dsh-crate-web 0.1.1 → 0.1.2-preview.2

package/lib/client.js

@@ -43,17 +43,14 @@ window.__ModuleLoader__.load({
 			groupToggle: "dsh-crate-group-toggle",
 			groupBody: "dsh-crate-group-body",
 			badge: "dsh-crate-badge",
-			conflict: "dsh-crate-conflict",
-			toneOk: "dsh-crate-tone-ok",
-			toneBad: "dsh-crate-tone-bad",
-			toneNeutral: "dsh-crate-tone-neutral"
+			conflict: "dsh-crate-conflict"
 		};
 		const STYLE = `
 .dsh-crate-section{display:flex;flex-direction:column;gap:12px;max-width:760px;color:var(--dsw-alias-label-primary)}
 .dsh-crate-heading{margin:0;font-size:18px;font-weight:600}.dsh-crate-intro,.dsh-crate-muted{margin:0;font-size:13px;color:var(--dsw-alias-label-tertiary)}
 .dsh-crate-tabs{display:flex;gap:20px;border-bottom:1px solid var(--dsw-alias-border-l2);overflow:auto}.dsh-crate-tab{border:0;padding:7px 1px 9px;background:transparent;color:var(--dsw-alias-label-tertiary);font:inherit;cursor:pointer;white-space:nowrap}
 .dsh-crate-tab[data-active=true]{color:var(--dsw-alias-label-primary);border-bottom:2px solid var(--dsw-alias-label-primary)}.dsh-crate-form{display:flex;flex-direction:column;gap:10px}
-.dsh-crate-label{display:flex;flex-direction:column;gap:5px;font-size:13px}.dsh-crate-select,.dsh-crate-file{max-width:100%;padding:7px 8px;border:1px solid var(--dsw-alias-border-l2,#3a3a40);border-radius:6px;background-color:var(--dsw-alias-fill-secondary,rgba(255,255,255,.08));color:var(--dsw-alias-label-primary,#f9fafb);color-scheme:dark}.dsh-crate-select option{background-color:#242428;color:#f9fafb}@media (prefers-color-scheme:light){.dsh-crate-select,.dsh-crate-file{background-color:var(--dsw-alias-fill-secondary,#fff);color:var(--dsw-alias-label-primary,#111827);color-scheme:light}.dsh-crate-select option{background-color:#fff;color:#111827}}
+.dsh-crate-label{display:flex;flex-direction:column;gap:5px;font-size:13px}.dsh-crate-select,.dsh-crate-file{max-width:100%;min-width:0;padding:7px 8px;border:1px solid var(--dsw-alias-border-l2,#3a3a40);border-radius:6px;background-color:var(--dsw-alias-bg-layer-1,Canvas);color:var(--dsw-alias-label-primary,CanvasText);color-scheme:inherit}.dsh-crate-select option{background-color:var(--dsw-alias-bg-layer-1,Canvas);color:var(--dsw-alias-label-primary,CanvasText)}.dsh-crate-inventory-item{overflow-wrap:anywhere}.dsh-crate-inventory-item>span{min-width:0}
 .dsh-crate-plugin{display:grid;grid-template-columns:minmax(0,1fr) 150px;gap:8px;align-items:center}.dsh-crate-button{align-self:flex-start;border:0;border-radius:6px;padding:8px 13px;background:var(--dsw-alias-state-business-primary);color:white;cursor:pointer}.dsh-crate-button:disabled{cursor:default;opacity:.5}
 .dsh-crate-report,.dsh-crate-preview,.dsh-crate-diagnostic{display:flex;flex-direction:column;gap:8px;padding:10px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;overflow-wrap:anywhere;font-size:12px}.dsh-crate-finding,.dsh-crate-step{padding:7px;border-radius:5px;background:var(--dsw-alias-fill-tertiary)}
 .dsh-crate-preview-row{display:grid;grid-template-columns:170px minmax(0,1fr);gap:8px}.dsh-crate-preview-row pre{margin:0;white-space:pre-wrap}.dsh-crate-diagnostic-grid{display:grid;grid-template-columns:150px minmax(0,1fr);gap:6px}.dsh-crate-diagnostic-grid dt{font-weight:600}.dsh-crate-diagnostic-grid dd{margin:0;white-space:pre-wrap}.dsh-crate-step{display:flex;gap:8px;align-items:flex-start}.dsh-crate-step-status{min-width:80px;font-weight:600}
@@ -63,36 +60,24 @@ window.__ModuleLoader__.load({
 .dsh-crate-group{display:flex;flex-direction:column;gap:6px}.dsh-crate-group-head{display:flex;align-items:center;justify-content:space-between;gap:8px;padding:2px 0}.dsh-crate-group-toggle{border:0;background:transparent;color:var(--dsw-alias-state-business-primary,#4f8cff);font:inherit;font-size:12px;cursor:pointer;padding:2px 4px}.dsh-crate-group-body{display:flex;flex-direction:column;gap:6px}
 .dsh-crate-badge{margin-left:6px;padding:1px 5px;border-radius:4px;background:var(--dsw-alias-fill-tertiary);color:var(--dsw-alias-label-tertiary);font-size:11px;border:1px solid var(--dsw-alias-border-l2)}.dsh-crate-conflict{color:var(--dsw-alias-label-negative)}
 .dsh-crate-modal-backdrop{position:fixed;inset:0;z-index:1000;display:flex;align-items:center;justify-content:center;padding:24px;background:rgba(0,0,0,.58)}.dsh-crate-modal{display:flex;flex-direction:column;gap:12px;width:min(420px,calc(100vw - 48px));padding:18px;border:1px solid var(--dsw-alias-border-l2,#3a3a40);border-radius:10px;background:var(--dsw-alias-fill-primary,#1d1d20);color:var(--dsw-alias-label-primary,#f9fafb);box-shadow:0 18px 50px rgba(0,0,0,.45)}.dsh-crate-modal h3{margin:0;font-size:16px}.dsh-crate-modal p{margin:0;font-size:13px;color:var(--dsw-alias-label-tertiary,#b6b6bd)}.dsh-crate-modal-actions{display:flex;justify-content:flex-end;gap:8px}.dsh-crate-modal-actions button:last-child{background:var(--dsw-alias-state-business-primary,#4b7bec);color:#fff}
-.dsh-crate-tone-ok{color:var(--dsw-alias-label-positive)}.dsh-crate-tone-bad{color:var(--dsw-alias-label-negative)}.dsh-crate-tone-neutral{color:var(--dsw-alias-label-tertiary)}
+@media(max-width:600px){
+  [data-dsh-module=settings]:has(.dsh-crate-section){flex-direction:column;width:calc(100vw - 24px);max-width:calc(100vw - 24px)}
+  [data-dsh-module=settings]:has(.dsh-crate-section)>nav{width:100%;gap:8px;padding:12px 12px 0}
+  [data-dsh-module=settings]:has(.dsh-crate-section)>nav>div:last-child{flex-direction:row;overflow-x:auto}
+  [data-dsh-module=settings]:has(.dsh-crate-section)>nav button{flex-shrink:0}
+  [data-dsh-module=settings]:has(.dsh-crate-section)>div{min-height:0}
+  [data-dsh-module=settings]:has(.dsh-crate-section)>div>div:last-child{padding:0 12px 12px}
+  .dsh-crate-section{min-width:0;max-width:100%}
+  .dsh-crate-inventory-item{flex-wrap:wrap;justify-content:flex-start}
+  .dsh-crate-inventory-item>span:first-of-type{flex:1 1 100%}
+  .dsh-crate-preview-row,.dsh-crate-diagnostic-grid{grid-template-columns:minmax(0,1fr)}
+  .dsh-crate-section pre{max-width:100%;overflow:auto;white-space:pre-wrap;overflow-wrap:anywhere}
+}
+
 `;
 		function isObject(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value);
 		}
-		function formatTime(value) {
-			if (typeof value !== "string" || !value) return "";
-			const date = new Date(value);
-			return Number.isNaN(date.getTime()) ? value : date.toLocaleString();
-		}
-		function toneOf(status) {
-			const text = String(status ?? "").toUpperCase();
-			if (text.includes("FAIL") || text.includes("ERROR") || text === "BLOCKER" || text === "UNKNOWN") return css.toneBad;
-			if (text.includes("PASS") || text === "READY" || text === "PREPARED" || text === "OK") return css.toneOk;
-			return css.toneNeutral;
-		}
-		const FIELD_LABELS = {
-			code: "diagCode",
-			stage: "diagStage",
-			item: "diagItem",
-			expected: "diagExpected",
-			observed: "diagObserved",
-			evidence: "diagEvidence",
-			impact: "diagImpact",
-			originalProfileStatus: "diagOriginalProfile",
-			failedProfileStatus: "diagFailedProfile",
-			temporaryProfileStatus: "diagTemporaryProfile",
-			canContinue: "diagCanContinue",
-			suggestedNextStep: "diagSuggestedNext"
-		};
 		function resultOf(value) {
 			return isObject(value.result) ? value.result : value;
 		}
@@ -113,7 +98,9 @@ window.__ModuleLoader__.load({
 		}
 		function pluginLabel(plugin) {
 			const resolved = isObject(plugin.resolved) ? plugin.resolved : {};
-			return `${String(plugin.name ?? "unknown")}@${String(resolved.version ?? "unknown")}`;
+			const runtime = isObject(plugin.runtime) ? plugin.runtime : {};
+			const version = typeof resolved.version === "string" && resolved.version !== "unknown" ? resolved.version : runtime.version;
+			return `${String(plugin.name ?? "unknown")}@${String(version ?? "unknown")}`;
 		}
 		function upsertProfileRow(list, row) {
 			const name = typeof row.name === "string" ? row.name : "";
@@ -250,7 +237,7 @@ window.__ModuleLoader__.load({
 							"temporaryProfileStatus",
 							"canContinue",
 							"suggestedNextStep"
-						].filter((field) => diagnostic[field] !== void 0).map((field) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("dt", { children: t(FIELD_LABELS[field] ?? field) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("dd", { children: display(diagnostic[field]) })] }, field))
+						].filter((field) => diagnostic[field] !== void 0).map((field) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("dt", { children: field }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("dd", { children: display(diagnostic[field]) })] }, field))
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						className: css.button,
@@ -276,10 +263,7 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("coreStatus") }),
 						" · ",
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: toneOf(result.status),
-							children: String(result.status ?? "UNKNOWN")
-						})
+						String(result.status ?? "UNKNOWN")
 					] }),
 					findings.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("findings") }), findings.map((finding, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: css.finding,
@@ -301,12 +285,14 @@ window.__ModuleLoader__.load({
 		}
 		function ImportPreview({ value, t, targetProfile, overwrite }) {
 			const result = resultOf(value);
+			if (typeof result.canContinue !== "boolean") return null;
 			const pack = isObject(result.pack) ? result.pack : {};
 			const profile = isObject(pack.profile) ? pack.profile : {};
 			const requiredPlugins = objects(result.requiredPlugins);
 			const optionalPlugins = objects(result.optionalPlugins);
 			const warningCount = typeof result.warningCount === "number" ? result.warningCount : 0;
 			const environment = isObject(result.environment) ? result.environment : {};
+			const secrets = isObject(result.secrets) ? result.secrets : {};
 			const target = targetProfile?.trim() || String(result.targetProfile ?? profile.name ?? "UNKNOWN");
 			const safety = overwrite ? t("overwritePreview") : t("willNotOverwrite");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -338,6 +324,16 @@ window.__ModuleLoader__.load({
 						"data-field": "environment",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("environment") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", { children: display(environment) })]
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: css.previewRow,
+						"data-field": "requiredSecrets",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("requiredSecrets") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: Array.isArray(secrets.required) ? secrets.required.join(", ") || t("none") : t("none") })]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: css.previewRow,
+						"data-field": "missingSecrets",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("missingSecrets") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: Array.isArray(secrets.missing) ? secrets.missing.join(", ") || t("none") : t("none") })]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: css.previewRow,
 						"data-field": "coreDecision",
@@ -404,14 +400,10 @@ window.__ModuleLoader__.load({
 						" · ",
 						String(result.status ?? "UNKNOWN")
 					] }),
-					String(result.status ?? "") === "UNTESTED" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: css.muted,
-						children: t("verifyUntestedNote")
-					}) : null,
 					steps.map((step, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: css.step,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: `${css.stepStatus} ${toneOf(step.status)}`,
+							className: css.stepStatus,
 							children: String(step.status ?? "UNKNOWN")
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: String(step.name ?? "unknown") }),
@@ -434,6 +426,14 @@ window.__ModuleLoader__.load({
 			const [profiles, setProfiles] = (0, react.useState)([]);
 			const [profile, setProfile] = (0, react.useState)("");
 			const [modes, setModes] = (0, react.useState)({});
+			const [preset, setPreset] = (0, react.useState)("custom");
+			const [secretNames, setSecretNames] = (0, react.useState)("");
+			const [dataSelection, setDataSelection] = (0, react.useState)([]);
+			const [dataOwners, setDataOwners] = (0, react.useState)({});
+			const [dataKinds, setDataKinds] = (0, react.useState)({});
+			const [exportPlan, setExportPlan] = (0, react.useState)();
+			const [reviewedSelection, setReviewedSelection] = (0, react.useState)("");
+			const [downloadSelection, setDownloadSelection] = (0, react.useState)("");
 			const [file, setFile] = (0, react.useState)();
 			const [report, setReport] = (0, react.useState)();
 			const [history, setHistory] = (0, react.useState)([]);
@@ -467,6 +467,41 @@ window.__ModuleLoader__.load({
 			const exportBundles = installedBundles.filter((bundle) => bundle.active === true);
 			const conflictBundles = installedBundles.filter((bundle) => bundle.conflict === true);
 			const exportNames = exportBundles.map((bundle) => String(bundle.name ?? "")).filter(Boolean);
+			const requiredSecrets = [...new Set(secretNames.split(/[\s,]+/).filter(Boolean))];
+			const invalidSecretNames = requiredSecrets.some((name) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name));
+			const exportBody = {
+				profileName: profile,
+				includeInstalledBundles: true,
+				preset,
+				dataSelection,
+				requiredSecrets,
+				embed: exportNames.filter((name) => (modes[name] ?? "embedded") === "embedded"),
+				referenceOnly: exportNames.filter((name) => (modes[name] ?? "embedded") === "reference-only")
+			};
+			const exportSignature = JSON.stringify(exportBody);
+			const previewExport = async () => {
+				setBusy(true);
+				setError("");
+				try {
+					const value = await request("export-plan", exportBody);
+					if (value.status === "failed") throw new Error(failMessage(value) || t("error"));
+					setExportPlan(resultOf(value));
+					setReviewedSelection(exportSignature);
+				} catch (caught) {
+					setError(caught instanceof Error ? caught.message : String(caught));
+					setReviewedSelection("");
+				} finally {
+					setBusy(false);
+				}
+			};
+			(0, react.useEffect)(() => {
+				setDataSelection([]);
+				setDataOwners({});
+				setDataKinds({});
+				setSecretNames("");
+				setExportPlan(void 0);
+				setReviewedSelection("");
+			}, [profile]);
 			const canImport = isObject(report?.result) && report.result.canContinue === true;
 			const currentRuntimeProfile = typeof runtime?.currentProfile === "string" ? runtime.currentProfile : "";
 			const loadProfiles = async () => {
@@ -524,19 +559,18 @@ window.__ModuleLoader__.load({
 			const run = async (action, body) => {
 				setBusy(true);
 				setError("");
+				if (action === "export") setDownloadSelection("");
 				try {
 					const value = await request(action, body);
 					setReport(value);
 					const result = resultOf(value);
 					const profileLabel = String(body.profileName ?? "");
 					if (value.status === "failed" || result.status === "failed" || result.status === "FAIL") showToast(`${t("error")}: ${failMessage(value) || t("error")}`);
-					else if (action === "export" && typeof value.downloadName === "string") showToast(`${t("exportSuccess")} ${profileLabel}`.trim());
-					else if (action === "inspect") showToast(t("inspectSuccess"));
-					else if (action === "verify") {
-						if (value.success === true) showToast(`${t("verifySuccess")} ${profileLabel}`.trim());
-						else if (result.status === "FAIL") showToast(`${t("error")}: ${failMessage(value) || t("verifyFailed")}`);
-						else showToast(`${t("verifyFinished")} ${profileLabel} · ${String(result.status ?? "")}`.trim());
-					}
+					else if (action === "export" && typeof value.downloadName === "string") {
+						setDownloadSelection(JSON.stringify(body));
+						showToast(`${t("exportSuccess")} ${profileLabel}`.trim());
+					} else if (action === "inspect") showToast(t("inspectSuccess"));
+					else if (action === "verify" && value.success !== true) showToast(`${t("verifyFinished")} ${profileLabel} · ${String(result.status ?? "")}`.trim());
 				} catch (caught) {
 					const message = caught instanceof Error ? caught.message : String(caught);
 					setError(message);
@@ -695,8 +729,7 @@ window.__ModuleLoader__.load({
 					return;
 				}
 				if (!window.confirm(`${t("overwriteWarning")}\n\n${target}`)) {
-					showToast(t("overwriteCanceled"));
-					setError("");
+					setError(t("overwriteCanceled"));
 					return;
 				}
 				setBusy(true);
@@ -840,10 +873,14 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						className: css.button,
 						type: "button",
-						disabled: busy || !switchTarget,
+						disabled: busy || !switchTarget || runtime?.restartConfigured !== true,
 						onClick: () => void switchSelectedProfile(),
 						children: busy ? t("switchPending") : t("switchProfile")
 					}),
+					runtime?.restartConfigured === false ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: css.muted,
+						children: t("switchUnavailable")
+					}) : null,
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 						className: css.label,
 						children: [t("deleteProfile"), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
@@ -1006,10 +1043,13 @@ window.__ModuleLoader__.load({
 													className: css.select,
 													disabled: conflict,
 													value: modes[name] ?? "embedded",
-													onChange: (event) => setModes((current) => ({
-														...current,
-														[name]: event.target.value
-													})),
+													onChange: (event) => {
+														setPreset("custom");
+														setModes((current) => ({
+															...current,
+															[name]: event.target.value
+														}));
+													},
 													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
 														value: "embedded",
 														children: t("embedded")
@@ -1047,19 +1087,172 @@ window.__ModuleLoader__.load({
 									})]
 								}, `conflict-${String(bundle.name)}`))]
 							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", { children: [
+								t("exportPreset"),
+								" ",
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+									className: css.select,
+									value: preset,
+									disabled: busy,
+									onChange: (event) => {
+										const value = event.target.value;
+										setPreset(value);
+										if (value !== "custom") setModes(Object.fromEntries(exportNames.map((name) => [name, value === "freeze" ? "embedded" : "reference-only"])));
+									},
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: "share",
+											children: "Share"
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: "freeze",
+											children: "Freeze"
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: "custom",
+											children: "Custom"
+										})
+									]
+								})
+							] }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: css.label,
+								children: [t("requiredSecrets"), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									className: css.file,
+									value: secretNames,
+									disabled: busy,
+									autoComplete: "off",
+									spellCheck: false,
+									"aria-describedby": "crate-secret-hint",
+									"aria-invalid": invalidSecretNames,
+									onChange: (event) => setSecretNames(event.target.value)
+								})]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: css.muted,
+								id: "crate-secret-hint",
+								children: t("secretNamesHint")
+							}),
+							invalidSecretNames ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: css.error,
+								role: "alert",
+								children: t("invalidSecretNames")
+							}) : null,
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								className: css.button,
 								type: "button",
-								disabled: busy || !profile,
-								onClick: () => void run("export", {
-									profileName: profile,
-									includeInstalledBundles: true,
-									embed: exportNames.filter((name) => (modes[name] ?? "embedded") === "embedded"),
-									referenceOnly: exportNames.filter((name) => (modes[name] ?? "embedded") === "reference-only")
-								}),
+								disabled: busy || !profile || invalidSecretNames,
+								onClick: () => void previewExport(),
+								children: busy ? t("working") : t("previewExport")
+							}),
+							exportPlan ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: css.inventory,
+								"data-field": "exportPreview",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("requiredSecrets") }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										"data-field": "reviewedSecrets",
+										children: Array.isArray(exportPlan.requiredSecrets) ? exportPlan.requiredSecrets.join(", ") || t("none") : t("none")
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("portableData") }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("privacyReview") }),
+									objects(exportPlan.dataInventory).map((item, index) => {
+										const path = typeof item.path === "string" ? item.path : "";
+										const conversation = item.kind === "conversation";
+										const chosen = dataSelection.some((row) => row.path === path);
+										const owner = conversation ? "@deepseek-ai/dsh-session-persistence-jsonl" : dataOwners[path] || "";
+										const selectable = item.selectable === true || item.classification === "portable";
+										return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											className: css.inventoryItem,
+											children: [
+												selectable ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+													type: "checkbox",
+													"aria-label": path,
+													disabled: busy || !owner,
+													checked: chosen,
+													onChange: (event) => {
+														setDataSelection((current) => event.target.checked ? [...current.filter((row) => row.path !== path), {
+															path,
+															owner,
+															kind: conversation ? "conversation" : dataKinds[path] || "plugin-data"
+														}] : current.filter((row) => row.path !== path));
+													}
+												}) : null,
+												/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+													path || String(item.name ?? ""),
+													" · ",
+													String(item.classification ?? "")
+												] }),
+												selectable && !conversation ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+													className: css.select,
+													"aria-label": path + " " + t("dataOwner"),
+													disabled: busy || chosen,
+													value: owner,
+													onChange: (event) => setDataOwners((current) => ({
+														...current,
+														[path]: event.target.value
+													})),
+													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: "",
+														children: t("chooseOwner")
+													}), objects(exportPlan.plugins).map((plugin) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+														value: String(plugin.name),
+														children: String(plugin.name)
+													}, String(plugin.name)))]
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+													className: css.select,
+													"aria-label": path + " " + t("dataKind"),
+													disabled: busy || chosen,
+													value: dataKinds[path] || "plugin-data",
+													onChange: (event) => setDataKinds((current) => ({
+														...current,
+														[path]: event.target.value
+													})),
+													children: [
+														/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+															value: "plugin-data",
+															children: "Plugin data"
+														}),
+														/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+															value: "plugin-config",
+															children: "Plugin config"
+														}),
+														/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+															value: "plugin-workflow",
+															children: "Plugin workflow"
+														})
+													]
+												})] }) : null
+											]
+										}, path || index);
+									}),
+									isObject(exportPlan.completeness) ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("completeness") }),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", { children: [
+											t("embedded"),
+											": ",
+											Array.isArray(exportPlan.completeness.embedded) ? exportPlan.completeness.embedded.length : 0,
+											" · ",
+											t("referenceOnly"),
+											": ",
+											Array.isArray(exportPlan.completeness.referenceOnly) ? exportPlan.completeness.referenceOnly.length : 0,
+											" · ",
+											t("offlineRestore"),
+											": ",
+											String(exportPlan.completeness.offlineRestorable ?? "UNPROVEN")
+										] }),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", { children: t("rawJson") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", { children: JSON.stringify(exportPlan.completeness, null, 2) })] })
+									] }) : null
+								]
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								className: css.button,
+								type: "button",
+								disabled: busy || !profile || invalidSecretNames || reviewedSelection !== exportSignature,
+								onClick: () => void run("export", exportBody),
 								children: busy ? t("exporting") : t("exportButton")
 							}),
-							isObject(report) && typeof report.downloadName === "string" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+							!busy && downloadSelection === exportSignature && isObject(report) && typeof report.downloadName === "string" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
 								href: `/dsh-crate/download?name=${encodeURIComponent(report.downloadName)}`,
 								children: t("download")
 							}) : null,
@@ -1188,15 +1381,12 @@ window.__ModuleLoader__.load({
 						}) : history.map((item, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 							className: css.historyItem,
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-								formatTime(item.time),
+								item.time,
 								" · ",
 								item.action,
 								" · ",
 								item.profile ?? item.pack ?? ""
-							] }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", {
-								className: toneOf(item.status),
-								children: item.status
-							})]
+							] }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: item.status })]
 						}, `${item.time}-${index}`))
 					}) : null,
 					newProfileDialogOpen ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -1241,7 +1431,7 @@ window.__ModuleLoader__.load({
 										className: css.button,
 										type: "button",
 										onClick: () => void confirmNewProfileImport(),
-										children: t("confirmImportAction")
+										children: t("importButton")
 									})]
 								})
 							]
@@ -1366,8 +1556,7 @@ window.__ModuleLoader__.load({
 			choosePack: "Choose a .dshcrate file",
 			inspectButton: "Run Preflight",
 			importButton: "Import Crate",
-			confirmImportAction: "Confirm Import",
-			confirmImport: "Imports as a new Profile after a Preflight check. Continue?",
+			confirmImport: "Preflight passed. Import as a new Profile?",
 			working: "Working…",
 			noReport: "No report yet.",
 			noHistory: "No DSH Crate operations have been recorded.",
@@ -1418,6 +1607,11 @@ window.__ModuleLoader__.load({
 			profileNameRequired: "Profile name is required.",
 			profileNameExists: "That Profile name already exists.",
 			cancel: "Cancel",
+			switchUnavailable: "This desktop environment cannot switch and restart Profiles here. Start the restored environment in a separate DSH Home.",
+			requiredSecrets: "Required Secret names",
+			missingSecrets: "Missing Secret names",
+			secretNamesHint: "Enter environment variable names only, separated by spaces or commas (for example DEEPSEEK_API_KEY). Never enter values. Blank keeps names recorded by a prior import; no credentials are read automatically.",
+			invalidSecretNames: "Use environment variable names containing letters, digits and underscores, starting with a letter or underscore. Do not enter assignments or Secret values.",
 			createProfile: "New Profile",
 			createProfilePlaceholder: "new profile name",
 			createProfileHint: "A new Profile includes the official DSH bundles and the DSH Crate plugin by default.",
@@ -1448,26 +1642,22 @@ window.__ModuleLoader__.load({
 			conflictBundles: "Conflicted Bundles (not exported)",
 			collapse: "Collapse",
 			expand: "Expand",
+			exportPreset: "Export mode",
+			previewExport: "Review export contents",
+			portableData: "Selected conversations and plugin data",
+			dataOwner: "Plugin owner",
+			chooseOwner: "Choose the owner after checking its storage contract",
+			dataKind: "Data type",
+			privacyReview: "Review selected data before sharing. Recognizable credentials are blocked; private text still needs your review.",
+			completeness: "Freeze completeness",
+			offlineRestore: "Offline-restorable",
 			exportSuccess: "Crate exported successfully.",
 			inspectSuccess: "Preflight finished.",
 			verifySuccess: "Verification passed.",
 			verifyFailed: "Verification failed.",
 			verifyFinished: "Verification finished.",
-			verifyUntestedNote: "UNTESTED means composition was checked only; runtime, model, session, and plugin behavior were NOT actually verified.",
 			importOverwritten: "Profile overwritten.",
-			switchPending: "Switching Profile and waiting for DSH ready…",
-			diagCode: "Code",
-			diagStage: "Stage",
-			diagItem: "Item",
-			diagExpected: "Expected",
-			diagObserved: "Observed",
-			diagEvidence: "Evidence",
-			diagImpact: "Impact",
-			diagOriginalProfile: "Original Profile",
-			diagFailedProfile: "Failed Profile",
-			diagTemporaryProfile: "Temporary Profile",
-			diagCanContinue: "Can continue",
-			diagSuggestedNext: "Suggested next step"
+			switchPending: "Switching Profile and waiting for DSH ready…"
 		};
 		const zh = {
 			nav: "DSH Crate",
@@ -1487,8 +1677,7 @@ window.__ModuleLoader__.load({
 			choosePack: "选择 .dshcrate 文件",
 			inspectButton: "运行 Preflight",
 			importButton: "导入 Crate",
-			confirmImportAction: "确认导入",
-			confirmImport: "将作为新 Profile 导入，导入前会先执行 Preflight 检查。是否继续？",
+			confirmImport: "Preflight 已通过。要作为新 Profile 导入吗？",
 			working: "处理中…",
 			noReport: "暂无报告。",
 			noHistory: "还没有 DSH Crate 操作记录。",
@@ -1539,6 +1728,11 @@ window.__ModuleLoader__.load({
 			profileNameRequired: "必须填写 Profile 名称。",
 			profileNameExists: "该 Profile 名称已存在。",
 			cancel: "取消",
+			switchUnavailable: "当前桌面环境不支持在此切换并重启 Profile。请在独立的 DSH Home 中启动恢复后的环境。",
+			requiredSecrets: "所需 Secret 名称",
+			missingSecrets: "缺失的 Secret 名称",
+			secretNamesHint: "只填写环境变量名称，用空格或逗号分隔，例如 DEEPSEEK_API_KEY。不要填写值。留空时沿用此前导入记录的名称；不会自动读取凭据。",
+			invalidSecretNames: "名称只能包含字母、数字和下划线，并以字母或下划线开头。不要填写赋值表达式或 Secret 值。",
 			createProfile: "新建 Profile",
 			createProfilePlaceholder: "新 Profile 名称",
 			createProfileHint: "新 Profile 默认包含官方插件与本插件（DSH Crate）。",
@@ -1569,26 +1763,22 @@ window.__ModuleLoader__.load({
 			conflictBundles: "冲突 Bundle（未导出）",
 			collapse: "折叠",
 			expand: "展开",
+			exportPreset: "导出模式",
+			previewExport: "预览导出内容",
+			portableData: "选择会话与插件数据",
+			dataOwner: "所属插件",
+			chooseOwner: "确认存储归属后选择插件",
+			dataKind: "数据类型",
+			privacyReview: "分享前请检查所选内容。可识别的凭据会被阻止，私人文本仍需自行检查。",
+			completeness: "Freeze 完整度",
+			offlineRestore: "离线可恢复",
 			exportSuccess: "Crate 导出成功。",
 			inspectSuccess: "Preflight 检查完成。",
 			verifySuccess: "验证通过。",
 			verifyFailed: "验证未通过。",
 			verifyFinished: "验证完成。",
-			verifyUntestedNote: "UNTESTED 表示仅验证了组合（composition），运行时、模型、会话、插件业务行为均未实际验证。",
 			importOverwritten: "Profile 已覆盖。",
-			switchPending: "正在切换 Profile，等待 DSH ready…",
-			diagCode: "诊断代码",
-			diagStage: "失败阶段",
-			diagItem: "对象",
-			diagExpected: "预期",
-			diagObserved: "实际",
-			diagEvidence: "证据",
-			diagImpact: "影响",
-			diagOriginalProfile: "原 Profile 状态",
-			diagFailedProfile: "失败 Profile 状态",
-			diagTemporaryProfile: "临时 Profile 状态",
-			diagCanContinue: "是否可继续",
-			diagSuggestedNext: "建议下一步"
+			switchPending: "正在切换 Profile，等待 DSH ready…"
 		};
 		//#endregion
 		//#region src/client/index.tsx

package/lib/index.d.ts

@@ -1,4 +1,10 @@
 import { Context } from "@deepseek-ai/cordis";
+
+//#region src/windows-terminal.d.ts
+interface WindowsTerminalConfig {
+  windowsTerminalCompatibility?: boolean;
+}
+//#endregion
 //#region src/index.d.ts
 /** Minimal structural projection of the Cordis Loader entry tree used by DSH. */
 interface LoaderEntryOptions {
@@ -25,6 +31,6 @@ declare module '@deepseek-ai/cordis' {
 }
 /** Register the host bridge. The Core executable is intentionally external. */
 declare const inject: string[];
-declare function apply(ctx: Context): void;
+declare function apply(ctx: Context, config?: WindowsTerminalConfig): void;
 //#endregion
 export { apply, inject };