fix: allow DataPath at install root so the beta.69~74 recovery works

Mirrors the submodule change: the InsideInstall validation now refuses
only current/ and packages/, not the entire install root. Adds three
tests pinning the new behavior (current/ refused, packages/ refused,
install root and its siblings allowed) and updates the user-facing
error message in cn / en to match.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: anobaka

src/libs/Bakabase.Infrastructures

@@ -92,6 +92,7 @@ public void Validate_CurrentIsAncestorOfTarget_Refused()
     [TestMethod]
     public void Validate_InsideVelopackInstall_Refused()
     {
+        // Inside current/ — atomically replaced on upgrade, must be refused.
         var installRoot = Path.Combine(_root, "Bakabase-install");
         var target = Path.Combine(installRoot, "current", "AppData");
         var current = Path.Combine(_root, "elsewhere");
@@ -102,6 +103,52 @@ public void Validate_InsideVelopackInstall_Refused()
         Assert.AreEqual(DataPathValidator.RefusalReason.InsideInstall, result.Reason);
     }
 
+    [TestMethod]
+    public void Validate_InsideVelopackPackages_Refused()
+    {
+        // packages/ holds Velopack download cache — pruned on upgrade, must be refused.
+        var installRoot = Path.Combine(_root, "Bakabase-install");
+        var target = Path.Combine(installRoot, "packages", "data");
+        var current = Path.Combine(_root, "elsewhere");
+        Directory.CreateDirectory(current);
+        var input = MakeInput(target, current, installRoot: installRoot);
+        var result = DataPathValidator.Validate(input);
+        Assert.IsFalse(result.Valid);
+        Assert.AreEqual(DataPathValidator.RefusalReason.InsideInstall, result.Reason);
+    }
+
+    [TestMethod]
+    public void Validate_TargetEqualsInstallRoot_Allowed()
+    {
+        // Install root itself — survives upgrade (Velopack only swaps current/), so it is
+        // not refused. This is the recovery target for users coming from 2.3.0-beta.69~74
+        // whose default DataPath physically lived at the install root. The orthogonal
+        // uninstall / Repair risk is surfaced via AppInfo.DataInInstallRoot.
+        var installRoot = Path.Combine(_root, "Bakabase-install");
+        Directory.CreateDirectory(installRoot);
+        var current = Path.Combine(_root, "elsewhere");
+        Directory.CreateDirectory(current);
+        var input = MakeInput(installRoot, current, installRoot: installRoot);
+        var result = DataPathValidator.Validate(input);
+        Assert.IsTrue(result.Valid, $"Expected valid, got {result.Reason}");
+    }
+
+    [TestMethod]
+    public void Validate_InstallRootSiblingDir_Allowed()
+    {
+        // A non-Velopack-managed dir under the install root (e.g. user-stored data
+        // folder at the install root level) is also safe from upgrade and must be
+        // allowed.
+        var installRoot = Path.Combine(_root, "Bakabase-install");
+        var target = Path.Combine(installRoot, "my-data");
+        Directory.CreateDirectory(target);
+        var current = Path.Combine(_root, "elsewhere");
+        Directory.CreateDirectory(current);
+        var input = MakeInput(target, current, installRoot: installRoot);
+        var result = DataPathValidator.Validate(input);
+        Assert.IsTrue(result.Valid, $"Expected valid, got {result.Reason}");
+    }
+
     [TestMethod]
     public void Validate_SystemPath_Windows_Refused()
     {

src/tests/Bakabase.Tests/DataPathValidatorTests.cs

@@ -74,7 +74,7 @@
   "configuration.dataPath.validation.relativePath": "请使用绝对路径。",
   "configuration.dataPath.validation.invalidChars": "路径含有非法字符。",
   "configuration.dataPath.validation.sameAsCurrent": "目标路径与当前路径相同。",
-  "configuration.dataPath.validation.insideInstall": "不能选择安装目录内部，从 2.3 版本开始升级时会清空旧的安装目录，放在里面的数据会丢失。",
+  "configuration.dataPath.validation.insideInstall": "不能选择安装目录中的 current/ 或 packages/ 子目录——这些目录由 Velopack 管理，会在升级时被替换或清理，放在里面的数据会丢失。",
   "configuration.dataPath.validation.circularContainment": "目标路径与当前路径互相包含。",
   "configuration.dataPath.validation.systemPath": "不能使用系统目录。",
   "configuration.dataPath.validation.noWritePermission": "目标路径没有写入权限。",

src/web/src/locales/cn/pages/configuration.json

@@ -74,7 +74,7 @@
   "configuration.dataPath.validation.relativePath": "Use an absolute path.",
   "configuration.dataPath.validation.invalidChars": "Path contains invalid characters.",
   "configuration.dataPath.validation.sameAsCurrent": "Target equals the current path.",
-  "configuration.dataPath.validation.insideInstall": "Cannot place data inside the install directory — starting with 2.3 the previous install directory is wiped on upgrade and any data inside is lost.",
+  "configuration.dataPath.validation.insideInstall": "Cannot place data inside the install directory's current/ or packages/ subfolders — these are managed by Velopack and replaced or pruned on upgrade; any data inside would be lost.",
   "configuration.dataPath.validation.circularContainment": "Target and current path contain each other.",
   "configuration.dataPath.validation.systemPath": "System directories are not allowed.",
   "configuration.dataPath.validation.noWritePermission": "No write permission for the target.",