dsh-vault 1.6.0-rc.9 → 1.6.0

package/README-zh.md

@@ -58,6 +58,7 @@ dsh-vault 是一个面向 DeepSeek Harness 的安全加密插件：把你在使
 | `vault_rekey` | 原地升级 scrypt KDF 参数并重加密 |
 | `vault_backup` | 带时间戳的加密备份，支持保留策略：超过 `maxBackups`（默认 10）的旧备份自动清理 |
 | `vault_import_csv` | 从 CSV 批量导入凭据（自定义列变为 fields；`overwrite: true` 合并字段到已有条目，不再产生重复） |
+| `vault_bulk_delete` | 按 query/kind/tag 或显式 ids 批量软删除条目;需 `confirm: true`（默认仅试运行）;回收站可恢复 |
 | `vault_apply_tags` | 按查询批量增/删/替换条目标签（支持 dry-run，不含密钥） |
 | `vault_totp_uri` | 为存储的或裸 TOTP 密钥生成 otpauth:// 配置 URI |
 | `vault_switch` / `vault_list` | 按名称切换当前保险库 / 列出可用保险库 |

package/README.md

@@ -60,6 +60,7 @@ Each record has a `title`, an optional `kind`, and any combination of fields:
 | `vault_rekey` | Upgrade the vault to fresh scrypt KDF parameters in place |
 | `vault_backup` | Timestamped encrypted backup with retention; optional `note` |
 | `vault_import_csv` | Bulk-import credentials from a CSV file (custom columns become fields; `overwrite: true` merges fields into existing entries instead of duplicating) |
+| `vault_bulk_delete` | Soft-delete entries matching a query/kind/tag or explicit ids; `confirm: true` required (dry-run by default); trashed entries are restorable |
 | `vault_apply_tags` | Bulk add/remove/replace tags on every entry matching a query (dry-run supported, no secrets) |
 | `vault_totp_uri` | Build an otpauth:// provisioning URI for a stored or bare TOTP secret |
 | `vault_switch` / `vault_list` | Switch the active vault by name / list available vaults |

package/lib/client.js

@@ -17,89 +17,89 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
+			"rowExpired": "t_j5va_rowExpired",
 			"toolbar": "t_j5va_toolbar",
-			"scoreRing": "t_j5va_scoreRing",
-			"genHist": "t_j5va_genHist",
-			"genOpts": "t_j5va_genOpts",
-			"kindFilter": "t_j5va_kindFilter",
-			"clearButton": "t_j5va_clearButton",
-			"addButton": "t_j5va_addButton",
 			"status": "t_j5va_status",
-			"reportBox": "t_j5va_reportBox",
-			"policyBar": "t_j5va_policyBar",
-			"tab": "t_j5va_tab",
-			"saveButton": "t_j5va_saveButton",
-			"trashButton": "t_j5va_trashButton",
-			"error": "t_j5va_error",
-			"genOptRow": "t_j5va_genOptRow",
-			"rowExpired": "t_j5va_rowExpired",
-			"reportTitle": "t_j5va_reportTitle",
-			"identity": "t_j5va_identity",
-			"rowMain": "t_j5va_rowMain",
-			"dueBadge": "t_j5va_dueBadge",
-			"dupNames": "t_j5va_dupNames",
-			"resultCount": "t_j5va_resultCount",
-			"empty": "t_j5va_empty",
-			"pinStar": "t_j5va_pinStar",
-			"kindChip": "t_j5va_kindChip",
-			"badgeWarn": "t_j5va_badgeWarn",
-			"kindIcon": "t_j5va_kindIcon",
-			"highBadge": "t_j5va_highBadge",
-			"rowDue": "t_j5va_rowDue",
-			"pwMeter": "t_j5va_pwMeter",
-			"editorBody": "t_j5va_editorBody",
 			"badge": "t_j5va_badge",
-			"backupButton": "t_j5va_backupButton",
 			"detailItem": "t_j5va_detailItem",
-			"tabPane": "t_j5va_tabPane",
-			"modeAsk": "t_j5va_modeAsk",
-			"totpRing": "t_j5va_totpRing",
-			"field": "t_j5va_field",
-			"deleteButton": "t_j5va_deleteButton",
-			"badgeOk": "t_j5va_badgeOk",
-			"emptyBox": "t_j5va_emptyBox",
-			"lockedBanner": "t_j5va_lockedBanner",
-			"emptyHint": "t_j5va_emptyHint",
-			"detailBox": "t_j5va_detailBox",
-			"srOnly": "t_j5va_srOnly",
-			"pwWeak": "t_j5va_pwWeak",
-			"lockedTag": "t_j5va_lockedTag",
+			"pwFair": "t_j5va_pwFair",
+			"pwStrong": "t_j5va_pwStrong",
 			"copied": "t_j5va_copied",
-			"section": "t_j5va_section",
-			"revealButton": "t_j5va_revealButton",
+			"editorBody": "t_j5va_editorBody",
+			"addButton": "t_j5va_addButton",
 			"modeAuto": "t_j5va_modeAuto",
-			"pwStrong": "t_j5va_pwStrong",
+			"scoreRing": "t_j5va_scoreRing",
 			"tabs": "t_j5va_tabs",
+			"reportLine": "t_j5va_reportLine",
+			"secretField": "t_j5va_secretField",
+			"badgeDanger": "t_j5va_badgeDanger",
+			"backupButton": "t_j5va_backupButton",
+			"modeReadonly": "t_j5va_modeReadonly",
 			"uriCode": "t_j5va_uriCode",
-			"sortButton": "t_j5va_sortButton",
-			"dupMerge": "t_j5va_dupMerge",
-			"tabActive": "t_j5va_tabActive",
-			"auditRow": "t_j5va_auditRow",
+			"badgeOk": "t_j5va_badgeOk",
+			"searchBox": "t_j5va_searchBox",
 			"row": "t_j5va_row",
+			"dupNames": "t_j5va_dupNames",
+			"reportTitle": "t_j5va_reportTitle",
+			"highBadge": "t_j5va_highBadge",
+			"tabActive": "t_j5va_tabActive",
+			"error": "t_j5va_error",
+			"rowActions": "t_j5va_rowActions",
+			"pwBar": "t_j5va_pwBar",
+			"emptyBox": "t_j5va_emptyBox",
+			"rowMain": "t_j5va_rowMain",
+			"empty": "t_j5va_empty",
+			"lockedTag": "t_j5va_lockedTag",
+			"totp": "t_j5va_totp",
+			"modeAsk": "t_j5va_modeAsk",
+			"healthBar": "t_j5va_healthBar",
+			"kindIcon": "t_j5va_kindIcon",
+			"genHist": "t_j5va_genHist",
+			"section": "t_j5va_section",
+			"totpRing": "t_j5va_totpRing",
 			"dangerButton": "t_j5va_dangerButton",
-			"list": "t_j5va_list",
+			"reportSub": "t_j5va_reportSub",
+			"dupGroup": "t_j5va_dupGroup",
+			"genOptRow": "t_j5va_genOptRow",
+			"editor": "t_j5va_editor",
+			"auditIssues": "t_j5va_auditIssues",
+			"pwMeter": "t_j5va_pwMeter",
+			"srOnly": "t_j5va_srOnly",
+			"genOpts": "t_j5va_genOpts",
+			"sortButton": "t_j5va_sortButton",
+			"emptyHint": "t_j5va_emptyHint",
+			"trashButton": "t_j5va_trashButton",
+			"tab": "t_j5va_tab",
+			"rowDue": "t_j5va_rowDue",
+			"auditRow": "t_j5va_auditRow",
+			"clearButton": "t_j5va_clearButton",
+			"resultCount": "t_j5va_resultCount",
+			"lockedBanner": "t_j5va_lockedBanner",
+			"field": "t_j5va_field",
 			"policyField": "t_j5va_policyField",
-			"searchBox": "t_j5va_searchBox",
+			"reportBox": "t_j5va_reportBox",
 			"editorActions": "t_j5va_editorActions",
-			"auditIssues": "t_j5va_auditIssues",
-			"pwFair": "t_j5va_pwFair",
+			"dueBadge": "t_j5va_dueBadge",
+			"footer": "t_j5va_footer",
 			"checkField": "t_j5va_checkField",
-			"intro": "t_j5va_intro",
-			"badgeDanger": "t_j5va_badgeDanger",
-			"modeReadonly": "t_j5va_modeReadonly",
-			"reportSub": "t_j5va_reportSub",
+			"detailBox": "t_j5va_detailBox",
+			"dupMerge": "t_j5va_dupMerge",
 			"pwLabel": "t_j5va_pwLabel",
-			"totp": "t_j5va_totp",
-			"pwBar": "t_j5va_pwBar",
+			"deleteButton": "t_j5va_deleteButton",
+			"identity": "t_j5va_identity",
+			"saveButton": "t_j5va_saveButton",
+			"revealButton": "t_j5va_revealButton",
+			"badgeWarn": "t_j5va_badgeWarn",
+			"policyBar": "t_j5va_policyBar",
+			"pinStar": "t_j5va_pinStar",
 			"retryButton": "t_j5va_retryButton",
-			"footer": "t_j5va_footer",
-			"healthBar": "t_j5va_healthBar",
-			"dupGroup": "t_j5va_dupGroup",
-			"editor": "t_j5va_editor",
-			"secretField": "t_j5va_secretField",
+			"pwWeak": "t_j5va_pwWeak",
+			"intro": "t_j5va_intro",
+			"tabPane": "t_j5va_tabPane",
+			"kindChip": "t_j5va_kindChip",
 			"title": "t_j5va_title",
-			"rowActions": "t_j5va_rowActions",
-			"reportLine": "t_j5va_reportLine"
+			"kindFilter": "t_j5va_kindFilter",
+			"list": "t_j5va_list"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx

package/lib/index.js

@@ -1448,6 +1448,60 @@ export async function apply(ctx, config) {
             return { matched: matched.length, updated: updatedCount, entries: changed };
         },
     }));
+    // ── vault_bulk_delete: soft-delete entries matching a filter ───────────────
+    ctx.tools.register(defineTool({
+        name: 'vault_bulk_delete',
+        description: 'Soft-delete (move to trash) the entries matching a filter: a search query, a kind, '
+            + 'a tag, or an explicit list of ids. Pass confirm: true to actually delete — otherwise it only '
+            + 'reports how many would be deleted. Trashed entries can be restored with vault_restore / '
+            + 'vault_undelete_all. Returns how many were moved to trash.',
+        parameters: {
+            query: { type: 'string', description: 'Search text selecting entries (title/username/email/host/url/notes/tags). Omit to match by kind/tag/ids.' },
+            kind: { type: 'string', enum: ['login', 'ssh', 'api-key', 'secret', 'oauth', 'cookie', 'card', 'custom'], description: 'Only delete entries of this kind.' },
+            tag: { type: 'string', description: 'Only delete entries carrying this tag.' },
+            ids: { type: 'array', items: { type: 'string' }, description: 'Explicit entry ids to delete (ignores query/kind/tag when provided).' },
+            confirm: { type: 'boolean', description: 'Must be true to move entries to trash (default false = dry run).' },
+        },
+        output: { schema: { type: 'object', additionalProperties: false, properties: { matched: { type: 'integer', required: true }, deleted: { type: 'integer', required: true }, note: { type: 'string', required: true } } }, render: (_a, v) => [{ type: 'text', text: v.note }] },
+        async execute(args) {
+            const s = await guardStore();
+            const all = s.list();
+            let targets;
+            if (Array.isArray(args.ids) && args.ids.length > 0) {
+                const idSet = new Set(args.ids);
+                targets = all.filter(e => idSet.has(e.id));
+            }
+            else {
+                const query = typeof args.query === 'string' ? args.query.trim() : '';
+                let filtered = all;
+                if (args.kind !== undefined)
+                    filtered = filtered.filter(e => (e.kind ?? 'login') === args.kind);
+                if (typeof args.tag === 'string' && args.tag.trim().length > 0) {
+                    const tag = args.tag.trim();
+                    filtered = filtered.filter(e => (e.tags ?? []).includes(tag));
+                }
+                if (query.length > 0) {
+                    filtered = filtered.filter(e => {
+                        const haystack = [e.title, e.username, e.email, e.phone, e.host, e.url, ...(e.tags ?? [])]
+                            .filter((v) => v !== undefined)
+                            .join('\n').toLowerCase();
+                        return haystack.includes(query.toLowerCase());
+                    });
+                }
+                targets = filtered;
+            }
+            if (args.confirm !== true) {
+                return { matched: targets.length, deleted: 0, note: `bulk delete dry run: ${targets.length} entry/ies would be moved to trash — pass confirm: true to proceed` };
+            }
+            assertWritable('vault_bulk_delete');
+            let deleted = 0;
+            for (const e of targets) {
+                if (await s.delete(e.id))
+                    deleted++;
+            }
+            return { matched: targets.length, deleted, note: `bulk delete: ${deleted} entry/ies moved to trash (${targets.length} matched)` };
+        },
+    }));
     // ── vault_generate_username: random username/email suggestion ───────────────
     ctx.tools.register(defineTool({
         name: 'vault_generate_username',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vault",
-  "version": "1.6.0-rc.9",
+  "version": "1.6.0",
   "description": "Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.",
   "type": "module",
   "license": "MIT",