@cowwo/dsh-icon-custom 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 cowwo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,36 @@
+# dsh-icon-custom
+
+Customize the browser tab icon (favicon) for DSH: upload an SVG / PNG / ICO from the settings page, it applies instantly and persists across reloads and restarts.
+
+Zero third‑party runtime dependencies.
+
+## Install
+
+```sh
+dsh plugin --profile web add dsh-icon-custom
+```
+
+Scoped name: `@cowwo/dsh-icon-custom`.
+
+## Usage
+
+1. Open **Settings → icon管理**.
+2. Click **上传图标** and pick an SVG, PNG or ICO (up to 10 MB).
+3. The current tab icon changes immediately; it is persisted under `$DSH_HOME/custom-favicon/`.
+4. Click **恢复默认** to clear the custom icon and fall back to the platform favicon.
+
+## Format support
+
+- **SVG** — recognized by content (`<svg`), validated against script / event‑handler / `javascript:` injection.
+- **PNG** — recognized by magic bytes (tolerates a stray leading byte some optimizers emit), structurally checked to IHDR → … → IEND.
+- **ICO / CUR** — CUR is accepted as ICO.
+
+Files are stored verbatim (never re‑encoded), so transparency and quality are preserved.
+
+## Persistence
+
+Icons are stored per‑user under `$DSH_HOME/custom-favicon/`. "Reset" only clears the active marker; stored files are kept for a future icon‑library UI.
+
+## License
+
+MIT

package/README.zh.md

@@ -0,0 +1,36 @@
+# dsh-icon-custom
+
+自定义 DSH 浏览器标签页图标(favicon):在设置页上传 SVG / PNG / ICO,立即生效并持久保存,刷新或重启后都保留。
+
+零第三方运行时依赖。
+
+## 安装
+
+```sh
+dsh plugin --profile web add dsh-icon-custom
+```
+
+带 scope 的包名:`@cowwo/dsh-icon-custom`。
+
+## 使用
+
+1. 打开**设置 → icon管理**。
+2. 点击**上传图标**,选择 SVG、PNG 或 ICO(最大 10 MB)。
+3. 当前标签页图标立即替换;文件会保存到 `$DSH_HOME/custom-favicon/`。
+4. 点击**恢复默认**清除自定义图标,回到平台默认图标。
+
+## 支持的格式
+
+- **SVG** — 按内容(`<svg`)识别,并拦截 `<script>` / 事件属性 / `javascript:` 注入。
+- **PNG** — 按魔数识别(容忍部分优化器产生的前导字节),并校验 IHDR → … → IEND 结构。
+- **ICO / CUR** — CUR 当作 ICO 接受。
+
+图标文件**原样保存,不重新编码**,因此透明背景和画质都不会损失。
+
+## 持久化
+
+图标按用户保存在 `$DSH_HOME/custom-favicon/`。**恢复默认**只清除当前生效标记,已保存的文件会保留,为将来的图标库 UI 做准备。
+
+## 许可证
+
+MIT

package/client/client.js

@@ -0,0 +1,245 @@
+window.__ModuleLoader__.load({
+	id: "dsh-icon-custom",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+
+		let React = require("react");
+
+		//#region locales
+		const NS = "dsh-icon-custom";
+		const zh = {
+			nav: "icon管理",
+			current: "当前图标",
+			none: "使用平台默认图标",
+			upload: "上传图标",
+			uploadHint: "支持 SVG、PNG、ICO,最大 10 MB。上传后立即生效,刷新页面也会保留。",
+			reset: "恢复默认",
+			resetHint: "清除自定义图标并回到平台默认图标。",
+			replace: "替换",
+			replacing: "上传中…",
+			resetting: "恢复中…",
+			name: "名称",
+			size: "大小",
+			updated: "更新时间",
+			successUpload: "已应用新图标",
+			successReset: "已恢复默认图标",
+			fail: "操作失败",
+			noFile: "请先选择图标文件"
+		};
+		const en = {
+			nav: "Favicon",
+			current: "Current icon",
+			none: "Using the platform default icon",
+			upload: "Upload",
+			uploadHint: "SVG, PNG or ICO, up to 10 MB. Applies instantly and persists across reloads.",
+			reset: "Reset",
+			resetHint: "Clear the custom icon and use the platform default.",
+			replace: "Replace",
+			replacing: "Uploading…",
+			resetting: "Resetting…",
+			name: "Name",
+			size: "Size",
+			updated: "Updated",
+			successUpload: "New icon applied",
+			successReset: "Default icon restored",
+			fail: "Operation failed",
+			noFile: "Choose a file first"
+		};
+		//#endregion
+
+		//#region helpers
+		function bytesLabel(value) {
+			if (value == null || value < 0) return "—";
+			if (value < 1024) return `${value} B`;
+			if (value < 1024 * 1024) return `${(value / 1024).toFixed(1)} KB`;
+			return `${(value / (1024 * 1024)).toFixed(1)} MB`;
+		}
+		function reason(resp, fallback) {
+			if (resp && resp.ok === false && resp.error && resp.error.message) return resp.error.message;
+			return fallback;
+		}
+		function fmtTime(ms) {
+			if (ms == null) return "—";
+			try {
+				return new Date(ms).toLocaleString();
+			} catch { return "—"; }
+		}
+		//#endregion
+
+		//#region component
+		function FaviconSection(props) {
+			const t = props.t;
+			const rpc = props.rpc;
+			const [status, setStatus] = React.useState(null);
+			const [busy, setBusy] = React.useState(false);
+			const [error, setError] = React.useState("");
+			const [notice, setNotice] = React.useState("");
+			const inputRef = React.useRef(null);
+
+			const load = React.useCallback(async () => {
+				try {
+					const resp = await rpc.call("/api", "iconCustom/getStatus", { args: {} });
+					if (resp && resp.ok === true) setStatus(resp.value);
+					else setError(reason(resp, t("fail")));
+				} catch (e) {
+					setError(String((e && e.message) || e || t("fail")));
+				}
+			}, [rpc, t]);
+
+			React.useEffect(() => {
+				load();
+			}, [load]);
+
+			// Update the live page icon immediately (no reload) so the change is
+			// visible in this very tab; other tabs pick it up on their next render.
+			const applyLive = React.useCallback((s) => {
+				if (!s || s.active !== true) return;
+				const link = document.querySelector('link[rel="icon"]');
+				const href = `/icon-custom.svg?v=${s.rev}`;
+				if (link) {
+					link.setAttribute("href", href);
+					link.setAttribute("type", s.mime || "image/svg+xml");
+				} else {
+					const el = document.createElement("link");
+					el.rel = "icon";
+					el.type = s.mime || "image/svg+xml";
+					el.href = href;
+					document.head.appendChild(el);
+				}
+			}, []);
+
+			// When cleared, point the icon back at the platform default.
+			const applyDefault = React.useCallback(() => {
+				const link = document.querySelector('link[rel="icon"]');
+				if (link) {
+					link.setAttribute("href", "/favicon.svg");
+					link.setAttribute("type", "image/svg+xml");
+				}
+			}, []);
+
+			const pick = React.useCallback(() => inputRef.current && inputRef.current.click(), []);
+
+			const onFileChange = React.useCallback(async (event) => {
+				const file = event.target.files && event.target.files[0];
+				event.target.value = "";
+				if (!file) return;
+				setError("");
+				setNotice("");
+				if (file.size > 10 * 1024 * 1024) {
+					setError(t("uploadHint"));
+					return;
+				}
+				const reader = new FileReader();
+				reader.onload = async () => {
+					const data = typeof reader.result === "string" ? reader.result : null;
+					if (!data) { setError(t("fail")); return; }
+					setBusy(true);
+					try {
+						const resp = await rpc.call("/api", "iconCustom/setIcon", {
+							args: { request: { mime: file.type || "image/svg+xml", name: file.name, data } }
+						});
+						if (resp && resp.ok === true) {
+							setStatus(resp.value);
+							setNotice(t("successUpload"));
+							applyLive(resp.value);
+						} else {
+							setError(reason(resp, t("fail")));
+						}
+					} catch (e) {
+						setError(String((e && e.message) || e || t("fail")));
+					} finally {
+						setBusy(false);
+					}
+				};
+				reader.onerror = () => setError(t("fail"));
+				reader.readAsDataURL(file);
+			}, [rpc, t, applyLive]);
+
+			const onReset = React.useCallback(async () => {
+				setError("");
+				setNotice("");
+				setBusy(true);
+				try {
+					const resp = await rpc.call("/api", "iconCustom/resetIcon", { args: {} });
+					if (resp && resp.ok === true) {
+						setStatus(resp.value);
+						setNotice(t("successReset"));
+						applyDefault();
+					} else {
+						setError(reason(resp, t("fail")));
+					}
+				} catch (e) {
+					setError(String((e && e.message) || e || t("fail")));
+				} finally {
+					setBusy(false);
+				}
+			}, [rpc, t, applyDefault]);
+
+			const active = status && status.active === true;
+			const previewSrc = active ? `/icon-custom.svg?v=${status.rev}` : "/favicon.svg";
+
+			const style = {
+				row: { display: "flex", alignItems: "center", gap: "16px", padding: "12px 0" },
+				meta: { flex: "1 1 auto", minWidth: "0" },
+				label: { fontSize: 12, fontWeight: 600, color: "var(--dsw-alias-label-primary)", marginBottom: "4px" },
+				desc: { fontSize: 12, color: "var(--dsw-alias-label-secondary)", lineHeight: "18px" },
+				preview: { width: 48, height: 48, borderRadius: 10, background: "var(--dsw-alias-bg-layer-3)", border: "1px solid var(--dsw-alias-border-l2)", display: "flex", alignItems: "center", justifyContent: "center", flex: "none", overflow: "hidden" },
+				img: { width: 32, height: 32, objectFit: "contain" },
+				btn: { border: "1px solid var(--dsw-alias-border-l2)", borderRadius: 8, padding: "6px 12px", fontSize: 12, color: "var(--dsw-alias-label-primary)", background: "var(--dsw-alias-bg-layer-2)", cursor: "pointer" },
+				btnPrimary: { border: "1px solid var(--dsw-alias-border-l2)", borderRadius: 8, padding: "6px 12px", fontSize: 12, color: "#fff", background: "var(--dsw-alias-fill-primary, #2a7de1)", cursor: "pointer" },
+				btnDisabled: { opacity: 0.5, cursor: "default" },
+				error: { fontSize: 12, color: "var(--dsw-alias-danger, #e5484d)", marginTop: "8px" },
+				notice: { fontSize: 12, color: "var(--dsw-alias-success, #30a46c)", marginTop: "8px" },
+				hint: { fontSize: 11, color: "var(--dsw-alias-label-tertiary)", marginTop: "4px", lineHeight: "16px" }
+			};
+
+			return React.createElement("div", { style: { display: "flex", flexDirection: "column", gap: "4px" } },
+				React.createElement("div", { style: style.row },
+					React.createElement("div", { style: style.preview },
+						React.createElement("img", { src: previewSrc, style: style.img, alt: t("current") })
+					),
+					React.createElement("div", { style: style.meta },
+						React.createElement("div", { style: style.label }, t("current")),
+						React.createElement("div", { style: style.desc }, active
+							? (status.name ? `${status.name} · ${bytesLabel(status.size)} · ${fmtTime(status.savedAt)}` : status.mime)
+							: t("none"))
+					)
+				),
+				React.createElement("div", { style: { display: "flex", gap: "8px", alignItems: "center" } },
+					React.createElement("button", { type: "button", style: { ...style.btnPrimary, ...(busy ? style.btnDisabled : null) }, disabled: busy, onClick: pick },
+						React.createElement("span", null, busy ? t("replacing") : (active ? t("replace") : t("upload")))
+					),
+					React.createElement("button", { type: "button", style: { ...style.btn, ...(busy ? style.btnDisabled : null) }, disabled: busy || !active, onClick: onReset },
+						React.createElement("span", null, busy ? t("resetting") : t("reset"))
+					),
+					React.createElement("input", { ref: inputRef, type: "file", accept: ".svg,.png,.ico,.cur,image/svg+xml,image/png,image/x-icon", style: { display: "none" }, onChange: onFileChange })
+				),
+				React.createElement("div", { style: style.hint }, t("uploadHint")),
+				React.createElement("div", { style: style.hint }, t("resetHint")),
+				notice ? React.createElement("div", { style: style.notice }, notice) : null,
+				error ? React.createElement("div", { style: style.error }, error) : null
+			);
+		}
+		//#endregion
+
+		const inject = ["slots", "locale", "connection"];
+		function apply(ctx) {
+			ctx.effect(() => ctx.locale.register(NS, { zh, en }), "dsh-icon-custom: dictionaries");
+			const t = ctx.locale.bind(NS);
+			const rpc = ctx.connection.rpc;
+			ctx.slots.inject("settings.section", () => ctx.slots.register({
+				name: "settings.section",
+				id: "favicon",
+				order: 50,
+				label: () => t("nav"),
+				locale: NS,
+				inject: () => ({ t })
+			}, (props) => React.createElement(FaviconSection, { ...props, t, rpc })));
+		}
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});

package/cordis.patch.yml

@@ -0,0 +1,4 @@
+# dsh-icon-custom bundle patch: insert the plugin into a profile's layer stack.
+- insert:
+    - id: icon-custom
+      name: 'dsh-icon-custom'

package/lib/index.js

@@ -0,0 +1,271 @@
+/**
+ * dsh-icon-custom host entry: a TypertRemoteService that stores user-supplied
+ * favicons under $DSH_HOME/custom-favicon/ and serves the active one at
+ * /icon-custom.svg, rewriting the document head `<link rel="icon">` only when
+ * a custom icon is active (zero side effects otherwise — the browser falls back
+ * to the platform favicon).
+ *
+ * Storage is shaped as an icon library from day one (see docs/adr/0001):
+ * `library/<id>.<ext>` holds each icon's bytes and `library.json` holds the
+ * index + the `activeId` marker. "reset" clears only `activeId`; icon files are
+ * kept for a future icon-library UI. This round writes exactly one slot.
+ *
+ * Zero third-party deps: Node's Buffer gives a binary-safe base64 decode (the
+ * dynamic-prototype bug was a lossy host `atob`; this never goes through it) and
+ * a structural PNG walk confirms the bytes actually decode as a PNG without
+ * requiring an exact chunk CRC (optimizers rewrite those and browsers still
+ * render the file).
+ */
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol'
+import { readFileSync } from 'node:fs'
+import { mkdir, rename, writeFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { join, resolve } from 'node:path'
+
+const MAX_BYTES = 10 * 1024 * 1024 // 10 MB
+// Normalized mime -> safe extension. CUR (mouse cursor) is accepted as ICO.
+const MIME_EXT = {
+	'image/svg+xml': 'svg',
+	'image/png': 'png',
+	'image/x-icon': 'ico'
+}
+// PNG magic is 89 50 4e 47 0d 0a 1a 0a; we match the tail 7 bytes so a stray
+// leading byte (some encoders emit 0xfd) still identifies a genuine PNG.
+const PNG_MAGIC = [0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]
+const ICO_MAGIC = [0x00, 0x00, 0x01, 0x00]
+const CUR_MAGIC = [0x00, 0x00, 0x02, 0x00]
+
+/** Resolve the Harness home the same way `@deepseek-ai/dsh-home-paths` does. */
+function resolveHome() {
+	const fromEnv = process.env.DSH_HOME
+	return resolve(fromEnv !== void 0 && fromEnv.trim().length > 0 ? fromEnv : join(homedir(), '.dsh'))
+}
+
+/** Find a byte pattern anywhere within the first `window` bytes. */
+function indexOfPattern(buf, pattern, window) {
+	const end = Math.min(buf.length, window)
+	for (let i = 0; i < end; i++) {
+		let ok = true
+		for (let j = 0; j < pattern.length; j++) {
+			if (buf[i + j] !== pattern[j]) { ok = false; break }
+		}
+		if (ok) return i
+	}
+	return -1
+}
+
+/** Detect the real image type from content bytes, not the declared mime. */
+function detectMime(buf) {
+	if (indexOfPattern(buf, PNG_MAGIC, 16) !== -1) return 'image/png'
+	if (indexOfPattern(buf, ICO_MAGIC, 16) !== -1) return 'image/x-icon'
+	if (indexOfPattern(buf, CUR_MAGIC, 16) !== -1) return 'image/x-icon'
+	const text = buf.toString('utf8').replace(/^\uFEFF/, '').replace(/^\s+/, '')
+	if (/^<svg[\s>]/i.test(text)) return 'image/svg+xml'
+	if (/^<\?xml/i.test(text) && /<svg[\s>]/i.test(text)) return 'image/svg+xml'
+	return null
+}
+
+/**
+ * Walk the PNG chunk structure from the magic offset and require it to be a
+ * well-formed sequence: starts with IHDR, traverses chunks by their declared
+ * lengths, and terminates at a real IEND chunk. This confirms the bytes decode
+ * as a genuine PNG (better than only checking the magic). We deliberately do not
+ * require an exact chunk CRC — optimizers rewrite those and browsers still
+ * decode such files.
+ */
+function assertPngStructure(buf, offset) {
+	// `offset` is the position of the 'P' in the 7-byte tail magic. Both a
+	// standard 8-byte PNG (leading 0x89) and an optimizer-rewritten one (leading
+	// 0xfd) put the IHDR *type* at offset+11, with the chunk length at offset+7.
+	if (buf.length < offset + 15) throw new Error('PNG 数据不完整')
+	if (buf.toString('latin1', offset + 11, offset + 15) !== 'IHDR') throw new Error('PNG 缺少 IHDR 数据块')
+	let pos = offset + 7 // start of the first chunk's length field
+	let chunks = 0
+	let guard = 0
+	while (pos + 8 <= buf.length) {
+		if (++guard > 2048) throw new Error('PNG 结构异常')
+		const len = buf.readUInt32BE(pos)
+		const type = buf.toString('latin1', pos + 4, pos + 8)
+		const dataEnd = pos + 8 + len
+		if (dataEnd + 4 > buf.length) throw new Error('PNG 数据不完整')
+		if (chunks === 0 && type !== 'IHDR') throw new Error('PNG 缺少 IHDR 数据块')
+		if (type === 'IEND') return
+		pos = dataEnd + 4
+		chunks++
+	}
+	throw new Error('PNG 缺少 IEND 结尾块')
+}
+
+/** Reject SVG content that can act on its own (scripts / event handlers). */
+function assertSafeSvg(buf) {
+	const text = buf.toString('utf8')
+	if (/(<\s*script\b)/i.test(text)) throw new Error('SVG 不能包含 <script>')
+	if (/\bon[a-z]+\s*=/i.test(text)) throw new Error('SVG 不能包含事件属性(如 onload)')
+	if (/javascript\s*:/i.test(text)) throw new Error('SVG 不能包含 javascript: 链接')
+}
+
+/** Validate raw bytes; returns the detected mime or throws. */
+function sniff(buf) {
+	if (buf.length === 0) throw new Error('图标内容为空')
+	if (buf.length > MAX_BYTES) throw new Error(`图标不能超过 ${MAX_BYTES / (1024 * 1024)} MB`)
+	const mime = detectMime(buf)
+	if (mime === null) throw new Error('无法识别图标内容,仅支持 SVG / PNG / ICO')
+	if (mime === 'image/png') {
+		const offset = indexOfPattern(buf, PNG_MAGIC, 16)
+		assertPngStructure(buf, offset)
+	}
+	if (mime === 'image/svg+xml') assertSafeSvg(buf)
+	return mime
+}
+
+/** Extract the base64 body from a `data:<mime>;base64,<body>` string. */
+function base64Body(dataUrl) {
+	const m = /^data:([^;,]+);base64,(.+)$/s.exec(dataUrl || '')
+	if (!m) throw new Error('图标数据必须是 data URL(base64)')
+	const body = m[2].replace(/\s+/g, '')
+	if (body.length === 0) throw new Error('图标数据为空')
+	// Binary-safe: Node's Buffer decodes base64 to exact bytes (never lossy).
+	return { bytes: Buffer.from(body, 'base64') }
+}
+
+/**
+ * 图标替换服务:保存/读取用户上传的 favicon,并通过 webServer 提供
+ * `/icon-custom.svg` 路由与 index 头部改写。通过 typert
+ * `iconCustom/*` 端点暴露给浏览器端。
+ */
+export class FaviconCustomService extends TypertRemoteService {
+	static inject = ['webServer']
+
+	constructor(ctx, config) {
+		super(ctx, 'iconCustom')
+		this.storageDir = join(resolveHome(), 'custom-favicon')
+		this.libraryDir = join(this.storageDir, 'library')
+		this.indexPath = join(this.storageDir, 'library.json')
+		// { activeId, icons: { [id]: { id, mime, ext, name, size, savedAt, rev } } }
+		this.library = { activeId: null, icons: {} }
+		// The active icon's loaded state: { rev, mime, ext, name, size, savedAt, bytes } | null
+		this.current = null
+		this._load()
+		ctx.effect(() => ctx.webServer.register({
+			kind: 'exact',
+			path: '/icon-custom.svg',
+			handler: (request, response) => this._handleIcon(request, response)
+		}), 'dsh-icon-custom: /icon-custom.svg route')
+		ctx.effect(() => ctx.webServer.tapIndex((html) => this._rewriteIndex(html)),
+			'dsh-icon-custom: index tap')
+	}
+
+	/** Load persisted library + active icon from disk at startup. */
+	_load() {
+		try {
+			const raw = readFileSync(this.indexPath)
+			const lib = JSON.parse(raw.toString('utf8'))
+			if (typeof lib !== 'object' || lib === null) return
+			const icons = (typeof lib.icons === 'object' && lib.icons !== null) ? lib.icons : {}
+			this.library = { activeId: typeof lib.activeId === 'string' ? lib.activeId : null, icons }
+			const activeId = this.library.activeId
+			if (activeId === null) return
+			const rec = icons[activeId]
+			if (rec === null || typeof rec !== 'object') { this.library.activeId = null; return }
+			const bytes = readFileSync(join(this.libraryDir, `${activeId}.${rec.ext}`))
+			this.current = { ...rec, bytes }
+		} catch { /* no persisted icon yet */ }
+	}
+
+	/** Persist the library index to disk (does not touch icon files). */
+	_saveLibrary() {
+		return writeFile(this.indexPath, JSON.stringify(this.library, null, 2))
+	}
+
+	/** Currently active icon as a JSON-safe status object (no raw bytes). */
+	status() {
+		const c = this.current
+		return c === null
+			? { active: false, rev: null, mime: null, ext: null, name: null, size: null, savedAt: null }
+			: { active: true, rev: c.rev, mime: c.mime, ext: c.ext, name: c.name, size: c.size, savedAt: c.savedAt }
+	}
+
+	/** typert endpoint: read current status. */
+	async getStatus() {
+		return this.status()
+	}
+
+	/** typert endpoint: store a new icon uploaded as a data URL and make it active. */
+	async setIcon(request) {
+		if (request === null || typeof request !== 'object') throw new Error('缺少图标参数')
+		const { name, data } = request
+		if (typeof data !== 'string' || data.length === 0) throw new Error('缺少图标数据')
+		const { bytes } = base64Body(data)
+		const mime = sniff(bytes)
+		const ext = MIME_EXT[mime]
+		const now = Date.now()
+		const id = now.toString(36) + Math.random().toString(36).slice(2, 6)
+		const rev = now.toString(36)
+		await mkdir(this.libraryDir, { recursive: true })
+		// Atomic-ish write: temp file then rename, so a crash never leaves a
+		// half-written icon that would 500 the /icon-custom.svg route.
+		const tmp = join(this.libraryDir, `.${id}.${ext}.tmp`)
+		await writeFile(tmp, bytes)
+		await rename(tmp, join(this.libraryDir, `${id}.${ext}`))
+		const rec = {
+			id,
+			mime, ext,
+			name: typeof name === 'string' && name.trim().length > 0 ? name.trim().slice(0, 128) : null,
+			size: bytes.length, savedAt: now, rev
+		}
+		this.library.icons[id] = rec
+		this.library.activeId = id
+		await this._saveLibrary().catch(() => {}) // index is advisory; icon file is authoritative
+		this.current = { ...rec, bytes }
+		return this.status()
+	}
+
+	/** typert endpoint: clear the active marker so the platform icon is used.
+	 *  Icon files stay on disk for the future icon-library UI. */
+	async resetIcon() {
+		this.library.activeId = null
+		await this._saveLibrary().catch(() => {})
+		this.current = null
+		return this.status()
+	}
+
+	/** Serve the current custom icon (or 404 when unset). */
+	async _handleIcon(request, response) {
+		if (request.method !== 'GET' && request.method !== 'HEAD') {
+			response.writeHead(405, { allow: 'GET, HEAD' })
+			response.end()
+			return
+		}
+		const c = this.current
+		if (c === null) {
+			response.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' })
+			response.end('no custom favicon')
+			return
+		}
+		response.writeHead(200, {
+			'content-type': c.mime,
+			'content-length': c.bytes.length,
+			// URL carries ?v=<rev>, so this is effectively content-addressed.
+			'cache-control': 'public, max-age=31536000, immutable',
+			'x-content-type-options': 'nosniff'
+		})
+		if (request.method === 'HEAD') {
+			response.end()
+			return
+		}
+		response.end(c.bytes)
+	}
+
+	/** Rewrite the head `<link rel="icon">` only when a custom icon is active. */
+	_rewriteIndex(html) {
+		const c = this.current
+		if (c === null) return html
+		const href = `/icon-custom.svg?v=${c.rev}`
+		const tag = `<link rel="icon" type="${c.mime}" href="${href}" />`
+		const re = /<link\s+rel="icon"[^>]*\/?>/i
+		if (re.test(html)) return html.replace(re, tag)
+		return html.replace(/<head>/i, `<head>${tag}`)
+	}
+}
+
+export default FaviconCustomService

package/lib/typert.host.js

@@ -0,0 +1,125 @@
+/* Hand-written typert host manifest for dsh-icon-custom (strict face). */
+import { z } from 'zod'
+
+const statusSchema = z.object({
+	active: z.boolean(),
+	rev: z.string().nullable(),
+	mime: z.string().nullable(),
+	ext: z.string().nullable(),
+	name: z.string().nullable(),
+	size: z.number().int().nonnegative().nullable(),
+	savedAt: z.number().int().nonnegative().nullable()
+})
+
+const setIconRequestSchema = z.object({
+	mime: z.string().min(1),
+	name: z.string().max(128).optional(),
+	data: z.string().min(1)
+})
+
+const setIconResultSchema = statusSchema
+
+export const TYPERT = {
+	package: 'dsh-icon-custom',
+	face: 'host',
+	schemas: [],
+	invocations: [
+		{
+			id: 'dsh-icon-custom#iconCustom/getStatus',
+			service: 'iconCustom',
+			namespace: 'iconCustom',
+			method: 'getStatus',
+			invocation: { kind: 'direct' },
+			parameters: [],
+			result: {
+				mode: 'strict',
+				typeSymbol: 'dsh-icon-custom#iconCustom/getStatus:result',
+				schema: statusSchema
+			},
+			sourceLocation: { file: 'lib/index.js', line: 1, column: 1 }
+		},
+		{
+			id: 'dsh-icon-custom#iconCustom/setIcon',
+			service: 'iconCustom',
+			namespace: 'iconCustom',
+			method: 'setIcon',
+			invocation: { kind: 'direct' },
+			parameters: [
+				{
+					name: 'request',
+					wire: 'request',
+					source: 'json',
+					codec: {
+						mode: 'strict',
+						typeSymbol: 'dsh-icon-custom#iconCustom/setIcon:request',
+						schema: setIconRequestSchema
+					}
+				}
+			],
+			result: {
+				mode: 'strict',
+				typeSymbol: 'dsh-icon-custom#iconCustom/setIcon:result',
+				schema: setIconResultSchema
+			},
+			sourceLocation: { file: 'lib/index.js', line: 1, column: 1 }
+		},
+		{
+			id: 'dsh-icon-custom#iconCustom/resetIcon',
+			service: 'iconCustom',
+			namespace: 'iconCustom',
+			method: 'resetIcon',
+			invocation: { kind: 'direct' },
+			parameters: [],
+			result: {
+				mode: 'strict',
+				typeSymbol: 'dsh-icon-custom#iconCustom/resetIcon:result',
+				schema: statusSchema
+			},
+			sourceLocation: { file: 'lib/index.js', line: 1, column: 1 }
+		}
+	],
+	model: {
+		services: [
+			{
+				description: "Stores a user-supplied favicon and serves it at /icon-custom.svg, rewriting the document-head icon link only when a custom icon is set.",
+				summary: "Custom browser tab favicon.",
+				jsDoc: "/** Custom browser tab favicon. */",
+				tags: [],
+				key: 'iconCustom',
+				exportName: 'FaviconCustomService',
+				members: [
+					{
+						kind: 'method',
+						name: 'getStatus',
+						signature: 'async getStatus(): Promise<{ active: boolean; rev: string | null; mime: string | null; ext: string | null; name: string | null; size: number | null; savedAt: number | null }>',
+						description: "Read the current favicon status.",
+						summary: "Read the current favicon status.",
+						jsDoc: "/** Read the current favicon status. */",
+						tags: []
+					},
+					{
+						kind: 'method',
+						name: 'setIcon',
+						signature: 'async setIcon(request: { mime: string; name?: string; data: string }): Promise<{ active: boolean; rev: string | null; mime: string | null; ext: string | null; name: string | null; size: number | null; savedAt: number | null }>',
+						description: "Store a new favicon uploaded as a data URL.",
+						summary: "Store a new favicon.",
+						jsDoc: "/** Store a new favicon. */",
+						tags: []
+					},
+					{
+						kind: 'method',
+						name: 'resetIcon',
+						signature: 'async resetIcon(): Promise<{ active: boolean; rev: string | null; mime: string | null; ext: string | null; name: string | null; size: number | null; savedAt: number | null }>',
+						description: "Clear the active custom favicon marker so the platform icon is used; stored icon files are kept.",
+						summary: "Clear the custom favicon.",
+						jsDoc: "/** Clear the custom favicon. */",
+						tags: []
+					}
+				],
+				types: []
+			}
+		],
+		events: [],
+		objects: []
+	}
+}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@cowwo/dsh-icon-custom",
+  "version": "0.1.0",
+  "description": "自定义浏览器标签页图标:在设置页上传 SVG/PNG/ICO,立即生效并持久保存。· Custom browser tab favicon: upload SVG/PNG/ICO from the settings page, applies instantly and persists.",
+  "type": "module",
+  "main": "lib/index.js",
+  "license": "MIT",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./client/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./typert": "./lib/typert.host.js"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "*",
+    "@deepseek-ai/dsh-client-connection": "*",
+    "@deepseek-ai/dsh-client-locale": "*",
+    "@deepseek-ai/dsh-client-runtime": "*",
+    "@deepseek-ai/dsh-typert-protocol": "*",
+    "zod": "*"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-connection": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-locale": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-runtime": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-typert-protocol": {
+      "optional": true
+    },
+    "zod": {
+      "optional": true
+    }
+  },
+  "files": [
+    "lib",
+    "client",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "favicon",
+    "icon"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cowwo/dsh-icon-custom.git"
+  },
+  "homepage": "https://github.com/cowwo/dsh-icon-custom#readme",
+  "bugs": {
+    "url": "https://github.com/cowwo/dsh-icon-custom/issues"
+  },
+  "author": "cowwo <cowwo@users.noreply.github.com>"
+}