fix: export restorable CSV backups

frontend/src/MvpPanel.vue

@@ -309,13 +309,25 @@ async function revoke(id: string) {
 function downloadBlob(blob: Blob, name: string) {
   const url = URL.createObjectURL(blob); const a = document.createElement('a'); a.href = url; a.download = name; a.click(); setTimeout(() => URL.revokeObjectURL(url), 1000)
 }
-async function exportData() { await safe(async () => downloadBlob(await request('/export') as Blob, 'dodo-export.json')) }
+async function exportData() {
+  await safe(async () => {
+    const response = await fetch('/api/v1/export.csv', { credentials: 'include' })
+    if (!response.ok) throw new Error('导出失败')
+    downloadBlob(await response.blob(), 'dodo-export.csv')
+  })
+}
 async function restore() {
   if (!restoreFile.value) return
-  if (!confirm('恢复为合并模式，将导入 JSON 中的清单与任务。继续吗？')) return
+  if (!confirm('恢复为合并模式，将导入备份中的清单与任务。继续吗？')) return
   await safe(async () => {
-    const text = await restoreFile.value!.text()
-    await request('/restore?mode=merge', { method: 'POST', body: text })
+    if (restoreFile.value!.name.toLowerCase().endsWith('.csv')) {
+      const form = new FormData()
+      form.append('file', restoreFile.value!)
+      await request('/restore.csv?mode=merge', { method: 'POST', body: form })
+    } else {
+      const text = await restoreFile.value!.text()
+      await request('/restore?mode=merge', { method: 'POST', body: text })
+    }
     emit('changed'); emit('notice', '数据已恢复')
   })
 }
@@ -417,7 +429,7 @@ onBeforeUnmount(() => {
         <div><small>备份、迁移与安全</small><h2>设置与数据</h2></div>
       </header>
       <div class="settings-grid">
-        <article class="tool-card"><FileJson /><h3>数据导出与恢复</h3><p>下载完整 JSON 备份，或从备份恢复。</p><button class="soft-button" @click="exportData"><Download />导出 JSON</button><label class="file-button"><ArchiveRestore />选择备份<input type="file" accept="application/json" @change="restoreFile=($event.target as HTMLInputElement).files?.[0]||null"></label><button v-if="restoreFile" class="danger-button" @click="restore">确认恢复</button></article>
+        <article class="tool-card"><FileJson /><h3>数据导出与恢复</h3><p>导出完整 CSV 数据，或从 CSV / JSON 备份恢复。</p><button class="soft-button" @click="exportData"><Download />导出 CSV</button><label class="file-button"><ArchiveRestore />选择备份<input type="file" accept=".csv,application/json" @change="restoreFile=($event.target as HTMLInputElement).files?.[0]||null"></label><button v-if="restoreFile" class="danger-button" @click="restore">确认恢复</button></article>
         <article class="tool-card password-card"><Activity /><h3>修改密码</h3><p>修改后当前设备保持登录，其他设备会自动退出。</p><form class="password-form" @submit.prevent="changePassword"><label>当前密码<input v-model="currentPassword" type="password" autocomplete="current-password" required aria-label="当前密码"></label><label>新密码<input v-model="newPassword" type="password" autocomplete="new-password" minlength="12" required aria-label="新密码" placeholder="至少 12 位"></label><label>确认新密码<input v-model="confirmPassword" type="password" autocomplete="new-password" minlength="12" required aria-label="确认新密码"></label><p v-if="passwordError" class="inline-error" role="alert">{{passwordError}}</p><button class="primary-small" :disabled="passwordBusy || !currentPassword || !newPassword || !confirmPassword">{{passwordBusy?'正在修改…':'修改密码'}}</button></form></article>
         <article class="tool-card wide"><LogOut /><h3>登录会话</h3><div v-for="s in sessions" :key="s.id" class="session-row"><span><b>{{ s.current ? '当前设备' : '其他设备' }}</b><small>{{ s.user_agent || '未知设备' }} · {{ s.last_seen_at || s.created_at }}</small></span><button v-if="!s.current" class="danger-text" @click="revoke(s.id)">撤销</button></div><p v-if="!sessions.length">没有可显示的会话。</p></article>
         <article v-if="audit.length" class="tool-card wide"><Activity /><h3>最近活动</h3><div v-for="(row, i) in audit" :key="row.id || i" class="audit-row"><span>{{ row.action || row.event || '变更' }}</span><small>{{ row.created_at || row.timestamp }}</small></div></article>

frontend/src/style.test.ts

@@ -194,7 +194,10 @@ describe('mobile touch targets', () => {
 describe('settings data tools', () => {
   it('keeps backup export and restore but removes the standalone import tool', () => {
     expect(mvpPanel).toContain('<h3>数据导出与恢复</h3>')
-    expect(mvpPanel).toContain('@click="exportData"')
+    expect(mvpPanel).toContain("fetch('/api/v1/export.csv'")
+    expect(mvpPanel).toContain("'dodo-export.csv'")
+    expect(mvpPanel).toContain('导出 CSV')
+    expect(mvpPanel).not.toContain('导出 JSON')
     expect(mvpPanel).toContain('@click="restore"')
     expect(mvpPanel).not.toContain('<h3>导入</h3>')
     expect(mvpPanel).not.toContain("request('/import/ticktick")