 = never)",
+			fieldSensitivity: "Sensitivity",
+			fieldFavorite: "Pinned",
+			sensitivityNormal: "normal",
+			sensitivityHigh: "high",
+			favoriteHint: "Show at top",
+			rotationClearHint: "0 clears rotation",
 			fieldColor: "Color",
 			fieldCustom: "Custom fields (key=value per line)",
 			error: "Something went wrong.",
@@ -1156,6 +1272,8 @@ window.__ModuleLoader__.load({
 			reportReused: "跨条目复用的凭据",
 			healthOk: "凭据库健康",
 			healthBackup: "备份",
+			backupNow: "立即备份",
+			backupDone: "备份已创建",
 			healthStrength: "强度",
 			dueExpired: "已过期",
 			dueExpiring: "将于",
@@ -1205,6 +1323,14 @@ window.__ModuleLoader__.load({
 			fieldNotes: "备注",
 			fieldTags: "标签",
 			fieldIcon: "图标（emoji）",
+			fieldExpiresAt: "过期时间",
+			fieldRotationDays: "轮换周期（天，0=永不）",
+			fieldSensitivity: "敏感级别",
+			fieldFavorite: "置顶",
+			sensitivityNormal: "普通",
+			sensitivityHigh: "高敏",
+			favoriteHint: "列表置顶显示",
+			rotationClearHint: "0 清除轮换",
 			fieldColor: "颜色",
 			fieldCustom: "自定义字段（每行 key=value）",
 			error: "操作失败。",
@@ -1266,6 +1392,7 @@ window.__ModuleLoader__.load({
 				stats: () => invoke("stats"),
 				recent: () => invoke("recent").then((r) => r.entries),
 				backupStatus: () => invoke("backupStatus"),
+				backup: (maxBackups) => invoke("backup", { maxBackups: maxBackups ?? 10 }),
 				health: () => invoke("health"),
 				restore: (id) => invoke("restore", { id }),
 				undeleteAll: () => invoke("undeleteAll"),

package/lib/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":["css"],"sources":["../src/client/VaultSection.tsx","../src/client/locales.ts","../src/client/index.ts"],"sourcesContent":["/**\n * Vault settings section: list, search, add, edit, delete, and copy encrypted\n * credentials. All mutations go through the host VaultGateway remote; secrets\n * are shown only inside the edit form or a copy action, never in the list.\n */\n\nimport { useEffect, useId, useMemo, useState, type ReactNode } from 'react'\nimport type { PropsLocale, PropsRuntime, InjectFace, TranslateNS } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { VaultLocaleKey } from './locales.ts'\nimport css from './VaultSection.module.css'\n\n/** Wire shapes shared with the host gateway (mirror of src/index.ts types). */\nexport interface VaultSummaryWire {\n  id: string\n  title: string\n  sensitivity?: string\n  kind?: string\n  username?: string\n  email?: string\n  phone?: string\n  host?: string\n  port?: string\n  url?: string\n  tags?: string[]\n}\n\nexport interface VaultFullWire {\n  id: string\n  title: string\n  kind?: string\n  username?: string\n  email?: string\n  phone?: string\n  password?: string\n  host?: string\n  port?: string\n  privateKey?: string\n  apiKey?: string\n  secret?: string\n  accessToken?: string\n  refreshToken?: string\n  expiresAt?: number\n  otpSecret?: string\n  url?: string\n  notes?: string\n  tags?: string[]\n  icon?: string\n  color?: string\n  fields?: Record<string, unknown>\n}\n\n/** Patch shape accepted by vault.add / vault.update. */\nexport type VaultPatch = Partial<Omit<VaultFullWire, 'id'>>\n\n/** Registration-side business face supplied by the plugin entry. */\nexport interface VaultSectionInjected {\n  t: TranslateNS<'settings.vault'>\n  config: () => Promise<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }>\n  setAccessMode: (mode: 'readonly' | 'ask' | 'auto') => Promise<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }>\n  setAutoCapture: (enabled: boolean) => Promise<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }>\n  list: () => Promise<VaultSummaryWire[]>\n  search: (query: string, limit?: number) => Promise<VaultSummaryWire[]>\n  get: (id: string) => Promise<{ found: boolean; entry?: VaultFullWire }>\n  add: (patch: VaultPatch & { title: string }) => Promise<VaultSummaryWire>\n  update: (id: string, patch: VaultPatch) => Promise<{ found: boolean; entry?: VaultSummaryWire }>\n  remove: (id: string) => Promise<{ deleted: boolean }>\n  trash: () => Promise<VaultSummaryWire[]>\n  rotation: () => Promise<unknown[]>\n  history: () => Promise<unknown[]>\n  stats: () => Promise<Record<string, unknown>>\n  recent: () => Promise<unknown[]>\n  backupStatus: () => Promise<{ daysSinceBackup: number; backups: number }>\n  health: () => Promise<{ weak: unknown[]; reused: unknown[]; strength: { weak: number; fair: number; strong: number } }>\n  restore: (id: string) => Promise<{ restored: boolean }>\n  undeleteAll: () => Promise<{ restored: number }>\n  totp: (id: string) => Promise<{ code: string; label?: string; secondsRemaining: number }>\n}\n\n/** Type-level alias so consumers can reference the wire shapes without values. */\nexport type VaultSectionTypes = {\n  entries: VaultSummaryWire[]\n  fullEntry: VaultFullWire\n  summaryEntry: VaultSummaryWire\n  config: { accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }\n  accessModes: Array<'readonly' | 'ask' | 'auto'>\n}\n\n/** Full component props assembled by the Settings slot renderer. */\nexport type VaultSectionProps =\n  PropsRuntime<'settings.section'>\n  & PropsLocale<'settings.vault'>\n  & InjectFace<VaultSectionInjected>\n\n/** The editable form fields we render (subset of the full wire). */\ntype FormFields = Pick<\n  VaultFullWire, 'title' | 'kind' | 'username' | 'email' | 'phone' | 'password' | 'host' | 'port'\n  | 'privateKey' | 'apiKey' | 'secret' | 'accessToken' | 'refreshToken' | 'otpSecret' | 'url' | 'notes'\n  | 'icon' | 'color'\n>\n\nconst FORM_FIELDS: Array<{ key: keyof FormFields; label: VaultLocaleKey }> = [\n  { key: 'title', label: 'fieldTitle' },\n  { key: 'kind', label: 'fieldKind' },\n  { key: 'username', label: 'fieldUsername' },\n  { key: 'email', label: 'fieldEmail' },\n  { key: 'phone', label: 'fieldPhone' },\n  { key: 'password', label: 'fieldPassword' },\n  { key: 'host', label: 'fieldHost' },\n  { key: 'port', label: 'fieldPort' },\n  { key: 'apiKey', label: 'fieldApiKey' },\n  { key: 'secret', label: 'fieldSecret' },\n  { key: 'accessToken', label: 'fieldAccessToken' },\n  { key: 'refreshToken', label: 'fieldRefreshToken' },\n  { key: 'otpSecret', label: 'fieldOtpSecret' },\n  { key: 'url', label: 'fieldUrl' },\n  { key: 'notes', label: 'fieldNotes' },\n  { key: 'icon', label: 'fieldIcon' },\n  { key: 'color', label: 'fieldColor' },\n]\n\nconst KIND_KEYS: Record<string, VaultLocaleKey> = {\n  login: 'kindLogin',\n  ssh: 'kindSsh',\n  'api-key': 'kindApiKey',\n  secret: 'kindSecret',\n  oauth: 'kindOauth',\n  custom: 'kindCustom',\n}\n\ntype ViewState =\n  | { readonly status: 'loading' }\n  | { readonly status: 'error' }\n  | { readonly status: 'ready'; readonly entries: VaultSummaryWire[] }\n\ntype EditorState =\n  | { readonly status: 'closed' }\n  | { readonly status: 'creating' }\n  | { readonly status: 'editing'; readonly entry: VaultFullWire }\n\nfunction emptyForm(): FormFields {\n  return { title: '', kind: 'login', username: '', email: '', phone: '', password: '', host: '', port: '', icon: '', color: '' }\n}\n\n/** Render the Vault settings section. */\nexport function VaultSection(props: VaultSectionProps): ReactNode {\n  const { t, config, setAccessMode, setAutoCapture, list, search, get, add, update, remove, trash, rotation, health, history, stats, backupStatus, recent, restore, undeleteAll, totp } = props\n  const searchId = useId()\n  const [query, setQuery] = useState('')\n  const [state, setState] = useState<ViewState>({ status: 'loading' })\n  const [editor, setEditor] = useState<EditorState>({ status: 'closed' })\n  const [form, setForm] = useState<FormFields>(emptyForm())\n  const [busy, setBusy] = useState(false)\n  const [message, setMessage] = useState<string | null>(null)\n  const [copiedId, setCopiedId] = useState<string | null>(null)\n  const [codeMap, setCodeMap] = useState<Record<string, string>>({})\n  const [tagsDraft, setTagsDraft] = useState('')\n  const [fieldsDraft, setFieldsDraft] = useState('')\n  const [revealed, setRevealed] = useState<Record<string, boolean>>({})\n  const [kindFilter, setKindFilter] = useState('')\n  const [tagFilter, setTagFilter] = useState('')\n  const [expandedId, setExpandedId] = useState<string | null>(null)\n  const [sortBy, setSortBy] = useState<'alpha' | 'recent'>('alpha')\n  const [policy, setPolicy] = useState<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean } | null>(null)\n  const [showTrash, setShowTrash] = useState(false)\n  const [trashEntries, setTrashEntries] = useState<VaultSummaryWire[]>([])\n  const [report, setReport] = useState<{ rotation: unknown[]; weak: unknown[]; reused: unknown[]; strength: { weak: number; fair: number; strong: number } | null } | null>(null)\n  const [dueMap, setDueMap] = useState<Record<string, { due: string; daysLeft: number }>>({})\n  const [recentEvents, setRecentEvents] = useState<Array<Record<string, unknown>>>([])\n  const [vaultStats, setVaultStats] = useState<Record<string, unknown> | null>(null)\n  const [backupInfo, setBackupInfo] = useState<{ daysSinceBackup: number; backups: number } | null>(null)\n  const [recentEntries, setRecentEntries] = useState<Array<Record<string, unknown>>>([])\n\n  const readonly = policy?.accessMode === 'readonly'\n\n  useEffect(() => {\n    let current = true\n    void config().then(\n      value => { if (current) setPolicy(value) },\n      () => { /* policy is informational; ignore failures */ },\n    )\n    return () => { current = false }\n  }, [config])\n\n  const refresh = useMemo(() => async () => {\n    setState({ status: 'loading' })\n    try {\n      const entries = query.trim().length === 0\n        ? await list()\n        : await search(query.trim())\n      setState({ status: 'ready', entries })\n    } catch {\n      setState({ status: 'error' })\n    }\n  }, [list, search, query])\n\n  useEffect(() => {\n    let current = true\n    const timer = window.setTimeout(() => {\n      void refresh().then(\n        () => { /* state already set inside refresh */ },\n        () => { if (current) setState({ status: 'error' }) },\n      )\n    }, 250)\n    return () => { current = false; window.clearTimeout(timer) }\n    // refresh is memoized on query (debounced); list/search are stable.\n  }, [refresh])\n\n  // Vault health & meta: load once on mount (stats, backup age, rotation,\n  // weak/reused scan, recent activity) and refresh on window focus.\n  useEffect(() => {\n    let current = true\n    const load = (): void => {\n      void Promise.all([\n        stats().catch(() => null),\n        backupStatus().catch(() => null),\n        rotation().catch(() => []),\n        health().catch(() => null),\n        recent().catch(() => []),\n      ]).then(([st, bk, rot, hl, rc]) => {\n        if (!current) return\n        if (st !== null) setVaultStats(st as Record<string, unknown>)\n        if (bk !== null) setBackupInfo(bk)\n        setReport({ rotation: (rot ?? []) as unknown[], weak: ((hl?.weak ?? []) as unknown[]), reused: ((hl?.reused ?? []) as unknown[]), strength: (hl?.strength ?? null) as { weak: number; fair: number; strong: number } | null })\n        const due: Record<string, { due: string; daysLeft: number }> = {}\n        for (const item of (rot ?? []) as Array<{ id?: string; due?: string; daysLeft?: number }>) {\n          if (item.id !== undefined && item.due !== undefined) due[item.id] = { due: item.due, daysLeft: item.daysLeft ?? 0 }\n        }\n        setDueMap(due)\n        setRecentEntries((rc ?? []) as Array<Record<string, unknown>>)\n      })\n    }\n    load()\n    const onFocus = (): void => { load() }\n    window.addEventListener('focus', onFocus)\n    return () => { current = false; window.removeEventListener('focus', onFocus) }\n  }, [stats, backupStatus, rotation, health, recent])\n\n  /** Open the editor for a new entry. */\n  function startCreate(): void {\n    setForm(emptyForm())\n    setTagsDraft('')\n    setFieldsDraft('')\n    setMessage(null)\n    setEditor({ status: 'creating' })\n  }\n\n  /** Open the editor for an existing entry (fetches full secrets). */\n  async function startEdit(id: string): Promise<void> {\n    setBusy(true)\n    setMessage(null)\n    try {\n      const result = await get(id)\n      if (!result.found || result.entry === undefined) {\n        setMessage(t('error'))\n        return\n      }\n      const entry = result.entry\n      setForm({\n        title: entry.title ?? '',\n        kind: entry.kind ?? 'login',\n        username: entry.username ?? '',\n        email: entry.email ?? '',\n        phone: entry.phone ?? '',\n        password: entry.password ?? '',\n        host: entry.host ?? '',\n        port: entry.port ?? '',\n        privateKey: entry.privateKey ?? '',\n        apiKey: entry.apiKey ?? '',\n        secret: entry.secret ?? '',\n        accessToken: entry.accessToken ?? '',\n        refreshToken: entry.refreshToken ?? '',\n        otpSecret: entry.otpSecret ?? '',\n        url: entry.url ?? '',\n        notes: entry.notes ?? '',\n        icon: entry.icon ?? '',\n        color: entry.color ?? '',\n      })\n      setTagsDraft((entry.tags ?? []).join(', '))\n      setFieldsDraft(entry.fields !== undefined ? Object.entries(entry.fields).map(([k, v]) => `${k}=${String(v)}`).join('\\n') : '')\n      setEditor({ status: 'editing', entry })\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Save the current form (create or update). */\n  async function save(): Promise<void> {\n    if (!form.title.trim()) {\n      setMessage(t('error'))\n      return\n    }\n    setBusy(true)\n    setMessage(null)\n    try {\n      const tags = tagsDraft.split(',').map(x => x.trim()).filter(x => x.length > 0)\n      const fields: Record<string, string> = {}\n      for (const line of fieldsDraft.split('\\n')) {\n        const trimmed = line.trim()\n        if (trimmed.length === 0) continue\n        const eq = trimmed.indexOf('=')\n        if (eq <= 0) continue\n        fields[trimmed.slice(0, eq).trim()] = trimmed.slice(eq + 1).trim()\n      }\n      const patch: VaultPatch = {\n        title: form.title.trim(),\n        ...(form.kind !== undefined ? { kind: form.kind } : {}),\n        ...(form.username !== undefined ? { username: form.username } : {}),\n        ...(form.email !== undefined ? { email: form.email } : {}),\n        ...(form.phone !== undefined ? { phone: form.phone } : {}),\n        ...(form.password !== undefined ? { password: form.password } : {}),\n        ...(form.host !== undefined ? { host: form.host } : {}),\n        ...(form.port !== undefined ? { port: form.port } : {}),\n        ...(form.privateKey !== undefined ? { privateKey: form.privateKey } : {}),\n        ...(form.apiKey !== undefined ? { apiKey: form.apiKey } : {}),\n        ...(form.secret !== undefined ? { secret: form.secret } : {}),\n        ...(form.accessToken !== undefined ? { accessToken: form.accessToken } : {}),\n        ...(form.refreshToken !== undefined ? { refreshToken: form.refreshToken } : {}),\n        ...(form.otpSecret !== undefined ? { otpSecret: form.otpSecret } : {}),\n        ...(form.url !== undefined ? { url: form.url } : {}),\n        ...(form.notes !== undefined ? { notes: form.notes } : {}),\n        ...(form.icon !== undefined ? { icon: form.icon } : {}),\n        ...(form.color !== undefined ? { color: form.color } : {}),\n        // Always send tags: an empty array clears them, and the host store\n        // treats empty string values as \"clear this field\" too.\n        tags,\n        fields,\n      }\n      if (editor.status === 'creating') {\n        await add(patch as VaultPatch & { title: string })\n      } else if (editor.status === 'editing') {\n        await update(editor.entry.id, patch)\n      }\n      setEditor({ status: 'closed' })\n      await refresh()\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Delete an entry after confirmation. */\n  async function removeEntry(id: string): Promise<void> {\n    if (!window.confirm(t('deleteConfirm'))) return\n    setBusy(true)\n    try {\n      await remove(id)\n      await refresh()\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Copy a field value to the clipboard and flash the row. */\n  async function copyValue(id: string, value: string): Promise<void> {\n    try {\n      await navigator.clipboard.writeText(value)\n    } catch {\n      // Clipboard may be blocked; fall back to a temporary textarea.\n      const textarea = document.createElement('textarea')\n      textarea.value = value\n      document.body.appendChild(textarea)\n      textarea.select()\n      document.execCommand('copy')\n      textarea.remove()\n    }\n    setCopiedId(id)\n    window.setTimeout(() => setCopiedId(null), 1500)\n  }\n\n  /** Fetch and display a TOTP code for an entry with an otpSecret. */\n  async function showTotp(id: string): Promise<void> {\n    setBusy(true)\n    try {\n      const result = await totp(id)\n      setCodeMap(previous => ({ ...previous, [id]: `${result.code} (${result.secondsRemaining}s)` }))\n    } catch {\n      setCodeMap(previous => ({ ...previous, [id]: t('error') }))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Field-set summary line for one entry (non-secret). */\n  function kindIcon(kind?: string): string {\n    switch (kind ?? 'login') {\n      case 'ssh': return '🖥️'\n      case 'api-key': return '🔑'\n      case 'oauth': return '🔐'\n      case 'secret': return '🤫'\n      case 'custom': return '🧩'\n      default: return '👤'\n    }\n  }\n\n  function identityLine(entry: VaultSummaryWire): string {\n    const parts = [\n      entry.kind !== undefined ? t(KIND_KEYS[entry.kind] ?? 'kindCustom') : t('kindLogin'),\n      entry.username,\n      entry.email,\n      entry.phone,\n      entry.host !== undefined ? `${entry.host}${entry.port !== undefined ? `:${entry.port}` : ''}` : undefined,\n      entry.url,\n    ].filter((value): value is string => value !== undefined && value.length > 0)\n    return parts.join(' · ')\n  }\n\n  return (\n    <section className={css.section} aria-labelledby=\"vault-heading\">\n      <h2 id=\"vault-heading\">{t('heading')}</h2>\n      <p className={css.intro}>{t('intro')}</p>\n\n      <div className={css.toolbar}>\n        <label className={css.searchBox}>\n          <span className=\"sr-only\">{t('searchPlaceholder')}</span>\n          <input\n            id={searchId}\n            type=\"search\"\n            placeholder={t('searchPlaceholder')}\n            value={query}\n            onChange={event => setQuery(event.target.value)}\n          />\n          {query.length > 0 && (\n            <button type=\"button\" className={css.clearButton} onClick={() => setQuery('')} aria-label={t('clearSearch')}>×</button>\n          )}\n        </label>\n        <select className={css.kindFilter} value={kindFilter} onChange={e => setKindFilter(e.target.value)} aria-label={t('fieldKind')}>\n          <option value=\"\">{t('allKinds')}</option>\n          {Object.entries(KIND_KEYS).map(([value, key]) => (\n            <option key={value} value={value}>{t(key)}</option>\n          ))}\n        </select>\n        <select className={css.kindFilter} value={tagFilter} onChange={e => setTagFilter(e.target.value)} aria-label={t('fieldTags')}>\n          <option value=\"\">{t('allTags')}</option>\n          {[...new Set(state.status === 'ready' ? state.entries.flatMap(e => e.tags ?? []) : [])].sort().map(tag => (\n            <option key={tag} value={tag}>{tag}</option>\n          ))}\n        </select>\n        <button\n          type=\"button\"\n          className={css.sortButton}\n          onClick={() => setSortBy(sortBy === 'alpha' ? 'recent' : 'alpha')}\n        >{sortBy === 'alpha' ? t('sortAlpha') : t('sortRecent')}</button>\n        <button type=\"button\" className={css.addButton} onClick={startCreate} disabled={busy || readonly}>\n          + {t('add')}\n        </button>\n      </div>\n\n      {policy !== null && (\n        <div className={css.policyBar}>\n          <label className={css.policyField}>\n            <span>{t('modeLabel')}</span>\n            <select\n              value={policy.accessMode}\n              disabled={busy}\n              onChange={event => {\n                const next = event.target.value as 'readonly' | 'ask' | 'auto'\n                setBusy(true)\n                setMessage(null)\n                void setAccessMode(next).then(\n                  value => { setPolicy(value); setBusy(false) },\n                  () => { setMessage(t('error')); setBusy(false) },\n                )\n              }}\n            >\n              <option value=\"readonly\">{t('modeReadonly')}</option>\n              <option value=\"ask\">{t('modeAsk')}</option>\n              <option value=\"auto\">{t('modeAuto')}</option>\n            </select>\n          </label>\n          <label className={css.policyField}>\n            <span>{t('autoCaptureLabel')}</span>\n            <input\n              type=\"checkbox\"\n              checked={policy.autoCapture}\n              disabled={busy}\n              onChange={event => {\n                const next = event.target.checked\n                setBusy(true)\n                setMessage(null)\n                void setAutoCapture(next).then(\n                  value => { setPolicy(value); setBusy(false) },\n                  () => { setMessage(t('error')); setBusy(false) },\n                )\n              }}\n            />\n          </label>\n          <p className={policy.accessMode === 'readonly' ? css.modeReadonly : policy.accessMode === 'ask' ? css.modeAsk : css.modeAuto}>\n            {policy.accessMode === 'readonly'\n              ? t('modeReadonlyHint')\n              : policy.accessMode === 'ask'\n                ? t('modeAskHint')\n                : t('modeAutoHint')}\n            {policy.autoCapture ? ` · ${t('autoCaptureOn')}` : ` · ${t('autoCaptureOff')}`}\n          </p>\n        </div>\n      )}\n\n      {message !== null && <p role=\"alert\" className={css.error}>{message}</p>}\n\n      {state.status === 'loading' && <p className={css.status}>{t('loading')}</p>}\n      {state.status === 'error' && <p role=\"alert\" className={css.error}>{t('error')}</p>}\n      {state.status === 'ready' && state.entries.length === 0 && (\n        <div className={css.emptyBox}>\n          <p className={css.empty}>{t('empty')}</p>\n          <p className={css.emptyHint}>{readonly ? t('emptyHintReadonly') : t('emptyHint')}</p>\n          {!readonly && (\n            <button type=\"button\" className={css.addButton} onClick={startCreate}>{t('quickAdd')}</button>\n          )}\n        </div>\n      )}\n\n      {recentEntries.length > 0 && (\n        <div className={css.reportBox}>\n          <p className={css.reportTitle}>{t('recentlyAdded')}</p>\n          {recentEntries.map((e, i) => (\n            <p key={i} className={css.reportLine}>{String(e.title ?? '')}</p>\n          ))}\n        </div>\n      )}\n\n      {recentEvents.length > 0 && (\n        <div className={css.reportBox}>\n          <p className={css.reportTitle}>{t('recentActivity')}</p>\n          {recentEvents.map((ev, i) => (\n            <p key={i} className={css.reportLine}>\n              {String(ev.action ?? '')} · {String(ev.title ?? ev.id ?? '')}\n            </p>\n          ))}\n        </div>\n      )}\n\n      {report !== null && (report.rotation.length > 0 || report.weak.length > 0 || report.reused.length > 0) && (\n        <div className={css.reportBox}>\n          <p className={css.reportTitle}>{t('reportTitle')}</p>\n          {report.rotation.length > 0 && (\n            <p className={css.reportLine}>{t('reportRotation')}: {report.rotation.length}</p>\n          )}\n          {report.weak.length > 0 && (\n            <p className={css.reportLine}>{t('reportWeak')}: {report.weak.length}</p>\n          )}\n          {report.reused.length > 0 && (\n            <p className={css.reportLine}>{t('reportReused')}: {report.reused.length}</p>\n          )}\n        </div>\n      )}\n\n      {state.status === 'ready' && (state.entries.length > 0 || trashEntries.length > 0) && (\n        <button\n          type=\"button\"\n          className={css.trashButton}\n          onClick={() => {\n            if (!showTrash) void trash().then(setTrashEntries)\n            setShowTrash(!showTrash)\n          }}\n        >{showTrash ? t('hideTrash') : t('showTrash')}{trashEntries.length > 0 ? ` (${trashEntries.length})` : ''}</button>\n      )}\n\n      {showTrash && (\n        <ul className={css.list}>\n          {trashEntries.map(entry => (\n            <li key={entry.id} className={css.row}>\n              <div className={css.rowMain}>\n                <span className={css.title}>{entry.title}</span>\n                <span className={css.identity}>{t('trashed')}</span>\n              </div>\n              <div className={css.rowActions}>\n                <button\n                  type=\"button\"\n                  onClick={() => { void restore(entry.id).then(() => { void trash().then(setTrashEntries); void refresh() }) }}\n                  disabled={busy || readonly}\n                >{t('restore')}</button>\n              </div>\n            </li>\n          ))}\n          {trashEntries.length === 0 && <p className={css.empty}>{t('trashEmpty')}</p>}\n        </ul>\n      )}\n      {showTrash && trashEntries.length > 0 && (\n        <>\n          <button\n            type=\"button\"\n            className={css.trashButton}\n            onClick={() => {\n              setBusy(true)\n              void undeleteAll().then(() => {\n                void trash().then(setTrashEntries)\n                void refresh()\n                setBusy(false)\n              }, () => setBusy(false))\n            }}\n            disabled={busy || readonly}\n          >{t('restoreAll')}</button>\n          <button\n            type=\"button\"\n            className={css.dangerButton}\n            onClick={() => {\n              if (!window.confirm(t('clearTrashConfirm'))) return\n              setBusy(true)\n              void Promise.all(trashEntries.map(e => remove(e.id))).then(() => {\n                void trash().then(setTrashEntries)\n                void refresh()\n                setBusy(false)\n              }, () => setBusy(false))\n            }}\n            disabled={busy || readonly}\n          >{t('clearTrash')}</button>\n        </>\n      )}\n\n      {state.status === 'ready' && state.entries.length > 0 && (\n        <ul className={css.list}>\n          {state.entries.filter(entry => (kindFilter === '' || entry.kind === kindFilter) && (tagFilter === '' || (entry.tags ?? []).includes(tagFilter))).sort((a, b) => sortBy === 'alpha' ? a.title.localeCompare(b.title) : 0).map(entry => {\n            const code = codeMap[entry.id]\n            return (\n              <li key={entry.id} className={`${css.row}${dueMap[entry.id] !== undefined ? ` ${dueMap[entry.id]!.due === 'expired' ? css.rowExpired : css.rowDue}` : ''}`}>\n                <div className={css.rowMain} onClick={() => setExpandedId(expandedId === entry.id ? null : entry.id)}>\n                  <span className={css.title}>\n                    <span className={css.kindIcon}>{kindIcon(entry.kind)}</span>\n                    {(entry as VaultSummaryWire & { favorite?: boolean }).favorite && (\n                      <span className={css.pinStar} title={t('pinned')}>★</span>\n                    )}\n                    {entry.title}\n                    {(entry as VaultSummaryWire & { sensitivity?: string }).sensitivity === 'high' && (\n                      <span className={css.highBadge}>{t('highSensitivity')}</span>\n                    )}\n                    {dueMap[entry.id] !== undefined && (\n                      <span className={`${css.dueBadge} ${dueMap[entry.id]!.due === 'expired' ? css.badgeDanger : css.badgeWarn}`}>\n                        {dueMap[entry.id]!.due === 'expired' ? t('dueExpired') : dueMap[entry.id]!.due === 'soon' ? `${t('dueExpiring')} ${dueMap[entry.id]!.daysLeft}d` : t('dueNow')}\n                      </span>\n                    )}\n                  </span>\n                  <span className={css.identity}>{identityLine(entry)}</span>\n                  {code !== undefined && <span className={css.totp}>{code}</span>}\n                </div>\n                {expandedId === entry.id && (\n                  <div className={css.detailBox}>\n                    {Object.entries(entry).filter(([k]) => !['id', 'title'].includes(k) && entry[k as keyof VaultSummaryWire] !== undefined).map(([k, v]) => (\n                      <span key={k} className={css.detailItem}>\n                        <strong>{k}</strong>: {Array.isArray(v) ? v.join(', ') : String(v)}\n                      </span>\n                    ))}\n                  </div>\n                )}\n                <div className={css.rowActions}>\n                  {copiedId === entry.id && <span className={css.copied}>{t('copied')}</span>}\n                  <button\n                    type=\"button\"\n                    onClick={() => void copyValue(entry.id, entry.username ?? entry.title)}\n                    disabled={busy}\n                  >{t('copy')}</button>\n                  <button\n                    type=\"button\"\n                    onClick={() => {\n                      setBusy(true)\n                      void get(entry.id).then(r => {\n                        if (r.found && r.entry?.password) void copyValue(entry.id, r.entry.password)\n                        setBusy(false)\n                      }, () => setBusy(false))\n                    }}\n                    disabled={busy || readonly}\n                  >{t('copyPassword')}</button>\n                  <button type=\"button\" onClick={() => void showTotp(entry.id)} disabled={busy}>{t('totp')}</button>\n                  {code !== undefined && (\n                    <button type=\"button\" onClick={() => void copyValue(entry.id, code.split(' ')[0]!)} disabled={busy}>{t('copyCode')}</button>\n                  )}\n                  <button type=\"button\" onClick={() => void startEdit(entry.id)} disabled={busy || readonly}>{t('edit')}</button>\n                  <button\n                    type=\"button\"\n                    className={css.deleteButton}\n                    onClick={() => void removeEntry(entry.id)}\n                    disabled={busy || readonly}\n                  >{t('delete')}</button>\n                </div>\n              </li>\n            )\n          })}\n        </ul>\n      )}\n\n      {state.status === 'ready' && (\n        <div className={css.healthBar}>\n          {vaultStats !== null && typeof vaultStats.total === 'number' && (\n            <span className={css.badge}>{t('entryCount')}: {String(vaultStats.total)}</span>\n          )}\n          {vaultStats !== null && typeof vaultStats.withTotp === 'number' && (\n            <span className={css.badge}>TOTP: {String(vaultStats.withTotp)}</span>\n          )}\n          {vaultStats !== null && typeof vaultStats.highSensitivity === 'number' && (\n            <span className={css.badge}>{t('highSensitivity')}: {String(vaultStats.highSensitivity)}</span>\n          )}\n          {report !== null && report.strength !== null && (\n            <span className={`${css.badge} ${report.strength.weak > 0 ? css.badgeDanger : css.badgeOk}`}>\n              {t('healthStrength')}: {report.strength.weak}W/{report.strength.fair}F/{report.strength.strong}S\n            </span>\n          )}\n          {report !== null && report.rotation.length > 0 && (\n            <span className={`${css.badge} ${css.badgeWarn}`}>{t('reportRotation')}: {report.rotation.length}</span>\n          )}\n          {report !== null && report.weak.length > 0 && (\n            <span className={`${css.badge} ${css.badgeDanger}`}>{t('reportWeak')}: {report.weak.length}</span>\n          )}\n          {report !== null && report.reused.length > 0 && (\n            <span className={`${css.badge} ${css.badgeDanger}`}>{t('reportReused')}: {report.reused.length}</span>\n          )}\n          {report !== null && report.rotation.length === 0 && report.weak.length === 0 && report.reused.length === 0 && (\n            <span className={`${css.badge} ${css.badgeOk}`}>{t('healthOk')}</span>\n          )}\n          {backupInfo !== null && backupInfo.daysSinceBackup >= 0 && (\n            <span className={`${css.badge} ${backupInfo.daysSinceBackup > 14 ? css.badgeDanger : backupInfo.daysSinceBackup > 7 ? css.badgeWarn : ''}`}>\n              {t('healthBackup')}: {backupInfo.daysSinceBackup}d\n            </span>\n          )}\n        </div>\n      )}\n      {state.status === 'ready' && (\n        <p className={css.footer}>\n          {t('entryCount')}: {state.entries.length}\n          {vaultStats !== null && typeof vaultStats.withTotp === 'number' && ` · TOTP: ${String(vaultStats.withTotp)}`}\n          {vaultStats !== null && typeof vaultStats.highSensitivity === 'number' && ` · ${t('highSensitivity')}: ${String(vaultStats.highSensitivity)}`}\n          {backupInfo !== null && backupInfo.daysSinceBackup >= 0 && ` · backup: ${backupInfo.daysSinceBackup}d ago`}\n          {vaultStats !== null && typeof vaultStats.byTag === 'object' && vaultStats.byTag !== null\n            && Object.keys(vaultStats.byTag as Record<string, unknown>).length > 0\n            && ` · tags: ${Object.entries(vaultStats.byTag as Record<string, unknown>).map(([k, v]) => `${k}(${String(v)})`).join(' ')}`}\n        </p>\n      )}\n\n      {editor.status !== 'closed' && (\n        <div className={css.editor} role=\"dialog\" aria-label={editor.status === 'creating' ? t('add') : t('edit')}>\n          <div className={css.editorBody}>\n            {FORM_FIELDS.map(field => (\n              <label key={field.key} className={css.field}>\n                <span>{t(field.label)}</span>\n                {field.key === 'kind' ? (\n                  <select\n                    value={form.kind ?? 'login'}\n                    onChange={event => setForm(previous => ({ ...previous, kind: event.target.value }))}\n                  >\n                    {Object.entries(KIND_KEYS).map(([value, key]) => (\n                      <option key={value} value={value}>{t(key)}</option>\n                    ))}\n                  </select>\n                ) : field.key === 'title' ? (\n                  <input\n                    value={form.title ?? ''}\n                    onChange={event => setForm(previous => ({ ...previous, title: event.target.value }))}\n                  />\n                ) : field.key === 'password' || field.key === 'otpSecret' || field.key === 'apiKey'\n                  || field.key === 'secret' || field.key === 'accessToken' || field.key === 'refreshToken'\n                  || field.key === 'privateKey' ? (\n                  <span className={css.secretField}>\n                    <input\n                      type={revealed[field.key] ? 'text' : 'password'}\n                      value={(form[field.key] as string | undefined) ?? ''}\n                      onChange={event => setForm(previous => ({ ...previous, [field.key]: event.target.value }))}\n                    />\n                    <button\n                      type=\"button\"\n                      className={css.revealButton}\n                      onClick={() => setRevealed(previous => ({ ...previous, [field.key]: !previous[field.key] }))}\n                    >{revealed[field.key] ? t('hide') : t('show')}</button>\n                  </span>\n                ) : (\n                  <input\n                    type=\"text\"\n                    value={(form[field.key] as string | undefined) ?? ''}\n                    onChange={event => setForm(previous => ({ ...previous, [field.key]: event.target.value }))}\n                  />\n                )}\n              </label>\n            ))}\n            <label className={css.field}>\n              <span>{t('fieldTags')}</span>\n              <input\n                value={tagsDraft}\n                onChange={event => setTagsDraft(event.target.value)}\n                placeholder=\"dev, prod\"\n              />\n            </label>\n            <label className={css.field}>\n              <span>{t('fieldCustom')}</span>\n              <textarea\n                value={fieldsDraft}\n                onChange={event => setFieldsDraft(event.target.value)}\n                rows={3}\n                placeholder=\"region=us-east-1&#10;team=infra\"\n              />\n            </label>\n          </div>\n          <div className={css.editorActions}>\n            <button type=\"button\" onClick={() => setEditor({ status: 'closed' })} disabled={busy}>{t('cancel')}</button>\n            <button type=\"button\" className={css.saveButton} onClick={() => void save()} disabled={busy}>{t('save')}</button>\n          </div>\n        </div>\n      )}\n    </section>\n  )\n}\n","/** Copy dictionaries for the Vault settings section. */\n\n/** English strings (the key-set source of truth for this pair). */\nexport const en = {\n  nav: 'Vault',\n  heading: 'Vault',\n  intro: 'Encrypted credentials stored on this machine.',\n  searchPlaceholder: 'Search title, username, email, host…',\n  loading: 'Loading…',\n  empty: 'No credentials yet. Add one to get started.',\n  emptyHint: 'Tip: you can ask the assistant to save an API key or token you share in chat — with auto-capture on it offers to store it for you. Bulk importing? Ask for vault_import_csv with a CSV file path.',\n  emptyHintReadonly: 'The vault is in readonly mode — credentials can be read but not added here. Switch accessMode to \"readwrite\" to enable writes.',\n  modeLabel: 'Access mode',\n  autoCaptureLabel: 'Auto-capture credentials from chat',\n  modeReadonly: 'Read-only',\n  modeAsk: 'Ask before writing',\n  modeAuto: 'Automatic read-write',\n  modeReadonlyHint: 'Read-only — mutations disabled',\n  modeAskHint: 'Prompt before writing — every add/update/delete asks you',\n  modeAutoHint: 'Automatic read-write — no per-call prompt',\n  autoCaptureOn: 'auto-capture on',\n  autoCaptureOff: 'auto-capture off',\n  clearSearch: 'Clear search',\n  entryCount: 'Entries',\n  reportTitle: 'Health & rotation',\n  recentActivity: 'Recent activity',\n  recentlyAdded: 'Recently added',\n  reportRotation: 'expired / due for rotation',\n  reportWeak: 'weak passwords',\n  reportReused: 'credentials reused across entries',\n  healthOk: 'vault healthy',\n  healthBackup: 'backup',\n  healthStrength: 'strength',\n  dueExpired: 'EXPIRED',\n  dueExpiring: 'expires in',\n  dueNow: 'rotation due',\n  showTrash: 'Trash',\n  hideTrash: 'Hide trash',\n  trashed: 'in trash',\n  trashEmpty: 'Trash is empty',\n  restore: 'Restore',\n  clearTrash: 'Empty trash',\n  restoreAll: 'Restore all',\n  clearTrashConfirm: 'Permanently delete ALL trashed entries? This cannot be undone.',\n  show: 'Show',\n  hide: 'Hide',\n  allKinds: 'All kinds',\n  allTags: 'All tags',\n  sortAlpha: 'Sort: A–Z',\n  sortRecent: 'Sort: recent',\n  highSensitivity: 'HIGH',\n  pinned: 'Pinned',\n  add: 'Add credential',\n  quickAdd: 'Quick add',\n  cancel: 'Cancel',\n  save: 'Save',\n  edit: 'Edit',\n  delete: 'Delete',\n  deleteConfirm: 'Delete this entry? This cannot be undone.',\n  copy: 'Copy',\n  copyPassword: 'Copy password',\n  copyCode: 'Copy code',\n  copied: 'Copied',\n  totp: 'Code',\n  fieldTitle: 'Title',\n  fieldKind: 'Kind',\n  fieldUsername: 'Username',\n  fieldEmail: 'Email',\n  fieldPhone: 'Phone',\n  fieldPassword: 'Password',\n  fieldHost: 'Host',\n  fieldPort: 'Port',\n  fieldApiKey: 'API key',\n  fieldSecret: 'Secret',\n  fieldAccessToken: 'Access token',\n  fieldRefreshToken: 'Refresh token',\n  fieldOtpSecret: 'OTP secret',\n  fieldUrl: 'URL',\n  fieldNotes: 'Notes',\n  fieldTags: 'Tags',\n  fieldIcon: 'Icon (emoji)',\n  fieldColor: 'Color',\n  fieldCustom: 'Custom fields (key=value per line)',\n  error: 'Something went wrong.',\n  kindLogin: 'Login',\n  kindSsh: 'SSH',\n  kindApiKey: 'API key',\n  kindSecret: 'Secret',\n  kindOauth: 'OAuth',\n  kindCustom: 'Custom',\n} as const\n\nexport type VaultLocaleKey = keyof typeof en\n\n/** Chinese strings (same keys as English). */\nexport const zh: Record<VaultLocaleKey, string> = {\n  nav: '凭据库',\n  heading: 'Vault 凭据库',\n  intro: '本机加密存储的凭据。',\n  searchPlaceholder: '搜索标题、用户名、邮箱、主机…',\n  loading: '加载中…',\n  empty: '还没有凭据，添加一条开始使用。',\n  emptyHint: '提示：你可以在对话中把 API Key 或 token 交给助手保存——开启自动捕获后，它会在你同意时帮你存入本库。批量导入？让助手调用 vault_import_csv 并给出 CSV 路径即可。',\n  emptyHintReadonly: '当前为只读模式——只能读取凭据，不能在此添加。将 accessMode 改为 \"readwrite\" 即可启用写入。',\n  modeLabel: '访问模式',\n  autoCaptureLabel: '自动捕获对话中的凭据',\n  modeReadonly: '只读',\n  modeAsk: '写入前询问',\n  modeAuto: '自动读写',\n  modeReadonlyHint: '只读 —— 变更已禁用',\n  modeAskHint: '写入前询问 —— 每次增/改/删都会征求你的确认',\n  modeAutoHint: '自动读写 —— 无需逐次确认',\n  autoCaptureOn: '自动捕获已开启',\n  autoCaptureOff: '自动捕获已关闭',\n  clearSearch: '清除搜索',\n  entryCount: '条目数',\n  reportTitle: '健康与轮换',\n  recentActivity: '最近活动',\n  recentlyAdded: '最近添加',\n  reportRotation: '已过期 / 待轮换',\n  reportWeak: '弱密码',\n  reportReused: '跨条目复用的凭据',\n  healthOk: '凭据库健康',\n  healthBackup: '备份',\n  healthStrength: '强度',\n  dueExpired: '已过期',\n  dueExpiring: '将于',\n  dueNow: '待轮换',\n  showTrash: '回收站',\n  hideTrash: '隐藏回收站',\n  trashed: '已删除',\n  trashEmpty: '回收站为空',\n  restore: '恢复',\n  clearTrash: '清空回收站',\n  restoreAll: '全部恢复',\n  clearTrashConfirm: '永久删除回收站中全部条目？此操作不可撤销。',\n  show: '显示',\n  hide: '隐藏',\n  allKinds: '全部类型',\n  allTags: '全部标签',\n  sortAlpha: '排序：A–Z',\n  sortRecent: '排序：最近',\n  highSensitivity: '高敏',\n  pinned: '已置顶',\n  add: '新增凭据',\n  quickAdd: '快速添加',\n  cancel: '取消',\n  save: '保存',\n  edit: '编辑',\n  delete: '删除',\n  deleteConfirm: '确定删除该条目？此操作不可撤销。',\n  copy: '复制',\n  copyPassword: '复制密码',\n  copyCode: '复制验证码',\n  copied: '已复制',\n  totp: '验证码',\n  fieldTitle: '标题',\n  fieldKind: '类型',\n  fieldUsername: '用户名',\n  fieldEmail: '邮箱',\n  fieldPhone: '手机号',\n  fieldPassword: '密码',\n  fieldHost: '主机',\n  fieldPort: '端口',\n  fieldApiKey: 'API 密钥',\n  fieldSecret: 'Secret',\n  fieldAccessToken: '访问令牌',\n  fieldRefreshToken: '刷新令牌',\n  fieldOtpSecret: 'TOTP 密钥',\n  fieldUrl: 'URL',\n  fieldNotes: '备注',\n  fieldTags: '标签',\n  fieldIcon: '图标（emoji）',\n  fieldColor: '颜色',\n  fieldCustom: '自定义字段（每行 key=value）',\n  error: '操作失败。',\n  kindLogin: '登录',\n  kindSsh: 'SSH',\n  kindApiKey: 'API 密钥',\n  kindSecret: 'Secret',\n  kindOauth: 'OAuth',\n  kindCustom: '自定义',\n}\n","/**\n * dsh-vault browser half: a Vault settings page managing encrypted\n * credentials — list, search, add, edit, delete, and copy — through the host\n * VaultGateway remote over the /api RPC channel.\n *\n * @module dsh-vault/client\n */\n\nimport type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client'\nimport type { ConnectionHandle } from '@deepseek-ai/dsh-api-remotes/client'\nimport type {} from '@deepseek-ai/dsh-client-locale/client'\nimport type {} from '@deepseek-ai/dsh-client-ui-settings/client'\nimport { VaultSection, type VaultSectionInjected } from './VaultSection.tsx'\nimport type { VaultSectionTypes } from './VaultSection.tsx'\nimport { en, zh, type VaultLocaleKey } from './locales.ts'\n\nexport type { VaultSectionInjected, VaultSectionProps } from './VaultSection.tsx'\nexport type { VaultSectionTypes } from './VaultSection.tsx'\nexport type { VaultLocaleKey } from './locales.ts'\n\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface LocaleNamespaceMap {\n    /** Vault settings page copy. */\n    'settings.vault': VaultLocaleKey\n  }\n}\n\n/** Dictionary namespace owned by this plugin. */\nexport const NS = 'settings.vault'\n\n/** Services required by the Settings registration and the RPC face. */\nexport const inject = ['slots', 'locale', 'connection']\n\n/**\n * Register the Vault settings section once the `settings.section` declaration\n * is on the ledger. The section talks to the host through the connection RPC\n * channel (endpoints `vault/*` served by the host VaultGateway remote).\n */\nexport function apply(ctx: ClientContext): void {\n  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-vault: dictionaries')\n\n  const t = ctx.locale.bind(NS)\n  const connection = ctx.get('connection') as ConnectionHandle\n\n  /** Invoke one host vault remote and normalize the RPC envelope. */\n  async function invoke<T>(method: string, args: Record<string, unknown> = {}): Promise<T> {\n    const result = await connection.rpc.call('/api', `vault/${method}`, { args })\n    if (!result.ok) {\n      throw new Error(`vault.${method} failed: ${result.error.code}: ${result.error.message}`)\n    }\n    return result.value as T\n  }\n\n  const injected = (): VaultSectionInjected => ({\n    t,\n    config: () => invoke<VaultSectionTypes['config']>('config'),\n    setAccessMode: (mode) => invoke<VaultSectionTypes['config']>('setAccessMode', { mode }),\n    setAutoCapture: (enabled) => invoke<VaultSectionTypes['config']>('setAutoCapture', { enabled }),\n    list: () => invoke<{ entries: VaultSectionTypes['entries'] }>('list').then(r => r.entries),\n    search: (query, limit) => invoke<{ entries: VaultSectionTypes['entries'] }>('search', { query, limit: limit ?? 50 }).then(r => r.entries),\n    get: (id) => invoke<{ found: boolean; entry?: VaultSectionTypes['fullEntry'] }>('get', { id }),\n    add: (patch) => invoke<VaultSectionTypes['summaryEntry']>('add', { patch }),\n    update: (id, patch) => invoke<{ found: boolean; entry?: VaultSectionTypes['summaryEntry'] }>('update', { id, patch }),\n    remove: (id) => invoke<{ deleted: boolean }>('delete', { id }),\n    trash: () => invoke<{ entries: VaultSectionTypes['entries'] }>('trash').then(r => r.entries),\n    rotation: () => invoke<{ entries: unknown[] }>('rotation').then(r => r.entries),\n    history: () => invoke<{ events: unknown[] }>('history').then(r => r.events),\n    stats: () => invoke<Record<string, unknown>>('stats'),\n    recent: () => invoke<{ entries: unknown[] }>('recent').then(r => r.entries),\n    backupStatus: () => invoke<{ daysSinceBackup: number; backups: number }>('backupStatus'),\n    health: () => invoke<{ weak: unknown[]; reused: unknown[]; strength: { weak: number; fair: number; strong: number } }>('health'),\n    restore: (id) => invoke<{ restored: boolean }>('restore', { id }),\n    undeleteAll: () => invoke<{ restored: number }>('undeleteAll'),\n    totp: (id) => invoke<{ code: string; label?: string; secondsRemaining: number }>('totp', { id }),\n  })\n\n  ctx.slots.inject('settings.section', () => ctx.slots.register({\n    name: 'settings.section',\n    id: 'vault',\n    order: 30,\n    label: () => t('nav'),\n    inject: injected,\n  }, VaultSection))\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoGA,MAAM,cAAuE;GAC3E;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAY,OAAO;GAAgB;GAC1C;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAY,OAAO;GAAgB;GAC1C;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAU,OAAO;GAAc;GACtC;IAAE,KAAK;IAAU,OAAO;GAAc;GACtC;IAAE,KAAK;IAAe,OAAO;GAAmB;GAChD;IAAE,KAAK;IAAgB,OAAO;GAAoB;GAClD;IAAE,KAAK;IAAa,OAAO;GAAiB;GAC5C;IAAE,KAAK;IAAO,OAAO;GAAW;GAChC;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAS,OAAO;GAAa;EACtC;EAEA,MAAM,YAA4C;GAChD,OAAO;GACP,KAAK;GACL,WAAW;GACX,QAAQ;GACR,OAAO;GACP,QAAQ;EACV;EAYA,SAAS,YAAwB;GAC/B,OAAO;IAAE,OAAO;IAAI,MAAM;IAAS,UAAU;IAAI,OAAO;IAAI,OAAO;IAAI,UAAU;IAAI,MAAM;IAAI,MAAM;IAAI,MAAM;IAAI,OAAO;GAAG;EAC/H;;EAGA,SAAgB,aAAa,OAAqC;GAChE,MAAM,EAAE,GAAG,QAAQ,eAAe,gBAAgB,MAAM,QAAQ,KAAK,KAAK,QAAQ,QAAQ,OAAO,UAAU,QAAQ,SAAS,OAAO,cAAc,QAAQ,SAAS,aAAa,SAAS;GACxL,MAAM,YAAA,GAAA,MAAA,MAAA,CAAiB;GACvB,MAAM,CAAC,OAAO,aAAA,GAAA,MAAA,SAAA,CAAqB,EAAE;GACrC,MAAM,CAAC,OAAO,aAAA,GAAA,MAAA,SAAA,CAAgC,EAAE,QAAQ,UAAU,CAAC;GACnE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAmC,EAAE,QAAQ,SAAS,CAAC;GACtE,MAAM,CAAC,MAAM,YAAA,GAAA,MAAA,SAAA,CAAgC,UAAU,CAAC;GACxD,MAAM,CAAC,MAAM,YAAA,GAAA,MAAA,SAAA,CAAoB,KAAK;GACtC,MAAM,CAAC,SAAS,eAAA,GAAA,MAAA,SAAA,CAAsC,IAAI;GAC1D,MAAM,CAAC,UAAU,gBAAA,GAAA,MAAA,SAAA,CAAuC,IAAI;GAC5D,MAAM,CAAC,SAAS,eAAA,GAAA,MAAA,SAAA,CAA+C,CAAC,CAAC;GACjE,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,SAAA,CAAyB,EAAE;GAC7C,MAAM,CAAC,aAAa,mBAAA,GAAA,MAAA,SAAA,CAA2B,EAAE;GACjD,MAAM,CAAC,UAAU,gBAAA,GAAA,MAAA,SAAA,CAAiD,CAAC,CAAC;GACpE,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAA0B,EAAE;GAC/C,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,SAAA,CAAyB,EAAE;GAC7C,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAAyC,IAAI;GAChE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAA0C,OAAO;GAChE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAgG,IAAI;GACnH,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,SAAA,CAAyB,KAAK;GAChD,MAAM,CAAC,cAAc,oBAAA,GAAA,MAAA,SAAA,CAAgD,CAAC,CAAC;GACvE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAA2J,IAAI;GAC9K,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAyE,CAAC,CAAC;GAC1F,MAAM,CAAC,cAAc,oBAAA,GAAA,MAAA,SAAA,CAA4D,CAAC,CAAC;GACnF,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAA0D,IAAI;GACjF,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAA+E,IAAI;GACtG,MAAM,CAAC,eAAe,qBAAA,GAAA,MAAA,SAAA,CAA6D,CAAC,CAAC;GAErF,MAAM,WAAW,QAAQ,eAAe;GAExC,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,UAAU;IACd,OAAY,CAAC,CAAC,MACZ,UAAS;KAAE,IAAI,SAAS,UAAU,KAAK;IAAE,SACnC,CAAiD,CACzD;IACA,aAAa;KAAE,UAAU;IAAM;GACjC,GAAG,CAAC,MAAM,CAAC;GAEX,MAAM,WAAA,GAAA,MAAA,QAAA,OAAwB,YAAY;IACxC,SAAS,EAAE,QAAQ,UAAU,CAAC;IAC9B,IAAI;KAIF,SAAS;MAAE,QAAQ;MAAS,SAHZ,MAAM,KAAK,CAAC,CAAC,WAAW,IACpC,MAAM,KAAK,IACX,MAAM,OAAO,MAAM,KAAK,CAAC;KACO,CAAC;IACvC,QAAQ;KACN,SAAS,EAAE,QAAQ,QAAQ,CAAC;IAC9B;GACF,GAAG;IAAC;IAAM;IAAQ;GAAK,CAAC;GAExB,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,UAAU;IACd,MAAM,QAAQ,OAAO,iBAAiB;KACpC,QAAa,CAAC,CAAC,WACP,CAAyC,SACzC;MAAE,IAAI,SAAS,SAAS,EAAE,QAAQ,QAAQ,CAAC;KAAE,CACrD;IACF,GAAG,GAAG;IACN,aAAa;KAAE,UAAU;KAAO,OAAO,aAAa,KAAK;IAAE;GAE7D,GAAG,CAAC,OAAO,CAAC;GAIZ,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,UAAU;IACd,MAAM,aAAmB;KACvB,QAAa,IAAI;MACf,MAAM,CAAC,CAAC,YAAY,IAAI;MACxB,aAAa,CAAC,CAAC,YAAY,IAAI;MAC/B,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;MACzB,OAAO,CAAC,CAAC,YAAY,IAAI;MACzB,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;KACzB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,IAAI,QAAQ;MACjC,IAAI,CAAC,SAAS;MACd,IAAI,OAAO,MAAM,cAAc,EAA6B;MAC5D,IAAI,OAAO,MAAM,cAAc,EAAE;MACjC,UAAU;OAAE,UAAW,OAAO,CAAC;OAAiB,MAAQ,IAAI,QAAQ,CAAC;OAAkB,QAAU,IAAI,UAAU,CAAC;OAAkB,UAAW,IAAI,YAAY;MAA+D,CAAC;MAC7N,MAAM,MAAyD,CAAC;MAChE,KAAK,MAAM,QAAS,OAAO,CAAC,GAC1B,IAAI,KAAK,OAAO,KAAA,KAAa,KAAK,QAAQ,KAAA,GAAW,IAAI,KAAK,MAAM;OAAE,KAAK,KAAK;OAAK,UAAU,KAAK,YAAY;MAAE;MAEpH,UAAU,GAAG;MACb,iBAAkB,MAAM,CAAC,CAAoC;KAC/D,CAAC;IACH;IACA,KAAK;IACL,MAAM,gBAAsB;KAAE,KAAK;IAAE;IACrC,OAAO,iBAAiB,SAAS,OAAO;IACxC,aAAa;KAAE,UAAU;KAAO,OAAO,oBAAoB,SAAS,OAAO;IAAE;GAC/E,GAAG;IAAC;IAAO;IAAc;IAAU;IAAQ;GAAM,CAAC;;GAGlD,SAAS,cAAoB;IAC3B,QAAQ,UAAU,CAAC;IACnB,aAAa,EAAE;IACf,eAAe,EAAE;IACjB,WAAW,IAAI;IACf,UAAU,EAAE,QAAQ,WAAW,CAAC;GAClC;;GAGA,eAAe,UAAU,IAA2B;IAClD,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,IAAI;KACF,MAAM,SAAS,MAAM,IAAI,EAAE;KAC3B,IAAI,CAAC,OAAO,SAAS,OAAO,UAAU,KAAA,GAAW;MAC/C,WAAW,EAAE,OAAO,CAAC;MACrB;KACF;KACA,MAAM,QAAQ,OAAO;KACrB,QAAQ;MACN,OAAO,MAAM,SAAS;MACtB,MAAM,MAAM,QAAQ;MACpB,UAAU,MAAM,YAAY;MAC5B,OAAO,MAAM,SAAS;MACtB,OAAO,MAAM,SAAS;MACtB,UAAU,MAAM,YAAY;MAC5B,MAAM,MAAM,QAAQ;MACpB,MAAM,MAAM,QAAQ;MACpB,YAAY,MAAM,cAAc;MAChC,QAAQ,MAAM,UAAU;MACxB,QAAQ,MAAM,UAAU;MACxB,aAAa,MAAM,eAAe;MAClC,cAAc,MAAM,gBAAgB;MACpC,WAAW,MAAM,aAAa;MAC9B,KAAK,MAAM,OAAO;MAClB,OAAO,MAAM,SAAS;MACtB,MAAM,MAAM,QAAQ;MACpB,OAAO,MAAM,SAAS;KACxB,CAAC;KACD,cAAc,MAAM,QAAQ,CAAC,EAAA,CAAG,KAAK,IAAI,CAAC;KAC1C,eAAe,MAAM,WAAW,KAAA,IAAY,OAAO,QAAQ,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE;KAC7H,UAAU;MAAE,QAAQ;MAAW;KAAM,CAAC;IACxC,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,eAAe,OAAsB;IACnC,IAAI,CAAC,KAAK,MAAM,KAAK,GAAG;KACtB,WAAW,EAAE,OAAO,CAAC;KACrB;IACF;IACA,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,IAAI;KACF,MAAM,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAO,MAAK,EAAE,SAAS,CAAC;KAC7E,MAAM,SAAiC,CAAC;KACxC,KAAK,MAAM,QAAQ,YAAY,MAAM,IAAI,GAAG;MAC1C,MAAM,UAAU,KAAK,KAAK;MAC1B,IAAI,QAAQ,WAAW,GAAG;MAC1B,MAAM,KAAK,QAAQ,QAAQ,GAAG;MAC9B,IAAI,MAAM,GAAG;MACb,OAAO,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,KAAK,QAAQ,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK;KACnE;KACA,MAAM,QAAoB;MACxB,OAAO,KAAK,MAAM,KAAK;MACvB,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;MACjE,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;MACjE,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;MACvE,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;MAC3D,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;MAC3D,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;MAC1E,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;MAC7E,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;MACpE,GAAI,KAAK,QAAQ,KAAA,IAAY,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;MAClD,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MAGxD;MACA;KACF;KACA,IAAI,OAAO,WAAW,YACpB,MAAM,IAAI,KAAuC;UAC5C,IAAI,OAAO,WAAW,WAC3B,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK;KAErC,UAAU,EAAE,QAAQ,SAAS,CAAC;KAC9B,MAAM,QAAQ;IAChB,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,eAAe,YAAY,IAA2B;IACpD,IAAI,CAAC,OAAO,QAAQ,EAAE,eAAe,CAAC,GAAG;IACzC,QAAQ,IAAI;IACZ,IAAI;KACF,MAAM,OAAO,EAAE;KACf,MAAM,QAAQ;IAChB,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,eAAe,UAAU,IAAY,OAA8B;IACjE,IAAI;KACF,MAAM,UAAU,UAAU,UAAU,KAAK;IAC3C,QAAQ;KAEN,MAAM,WAAW,SAAS,cAAc,UAAU;KAClD,SAAS,QAAQ;KACjB,SAAS,KAAK,YAAY,QAAQ;KAClC,SAAS,OAAO;KAChB,SAAS,YAAY,MAAM;KAC3B,SAAS,OAAO;IAClB;IACA,YAAY,EAAE;IACd,OAAO,iBAAiB,YAAY,IAAI,GAAG,IAAI;GACjD;;GAGA,eAAe,SAAS,IAA2B;IACjD,QAAQ,IAAI;IACZ,IAAI;KACF,MAAM,SAAS,MAAM,KAAK,EAAE;KAC5B,YAAW,cAAa;MAAE,GAAG;OAAW,KAAK,GAAG,OAAO,KAAK,IAAI,OAAO,iBAAiB;KAAI,EAAE;IAChG,QAAQ;KACN,YAAW,cAAa;MAAE,GAAG;OAAW,KAAK,EAAE,OAAO;KAAE,EAAE;IAC5D,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,SAAS,SAAS,MAAuB;IACvC,QAAQ,QAAQ,SAAhB;KACE,KAAK,OAAO,OAAO;KACnB,KAAK,WAAW,OAAO;KACvB,KAAK,SAAS,OAAO;KACrB,KAAK,UAAU,OAAO;KACtB,KAAK,UAAU,OAAO;KACtB,SAAS,OAAO;IAClB;GACF;GAEA,SAAS,aAAa,OAAiC;IASrD,OARc;KACZ,MAAM,SAAS,KAAA,IAAY,EAAE,UAAU,MAAM,SAAS,YAAY,IAAI,EAAE,WAAW;KACnF,MAAM;KACN,MAAM;KACN,MAAM;KACN,MAAM,SAAS,KAAA,IAAY,GAAG,MAAM,OAAO,MAAM,SAAS,KAAA,IAAY,IAAI,MAAM,SAAS,OAAO,KAAA;KAChG,MAAM;IACR,CAAC,CAAC,QAAQ,UAA2B,UAAU,KAAA,KAAa,MAAM,SAAS,CAChE,CAAC,CAAC,KAAK,KAAK;GACzB;GAEA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,WAAD;IAAS,WAAWA,gCAAI;IAAS,mBAAgB;cAAjD;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,IAAG;gBAAiB,EAAE,SAAS;KAAM,CAAA;KACzC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAWA,gCAAI;gBAAQ,EAAE,OAAO;KAAK,CAAA;KAExC,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;QAAO,WAAWA,gCAAI;kBAAtB;SACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,WAAU;oBAAW,EAAE,mBAAmB;SAAQ,CAAA;SACxD,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,IAAI;UACJ,MAAK;UACL,aAAa,EAAE,mBAAmB;UAClC,OAAO;UACP,WAAU,UAAS,SAAS,MAAM,OAAO,KAAK;SAC/C,CAAA;SACA,MAAM,SAAS,KACd,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,WAAWA,gCAAI;UAAa,eAAe,SAAS,EAAE;UAAG,cAAY,EAAE,aAAa;oBAAG;SAAS,CAAA;QAEnH;;OACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QAAQ,WAAWA,gCAAI;QAAY,OAAO;QAAY,WAAU,MAAK,cAAc,EAAE,OAAO,KAAK;QAAG,cAAY,EAAE,WAAW;kBAA7H,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,OAAM;mBAAI,EAAE,UAAU;QAAU,CAAA,GACvC,OAAO,QAAQ,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,SACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAA2B;mBAAQ,EAAE,GAAG;QAAU,GAArC,KAAqC,CACnD,CACK;;OACR,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QAAQ,WAAWA,gCAAI;QAAY,OAAO;QAAW,WAAU,MAAK,aAAa,EAAE,OAAO,KAAK;QAAG,cAAY,EAAE,WAAW;kBAA3H,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,OAAM;mBAAI,EAAE,SAAS;QAAU,CAAA,GACtC,CAAC,GAAG,IAAI,IAAI,MAAM,WAAW,UAAU,MAAM,QAAQ,SAAQ,MAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAI,QACjG,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAkB,OAAO;mBAAM;QAAY,GAA9B,GAA8B,CAC5C,CACK;;OACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QACE,MAAK;QACL,WAAWA,gCAAI;QACf,eAAe,UAAU,WAAW,UAAU,WAAW,OAAO;kBAChE,WAAW,UAAU,EAAE,WAAW,IAAI,EAAE,YAAY;OAAU,CAAA;OAChE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAW,SAAS;QAAa,UAAU,QAAQ;kBAAxF,CAAkG,MAC7F,EAAE,KAAK,CACJ;;MACL;;KAEJ,WAAW,QACV,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;QAAO,WAAWA,gCAAI;kBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,WAAW,EAAQ,CAAA,GAC5B,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;SACE,OAAO,OAAO;SACd,UAAU;SACV,WAAU,UAAS;UACjB,MAAM,OAAO,MAAM,OAAO;UAC1B,QAAQ,IAAI;UACZ,WAAW,IAAI;UACf,cAAmB,IAAI,CAAC,CAAC,MACvB,UAAS;WAAE,UAAU,KAAK;WAAG,QAAQ,KAAK;UAAE,SACtC;WAAE,WAAW,EAAE,OAAO,CAAC;WAAG,QAAQ,KAAK;UAAE,CACjD;SACF;mBAXF;UAaE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAY,EAAE,cAAc;UAAU,CAAA;UACpD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAO,EAAE,SAAS;UAAU,CAAA;UAC1C,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAQ,EAAE,UAAU;UAAU,CAAA;SACtC;UACH;;OACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;QAAO,WAAWA,gCAAI;kBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,kBAAkB,EAAQ,CAAA,GACnC,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SACE,MAAK;SACL,SAAS,OAAO;SAChB,UAAU;SACV,WAAU,UAAS;UACjB,MAAM,OAAO,MAAM,OAAO;UAC1B,QAAQ,IAAI;UACZ,WAAW,IAAI;UACf,eAAoB,IAAI,CAAC,CAAC,MACxB,UAAS;WAAE,UAAU,KAAK;WAAG,QAAQ,KAAK;UAAE,SACtC;WAAE,WAAW,EAAE,OAAO,CAAC;WAAG,QAAQ,KAAK;UAAE,CACjD;SACF;QACD,CAAA,CACI;;OACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAW,OAAO,eAAe,aAAaA,gCAAI,eAAe,OAAO,eAAe,QAAQA,gCAAI,UAAUA,gCAAI;kBAApH,CACG,OAAO,eAAe,aACnB,EAAE,kBAAkB,IACpB,OAAO,eAAe,QACpB,EAAE,aAAa,IACf,EAAE,cAAc,GACrB,OAAO,cAAc,MAAM,EAAE,eAAe,MAAM,MAAM,EAAE,gBAAgB,GAC1E;;MACA;;KAGN,YAAY,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,MAAK;MAAQ,WAAWA,gCAAI;gBAAQ;KAAW,CAAA;KAEtE,MAAM,WAAW,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAWA,gCAAI;gBAAS,EAAE,SAAS;KAAK,CAAA;KACzE,MAAM,WAAW,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,MAAK;MAAQ,WAAWA,gCAAI;gBAAQ,EAAE,OAAO;KAAK,CAAA;KACjF,MAAM,WAAW,WAAW,MAAM,QAAQ,WAAW,KACpD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAQ,EAAE,OAAO;OAAK,CAAA;OACxC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAY,WAAW,EAAE,mBAAmB,IAAI,EAAE,WAAW;OAAK,CAAA;OACnF,CAAC,YACA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAW,SAAS;kBAAc,EAAE,UAAU;OAAU,CAAA;MAE5F;;KAGN,cAAc,SAAS,KACtB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAWA,gCAAI;iBAAc,EAAE,eAAe;MAAK,CAAA,GACrD,cAAc,KAAK,GAAG,MACrB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAW,WAAWA,gCAAI;iBAAa,OAAO,EAAE,SAAS,EAAE;MAAK,GAAxD,CAAwD,CACjE,CACE;;KAGN,aAAa,SAAS,KACrB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAWA,gCAAI;iBAAc,EAAE,gBAAgB;MAAK,CAAA,GACtD,aAAa,KAAK,IAAI,MACrB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;OAAW,WAAWA,gCAAI;iBAA1B;QACG,OAAO,GAAG,UAAU,EAAE;QAAE;QAAI,OAAO,GAAG,SAAS,GAAG,MAAM,EAAE;OAC1D;SAFK,CAEL,CACJ,CACE;;KAGN,WAAW,SAAS,OAAO,SAAS,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,OAAO,OAAO,SAAS,MAClG,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAc,EAAE,aAAa;OAAK,CAAA;OACnD,OAAO,SAAS,SAAS,KACxB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAlB;SAA+B,EAAE,gBAAgB;SAAE;SAAG,OAAO,SAAS;QAAU;;OAEjF,OAAO,KAAK,SAAS,KACpB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAlB;SAA+B,EAAE,YAAY;SAAE;SAAG,OAAO,KAAK;QAAU;;OAEzE,OAAO,OAAO,SAAS,KACtB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAlB;SAA+B,EAAE,cAAc;SAAE;SAAG,OAAO,OAAO;QAAU;;MAE3E;;KAGN,MAAM,WAAW,YAAY,MAAM,QAAQ,SAAS,KAAK,aAAa,SAAS,MAC9E,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAWA,gCAAI;MACf,eAAe;OACb,IAAI,CAAC,WAAW,MAAW,CAAC,CAAC,KAAK,eAAe;OACjD,aAAa,CAAC,SAAS;MACzB;gBANF,CAOE,YAAY,EAAE,WAAW,IAAI,EAAE,WAAW,GAAG,aAAa,SAAS,IAAI,KAAK,aAAa,OAAO,KAAK,EAAW;;KAGnH,aACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;MAAI,WAAWA,gCAAI;gBAAnB,CACG,aAAa,KAAI,UAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;OAAmB,WAAWA,gCAAI;iBAAlC,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAWA,gCAAI;kBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAWA,gCAAI;mBAAQ,MAAM;QAAY,CAAA,GAC/C,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAWA,gCAAI;mBAAW,EAAE,SAAS;QAAQ,CAAA,CAChD;WACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QAAK,WAAWA,gCAAI;kBAClB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,eAAe;UAAE,QAAa,MAAM,EAAE,CAAC,CAAC,WAAW;WAAE,MAAW,CAAC,CAAC,KAAK,eAAe;WAAG,QAAa;UAAE,CAAC;SAAE;SAC3G,UAAU,QAAQ;mBAClB,EAAE,SAAS;QAAU,CAAA;OACpB,CAAA,CACH;SAZK,MAAM,EAYX,CACL,GACA,aAAa,WAAW,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAWA,gCAAI;iBAAQ,EAAE,YAAY;MAAK,CAAA,CACzE;;KAEL,aAAa,aAAa,SAAS,KAClC,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAWA,gCAAI;MACf,eAAe;OACb,QAAQ,IAAI;OACZ,YAAiB,CAAC,CAAC,WAAW;QAC5B,MAAW,CAAC,CAAC,KAAK,eAAe;QACjC,QAAa;QACb,QAAQ,KAAK;OACf,SAAS,QAAQ,KAAK,CAAC;MACzB;MACA,UAAU,QAAQ;gBAClB,EAAE,YAAY;KAAU,CAAA,GAC1B,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAWA,gCAAI;MACf,eAAe;OACb,IAAI,CAAC,OAAO,QAAQ,EAAE,mBAAmB,CAAC,GAAG;OAC7C,QAAQ,IAAI;OACZ,QAAa,IAAI,aAAa,KAAI,MAAK,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;QAC/D,MAAW,CAAC,CAAC,KAAK,eAAe;QACjC,QAAa;QACb,QAAQ,KAAK;OACf,SAAS,QAAQ,KAAK,CAAC;MACzB;MACA,UAAU,QAAQ;gBAClB,EAAE,YAAY;KAAU,CAAA,CAC1B,EAAA,CAAA;KAGH,MAAM,WAAW,WAAW,MAAM,QAAQ,SAAS,KAClD,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,WAAWA,gCAAI;gBAChB,MAAM,QAAQ,QAAO,WAAU,eAAe,MAAM,MAAM,SAAS,gBAAgB,cAAc,OAAO,MAAM,QAAQ,CAAC,EAAA,CAAG,SAAS,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,MAAM,WAAW,UAAU,EAAE,MAAM,cAAc,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAI,UAAS;OACpO,MAAM,OAAO,QAAQ,MAAM;OAC3B,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;QAAmB,WAAW,GAAGA,gCAAI,MAAM,OAAO,MAAM,QAAQ,KAAA,IAAY,IAAI,OAAO,MAAM,GAAG,CAAE,QAAQ,YAAYA,gCAAI,aAAaA,gCAAI,WAAW;kBAAtJ;SACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;UAAK,WAAWA,gCAAI;UAAS,eAAe,cAAc,eAAe,MAAM,KAAK,OAAO,MAAM,EAAE;oBAAnG;WACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAArB;aACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAWA,gCAAI;wBAAW,SAAS,MAAM,IAAI;aAAQ,CAAA;aACzD,MAAoD,YACpD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAWA,gCAAI;cAAS,OAAO,EAAE,QAAQ;wBAAG;aAAO,CAAA;aAE1D,MAAM;aACL,MAAsD,gBAAgB,UACtE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAWA,gCAAI;wBAAY,EAAE,iBAAiB;aAAQ,CAAA;aAE7D,OAAO,MAAM,QAAQ,KAAA,KACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAW,GAAGA,gCAAI,SAAS,GAAG,OAAO,MAAM,GAAG,CAAE,QAAQ,YAAYA,gCAAI,cAAcA,gCAAI;wBAC7F,OAAO,MAAM,GAAG,CAAE,QAAQ,YAAY,EAAE,YAAY,IAAI,OAAO,MAAM,GAAG,CAAE,QAAQ,SAAS,GAAG,EAAE,aAAa,EAAE,GAAG,OAAO,MAAM,GAAG,CAAE,SAAS,KAAK,EAAE,QAAQ;aACzJ,CAAA;YAEJ;;WACN,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAAW,aAAa,KAAK;WAAQ,CAAA;WACzD,SAAS,KAAA,KAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAAO;WAAW,CAAA;UAC3D;;SACJ,eAAe,MAAM,MACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;UAAK,WAAWA,gCAAI;oBACjB,OAAO,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM,OAAiC,KAAA,CAAS,CAAC,CAAC,KAAK,CAAC,GAAG,OAChI,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;WAAc,WAAWA,gCAAI;qBAA7B;YACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD,EAAA,UAAS,EAAU,CAAA;YAAC;YAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC;WAC7D;aAFK,CAEL,CACP;SACE,CAAA;SAEP,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;UAAK,WAAWA,gCAAI;oBAApB;WACG,aAAa,MAAM,MAAM,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAAS,EAAE,QAAQ;WAAQ,CAAA;WAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YACE,MAAK;YACL,eAAe,KAAK,UAAU,MAAM,IAAI,MAAM,YAAY,MAAM,KAAK;YACrE,UAAU;sBACV,EAAE,MAAM;WAAU,CAAA;WACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YACE,MAAK;YACL,eAAe;aACb,QAAQ,IAAI;aACZ,IAAS,MAAM,EAAE,CAAC,CAAC,MAAK,MAAK;cAC3B,IAAI,EAAE,SAAS,EAAE,OAAO,UAAU,UAAe,MAAM,IAAI,EAAE,MAAM,QAAQ;cAC3E,QAAQ,KAAK;aACf,SAAS,QAAQ,KAAK,CAAC;YACzB;YACA,UAAU,QAAQ;sBAClB,EAAE,cAAc;WAAU,CAAA;WAC5B,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YAAQ,MAAK;YAAS,eAAe,KAAK,SAAS,MAAM,EAAE;YAAG,UAAU;sBAAO,EAAE,MAAM;WAAU,CAAA;WAChG,SAAS,KAAA,KACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YAAQ,MAAK;YAAS,eAAe,KAAK,UAAU,MAAM,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,EAAG;YAAG,UAAU;sBAAO,EAAE,UAAU;WAAU,CAAA;WAE7H,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YAAQ,MAAK;YAAS,eAAe,KAAK,UAAU,MAAM,EAAE;YAAG,UAAU,QAAQ;sBAAW,EAAE,MAAM;WAAU,CAAA;WAC9G,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YACE,MAAK;YACL,WAAWA,gCAAI;YACf,eAAe,KAAK,YAAY,MAAM,EAAE;YACxC,UAAU,QAAQ;sBAClB,EAAE,QAAQ;WAAU,CAAA;UACnB;;QACH;UA3DK,MAAM,EA2DX;MAER,CAAC;KACC,CAAA;KAGL,MAAM,WAAW,WAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACG,eAAe,QAAQ,OAAO,WAAW,UAAU,YAClD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAWA,gCAAI;kBAArB;SAA6B,EAAE,YAAY;SAAE;SAAG,OAAO,WAAW,KAAK;QAAQ;;OAEhF,eAAe,QAAQ,OAAO,WAAW,aAAa,YACrD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAWA,gCAAI;kBAArB,CAA4B,UAAO,OAAO,WAAW,QAAQ,CAAQ;;OAEtE,eAAe,QAAQ,OAAO,WAAW,oBAAoB,YAC5D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAWA,gCAAI;kBAArB;SAA6B,EAAE,iBAAiB;SAAE;SAAG,OAAO,WAAW,eAAe;QAAQ;;OAE/F,WAAW,QAAQ,OAAO,aAAa,QACtC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAG,OAAO,SAAS,OAAO,IAAIA,gCAAI,cAAcA,gCAAI;kBAAlF;SACG,EAAE,gBAAgB;SAAE;SAAG,OAAO,SAAS;SAAK;SAAG,OAAO,SAAS;SAAK;SAAG,OAAO,SAAS;SAAO;QAC3F;;OAEP,WAAW,QAAQ,OAAO,SAAS,SAAS,KAC3C,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAArC;SAAmD,EAAE,gBAAgB;SAAE;SAAG,OAAO,SAAS;QAAa;;OAExG,WAAW,QAAQ,OAAO,KAAK,SAAS,KACvC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAArC;SAAqD,EAAE,YAAY;SAAE;SAAG,OAAO,KAAK;QAAa;;OAElG,WAAW,QAAQ,OAAO,OAAO,SAAS,KACzC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAArC;SAAqD,EAAE,cAAc;SAAE;SAAG,OAAO,OAAO;QAAa;;OAEtG,WAAW,QAAQ,OAAO,SAAS,WAAW,KAAK,OAAO,KAAK,WAAW,KAAK,OAAO,OAAO,WAAW,KACvG,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAAY,EAAE,UAAU;OAAQ,CAAA;OAEtE,eAAe,QAAQ,WAAW,mBAAmB,KACpD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAG,WAAW,kBAAkB,KAAKA,gCAAI,cAAc,WAAW,kBAAkB,IAAIA,gCAAI,YAAY;kBAAtI;SACG,EAAE,cAAc;SAAE;SAAG,WAAW;SAAgB;QAC7C;;MAEL;;KAEN,MAAM,WAAW,WAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAWA,gCAAI;gBAAlB;OACG,EAAE,YAAY;OAAE;OAAG,MAAM,QAAQ;OACjC,eAAe,QAAQ,OAAO,WAAW,aAAa,YAAY,YAAY,OAAO,WAAW,QAAQ;OACxG,eAAe,QAAQ,OAAO,WAAW,oBAAoB,YAAY,MAAM,EAAE,iBAAiB,EAAE,IAAI,OAAO,WAAW,eAAe;OACzI,eAAe,QAAQ,WAAW,mBAAmB,KAAK,cAAc,WAAW,gBAAgB;OACnG,eAAe,QAAQ,OAAO,WAAW,UAAU,YAAY,WAAW,UAAU,QAChF,OAAO,KAAK,WAAW,KAAgC,CAAC,CAAC,SAAS,KAClE,YAAY,OAAO,QAAQ,WAAW,KAAgC,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG;MAC1H;;KAGJ,OAAO,WAAW,YACjB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;MAAQ,MAAK;MAAS,cAAY,OAAO,WAAW,aAAa,EAAE,KAAK,IAAI,EAAE,MAAM;gBAAxG,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAWA,gCAAI;iBAApB;QACG,YAAY,KAAI,UACf,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;SAAuB,WAAWA,gCAAI;mBAAtC,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,MAAM,KAAK,EAAQ,CAAA,GAC3B,MAAM,QAAQ,SACb,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UACE,OAAO,KAAK,QAAQ;UACpB,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;WAAU,MAAM,MAAM,OAAO;UAAM,EAAE;oBAEjF,OAAO,QAAQ,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,SACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAA2B;qBAAQ,EAAE,GAAG;UAAU,GAArC,KAAqC,CACnD;SACK,CAAA,IACN,MAAM,QAAQ,UAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,OAAO,KAAK,SAAS;UACrB,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;WAAU,OAAO,MAAM,OAAO;UAAM,EAAE;SACpF,CAAA,IACC,MAAM,QAAQ,cAAc,MAAM,QAAQ,eAAe,MAAM,QAAQ,YACtE,MAAM,QAAQ,YAAY,MAAM,QAAQ,iBAAiB,MAAM,QAAQ,kBACvE,MAAM,QAAQ,eACjB,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;UAAM,WAAWA,gCAAI;oBAArB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;WACE,MAAM,SAAS,MAAM,OAAO,SAAS;WACrC,OAAQ,KAAK,MAAM,QAA+B;WAClD,WAAU,UAAS,SAAQ,cAAa;YAAE,GAAG;aAAW,MAAM,MAAM,MAAM,OAAO;WAAM,EAAE;UAC1F,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WACE,MAAK;WACL,WAAWA,gCAAI;WACf,eAAe,aAAY,cAAa;YAAE,GAAG;aAAW,MAAM,MAAM,CAAC,SAAS,MAAM;WAAK,EAAE;qBAC3F,SAAS,MAAM,OAAO,EAAE,MAAM,IAAI,EAAE,MAAM;UAAU,CAAA,CAClD;cAEN,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,MAAK;UACL,OAAQ,KAAK,MAAM,QAA+B;UAClD,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;YAAW,MAAM,MAAM,MAAM,OAAO;UAAM,EAAE;SAC1F,CAAA,CAEE;WAtCK,MAAM,GAsCX,CACR;QACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;SAAO,WAAWA,gCAAI;mBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,WAAW,EAAQ,CAAA,GAC5B,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,OAAO;UACP,WAAU,UAAS,aAAa,MAAM,OAAO,KAAK;UAClD,aAAY;SACb,CAAA,CACI;;QACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;SAAO,WAAWA,gCAAI;mBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,aAAa,EAAQ,CAAA,GAC9B,iBAAA,GAAA,kBAAA,IAAA,CAAC,YAAD;UACE,OAAO;UACP,WAAU,UAAS,eAAe,MAAM,OAAO,KAAK;UACpD,MAAM;UACN,aAAY;SACb,CAAA,CACI;;OACJ;UACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAWA,gCAAI;iBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,eAAe,UAAU,EAAE,QAAQ,SAAS,CAAC;QAAG,UAAU;kBAAO,EAAE,QAAQ;OAAU,CAAA,GAC3G,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAY,eAAe,KAAK,KAAK;QAAG,UAAU;kBAAO,EAAE,MAAM;OAAU,CAAA,CAC7G;QACF;;IAEA;;EAEb;;;;;EC9xBA,MAAa,KAAK;GAChB,KAAK;GACL,SAAS;GACT,OAAO;GACP,mBAAmB;GACnB,SAAS;GACT,OAAO;GACP,WAAW;GACX,mBAAmB;GACnB,WAAW;GACX,kBAAkB;GAClB,cAAc;GACd,SAAS;GACT,UAAU;GACV,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,YAAY;GACZ,aAAa;GACb,gBAAgB;GAChB,eAAe;GACf,gBAAgB;GAChB,YAAY;GACZ,cAAc;GACd,UAAU;GACV,cAAc;GACd,gBAAgB;GAChB,YAAY;GACZ,aAAa;GACb,QAAQ;GACR,WAAW;GACX,WAAW;GACX,SAAS;GACT,YAAY;GACZ,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,mBAAmB;GACnB,MAAM;GACN,MAAM;GACN,UAAU;GACV,SAAS;GACT,WAAW;GACX,YAAY;GACZ,iBAAiB;GACjB,QAAQ;GACR,KAAK;GACL,UAAU;GACV,QAAQ;GACR,MAAM;GACN,MAAM;GACN,QAAQ;GACR,eAAe;GACf,MAAM;GACN,cAAc;GACd,UAAU;GACV,QAAQ;GACR,MAAM;GACN,YAAY;GACZ,WAAW;GACX,eAAe;GACf,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,WAAW;GACX,WAAW;GACX,aAAa;GACb,aAAa;GACb,kBAAkB;GAClB,mBAAmB;GACnB,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,WAAW;GACX,WAAW;GACX,YAAY;GACZ,aAAa;GACb,OAAO;GACP,WAAW;GACX,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,WAAW;GACX,YAAY;EACd;;EAKA,MAAa,KAAqC;GAChD,KAAK;GACL,SAAS;GACT,OAAO;GACP,mBAAmB;GACnB,SAAS;GACT,OAAO;GACP,WAAW;GACX,mBAAmB;GACnB,WAAW;GACX,kBAAkB;GAClB,cAAc;GACd,SAAS;GACT,UAAU;GACV,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,YAAY;GACZ,aAAa;GACb,gBAAgB;GAChB,eAAe;GACf,gBAAgB;GAChB,YAAY;GACZ,cAAc;GACd,UAAU;GACV,cAAc;GACd,gBAAgB;GAChB,YAAY;GACZ,aAAa;GACb,QAAQ;GACR,WAAW;GACX,WAAW;GACX,SAAS;GACT,YAAY;GACZ,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,mBAAmB;GACnB,MAAM;GACN,MAAM;GACN,UAAU;GACV,SAAS;GACT,WAAW;GACX,YAAY;GACZ,iBAAiB;GACjB,QAAQ;GACR,KAAK;GACL,UAAU;GACV,QAAQ;GACR,MAAM;GACN,MAAM;GACN,QAAQ;GACR,eAAe;GACf,MAAM;GACN,cAAc;GACd,UAAU;GACV,QAAQ;GACR,MAAM;GACN,YAAY;GACZ,WAAW;GACX,eAAe;GACf,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,WAAW;GACX,WAAW;GACX,aAAa;GACb,aAAa;GACb,kBAAkB;GAClB,mBAAmB;GACnB,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,WAAW;GACX,WAAW;GACX,YAAY;GACZ,aAAa;GACb,OAAO;GACP,WAAW;GACX,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,WAAW;GACX,YAAY;EACd;;;;EC1JA,MAAa,KAAK;;EAGlB,MAAa,SAAS;GAAC;GAAS;GAAU;EAAY;;;;;;EAOtD,SAAgB,MAAM,KAA0B;GAC9C,IAAI,aAAa,IAAI,OAAO,SAAS,IAAI;IAAE;IAAI;GAAG,CAAC,GAAG,yBAAyB;GAE/E,MAAM,IAAI,IAAI,OAAO,KAAK,EAAE;GAC5B,MAAM,aAAa,IAAI,IAAI,YAAY;;GAGvC,eAAe,OAAU,QAAgB,OAAgC,CAAC,GAAe;IACvF,MAAM,SAAS,MAAM,WAAW,IAAI,KAAK,QAAQ,SAAS,UAAU,EAAE,KAAK,CAAC;IAC5E,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,SAAS,OAAO,WAAW,OAAO,MAAM,KAAK,IAAI,OAAO,MAAM,SAAS;IAEzF,OAAO,OAAO;GAChB;GAEA,MAAM,kBAAwC;IAC5C;IACA,cAAc,OAAoC,QAAQ;IAC1D,gBAAgB,SAAS,OAAoC,iBAAiB,EAAE,KAAK,CAAC;IACtF,iBAAiB,YAAY,OAAoC,kBAAkB,EAAE,QAAQ,CAAC;IAC9F,YAAY,OAAkD,MAAM,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IACzF,SAAS,OAAO,UAAU,OAAkD,UAAU;KAAE;KAAO,OAAO,SAAS;IAAG,CAAC,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IACxI,MAAM,OAAO,OAAmE,OAAO,EAAE,GAAG,CAAC;IAC7F,MAAM,UAAU,OAA0C,OAAO,EAAE,MAAM,CAAC;IAC1E,SAAS,IAAI,UAAU,OAAsE,UAAU;KAAE;KAAI;IAAM,CAAC;IACpH,SAAS,OAAO,OAA6B,UAAU,EAAE,GAAG,CAAC;IAC7D,aAAa,OAAkD,OAAO,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IAC3F,gBAAgB,OAA+B,UAAU,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IAC9E,eAAe,OAA8B,SAAS,CAAC,CAAC,MAAK,MAAK,EAAE,MAAM;IAC1E,aAAa,OAAgC,OAAO;IACpD,cAAc,OAA+B,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IAC1E,oBAAoB,OAAqD,cAAc;IACvF,cAAc,OAAyG,QAAQ;IAC/H,UAAU,OAAO,OAA8B,WAAW,EAAE,GAAG,CAAC;IAChE,mBAAmB,OAA6B,aAAa;IAC7D,OAAO,OAAO,OAAmE,QAAQ,EAAE,GAAG,CAAC;GACjG;GAEA,IAAI,MAAM,OAAO,0BAA0B,IAAI,MAAM,SAAS;IAC5D,MAAM;IACN,IAAI;IACJ,OAAO;IACP,aAAa,EAAE,KAAK;IACpB,QAAQ;GACV,GAAG,YAAY,CAAC;EAClB"}
+{"version":3,"file":"client.js","names":["css"],"sources":["../src/client/VaultSection.tsx","../src/client/locales.ts","../src/client/index.ts"],"sourcesContent":["/**\n * Vault settings section: list, search, add, edit, delete, and copy encrypted\n * credentials. All mutations go through the host VaultGateway remote; secrets\n * are shown only inside the edit form or a copy action, never in the list.\n */\n\nimport { useEffect, useId, useMemo, useState, type ReactNode } from 'react'\nimport type { PropsLocale, PropsRuntime, InjectFace, TranslateNS } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { VaultLocaleKey } from './locales.ts'\nimport css from './VaultSection.module.css'\n\n/** Wire shapes shared with the host gateway (mirror of src/index.ts types). */\nexport interface VaultSummaryWire {\n  id: string\n  title: string\n  sensitivity?: string\n  kind?: string\n  username?: string\n  email?: string\n  phone?: string\n  host?: string\n  port?: string\n  url?: string\n  tags?: string[]\n}\n\nexport interface VaultFullWire {\n  id: string\n  title: string\n  kind?: string\n  username?: string\n  email?: string\n  phone?: string\n  password?: string\n  host?: string\n  port?: string\n  privateKey?: string\n  apiKey?: string\n  secret?: string\n  accessToken?: string\n  refreshToken?: string\n  expiresAt?: number\n  rotationDays?: number\n  sensitivity?: string\n  favorite?: boolean\n  otpSecret?: string\n  url?: string\n  notes?: string\n  tags?: string[]\n  icon?: string\n  color?: string\n  fields?: Record<string, unknown>\n}\n\n/** Patch shape accepted by vault.add / vault.update. */\nexport type VaultPatch = Partial<Omit<VaultFullWire, 'id'>>\n\n/** Registration-side business face supplied by the plugin entry. */\nexport interface VaultSectionInjected {\n  t: TranslateNS<'settings.vault'>\n  config: () => Promise<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }>\n  setAccessMode: (mode: 'readonly' | 'ask' | 'auto') => Promise<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }>\n  setAutoCapture: (enabled: boolean) => Promise<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }>\n  list: () => Promise<VaultSummaryWire[]>\n  search: (query: string, limit?: number) => Promise<VaultSummaryWire[]>\n  get: (id: string) => Promise<{ found: boolean; entry?: VaultFullWire }>\n  add: (patch: VaultPatch & { title: string }) => Promise<VaultSummaryWire>\n  update: (id: string, patch: VaultPatch) => Promise<{ found: boolean; entry?: VaultSummaryWire }>\n  remove: (id: string) => Promise<{ deleted: boolean }>\n  trash: () => Promise<VaultSummaryWire[]>\n  rotation: () => Promise<unknown[]>\n  history: () => Promise<unknown[]>\n  stats: () => Promise<Record<string, unknown>>\n  recent: () => Promise<unknown[]>\n  backupStatus: () => Promise<{ daysSinceBackup: number; backups: number }>\n  backup: (maxBackups?: number) => Promise<{ path: string; kept: number; pruned: number }>\n  health: () => Promise<{ weak: unknown[]; reused: unknown[]; strength: { weak: number; fair: number; strong: number } }>\n  restore: (id: string) => Promise<{ restored: boolean }>\n  undeleteAll: () => Promise<{ restored: number }>\n  totp: (id: string) => Promise<{ code: string; label?: string; secondsRemaining: number }>\n}\n\n/** Type-level alias so consumers can reference the wire shapes without values. */\nexport type VaultSectionTypes = {\n  entries: VaultSummaryWire[]\n  fullEntry: VaultFullWire\n  summaryEntry: VaultSummaryWire\n  config: { accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean }\n  accessModes: Array<'readonly' | 'ask' | 'auto'>\n}\n\n/** Full component props assembled by the Settings slot renderer. */\nexport type VaultSectionProps =\n  PropsRuntime<'settings.section'>\n  & PropsLocale<'settings.vault'>\n  & InjectFace<VaultSectionInjected>\n\n/** The editable form fields we render (subset of the full wire). */\ntype FormFields = {\n  title?: string | undefined\n  kind?: string | undefined\n  username?: string | undefined\n  email?: string | undefined\n  phone?: string | undefined\n  password?: string | undefined\n  host?: string | undefined\n  port?: string | undefined\n  privateKey?: string | undefined\n  apiKey?: string | undefined\n  secret?: string | undefined\n  accessToken?: string | undefined\n  refreshToken?: string | undefined\n  otpSecret?: string | undefined\n  url?: string | undefined\n  notes?: string | undefined\n  icon?: string | undefined\n  color?: string | undefined\n  expiresAt?: number | undefined\n  rotationDays?: number | undefined\n  sensitivity?: string | undefined\n  favorite?: boolean | undefined\n}\n\nconst FORM_FIELDS: Array<{ key: keyof FormFields; label: VaultLocaleKey }> = [\n  { key: 'title', label: 'fieldTitle' },\n  { key: 'kind', label: 'fieldKind' },\n  { key: 'username', label: 'fieldUsername' },\n  { key: 'email', label: 'fieldEmail' },\n  { key: 'phone', label: 'fieldPhone' },\n  { key: 'password', label: 'fieldPassword' },\n  { key: 'host', label: 'fieldHost' },\n  { key: 'port', label: 'fieldPort' },\n  { key: 'apiKey', label: 'fieldApiKey' },\n  { key: 'secret', label: 'fieldSecret' },\n  { key: 'accessToken', label: 'fieldAccessToken' },\n  { key: 'refreshToken', label: 'fieldRefreshToken' },\n  { key: 'otpSecret', label: 'fieldOtpSecret' },\n  { key: 'url', label: 'fieldUrl' },\n  { key: 'notes', label: 'fieldNotes' },\n  { key: 'expiresAt', label: 'fieldExpiresAt' },\n  { key: 'rotationDays', label: 'fieldRotationDays' },\n  { key: 'sensitivity', label: 'fieldSensitivity' },\n  { key: 'favorite', label: 'fieldFavorite' },\n  { key: 'icon', label: 'fieldIcon' },\n  { key: 'color', label: 'fieldColor' },\n]\n\nconst KIND_KEYS: Record<string, VaultLocaleKey> = {\n  login: 'kindLogin',\n  ssh: 'kindSsh',\n  'api-key': 'kindApiKey',\n  secret: 'kindSecret',\n  oauth: 'kindOauth',\n  custom: 'kindCustom',\n}\n\ntype ViewState =\n  | { readonly status: 'loading' }\n  | { readonly status: 'error' }\n  | { readonly status: 'ready'; readonly entries: VaultSummaryWire[] }\n\ntype EditorState =\n  | { readonly status: 'closed' }\n  | { readonly status: 'creating' }\n  | { readonly status: 'editing'; readonly entry: VaultFullWire }\n\nfunction emptyForm(): FormFields {\n  return { title: '', kind: 'login', username: '', email: '', phone: '', password: '', host: '', port: '', icon: '', color: '' }\n}\n\n/** Render the Vault settings section. */\nexport function VaultSection(props: VaultSectionProps): ReactNode {\n  const { t, config, setAccessMode, setAutoCapture, list, search, get, add, update, remove, trash, rotation, health, history, stats, backupStatus, backup, recent, restore, undeleteAll, totp } = props\n  const searchId = useId()\n  const [query, setQuery] = useState('')\n  const [state, setState] = useState<ViewState>({ status: 'loading' })\n  const [editor, setEditor] = useState<EditorState>({ status: 'closed' })\n  const [form, setForm] = useState<FormFields>(emptyForm())\n  const [busy, setBusy] = useState(false)\n  const [message, setMessage] = useState<string | null>(null)\n  const [copiedId, setCopiedId] = useState<string | null>(null)\n  const [codeMap, setCodeMap] = useState<Record<string, string>>({})\n  const [tagsDraft, setTagsDraft] = useState('')\n  const [fieldsDraft, setFieldsDraft] = useState('')\n  const [revealed, setRevealed] = useState<Record<string, boolean>>({})\n  const [kindFilter, setKindFilter] = useState('')\n  const [tagFilter, setTagFilter] = useState('')\n  const [expandedId, setExpandedId] = useState<string | null>(null)\n  const [sortBy, setSortBy] = useState<'alpha' | 'recent'>('alpha')\n  const [policy, setPolicy] = useState<{ accessMode: 'readonly' | 'ask' | 'auto'; autoCapture: boolean } | null>(null)\n  const [showTrash, setShowTrash] = useState(false)\n  const [trashEntries, setTrashEntries] = useState<VaultSummaryWire[]>([])\n  const [report, setReport] = useState<{ rotation: unknown[]; weak: unknown[]; reused: unknown[]; strength: { weak: number; fair: number; strong: number } | null } | null>(null)\n  const [dueMap, setDueMap] = useState<Record<string, { due: string; daysLeft: number }>>({})\n  const [recentEvents, setRecentEvents] = useState<Array<Record<string, unknown>>>([])\n  const [vaultStats, setVaultStats] = useState<Record<string, unknown> | null>(null)\n  const [backupInfo, setBackupInfo] = useState<{ daysSinceBackup: number; backups: number } | null>(null)\n  const [recentEntries, setRecentEntries] = useState<Array<Record<string, unknown>>>([])\n\n  const readonly = policy?.accessMode === 'readonly'\n\n  /** Run an encrypted backup now and refresh the backup-age badge. */\n  async function backupNow(): Promise<void> {\n    setBusy(true)\n    setMessage(null)\n    try {\n      const result = await backup(10)\n      setBackupInfo({ daysSinceBackup: 0, backups: result.kept })\n      setMessage(`${t('backupDone')} (${result.kept} kept, ${result.pruned} pruned)`)\n      void refresh()\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  useEffect(() => {\n    let current = true\n    void config().then(\n      value => { if (current) setPolicy(value) },\n      () => { /* policy is informational; ignore failures */ },\n    )\n    return () => { current = false }\n  }, [config])\n\n  const refresh = useMemo(() => async () => {\n    setState({ status: 'loading' })\n    try {\n      const entries = query.trim().length === 0\n        ? await list()\n        : await search(query.trim())\n      setState({ status: 'ready', entries })\n    } catch {\n      setState({ status: 'error' })\n    }\n  }, [list, search, query])\n\n  useEffect(() => {\n    let current = true\n    const timer = window.setTimeout(() => {\n      void refresh().then(\n        () => { /* state already set inside refresh */ },\n        () => { if (current) setState({ status: 'error' }) },\n      )\n    }, 250)\n    return () => { current = false; window.clearTimeout(timer) }\n    // refresh is memoized on query (debounced); list/search are stable.\n  }, [refresh])\n\n  // Vault health & meta: load once on mount (stats, backup age, rotation,\n  // weak/reused scan, recent activity) and refresh on window focus.\n  useEffect(() => {\n    let current = true\n    const load = (): void => {\n      void Promise.all([\n        stats().catch(() => null),\n        backupStatus().catch(() => null),\n        rotation().catch(() => []),\n        health().catch(() => null),\n        recent().catch(() => []),\n      ]).then(([st, bk, rot, hl, rc]) => {\n        if (!current) return\n        if (st !== null) setVaultStats(st as Record<string, unknown>)\n        if (bk !== null) setBackupInfo(bk)\n        setReport({ rotation: (rot ?? []) as unknown[], weak: ((hl?.weak ?? []) as unknown[]), reused: ((hl?.reused ?? []) as unknown[]), strength: (hl?.strength ?? null) as { weak: number; fair: number; strong: number } | null })\n        const due: Record<string, { due: string; daysLeft: number }> = {}\n        for (const item of (rot ?? []) as Array<{ id?: string; due?: string; daysLeft?: number }>) {\n          if (item.id !== undefined && item.due !== undefined) due[item.id] = { due: item.due, daysLeft: item.daysLeft ?? 0 }\n        }\n        setDueMap(due)\n        setRecentEntries((rc ?? []) as Array<Record<string, unknown>>)\n      })\n    }\n    load()\n    const onFocus = (): void => { load() }\n    window.addEventListener('focus', onFocus)\n    return () => { current = false; window.removeEventListener('focus', onFocus) }\n  }, [stats, backupStatus, rotation, health, recent])\n\n  /** Open the editor for a new entry. */\n  function startCreate(): void {\n    setForm(emptyForm())\n    setTagsDraft('')\n    setFieldsDraft('')\n    setMessage(null)\n    setEditor({ status: 'creating' })\n  }\n\n  /** Open the editor for an existing entry (fetches full secrets). */\n  async function startEdit(id: string): Promise<void> {\n    setBusy(true)\n    setMessage(null)\n    try {\n      const result = await get(id)\n      if (!result.found || result.entry === undefined) {\n        setMessage(t('error'))\n        return\n      }\n      const entry = result.entry\n      setForm({\n        title: entry.title ?? '',\n        kind: entry.kind ?? 'login',\n        username: entry.username ?? '',\n        email: entry.email ?? '',\n        phone: entry.phone ?? '',\n        password: entry.password ?? '',\n        host: entry.host ?? '',\n        port: entry.port ?? '',\n        privateKey: entry.privateKey ?? '',\n        apiKey: entry.apiKey ?? '',\n        secret: entry.secret ?? '',\n        accessToken: entry.accessToken ?? '',\n        refreshToken: entry.refreshToken ?? '',\n        otpSecret: entry.otpSecret ?? '',\n        url: entry.url ?? '',\n        notes: entry.notes ?? '',\n        icon: entry.icon ?? '',\n        color: entry.color ?? '',\n        expiresAt: entry.expiresAt,\n        rotationDays: entry.rotationDays,\n        sensitivity: entry.sensitivity,\n        favorite: entry.favorite ?? false,\n      })\n      setTagsDraft((entry.tags ?? []).join(', '))\n      setFieldsDraft(entry.fields !== undefined ? Object.entries(entry.fields).map(([k, v]) => `${k}=${String(v)}`).join('\\n') : '')\n      setEditor({ status: 'editing', entry })\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Save the current form (create or update). */\n  async function save(): Promise<void> {\n    if (!(form.title ?? '').trim()) {\n      setMessage(t('error'))\n      return\n    }\n    setBusy(true)\n    setMessage(null)\n    try {\n      const tags = tagsDraft.split(',').map(x => x.trim()).filter(x => x.length > 0)\n      const fields: Record<string, string> = {}\n      for (const line of fieldsDraft.split('\\n')) {\n        const trimmed = line.trim()\n        if (trimmed.length === 0) continue\n        const eq = trimmed.indexOf('=')\n        if (eq <= 0) continue\n        fields[trimmed.slice(0, eq).trim()] = trimmed.slice(eq + 1).trim()\n      }\n      const patch: VaultPatch = {\n        title: (form.title ?? '').trim(),\n        ...(form.kind !== undefined ? { kind: form.kind } : {}),\n        ...(form.username !== undefined ? { username: form.username } : {}),\n        ...(form.email !== undefined ? { email: form.email } : {}),\n        ...(form.phone !== undefined ? { phone: form.phone } : {}),\n        ...(form.password !== undefined ? { password: form.password } : {}),\n        ...(form.host !== undefined ? { host: form.host } : {}),\n        ...(form.port !== undefined ? { port: form.port } : {}),\n        ...(form.privateKey !== undefined ? { privateKey: form.privateKey } : {}),\n        ...(form.apiKey !== undefined ? { apiKey: form.apiKey } : {}),\n        ...(form.secret !== undefined ? { secret: form.secret } : {}),\n        ...(form.accessToken !== undefined ? { accessToken: form.accessToken } : {}),\n        ...(form.refreshToken !== undefined ? { refreshToken: form.refreshToken } : {}),\n        ...(form.otpSecret !== undefined ? { otpSecret: form.otpSecret } : {}),\n        ...(form.url !== undefined ? { url: form.url } : {}),\n        ...(form.notes !== undefined ? { notes: form.notes } : {}),\n        ...(form.icon !== undefined ? { icon: form.icon } : {}),\n        ...(form.color !== undefined ? { color: form.color } : {}),\n        ...(form.expiresAt !== undefined ? { expiresAt: form.expiresAt } : {}),\n        ...(form.rotationDays !== undefined ? { rotationDays: form.rotationDays } : {}),\n        ...(form.sensitivity !== undefined ? { sensitivity: form.sensitivity } : {}),\n        ...(form.favorite !== undefined ? { favorite: form.favorite } : {}),\n        // Always send tags: an empty array clears them, and the host store\n        // treats empty string values as \"clear this field\" too.\n        tags,\n        fields,\n      }\n      if (editor.status === 'creating') {\n        await add(patch as VaultPatch & { title: string })\n      } else if (editor.status === 'editing') {\n        await update(editor.entry.id, patch)\n      }\n      setEditor({ status: 'closed' })\n      await refresh()\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Delete an entry after confirmation. */\n  async function removeEntry(id: string): Promise<void> {\n    if (!window.confirm(t('deleteConfirm'))) return\n    setBusy(true)\n    try {\n      await remove(id)\n      await refresh()\n    } catch {\n      setMessage(t('error'))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Copy a field value to the clipboard and flash the row. */\n  async function copyValue(id: string, value: string): Promise<void> {\n    try {\n      await navigator.clipboard.writeText(value)\n    } catch {\n      // Clipboard may be blocked; fall back to a temporary textarea.\n      const textarea = document.createElement('textarea')\n      textarea.value = value\n      document.body.appendChild(textarea)\n      textarea.select()\n      document.execCommand('copy')\n      textarea.remove()\n    }\n    setCopiedId(id)\n    window.setTimeout(() => setCopiedId(null), 1500)\n  }\n\n  /** Fetch and display a TOTP code for an entry with an otpSecret. */\n  async function showTotp(id: string): Promise<void> {\n    setBusy(true)\n    try {\n      const result = await totp(id)\n      setCodeMap(previous => ({ ...previous, [id]: `${result.code} (${result.secondsRemaining}s)` }))\n    } catch {\n      setCodeMap(previous => ({ ...previous, [id]: t('error') }))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  /** Field-set summary line for one entry (non-secret). */\n  function kindIcon(kind?: string): string {\n    switch (kind ?? 'login') {\n      case 'ssh': return '🖥️'\n      case 'api-key': return '🔑'\n      case 'oauth': return '🔐'\n      case 'secret': return '🤫'\n      case 'custom': return '🧩'\n      default: return '👤'\n    }\n  }\n\n  function identityLine(entry: VaultSummaryWire): string {\n    const parts = [\n      entry.kind !== undefined ? t(KIND_KEYS[entry.kind] ?? 'kindCustom') : t('kindLogin'),\n      entry.username,\n      entry.email,\n      entry.phone,\n      entry.host !== undefined ? `${entry.host}${entry.port !== undefined ? `:${entry.port}` : ''}` : undefined,\n      entry.url,\n    ].filter((value): value is string => value !== undefined && value.length > 0)\n    return parts.join(' · ')\n  }\n\n  return (\n    <section className={css.section} aria-labelledby=\"vault-heading\">\n      <h2 id=\"vault-heading\">{t('heading')}</h2>\n      <p className={css.intro}>{t('intro')}</p>\n\n      <div className={css.toolbar}>\n        <label className={css.searchBox}>\n          <span className=\"sr-only\">{t('searchPlaceholder')}</span>\n          <input\n            id={searchId}\n            type=\"search\"\n            placeholder={t('searchPlaceholder')}\n            value={query}\n            onChange={event => setQuery(event.target.value)}\n          />\n          {query.length > 0 && (\n            <button type=\"button\" className={css.clearButton} onClick={() => setQuery('')} aria-label={t('clearSearch')}>×</button>\n          )}\n        </label>\n        <select className={css.kindFilter} value={kindFilter} onChange={e => setKindFilter(e.target.value)} aria-label={t('fieldKind')}>\n          <option value=\"\">{t('allKinds')}</option>\n          {Object.entries(KIND_KEYS).map(([value, key]) => (\n            <option key={value} value={value}>{t(key)}</option>\n          ))}\n        </select>\n        <select className={css.kindFilter} value={tagFilter} onChange={e => setTagFilter(e.target.value)} aria-label={t('fieldTags')}>\n          <option value=\"\">{t('allTags')}</option>\n          {[...new Set(state.status === 'ready' ? state.entries.flatMap(e => e.tags ?? []) : [])].sort().map(tag => (\n            <option key={tag} value={tag}>{tag}</option>\n          ))}\n        </select>\n        <button\n          type=\"button\"\n          className={css.sortButton}\n          onClick={() => setSortBy(sortBy === 'alpha' ? 'recent' : 'alpha')}\n        >{sortBy === 'alpha' ? t('sortAlpha') : t('sortRecent')}</button>\n        <button type=\"button\" className={css.addButton} onClick={startCreate} disabled={busy || readonly}>\n          + {t('add')}\n        </button>\n      </div>\n\n      {policy !== null && (\n        <div className={css.policyBar}>\n          <label className={css.policyField}>\n            <span>{t('modeLabel')}</span>\n            <select\n              value={policy.accessMode}\n              disabled={busy}\n              onChange={event => {\n                const next = event.target.value as 'readonly' | 'ask' | 'auto'\n                setBusy(true)\n                setMessage(null)\n                void setAccessMode(next).then(\n                  value => { setPolicy(value); setBusy(false) },\n                  () => { setMessage(t('error')); setBusy(false) },\n                )\n              }}\n            >\n              <option value=\"readonly\">{t('modeReadonly')}</option>\n              <option value=\"ask\">{t('modeAsk')}</option>\n              <option value=\"auto\">{t('modeAuto')}</option>\n            </select>\n          </label>\n          <label className={css.policyField}>\n            <span>{t('autoCaptureLabel')}</span>\n            <input\n              type=\"checkbox\"\n              checked={policy.autoCapture}\n              disabled={busy}\n              onChange={event => {\n                const next = event.target.checked\n                setBusy(true)\n                setMessage(null)\n                void setAutoCapture(next).then(\n                  value => { setPolicy(value); setBusy(false) },\n                  () => { setMessage(t('error')); setBusy(false) },\n                )\n              }}\n            />\n          </label>\n          <p className={policy.accessMode === 'readonly' ? css.modeReadonly : policy.accessMode === 'ask' ? css.modeAsk : css.modeAuto}>\n            {policy.accessMode === 'readonly'\n              ? t('modeReadonlyHint')\n              : policy.accessMode === 'ask'\n                ? t('modeAskHint')\n                : t('modeAutoHint')}\n            {policy.autoCapture ? ` · ${t('autoCaptureOn')}` : ` · ${t('autoCaptureOff')}`}\n          </p>\n        </div>\n      )}\n\n      {message !== null && <p role=\"alert\" className={css.error}>{message}</p>}\n\n      {state.status === 'loading' && <p className={css.status}>{t('loading')}</p>}\n      {state.status === 'error' && <p role=\"alert\" className={css.error}>{t('error')}</p>}\n      {state.status === 'ready' && state.entries.length === 0 && (\n        <div className={css.emptyBox}>\n          <p className={css.empty}>{t('empty')}</p>\n          <p className={css.emptyHint}>{readonly ? t('emptyHintReadonly') : t('emptyHint')}</p>\n          {!readonly && (\n            <button type=\"button\" className={css.addButton} onClick={startCreate}>{t('quickAdd')}</button>\n          )}\n        </div>\n      )}\n\n      {recentEntries.length > 0 && (\n        <div className={css.reportBox}>\n          <p className={css.reportTitle}>{t('recentlyAdded')}</p>\n          {recentEntries.map((e, i) => (\n            <p key={i} className={css.reportLine}>{String(e.title ?? '')}</p>\n          ))}\n        </div>\n      )}\n\n      {recentEvents.length > 0 && (\n        <div className={css.reportBox}>\n          <p className={css.reportTitle}>{t('recentActivity')}</p>\n          {recentEvents.map((ev, i) => (\n            <p key={i} className={css.reportLine}>\n              {String(ev.action ?? '')} · {String(ev.title ?? ev.id ?? '')}\n            </p>\n          ))}\n        </div>\n      )}\n\n      {report !== null && (report.rotation.length > 0 || report.weak.length > 0 || report.reused.length > 0) && (\n        <div className={css.reportBox}>\n          <p className={css.reportTitle}>{t('reportTitle')}</p>\n          {report.rotation.length > 0 && (\n            <>\n              <p className={css.reportLine}>{t('reportRotation')}: {report.rotation.length}</p>\n              {(report.rotation as Array<{ title?: string; due?: string; daysLeft?: number }>).slice(0, 8).map((item, i) => (\n                <p key={i} className={css.reportSub}>\n                  · {String(item.title ?? '?')}{item.due === 'expired' ? ` (${t('dueExpired')})` : item.due === 'soon' ? ` (${t('dueExpiring')} ${item.daysLeft ?? 0}d)` : ` (${t('dueNow')})`}\n                </p>\n              ))}\n            </>\n          )}\n          {report.weak.length > 0 && (\n            <p className={css.reportLine}>{t('reportWeak')}: {report.weak.length}</p>\n          )}\n          {report.reused.length > 0 && (\n            <p className={css.reportLine}>{t('reportReused')}: {report.reused.length}</p>\n          )}\n        </div>\n      )}\n\n      {state.status === 'ready' && (state.entries.length > 0 || trashEntries.length > 0) && (\n        <button\n          type=\"button\"\n          className={css.trashButton}\n          onClick={() => {\n            if (!showTrash) void trash().then(setTrashEntries)\n            setShowTrash(!showTrash)\n          }}\n        >{showTrash ? t('hideTrash') : t('showTrash')}{trashEntries.length > 0 ? ` (${trashEntries.length})` : ''}</button>\n      )}\n\n      {showTrash && (\n        <ul className={css.list}>\n          {trashEntries.map(entry => (\n            <li key={entry.id} className={css.row}>\n              <div className={css.rowMain}>\n                <span className={css.title}>{entry.title}</span>\n                <span className={css.identity}>{t('trashed')}</span>\n              </div>\n              <div className={css.rowActions}>\n                <button\n                  type=\"button\"\n                  onClick={() => { void restore(entry.id).then(() => { void trash().then(setTrashEntries); void refresh() }) }}\n                  disabled={busy || readonly}\n                >{t('restore')}</button>\n              </div>\n            </li>\n          ))}\n          {trashEntries.length === 0 && <p className={css.empty}>{t('trashEmpty')}</p>}\n        </ul>\n      )}\n      {showTrash && trashEntries.length > 0 && (\n        <>\n          <button\n            type=\"button\"\n            className={css.trashButton}\n            onClick={() => {\n              setBusy(true)\n              void undeleteAll().then(() => {\n                void trash().then(setTrashEntries)\n                void refresh()\n                setBusy(false)\n              }, () => setBusy(false))\n            }}\n            disabled={busy || readonly}\n          >{t('restoreAll')}</button>\n          <button\n            type=\"button\"\n            className={css.dangerButton}\n            onClick={() => {\n              if (!window.confirm(t('clearTrashConfirm'))) return\n              setBusy(true)\n              void Promise.all(trashEntries.map(e => remove(e.id))).then(() => {\n                void trash().then(setTrashEntries)\n                void refresh()\n                setBusy(false)\n              }, () => setBusy(false))\n            }}\n            disabled={busy || readonly}\n          >{t('clearTrash')}</button>\n        </>\n      )}\n\n      {state.status === 'ready' && state.entries.length > 0 && (\n        <ul className={css.list}>\n          {state.entries.filter(entry => (kindFilter === '' || entry.kind === kindFilter) && (tagFilter === '' || (entry.tags ?? []).includes(tagFilter))).sort((a, b) => sortBy === 'alpha' ? a.title.localeCompare(b.title) : 0).map(entry => {\n            const code = codeMap[entry.id]\n            return (\n              <li key={entry.id} className={`${css.row}${dueMap[entry.id] !== undefined ? ` ${dueMap[entry.id]!.due === 'expired' ? css.rowExpired : css.rowDue}` : ''}`}>\n                <div className={css.rowMain} onClick={() => setExpandedId(expandedId === entry.id ? null : entry.id)}>\n                  <span className={css.title}>\n                    <span className={css.kindIcon}>{kindIcon(entry.kind)}</span>\n                    {(entry as VaultSummaryWire & { favorite?: boolean }).favorite && (\n                      <span className={css.pinStar} title={t('pinned')}>★</span>\n                    )}\n                    {entry.title}\n                    {(entry as VaultSummaryWire & { sensitivity?: string }).sensitivity === 'high' && (\n                      <span className={css.highBadge}>{t('highSensitivity')}</span>\n                    )}\n                    {dueMap[entry.id] !== undefined && (\n                      <span className={`${css.dueBadge} ${dueMap[entry.id]!.due === 'expired' ? css.badgeDanger : css.badgeWarn}`}>\n                        {dueMap[entry.id]!.due === 'expired' ? t('dueExpired') : dueMap[entry.id]!.due === 'soon' ? `${t('dueExpiring')} ${dueMap[entry.id]!.daysLeft}d` : t('dueNow')}\n                      </span>\n                    )}\n                  </span>\n                  <span className={css.identity}>{identityLine(entry)}</span>\n                  {code !== undefined && <span className={css.totp}>{code}</span>}\n                </div>\n                {expandedId === entry.id && (\n                  <div className={css.detailBox}>\n                    {Object.entries(entry).filter(([k]) => !['id', 'title'].includes(k) && entry[k as keyof VaultSummaryWire] !== undefined).map(([k, v]) => (\n                      <span key={k} className={css.detailItem}>\n                        <strong>{k}</strong>: {Array.isArray(v) ? v.join(', ') : String(v)}\n                      </span>\n                    ))}\n                  </div>\n                )}\n                <div className={css.rowActions}>\n                  {copiedId === entry.id && <span className={css.copied}>{t('copied')}</span>}\n                  <button\n                    type=\"button\"\n                    onClick={() => void copyValue(entry.id, entry.username ?? entry.title)}\n                    disabled={busy}\n                  >{t('copy')}</button>\n                  <button\n                    type=\"button\"\n                    onClick={() => {\n                      setBusy(true)\n                      void get(entry.id).then(r => {\n                        if (r.found && r.entry?.password) void copyValue(entry.id, r.entry.password)\n                        setBusy(false)\n                      }, () => setBusy(false))\n                    }}\n                    disabled={busy || readonly}\n                  >{t('copyPassword')}</button>\n                  <button type=\"button\" onClick={() => void showTotp(entry.id)} disabled={busy}>{t('totp')}</button>\n                  {code !== undefined && (\n                    <button type=\"button\" onClick={() => void copyValue(entry.id, code.split(' ')[0]!)} disabled={busy}>{t('copyCode')}</button>\n                  )}\n                  <button type=\"button\" onClick={() => void startEdit(entry.id)} disabled={busy || readonly}>{t('edit')}</button>\n                  <button\n                    type=\"button\"\n                    className={css.deleteButton}\n                    onClick={() => void removeEntry(entry.id)}\n                    disabled={busy || readonly}\n                  >{t('delete')}</button>\n                </div>\n              </li>\n            )\n          })}\n        </ul>\n      )}\n\n      {state.status === 'ready' && (\n        <div className={css.healthBar}>\n          {vaultStats !== null && typeof vaultStats.total === 'number' && (\n            <span className={css.badge}>{t('entryCount')}: {String(vaultStats.total)}</span>\n          )}\n          {vaultStats !== null && typeof vaultStats.withTotp === 'number' && (\n            <span className={css.badge}>TOTP: {String(vaultStats.withTotp)}</span>\n          )}\n          {vaultStats !== null && typeof vaultStats.highSensitivity === 'number' && (\n            <span className={css.badge}>{t('highSensitivity')}: {String(vaultStats.highSensitivity)}</span>\n          )}\n          {report !== null && report.strength !== null && (\n            <span className={`${css.badge} ${report.strength.weak > 0 ? css.badgeDanger : css.badgeOk}`}>\n              {t('healthStrength')}: {report.strength.weak}W/{report.strength.fair}F/{report.strength.strong}S\n            </span>\n          )}\n          {report !== null && report.rotation.length > 0 && (\n            <span className={`${css.badge} ${css.badgeWarn}`}>{t('reportRotation')}: {report.rotation.length}</span>\n          )}\n          {report !== null && report.weak.length > 0 && (\n            <span className={`${css.badge} ${css.badgeDanger}`}>{t('reportWeak')}: {report.weak.length}</span>\n          )}\n          {report !== null && report.reused.length > 0 && (\n            <span className={`${css.badge} ${css.badgeDanger}`}>{t('reportReused')}: {report.reused.length}</span>\n          )}\n          {report !== null && report.rotation.length === 0 && report.weak.length === 0 && report.reused.length === 0 && (\n            <span className={`${css.badge} ${css.badgeOk}`}>{t('healthOk')}</span>\n          )}\n          {backupInfo !== null && backupInfo.daysSinceBackup >= 0 && (\n            <span className={`${css.badge} ${backupInfo.daysSinceBackup > 14 ? css.badgeDanger : backupInfo.daysSinceBackup > 7 ? css.badgeWarn : ''}`}>\n              {t('healthBackup')}: {backupInfo.daysSinceBackup}d\n            </span>\n          )}\n          <button type=\"button\" className={css.backupButton} onClick={() => void backupNow()} disabled={busy}>\n            {t('backupNow')}\n          </button>\n        </div>\n      )}\n      {state.status === 'ready' && (\n        <p className={css.footer}>\n          {t('entryCount')}: {state.entries.length}\n          {vaultStats !== null && typeof vaultStats.withTotp === 'number' && ` · TOTP: ${String(vaultStats.withTotp)}`}\n          {vaultStats !== null && typeof vaultStats.highSensitivity === 'number' && ` · ${t('highSensitivity')}: ${String(vaultStats.highSensitivity)}`}\n          {backupInfo !== null && backupInfo.daysSinceBackup >= 0 && ` · backup: ${backupInfo.daysSinceBackup}d ago`}\n          {vaultStats !== null && typeof vaultStats.byTag === 'object' && vaultStats.byTag !== null\n            && Object.keys(vaultStats.byTag as Record<string, unknown>).length > 0\n            && ` · tags: ${Object.entries(vaultStats.byTag as Record<string, unknown>).map(([k, v]) => `${k}(${String(v)})`).join(' ')}`}\n        </p>\n      )}\n\n      {editor.status !== 'closed' && (\n        <div className={css.editor} role=\"dialog\" aria-label={editor.status === 'creating' ? t('add') : t('edit')}>\n          <div className={css.editorBody}>\n            {FORM_FIELDS.map(field => (\n              <label key={field.key} className={css.field}>\n                <span>{t(field.label)}</span>\n                {field.key === 'kind' ? (\n                  <select\n                    value={form.kind ?? 'login'}\n                    onChange={event => setForm(previous => ({ ...previous, kind: event.target.value }))}\n                  >\n                    {Object.entries(KIND_KEYS).map(([value, key]) => (\n                      <option key={value} value={value}>{t(key)}</option>\n                    ))}\n                  </select>\n                ) : field.key === 'title' ? (\n                  <input\n                    value={form.title ?? ''}\n                    onChange={event => setForm(previous => ({ ...previous, title: event.target.value }))}\n                  />\n                ) : field.key === 'password' || field.key === 'otpSecret' || field.key === 'apiKey'\n                  || field.key === 'secret' || field.key === 'accessToken' || field.key === 'refreshToken'\n                  || field.key === 'privateKey' ? (\n                  <span className={css.secretField}>\n                    <input\n                      type={revealed[field.key] ? 'text' : 'password'}\n                      value={(form[field.key] as string | undefined) ?? ''}\n                      onChange={event => setForm(previous => ({ ...previous, [field.key]: event.target.value }))}\n                    />\n                    <button\n                      type=\"button\"\n                      className={css.revealButton}\n                      onClick={() => setRevealed(previous => ({ ...previous, [field.key]: !previous[field.key] }))}\n                    >{revealed[field.key] ? t('hide') : t('show')}</button>\n                  </span>\n                ) : field.key === 'expiresAt' ? (\n                  <input\n                    type=\"datetime-local\"\n                    value={form.expiresAt !== undefined ? new Date(form.expiresAt).toISOString().slice(0, 16) : ''}\n                    onChange={event => {\n                      const raw = event.target.value\n                      const epoch = raw.length > 0 ? Date.parse(raw) : NaN\n                      setForm(previous => ({ ...previous, expiresAt: Number.isNaN(epoch) ? undefined : epoch }))\n                    }}\n                  />\n                ) : field.key === 'rotationDays' ? (\n                  <input\n                    type=\"number\"\n                    min={0}\n                    max={3650}\n                    placeholder={t('rotationClearHint')}\n                    value={form.rotationDays ?? ''}\n                    onChange={event => {\n                      const raw = event.target.value\n                      setForm(previous => ({ ...previous, rotationDays: raw.length > 0 ? Number(raw) : undefined }))\n                    }}\n                  />\n                ) : field.key === 'sensitivity' ? (\n                  <select\n                    value={form.sensitivity ?? 'normal'}\n                    onChange={event => setForm(previous => ({ ...previous, sensitivity: event.target.value === 'high' ? 'high' : 'normal' }))}\n                  >\n                    <option value=\"normal\">{t('sensitivityNormal')}</option>\n                    <option value=\"high\">{t('sensitivityHigh')}</option>\n                  </select>\n                ) : field.key === 'favorite' ? (\n                  <label className={css.checkField}>\n                    <input\n                      type=\"checkbox\"\n                      checked={form.favorite ?? false}\n                      onChange={event => setForm(previous => ({ ...previous, favorite: event.target.checked }))}\n                    />\n                    {t('favoriteHint')}\n                  </label>\n                ) : (\n                  <input\n                    type=\"text\"\n                    value={(form[field.key] as string | undefined) ?? ''}\n                    onChange={event => setForm(previous => ({ ...previous, [field.key]: event.target.value }))}\n                  />\n                )}\n              </label>\n            ))}\n            <label className={css.field}>\n              <span>{t('fieldTags')}</span>\n              <input\n                value={tagsDraft}\n                onChange={event => setTagsDraft(event.target.value)}\n                placeholder=\"dev, prod\"\n              />\n            </label>\n            <label className={css.field}>\n              <span>{t('fieldCustom')}</span>\n              <textarea\n                value={fieldsDraft}\n                onChange={event => setFieldsDraft(event.target.value)}\n                rows={3}\n                placeholder=\"region=us-east-1&#10;team=infra\"\n              />\n            </label>\n          </div>\n          <div className={css.editorActions}>\n            <button type=\"button\" onClick={() => setEditor({ status: 'closed' })} disabled={busy}>{t('cancel')}</button>\n            <button type=\"button\" className={css.saveButton} onClick={() => void save()} disabled={busy}>{t('save')}</button>\n          </div>\n        </div>\n      )}\n    </section>\n  )\n}\n","/** Copy dictionaries for the Vault settings section. */\n\n/** English strings (the key-set source of truth for this pair). */\nexport const en = {\n  nav: 'Vault',\n  heading: 'Vault',\n  intro: 'Encrypted credentials stored on this machine.',\n  searchPlaceholder: 'Search title, username, email, host…',\n  loading: 'Loading…',\n  empty: 'No credentials yet. Add one to get started.',\n  emptyHint: 'Tip: you can ask the assistant to save an API key or token you share in chat — with auto-capture on it offers to store it for you. Bulk importing? Ask for vault_import_csv with a CSV file path.',\n  emptyHintReadonly: 'The vault is in readonly mode — credentials can be read but not added here. Switch accessMode to \"readwrite\" to enable writes.',\n  modeLabel: 'Access mode',\n  autoCaptureLabel: 'Auto-capture credentials from chat',\n  modeReadonly: 'Read-only',\n  modeAsk: 'Ask before writing',\n  modeAuto: 'Automatic read-write',\n  modeReadonlyHint: 'Read-only — mutations disabled',\n  modeAskHint: 'Prompt before writing — every add/update/delete asks you',\n  modeAutoHint: 'Automatic read-write — no per-call prompt',\n  autoCaptureOn: 'auto-capture on',\n  autoCaptureOff: 'auto-capture off',\n  clearSearch: 'Clear search',\n  entryCount: 'Entries',\n  reportTitle: 'Health & rotation',\n  recentActivity: 'Recent activity',\n  recentlyAdded: 'Recently added',\n  reportRotation: 'expired / due for rotation',\n  reportWeak: 'weak passwords',\n  reportReused: 'credentials reused across entries',\n  healthOk: 'vault healthy',\n  healthBackup: 'backup',\n  backupNow: 'Backup now',\n  backupDone: 'Backup created',\n  healthStrength: 'strength',\n  dueExpired: 'EXPIRED',\n  dueExpiring: 'expires in',\n  dueNow: 'rotation due',\n  showTrash: 'Trash',\n  hideTrash: 'Hide trash',\n  trashed: 'in trash',\n  trashEmpty: 'Trash is empty',\n  restore: 'Restore',\n  clearTrash: 'Empty trash',\n  restoreAll: 'Restore all',\n  clearTrashConfirm: 'Permanently delete ALL trashed entries? This cannot be undone.',\n  show: 'Show',\n  hide: 'Hide',\n  allKinds: 'All kinds',\n  allTags: 'All tags',\n  sortAlpha: 'Sort: A–Z',\n  sortRecent: 'Sort: recent',\n  highSensitivity: 'HIGH',\n  pinned: 'Pinned',\n  add: 'Add credential',\n  quickAdd: 'Quick add',\n  cancel: 'Cancel',\n  save: 'Save',\n  edit: 'Edit',\n  delete: 'Delete',\n  deleteConfirm: 'Delete this entry? This cannot be undone.',\n  copy: 'Copy',\n  copyPassword: 'Copy password',\n  copyCode: 'Copy code',\n  copied: 'Copied',\n  totp: 'Code',\n  fieldTitle: 'Title',\n  fieldKind: 'Kind',\n  fieldUsername: 'Username',\n  fieldEmail: 'Email',\n  fieldPhone: 'Phone',\n  fieldPassword: 'Password',\n  fieldHost: 'Host',\n  fieldPort: 'Port',\n  fieldApiKey: 'API key',\n  fieldSecret: 'Secret',\n  fieldAccessToken: 'Access token',\n  fieldRefreshToken: 'Refresh token',\n  fieldOtpSecret: 'OTP secret',\n  fieldUrl: 'URL',\n  fieldNotes: 'Notes',\n  fieldTags: 'Tags',\n  fieldIcon: 'Icon (emoji)',\n  fieldExpiresAt: 'Expires at',\n  fieldRotationDays: 'Rotation (days, 0 = never)',\n  fieldSensitivity: 'Sensitivity',\n  fieldFavorite: 'Pinned',\n  sensitivityNormal: 'normal',\n  sensitivityHigh: 'high',\n  favoriteHint: 'Show at top',\n  rotationClearHint: '0 clears rotation',\n  fieldColor: 'Color',\n  fieldCustom: 'Custom fields (key=value per line)',\n  error: 'Something went wrong.',\n  kindLogin: 'Login',\n  kindSsh: 'SSH',\n  kindApiKey: 'API key',\n  kindSecret: 'Secret',\n  kindOauth: 'OAuth',\n  kindCustom: 'Custom',\n} as const\n\nexport type VaultLocaleKey = keyof typeof en\n\n/** Chinese strings (same keys as English). */\nexport const zh: Record<VaultLocaleKey, string> = {\n  nav: '凭据库',\n  heading: 'Vault 凭据库',\n  intro: '本机加密存储的凭据。',\n  searchPlaceholder: '搜索标题、用户名、邮箱、主机…',\n  loading: '加载中…',\n  empty: '还没有凭据，添加一条开始使用。',\n  emptyHint: '提示：你可以在对话中把 API Key 或 token 交给助手保存——开启自动捕获后，它会在你同意时帮你存入本库。批量导入？让助手调用 vault_import_csv 并给出 CSV 路径即可。',\n  emptyHintReadonly: '当前为只读模式——只能读取凭据，不能在此添加。将 accessMode 改为 \"readwrite\" 即可启用写入。',\n  modeLabel: '访问模式',\n  autoCaptureLabel: '自动捕获对话中的凭据',\n  modeReadonly: '只读',\n  modeAsk: '写入前询问',\n  modeAuto: '自动读写',\n  modeReadonlyHint: '只读 —— 变更已禁用',\n  modeAskHint: '写入前询问 —— 每次增/改/删都会征求你的确认',\n  modeAutoHint: '自动读写 —— 无需逐次确认',\n  autoCaptureOn: '自动捕获已开启',\n  autoCaptureOff: '自动捕获已关闭',\n  clearSearch: '清除搜索',\n  entryCount: '条目数',\n  reportTitle: '健康与轮换',\n  recentActivity: '最近活动',\n  recentlyAdded: '最近添加',\n  reportRotation: '已过期 / 待轮换',\n  reportWeak: '弱密码',\n  reportReused: '跨条目复用的凭据',\n  healthOk: '凭据库健康',\n  healthBackup: '备份',\n  backupNow: '立即备份',\n  backupDone: '备份已创建',\n  healthStrength: '强度',\n  dueExpired: '已过期',\n  dueExpiring: '将于',\n  dueNow: '待轮换',\n  showTrash: '回收站',\n  hideTrash: '隐藏回收站',\n  trashed: '已删除',\n  trashEmpty: '回收站为空',\n  restore: '恢复',\n  clearTrash: '清空回收站',\n  restoreAll: '全部恢复',\n  clearTrashConfirm: '永久删除回收站中全部条目？此操作不可撤销。',\n  show: '显示',\n  hide: '隐藏',\n  allKinds: '全部类型',\n  allTags: '全部标签',\n  sortAlpha: '排序：A–Z',\n  sortRecent: '排序：最近',\n  highSensitivity: '高敏',\n  pinned: '已置顶',\n  add: '新增凭据',\n  quickAdd: '快速添加',\n  cancel: '取消',\n  save: '保存',\n  edit: '编辑',\n  delete: '删除',\n  deleteConfirm: '确定删除该条目？此操作不可撤销。',\n  copy: '复制',\n  copyPassword: '复制密码',\n  copyCode: '复制验证码',\n  copied: '已复制',\n  totp: '验证码',\n  fieldTitle: '标题',\n  fieldKind: '类型',\n  fieldUsername: '用户名',\n  fieldEmail: '邮箱',\n  fieldPhone: '手机号',\n  fieldPassword: '密码',\n  fieldHost: '主机',\n  fieldPort: '端口',\n  fieldApiKey: 'API 密钥',\n  fieldSecret: 'Secret',\n  fieldAccessToken: '访问令牌',\n  fieldRefreshToken: '刷新令牌',\n  fieldOtpSecret: 'TOTP 密钥',\n  fieldUrl: 'URL',\n  fieldNotes: '备注',\n  fieldTags: '标签',\n  fieldIcon: '图标（emoji）',\n  fieldExpiresAt: '过期时间',\n  fieldRotationDays: '轮换周期（天，0=永不）',\n  fieldSensitivity: '敏感级别',\n  fieldFavorite: '置顶',\n  sensitivityNormal: '普通',\n  sensitivityHigh: '高敏',\n  favoriteHint: '列表置顶显示',\n  rotationClearHint: '0 清除轮换',\n  fieldColor: '颜色',\n  fieldCustom: '自定义字段（每行 key=value）',\n  error: '操作失败。',\n  kindLogin: '登录',\n  kindSsh: 'SSH',\n  kindApiKey: 'API 密钥',\n  kindSecret: 'Secret',\n  kindOauth: 'OAuth',\n  kindCustom: '自定义',\n}\n","/**\n * dsh-vault browser half: a Vault settings page managing encrypted\n * credentials — list, search, add, edit, delete, and copy — through the host\n * VaultGateway remote over the /api RPC channel.\n *\n * @module dsh-vault/client\n */\n\nimport type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client'\nimport type { ConnectionHandle } from '@deepseek-ai/dsh-api-remotes/client'\nimport type {} from '@deepseek-ai/dsh-client-locale/client'\nimport type {} from '@deepseek-ai/dsh-client-ui-settings/client'\nimport { VaultSection, type VaultSectionInjected } from './VaultSection.tsx'\nimport type { VaultSectionTypes } from './VaultSection.tsx'\nimport { en, zh, type VaultLocaleKey } from './locales.ts'\n\nexport type { VaultSectionInjected, VaultSectionProps } from './VaultSection.tsx'\nexport type { VaultSectionTypes } from './VaultSection.tsx'\nexport type { VaultLocaleKey } from './locales.ts'\n\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface LocaleNamespaceMap {\n    /** Vault settings page copy. */\n    'settings.vault': VaultLocaleKey\n  }\n}\n\n/** Dictionary namespace owned by this plugin. */\nexport const NS = 'settings.vault'\n\n/** Services required by the Settings registration and the RPC face. */\nexport const inject = ['slots', 'locale', 'connection']\n\n/**\n * Register the Vault settings section once the `settings.section` declaration\n * is on the ledger. The section talks to the host through the connection RPC\n * channel (endpoints `vault/*` served by the host VaultGateway remote).\n */\nexport function apply(ctx: ClientContext): void {\n  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-vault: dictionaries')\n\n  const t = ctx.locale.bind(NS)\n  const connection = ctx.get('connection') as ConnectionHandle\n\n  /** Invoke one host vault remote and normalize the RPC envelope. */\n  async function invoke<T>(method: string, args: Record<string, unknown> = {}): Promise<T> {\n    const result = await connection.rpc.call('/api', `vault/${method}`, { args })\n    if (!result.ok) {\n      throw new Error(`vault.${method} failed: ${result.error.code}: ${result.error.message}`)\n    }\n    return result.value as T\n  }\n\n  const injected = (): VaultSectionInjected => ({\n    t,\n    config: () => invoke<VaultSectionTypes['config']>('config'),\n    setAccessMode: (mode) => invoke<VaultSectionTypes['config']>('setAccessMode', { mode }),\n    setAutoCapture: (enabled) => invoke<VaultSectionTypes['config']>('setAutoCapture', { enabled }),\n    list: () => invoke<{ entries: VaultSectionTypes['entries'] }>('list').then(r => r.entries),\n    search: (query, limit) => invoke<{ entries: VaultSectionTypes['entries'] }>('search', { query, limit: limit ?? 50 }).then(r => r.entries),\n    get: (id) => invoke<{ found: boolean; entry?: VaultSectionTypes['fullEntry'] }>('get', { id }),\n    add: (patch) => invoke<VaultSectionTypes['summaryEntry']>('add', { patch }),\n    update: (id, patch) => invoke<{ found: boolean; entry?: VaultSectionTypes['summaryEntry'] }>('update', { id, patch }),\n    remove: (id) => invoke<{ deleted: boolean }>('delete', { id }),\n    trash: () => invoke<{ entries: VaultSectionTypes['entries'] }>('trash').then(r => r.entries),\n    rotation: () => invoke<{ entries: unknown[] }>('rotation').then(r => r.entries),\n    history: () => invoke<{ events: unknown[] }>('history').then(r => r.events),\n    stats: () => invoke<Record<string, unknown>>('stats'),\n    recent: () => invoke<{ entries: unknown[] }>('recent').then(r => r.entries),\n    backupStatus: () => invoke<{ daysSinceBackup: number; backups: number }>('backupStatus'),\n    backup: (maxBackups) => invoke<{ path: string; kept: number; pruned: number }>('backup', { maxBackups: maxBackups ?? 10 }),\n    health: () => invoke<{ weak: unknown[]; reused: unknown[]; strength: { weak: number; fair: number; strong: number } }>('health'),\n    restore: (id) => invoke<{ restored: boolean }>('restore', { id }),\n    undeleteAll: () => invoke<{ restored: number }>('undeleteAll'),\n    totp: (id) => invoke<{ code: string; label?: string; secondsRemaining: number }>('totp', { id }),\n  })\n\n  ctx.slots.inject('settings.section', () => ctx.slots.register({\n    name: 'settings.section',\n    id: 'vault',\n    order: 30,\n    label: () => t('nav'),\n    inject: injected,\n  }, VaultSection))\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2HA,MAAM,cAAuE;GAC3E;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAY,OAAO;GAAgB;GAC1C;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAY,OAAO;GAAgB;GAC1C;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAU,OAAO;GAAc;GACtC;IAAE,KAAK;IAAU,OAAO;GAAc;GACtC;IAAE,KAAK;IAAe,OAAO;GAAmB;GAChD;IAAE,KAAK;IAAgB,OAAO;GAAoB;GAClD;IAAE,KAAK;IAAa,OAAO;GAAiB;GAC5C;IAAE,KAAK;IAAO,OAAO;GAAW;GAChC;IAAE,KAAK;IAAS,OAAO;GAAa;GACpC;IAAE,KAAK;IAAa,OAAO;GAAiB;GAC5C;IAAE,KAAK;IAAgB,OAAO;GAAoB;GAClD;IAAE,KAAK;IAAe,OAAO;GAAmB;GAChD;IAAE,KAAK;IAAY,OAAO;GAAgB;GAC1C;IAAE,KAAK;IAAQ,OAAO;GAAY;GAClC;IAAE,KAAK;IAAS,OAAO;GAAa;EACtC;EAEA,MAAM,YAA4C;GAChD,OAAO;GACP,KAAK;GACL,WAAW;GACX,QAAQ;GACR,OAAO;GACP,QAAQ;EACV;EAYA,SAAS,YAAwB;GAC/B,OAAO;IAAE,OAAO;IAAI,MAAM;IAAS,UAAU;IAAI,OAAO;IAAI,OAAO;IAAI,UAAU;IAAI,MAAM;IAAI,MAAM;IAAI,MAAM;IAAI,OAAO;GAAG;EAC/H;;EAGA,SAAgB,aAAa,OAAqC;GAChE,MAAM,EAAE,GAAG,QAAQ,eAAe,gBAAgB,MAAM,QAAQ,KAAK,KAAK,QAAQ,QAAQ,OAAO,UAAU,QAAQ,SAAS,OAAO,cAAc,QAAQ,QAAQ,SAAS,aAAa,SAAS;GAChM,MAAM,YAAA,GAAA,MAAA,MAAA,CAAiB;GACvB,MAAM,CAAC,OAAO,aAAA,GAAA,MAAA,SAAA,CAAqB,EAAE;GACrC,MAAM,CAAC,OAAO,aAAA,GAAA,MAAA,SAAA,CAAgC,EAAE,QAAQ,UAAU,CAAC;GACnE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAmC,EAAE,QAAQ,SAAS,CAAC;GACtE,MAAM,CAAC,MAAM,YAAA,GAAA,MAAA,SAAA,CAAgC,UAAU,CAAC;GACxD,MAAM,CAAC,MAAM,YAAA,GAAA,MAAA,SAAA,CAAoB,KAAK;GACtC,MAAM,CAAC,SAAS,eAAA,GAAA,MAAA,SAAA,CAAsC,IAAI;GAC1D,MAAM,CAAC,UAAU,gBAAA,GAAA,MAAA,SAAA,CAAuC,IAAI;GAC5D,MAAM,CAAC,SAAS,eAAA,GAAA,MAAA,SAAA,CAA+C,CAAC,CAAC;GACjE,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,SAAA,CAAyB,EAAE;GAC7C,MAAM,CAAC,aAAa,mBAAA,GAAA,MAAA,SAAA,CAA2B,EAAE;GACjD,MAAM,CAAC,UAAU,gBAAA,GAAA,MAAA,SAAA,CAAiD,CAAC,CAAC;GACpE,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAA0B,EAAE;GAC/C,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,SAAA,CAAyB,EAAE;GAC7C,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAAyC,IAAI;GAChE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAA0C,OAAO;GAChE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAgG,IAAI;GACnH,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,SAAA,CAAyB,KAAK;GAChD,MAAM,CAAC,cAAc,oBAAA,GAAA,MAAA,SAAA,CAAgD,CAAC,CAAC;GACvE,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAA2J,IAAI;GAC9K,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAyE,CAAC,CAAC;GAC1F,MAAM,CAAC,cAAc,oBAAA,GAAA,MAAA,SAAA,CAA4D,CAAC,CAAC;GACnF,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAA0D,IAAI;GACjF,MAAM,CAAC,YAAY,kBAAA,GAAA,MAAA,SAAA,CAA+E,IAAI;GACtG,MAAM,CAAC,eAAe,qBAAA,GAAA,MAAA,SAAA,CAA6D,CAAC,CAAC;GAErF,MAAM,WAAW,QAAQ,eAAe;;GAGxC,eAAe,YAA2B;IACxC,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,IAAI;KACF,MAAM,SAAS,MAAM,OAAO,EAAE;KAC9B,cAAc;MAAE,iBAAiB;MAAG,SAAS,OAAO;KAAK,CAAC;KAC1D,WAAW,GAAG,EAAE,YAAY,EAAE,IAAI,OAAO,KAAK,SAAS,OAAO,OAAO,SAAS;KAC9E,QAAa;IACf,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;GAEA,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,UAAU;IACd,OAAY,CAAC,CAAC,MACZ,UAAS;KAAE,IAAI,SAAS,UAAU,KAAK;IAAE,SACnC,CAAiD,CACzD;IACA,aAAa;KAAE,UAAU;IAAM;GACjC,GAAG,CAAC,MAAM,CAAC;GAEX,MAAM,WAAA,GAAA,MAAA,QAAA,OAAwB,YAAY;IACxC,SAAS,EAAE,QAAQ,UAAU,CAAC;IAC9B,IAAI;KAIF,SAAS;MAAE,QAAQ;MAAS,SAHZ,MAAM,KAAK,CAAC,CAAC,WAAW,IACpC,MAAM,KAAK,IACX,MAAM,OAAO,MAAM,KAAK,CAAC;KACO,CAAC;IACvC,QAAQ;KACN,SAAS,EAAE,QAAQ,QAAQ,CAAC;IAC9B;GACF,GAAG;IAAC;IAAM;IAAQ;GAAK,CAAC;GAExB,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,UAAU;IACd,MAAM,QAAQ,OAAO,iBAAiB;KACpC,QAAa,CAAC,CAAC,WACP,CAAyC,SACzC;MAAE,IAAI,SAAS,SAAS,EAAE,QAAQ,QAAQ,CAAC;KAAE,CACrD;IACF,GAAG,GAAG;IACN,aAAa;KAAE,UAAU;KAAO,OAAO,aAAa,KAAK;IAAE;GAE7D,GAAG,CAAC,OAAO,CAAC;GAIZ,CAAA,GAAA,MAAA,UAAA,OAAgB;IACd,IAAI,UAAU;IACd,MAAM,aAAmB;KACvB,QAAa,IAAI;MACf,MAAM,CAAC,CAAC,YAAY,IAAI;MACxB,aAAa,CAAC,CAAC,YAAY,IAAI;MAC/B,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;MACzB,OAAO,CAAC,CAAC,YAAY,IAAI;MACzB,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;KACzB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,IAAI,QAAQ;MACjC,IAAI,CAAC,SAAS;MACd,IAAI,OAAO,MAAM,cAAc,EAA6B;MAC5D,IAAI,OAAO,MAAM,cAAc,EAAE;MACjC,UAAU;OAAE,UAAW,OAAO,CAAC;OAAiB,MAAQ,IAAI,QAAQ,CAAC;OAAkB,QAAU,IAAI,UAAU,CAAC;OAAkB,UAAW,IAAI,YAAY;MAA+D,CAAC;MAC7N,MAAM,MAAyD,CAAC;MAChE,KAAK,MAAM,QAAS,OAAO,CAAC,GAC1B,IAAI,KAAK,OAAO,KAAA,KAAa,KAAK,QAAQ,KAAA,GAAW,IAAI,KAAK,MAAM;OAAE,KAAK,KAAK;OAAK,UAAU,KAAK,YAAY;MAAE;MAEpH,UAAU,GAAG;MACb,iBAAkB,MAAM,CAAC,CAAoC;KAC/D,CAAC;IACH;IACA,KAAK;IACL,MAAM,gBAAsB;KAAE,KAAK;IAAE;IACrC,OAAO,iBAAiB,SAAS,OAAO;IACxC,aAAa;KAAE,UAAU;KAAO,OAAO,oBAAoB,SAAS,OAAO;IAAE;GAC/E,GAAG;IAAC;IAAO;IAAc;IAAU;IAAQ;GAAM,CAAC;;GAGlD,SAAS,cAAoB;IAC3B,QAAQ,UAAU,CAAC;IACnB,aAAa,EAAE;IACf,eAAe,EAAE;IACjB,WAAW,IAAI;IACf,UAAU,EAAE,QAAQ,WAAW,CAAC;GAClC;;GAGA,eAAe,UAAU,IAA2B;IAClD,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,IAAI;KACF,MAAM,SAAS,MAAM,IAAI,EAAE;KAC3B,IAAI,CAAC,OAAO,SAAS,OAAO,UAAU,KAAA,GAAW;MAC/C,WAAW,EAAE,OAAO,CAAC;MACrB;KACF;KACA,MAAM,QAAQ,OAAO;KACrB,QAAQ;MACN,OAAO,MAAM,SAAS;MACtB,MAAM,MAAM,QAAQ;MACpB,UAAU,MAAM,YAAY;MAC5B,OAAO,MAAM,SAAS;MACtB,OAAO,MAAM,SAAS;MACtB,UAAU,MAAM,YAAY;MAC5B,MAAM,MAAM,QAAQ;MACpB,MAAM,MAAM,QAAQ;MACpB,YAAY,MAAM,cAAc;MAChC,QAAQ,MAAM,UAAU;MACxB,QAAQ,MAAM,UAAU;MACxB,aAAa,MAAM,eAAe;MAClC,cAAc,MAAM,gBAAgB;MACpC,WAAW,MAAM,aAAa;MAC9B,KAAK,MAAM,OAAO;MAClB,OAAO,MAAM,SAAS;MACtB,MAAM,MAAM,QAAQ;MACpB,OAAO,MAAM,SAAS;MACtB,WAAW,MAAM;MACjB,cAAc,MAAM;MACpB,aAAa,MAAM;MACnB,UAAU,MAAM,YAAY;KAC9B,CAAC;KACD,cAAc,MAAM,QAAQ,CAAC,EAAA,CAAG,KAAK,IAAI,CAAC;KAC1C,eAAe,MAAM,WAAW,KAAA,IAAY,OAAO,QAAQ,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE;KAC7H,UAAU;MAAE,QAAQ;MAAW;KAAM,CAAC;IACxC,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,eAAe,OAAsB;IACnC,IAAI,EAAE,KAAK,SAAS,GAAA,CAAI,KAAK,GAAG;KAC9B,WAAW,EAAE,OAAO,CAAC;KACrB;IACF;IACA,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,IAAI;KACF,MAAM,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAO,MAAK,EAAE,SAAS,CAAC;KAC7E,MAAM,SAAiC,CAAC;KACxC,KAAK,MAAM,QAAQ,YAAY,MAAM,IAAI,GAAG;MAC1C,MAAM,UAAU,KAAK,KAAK;MAC1B,IAAI,QAAQ,WAAW,GAAG;MAC1B,MAAM,KAAK,QAAQ,QAAQ,GAAG;MAC9B,IAAI,MAAM,GAAG;MACb,OAAO,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,KAAK,QAAQ,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK;KACnE;KACA,MAAM,QAAoB;MACxB,QAAQ,KAAK,SAAS,GAAA,CAAI,KAAK;MAC/B,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;MACjE,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;MACjE,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,eAAe,KAAA,IAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;MACvE,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;MAC3D,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;MAC3D,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;MAC1E,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;MAC7E,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;MACpE,GAAI,KAAK,QAAQ,KAAA,IAAY,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;MAClD,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;MACrD,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;MACxD,GAAI,KAAK,cAAc,KAAA,IAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;MACpE,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;MAC7E,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;MAC1E,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;MAGjE;MACA;KACF;KACA,IAAI,OAAO,WAAW,YACpB,MAAM,IAAI,KAAuC;UAC5C,IAAI,OAAO,WAAW,WAC3B,MAAM,OAAO,OAAO,MAAM,IAAI,KAAK;KAErC,UAAU,EAAE,QAAQ,SAAS,CAAC;KAC9B,MAAM,QAAQ;IAChB,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,eAAe,YAAY,IAA2B;IACpD,IAAI,CAAC,OAAO,QAAQ,EAAE,eAAe,CAAC,GAAG;IACzC,QAAQ,IAAI;IACZ,IAAI;KACF,MAAM,OAAO,EAAE;KACf,MAAM,QAAQ;IAChB,QAAQ;KACN,WAAW,EAAE,OAAO,CAAC;IACvB,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,eAAe,UAAU,IAAY,OAA8B;IACjE,IAAI;KACF,MAAM,UAAU,UAAU,UAAU,KAAK;IAC3C,QAAQ;KAEN,MAAM,WAAW,SAAS,cAAc,UAAU;KAClD,SAAS,QAAQ;KACjB,SAAS,KAAK,YAAY,QAAQ;KAClC,SAAS,OAAO;KAChB,SAAS,YAAY,MAAM;KAC3B,SAAS,OAAO;IAClB;IACA,YAAY,EAAE;IACd,OAAO,iBAAiB,YAAY,IAAI,GAAG,IAAI;GACjD;;GAGA,eAAe,SAAS,IAA2B;IACjD,QAAQ,IAAI;IACZ,IAAI;KACF,MAAM,SAAS,MAAM,KAAK,EAAE;KAC5B,YAAW,cAAa;MAAE,GAAG;OAAW,KAAK,GAAG,OAAO,KAAK,IAAI,OAAO,iBAAiB;KAAI,EAAE;IAChG,QAAQ;KACN,YAAW,cAAa;MAAE,GAAG;OAAW,KAAK,EAAE,OAAO;KAAE,EAAE;IAC5D,UAAU;KACR,QAAQ,KAAK;IACf;GACF;;GAGA,SAAS,SAAS,MAAuB;IACvC,QAAQ,QAAQ,SAAhB;KACE,KAAK,OAAO,OAAO;KACnB,KAAK,WAAW,OAAO;KACvB,KAAK,SAAS,OAAO;KACrB,KAAK,UAAU,OAAO;KACtB,KAAK,UAAU,OAAO;KACtB,SAAS,OAAO;IAClB;GACF;GAEA,SAAS,aAAa,OAAiC;IASrD,OARc;KACZ,MAAM,SAAS,KAAA,IAAY,EAAE,UAAU,MAAM,SAAS,YAAY,IAAI,EAAE,WAAW;KACnF,MAAM;KACN,MAAM;KACN,MAAM;KACN,MAAM,SAAS,KAAA,IAAY,GAAG,MAAM,OAAO,MAAM,SAAS,KAAA,IAAY,IAAI,MAAM,SAAS,OAAO,KAAA;KAChG,MAAM;IACR,CAAC,CAAC,QAAQ,UAA2B,UAAU,KAAA,KAAa,MAAM,SAAS,CAChE,CAAC,CAAC,KAAK,KAAK;GACzB;GAEA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,WAAD;IAAS,WAAWA,gCAAI;IAAS,mBAAgB;cAAjD;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,IAAG;gBAAiB,EAAE,SAAS;KAAM,CAAA;KACzC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAWA,gCAAI;gBAAQ,EAAE,OAAO;KAAK,CAAA;KAExC,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;QAAO,WAAWA,gCAAI;kBAAtB;SACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,WAAU;oBAAW,EAAE,mBAAmB;SAAQ,CAAA;SACxD,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,IAAI;UACJ,MAAK;UACL,aAAa,EAAE,mBAAmB;UAClC,OAAO;UACP,WAAU,UAAS,SAAS,MAAM,OAAO,KAAK;SAC/C,CAAA;SACA,MAAM,SAAS,KACd,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,WAAWA,gCAAI;UAAa,eAAe,SAAS,EAAE;UAAG,cAAY,EAAE,aAAa;oBAAG;SAAS,CAAA;QAEnH;;OACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QAAQ,WAAWA,gCAAI;QAAY,OAAO;QAAY,WAAU,MAAK,cAAc,EAAE,OAAO,KAAK;QAAG,cAAY,EAAE,WAAW;kBAA7H,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,OAAM;mBAAI,EAAE,UAAU;QAAU,CAAA,GACvC,OAAO,QAAQ,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,SACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAA2B;mBAAQ,EAAE,GAAG;QAAU,GAArC,KAAqC,CACnD,CACK;;OACR,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QAAQ,WAAWA,gCAAI;QAAY,OAAO;QAAW,WAAU,MAAK,aAAa,EAAE,OAAO,KAAK;QAAG,cAAY,EAAE,WAAW;kBAA3H,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAQ,OAAM;mBAAI,EAAE,SAAS;QAAU,CAAA,GACtC,CAAC,GAAG,IAAI,IAAI,MAAM,WAAW,UAAU,MAAM,QAAQ,SAAQ,MAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAI,QACjG,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SAAkB,OAAO;mBAAM;QAAY,GAA9B,GAA8B,CAC5C,CACK;;OACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QACE,MAAK;QACL,WAAWA,gCAAI;QACf,eAAe,UAAU,WAAW,UAAU,WAAW,OAAO;kBAChE,WAAW,UAAU,EAAE,WAAW,IAAI,EAAE,YAAY;OAAU,CAAA;OAChE,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAW,SAAS;QAAa,UAAU,QAAQ;kBAAxF,CAAkG,MAC7F,EAAE,KAAK,CACJ;;MACL;;KAEJ,WAAW,QACV,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;QAAO,WAAWA,gCAAI;kBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,WAAW,EAAQ,CAAA,GAC5B,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;SACE,OAAO,OAAO;SACd,UAAU;SACV,WAAU,UAAS;UACjB,MAAM,OAAO,MAAM,OAAO;UAC1B,QAAQ,IAAI;UACZ,WAAW,IAAI;UACf,cAAmB,IAAI,CAAC,CAAC,MACvB,UAAS;WAAE,UAAU,KAAK;WAAG,QAAQ,KAAK;UAAE,SACtC;WAAE,WAAW,EAAE,OAAO,CAAC;WAAG,QAAQ,KAAK;UAAE,CACjD;SACF;mBAXF;UAaE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAY,EAAE,cAAc;UAAU,CAAA;UACpD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAO,EAAE,SAAS;UAAU,CAAA;UAC1C,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAQ,EAAE,UAAU;UAAU,CAAA;SACtC;UACH;;OACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;QAAO,WAAWA,gCAAI;kBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,kBAAkB,EAAQ,CAAA,GACnC,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SACE,MAAK;SACL,SAAS,OAAO;SAChB,UAAU;SACV,WAAU,UAAS;UACjB,MAAM,OAAO,MAAM,OAAO;UAC1B,QAAQ,IAAI;UACZ,WAAW,IAAI;UACf,eAAoB,IAAI,CAAC,CAAC,MACxB,UAAS;WAAE,UAAU,KAAK;WAAG,QAAQ,KAAK;UAAE,SACtC;WAAE,WAAW,EAAE,OAAO,CAAC;WAAG,QAAQ,KAAK;UAAE,CACjD;SACF;QACD,CAAA,CACI;;OACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAW,OAAO,eAAe,aAAaA,gCAAI,eAAe,OAAO,eAAe,QAAQA,gCAAI,UAAUA,gCAAI;kBAApH,CACG,OAAO,eAAe,aACnB,EAAE,kBAAkB,IACpB,OAAO,eAAe,QACpB,EAAE,aAAa,IACf,EAAE,cAAc,GACrB,OAAO,cAAc,MAAM,EAAE,eAAe,MAAM,MAAM,EAAE,gBAAgB,GAC1E;;MACA;;KAGN,YAAY,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,MAAK;MAAQ,WAAWA,gCAAI;gBAAQ;KAAW,CAAA;KAEtE,MAAM,WAAW,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,WAAWA,gCAAI;gBAAS,EAAE,SAAS;KAAK,CAAA;KACzE,MAAM,WAAW,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,MAAK;MAAQ,WAAWA,gCAAI;gBAAQ,EAAE,OAAO;KAAK,CAAA;KACjF,MAAM,WAAW,WAAW,MAAM,QAAQ,WAAW,KACpD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAQ,EAAE,OAAO;OAAK,CAAA;OACxC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAY,WAAW,EAAE,mBAAmB,IAAI,EAAE,WAAW;OAAK,CAAA;OACnF,CAAC,YACA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAW,SAAS;kBAAc,EAAE,UAAU;OAAU,CAAA;MAE5F;;KAGN,cAAc,SAAS,KACtB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAWA,gCAAI;iBAAc,EAAE,eAAe;MAAK,CAAA,GACrD,cAAc,KAAK,GAAG,MACrB,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAW,WAAWA,gCAAI;iBAAa,OAAO,EAAE,SAAS,EAAE;MAAK,GAAxD,CAAwD,CACjE,CACE;;KAGN,aAAa,SAAS,KACrB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAWA,gCAAI;iBAAc,EAAE,gBAAgB;MAAK,CAAA,GACtD,aAAa,KAAK,IAAI,MACrB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;OAAW,WAAWA,gCAAI;iBAA1B;QACG,OAAO,GAAG,UAAU,EAAE;QAAE;QAAI,OAAO,GAAG,SAAS,GAAG,MAAM,EAAE;OAC1D;SAFK,CAEL,CACJ,CACE;;KAGN,WAAW,SAAS,OAAO,SAAS,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,OAAO,OAAO,SAAS,MAClG,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAc,EAAE,aAAa;OAAK,CAAA;OACnD,OAAO,SAAS,SAAS,KACxB,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAlB;SAA+B,EAAE,gBAAgB;SAAE;SAAG,OAAO,SAAS;QAAU;WAC9E,OAAO,SAAwE,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,MACtG,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAW,WAAWA,gCAAI;kBAA1B;SAAqC;SAChC,OAAO,KAAK,SAAS,GAAG;SAAG,KAAK,QAAQ,YAAY,KAAK,EAAE,YAAY,EAAE,KAAK,KAAK,QAAQ,SAAS,KAAK,EAAE,aAAa,EAAE,GAAG,KAAK,YAAY,EAAE,MAAM,KAAK,EAAE,QAAQ,EAAE;QACzK;UAFK,CAEL,CACJ,CACD,EAAA,CAAA;OAEH,OAAO,KAAK,SAAS,KACpB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAlB;SAA+B,EAAE,YAAY;SAAE;SAAG,OAAO,KAAK;QAAU;;OAEzE,OAAO,OAAO,SAAS,KACtB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;QAAG,WAAWA,gCAAI;kBAAlB;SAA+B,EAAE,cAAc;SAAE;SAAG,OAAO,OAAO;QAAU;;MAE3E;;KAGN,MAAM,WAAW,YAAY,MAAM,QAAQ,SAAS,KAAK,aAAa,SAAS,MAC9E,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAWA,gCAAI;MACf,eAAe;OACb,IAAI,CAAC,WAAW,MAAW,CAAC,CAAC,KAAK,eAAe;OACjD,aAAa,CAAC,SAAS;MACzB;gBANF,CAOE,YAAY,EAAE,WAAW,IAAI,EAAE,WAAW,GAAG,aAAa,SAAS,IAAI,KAAK,aAAa,OAAO,KAAK,EAAW;;KAGnH,aACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;MAAI,WAAWA,gCAAI;gBAAnB,CACG,aAAa,KAAI,UAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;OAAmB,WAAWA,gCAAI;iBAAlC,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,WAAWA,gCAAI;kBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAWA,gCAAI;mBAAQ,MAAM;QAAY,CAAA,GAC/C,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;SAAM,WAAWA,gCAAI;mBAAW,EAAE,SAAS;QAAQ,CAAA,CAChD;WACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;QAAK,WAAWA,gCAAI;kBAClB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,eAAe;UAAE,QAAa,MAAM,EAAE,CAAC,CAAC,WAAW;WAAE,MAAW,CAAC,CAAC,KAAK,eAAe;WAAG,QAAa;UAAE,CAAC;SAAE;SAC3G,UAAU,QAAQ;mBAClB,EAAE,SAAS;QAAU,CAAA;OACpB,CAAA,CACH;SAZK,MAAM,EAYX,CACL,GACA,aAAa,WAAW,KAAK,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,WAAWA,gCAAI;iBAAQ,EAAE,YAAY;MAAK,CAAA,CACzE;;KAEL,aAAa,aAAa,SAAS,KAClC,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAWA,gCAAI;MACf,eAAe;OACb,QAAQ,IAAI;OACZ,YAAiB,CAAC,CAAC,WAAW;QAC5B,MAAW,CAAC,CAAC,KAAK,eAAe;QACjC,QAAa;QACb,QAAQ,KAAK;OACf,SAAS,QAAQ,KAAK,CAAC;MACzB;MACA,UAAU,QAAQ;gBAClB,EAAE,YAAY;KAAU,CAAA,GAC1B,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;MACE,MAAK;MACL,WAAWA,gCAAI;MACf,eAAe;OACb,IAAI,CAAC,OAAO,QAAQ,EAAE,mBAAmB,CAAC,GAAG;OAC7C,QAAQ,IAAI;OACZ,QAAa,IAAI,aAAa,KAAI,MAAK,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;QAC/D,MAAW,CAAC,CAAC,KAAK,eAAe;QACjC,QAAa;QACb,QAAQ,KAAK;OACf,SAAS,QAAQ,KAAK,CAAC;MACzB;MACA,UAAU,QAAQ;gBAClB,EAAE,YAAY;KAAU,CAAA,CAC1B,EAAA,CAAA;KAGH,MAAM,WAAW,WAAW,MAAM,QAAQ,SAAS,KAClD,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,WAAWA,gCAAI;gBAChB,MAAM,QAAQ,QAAO,WAAU,eAAe,MAAM,MAAM,SAAS,gBAAgB,cAAc,OAAO,MAAM,QAAQ,CAAC,EAAA,CAAG,SAAS,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,MAAM,WAAW,UAAU,EAAE,MAAM,cAAc,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAI,UAAS;OACpO,MAAM,OAAO,QAAQ,MAAM;OAC3B,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,MAAD;QAAmB,WAAW,GAAGA,gCAAI,MAAM,OAAO,MAAM,QAAQ,KAAA,IAAY,IAAI,OAAO,MAAM,GAAG,CAAE,QAAQ,YAAYA,gCAAI,aAAaA,gCAAI,WAAW;kBAAtJ;SACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;UAAK,WAAWA,gCAAI;UAAS,eAAe,cAAc,eAAe,MAAM,KAAK,OAAO,MAAM,EAAE;oBAAnG;WACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAArB;aACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAWA,gCAAI;wBAAW,SAAS,MAAM,IAAI;aAAQ,CAAA;aACzD,MAAoD,YACpD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAWA,gCAAI;cAAS,OAAO,EAAE,QAAQ;wBAAG;aAAO,CAAA;aAE1D,MAAM;aACL,MAAsD,gBAAgB,UACtE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAWA,gCAAI;wBAAY,EAAE,iBAAiB;aAAQ,CAAA;aAE7D,OAAO,MAAM,QAAQ,KAAA,KACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;cAAM,WAAW,GAAGA,gCAAI,SAAS,GAAG,OAAO,MAAM,GAAG,CAAE,QAAQ,YAAYA,gCAAI,cAAcA,gCAAI;wBAC7F,OAAO,MAAM,GAAG,CAAE,QAAQ,YAAY,EAAE,YAAY,IAAI,OAAO,MAAM,GAAG,CAAE,QAAQ,SAAS,GAAG,EAAE,aAAa,EAAE,GAAG,OAAO,MAAM,GAAG,CAAE,SAAS,KAAK,EAAE,QAAQ;aACzJ,CAAA;YAEJ;;WACN,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAAW,aAAa,KAAK;WAAQ,CAAA;WACzD,SAAS,KAAA,KAAa,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAAO;WAAW,CAAA;UAC3D;;SACJ,eAAe,MAAM,MACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;UAAK,WAAWA,gCAAI;oBACjB,OAAO,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM,OAAiC,KAAA,CAAS,CAAC,CAAC,KAAK,CAAC,GAAG,OAChI,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;WAAc,WAAWA,gCAAI;qBAA7B;YACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD,EAAA,UAAS,EAAU,CAAA;YAAC;YAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC;WAC7D;aAFK,CAEL,CACP;SACE,CAAA;SAEP,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;UAAK,WAAWA,gCAAI;oBAApB;WACG,aAAa,MAAM,MAAM,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;YAAM,WAAWA,gCAAI;sBAAS,EAAE,QAAQ;WAAQ,CAAA;WAC1E,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YACE,MAAK;YACL,eAAe,KAAK,UAAU,MAAM,IAAI,MAAM,YAAY,MAAM,KAAK;YACrE,UAAU;sBACV,EAAE,MAAM;WAAU,CAAA;WACpB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YACE,MAAK;YACL,eAAe;aACb,QAAQ,IAAI;aACZ,IAAS,MAAM,EAAE,CAAC,CAAC,MAAK,MAAK;cAC3B,IAAI,EAAE,SAAS,EAAE,OAAO,UAAU,UAAe,MAAM,IAAI,EAAE,MAAM,QAAQ;cAC3E,QAAQ,KAAK;aACf,SAAS,QAAQ,KAAK,CAAC;YACzB;YACA,UAAU,QAAQ;sBAClB,EAAE,cAAc;WAAU,CAAA;WAC5B,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YAAQ,MAAK;YAAS,eAAe,KAAK,SAAS,MAAM,EAAE;YAAG,UAAU;sBAAO,EAAE,MAAM;WAAU,CAAA;WAChG,SAAS,KAAA,KACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YAAQ,MAAK;YAAS,eAAe,KAAK,UAAU,MAAM,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,EAAG;YAAG,UAAU;sBAAO,EAAE,UAAU;WAAU,CAAA;WAE7H,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YAAQ,MAAK;YAAS,eAAe,KAAK,UAAU,MAAM,EAAE;YAAG,UAAU,QAAQ;sBAAW,EAAE,MAAM;WAAU,CAAA;WAC9G,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;YACE,MAAK;YACL,WAAWA,gCAAI;YACf,eAAe,KAAK,YAAY,MAAM,EAAE;YACxC,UAAU,QAAQ;sBAClB,EAAE,QAAQ;WAAU,CAAA;UACnB;;QACH;UA3DK,MAAM,EA2DX;MAER,CAAC;KACC,CAAA;KAGL,MAAM,WAAW,WAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;gBAApB;OACG,eAAe,QAAQ,OAAO,WAAW,UAAU,YAClD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAWA,gCAAI;kBAArB;SAA6B,EAAE,YAAY;SAAE;SAAG,OAAO,WAAW,KAAK;QAAQ;;OAEhF,eAAe,QAAQ,OAAO,WAAW,aAAa,YACrD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAWA,gCAAI;kBAArB,CAA4B,UAAO,OAAO,WAAW,QAAQ,CAAQ;;OAEtE,eAAe,QAAQ,OAAO,WAAW,oBAAoB,YAC5D,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAWA,gCAAI;kBAArB;SAA6B,EAAE,iBAAiB;SAAE;SAAG,OAAO,WAAW,eAAe;QAAQ;;OAE/F,WAAW,QAAQ,OAAO,aAAa,QACtC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAG,OAAO,SAAS,OAAO,IAAIA,gCAAI,cAAcA,gCAAI;kBAAlF;SACG,EAAE,gBAAgB;SAAE;SAAG,OAAO,SAAS;SAAK;SAAG,OAAO,SAAS;SAAK;SAAG,OAAO,SAAS;SAAO;QAC3F;;OAEP,WAAW,QAAQ,OAAO,SAAS,SAAS,KAC3C,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAArC;SAAmD,EAAE,gBAAgB;SAAE;SAAG,OAAO,SAAS;QAAa;;OAExG,WAAW,QAAQ,OAAO,KAAK,SAAS,KACvC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAArC;SAAqD,EAAE,YAAY;SAAE;SAAG,OAAO,KAAK;QAAa;;OAElG,WAAW,QAAQ,OAAO,OAAO,SAAS,KACzC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAArC;SAAqD,EAAE,cAAc;SAAE;SAAG,OAAO,OAAO;QAAa;;OAEtG,WAAW,QAAQ,OAAO,SAAS,WAAW,KAAK,OAAO,KAAK,WAAW,KAAK,OAAO,OAAO,WAAW,KACvG,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAGA,gCAAI;kBAAY,EAAE,UAAU;OAAQ,CAAA;OAEtE,eAAe,QAAQ,WAAW,mBAAmB,KACpD,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;QAAM,WAAW,GAAGA,gCAAI,MAAM,GAAG,WAAW,kBAAkB,KAAKA,gCAAI,cAAc,WAAW,kBAAkB,IAAIA,gCAAI,YAAY;kBAAtI;SACG,EAAE,cAAc;SAAE;SAAG,WAAW;SAAgB;QAC7C;;OAER,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAc,eAAe,KAAK,UAAU;QAAG,UAAU;kBAC3F,EAAE,WAAW;OACR,CAAA;MACL;;KAEN,MAAM,WAAW,WAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,WAAWA,gCAAI;gBAAlB;OACG,EAAE,YAAY;OAAE;OAAG,MAAM,QAAQ;OACjC,eAAe,QAAQ,OAAO,WAAW,aAAa,YAAY,YAAY,OAAO,WAAW,QAAQ;OACxG,eAAe,QAAQ,OAAO,WAAW,oBAAoB,YAAY,MAAM,EAAE,iBAAiB,EAAE,IAAI,OAAO,WAAW,eAAe;OACzI,eAAe,QAAQ,WAAW,mBAAmB,KAAK,cAAc,WAAW,gBAAgB;OACnG,eAAe,QAAQ,OAAO,WAAW,UAAU,YAAY,WAAW,UAAU,QAChF,OAAO,KAAK,WAAW,KAAgC,CAAC,CAAC,SAAS,KAClE,YAAY,OAAO,QAAQ,WAAW,KAAgC,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG;MAC1H;;KAGJ,OAAO,WAAW,YACjB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,WAAWA,gCAAI;MAAQ,MAAK;MAAS,cAAY,OAAO,WAAW,aAAa,EAAE,KAAK,IAAI,EAAE,MAAM;gBAAxG,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAWA,gCAAI;iBAApB;QACG,YAAY,KAAI,UACf,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;SAAuB,WAAWA,gCAAI;mBAAtC,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,MAAM,KAAK,EAAQ,CAAA,GAC3B,MAAM,QAAQ,SACb,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UACE,OAAO,KAAK,QAAQ;UACpB,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;WAAU,MAAM,MAAM,OAAO;UAAM,EAAE;oBAEjF,OAAO,QAAQ,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,SACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAA2B;qBAAQ,EAAE,GAAG;UAAU,GAArC,KAAqC,CACnD;SACK,CAAA,IACN,MAAM,QAAQ,UAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,OAAO,KAAK,SAAS;UACrB,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;WAAU,OAAO,MAAM,OAAO;UAAM,EAAE;SACpF,CAAA,IACC,MAAM,QAAQ,cAAc,MAAM,QAAQ,eAAe,MAAM,QAAQ,YACtE,MAAM,QAAQ,YAAY,MAAM,QAAQ,iBAAiB,MAAM,QAAQ,kBACvE,MAAM,QAAQ,eACjB,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;UAAM,WAAWA,gCAAI;oBAArB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;WACE,MAAM,SAAS,MAAM,OAAO,SAAS;WACrC,OAAQ,KAAK,MAAM,QAA+B;WAClD,WAAU,UAAS,SAAQ,cAAa;YAAE,GAAG;aAAW,MAAM,MAAM,MAAM,OAAO;WAAM,EAAE;UAC1F,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WACE,MAAK;WACL,WAAWA,gCAAI;WACf,eAAe,aAAY,cAAa;YAAE,GAAG;aAAW,MAAM,MAAM,CAAC,SAAS,MAAM;WAAK,EAAE;qBAC3F,SAAS,MAAM,OAAO,EAAE,MAAM,IAAI,EAAE,MAAM;UAAU,CAAA,CAClD;cACJ,MAAM,QAAQ,cAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,MAAK;UACL,OAAO,KAAK,cAAc,KAAA,IAAY,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI;UAC5F,WAAU,UAAS;WACjB,MAAM,MAAM,MAAM,OAAO;WACzB,MAAM,QAAQ,IAAI,SAAS,IAAI,KAAK,MAAM,GAAG,IAAI;WACjD,SAAQ,cAAa;YAAE,GAAG;YAAU,WAAW,OAAO,MAAM,KAAK,IAAI,KAAA,IAAY;WAAM,EAAE;UAC3F;SACD,CAAA,IACC,MAAM,QAAQ,iBAChB,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,MAAK;UACL,KAAK;UACL,KAAK;UACL,aAAa,EAAE,mBAAmB;UAClC,OAAO,KAAK,gBAAgB;UAC5B,WAAU,UAAS;WACjB,MAAM,MAAM,MAAM,OAAO;WACzB,SAAQ,cAAa;YAAE,GAAG;YAAU,cAAc,IAAI,SAAS,IAAI,OAAO,GAAG,IAAI,KAAA;WAAU,EAAE;UAC/F;SACD,CAAA,IACC,MAAM,QAAQ,gBAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;UACE,OAAO,KAAK,eAAe;UAC3B,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;WAAU,aAAa,MAAM,OAAO,UAAU,SAAS,SAAS;UAAS,EAAE;oBAF1H,CAIE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAU,EAAE,mBAAmB;UAAU,CAAA,GACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;WAAQ,OAAM;qBAAQ,EAAE,iBAAiB;UAAU,CAAA,CAC7C;cACN,MAAM,QAAQ,aAChB,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;UAAO,WAAWA,gCAAI;oBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;WACE,MAAK;WACL,SAAS,KAAK,YAAY;WAC1B,WAAU,UAAS,SAAQ,cAAa;YAAE,GAAG;YAAU,UAAU,MAAM,OAAO;WAAQ,EAAE;UACzF,CAAA,GACA,EAAE,cAAc,CACZ;cAEP,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,MAAK;UACL,OAAQ,KAAK,MAAM,QAA+B;UAClD,WAAU,UAAS,SAAQ,cAAa;WAAE,GAAG;YAAW,MAAM,MAAM,MAAM,OAAO;UAAM,EAAE;SAC1F,CAAA,CAEE;WA7EK,MAAM,GA6EX,CACR;QACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;SAAO,WAAWA,gCAAI;mBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,WAAW,EAAQ,CAAA,GAC5B,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,OAAO;UACP,WAAU,UAAS,aAAa,MAAM,OAAO,KAAK;UAClD,aAAY;SACb,CAAA,CACI;;QACP,iBAAA,GAAA,kBAAA,KAAA,CAAC,SAAD;SAAO,WAAWA,gCAAI;mBAAtB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,aAAa,EAAQ,CAAA,GAC9B,iBAAA,GAAA,kBAAA,IAAA,CAAC,YAAD;UACE,OAAO;UACP,WAAU,UAAS,eAAe,MAAM,OAAO,KAAK;UACpD,MAAM;UACN,aAAY;SACb,CAAA,CACI;;OACJ;UACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,WAAWA,gCAAI;iBAApB,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,eAAe,UAAU,EAAE,QAAQ,SAAS,CAAC;QAAG,UAAU;kBAAO,EAAE,QAAQ;OAAU,CAAA,GAC3G,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,WAAWA,gCAAI;QAAY,eAAe,KAAK,KAAK;QAAG,UAAU;kBAAO,EAAE,MAAM;OAAU,CAAA,CAC7G;QACF;;IAEA;;EAEb;;;;;ECl4BA,MAAa,KAAK;GAChB,KAAK;GACL,SAAS;GACT,OAAO;GACP,mBAAmB;GACnB,SAAS;GACT,OAAO;GACP,WAAW;GACX,mBAAmB;GACnB,WAAW;GACX,kBAAkB;GAClB,cAAc;GACd,SAAS;GACT,UAAU;GACV,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,YAAY;GACZ,aAAa;GACb,gBAAgB;GAChB,eAAe;GACf,gBAAgB;GAChB,YAAY;GACZ,cAAc;GACd,UAAU;GACV,cAAc;GACd,WAAW;GACX,YAAY;GACZ,gBAAgB;GAChB,YAAY;GACZ,aAAa;GACb,QAAQ;GACR,WAAW;GACX,WAAW;GACX,SAAS;GACT,YAAY;GACZ,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,mBAAmB;GACnB,MAAM;GACN,MAAM;GACN,UAAU;GACV,SAAS;GACT,WAAW;GACX,YAAY;GACZ,iBAAiB;GACjB,QAAQ;GACR,KAAK;GACL,UAAU;GACV,QAAQ;GACR,MAAM;GACN,MAAM;GACN,QAAQ;GACR,eAAe;GACf,MAAM;GACN,cAAc;GACd,UAAU;GACV,QAAQ;GACR,MAAM;GACN,YAAY;GACZ,WAAW;GACX,eAAe;GACf,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,WAAW;GACX,WAAW;GACX,aAAa;GACb,aAAa;GACb,kBAAkB;GAClB,mBAAmB;GACnB,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,WAAW;GACX,WAAW;GACX,gBAAgB;GAChB,mBAAmB;GACnB,kBAAkB;GAClB,eAAe;GACf,mBAAmB;GACnB,iBAAiB;GACjB,cAAc;GACd,mBAAmB;GACnB,YAAY;GACZ,aAAa;GACb,OAAO;GACP,WAAW;GACX,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,WAAW;GACX,YAAY;EACd;;EAKA,MAAa,KAAqC;GAChD,KAAK;GACL,SAAS;GACT,OAAO;GACP,mBAAmB;GACnB,SAAS;GACT,OAAO;GACP,WAAW;GACX,mBAAmB;GACnB,WAAW;GACX,kBAAkB;GAClB,cAAc;GACd,SAAS;GACT,UAAU;GACV,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,eAAe;GACf,gBAAgB;GAChB,aAAa;GACb,YAAY;GACZ,aAAa;GACb,gBAAgB;GAChB,eAAe;GACf,gBAAgB;GAChB,YAAY;GACZ,cAAc;GACd,UAAU;GACV,cAAc;GACd,WAAW;GACX,YAAY;GACZ,gBAAgB;GAChB,YAAY;GACZ,aAAa;GACb,QAAQ;GACR,WAAW;GACX,WAAW;GACX,SAAS;GACT,YAAY;GACZ,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,mBAAmB;GACnB,MAAM;GACN,MAAM;GACN,UAAU;GACV,SAAS;GACT,WAAW;GACX,YAAY;GACZ,iBAAiB;GACjB,QAAQ;GACR,KAAK;GACL,UAAU;GACV,QAAQ;GACR,MAAM;GACN,MAAM;GACN,QAAQ;GACR,eAAe;GACf,MAAM;GACN,cAAc;GACd,UAAU;GACV,QAAQ;GACR,MAAM;GACN,YAAY;GACZ,WAAW;GACX,eAAe;GACf,YAAY;GACZ,YAAY;GACZ,eAAe;GACf,WAAW;GACX,WAAW;GACX,aAAa;GACb,aAAa;GACb,kBAAkB;GAClB,mBAAmB;GACnB,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,WAAW;GACX,WAAW;GACX,gBAAgB;GAChB,mBAAmB;GACnB,kBAAkB;GAClB,eAAe;GACf,mBAAmB;GACnB,iBAAiB;GACjB,cAAc;GACd,mBAAmB;GACnB,YAAY;GACZ,aAAa;GACb,OAAO;GACP,WAAW;GACX,SAAS;GACT,YAAY;GACZ,YAAY;GACZ,WAAW;GACX,YAAY;EACd;;;;EC9KA,MAAa,KAAK;;EAGlB,MAAa,SAAS;GAAC;GAAS;GAAU;EAAY;;;;;;EAOtD,SAAgB,MAAM,KAA0B;GAC9C,IAAI,aAAa,IAAI,OAAO,SAAS,IAAI;IAAE;IAAI;GAAG,CAAC,GAAG,yBAAyB;GAE/E,MAAM,IAAI,IAAI,OAAO,KAAK,EAAE;GAC5B,MAAM,aAAa,IAAI,IAAI,YAAY;;GAGvC,eAAe,OAAU,QAAgB,OAAgC,CAAC,GAAe;IACvF,MAAM,SAAS,MAAM,WAAW,IAAI,KAAK,QAAQ,SAAS,UAAU,EAAE,KAAK,CAAC;IAC5E,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,SAAS,OAAO,WAAW,OAAO,MAAM,KAAK,IAAI,OAAO,MAAM,SAAS;IAEzF,OAAO,OAAO;GAChB;GAEA,MAAM,kBAAwC;IAC5C;IACA,cAAc,OAAoC,QAAQ;IAC1D,gBAAgB,SAAS,OAAoC,iBAAiB,EAAE,KAAK,CAAC;IACtF,iBAAiB,YAAY,OAAoC,kBAAkB,EAAE,QAAQ,CAAC;IAC9F,YAAY,OAAkD,MAAM,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IACzF,SAAS,OAAO,UAAU,OAAkD,UAAU;KAAE;KAAO,OAAO,SAAS;IAAG,CAAC,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IACxI,MAAM,OAAO,OAAmE,OAAO,EAAE,GAAG,CAAC;IAC7F,MAAM,UAAU,OAA0C,OAAO,EAAE,MAAM,CAAC;IAC1E,SAAS,IAAI,UAAU,OAAsE,UAAU;KAAE;KAAI;IAAM,CAAC;IACpH,SAAS,OAAO,OAA6B,UAAU,EAAE,GAAG,CAAC;IAC7D,aAAa,OAAkD,OAAO,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IAC3F,gBAAgB,OAA+B,UAAU,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IAC9E,eAAe,OAA8B,SAAS,CAAC,CAAC,MAAK,MAAK,EAAE,MAAM;IAC1E,aAAa,OAAgC,OAAO;IACpD,cAAc,OAA+B,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,OAAO;IAC1E,oBAAoB,OAAqD,cAAc;IACvF,SAAS,eAAe,OAAuD,UAAU,EAAE,YAAY,cAAc,GAAG,CAAC;IACzH,cAAc,OAAyG,QAAQ;IAC/H,UAAU,OAAO,OAA8B,WAAW,EAAE,GAAG,CAAC;IAChE,mBAAmB,OAA6B,aAAa;IAC7D,OAAO,OAAO,OAAmE,QAAQ,EAAE,GAAG,CAAC;GACjG;GAEA,IAAI,MAAM,OAAO,0BAA0B,IAAI,MAAM,SAAS;IAC5D,MAAM;IACN,IAAI;IACJ,OAAO;IACP,aAAa,EAAE,KAAK;IACpB,QAAQ;GACV,GAAG,YAAY,CAAC;EAClB"}

package/lib/index.js

@@ -53,12 +53,12 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
 import { defineTool } from '@deepseek-ai/dsh-tools';
 import Schema from '@deepseek-ai/schemastery';
 import { Remote, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
-import { readFile, writeFile, mkdir, readdir } from 'node:fs/promises';
+import { readFile, writeFile, mkdir, readdir, unlink } from 'node:fs/promises';
 import { randomUUID } from 'node:crypto';
 import { dirname, join } from 'node:path';
 import { openVault, defaultVaultPath } from "./store.js";
 import { totp, parseTotpSecret, hotp, base32Decode } from "./totp.js";
-import { generatePassword } from "./password.js";
+import { generatePassword, generatePassphrase } from "./password.js";
 export const name = 'dsh-vault';
 export const inject = ['tools'];
 export const Config = Schema.object({
@@ -570,9 +570,9 @@ export async function apply(ctx, config) {
     }));
     ctx.tools.register(defineTool({
         name: 'vault_generate_password',
-        description: 'Generate a cryptographically strong random password with configurable length and character classes. '
-            + 'Use this when a user needs a new password; the generated value is returned and is not stored automatically — '
-            + 'call vault_add or vault_update to persist it.',
+        description: 'Generate a cryptographically strong random password (configurable length/classes) or a '
+            + 'memorable passphrase (passphrase: true, EFF-style word list). Use when a user needs a new password; '
+            + 'the generated value is returned and is not stored automatically — call vault_add or vault_update to persist it.',
         parameters: {
             length: { type: 'integer', description: 'Total length (default 20, min = number of selected classes).' },
             lowercase: { type: 'boolean', description: 'Include lowercase (default true).' },
@@ -583,6 +583,10 @@ export async function apply(ctx, config) {
             group: { type: 'integer', description: 'Insert "-" every N characters (e.g. 3 → vK7-mQ2-zt9).' },
             prefix: { type: 'string', description: 'Fixed prefix prepended to the random core (site requirements).' },
             suffix: { type: 'string', description: 'Fixed suffix appended to the random core (site requirements).' },
+            passphrase: { type: 'boolean', description: 'Generate a memorable passphrase instead of a random password (ignores length/classes/group).' },
+            words: { type: 'integer', description: 'Number of words for passphrase mode (default 4, 2–12).' },
+            separator: { type: 'string', description: 'Separator between passphrase words (default "-").' },
+            wordDigits: { type: 'boolean', description: 'Append two random digits in passphrase mode (default true).' },
         },
         output: {
             schema: {
@@ -596,6 +600,14 @@ export async function apply(ctx, config) {
             render: (_args, value) => [{ type: 'text', text: value.password }],
         },
         async execute(args) {
+            if (args.passphrase === true) {
+                const password = generatePassphrase({
+                    ...(args.words !== undefined ? { words: args.words } : {}),
+                    ...(args.separator !== undefined ? { separator: args.separator } : {}),
+                    ...(args.wordDigits !== undefined ? { wordDigits: args.wordDigits } : {}),
+                });
+                return { password, length: password.length };
+            }
             const password = generatePassword({
                 ...(args.length !== undefined ? { length: args.length } : {}),
                 ...(args.lowercase !== undefined ? { lowercase: args.lowercase } : {}),
@@ -746,8 +758,7 @@ export async function apply(ctx, config) {
         async execute(args) {
             assertWritable('vault_expiry');
             const s = await guardStore();
-            const patch = args.expiresAt === 0 ? { expiresAt: '' } : { expiresAt: args.expiresAt };
-            const updated = await s.update(args.id, patch);
+            const updated = await s.update(args.id, { expiresAt: args.expiresAt });
             return { updated: updated !== undefined };
         },
     }));
@@ -887,7 +898,7 @@ export async function apply(ctx, config) {
         description: 'Vault overview: total entries, counts by kind, entries with TOTP, high-sensitivity '
             + 'entries, and expired credentials. No secrets returned. Useful for a quick health glance.',
         parameters: {},
-        output: { schema: { type: 'object', additionalProperties: false, properties: { total: { type: 'integer', required: true }, byKind: { type: 'json', required: true }, byTag: { type: 'json', required: true }, withTotp: { type: 'integer', required: true }, withPrivateKey: { type: 'integer', required: true }, highSensitivity: { type: 'integer', required: true }, expired: { type: 'integer', required: true }, recent7d: { type: 'integer', required: true } } }, render: (_a, v) => [{ type: 'text', text: `vault: ${v.total} entries (${JSON.stringify(v.byKind)})` }] },
+        output: { schema: { type: 'object', additionalProperties: false, properties: { total: { type: 'integer', required: true }, byKind: { type: 'json', required: true }, byTag: { type: 'json', required: true }, withTotp: { type: 'integer', required: true }, withPrivateKey: { type: 'integer', required: true }, highSensitivity: { type: 'integer', required: true }, expired: { type: 'integer', required: true }, recent7d: { type: 'integer', required: true }, trashCount: { type: 'integer', required: true } } }, render: (_a, v) => [{ type: 'text', text: `vault: ${v.total} entries, ${v.trashCount} trashed (${JSON.stringify(v.byKind)})` }] },
         async execute() {
             const s = await guardStore();
             return s.stats();
@@ -1168,6 +1179,8 @@ export async function apply(ctx, config) {
             kind: { type: 'string', enum: ['login', 'ssh', 'api-key', 'secret', 'oauth', 'custom'], description: 'Entry kind (default login).' },
             secret: { type: 'string', description: 'The secret value: stored into apiKey for api-key, password for login, secret otherwise.' },
             username: { type: 'string', description: 'Optional username.' },
+            tags: { type: 'array', items: { type: 'string' }, description: 'Searchable tags.' },
+            notes: { type: 'string', description: 'Optional free-form notes.' },
         },
         output: { schema: { type: 'object', additionalProperties: false, properties: { id: { type: 'string', required: true }, title: { type: 'string', required: true } } }, render: (_a, v) => [{ type: 'text', text: `added ${v.title} (id: ${v.id})` }] },
         async execute(args) {
@@ -1183,6 +1196,8 @@ export async function apply(ctx, config) {
                 title: args.title.trim(),
                 kind,
                 ...(args.username !== undefined ? { username: args.username } : {}),
+                ...(args.tags !== undefined ? { tags: normalizeTags(args.tags) } : {}),
+                ...(args.notes !== undefined ? { notes: args.notes } : {}),
                 ...(kind === 'api-key' ? { apiKey: args.secret } : kind === 'login' ? { password: args.secret } : { secret: args.secret }),
             });
             emitAudit('write', 'vault_quick_add', entry.id, entry.title);
@@ -1193,16 +1208,18 @@ export async function apply(ctx, config) {
     ctx.tools.register(defineTool({
         name: 'vault_merge',
         description: 'Merge one entry INTO another (Bitwarden-style duplicate cleanup): non-empty fields of '
-            + 'the source fill gaps in the target, then the source is permanently removed. Returns the merged summary.',
+            + 'the source fill gaps in the target, then the source is permanently removed (unless keepSource). '
+            + 'Returns the merged summary.',
         parameters: {
             fromId: { type: 'string', required: true, description: 'Source entry id (merged into the target, then deleted).' },
             toId: { type: 'string', required: true, description: 'Target entry id (kept, gaps filled).' },
+            keepSource: { type: 'boolean', description: 'Keep the source entry after merging (default false = delete it).' },
         },
         output: { schema: { type: 'object', additionalProperties: false, properties: { merged: { type: 'boolean', required: true }, entry: { type: 'json' } } }, render: (_a, v) => [{ type: 'text', text: v.merged ? 'entries merged' : 'merge failed (one/both not found or in trash)' }] },
         async execute(args) {
             assertWritable('vault_merge');
             const s = await guardStore();
-            const merged = await s.merge(args.fromId, args.toId);
+            const merged = await s.merge(args.fromId, args.toId, { keepSource: args.keepSource === true });
             return merged === undefined ? { merged: false } : { merged: true, entry: toSummaryJson(merged) };
         },
     }));
@@ -1781,15 +1798,19 @@ export async function apply(ctx, config) {
     ctx.tools.register(defineTool({
         name: 'vault_rotation',
         description: 'Report credentials that are expired, due for rotation (rotationDays elapsed), '
-            + 'or expiring within 7 days. Returns summaries with a due state — never secrets.',
-        parameters: {},
+            + 'or expiring soon. Returns summaries with a due state — never secrets.',
+        parameters: { soonWindowDays: { type: 'integer', description: 'How many days ahead counts as "expiring soon" (default 7, 1–90).' } },
         output: {
             schema: { type: 'object', additionalProperties: false, properties: { entries: { type: 'array', required: true, items: { type: 'json' } } } },
             render: (_a, v) => [{ type: 'text', text: v.entries.length === 0 ? 'no rotation items' : JSON.stringify(v.entries) }],
         },
-        async execute() {
+        async execute(args) {
             const s = await guardStore();
-            return { entries: s.rotationReport() };
+            const window = args.soonWindowDays === undefined ? 7 : args.soonWindowDays;
+            if (!Number.isInteger(window) || window < 1 || window > 90) {
+                throw new Error('vault_rotation: soonWindowDays must be an integer 1–90');
+            }
+            return { entries: s.rotationReport(Date.now(), window) };
         },
     }));
     // ── vault_health: weak / reused credential scan ────────────────────────────
@@ -2008,18 +2029,44 @@ export async function apply(ctx, config) {
     ctx.tools.register(defineTool({
         name: 'vault_backup',
         description: 'Create a timestamped backup of the vault file (a copy of the on-disk encrypted '
-            + 'document, not a plaintext export). Returns the backup path. Safe to run anytime.',
-        parameters: {},
-        output: { schema: { type: 'object', additionalProperties: false, properties: { path: { type: 'string', required: true } } }, render: (_a, v) => [{ type: 'text', text: `backup written to ${v.path}` }] },
-        async execute() {
+            + 'document, not a plaintext export). Old backups beyond maxBackups (default 10) are pruned '
+            + 'automatically (newest kept). Returns the backup path and retention stats.',
+        parameters: { maxBackups: { type: 'integer', description: 'Keep at most this many backups (default 10, min 1).' } },
+        output: { schema: { type: 'object', additionalProperties: false, properties: { path: { type: 'string', required: true }, kept: { type: 'integer', required: true }, pruned: { type: 'integer', required: true } } }, render: (_a, v) => [{ type: 'text', text: `backup written to ${v.path} (kept ${v.kept}, pruned ${v.pruned})` }] },
+        async execute(args) {
             const s = await guardStore();
             const source = resolveVaultPath(config);
-            const backup = join(dirname(source), `vault-backup-${Date.now()}.json`);
+            const dir = dirname(source);
+            const maxBackups = args.maxBackups === undefined ? 10 : args.maxBackups;
+            if (!Number.isInteger(maxBackups) || maxBackups < 1 || maxBackups > 100) {
+                throw new Error('vault_backup: maxBackups must be an integer 1–100');
+            }
+            const backup = join(dir, `vault-backup-${Date.now()}.json`);
             const raw = await readFile(source, 'utf8');
-            await mkdir(dirname(backup), { recursive: true, mode: 0o700 });
+            await mkdir(dir, { recursive: true, mode: 0o700 });
             await writeFile(backup, raw, { mode: 0o600 });
+            // Retention: keep the newest maxBackups vault-backup-*.json files.
+            let backups = [];
+            try {
+                const names = await readdir(dir);
+                backups = names.filter(n => /^vault-backup-\d+\.json$/.test(n))
+                    .map(n => join(dir, n))
+                    .sort((a, b) => b.localeCompare(a)); // newest first (timestamp in name)
+            }
+            catch {
+                backups = [];
+            }
+            backups = backups.filter(n => n !== backup);
+            let pruned = 0;
+            for (const stale of backups.slice(maxBackups - 1)) {
+                try {
+                    await unlink(stale);
+                    pruned++;
+                }
+                catch { /* best-effort */ }
+            }
             void s;
-            return { path: backup };
+            return { path: backup, kept: Math.min(backups.length + 1, maxBackups), pruned };
         },
     }));
     // ── vault_import_csv: bulk import from a CSV file ───────────────────────────
@@ -2215,6 +2262,7 @@ let VaultGateway = (() => {
     let _trash_decorators;
     let _undeleteAll_decorators;
     let _restore_decorators;
+    let _backup_decorators;
     let _backupStatus_decorators;
     let _stats_decorators;
     let _recent_decorators;
@@ -2237,6 +2285,7 @@ let VaultGateway = (() => {
             _trash_decorators = [Remote('trash')];
             _undeleteAll_decorators = [Remote('undeleteAll')];
             _restore_decorators = [Remote('restore')];
+            _backup_decorators = [Remote('backup')];
             _backupStatus_decorators = [Remote('backupStatus')];
             _stats_decorators = [Remote('stats')];
             _recent_decorators = [Remote('recent')];
@@ -2256,6 +2305,7 @@ let VaultGateway = (() => {
             __esDecorate(this, null, _trash_decorators, { kind: "method", name: "trash", static: false, private: false, access: { has: obj => "trash" in obj, get: obj => obj.trash }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _undeleteAll_decorators, { kind: "method", name: "undeleteAll", static: false, private: false, access: { has: obj => "undeleteAll" in obj, get: obj => obj.undeleteAll }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _restore_decorators, { kind: "method", name: "restore", static: false, private: false, access: { has: obj => "restore" in obj, get: obj => obj.restore }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _backup_decorators, { kind: "method", name: "backup", static: false, private: false, access: { has: obj => "backup" in obj, get: obj => obj.backup }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _backupStatus_decorators, { kind: "method", name: "backupStatus", static: false, private: false, access: { has: obj => "backupStatus" in obj, get: obj => obj.backupStatus }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _stats_decorators, { kind: "method", name: "stats", static: false, private: false, access: { has: obj => "stats" in obj, get: obj => obj.stats }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _recent_decorators, { kind: "method", name: "recent", static: false, private: false, access: { has: obj => "recent" in obj, get: obj => obj.recent }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -2351,6 +2401,30 @@ let VaultGateway = (() => {
             return { restored: await store.restore(id) };
         }
         /** Days since last backup + backup count (no secrets). */
+        async backup(maxBackups = 10) {
+            const dir = dirname(this.vaultPath ?? defaultVaultPath(this.vaultName));
+            const source = this.vaultPath ?? defaultVaultPath(this.vaultName);
+            const backup = join(dir, `vault-backup-${Date.now()}.json`);
+            const raw = await readFile(source, 'utf8');
+            await mkdir(dir, { recursive: true, mode: 0o700 });
+            await writeFile(backup, raw, { mode: 0o600 });
+            let total = 1;
+            let pruned = 0;
+            try {
+                const names = (await readdir(dir)).filter(n => /^vault-backup-\d+\.json$/.test(n))
+                    .map(n => join(dir, n)).sort((a, b) => b.localeCompare(a));
+                total = names.length;
+                for (const stale of names.filter(n => n !== backup).slice(maxBackups - 1)) {
+                    try {
+                        await unlink(stale);
+                        pruned++;
+                    }
+                    catch { /* best-effort */ }
+                }
+            }
+            catch { /* no dir yet */ }
+            return { path: backup, kept: Math.max(1, Math.min(total, maxBackups)), pruned };
+        }
         async backupStatus() {
             const dir = dirname(this.vaultPath ?? defaultVaultPath(this.vaultName));
             const backups = [];
@@ -2383,9 +2457,10 @@ let VaultGateway = (() => {
             return { events: store.getHistory().slice(0, 20) };
         }
         /** Rotation/expiry report (no secrets). */
-        async rotation() {
+        async rotation(soonWindowDays) {
             const store = await this.ensureStore();
-            return { entries: store.rotationReport() };
+            const window = soonWindowDays === undefined ? 7 : soonWindowDays;
+            return { entries: store.rotationReport(Date.now(), window) };
         }
         /** Health scan findings (no secrets). */
         async health() {

package/lib/password.js

@@ -86,3 +86,46 @@ export function generatePassword(options = {}) {
     }
     return password;
 }
+/** Small EFF-style word list for passphrases (128 common, memorable words). */
+const PASSPHRASE_WORDS = [
+    'abacus', 'acorn', 'alpine', 'anchor', 'apricot', 'archer', 'aspen', 'autumn',
+    'bamboo', 'banyan', 'beacon', 'birch', 'biscuit', 'blossom', 'bravo', 'breeze',
+    'cactus', 'canyon', 'cascade', 'cedar', 'charm', 'cherry', 'cinder', 'cobalt',
+    'coral', 'cricket', 'crimson', 'crystal', 'cypress', 'dahlia', 'dandelion', 'delta',
+    'denim', 'diamond', 'dolphin', 'drift', 'eagle', 'ember', 'falcon', 'fennel',
+    'ferret', 'fjord', 'flint', 'foxtrot', 'garden', 'garnet', 'gecko', 'ginkgo',
+    'glacier', 'granite', 'gull', 'harbor', 'hazel', 'heron', 'honey', 'horizon',
+    'iris', 'island', 'ivory', 'jaguar', 'jasmine', 'juniper', 'kayak', 'kestrel',
+    'lagoon', 'larch', 'lilac', 'lotus', 'magpie', 'maple', 'marble', 'meadow',
+    'mentor', 'mosaic', 'nectar', 'nimbus', 'oak', 'obsidian', 'olive', 'onyx',
+    'orchid', 'otter', 'panda', 'papaya', 'pebble', 'pepper', 'phoenix', 'pine',
+    'plum', 'quartz', 'quill', 'raven', 'reed', 'river', 'robin', 'ruby',
+    'saffron', 'sage', 'salamander', 'sand', 'sapphire', 'sequoia', 'shale', 'silver',
+    'snow', 'sparrow', 'spruce', 'starling', 'stone', 'sunset', 'tiger', 'topaz',
+    'tulip', 'umber', 'velvet', 'violet', 'walnut', 'willow', 'winter', 'xenon',
+    'yarrow', 'zephyr', 'zinnia',
+];
+/**
+ * Generate a memorable passphrase ("correct-horse-battery-staple" style) from
+ * a 128-word list. Optionally appends two random digits for sites that require
+ * a number. Zero dependencies; entropy comes from `node:crypto`.
+ * @throws when `words` is not an integer in 2–12, or separator is empty.
+ */
+export function generatePassphrase(options = {}) {
+    const words = options.words ?? 4;
+    const separator = options.separator ?? '-';
+    const withDigits = options.wordDigits ?? true;
+    if (!Number.isInteger(words) || words < 2 || words > 12) {
+        throw new Error('passphrase: words must be an integer 2–12');
+    }
+    if (separator.length === 0)
+        throw new Error('passphrase: separator must not be empty');
+    const parts = [];
+    for (let i = 0; i < words; i++) {
+        parts.push(PASSPHRASE_WORDS[randomInt(PASSPHRASE_WORDS.length)]);
+    }
+    let phrase = parts.join(separator);
+    if (withDigits)
+        phrase += separator + String(randomInt(10)) + String(randomInt(10));
+    return phrase;
+}

package/lib/store.js

@@ -279,12 +279,18 @@ export class VaultStore {
             }
         }
         this.entries.set(id, updated);
-        // rotationDays: 0 means "never rotate" — clear the field entirely instead
-        // of keeping a zero interval that would report due forever.
+        // rotationDays: 0 means "never rotate"; expiresAt: 0 means "no expiry".
+        // Clear the field entirely instead of keeping a zero value that would
+        // report due/expired forever.
+        const record2 = updated;
         if ('rotationDays' in patch && (patch.rotationDays ?? 0) === 0) {
-            delete updated.rotationDays;
-            this.entries.set(id, updated);
+            delete record2.rotationDays;
         }
+        if ('expiresAt' in patch && (patch.expiresAt ?? 0) === 0) {
+            delete record2.expiresAt;
+        }
+        // `updated` is the same object stored in the map, so the deletes above
+        // already took effect in place.
         this.recordHistory('update', id, updated.title);
         await this.persist();
         return updated;
@@ -332,7 +338,7 @@ export class VaultStore {
      * their last update, or whose `expiresAt` is near/past. Returns only
      * summaries plus the computed due state (no secrets).
      */
-    rotationReport(now = Date.now()) {
+    rotationReport(now = Date.now(), soonWindowDays = 7) {
         const report = [];
         for (const entry of this.list()) {
             const base = entry.updatedAt ?? entry.createdAt;
@@ -351,13 +357,13 @@ export class VaultStore {
             }
             else if (expiresAt !== undefined) {
                 daysLeft = Math.ceil((expiresAt - now) / 86_400_000);
-                if (daysLeft <= 7) {
+                if (daysLeft <= soonWindowDays) {
                     due = 'soon';
                 }
             }
             else if (rotationAt !== undefined) {
                 daysLeft = Math.ceil((rotationAt - now) / 86_400_000);
-                if (daysLeft <= 7) {
+                if (daysLeft <= soonWindowDays) {
                     due = 'soon';
                 }
             }
@@ -421,11 +427,11 @@ export class VaultStore {
             if (entry.createdAt >= weekAgo)
                 recent7d++;
         }
-        return { total: this.list().length, byKind, byTag, withTotp, withPrivateKey, highSensitivity, expired, recent7d };
+        return { total: this.list().length, byKind, byTag, withTotp, withPrivateKey, highSensitivity, expired, recent7d, trashCount: this.listTrash().length };
     }
     /** Merge `fromId` into `toId`: non-empty fields of `from` fill gaps in `to`,
      * then `from` is purged. Returns the merged entry or undefined. */
-    async merge(fromId, toId) {
+    async merge(fromId, toId, options = {}) {
         const from = this.entries.get(fromId);
         const to = this.entries.get(toId);
         if (!from || !to || from.deletedAt !== undefined || to.deletedAt !== undefined)
@@ -441,7 +447,9 @@ export class VaultStore {
         }
         merged.updatedAt = Date.now();
         this.entries.set(toId, merged);
-        this.entries.delete(fromId);
+        if (options.keepSource !== true) {
+            this.entries.delete(fromId);
+        }
         this.recordHistory('merge', toId, to.title);
         await this.persist();
         return merged;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vault",
-  "version": "0.8.7",
+  "version": "0.8.9",
   "description": "Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.",
   "type": "module",
   "license": "MIT",