* feat(auth): add export/import for portable sandbox credentials Enable migrating encrypted keychain and config between Linux sandboxes so refresh tokens survive beyond the 2-hour access token window. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(auth): harden portable export/import per PR review 按 PR 审查意见加固可迁移认证包流程:macOS 默认 Keychain 场景拒绝导出;导入需 --force 覆盖已有登录态;解析 manifest 并在 OS 不匹配时告警;export 参数校验前置;flag 描述中文化; 移除已弃用的 tar.TypeRegA;导出文件后提示删除敏感包。 Co-authored-by: Cursor <cursoragent@cursor.com> * fix(auth): require auth-token.enc before portable export 修复 staticcheck S1030(测试改用 exported.Bytes())。 导出前校验 auth-token.enc 存在,避免无登录态时生成 仅含 dek 的无效 bundle;CLI 提示先运行 dws auth login。 Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: 洛丘 <wangketing.wkt@antgroup.com> Co-authored-by: Cursor <cursoragent@cursor.com>