dsh-vault 1.5.0 → 1.6.0-rc.2

package/README-zh.md

@@ -51,6 +51,9 @@ dsh-vault 是一个面向 DeepSeek Harness 的安全加密插件：把你在使
 | `vault_totp` | 为存储的 otpSecret（或直接传入的 Base32/otpauth URI）生成当前 6 位动态验证码 |
 | `vault_generate_password` | 生成强随机密码（长度/字符集/分组可选）**或易记口令短语**（`passphrase: true`，EFF 词表，`words`/`separator`/`wordDigits`） |
 | `vault_strength` | 零依赖密码强度评估（0–100 分，weak/fair/strong/very strong） |
+| `vault_password_history` | 列出条目的历史密码(1Password/Bitwarden 风格,最新在前,上限 10 条;不含当前密码) |
+| `kind: card` | 银行卡/信用卡条目:`cardNumber`/`cardExpiry`(MM/YY)/`cardCvv`/`cardHolder`;搜索摘要只暴露有效期和持卡人(绝不显示卡号和 CVV);Bitwarden JSON 导出映射为 card 条目(type 3,自动识别卡品牌) |
+| `vault_password_rollback` | 将条目密码回滚到某条历史记录(当前密码先归档,可逆) |
 | `vault_rekey` | 原地升级 scrypt KDF 参数并重加密 |
 | `vault_backup` | 带时间戳的加密备份，支持保留策略：超过 `maxBackups`（默认 10）的旧备份自动清理 |
 | `vault_import_csv` | 从 CSV 批量导入凭据（自定义列变为 fields；`overwrite: true` 合并字段到已有条目，不再产生重复） |

package/README.md

@@ -53,6 +53,9 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_totp` | Generate the current 6-digit code for a stored otpSecret (or a bare Base32 / otpauth URI) |
 | `vault_generate_password` | Generate a strong random password (length/classes/grouping) **or a memorable passphrase** (`passphrase: true`, EFF-style word list, `words`/`separator`/`wordDigits`) |
 | `vault_strength` | Zero-dependency password strength estimate (score 0–100, weak/fair/strong/very strong) |
+| `vault_password_history` | List an entry's previous passwords (1Password/Bitwarden-style, newest first, capped at 10; current password excluded) |
+| `kind: card` | Bank/credit-card entries: `cardNumber`/`cardExpiry` (MM/YY)/`cardCvv`/`cardHolder`; search summaries expose expiry + holder only (never the number or CVV); Bitwarden JSON export maps to a `card` item (type 3, brand inferred) |
+| `vault_password_rollback` | Restore an entry password to a stored history entry (current password is archived first, so it is reversible) |
 | `vault_rekey` | Upgrade the vault to fresh scrypt KDF parameters in place |
 | `vault_backup` | Timestamped encrypted backup with retention; optional `note` |
 | `vault_import_csv` | Bulk-import credentials from a CSV file (custom columns become fields; `overwrite: true` merges fields into existing entries instead of duplicating) |

package/lib/client.js

@@ -17,89 +17,89 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"lockedBanner": "t_j5va_lockedBanner",
-			"dupGroup": "t_j5va_dupGroup",
-			"reportBox": "t_j5va_reportBox",
-			"dangerButton": "t_j5va_dangerButton",
-			"dupMerge": "t_j5va_dupMerge",
-			"field": "t_j5va_field",
-			"revealButton": "t_j5va_revealButton",
-			"badgeWarn": "t_j5va_badgeWarn",
-			"genOptRow": "t_j5va_genOptRow",
-			"tabPane": "t_j5va_tabPane",
-			"identity": "t_j5va_identity",
+			"pwFair": "t_j5va_pwFair",
+			"kindChip": "t_j5va_kindChip",
+			"auditRow": "t_j5va_auditRow",
+			"clearButton": "t_j5va_clearButton",
+			"healthBar": "t_j5va_healthBar",
+			"title": "t_j5va_title",
+			"rowDue": "t_j5va_rowDue",
 			"dupNames": "t_j5va_dupNames",
+			"pinStar": "t_j5va_pinStar",
+			"saveButton": "t_j5va_saveButton",
+			"tabPane": "t_j5va_tabPane",
+			"secretField": "t_j5va_secretField",
 			"srOnly": "t_j5va_srOnly",
-			"rowDue": "t_j5va_rowDue",
-			"toolbar": "t_j5va_toolbar",
-			"detailItem": "t_j5va_detailItem",
+			"dueBadge": "t_j5va_dueBadge",
+			"genOptRow": "t_j5va_genOptRow",
+			"backupButton": "t_j5va_backupButton",
+			"resultCount": "t_j5va_resultCount",
+			"rowMain": "t_j5va_rowMain",
+			"editorActions": "t_j5va_editorActions",
+			"kindIcon": "t_j5va_kindIcon",
+			"highBadge": "t_j5va_highBadge",
+			"policyBar": "t_j5va_policyBar",
 			"pwWeak": "t_j5va_pwWeak",
-			"tabActive": "t_j5va_tabActive",
-			"modeAsk": "t_j5va_modeAsk",
-			"policyField": "t_j5va_policyField",
+			"reportTitle": "t_j5va_reportTitle",
+			"genOpts": "t_j5va_genOpts",
 			"modeAuto": "t_j5va_modeAuto",
-			"list": "t_j5va_list",
-			"retryButton": "t_j5va_retryButton",
+			"reportLine": "t_j5va_reportLine",
+			"field": "t_j5va_field",
+			"rowExpired": "t_j5va_rowExpired",
+			"pwLabel": "t_j5va_pwLabel",
+			"dangerButton": "t_j5va_dangerButton",
+			"genHist": "t_j5va_genHist",
 			"tabs": "t_j5va_tabs",
-			"emptyBox": "t_j5va_emptyBox",
-			"detailBox": "t_j5va_detailBox",
-			"searchBox": "t_j5va_searchBox",
+			"toolbar": "t_j5va_toolbar",
+			"totp": "t_j5va_totp",
+			"row": "t_j5va_row",
 			"status": "t_j5va_status",
-			"reportSub": "t_j5va_reportSub",
-			"kindFilter": "t_j5va_kindFilter",
-			"backupButton": "t_j5va_backupButton",
+			"editorBody": "t_j5va_editorBody",
+			"dupGroup": "t_j5va_dupGroup",
+			"dupMerge": "t_j5va_dupMerge",
 			"pwBar": "t_j5va_pwBar",
-			"pwFair": "t_j5va_pwFair",
-			"rowMain": "t_j5va_rowMain",
-			"kindChip": "t_j5va_kindChip",
+			"modeReadonly": "t_j5va_modeReadonly",
+			"reportSub": "t_j5va_reportSub",
+			"sortButton": "t_j5va_sortButton",
+			"retryButton": "t_j5va_retryButton",
 			"error": "t_j5va_error",
-			"saveButton": "t_j5va_saveButton",
-			"editor": "t_j5va_editor",
-			"policyBar": "t_j5va_policyBar",
-			"trashButton": "t_j5va_trashButton",
+			"detailBox": "t_j5va_detailBox",
+			"lockedTag": "t_j5va_lockedTag",
+			"searchBox": "t_j5va_searchBox",
+			"section": "t_j5va_section",
+			"modeAsk": "t_j5va_modeAsk",
+			"pwMeter": "t_j5va_pwMeter",
+			"lockedBanner": "t_j5va_lockedBanner",
+			"reportBox": "t_j5va_reportBox",
+			"totpRing": "t_j5va_totpRing",
+			"detailItem": "t_j5va_detailItem",
+			"tab": "t_j5va_tab",
+			"badge": "t_j5va_badge",
+			"emptyHint": "t_j5va_emptyHint",
+			"empty": "t_j5va_empty",
+			"policyField": "t_j5va_policyField",
+			"badgeOk": "t_j5va_badgeOk",
+			"badgeWarn": "t_j5va_badgeWarn",
+			"tabActive": "t_j5va_tabActive",
+			"intro": "t_j5va_intro",
+			"revealButton": "t_j5va_revealButton",
+			"pwStrong": "t_j5va_pwStrong",
+			"deleteButton": "t_j5va_deleteButton",
 			"scoreRing": "t_j5va_scoreRing",
 			"footer": "t_j5va_footer",
-			"reportLine": "t_j5va_reportLine",
+			"uriCode": "t_j5va_uriCode",
 			"copied": "t_j5va_copied",
+			"kindFilter": "t_j5va_kindFilter",
 			"rowActions": "t_j5va_rowActions",
-			"deleteButton": "t_j5va_deleteButton",
-			"auditRow": "t_j5va_auditRow",
-			"genHist": "t_j5va_genHist",
-			"healthBar": "t_j5va_healthBar",
-			"genOpts": "t_j5va_genOpts",
-			"totpRing": "t_j5va_totpRing",
-			"clearButton": "t_j5va_clearButton",
+			"list": "t_j5va_list",
+			"emptyBox": "t_j5va_emptyBox",
+			"identity": "t_j5va_identity",
+			"trashButton": "t_j5va_trashButton",
 			"badgeDanger": "t_j5va_badgeDanger",
-			"badge": "t_j5va_badge",
-			"pwStrong": "t_j5va_pwStrong",
-			"row": "t_j5va_row",
-			"title": "t_j5va_title",
-			"checkField": "t_j5va_checkField",
-			"pwMeter": "t_j5va_pwMeter",
-			"lockedTag": "t_j5va_lockedTag",
-			"auditIssues": "t_j5va_auditIssues",
-			"badgeOk": "t_j5va_badgeOk",
-			"pinStar": "t_j5va_pinStar",
-			"resultCount": "t_j5va_resultCount",
-			"modeReadonly": "t_j5va_modeReadonly",
-			"intro": "t_j5va_intro",
-			"highBadge": "t_j5va_highBadge",
-			"editorBody": "t_j5va_editorBody",
-			"empty": "t_j5va_empty",
-			"sortButton": "t_j5va_sortButton",
-			"emptyHint": "t_j5va_emptyHint",
-			"editorActions": "t_j5va_editorActions",
 			"addButton": "t_j5va_addButton",
-			"totp": "t_j5va_totp",
-			"reportTitle": "t_j5va_reportTitle",
-			"secretField": "t_j5va_secretField",
-			"dueBadge": "t_j5va_dueBadge",
-			"kindIcon": "t_j5va_kindIcon",
-			"rowExpired": "t_j5va_rowExpired",
-			"section": "t_j5va_section",
-			"pwLabel": "t_j5va_pwLabel",
-			"uriCode": "t_j5va_uriCode",
-			"tab": "t_j5va_tab"
+			"checkField": "t_j5va_checkField",
+			"editor": "t_j5va_editor",
+			"auditIssues": "t_j5va_auditIssues"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx
@@ -161,6 +161,22 @@ window.__ModuleLoader__.load({
 				key: "otpSecret",
 				label: "fieldOtpSecret"
 			},
+			{
+				key: "cardNumber",
+				label: "fieldCardNumber"
+			},
+			{
+				key: "cardExpiry",
+				label: "fieldCardExpiry"
+			},
+			{
+				key: "cardCvv",
+				label: "fieldCardCvv"
+			},
+			{
+				key: "cardHolder",
+				label: "fieldCardHolder"
+			},
 			{
 				key: "url",
 				label: "fieldUrl"
@@ -232,6 +248,7 @@ window.__ModuleLoader__.load({
 			secret: "kindSecret",
 			oauth: "kindOauth",
 			cookie: "kindCookie",
+			card: "kindCard",
 			custom: "kindCustom"
 		};
 		function emptyForm() {
@@ -360,7 +377,10 @@ window.__ModuleLoader__.load({
 				}, 250);
 				return () => window.clearTimeout(timer);
 			}, [form.password, strength]);
-			/** Apply a template's field values to the current form. */
+			/** Apply a template's field values to the current form. The form is reset
+			* to its empty state first (so fields the template does not set are cleared
+			* rather than leaking the previous template's values), then the template's
+			* fields are applied. Secret-ish fields are never filled from a template. */
 			function applyTemplate(name) {
 				const tpl = tplList.find((t) => t.name === name);
 				if (!tpl) return;
@@ -370,10 +390,26 @@ window.__ModuleLoader__.load({
 					if (key === "password" || key === "otpSecret" || key === "apiKey" || key === "secret") continue;
 					next[key] = value;
 				}
-				setForm((previous) => ({
-					...previous,
+				setForm({
+					...emptyForm(),
 					...next
-				}));
+				});
+			}
+			/** Change the entry kind. When CREATING a new entry, unrelated fields from
+			* the previous kind are cleared so the form does not carry stale values; when
+			* EDITING an existing entry the other fields are kept (they may be valid for
+			* the new kind too, and clearing would risk data loss). */
+			function changeKind(kind) {
+				setForm((previous) => {
+					if (editor.status === "creating") return {
+						...emptyForm(),
+						kind
+					};
+					return {
+						...previous,
+						kind
+					};
+				});
 			}
 			/** Save the current form as a reusable template. */
 			async function saveAsTemplate() {
@@ -1296,6 +1332,7 @@ window.__ModuleLoader__.load({
 					case "oauth": return "🔐";
 					case "secret": return "🤫";
 					case "cookie": return "🍪";
+					case "card": return "💳";
 					case "custom": return "🧩";
 					default: return "👤";
 				}
@@ -2923,14 +2960,15 @@ window.__ModuleLoader__.load({
 										children: t("tplSave")
 									})]
 								}),
-								FORM_FIELDS.map((field) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								FORM_FIELDS.filter((f) => {
+									const kind = form.kind ?? "login";
+									if (f.key === "cardNumber" || f.key === "cardExpiry" || f.key === "cardCvv" || f.key === "cardHolder") return kind === "card";
+									return kind !== "card" || f.key === "title" || f.key === "kind" || f.key === "notes" || f.key === "icon" || f.key === "color";
+								}).map((field) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 									className: VaultSection_module_css_default.field,
 									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t(field.label) }), field.key === "kind" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
 										value: form.kind ?? "login",
-										onChange: (event) => setForm((previous) => ({
-											...previous,
-											kind: event.target.value
-										})),
+										onChange: (event) => changeKind(event.target.value),
 										children: Object.entries(KIND_KEYS).map(([value, key]) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
 											value,
 											children: t(key)
@@ -3419,6 +3457,10 @@ window.__ModuleLoader__.load({
 			fieldRefreshToken: "Refresh token",
 			fieldOtpSecret: "OTP secret",
 			fieldUrl: "URL",
+			fieldCardNumber: "Card number",
+			fieldCardExpiry: "Expiry (MM/YY)",
+			fieldCardCvv: "CVV",
+			fieldCardHolder: "Card holder",
 			fieldNotes: "Notes",
 			fieldTags: "Tags",
 			fieldIcon: "Icon (emoji)",
@@ -3439,6 +3481,7 @@ window.__ModuleLoader__.load({
 			kindSecret: "Secret",
 			kindOauth: "OAuth",
 			kindCookie: "Session cookies",
+			kindCard: "Card",
 			kindCustom: "Custom"
 		};
 		/** Chinese strings (same keys as English). */
@@ -3687,6 +3730,10 @@ window.__ModuleLoader__.load({
 			fieldRefreshToken: "刷新令牌",
 			fieldOtpSecret: "TOTP 密钥",
 			fieldUrl: "URL",
+			fieldCardNumber: "卡号",
+			fieldCardExpiry: "有效期（MM/YY）",
+			fieldCardCvv: "CVV",
+			fieldCardHolder: "持卡人",
 			fieldNotes: "备注",
 			fieldTags: "标签",
 			fieldIcon: "图标（emoji）",
@@ -3707,6 +3754,7 @@ window.__ModuleLoader__.load({
 			kindSecret: "Secret",
 			kindOauth: "OAuth",
 			kindCookie: "会话 Cookies",
+			kindCard: "银行卡",
 			kindCustom: "自定义"
 		};
 		//#endregion