dsh-config-manager 0.2.3 → 0.3.0

package/lib/ui/overview-view.d.ts

@@ -101,14 +101,18 @@ export type OverviewHealthKind = 'ok' | 'warn' | 'error';
 export interface OverviewHealth {
     kind: OverviewHealthKind;
     /** UI 渲染 key（`overview.health.*`）。 */
-    textKey: 'health.ok' | 'health.noBackup' | 'health.scheduleFailed' | 'health.recovery';
+    textKey: 'health.ok' | 'health.noBackup' | 'health.scheduleFailed' | 'health.autoBackupOff' | 'health.recovery';
 }
 /**
  * 配置健康判定（保守优先级）：
  * 1. SAFE MODE 激活（有未解决恢复事项）→ error（最高优先，需用户处理）；
  * 2. 已加载且备份与快照均为空 → warn「尚无任何备份」（新装机引导场景）；
  * 3. 定时备份开启但上次运行失败 → warn；
- * 4. 其余 → ok。
+ * 4. 手上已有备份、但定时备份是关的 → warn「自动备份已关闭」（2026-11-01 视觉 pass 新增：
+ *    此前关闭档不判定，于是「All healthy」与「Auto backup Off / Backups 1」同屏并列，
+ *    状态条给出的结论与它脚下的指标自相矛盾 —— 一页只在回答「现在安全吗」，
+ *    在没有任何后续保护时报健康等于放弃这个结论）；
+ * 5. 其余 → ok。
  * 数据未加载（null）不降级健康状态（避免加载闪红）。
  */
 export declare function overviewHealth(inputs: OverviewInputs): OverviewHealth;

package/lib/ui/overview-view.js

@@ -149,7 +149,11 @@ export function buildOverviewMetrics(inputs) {
  * 1. SAFE MODE 激活（有未解决恢复事项）→ error（最高优先，需用户处理）；
  * 2. 已加载且备份与快照均为空 → warn「尚无任何备份」（新装机引导场景）；
  * 3. 定时备份开启但上次运行失败 → warn；
- * 4. 其余 → ok。
+ * 4. 手上已有备份、但定时备份是关的 → warn「自动备份已关闭」（2026-11-01 视觉 pass 新增：
+ *    此前关闭档不判定，于是「All healthy」与「Auto backup Off / Backups 1」同屏并列，
+ *    状态条给出的结论与它脚下的指标自相矛盾 —— 一页只在回答「现在安全吗」，
+ *    在没有任何后续保护时报健康等于放弃这个结论）；
+ * 5. 其余 → ok。
  * 数据未加载（null）不降级健康状态（避免加载闪红）。
  */
 export function overviewHealth(inputs) {
@@ -163,6 +167,9 @@ export function overviewHealth(inputs) {
     if (inputs.schedule !== null && inputs.schedule.enabled && inputs.schedule.lastRunStatus === 'failed') {
         return { kind: 'warn', textKey: 'health.scheduleFailed' };
     }
+    if (inputs.schedule !== null && !inputs.schedule.enabled) {
+        return { kind: 'warn', textKey: 'health.autoBackupOff' };
+    }
     return { kind: 'ok', textKey: 'health.ok' };
 }
 /* ---------------- 最近活动 ---------------- */

package/lib/ui/report.js

@@ -31,7 +31,8 @@ export function exportCountsText(counts, t) {
         if (typeof value !== 'number' || !Number.isFinite(value))
             continue;
         const unitKey = COUNT_UNIT_KEY[key];
-        parts.push(unitKey === undefined ? String(value) + ' ' + key : String(value) + ' ' + t(unitKey));
+        // 单位词按数量选单复数（en 的 `{n, plural, file|files}`）；中文单位不受影响
+        parts.push(unitKey === undefined ? String(value) + ' ' + key : String(value) + ' ' + t(unitKey, { n: value }));
     }
     // 分隔符也走字典：英文用半角逗号（全角标点在英文界面同样是缺陷）
     return parts.join(t('report.unitSeparator'));

package/lib/utils/git-fast-forward.d.ts

@@ -8,8 +8,13 @@
  * 显式 refspec fetch + 显式远端跟踪分支 merge 完全不读 FETCH_HEAD（同样 5 并发实测全成功），
  * 语义与 ff-only pull 一致：能快进就快进，不能快进就报「历史分叉」。
  */
-/** `git fetch` 参数：只更新 origin/<branch> 这个远端跟踪引用，不写 FETCH_HEAD */
-export declare function fastForwardFetchArgs(branch: string): string[];
+/**
+ * `git fetch` 参数：只更新 origin/<branch> 这个远端跟踪引用，不写 FETCH_HEAD。
+ *
+ * `flags` 是给调用方补的拉取姿态（如 `--filter=blob:none`/`--no-tags`），必须排在 `origin` 之前：
+ * git 只认「子命令后、URL 前」的选项，放到 refspec 之后会被当成 refspec 解析。
+ */
+export declare function fastForwardFetchArgs(branch: string, flags?: readonly string[]): string[];
 /** `git merge` 参数：快进到显式远端跟踪分支（不依赖 upstream 配置，也不读 FETCH_HEAD） */
 export declare function fastForwardMergeArgs(branch: string): string[];
 /** 远端还没有同名分支（全新空仓库 / 分支被改名）：调用方按「无 upstream」同姿态静默跳过 */

package/lib/utils/git-fast-forward.js

@@ -8,9 +8,14 @@
  * 显式 refspec fetch + 显式远端跟踪分支 merge 完全不读 FETCH_HEAD（同样 5 并发实测全成功），
  * 语义与 ff-only pull 一致：能快进就快进，不能快进就报「历史分叉」。
  */
-/** `git fetch` 参数：只更新 origin/<branch> 这个远端跟踪引用，不写 FETCH_HEAD */
-export function fastForwardFetchArgs(branch) {
-    return ['fetch', 'origin', `+refs/heads/${branch}:refs/remotes/origin/${branch}`];
+/**
+ * `git fetch` 参数：只更新 origin/<branch> 这个远端跟踪引用，不写 FETCH_HEAD。
+ *
+ * `flags` 是给调用方补的拉取姿态（如 `--filter=blob:none`/`--no-tags`），必须排在 `origin` 之前：
+ * git 只认「子命令后、URL 前」的选项，放到 refspec 之后会被当成 refspec 解析。
+ */
+export function fastForwardFetchArgs(branch, flags = []) {
+    return ['fetch', ...flags, 'origin', `+refs/heads/${branch}:refs/remotes/origin/${branch}`];
 }
 /** `git merge` 参数：快进到显式远端跟踪分支（不依赖 upstream 配置，也不读 FETCH_HEAD） */
 export function fastForwardMergeArgs(branch) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-config-manager",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "license": "MIT",
   "description": "Backup, restore, export, import, migrate and sync your DeepSeek Harness (DSH) configuration: settings, plugins, MCP servers, skills, agent presets and workspaces. One-click migration to another machine. DSH 配置一键备份、恢复、导出、导入、迁移与同步插件。",
   "icon": "./icon.svg",
@@ -203,7 +203,7 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "schemastery": "^3.18.0",
-    "tsdown": "0.23.1",
+    "tsdown": "0.23.4",
     "typescript": "^7.0.2"
   }
 }

package/src/adapters/self.test.ts

@@ -3,19 +3,27 @@
  * 白名单收集（存在才收、白名单外不收、不递归）、Create/Skip/Conflict 分析、
  * applyItem 写回 $DSH_HOME/dsh-config-manager/<rel>、默认包含 + portable 语义、
  * createAdapters 的 selfDir 挂载行为（缺省挂载 / '' 不挂）。
+ *
+ * SEC-01（P0）：sync/sync-config.json 与 sync/sync-autosync.json 都含「同步目标地址」，
+ * 允许导入写盘 = 备份包可以改本机同步目标，下一次同步把 token 送进包控制的主机。
+ * 因此两者退出裸写白名单：既不导出，也不允许导入写盘（包内出现 → 报告级 warning，绝不静默）。
  */
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { createAdapters } from './index.ts';
-import { SelfAdapter, SELF_CONFIG_FILES } from './self.ts';
+import { SelfAdapter, SELF_CONFIG_FILES, SELF_IMPORT_BLOCKED_RELS, SELF_IMPORT_BLOCKED_CODE } from './self.ts';
 import { hashSection } from '../sync/sync-state.ts';
+import { sha256Hex } from '../utils/hashing.ts';
 import { makeContext, makeImportContext } from './test-helpers.ts';
 
 test('self: 白名单收集（存在才收，子目录路径保留，白名单外不收集）', async () => {
   const src = makeContext('win32', 'C:\\Users\\alice');
-  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{"transport":"git","git":{"repoUrl":"https://x"},"webdav":{}}', 'utf8'));
   await src.fs.writeFile('dsh-config-manager/sync/sync-selection.json', Buffer.from('{"schemaVersion":1,"mode":"default"}', 'utf8'));
   await src.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', Buffer.from('{"schemaVersion":1,"lastSyncChannel":"webdav"}', 'utf8'));
+  await src.fs.writeFile('dsh-config-manager/market/market-config.json', Buffer.from('{"schemaVersion":1,"sources":[]}', 'utf8'));
+  // SEC-01：含同步目标地址的两个文件不再进载荷（否则备份包可借它改本机同步目标）
+  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{"transport":"git","git":{"repoUrl":"https://x"}}', 'utf8'));
+  await src.fs.writeFile('dsh-config-manager/sync/sync-autosync.json', Buffer.from('{"schemaVersion":2}', 'utf8'));
   // 白名单外：历史/缓存/快照/临时产物不得收集
   await src.fs.writeFile('dsh-config-manager/sync/sync-history.json', Buffer.from('{"schemaVersion":1}', 'utf8'));
   await src.fs.writeFile('dsh-config-manager/market/cache/index.json', Buffer.from('{}', 'utf8'));
@@ -26,14 +34,16 @@ test('self: 白名单收集（存在才收，子目录路径保留，白名单
   const out = await adapter.export(src, { includeSecrets: false });
   const rels = out.data.files.map((f) => f.relativePath).sort();
   assert.deepEqual(rels, [
-    'sync/sync-config.json',
+    'market/market-config.json',
     'sync/sync-selection.json',
     'sync/ui-prefs.json',
   ]);
   assert.equal(out.counts.files, 3);
   assert.equal(out.warnings.length, 0, '存在文件时不告警');
-  // 白名单常量齐全（sync-autosync / market-config 未创建时自然跳过）
-  assert.ok(SELF_CONFIG_FILES.includes('sync/sync-autosync.json'));
+  // 白名单常量：SEC-01 移出两个同步目标文件，其余照旧
+  assert.ok(!SELF_CONFIG_FILES.includes('sync/sync-config.json'), 'SEC-01：sync-config.json 不得在裸写白名单里');
+  assert.ok(!SELF_CONFIG_FILES.includes('sync/sync-autosync.json'), 'SEC-01：sync-autosync.json 不得在裸写白名单里');
+  assert.ok(SELF_CONFIG_FILES.includes('sync/backup-schedule.json'), '调度配置（无同步目标地址）仍在白名单');
   assert.ok(SELF_CONFIG_FILES.includes('market/market-config.json'));
 });
 
@@ -53,7 +63,7 @@ test('self: 全部缺失 → 空分区 + dirEmpty 警告', async () => {
 
 test('self: 导入往返（Create → 写回 $DSH_HOME/dsh-config-manager/<rel>；幂等 Skip；不同 Conflict）', async () => {
   const src = makeContext('win32', 'C:\\Users\\alice');
-  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{"transport":"git"}', 'utf8'));
+  await src.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', Buffer.from('{"schemaVersion":1}', 'utf8'));
   const adapter = new SelfAdapter();
   const out = await adapter.export(src, { includeSecrets: false });
 
@@ -65,9 +75,9 @@ test('self: 导入往返（Create → 写回 $DSH_HOME/dsh-config-manager/<rel>
   const r = await adapter.applyItem(items[0]!, makeImportContext(dst, sections));
   assert.equal(r.ok, true);
   assert.equal(
-    Buffer.from(await dst.fs.readFile('dsh-config-manager/sync/sync-config.json')).toString(),
-    '{"transport":"git"}',
-    '导入写回 $DSH_HOME/dsh-config-manager/sync/sync-config.json（基准目录 + 相对路径）',
+    Buffer.from(await dst.fs.readFile('dsh-config-manager/sync/ui-prefs.json')).toString(),
+    '{"schemaVersion":1}',
+    '导入写回 $DSH_HOME/dsh-config-manager/<rel>（基准目录 + 相对路径）',
   );
 
   // 幂等：一致 → Skip
@@ -75,11 +85,52 @@ test('self: 导入往返（Create → 写回 $DSH_HOME/dsh-config-manager/<rel>
   assert.equal(items[0]?.kind, 'Skip');
 
   // 内容不同 → Conflict
-  await dst.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{"transport":"webdav"}', 'utf8'));
+  await dst.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', Buffer.from('{"schemaVersion":1,"lastSyncChannel":"s3"}', 'utf8'));
   items = await adapter.analyzeImport(out.data, makeImportContext(dst, sections));
   assert.equal(items[0]?.kind, 'Conflict');
 });
 
+/* ---------------- SEC-01：导入包不得写同步目标文件 ---------------- */
+
+test('SEC-01：包内含 sync-config.json / sync-autosync.json → 报告级 warning + 绝不写盘', async () => {
+  const adapter = new SelfAdapter();
+  const evil = '{"schemaVersion":3,"transport":"git","git":{"repoUrl":"https://attacker.example/collect.git"}}';
+  const section = {
+    version: 1 as const,
+    files: SELF_IMPORT_BLOCKED_RELS.map((relativePath) => ({
+      relativePath,
+      data: Buffer.from(evil, 'utf8'),
+      contentHash: sha256Hex(Buffer.from(evil, 'utf8')),
+    })),
+  };
+  const dst = makeContext('linux', '/home/bob');
+  const localConfig = '{"schemaVersion":3,"transport":"git","git":{"repoUrl":"https://github.com/u/r.git"},"webdav":{}}';
+  await dst.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from(localConfig, 'utf8'));
+  const ctx = makeImportContext(dst, new Map([['self', section]]));
+
+  const items = await adapter.analyzeImport(section, ctx);
+  assert.equal(items.length, SELF_IMPORT_BLOCKED_RELS.length);
+  for (const item of items) {
+    assert.equal(item.kind, 'Warning', '不写盘项必须是 Warning（引擎跳过：不进快照范围、不调 applyItem）');
+    assert.equal(item.severity, 'warning');
+    assert.ok((item.description ?? '').length > 0, '必须带可展示文案，不得静默');
+    assert.ok(String(item.detail ?? '').startsWith(SELF_IMPORT_BLOCKED_CODE), '必须带稳定机器码: ' + String(item.detail));
+    assert.ok(String(item.detail ?? '').includes(item.id.slice('self:'.length)), '机器码里带上具体 rel');
+  }
+
+  // 纵深防御：即使绕过引擎直接 apply，也一字节都不写
+  for (const item of items) {
+    const r = await adapter.applyItem(item, makeImportContext(dst, new Map([['self', section]])));
+    assert.equal(r.ok, false, '被挡下的项不得报告成功写入');
+  }
+  assert.equal(
+    Buffer.from(await dst.fs.readFile('dsh-config-manager/sync/sync-config.json')).toString(),
+    localConfig,
+    '本机既有的同步目标不得被包内地址覆盖',
+  );
+  assert.equal(await dst.fs.exists('dsh-config-manager/sync/sync-autosync.json'), false, '不得凭空创建同步调度配置');
+});
+
 test('createAdapters: selfDir 缺省挂载 dsh-config-manager；空串不挂载', () => {
   const withSelf = createAdapters({ selfDir: undefined });
   assert.ok(withSelf.some((a) => a.id === 'self'), '缺省挂载 self adapter');
@@ -97,10 +148,10 @@ test('createAdapters: selfDir 缺省挂载 dsh-config-manager；空串不挂载'
 
 test('self: 预览只列白名单 —— 快照/同步工作副本等内部数据不得进入选择器（与导出逐项相等）', async () => {
   const src = makeContext('win32', 'C:\\Users\\alice');
-  const syncConfig = Buffer.from('{"transport":"git"}', 'utf8');
   const uiPrefs = Buffer.from('{"schemaVersion":1}', 'utf8');
-  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', syncConfig);
+  const marketConfig = Buffer.from('{"schemaVersion":1,"sources":[]}', 'utf8');
   await src.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', uiPrefs);
+  await src.fs.writeFile('dsh-config-manager/market/market-config.json', marketConfig);
   // 插件自身的数据：此前基类的目录递归把它们全当成该分区的「可勾选单元」
   await src.fs.writeFile('dsh-config-manager/snapshots/eec/snapshot.json', Buffer.from('x'.repeat(4096), 'utf8'));
   await src.fs.writeFile('dsh-config-manager/config-snapshots/2026/config-snapshot.json', Buffer.from('x'.repeat(4096), 'utf8'));
@@ -115,10 +166,10 @@ test('self: 预览只列白名单 —— 快照/同步工作副本等内部数
 
   assert.deepEqual(
     previewed.items.map((u) => u.id),
-    ['self:sync/sync-config.json', 'self:sync/ui-prefs.json'],
+    ['self:sync/ui-prefs.json', 'self:market/market-config.json'],
     '预览只列白名单里的配置（回归：只覆写 export() 时会列出上述全部 8 个文件）',
   );
-  assert.equal(previewed.sizeBytes, syncConfig.byteLength + uiPrefs.byteLength, '体积只算白名单文件');
+  assert.equal(previewed.sizeBytes, uiPrefs.byteLength + marketConfig.byteLength, '体积只算白名单文件');
   assert.deepEqual(previewed.items, adapter.listUnits(exported), '预览的单元清单必须与导出逐项相同');
   assert.deepEqual(previewed.section.counts, exported.counts);
   assert.deepEqual(previewed.section.warnings, exported.warnings);
@@ -131,8 +182,8 @@ test('self: 预览只列白名单 —— 快照/同步工作副本等内部数
 
 test('self: 磁盘体检新统计的目录（rollback-points / 遗留 checkpoints）不进本分区载荷', async () => {
   const src = makeContext('win32', 'C:\\Users\\alice');
-  const syncConfig = Buffer.from('{"transport":"git"}', 'utf8');
-  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', syncConfig);
+  const uiPrefs = Buffer.from('{"schemaVersion":1}', 'utf8');
+  await src.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', uiPrefs);
   // 磁盘体检会统计这两块占用（回滚点库 + 旧检查点库）——但它们是**数据**，不是 self 分区的配置
   await src.fs.writeFile('dsh-config-manager/rollback-points/index.json', Buffer.from('x'.repeat(4096), 'utf8'));
   await src.fs.writeFile('dsh-config-manager/rollback-points/objects/rb-1/session.v4.jsonl.zstd', Buffer.from('x'.repeat(4096), 'utf8'));
@@ -144,66 +195,59 @@ test('self: 磁盘体检新统计的目录（rollback-points / 遗留 checkpoint
   const previewed = await adapter.preview(src, { includeSecrets: false });
   const rels = exported.data.files.map((f) => f.relativePath);
 
-  assert.deepEqual(rels, ['sync/sync-config.json'], '白名单外一律不收（新增统计目录不得混进载荷）');
+  assert.deepEqual(rels, ['sync/ui-prefs.json'], '白名单外一律不收（新增统计目录不得混进载荷）');
   assert.equal(new Set(rels).size, rels.length, '不得出现重复条目');
   assert.equal(exported.counts.files, 1);
-  assert.deepEqual(
-    previewed.items.map((u) => u.id),
-    ['self:sync/sync-config.json'],
-    '预览与导出同口径（只列白名单）',
-  );
-  assert.equal(previewed.sizeBytes, syncConfig.byteLength, '体积只算白名单文件');
+  assert.deepEqual(previewed.items.map((u) => u.id), ['self:sync/ui-prefs.json'], '预览与导出同口径（只列白名单）');
+  assert.equal(previewed.sizeBytes, uiPrefs.byteLength, '体积只算白名单文件');
 });
 
 test('self: 宿主未实现 statSize（旧版门面）时，白名单判定仍只收配置、不误列内部数据', async () => {
   const src = makeContext('win32', 'C:\\Users\\alice');
-  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{}', 'utf8'));
+  await src.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', Buffer.from('{}', 'utf8'));
   await src.fs.writeFile('dsh-config-manager/snapshots/x/snapshot.json', Buffer.from('{}', 'utf8'));
   Object.defineProperty(src.fs, 'statSize', { value: undefined, configurable: true });
 
   const adapter = new SelfAdapter();
   const previewed = await adapter.preview(src, { includeSecrets: false });
-  assert.deepEqual(previewed.items.map((u) => u.id), ['self:sync/sync-config.json']);
+  assert.deepEqual(previewed.items.map((u) => u.id), ['self:sync/ui-prefs.json']);
   assert.equal(previewed.sizeBytes, 2, '退回 readFile 时体积 = 文件字节数');
 });
 
 /* ---------------- issue #73：调度配置不得因运行态漂移而每轮重现 ---------------- */
 
-const AUTOSYNC_REL = 'dsh-config-manager/sync/sync-autosync.json';
 const BACKUP_SCHEDULE_REL = 'dsh-config-manager/sync/backup-schedule.json';
 
+/** backup-schedule.json 的配置本体（无运行态） */
+function backupScheduleBody(overrides: Record<string, unknown> = {}, runState: Record<string, unknown> = {}): Buffer {
+  return Buffer.from(JSON.stringify({
+    schemaVersion: 1, enabled: true, interval: '24h', startupMinIntervalMs: 3600000,
+    consecutiveFailures: 0, ...overrides, ...runState,
+  }, null, 2), 'utf8');
+}
+
 test('self: 调度配置仅运行态不同 → Skip（键序不同亦然）；配置本体不同 → Conflict', async () => {
   const adapter = new SelfAdapter();
-  const remote = JSON.stringify({
-    schemaVersion: 2,
-    channels: {
-      git: { enabled: true, interval: '30m', startupMinIntervalMs: 300000, consecutiveFailures: 0, lastRunAt: '2026-10-01T00:00:00.000Z', lastRunStatus: 'success' },
-      webdav: { enabled: false, interval: '30m', startupMinIntervalMs: 300000, consecutiveFailures: 0 },
-    },
-  }, null, 2);
   const src = makeContext('win32', 'C:\\Users\\alice');
-  await src.fs.writeFile(AUTOSYNC_REL, Buffer.from(remote, 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-01T00:00:00.000Z', lastRunStatus: 'success',
+  }));
   const out = await adapter.export(src, { includeSecrets: false });
   const sections = new Map([['self', out.data]]);
 
   // 本机：配置本体一致，但运行态已被本机调度器改写（每轮同步收尾都会发生），且键序不同
   const dst = makeContext('linux', '/home/bob');
-  await dst.fs.writeFile(AUTOSYNC_REL, Buffer.from(JSON.stringify({
-    schemaVersion: 2,
-    channels: {
-      webdav: { consecutiveFailures: 0, startupMinIntervalMs: 300000, interval: '30m', enabled: false },
-      git: { lastRunAt: '2026-10-06T09:00:00.000Z', lastRunStatus: 'failed', lastRunMessage: '网络不可达', lastRunHistoryId: 'h-1', consecutiveFailures: 3, startupMinIntervalMs: 300000, interval: '30m', enabled: true },
-    },
+  await dst.fs.writeFile(BACKUP_SCHEDULE_REL, Buffer.from(JSON.stringify({
+    lastRunStatus: 'failed', lastRunMessage: '网络不可达', lastRunHistoryId: 'h-1', consecutiveFailures: 3,
+    startupMinIntervalMs: 3600000, interval: '24h', enabled: true, schemaVersion: 1,
+    lastRunAt: '2026-10-06T09:00:00.000Z',
   }, null, 2), 'utf8'));
   let items = await adapter.analyzeImport(out.data, makeImportContext(dst, sections));
   assert.equal(items.length, 1);
   assert.equal(items[0]?.kind, 'Skip', '仅运行态字段不同（且键序不同）→ Skip，否则每轮同步都重现同一条 Conflict');
 
   // 配置本体（enabled）不同 → 仍是 Conflict（剔除运行态不得把配置差异一起吞掉）
-  await dst.fs.writeFile(AUTOSYNC_REL, Buffer.from(JSON.stringify({
-    schemaVersion: 2,
-    channels: { git: { enabled: false, interval: '30m', startupMinIntervalMs: 300000, consecutiveFailures: 0 } },
-  }, null, 2), 'utf8'));
+  await dst.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({ enabled: false }));
   items = await adapter.analyzeImport(out.data, makeImportContext(dst, sections));
   assert.equal(items[0]?.kind, 'Conflict');
 });
@@ -211,18 +255,16 @@ test('self: 调度配置仅运行态不同 → Skip（键序不同亦然）；
 test('self: backup-schedule.json 同口径 + 坏 JSON 回落整文件哈希', async () => {
   const adapter = new SelfAdapter();
   const src = makeContext('win32', 'C:\\Users\\alice');
-  await src.fs.writeFile(BACKUP_SCHEDULE_REL, Buffer.from(JSON.stringify({
-    schemaVersion: 1, enabled: true, interval: '24h', startupMinIntervalMs: 3600000,
-    consecutiveFailures: 0, lastRunAt: '2026-10-01T00:00:00.000Z', lastRunStatus: 'success',
-  }, null, 2), 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-01T00:00:00.000Z', lastRunStatus: 'success',
+  }));
   const out = await adapter.export(src, { includeSecrets: false });
   const sections = new Map([['self', out.data]]);
   const dst = makeContext('linux', '/home/bob');
 
-  await dst.fs.writeFile(BACKUP_SCHEDULE_REL, Buffer.from(JSON.stringify({
-    schemaVersion: 1, enabled: true, interval: '24h', startupMinIntervalMs: 3600000,
+  await dst.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
     consecutiveFailures: 2, lastRunAt: '2026-10-06T09:00:00.000Z', lastRunStatus: 'failed',
-  }, null, 2), 'utf8'));
+  }));
   let items = await adapter.analyzeImport(out.data, makeImportContext(dst, sections));
   assert.equal(items[0]?.kind, 'Skip');
 
@@ -235,39 +277,38 @@ test('self: backup-schedule.json 同口径 + 坏 JSON 回落整文件哈希', as
 test('self: 其余白名单文件的比对口径不外溢（仍是整文件哈希）', async () => {
   const adapter = new SelfAdapter();
   const src = makeContext('win32', 'C:\\Users\\alice');
-  await src.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{"transport":"git","git":{"repoUrl":"https://x"},"webdav":{}}', 'utf8'));
+  await src.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', Buffer.from('{"schemaVersion":1,"lastSyncChannel":"webdav"}', 'utf8'));
   const out = await adapter.export(src, { includeSecrets: false });
   const sections = new Map([['self', out.data]]);
   const dst = makeContext('linux', '/home/bob');
-  await dst.fs.writeFile('dsh-config-manager/sync/sync-config.json', Buffer.from('{ "webdav": {}, "git": { "repoUrl": "https://x" }, "transport": "git" }', 'utf8'));
+  await dst.fs.writeFile('dsh-config-manager/sync/ui-prefs.json', Buffer.from('{ "lastSyncChannel": "webdav", "schemaVersion": 1 }', 'utf8'));
   const items = await adapter.analyzeImport(out.data, makeImportContext(dst, sections));
-  assert.equal(items[0]?.kind, 'Conflict', '键序不同但语义相同 —— sync-config 不是调度配置，仍按字节判');
+  assert.equal(items[0]?.kind, 'Conflict', '键序不同但语义相同 —— 非调度配置仍按字节判');
 });
 
 /**
  * issue #127 回归：运行态漂移不得改变导出的分区 hash。
  *
- * 现场：调度器每轮收尾改写 sync-autosync.json 的运行态字段 → self 分区 hashSection 每轮都变
+ * 现场：调度器每轮收尾改写调度配置的运行态字段 → self 分区 hashSection 每轮都变
  * → SyncEngine.hasLocalChanges() 永远为真 → 自动同步的每次远端轮询（缺省 60s）都真推一个
  * 只差 lastRunAt 的新快照（真机 2026-10-25 一天 41 次 push，远端累积 325 个垃圾快照）。
+ *
+ * 载体说明：SEC-01 之后 sync-autosync.json 不再进载荷，同一套运行态剔除语义由仍在白名单的
+ * backup-schedule.json 承载（两个调度配置共用同一份剔除表，见 self.ts 的 VOLATILE_RUN_STATE_KEY_LIST）。
  */
 test('self: 运行态改写不改变分区 hash（自动同步不再每轮误判「本地有改动」）', async () => {
-  const rel = 'dsh-config-manager/sync/sync-autosync.json';
   const src = makeContext('win32', 'C:\\Users\\alice');
   const adapter = new SelfAdapter();
-  const config = (runState: Record<string, unknown>, repoUrl: string) => JSON.stringify({
-    schemaVersion: 2,
-    channels: {
-      git: { enabled: true, intervalMinutes: 30, realtime: true, remoteCheckMs: 60000, repoUrl, branch: 'main', ...runState },
-      webdav: { enabled: false },
-    },
-  }, null, 2);
-
-  await src.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-25T12:00:00.000Z', lastRunStatus: 'success', lastRunHistoryId: 'h-1', consecutiveFailures: 0 }, 'https://x/repo.git'), 'utf8'));
+
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-25T12:00:00.000Z', lastRunStatus: 'success', lastRunHistoryId: 'h-1', consecutiveFailures: 0,
+  }));
   const first = await adapter.export(src, { includeSecrets: false });
 
   // 模拟一次同步收尾：只推进运行态（配置本体不动）
-  await src.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-25T12:01:00.000Z', lastRunStatus: 'failed', lastRunMessage: 'boom', lastRunHistoryId: 'h-2', consecutiveFailures: 1 }, 'https://x/repo.git'), 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-25T12:01:00.000Z', lastRunStatus: 'failed', lastRunMessage: 'boom', lastRunHistoryId: 'h-2', consecutiveFailures: 1,
+  }));
   const second = await adapter.export(src, { includeSecrets: false });
 
   assert.equal(
@@ -275,13 +316,13 @@ test('self: 运行态改写不改变分区 hash（自动同步不再每轮误判
     hashSection(first.data),
     '仅运行态不同 → 分区 hash 必须不变（否则每轮远端轮询都真推一次）',
   );
-  const payload = Buffer.from(second.data.files.find((f) => f.relativePath === 'sync/sync-autosync.json')!.data).toString('utf8');
+  const payload = Buffer.from(second.data.files.find((f) => f.relativePath === 'sync/backup-schedule.json')!.data).toString('utf8');
   assert.ok(!payload.includes('lastRunAt'), '导出载荷不含运行态：远端不该接收本机执行记录');
   assert.ok(!payload.includes('consecutiveFailures'));
-  assert.ok(payload.includes('"repoUrl":"https://x/repo.git"'), '配置本体仍在载荷里');
+  assert.ok(payload.includes('"interval":"24h"'), '配置本体仍在载荷里');
 
   // 配置本体变化必须被识别（不能把运行态过滤做成「什么都判不变」）
-  await src.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-25T12:02:00.000Z' }, 'https://y/repo.git'), 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({ interval: '12h' }, { lastRunAt: '2026-10-25T12:02:00.000Z' }));
   const third = await adapter.export(src, { includeSecrets: false });
   assert.notEqual(hashSection(third.data), hashSection(second.data), '真实配置变化必须让分区 hash 变化');
 });
@@ -296,46 +337,46 @@ test('self: 运行态改写不改变分区 hash（自动同步不再每轮误判
  * → hasLocalChanges() 恒真 → 每轮都真推一个新快照。
  */
 test('self: 跳过码翻转不改变分区 hash（issue #119：自动同步不再每轮真推快照）', async () => {
-  const rel = 'dsh-config-manager/sync/sync-autosync.json';
   const src = makeContext('win32', 'C:\\Users\\alice');
   const adapter = new SelfAdapter();
-  const config = (runState: Record<string, unknown>, repoUrl = 'https://x/repo.git') => JSON.stringify({
-    schemaVersion: 2,
-    channels: {
-      git: { enabled: true, intervalMinutes: 30, realtime: true, remoteCheckMs: 60000, repoUrl, branch: 'main', ...runState },
-      webdav: { enabled: false },
-    },
-  }, null, 2);
 
   // 轮次 A：跳过（无本地改动）
-  await src.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-29T09:00:00.000Z', lastRunStatus: 'success', lastRunSkipReason: 'upToDate', consecutiveFailures: 0 }), 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-29T09:00:00.000Z', lastRunStatus: 'success', lastRunSkipReason: 'upToDate', consecutiveFailures: 0,
+  }));
   const skipRound = await adapter.export(src, { includeSecrets: false });
 
   // 轮次 B：真推一次 —— 跳过码被清空，其余与 A 相同
-  await src.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-29T09:01:00.000Z', lastRunStatus: 'success', consecutiveFailures: 0 }), 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-29T09:01:00.000Z', lastRunStatus: 'success', consecutiveFailures: 0,
+  }));
   const pushRound = await adapter.export(src, { includeSecrets: false });
 
   // 轮次 C：跳过（冲突，带待确认分区数）
-  await src.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-29T09:02:00.000Z', lastRunStatus: 'success', lastRunSkipReason: 'conflict', lastRunSkipCount: 3, consecutiveFailures: 0 }), 'utf8'));
+  await src.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-29T09:02:00.000Z', lastRunStatus: 'success', lastRunSkipReason: 'conflict', lastRunSkipCount: 3, consecutiveFailures: 0,
+  }));
   const conflictRound = await adapter.export(src, { includeSecrets: false });
 
   const base = hashSection(skipRound.data);
   assert.equal(hashSection(pushRound.data), base, '跳过码被清空不得改变分区 hash（否则每轮都判「本地有改动」）');
   assert.equal(hashSection(conflictRound.data), base, '跳过码换值 / 带分区数不得改变分区 hash');
 
-  const payload = Buffer.from(pushRound.data.files.find((f) => f.relativePath === 'sync/sync-autosync.json')!.data).toString('utf8');
+  const payload = Buffer.from(pushRound.data.files.find((f) => f.relativePath === 'sync/backup-schedule.json')!.data).toString('utf8');
   assert.ok(!payload.includes('lastRunSkip'), '导出载荷不含跳过码：远端不该接收本机执行记录');
-  assert.ok(payload.includes('"repoUrl":"https://x/repo.git"'), '配置本体仍在载荷里');
+  assert.ok(payload.includes('"interval":"24h"'), '配置本体仍在载荷里');
 
   // 同一份远端载荷回灌本机（本机多出跳过码）→ Skip，不是 Conflict
   const dst = makeContext('linux', '/home/bob');
-  await dst.fs.writeFile(rel, Buffer.from(config({ lastRunAt: '2026-10-29T09:05:00.000Z', lastRunStatus: 'success', lastRunSkipReason: 'upToDate' }), 'utf8'));
+  await dst.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({}, {
+    lastRunAt: '2026-10-29T09:05:00.000Z', lastRunStatus: 'success', lastRunSkipReason: 'upToDate',
+  }));
   const sections = new Map([['self', pushRound.data]]);
   let items = await adapter.analyzeImport(pushRound.data, makeImportContext(dst, sections));
   assert.equal(items[0]?.kind, 'Skip', '仅跳过码不同 → Skip（此前每轮判 Conflict 并重复推送）');
 
   // 配置本体变化仍必须被识别（不能把剔除做成「什么都判不变」）
-  await dst.fs.writeFile(rel, Buffer.from(config({ lastRunSkipReason: 'upToDate' }, 'https://y/repo.git'), 'utf8'));
+  await dst.fs.writeFile(BACKUP_SCHEDULE_REL, backupScheduleBody({ interval: '6h' }, { lastRunSkipReason: 'upToDate' }));
   items = await adapter.analyzeImport(pushRound.data, makeImportContext(dst, sections));
   assert.equal(items[0]?.kind, 'Conflict', '真实配置变化必须仍判 Conflict');
-});
+});