dsh-instruction-memory 1.1.0 → 1.3.0

package/lib/client.js

@@ -118,6 +118,61 @@ window.__ModuleLoader__.load({
   border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.14)); background:var(--dsw-alias-bg-layer-2,rgba(0,0,0,.04)); }
 .im-undo button { border:1px solid var(--dsw-alias-brand-primary,#3b6cff); color:var(--dsw-alias-brand-primary,#3b6cff);
   background:transparent; border-radius:7px; padding:2px 10px; font-size:12px; font-family:inherit; cursor:pointer; }
+/* ---- F13 配置集 ---- */
+.im-sets { display:flex; flex-direction:column; gap:7px; padding:10px 12px; border-radius:10px;
+  border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); background:var(--dsw-alias-bg-layer-2,rgba(0,0,0,.03)); }
+.im-sets-row { display:flex; align-items:center; gap:8px; flex-wrap:wrap; }
+.im-select-set { max-width:220px; }
+.im-active-dot { width:7px; height:7px; border-radius:50%; flex:none; background:var(--dsw-alias-brand-primary,#3b6cff); }
+.im-inline-form { display:flex; align-items:center; gap:8px; flex-wrap:wrap;
+  padding:8px 10px; border-radius:8px; background:var(--dsw-alias-bg-base,#fff);
+  border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.18)); }
+.im-inline-form .im-input { flex:1; min-width:140px; }
+/* ---- F14 版本历史 ---- */
+.im-history { border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); border-radius:10px; padding:10px 12px;
+  background:var(--dsw-alias-bg-layer-1,#fff); }
+.im-history-item { display:flex; align-items:center; gap:8px; flex-wrap:wrap; padding:7px 9px; margin-top:7px;
+  border-radius:8px; border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); background:var(--dsw-alias-bg-base,#fff); }
+.im-history-item-current { border-color:var(--dsw-alias-brand-primary,#3b6cff); }
+.im-history-sub { font-size:11.5px; color:var(--dsw-alias-label-secondary,#8a9099); }
+.im-list-scroll { max-height:260px; overflow:auto; }
+/* ---- F16 源码模式 ---- */
+.im-source { display:flex; flex-direction:column; gap:8px; }
+.im-textarea-source { min-height:340px; font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;
+  font-size:11.5px; line-height:1.6; white-space:pre; }
+.im-source-ok { font-size:12px; color:var(--dsw-alias-state-success-primary,#18a058); }
+/* ---- F17 本地预演 ---- */
+.im-sim-result { display:flex; flex-direction:column; gap:6px; margin-top:6px; }
+.im-sim-item { display:flex; align-items:center; gap:8px; flex-wrap:wrap; padding:6px 9px; border-radius:8px;
+  border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); background:var(--dsw-alias-bg-base,#fff); }
+.im-sim-note { font-size:11.5px; color:var(--dsw-alias-label-secondary,#8a9099); }
+.im-tag-sim-high { color:var(--dsw-alias-state-error-primary,#d94838); border-color:currentColor; }
+.im-tag-sim-mid { color:var(--dsw-alias-state-warn-primary,#d97706); border-color:currentColor; }
+.im-tag-sim-low { color:var(--dsw-alias-label-secondary,#8a9099); border-color:currentColor; }
+/* ---- F18 备份位置 ---- */
+.im-backup { display:flex; flex-direction:column; gap:8px; }
+.im-backup-row { display:flex; align-items:center; gap:8px; flex-wrap:wrap; }
+.im-backup-row .im-input { flex:1; min-width:200px; }
+/* ---- F12 诊断与安全状态 ---- */
+.im-hostwarn { display:flex; gap:8px; align-items:flex-start; padding:9px 12px; border-radius:8px; font-size:12px;
+  color:var(--dsw-alias-state-warn-primary,#d97706); border:1px solid var(--dsw-alias-state-warn-primary,#d97706);
+  background:var(--dsw-alias-state-warn-bg,rgba(217,119,6,.12)); font-weight:500; }
+.im-diag { display:flex; flex-direction:column; gap:8px; }
+.im-diag-group { display:flex; flex-direction:column; gap:3px; padding:8px 10px; border-radius:8px;
+  border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); background:var(--dsw-alias-bg-base,#fff); }
+.im-diag-sub { color:var(--dsw-alias-label-secondary,#8a9099); font-size:11.5px; }
+.im-diag-fallback { display:flex; flex-direction:column; gap:5px; }
+.im-diag-fallback .im-textarea { min-height:170px; font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace; font-size:11px; }
+/* ---- F7 临时静音 ---- */
+.im-master-col { display:flex; flex-direction:column; align-items:flex-end; gap:6px; }
+.im-pause-row { display:flex; align-items:center; gap:8px; flex-wrap:wrap; justify-content:flex-end; }
+.im-pause-menu { display:flex; flex-direction:column; gap:4px; padding:8px 10px; border-radius:8px;
+  border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.18)); background:var(--dsw-alias-bg-base,#fff);
+  box-shadow:0 4px 14px rgba(0,0,0,.1); }
+.im-pause-bar { display:flex; align-items:center; gap:8px; flex-wrap:wrap; justify-content:flex-end;
+  padding:6px 10px; border-radius:8px; font-size:12px;
+  border:1px solid var(--dsw-alias-state-warn-primary,#d97706);
+  background:var(--dsw-alias-state-warn-bg,rgba(217,119,6,.12)); color:var(--dsw-alias-state-warn-primary,#d97706); }
 @media (max-width:640px) { .im-grid2 { grid-template-columns:1fr; } }
 `
 
@@ -260,6 +315,128 @@ window.__ModuleLoader__.load({
         'undo.restore': '撤销删除',
         'undo.dismiss': '知道了',
         'undo.restored': '已恢复刚删除的指令',
+        // ---- F13 多情境配置集 ----
+        'sets.section': '配置集',
+        'sets.note': '把记忆分成互不相干的几套（如「工作」「个人」「某客户」）。注入只使用当前激活的一套；切换只改变注入内容，不会移动或删除任何文本。',
+        'sets.total': '全部配置集合计 {total} / {max} 条指令',
+        'sets.activeHint': '当前注入「{name}」',
+        'sets.create': '＋ 新建',
+        'sets.rename': '重命名',
+        'sets.duplicate': '复制',
+        'sets.delete': '删除',
+        'sets.nameLabel': '配置集名称',
+        'sets.namePlaceholder': '例如：工作 / 个人 / 某客户',
+        'sets.confirm': '确定',
+        'sets.nameEmpty': '请先填写配置集名称',
+        'sets.itemMeta': '{entries} 条指令 · {profiles} 个形象',
+        'sets.activeBadge': '使用中',
+        'sets.switch': '切换',
+        'sets.switchHint': '切换到该配置集：注入内容立即变更',
+        'sets.copySuffix': ' 副本',
+        'sets.deleteConfirm': '确定删除配置集「{name}」？其中的 {entries} 条指令与 {profiles} 个用户形象会一并删除，且无法撤销。',
+        'sets.deleteActive': '当前激活的配置集不能删除；请先切换到其他配置集。',
+        'sets.draftsClosed': '已关闭切换前打开的编辑草稿',
+        // ---- F12 诊断与安全状态 ----
+        'diag.section': '诊断信息',
+        'diag.show': '展开诊断',
+        'diag.hide': '收起诊断',
+        'diag.copy': '复制诊断信息',
+        'diag.copied': '诊断信息已复制到剪贴板',
+        'diag.copyManual': '自动复制不可用；请手动全选复制下方文本。',
+        'diag.hostWarn': '安全提示：设置路由当前绑定在非回环地址（{host}），同一网络内的设备可以无鉴权访问此页面，请勿在不可信网络暴露；如需对外发布，请阅读 README 的「经反向代理对外发布」。',
+        'diag.groupStorage': '存储',
+        'diag.groupInjection': '注入',
+        'diag.groupBackup': '备份与历史',
+        'diag.groupIssues': '错误与警告',
+        'diag.none': '（无）',
+        'diag.storagePath': '存储文件',
+        'diag.onDisk': '存储文件已在磁盘',
+        'diag.loadedFrom': '载入来源',
+        'diag.savedAt': '最近保存',
+        'diag.rev': '修订号（rev）',
+        'diag.registered': '注入已注册',
+        'diag.yes': '是',
+        'diag.no': '否',
+        'diag.pulls': '注入拉取次数（自本次插件启动计数）',
+        'diag.chars': '当前注入字符数 / 上限',
+        'diag.backupDir': '备份位置',
+        'diag.backupDefault': '默认（与存储文件同目录）',
+        'diag.backupPath': '覆盖副本（.bak）',
+        'diag.historyDir': '版本历史目录',
+        'diag.historyCount': '历史快照数',
+        'diag.schemaFile': 'Schema 文件',
+        'diag.issueStorage': '存储错误',
+        'diag.issueWarning': '存储警告',
+        'diag.issueHistory': '历史错误',
+        'diag.issueSection': '注入错误',
+        // ---- F7 临时静音 ----
+        'mute.menu': '暂停注入…',
+        'mute.30m': '30 分钟',
+        'mute.1h': '1 小时',
+        'mute.today': '到今天结束',
+        'mute.resume': '立即恢复',
+        'mute.active': '注入已暂停，剩余 {remaining}',
+        'mute.hint': '暂停期间不注入任何指令或用户形象，到期后自动恢复；此状态跨重启保留。',
+        'mute.remainingMs': '{m} 分 {s} 秒',
+        'mute.remainingH': '{h} 小时 {m} 分',
+        // ---- F14 版本历史 ----
+        'history.section': '版本历史',
+        'history.subtitle': '每次保存都会留一份带时间戳的快照（每台设备最多保留 {max} 份，逐出最旧的）。可在此查看并一键回滚。',
+        'history.show': '查看版本历史',
+        'history.hide': '收起',
+        'history.count': '共 {count} 份',
+        'history.loading': '正在读取…',
+        'history.empty': '还没有历史快照（第一次保存后出现）。',
+        'history.itemMeta': '{entries} 条指令 / {profiles} 个形象 · {size} KB',
+        'history.itemMetaLite': '{size} KB（文件较大，未统计条目数）',
+        'history.foreign': '来自其他设备（{device}）',
+        'history.restore': '回滚到此版本',
+        'history.restoreConfirm': '确定把当前记忆整体回滚到 {time} 的快照（rev {rev}）？当前内容仍保留在 memory.json.bak 中，且回滚本身会生成一份新快照，可以再回滚回来。',
+        'history.delete': '删除',
+        'history.deleteConfirm': '确定删除这份历史快照？删除后无法恢复。',
+        'history.dir': '快照目录：{dir}',
+        // ---- F16 源码模式 ----
+        'source.mode': '源码模式',
+        'source.exit': '退出源码模式',
+        'source.section': '源码模式（整份 JSON）',
+        'source.subtitle': '直接编辑整份存储文件（与 memory.json 内容一致）。保存时走与手改文件相同的校验与披露，并带 rev 冲突保护；保存后立即生效。',
+        'source.save': '保存源码',
+        'source.reload': '重新载入最新内容',
+        'source.valid': 'JSON 语法正确：{entries} 条指令 / {profiles} 个形象 / {sets} 个配置集',
+        'source.invalid': 'JSON 语法错误：{detail}',
+        'source.empty': '内容为空',
+        'source.notObject': '顶层必须是一个 JSON 对象',
+        'source.keepDraft': '保存被拒绝，源码草稿未丢失；可修改后重试，或点「重新载入最新内容」放弃本地修改。',
+        'source.reloadConfirm': '重新载入会丢弃当前编辑的源码草稿，确定吗？',
+        'source.editorOpen': '请先关闭正在编辑的条目或形象，再进入源码模式',
+        'source.truncatedInput': '源码过长（{size} 万字符），已停止实时校验；保存时仍会按上限校验。',
+        // ---- F17 本地预演 ----
+        'sim.title': '按需指令本地预演',
+        'sim.toggle': '本地预演',
+        'sim.hide': '收起预演',
+        'sim.disclaimer': '本地预演 ≠ 模型的真实判断：这里只用字面关键词匹配各条「按需」指令的适用场景/标题/内容，帮你把「适用场景」写清楚、预判取舍。它不参与注入，也不代表模型实际会不会采纳。',
+        'sim.placeholder': '输入一句当前任务描述，例如：帮我改一下这个配置文件',
+        'sim.hint': '输入任务描述后，这里会列出字面相关度较高的「按需」指令；结果仅供自查。',
+        'sim.levelHigh': '预演·高',
+        'sim.levelMid': '预演·中',
+        'sim.levelLow': '预演·低',
+        'sim.matched': '字面命中：{terms}',
+        'sim.noWhen': '未填写「适用场景」，建议补充',
+        'sim.none': '没有「按需」指令与这段描述存在字面匹配。',
+        'sim.onlyAuto': '仅「按需」指令参与预演；「始终」指令无条件生效，不参与匹配，也不受此结果影响。',
+        'sim.summary': '共 {total} 条按需指令，字面命中 {hit} 条',
+        'sim.omitted': '本轮因超出字数上限未注入',
+        // ---- F18 备份位置 ----
+        'backup.section': '备份位置',
+        'backup.label': '自定义备份位置（绝对路径；留空 = 与存储文件同目录）',
+        'backup.placeholder': '例如 D:\\云盘\\dsh-memory 或 /home/me/cloud/dsh-memory',
+        'backup.apply': '应用',
+        'backup.exportToDir': '导出到备份目录',
+        'backup.hint': '备份位置决定「版本历史」目录与「导出到备份目录」的去向，并额外保留一份 memory.json.bak；存储文件本身（及其跨进程锁）不会移动。它是本机设置，不会随导出文件带到别的机器。',
+        'backup.multiDevice': '多设备建议：把备份位置指向本地云盘文件夹，只同步「导出文件」与「history 快照」；不要用云盘同步存储目录本身，两台机器同时写入会互相覆盖。',
+        'action.restore': '从备份恢复…',
+        'restore.hint': '用导出的备份文件整体替换当前记忆（导入只做合并，无法还原整份）',
+        'restore.confirm': '确定用所选备份文件整体替换当前记忆？现有内容仍保留在 memory.json.bak 与版本历史中；配置集、条目与用户形象都会被文件内容替换（备份位置等本机设置保持不变）。',
       },
       en: {
         'section.label': 'Instruction Memory',
@@ -389,6 +566,128 @@ window.__ModuleLoader__.load({
         'undo.restore': 'Undo delete',
         'undo.dismiss': 'Dismiss',
         'undo.restored': 'The deleted instruction was restored',
+        // ---- F13 instruction sets ----
+        'sets.section': 'Instruction sets',
+        'sets.note': 'Split memory into independent sets (e.g. Work / Personal / a client). Only the active set is injected; switching changes what is injected and never moves or deletes any text.',
+        'sets.total': '{total} of {max} instructions across all sets',
+        'sets.activeHint': 'Injecting “{name}”',
+        'sets.create': '＋ New',
+        'sets.rename': 'Rename',
+        'sets.duplicate': 'Duplicate',
+        'sets.delete': 'Delete',
+        'sets.nameLabel': 'Set name',
+        'sets.namePlaceholder': 'e.g. Work / Personal / Acme client',
+        'sets.confirm': 'OK',
+        'sets.nameEmpty': 'Enter a set name first',
+        'sets.itemMeta': '{entries} instructions · {profiles} personas',
+        'sets.activeBadge': 'In use',
+        'sets.switch': 'Switch',
+        'sets.switchHint': 'Switch to this set: the injected content changes immediately',
+        'sets.copySuffix': ' copy',
+        'sets.deleteConfirm': 'Delete the set “{name}”? Its {entries} instructions and {profiles} personas are deleted with it. This cannot be undone.',
+        'sets.deleteActive': 'The active set cannot be deleted; switch to another set first.',
+        'sets.draftsClosed': 'The editor draft open before the switch was closed',
+        // ---- F12 diagnostics & security panel ----
+        'diag.section': 'Diagnostics',
+        'diag.show': 'Show diagnostics',
+        'diag.hide': 'Hide diagnostics',
+        'diag.copy': 'Copy diagnostics',
+        'diag.copied': 'Diagnostics copied to the clipboard',
+        'diag.copyManual': 'Automatic copy is unavailable; select and copy the text below manually.',
+        'diag.hostWarn': 'Security notice: the settings route is bound to a non-loopback address ({host}); other devices on the same network can reach this page without authentication. Do not expose it on an untrusted network — for public deployments read “Publishing behind a reverse proxy” in the README.',
+        'diag.groupStorage': 'Storage',
+        'diag.groupInjection': 'Injection',
+        'diag.groupBackup': 'Backup & history',
+        'diag.groupIssues': 'Errors & warnings',
+        'diag.none': '(none)',
+        'diag.storagePath': 'Store file',
+        'diag.onDisk': 'Store file on disk',
+        'diag.loadedFrom': 'Loaded from',
+        'diag.savedAt': 'Last saved',
+        'diag.rev': 'Revision (rev)',
+        'diag.registered': 'Section registered',
+        'diag.yes': 'yes',
+        'diag.no': 'no',
+        'diag.pulls': 'Prompt pulls (counted since this plugin started)',
+        'diag.chars': 'Injected chars / budget',
+        'diag.backupDir': 'Backup location',
+        'diag.backupDefault': 'default (next to the store file)',
+        'diag.backupPath': 'Rolling copy (.bak)',
+        'diag.historyDir': 'History directory',
+        'diag.historyCount': 'History snapshots',
+        'diag.schemaFile': 'Schema file',
+        'diag.issueStorage': 'Storage error',
+        'diag.issueWarning': 'Storage warning',
+        'diag.issueHistory': 'History error',
+        'diag.issueSection': 'Injection error',
+        // ---- F7 temporary mute ----
+        'mute.menu': 'Pause injection…',
+        'mute.30m': '30 minutes',
+        'mute.1h': '1 hour',
+        'mute.today': 'Until the end of today',
+        'mute.resume': 'Resume now',
+        'mute.active': 'Injection paused — {remaining} left',
+        'mute.hint': 'While paused, neither instructions nor personas are injected. It resumes automatically and survives a restart.',
+        'mute.remainingMs': '{m}m {s}s',
+        'mute.remainingH': '{h}h {m}m',
+        // ---- F14 version history ----
+        'history.section': 'Version history',
+        'history.subtitle': 'Every save leaves a timestamped snapshot ({max} kept per device, oldest evicted first). Review them here and roll back with one click.',
+        'history.show': 'Show version history',
+        'history.hide': 'Hide',
+        'history.count': '{count} snapshots',
+        'history.loading': 'Loading…',
+        'history.empty': 'No snapshots yet (the first save creates one).',
+        'history.itemMeta': '{entries} instructions / {profiles} personas · {size} KB',
+        'history.itemMetaLite': '{size} KB (file too large to count items)',
+        'history.foreign': 'From another device ({device})',
+        'history.restore': 'Roll back to this',
+        'history.restoreConfirm': 'Roll the whole memory back to the snapshot from {time} (rev {rev})? The current content stays in memory.json.bak, and the rollback itself creates a new snapshot, so you can roll forward again.',
+        'history.delete': 'Delete',
+        'history.deleteConfirm': 'Delete this snapshot? This cannot be undone.',
+        'history.dir': 'Snapshot folder: {dir}',
+        // ---- F16 source mode ----
+        'source.mode': 'Source mode',
+        'source.exit': 'Exit source mode',
+        'source.section': 'Source mode (whole JSON)',
+        'source.subtitle': 'Edit the whole store file (identical to memory.json). Saving runs the same validation and disclosures as a hand edit, carries rev conflict protection, and takes effect immediately.',
+        'source.save': 'Save source',
+        'source.reload': 'Reload latest',
+        'source.valid': 'Valid JSON: {entries} instructions / {profiles} personas / {sets} sets',
+        'source.invalid': 'Invalid JSON: {detail}',
+        'source.empty': 'The content is empty',
+        'source.notObject': 'The top level must be a JSON object',
+        'source.keepDraft': 'The save was refused and your draft is intact; fix it and retry, or click “Reload latest” to discard local edits.',
+        'source.reloadConfirm': 'Reloading discards the source draft you are editing. Continue?',
+        'source.editorOpen': 'Close the open entry/persona editor before entering source mode',
+        'source.truncatedInput': 'The source is very long ({size}0k characters); live validation is paused. Saving still enforces the limit.',
+        // ---- F17 local preview ----
+        'sim.title': 'Local preview of on-demand rules',
+        'sim.toggle': 'Local preview',
+        'sim.hide': 'Hide preview',
+        'sim.disclaimer': 'A local preview is NOT the model’s actual judgement: it only matches literal keywords against each on-demand rule’s scenario/title/content to help you sharpen the scenario field and predict trade-offs. It does not take part in injection and says nothing about whether the model would actually follow the rule.',
+        'sim.placeholder': 'Describe the current task, e.g. help me edit this config file',
+        'sim.hint': 'Type a task description to list the on-demand rules with the strongest literal overlap; the result is for your own inspection.',
+        'sim.levelHigh': 'Preview · high',
+        'sim.levelMid': 'Preview · medium',
+        'sim.levelLow': 'Preview · low',
+        'sim.matched': 'Literal matches: {terms}',
+        'sim.noWhen': 'No scenario text — consider adding one',
+        'sim.none': 'No on-demand rule overlaps this description literally.',
+        'sim.onlyAuto': 'Only on-demand rules take part in the preview; always-on rules apply unconditionally and are unaffected by this result.',
+        'sim.summary': '{total} on-demand rules, {hit} with a literal match',
+        'sim.omitted': 'Not injected this round (over the size limit)',
+        // ---- F18 backup location ----
+        'backup.section': 'Backup location',
+        'backup.label': 'Custom backup location (absolute path; empty = next to the store file)',
+        'backup.placeholder': 'e.g. D:\\cloud\\dsh-memory or /home/me/cloud/dsh-memory',
+        'backup.apply': 'Apply',
+        'backup.exportToDir': 'Export to backup folder',
+        'backup.hint': 'This folder holds the version-history directory and the “Export to backup folder” target, and keeps one extra memory.json.bak. The store file itself (and its cross-process lock) never moves. It is machine-local and is not carried to another machine by an export.',
+        'backup.multiDevice': 'Multi-device tip: point this at a local cloud-sync folder and let only the export files and history snapshots sync. Do not sync the store directory itself — two machines writing at once would overwrite each other.',
+        'action.restore': 'Restore from backup…',
+        'restore.hint': 'Replace the whole memory with an exported backup file (import only merges, so it cannot restore a whole store)',
+        'restore.confirm': 'Replace the whole memory with the selected backup file? The current content stays in memory.json.bak and in the version history; sets, instructions and personas are all replaced by the file (machine-local settings such as the backup location are kept).',
       },
     }
 
@@ -733,6 +1032,216 @@ window.__ModuleLoader__.load({
       return { budget, used, omitted, truncated, percent, tokens }
     }
 
+    /**
+     * F12: serialize a diagnostic snapshot into plain text for an issue report.
+     * Pinned as a pure export so verify.mjs can hold the contract: the dump
+     * carries the operational fields (store shape, storage, injection,
+     * security, load origin) plus the reporter's environment, and NEVER
+     * carries user text — no entry titles, no entry or persona bodies. Paths
+     * (including the absolute backup directory) are machine-local but are the
+     * whole point of a support dump, so they stay.
+     */
+    function diagnosticsText(view, env) {
+      const sec = (root, name) => (root !== null && typeof root === 'object'
+        && root[name] !== null && typeof root[name] === 'object' ? root[name] : {})
+      const data = sec(view, 'data')
+      const storage = sec(view, 'storage')
+      const injection = sec(view, 'injection')
+      const security = sec(view, 'security')
+      const diagnostics = sec(view, 'diagnostics')
+      const environment = env !== null && typeof env === 'object' ? env : {}
+      const v = (value) => (value === null || value === undefined ? '' : String(value))
+      const count = (value) => (Array.isArray(value) ? String(value.length) : '0')
+      return [
+        'dsh-instruction-memory diagnostics',
+        '--- store ---',
+        'version: ' + v(data.version),
+        'rev: ' + v(data.rev),
+        'enabled: ' + v(data.enabled),
+        'budgetChars: ' + v(data.budgetChars),
+        'disabledUntil: ' + v(data.disabledUntil),
+        'sets: ' + count(data.sets),
+        'entries(active set): ' + count(data.entries),
+        'profiles(active set): ' + count(data.profiles),
+        '--- storage ---',
+        'path: ' + v(storage.path),
+        'onDisk: ' + v(storage.onDisk),
+        'loadedFrom: ' + v(diagnostics.loadedFrom),
+        'rev: ' + v(diagnostics.rev),
+        'savedAt: ' + (typeof storage.savedAt === 'number' && storage.savedAt > 0 ? new Date(storage.savedAt).toISOString() : ''),
+        'migratedFrom: ' + v(storage.migratedFrom),
+        'backupDir: ' + v(storage.backupDir),
+        'isDefaultBackupDir: ' + v(storage.isDefaultBackupDir),
+        'backupPath: ' + v(storage.backupPath),
+        'historyDir: ' + v(storage.historyDir),
+        'historyCount: ' + v(storage.historyCount),
+        'schemaFile: ' + v(storage.schemaFile),
+        '--- injection ---',
+        'registered: ' + v(injection.registered),
+        'muted: ' + v(injection.muted),
+        'error: ' + v(injection.error),
+        'chars: ' + v(injection.chars),
+        'budget: ' + v(injection.budget),
+        'pulls(since boot): ' + v(injection.pulls),
+        '--- security ---',
+        'hostGuarded: ' + v(security.hostGuarded),
+        'boundHost: ' + v(security.boundHost),
+        '--- errors/warnings ---',
+        'storage.error: ' + v(storage.error),
+        'storage.warning: ' + v(storage.warning),
+        'historyError: ' + v(storage.historyError),
+        '--- environment ---',
+        'userAgent: ' + v(environment.userAgent),
+        'language: ' + v(environment.language),
+        'time: ' + v(environment.now),
+      ].join('\n')
+    }
+
+    /* ---------------- F17: local relevance preview ---------------- */
+
+    /** The most terms one query may be split into; keeps matching cheap. */
+    const SIM_MAX_TERMS = 40
+    /** Overlap thresholds for the three displayed levels (see relevancePreview). */
+    const SIM_LEVEL_HIGH = 18
+    const SIM_LEVEL_MID = 7
+    /**
+     * Field weights. The scenario text ("适用场景") carries the most signal
+     * because it is the field the user writes FOR matching; the body counts
+     * least (a long instruction mentions many words incidentally).
+     */
+    const SIM_WEIGHTS = [['when', 3], ['title', 2], ['content', 1]]
+    /** Gram-sized function words that carry no signal on their own. */
+    const SIM_STOP_GRAMS = new Set([
+      '的是', '了的', '什么', '怎么', '如何', '可以', '一个', '一下', '进行', '以及', '或者',
+      '如果', '因为', '所以', '但是', '然后', '已经', '需要', '应该', '可能', '我的', '你的',
+      '我这', '你那', '就是', '还是', '有没有', '这个', '那个', '时候', '一些', '有点',
+    ])
+
+    /**
+     * Split a free-text task description into the terms the local preview
+     * matches on.
+     *
+     * CJK has no word boundaries, so a run of CJK is expanded into 3- and
+     * 2-character grams (longer grams first, so the specific ones win the term
+     * budget); Latin/digit runs become single terms. Deterministic and pure —
+     * exported so the heuristic itself is pinnable by tests, and capped so a
+     * pasted paragraph cannot turn into thousands of comparisons.
+     */
+    function relevanceTerms(query) {
+      if (typeof query !== 'string') return []
+      const text = query.toLowerCase().trim()
+      if (text === '') return []
+      const terms = []
+      const seen = new Set()
+      const push = (term) => {
+        if (term.length < 2 || seen.has(term) || terms.length >= SIM_MAX_TERMS) return
+        seen.add(term)
+        terms.push(term)
+      }
+      for (const chunk of text.split(/[^\p{L}\p{N}]+/u)) {
+        if (chunk === '' || terms.length >= SIM_MAX_TERMS) continue
+        if (/[\u3400-\u9fff\uf900-\ufaff]/.test(chunk)) {
+          for (let size = 3; size >= 2; size -= 1) {
+            for (let at = 0; at + size <= chunk.length && terms.length < SIM_MAX_TERMS; at += 1) {
+              const gram = chunk.slice(at, at + size)
+              if (!SIM_STOP_GRAMS.has(gram)) push(gram)
+            }
+          }
+          // A short CJK chunk as one term too: more specific than its grams.
+          if (chunk.length <= 6) push(chunk)
+        } else {
+          push(chunk)
+        }
+      }
+      return terms
+    }
+
+    /**
+     * Score every on-demand ("按需" / auto) entry against a task description.
+     *
+     * This is a LOCAL, LITERAL keyword heuristic — explicitly not a prediction
+     * of what the model will do — so the result is used only to highlight
+     * entries in the list and to help the user sharpen the 适用场景 field. The
+     * score is `Σ term.length × field weight` over the terms that appear
+     * literally, which makes a 3-character match in the scenario text outrank
+     * a 2-character match in the body.
+     *
+     * @returns { terms, results, autoTotal } — `results` is ordered by score
+     *   descending and contains only entries with a non-zero overlap.
+     */
+    function relevancePreview(entries, query) {
+      const terms = relevanceTerms(query)
+      const results = []
+      let autoTotal = 0
+      if (terms.length === 0) return { terms, results, autoTotal }
+      for (const entry of (Array.isArray(entries) ? entries : [])) {
+        if (entry === null || typeof entry !== 'object' || entry.mode !== 'auto') continue
+        autoTotal += 1
+        const fields = {
+          when: typeof entry.when === 'string' ? entry.when.toLowerCase() : '',
+          title: typeof entry.title === 'string' ? entry.title.toLowerCase() : '',
+          content: typeof entry.content === 'string' ? entry.content.toLowerCase() : '',
+        }
+        let score = 0
+        const matched = []
+        for (const term of terms) {
+          for (const [field, weight] of SIM_WEIGHTS) {
+            if (!fields[field].includes(term)) continue
+            score += term.length * weight
+            if (matched.length < 6 && !matched.includes(term)) matched.push(term)
+          }
+        }
+        if (score <= 0) continue
+        results.push({
+          id: typeof entry.id === 'string' ? entry.id : '',
+          score,
+          level: score >= SIM_LEVEL_HIGH ? 'high' : (score >= SIM_LEVEL_MID ? 'mid' : 'low'),
+          terms: matched,
+          whenEmpty: fields.when.trim() === '',
+        })
+      }
+      results.sort((a, b) => (b.score - a.score) || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0))
+      return { terms, results, autoTotal }
+    }
+
+    /* ---------------- F16: source-mode validation ---------------- */
+
+    /**
+     * Live validation for the source editor: syntax plus the cheap shape check
+     * the Host will apply anyway (a JSON object, not an array/scalar). It
+     * deliberately does NOT try to re-implement the Host's normalisation — the
+     * authoritative disclosures (dropped items, corrected options, truncation,
+     * version refusal) come back from the save itself, so the panel can never
+     * promise something the Host does not do.
+     *
+     * Past `maxChars` the live parse is skipped: parsing multi-megabyte text on
+     * every keystroke would freeze the panel, and the save path still enforces
+     * the same ceiling with a readable refusal.
+     */
+    function sourceParseVerdict(text, maxChars) {
+      if (typeof text !== 'string' || text.trim() === '') return { ok: false, message: t('source.empty') }
+      if (typeof maxChars === 'number' && maxChars > 0 && text.length > maxChars) {
+        return { ok: false, paused: true, message: t('source.truncatedInput', { size: Math.max(1, Math.round(text.length / 10000)) }) }
+      }
+      let parsed = null
+      try {
+        parsed = JSON.parse(text)
+      } catch (err) {
+        return { ok: false, message: t('source.invalid', { detail: String(err && err.message ? err.message : err) }) }
+      }
+      if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return { ok: false, message: t('source.notObject') }
+      }
+      return {
+        ok: true,
+        message: t('source.valid', {
+          entries: Array.isArray(parsed.entries) ? parsed.entries.length : 0,
+          profiles: Array.isArray(parsed.profiles) ? parsed.profiles.length : 0,
+          sets: Array.isArray(parsed.sets) && parsed.sets.length > 0 ? parsed.sets.length : 1,
+        }),
+      }
+    }
+
     async function callHost(method, args) {
       // A hung host used to pin the panel on 保存中… forever; fail visibly
       // after a generous timeout instead.
@@ -982,6 +1491,16 @@ window.__ModuleLoader__.load({
       // draft: editing an instruction never closes an open persona and vice
       // versa is handled by closing one when opening the other (see handlers).
       const [profileDraft, setProfileDraft] = React.useState(null)
+      // Latest live values of the two editor drafts. switchSet's success
+      // callback is a closure created at click time; between the click and the
+      // response landing, a draft can still be opened (the busy flag only
+      // re-renders on the next pass), so the callback must read the drafts
+      // through refs to see what is REALLY open when the switch lands — a
+      // stale `draft === null` would leave the old set's form on screen.
+      const draftRef = React.useRef(null)
+      draftRef.current = draft
+      const profileDraftRef = React.useRef(null)
+      profileDraftRef.current = profileDraft
       const [budgetText, setBudgetText] = React.useState('')
       // Latest live value of the draft, because the SSE onmessage closure below
       // is created once and must not read a stale first-render budgetText.
@@ -998,7 +1517,44 @@ window.__ModuleLoader__.load({
       // F3: bulk-select mode and the chosen entry ids in it.
       const [batchMode, setBatchMode] = React.useState(false)
       const [selected, setSelected] = React.useState([])
+      // F13: the set form (null = closed). One small inline form serves create,
+      // rename and duplicate, because all three are "type a name and confirm".
+      const [setForm, setSetForm] = React.useState(null)
+      // F16: source mode holds its own draft + the rev the draft was read at.
+      // Capturing the rev at READ time is what makes an external write in
+      // between a conflict instead of a silent overwrite of someone else's edit.
+      const [sourceMode, setSourceMode] = React.useState(false)
+      const [sourceText, setSourceText] = React.useState('')
+      const [sourceBaseRev, setSourceBaseRev] = React.useState(undefined)
+      const [sourceVerdict, setSourceVerdict] = React.useState(null)
+      // The body ceiling for the live check, mirrored into a ref so the
+      // debounced effect never has to depend on the snapshot object.
+      const sourceCeilingRef = React.useRef(0)
+      // F17: the local relevance preview.
+      const [simOpen, setSimOpen] = React.useState(false)
+      const [simQuery, setSimQuery] = React.useState('')
+      // F14: the history list is fetched lazily, on first expand.
+      const [historyOpen, setHistoryOpen] = React.useState(false)
+      const [history, setHistory] = React.useState(null)
+      const [historyBusy, setHistoryBusy] = React.useState(false)
+      // F12: the diagnostics card is collapsed by default; a failed automatic
+      // copy parks the dump here so it can be selected manually instead of
+      // pretending the copy happened.
+      const [diagOpen, setDiagOpen] = React.useState(false)
+      const [diagFallback, setDiagFallback] = React.useState(null)
+      // F7: the pause menu (null-state boolean) and a 1s clock tick that exists
+      // ONLY while a pause is live (its effect cleans up after itself). The
+      // tick drives nothing but the remaining-time text; authority stays with
+      // the host snapshot (injection.muted / data.disabledUntil).
+      const [pauseMenuOpen, setPauseMenuOpen] = React.useState(false)
+      const [nowTick, setNowTick] = React.useState(Date.now())
+      // F18: the backup-location draft (focused-input protection like budget).
+      const [backupText, setBackupText] = React.useState('')
+      const backupTextRef = React.useRef('')
+      backupTextRef.current = backupText
+      const backupFocusedRef = React.useRef(false)
       const importInputRef = React.useRef(null)
+      const restoreInputRef = React.useRef(null)
       // Whether the budget input is being edited right now. A live SSE push
       // from another window must not replace the number under the cursor;
       // the ref (not state) is read inside absorb so no re-render is needed.
@@ -1034,6 +1590,40 @@ window.__ModuleLoader__.load({
         return () => clearTimeout(timer)
       }, [undo])
 
+      // F7: tick once per second while a pause is live so the remaining-time
+      // text counts down. The interval exists only while muted — the cleanup
+      // clears it the moment the snapshot says otherwise. This effect sits
+      // BEFORE the early returns (a hook skipped by a conditional return would
+      // desync the hook order); it reads the snapshot through `view` because
+      // the derived `injection` does not exist yet up here.
+      const mutedNow = view !== null && view.injection !== null && typeof view.injection === 'object'
+        && view.injection.muted === true
+      React.useEffect(() => {
+        if (!mutedNow) return undefined
+        const tick = setInterval(() => setNowTick(Date.now()), 1000)
+        return () => clearInterval(tick)
+      }, [mutedNow])
+
+      /**
+       * F16 live validation, debounced: parsing on every keystroke would stall
+       * the panel on a multi-megabyte paste, and 250 ms is below the threshold
+       * where typing feels unsynced. The verdict is advisory — the authoritative
+       * answer (including every correction the loader makes) comes from the
+       * save itself.
+       *
+       * The ceiling comes through a ref, and the deps are only [sourceMode,
+       * sourceText]: a new snapshot object arrives on every push (and the
+       * ceiling never changes), so depending on the view would re-arm the timer
+       * on every frame and the verdict would visibly lag the typing.
+       */
+      React.useEffect(() => {
+        if (!sourceMode) return undefined
+        const timer = setTimeout(() => {
+          setSourceVerdict(sourceParseVerdict(sourceText, sourceCeilingRef.current))
+        }, 250)
+        return () => clearTimeout(timer)
+      }, [sourceMode, sourceText])
+
       /**
        * The rev of the snapshot this panel is currently rendering. Sent back as
        * baseRev on every mutation so the Host can refuse a write built on a
@@ -1042,7 +1632,12 @@ window.__ModuleLoader__.load({
        * Host whose snapshot carries no rev — JSON.stringify drops the key, so
        * the request stays byte-identical to what that Host expects.
        */
-      const revOf = () => (view !== null && view.data && typeof view.data.rev === 'number' ? view.data.rev : undefined)
+      const revOfFrom = (snapshot) => (snapshot !== null && typeof snapshot === 'object'
+        && snapshot.data !== null && typeof snapshot.data === 'object'
+        && typeof snapshot.data.rev === 'number'
+        ? snapshot.data.rev
+        : undefined)
+      const revOf = () => revOfFrom(view)
 
       function absorb(result) {
         const normalized = normalizeResult(result)
@@ -1059,6 +1654,11 @@ window.__ModuleLoader__.load({
         // ref is the live draft — absorb may run from the SSE closure created
         // on the first render.
         setBudgetText(nextBudgetText(budgetTextRef.current, normalized.snapshot.data.budgetChars, budgetFocusedRef.current))
+        // The backup-location field follows the same rule as the budget input:
+        // a push from another window never rewrites what is being typed.
+        setBackupText(nextBudgetText(backupTextRef.current,
+          typeof normalized.snapshot.data.backupDir === 'string' ? normalized.snapshot.data.backupDir : '',
+          backupFocusedRef.current))
         if (!normalized.ok && normalized.message) {
           setError(normalized.message)
           setNotice('')
@@ -1163,6 +1763,239 @@ window.__ModuleLoader__.load({
         void send('delete-profile', { id: profile.id, baseRev: revOf() })
       }
 
+      // ---- F13 instruction sets ----
+
+      /** Switch the active set. The one click that changes what is injected. */
+      function switchSet(id) {
+        if (busy || id === '') return
+        void send('set-active-set', { id, baseRev: revOf() }).then((result) => {
+          // A switch invalidates any list selection: the ids belong to the set
+          // that is no longer displayed.
+          if (result !== null && result.ok === true) {
+            setSelected([])
+            setUndo(null)
+            // Batch mode exists to act on listed ids; after a switch it would
+            // act on ids from the wrong set, so it leaves with the selection.
+            setBatchMode(false)
+            // An editor left open across a switch is a form full of the OLD
+            // set's content that would save into the NEW set. The server-side
+            // cross-set guard means no data is lost, but the form itself is a
+            // lie — so it closes with the switch, and the user is told. The
+            // refs (not the closure state) say whether anything was open.
+            setDraft(null)
+            setProfileDraft(null)
+            if (draftRef.current !== null || profileDraftRef.current !== null) {
+              const base = typeof result.message === 'string' && result.message !== ''
+                ? result.message + '；'
+                : ''
+              setNotice(base + t('sets.draftsClosed'))
+            }
+          }
+        })
+      }
+
+      function submitSetForm() {
+        if (setForm === null || busy) return
+        const name = setForm.name.trim()
+        if (name === '') {
+          setError(t('sets.nameEmpty'))
+          return
+        }
+        const call = setForm.mode === 'create'
+          ? send('save-set', { set: { id: '', name }, baseRev: revOf() })
+          : (setForm.mode === 'rename'
+            ? send('save-set', { set: { id: setForm.id, name }, baseRev: revOf() })
+            : send('duplicate-set', { id: setForm.id, name, baseRev: revOf() }))
+        void call.then((result) => {
+          if (result !== null && result.ok === true) setSetForm(null)
+        })
+      }
+
+      function removeSet(set) {
+        if (busy) return
+        if (set.active === true) {
+          setError(t('sets.deleteActive'))
+          return
+        }
+        if (typeof window.confirm === 'function'
+          && !window.confirm(t('sets.deleteConfirm', { name: set.name, entries: set.entries, profiles: set.profiles }))) return
+        void send('delete-set', { id: set.id, baseRev: revOf() })
+      }
+
+      // ---- F14 version history ----
+
+      async function loadHistory() {
+        setHistoryBusy(true)
+        try {
+          const result = await callHost('history-list', null)
+          const normalized = normalizeResult(result)
+          if (normalized === null || result.history === undefined || result.history === null) {
+            setError(t('err.unrecognized'))
+            return
+          }
+          setHistory({ dir: String(result.history.dir || ''), items: Array.isArray(result.history.items) ? result.history.items : [] })
+        } catch (err) {
+          setError(String(err && err.message ? err.message : err))
+        } finally {
+          setHistoryBusy(false)
+        }
+      }
+
+      function toggleHistory() {
+        const next = !historyOpen
+        setHistoryOpen(next)
+        // Fetch on first expand (and on every expand after a write, so the list
+        // matches the store the panel is showing).
+        if (next) void loadHistory()
+      }
+
+      function rollbackTo(item) {
+        if (busy || typeof window.confirm !== 'function') return
+        const when = new Date(item.epoch).toLocaleString()
+        if (!window.confirm(t('history.restoreConfirm', { time: when, rev: item.rev }))) return
+        void send('history-restore', { name: item.name, baseRev: revOf() }).then((result) => {
+          if (result !== null && result.ok === true) void loadHistory()
+        })
+      }
+
+      function removeSnapshot(item) {
+        if (busy) return
+        if (typeof window.confirm === 'function' && !window.confirm(t('history.deleteConfirm'))) return
+        void send('history-delete', { name: item.name }).then((result) => {
+          if (result !== null && result.ok === true) void loadHistory()
+        })
+      }
+
+      // ---- F16 source mode ----
+
+      async function openSource() {
+        if (busy) return
+        if (draft !== null || profileDraft !== null) {
+          setError(t('source.editorOpen'))
+          return
+        }
+        try {
+          const result = await callHost('read-source', null)
+          if (result === null || typeof result !== 'object' || typeof result.source !== 'string') {
+            // A refusal carries a reason (e.g. the file declares a newer format
+            // version, so source mode is paused) — show THAT, not a generic
+            // "unrecognized data".
+            setError(result !== null && typeof result === 'object' && typeof result.message === 'string' && result.message !== ''
+              ? result.message
+              : t('err.unrecognized'))
+            return
+          }
+          setSourceText(result.source)
+          setSourceBaseRev(revOfFrom(result.snapshot))
+          setSourceVerdict(null)
+          setSourceMode(true)
+          setShowPreview(false)
+          setSimOpen(false)
+          setError('')
+          setNotice('')
+        } catch (err) {
+          setError(String(err && err.message ? err.message : err))
+        }
+      }
+
+      function reloadSource() {
+        if (typeof window.confirm === 'function' && !window.confirm(t('source.reloadConfirm'))) return
+        void openSource()
+      }
+
+      function saveSource() {
+        if (busy) return
+        void send('write-source', { text: sourceText, baseRev: sourceBaseRev }).then((result) => {
+          if (result === null || result.ok !== true) return
+          // The draft now matches the committed store, so the rev it is based
+          // on must move with it — otherwise the very next save would be
+          // refused as a conflict against our own write.
+          setSourceBaseRev(revOfFrom(result.snapshot))
+          void loadHistory()
+        })
+      }
+
+      // ---- F18 backup location ----
+
+      function applyBackupDir() {
+        if (busy) return
+        void send('set-options', { backupDir: backupText, baseRev: revOf() })
+      }
+
+      function exportToDir() {
+        if (busy) return
+        void send('export-to-dir', null)
+      }
+
+      // ---- F14 whole-store restore (the "replace" door import does not open) ----
+
+      async function handleRestoreFile(file) {
+        try {
+          if (typeof window.confirm === 'function' && !window.confirm(t('restore.confirm'))) return
+          const text = typeof file.text === 'function'
+            ? await file.text()
+            : await new Promise((resolve, reject) => {
+              const reader = new FileReader()
+              reader.onload = () => resolve(String(reader.result))
+              reader.onerror = () => reject(reader.error)
+              reader.readAsText(file)
+            })
+          let payload
+          try {
+            payload = JSON.parse(text)
+          } catch (err) {
+            setError(t('import.notJson', { detail: String(err && err.message ? err.message : err) }))
+            return
+          }
+          await send('restore-data', { payload, baseRev: revOf() })
+        } catch (err) {
+          setError(String(err && err.message ? err.message : err))
+        }
+      }
+
+      // ---- F12 diagnostics copy ----
+
+      function copyDiagnostics() {
+        if (view === null) return
+        const text = diagnosticsText(view, {
+          userAgent: typeof navigator !== 'undefined' && navigator.userAgent !== undefined ? String(navigator.userAgent) : '',
+          language: typeof navigator !== 'undefined' && navigator.language !== undefined ? String(navigator.language) : '',
+          now: new Date().toISOString(),
+        })
+        const clipboard = typeof navigator !== 'undefined' && navigator.clipboard
+          && typeof navigator.clipboard.writeText === 'function' ? navigator.clipboard : null
+        if (clipboard !== null) {
+          clipboard.writeText(text).then(() => setNotice(t('diag.copied')), () => fallbackCopyDiagnostics(text))
+          return
+        }
+        fallbackCopyDiagnostics(text)
+      }
+
+      /**
+       * The webview may ship neither the async clipboard API nor
+       * document.execCommand; then the only honest move is to surface the dump
+       * in a selectable textarea instead of pretending the copy happened.
+       */
+      function fallbackCopyDiagnostics(text) {
+        try {
+          const area = document.createElement('textarea')
+          area.value = text
+          area.setAttribute('readonly', '')
+          const host = document.body || document.head
+          if (host && typeof host.appendChild === 'function') host.appendChild(area)
+          if (typeof area.select === 'function') area.select()
+          const ok = typeof document.execCommand === 'function' && document.execCommand('copy') === true
+          if (host && typeof host.removeChild === 'function' && area.parentNode === host) host.removeChild(area)
+          if (ok) {
+            setNotice(t('diag.copied'))
+            return
+          }
+          throw new Error('copy rejected')
+        } catch {
+          setDiagFallback(text)
+        }
+      }
+
       async function doExport() {
         try {
           const result = await callHost('export-data', null)
@@ -1280,8 +2113,19 @@ window.__ModuleLoader__.load({
       // Older hosts can hand over snapshots without storage/limits; fall back
       // instead of throwing mid-render.
       const storage = view.storage || {}
-      const limits = view.limits || { minBudget: 800, maxBudget: 40000, maxEntries: 200 }
+      const limits = view.limits || {
+        minBudget: 800, maxBudget: 40000, maxEntries: 200, maxProfiles: 50,
+        maxSets: 20, maxSetName: 30, maxHistory: 20, maxBackupDir: 512,
+      }
+      // Mirrored for the debounced source check (see its effect above): reading
+      // it here keeps the effect's dependency list down to the text itself.
+      sourceCeilingRef.current = typeof limits.maxBodyChars === 'number' ? limits.maxBodyChars : 0
       const injection = view.injection || { registered: false, chars: 0, error: null }
+      // F12: the security block is optional (older Host) and then means "no
+      // known problem" — an absent field must not manufacture a warning.
+      const security = view.security !== null && typeof view.security === 'object'
+        ? view.security
+        : { hostGuarded: true, boundHost: '' }
       // List order is display-only and never changes what the Host injects
       // (the injection order is decided host-side). The default mirrors the
       // previous fixed order; updated-time and title are the other sorts.
@@ -1327,6 +2171,39 @@ window.__ModuleLoader__.load({
       // Older hosts simply publish none of these fields: the meter falls back
       // to data.budgetChars and the maps stay empty.
       const meter = budgetMeter(view)
+      /**
+       * F13: the set list. A newer Host publishes the derived block (with
+       * per-set counts and the active flag); an older one only has
+       * data.sets/activeSetId, so the fallback builds the same shape with
+       * zeroed counts rather than hiding the switcher.
+       */
+      const setsBlock = view.sets !== null && typeof view.sets === 'object' ? view.sets : null
+      // A Host from before F13 publishes neither sets nor activeSetId; the set
+      // UI is then simply absent instead of showing a made-up single set.
+      const setsCapable = typeof data.activeSetId === 'string' && data.activeSetId !== ''
+      const fallbackSets = setsCapable
+        ? (Array.isArray(data.sets) && data.sets.length > 0
+          ? data.sets
+          : [{ id: data.activeSetId, name: t('sets.section') }])
+        : []
+      const setsList = setsBlock !== null && Array.isArray(setsBlock.list)
+        ? setsBlock.list
+        : fallbackSets.map((set) => ({
+          id: set.id,
+          name: set.name,
+          active: set.id === data.activeSetId,
+          entries: set.id === data.activeSetId ? data.entries.length : 0,
+          profiles: set.id === data.activeSetId ? data.profiles.length : 0,
+        }))
+      const setsActiveId = setsBlock !== null && typeof setsBlock.activeId === 'string' ? setsBlock.activeId : data.activeSetId
+      const setTotalEntries = setsBlock !== null && setsBlock.total && typeof setsBlock.total.entries === 'number'
+        ? setsBlock.total.entries
+        : data.entries.length
+      const activeSetName = (setsList.find((set) => set.id === setsActiveId) || {}).name || ''
+      // F17: the local preview scores the ACTIVE set's on-demand entries.
+      const autoEntries = data.entries.filter((entry) => entry.mode === 'auto')
+      const sim = relevancePreview(autoEntries, simQuery)
+      const simById = new Map(sim.results.map((hit) => [hit.id, hit]))
       const omittedById = new Map()
       const truncatedById = new Map()
       {
@@ -1367,20 +2244,90 @@ window.__ModuleLoader__.load({
         : (injection.registered
           ? t('status.mounted', { chars: injection.chars })
           : (activeCount === 0 ? t('status.notMountedEmpty') : t('status.notMounted')))
+      // F12: display-only rows. Every value comes straight from the snapshot;
+      // a missing field (older Host) degrades to （无） instead of throwing
+      // mid-render.
+      const diagValue = (value) => (value === null || value === undefined || value === '' ? t('diag.none') : String(value))
+      const diagYesNo = (value) => (value === true ? t('diag.yes') : t('diag.no'))
+      const diagRow = (label, value) => h('div', { className: 'im-meta' }, label + '：' + value)
+      const diagLoadedFrom = view.diagnostics !== null && typeof view.diagnostics === 'object'
+        ? view.diagnostics.loadedFrom
+        : null
+      const diagRev = view.diagnostics !== null && typeof view.diagnostics === 'object'
+        && typeof view.diagnostics.rev === 'number'
+        ? view.diagnostics.rev
+        : (data.rev || 0)
+      // F7: the pause decision itself belongs to the host (injection.muted);
+      // the countdown below is display-only. At zero the bar yields back to
+      // the normal control (the host's own timer is delivering a fresh
+      // snapshot at that moment in any case).
+      const muted = injection.muted === true
+      const disabledUntil = typeof data.disabledUntil === 'number' && Number.isFinite(data.disabledUntil)
+        ? data.disabledUntil
+        : 0
+      const muteRemainingMs = muted ? Math.max(0, disabledUntil - nowTick) : 0
+      const muteRemainingText = (ms) => {
+        const totalSec = Math.max(0, Math.round(ms / 1000))
+        const hh = Math.floor(totalSec / 3600)
+        const mm = Math.floor((totalSec % 3600) / 60)
+        const ss = totalSec % 60
+        return hh > 0 ? t('mute.remainingH', { h: hh, m: mm }) : t('mute.remainingMs', { m: mm, s: ss })
+      }
+      const endOfToday = () => {
+        const d = new Date()
+        d.setHours(24, 0, 0, 0)
+        return d.getTime()
+      }
+      function pauseFor(ms) {
+        if (busy || typeof ms !== 'number' || !(ms > 0)) return
+        setPauseMenuOpen(false)
+        void send('set-options', { disabledUntil: Date.now() + ms, baseRev: revOf() })
+      }
+      function resumePause() {
+        if (busy) return
+        setPauseMenuOpen(false)
+        void send('set-options', { disabledUntil: 0, baseRev: revOf() })
+      }
 
       const header = h('div', { className: 'im-card', key: 'head' },
+        // F12: the non-loopback warning sits at the TOP of the panel — not
+        // inside the collapsible diagnostics card — so it cannot be missed.
+        security.hostGuarded === false
+          ? h('div', { className: 'im-hostwarn', key: 'hostwarn' },
+            t('diag.hostWarn', { host: security.boundHost !== '' ? security.boundHost : '?' }))
+          : null,
         h('div', { className: 'im-row' },
           h('div', null,
             h('h3', { className: 'im-h' }, t('panel.title')),
             h('p', { className: 'im-sub' }, t('panel.subtitle'))),
-          h('label', { className: 'im-switch' },
-            h('input', {
-              type: 'checkbox',
-              checked: data.enabled === true,
-              disabled: busy,
-              onChange: () => send('set-options', { enabled: !data.enabled, baseRev: revOf() }),
-            }),
-            t('panel.masterSwitch'))),
+          h('div', { className: 'im-master-col' },
+            h('label', { className: 'im-switch' },
+              h('input', {
+                type: 'checkbox',
+                checked: data.enabled === true,
+                disabled: busy,
+                onChange: () => send('set-options', { enabled: !data.enabled, baseRev: revOf() }),
+              }),
+              t('panel.masterSwitch')),
+            // F7 临时静音：暂停期间提示词与「未安装插件」逐字节一致；到期由宿主定时器
+            // 自动恢复，无需用户操作、不写盘。倒计时只是展示，权威在快照。
+            muted && muteRemainingMs > 0
+              ? h('div', { className: 'im-pause-bar' },
+                h('span', null, t('mute.active', { remaining: muteRemainingText(muteRemainingMs) })),
+                h('button', { className: 'im-btn', disabled: busy, onClick: resumePause }, t('mute.resume')))
+              : h('div', { className: 'im-pause-row' },
+                h('button', {
+                  className: 'im-btn',
+                  disabled: busy,
+                  onClick: () => setPauseMenuOpen(!pauseMenuOpen),
+                }, t('mute.menu')),
+                pauseMenuOpen
+                  ? h('div', { className: 'im-pause-menu' },
+                    h('button', { className: 'im-btn', disabled: busy, onClick: () => pauseFor(30 * 60000) }, t('mute.30m')),
+                    h('button', { className: 'im-btn', disabled: busy, onClick: () => pauseFor(60 * 60000) }, t('mute.1h')),
+                    h('button', { className: 'im-btn', disabled: busy, onClick: () => pauseFor(endOfToday() - Date.now()) }, t('mute.today')),
+                    h('div', { className: 'im-meta' }, t('mute.hint')))
+                  : null))),
         h('div', { className: 'im-status' },
           h('span', { className: dotClass }),
           h('span', { className: injection.error ? 'im-err' : 'im-meta' }, dotText)),
@@ -1429,6 +2376,70 @@ window.__ModuleLoader__.load({
               ? h('div', { className: 'im-warn im-meter-line' }, t('budget.omitted', { count: meter.omitted }))
               : null)
           : null,
+        // ---- F13 配置集：列表 + 切换（唯一会改变注入内容的动作） ----
+        setsList.length > 0
+          ? h('div', { key: 'sets', className: 'im-sets' },
+            h('div', { className: 'im-sets-row' },
+              h('span', { className: 'im-section-title' }, t('sets.section')),
+              h('span', { className: 'im-spacer' }),
+              h('span', { className: 'im-meta' }, t('sets.total', { total: setTotalEntries, max: limits.maxEntries })),
+              h('button', {
+                className: 'im-btn',
+                disabled: busy || setsList.length >= limits.maxSets,
+                onClick: () => { setSetForm({ mode: 'create', id: '', name: '' }); setError('') },
+              }, t('sets.create'))),
+            h('div', { className: 'im-meta' }, t('sets.note')),
+            setsList.map((set) => h('div', { className: 'im-sets-row', key: set.id },
+              set.active === true
+                ? h('span', { className: 'im-active-dot', title: t('sets.activeHint', { name: set.name }) })
+                : h('span', { className: 'im-dot' }),
+              h('span', { className: 'im-title' }, set.name),
+              h('span', { className: 'im-meta' }, t('sets.itemMeta', { entries: set.entries, profiles: set.profiles })),
+              set.active === true
+                ? h('span', { className: 'im-tag im-tag-always' }, t('sets.activeBadge'))
+                : null,
+              h('span', { className: 'im-spacer' }),
+              set.active === true
+                ? null
+                : h('button', {
+                  className: 'im-btn im-btn-primary',
+                  disabled: busy,
+                  title: t('sets.switchHint'),
+                  onClick: () => switchSet(set.id),
+                }, t('sets.switch')),
+              h('button', {
+                className: 'im-btn',
+                disabled: busy,
+                onClick: () => { setSetForm({ mode: 'rename', id: set.id, name: set.name }); setError('') },
+              }, t('sets.rename')),
+              h('button', {
+                className: 'im-btn',
+                disabled: busy || setTotalEntries + set.entries > limits.maxEntries,
+                onClick: () => { setSetForm({ mode: 'duplicate', id: set.id, name: set.name + t('sets.copySuffix') }); setError('') },
+              }, t('sets.duplicate')),
+              set.active === true
+                ? null
+                : h('button', {
+                  className: 'im-btn im-btn-danger',
+                  disabled: busy,
+                  onClick: () => removeSet(set),
+                }, t('sets.delete')))),
+            setForm !== null
+              ? h('div', { className: 'im-inline-form' },
+                h('span', { className: 'im-meta' }, t('sets.nameLabel')),
+                h('input', {
+                  className: 'im-input',
+                  value: setForm.name,
+                  maxLength: limits.maxSetName,
+                  disabled: busy,
+                  placeholder: t('sets.namePlaceholder'),
+                  onChange: (ev) => setSetForm({ mode: setForm.mode, id: setForm.id, name: ev.target.value }),
+                  onKeyDown: (ev) => { if (ev.key === 'Enter') submitSetForm() },
+                }),
+                h('button', { className: 'im-btn im-btn-primary', disabled: busy, onClick: submitSetForm }, t('sets.confirm')),
+                h('button', { className: 'im-btn', disabled: busy, onClick: () => setSetForm(null) }, t('editor.cancel')))
+              : null)
+          : null,
         // ---- User persona ("用户形象"): facts about the USER, not a role ----
         h('div', { key: 'profiles', className: 'im-profiles' },
           h('div', { className: 'im-profiles-head' },
@@ -1532,6 +2543,49 @@ window.__ModuleLoader__.load({
             }, t('batch.delete')),
             h('button', { className: 'im-btn', disabled: busy, onClick: exitBatch }, t('batch.exit')))
           : null,
+        // ---- F17 本地预演：字面关键词匹配「按需」条目（不是模型真实判断） ----
+        (data.enabled === true && autoEntries.length > 0)
+          ? h('div', { key: 'sim', className: 'im-profiles' },
+            h('div', { className: 'im-profiles-head' },
+              h('span', { className: 'im-section-title' }, t('sim.title')),
+              h('span', { className: 'im-spacer' }),
+              h('button', {
+                className: 'im-btn',
+                disabled: busy,
+                onClick: () => setSimOpen(!simOpen),
+              }, simOpen ? t('sim.hide') : t('sim.toggle'))),
+            simOpen
+              ? h('div', null,
+                // The disclaimer is deliberately NOT small print in grey: it is
+                // a warning that this is a heuristic, so it reads as one.
+                h('div', { className: 'im-warn im-profile-sub' }, t('sim.disclaimer')),
+                h('input', {
+                  className: 'im-input',
+                  value: simQuery,
+                  disabled: busy,
+                  placeholder: t('sim.placeholder'),
+                  onChange: (ev) => setSimQuery(ev.target.value),
+                }),
+                h('div', { className: 'im-meta im-meter-line' }, t('sim.onlyAuto')),
+                simQuery.trim() === ''
+                  ? h('div', { className: 'im-meta im-meter-line' }, t('sim.hint'))
+                  : h('div', { className: 'im-sim-result' },
+                    h('div', { className: 'im-meta' }, t('sim.summary', { total: sim.autoTotal, hit: sim.results.length })),
+                    sim.results.length === 0
+                      ? h('div', { className: 'im-meta' }, t('sim.none'))
+                      : sim.results.slice(0, 8).map((hit) => {
+                        const entry = data.entries.find((candidate) => candidate.id === hit.id)
+                        if (entry === undefined) return null
+                        return h('div', { className: 'im-sim-item', key: hit.id },
+                          h('span', { className: 'im-title' }, entry.title !== '' ? entry.title : t('entry.untitled')),
+                          h('span', { className: 'im-tag im-tag-sim-' + hit.level },
+                            hit.level === 'high' ? t('sim.levelHigh') : (hit.level === 'mid' ? t('sim.levelMid') : t('sim.levelLow'))),
+                          h('span', { className: 'im-meta' }, t('sim.matched', { terms: hit.terms.join(' / ') })),
+                          hit.whenEmpty ? h('span', { className: 'im-warn' }, t('sim.noWhen')) : null,
+                          omittedById.has(hit.id) ? h('span', { className: 'im-tag im-tag-off' }, t('sim.omitted')) : null)
+                      })))
+              : null)
+          : null,
         // F2 filters: tag chips (only when tags exist) plus mode/status/sort.
         entries.length > 0
           ? h('div', { key: 'filters', className: 'im-filter-row' },
@@ -1605,6 +2659,20 @@ window.__ModuleLoader__.load({
               if (el !== null && el !== undefined) el.click()
             },
           }, t('action.import')),
+          h('button', {
+            className: 'im-btn',
+            disabled: busy,
+            title: t('restore.hint'),
+            onClick: () => {
+              const el = restoreInputRef.current
+              if (el !== null && el !== undefined) el.click()
+            },
+          }, t('action.restore')),
+          h('button', {
+            className: 'im-btn',
+            disabled: busy || draft !== null || profileDraft !== null,
+            onClick: () => { void openSource() },
+          }, t('source.mode')),
           h('button', {
             className: 'im-btn',
             disabled: busy,
@@ -1626,6 +2694,116 @@ window.__ModuleLoader__.load({
           ? h('div', { className: 'im-ok' }, t('storage.migrated', { path: storage.migratedFrom }))
           : null,
         storage.warning ? h('div', { className: 'im-warn' }, storage.warning) : null,
+        // ---- F18 备份位置 ----
+        h('div', { key: 'backup', className: 'im-backup' },
+          h('div', { className: 'im-section-title' }, t('backup.section')),
+          h('label', { className: 'im-label' }, t('backup.label')),
+          h('div', { className: 'im-backup-row' },
+            h('input', {
+              className: 'im-input',
+              value: backupText,
+              disabled: busy,
+              maxLength: limits.maxBackupDir,
+              placeholder: t('backup.placeholder'),
+              onFocus: () => { backupFocusedRef.current = true },
+              onChange: (ev) => setBackupText(ev.target.value),
+              onBlur: () => { backupFocusedRef.current = false },
+            }),
+            h('button', { className: 'im-btn im-btn-primary', disabled: busy, onClick: applyBackupDir }, t('backup.apply')),
+            h('button', { className: 'im-btn', disabled: busy, onClick: exportToDir }, t('backup.exportToDir'))),
+          h('div', { className: 'im-meta' }, t('backup.hint')),
+          h('div', { className: 'im-meta' }, t('backup.multiDevice'))),
+        // ---- F14 版本历史 ----
+        h('div', { key: 'history', className: 'im-history' },
+          h('div', { className: 'im-profiles-head' },
+            h('span', { className: 'im-section-title' }, t('history.section')),
+            h('span', { className: 'im-spacer' }),
+            history !== null ? h('span', { className: 'im-meta' }, t('history.count', { count: history.items.length })) : null,
+            h('button', { className: 'im-btn', disabled: busy, onClick: toggleHistory }, historyOpen ? t('history.hide') : t('history.show'))),
+          h('div', { className: 'im-meta im-profile-sub' }, t('history.subtitle', { max: limits.maxHistory })),
+          historyOpen
+            ? (historyBusy && history === null
+              ? h('div', { className: 'im-meta' }, t('history.loading'))
+              : (history === null || history.items.length === 0
+                ? h('div', { className: 'im-meta' }, t('history.empty'))
+                : h('div', { className: 'im-list-scroll' }, history.items.map((item) => {
+                  const when = new Date(item.epoch).toLocaleString()
+                  const size = Math.max(1, Math.round(item.bytes / 1024))
+                  return h('div', {
+                    className: 'im-history-item' + (item.rev === data.rev ? ' im-history-item-current' : ''),
+                    key: item.name,
+                  },
+                    h('span', { className: 'im-title' }, when),
+                    h('span', { className: 'im-tag' }, 'rev ' + item.rev),
+                    h('span', { className: 'im-history-sub' },
+                      item.entries === null
+                        ? t('history.itemMetaLite', { size })
+                        : t('history.itemMeta', {
+                          entries: item.entries,
+                          profiles: item.profiles === null ? 0 : item.profiles,
+                          size,
+                        })),
+                    item.foreign === true ? h('span', { className: 'im-tag im-tag-off' }, t('history.foreign', { device: item.device })) : null,
+                    h('span', { className: 'im-spacer' }),
+                    h('button', { className: 'im-btn', disabled: busy, onClick: () => rollbackTo(item) }, t('history.restore')),
+                    h('button', { className: 'im-btn im-btn-danger', disabled: busy, onClick: () => removeSnapshot(item) }, t('history.delete')))
+                }))))
+            : null,
+          history !== null && history.dir !== ''
+            ? h('div', { className: 'im-meta' }, t('history.dir', { dir: history.dir }))
+            : null),
+        // ---- F12 诊断与安全状态（默认收起；纯展示，无写路由） ----
+        h('div', { key: 'diag', className: 'im-diag' },
+          h('div', { className: 'im-profiles-head' },
+            h('span', { className: 'im-section-title' }, t('diag.section')),
+            h('span', { className: 'im-spacer' }),
+            h('button', { className: 'im-btn', disabled: busy, onClick: () => setDiagOpen(!diagOpen) },
+              diagOpen ? t('diag.hide') : t('diag.show')),
+            h('button', { className: 'im-btn', disabled: busy, onClick: copyDiagnostics }, t('diag.copy'))),
+          diagOpen
+            ? h('div', null,
+              h('div', { className: 'im-diag-group' },
+                h('span', { className: 'im-section-title im-diag-sub' }, t('diag.groupStorage')),
+                diagRow(t('diag.storagePath'), diagValue(storage.path)),
+                diagRow(t('diag.onDisk'), diagYesNo(storage.onDisk === true)),
+                diagRow(t('diag.loadedFrom'), diagValue(diagLoadedFrom)),
+                diagRow(t('diag.savedAt'), typeof storage.savedAt === 'number' && storage.savedAt > 0
+                  ? new Date(storage.savedAt).toLocaleString()
+                  : t('diag.none')),
+                diagRow(t('diag.rev'), String(diagRev))),
+              h('div', { className: 'im-diag-group' },
+                h('span', { className: 'im-section-title im-diag-sub' }, t('diag.groupInjection')),
+                diagRow(t('diag.registered'), diagYesNo(injection.registered === true)),
+                diagRow(t('diag.pulls'), String(typeof injection.pulls === 'number' ? injection.pulls : 0)),
+                diagRow(t('diag.chars'),
+                  String(typeof injection.chars === 'number' ? injection.chars : 0) + ' / '
+                  + String(typeof injection.budget === 'number' ? injection.budget : data.budgetChars))),
+              h('div', { className: 'im-diag-group' },
+                h('span', { className: 'im-section-title im-diag-sub' }, t('diag.groupBackup')),
+                diagRow(t('diag.backupDir'), typeof storage.backupDir === 'string' && storage.backupDir !== ''
+                  ? storage.backupDir
+                  : t('diag.backupDefault')),
+                diagRow(t('diag.backupPath'), diagValue(storage.backupPath)),
+                diagRow(t('diag.historyDir'), diagValue(storage.historyDir)),
+                diagRow(t('diag.historyCount'), String(typeof storage.historyCount === 'number' ? storage.historyCount : 0)),
+                diagRow(t('diag.schemaFile'), diagValue(storage.schemaFile))),
+              h('div', { className: 'im-diag-group' },
+                h('span', { className: 'im-section-title im-diag-sub' }, t('diag.groupIssues')),
+                diagRow(t('diag.issueStorage'), diagValue(storage.error)),
+                diagRow(t('diag.issueWarning'), diagValue(storage.warning)),
+                diagRow(t('diag.issueHistory'), diagValue(storage.historyError)),
+                diagRow(t('diag.issueSection'), diagValue(injection.error))),
+              diagFallback !== null
+                ? h('div', { className: 'im-diag-fallback' },
+                  h('div', { className: 'im-meta' }, t('diag.copyManual')),
+                  h('textarea', {
+                    className: 'im-textarea',
+                    readOnly: true,
+                    value: diagFallback,
+                    onFocus: (ev) => { if (typeof ev.target.select === 'function') ev.target.select() },
+                  }))
+                : null)
+            : null),
         error !== '' ? h('div', { className: 'im-err' }, error) : null,
         error === '' && notice !== '' ? h('div', { className: 'im-ok' }, notice) : null,
         error === '' && notice === '' && storage.error ? h('div', { className: 'im-err' }, storage.error) : null,
@@ -1660,8 +2838,73 @@ window.__ModuleLoader__.load({
             ev.target.value = ''
             if (file !== null) void handleImportFile(file)
           },
+        }),
+        // F14: the whole-store restore picker. A separate input because its
+        // confirmation and its semantics (replace, not merge) differ from import.
+        h('input', {
+          key: 'restore-input',
+          type: 'file',
+          accept: '.json,application/json',
+          style: { display: 'none' },
+          ref: restoreInputRef,
+          onChange: (ev) => {
+            const file = ev.target.files && ev.target.files.length > 0 ? ev.target.files[0] : null
+            ev.target.value = ''
+            if (file !== null) void handleRestoreFile(file)
+          },
         }))
 
+      /**
+       * F16 源码模式 replaces the list area entirely: editing the raw JSON and
+       * editing the cards are two views of ONE store, so they are never shown
+       * at once (and the entry/persona editors must be closed first — see
+       * openSource). The header card stays visible so the master switch, the
+       * budget and the set switcher remain reachable.
+       */
+      if (sourceMode) {
+        const canSave = sourceVerdict === null || sourceVerdict.ok === true || sourceVerdict.paused === true
+        return h('div', { className: 'im-root' },
+          header,
+          h('div', { className: 'im-card' },
+            h('div', { className: 'im-profiles-head' },
+              h('span', { className: 'im-section-title' }, t('source.section')),
+              h('span', { className: 'im-spacer' }),
+              sourceBaseRev !== undefined
+                ? h('span', { className: 'im-meta' }, 'rev ' + sourceBaseRev)
+                : null),
+            h('div', { className: 'im-meta' }, t('source.subtitle')),
+            h('div', { className: 'im-source' },
+              h('textarea', {
+                className: 'im-textarea im-textarea-source',
+                value: sourceText,
+                disabled: busy,
+                spellCheck: false,
+                onChange: (ev) => setSourceText(ev.target.value),
+              }),
+              sourceVerdict !== null
+                ? h('div', { className: sourceVerdict.ok ? 'im-source-ok' : 'im-warn' }, sourceVerdict.message)
+                : null,
+              error !== '' ? h('div', { className: 'im-err' }, error) : null,
+              // Saving can be refused (a conflict, a future version, a shape
+              // problem). The draft is never thrown away by a refusal, and the
+              // user needs to know that before deciding what to do next.
+              error !== '' ? h('div', { className: 'im-meta' }, t('source.keepDraft')) : null,
+              error === '' && notice !== '' ? h('div', { className: 'im-ok' }, notice) : null,
+              h('div', { className: 'im-row-wrap' },
+                h('button', {
+                  className: 'im-btn im-btn-primary',
+                  disabled: busy || !canSave,
+                  onClick: saveSource,
+                }, busy ? t('editor.saving') : t('source.save')),
+                h('button', { className: 'im-btn', disabled: busy, onClick: reloadSource }, t('source.reload')),
+                h('span', { className: 'im-spacer' }),
+                h('button', {
+                  className: 'im-btn',
+                  disabled: busy,
+                  onClick: () => { setSourceMode(false); setSourceVerdict(null); setError(''); setNotice('') },
+                }, t('source.exit'))))))
+      }
+
       const items = visible.map((entry) => {
         const tags = [
           h('span', {
@@ -1682,6 +2925,16 @@ window.__ModuleLoader__.load({
             className: 'im-tag im-tag-cut', key: 'cut', title: t('tag.truncatedTitle'),
           }, t('tag.truncated')))
         }
+        // F17: the local preview's literal overlap, shown only while the
+        // preview is open so the mark always comes with its disclaimer.
+        const simHit = simOpen ? simById.get(entry.id) : undefined
+        if (simHit !== undefined) {
+          tags.push(h('span', {
+            className: 'im-tag im-tag-sim-' + simHit.level,
+            key: 'sim',
+            title: t('sim.matched', { terms: simHit.terms.join(' / ') }),
+          }, simHit.level === 'high' ? t('sim.levelHigh') : (simHit.level === 'mid' ? t('sim.levelMid') : t('sim.levelLow'))))
+        }
         return h('div', {
           className: 'im-item' + (entry.enabled ? '' : ' im-item-off'),
           key: entry.id,
@@ -1855,6 +3108,10 @@ window.__ModuleLoader__.load({
     exports.__nextBudgetText = nextBudgetText
     exports.__budgetMeter = budgetMeter
     exports.__parseTagInput = parseTagInput
+    exports.__relevanceTerms = relevanceTerms
+    exports.__relevancePreview = relevancePreview
+    exports.__sourceParseVerdict = sourceParseVerdict
+    exports.__diagnosticsText = diagnosticsText
     exports.__strings = STRINGS
     exports.__ns = NS
     exports.__dictionaryT = dictionaryT