dsh-vault 1.6.1 → 1.7.0-rc.2

package/README-zh.md

@@ -122,7 +122,7 @@ dsh-vault 是一个 **bundle**(声明 `dsh.bundle` 的包):安装到 profile 后
 ### 方式一：从 npm 安装(最省事)
 
 ```sh
-dsh plugin --profile demo add dsh-vault
+dsh plugin --profile web add dsh-vault
 ```
 
 npm 包自带**预构建的 `lib/` 产物**,无需 allowBuilds、无需本地编译,安装即用。启动前设置主密码:
@@ -134,7 +134,7 @@ export DSH_VAULT_PASSWORD='你的强主密码'
 ### 方式二：从 GitHub 安装(锁 tag 或 commit)
 
 ```sh
-dsh plugin --profile demo add github:Ox0400/dsh-vault#v0.1.1
+dsh plugin --profile web add github:Ox0400/dsh-vault#v0.1.1
 ```
 
 git 安装拉取的是**源码**,`prepare` 脚本会在安装时构建 `lib/`。pnpm ≥10 默认阻止 git 依赖执行构建脚本。实测流程:
@@ -162,7 +162,7 @@ git 安装拉取的是**源码**,`prepare` 脚本会在安装时构建 `lib/`。
 ### 方式三：本地路径安装到 profile
 
 ```sh
-dsh plugin --profile demo add /绝对/路径/to/dsh-vault
+dsh plugin --profile web add /绝对/路径/to/dsh-vault
 ```
 
 pnpm 将 checkout 链接进 profile;只要 `lib/` 存在(必要时先在 checkout 里执行 `pnpm build`)即被识别为 bundle。
@@ -170,12 +170,12 @@ pnpm 将 checkout 链接进 profile;只要 `lib/` 存在(必要时先在 checkou
 ### 方式四：本地 tarball 安装
 
 ```sh
-npm pack && dsh plugin --profile demo add ./dsh-vault-0.1.1.tgz
+npm pack && dsh plugin --profile web add ./dsh-vault-0.1.1.tgz
 ```
 
 tarball 自带预构建 `lib/` 产物,无需构建或 allowBuilds。
 
-`dsh plugin --profile demo remove dsh-vault` 卸载(同时移除依赖与 layer)。
+`dsh plugin --profile web remove dsh-vault` 卸载(同时移除依赖与 layer)。
 
 ## 配置
 

package/README.md

@@ -124,7 +124,7 @@ All four install paths below are **verified end-to-end** (install → bundle lay
 ### Option 1: Install from npm (easiest)
 
 ```sh
-dsh plugin --profile demo add dsh-vault
+dsh plugin --profile web add dsh-vault
 ```
 
 npm packages ship **prebuilt `lib/` artifacts** — no allowBuilds, no local compilation, install and go. Set the master password before launching:
@@ -136,7 +136,7 @@ export DSH_VAULT_PASSWORD='your strong master password'
 ### Option 2: Install from GitHub (pin a tag or commit)
 
 ```sh
-dsh plugin --profile demo add github:Ox0400/dsh-vault#v0.1.1
+dsh plugin --profile web add github:Ox0400/dsh-vault#v0.1.1
 ```
 
 A git install fetches **sources, not built artifacts**, so the `prepare` script builds `lib/` at install time. pnpm ≥10 blocks git dependencies from running build scripts by default. The verified flow:
@@ -164,7 +164,7 @@ A git install fetches **sources, not built artifacts**, so the `prepare` script
 ### Option 3: Install from a local path
 
 ```sh
-dsh plugin --profile demo add /absolute/path/to/dsh-vault
+dsh plugin --profile web add /absolute/path/to/dsh-vault
 ```
 
 pnpm links the checkout into the profile; the bundle is recognized as long as `lib/` exists (run `pnpm build` in the checkout first if needed).
@@ -172,12 +172,12 @@ pnpm links the checkout into the profile; the bundle is recognized as long as `l
 ### Option 4: Install from a tarball
 
 ```sh
-npm pack && dsh plugin --profile demo add ./dsh-vault-0.1.1.tgz
+npm pack && dsh plugin --profile web add ./dsh-vault-0.1.1.tgz
 ```
 
 The tarball ships prebuilt `lib/` artifacts, so no build step or `allowBuilds` is required.
 
-`dsh plugin --profile demo remove dsh-vault` uninstalls (removes both the dependency and the layer).
+`dsh plugin --profile web remove dsh-vault` uninstalls (removes both the dependency and the layer).
 
 ## Configuration
 

package/lib/client.js

@@ -17,89 +17,89 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var VaultSection_module_css_default = {
-			"healthBar": "t_j5va_healthBar",
-			"highBadge": "t_j5va_highBadge",
+			"modeAuto": "t_j5va_modeAuto",
+			"genOpts": "t_j5va_genOpts",
+			"emptyHint": "t_j5va_emptyHint",
+			"auditRow": "t_j5va_auditRow",
+			"identity": "t_j5va_identity",
+			"rowDue": "t_j5va_rowDue",
+			"detailItem": "t_j5va_detailItem",
+			"srOnly": "t_j5va_srOnly",
+			"status": "t_j5va_status",
+			"modeAsk": "t_j5va_modeAsk",
+			"editor": "t_j5va_editor",
+			"totpRing": "t_j5va_totpRing",
+			"reportBox": "t_j5va_reportBox",
+			"pwStrong": "t_j5va_pwStrong",
+			"detailBox": "t_j5va_detailBox",
+			"kindFilter": "t_j5va_kindFilter",
+			"row": "t_j5va_row",
+			"uriCode": "t_j5va_uriCode",
 			"intro": "t_j5va_intro",
 			"badge": "t_j5va_badge",
+			"list": "t_j5va_list",
 			"addButton": "t_j5va_addButton",
-			"detailBox": "t_j5va_detailBox",
-			"pwStrong": "t_j5va_pwStrong",
-			"trashButton": "t_j5va_trashButton",
-			"reportLine": "t_j5va_reportLine",
-			"secretField": "t_j5va_secretField",
-			"revealButton": "t_j5va_revealButton",
-			"tab": "t_j5va_tab",
+			"title": "t_j5va_title",
+			"checkField": "t_j5va_checkField",
+			"backupButton": "t_j5va_backupButton",
+			"dupGroup": "t_j5va_dupGroup",
 			"rowMain": "t_j5va_rowMain",
-			"dangerButton": "t_j5va_dangerButton",
-			"kindFilter": "t_j5va_kindFilter",
 			"pinStar": "t_j5va_pinStar",
-			"row": "t_j5va_row",
-			"auditRow": "t_j5va_auditRow",
+			"badgeDanger": "t_j5va_badgeDanger",
 			"empty": "t_j5va_empty",
-			"editor": "t_j5va_editor",
-			"genOpts": "t_j5va_genOpts",
+			"tabPane": "t_j5va_tabPane",
+			"pwWeak": "t_j5va_pwWeak",
+			"searchBox": "t_j5va_searchBox",
+			"policyField": "t_j5va_policyField",
+			"section": "t_j5va_section",
+			"field": "t_j5va_field",
 			"sortButton": "t_j5va_sortButton",
-			"policyBar": "t_j5va_policyBar",
-			"dueBadge": "t_j5va_dueBadge",
-			"editorBody": "t_j5va_editorBody",
-			"genHist": "t_j5va_genHist",
+			"copied": "t_j5va_copied",
+			"rowActions": "t_j5va_rowActions",
+			"secretField": "t_j5va_secretField",
 			"editorActions": "t_j5va_editorActions",
-			"kindIcon": "t_j5va_kindIcon",
+			"retryButton": "t_j5va_retryButton",
+			"dueBadge": "t_j5va_dueBadge",
 			"modeReadonly": "t_j5va_modeReadonly",
-			"list": "t_j5va_list",
-			"dupNames": "t_j5va_dupNames",
-			"field": "t_j5va_field",
-			"saveButton": "t_j5va_saveButton",
-			"checkField": "t_j5va_checkField",
-			"rowExpired": "t_j5va_rowExpired",
-			"detailItem": "t_j5va_detailItem",
-			"tabActive": "t_j5va_tabActive",
-			"emptyHint": "t_j5va_emptyHint",
-			"srOnly": "t_j5va_srOnly",
-			"modeAsk": "t_j5va_modeAsk",
-			"badgeWarn": "t_j5va_badgeWarn",
-			"pwWeak": "t_j5va_pwWeak",
-			"uriCode": "t_j5va_uriCode",
-			"rowDue": "t_j5va_rowDue",
+			"dangerButton": "t_j5va_dangerButton",
+			"error": "t_j5va_error",
+			"tab": "t_j5va_tab",
+			"lockedTag": "t_j5va_lockedTag",
+			"reportLine": "t_j5va_reportLine",
+			"editorBody": "t_j5va_editorBody",
+			"reportTitle": "t_j5va_reportTitle",
+			"clearButton": "t_j5va_clearButton",
+			"reportSub": "t_j5va_reportSub",
+			"badgeOk": "t_j5va_badgeOk",
 			"pwMeter": "t_j5va_pwMeter",
-			"title": "t_j5va_title",
-			"lockedBanner": "t_j5va_lockedBanner",
-			"copied": "t_j5va_copied",
+			"badgeWarn": "t_j5va_badgeWarn",
+			"dupNames": "t_j5va_dupNames",
+			"trashButton": "t_j5va_trashButton",
 			"kindChip": "t_j5va_kindChip",
-			"searchBox": "t_j5va_searchBox",
-			"dupGroup": "t_j5va_dupGroup",
-			"tabs": "t_j5va_tabs",
-			"status": "t_j5va_status",
-			"auditIssues": "t_j5va_auditIssues",
-			"resultCount": "t_j5va_resultCount",
-			"badgeDanger": "t_j5va_badgeDanger",
-			"reportTitle": "t_j5va_reportTitle",
-			"pwBar": "t_j5va_pwBar",
-			"backupButton": "t_j5va_backupButton",
-			"lockedTag": "t_j5va_lockedTag",
-			"deleteButton": "t_j5va_deleteButton",
-			"rowActions": "t_j5va_rowActions",
-			"totpRing": "t_j5va_totpRing",
+			"genHist": "t_j5va_genHist",
+			"healthBar": "t_j5va_healthBar",
+			"policyBar": "t_j5va_policyBar",
+			"genOptRow": "t_j5va_genOptRow",
+			"toolbar": "t_j5va_toolbar",
+			"pwLabel": "t_j5va_pwLabel",
+			"rowExpired": "t_j5va_rowExpired",
+			"saveButton": "t_j5va_saveButton",
 			"footer": "t_j5va_footer",
+			"pwFair": "t_j5va_pwFair",
+			"revealButton": "t_j5va_revealButton",
+			"deleteButton": "t_j5va_deleteButton",
+			"highBadge": "t_j5va_highBadge",
 			"dupMerge": "t_j5va_dupMerge",
-			"retryButton": "t_j5va_retryButton",
-			"pwLabel": "t_j5va_pwLabel",
-			"toolbar": "t_j5va_toolbar",
+			"emptyBox": "t_j5va_emptyBox",
 			"scoreRing": "t_j5va_scoreRing",
-			"tabPane": "t_j5va_tabPane",
-			"identity": "t_j5va_identity",
-			"reportBox": "t_j5va_reportBox",
-			"reportSub": "t_j5va_reportSub",
-			"modeAuto": "t_j5va_modeAuto",
+			"resultCount": "t_j5va_resultCount",
+			"tabs": "t_j5va_tabs",
+			"tabActive": "t_j5va_tabActive",
+			"auditIssues": "t_j5va_auditIssues",
 			"totp": "t_j5va_totp",
-			"genOptRow": "t_j5va_genOptRow",
-			"badgeOk": "t_j5va_badgeOk",
-			"clearButton": "t_j5va_clearButton",
-			"error": "t_j5va_error",
-			"emptyBox": "t_j5va_emptyBox",
-			"policyField": "t_j5va_policyField",
-			"pwFair": "t_j5va_pwFair",
-			"section": "t_j5va_section"
+			"lockedBanner": "t_j5va_lockedBanner",
+			"kindIcon": "t_j5va_kindIcon",
+			"pwBar": "t_j5va_pwBar"
 		};
 		//#endregion
 		//#region src/client/VaultSection.tsx
@@ -284,7 +284,7 @@ window.__ModuleLoader__.load({
 		}
 		/** Render the Vault settings section. */
 		function VaultSection(props) {
-			const { t, config, setAccessMode, setAutoCapture, list, search, get, add, update, remove, trash, rotation, health, duplicates, duplicateGroups, merge, history, stats, backupStatus, backup, recent, restore, undeleteAll, totp, status, switchVault, listVaults, touch, verifyAll, breachCheck, generatePassword, strength, generateUsername, templates, saveTemplate, lock, totpUri, tags, renameTag, generatorHistory, backups, deleteBackup, restoreBackup, importChrome, importFirefox, import1password, importManagerCsv, importEnpass, importBitwarden, import1pif, importKeePassXml, importKdbx, importBitwardenEncrypted, keychainImport, searchSystem, sessionOpen, sessionCollect, sessionClose, sessionListOpen, sessionListSaved, sessionSave, sessionExport, sessionGet, sessionPrune, vaultRename, vaultDelete, watchtower, export1pux, exportBitwarden, recoveryCode, verifyRecovery, recoveryStatus, unlock } = props;
+			const { t, config, setAccessMode, setAutoCapture, setAutoLock, list, search, get, add, update, remove, trash, rotation, health, duplicates, duplicateGroups, merge, history, stats, backupStatus, backup, recent, restore, undeleteAll, totp, status, switchVault, listVaults, touch, verifyAll, breachCheck, generatePassword, strength, generateUsername, templates, saveTemplate, lock, totpUri, tags, renameTag, generatorHistory, backups, deleteBackup, restoreBackup, importChrome, importFirefox, import1password, importManagerCsv, importEnpass, importBitwarden, import1pif, importKeePassXml, importKdbx, importBitwardenEncrypted, keychainImport, searchSystem, sessionOpen, sessionCollect, sessionClose, sessionListOpen, sessionListSaved, sessionSave, sessionExport, sessionGet, sessionPrune, vaultRename, vaultDelete, watchtower, export1pux, exportBitwarden, recoveryCode, verifyRecovery, recoveryStatus, unlock } = props;
 			const searchId = (0, react.useId)();
 			const [query, setQuery] = (0, react.useState)("");
 			const [state, setState] = (0, react.useState)({ status: "loading" });
@@ -357,6 +357,15 @@ window.__ModuleLoader__.load({
 				if (clean.length === 0) return t("error");
 				return t("errDetail").replace("{detail}", clean);
 			}
+			/** Format an auto-lock timeout (seconds) for display: 90 → "1m 30s". */
+			function formatAutoLock(seconds) {
+				if (seconds <= 0) return "0";
+				const m = Math.floor(seconds / 60);
+				const s = seconds % 60;
+				if (m === 0) return `${s}s`;
+				if (s === 0) return `${m}m`;
+				return `${m}m ${s}s`;
+			}
 			(0, react.useEffect)(() => {
 				const url = form.url ?? "";
 				if (url.length === 0 || (form.icon ?? "").length > 0) return;
@@ -2542,9 +2551,61 @@ window.__ModuleLoader__.load({
 												}
 											})]
 										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											className: VaultSection_module_css_default.policyField,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("autoLockLabel") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+												value: policy.autoLockSeconds,
+												disabled: busy,
+												onChange: (event) => {
+													const next = Number(event.target.value);
+													setBusy(true);
+													setMessage(null);
+													setAutoLock(next).then((value) => {
+														setPolicy((previous) => previous ? {
+															...previous,
+															autoLockSeconds: value.seconds
+														} : previous);
+														setBusy(false);
+													}, (err) => {
+														setMessage(errText(err));
+														setBusy(false);
+													});
+												},
+												children: [
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: 0,
+														children: t("autoLockNever")
+													}),
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: 60,
+														children: t("autoLock1m")
+													}),
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: 300,
+														children: t("autoLock5m")
+													}),
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: 900,
+														children: t("autoLock15m")
+													}),
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: 1800,
+														children: t("autoLock30m")
+													}),
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: 3600,
+														children: t("autoLock1h")
+													})
+												]
+											})]
+										}),
 										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 											className: policy.accessMode === "readonly" ? VaultSection_module_css_default.modeReadonly : policy.accessMode === "ask" ? VaultSection_module_css_default.modeAsk : VaultSection_module_css_default.modeAuto,
-											children: [policy.accessMode === "readonly" ? t("modeReadonlyHint") : policy.accessMode === "ask" ? t("modeAskHint") : t("modeAutoHint"), policy.autoCapture ? ` · ${t("autoCaptureOn")}` : ` · ${t("autoCaptureOff")}`]
+											children: [
+												policy.accessMode === "readonly" ? t("modeReadonlyHint") : policy.accessMode === "ask" ? t("modeAskHint") : t("modeAutoHint"),
+												policy.autoCapture ? ` · ${t("autoCaptureOn")}` : ` · ${t("autoCaptureOff")}`,
+												policy.autoLockSeconds > 0 ? ` · ${t("autoLockHint")}: ${formatAutoLock(policy.autoLockSeconds)}` : ` · ${t("autoLockNeverHint")}`
+											]
 										})
 									]
 								})]
@@ -2821,6 +2882,7 @@ window.__ModuleLoader__.load({
 														className: VaultSection_module_css_default.revealButton,
 														title: t("copyFieldHint"),
 														onClick: () => void copyValue(entry.id, Array.isArray(v) ? v.join(", ") : String(v)),
+														disabled: locked,
 														children: "⧉"
 													})
 												]
@@ -2840,7 +2902,7 @@ window.__ModuleLoader__.load({
 												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 													type: "button",
 													onClick: () => void copyValue(entry.id, entry.username ?? entry.title),
-													disabled: busy,
+													disabled: busy || readonly || locked,
 													children: t("copy")
 												}),
 												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -2858,20 +2920,20 @@ window.__ModuleLoader__.load({
 												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 													type: "button",
 													onClick: () => void showTotp(entry.id),
-													disabled: busy,
+													disabled: busy || locked,
 													children: t("totp")
 												}),
 												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 													type: "button",
 													onClick: () => void showTotpUri(entry.id),
-													disabled: busy,
+													disabled: busy || locked,
 													title: t("totpUriHint"),
 													children: t("totpUri")
 												}),
 												code !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 													type: "button",
 													onClick: () => void copyValue(entry.id, code),
-													disabled: busy,
+													disabled: busy || locked,
 													children: t("copyCode")
 												}),
 												entry.url !== void 0 && entry.url !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -3710,6 +3772,15 @@ window.__ModuleLoader__.load({
 			errInvalidVaultName: "Invalid vault name.",
 			errReadonly: "This action is disabled in readonly mode.",
 			errDetail: "Something went wrong: {detail}",
+			autoLockLabel: "Auto-lock after",
+			autoLockNever: "Never",
+			autoLock1m: "1 minute",
+			autoLock5m: "5 minutes",
+			autoLock15m: "15 minutes",
+			autoLock30m: "30 minutes",
+			autoLock1h: "1 hour",
+			autoLockHint: "Auto-lock",
+			autoLockNeverHint: "auto-lock off",
 			kindLogin: "Login",
 			kindSsh: "SSH",
 			kindApiKey: "API key",
@@ -4013,6 +4084,15 @@ window.__ModuleLoader__.load({
 			errInvalidVaultName: "保险库名称无效。",
 			errReadonly: "当前为只读模式，此操作已禁用。",
 			errDetail: "操作失败：{detail}",
+			autoLockLabel: "自动锁定",
+			autoLockNever: "永不",
+			autoLock1m: "1 分钟",
+			autoLock5m: "5 分钟",
+			autoLock15m: "15 分钟",
+			autoLock30m: "30 分钟",
+			autoLock1h: "1 小时",
+			autoLockHint: "自动锁定",
+			autoLockNeverHint: "自动锁定已关闭",
 			kindLogin: "登录",
 			kindSsh: "SSH",
 			kindApiKey: "API 密钥",
@@ -4055,6 +4135,7 @@ window.__ModuleLoader__.load({
 				config: () => invoke("config"),
 				setAccessMode: (mode) => invoke("setAccessMode", { mode }),
 				setAutoCapture: (enabled) => invoke("setAutoCapture", { enabled }),
+				setAutoLock: (seconds) => invoke("setAutoLock", { seconds }),
 				list: () => invoke("list").then((r) => r.entries),
 				search: (query, limit) => invoke("search", {
 					query,