@ddtcorex/dsh-maestro-config 0.1.0

package/lib/index.d.ts

@@ -0,0 +1,12 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { type MaestroConfigService } from './service.ts';
+export declare const name = "maestro-config";
+export declare const inject: string[];
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        maestroConfig: MaestroConfigService;
+    }
+}
+/** Publish maestroConfig over the shared store + loopback RPC for clients. */
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/host/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAEpF,eAAO,MAAM,IAAI,mBAAmB,CAAA;AACpC,eAAO,MAAM,MAAM,UAAiB,CAAA;AAIpC,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,aAAa,EAAE,oBAAoB,CAAA;KACpC;CACF;AAmBD,8EAA8E;AAC9E,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAuBxC"}

package/lib/index.js

@@ -0,0 +1,44 @@
+import { createMaestroConfigService } from "./service.js";
+export const name = 'maestro-config';
+export const inject = ['connection'];
+const RPC_CHANNEL = '/dsh-maestro-config';
+function ok(value) {
+    return { ok: true, value };
+}
+function fail(message) {
+    return {
+        ok: false,
+        error: {
+            code: 'bad-request',
+            message,
+            // Synthetic details: app-level validation error shoehorned into DSH's
+            // shared RPC error taxonomy (same approach across maestro packages).
+            details: { issues: [{ message }] },
+        },
+    };
+}
+/** Publish maestroConfig over the shared store + loopback RPC for clients. */
+export function apply(ctx) {
+    const svc = createMaestroConfigService();
+    ctx.provide('maestroConfig', svc);
+    ctx.effect(() => ctx.connection.rpc.handle(RPC_CHANNEL, async (endpoint, payload) => {
+        const body = (payload ?? {});
+        if (endpoint === 'list') {
+            return ok({ domains: await svc.listDomains() });
+        }
+        if (endpoint === 'get') {
+            if (typeof body.domain !== 'string')
+                return fail('domain (string) is required');
+            return ok(await svc.get(body.domain));
+        }
+        if (endpoint === 'set') {
+            if (typeof body.domain !== 'string' || typeof body.patch !== 'object' || body.patch === null) {
+                return fail('domain (string) and patch (object) are required');
+            }
+            await svc.set(body.domain, body.patch);
+            return ok(null);
+        }
+        return fail(`unknown endpoint: ${String(endpoint)}`);
+    }, { authority: 'loopback' }));
+}
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/host/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAA6B,MAAM,cAAc,CAAA;AAEpF,MAAM,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAA;AACpC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,CAAA;AAEpC,MAAM,WAAW,GAAG,qBAAqB,CAAA;AAQzC,SAAS,EAAE,CAAI,KAAQ;IACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI,EAAE,aAAa;YACnB,OAAO;YACP,sEAAsE;YACtE,qEAAqE;YACrE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAuC;SACxE;KACF,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,MAAM,GAAG,GAAG,0BAA0B,EAAE,CAAA;IACxC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;IACjC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CACd,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,QAAgB,EAAE,OAAgB,EAA+B,EAAE;QAC/G,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAwC,CAAA;QACnE,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAA;YAC/E,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QACvC,CAAC;QACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC7F,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAChE,CAAC;YACD,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACtC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAC9B,CAAA;AACH,CAAC"}

package/lib/service.d.ts

@@ -0,0 +1,16 @@
+export interface MaestroConfigService {
+    /** Union of schema-registered domains and domains present in the store file. */
+    listDomains(): Promise<string[]>;
+    get(domain: string): Promise<unknown>;
+    /** Deep-merges the patch into the domain (same semantics as the lib). */
+    set(domain: string, patch: object): Promise<void>;
+    onChange(cb: (domain: string) => void): () => void;
+}
+/**
+ * Thin facade over @ddtcorex/dsh-maestro-config-lib. `dshHome` defaults to the
+ * lib's resolution (explicit > DSH_HOME env > ~/.dsh); tests inject a tmpdir.
+ */
+export declare function createMaestroConfigService(opts?: {
+    dshHome?: string;
+}): MaestroConfigService;
+//# sourceMappingURL=service.d.ts.map

package/lib/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/host/service.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,yEAAyE;IACzE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CACnD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,oBAAoB,CAiB5F"}

package/lib/service.js

@@ -0,0 +1,24 @@
+import * as lib from '@ddtcorex/dsh-maestro-config-lib';
+/**
+ * Thin facade over @ddtcorex/dsh-maestro-config-lib. `dshHome` defaults to the
+ * lib's resolution (explicit > DSH_HOME env > ~/.dsh); tests inject a tmpdir.
+ */
+export function createMaestroConfigService(opts) {
+    const libOpts = opts?.dshHome ? { dshHome: opts.dshHome } : undefined;
+    return {
+        async listDomains() {
+            const doc = await lib.load(libOpts);
+            return [...new Set([...lib.definedDomains(), ...Object.keys(doc.domains)])];
+        },
+        async get(domain) {
+            return lib.get(domain, libOpts);
+        },
+        async set(domain, patch) {
+            await lib.set(domain, patch, libOpts);
+        },
+        onChange(cb) {
+            return lib.onChange(cb);
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/lib/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/host/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,kCAAkC,CAAA;AAWvD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAA2B;IACpE,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACrE,OAAO;QACL,KAAK,CAAC,WAAW;YACf,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM;YACd,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACjC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK;YACrB,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QACvC,CAAC;QACD,QAAQ,CAAC,EAAE;YACT,OAAO,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/types/client/api.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared between the Settings card and the host endpoint names. The granular
+ * dsh-maestro-review settings-rpc row implements this exact surface on the
+ * canonical channel.
+ */
+export declare const MAESTRO_RPC_CHANNEL = "/dsh-maestro-review";
+export declare const MAESTRO_ENDPOINTS: Readonly<{
+    status: "maestro.status";
+    getConfig: "maestro.getConfig";
+    saveConfig: "maestro.saveConfig";
+    tunnelStart: "maestro.tunnelStart";
+    tunnelStop: "maestro.tunnelStop";
+    proxyStatus: "maestro.proxyStatus";
+    getPin: "maestro.getPin";
+    rotatePin: "maestro.rotatePin";
+    lanPinStatus: "maestro.lanPin.status";
+    lanPinSetEnabled: "maestro.lanPin.setEnabled";
+    lanPinRotate: "maestro.lanPin.rotate";
+    reviewsList: "maestro.reviews.list";
+    modelsList: "maestro.models.list";
+    modelsCurrent: "maestro.models.current";
+}>;
+//# sourceMappingURL=api.d.ts.map

package/lib/types/client/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/client/api.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AAExD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAe5B,CAAA"}

package/lib/types/client/index.d.ts

@@ -0,0 +1,7 @@
+interface ClientCtx {
+    get?(name: string): unknown;
+    effect(fn: () => () => void, label?: string): unknown;
+}
+export declare function apply(ctx: ClientCtx): void;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.tsx"],"names":[],"mappings":"AAuCA,UAAU,SAAS;IACjB,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,EAAE,MAAM,MAAM,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACtD;AAaD,wBAAgB,KAAK,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAuB1C"}

package/lib/types/client/maestro-card.d.ts

@@ -0,0 +1,9 @@
+export function MaestroSettingsTab({ rpcCall }: {
+    rpcCall: any;
+}): import("react").DetailedReactHTMLElement<{
+    'data-maestro-settings-card': string;
+    style: {
+        maxWidth: number;
+    };
+}, HTMLElement>;
+//# sourceMappingURL=maestro-card.d.ts.map

package/lib/types/client/maestro-card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maestro-card.d.ts","sourceRoot":"","sources":["../../../src/client/maestro-card.jsx"],"names":[],"mappings":"AA6bA;;;;;;;gBAmPC"}

package/lib/types/client/settings-nav-icon.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Mark this plugin's row in the DSH settings navigation so a style block can
+ * replace the shell's fallback gear with the maestro glyph.
+ *
+ * DSH 0.1.x projects only `id`, `order`, and `label` from a `settings.section`
+ * registration and picks icons from a closed built-in list, so each external
+ * plugin identifies its own localized row by visible text after the dialog
+ * mounts. The marker owns no shell structure and is removed on disposal.
+ */
+export declare const SETTINGS_NAV_MARKER = "data-maestro-settings-nav";
+/** Minimal DOM surface used here; tests inject a stub instead of `document`. */
+/** The two DOM iteration shapes this module touches (querySelector results). */
+type NodeSeq = Iterable<Element> & {
+    forEach(fn: (el: Element) => void): unknown;
+};
+interface DomScope {
+    querySelectorAll(selector: string): NodeSeq;
+}
+export declare function registerSettingsNavIcon(label: () => string, root?: DomScope): () => void;
+export {};
+//# sourceMappingURL=settings-nav-icon.d.ts.map

package/lib/types/client/settings-nav-icon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-nav-icon.d.ts","sourceRoot":"","sources":["../../../src/client/settings-nav-icon.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,mBAAmB,8BAA8B,CAAA;AAE9D,gFAAgF;AAChF,gFAAgF;AAChF,KAAK,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAA;CAAE,CAAA;AAElF,UAAU,QAAQ;IAChB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;CAC5C;AAOD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,MAAM,EACnB,IAAI,CAAC,EAAE,QAAQ,GACd,MAAM,IAAI,CAuCZ"}

package/lib/types/client/webhook-secret.d.ts

@@ -0,0 +1,5 @@
+/** Generate an opaque 256-bit secret suitable for GitLab's webhook token. */
+export declare function generateWebhookSecret(randomValues?: <T extends ArrayBufferView>(array: T) => T): string;
+/** GitLab's Merge Request webhook endpoint for the configured public hostname. */
+export declare function gitlabWebhookUrl(hostname?: string): string;
+//# sourceMappingURL=webhook-secret.d.ts.map

package/lib/types/client/webhook-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-secret.d.ts","sourceRoot":"","sources":["../../../src/client/webhook-secret.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,YAAY,6CAAsC,UAGvF;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,UAGjD"}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@ddtcorex/dsh-maestro-config",
+  "version": "0.1.0",
+  "description": "Maestro Config — shared settings service for the dsh-maestro-* suite over the single namespaced store (~/.dsh/maestro/settings.json)",
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "src",
+    "cordis.patch.yml",
+    "README.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ]
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-host-apiproxy": "0.1.0-rc.8"
+  },
+  "dependencies": {
+    "@ddtcorex/dsh-maestro-config-lib": "^0.1.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-host-apiproxy": "0.1.0-rc.8",
+    "@types/node": "^22.0.0",
+    "@types/qrcode": "^1.5.6",
+    "@types/react": "~18.3.1",
+    "@types/react-dom": "~18.3.0",
+    "esbuild": "^0.25.12",
+    "qrcode": "^1.5.4",
+    "typescript": "^5.8.0",
+    "vitest": "^2.0.0"
+  },
+  "devDeps": {
+    "esbuild": "^0.25.0",
+    "qrcode": "^1.5.4",
+    "@types/qrcode": "^1.5.5"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && tsc -p tsconfig.client.json && node scripts/build-client.mjs",
+    "verify": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
+    "test": "vitest run"
+  }
+}

package/src/client/api.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared between the Settings card and the host endpoint names. The granular
+ * dsh-maestro-review settings-rpc row implements this exact surface on the
+ * canonical channel.
+ */
+export const MAESTRO_RPC_CHANNEL = '/dsh-maestro-review'
+
+export const MAESTRO_ENDPOINTS = Object.freeze({
+  status: 'maestro.status',
+  getConfig: 'maestro.getConfig',
+  saveConfig: 'maestro.saveConfig',
+  tunnelStart: 'maestro.tunnelStart',
+  tunnelStop: 'maestro.tunnelStop',
+  proxyStatus: 'maestro.proxyStatus',
+  getPin: 'maestro.getPin',
+  rotatePin: 'maestro.rotatePin',
+  lanPinStatus: 'maestro.lanPin.status',
+  lanPinSetEnabled: 'maestro.lanPin.setEnabled',
+  lanPinRotate: 'maestro.lanPin.rotate',
+  reviewsList: 'maestro.reviews.list',
+  modelsList: 'maestro.models.list',
+  modelsCurrent: 'maestro.models.current',
+})

package/src/client/index.tsx

@@ -0,0 +1,79 @@
+// Verbatim legacy-card port (fields/styles preserved; see maestro-card.tsx).
+import { MaestroSettingsTab } from './maestro-card.jsx'
+import { MAESTRO_RPC_CHANNEL } from './api.js'
+import { registerSettingsNavIcon, SETTINGS_NAV_MARKER } from './settings-nav-icon.js'
+
+/**
+ * DSH 0.1.x gives external settings sections a generic gear and exposes no
+ * icon field in the settings.section contract (mirrors dsh-better-sidebar):
+ * the marker only claims this plugin's localized row and this CSS paints the
+ * Lucide "audio-lines" glyph as a currentColor mask so it follows native nav
+ * hover/active colors at the shell's 16px icon rhythm.
+ */
+const SETTINGS_NAV_CSS = `
+
+/* maestro: replace the settings-nav fallback gear with the maestro glyph */
+[${SETTINGS_NAV_MARKER}] > svg:first-child {
+  display: none;
+}
+
+[${SETTINGS_NAV_MARKER}]::before {
+  content: '';
+  flex: none;
+  width: 16px;
+  height: 16px;
+  background: currentColor;
+  -webkit-mask: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' viewBox='0 0 24 24' fill='none' stroke='black' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M2 10v3'/%3E%3Cpath d='M6 4v16'/%3E%3Cpath d='M10 8v8'/%3E%3Cpath d='M14 4v16'/%3E%3Cpath d='M18 6v12'/%3E%3Cpath d='M22 10v3'/%3E%3C/svg%3E") center / contain no-repeat;
+  mask: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' viewBox='0 0 24 24' fill='none' stroke='black' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M2 10v3'/%3E%3Cpath d='M6 4v16'/%3E%3Cpath d='M10 8v8'/%3E%3Cpath d='M14 4v16'/%3E%3Cpath d='M18 6v12'/%3E%3Cpath d='M22 10v3'/%3E%3C/svg%3E") center / contain no-repeat;
+}
+`
+
+type SlotsApi = {
+  inject(name: string, factory: () => unknown): void
+  register(
+    options: Record<string, unknown>,
+    render: (props: { rpcCall: RpcCall }) => unknown,
+  ): unknown
+}
+type RpcCall = (endpoint: string, payload?: unknown, signal?: AbortSignal) => Promise<unknown>
+
+interface ClientCtx {
+  get?(name: string): unknown
+  effect(fn: () => () => void, label?: string): unknown
+}
+
+function installNavIconStyle(): () => void {
+  const tag = document.createElement('style')
+  tag.dataset.plugin = '@ddtcorex/dsh-maestro-config'
+  tag.dataset.pluginCss = 'maestro/settings-nav.css'
+  tag.textContent = SETTINGS_NAV_CSS
+  document.head.appendChild(tag)
+  return () => {
+    document.querySelector('style[data-plugin-css="maestro/settings-nav.css"]')?.remove()
+  }
+}
+
+export function apply(ctx: ClientCtx): void {
+  const slots = ctx.get?.('slots') as SlotsApi | undefined
+  if (slots === undefined) return
+
+  // The card speaks the granular dsh-maestro-review settings-rpc surface.
+  const rpcCall: RpcCall = (endpoint, payload, signal) => {
+    const connection = ctx.get?.('connection') as
+      | { rpc: { call(ch: string, ep: string, p?: unknown, s?: AbortSignal): Promise<unknown> } }
+      | undefined
+    if (!connection?.rpc?.call) return Promise.reject(new Error('RPC not available'))
+    return connection.rpc.call(MAESTRO_RPC_CHANNEL, endpoint, payload, signal)
+  }
+
+  // Reversible effects: nav-row marker observer + owned style tag.
+  ctx.effect(() => registerSettingsNavIcon(() => 'Maestro'), 'maestro: settings nav icon')
+  ctx.effect(installNavIconStyle, 'maestro: settings nav css')
+
+  slots.inject('settings.section', () =>
+    slots.register(
+      { name: 'settings.section', id: 'maestro', order: 25, label: () => 'Maestro', inject: () => ({ rpcCall }) },
+      MaestroSettingsTab,
+    ),
+  )
+}