dsh-vault v0.3.0
v0.3.0 — Three-state access mode
accessMode — now three states
| Mode | Behavior |
|---|---|
readonly |
Mutations rejected on both model tools and Settings UI |
ask (default) |
Reads free; every add/update/delete routes through the harness approval channel — the user confirms each write ("prompt before writing") |
auto |
Automatic read-write, no per-call prompt |
Settings UI
- Access-mode dropdown (只读 / 写入前询问 / 自动读写) right in 设置 → 密钥库
- Switching persists to
<vault dir>/access.jsonand is restored on next launch (VaultGateway.setAccessMode) - The model tools and the UI share the same live policy, so a switch is effective immediately for both surfaces
System prompt
The dsh-vault prompt section now states the active mode precisely (READONLY / ASK / AUTO).
47 tests passing (6 new: setAccessMode persistence, ask-mode approval gate, three-state config).
Install
dsh plugin --profile demo add dsh-vault
dsh plugin --profile demo add github:Ox0400/dsh-vault#v0.3.0