dsh-vault 1.2.0-rc.9 → 1.2.0

package/README-zh.md

@@ -61,6 +61,7 @@ dsh-vault 是一个面向 DeepSeek Harness 的安全加密插件：把你在使
 | `vault_health` | 保险库健康扫描：弱密码/复用凭据、未启用 2FA、不安全的 http:// 站点,以及整体安全评分（0–100） |
 | `vault_breach_check` | Watchtower 风格泄露扫描：对接 Have I Been Pwned（k-anonymity,仅发送 SHA-1 前缀）,附离线常见密码兜底 |
 | `vault_integrity` | 校验磁盘上的保险库文件可正确解密并与内存中的 store 一致 |
+| `vault_integrity` | 校验磁盘上的保险库文件可正确解密并与内存中的 store 一致 |
 | `vault_merge` | 合并一个条目到另一个；`keepSource: true` 保留源条目 |
 | `vault_quick_add` | 快速录入（标题 + 一个密钥），支持 tags/notes |
 | `vault_expiry` | 设置/清除过期（`expiresAt: 0` 移除） |
@@ -71,7 +72,9 @@ dsh-vault 是一个面向 DeepSeek Harness 的安全加密插件：把你在使
 | `vault_export` / `vault_import` | 整库加密备份/迁移（独立导出密码） |
 | `vault_fill` | 按 host/URL/用户名/标题匹配条目并返回其凭据 |
 | `vault_env` | 把标记 env 的条目（tags 含 `env`）渲染为 `KEY=VALUE` 行 |
-| `vault_templates` | 返回某类凭据（ssh/api-key/oauth 等）的推荐字段 |
+| `vault_export_bitwarden` / `vault_import_bitwarden` | Bitwarden/Vaultwarden JSON 互通（完整字段映射,支持覆盖） |
+| `vault_copy` | 复制条目（含密钥）到另一个命名保险库 |
+| `vault_templates` | 内建 + 用户自定义模板（save/list/remove,KeePassXC 风格） |
 
 **典型开发场景**：存一条 SSH 凭据（`kind: ssh` + host/port/username/password 或 privateKey），开发时让模型 `vault_search` 找主机、`vault_get` 取连接信息；存 API 网关的 `api-key`/`oauth` 条目管理 access/refresh token 轮换。
 

package/README.md

@@ -54,7 +54,7 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_generate_password` | Generate a strong random password (length/classes/grouping) **or a memorable passphrase** (`passphrase: true`, EFF-style word list, `words`/`separator`/`wordDigits`) |
 | `vault_strength` | Zero-dependency password strength estimate (score 0–100, weak/fair/strong/very strong) |
 | `vault_rekey` | Upgrade the vault to fresh scrypt KDF parameters in place |
-| `vault_backup` | Timestamped encrypted backup with retention: prunes old copies beyond `maxBackups` (default 10) |
+| `vault_backup` | Timestamped encrypted backup with retention; optional `note` |
 | `vault_import_csv` | Bulk-import credentials from a CSV file (custom columns become fields; `overwrite: true` merges fields into existing entries instead of duplicating) |
 | `vault_apply_tags` | Bulk add/remove/replace tags on every entry matching a query (dry-run supported, no secrets) |
 | `vault_totp_uri` | Build an otpauth:// provisioning URI for a stored or bare TOTP secret |
@@ -63,6 +63,7 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_health` | Vault health scan: weak/reused passwords, missing 2FA, insecure http:// sites, and an overall security score (0–100) |
 | `vault_breach_check` | Watchtower-style breach scan against Have I Been Pwned (k-anonymity: only the SHA-1 prefix leaves the machine), with an offline common-password fallback |
 | `vault_integrity` | Verify the on-disk vault file decrypts correctly and matches the in-memory store |
+| `vault_integrity` | Verify the on-disk vault file decrypts correctly and matches the in-memory store |
 | `vault_merge` | Merge one entry into another; `keepSource: true` keeps the source after merging |
 | `vault_quick_add` | Fast capture (title + one secret) with optional tags/notes |
 | `vault_expiry` | Set/clear expiry (`expiresAt: 0` removes it) |
@@ -73,7 +74,9 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_export` / `vault_import` | Portable encrypted backup/migration of the whole vault (separate export password) |
 | `vault_fill` | Find the entry matching a host/URL/username/title and return its credentials |
 | `vault_env` | Render env-flagged entries (tags contain `env`) as `KEY=VALUE` lines |
-| `vault_templates` | List recommended fields for a credential kind (ssh / api-key / oauth / …) |
+| `vault_export_bitwarden` / `vault_import_bitwarden` | Bitwarden/Vaultwarden JSON interop (full field mapping, overwrite support) |
+| `vault_copy` | Copy an entry (secrets included) into another named vault |
+| `vault_templates` | Built-in + user-defined templates (save/list/remove), KeePassXC-style |
 
 **Typical workflows**: store an SSH credential (`kind: ssh` + host/port/username/password or privateKey) and have the model `vault_search` for the host then `vault_get` the connection details; keep `api-key`/`oauth` entries for API-gateway access/refresh token rotation.
 

package/lib/client.js

@@ -17,83 +17,83 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
+			"lockedBanner": "t_j5va_lockedBanner",
+			"intro": "t_j5va_intro",
+			"toolbar": "t_j5va_toolbar",
+			"policyBar": "t_j5va_policyBar",
+			"editorBody": "t_j5va_editorBody",
+			"field": "t_j5va_field",
+			"reportLine": "t_j5va_reportLine",
 			"sortButton": "t_j5va_sortButton",
-			"dupGroup": "t_j5va_dupGroup",
+			"deleteButton": "t_j5va_deleteButton",
+			"editor": "t_j5va_editor",
+			"healthBar": "t_j5va_healthBar",
+			"checkField": "t_j5va_checkField",
+			"rowDue": "t_j5va_rowDue",
+			"badgeOk": "t_j5va_badgeOk",
+			"emptyHint": "t_j5va_emptyHint",
+			"list": "t_j5va_list",
+			"section": "t_j5va_section",
+			"rowActions": "t_j5va_rowActions",
+			"kindChip": "t_j5va_kindChip",
+			"emptyBox": "t_j5va_emptyBox",
 			"badge": "t_j5va_badge",
-			"copied": "t_j5va_copied",
-			"srOnly": "t_j5va_srOnly",
-			"kindIcon": "t_j5va_kindIcon",
-			"pwWeak": "t_j5va_pwWeak",
+			"row": "t_j5va_row",
+			"genOpts": "t_j5va_genOpts",
+			"revealButton": "t_j5va_revealButton",
+			"auditRow": "t_j5va_auditRow",
+			"saveButton": "t_j5va_saveButton",
+			"trashButton": "t_j5va_trashButton",
 			"detailItem": "t_j5va_detailItem",
-			"status": "t_j5va_status",
-			"section": "t_j5va_section",
+			"identity": "t_j5va_identity",
+			"badgeDanger": "t_j5va_badgeDanger",
+			"auditIssues": "t_j5va_auditIssues",
+			"pwMeter": "t_j5va_pwMeter",
 			"pwFair": "t_j5va_pwFair",
+			"reportTitle": "t_j5va_reportTitle",
+			"reportSub": "t_j5va_reportSub",
+			"copied": "t_j5va_copied",
+			"title": "t_j5va_title",
+			"dupGroup": "t_j5va_dupGroup",
+			"addButton": "t_j5va_addButton",
+			"badgeWarn": "t_j5va_badgeWarn",
 			"resultCount": "t_j5va_resultCount",
-			"dupNames": "t_j5va_dupNames",
-			"toolbar": "t_j5va_toolbar",
-			"healthBar": "t_j5va_healthBar",
-			"rowMain": "t_j5va_rowMain",
-			"scoreRing": "t_j5va_scoreRing",
-			"badgeDanger": "t_j5va_badgeDanger",
-			"clearButton": "t_j5va_clearButton",
-			"kindChip": "t_j5va_kindChip",
-			"deleteButton": "t_j5va_deleteButton",
+			"secretField": "t_j5va_secretField",
+			"footer": "t_j5va_footer",
 			"pinStar": "t_j5va_pinStar",
-			"genOpts": "t_j5va_genOpts",
-			"genOptRow": "t_j5va_genOptRow",
-			"auditIssues": "t_j5va_auditIssues",
-			"identity": "t_j5va_identity",
-			"trashButton": "t_j5va_trashButton",
-			"reportLine": "t_j5va_reportLine",
-			"pwLabel": "t_j5va_pwLabel",
 			"uriCode": "t_j5va_uriCode",
-			"auditRow": "t_j5va_auditRow",
-			"list": "t_j5va_list",
-			"dangerButton": "t_j5va_dangerButton",
-			"emptyBox": "t_j5va_emptyBox",
-			"editor": "t_j5va_editor",
+			"empty": "t_j5va_empty",
+			"reportBox": "t_j5va_reportBox",
+			"scoreRing": "t_j5va_scoreRing",
 			"rowExpired": "t_j5va_rowExpired",
+			"searchBox": "t_j5va_searchBox",
+			"dangerButton": "t_j5va_dangerButton",
+			"clearButton": "t_j5va_clearButton",
+			"pwWeak": "t_j5va_pwWeak",
+			"rowMain": "t_j5va_rowMain",
+			"dupNames": "t_j5va_dupNames",
+			"backupButton": "t_j5va_backupButton",
+			"modeAsk": "t_j5va_modeAsk",
 			"totpRing": "t_j5va_totpRing",
-			"addButton": "t_j5va_addButton",
-			"title": "t_j5va_title",
+			"highBadge": "t_j5va_highBadge",
+			"pwStrong": "t_j5va_pwStrong",
 			"totp": "t_j5va_totp",
-			"editorBody": "t_j5va_editorBody",
-			"reportTitle": "t_j5va_reportTitle",
+			"editorActions": "t_j5va_editorActions",
+			"detailBox": "t_j5va_detailBox",
+			"srOnly": "t_j5va_srOnly",
+			"status": "t_j5va_status",
+			"error": "t_j5va_error",
 			"retryButton": "t_j5va_retryButton",
 			"policyField": "t_j5va_policyField",
-			"badgeOk": "t_j5va_badgeOk",
-			"checkField": "t_j5va_checkField",
-			"rowDue": "t_j5va_rowDue",
-			"dupMerge": "t_j5va_dupMerge",
-			"row": "t_j5va_row",
-			"intro": "t_j5va_intro",
-			"backupButton": "t_j5va_backupButton",
-			"empty": "t_j5va_empty",
-			"modeAsk": "t_j5va_modeAsk",
-			"footer": "t_j5va_footer",
-			"revealButton": "t_j5va_revealButton",
-			"rowActions": "t_j5va_rowActions",
-			"dueBadge": "t_j5va_dueBadge",
-			"reportBox": "t_j5va_reportBox",
-			"pwBar": "t_j5va_pwBar",
-			"lockedBanner": "t_j5va_lockedBanner",
-			"field": "t_j5va_field",
-			"saveButton": "t_j5va_saveButton",
-			"error": "t_j5va_error",
+			"genOptRow": "t_j5va_genOptRow",
 			"modeReadonly": "t_j5va_modeReadonly",
-			"pwMeter": "t_j5va_pwMeter",
-			"emptyHint": "t_j5va_emptyHint",
-			"policyBar": "t_j5va_policyBar",
+			"kindIcon": "t_j5va_kindIcon",
+			"dueBadge": "t_j5va_dueBadge",
 			"modeAuto": "t_j5va_modeAuto",
 			"kindFilter": "t_j5va_kindFilter",
-			"reportSub": "t_j5va_reportSub",
-			"detailBox": "t_j5va_detailBox",
-			"pwStrong": "t_j5va_pwStrong",
-			"badgeWarn": "t_j5va_badgeWarn",
-			"searchBox": "t_j5va_searchBox",
-			"editorActions": "t_j5va_editorActions",
-			"secretField": "t_j5va_secretField",
-			"highBadge": "t_j5va_highBadge"
+			"pwBar": "t_j5va_pwBar",
+			"pwLabel": "t_j5va_pwLabel",
+			"dupMerge": "t_j5va_dupMerge"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vault",
-  "version": "1.2.0-rc.9",
+  "version": "1.2.0",
   "description": "Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.",
   "type": "module",
   "license": "MIT",