dsh-vault 1.5.0 → 1.6.0-rc.1

package/README-zh.md

@@ -51,6 +51,8 @@ dsh-vault 是一个面向 DeepSeek Harness 的安全加密插件：把你在使
 | `vault_totp` | 为存储的 otpSecret（或直接传入的 Base32/otpauth URI）生成当前 6 位动态验证码 |
 | `vault_generate_password` | 生成强随机密码（长度/字符集/分组可选）**或易记口令短语**（`passphrase: true`，EFF 词表，`words`/`separator`/`wordDigits`） |
 | `vault_strength` | 零依赖密码强度评估（0–100 分，weak/fair/strong/very strong） |
+| `vault_password_history` | 列出条目的历史密码(1Password/Bitwarden 风格,最新在前,上限 10 条;不含当前密码) |
+| `vault_password_rollback` | 将条目密码回滚到某条历史记录(当前密码先归档,可逆) |
 | `vault_rekey` | 原地升级 scrypt KDF 参数并重加密 |
 | `vault_backup` | 带时间戳的加密备份，支持保留策略：超过 `maxBackups`（默认 10）的旧备份自动清理 |
 | `vault_import_csv` | 从 CSV 批量导入凭据（自定义列变为 fields；`overwrite: true` 合并字段到已有条目，不再产生重复） |

package/README.md

@@ -53,6 +53,8 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_totp` | Generate the current 6-digit code for a stored otpSecret (or a bare Base32 / otpauth URI) |
 | `vault_generate_password` | Generate a strong random password (length/classes/grouping) **or a memorable passphrase** (`passphrase: true`, EFF-style word list, `words`/`separator`/`wordDigits`) |
 | `vault_strength` | Zero-dependency password strength estimate (score 0–100, weak/fair/strong/very strong) |
+| `vault_password_history` | List an entry's previous passwords (1Password/Bitwarden-style, newest first, capped at 10; current password excluded) |
+| `vault_password_rollback` | Restore an entry password to a stored history entry (current password is archived first, so it is reversible) |
 | `vault_rekey` | Upgrade the vault to fresh scrypt KDF parameters in place |
 | `vault_backup` | Timestamped encrypted backup with retention; optional `note` |
 | `vault_import_csv` | Bulk-import credentials from a CSV file (custom columns become fields; `overwrite: true` merges fields into existing entries instead of duplicating) |

package/lib/client.js

@@ -17,89 +17,89 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"lockedBanner": "t_j5va_lockedBanner",
-			"dupGroup": "t_j5va_dupGroup",
-			"reportBox": "t_j5va_reportBox",
-			"dangerButton": "t_j5va_dangerButton",
-			"dupMerge": "t_j5va_dupMerge",
+			"tab": "t_j5va_tab",
+			"retryButton": "t_j5va_retryButton",
+			"saveButton": "t_j5va_saveButton",
+			"empty": "t_j5va_empty",
+			"totpRing": "t_j5va_totpRing",
+			"reportTitle": "t_j5va_reportTitle",
+			"tabPane": "t_j5va_tabPane",
+			"sortButton": "t_j5va_sortButton",
 			"field": "t_j5va_field",
+			"resultCount": "t_j5va_resultCount",
 			"revealButton": "t_j5va_revealButton",
-			"badgeWarn": "t_j5va_badgeWarn",
-			"genOptRow": "t_j5va_genOptRow",
-			"tabPane": "t_j5va_tabPane",
-			"identity": "t_j5va_identity",
-			"dupNames": "t_j5va_dupNames",
-			"srOnly": "t_j5va_srOnly",
+			"error": "t_j5va_error",
 			"rowDue": "t_j5va_rowDue",
-			"toolbar": "t_j5va_toolbar",
+			"dueBadge": "t_j5va_dueBadge",
+			"secretField": "t_j5va_secretField",
+			"auditRow": "t_j5va_auditRow",
+			"addButton": "t_j5va_addButton",
+			"editor": "t_j5va_editor",
+			"editorBody": "t_j5va_editorBody",
+			"scoreRing": "t_j5va_scoreRing",
 			"detailItem": "t_j5va_detailItem",
-			"pwWeak": "t_j5va_pwWeak",
-			"tabActive": "t_j5va_tabActive",
-			"modeAsk": "t_j5va_modeAsk",
-			"policyField": "t_j5va_policyField",
-			"modeAuto": "t_j5va_modeAuto",
+			"toolbar": "t_j5va_toolbar",
+			"totp": "t_j5va_totp",
+			"clearButton": "t_j5va_clearButton",
 			"list": "t_j5va_list",
-			"retryButton": "t_j5va_retryButton",
-			"tabs": "t_j5va_tabs",
+			"pwStrong": "t_j5va_pwStrong",
+			"title": "t_j5va_title",
+			"row": "t_j5va_row",
+			"rowMain": "t_j5va_rowMain",
+			"intro": "t_j5va_intro",
+			"dupMerge": "t_j5va_dupMerge",
+			"lockedTag": "t_j5va_lockedTag",
+			"badgeDanger": "t_j5va_badgeDanger",
+			"policyField": "t_j5va_policyField",
 			"emptyBox": "t_j5va_emptyBox",
-			"detailBox": "t_j5va_detailBox",
-			"searchBox": "t_j5va_searchBox",
-			"status": "t_j5va_status",
-			"reportSub": "t_j5va_reportSub",
-			"kindFilter": "t_j5va_kindFilter",
 			"backupButton": "t_j5va_backupButton",
-			"pwBar": "t_j5va_pwBar",
+			"pwMeter": "t_j5va_pwMeter",
+			"tabs": "t_j5va_tabs",
+			"tabActive": "t_j5va_tabActive",
+			"kindFilter": "t_j5va_kindFilter",
+			"pinStar": "t_j5va_pinStar",
+			"dupNames": "t_j5va_dupNames",
+			"auditIssues": "t_j5va_auditIssues",
+			"editorActions": "t_j5va_editorActions",
+			"emptyHint": "t_j5va_emptyHint",
 			"pwFair": "t_j5va_pwFair",
-			"rowMain": "t_j5va_rowMain",
-			"kindChip": "t_j5va_kindChip",
-			"error": "t_j5va_error",
-			"saveButton": "t_j5va_saveButton",
-			"editor": "t_j5va_editor",
-			"policyBar": "t_j5va_policyBar",
-			"trashButton": "t_j5va_trashButton",
-			"scoreRing": "t_j5va_scoreRing",
-			"footer": "t_j5va_footer",
 			"reportLine": "t_j5va_reportLine",
-			"copied": "t_j5va_copied",
-			"rowActions": "t_j5va_rowActions",
-			"deleteButton": "t_j5va_deleteButton",
-			"auditRow": "t_j5va_auditRow",
-			"genHist": "t_j5va_genHist",
+			"trashButton": "t_j5va_trashButton",
 			"healthBar": "t_j5va_healthBar",
+			"footer": "t_j5va_footer",
 			"genOpts": "t_j5va_genOpts",
-			"totpRing": "t_j5va_totpRing",
-			"clearButton": "t_j5va_clearButton",
-			"badgeDanger": "t_j5va_badgeDanger",
-			"badge": "t_j5va_badge",
-			"pwStrong": "t_j5va_pwStrong",
-			"row": "t_j5va_row",
-			"title": "t_j5va_title",
+			"lockedBanner": "t_j5va_lockedBanner",
+			"policyBar": "t_j5va_policyBar",
+			"reportBox": "t_j5va_reportBox",
+			"deleteButton": "t_j5va_deleteButton",
+			"modeAuto": "t_j5va_modeAuto",
 			"checkField": "t_j5va_checkField",
-			"pwMeter": "t_j5va_pwMeter",
-			"lockedTag": "t_j5va_lockedTag",
-			"auditIssues": "t_j5va_auditIssues",
+			"reportSub": "t_j5va_reportSub",
+			"dangerButton": "t_j5va_dangerButton",
+			"detailBox": "t_j5va_detailBox",
+			"pwWeak": "t_j5va_pwWeak",
+			"badge": "t_j5va_badge",
+			"pwBar": "t_j5va_pwBar",
+			"modeAsk": "t_j5va_modeAsk",
 			"badgeOk": "t_j5va_badgeOk",
-			"pinStar": "t_j5va_pinStar",
-			"resultCount": "t_j5va_resultCount",
-			"modeReadonly": "t_j5va_modeReadonly",
-			"intro": "t_j5va_intro",
-			"highBadge": "t_j5va_highBadge",
-			"editorBody": "t_j5va_editorBody",
-			"empty": "t_j5va_empty",
-			"sortButton": "t_j5va_sortButton",
-			"emptyHint": "t_j5va_emptyHint",
-			"editorActions": "t_j5va_editorActions",
-			"addButton": "t_j5va_addButton",
-			"totp": "t_j5va_totp",
-			"reportTitle": "t_j5va_reportTitle",
-			"secretField": "t_j5va_secretField",
-			"dueBadge": "t_j5va_dueBadge",
+			"pwLabel": "t_j5va_pwLabel",
+			"identity": "t_j5va_identity",
+			"rowActions": "t_j5va_rowActions",
 			"kindIcon": "t_j5va_kindIcon",
+			"kindChip": "t_j5va_kindChip",
+			"genHist": "t_j5va_genHist",
+			"genOptRow": "t_j5va_genOptRow",
+			"uriCode": "t_j5va_uriCode",
 			"rowExpired": "t_j5va_rowExpired",
+			"status": "t_j5va_status",
+			"dupGroup": "t_j5va_dupGroup",
+			"highBadge": "t_j5va_highBadge",
+			"copied": "t_j5va_copied",
+			"badgeWarn": "t_j5va_badgeWarn",
+			"modeReadonly": "t_j5va_modeReadonly",
 			"section": "t_j5va_section",
-			"pwLabel": "t_j5va_pwLabel",
-			"uriCode": "t_j5va_uriCode",
-			"tab": "t_j5va_tab"
+			"searchBox": "t_j5va_searchBox",
+			"srOnly": "t_j5va_srOnly"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx
@@ -360,7 +360,10 @@ window.__ModuleLoader__.load({
 				}, 250);
 				return () => window.clearTimeout(timer);
 			}, [form.password, strength]);
-			/** Apply a template's field values to the current form. */
+			/** Apply a template's field values to the current form. The form is reset
+			* to its empty state first (so fields the template does not set are cleared
+			* rather than leaking the previous template's values), then the template's
+			* fields are applied. Secret-ish fields are never filled from a template. */
 			function applyTemplate(name) {
 				const tpl = tplList.find((t) => t.name === name);
 				if (!tpl) return;
@@ -370,10 +373,26 @@ window.__ModuleLoader__.load({
 					if (key === "password" || key === "otpSecret" || key === "apiKey" || key === "secret") continue;
 					next[key] = value;
 				}
-				setForm((previous) => ({
-					...previous,
+				setForm({
+					...emptyForm(),
 					...next
-				}));
+				});
+			}
+			/** Change the entry kind. When CREATING a new entry, unrelated fields from
+			* the previous kind are cleared so the form does not carry stale values; when
+			* EDITING an existing entry the other fields are kept (they may be valid for
+			* the new kind too, and clearing would risk data loss). */
+			function changeKind(kind) {
+				setForm((previous) => {
+					if (editor.status === "creating") return {
+						...emptyForm(),
+						kind
+					};
+					return {
+						...previous,
+						kind
+					};
+				});
 			}
 			/** Save the current form as a reusable template. */
 			async function saveAsTemplate() {
@@ -2927,10 +2946,7 @@ window.__ModuleLoader__.load({
 									className: VaultSection_module_css_default.field,
 									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t(field.label) }), field.key === "kind" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
 										value: form.kind ?? "login",
-										onChange: (event) => setForm((previous) => ({
-											...previous,
-											kind: event.target.value
-										})),
+										onChange: (event) => changeKind(event.target.value),
 										children: Object.entries(KIND_KEYS).map(([value, key]) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
 											value,
 											children: t(key)