dsh-vault 1.10.70 → 1.10.72

package/README-zh.md

@@ -324,6 +324,25 @@ npx dsh-vault list                                   # 或者干脆不装
 
 profile 这条路还有两个注意点:垫片可能被之后在该目录执行的 `pnpm install` 清掉;`pnpm dsh plugin --profile web add dsh-vault` 会依据包的 `dsh.bundle` 声明重整 `dsh.profile.bundles` —— 如果你自己的 patch 层**也**插入了这个插件,就会**挂两份**,要先删掉 patch 层那一行。
 
+## 泄露检查的隐私边界
+
+`vault_breach_check`(以及安全页)可以把密码拿去和 Have I Been Pwned 比对。**离开本机的只有一样东西**:
+
+```
+GET https://api.pwnedpasswords.com/range/<SHA-1(密码) 的前 5 个十六进制字符>
+Add-Padding: true
+```
+
+响应会返回该前缀桶里的**全部**后缀(几百条哈希),匹配在**本地**完成 —— 完整哈希、密码原文、以及它属于哪个条目都不会离开。如果密码已经在内置常见口令表里,**根本不会发起请求**;同一前缀的重复查询会在内存里缓存一小时。
+
+k-anonymity **没有**隐藏的东西,直说:
+
+- **5 个字符的前缀**(20 bit,约百万分之一桶)会连同你的 IP 发给 Cloudflare;
+- 能枚举候选口令的观察者,可以算出每个候选的前缀,从而看出你是否查询过那个桶 —— 这是该协议的已知局限,加请求头也解决不了;
+- `Add-Padding` 只是抹掉**响应体积**这个信号(不加它,桶的响应长度会和"该密码有多常见"相关)。
+
+如果连前缀都不想出去,就用 `online: false` —— 此时只查离线词表,覆盖率小得多,适合当筛子而不是定论。
+
 ## 强度指示
 
 列表里每个条目在标题后有一个**三星**强度指示 —— **☆☆☆ = 0 分,★★★ = 满分**,中间按半星分档。半星不是 Unicode 字符(大多数字体没有),而是把同样三个 `★` 复制一层、按百分比裁剪彩色层实现的:

package/README.md

@@ -359,6 +359,36 @@ Two more caveats on the profile route: its `.bin` shim can be pruned by a later
 patch layer *also* inserts the plugin, that mounts it twice, so remove the patch
 row first.
 
+## Privacy of the breach check
+
+`vault_breach_check` (and the security page) can check passwords against Have I
+Been Pwned. Exactly one thing leaves this machine:
+
+```
+GET https://api.pwnedpasswords.com/range/<FIRST 5 HEX CHARS OF SHA-1(password)>
+Add-Padding: true
+```
+
+The response lists every suffix in that bucket (hundreds of hashes) and the match
+is computed **locally** — the full hash, the password, and the entry it belongs to
+never leave. A password already in the bundled common-password list is answered
+offline and produces **no request at all**; repeat lookups of the same prefix are
+cached in memory for an hour.
+
+What k-anonymity does *not* hide, stated plainly:
+
+- the **five-character prefix** (20 bits, one bucket in ~1M) goes to Cloudflare,
+  together with your IP;
+- an observer who can guess candidate passwords can compute each candidate's
+  prefix and see whether you queried that bucket — that is the known limit of
+  this protocol, not something the header fixes;
+- `Add-Padding` only removes the *response-size* signal (without it, a bucket's
+  response length correlates with how common the password is).
+
+To keep even the prefix on your machine, pass `online: false` — the check then
+uses only the offline list, which is far smaller, so treat it as a screening aid
+rather than a verdict.
+
 ## Strength indicator
 
 Each entry row shows a three-star indicator after its title — **☆☆☆ = 0 score,

package/lib/breach.js

@@ -17,8 +17,9 @@ const HIBP_RANGE_URL = 'https://api.pwnedpasswords.com/range/';
 const QUERY_TIMEOUT_MS = 12_000;
 /** How long a fetched prefix range is cached in memory. */
 const CACHE_TTL_MS = 60 * 60 * 1000;
-/** Common / weak passwords checked offline (rockyou-style head). */
-const WEAK_PASSWORDS = new Set([
+/** Common / weak passwords checked offline (rockyou-style head). Also used by
+ * the strength estimator, so both agree on what "known-common" means. */
+export const WEAK_PASSWORDS = new Set([
     '123456', 'password', '12345678', 'qwerty', '123456789', '12345', '1234', '111111',
     '1234567', 'dragon', '123123', 'baseball', 'abc123', 'football', 'monkey', 'letmein',
     'shadow', 'master', '666666', 'qwertyuiop', '123321', 'mustang', '1234567890', 'michael',
@@ -42,7 +43,13 @@ export function sha1Hex(password) {
 async function queryRange(prefix) {
     const res = await fetch(`${HIBP_RANGE_URL}${prefix}`, {
         signal: AbortSignal.timeout(QUERY_TIMEOUT_MS),
-        headers: { 'User-Agent': 'dsh-vault' },
+        headers: {
+            'User-Agent': 'dsh-vault',
+            // HIBP's own privacy knob: pad every response to a similar size so an
+            // observer cannot correlate a lookup with how many passwords share that
+            // prefix (which would leak information about how common yours is).
+            'Add-Padding': 'true',
+        },
     });
     if (!res.ok)
         throw new Error(`Pwned Passwords returned HTTP ${res.status}`);

package/lib/client.js

@@ -510,197 +510,197 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"highBadge": "t_j5va_highBadge",
-			"trashButton": "t_j5va_trashButton",
-			"tab": "t_j5va_tab",
-			"detailTotp": "t_j5va_detailTotp",
-			"section": "t_j5va_section",
-			"emptyHint": "t_j5va_emptyHint",
-			"strengthWeak": "t_j5va_strengthWeak",
-			"moreButton": "t_j5va_moreButton",
-			"genHistItem": "t_j5va_genHistItem",
-			"inlineField": "t_j5va_inlineField",
-			"riskWarn": "t_j5va_riskWarn",
-			"pwHistRow": "t_j5va_pwHistRow",
 			"brandGlyph": "t_j5va_brandGlyph",
-			"histLink": "t_j5va_histLink",
-			"badgeOk": "t_j5va_badgeOk",
-			"exportChips": "t_j5va_exportChips",
-			"kindFilter": "t_j5va_kindFilter",
-			"totpCopy": "t_j5va_totpCopy",
+			"intro": "t_j5va_intro",
+			"reportTitle": "t_j5va_reportTitle",
+			"colorSwatch": "t_j5va_colorSwatch",
+			"recentLabel": "t_j5va_recentLabel",
+			"pinStar": "t_j5va_pinStar",
+			"detailItem": "t_j5va_detailItem",
 			"tagCount": "t_j5va_tagCount",
-			"kindChipActive": "t_j5va_kindChipActive",
-			"uriCode": "t_j5va_uriCode",
-			"copied": "t_j5va_copied",
-			"sortButton": "t_j5va_sortButton",
-			"emojiBtn": "t_j5va_emojiBtn",
-			"editor": "t_j5va_editor",
-			"customFieldRow": "t_j5va_customFieldRow",
+			"pinOn": "t_j5va_pinOn",
 			"toolbarFilters": "t_j5va_toolbarFilters",
-			"status": "t_j5va_status",
 			"title": "t_j5va_title",
-			"histUpdate": "t_j5va_histUpdate",
-			"empty": "t_j5va_empty",
-			"revealButton": "t_j5va_revealButton",
-			"rowExpired": "t_j5va_rowExpired",
-			"pwLabel": "t_j5va_pwLabel",
-			"genHist": "t_j5va_genHist",
-			"iconFieldWrap": "t_j5va_iconFieldWrap",
-			"customFieldRows": "t_j5va_customFieldRows",
-			"lenChip": "t_j5va_lenChip",
-			"customEq": "t_j5va_customEq",
-			"lenChips": "t_j5va_lenChips",
-			"brandGlyphSm": "t_j5va_brandGlyphSm",
-			"actionPrimary": "t_j5va_actionPrimary",
-			"resultCount": "t_j5va_resultCount",
-			"actionGroup": "t_j5va_actionGroup",
-			"tagRow": "t_j5va_tagRow",
-			"actionBtn": "t_j5va_actionBtn",
-			"auditRow": "t_j5va_auditRow",
-			"bulkBar": "t_j5va_bulkBar",
-			"auditChip": "t_j5va_auditChip",
-			"retryButton": "t_j5va_retryButton",
-			"colorPalette": "t_j5va_colorPalette",
-			"copyAllBtn": "t_j5va_copyAllBtn",
-			"reportBox": "t_j5va_reportBox",
+			"toolbarDivider": "t_j5va_toolbarDivider",
+			"importName": "t_j5va_importName",
+			"searchBox": "t_j5va_searchBox",
+			"recentClear": "t_j5va_recentClear",
 			"strengthFair": "t_j5va_strengthFair",
-			"attachAdd": "t_j5va_attachAdd",
-			"toolbarMain": "t_j5va_toolbarMain",
-			"vaultSwitch": "t_j5va_vaultSwitch",
-			"gridName": "t_j5va_gridName",
-			"inlineInput": "t_j5va_inlineInput",
-			"badge": "t_j5va_badge",
-			"detailDeleteBtn": "t_j5va_detailDeleteBtn",
-			"rowActions": "t_j5va_rowActions",
-			"importList": "t_j5va_importList",
-			"importRow": "t_j5va_importRow",
-			"headerMessage": "t_j5va_headerMessage",
-			"pwBar": "t_j5va_pwBar",
-			"colorFieldWrap": "t_j5va_colorFieldWrap",
-			"totp": "t_j5va_totp",
-			"emptyBox": "t_j5va_emptyBox",
-			"tabPane": "t_j5va_tabPane",
-			"pinOn": "t_j5va_pinOn",
-			"policyField": "t_j5va_policyField",
-			"gridRow": "t_j5va_gridRow",
-			"checkField": "t_j5va_checkField",
-			"healthSummary": "t_j5va_healthSummary",
-			"selectActive": "t_j5va_selectActive",
-			"auditChips": "t_j5va_auditChips",
-			"histDanger": "t_j5va_histDanger",
-			"urlGlyph": "t_j5va_urlGlyph",
-			"strengthStrong": "t_j5va_strengthStrong",
-			"pwStrong": "t_j5va_pwStrong",
-			"clearButton": "t_j5va_clearButton",
-			"riskBanner": "t_j5va_riskBanner",
-			"reportLine": "t_j5va_reportLine",
-			"favToggle": "t_j5va_favToggle",
-			"bulkItem": "t_j5va_bulkItem",
-			"dupNames": "t_j5va_dupNames",
-			"pinStar": "t_j5va_pinStar",
-			"customValueInput": "t_j5va_customValueInput",
-			"genOptRow": "t_j5va_genOptRow",
-			"rowSelected": "t_j5va_rowSelected",
-			"detailBox": "t_j5va_detailBox",
-			"secretField": "t_j5va_secretField",
-			"detailItem": "t_j5va_detailItem",
-			"saveButton": "t_j5va_saveButton",
-			"modeAsk": "t_j5va_modeAsk",
-			"tagName": "t_j5va_tagName",
-			"reportJump": "t_j5va_reportJump",
-			"tagActions": "t_j5va_tagActions",
-			"dupGroup": "t_j5va_dupGroup",
+			"totpCopy": "t_j5va_totpCopy",
+			"importActions": "t_j5va_importActions",
+			"auditChipActive": "t_j5va_auditChipActive",
 			"gridDetail": "t_j5va_gridDetail",
+			"tabs": "t_j5va_tabs",
+			"highBadge": "t_j5va_highBadge",
 			"lockedTag": "t_j5va_lockedTag",
-			"recentSearch": "t_j5va_recentSearch",
-			"customKeyInput": "t_j5va_customKeyInput",
-			"strengthStars": "t_j5va_strengthStars",
-			"listCompact": "t_j5va_listCompact",
-			"vaultManageRow": "t_j5va_vaultManageRow",
-			"vaultTarget": "t_j5va_vaultTarget",
-			"detailActions": "t_j5va_detailActions",
+			"customValueInput": "t_j5va_customValueInput",
+			"kindChip": "t_j5va_kindChip",
+			"emptyHint": "t_j5va_emptyHint",
+			"dupMerge": "t_j5va_dupMerge",
+			"importList": "t_j5va_importList",
+			"colorFieldWrap": "t_j5va_colorFieldWrap",
+			"badgeDanger": "t_j5va_badgeDanger",
+			"kindIcon": "t_j5va_kindIcon",
+			"pwBar": "t_j5va_pwBar",
+			"status": "t_j5va_status",
+			"actionGroups": "t_j5va_actionGroups",
 			"actionGroupLabel": "t_j5va_actionGroupLabel",
+			"genHist": "t_j5va_genHist",
+			"badgeOk": "t_j5va_badgeOk",
 			"gridActions": "t_j5va_gridActions",
-			"totpRing": "t_j5va_totpRing",
-			"strengthFill": "t_j5va_strengthFill",
+			"pinOff": "t_j5va_pinOff",
+			"dupNames": "t_j5va_dupNames",
+			"row": "t_j5va_row",
 			"riskDanger": "t_j5va_riskDanger",
-			"rowMain": "t_j5va_rowMain",
-			"genOpts": "t_j5va_genOpts",
-			"colorSwatch": "t_j5va_colorSwatch",
-			"toolbarDivider": "t_j5va_toolbarDivider",
-			"importName": "t_j5va_importName",
+			"pwHistRow": "t_j5va_pwHistRow",
+			"healthSummary": "t_j5va_healthSummary",
+			"deleteButton": "t_j5va_deleteButton",
+			"tagManagerHead": "t_j5va_tagManagerHead",
+			"reportBox": "t_j5va_reportBox",
+			"pwWeak": "t_j5va_pwWeak",
+			"rowActions": "t_j5va_rowActions",
+			"moreWrap": "t_j5va_moreWrap",
 			"pwHistTime": "t_j5va_pwHistTime",
-			"addButton": "t_j5va_addButton",
-			"scoreRing": "t_j5va_scoreRing",
-			"dangerButton": "t_j5va_dangerButton",
-			"backupButton": "t_j5va_backupButton",
 			"gridInput": "t_j5va_gridInput",
-			"reportTitle": "t_j5va_reportTitle",
-			"kindChip": "t_j5va_kindChip",
+			"auditChips": "t_j5va_auditChips",
+			"totpRing": "t_j5va_totpRing",
+			"histAdd": "t_j5va_histAdd",
+			"listCompact": "t_j5va_listCompact",
+			"modeAsk": "t_j5va_modeAsk",
+			"scoreRing": "t_j5va_scoreRing",
+			"strengthWeak": "t_j5va_strengthWeak",
+			"colorPalette": "t_j5va_colorPalette",
+			"toolbar": "t_j5va_toolbar",
+			"tagManager": "t_j5va_tagManager",
+			"reportSub": "t_j5va_reportSub",
+			"modeAuto": "t_j5va_modeAuto",
+			"pwMeter": "t_j5va_pwMeter",
+			"pwStrong": "t_j5va_pwStrong",
+			"customFieldRows": "t_j5va_customFieldRows",
+			"customFieldRow": "t_j5va_customFieldRow",
+			"customKeyInput": "t_j5va_customKeyInput",
+			"favToggle": "t_j5va_favToggle",
+			"strengthStrong": "t_j5va_strengthStrong",
+			"editorActions": "t_j5va_editorActions",
+			"reportJump": "t_j5va_reportJump",
+			"reportLineLink": "t_j5va_reportLineLink",
+			"rowSelected": "t_j5va_rowSelected",
+			"histLink": "t_j5va_histLink",
+			"favActive": "t_j5va_favActive",
 			"srOnly": "t_j5va_srOnly",
-			"badgeDanger": "t_j5va_badgeDanger",
-			"tabActive": "t_j5va_tabActive",
-			"rowCheck": "t_j5va_rowCheck",
-			"deleteButton": "t_j5va_deleteButton",
-			"badgeWarn": "t_j5va_badgeWarn",
+			"uriCode": "t_j5va_uriCode",
 			"badgeLink": "t_j5va_badgeLink",
+			"importDesc": "t_j5va_importDesc",
+			"selectActive": "t_j5va_selectActive",
+			"emojiBtn": "t_j5va_emojiBtn",
+			"detailBox": "t_j5va_detailBox",
+			"detailDeleteBtn": "t_j5va_detailDeleteBtn",
+			"badgeWarn": "t_j5va_badgeWarn",
+			"sortButton": "t_j5va_sortButton",
 			"recentChip": "t_j5va_recentChip",
-			"pinOff": "t_j5va_pinOff",
-			"policyBar": "t_j5va_policyBar",
-			"modeAuto": "t_j5va_modeAuto",
-			"histAdd": "t_j5va_histAdd",
+			"revealButton": "t_j5va_revealButton",
+			"lockedBanner": "t_j5va_lockedBanner",
+			"bulkBar": "t_j5va_bulkBar",
+			"rowCheck": "t_j5va_rowCheck",
+			"customEq": "t_j5va_customEq",
+			"copied": "t_j5va_copied",
+			"badge": "t_j5va_badge",
+			"urlGlyph": "t_j5va_urlGlyph",
+			"retryButton": "t_j5va_retryButton",
+			"moreButton": "t_j5va_moreButton",
+			"emptyBox": "t_j5va_emptyBox",
+			"resultCount": "t_j5va_resultCount",
+			"dangerButton": "t_j5va_dangerButton",
+			"detailRemain": "t_j5va_detailRemain",
 			"pwHistPwd": "t_j5va_pwHistPwd",
-			"toolbar": "t_j5va_toolbar",
-			"editorBody": "t_j5va_editorBody",
-			"recentLabel": "t_j5va_recentLabel",
-			"row": "t_j5va_row",
-			"identity": "t_j5va_identity",
-			"lenChipActive": "t_j5va_lenChipActive",
-			"moreMenu": "t_j5va_moreMenu",
-			"reportSub": "t_j5va_reportSub",
 			"exportChip": "t_j5va_exportChip",
-			"tagManagerHead": "t_j5va_tagManagerHead",
+			"vaultSwitch": "t_j5va_vaultSwitch",
+			"reportLine": "t_j5va_reportLine",
+			"gridName": "t_j5va_gridName",
+			"rowDue": "t_j5va_rowDue",
+			"tagRow": "t_j5va_tagRow",
+			"auditWhen": "t_j5va_auditWhen",
+			"vaultManageRow": "t_j5va_vaultManageRow",
 			"hit": "t_j5va_hit",
-			"intro": "t_j5va_intro",
-			"reportLineLink": "t_j5va_reportLineLink",
-			"recentClear": "t_j5va_recentClear",
-			"list": "t_j5va_list",
-			"attachBox": "t_j5va_attachBox",
-			"tabs": "t_j5va_tabs",
+			"tagName": "t_j5va_tagName",
+			"actionGroup": "t_j5va_actionGroup",
+			"brandGlyphSm": "t_j5va_brandGlyphSm",
+			"auditChip": "t_j5va_auditChip",
 			"badgeBtn": "t_j5va_badgeBtn",
-			"bulkCount": "t_j5va_bulkCount",
-			"kindIcon": "t_j5va_kindIcon",
-			"pwWeak": "t_j5va_pwWeak",
+			"inlineInput": "t_j5va_inlineInput",
+			"moreMenu": "t_j5va_moreMenu",
+			"policyField": "t_j5va_policyField",
+			"identity": "t_j5va_identity",
+			"totp": "t_j5va_totp",
+			"policyBar": "t_j5va_policyBar",
+			"strengthStars": "t_j5va_strengthStars",
+			"tabPane": "t_j5va_tabPane",
+			"clearButton": "t_j5va_clearButton",
+			"attachAdd": "t_j5va_attachAdd",
+			"exportChips": "t_j5va_exportChips",
+			"emojiPicker": "t_j5va_emojiPicker",
+			"tab": "t_j5va_tab",
+			"recentSearch": "t_j5va_recentSearch",
+			"editorBody": "t_j5va_editorBody",
 			"error": "t_j5va_error",
-			"lockedBanner": "t_j5va_lockedBanner",
-			"actionGroups": "t_j5va_actionGroups",
+			"healthBar": "t_j5va_healthBar",
+			"riskWarn": "t_j5va_riskWarn",
 			"detailCode": "t_j5va_detailCode",
+			"tabActive": "t_j5va_tabActive",
 			"vaultHeader": "t_j5va_vaultHeader",
-			"histNeutral": "t_j5va_histNeutral",
-			"dupMerge": "t_j5va_dupMerge",
-			"pwHistBox": "t_j5va_pwHistBox",
-			"rowDue": "t_j5va_rowDue",
-			"field": "t_j5va_field",
-			"detailRemain": "t_j5va_detailRemain",
-			"favActive": "t_j5va_favActive",
-			"tagManager": "t_j5va_tagManager",
-			"badgeActive": "t_j5va_badgeActive",
-			"importDesc": "t_j5va_importDesc",
-			"pwMeter": "t_j5va_pwMeter",
-			"moreWrap": "t_j5va_moreWrap",
-			"searchBox": "t_j5va_searchBox",
 			"strengthTrack": "t_j5va_strengthTrack",
-			"auditChipActive": "t_j5va_auditChipActive",
+			"kindChipActive": "t_j5va_kindChipActive",
+			"importRow": "t_j5va_importRow",
+			"headerMessage": "t_j5va_headerMessage",
+			"genOptRow": "t_j5va_genOptRow",
 			"modeReadonly": "t_j5va_modeReadonly",
-			"healthBar": "t_j5va_healthBar",
-			"editorActions": "t_j5va_editorActions",
-			"emojiPicker": "t_j5va_emojiPicker",
-			"importActions": "t_j5va_importActions",
+			"section": "t_j5va_section",
+			"list": "t_j5va_list",
+			"empty": "t_j5va_empty",
+			"rowExpired": "t_j5va_rowExpired",
+			"attachBox": "t_j5va_attachBox",
+			"checkField": "t_j5va_checkField",
+			"toolbarMain": "t_j5va_toolbarMain",
+			"detailActions": "t_j5va_detailActions",
+			"vaultTarget": "t_j5va_vaultTarget",
+			"bulkCount": "t_j5va_bulkCount",
+			"genOpts": "t_j5va_genOpts",
 			"searchKbd": "t_j5va_searchKbd",
-			"auditIssues": "t_j5va_auditIssues",
+			"tagActions": "t_j5va_tagActions",
+			"copyAllBtn": "t_j5va_copyAllBtn",
+			"pwLabel": "t_j5va_pwLabel",
+			"addButton": "t_j5va_addButton",
+			"badgeActive": "t_j5va_badgeActive",
+			"lenChip": "t_j5va_lenChip",
+			"editor": "t_j5va_editor",
+			"actionPrimary": "t_j5va_actionPrimary",
+			"histUpdate": "t_j5va_histUpdate",
+			"kindFilter": "t_j5va_kindFilter",
 			"pwFair": "t_j5va_pwFair",
+			"rowMain": "t_j5va_rowMain",
+			"genHistItem": "t_j5va_genHistItem",
+			"gridRow": "t_j5va_gridRow",
+			"field": "t_j5va_field",
+			"auditIssues": "t_j5va_auditIssues",
+			"histDanger": "t_j5va_histDanger",
+			"lenChipActive": "t_j5va_lenChipActive",
+			"secretField": "t_j5va_secretField",
 			"dueBadge": "t_j5va_dueBadge",
-			"auditWhen": "t_j5va_auditWhen"
+			"riskBanner": "t_j5va_riskBanner",
+			"dupGroup": "t_j5va_dupGroup",
+			"actionBtn": "t_j5va_actionBtn",
+			"lenChips": "t_j5va_lenChips",
+			"strengthFill": "t_j5va_strengthFill",
+			"bulkItem": "t_j5va_bulkItem",
+			"histNeutral": "t_j5va_histNeutral",
+			"detailTotp": "t_j5va_detailTotp",
+			"iconFieldWrap": "t_j5va_iconFieldWrap",
+			"pwHistBox": "t_j5va_pwHistBox",
+			"inlineField": "t_j5va_inlineField",
+			"saveButton": "t_j5va_saveButton",
+			"backupButton": "t_j5va_backupButton",
+			"auditRow": "t_j5va_auditRow",
+			"trashButton": "t_j5va_trashButton"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx
@@ -5384,7 +5384,7 @@ window.__ModuleLoader__.load({
 																children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 																	className: VaultSection_module_css_default.strengthTrack,
 																	"aria-hidden": "true",
-																	children: "★★★"
+																	children: "☆☆☆"
 																}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 																	className: `${VaultSection_module_css_default.strengthFill} ${toneCss}`,
 																	style: { width: `${strengthWidthPercent(units)}%` },