dsh-vault 1.10.65 → 1.10.67

package/README-zh.md

@@ -207,7 +207,7 @@ npx dsh-vault list
 
 ### 1. `env` 是干什么的
 
-`dsh-vault env` 把**打了 `env` 标签**的条目打印成 shell 赋值语句,让脚本自己把密钥取走:
+`get` 取**一个**值,不需要任何标签。`dsh-vault env` 是另一种场景:脚本要**一次拿好几个**密钥。它把**打了 `env` 标签**的条目打印成 shell 赋值语句,让脚本自己取走:
 
 ```
 $ dsh-vault env
@@ -228,10 +228,25 @@ echo "$DEMO_API_KEY"
   "no entries are tagged for environment export";先在 UI 里给条目的标签加上 `env`,或让助手执行 `vault_update { id, tags: ["env"] }`。
 - 名字默认由标题 + 字段推导(`DASHSCOPE` + `apiKey` → `DASHSCOPE_API_KEY`);想固定名字就在条目的 `envKeys` 里指定 —— 见[环境变量导出](#环境变量导出)。
 
+
+**命名 —— 只有三个,其中两个故意都叫 `env`:**
+
+| 名字 | 是什么 | 含义 |
+|---|---|---|
+| `env` | 条目的**标签** | 决定哪些条目会被 `dsh-vault env` 导出;不打标签就不导出 |
+| `env` | **命令** | 打印带该标签的条目 |
+| `envKeys` | 条目的**字段**(可选) | 固定确切名字,例如 `["DASHSCOPE_API_KEY"]`;旧的单数写法 `envKey` 仍作为"只写一个"的简写接受 |
+
+除此之外没有任何叫 `env*` 的东西:`list --json` / `show` 只报 `envKeys`(该条目会导出的名字,也就是 `get` 接受的名字)与 `envTagged`(是否被 `env` 包含)。
+
 ### 2. 有哪些命令
 
 ```sh
-dsh-vault list                             # id、类型、标题、导出的变量名,绝不含密钥
+dsh-vault list                             # 分组显示:哪些会被 env 导出、哪些不会
+#   Exported by `env` (tag "env") — 1 entry:
+#     a1b2c3d4-…  api-key   DASHSCOPE        → DASHSCOPE_API_KEY
+#   Not exported (no "env" tag) — 1 entry; `get <name>` still works for it:
+#     9f8e7d6c-…  api-key   Example Billing  → EXAMPLE_BILLING_API_KEY
 dsh-vault get my-entry                     # 取该条目的主密钥,仅 stdout
 dsh-vault get my-entry --field apiKey      # 取指定字段
 dsh-vault get my-entry --mask              # 只确认存在,不打印值

package/README.md

@@ -216,8 +216,9 @@ row (`pnpm vault …` in a checkout).
 
 ### 1. What `env` is for
 
-`dsh-vault env` prints the entries you tagged `env` as shell assignments, so a
-script can pick the secrets up itself:
+`get` fetches **one** value and needs no tag. `dsh-vault env` is for the other
+case: a script that needs **several** secrets at once. It prints the entries you
+tagged `env` as shell assignments, so the script picks them up itself:
 
 ```
 $ dsh-vault env
@@ -242,10 +243,26 @@ Two things worth knowing:
   `DASHSCOPE_API_KEY`) unless the entry sets `envKeys` — see
   [Environment export](#environment-export).
 
+
+**Names — there are only three, and two of them are the word `env` on purpose:**
+
+| name | what it is | meaning |
+|---|---|---|
+| `env` | an entry **tag** | which entries `dsh-vault env` exports; nothing is exported without it |
+| `env` | the **command** | prints exactly the entries carrying that tag |
+| `envKeys` | an entry **field** (optional) | pin exact names, e.g. `["DASHSCOPE_API_KEY"]`; the old singular `envKey` is accepted as a one-element shorthand |
+
+Nothing else is called `env*`: `list --json` / `show` report `envKeys` (the names
+an entry exports — what `get` accepts) and `envTagged` (whether `env` includes it).
+
 ### 2. The commands
 
 ```sh
-dsh-vault list                             # id, kind, title, exported env name — never secrets
+dsh-vault list                             # grouped: what `env` exports vs the rest
+#   Exported by `env` (tag "env") — 1 entry:
+#     a1b2c3d4-…  api-key   DASHSCOPE        → DASHSCOPE_API_KEY
+#   Not exported (no "env" tag) — 1 entry; `get <name>` still works for it:
+#     9f8e7d6c-…  api-key   Example Billing  → EXAMPLE_BILLING_API_KEY
 dsh-vault get my-entry                     # the entry's primary secret, stdout only
 dsh-vault get my-entry --field apiKey      # one named field
 dsh-vault get my-entry --mask              # confirm it exists without printing it

package/lib/cli.js

@@ -43,7 +43,9 @@ Commands:
   list                    List entries with their env name (never secrets)
   get <id|title|ENVKEY>   Print one field of an entry (default: its main secret)
   show <id|title|ENVKEY>  Print an entry's non-secret fields as JSON
-  env                     Print env-tagged entries as KEY=VALUE lines
+  env                     Print env-TAGGED entries as KEY=VALUE lines (an entry
+                          must carry the tag "env"; "list" marks those [env]).
+                          One value only? "get <entry>" needs no tag.
   export-env <path>       Write those lines to a file (mode 0600)
   verify                  Check the master password (nothing on stdout)
 
@@ -62,6 +64,10 @@ list options:
                           the count of further keys in parentheses, and [env]
                           when the entry is included in "dsh-vault env")
 
+JSON output ("list --json", "show") reports per entry:
+  envKeys                 the env names it exports (what "get" accepts)
+  envTagged               whether "dsh-vault env" includes it
+
 get options:
   --field <name>          apiKey | secret | accessToken | refreshToken | privateKey
                           | password | cardNumber | username | url | fields.<custom>
@@ -302,13 +308,12 @@ function publicFields(entry) {
             out[key] = value;
     }
     out.hasSecret = primarySecret(entry) !== undefined;
-    // Every env name this entry would export, and whether it is actually
-    // included in `dsh-vault env` (the tag decides that).
-    // `envKeys` is what the user configured; `exportedKeys` is what the entry
-    // will actually emit (and what `get` accepts). Keeping them apart is the
-    // whole point — they used to be one confusingly-similar pair of names.
-    out.envKeys = Array.isArray(entry.envKeys) ? entry.envKeys : (entry.envKey !== undefined ? [entry.envKey] : []);
-    out.exportedKeys = envPairsForEntry(entry).map(pair => pair.key);
+    // ONE name for "the env names this entry exports": `envKeys`. It used to be a
+    // configured `envKeys` plus a computed `exportedKeys`, which read as two
+    // similar things — the computed list is the useful one (it already starts with
+    // whatever was pinned), so only that is reported.
+    out.envKeys = envPairsForEntry(entry).map(pair => pair.key);
+    // Whether `dsh-vault env` includes this entry (the tag decides).
     out.envTagged = (entry.tags ?? []).includes('env');
     return out;
 }
@@ -382,18 +387,33 @@ export async function runCli(argv, io) {
                 io.out(`${JSON.stringify(entries.map(publicFields), null, 2)}\n`);
                 return 0;
             }
-            for (const entry of entries) {
+            // Group by what `env` actually does, because a bare `→ NAME` column used
+            // to read as "this is exported" for every entry: the name is only
+            // POTENTIAL until the entry carries the tag.
+            const line = (entry) => {
                 const identity = [entry.username, entry.host, entry.url]
                     .filter((v) => typeof v === 'string' && v.length > 0).join(' · ');
-                // Show the env name `get`/`env` would use, so a script author can copy
-                // it straight out of the listing (plus how many more keys follow).
                 const keys = envPairsForEntry(entry).map(pair => pair.key);
-                const envSuffix = keys.length > 0
-                    ? `  → ${keys[0]}${keys.length > 1 ? ` (+${keys.length - 1})` : ''}`
-                    : '';
-                const tagged = (entry.tags ?? []).includes('env') ? '  [env]' : '';
-                io.out(`${entry.id}  ${(entry.kind ?? 'login').padEnd(8)}  ${entry.title}`
-                    + `${identity.length > 0 ? `  (${identity})` : ''}${envSuffix}${tagged}\n`);
+                const suffix = keys.length > 0 ? `  → ${keys[0]}${keys.length > 1 ? ` (+${keys.length - 1})` : ''}` : '';
+                return `${entry.id}  ${(entry.kind ?? 'login').padEnd(8)}  ${entry.title}`
+                    + `${identity.length > 0 ? `  (${identity})` : ''}${suffix}`;
+            };
+            const tagged = entries.filter(entry => (entry.tags ?? []).includes('env'));
+            const untagged = entries.filter(entry => !(entry.tags ?? []).includes('env'));
+            if (tagged.length > 0) {
+                io.out(`Exported by \`env\` (tag "env") — ${tagged.length} ${tagged.length === 1 ? 'entry' : 'entries'}:\n`);
+                for (const entry of tagged)
+                    io.out(`  ${line(entry)}\n`);
+            }
+            else {
+                io.out('Exported by `env` (tag "env"): none.\n');
+                io.out('  `env` prints only tagged entries; add the tag to one (UI: the entry\'s tags field)\n');
+                io.out('  or ask the assistant: vault_update { id, tags: ["env"] }.\n');
+            }
+            if (untagged.length > 0) {
+                io.out(`\nNot exported (no "env" tag) — ${untagged.length} ${untagged.length === 1 ? 'entry' : 'entries'}; \`get <name>\` still works for them:\n`);
+                for (const entry of untagged)
+                    io.out(`  ${line(entry)}\n`);
             }
             return 0;
         }
@@ -472,12 +492,16 @@ export async function runCli(argv, io) {
         }
         io.out(rendered.join('\n') + (rendered.length > 0 ? '\n' : ''));
         if (rendered.length === 0) {
-            // The usual first-run wall: `env` only exports entries tagged `env`.
-            io.err('dsh-vault: no entries are tagged for environment export.\n');
-            io.err('  `env` prints the entries whose tags include "env". Tag one first:\n');
-            io.err('    - in the UI: Settings → Credentials → the entry → 标签/Fields\' "tags" → env\n');
-            io.err('    - or ask the assistant: vault_update { id, tags: ["env"] }\n');
-            io.err('  `dsh-vault list` shows each entry and the env name it would export.\n');
+            // The usual first-run wall: `env` only exports entries tagged `env`, and
+            // that tag exists so a shell never receives every secret in the vault.
+            io.err('dsh-vault: nothing to export — no entry carries the "env" tag.\n');
+            io.err('  `env` exports only entries whose tags include "env"; that tag is what\n');
+            io.err('  keeps the rest of the vault (cards, notes, unrelated logins) out of your shell.\n');
+            io.err('  Tag one entry and run it again:\n');
+            io.err('    UI:        Settings → Credentials → the entry → tags → env\n');
+            io.err('    assistant: vault_update { id, tags: ["env"] }\n');
+            io.err('  `dsh-vault list` marks tagged entries with [env] and shows the name each exports.\n');
+            io.err('  Only need one value? `dsh-vault get <entry>` needs no tag at all.\n');
         }
         return 0;
     }

package/lib/client.js

@@ -495,191 +495,191 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"editorActions": "t_j5va_editorActions",
-			"tabActive": "t_j5va_tabActive",
-			"listCompact": "t_j5va_listCompact",
-			"reportTitle": "t_j5va_reportTitle",
-			"customValueInput": "t_j5va_customValueInput",
-			"badgeBtn": "t_j5va_badgeBtn",
-			"section": "t_j5va_section",
-			"emptyBox": "t_j5va_emptyBox",
-			"reportLineLink": "t_j5va_reportLineLink",
-			"customFieldRow": "t_j5va_customFieldRow",
-			"vaultSwitch": "t_j5va_vaultSwitch",
-			"headerMessage": "t_j5va_headerMessage",
-			"identity": "t_j5va_identity",
-			"reportSub": "t_j5va_reportSub",
-			"policyField": "t_j5va_policyField",
-			"totpRing": "t_j5va_totpRing",
-			"badgeLink": "t_j5va_badgeLink",
-			"importDesc": "t_j5va_importDesc",
-			"toolbar": "t_j5va_toolbar",
-			"lenChips": "t_j5va_lenChips",
-			"tabs": "t_j5va_tabs",
-			"importList": "t_j5va_importList",
-			"saveButton": "t_j5va_saveButton",
-			"importActions": "t_j5va_importActions",
-			"copied": "t_j5va_copied",
-			"rowSelected": "t_j5va_rowSelected",
-			"histDanger": "t_j5va_histDanger",
-			"auditChips": "t_j5va_auditChips",
-			"colorFieldWrap": "t_j5va_colorFieldWrap",
-			"pwLabel": "t_j5va_pwLabel",
-			"dupNames": "t_j5va_dupNames",
-			"kindChip": "t_j5va_kindChip",
-			"modeReadonly": "t_j5va_modeReadonly",
-			"scoreRing": "t_j5va_scoreRing",
-			"rowMain": "t_j5va_rowMain",
-			"bulkBar": "t_j5va_bulkBar",
-			"hit": "t_j5va_hit",
-			"pinOff": "t_j5va_pinOff",
-			"copyAllBtn": "t_j5va_copyAllBtn",
-			"emojiBtn": "t_j5va_emojiBtn",
-			"actionGroups": "t_j5va_actionGroups",
-			"pwWeak": "t_j5va_pwWeak",
-			"policyBar": "t_j5va_policyBar",
-			"modeAuto": "t_j5va_modeAuto",
-			"intro": "t_j5va_intro",
-			"reportJump": "t_j5va_reportJump",
-			"emojiPicker": "t_j5va_emojiPicker",
-			"gridDetail": "t_j5va_gridDetail",
-			"recentLabel": "t_j5va_recentLabel",
-			"actionPrimary": "t_j5va_actionPrimary",
-			"riskBanner": "t_j5va_riskBanner",
-			"srOnly": "t_j5va_srOnly",
-			"bulkItem": "t_j5va_bulkItem",
-			"reportLine": "t_j5va_reportLine",
-			"auditWhen": "t_j5va_auditWhen",
-			"dangerButton": "t_j5va_dangerButton",
-			"detailBox": "t_j5va_detailBox",
-			"auditRow": "t_j5va_auditRow",
-			"exportChips": "t_j5va_exportChips",
-			"moreWrap": "t_j5va_moreWrap",
-			"editorBody": "t_j5va_editorBody",
-			"pwBar": "t_j5va_pwBar",
-			"status": "t_j5va_status",
-			"gridRow": "t_j5va_gridRow",
-			"gridName": "t_j5va_gridName",
-			"inlineInput": "t_j5va_inlineInput",
-			"backupButton": "t_j5va_backupButton",
-			"inlineField": "t_j5va_inlineField",
-			"rowExpired": "t_j5va_rowExpired",
-			"secretField": "t_j5va_secretField",
+			"revealButton": "t_j5va_revealButton",
+			"toolbarMain": "t_j5va_toolbarMain",
+			"vaultTarget": "t_j5va_vaultTarget",
+			"lockedBanner": "t_j5va_lockedBanner",
 			"deleteButton": "t_j5va_deleteButton",
-			"actionGroup": "t_j5va_actionGroup",
+			"dupMerge": "t_j5va_dupMerge",
+			"kindIcon": "t_j5va_kindIcon",
+			"addButton": "t_j5va_addButton",
+			"searchKbd": "t_j5va_searchKbd",
 			"histNeutral": "t_j5va_histNeutral",
-			"uriCode": "t_j5va_uriCode",
+			"pwHistRow": "t_j5va_pwHistRow",
+			"resultCount": "t_j5va_resultCount",
+			"editor": "t_j5va_editor",
+			"customEq": "t_j5va_customEq",
+			"detailTotp": "t_j5va_detailTotp",
+			"bulkBar": "t_j5va_bulkBar",
 			"actionGroupLabel": "t_j5va_actionGroupLabel",
-			"badgeDanger": "t_j5va_badgeDanger",
-			"iconFieldWrap": "t_j5va_iconFieldWrap",
-			"error": "t_j5va_error",
-			"lockedTag": "t_j5va_lockedTag",
+			"auditChip": "t_j5va_auditChip",
+			"badgeOk": "t_j5va_badgeOk",
+			"detailItem": "t_j5va_detailItem",
+			"reportLine": "t_j5va_reportLine",
+			"detailBox": "t_j5va_detailBox",
+			"importRow": "t_j5va_importRow",
 			"detailActions": "t_j5va_detailActions",
-			"customKeyInput": "t_j5va_customKeyInput",
-			"vaultManageRow": "t_j5va_vaultManageRow",
-			"badgeActive": "t_j5va_badgeActive",
-			"pwStrong": "t_j5va_pwStrong",
-			"tabPane": "t_j5va_tabPane",
-			"dupMerge": "t_j5va_dupMerge",
-			"toolbarMain": "t_j5va_toolbarMain",
-			"histAdd": "t_j5va_histAdd",
-			"healthBar": "t_j5va_healthBar",
-			"brandGlyphSm": "t_j5va_brandGlyphSm",
-			"modeAsk": "t_j5va_modeAsk",
-			"histLink": "t_j5va_histLink",
-			"badge": "t_j5va_badge",
-			"genOpts": "t_j5va_genOpts",
-			"tagManager": "t_j5va_tagManager",
-			"list": "t_j5va_list",
-			"trashButton": "t_j5va_trashButton",
-			"pinOn": "t_j5va_pinOn",
-			"customEq": "t_j5va_customEq",
-			"recentClear": "t_j5va_recentClear",
-			"toolbarFilters": "t_j5va_toolbarFilters",
-			"gridActions": "t_j5va_gridActions",
 			"bulkCount": "t_j5va_bulkCount",
-			"emptyHint": "t_j5va_emptyHint",
-			"pwHistPwd": "t_j5va_pwHistPwd",
-			"brandGlyph": "t_j5va_brandGlyph",
-			"riskWarn": "t_j5va_riskWarn",
-			"recentChip": "t_j5va_recentChip",
-			"empty": "t_j5va_empty",
-			"importName": "t_j5va_importName",
-			"searchBox": "t_j5va_searchBox",
-			"genHist": "t_j5va_genHist",
-			"tagManagerHead": "t_j5va_tagManagerHead",
-			"selectActive": "t_j5va_selectActive",
-			"editor": "t_j5va_editor",
-			"sortButton": "t_j5va_sortButton",
-			"retryButton": "t_j5va_retryButton",
-			"gridInput": "t_j5va_gridInput",
-			"tagActions": "t_j5va_tagActions",
-			"lockedBanner": "t_j5va_lockedBanner",
-			"detailTotp": "t_j5va_detailTotp",
-			"reportBox": "t_j5va_reportBox",
-			"kindIcon": "t_j5va_kindIcon",
-			"recentSearch": "t_j5va_recentSearch",
-			"row": "t_j5va_row",
-			"rowActions": "t_j5va_rowActions",
 			"pwHistBox": "t_j5va_pwHistBox",
-			"resultCount": "t_j5va_resultCount",
-			"pwHistTime": "t_j5va_pwHistTime",
+			"moreMenu": "t_j5va_moreMenu",
+			"backupButton": "t_j5va_backupButton",
+			"editorBody": "t_j5va_editorBody",
+			"detailRemain": "t_j5va_detailRemain",
+			"srOnly": "t_j5va_srOnly",
+			"saveButton": "t_j5va_saveButton",
+			"moreWrap": "t_j5va_moreWrap",
+			"emptyHint": "t_j5va_emptyHint",
+			"modeAsk": "t_j5va_modeAsk",
 			"auditChipActive": "t_j5va_auditChipActive",
-			"rowDue": "t_j5va_rowDue",
-			"lenChip": "t_j5va_lenChip",
-			"addButton": "t_j5va_addButton",
-			"lenChipActive": "t_j5va_lenChipActive",
-			"totpCopy": "t_j5va_totpCopy",
+			"badgeLink": "t_j5va_badgeLink",
+			"selectActive": "t_j5va_selectActive",
+			"pwHistPwd": "t_j5va_pwHistPwd",
+			"trashButton": "t_j5va_trashButton",
+			"rowSelected": "t_j5va_rowSelected",
+			"policyBar": "t_j5va_policyBar",
+			"brandGlyphSm": "t_j5va_brandGlyphSm",
 			"dupGroup": "t_j5va_dupGroup",
-			"auditChip": "t_j5va_auditChip",
-			"favActive": "t_j5va_favActive",
-			"tagCount": "t_j5va_tagCount",
-			"checkField": "t_j5va_checkField",
-			"detailCode": "t_j5va_detailCode",
-			"exportChip": "t_j5va_exportChip",
-			"customFieldRows": "t_j5va_customFieldRows",
+			"dangerButton": "t_j5va_dangerButton",
+			"healthSummary": "t_j5va_healthSummary",
+			"secretField": "t_j5va_secretField",
+			"pinOff": "t_j5va_pinOff",
+			"empty": "t_j5va_empty",
+			"emojiPicker": "t_j5va_emojiPicker",
+			"customFieldRow": "t_j5va_customFieldRow",
 			"kindChipActive": "t_j5va_kindChipActive",
-			"actionBtn": "t_j5va_actionBtn",
+			"tabPane": "t_j5va_tabPane",
+			"favActive": "t_j5va_favActive",
+			"gridActions": "t_j5va_gridActions",
+			"gridDetail": "t_j5va_gridDetail",
+			"totpRing": "t_j5va_totpRing",
+			"recentLabel": "t_j5va_recentLabel",
+			"clearButton": "t_j5va_clearButton",
+			"pwBar": "t_j5va_pwBar",
+			"moreButton": "t_j5va_moreButton",
 			"colorPalette": "t_j5va_colorPalette",
-			"revealButton": "t_j5va_revealButton",
-			"vaultTarget": "t_j5va_vaultTarget",
-			"auditIssues": "t_j5va_auditIssues",
-			"title": "t_j5va_title",
-			"pwHistRow": "t_j5va_pwHistRow",
-			"genHistItem": "t_j5va_genHistItem",
+			"importList": "t_j5va_importList",
+			"lockedTag": "t_j5va_lockedTag",
+			"tagCount": "t_j5va_tagCount",
 			"field": "t_j5va_field",
-			"attachAdd": "t_j5va_attachAdd",
-			"rowCheck": "t_j5va_rowCheck",
-			"pwMeter": "t_j5va_pwMeter",
+			"importActions": "t_j5va_importActions",
+			"riskBanner": "t_j5va_riskBanner",
+			"colorFieldWrap": "t_j5va_colorFieldWrap",
+			"list": "t_j5va_list",
+			"reportSub": "t_j5va_reportSub",
+			"auditRow": "t_j5va_auditRow",
 			"totp": "t_j5va_totp",
-			"moreButton": "t_j5va_moreButton",
-			"histUpdate": "t_j5va_histUpdate",
 			"tab": "t_j5va_tab",
+			"recentChip": "t_j5va_recentChip",
+			"badgeActive": "t_j5va_badgeActive",
+			"actionBtn": "t_j5va_actionBtn",
+			"copied": "t_j5va_copied",
+			"histLink": "t_j5va_histLink",
+			"vaultHeader": "t_j5va_vaultHeader",
+			"customKeyInput": "t_j5va_customKeyInput",
+			"healthBar": "t_j5va_healthBar",
+			"pwLabel": "t_j5va_pwLabel",
+			"inlineField": "t_j5va_inlineField",
+			"retryButton": "t_j5va_retryButton",
+			"lenChipActive": "t_j5va_lenChipActive",
+			"genOptRow": "t_j5va_genOptRow",
+			"vaultSwitch": "t_j5va_vaultSwitch",
 			"tagRow": "t_j5va_tagRow",
+			"exportChip": "t_j5va_exportChip",
+			"title": "t_j5va_title",
+			"totpCopy": "t_j5va_totpCopy",
+			"brandGlyph": "t_j5va_brandGlyph",
+			"pwWeak": "t_j5va_pwWeak",
+			"hit": "t_j5va_hit",
+			"vaultManageRow": "t_j5va_vaultManageRow",
+			"pwHistTime": "t_j5va_pwHistTime",
+			"bulkItem": "t_j5va_bulkItem",
+			"row": "t_j5va_row",
+			"pwStrong": "t_j5va_pwStrong",
+			"rowDue": "t_j5va_rowDue",
+			"tabs": "t_j5va_tabs",
 			"urlGlyph": "t_j5va_urlGlyph",
-			"pwFair": "t_j5va_pwFair",
-			"tagName": "t_j5va_tagName",
 			"highBadge": "t_j5va_highBadge",
+			"tabActive": "t_j5va_tabActive",
+			"recentClear": "t_j5va_recentClear",
+			"histUpdate": "t_j5va_histUpdate",
+			"genHistItem": "t_j5va_genHistItem",
+			"toolbar": "t_j5va_toolbar",
+			"policyField": "t_j5va_policyField",
+			"actionGroup": "t_j5va_actionGroup",
+			"iconFieldWrap": "t_j5va_iconFieldWrap",
+			"attachAdd": "t_j5va_attachAdd",
+			"sortButton": "t_j5va_sortButton",
+			"lenChip": "t_j5va_lenChip",
 			"badgeWarn": "t_j5va_badgeWarn",
-			"detailItem": "t_j5va_detailItem",
-			"badgeOk": "t_j5va_badgeOk",
-			"dueBadge": "t_j5va_dueBadge",
-			"riskDanger": "t_j5va_riskDanger",
-			"favToggle": "t_j5va_favToggle",
-			"detailRemain": "t_j5va_detailRemain",
+			"auditIssues": "t_j5va_auditIssues",
+			"auditWhen": "t_j5va_auditWhen",
+			"exportChips": "t_j5va_exportChips",
+			"error": "t_j5va_error",
 			"kindFilter": "t_j5va_kindFilter",
-			"attachBox": "t_j5va_attachBox",
-			"pinStar": "t_j5va_pinStar",
-			"moreMenu": "t_j5va_moreMenu",
+			"gridRow": "t_j5va_gridRow",
+			"dueBadge": "t_j5va_dueBadge",
+			"badgeDanger": "t_j5va_badgeDanger",
+			"pwFair": "t_j5va_pwFair",
+			"copyAllBtn": "t_j5va_copyAllBtn",
 			"colorSwatch": "t_j5va_colorSwatch",
+			"tagName": "t_j5va_tagName",
+			"customValueInput": "t_j5va_customValueInput",
+			"rowExpired": "t_j5va_rowExpired",
+			"reportJump": "t_j5va_reportJump",
+			"scoreRing": "t_j5va_scoreRing",
+			"genHist": "t_j5va_genHist",
+			"inlineInput": "t_j5va_inlineInput",
+			"editorActions": "t_j5va_editorActions",
+			"checkField": "t_j5va_checkField",
+			"auditChips": "t_j5va_auditChips",
+			"intro": "t_j5va_intro",
+			"lenChips": "t_j5va_lenChips",
+			"attachBox": "t_j5va_attachBox",
+			"tagManagerHead": "t_j5va_tagManagerHead",
+			"detailCode": "t_j5va_detailCode",
+			"kindChip": "t_j5va_kindChip",
+			"toolbarFilters": "t_j5va_toolbarFilters",
 			"toolbarDivider": "t_j5va_toolbarDivider",
+			"emojiBtn": "t_j5va_emojiBtn",
+			"customFieldRows": "t_j5va_customFieldRows",
+			"emptyBox": "t_j5va_emptyBox",
+			"pinStar": "t_j5va_pinStar",
+			"identity": "t_j5va_identity",
+			"status": "t_j5va_status",
+			"uriCode": "t_j5va_uriCode",
+			"reportBox": "t_j5va_reportBox",
+			"headerMessage": "t_j5va_headerMessage",
+			"importName": "t_j5va_importName",
+			"riskDanger": "t_j5va_riskDanger",
+			"favToggle": "t_j5va_favToggle",
+			"importDesc": "t_j5va_importDesc",
+			"riskWarn": "t_j5va_riskWarn",
+			"genOpts": "t_j5va_genOpts",
+			"reportLineLink": "t_j5va_reportLineLink",
+			"rowMain": "t_j5va_rowMain",
+			"gridName": "t_j5va_gridName",
+			"tagActions": "t_j5va_tagActions",
+			"modeAuto": "t_j5va_modeAuto",
+			"modeReadonly": "t_j5va_modeReadonly",
+			"searchBox": "t_j5va_searchBox",
+			"rowActions": "t_j5va_rowActions",
+			"section": "t_j5va_section",
+			"gridInput": "t_j5va_gridInput",
+			"recentSearch": "t_j5va_recentSearch",
+			"tagManager": "t_j5va_tagManager",
+			"actionGroups": "t_j5va_actionGroups",
+			"badge": "t_j5va_badge",
+			"dupNames": "t_j5va_dupNames",
+			"pwMeter": "t_j5va_pwMeter",
+			"listCompact": "t_j5va_listCompact",
 			"detailDeleteBtn": "t_j5va_detailDeleteBtn",
-			"genOptRow": "t_j5va_genOptRow",
-			"importRow": "t_j5va_importRow",
-			"vaultHeader": "t_j5va_vaultHeader",
-			"clearButton": "t_j5va_clearButton",
-			"healthSummary": "t_j5va_healthSummary",
-			"searchKbd": "t_j5va_searchKbd"
+			"badgeBtn": "t_j5va_badgeBtn",
+			"rowCheck": "t_j5va_rowCheck",
+			"histAdd": "t_j5va_histAdd",
+			"histDanger": "t_j5va_histDanger",
+			"pinOn": "t_j5va_pinOn",
+			"actionPrimary": "t_j5va_actionPrimary",
+			"reportTitle": "t_j5va_reportTitle"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx

package/lib/index.js

@@ -4549,7 +4549,7 @@ export async function apply(ctx, config) {
                     const m = /^(.*)\.json$/.exec(entry);
                     if (!m)
                         continue;
-                    if (['access', 'meta'].includes(m[1]) || m[1].startsWith('vault-export-') || isBackupFile(entry))
+                    if (isNonVaultFile(m[1]) || isBackupFile(entry))
                         continue;
                     names.push(m[1]);
                 }
@@ -4594,7 +4594,7 @@ export async function apply(ctx, config) {
                     const m = /^(.*)\.json$/.exec(entry);
                     if (!m)
                         continue;
-                    if (['access', 'meta'].includes(m[1]) || m[1].startsWith('vault-export-') || isBackupFile(entry))
+                    if (isNonVaultFile(m[1]) || isBackupFile(entry))
                         continue;
                     names.push(m[1]);
                 }
@@ -6611,9 +6611,12 @@ function resolveVaultPath(config) {
  * `access-<name>.json`, so two vaults in the same directory never share (or
  * overwrite) each other's mode / auto-capture / auto-lock settings. */
 /** Files that live beside vaults but are NOT vaults: sidecars and metadata. */
+/** Files that live beside vaults but are NOT vaults: sidecars and metadata.
+ * Accepts the name with or without its `.json` suffix. */
 function isNonVaultFile(name) {
-    return name === 'access' || name.startsWith('access-') || name === 'tools' || name === 'meta'
-        || name.endsWith('-audit') || name.startsWith('vault-export-');
+    const base = name.replace(/\.json$/i, '');
+    return base === 'access' || base.startsWith('access-') || base === 'tools' || base === 'meta'
+        || base.endsWith('-audit') || base.startsWith('vault-export-');
 }
 function accessPolicyFile(config) {
     const path = resolveVaultPath(config);
@@ -6981,7 +6984,7 @@ async function listVaultRoster(config, activeName) {
             const m = /^(.*)\.json$/.exec(entry);
             if (!m)
                 continue;
-            if (['access', 'meta'].includes(m[1]) || m[1].startsWith('vault-export-') || isBackupFile(entry))
+            if (isNonVaultFile(m[1]) || isBackupFile(entry))
                 continue;
             names.push(m[1]);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vault",
-  "version": "1.10.65",
+  "version": "1.10.67",
   "bin": {
     "dsh-vault": "./lib/cli.js"
   },
@@ -77,7 +77,7 @@
   },
   "scripts": {
     "build": "npm run build:host && npm run build:client",
-    "build:host": "tsc -p tsconfig.host.json && node -e \"require('node:fs').chmodSync('lib/cli.js', 0o755)\"",
+    "build:host": "tsc -p tsconfig.host.json && node -e \"require('node:fs').chmodSync('lib/cli.js', 0o755)\" && node lib/cli.js --version > /dev/null && echo \"host build ok (cli starts)\"",
     "build:client": "tsdown",
     "vault": "node lib/cli.js",
     "prepare": "npm run build",