dsh-config-manager 0.1.3 → 0.1.4

package/README.md

@@ -30,7 +30,7 @@ DSH is your AI assistant workbench — it holds your settings: model configs, pl
 | 🚀 | **One-click Export** | Package your recommended config into a ZIP |
 | 📦 | **One-click Import** | Restore your environment on another machine |
 | 👀 | **Preview before import** | Full preview first — **never touches your config silently** |
-| ⚔️ | **Conflict handling** | Keep Current / Use Imported / Review — you decide |
+| ⚔️ | **Conflict handling** | Keep Current / Use Imported — you decide |
 | 🗺️ | **Path auto-mapping** | Detects dead absolute paths and lets you remap them |
 | 🔒 | **Secret safety** | API Keys are never exported; re-enter them after import |
 | ↩️ | **Automatic rollback** | Failed import restores everything automatically |
@@ -66,26 +66,12 @@ It's a standard **DSH plugin** — two steps:
 
 ```bash
 # ① Install the plugin
-dsh plugin --profile web add dsh-config-manager --config.auto-install-peers=false
+dsh plugin --profile web add dsh-config-manager@latest --config.auto-install-peers=false
 
 # ② Restart DSH (a "Backup & Migration" entry appears in Settings)
 ```
 
-> 💡 **Why the flag?** `--config.auto-install-peers=false` skips a few DSH core packages that aren't on the public registry yet (the DSH runtime provides them). Just copy-paste it.
-
-**From source / local package** (for developers):
-
-```bash
-npm run build && npm pack          # produces dsh-config-manager-0.1.2.tgz
-dsh plugin --profile web add file:/absolute/path/dsh-config-manager-0.1.2.tgz
-```
-
-> 🧪 **Try it without touching your real environment?** Use an isolated `DSH_HOME`:
-> ```bash
-> $env:DSH_HOME = "D:\tmp\dsh-home"   # Windows PowerShell
-> dsh plugin --profile test add dsh-config-manager --config.auto-install-peers=false
-> dsh --profile test --dump-config | Select-String config-manager
-> ```
+> 💡 Just copy-paste the command: `--config.auto-install-peers=false` skips a few DSH core packages that aren't on the public registry yet (the DSH runtime provides them), and `@latest` ensures you get the newest build.
 
 ---
 
@@ -144,7 +130,8 @@ When the target already has a same-named item, you choose:
 |---|---|
 | **Keep Current** | Leave the target's config untouched |
 | **Use Imported** | Overwrite with the backup's value |
-| **Review** | Skip for now, handle later |
+
+> Note: a "decide later / review" option is intentionally **not** offered — an undecided conflict would block the import from proceeding. Every conflict must be resolved before continuing.
 
 ### 🗺️ Path mapping
 
@@ -167,27 +154,6 @@ Save multiple configurations (Work / Personal) and switch anytime; switching inc
 
 ---
 
-## 📦 What's inside a backup?
-
-```
-dsh-config-2026-08-14.zip
-├── manifest.json              # backup manifest: version / source / time / sections
-├── config/
-│   ├── settings.json          # settings (redacted)
-│   └── ui.json                # UI preferences
-├── ai/providers.json          # AI providers / models
-├── plugins/                   # plugin manifest (binaries are never packaged)
-├── mcp/servers.json           # MCP server configs
-├── custom/                    # prompts / skills
-├── agents/presets/            # agent presets
-├── workspaces/                # workspaces
-├── security/credentials.json  # credential state (no values)
-├── security/secrets.enc       # encrypted backups only
-└── integrity/checksums.json   # SHA-256 checksums
-```
-
----
-
 ## 🛡️ Security
 
 - **The default backup contains no secret values** — a hard invariant, enforced at export
@@ -228,62 +194,15 @@ No. Items are deduplicated by stable IDs (plugin ID / MCP name / skill name…);
 
 ---
 
-## 👨‍💻 For developers
-
-```bash
-npm install --legacy-peer-deps   # install dependencies
-npm run typecheck                # type checking
-npm run build                    # build (host lib/ + client bundle)
-npm test                         # run tests (192)
-npm run bundle                   # rebuild the client bundle only
-```
-
-**Architecture**: the core engine is decoupled from the DSH runtime (mock-testable) → per-category adapters → security modules → centralized schema migrations.
-
-**Auto-publish**: push a tag → automatically published to npm (GitHub Actions + OIDC, no stored secrets):
-
-```bash
-npm version patch          # 0.1.2 → 0.1.3
-git push origin main --tags   # CI: test → build → publish
-```
-
-> One-time OIDC trusted-publisher setup:
-> ```bash
-> npm login
-> npm trust github dsh-config-manager --file publish.yml --repo xiajiajun516/dsh-config-manager --allow-publish
-> ```
-> Or add the GitHub Actions trusted publisher on the package page (Settings → Publishing access).
-
----
-
-## 🧪 Testing
-
-**All 192 tests pass** (Node's built-in test runner, zero extra dependencies), covering:
+## 📋 Known limitations (user-facing)
 
-| Category | Coverage |
-|---|---|
-| Export | normal / empty / large / Unicode & special chars / secret filtering |
-| Import | normal / merge / replace / skip / conflict / missing plugin / missing dependency / missing secret |
-| Rollback | mid-flight failure → everything restored |
-| Security | malicious ZIP / corrupt archive / checksum mismatch / path traversal |
-| Cross-platform | Windows ↔ macOS ↔ Linux path handling |
-| Migration | schema upgrade mechanism |
-
----
+1. **Installing / updating plugins or MCP takes effect after restarting DSH**
+2. **Some UI state is not migrated** (e.g. task board data, panel widths — they live in the browser, not in DSH's config files)
+3. **keybindings / workflow configs / commands / rules** — DSH has no such concepts, so nothing is exported for them
+4. **History/session migration is off by default** (v1 copies files only)
+5. **Encrypted backups**: a lost password means the `secrets.enc` can't be decrypted (by design — keep your password safe)
 
-## 📋 Known limitations
-
-1. **Workspace: create/rename title only** — DSH has no whole-overwrite write channel; paths & session lists are maintained by DSH itself (path mapping adapts cross-device)
-2. **Some DSH core packages are not public** — features depending on their APIs only work in a local DSH; install needs `--config.auto-install-peers=false`
-3. **No MCP management API** — MCP is imported as config lines and takes effect after restarting DSH
-4. **Plugin install requires a restart**
-5. **Browser UI state (localStorage) is not migrated** — e.g. task board data, panel widths
-6. **keybindings / workflows / commands / rules** — DSH has no such concepts; no fake sections
-7. **Credential values can't be rolled back** — re-enter manually after a rollback that touched them
-8. **Newly created items can't be rollback-deleted** — DSH settings have no delete semantics
-9. **Schema migration** — the mechanism is ready; the v1→v2 chain is a placeholder (v1 is current)
-10. **History/session migration is off by default** — v1 copies files only
-11. **Encrypted backups** — a lost password means the `secrets.enc` can't be decrypted (by design)
+> Maintainers & developers: see [DEVELOPERS.md](DEVELOPERS.md) for build, testing, auto-publishing and full technical notes.
 
 ---
 

package/README.zh-CN.md

@@ -30,7 +30,7 @@ DSH 是你的 AI 助手工作台，里面存着你的各种设置：模型配置
 | 🚀 | **一键导出** | 点一下，把推荐配置打包成一个 ZIP |
 | 📦 | **一键导入** | 在另一台电脑点一下，环境就回来了 |
 | 👀 | **先预览再导入** | 导入前完整预览，**绝不偷偷改你的配置** |
-| ⚔️ | **冲突处理** | 遇到同名配置，让你自己选：保留现有的 / 用导入的 / 再看看 |
+| ⚔️ | **冲突处理** | 遇到同名配置，让你自己选：保留现有的 / 用导入的 |
 | 🗺️ | **路径自动映射** | 换了电脑路径变了？自动检测并让你重新指定 |
 | 🔒 | **密钥安全** | API Key 默认不导出；导入后提醒你重新填写 |
 | ↩️ | **自动回滚** | 导入失败自动恢复原样，不会弄坏现有配置 |
@@ -66,26 +66,12 @@ DSH 是你的 AI 助手工作台，里面存着你的各种设置：模型配置
 
 ```bash
 # ① 安装插件
-dsh plugin --profile web add dsh-config-manager --config.auto-install-peers=false
+dsh plugin --profile web add dsh-config-manager@latest --config.auto-install-peers=false
 
 # ② 重启 DSH（设置页就会出现「备份与迁移」入口）
 ```
 
-> 💡 **小知识**：`--config.auto-install-peers=false` 是为了跳过一些尚未公开发布的 DSH 核心依赖（运行时由 DSH 自己提供），照着复制就行。
-
-**从源码 / 本地包安装**（开发者用）：
-
-```bash
-npm run build && npm pack          # 产出 dsh-config-manager-0.1.2.tgz
-dsh plugin --profile web add file:/绝对路径/dsh-config-manager-0.1.2.tgz
-```
-
-> 🧪 **想先试不碰正式环境？** 用隔离目录测试，完全不触碰 `~/.dsh`：
-> ```bash
-> $env:DSH_HOME = "D:\tmp\dsh-home"   # Windows PowerShell
-> dsh plugin --profile test add dsh-config-manager --config.auto-install-peers=false
-> dsh --profile test --dump-config | Select-String config-manager
-> ```
+> 💡 照着复制就行：`--config.auto-install-peers=false` 跳过几个尚未公开发布的 DSH 核心依赖（运行时由 DSH 自己提供），`@latest` 确保装到最新版。
 
 ---
 
@@ -101,7 +87,7 @@ dsh plugin --profile web add file:/绝对路径/dsh-config-manager-0.1.2.tgz
   1. 打开 DSH → 「备份与迁移」→「导入配置」
   2. 选择 ZIP → 等待分析 → 查看「导入预览」
   3. 有路径问题？→ 选择新路径（可批量映射）
-  4. 有同名配置冲突？→ 选择 保留现有 / 用导入的
+  4. 有同名配置冲突？→ 选择 保留现有的 / 用导入的
   5. 确认导入 → 等待完成
   6. 按提示重新填写缺失的 API Key
   7. ✅ 设置 / 插件 / MCP / 技能 / 工作区都回来了
@@ -144,7 +130,8 @@ dsh plugin --profile web add file:/绝对路径/dsh-config-manager-0.1.2.tgz
 |---|---|
 | **保留现有的** | 不动目标电脑的原配置 |
 | **用导入的** | 用备份里的配置覆盖 |
-| **再看看** | 暂时跳过，稍后处理 |
+
+> 说明：刻意**不提供**「稍后决定 / 再看看」选项——未决的冲突会让导入无法继续，每个冲突都必须在继续前做出选择。
 
 ### 🗺️ 路径映射
 
@@ -167,27 +154,6 @@ dsh plugin --profile web add file:/绝对路径/dsh-config-manager-0.1.2.tgz
 
 ---
 
-## 📦 备份里有什么？（文件结构）
-
-```
-dsh-config-2026-08-14.zip
-├── manifest.json              # 备份清单：版本 / 来源 / 时间 / 包含项
-├── config/
-│   ├── settings.json          # 设置（已脱敏）
-│   └── ui.json                # 界面偏好
-├── ai/providers.json          # AI 模型 / 服务商配置
-├── plugins/                   # 插件清单（不打包插件本体）
-├── mcp/servers.json           # MCP 服务配置
-├── custom/                    # 提示词 / 技能
-├── agents/presets/            # Agent 预设
-├── workspaces/                # 工作区
-├── security/credentials.json  # 密钥状态（不含值）
-├── security/secrets.enc       # 仅加密备份时存在
-└── integrity/checksums.json   # SHA-256 校验和
-```
-
----
-
 ## 🛡️ 安全
 
 - **默认备份不包含任何密钥值** —— 这是硬性规则，导出时强制执行
@@ -228,62 +194,15 @@ dsh-config-2026-08-14.zip
 
 ---
 
-## 👨‍💻 给开发者
-
-```bash
-npm install --legacy-peer-deps   # 安装依赖
-npm run typecheck                # 类型检查
-npm run build                    # 构建（Host lib/ + client bundle）
-npm test                         # 运行测试（192 个）
-npm run bundle                   # 仅重建 client bundle
-```
-
-**架构**：核心引擎与 DSH 运行时解耦（可 mock 测试）→ 各配置分类适配器 → 安全模块 → 迁移逻辑集中。
-
-**自动发布**：打 tag 即自动发布到 npm（GitHub Actions + OIDC，无需任何密钥）：
-
-```bash
-npm version patch          # 0.1.2 → 0.1.3
-git push origin main --tags   # CI 自动: 测试 → 构建 → 发布
-```
-
-> 首次配置 OIDC 可信发布方（只需一次）：
-> ```bash
-> npm login
-> npm trust github dsh-config-manager --file publish.yml --repo xiajiajun516/dsh-config-manager --allow-publish
-> ```
-> 或在 npm 包设置页（Settings → Publishing access）添加 GitHub Actions 可信发布方。
-
----
-
-## 🧪 测试
-
-**192 个测试全部通过**（Node 内置测试框架，零额外依赖），覆盖：
+## 📋 已知限制（用户须知）
 
-| 类别 | 覆盖内容 |
-|---|---|
-| 导出 | 正常 / 空配置 / 大配置 / 中文与特殊字符 / 密钥过滤 |
-| 导入 | 正常 / 合并 / 覆盖 / 跳过 / 冲突 / 缺失插件 / 缺失依赖 / 缺失密钥 |
-| 回滚 | 导入中途失败 → 全部恢复原样 |
-| 安全 | 恶意 ZIP / 损坏文件 / 校验和不匹配 / 路径穿越 |
-| 跨平台 | Windows ↔ macOS ↔ Linux 路径处理 |
-| 迁移 | 版本升级机制 |
-
----
+1. **安装/更新插件或 MCP 后需重启 DSH 才生效**
+2. **部分界面状态不迁移**（如任务看板数据、面板宽度——它们存在浏览器里，不在 DSH 配置文件内）
+3. **keybindings / workflows 配置 / commands / rules**：DSH 当前没有这些概念，因此不会导出相关内容
+4. **历史会话默认不迁移**（v1 仅支持文件级复制）
+5. **加密备份**：密码丢失则无法解密（设计使然——请牢记密码）
 
-## 📋 已知限制
-
-1. **工作区只能创建/改标题**：DSH 无整体覆盖写通道，路径与会话列表由 DSH 自行维护（路径映射适配跨设备）
-2. **部分 DSH 核心包未公开发布**：依赖其 API 的功能仅在本地 DSH 环境可用；安装需跳过 peer 自动安装（见安装说明）
-3. **MCP 无管理 API**：MCP 以配置行导入，需重启 DSH 生效
-4. **插件安装需重启**：安装插件后重启 DSH 生效
-5. **浏览器 UI 状态（localStorage）不迁移**：如任务看板数据、面板宽度
-6. **keybindings / workflows / commands / rules**：DSH 当前无这些概念，不做假分区
-7. **密钥值无法回滚**：导入中覆盖的密钥在回滚时需人工重新填写
-8. **新建项无法回滚删除**：DSH 设置无删除语义，新建的配置项回滚时需人工处理
-9. **Schema 迁移**：机制已就绪，v1→v2 迁移链为占位（当前版本即 v1）
-10. **历史会话默认不迁移**：v1 仅支持文件级复制
-11. **加密备份**：密码丢失则无法解密（设计使然，请牢记密码）
+> 维护者与开发者：构建、测试、自动发布与完整技术说明见 [DEVELOPERS.md](DEVELOPERS.md)。
 
 ---
 

package/lib/client.js

@@ -559,93 +559,93 @@ if (typeof document !== "undefined" && document.querySelector("style[data-tag=\"
 	document.head.appendChild(tag);
 }
 var config_manager_module_css_default = {
-	"iconButton": "_367UGW_iconButton",
-	"progressBar": "_367UGW_progressBar",
-	"viewBody": "_367UGW_viewBody",
-	"badgeInfo": "_367UGW_badgeInfo",
-	"rollbackBox": "_367UGW_rollbackBox",
-	"errorFooter": "_367UGW_errorFooter",
+	"actionRow": "_367UGW_actionRow",
+	"formError": "_367UGW_formError",
+	"errorItem": "_367UGW_errorItem",
+	"secretFields": "_367UGW_secretFields",
+	"section": "_367UGW_section",
+	"sectionBody": "_367UGW_sectionBody",
+	"groupHeader": "_367UGW_groupHeader",
+	"fieldLabel": "_367UGW_fieldLabel",
+	"input": "_367UGW_input",
+	"groupLabel": "_367UGW_groupLabel",
+	"radioLabel": "_367UGW_radioLabel",
+	"modeTabs": "_367UGW_modeTabs",
+	"progressMeta": "_367UGW_progressMeta",
+	"conflictHead": "_367UGW_conflictHead",
+	"conflictOptions": "_367UGW_conflictOptions",
 	"conflictId": "_367UGW_conflictId",
 	"pathIssueKind": "_367UGW_pathIssueKind",
-	"errorAction": "_367UGW_errorAction",
-	"modeTabs": "_367UGW_modeTabs",
-	"radioLabel": "_367UGW_radioLabel",
-	"categoryName": "_367UGW_categoryName",
-	"primaryButton": "_367UGW_primaryButton",
-	"pathNew": "_367UGW_pathNew",
-	"conflictList": "_367UGW_conflictList",
-	"reportText": "_367UGW_reportText",
-	"progressBarDone": "_367UGW_progressBarDone",
-	"errorActionLabel": "_367UGW_errorActionLabel",
+	"iconButton": "_367UGW_iconButton",
 	"empty": "_367UGW_empty",
-	"errorLine": "_367UGW_errorLine",
-	"dangerButton": "_367UGW_dangerButton",
-	"reportFooter": "_367UGW_reportFooter",
-	"badgeOk": "_367UGW_badgeOk",
-	"progressBlock": "_367UGW_progressBlock",
-	"input": "_367UGW_input",
-	"secretsList": "_367UGW_secretsList",
-	"reportView": "_367UGW_reportView",
-	"progressMeta": "_367UGW_progressMeta",
-	"progressTrack": "_367UGW_progressTrack",
+	"dshCmSpin": "_367UGW_dshCmSpin",
+	"errorActionLabel": "_367UGW_errorActionLabel",
+	"progressLabel": "_367UGW_progressLabel",
 	"errorList": "_367UGW_errorList",
-	"errorReason": "_367UGW_errorReason",
-	"pathOld": "_367UGW_pathOld",
-	"badgeWarn": "_367UGW_badgeWarn",
-	"progressIndeterminate": "_367UGW_progressIndeterminate",
-	"sectionTitle": "_367UGW_sectionTitle",
-	"categoryItem": "_367UGW_categoryItem",
-	"sectionBody": "_367UGW_sectionBody",
-	"badgeError": "_367UGW_badgeError",
-	"groupLabel": "_367UGW_groupLabel",
-	"errorItem": "_367UGW_errorItem",
-	"errorTitle": "_367UGW_errorTitle",
-	"pathMappingList": "_367UGW_pathMappingList",
+	"conflictList": "_367UGW_conflictList",
+	"severityError": "_367UGW_severityError",
 	"banner": "_367UGW_banner",
-	"pathRow": "_367UGW_pathRow",
-	"sectionHeader": "_367UGW_sectionHeader",
+	"card": "_367UGW_card",
+	"pathMappingList": "_367UGW_pathMappingList",
 	"spinnerWrap": "_367UGW_spinnerWrap",
-	"badge": "_367UGW_badge",
-	"groupCard": "_367UGW_groupCard",
-	"section": "_367UGW_section",
-	"progressPercent": "_367UGW_progressPercent",
-	"dshCmSpin": "_367UGW_dshCmSpin",
-	"optionsCard": "_367UGW_optionsCard",
+	"badgeInfo": "_367UGW_badgeInfo",
+	"pathOld": "_367UGW_pathOld",
+	"pathRow": "_367UGW_pathRow",
 	"spinner": "_367UGW_spinner",
-	"viewTab": "_367UGW_viewTab",
-	"hiddenFile": "_367UGW_hiddenFile",
-	"progressLabel": "_367UGW_progressLabel",
-	"severityError": "_367UGW_severityError",
-	"conflictOptions": "_367UGW_conflictOptions",
-	"progressDetail": "_367UGW_progressDetail",
-	"ghostButton": "_367UGW_ghostButton",
-	"groupNote": "_367UGW_groupNote",
-	"statRow": "_367UGW_statRow",
+	"groupItems": "_367UGW_groupItems",
+	"errorLine": "_367UGW_errorLine",
+	"conflictItem": "_367UGW_conflictItem",
+	"progressBarDone": "_367UGW_progressBarDone",
+	"sectionTitle": "_367UGW_sectionTitle",
+	"pathValue": "_367UGW_pathValue",
+	"dshCmIndeterminate": "_367UGW_dshCmIndeterminate",
+	"progressBlock": "_367UGW_progressBlock",
+	"progressPercent": "_367UGW_progressPercent",
+	"badgeWarn": "_367UGW_badgeWarn",
+	"sectionSubtitle": "_367UGW_sectionSubtitle",
 	"conflictDetail": "_367UGW_conflictDetail",
-	"modeHint": "_367UGW_modeHint",
-	"actionRow": "_367UGW_actionRow",
+	"hiddenFile": "_367UGW_hiddenFile",
+	"groupCard": "_367UGW_groupCard",
 	"viewTabs": "_367UGW_viewTabs",
+	"spinnerLabel": "_367UGW_spinnerLabel",
+	"viewTab": "_367UGW_viewTab",
+	"progressIndeterminate": "_367UGW_progressIndeterminate",
+	"dangerButton": "_367UGW_dangerButton",
 	"field": "_367UGW_field",
-	"secretFields": "_367UGW_secretFields",
-	"conflictHead": "_367UGW_conflictHead",
-	"groupItems": "_367UGW_groupItems",
-	"card": "_367UGW_card",
-	"pathValue": "_367UGW_pathValue",
-	"fieldLabel": "_367UGW_fieldLabel",
+	"progressBar": "_367UGW_progressBar",
+	"sectionTitleBlock": "_367UGW_sectionTitleBlock",
 	"groupList": "_367UGW_groupList",
+	"progressTrack": "_367UGW_progressTrack",
+	"reportText": "_367UGW_reportText",
+	"rollbackBox": "_367UGW_rollbackBox",
+	"secretsList": "_367UGW_secretsList",
 	"warnList": "_367UGW_warnList",
-	"modeTab": "_367UGW_modeTab",
-	"dshCmIndeterminate": "_367UGW_dshCmIndeterminate",
+	"pathNew": "_367UGW_pathNew",
+	"badgeOk": "_367UGW_badgeOk",
+	"statRow": "_367UGW_statRow",
 	"errorBanner": "_367UGW_errorBanner",
-	"spinnerLabel": "_367UGW_spinnerLabel",
-	"checkboxRow": "_367UGW_checkboxRow",
-	"conflictItem": "_367UGW_conflictItem",
-	"sectionSubtitle": "_367UGW_sectionSubtitle",
 	"hint": "_367UGW_hint",
+	"sectionHeader": "_367UGW_sectionHeader",
+	"progressDetail": "_367UGW_progressDetail",
+	"reportFooter": "_367UGW_reportFooter",
+	"ghostButton": "_367UGW_ghostButton",
+	"checkboxRow": "_367UGW_checkboxRow",
+	"groupNote": "_367UGW_groupNote",
+	"categoryItem": "_367UGW_categoryItem",
+	"errorAction": "_367UGW_errorAction",
 	"categoryDesc": "_367UGW_categoryDesc",
-	"sectionTitleBlock": "_367UGW_sectionTitleBlock",
-	"groupHeader": "_367UGW_groupHeader",
-	"formError": "_367UGW_formError"
+	"primaryButton": "_367UGW_primaryButton",
+	"categoryName": "_367UGW_categoryName",
+	"reportView": "_367UGW_reportView",
+	"errorFooter": "_367UGW_errorFooter",
+	"optionsCard": "_367UGW_optionsCard",
+	"errorTitle": "_367UGW_errorTitle",
+	"badgeError": "_367UGW_badgeError",
+	"badge": "_367UGW_badge",
+	"errorReason": "_367UGW_errorReason",
+	"modeTab": "_367UGW_modeTab",
+	"viewBody": "_367UGW_viewBody",
+	"modeHint": "_367UGW_modeHint"
 };
 //#endregion
 //#region src/client/common/ui.tsx

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-config-manager",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "DSH Config Manager — backup / export / import / migrate DSH configuration (dual-face Cordis plugin: host engine + web UI). Manifest shape mirrors @linxin666/dsh-ssh@0.1.12.",
   "type": "module",
   "repository": {