dsh-config-manager 0.1.0

package/lib/ui/report.d.ts

@@ -0,0 +1,21 @@
+/**
+ * 报告渲染（规范 §21 导出报告 / §22 导入报告 / §17 回滚报告，m6-ui）。
+ *
+ * 纯文本渲染：输出用户可读的多行文本（未来 React 客户端可直接替换为组件渲染）。
+ * 导入报告按分区统计：从 ExecutedItem.itemId 前缀推断所属分区（与 adapters 的 id 规则一致）。
+ */
+import type { SectionId } from '../schema/types.ts';
+import type { ExecutedItem, ExportReport, ImportResult, RollbackReport } from '../core/types.ts';
+import type { ImportResultAction, ImportSectionStat } from './types.ts';
+export declare function renderExportReport(report: ExportReport): string;
+/** 从 itemId 前缀推断所属分区（与 adapters id 规则对齐；未知归 'other'） */
+export declare function sectionFromItemId(itemId: string): SectionId | 'other';
+/** 按分区聚合执行结果（统计 + 明细） */
+export declare function importSectionStats(executed: readonly ExecutedItem[]): ImportSectionStat[];
+/** 导入报告渲染（含回滚状态；§22 动作按钮由 suggestedActions 给出） */
+export declare function renderImportReport(result: ImportResult): string;
+/** 结果页动作按钮（§22：Fix Issues / View Details / Done） */
+export declare function suggestedActions(result: ImportResult): ImportResultAction[];
+/** 回滚报告渲染（full / partial + 人工恢复清单） */
+export declare function renderRollbackReport(rr: RollbackReport): string;
+export declare function formatBytes(n: number): string;

package/lib/ui/report.js

@@ -0,0 +1,146 @@
+/* ---------------- §21 导出报告 ---------------- */
+export function renderExportReport(report) {
+    const lines = ['Backup Created', ''];
+    lines.push('Included:');
+    for (const { section, counts } of report.included) {
+        const detail = Object.entries(counts)
+            .map(([k, v]) => `${v} ${k}`)
+            .join(', ');
+        lines.push(`  ✓ ${section}${detail !== '' ? ` (${detail})` : ''}`);
+    }
+    lines.push('');
+    if (report.excluded.length > 0) {
+        lines.push('Excluded:');
+        for (const s of report.excluded)
+            lines.push(`  ○ ${s}`);
+        lines.push('');
+    }
+    lines.push('Security:');
+    lines.push(`  ✓ API Keys excluded: ${report.security.secretsExcluded ? 'yes' : 'no'}`);
+    lines.push(`  ✓ Contains secrets: ${report.security.containsSecrets ? 'yes (encrypted)' : 'no'}`);
+    lines.push(`  ✓ Encrypted: ${report.security.encrypted ? 'yes' : 'no'}`);
+    if (report.security.redactedHits > 0)
+        lines.push(`  ⚠ ${report.security.redactedHits} sensitive field(s) redacted`);
+    lines.push('');
+    lines.push(`File: ${report.file.name} (${formatBytes(report.file.sizeBytes)})`);
+    for (const w of report.warnings)
+        lines.push(`  ⚠ ${w}`);
+    return lines.join('\n');
+}
+/* ---------------- §22 导入报告 ---------------- */
+/** 从 itemId 前缀推断所属分区（与 adapters id 规则对齐；未知归 'other'） */
+export function sectionFromItemId(itemId) {
+    if (itemId.startsWith('settings:'))
+        return 'settings';
+    if (itemId.startsWith('ui:'))
+        return 'ui';
+    if (itemId.startsWith('provider:'))
+        return 'providers';
+    if (itemId.startsWith('plugin:') || itemId.startsWith('patch:'))
+        return 'plugins';
+    if (itemId.startsWith('mcp:'))
+        return 'mcp';
+    if (itemId.startsWith('prompt:'))
+        return 'prompts';
+    if (itemId.startsWith('workspace:'))
+        return 'workspaces';
+    if (itemId.startsWith('secret:'))
+        return 'credentialsStatus';
+    if (itemId.startsWith('skills:'))
+        return 'skills';
+    if (itemId.startsWith('agentPresets:'))
+        return 'agentPresets';
+    if (itemId.startsWith('pluginFiles:'))
+        return 'pluginFiles';
+    if (itemId.startsWith('sessions:'))
+        return 'sessions';
+    return 'other';
+}
+/** 按分区聚合执行结果（统计 + 明细） */
+export function importSectionStats(executed) {
+    const bySection = new Map();
+    for (const e of executed) {
+        const section = sectionFromItemId(e.itemId);
+        let stat = bySection.get(section);
+        if (!stat) {
+            stat = { section: section, ok: 0, skipped: 0, failed: 0, items: [] };
+            bySection.set(section, stat);
+        }
+        if (e.status === 'ok')
+            stat.ok += 1;
+        else if (e.status === 'skipped')
+            stat.skipped += 1;
+        else
+            stat.failed += 1;
+        stat.items.push(e);
+    }
+    return [...bySection.values()];
+}
+/** 导入报告渲染（含回滚状态；§22 动作按钮由 suggestedActions 给出） */
+export function renderImportReport(result) {
+    const lines = [result.ok ? 'Import Complete' : 'Import Failed', ''];
+    const stats = importSectionStats(result.executed);
+    for (const s of stats) {
+        const parts = [];
+        if (s.ok > 0)
+            parts.push(`✓ ${s.ok} imported/restored`);
+        if (s.skipped > 0)
+            parts.push(`- ${s.skipped} skipped`);
+        if (s.failed > 0)
+            parts.push(`✗ ${s.failed} failed`);
+        lines.push(`${s.section}: ${parts.join(' ') || 'no changes'}`);
+        // 失败项给出可操作原因（§23）
+        for (const it of s.items) {
+            if (it.status === 'failed') {
+                lines.push(`  Reason: ${it.message ?? '未知原因'}`);
+            }
+        }
+    }
+    if (result.missingSecrets.length > 0) {
+        lines.push(`Secrets: ⚠ ${result.missingSecrets.length} credentials need to be entered`);
+    }
+    if (result.needsRestart) {
+        lines.push('Restart required: 插件/MCP 变更将在重启 DSH 后生效');
+    }
+    for (const w of result.warnings)
+        lines.push(`⚠ ${w}`);
+    if (result.rollback) {
+        lines.push('');
+        lines.push(renderRollbackReport(result.rollback));
+    }
+    return lines.join('\n');
+}
+/** 结果页动作按钮（§22：Fix Issues / View Details / Done） */
+export function suggestedActions(result) {
+    const actions = [];
+    if (result.executed.some((e) => e.status === 'failed'))
+        actions.push('fixIssues');
+    if (result.executed.length > 0 || result.warnings.length > 0)
+        actions.push('viewDetails');
+    actions.push('done');
+    return actions;
+}
+/* ---------------- §17 回滚报告 ---------------- */
+/** 回滚报告渲染（full / partial + 人工恢复清单） */
+export function renderRollbackReport(rr) {
+    if (rr.full) {
+        return 'Rollback: 已完整恢复导入前的配置。';
+    }
+    const lines = ['Rollback partially completed.'];
+    lines.push('These items may require manual recovery:');
+    for (const f of rr.failed) {
+        lines.push(`  - ${f.item}: ${f.reason}${f.manualHint ? ` (${f.manualHint})` : ''}`);
+    }
+    if (rr.restored.length > 0)
+        lines.push(`Restored: ${rr.restored.length} item(s)`);
+    return lines.join('\n');
+}
+/* ---------------- 工具 ---------------- */
+export function formatBytes(n) {
+    if (n < 1024)
+        return `${n} B`;
+    if (n < 1024 * 1024)
+        return `${(n / 1024).toFixed(1)} KB`;
+    return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+}
+//# sourceMappingURL=report.js.map

package/lib/ui/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/ui/report.ts"],"names":[],"mappings":"AAYA,gDAAgD;AAEhD,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,KAAK,GAAa,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClG,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,YAAY,8BAA8B,CAAC,CAAC;IACpH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,gDAAgD;AAEhD,wDAAwD;AACxD,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAC7D,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,cAAc,CAAC;IAC9D,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,aAAa,CAAC;IAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC;IACtD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,kBAAkB,CAAC,QAAiC;IAClE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,EAAE,OAAO,EAAE,OAAoB,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAClF,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;aAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;QAC/D,kBAAkB;QAClB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,cAAc,CAAC,MAAM,iCAAiC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1F,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gDAAgD;AAEhD,sCAAsC;AACtC,MAAM,UAAU,oBAAoB,CAAC,EAAkB;IACrD,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,MAAM,UAAU,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,0CAA0C;AAE1C,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC"}

package/lib/ui/test-helpers.d.ts

@@ -0,0 +1,62 @@
+/**
+ * UI 层测试辅助（m6-ui）：mock core 调用与样本数据。
+ * 仅供 src/ui/*.test.ts 使用，不参与生产构建语义。
+ */
+import type { Manifest } from '../schema/types.ts';
+import type { ExportReport, ImportAnalysis, ImportDecisions, ImportPlan, ImportResult, PlanItem, RollbackReport } from '../core/types.ts';
+import type { ExportPort } from './export-flow.ts';
+import type { ImportPort } from './types.ts';
+/** 样本 manifest（UI 测试不关心真实字段，仅类型占位） */
+export declare function makeManifest(): Manifest;
+export declare function makeExportReport(overrides?: Partial<ExportReport>): ExportReport;
+/** 内存 ExportPort mock：记录调用参数，返回固定结果 */
+export declare class MockExportPort implements ExportPort {
+    calls: {
+        includeSecrets: boolean;
+        only?: string[];
+    }[];
+    result: {
+        zipPath: string;
+        manifest: Manifest;
+        report: ExportReport;
+    };
+    constructor(report?: ExportReport);
+    export(opts: {
+        includeSecrets: boolean;
+        only?: string[];
+    }): Promise<{
+        zipPath: string;
+        manifest: Manifest;
+        report: ExportReport;
+    }>;
+}
+export declare function makeAnalysis(overrides?: Partial<ImportAnalysis>): ImportAnalysis;
+export declare function makePlanItem(overrides?: Partial<PlanItem>): PlanItem;
+export declare function makePlan(overrides?: Partial<ImportPlan>): ImportPlan;
+export declare function makeRollbackReport(overrides?: Partial<RollbackReport>): RollbackReport;
+export declare function makeImportResult(overrides?: Partial<ImportResult>): ImportResult;
+/** 内存 ImportPort mock：可编排各阶段返回与调用记录 */
+export declare class MockImportPort implements ImportPort {
+    analysis: ImportAnalysis;
+    plan: ImportPlan;
+    result: ImportResult;
+    analyzeCalls: number;
+    planCalls: ImportDecisions[];
+    executeCalls: {
+        confirm: boolean;
+        secretInputs?: Record<string, string>;
+        rollbackOnError: boolean;
+    }[];
+    constructor(opts?: {
+        analysis?: ImportAnalysis;
+        plan?: ImportPlan;
+        result?: ImportResult;
+    });
+    analyzeImport(): Promise<ImportAnalysis>;
+    createImportPlan(_zip: string, decisions: ImportDecisions): Promise<ImportPlan>;
+    executeImportPlan(_zip: string, _plan: ImportPlan, opts: {
+        confirm: boolean;
+        secretInputs?: Record<string, string>;
+        rollbackOnError: boolean;
+    }): Promise<ImportResult>;
+}

package/lib/ui/test-helpers.js

@@ -0,0 +1,147 @@
+/** 样本 manifest（UI 测试不关心真实字段，仅类型占位） */
+export function makeManifest() {
+    return {
+        schemaVersion: 1,
+        exporter: { name: 'dsh-config-manager-test', version: '0.0.0' },
+        source: { dshVersion: '0.1.0-rc.6', platform: 'win32', arch: 'x64' },
+        exportedAt: '2026-08-14T12:00:00.000Z',
+        sections: {
+            settings: true, ui: false, providers: false, plugins: false, mcp: false, prompts: false,
+            skills: false, agentPresets: false, workspaces: false, pluginFiles: false,
+            credentialsStatus: false, secrets: false, sessions: false,
+        },
+        security: { containsSecrets: false, encrypted: false, encryption: null },
+    };
+}
+export function makeExportReport(overrides = {}) {
+    return {
+        included: [
+            { section: 'settings', counts: { namespaces: 3 } },
+            { section: 'plugins', counts: { plugins: 8 } },
+        ],
+        excluded: ['sessions', 'pluginFiles'],
+        security: { secretsExcluded: true, containsSecrets: false, encrypted: false, redactedHits: 2 },
+        file: { name: 'dsh-config-2026-08-14.zip', sizeBytes: 20480 },
+        warnings: [],
+        ...overrides,
+    };
+}
+/** 内存 ExportPort mock：记录调用参数，返回固定结果 */
+export class MockExportPort {
+    calls = [];
+    result;
+    constructor(report = makeExportReport()) {
+        this.result = {
+            zipPath: report.file.name,
+            manifest: makeManifest(),
+            report,
+        };
+    }
+    async export(opts) {
+        this.calls.push({ includeSecrets: opts.includeSecrets, only: opts.only });
+        return this.result;
+    }
+}
+/* ---------------- Import mock ---------------- */
+export function makeAnalysis(overrides = {}) {
+    return {
+        valid: true,
+        errors: [],
+        warnings: [],
+        compatibility: 'good',
+        sectionsInZip: ['settings', 'plugins', 'mcp', 'prompts'],
+        pluginSummary: { installed: 6, toInstall: 2 },
+        pathIssues: [],
+        secretCount: 3,
+        dependencyIssues: [],
+        ...overrides,
+    };
+}
+export function makePlanItem(overrides = {}) {
+    return {
+        id: 'settings:general',
+        kind: 'Create',
+        adapter: 'settings',
+        description: '创建设置 general',
+        severity: 'info',
+        ...overrides,
+    };
+}
+export function makePlan(overrides = {}) {
+    return {
+        items: [
+            makePlanItem({ id: 'settings:a', kind: 'Update', description: '更新设置 a' }),
+            makePlanItem({ id: 'settings:b', kind: 'Create', description: '创建设置 b' }),
+            makePlanItem({ id: 'plugin:x', kind: 'Install', adapter: 'plugins', description: '安装插件 x' }),
+            makePlanItem({ id: 'plugin:y', kind: 'Skip', adapter: 'plugins', description: '插件 y 已一致' }),
+            makePlanItem({ id: 'prompt:p', kind: 'Create', adapter: 'prompts', description: '创建提示 p' }),
+            makePlanItem({ id: 'mcp:m', kind: 'Create', adapter: 'mcp', description: '创建 MCP m' }),
+            makePlanItem({ id: 'secret:K1', kind: 'MissingSecret', adapter: 'credentialsStatus', description: '凭据 K1 需要补录' }),
+        ],
+        globalStrategy: 'merge',
+        pathMappings: [],
+        missingSecrets: [{ ref: 'K1', required: true }],
+        needsRestart: true,
+        estimatedActions: {
+            settings: 2, ui: 0, providers: 0, plugins: 1, mcp: 1, prompts: 1,
+            skills: 0, agentPresets: 0, workspaces: 0, pluginFiles: 0,
+            credentialsStatus: 0, secrets: 0, sessions: 0,
+        },
+        ...overrides,
+    };
+}
+export function makeRollbackReport(overrides = {}) {
+    return {
+        full: false,
+        restored: ['settings:a'],
+        failed: [{ item: 'plugin:x', reason: '安装失败', manualHint: '请手动安装' }],
+        ...overrides,
+    };
+}
+export function makeImportResult(overrides = {}) {
+    return {
+        ok: true,
+        executed: [
+            { itemId: 'settings:a', status: 'ok' },
+            { itemId: 'settings:b', status: 'ok' },
+            { itemId: 'plugin:x', status: 'ok', message: '需要重启生效' },
+            { itemId: 'plugin:y', status: 'skipped' },
+            { itemId: 'prompt:p', status: 'ok' },
+            { itemId: 'mcp:m', status: 'ok' },
+            { itemId: 'secret:K1', status: 'skipped', message: '凭据未提供' },
+        ],
+        needsRestart: true,
+        missingSecrets: ['K1'],
+        warnings: [],
+        rollback: null,
+        snapshotId: 'snap-1',
+        ...overrides,
+    };
+}
+/** 内存 ImportPort mock：可编排各阶段返回与调用记录 */
+export class MockImportPort {
+    analysis;
+    plan;
+    result;
+    analyzeCalls = 0;
+    planCalls = [];
+    executeCalls = [];
+    constructor(opts = {}) {
+        this.analysis = opts.analysis ?? makeAnalysis();
+        this.plan = opts.plan ?? makePlan();
+        this.result = opts.result ?? makeImportResult();
+    }
+    async analyzeImport() {
+        this.analyzeCalls += 1;
+        return this.analysis;
+    }
+    async createImportPlan(_zip, decisions) {
+        this.planCalls.push(decisions);
+        return this.plan;
+    }
+    async executeImportPlan(_zip, _plan, opts) {
+        this.executeCalls.push(opts);
+        return this.result;
+    }
+}
+//# sourceMappingURL=test-helpers.js.map

package/lib/ui/test-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../../src/ui/test-helpers.ts"],"names":[],"mappings":"AAYA,sCAAsC;AACtC,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE;QAC/D,MAAM,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;QACpE,UAAU,EAAE,0BAA0B;QACtC,QAAQ,EAAE;YACR,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;YACvF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;YACzE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK;SAC1D;QACD,QAAQ,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAmC,EAAE;IACpE,OAAO;QACL,QAAQ,EAAE;YACR,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE;YAClD,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;SAC/C;QACD,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;QACrC,QAAQ,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE;QAC9F,IAAI,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7D,QAAQ,EAAE,EAAE;QACZ,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,MAAM,OAAO,cAAc;IACzB,KAAK,GAAmD,EAAE,CAAC;IAC3D,MAAM,CAAgE;IACtE,YAAY,SAAuB,gBAAgB,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACzB,QAAQ,EAAE,YAAY,EAAE;YACxB,MAAM;SACP,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAkD;QAC7D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,UAAU,YAAY,CAAC,YAAqC,EAAE;IAClE,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,aAAa,EAAE,MAAM;QACrB,aAAa,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC;QACxD,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,EAAE;QACpB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAA+B,EAAE;IAC5D,OAAO;QACL,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,cAAc;QAC3B,QAAQ,EAAE,MAAM;QAChB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,YAAiC,EAAE;IAC1D,OAAO;QACL,KAAK,EAAE;YACL,YAAY,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YACzE,YAAY,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YACzE,YAAY,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC5F,YAAY,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;YAC3F,YAAY,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3F,YAAY,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;YACtF,YAAY,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;SAClH;QACD,cAAc,EAAE,OAAO;QACvB,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/C,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE;YAChB,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;YAChE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;YACzD,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;SAC9C;QACD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAAqC,EAAE;IACxE,OAAO;QACL,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACnE,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAmC,EAAE;IACpE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE;YACtC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE;YACtC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;YACvD,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;YACzC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE;YACpC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;YACjC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;SAC7D;QACD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,QAAQ;QACpB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,MAAM,OAAO,cAAc;IACzB,QAAQ,CAAiB;IACzB,IAAI,CAAa;IACjB,MAAM,CAAe;IACrB,YAAY,GAAG,CAAC,CAAC;IACjB,SAAS,GAAsB,EAAE,CAAC;IAClC,YAAY,GAA4F,EAAE,CAAC;IAE3G,YAAY,OAIR,EAAE;QACJ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,SAA0B;QAC7D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,iBAAiB,CACrB,IAAY,EACZ,KAAiB,EACjB,IAA2F;QAE3F,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/lib/ui/types.d.ts

@@ -0,0 +1,129 @@
+/**
+ * UI 层共享类型（m6-ui，框架无关）。
+ *
+ * 设计原则（对齐 Docs/design/architecture.md §12.2 与规范 §28/§29）：
+ *  - 本模块为纯 TypeScript 逻辑层，不引入 React / 打包器 / 任何运行时依赖；
+ *  - 未来 React 客户端（src/client/）直接消费本层的控制器输出（渲染文本 / 状态快照）；
+ *  - UI 层不直接 import core 的类实现，只依赖 core/types.ts 的纯类型 + 注入的「端口」
+ *    （ExportPort / ImportPort，宿主在 settings.section 挂载时把真实 Exporter/Importer 接入）。
+ */
+import type { SectionId } from '../schema/types.ts';
+import type { CompatibilityScore, ImportAnalysis, ImportDecisions, ImportPlan, ImportResult, ItemResolution, PathIssue, PlanItem, Portability, RollbackReport } from '../core/types.ts';
+export type ExportMode = 'quick' | 'custom';
+/** Custom Export 分组（规范 §1 分类；automation 组在 DSH 中无对应分区，UI 标注说明） */
+export type ExportGroup = 'general' | 'ai' | 'extensions' | 'mcp' | 'customization' | 'automation' | 'workspace' | 'ui' | 'optional';
+/** 分类树节点（与 adapters 的 displayName/defaultIncluded/portability 对齐；宿主可注入覆盖） */
+export interface ExportCategory {
+    id: SectionId;
+    label: string;
+    description: string;
+    defaultIncluded: boolean;
+    portability: Portability;
+    group: ExportGroup;
+    /** 涉及秘密状态（如 credentialsStatus）：UI 需展示安全提示但绝不显示值 */
+    sensitive?: boolean;
+}
+export interface ExportGroupDef {
+    id: ExportGroup;
+    label: string;
+    /** automation 组在 DSH 无对应配置时的说明 */
+    note?: string;
+}
+/** Custom Export 分组目录（规范 §1；automation 组 DSH 无对应分区，仅说明） */
+export declare const EXPORT_GROUPS: readonly ExportGroupDef[];
+/** Quick Export 推荐项 = defaultIncluded 且非 deviceSpecific（设计 §11.1） */
+export declare function isQuickRecommended(c: ExportCategory): boolean;
+export interface ProgressEvent {
+    /** 阶段 id（见 progress.ts 的 STAGE_TEXTS） */
+    stage: string;
+    detail?: string;
+    /** 阶段序号（从 1 起，供 UI 显示 n/m） */
+    step?: number;
+    /** 阶段总数 */
+    total?: number;
+}
+export type ProgressListener = (event: ProgressEvent) => void;
+export type ImportStep = 'select' | 'analyzing' | 'compatibility' | 'preview' | 'conflicts' | 'path-mapping' | 'secrets' | 'importing' | 'result';
+/** Preview 摘要（规范 §10 示例的数值化版本） */
+export interface ImportPreviewSummary {
+    /** 将更新的配置项数（Create+Update+Install 合计） */
+    willChange: number;
+    /** 已存在且一致的项（Skip） */
+    unchanged: number;
+    settingsUpdates: number;
+    pluginsInstalled: number;
+    pluginsToInstall: number;
+    mcpAdds: number;
+    prompts: number;
+    pathMappingsNeeded: number;
+    secretsNeeded: number;
+    conflicts: number;
+    needsRestart: boolean;
+}
+/** 向导状态快照（React 客户端可直接绑定渲染） */
+export interface WizardSnapshot {
+    step: ImportStep;
+    zipPath: string | null;
+    analysis: ImportAnalysis | null;
+    plan: ImportPlan | null;
+    result: ImportResult | null;
+    /** 导入执行的回滚策略（场景 E：默认 true 整体回滚） */
+    rollbackOnError: boolean;
+    errors: string[];
+}
+/** 单个冲突项的视图数据：当前值 vs 导入值摘要 + 用户决策 */
+export interface ConflictViewItem {
+    item: PlanItem;
+    currentSummary?: string;
+    importedSummary?: string;
+    resolution: ItemResolution | null;
+}
+/** 路径映射编辑器的单条记录（旧前缀 → 新前缀；未解析时 newPrefix 为空串） */
+export interface PathMappingDraft {
+    /** 关联的原始路径问题值（一条 issue 一条 draft；批量映射用 oldPrefix 聚合） */
+    oldPrefix: string;
+    newPrefix: string;
+    issue?: PathIssue;
+    /** 应用范围（缺省 [] = 全部相关分区，与 core applyMappingsToSections 语义一致） */
+    appliesTo: PathMappingAppliesTo[];
+}
+/** 与 core PathMapping.appliesTo 对齐的取值（留空数组 = 全应用） */
+export type PathMappingAppliesTo = 'workspaces' | 'mcp' | 'pluginConfig' | 'skills';
+export interface CompatibilityView {
+    score: CompatibilityScore;
+    sourceDsh: string;
+    targetDsh: string;
+    description: string;
+}
+/** 导入结果按分区的统计（report.ts 用） */
+export interface ImportSectionStat {
+    section: SectionId;
+    ok: number;
+    skipped: number;
+    failed: number;
+    items: {
+        itemId: string;
+        status: 'ok' | 'skipped' | 'failed';
+        message?: string;
+    }[];
+}
+export type ImportResultAction = 'fixIssues' | 'viewDetails' | 'done';
+export interface RollbackView {
+    report: RollbackReport | null;
+    /** 是否有可展示的人工恢复清单（partial 回滚时） */
+    hasManualRecovery: boolean;
+}
+/** UI 层与 core 的导入端口（宿主注入真实 Importer；测试注入内存 mock） */
+export interface ImportPort {
+    analyzeImport(zipPath: string): Promise<ImportAnalysis>;
+    createImportPlan(zipPath: string, decisions: ImportDecisions): Promise<ImportPlan>;
+    executeImportPlan(zipPath: string, plan: ImportPlan, opts: {
+        /** 用户确认（安全阀，非 true 拒绝执行） */
+        confirm: boolean;
+        secretInputs?: Record<string, string>;
+        /** 显式回滚策略：true=任一项失败整体回滚（场景 E）；false=单项失败继续（§34.17） */
+        rollbackOnError: boolean;
+    }): Promise<ImportResult>;
+}
+/** 选项构造辅助：从 PlanItem 提取稳定决策键（与 core analyzer.applyItemResolution 的 id 语义一致） */
+export declare function itemDecisionKey(item: PlanItem): string;

package/lib/ui/types.js

@@ -0,0 +1,21 @@
+/** Custom Export 分组目录（规范 §1；automation 组 DSH 无对应分区，仅说明） */
+export const EXPORT_GROUPS = [
+    { id: 'general', label: 'General' },
+    { id: 'ai', label: 'AI' },
+    { id: 'extensions', label: 'Extensions' },
+    { id: 'mcp', label: 'MCP / Tools' },
+    { id: 'customization', label: 'Customization' },
+    { id: 'automation', label: 'Automation', note: 'DSH 当前无 Workflows / Commands 配置文件（运行时注册），无迁移内容' },
+    { id: 'workspace', label: 'Workspace' },
+    { id: 'ui', label: 'UI' },
+    { id: 'optional', label: 'Optional Data' },
+];
+/** Quick Export 推荐项 = defaultIncluded 且非 deviceSpecific（设计 §11.1） */
+export function isQuickRecommended(c) {
+    return c.defaultIncluded && c.portability !== 'deviceSpecific';
+}
+/** 选项构造辅助：从 PlanItem 提取稳定决策键（与 core analyzer.applyItemResolution 的 id 语义一致） */
+export function itemDecisionKey(item) {
+    return item.id;
+}
+//# sourceMappingURL=types.js.map

package/lib/ui/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ui/types.ts"],"names":[],"mappings":"AA2CA,2DAA2D;AAC3D,MAAM,CAAC,MAAM,aAAa,GAA8B;IACtD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;IACnC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;IACzB,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;IACzC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE;IACnC,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE;IAC/C,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,gDAAgD,EAAE;IACjG,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE;IACvC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;IACzB,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;CAClC,CAAC;AAEX,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,CAAiB;IAClD,OAAO,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,WAAW,KAAK,gBAAgB,CAAC;AACjE,CAAC;AAkID,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}

package/lib/utils/hashing.d.ts

@@ -0,0 +1,17 @@
+export declare function sha256Hex(data: Uint8Array | string): string;
+export declare function hashFile(filePath: string): Promise<string>;
+/** 生成一组 ZIP 相对路径 → SHA-256 的校验表（路径必须为 ZIP 内正斜杠相对路径） */
+export declare function buildChecksums(entries: {
+    name: string;
+    data: Uint8Array;
+}[]): Record<string, string>;
+export interface ChecksumVerifyResult {
+    ok: boolean;
+    mismatches: string[];
+    missing: string[];
+}
+/**
+ * 校验：checksums 表内每个相对路径必须在 entries 中存在且 SHA-256 一致。
+ * entries 中多余的文件（如 manifest.json / checksums.json 自身）不参与校验。
+ */
+export declare function verifyChecksums(entries: ReadonlyMap<string, Uint8Array>, checksums: Record<string, string>): ChecksumVerifyResult;

package/lib/utils/hashing.js

@@ -0,0 +1,41 @@
+/**
+ * SHA-256 完整性工具（integrity/checksums.json 的生成与校验）。
+ * m4 的 security/integrity.ts 可在此之上强化（本模块已实现规范 §18 全部语义）。
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs/promises';
+export function sha256Hex(data) {
+    return crypto.createHash('sha256').update(data).digest('hex');
+}
+export async function hashFile(filePath) {
+    const data = await fs.readFile(filePath);
+    return sha256Hex(data);
+}
+/** 生成一组 ZIP 相对路径 → SHA-256 的校验表（路径必须为 ZIP 内正斜杠相对路径） */
+export function buildChecksums(entries) {
+    const checksums = {};
+    for (const e of entries) {
+        checksums[e.name] = sha256Hex(e.data);
+    }
+    return checksums;
+}
+/**
+ * 校验：checksums 表内每个相对路径必须在 entries 中存在且 SHA-256 一致。
+ * entries 中多余的文件（如 manifest.json / checksums.json 自身）不参与校验。
+ */
+export function verifyChecksums(entries, checksums) {
+    const mismatches = [];
+    const missing = [];
+    for (const [relPath, expected] of Object.entries(checksums)) {
+        const data = entries.get(relPath);
+        if (data === undefined) {
+            missing.push(relPath);
+            continue;
+        }
+        if (sha256Hex(data) !== expected) {
+            mismatches.push(relPath);
+        }
+    }
+    return { ok: mismatches.length === 0 && missing.length === 0, mismatches, missing };
+}
+//# sourceMappingURL=hashing.js.map

package/lib/utils/hashing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashing.js","sourceRoot":"","sources":["../../src/utils/hashing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,MAAM,UAAU,SAAS,CAAC,IAAyB;IACjD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,OAA6C;IAC1E,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAwC,EACxC,SAAiC;IAEjC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACtF,CAAC"}

package/lib/utils/json.d.ts

@@ -0,0 +1,24 @@
+/**
+ * JSON 深度保护：解析/序列化/克隆带嵌套深度上限（防 JSON 深度攻击，规范 §19.5）。
+ * 解析分两段：JSON.parse 可能因引擎栈限制抛 RangeError（捕获并归一），
+ * 再对结果做显式栈 walk 检查深度（避免 walk 自身递归爆栈）。
+ */
+export declare const DEFAULT_MAX_JSON_DEPTH = 64;
+export declare const DEFAULT_MAX_JSON_BYTES: number;
+export declare class JsonDepthError extends Error {
+    constructor(message?: string);
+}
+/** 测量对象/数组的嵌套深度（迭代式显式栈，不会递归爆栈；二进制视为叶子） */
+export declare function measureDepth(value: unknown): number;
+/** 深度保护解析：超限抛 JsonDepthError，非法 JSON 抛 SyntaxError */
+export declare function parseJsonSafe(text: string, opts?: {
+    maxDepth?: number;
+    maxBytes?: number;
+}): unknown;
+/** 深度保护序列化：先测深度再 stringify（默认不缩进） */
+export declare function stringifyJsonSafe(value: unknown, opts?: {
+    maxDepth?: number;
+    space?: number;
+}): string;
+/** 深度保护深拷贝（迭代式，安全） */
+export declare function deepClone<T>(value: T, maxDepth?: number): T;