dsh-config-manager 0.1.0

package/lib/client.js

@@ -0,0 +1,2598 @@
+window.__ModuleLoader__.load({
+	id: "dsh-config-manager",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let react = require("react");
+let react_jsx_runtime = require("react/jsx-runtime");
+//#region src/client/api.ts
+/** 路由族常量（集中管理，与 Host 半的路由前缀保持一致） */
+const CONFIG_MANAGER_API = {
+	base: "/api/dsh-config-manager",
+	status: "/api/dsh-config-manager/status",
+	export: "/api/dsh-config-manager/export",
+	download: "/api/dsh-config-manager/download",
+	upload: "/api/dsh-config-manager/upload",
+	analyze: "/api/dsh-config-manager/analyze",
+	plan: "/api/dsh-config-manager/plan",
+	execute: "/api/dsh-config-manager/execute"
+};
+/** 携带路由 JSON error 消息的错误类型 */
+var ConfigManagerApiError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "ConfigManagerApiError";
+	}
+};
+/** 解析 JSON 响应；非 2xx 时抛出带路由 error 消息的 ConfigManagerApiError */
+async function readJson(response) {
+	let body;
+	try {
+		body = await response.json();
+	} catch {
+		throw new ConfigManagerApiError(`HTTP ${response.status}: invalid JSON response`);
+	}
+	if (!response.ok) throw new ConfigManagerApiError(typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : `HTTP ${response.status}`);
+	return body;
+}
+/** query-string 辅助（跳过 undefined/空串，与 dsh-ssh 一致） */
+function query(params) {
+	const search = new URLSearchParams();
+	for (const [key, value] of Object.entries(params)) if (value !== void 0 && value !== "") search.set(key, String(value));
+	const text = search.toString();
+	return text === "" ? "" : "?" + text;
+}
+/**
+* Config Manager 浏览器半的唯一数据入口。
+* 同时实现 `ExportPort`（export-flow 用）与 `ImportPort`（import-wizard 用）。
+*/
+var ConfigManagerApi = class {
+	/**
+	* 加密备份密码（仅内存，默认 null = 普通备份）。
+	* ExportView 在 run 前设置；export 请求体携带给 Host 半做 AES-256-GCM 加密。
+	* 绝不写入 manifest / 任何 DSH 配置 / localStorage。
+	*/
+	exportPassword = null;
+	/** 健康/版本检查（主页横幅：插件版本 / DSH 版本 / 平台） */
+	async status() {
+		return readJson(await fetch(CONFIG_MANAGER_API.status));
+	}
+	/** ExportPort.export：调用 Host 侧导出编排（core Exporter）。加密密码随请求体传输（仅内存）。 */
+	async export(options) {
+		const body = {
+			...options,
+			password: this.exportPassword ?? void 0
+		};
+		return readJson(await fetch(CONFIG_MANAGER_API.export, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(body)
+		}));
+	}
+	/**
+	* 把导出的 ZIP 下载到本机。优先 File System Access API 流式落盘
+	* （不占整文件内存），不可用时回退内存 Blob（dsh-ssh downloadFile 同款策略）。
+	*/
+	async download(zipPath, onProgress) {
+		const response = await fetch(CONFIG_MANAGER_API.download + query({ path: zipPath }));
+		if (!response.ok || response.body === null) {
+			const text = await response.text().catch(() => "");
+			throw new ConfigManagerApiError(text !== "" ? text : `download failed: HTTP ${response.status}`);
+		}
+		const total = Number(response.headers.get("content-length") ?? "0");
+		const disposition = response.headers.get("content-disposition") ?? "";
+		const filename = /filename="([^"]+)"/.exec(disposition)?.[1] ?? zipPath.split(/[\\/]/).pop() ?? "dsh-config.zip";
+		const reader = response.body.getReader();
+		const picker = typeof window !== "undefined" ? window.showSaveFilePicker : void 0;
+		let streamed = false;
+		let writable;
+		const chunks = [];
+		let received = 0;
+		try {
+			if (picker !== void 0) {
+				writable = await (await picker.call(window, { suggestedName: filename })).createWritable();
+				streamed = true;
+			}
+		} catch {}
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (writable !== void 0) await writable.write(value);
+			else chunks.push(value);
+			received += value.length;
+			onProgress?.(received, total);
+		}
+		if (writable !== void 0) await writable.close();
+		return {
+			blob: streamed ? void 0 : new Blob(chunks),
+			filename,
+			streamed,
+			bytes: received
+		};
+	}
+	/** 上传用户选择的 ZIP 到 Host 受控临时目录，返回可引用的 zipPath（dsh-ssh 同款原始字节上传） */
+	async upload(file) {
+		return readJson(await fetch(CONFIG_MANAGER_API.upload + query({ name: file.name }), {
+			method: "POST",
+			body: file
+		}));
+	}
+	/** ImportPort.analyzeImport：零写入分析（校验/兼容性/差异/路径/秘密检测） */
+	async analyzeImport(zipPath) {
+		return readJson(await fetch(CONFIG_MANAGER_API.analyze, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({ zipPath })
+		}));
+	}
+	/** ImportPort.createImportPlan：用用户决策（冲突/路径映射/策略）生成最终计划（Dry Run 零写入） */
+	async createImportPlan(zipPath, decisions) {
+		return readJson(await fetch(CONFIG_MANAGER_API.plan, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				zipPath,
+				decisions
+			})
+		}));
+	}
+	/** ImportPort.executeImportPlan：快照→分阶段 apply→validate→commit/rollback */
+	async executeImportPlan(zipPath, plan, opts) {
+		const payload = {
+			zipPath,
+			plan,
+			opts: {
+				confirm: opts.confirm,
+				secretInputs: opts.secretInputs ?? {},
+				rollbackOnError: opts.rollbackOnError
+			}
+		};
+		return readJson(await fetch(CONFIG_MANAGER_API.execute, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(payload)
+		}));
+	}
+};
+//#endregion
+//#region src/ui/types.ts
+/** Custom Export 分组目录（规范 §1；automation 组 DSH 无对应分区，仅说明） */
+const EXPORT_GROUPS = [
+	{
+		id: "general",
+		label: "General"
+	},
+	{
+		id: "ai",
+		label: "AI"
+	},
+	{
+		id: "extensions",
+		label: "Extensions"
+	},
+	{
+		id: "mcp",
+		label: "MCP / Tools"
+	},
+	{
+		id: "customization",
+		label: "Customization"
+	},
+	{
+		id: "automation",
+		label: "Automation",
+		note: "DSH 当前无 Workflows / Commands 配置文件（运行时注册），无迁移内容"
+	},
+	{
+		id: "workspace",
+		label: "Workspace"
+	},
+	{
+		id: "ui",
+		label: "UI"
+	},
+	{
+		id: "optional",
+		label: "Optional Data"
+	}
+];
+/** Quick Export 推荐项 = defaultIncluded 且非 deviceSpecific（设计 §11.1） */
+function isQuickRecommended(c) {
+	return c.defaultIncluded && c.portability !== "deviceSpecific";
+}
+//#endregion
+//#region src/ui/progress.ts
+/** 导出阶段文案（规范 §29 Export 示例） */
+const EXPORT_STAGES = [
+	"analyzing",
+	"exporting-settings",
+	"scanning-secrets",
+	"exporting-plugins",
+	"creating-archive",
+	"calculating-checksums",
+	"done"
+];
+/** 导入阶段文案（规范 §29 Import 示例 + 快照/回滚阶段） */
+const IMPORT_STAGES = [
+	"validating",
+	"checking-compatibility",
+	"creating-snapshot",
+	"restoring-settings",
+	"restoring-plugins",
+	"restoring-mcp",
+	"validating-config",
+	"rolling-back",
+	"done"
+];
+const STAGE_TEXTS = {
+	"analyzing": "Analyzing configuration...",
+	"exporting-settings": "Exporting settings...",
+	"scanning-secrets": "Scanning secrets...",
+	"exporting-plugins": "Exporting plugins...",
+	"creating-archive": "Creating archive...",
+	"calculating-checksums": "Calculating checksums...",
+	"validating": "Validating backup...",
+	"checking-compatibility": "Checking compatibility...",
+	"creating-snapshot": "Creating safety snapshot...",
+	"restoring-settings": "Restoring settings...",
+	"restoring-plugins": "Restoring plugins...",
+	"restoring-mcp": "Restoring MCP...",
+	"validating-config": "Validating configuration...",
+	"rolling-back": "Rolling back...",
+	"done": "Done"
+};
+/** 阶段 id → 用户可读文案（未知阶段回退 id） */
+function stageText(stage) {
+	return STAGE_TEXTS[stage] ?? stage;
+}
+/**
+* 进度追踪器：按给定阶段序列在回调时附带 step/total 序号。
+* 控制器调用 core 前后 emit()，UI 侧渲染进度条/阶段文字。
+*/
+var ProgressTracker = class {
+	listener;
+	stages;
+	emitted = [];
+	constructor(stages, listener) {
+		this.stages = stages;
+		this.listener = listener;
+	}
+	/** 发出某阶段事件（可携带 detail）；未在序列中的阶段 step/total 缺省 */
+	emit(stage, detail) {
+		const idx = this.stages.indexOf(stage);
+		const event = {
+			stage,
+			detail,
+			step: idx >= 0 ? idx + 1 : void 0,
+			total: idx >= 0 ? this.stages.length : void 0
+		};
+		this.emitted.push(stage);
+		this.listener?.(event);
+	}
+	/** 已发出阶段的快照（测试与日志用） */
+	get events() {
+		return [...this.emitted];
+	}
+};
+//#endregion
+//#region src/ui/report.ts
+function renderExportReport(report) {
+	const lines = ["Backup Created", ""];
+	lines.push("Included:");
+	for (const { section, counts } of report.included) {
+		const detail = Object.entries(counts).map(([k, v]) => `${v} ${k}`).join(", ");
+		lines.push(`  ✓ ${section}${detail !== "" ? ` (${detail})` : ""}`);
+	}
+	lines.push("");
+	if (report.excluded.length > 0) {
+		lines.push("Excluded:");
+		for (const s of report.excluded) lines.push(`  ○ ${s}`);
+		lines.push("");
+	}
+	lines.push("Security:");
+	lines.push(`  ✓ API Keys excluded: ${report.security.secretsExcluded ? "yes" : "no"}`);
+	lines.push(`  ✓ Contains secrets: ${report.security.containsSecrets ? "yes (encrypted)" : "no"}`);
+	lines.push(`  ✓ Encrypted: ${report.security.encrypted ? "yes" : "no"}`);
+	if (report.security.redactedHits > 0) lines.push(`  ⚠ ${report.security.redactedHits} sensitive field(s) redacted`);
+	lines.push("");
+	lines.push(`File: ${report.file.name} (${formatBytes(report.file.sizeBytes)})`);
+	for (const w of report.warnings) lines.push(`  ⚠ ${w}`);
+	return lines.join("\n");
+}
+/** 从 itemId 前缀推断所属分区（与 adapters id 规则对齐；未知归 'other'） */
+function sectionFromItemId(itemId) {
+	if (itemId.startsWith("settings:")) return "settings";
+	if (itemId.startsWith("ui:")) return "ui";
+	if (itemId.startsWith("provider:")) return "providers";
+	if (itemId.startsWith("plugin:") || itemId.startsWith("patch:")) return "plugins";
+	if (itemId.startsWith("mcp:")) return "mcp";
+	if (itemId.startsWith("prompt:")) return "prompts";
+	if (itemId.startsWith("workspace:")) return "workspaces";
+	if (itemId.startsWith("secret:")) return "credentialsStatus";
+	if (itemId.startsWith("skills:")) return "skills";
+	if (itemId.startsWith("agentPresets:")) return "agentPresets";
+	if (itemId.startsWith("pluginFiles:")) return "pluginFiles";
+	if (itemId.startsWith("sessions:")) return "sessions";
+	return "other";
+}
+/** 按分区聚合执行结果（统计 + 明细） */
+function importSectionStats(executed) {
+	const bySection = /* @__PURE__ */ new Map();
+	for (const e of executed) {
+		const section = sectionFromItemId(e.itemId);
+		let stat = bySection.get(section);
+		if (!stat) {
+			stat = {
+				section,
+				ok: 0,
+				skipped: 0,
+				failed: 0,
+				items: []
+			};
+			bySection.set(section, stat);
+		}
+		if (e.status === "ok") stat.ok += 1;
+		else if (e.status === "skipped") stat.skipped += 1;
+		else stat.failed += 1;
+		stat.items.push(e);
+	}
+	return [...bySection.values()];
+}
+/** 导入报告渲染（含回滚状态；§22 动作按钮由 suggestedActions 给出） */
+function renderImportReport(result) {
+	const lines = [result.ok ? "Import Complete" : "Import Failed", ""];
+	const stats = importSectionStats(result.executed);
+	for (const s of stats) {
+		const parts = [];
+		if (s.ok > 0) parts.push(`✓ ${s.ok} imported/restored`);
+		if (s.skipped > 0) parts.push(`- ${s.skipped} skipped`);
+		if (s.failed > 0) parts.push(`✗ ${s.failed} failed`);
+		lines.push(`${s.section}: ${parts.join(" ") || "no changes"}`);
+		for (const it of s.items) if (it.status === "failed") lines.push(`  Reason: ${it.message ?? "未知原因"}`);
+	}
+	if (result.missingSecrets.length > 0) lines.push(`Secrets: ⚠ ${result.missingSecrets.length} credentials need to be entered`);
+	if (result.needsRestart) lines.push("Restart required: 插件/MCP 变更将在重启 DSH 后生效");
+	for (const w of result.warnings) lines.push(`⚠ ${w}`);
+	if (result.rollback) {
+		lines.push("");
+		lines.push(renderRollbackReport(result.rollback));
+	}
+	return lines.join("\n");
+}
+/** 结果页动作按钮（§22：Fix Issues / View Details / Done） */
+function suggestedActions(result) {
+	const actions = [];
+	if (result.executed.some((e) => e.status === "failed")) actions.push("fixIssues");
+	if (result.executed.length > 0 || result.warnings.length > 0) actions.push("viewDetails");
+	actions.push("done");
+	return actions;
+}
+/** 回滚报告渲染（full / partial + 人工恢复清单） */
+function renderRollbackReport(rr) {
+	if (rr.full) return "Rollback: 已完整恢复导入前的配置。";
+	const lines = ["Rollback partially completed."];
+	lines.push("These items may require manual recovery:");
+	for (const f of rr.failed) lines.push(`  - ${f.item}: ${f.reason}${f.manualHint ? ` (${f.manualHint})` : ""}`);
+	if (rr.restored.length > 0) lines.push(`Restored: ${rr.restored.length} item(s)`);
+	return lines.join("\n");
+}
+function formatBytes(n) {
+	if (n < 1024) return `${n} B`;
+	if (n < 1024 * 1024) return `${(n / 1024).toFixed(1)} KB`;
+	return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+}
+//#endregion
+//#region src/ui/export-flow.ts
+/** 内置分类目录（与 src/adapters/* 的 displayName/defaultIncluded/portability 对齐，研究报告 §2.2） */
+const DEFAULT_CATEGORIES = [
+	{
+		id: "settings",
+		label: "Settings",
+		description: "DSH 全局设置（namespace 分区，redacted）",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "general"
+	},
+	{
+		id: "providers",
+		label: "Providers & Models",
+		description: "LLM Provider / Model / 默认模型 / BaseURL",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "ai"
+	},
+	{
+		id: "plugins",
+		label: "Plugins",
+		description: "已安装插件清单与启用状态（不含二进制）",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "extensions"
+	},
+	{
+		id: "pluginFiles",
+		label: "Plugin Files",
+		description: "插件自有配置文件（dsh-ssh.json 等，白名单）",
+		defaultIncluded: false,
+		portability: "deviceSpecific",
+		group: "extensions"
+	},
+	{
+		id: "mcp",
+		label: "MCP Servers",
+		description: "MCP 服务器组合配置（需重启生效）",
+		defaultIncluded: true,
+		portability: "platformSpecific",
+		group: "mcp"
+	},
+	{
+		id: "prompts",
+		label: "Prompts",
+		description: "System Prompt / Plan Mode 提示",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "customization"
+	},
+	{
+		id: "skills",
+		label: "Skills",
+		description: "用户技能文件（~/.dsh/skills）",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "customization"
+	},
+	{
+		id: "agentPresets",
+		label: "Agent Presets",
+		description: "Agent 预设（~/.dsh/.agent-presets）",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "customization"
+	},
+	{
+		id: "workspaces",
+		label: "Workspaces",
+		description: "工作区记录（含绝对路径，需路径映射）",
+		defaultIncluded: true,
+		portability: "platformSpecific",
+		group: "workspace"
+	},
+	{
+		id: "ui",
+		label: "UI Preferences",
+		description: "UI 类 settings namespace（localStorage 项仅说明）",
+		defaultIncluded: true,
+		portability: "portable",
+		group: "ui"
+	},
+	{
+		id: "credentialsStatus",
+		label: "Credentials Status",
+		description: "凭据状态（configured 标记，永不导出值）",
+		defaultIncluded: true,
+		portability: "deviceSpecific",
+		group: "optional",
+		sensitive: true
+	},
+	{
+		id: "sessions",
+		label: "Sessions",
+		description: "历史会话（默认关闭，含敏感内容）",
+		defaultIncluded: false,
+		portability: "deviceSpecific",
+		group: "optional"
+	}
+];
+var ExportFlow = class {
+	categories;
+	port;
+	onProgress;
+	constructor(opts) {
+		this.port = opts.port;
+		this.categories = opts.categories ?? DEFAULT_CATEGORIES;
+		this.onProgress = opts.onProgress;
+	}
+	/** Quick Export 推荐分区（defaultIncluded 且非 deviceSpecific） */
+	quickSelection() {
+		return this.categories.filter(isQuickRecommended).map((c) => c.id);
+	}
+	/** 按 §1 分组返回分类目录（Custom Export 树） */
+	groupedCatalog() {
+		return EXPORT_GROUPS.map((g) => ({
+			group: g.id,
+			label: g.label,
+			note: g.note,
+			categories: this.categories.filter((c) => c.group === g.id)
+		}));
+	}
+	/** 校验 Custom 勾选：未知分区 = invalid；deviceSpecific 分区给提示警告（仍可继续） */
+	validateSelection(selection) {
+		const warnings = [];
+		let valid = true;
+		const known = new Set(this.categories.map((c) => c.id));
+		for (const id of selection) if (!known.has(id)) {
+			warnings.push(`未知分区：${id}`);
+			valid = false;
+		}
+		for (const c of this.categories) if (selection.includes(c.id) && c.portability === "deviceSpecific") warnings.push(`${c.label} 为设备相关数据（${c.portability}），跨设备导入时可能不适用`);
+		return {
+			valid,
+			warnings
+		};
+	}
+	/** 执行导出：发进度事件 → 调 core → 渲染 §21 报告 */
+	async run(mode, selection, opts = {}) {
+		const tracker = new ProgressTracker(EXPORT_STAGES, this.onProgress);
+		const only = mode === "quick" ? this.quickSelection() : [...selection];
+		if (mode === "quick" && opts.includeSecrets === void 0) opts = {
+			...opts,
+			includeSecrets: false
+		};
+		tracker.emit("analyzing");
+		tracker.emit("exporting-settings");
+		tracker.emit("scanning-secrets");
+		tracker.emit("exporting-plugins");
+		tracker.emit("creating-archive");
+		tracker.emit("calculating-checksums");
+		const result = await this.port.export({
+			includeSecrets: opts.includeSecrets ?? false,
+			only
+		});
+		tracker.emit("done");
+		return {
+			...result,
+			text: renderExportReport(result.report)
+		};
+	}
+};
+//#endregion
+//#region \0config-manager-css:C:\Repository\DSH Config Manager\src\client\config-manager.module.css.js
+const css = ".fjdJpq_section{height:100%;min-height:0;color:var(--dsw-alias-label-primary);font-family:var(--dsw-font-family);flex-direction:column;gap:10px;font-size:13px;display:flex}.fjdJpq_sectionHeader{flex:none;align-items:center;gap:10px;display:flex}.fjdJpq_viewTabs{border-bottom:1px solid var(--dsw-alias-border-l1);flex:1;gap:2px;display:flex}.fjdJpq_viewTab{color:var(--dsw-alias-label-secondary);cursor:pointer;white-space:nowrap;background:0 0;border:none;border-bottom:2px solid #0000;border-radius:6px 6px 0 0;padding:7px 14px;font-size:13px}.fjdJpq_viewTab:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}.fjdJpq_viewTab[data-active]{color:var(--dsw-alias-label-primary);border-bottom-color:var(--dsw-alias-state-business-primary);font-weight:600}.fjdJpq_sectionBody{flex-direction:column;flex:1;min-height:0;display:flex;overflow-y:auto}.fjdJpq_viewBody{flex-direction:column;gap:12px;padding:4px 2px 16px;display:flex}.fjdJpq_iconButton{width:26px;height:26px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:6px;justify-content:center;align-items:center;padding:0;font-size:15px;display:inline-flex}.fjdJpq_iconButton:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.fjdJpq_sectionTitleBlock{flex-direction:column;gap:2px;display:flex}.fjdJpq_sectionTitle{color:var(--dsw-alias-label-primary);margin:0;font-size:15px;font-weight:700}.fjdJpq_sectionSubtitle{color:var(--dsw-alias-label-secondary);margin:0;font-size:12px;line-height:1.5}.fjdJpq_primaryButton{color:var(--dsw-alias-label-primary-foreground);background:var(--dsw-alias-button-info-fill);cursor:pointer;white-space:nowrap;border:none;border-radius:8px;align-items:center;gap:6px;padding:6px 14px;font-size:13px;font-weight:600;display:inline-flex}.fjdJpq_primaryButton:hover:not(:disabled){background:var(--dsw-alias-button-info-hover)}.fjdJpq_primaryButton:disabled{opacity:.5;cursor:default}.fjdJpq_ghostButton{color:var(--dsw-alias-label-primary);border:1px solid var(--dsw-alias-border-l2);cursor:pointer;white-space:nowrap;background:0 0;border-radius:8px;align-items:center;gap:6px;padding:5px 12px;font-size:12px;display:inline-flex}.fjdJpq_ghostButton:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.fjdJpq_ghostButton:disabled{opacity:.45;cursor:default}.fjdJpq_dangerButton{color:var(--dsw-alias-state-error-primary);border:1px solid var(--dsw-alias-state-error-primary);cursor:pointer;white-space:nowrap;background:0 0;border-radius:8px;padding:5px 12px;font-size:12px}.fjdJpq_dangerButton:hover:not(:disabled){background:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-label-primary-foreground)}.fjdJpq_dangerButton:disabled{opacity:.45;cursor:default}.fjdJpq_badge{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);white-space:nowrap;border-radius:999px;padding:1px 8px;font-size:11px;line-height:1.6;display:inline-block}.fjdJpq_badgeInfo{color:var(--dsw-alias-state-business-primary);border-color:var(--dsw-alias-state-business-primary)}.fjdJpq_badgeOk{color:var(--dsw-alias-state-success-primary);border-color:var(--dsw-alias-state-success-primary)}.fjdJpq_badgeWarn{color:var(--dsw-alias-state-warn-primary);border-color:var(--dsw-alias-state-warn-primary)}.fjdJpq_badgeError{color:var(--dsw-alias-state-error-primary);border-color:var(--dsw-alias-state-error-primary)}.fjdJpq_banner{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere;border-radius:8px;padding:8px 12px;font-size:12.5px;line-height:1.5}.fjdJpq_banner[data-kind=ok]{color:var(--dsw-alias-state-success-primary);border-color:var(--dsw-alias-state-success-primary)}.fjdJpq_banner[data-kind=error]{color:var(--dsw-alias-state-error-primary);border-color:var(--dsw-alias-state-error-primary)}.fjdJpq_banner[data-kind=info]{color:var(--dsw-alias-state-business-primary);border-color:var(--dsw-alias-state-business-primary)}.fjdJpq_banner[data-kind=warn]{color:var(--dsw-alias-state-warn-primary);border-color:var(--dsw-alias-state-warn-primary)}.fjdJpq_card{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l1);border-radius:10px;flex-direction:column;flex:none;gap:10px;padding:12px;display:flex}.fjdJpq_field{flex-direction:column;gap:5px;display:flex}.fjdJpq_fieldLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:600}.fjdJpq_input{color:var(--dsw-alias-label-primary);background:var(--dsw-specific-input-major);border:1px solid var(--dsw-alias-border-l2);resize:vertical;border-radius:8px;outline:none;padding:7px 10px;font-family:inherit;font-size:13px}.fjdJpq_input:focus{border-color:var(--dsw-alias-state-business-primary)}.fjdJpq_input::placeholder{color:var(--dsw-alias-label-tertiary)}.fjdJpq_input:disabled{opacity:.55}.fjdJpq_hint{color:var(--dsw-alias-label-tertiary);font-size:11.5px;line-height:1.5}.fjdJpq_formError{color:var(--dsw-alias-state-error-primary);margin:0;font-size:12px}.fjdJpq_checkboxRow{color:var(--dsw-alias-label-primary);cursor:pointer;align-items:flex-start;gap:8px;font-size:13px;display:flex}.fjdJpq_checkboxRow input{flex:none;margin-top:2px}.fjdJpq_radioLabel{color:var(--dsw-alias-label-primary);cursor:pointer;align-items:center;gap:6px;font-size:13px;display:inline-flex}.fjdJpq_secretFields{grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:10px 12px;padding-top:4px;display:grid}.fjdJpq_hiddenFile{display:none}.fjdJpq_modeTabs{border-bottom:1px solid var(--dsw-alias-border-l1);flex:none;gap:2px;display:flex}.fjdJpq_modeTab{color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-bottom:2px solid #0000;padding:6px 12px;font-size:12.5px}.fjdJpq_modeTab:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}.fjdJpq_modeTab[data-active]{color:var(--dsw-alias-label-primary);border-bottom-color:var(--dsw-alias-state-business-primary);font-weight:600}.fjdJpq_modeHint{color:var(--dsw-alias-label-secondary);font-size:12px;line-height:1.5}.fjdJpq_groupList{flex-direction:column;gap:10px;display:flex}.fjdJpq_groupCard{gap:8px}.fjdJpq_groupHeader{flex-wrap:wrap;align-items:baseline;gap:8px;display:flex}.fjdJpq_groupLabel{color:var(--dsw-alias-label-primary);font-size:12.5px;font-weight:700}.fjdJpq_groupNote{color:var(--dsw-alias-label-tertiary);font-size:11.5px}.fjdJpq_groupItems{flex-direction:column;gap:6px;display:flex}.fjdJpq_categoryItem{flex-wrap:wrap;align-items:center;gap:8px;display:inline-flex}.fjdJpq_categoryName{font-weight:500}.fjdJpq_categoryDesc{color:var(--dsw-alias-label-tertiary);font-size:11.5px}.fjdJpq_optionsCard{gap:8px}.fjdJpq_warnList{margin:4px 0 0;padding-left:18px}.fjdJpq_actionRow{flex-wrap:wrap;align-items:center;gap:10px;display:flex}.fjdJpq_progressBlock{flex-direction:column;flex:none;gap:6px;display:flex}.fjdJpq_progressMeta{color:var(--dsw-alias-label-secondary);flex-wrap:wrap;gap:12px;font-size:12px;display:flex}.fjdJpq_progressLabel{font-weight:600}.fjdJpq_progressDetail{color:var(--dsw-alias-label-tertiary)}.fjdJpq_progressPercent{font-variant-numeric:tabular-nums;margin-left:auto}.fjdJpq_progressTrack{background:var(--dsw-alias-interactive-bg-hover);border-radius:999px;height:8px;overflow:hidden}.fjdJpq_progressBar{background:var(--dsw-alias-state-business-primary);border-radius:999px;height:100%;transition:width .12s linear}.fjdJpq_progressBarDone{background:var(--dsw-alias-state-success-primary)}.fjdJpq_progressIndeterminate{width:40%;animation:1s ease-in-out infinite fjdJpq_dshCmIndeterminate}@keyframes fjdJpq_dshCmIndeterminate{0%{margin-left:-40%}to{margin-left:100%}}.fjdJpq_reportView{flex-direction:column;gap:10px;display:flex}.fjdJpq_statRow{flex-wrap:wrap;align-items:center;gap:6px;display:flex}.fjdJpq_reportText{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);white-space:pre-wrap;word-break:break-all;max-height:260px;color:var(--dsw-alias-label-primary);border-radius:8px;margin:0;padding:10px 12px;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11.5px;line-height:1.6;overflow:auto}.fjdJpq_reportFooter{justify-content:flex-end;gap:8px;display:flex}.fjdJpq_rollbackBox{border:1px solid var(--dsw-alias-state-warn-primary);color:var(--dsw-alias-state-warn-primary);border-radius:8px;flex-direction:column;gap:6px;padding:10px 12px;display:flex}.fjdJpq_rollbackBox .fjdJpq_reportText{border-color:var(--dsw-alias-border-l2)}.fjdJpq_errorBanner{border:1px solid var(--dsw-alias-state-error-primary);color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border-radius:8px;flex-direction:column;gap:6px;padding:10px 12px;display:flex}.fjdJpq_errorTitle{color:var(--dsw-alias-state-error-primary);font-size:13px;font-weight:700}.fjdJpq_errorReason{white-space:pre-wrap;word-break:break-all;color:var(--dsw-alias-label-secondary);margin:0;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11.5px}.fjdJpq_errorAction{color:var(--dsw-alias-label-secondary);font-size:12.5px}.fjdJpq_errorActionLabel{color:var(--dsw-alias-state-business-primary)}.fjdJpq_errorItem{color:var(--dsw-alias-label-tertiary);font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11.5px}.fjdJpq_errorFooter{justify-content:flex-end;display:flex}.fjdJpq_errorList{flex-direction:column;gap:4px;display:flex}.fjdJpq_errorLine{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);white-space:pre-wrap;word-break:break-all;color:var(--dsw-alias-state-error-primary);border-radius:6px;margin:0;padding:6px 10px;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px}.fjdJpq_conflictList{flex-direction:column;gap:10px;display:flex}.fjdJpq_conflictItem{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l1);border-radius:8px;flex-direction:column;gap:6px;padding:10px 12px;display:flex}.fjdJpq_conflictHead{flex-wrap:wrap;align-items:center;gap:8px;display:flex}.fjdJpq_conflictId{color:var(--dsw-alias-label-primary);font-size:12.5px;font-weight:600}.fjdJpq_severityError{color:var(--dsw-alias-state-error-primary);border:1px solid var(--dsw-alias-state-error-primary);border-radius:999px;padding:0 6px;font-size:10.5px}.fjdJpq_conflictDetail{background:var(--dsw-alias-bg-base);border:1px solid var(--dsw-alias-border-l2);white-space:pre-wrap;word-break:break-all;color:var(--dsw-alias-label-secondary);border-radius:6px;margin:0;padding:6px 8px;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px}.fjdJpq_conflictOptions{flex-wrap:wrap;gap:14px;display:flex}.fjdJpq_pathMappingList{flex-direction:column;gap:8px;display:flex}.fjdJpq_pathRow{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l1);border-radius:8px;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:10px;padding:10px 12px;display:grid}.fjdJpq_pathOld,.fjdJpq_pathNew{flex-direction:column;gap:4px;min-width:0;display:flex}.fjdJpq_pathValue{text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-primary);margin:0;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11.5px;overflow:hidden}.fjdJpq_pathIssueKind{color:var(--dsw-alias-state-warn-primary);font-size:10.5px}.fjdJpq_secretsList{flex-direction:column;gap:10px;display:flex}.fjdJpq_empty{text-align:center;color:var(--dsw-alias-label-tertiary);padding:22px 12px;font-size:12.5px}.fjdJpq_spinnerWrap{align-items:center;gap:6px;display:inline-flex}.fjdJpq_spinner{border:2px solid var(--dsw-alias-state-business-primary);vertical-align:-1px;border-top-color:#0000;border-radius:50%;flex:none;width:11px;height:11px;animation:.8s linear infinite fjdJpq_dshCmSpin;display:inline-block}.fjdJpq_spinnerLabel{color:var(--dsw-alias-label-secondary);font-size:12px}@keyframes fjdJpq_dshCmSpin{to{transform:rotate(360deg)}}";
+const tagId = "dsh-config-manager/config-manager.module.css";
+if (typeof document !== "undefined" && document.querySelector("style[data-tag=\"dsh-config-manager/config-manager.module.css\"]") === null) {
+	const tag = document.createElement("style");
+	tag.dataset.plugin = "dsh-config-manager";
+	tag.dataset.tag = tagId;
+	tag.textContent = css;
+	document.head.appendChild(tag);
+}
+var config_manager_module_css_default = {
+	"reportText": "fjdJpq_reportText",
+	"empty": "fjdJpq_empty",
+	"dshCmSpin": "fjdJpq_dshCmSpin",
+	"radioLabel": "fjdJpq_radioLabel",
+	"progressIndeterminate": "fjdJpq_progressIndeterminate",
+	"progressBar": "fjdJpq_progressBar",
+	"secretsList": "fjdJpq_secretsList",
+	"progressLabel": "fjdJpq_progressLabel",
+	"spinnerWrap": "fjdJpq_spinnerWrap",
+	"warnList": "fjdJpq_warnList",
+	"conflictId": "fjdJpq_conflictId",
+	"card": "fjdJpq_card",
+	"categoryItem": "fjdJpq_categoryItem",
+	"checkboxRow": "fjdJpq_checkboxRow",
+	"hint": "fjdJpq_hint",
+	"sectionTitle": "fjdJpq_sectionTitle",
+	"reportFooter": "fjdJpq_reportFooter",
+	"errorReason": "fjdJpq_errorReason",
+	"errorAction": "fjdJpq_errorAction",
+	"errorBanner": "fjdJpq_errorBanner",
+	"pathNew": "fjdJpq_pathNew",
+	"errorLine": "fjdJpq_errorLine",
+	"sectionHeader": "fjdJpq_sectionHeader",
+	"errorFooter": "fjdJpq_errorFooter",
+	"statRow": "fjdJpq_statRow",
+	"conflictDetail": "fjdJpq_conflictDetail",
+	"input": "fjdJpq_input",
+	"progressTrack": "fjdJpq_progressTrack",
+	"primaryButton": "fjdJpq_primaryButton",
+	"badgeError": "fjdJpq_badgeError",
+	"viewTabs": "fjdJpq_viewTabs",
+	"groupList": "fjdJpq_groupList",
+	"section": "fjdJpq_section",
+	"groupHeader": "fjdJpq_groupHeader",
+	"reportView": "fjdJpq_reportView",
+	"pathIssueKind": "fjdJpq_pathIssueKind",
+	"categoryDesc": "fjdJpq_categoryDesc",
+	"rollbackBox": "fjdJpq_rollbackBox",
+	"conflictList": "fjdJpq_conflictList",
+	"pathValue": "fjdJpq_pathValue",
+	"badgeOk": "fjdJpq_badgeOk",
+	"formError": "fjdJpq_formError",
+	"conflictHead": "fjdJpq_conflictHead",
+	"groupLabel": "fjdJpq_groupLabel",
+	"banner": "fjdJpq_banner",
+	"severityError": "fjdJpq_severityError",
+	"conflictOptions": "fjdJpq_conflictOptions",
+	"ghostButton": "fjdJpq_ghostButton",
+	"actionRow": "fjdJpq_actionRow",
+	"spinnerLabel": "fjdJpq_spinnerLabel",
+	"field": "fjdJpq_field",
+	"badgeWarn": "fjdJpq_badgeWarn",
+	"secretFields": "fjdJpq_secretFields",
+	"groupCard": "fjdJpq_groupCard",
+	"badgeInfo": "fjdJpq_badgeInfo",
+	"pathMappingList": "fjdJpq_pathMappingList",
+	"viewBody": "fjdJpq_viewBody",
+	"progressBlock": "fjdJpq_progressBlock",
+	"dshCmIndeterminate": "fjdJpq_dshCmIndeterminate",
+	"sectionBody": "fjdJpq_sectionBody",
+	"sectionTitleBlock": "fjdJpq_sectionTitleBlock",
+	"hiddenFile": "fjdJpq_hiddenFile",
+	"modeTabs": "fjdJpq_modeTabs",
+	"fieldLabel": "fjdJpq_fieldLabel",
+	"categoryName": "fjdJpq_categoryName",
+	"optionsCard": "fjdJpq_optionsCard",
+	"progressDetail": "fjdJpq_progressDetail",
+	"progressPercent": "fjdJpq_progressPercent",
+	"spinner": "fjdJpq_spinner",
+	"groupItems": "fjdJpq_groupItems",
+	"progressMeta": "fjdJpq_progressMeta",
+	"iconButton": "fjdJpq_iconButton",
+	"badge": "fjdJpq_badge",
+	"viewTab": "fjdJpq_viewTab",
+	"modeHint": "fjdJpq_modeHint",
+	"groupNote": "fjdJpq_groupNote",
+	"pathRow": "fjdJpq_pathRow",
+	"errorActionLabel": "fjdJpq_errorActionLabel",
+	"errorTitle": "fjdJpq_errorTitle",
+	"conflictItem": "fjdJpq_conflictItem",
+	"errorList": "fjdJpq_errorList",
+	"dangerButton": "fjdJpq_dangerButton",
+	"modeTab": "fjdJpq_modeTab",
+	"progressBarDone": "fjdJpq_progressBarDone",
+	"sectionSubtitle": "fjdJpq_sectionSubtitle",
+	"errorItem": "fjdJpq_errorItem",
+	"pathOld": "fjdJpq_pathOld"
+};
+//#endregion
+//#region src/client/common/ui.tsx
+/** 统一按钮（primary=主操作 / ghost=次操作 / danger=危险操作） */
+function Button({ variant = "ghost", disabled, onClick, children, title, className }) {
+	const cls = variant === "primary" ? config_manager_module_css_default.primaryButton : variant === "danger" ? config_manager_module_css_default.dangerButton : config_manager_module_css_default.ghostButton;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+		type: "button",
+		className: className !== void 0 ? `${cls} ${className}` : cls,
+		disabled,
+		title,
+		onClick,
+		children
+	});
+}
+/** 状态徽章（info=业务色 / ok=成功 / warn=警告 / error=错误） */
+function Badge({ kind = "info", children }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+		className: `${config_manager_module_css_default.badge} ${config_manager_module_css_default[`badge${kind[0].toUpperCase()}${kind.slice(1)}`] ?? ""}`,
+		children
+	});
+}
+/** 说明横幅（ok/error/info/warn 四态） */
+function Banner({ kind = "info", children }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: config_manager_module_css_default.banner,
+		"data-kind": kind,
+		children
+	});
+}
+/** 卡片容器（bg-layer-2 + 圆角 + 细边框） */
+function Card({ children, className }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: className !== void 0 ? `${config_manager_module_css_default.card} ${className}` : config_manager_module_css_default.card,
+		children
+	});
+}
+/** 加载指示（旋转环 + 可选文案） */
+function Spinner({ label }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+		className: config_manager_module_css_default.spinnerWrap,
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+			className: config_manager_module_css_default.spinner,
+			"aria-hidden": "true"
+		}), label !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+			className: config_manager_module_css_default.spinnerLabel,
+			children: label
+		})]
+	});
+}
+/** 区块标题（页面内二级标题 + 可选副标题） */
+function SectionTitle({ title, subtitle }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.sectionTitleBlock,
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+			className: config_manager_module_css_default.sectionTitle,
+			children: title
+		}), subtitle !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+			className: config_manager_module_css_default.sectionSubtitle,
+			children: subtitle
+		})]
+	});
+}
+/** 空状态占位 */
+function Empty({ children }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: config_manager_module_css_default.empty,
+		children
+	});
+}
+/** 复选框行（勾选 + 标签） */
+function Checkbox({ checked, onChange, label, disabled }) {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+		className: config_manager_module_css_default.checkboxRow,
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+			type: "checkbox",
+			checked,
+			disabled,
+			onChange: (event) => {
+				onChange(event.target.checked);
+			}
+		}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
+	});
+}
+//#endregion
+//#region src/security/secret-scanner.ts
+/**
+* 敏感字段名单（规范化名：小写、无分隔符）。
+* 覆盖规范 §6 原始清单 + 设计 §7.2 + core logger 名单，并保持克制以防误伤
+* （不收录 `key`/`session` 等过宽子串——`sessionIds`/`monkey` 不得中招）。
+*/
+const DEFAULT_SECRET_FIELD_NAMES = [
+	"password",
+	"passwd",
+	"token",
+	"accesstoken",
+	"refreshtoken",
+	"apikey",
+	"secret",
+	"credential",
+	"authorization",
+	"cookie",
+	"privatekey",
+	"clientsecret",
+	"pwd",
+	"passphrase",
+	"authtoken",
+	"sessionkey",
+	"apisecret",
+	"authheader",
+	"bearer",
+	"webhooksecret"
+];
+/** 敏感后缀（规范化后以这些结尾 → 命中；`key` 故意不收，避免 monkey/whiskey 误伤） */
+const SENSITIVE_SUFFIXES = [
+	"token",
+	"secret",
+	"password",
+	"passwd",
+	"credential"
+];
+/** 敏感前缀（规范化后以这些开头 → 命中；token/secret 等过宽词不收入） */
+const SENSITIVE_PREFIXES = [
+	"apikey",
+	"accesstoken",
+	"refreshtoken",
+	"authtoken",
+	"clientsecret",
+	"privatekey",
+	"authorization",
+	"authheader",
+	"webhooksecret",
+	"apisecret"
+];
+/** 规范化字段名：小写 + 去 `_-. ` 分隔符（用于名单匹配） */
+function normalizeFieldName(name) {
+	return name.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+/** 字段名是否命中敏感名单（规范化后精确 / 敏感后缀 / 敏感前缀） */
+function isSensitiveFieldName(field, extra = []) {
+	const norm = normalizeFieldName(field);
+	if (norm === "") return false;
+	if ([...DEFAULT_SECRET_FIELD_NAMES, ...extra].includes(norm)) return true;
+	if (SENSITIVE_SUFFIXES.some((s) => norm.endsWith(s) && norm.length > s.length)) return true;
+	return SENSITIVE_PREFIXES.some((p) => norm.startsWith(p));
+}
+//#endregion
+//#region src/security/redaction.ts
+/**
+* 日志/文本脱敏（规范 §24 / 设计 §9.8 / core utils/logger.ts 的强化层）。
+*
+* 与 core logger.redact 的分工：core 版按固定字段名单做子串替换（不感知字段边界）；
+* 本模块为强化版，两模式：
+*  1. **结构化字段形态**：JSON `"field": "value"` / `field=value` / `field: value`，
+*     字段名命中敏感名单（复用 secret-scanner 的 `isSensitiveFieldName`，单一来源防漂移）→ 值替换。
+*  2. **值形状模式**：与字段名无关，文本任意位置出现 sk- / JWT / AKIA / GitHub PAT /
+*     PEM 私钥 / Bearer / URL query 的敏感参数值 → 替换。
+*
+* 幂等性：替换产物 `***REDACTED***` 不匹配任何模式，重复 redact 结果不变；
+* JSON 行的引号结构保留（输出仍是合法 JSON）。
+*/
+const REDACTED = "***REDACTED***";
+const JSON_FIELD_RE = /"([A-Za-z0-9_.\-]+)"\s*:\s*"([^"]*)"/g;
+/** kv 值到空白/逗号/分号/&（& 截断：避免吞掉 URL query 的后续参数） */
+const KV_FIELD_RE = /([A-Za-z0-9_.\-]+)\s*=\s*([^\s,;&]+)/g;
+/** colon 值允许空格（如 `Authorization: Bearer xyz`），到逗号/分号/右大括号截断 */
+const COLON_FIELD_RE = /([A-Za-z0-9_.\-]+)\s*:\s*([^,;}]+)/g;
+const VALUE_PATTERNS = [
+	{
+		name: "openai-key",
+		re: /sk-[A-Za-z0-9_-]{8,}/g
+	},
+	{
+		name: "jwt",
+		re: /eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g
+	},
+	{
+		name: "aws-access-key",
+		re: /AKIA[0-9A-Z]{16}/g
+	},
+	{
+		name: "github-token",
+		re: /gh[pousr]_[A-Za-z0-9]{20,}/g
+	},
+	{
+		name: "github-pat",
+		re: /github_pat_[A-Za-z0-9_]{20,}/g
+	},
+	{
+		name: "pem-private-key",
+		re: /-----BEGIN [A-Za-z0-9 ]*PRIVATE KEY-----/g
+	},
+	{
+		name: "bearer-token",
+		re: /Bearer [A-Za-z0-9._~+/=-]{8,}/g
+	}
+];
+/** URL query 中的敏感参数值（保留参数名，只替换值） */
+const URL_QUERY_RE = /([?&](?:token|api[_-]?key|key|secret|access[_-]?token|password|auth)=)([^&\s"']+)/gi;
+function replaceSensitiveField(text, re, blacklist) {
+	return text.replace(re, (match, field, value) => {
+		if (!isSensitiveFieldName(field, blacklist)) return match;
+		if (value === "") return match;
+		const idx = match.lastIndexOf(value);
+		return match.slice(0, idx) + REDACTED + match.slice(idx + value.length);
+	});
+}
+/**
+* 文本脱敏（幂等）。blacklist 为**附加**规范化字段名（小写无分隔符，如 'clientsecret'）。
+* 输出仍保留结构化形态（JSON 行合法）。
+*/
+function redact(text, blacklist = []) {
+	let out = text;
+	out = replaceSensitiveField(out, JSON_FIELD_RE, blacklist);
+	out = replaceSensitiveField(out, KV_FIELD_RE, blacklist);
+	out = replaceSensitiveField(out, COLON_FIELD_RE, blacklist);
+	for (const { re } of VALUE_PATTERNS) {
+		re.lastIndex = 0;
+		out = out.replace(re, REDACTED);
+	}
+	out = out.replace(URL_QUERY_RE, `$1${REDACTED}`);
+	return out;
+}
+//#endregion
+//#region src/ui/errors.ts
+/**
+* 可操作错误模型（规范 §23，m6-ui）。
+*
+* 绝不只有 "Something went wrong."：
+*  - 解析错误 → Reason + Suggested action（可操作）；
+*  - 输出前强制脱敏（redact），Secret 永不进入 UI/日志。
+*/
+const ERROR_RULES = [
+	{
+		match: (m) => /SETTINGS_CONFLICT|revision.*conflict/i.test(m),
+		title: "配置已被并发修改",
+		suggestedAction: "目标 DSH 的该配置在导入期间被其他进程修改，为避免覆盖请重新导出或手动核对后再试。",
+		retryable: true
+	},
+	{
+		match: (m) => /ImportNotConfirmed|未确认/i.test(m),
+		title: "导入未确认",
+		suggestedAction: "请在预览页确认导入内容后重试。",
+		retryable: true
+	},
+	{
+		match: (m) => /backup integrity|完整性校验失败|checksum/i.test(m),
+		title: "备份完整性校验失败",
+		suggestedAction: "备份文件可能已损坏或被篡改，请重新导出备份后再试。",
+		retryable: false
+	},
+	{
+		match: (m) => /schema.*(不支持|超出)|无法导入|Unsupported/i.test(m),
+		title: "备份格式版本不受支持",
+		suggestedAction: "请升级 DSH Config Manager 或使用相同版本的备份文件。",
+		retryable: false
+	},
+	{
+		match: (m) => /ENOENT|not found|无法读取|不存在/i.test(m),
+		title: "文件或路径不存在",
+		suggestedAction: "请检查文件路径是否正确、文件是否已被移动或删除。",
+		retryable: true
+	},
+	{
+		match: (m) => /EACCES|permission|权限/i.test(m),
+		title: "权限不足",
+		suggestedAction: "请检查目标目录的读写权限后重试。",
+		retryable: true
+	},
+	{
+		match: (m) => /install.*(plugin|插件)|needsRestart|重启/i.test(m),
+		title: "插件安装需要重启生效",
+		suggestedAction: "导入已完成，插件将在重启 DSH 后生效；请在 DSH Desktop 中重启服务。",
+		retryable: false
+	}
+];
+/** 将任意错误转换为可操作错误（消息已脱敏，不泄漏 Secret） */
+function toActionableError(err, opts) {
+	const message = redact(err instanceof Error ? err.message : String(err ?? "未知错误"));
+	const rule = ERROR_RULES.find((r) => r.match(message));
+	return {
+		title: rule?.title ?? opts?.fallbackTitle ?? "操作失败",
+		reason: message,
+		suggestedAction: rule?.suggestedAction,
+		item: opts?.item !== void 0 ? redact(opts.item) : void 0,
+		retryable: rule?.retryable ?? true
+	};
+}
+/** 格式化为用户可读的多行文本（Reason / Suggested action） */
+function formatActionableError(e) {
+	const lines = [e.title];
+	lines.push(`Reason: ${e.reason}`);
+	if (e.suggestedAction) lines.push(`Suggested action: ${e.suggestedAction}`);
+	if (e.item) lines.push(`Item: ${e.item}`);
+	return lines.join("\n");
+}
+//#endregion
+//#region src/client/common/ErrorBanner.tsx
+/**
+* 可操作错误展示（规范 §23，绑 src/ui/errors.ts）。
+*
+* 安全约束：**强制 redact 不泄 Secret** —— 展示前对错误消息、关联项文本
+* 统一过 `redact()`（字段名黑名单 + sk-/JWT/PEM/Bearer 等值形状模式），
+* 渲染结果只含 Reason / Suggested action / Item，绝不出现密钥原文。
+*/
+/**
+* 错误横幅：toActionableError 解析为标题 + 原因 + 建议动作，
+* 文本在渲染前再经 redact() 兜底（双保险），Reason 以等宽块展示。
+*/
+function ErrorBanner({ error, onRetry, retrying }) {
+	const [actionable] = (0, react.useState)(() => toActionableError(error));
+	const reason = redact(actionable.reason);
+	const item = actionable.item !== void 0 ? redact(actionable.item) : void 0;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.errorBanner,
+		role: "alert",
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.errorTitle,
+				children: redact(actionable.title)
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+				className: config_manager_module_css_default.errorReason,
+				children: reason
+			}),
+			actionable.suggestedAction !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: config_manager_module_css_default.errorAction,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: config_manager_module_css_default.errorActionLabel,
+						children: "→"
+					}),
+					" ",
+					redact(actionable.suggestedAction)
+				]
+			}),
+			item !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.errorItem,
+				children: item
+			}),
+			actionable.retryable && onRetry !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.errorFooter,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+					variant: "primary",
+					onClick: onRetry,
+					disabled: retrying === true,
+					children: retrying === true ? "…" : "Retry"
+				})
+			})
+		]
+	});
+}
+/** 多行错误文本展示（Wizard.errors 数组用；同样强制 redact） */
+function ErrorList({ errors }) {
+	if (errors.length === 0) return null;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: config_manager_module_css_default.errorList,
+		children: errors.map((line, i) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+			className: config_manager_module_css_default.errorLine,
+			children: redact(line)
+		}, i))
+	});
+}
+//#endregion
+//#region src/client/common/ProgressBar.tsx
+/**
+* 进度条（规范 §29，绑 src/ui/progress.ts）。
+*
+* 控制器（ExportFlow / ImportWizard）在调用 core 前后发出 ProgressEvent，
+* 本组件按 stage 文案 + step/total 渲染进度条；未知阶段回退显示 id 本身。
+*/
+/**
+* 进度条：阶段文字 + 百分比（有 step/total 时计算，否则不定态动画）。
+*/
+function ProgressBar({ event, active }) {
+	const percent = event !== null && event.step !== void 0 && event.total !== void 0 && event.total > 0 ? Math.round(event.step / event.total * 100) : null;
+	const label = event !== null ? stageText(event.stage) : "";
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.progressBlock,
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.progressMeta,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: config_manager_module_css_default.progressLabel,
+					children: label
+				}),
+				event?.detail !== void 0 && event.detail !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: config_manager_module_css_default.progressDetail,
+					children: event.detail
+				}),
+				percent !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: config_manager_module_css_default.progressPercent,
+					children: [percent, "%"]
+				})
+			]
+		}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			className: config_manager_module_css_default.progressTrack,
+			children: percent !== null ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: `${config_manager_module_css_default.progressBar} ${active ? "" : config_manager_module_css_default.progressBarDone}`,
+				style: { width: `${percent}%` }
+			}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { className: `${config_manager_module_css_default.progressBar} ${config_manager_module_css_default.progressIndeterminate}` })
+		})]
+	});
+}
+//#endregion
+//#region src/client/common/ReportView.tsx
+/** 导入分区的统计徽章（由 report.importSectionStats 计算） */
+function SectionStatBadges({ result }) {
+	const stats = importSectionStats(result.executed);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: config_manager_module_css_default.statRow,
+		children: stats.map((s) => {
+			let kind = "ok";
+			if (s.failed > 0) kind = "error";
+			else if (s.skipped > 0) kind = "warn";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+				kind,
+				children: [
+					s.section,
+					": ",
+					s.ok,
+					"✓",
+					s.skipped > 0 ? ` ${s.skipped}≈` : "",
+					s.failed > 0 ? ` ${s.failed}✗` : ""
+				]
+			}, s.section);
+		})
+	});
+}
+/** 导出报告的安全摘要（Included / Excluded / Security 徽章） */
+function ExportSummary({ report }) {
+	const included = report.included.length;
+	const excluded = report.excluded.length;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.statRow,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+				kind: "ok",
+				children: [included, " included"]
+			}),
+			excluded > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+				kind: "warn",
+				children: [excluded, " excluded"]
+			}),
+			report.security.containsSecrets && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+				kind: "warn",
+				children: "encrypted"
+			}),
+			!report.security.containsSecrets && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+				kind: "ok",
+				children: "no secrets"
+			}),
+			report.security.redactedHits > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+				kind: "error",
+				children: [report.security.redactedHits, " redacted"]
+			})
+		]
+	});
+}
+/**
+* 结果报告视图。
+* 文本详情 = report.ts 渲染器的输出（已脱敏），展示前再过 redact() 双保险；
+* 以 <pre> 等宽块呈现保持对齐。
+*/
+function ReportView({ kind, exportReport, importResult, onAction, onDownload }) {
+	const actions = kind === "import" && importResult !== void 0 ? suggestedActions(importResult) : [];
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.reportView,
+		children: [kind === "export" && exportReport !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExportSummary, { report: exportReport }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+				className: config_manager_module_css_default.reportText,
+				children: redact(renderExportReport(exportReport))
+			}),
+			onDownload !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.reportFooter,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+					variant: "primary",
+					onClick: onDownload,
+					children: "Download"
+				})
+			})
+		] }), kind === "import" && importResult !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionStatBadges, { result: importResult }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+				className: config_manager_module_css_default.reportText,
+				children: redact(renderImportReport(importResult))
+			}),
+			importResult.rollback !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: config_manager_module_css_default.rollbackBox,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: "Rollback" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+					className: config_manager_module_css_default.reportText,
+					children: redact(renderRollbackReport(importResult.rollback))
+				})]
+			}),
+			actions.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.reportFooter,
+				children: actions.map((a) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+					variant: a === "done" ? "primary" : "ghost",
+					onClick: () => onAction?.(a),
+					children: a
+				}, a))
+			})
+		] })]
+	});
+}
+//#endregion
+//#region src/client/export/ExportView.tsx
+/**
+* 导出视图（规范 §1 / §21，绑 src/ui/export-flow.ts 的 ExportFlow 控制器）。
+*
+* - Quick：一键导出推荐分区（ExportFlow.quickSelection()）；
+* - Custom：按 §1 分组目录（EXPORT_GROUPS × DEFAULT_CATEGORIES）逐项勾选，
+*   ExportFlow.validateSelection() 给出设备相关分区警告；
+* - Include secrets：可选加密备份（需设置加密密码，密码仅本次内存使用，
+*   经 api.exportPassword 随请求体传给 Host 半，绝不落盘/入 manifest）；
+* - 进度：ExportFlow.run 发出 ProgressEvent → ProgressBar；
+* - 结果：ReportView(export) + 下载按钮（File System Access API 流式落盘）。
+*/
+/** Custom 模式的初始勾选 = 推荐分区（可再调整） */
+function defaultCustomSelection() {
+	return DEFAULT_CATEGORIES.filter((c) => c.defaultIncluded).map((c) => c.id);
+}
+/**
+* 导出主视图：Quick/Custom 切换 → 勾选/密码 → 执行 → 进度 → 报告 → 下载。
+*/
+function ExportView({ api, t }) {
+	const [mode, setMode] = (0, react.useState)("quick");
+	const [selection, setSelection] = (0, react.useState)(defaultCustomSelection);
+	const [includeSecrets, setIncludeSecrets] = (0, react.useState)(false);
+	const [password, setPassword] = (0, react.useState)("");
+	const [passwordConfirm, setPasswordConfirm] = (0, react.useState)("");
+	const [running, setRunning] = (0, react.useState)(false);
+	const [progress, setProgress] = (0, react.useState)(null);
+	const [result, setResult] = (0, react.useState)(null);
+	const [error, setError] = (0, react.useState)(null);
+	const [downloaded, setDownloaded] = (0, react.useState)(false);
+	const [flow] = (0, react.useState)(() => new ExportFlow({
+		port: api,
+		onProgress: (event) => {
+			setProgress(event);
+		}
+	}));
+	const toggleSection = (0, react.useCallback)((id, checked) => {
+		setSelection((prev) => {
+			const has = prev.includes(id);
+			if (checked && !has) return [...prev, id];
+			if (!checked && has) return prev.filter((s) => s !== id);
+			return prev;
+		});
+	}, []);
+	const passwordInvalid = includeSecrets && (password === "" || password !== passwordConfirm);
+	/** 执行导出（Quick 或 Custom） */
+	const runExport = async () => {
+		if (passwordInvalid) return;
+		setRunning(true);
+		setError(null);
+		setResult(null);
+		setDownloaded(false);
+		setProgress(null);
+		try {
+			api.exportPassword = includeSecrets ? password : null;
+			const run = await flow.run(mode, selection, { includeSecrets });
+			setResult(run);
+		} catch (err) {
+			setError(err);
+		} finally {
+			setRunning(false);
+			setProgress(null);
+		}
+	};
+	/** 下载导出的 ZIP 到本机 */
+	const download = async () => {
+		if (result === null) return;
+		try {
+			setError(null);
+			await api.download(result.zipPath);
+			setDownloaded(true);
+		} catch (err) {
+			setError(err);
+		}
+	};
+	const customWarnings = mode === "custom" ? flow.validateSelection(selection).warnings : [];
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.viewBody,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, {
+				title: t("view.export"),
+				subtitle: t("section.description")
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: config_manager_module_css_default.modeTabs,
+				role: "tablist",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					role: "tab",
+					"aria-selected": mode === "quick",
+					"data-active": mode === "quick" ? "" : void 0,
+					className: config_manager_module_css_default.modeTab,
+					onClick: () => {
+						setMode("quick");
+					},
+					children: t("export.mode.quick")
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					role: "tab",
+					"aria-selected": mode === "custom",
+					"data-active": mode === "custom" ? "" : void 0,
+					className: config_manager_module_css_default.modeTab,
+					onClick: () => {
+						setMode("custom");
+					},
+					children: t("export.mode.custom")
+				})]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.modeHint,
+				children: mode === "quick" ? t("export.mode.quickHint") : t("export.mode.customHint")
+			}),
+			mode === "custom" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.groupList,
+				children: EXPORT_GROUPS.map((group) => {
+					const categories = flow.categories.filter((c) => c.group === group.id);
+					if (categories.length === 0) return null;
+					return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Card, {
+						className: config_manager_module_css_default.groupCard,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: config_manager_module_css_default.groupHeader,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: config_manager_module_css_default.groupLabel,
+								children: group.label
+							}), group.note !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: config_manager_module_css_default.groupNote,
+								children: group.note
+							})]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: config_manager_module_css_default.groupItems,
+							children: categories.map((cat) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Checkbox, {
+								checked: selection.includes(cat.id),
+								onChange: (checked) => {
+									toggleSection(cat.id, checked);
+								},
+								label: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									className: config_manager_module_css_default.categoryItem,
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: config_manager_module_css_default.categoryName,
+											children: cat.label
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: config_manager_module_css_default.categoryDesc,
+											children: cat.description
+										}),
+										cat.portability !== "portable" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+											kind: cat.portability === "deviceSpecific" ? "warn" : "info",
+											children: cat.portability
+										}),
+										cat.sensitive === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+											kind: "warn",
+											children: "secret"
+										})
+									]
+								})
+							}, cat.id))
+						})]
+					}, group.id);
+				})
+			}),
+			customWarnings.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Banner, {
+				kind: "warn",
+				children: [t("export.selectionWarnings"), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+					className: config_manager_module_css_default.warnList,
+					children: customWarnings.map((w, i) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: w }, i))
+				})]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Card, {
+				className: config_manager_module_css_default.optionsCard,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Checkbox, {
+						checked: includeSecrets,
+						onChange: setIncludeSecrets,
+						label: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: config_manager_module_css_default.categoryName,
+							children: t("export.includeSecrets")
+						})
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: config_manager_module_css_default.hint,
+						children: t("export.includeSecretsHint")
+					}),
+					includeSecrets && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: config_manager_module_css_default.secretFields,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: config_manager_module_css_default.field,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: config_manager_module_css_default.fieldLabel,
+									children: t("export.password")
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "password",
+									className: config_manager_module_css_default.input,
+									value: password,
+									onChange: (e) => {
+										setPassword(e.target.value);
+									}
+								})]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: config_manager_module_css_default.field,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: config_manager_module_css_default.fieldLabel,
+									children: t("export.passwordConfirm")
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "password",
+									className: config_manager_module_css_default.input,
+									value: passwordConfirm,
+									onChange: (e) => {
+										setPasswordConfirm(e.target.value);
+									}
+								})]
+							}),
+							password !== "" && password !== passwordConfirm && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: config_manager_module_css_default.formError,
+								children: t("export.passwordMismatch")
+							}),
+							password === "" && includeSecrets && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: config_manager_module_css_default.formError,
+								children: t("export.passwordRequired")
+							})
+						]
+					})
+				]
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.actionRow,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+					variant: "primary",
+					disabled: running || passwordInvalid,
+					onClick: () => {
+						runExport();
+					},
+					children: running ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Spinner, { label: t("export.running") }) : t("export.run")
+				})
+			}),
+			running && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProgressBar, {
+				event: progress,
+				active: true
+			}),
+			error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, {
+				error,
+				onRetry: () => {
+					runExport();
+				},
+				retrying: running
+			}),
+			result !== null && !running && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ReportView, {
+				kind: "export",
+				exportReport: result.report,
+				onDownload: () => {
+					download();
+				}
+			}), downloaded && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Banner, {
+				kind: "ok",
+				children: ["Saved: ", result.report.file.name]
+			})] })
+		]
+	});
+}
+//#endregion
+//#region src/ui/import-wizard.ts
+var ImportWizard = class {
+	port;
+	onProgress;
+	tracker;
+	step = "select";
+	zipPath = null;
+	analysis = null;
+	plan = null;
+	result = null;
+	rollbackOnError;
+	errors = [];
+	decisions = {
+		strategy: "merge",
+		resolutions: {},
+		pathMappings: []
+	};
+	secretInputs = {};
+	constructor(opts) {
+		this.port = opts.port;
+		this.onProgress = opts.onProgress;
+		this.tracker = new ProgressTracker(IMPORT_STAGES, this.onProgress);
+		this.rollbackOnError = opts.defaultRollbackOnError ?? true;
+	}
+	/** 当前状态快照（React 绑定 / 测试断言用） */
+	snapshot() {
+		return {
+			step: this.step,
+			zipPath: this.zipPath,
+			analysis: this.analysis,
+			plan: this.plan,
+			result: this.result,
+			rollbackOnError: this.rollbackOnError,
+			errors: [...this.errors]
+		};
+	}
+	get currentStep() {
+		return this.step;
+	}
+	/** 步骤 1-2：选 ZIP → Analyzing → Compatibility（analyzeImport 零写入） */
+	async selectZip(path) {
+		this.zipPath = path;
+		this.step = "analyzing";
+		this.tracker.emit("validating");
+		this.errors = [];
+		try {
+			this.analysis = await this.port.analyzeImport(path);
+			this.tracker.emit("checking-compatibility");
+			if (!this.analysis.valid) {
+				this.errors.push(...this.analysis.errors.map((e) => formatActionableError(toActionableError(new Error(e)))));
+				throw new Error(this.analysis.errors.join("; ") || "备份分析失败");
+			}
+			this.step = "compatibility";
+			return this.analysis;
+		} catch (err) {
+			if (this.errors.length === 0) this.errors.push(formatActionableError(toActionableError(err)));
+			throw err;
+		}
+	}
+	/** 步骤 3→4：用户确认兼容性后进入 Preview（Dry Run：用当前决策生成计划摘要，零写入） */
+	async confirmCompatibility() {
+		if (this.analysis === null || this.zipPath === null) throw new Error("尚未完成分析，请先选择备份文件");
+		this.plan = await this.port.createImportPlan(this.zipPath, this.decisions);
+		this.step = "preview";
+		return this.plan;
+	}
+	/** 更新全局冲突策略（merge/replace/skipExisting，规范 §11） */
+	setStrategy(strategy) {
+		this.decisions = {
+			...this.decisions,
+			strategy
+		};
+	}
+	/** 设置逐项冲突决策（keepCurrent/useImported/review） */
+	setResolutions(resolutions) {
+		this.decisions = {
+			...this.decisions,
+			resolutions
+		};
+	}
+	/** 设置路径映射（§12） */
+	setPathMappings(mappings) {
+		this.decisions = {
+			...this.decisions,
+			pathMappings: mappings
+		};
+	}
+	/** 设置秘密补录值（仅内存，绝不持久化） */
+	setSecretInputs(inputs) {
+		this.secretInputs = inputs;
+	}
+	/** Preview 摘要（规范 §10 数值化；基于当前 plan 与 analysis） */
+	previewSummary() {
+		const items = this.plan?.items ?? [];
+		const analysis = this.analysis;
+		const count = (kinds) => items.filter((i) => kinds.includes(i.kind)).length;
+		return {
+			willChange: count([
+				"Create",
+				"Update",
+				"Install",
+				"Conflict"
+			]),
+			unchanged: count(["Skip"]),
+			settingsUpdates: count(["Create", "Update"]),
+			pluginsInstalled: analysis?.pluginSummary.installed ?? 0,
+			pluginsToInstall: count(["Install"]),
+			mcpAdds: items.filter((i) => i.adapter === "mcp" && i.kind === "Create").length,
+			prompts: items.filter((i) => i.adapter === "prompts" && i.kind !== "Skip").length,
+			pathMappingsNeeded: analysis?.pathIssues.length ?? 0,
+			secretsNeeded: this.plan?.missingSecrets.length ?? analysis?.secretCount ?? 0,
+			conflicts: count(["Conflict"]),
+			needsRestart: this.plan?.needsRestart ?? false
+		};
+	}
+	/** 冲突项（供 ConflictCollector 使用） */
+	conflictItems() {
+		return (this.plan?.items ?? []).filter((i) => i.kind === "Conflict");
+	}
+	/** 设置回滚策略（场景 E 选择；执行前调用） */
+	setRollbackOnError(enable) {
+		this.rollbackOnError = enable;
+	}
+	/**
+	* 步骤 10-14：确认导入 → 快照 → 执行 → 校验 → 结果。
+	* 用最终决策重建计划（与预览一致），显式传 rollbackOnError。
+	*/
+	async execute(opts) {
+		if (this.zipPath === null || this.analysis === null) throw new Error("尚未完成分析，请先选择备份文件");
+		if (opts.confirm !== true) throw new Error("导入未确认：必须确认后才允许修改任何数据");
+		const rollbackOnError = opts.rollbackOnError ?? this.rollbackOnError;
+		this.step = "importing";
+		this.tracker.emit("creating-snapshot");
+		try {
+			this.plan = await this.port.createImportPlan(this.zipPath, this.decisions);
+			this.tracker.emit("restoring-settings");
+			this.tracker.emit("restoring-plugins");
+			this.tracker.emit("restoring-mcp");
+			this.tracker.emit("validating-config");
+			this.result = await this.port.executeImportPlan(this.zipPath, this.plan, {
+				confirm: true,
+				secretInputs: this.secretInputs,
+				rollbackOnError
+			});
+			if (!this.result.ok && this.result.rollback) this.tracker.emit("rolling-back");
+			this.tracker.emit("done");
+			this.step = "result";
+			return this.result;
+		} catch (err) {
+			this.errors.push(formatActionableError(toActionableError(err)));
+			throw err;
+		}
+	}
+	/** 重置向导（可复用实例开始新导入） */
+	reset() {
+		this.step = "select";
+		this.zipPath = null;
+		this.analysis = null;
+		this.plan = null;
+		this.result = null;
+		this.errors = [];
+		this.decisions = {
+			strategy: "merge",
+			resolutions: {},
+			pathMappings: []
+		};
+		this.secretInputs = {};
+	}
+};
+//#endregion
+//#region src/ui/conflict-view.ts
+var ConflictCollector = class {
+	plan;
+	decisions = /* @__PURE__ */ new Map();
+	constructor(plan) {
+		this.plan = plan;
+	}
+	/** 需要用户决策的冲突项（kind === 'Conflict'） */
+	get conflicts() {
+		return this.plan.items.filter((i) => i.kind === "Conflict");
+	}
+	/** 设置某项决策；未出现在冲突列表中的 id 忽略并返回 false */
+	resolve(itemId, resolution) {
+		if (!this.conflicts.some((i) => i.id === itemId)) return false;
+		this.decisions.set(itemId, resolution);
+		return true;
+	}
+	/** 单项当前决策（未决策返回 null） */
+	decisionOf(itemId) {
+		return this.decisions.get(itemId) ?? null;
+	}
+	/** 仍未解决（review 或未决策）的冲突项 */
+	unresolved() {
+		return this.conflicts.filter((i) => {
+			const d = this.decisions.get(i.id);
+			return d === void 0 || d === "review";
+		});
+	}
+	get hasUnresolved() {
+		return this.unresolved().length > 0;
+	}
+	/** 转 core 决策表（供 createImportPlan / executeImportPlan 使用） */
+	toResolutions() {
+		const out = {};
+		for (const [id, res] of this.decisions) out[id] = res;
+		return out;
+	}
+	/** 构造视图项列表（React 绑定用）：含当前/导入摘要占位 */
+	viewItems() {
+		return this.conflicts.map((item) => ({
+			item,
+			currentSummary: item.detail?.split("\n")[0],
+			importedSummary: void 0,
+			resolution: this.decisionOf(item.id)
+		}));
+	}
+};
+//#endregion
+//#region src/client/import/ConflictList.tsx
+/**
+* 冲突决策列表（规范 §11，绑 src/ui/conflict-view.ts 的 ConflictCollector）。
+*
+* 渲染 plan 中 kind === 'Conflict' 的项，用户逐项选择
+* Keep Current / Use Imported / Review；决策实时写入 collector，
+* 完成时父组件调用 collector.toResolutions() → wizard.setResolutions()。
+*/
+const RESOLUTION_OPTIONS = [
+	{
+		value: "keepCurrent",
+		key: "import.conflicts.keepCurrent"
+	},
+	{
+		value: "useImported",
+		key: "import.conflicts.useImported"
+	},
+	{
+		value: "review",
+		key: "import.conflicts.review"
+	}
+];
+/** 冲突项决策列表 */
+function ConflictList({ collector, t, onChanged }) {
+	const [tick, setTick] = (0, react.useState)(0);
+	const items = collector.viewItems();
+	const unresolved = collector.unresolved().length;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.conflictList,
+		children: [
+			unresolved > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Banner, {
+				kind: "warn",
+				children: t("import.conflicts.unresolved", { count: String(unresolved) })
+			}),
+			items.map((view) => {
+				const item = view.item;
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.conflictItem,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: config_manager_module_css_default.conflictHead,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: config_manager_module_css_default.conflictId,
+								children: [
+									item.adapter,
+									": ",
+									item.description
+								]
+							}), item.severity === "error" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: config_manager_module_css_default.severityError,
+								children: "error"
+							})]
+						}),
+						item.detail !== void 0 && item.detail !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+							className: config_manager_module_css_default.conflictDetail,
+							children: item.detail
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: config_manager_module_css_default.conflictOptions,
+							children: RESOLUTION_OPTIONS.map((opt) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: config_manager_module_css_default.radioLabel,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "radio",
+									name: `conflict-${item.id}`,
+									checked: view.resolution === opt.value,
+									onChange: () => {
+										collector.resolve(item.id, opt.value);
+										setTick((v) => v + 1);
+										onChanged();
+									}
+								}), t(opt.key)]
+							}, opt.value))
+						})
+					]
+				}, item.id);
+			}),
+			items.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.empty,
+				children: "No conflicts"
+			}),
+			void 0
+		]
+	});
+}
+//#endregion
+//#region src/client/import/PathMappingForm.tsx
+/**
+* 路径映射表单（规范 §12，绑 src/ui/types.ts 的 PathMappingDraft 形状）。
+*
+* 注意：src/ui/path-mapping.ts 的 PathMappingEditor 依赖 utils/paths.ts 的
+* applyPrefixMappings（node:path）——浏览器 bundle 不可用，故此处做轻量等价实现：
+* 输入输出形状与 core 的 PathMapping 完全一致（oldPrefix/newPrefix/appliesTo），
+* 实际前缀替换由 Host 侧 core 在 createImportPlan 阶段执行，本组件只负责收集用户输入。
+*/
+/**
+* 路径映射表单：每条 PathIssue 一行（原路径 → 新路径输入框），
+* 留空 = 该路径不映射（unresolved）；填写 = 输出 core PathMapping[]。
+*/
+function PathMappingForm({ issues, initial, t, onChange }) {
+	const [drafts, setDrafts] = (0, react.useState)(() => {
+		const out = {};
+		for (const m of initial ?? []) out[m.oldPrefix] = m.newPrefix;
+		return out;
+	});
+	const setNewPrefix = (oldPrefix, value) => {
+		const next = {
+			...drafts,
+			[oldPrefix]: value
+		};
+		setDrafts(next);
+		onChange(Object.entries(next).filter(([, v]) => v !== "").map(([oldPrefix, newPrefix]) => ({
+			oldPrefix,
+			newPrefix,
+			appliesTo: []
+		})));
+	};
+	const unresolved = (0, react.useMemo)(() => {
+		return issues.filter((issue) => (drafts[issue.value] ?? "") === "");
+	}, [issues, drafts]);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.pathMappingList,
+		children: [
+			unresolved.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Banner, {
+				kind: "warn",
+				children: t("import.paths.unresolved", { count: String(unresolved.length) })
+			}),
+			issues.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.empty,
+				children: "No paths to map"
+			}),
+			issues.map((issue) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: config_manager_module_css_default.pathRow,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.pathOld,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: config_manager_module_css_default.fieldLabel,
+							children: t("import.paths.old")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+							className: config_manager_module_css_default.pathValue,
+							children: issue.value
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: config_manager_module_css_default.pathIssueKind,
+							children: issue.kind
+						})
+					]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.pathNew,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: config_manager_module_css_default.fieldLabel,
+						children: t("import.paths.new")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						className: config_manager_module_css_default.input,
+						value: drafts[issue.value] ?? "",
+						placeholder: issue.mappedTo ?? "",
+						onChange: (e) => {
+							setNewPrefix(issue.value, e.target.value);
+						}
+					})]
+				})]
+			}, issue.value))
+		]
+	});
+}
+//#endregion
+//#region src/client/import/ImportWizardView.tsx
+/**
+* 导入九步向导（规范 §9 / §10 / §28，绑 src/ui/import-wizard.ts 的 ImportWizard 控制器）。
+*
+* 步骤（对齐 ui/types.ts 的 ImportStep）：
+*   Select ZIP → Analyzing → Compatibility → Preview
+*   → Resolve Conflicts（若有）→ Path Mapping（若有）→ Secrets 补录（若有）
+*   → Confirm → Importing → Result
+*
+* 安全/正确性约束（来自 ImportWizard 与 core）：
+*   - analyzeImport / createImportPlan 零写入（Dry Run 复用）；
+*   - executeImportPlan 必须 confirm=true（core 安全阀）；
+*   - 秘密补录值仅内存（secretInputs），经 HTTPS 请求体传给 Host，绝不落日志/落盘；
+*   - 默认整体回滚（rollbackOnError=true），用户在 Confirm 步可切换。
+*
+* 数据流：本地文件 → api.upload → zipPath → wizard.selectZip/confirmCompatibility/
+*   setResolutions/setPathMappings/setSecretInputs → wizard.execute。
+* 中间阶段（conflicts/path-mapping/secrets）是 UI 层流程页，wizard 的 decisions 由
+* 对应组件收集后写入。
+*/
+const SCORE_LABEL = {
+	excellent: "Excellent",
+	good: "Good",
+	partial: "Partial",
+	unsupported: "Unsupported"
+};
+/** 密钥补录表单（仅内存收集，值不外泄） */
+function SecretsForm({ missing, t, onChange }) {
+	const [inputs, setInputs] = (0, react.useState)({});
+	const setRef = (ref, value) => {
+		const next = {
+			...inputs,
+			[ref]: value
+		};
+		setInputs(next);
+		onChange(next);
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.secretsList,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.hint,
+				children: t("import.secrets.hint")
+			}),
+			missing.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Empty, { children: "No secrets required" }),
+			missing.map((s) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+				className: config_manager_module_css_default.field,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: config_manager_module_css_default.fieldLabel,
+					children: [
+						s.ref,
+						" ",
+						s.required ? t("import.secrets.required") : t("import.secrets.optional")
+					]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+					type: "password",
+					className: config_manager_module_css_default.input,
+					autoComplete: "off",
+					value: inputs[s.ref] ?? "",
+					onChange: (e) => {
+						setRef(s.ref, e.target.value);
+					}
+				})]
+			}, s.ref))
+		]
+	});
+}
+/**
+* 导入向导主视图。
+*/
+function ImportWizardView({ api, t }) {
+	const [wizard] = (0, react.useState)(() => new ImportWizard({
+		port: api,
+		onProgress: (event) => {
+			setProgress(event);
+		},
+		defaultRollbackOnError: true
+	}));
+	const [, setTick] = (0, react.useState)(0);
+	const refresh = () => {
+		setTick((v) => v + 1);
+	};
+	const [progress, setProgress] = (0, react.useState)(null);
+	const [error, setError] = (0, react.useState)(null);
+	const [phase, setPhase] = (0, react.useState)("preview");
+	const [uploading, setUploading] = (0, react.useState)(false);
+	const [rollbackOnError, setRollbackOnError] = (0, react.useState)(true);
+	const [conflictCollector, setConflictCollector] = (0, react.useState)(null);
+	const [pathMappings, setPathMappings] = (0, react.useState)([]);
+	const [secretInputs, setSecretInputs] = (0, react.useState)({});
+	const fileInput = (0, react.useRef)(null);
+	const snapshot = wizard.snapshot();
+	const step = snapshot.step;
+	const hasConflicts = (snapshot.plan?.items ?? []).some((i) => i.kind === "Conflict");
+	const hasPathIssues = (snapshot.analysis?.pathIssues.length ?? 0) > 0;
+	const hasSecrets = (snapshot.plan?.missingSecrets.length ?? 0) > 0;
+	/** 从某阶段完成后进入的下一个阶段（跳过空阶段；from 之前的阶段不再进入） */
+	const nextPhase = (from) => {
+		if (from !== "conflicts" && hasConflicts) return "conflicts";
+		if (from !== "path-mapping" && hasPathIssues) return "path-mapping";
+		if (from !== "secrets" && hasSecrets) return "secrets";
+		return "confirm";
+	};
+	/** 选择并上传 ZIP → wizard.selectZip（analyzing → compatibility） */
+	const onPickFile = async (file) => {
+		if (file === void 0) return;
+		setUploading(true);
+		setError(null);
+		try {
+			const uploaded = await api.upload(file);
+			await wizard.selectZip(uploaded.zipPath);
+			refresh();
+		} catch (err) {
+			setError(err);
+			refresh();
+		} finally {
+			setUploading(false);
+		}
+	};
+	/** Compatibility → Preview */
+	const goPreview = async () => {
+		setError(null);
+		try {
+			await wizard.confirmCompatibility();
+			refresh();
+		} catch (err) {
+			setError(err);
+			refresh();
+		}
+	};
+	/** 进入 conflicts 阶段（先创建 collector） */
+	const enterConflicts = () => {
+		const plan = snapshot.plan;
+		if (plan !== null && conflictCollector === null) setConflictCollector(new ConflictCollector(plan));
+		setPhase("conflicts");
+	};
+	/** Conflicts 完成：写入决策 → 下一阶段 */
+	const finishConflicts = () => {
+		if (conflictCollector !== null) wizard.setResolutions(conflictCollector.toResolutions());
+		setPhase(nextPhase("conflicts"));
+	};
+	/** Path Mapping 完成：写入映射 → 下一阶段 */
+	const finishPathMapping = () => {
+		wizard.setPathMappings(pathMappings);
+		setPhase(nextPhase("path-mapping"));
+	};
+	/** Secrets 完成：写入补录值 → Confirm */
+	const finishSecrets = () => {
+		wizard.setSecretInputs(secretInputs);
+		setPhase("confirm");
+	};
+	/** Confirm 执行：confirm=true（安全阀）+ 用户回滚策略 */
+	const execute = async () => {
+		setError(null);
+		try {
+			await wizard.execute({
+				confirm: true,
+				rollbackOnError
+			});
+			refresh();
+		} catch (err) {
+			setError(err);
+			refresh();
+		}
+	};
+	/** 重置向导（重新导入） */
+	const resetWizard = () => {
+		wizard.reset();
+		setError(null);
+		setPhase("preview");
+		setConflictCollector(null);
+		setPathMappings([]);
+		setSecretInputs({});
+		refresh();
+	};
+	if (step === "select") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.viewBody,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, {
+				title: t("import.select.title"),
+				subtitle: t("import.select.hint")
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+				ref: fileInput,
+				type: "file",
+				accept: ".zip,application/zip",
+				className: config_manager_module_css_default.hiddenFile,
+				onChange: (e) => {
+					onPickFile(e.target.files?.[0]);
+				}
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.actionRow,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+					variant: "primary",
+					disabled: uploading,
+					onClick: () => {
+						fileInput.current?.click();
+					},
+					children: uploading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Spinner, { label: t("import.analyzing") }) : t("import.select.browse")
+				})
+			}),
+			error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, {
+				error,
+				onRetry: resetWizard
+			})
+		]
+	});
+	if (step === "analyzing") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.viewBody,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProgressBar, {
+				event: progress,
+				active: true
+			}),
+			error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, {
+				error,
+				onRetry: resetWizard
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorList, { errors: snapshot.errors })
+		]
+	});
+	if (step === "compatibility") {
+		const analysis = snapshot.analysis;
+		if (analysis === null) return null;
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.viewBody,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, { title: t("import.compatibility.title") }),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.statRow,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: analysis.compatibility === "unsupported" ? "error" : analysis.compatibility === "partial" ? "warn" : "ok",
+							children: t("import.compatibility.score", { score: SCORE_LABEL[analysis.compatibility] ?? analysis.compatibility })
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+							kind: "info",
+							children: [analysis.sectionsInZip.length, " sections"]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+							kind: "info",
+							children: [
+								"plugins: ",
+								analysis.pluginSummary.installed,
+								"✓ / ",
+								analysis.pluginSummary.toInstall,
+								"✗"
+							]
+						}),
+						analysis.pathIssues.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+							kind: "warn",
+							children: [analysis.pathIssues.length, " paths"]
+						}),
+						analysis.secretCount > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Badge, {
+							kind: "warn",
+							children: [analysis.secretCount, " secrets"]
+						})
+					]
+				}),
+				analysis.warnings.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Banner, {
+					kind: "warn",
+					children: analysis.warnings.map((w, i) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: w }, i))
+				}),
+				error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, {
+					error,
+					onRetry: () => {
+						goPreview();
+					}
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "primary",
+						onClick: () => {
+							goPreview();
+						},
+						children: t("common.next")
+					})
+				})
+			]
+		});
+	}
+	if (step === "preview" && phase === "preview") {
+		const summary = wizard.previewSummary();
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.viewBody,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, { title: t("import.preview.title") }),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.statRow,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: summary.willChange > 0 ? "info" : "ok",
+							children: t("import.preview.willChange", { count: String(summary.willChange) })
+						}),
+						summary.unchanged > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "ok",
+							children: t("import.preview.unchanged", { count: String(summary.unchanged) })
+						}),
+						summary.settingsUpdates > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "info",
+							children: t("import.preview.settings", { count: String(summary.settingsUpdates) })
+						}),
+						summary.pluginsToInstall > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "info",
+							children: t("import.preview.plugins", { count: String(summary.pluginsToInstall) })
+						}),
+						summary.mcpAdds > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "info",
+							children: t("import.preview.mcp", { count: String(summary.mcpAdds) })
+						}),
+						summary.pathMappingsNeeded > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "warn",
+							children: t("import.preview.paths", { count: String(summary.pathMappingsNeeded) })
+						}),
+						summary.secretsNeeded > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "warn",
+							children: t("import.preview.secrets", { count: String(summary.secretsNeeded) })
+						}),
+						summary.conflicts > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Badge, {
+							kind: "error",
+							children: t("import.preview.conflicts", { count: String(summary.conflicts) })
+						})
+					]
+				}),
+				summary.needsRestart && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Banner, {
+					kind: "warn",
+					children: t("import.preview.restart")
+				}),
+				error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, {
+					error,
+					onRetry: () => {
+						goPreview();
+					}
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "primary",
+						onClick: () => {
+							const next = nextPhase("preview");
+							setPhase(next);
+							if (next === "conflicts") enterConflicts();
+						},
+						children: t("common.next")
+					})
+				})
+			]
+		});
+	}
+	if (phase === "conflicts") {
+		if (conflictCollector === null || snapshot.plan === null) return null;
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.viewBody,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, {
+					title: t("import.conflicts.title"),
+					subtitle: t("import.conflicts.hint")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ConflictList, {
+					collector: conflictCollector,
+					t,
+					onChanged: refresh
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "ghost",
+						onClick: () => {
+							setPhase("preview");
+						},
+						children: t("common.back")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "primary",
+						disabled: conflictCollector.hasUnresolved,
+						onClick: finishConflicts,
+						children: t("common.next")
+					})]
+				})
+			]
+		});
+	}
+	if (phase === "path-mapping") {
+		const issues = snapshot.analysis?.pathIssues ?? [];
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.viewBody,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, {
+					title: t("import.paths.title"),
+					subtitle: t("import.paths.hint")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PathMappingForm, {
+					issues,
+					initial: pathMappings,
+					t,
+					onChange: setPathMappings
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "ghost",
+						onClick: () => {
+							setPhase("preview");
+						},
+						children: t("common.back")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "primary",
+						onClick: finishPathMapping,
+						children: t("common.next")
+					})]
+				})
+			]
+		});
+	}
+	if (phase === "secrets") {
+		const missing = snapshot.plan?.missingSecrets ?? [];
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.viewBody,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, { title: t("import.secrets.title") }),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SecretsForm, {
+					missing,
+					t,
+					onChange: setSecretInputs
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "ghost",
+						onClick: () => {
+							setPhase("preview");
+						},
+						children: t("common.back")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "primary",
+						onClick: finishSecrets,
+						children: t("common.next")
+					})]
+				})
+			]
+		});
+	}
+	if (phase === "confirm") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.viewBody,
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Card, {
+			className: config_manager_module_css_default.optionsCard,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Banner, {
+					kind: "info",
+					children: t("import.confirm.warning")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Checkbox, {
+					checked: rollbackOnError,
+					onChange: setRollbackOnError,
+					label: t("import.rollbackOnError")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "ghost",
+						onClick: () => {
+							setPhase("preview");
+						},
+						children: t("common.back")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "primary",
+						onClick: () => {
+							execute();
+						},
+						children: t("import.confirm.execute")
+					})]
+				})
+			]
+		}), error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, {
+			error,
+			onRetry: () => {
+				execute();
+			}
+		})]
+	});
+	if (step === "importing") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.viewBody,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProgressBar, {
+				event: progress,
+				active: true
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: config_manager_module_css_default.hint,
+				children: t("import.importing")
+			}),
+			error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, { error }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorList, { errors: snapshot.errors })
+		]
+	});
+	if (step === "result") {
+		const result = snapshot.result;
+		if (result === null) return null;
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.viewBody,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SectionTitle, { title: t("report.import.title") }),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ReportView, {
+					kind: "import",
+					importResult: result,
+					onAction: (action) => {
+						if (action === "done") resetWizard();
+					}
+				}),
+				result.needsRestart && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Banner, {
+					kind: "warn",
+					children: t("report.needsRestart")
+				}),
+				error !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ErrorBanner, { error }),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: config_manager_module_css_default.actionRow,
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+						variant: "ghost",
+						onClick: resetWizard,
+						children: t("common.done")
+					})
+				})
+			]
+		});
+	}
+	return null;
+}
+//#endregion
+//#region src/client/ConfigManagerSection.tsx
+/**
+* Config Manager 设置页（settings.section 入口的主页面容器）。
+*
+* owner props 由 settings shell 传入（close）；业务面（api）由注册时的
+* inject face 注入；t 由 locale seat 注入。内部两个主视图：
+* Export（Quick/Custom）与 Import（九步向导）。
+*/
+/**
+* 设置页容器：Export / Import 双视图切换。
+*/
+function ConfigManagerSection({ close, api, t }) {
+	const [view, setView] = (0, react.useState)("export");
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: config_manager_module_css_default.section,
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			className: config_manager_module_css_default.sectionHeader,
+			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: config_manager_module_css_default.viewTabs,
+				role: "tablist",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					role: "tab",
+					"aria-selected": view === "export",
+					"data-active": view === "export" ? "" : void 0,
+					className: config_manager_module_css_default.viewTab,
+					onClick: () => {
+						setView("export");
+					},
+					children: t("view.export")
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					role: "tab",
+					"aria-selected": view === "import",
+					"data-active": view === "import" ? "" : void 0,
+					className: config_manager_module_css_default.viewTab,
+					onClick: () => {
+						setView("import");
+					},
+					children: t("view.import")
+				})]
+			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: config_manager_module_css_default.iconButton,
+				title: t("common.close"),
+				"aria-label": t("common.close"),
+				onClick: close,
+				children: "×"
+			})]
+		}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			className: config_manager_module_css_default.sectionBody,
+			children: view === "export" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExportView, {
+				api,
+				t
+			}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ImportWizardView, {
+				api,
+				t
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/client/locales.ts
+/**
+* Config Manager 表面文案：zh 为源语言，en 镜像每个键。
+* 字典 namespace 由 client/index.ts 注册（declare module 合并进 LocaleNamespaceMap）。
+* 键集合通过 `ConfigManagerKey` 类型在注册处做编译期校验（缺键/多键即编译错误）。
+*/
+const zh = {
+	"section.label": "备份与迁移",
+	"section.description": "导出 / 导入 / 迁移 DSH 配置（备份不含密钥，加密备份可选）",
+	"view.export": "导出备份",
+	"view.import": "导入恢复",
+	"common.close": "关闭",
+	"common.cancel": "取消",
+	"common.back": "上一步",
+	"common.next": "下一步",
+	"common.done": "完成",
+	"common.retry": "重试",
+	"common.confirm": "确认",
+	"common.loading": "加载中…",
+	"common.unknownError": "未知错误",
+	"status.ready": "Config Manager 已就绪（插件 {version} · DSH {dsh} · {platform}）",
+	"status.unavailable": "Config Manager 服务未就绪，请确认插件已正确挂载。",
+	"export.mode.quick": "快速导出",
+	"export.mode.quickHint": "一键导出推荐分区（可迁移、不含设备专属数据），适合常规备份。",
+	"export.mode.custom": "自定义导出",
+	"export.mode.customHint": "按分组逐项勾选要导出的分区。",
+	"export.includeSecrets": "包含真实密钥（加密备份）",
+	"export.includeSecretsHint": "勾选后导出将包含密钥，并以密码加密（AES-256-GCM）。密码仅用于本次加密，不会写入备份或任何配置文件。",
+	"export.password": "备份加密密码",
+	"export.passwordConfirm": "确认密码",
+	"export.passwordMismatch": "两次输入的密码不一致",
+	"export.passwordRequired": "包含密钥时必须设置加密密码",
+	"export.run": "开始导出",
+	"export.running": "正在导出…",
+	"export.download": "下载备份文件",
+	"export.selectionWarnings": "以下分区为设备相关数据，跨设备导入时可能不适用：",
+	"export.group.unknown": "其他",
+	"export.included": "已包含",
+	"export.excluded": "未包含",
+	"import.select.title": "选择备份文件",
+	"import.select.hint": "选择本机导出的 dsh-config-*.zip 备份文件开始导入。分析阶段只读，不会修改任何配置。",
+	"import.select.browse": "选择 ZIP 文件",
+	"import.select.file": "已选择：{name}",
+	"import.analyzing": "正在分析备份…",
+	"import.compatibility.title": "兼容性",
+	"import.compatibility.score": "兼容性评分：{score}",
+	"import.compatibility.ok": "备份可导入",
+	"import.compatibility.fail": "备份分析失败：{reason}",
+	"import.preview.title": "导入预览",
+	"import.preview.willChange": "将变更 {count} 项",
+	"import.preview.unchanged": "已一致跳过 {count} 项",
+	"import.preview.settings": "设置更新 {count}",
+	"import.preview.plugins": "插件待安装 {count}",
+	"import.preview.mcp": "MCP 新增 {count}",
+	"import.preview.prompts": "提示词 {count}",
+	"import.preview.paths": "路径映射 {count}",
+	"import.preview.secrets": "密钥待补录 {count}",
+	"import.preview.conflicts": "冲突 {count}",
+	"import.preview.restart": "导入后需重启 DSH 生效",
+	"import.confirm.execute": "确认导入",
+	"import.confirm.warning": "导入将修改当前 DSH 配置；执行前会自动创建安全快照，失败时整体回滚。",
+	"import.rollbackOnError": "失败时整体回滚（推荐）",
+	"import.importing": "正在导入…",
+	"import.secrets.title": "补录密钥",
+	"import.secrets.hint": "以下凭据未随备份导出（安全设计）。如需在目标 DSH 使用，请手动补录；留空将跳过。",
+	"import.secrets.optional": "（可选）",
+	"import.secrets.required": "（必需）",
+	"import.conflicts.title": "解决冲突",
+	"import.conflicts.hint": "以下配置项在目标 DSH 已存在且与备份不同，请逐项决策。",
+	"import.conflicts.keepCurrent": "保留当前",
+	"import.conflicts.useImported": "使用备份",
+	"import.conflicts.review": "稍后决定",
+	"import.conflicts.unresolved": "还有 {count} 项未决策",
+	"import.paths.title": "路径映射",
+	"import.paths.hint": "备份中的绝对路径在目标机器可能不存在，请为每条路径指定新位置（留空将跳过该路径）。",
+	"import.paths.old": "原路径",
+	"import.paths.new": "新路径",
+	"import.paths.unresolved": "还有 {count} 条路径未映射",
+	"report.export.title": "导出完成",
+	"report.import.title": "导入结果",
+	"report.rollback.title": "回滚报告",
+	"report.action.fixIssues": "查看失败项",
+	"report.action.viewDetails": "查看详情",
+	"report.action.done": "完成",
+	"report.needsRestart": "插件 / MCP 变更将在重启 DSH 后生效。",
+	"error.title": "操作失败",
+	"error.hint": "错误消息已自动脱敏，不会泄露任何密钥信息。"
+};
+const en = {
+	"section.label": "Backup & Migration",
+	"section.description": "Export / import / migrate DSH configuration (backups exclude secrets; encrypted backups optional)",
+	"view.export": "Export",
+	"view.import": "Import",
+	"common.close": "Close",
+	"common.cancel": "Cancel",
+	"common.back": "Back",
+	"common.next": "Next",
+	"common.done": "Done",
+	"common.retry": "Retry",
+	"common.confirm": "Confirm",
+	"common.loading": "Loading…",
+	"common.unknownError": "Unknown error",
+	"status.ready": "Config Manager ready (plugin {version} · DSH {dsh} · {platform})",
+	"status.unavailable": "Config Manager service unavailable — verify the plugin is mounted.",
+	"export.mode.quick": "Quick Export",
+	"export.mode.quickHint": "One-click export of recommended sections (portable, no device-specific data) for routine backups.",
+	"export.mode.custom": "Custom Export",
+	"export.mode.customHint": "Select sections per group.",
+	"export.includeSecrets": "Include real secrets (encrypted backup)",
+	"export.includeSecretsHint": "When enabled the backup contains secrets, encrypted with a password (AES-256-GCM). The password is used once and never written into the backup or any config file.",
+	"export.password": "Backup encryption password",
+	"export.passwordConfirm": "Confirm password",
+	"export.passwordMismatch": "Passwords do not match",
+	"export.passwordRequired": "An encryption password is required when including secrets",
+	"export.run": "Start Export",
+	"export.running": "Exporting…",
+	"export.download": "Download backup file",
+	"export.selectionWarnings": "Device-specific sections may not apply on another machine:",
+	"export.group.unknown": "Other",
+	"export.included": "Included",
+	"export.excluded": "Excluded",
+	"import.select.title": "Select Backup File",
+	"import.select.hint": "Pick a dsh-config-*.zip backup exported from DSH to begin. Analysis is read-only and changes nothing.",
+	"import.select.browse": "Choose ZIP file",
+	"import.select.file": "Selected: {name}",
+	"import.analyzing": "Analyzing backup…",
+	"import.compatibility.title": "Compatibility",
+	"import.compatibility.score": "Compatibility score: {score}",
+	"import.compatibility.ok": "The backup can be imported",
+	"import.compatibility.fail": "Backup analysis failed: {reason}",
+	"import.preview.title": "Import Preview",
+	"import.preview.willChange": "{count} item(s) will change",
+	"import.preview.unchanged": "{count} item(s) already identical (skipped)",
+	"import.preview.settings": "{count} settings update(s)",
+	"import.preview.plugins": "{count} plugin(s) to install",
+	"import.preview.mcp": "{count} MCP server(s) added",
+	"import.preview.prompts": "{count} prompt(s)",
+	"import.preview.paths": "{count} path mapping(s) needed",
+	"import.preview.secrets": "{count} secret(s) to re-enter",
+	"import.preview.conflicts": "{count} conflict(s)",
+	"import.preview.restart": "A DSH restart is required after import",
+	"import.confirm.execute": "Confirm Import",
+	"import.confirm.warning": "Import modifies the current DSH configuration; a safety snapshot is created first and everything rolls back on failure.",
+	"import.rollbackOnError": "Roll back everything on failure (recommended)",
+	"import.importing": "Importing…",
+	"import.secrets.title": "Re-enter Secrets",
+	"import.secrets.hint": "These credentials were not exported with the backup (security by design). Enter them manually to use them here; leave blank to skip.",
+	"import.secrets.optional": "(optional)",
+	"import.secrets.required": "(required)",
+	"import.conflicts.title": "Resolve Conflicts",
+	"import.conflicts.hint": "These items already exist on this machine and differ from the backup. Decide per item.",
+	"import.conflicts.keepCurrent": "Keep current",
+	"import.conflicts.useImported": "Use backup",
+	"import.conflicts.review": "Decide later",
+	"import.conflicts.unresolved": "{count} item(s) unresolved",
+	"import.paths.title": "Path Mapping",
+	"import.paths.hint": "Absolute paths in the backup may not exist on this machine. Map each path to a new location (leave blank to skip).",
+	"import.paths.old": "Original path",
+	"import.paths.new": "New path",
+	"import.paths.unresolved": "{count} path(s) unmapped",
+	"report.export.title": "Export Complete",
+	"report.import.title": "Import Result",
+	"report.rollback.title": "Rollback Report",
+	"report.action.fixIssues": "View failures",
+	"report.action.viewDetails": "View details",
+	"report.action.done": "Done",
+	"report.needsRestart": "Plugin / MCP changes take effect after restarting DSH.",
+	"error.title": "Operation failed",
+	"error.hint": "Error messages are auto-redacted and never leak secrets."
+};
+//#endregion
+//#region src/client/index.ts
+/** 本插件拥有的 locale namespace。 */
+const NS = "config-manager";
+/** 必需服务（fiber inject 等待 —— slots/locale 必须先就绪）。 */
+const inject = ["slots", "locale"];
+/**
+* 注册 Config Manager 设置页。
+* @param ctx - client root context（slots + locale 服务）。
+*/
+function apply(ctx) {
+	ctx.effect(() => ctx.locale.register(NS, {
+		zh,
+		en
+	}), "config-manager: dictionaries");
+	const t = ctx.locale.bind(NS);
+	const api = new ConfigManagerApi();
+	ctx.slots.inject("settings.section", () => ctx.slots.register({
+		name: "settings.section",
+		id: "config-manager",
+		order: 60,
+		label: () => t("section.label"),
+		locale: NS,
+		inject: () => ({ api })
+	}, ConfigManagerSection));
+}
+//#endregion
+exports.apply = apply;
+exports.inject = inject;
+
+
+		return module.exports;
+	}
+});
+//# sourceMappingURL=client.js.map