@iasiv5/dsh-skins 1.5.29 → 1.5.31

package/lib/client.js

@@ -1851,7 +1851,10 @@ ${references.join("\n")}`,
     '[data-slot="sidebar.footer.action"]>*{flex:none;min-width:0}',
     ".dsh-skins-switcher-wrap{width:100%}",
     ".dsh-skins-switcher-wrap.rail{display:flex;justify-content:center}",
-    ".dsh-skins-switcher-btn{box-sizing:border-box;display:flex;align-items:center;gap:8px;width:calc(100% + 4px);height:42px;margin:4px -2px;padding:0 10px 0 8px;border:0;border-radius:12px;background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:14px;line-height:22px;cursor:pointer;overflow:hidden}",
+    // 2026-11-09（对齐 dsh-m issue #55）：弃 width+4px/margin -2px/10-8 不对称 padding 的全宽外溢
+    // trick，改宿主规范形——border-inline 透明边吃 paint-inset + padding 9/9，内容起点 8+3+9=20px
+    // 与官方面板行/设置行/dsh-m 入口同刻度（原 14px，dsh-m 对齐后本条成为唯一 6px 出列者，主人截图实证）
+    ".dsh-skins-switcher-btn{box-sizing:border-box;display:flex;align-items:center;gap:8px;width:100%;height:42px;margin:4px 0;padding:0 9px;border:0;border-inline:var(--dsh-sidebar-paint-inset,3px) solid transparent;border-radius:var(--dsw-radius-md,12px);background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:14px;line-height:22px;cursor:pointer;overflow:hidden}",
     ".dsh-skins-switcher-wrap.rail .dsh-skins-switcher-btn{width:36px;height:36px;margin:8px 0 10px;padding:0;justify-content:center;border-radius:50%;gap:0}",
     ".dsh-skins-switcher-btn:hover{background:var(--dsw-alias-interactive-bg-hover)}",
     ".dsh-skins-switcher-btn.on,.dsh-skins-switcher-btn[aria-expanded=true]{background:var(--dsw-specific-sidebar-nav-item-active)}",
@@ -2973,7 +2976,7 @@ ${references.join("\n")}`,
     if (typeof extension !== "string" || !/^[a-z0-9]+$/.test(extension)) {
       throw new RangeError(`builtinAssetUrl: invalid extension ${JSON.stringify(extension)}`);
     }
-    const rev = "1.5.29";
+    const rev = "1.5.31";
     return `/dsh-skins/assets/b_${skinId}_${assetKey}.${extension}?v=${rev}`;
   }
 

package/lib/index.js

@@ -1183,10 +1183,31 @@ function decodeDisplayName(request) {
     throw codedError("FILENAME_INVALID", "x-filename 不是合法的 encodeURIComponent 输出");
   }
 }
+function createOfficialRejection(ctx) {
+  return (request) => {
+    let connection, reject;
+    try {
+      connection = ctx?.get?.("connection");
+      reject = connection?.requestRejection;
+    } catch {
+      return void 0;
+    }
+    if (typeof reject !== "function") return void 0;
+    try {
+      return reject.call(connection, { headers: request.headers }) ?? void 0;
+    } catch {
+      return 403;
+    }
+  };
+}
 function mountPersonalizationRoutes(host, options) {
-  const { store, assetsBasePath = "/dsh-skins/assets", trustedHosts = [], serveBuiltinAsset } = options;
+  const { store, assetsBasePath = "/dsh-skins/assets", trustedHosts = [], rejection, serveBuiltinAsset } = options;
   const disposers = [];
   const fence = (request, response) => {
+    if (rejection !== void 0 && rejection(request) !== void 0) {
+      sendJson(response, 403, { error: "trusted DSH Web request required" });
+      return false;
+    }
     if (isTrustedRequest(request, typeof trustedHosts === "function" ? trustedHosts() : trustedHosts)) return true;
     sendJson(response, 403, { error: "trusted DSH Web request required" });
     return false;
@@ -1402,6 +1423,7 @@ function apply(ctx) {
       return mountPersonalizationRoutes(hostContext, {
         store: personalization,
         trustedHosts: () => resolveTrustedHosts(ctx),
+        rejection: createOfficialRejection(ctx),
         serveBuiltinAsset
       });
     }, "dsh-skins: personalization routes");

package/package.json

@@ -2,7 +2,7 @@
   "name": "@iasiv5/dsh-skins",
   "description": "DSH Web 皮肤插件：多套品牌皮肤侧栏热切换。",
   "icon": "./icon.svg",
-  "version": "1.5.29",
+  "version": "1.5.31",
   "homepage": "https://github.com/iasiv5/dsh-skins#readme",
   "repository": {
     "type": "git",