dsh-config-manager 0.1.0

package/lib/core/backup.js

@@ -0,0 +1,184 @@
+/**
+ * Pre-import Snapshot（规范 §16/§27）：只保存本次导入将被修改的目标原值。
+ * 应用层事务的基础：所有补偿动作基于快照（rollback.ts 逆序执行）。
+ *
+ * 快照不保存 credential 值（DSH 永不回读值）——credential 条目只记 existed 标志，
+ * 回滚时 existed=true 的条目如实标记「值需人工补录」。
+ */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { parseJsonSafe } from "../utils/json.js";
+import { sha256Hex } from "../utils/hashing.js";
+/** 导入将实际写入的目标 kinds（这些项才需要快照） */
+const EXECUTABLE_KINDS = new Set(['Create', 'Update', 'Install', 'MissingSecret', 'MissingDependency']);
+/** 文件类分区的目标基准目录（相对 homeDir；pluginFiles 的 ref 已是完整相对路径） */
+const FILE_BASES = {
+    skills: 'skills',
+    agentPresets: '.agent-presets',
+    pluginFiles: '',
+    sessions: 'sessions',
+};
+/** 解析文件类目标的绝对路径（引擎通用快照与回滚共用） */
+export function resolveFileTarget(ctx, adapter, ref) {
+    const base = FILE_BASES[adapter] ?? '';
+    return path.join(ctx.homeDir, base, ref);
+}
+/** 从计划中收集将被写入的 target（去重） */
+function collectTargets(plan) {
+    const seen = new Set();
+    const targets = [];
+    for (const item of plan.items) {
+        if (!EXECUTABLE_KINDS.has(item.kind) || item.target === undefined)
+            continue;
+        const key = `${item.target.adapter}\u0000${item.target.ref}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        targets.push(item.target);
+    }
+    return targets;
+}
+/** 引擎通用快照（adapter 未实现 snapshot? 时兜底） */
+async function engineSnapshotEntry(ctx, target) {
+    switch (target.adapter) {
+        case 'settings':
+        case 'ui':
+        case 'providers': {
+            try {
+                const info = await ctx.settings.describe(target.ref);
+                return { kind: 'settingsNamespace', adapter: target.adapter, ref: target.ref, before: info.value, revision: info.revision, existed: true };
+            }
+            catch {
+                // 目标不存在该 namespace → 快照标记 existed:false（回滚时无法恢复「不存在」，如实处理）
+                return { kind: 'settingsNamespace', adapter: target.adapter, ref: target.ref, before: null, revision: 0, existed: false };
+            }
+        }
+        case 'credentialsStatus': {
+            const info = await ctx.credentials.describe(target.ref);
+            return { kind: 'credential', adapter: target.adapter, ref: target.ref, before: null, existed: info.configured };
+        }
+        case 'workspaces': {
+            const records = await ctx.workspace.listRecords();
+            const rec = records.find((r) => r.id === target.ref);
+            return { kind: 'workspaceRecord', adapter: target.adapter, ref: target.ref, before: rec ?? null };
+        }
+        case 'mcp':
+        case 'plugins':
+        case 'prompts': {
+            // patchLine：从组合 patch 文件读取原行（file 为必填的 file 字段约定为 'cordis.patch.yml'）
+            const file = 'cordis.patch.yml';
+            const lines = await ctx.patchFile.readPatchLines(file);
+            const line = lines.find((l) => l.lineId === target.ref);
+            return { kind: 'patchLine', adapter: target.adapter, ref: target.ref, before: line?.raw ?? null, existed: line !== undefined };
+        }
+        case 'skills':
+        case 'agentPresets':
+        case 'pluginFiles':
+        case 'sessions': {
+            const abs = resolveFileTarget(ctx, target.adapter, target.ref);
+            if (!(await ctx.fs.exists(abs))) {
+                return { kind: 'file', adapter: target.adapter, ref: target.ref, before: null, existed: false };
+            }
+            const data = await ctx.fs.readFile(abs);
+            // 文件字节不放进 SnapshotEntry（契约纯净），由 createSnapshot 收集进 blobs Map 统一落盘
+            return {
+                kind: 'file',
+                adapter: target.adapter,
+                ref: target.ref,
+                before: { contentHash: sha256Hex(data) },
+                existed: true,
+                copiedTo: `blobs/${crypto.randomUUID()}`,
+            };
+        }
+        default:
+            return { kind: 'settingsNamespace', adapter: target.adapter, ref: target.ref, before: null };
+    }
+}
+/**
+ * 生成并落盘快照：只覆盖将被写入的目标。
+ * 文件字节经 blobs Map 交给 store.save（SnapshotEntry 契约不含二进制）。
+ */
+export async function createSnapshot(opts) {
+    const { ctx, plan, sourceZip, store, adapters } = opts;
+    const targets = collectTargets(plan);
+    const entries = [];
+    const blobs = new Map();
+    // 1) 有 adapter.snapshot? 的优先（adapter 更懂自己的数据）
+    const byAdapter = new Map();
+    for (const t of targets) {
+        const list = byAdapter.get(t.adapter) ?? [];
+        list.push(t);
+        byAdapter.set(t.adapter, list);
+    }
+    for (const adapter of adapters) {
+        const adapterTargets = byAdapter.get(adapter.id);
+        if (!adapterTargets || adapterTargets.length === 0)
+            continue;
+        if (adapter.snapshot) {
+            const adapterEntries = await adapter.snapshot(adapterTargets, ctx);
+            entries.push(...adapterEntries);
+            byAdapter.delete(adapter.id);
+        }
+    }
+    // 2) 引擎通用快照兜底
+    for (const [adapterId, remaining] of byAdapter) {
+        for (const target of remaining) {
+            const entry = await engineSnapshotEntry(ctx, target);
+            // 文件字节：文件类条目在引擎快照里读出内容 → blobs
+            if (entry.kind === 'file' && entry.copiedTo && entry.existed) {
+                const abs = resolveFileTarget(ctx, adapterId, target.ref);
+                blobs.set(entry.copiedTo, await ctx.fs.readFile(abs));
+            }
+            entries.push(entry);
+        }
+    }
+    const snapshot = {
+        id: crypto.randomUUID(),
+        createdAt: new Date().toISOString(),
+        sourceZip,
+        entries,
+    };
+    // file 条目登记 snapshotId，回滚读 blob 时定位快照目录
+    for (const entry of snapshot.entries) {
+        if (entry.kind === 'file')
+            entry.snapshotId = snapshot.id;
+    }
+    await store.save(snapshot, blobs);
+    return snapshot;
+}
+/** 文件快照存储：<dir>/<id>/snapshot.json + <dir>/<id>/blobs/* */
+export class FileSnapshotStore {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    snapshotDir(id) {
+        return path.join(this.options.dir, id);
+    }
+    async save(snapshot, blobs = new Map()) {
+        const dir = this.snapshotDir(snapshot.id);
+        await fs.mkdir(path.join(dir, 'blobs'), { recursive: true });
+        for (const [blobPath, data] of blobs) {
+            const target = path.join(dir, blobPath);
+            if (!target.startsWith(dir))
+                throw new Error(`快照 blob 路径越界: ${blobPath}`);
+            await fs.mkdir(path.dirname(target), { recursive: true });
+            await fs.writeFile(target, data);
+        }
+        await fs.writeFile(path.join(dir, 'snapshot.json'), JSON.stringify(snapshot, null, 2));
+        return snapshot.id;
+    }
+    async load(id) {
+        const raw = await fs.readFile(path.join(this.snapshotDir(id), 'snapshot.json'), 'utf8');
+        return parseJsonSafe(raw);
+    }
+    async readBlob(id, blobPath) {
+        const target = path.join(this.snapshotDir(id), blobPath);
+        const dir = this.options.dir;
+        if (!target.startsWith(dir))
+            throw new Error(`快照 blob 路径越界: ${blobPath}`);
+        return fs.readFile(target);
+    }
+}
+//# sourceMappingURL=backup.js.map

package/lib/core/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/core/backup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAOhD,iCAAiC;AACjC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAExG,0DAA0D;AAC1D,MAAM,UAAU,GAAuC;IACrD,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,gBAAgB;IAC9B,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,gCAAgC;AAChC,MAAM,UAAU,iBAAiB,CAAC,GAAgB,EAAE,OAAkB,EAAE,GAAW;IACjF,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAUD,6BAA6B;AAC7B,SAAS,cAAc,CAAC,IAAgB;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC5E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wCAAwC;AACxC,KAAK,UAAU,mBAAmB,CAAC,GAAgB,EAAE,MAAsB;IACzE,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,UAAU,CAAC;QAChB,KAAK,IAAI,CAAC;QACV,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrD,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7I,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;gBAC3D,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5H,CAAC;QACH,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAClH,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;QACpG,CAAC;QACD,KAAK,KAAK,CAAC;QACX,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,sEAAsE;YACtE,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QACjI,CAAC;QACD,KAAK,QAAQ,CAAC;QACd,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClG,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxC,kEAAkE;YAClE,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;gBACxC,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,SAAS,MAAM,CAAC,UAAU,EAAE,EAAE;aACzC,CAAC;QACJ,CAAC;QACD;YACE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA2B;IAC9D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE5C,8CAA8C;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YAChC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,cAAc;IACd,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,SAAS,EAAE,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACrD,+BAA+B;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1D,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAa;QACzB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS;QACT,OAAO;KACR,CAAC;IACF,wCAAwC;IACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,2DAA2D;AAC3D,MAAM,OAAO,iBAAiB;IACX,OAAO,CAA2B;IAEnD,YAAY,OAAiC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEO,WAAW,CAAC,EAAU;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB,EAAE,QAAiC,IAAI,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YAC1E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO,aAAa,CAAC,GAAG,CAAa,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,QAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/lib/core/exporter.d.ts

@@ -0,0 +1,37 @@
+import type { Manifest } from '../schema/types.ts';
+import type { ConfigAdapter, EncryptionProvider, ExportOptions, ExportReport, HostContext, SecretScanner } from './types.ts';
+export interface ExporterOptions {
+    ctx: HostContext;
+    adapters: ConfigAdapter[];
+    /** Secret 扫描器；缺省用字段名黑名单剥离（m4 可注入强化版） */
+    scanner?: SecretScanner;
+    /** 加密提供者（m4 用 node:crypto 实现）；includeSecrets 时必填 */
+    encryption?: EncryptionProvider | null;
+    /** 插件自身版本（manifest.exporter.version） */
+    exporterVersion?: string;
+    now?: () => Date;
+}
+/** 缺省 SecretScanner：递归黑名单字段剥离（字段名大小写不敏感；二进制/Uint8Array 原样跳过） */
+export declare function defaultSecretScanner(): SecretScanner;
+export declare class Exporter {
+    private readonly ctx;
+    private readonly adapters;
+    private readonly scanner;
+    private readonly encryption;
+    private readonly exporterVersion;
+    private readonly now;
+    constructor(opts: ExporterOptions);
+    /**
+     * 导出：收集 → 过滤 → checksum → manifest → ZIP。
+     * 返回 zipPath（含文件名）、manifest、报告。
+     */
+    export(options: ExportOptions): Promise<{
+        zipPath: string;
+        manifest: Manifest;
+        report: ExportReport;
+    }>;
+}
+/** 供报告使用：导出器身份（避免与 manifest 常量重复维护） */
+export declare const EXPORTER_INFO: {
+    name: string;
+};

package/lib/core/exporter.js

@@ -0,0 +1,222 @@
+/**
+ * Export 编排（规范 §1/§18/§21，设计 §4.4）：
+ *   adapter 收集各分区 → Secret 过滤 → manifest → checksum → ZIP。
+ *
+ * 安全不变量：
+ *  - Secret 值默认永不进入导出数据（结构化分区逐一过 SecretScanner）；
+ *  - includeSecrets=true 必须注入 EncryptionProvider（m4 实现），否则拒绝导出；
+ *  - 加密密码/秘密值绝不写入 manifest 与日志。
+ */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { buildChecksums } from "../utils/hashing.js";
+import { stringifyJsonSafe } from "../utils/json.js";
+import { buildManifest, CHECKSUMS_FILE, MANIFEST_FILE, EXPORTER_NAME } from "../schema/manifest.js";
+import { SECTION_JSON_PATHS, SECTION_FILE_PREFIXES, isFileSection } from "../schema/config.js";
+import { writeZip } from "../utils/zip.js";
+/** 缺省 SecretScanner：递归黑名单字段剥离（字段名大小写不敏感；二进制/Uint8Array 原样跳过） */
+export function defaultSecretScanner() {
+    const SENSITIVE_FIELDS = [
+        'password', 'passwd', 'token', 'accesstoken', 'refreshtoken', 'apikey',
+        'secret', 'credential', 'authorization', 'cookie', 'privatekey', 'clientsecret',
+    ];
+    /** 仅存「引用名」而非值的字段（如 apiKeyEnv=DEEPSEEK_API_KEY 是环境变量名，不是秘密） */
+    const REFERENCE_FIELDS = new Set([
+        'apikeyenv', 'api_key_env', 'apikeyname', 'tokenenv', 'accesstokenenv',
+        'refreshtokenenv', 'clientsecretenv', 'passwordenv',
+    ]);
+    return {
+        scanAndRedact(data) {
+            const hits = [];
+            const walk = (v, p) => {
+                if (v === null || typeof v !== 'object')
+                    return v;
+                if (v instanceof Uint8Array)
+                    return v; // 二进制内容不按字段展开
+                if (Array.isArray(v))
+                    return v.map((item, i) => walk(item, `${p}[${i}]`));
+                const out = {};
+                for (const [k, val] of Object.entries(v)) {
+                    const lower = k.toLowerCase().replace(/[^a-z0-9]/g, '');
+                    const isRefName = REFERENCE_FIELDS.has(lower);
+                    const sensitive = !isRefName && SENSITIVE_FIELDS.some((f) => lower.includes(f));
+                    if (sensitive && typeof val === 'string' && val !== '') {
+                        hits.push({ path: p === '' ? k : `${p}.${k}`, field: k });
+                        out[k] = ''; // 值剥离为空串（保留字段名与位置，供「需补录」提示）
+                        continue;
+                    }
+                    out[k] = walk(val, p === '' ? k : `${p}.${k}`);
+                }
+                return out;
+            };
+            return { sanitized: walk(data, ''), hits };
+        },
+    };
+}
+export class Exporter {
+    ctx;
+    adapters;
+    scanner;
+    encryption;
+    exporterVersion;
+    now;
+    constructor(opts) {
+        this.ctx = opts.ctx;
+        this.adapters = opts.adapters;
+        this.scanner = opts.scanner ?? defaultSecretScanner();
+        this.encryption = opts.encryption ?? null;
+        this.exporterVersion = opts.exporterVersion ?? '0.1.0';
+        this.now = opts.now ?? (() => new Date());
+    }
+    /**
+     * 导出：收集 → 过滤 → checksum → manifest → ZIP。
+     * 返回 zipPath（含文件名）、manifest、报告。
+     */
+    async export(options) {
+        const { includeSecrets, only } = options;
+        if (includeSecrets && !this.encryption) {
+            throw new Error('导出包含秘密需要注入 EncryptionProvider（m4 实现），拒绝明文导出秘密');
+        }
+        // 1. 选定分区（only 过滤 + 默认包含）
+        const selected = this.adapters
+            .filter((a) => (only === undefined ? a.defaultIncluded : only.includes(a.id)))
+            .map((a) => a.id);
+        // 2. 逐 adapter 收集（导出数据）
+        const sections = [];
+        const warnings = [];
+        const redactedHits = [];
+        const included = [];
+        const excluded = this.adapters.filter((a) => !selected.includes(a.id)).map((a) => a.id);
+        for (const adapter of this.adapters) {
+            if (!selected.includes(adapter.id))
+                continue;
+            let section;
+            try {
+                section = await adapter.export(this.ctx, options);
+            }
+            catch (err) {
+                // 单个分区失败不拖垮整体（§34.17）；如实告警并跳过
+                warnings.push(`分区 ${adapter.id} 导出失败: ${err instanceof Error ? err.message : String(err)}`);
+                excluded.push(adapter.id);
+                continue;
+            }
+            // 3. Secret 过滤：结构化数据逐一过 scanner；
+            //    文件类分区（skills 等）内容为自由文本，扫描语义由 m4 强化，此处不动
+            let sanitized = section.data;
+            if (!isFileSection(adapter.id)) {
+                const scanned = this.scanner.scanAndRedact(section.data);
+                redactedHits.push(...scanned.hits);
+                sanitized = scanned.sanitized;
+            }
+            sections.push({ ...section, data: sanitized });
+            included.push({ section: adapter.id, counts: section.counts });
+            warnings.push(...section.warnings);
+        }
+        // 4. 组装 ZIP 条目（JSON 分区 + 文件类分区 + secrets.enc + checksums + manifest）
+        const entries = [];
+        const sectionFlags = buildSectionFlags(sections);
+        let containsSecrets = false;
+        let encrypted = false;
+        let encryption = null;
+        for (const section of sections) {
+            if (isFileSection(section.sectionId)) {
+                const prefix = SECTION_FILE_PREFIXES[section.sectionId];
+                const files = section.data.files ?? [];
+                for (const file of files) {
+                    entries.push({ name: `${prefix}${file.relativePath}`, data: file.data });
+                }
+                continue;
+            }
+            const jsonPath = SECTION_JSON_PATHS[section.sectionId];
+            if (jsonPath === undefined)
+                continue;
+            entries.push({
+                name: jsonPath,
+                data: Buffer.from(stringifyJsonSafe(section.data, { space: 2 }), 'utf8'),
+            });
+        }
+        // secrets.enc：仅加密备份
+        if (includeSecrets && this.encryption) {
+            const credentialsFile = path.join(this.ctx.homeDir, '.credentials.yaml');
+            let plaintext;
+            try {
+                const raw = await this.ctx.fs.readFile(credentialsFile);
+                plaintext = Buffer.from(raw).toString('utf8');
+            }
+            catch (err) {
+                warnings.push(`读取凭据文件失败，跳过秘密导出: ${err instanceof Error ? err.message : String(err)}`);
+                plaintext = '';
+            }
+            if (plaintext !== '') {
+                const result = await this.encryption.encrypt(plaintext);
+                entries.push({ name: 'security/secrets.enc', data: result.blob });
+                encryption = result.info;
+                containsSecrets = true;
+                encrypted = true;
+            }
+        }
+        // 5. checksums（覆盖除 manifest/checksums 外的全部条目）
+        const checksums = buildChecksums(entries);
+        entries.push({ name: CHECKSUMS_FILE, data: Buffer.from(stringifyJsonSafe(checksums, { space: 2 }), 'utf8') });
+        // 6. manifest（最后写：需要完整分区与安全信息）
+        const manifest = buildManifest({
+            exporterVersion: this.exporterVersion,
+            dshVersion: this.ctx.dshVersion,
+            platform: this.ctx.platform,
+            arch: this.ctx.arch,
+            sections: sectionFlags,
+            containsSecrets,
+            encrypted,
+            encryption,
+            exportedAt: this.now().toISOString(),
+        });
+        entries.push({ name: MANIFEST_FILE, data: Buffer.from(stringifyJsonSafe(manifest, { space: 2 }), 'utf8') });
+        // 7. 落盘
+        const outPath = options.outPath ?? defaultOutPath(this.now());
+        await writeZip(outPath, entries);
+        const stat = await fs.stat(outPath);
+        // 日志不泄值：只记分区与命中数量
+        this.ctx.log.info('导出完成', {
+            file: path.basename(outPath),
+            sizeBytes: stat.size,
+            sections: Object.keys(sectionFlags).filter((k) => sectionFlags[k]),
+            redactedFields: redactedHits.length,
+            containsSecrets,
+            encrypted,
+        });
+        const report = {
+            included,
+            excluded,
+            security: {
+                secretsExcluded: !includeSecrets,
+                containsSecrets,
+                encrypted,
+                redactedHits: redactedHits.length,
+            },
+            file: { name: path.basename(outPath), sizeBytes: stat.size },
+            warnings,
+        };
+        return { zipPath: outPath, manifest, report };
+    }
+}
+/** 构建 manifest.sections 布尔表（只含实际导出分区） */
+function buildSectionFlags(sections) {
+    const flags = {};
+    for (const id of Object.keys(SECTION_JSON_PATHS))
+        flags[id] = false;
+    for (const id of Object.keys(SECTION_FILE_PREFIXES))
+        flags[id] = false;
+    flags['secrets'] = false;
+    for (const section of sections)
+        flags[section.sectionId] = true;
+    return flags;
+}
+function defaultOutPath(now) {
+    const y = now.getFullYear();
+    const m = String(now.getMonth() + 1).padStart(2, '0');
+    const d = String(now.getDate()).padStart(2, '0');
+    return `dsh-config-${y}-${m}-${d}.zip`;
+}
+/** 供报告使用：导出器身份（避免与 manifest 常量重复维护） */
+export const EXPORTER_INFO = { name: EXPORTER_NAME };
+//# sourceMappingURL=exporter.js.map

package/lib/core/exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exporter.js","sourceRoot":"","sources":["../../src/core/exporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAmB3C,gEAAgE;AAChE,MAAM,UAAU,oBAAoB;IAClC,MAAM,gBAAgB,GAAG;QACvB,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ;QACtE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc;KAChF,CAAC;IACF,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB;QACtE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa;KACpD,CAAC,CAAC;IACH,OAAO;QACL,aAAa,CAAC,IAAa;YACzB,MAAM,IAAI,GAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAS,EAAW,EAAE;gBAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,CAAC,CAAC;gBAClD,IAAI,CAAC,YAAY,UAAU;oBAAE,OAAO,CAAC,CAAC,CAAC,cAAc;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAA4B,EAAE,CAAC;gBACxC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;oBACpE,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;oBACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC9C,MAAM,SAAS,GAAG,CAAC,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChF,IAAI,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;wBACvD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;wBAC1D,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,4BAA4B;wBACzC,SAAS;oBACX,CAAC;oBACD,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,QAAQ;IACF,GAAG,CAAc;IACjB,QAAQ,CAAkB;IAC1B,OAAO,CAAgB;IACvB,UAAU,CAA4B;IACtC,eAAe,CAAS;IACxB,GAAG,CAAa;IAEjC,YAAY,IAAqB;QAC/B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,oBAAoB,EAAE,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC;QACvD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAsB;QACjC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACzC,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC7E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpB,wBAAwB;QACxB,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAmB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAgB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAErG,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC7C,IAAI,OAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8BAA8B;gBAC9B,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5F,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,iCAAiC;YACjC,6CAA6C;YAC7C,IAAI,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;YAC7B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzD,YAAY,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAChC,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAED,qEAAqE;QACrE,MAAM,OAAO,GAAyC,EAAE,CAAC;QACzD,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,UAAU,GAAuC,IAAI,CAAC;QAE1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAE,CAAC;gBACzD,MAAM,KAAK,GAAI,OAAO,CAAC,IAAiE,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;aACzE,CAAC,CAAC;QACL,CAAC;QAED,oBAAoB;QACpB,IAAI,cAAc,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YACzE,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBACxD,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtF,SAAS,GAAG,EAAE,CAAC;YACjB,CAAC;YACD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzB,eAAe,GAAG,IAAI,CAAC;gBACvB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAE9G,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU;YAC/B,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAA0C;YAC7D,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,QAAQ,EAAE,YAAY;YACtB,eAAe;YACf,SAAS;YACT,UAAU;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAE5G,QAAQ;QACR,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpC,kBAAkB;QAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;YACxB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAc,CAAC,CAAC;YAC/E,cAAc,EAAE,YAAY,CAAC,MAAM;YACnC,eAAe;YACf,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,MAAM,GAAiB;YAC3B,QAAQ;YACR,QAAQ;YACR,QAAQ,EAAE;gBACR,eAAe,EAAE,CAAC,cAAc;gBAChC,eAAe;gBACf,SAAS;gBACT,YAAY,EAAE,YAAY,CAAC,MAAM;aAClC;YACD,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;YAC5D,QAAQ;SACT,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;CACF;AAED,yCAAyC;AACzC,SAAS,iBAAiB,CAAC,QAAyB;IAClD,MAAM,KAAK,GAAG,EAA0B,CAAC;IACzC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAgB;QAAE,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACnF,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAgB;QAAE,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACtF,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,GAAS;IAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;AACzC,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC"}

package/lib/core/importer.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Importer 门面：封装导入 14 步流程（规范 §9），委托 Analyzer 三段式。
+ *
+ *  1 选 ZIP → 2 校验 ZIP → 3 读 manifest → 4 完整性 → 5 schema → 6 兼容
+ *  → 7 扫描 → 8 ImportPlan → 9 Preview(Dry Run) → 10 用户确认
+ *  → 11 快照 → 12 执行 → 13 校验 → 14 结果（失败则回滚）
+ *
+ * 安全阀：executeImportPlan 必须显式 confirm，否则拒绝（ImportNotConfirmedError）。
+ * Dry Run：analyzeImport / createImportPlan 零写入（ZIP 全程内存解析，不进磁盘）。
+ */
+import type { ZipArchive, ZipSafetyLimits } from '../utils/zip.ts';
+import type { ConfigAdapter, HostContext, ImportAnalysis, ImportDecisions, ImportPlan, ImportResult, SnapshotStore } from './types.ts';
+export interface ImporterOptions {
+    ctx: HostContext;
+    adapters: ConfigAdapter[];
+    snapshotStore: SnapshotStore;
+    limits?: ZipSafetyLimits;
+    /** 依赖存在性检查器（缺省不检查） */
+    dependencyChecker?: (command: string) => Promise<boolean>;
+    /** m4 可注入强化版 ZIP 安全解析 */
+    parseZipOverride?: (buf: Uint8Array, limits?: ZipSafetyLimits) => ZipArchive;
+}
+export interface ExecuteOptions {
+    /** 用户确认（UI 收集）；非 true 一律拒绝执行 */
+    confirm: boolean;
+    /** 用户补录的秘密值（仅内存） */
+    secretInputs?: Record<string, string>;
+    /** 加密备份解密结果（仅内存；解密必须经 m4 encryption provider） */
+    decryptedCredentials?: Map<string, string>;
+    /** 任一项失败立即整体回滚（默认 false：单项失败如实记录并继续其余项） */
+    rollbackOnError?: boolean;
+}
+export declare class Importer {
+    private readonly analyzer;
+    constructor(opts: ImporterOptions);
+    /** 步骤 1-8 + 分析：只读，返回 ImportAnalysis（含兼容性/路径/依赖/秘密摘要） */
+    analyzeImport(zipPath: string): Promise<ImportAnalysis>;
+    /** 步骤 9：Dry Run / Preview —— 合并用户冲突决策与路径映射，输出最终可执行计划（零写入） */
+    createImportPlan(zipPath: string, decisions: ImportDecisions): Promise<ImportPlan>;
+    /** 步骤 10-14：确认 → 快照 → 执行 → 校验 → 结果；失败可整体回滚并如实报告 */
+    executeImportPlan(zipPath: string, plan: ImportPlan, opts: ExecuteOptions): Promise<ImportResult>;
+}

package/lib/core/importer.js

@@ -0,0 +1,25 @@
+import { Analyzer } from "./analyzer.js";
+export class Importer {
+    analyzer;
+    constructor(opts) {
+        this.analyzer = new Analyzer(opts);
+    }
+    /** 步骤 1-8 + 分析：只读，返回 ImportAnalysis（含兼容性/路径/依赖/秘密摘要） */
+    analyzeImport(zipPath) {
+        return this.analyzer.analyzeImport(zipPath);
+    }
+    /** 步骤 9：Dry Run / Preview —— 合并用户冲突决策与路径映射，输出最终可执行计划（零写入） */
+    createImportPlan(zipPath, decisions) {
+        return this.analyzer.createImportPlan(zipPath, decisions);
+    }
+    /** 步骤 10-14：确认 → 快照 → 执行 → 校验 → 结果；失败可整体回滚并如实报告 */
+    executeImportPlan(zipPath, plan, opts) {
+        return this.analyzer.executeImportPlan(zipPath, plan, {
+            confirm: opts.confirm,
+            secretInputs: opts.secretInputs,
+            decryptedCredentials: opts.decryptedCredentials,
+            rollbackOnError: opts.rollbackOnError,
+        });
+    }
+}
+//# sourceMappingURL=importer.js.map

package/lib/core/importer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"importer.js","sourceRoot":"","sources":["../../src/core/importer.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA4BzC,MAAM,OAAO,QAAQ;IACF,QAAQ,CAAW;IAEpC,YAAY,IAAqB;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,wDAAwD;IACxD,aAAa,CAAC,OAAe;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,6DAA6D;IAC7D,gBAAgB,CAAC,OAAe,EAAE,SAA0B;QAC1D,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,mDAAmD;IACnD,iBAAiB,CAAC,OAAe,EAAE,IAAgB,EAAE,IAAoB;QACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE;YACpD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;IACL,CAAC;CACF"}

package/lib/core/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * 核心引擎公共出口：m5（适配器）、m6（UI）、m7（测试）与宿主插件统一从这里引用。
+ */
+export { Exporter, defaultSecretScanner, EXPORTER_INFO, type ExporterOptions, } from './exporter.ts';
+export { Importer, type ImporterOptions, type ExecuteOptions, } from './importer.ts';
+export { Analyzer, type AnalyzerOptions, } from './analyzer.ts';
+export { createSnapshot, FileSnapshotStore, resolveFileTarget, type CreateSnapshotOptions, type FileSnapshotStoreOptions, } from './backup.ts';
+export { rollback, type RollbackOptions } from './rollback.ts';
+export { computeCompatibility, describeCompatibility, describeSchemaStatus, validateSections, } from './validator.ts';
+export { ImportNotConfirmedError, ImportFailedError, } from './types.ts';
+export type * from './types.ts';
+export type { ExportOptions, ExportSection, ValidationResult, HostContext, SettingsFacade, CredentialsFacade, PluginsFacade, WorkspaceFacade, PatchFileFacade, FileSystemFacade, NamespaceInfo, PluginInfo, ConfigAdapter, Portability, SecretScanner, SensitiveHit, EncryptionProvider, PlanItem, PlanItemKind, ItemResolution, GlobalConflictStrategy, ImportAnalysis, ImportDecisions, ImportPlan, ImportResult, ExecutedItem, ImportContext, SnapshotTarget, SnapshotEntry, Snapshot, SnapshotStore, RollbackReport, PathMapping, PathIssue, CompatibilityInput, CompatibilityScore, ExportReport, ApplyResult, ConflictDecision, } from './types.ts';

package/lib/core/index.js

@@ -0,0 +1,11 @@
+/**
+ * 核心引擎公共出口：m5（适配器）、m6（UI）、m7（测试）与宿主插件统一从这里引用。
+ */
+export { Exporter, defaultSecretScanner, EXPORTER_INFO, } from "./exporter.js";
+export { Importer, } from "./importer.js";
+export { Analyzer, } from "./analyzer.js";
+export { createSnapshot, FileSnapshotStore, resolveFileTarget, } from "./backup.js";
+export { rollback } from "./rollback.js";
+export { computeCompatibility, describeCompatibility, describeSchemaStatus, validateSections, } from "./validator.js";
+export { ImportNotConfirmedError, ImportFailedError, } from "./types.js";
+//# sourceMappingURL=index.js.map

package/lib/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,QAAQ,EAAE,oBAAoB,EAAE,aAAa,GAE9C,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,GAErD,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,QAAQ,EAAwB,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EACjE,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EAAE,iBAAiB,GAC3C,MAAM,YAAY,CAAC"}

package/lib/core/rollback.d.ts

@@ -0,0 +1,9 @@
+import type { ConfigAdapter, HostContext, RollbackReport, Snapshot, SnapshotStore } from './types.ts';
+export interface RollbackOptions {
+    ctx: HostContext;
+    snapshot: Snapshot;
+    store?: SnapshotStore;
+    adapters?: ConfigAdapter[];
+}
+/** 回滚：逆序补偿全部条目；返回诚实报告（full / partial） */
+export declare function rollback(opts: RollbackOptions): Promise<RollbackReport>;