@iasiv5/dsh-skins 1.5.6 → 1.5.8

package/README.en.md

@@ -42,6 +42,13 @@ dsh plugin --profile web remove @iasiv5/dsh-skins    # uninstall
 
 With the [dsh-m](https://github.com/iasiv5/dsh-m) plugin marketplace installed, you can also install / uninstall this plugin with one click inside the DSH Web UI.
 
+**Pick the plugin version for your DSH version**:
+
+| Your DSH version | Plugin version |
+|---|---|
+| `0.2.0-rc.1` and later (Web and Desktop alike) | `@latest` (1.5.8+) |
+| `0.1.x` | `1.5.7` (last release supporting that line) |
+
 <details>
 <summary>Hand the install to your Agent (prompt install)</summary>
 
@@ -140,7 +147,7 @@ In the **DSH Desktop app**, the shell chrome — sidebar, caption strip, right p
 
 ![Desktop profile — solid chrome + wallpaper in the conversation area (meirenzhi · dark)](docs/assets/preview-desktop-1.webp)
 
-- Verified with dsh Desktop `0.2.0-rc.2` (Windows); macOS / Linux Desktop currently follow the Web form and will be adapted in a later release.
+- Verified with dsh Desktop `0.2.1-rc.2` (Windows); macOS / Linux Desktop currently follow the Web form and will be adapted in a later release.
 - The right panel in fullscreen is the solid skin base color; the wallpaper is not shown through it.
 
 ## The skin switcher
@@ -173,10 +180,10 @@ Pick "DeepSeek Harness (Official)" in the skin switcher, or open `/?skin=officia
 Update duty has moved to the dsh-m marketplace and the DSH CLI (ADR-0008); the skin switcher only handles skins and personalization.
 
 **Which DSH Web versions are supported?**
-Verified with DSH Web `0.2.0-rc.2`. Later rc builds of the same series are expected to work, but unverified versions carry no promise.
+Verified with DSH Web `0.2.0-rc.2`. Later rc builds of the same series are expected to work, but unverified versions carry no promise. Requires DSH `0.2.0-rc.1` or later; older DSH versions are blocked from upgrading to 1.5.8+ by the peer dependency floor.
 
 **Is the Desktop profile supported?**
-Yes. The DSH Desktop app and the Web profile are installed independently and do not affect each other; the desktop form (solid chrome + wallpaper in the conversation area) is described under "The Desktop profile". Verified with dsh Desktop `0.2.0-rc.2` (Windows).
+Yes. The DSH Desktop app and the Web profile are installed independently and do not affect each other; the desktop form (solid chrome + wallpaper in the conversation area) is described under "The Desktop profile". Verified with dsh Desktop `0.2.1-rc.2` (Windows).
 
 **Does my appearance preference sync across browsers?**
 In the browser on the DSH host machine (loopback), the preference is persisted by the DSH Host and shared naturally. Other remote browsers keep the preference in their own `localStorage` — independent per browser, never overwritten.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   node scripts/verify-readme-pairing.mjs --write
-README.md: 00a34bf2d930204da3aff8299779b931719ee5cd
-README.en.md: d741fa3991323516fe07e4b81c4f6862c6800456
+README.md: efd7cba38981f2250296678a90448e6ecda7088a
+README.en.md: 31497e8721472557f89af32cdb78a827ff9f0232

package/README.md

@@ -42,6 +42,13 @@ dsh plugin --profile web remove @iasiv5/dsh-skins    # 卸载
 
 安装了 [dsh-m](https://github.com/iasiv5/dsh-m) 插件市场的话，也可以直接在 DSH Web 界面里一键安装 / 卸载本插件。
 
+**按 DSH 版本选插件版本**：
+
+| 你的 DSH 版本 | 插件版本 |
+|---|---|
+| `0.2.0-rc.1` 及以上（web 与 Desktop 通用） | `@latest`（1.5.8+） |
+| `0.1.x` | `1.5.7`（该线的最后支持版） |
+
 <details>
 <summary>把安装交给 Agent（提示词安装法）</summary>
 
@@ -140,7 +147,7 @@ dsh plugin --profile web remove @iasiv5/dsh-skins    # 卸载
 
 ![Desktop profile — 实色外壳 + 会话区壁纸（美人志 · 深色）](docs/assets/preview-desktop-1.webp)
 
-- 已在 dsh Desktop `0.2.0-rc.2`（Windows）验证；macOS / Linux Desktop 当前跟随 Web 形态，后续版本适配。
+- 已在 dsh Desktop `0.2.1-rc.2`（Windows）验证；macOS / Linux Desktop 当前跟随 Web 形态，后续版本适配。
 - 右栏面板全屏时为实色皮肤底、不透出壁纸；面板「收起/关闭」后的空轨道行为属宿主布局。
 
 ## 皮肤切换器
@@ -173,10 +180,10 @@ URL 也能切皮肤：`/?skin=official`、`/?skin=openbmc`、`/?skin=uefi-harnes
 更新职责已移交 dsh-m 市场与 DSH CLI（ADR-0008）；皮肤切换器只负责换肤与个性化。
 
 **支持哪些 DSH Web 版本？**
-已使用 DSH Web `0.2.0-rc.2` 验证。同系列 rc 版本理论上兼容，未经验证的版本不作承诺。
+已使用 DSH Web `0.2.0-rc.2` 验证。同系列 rc 版本理论上兼容，未经验证的版本不作承诺。最低支持 DSH `0.2.0-rc.1`：更旧的 DSH 版本会被 peer 依赖门槛挡住，无法升级到 1.5.8+。
 
 **支持 Desktop profile 吗？**
-支持。DSH Desktop 应用与 Web profile 各自独立安装、互不影响；桌面形态（实色外壳 + 会话区壁纸）见「Desktop profile 上的形态」。已使用 dsh Desktop `0.2.0-rc.2`（Windows）验证。
+支持。DSH Desktop 应用与 Web profile 各自独立安装、互不影响；桌面形态（实色外壳 + 会话区壁纸）见「Desktop profile 上的形态」。已使用 dsh Desktop `0.2.1-rc.2`（Windows）验证。
 
 **外观偏好在不同的浏览器间同步吗？**
 在 DSH 所在机器的浏览器（loopback）上，偏好由 DSH Host 持久化，天然共享。其他远程浏览器由插件将偏好存入本地 `localStorage`，各浏览器独立、互不覆盖。

package/lib/client.js

@@ -1703,7 +1703,13 @@ ${names}`,
     // 毛玻璃弹层（dsh-quota-watch 同款配方）：86% 不透明底 + blur14 提饱和，
     // 下层文字被底色盖住、只余柔光，弹层文字保持清晰可读；首条 solid 声明
     // 兜底不支持 color-mix 的浏览器。
-    ".dsh-skins-pop{position:fixed;z-index:60;box-sizing:border-box;display:flex;flex-direction:column;gap:8px;width:min(390px,calc(100vw - 24px));max-height:calc(100vh - 24px);padding:14px;border:1px solid var(--dsw-alias-border-l2);border-radius:14px;background:var(--dsw-alias-bg-elevated,var(--dsw-alias-bg-overlay));background:color-mix(in srgb,var(--dsw-alias-bg-base,#1f1f1f) 86%,transparent);backdrop-filter:blur(14px) saturate(1.3);-webkit-backdrop-filter:blur(14px) saturate(1.3);color:var(--dsw-alias-label-primary);box-shadow:var(--dsw-shadow-lv3,0 8px 24px rgba(0,0,0,.14));overflow-y:auto;transition:width .2s ease-out}",
+    // Width term reserves 16px margins per side on sub-414px viewports (the
+    // 390px cap keeps every wider viewport untouched). The old 24px term left
+    // only ~10px of right margin once the trigger-anchored left offset was
+    // paid, and — combined with the fixed 360px list column — clipped the
+    // gear column at the pop's own edge on phones (field report 2026-10-14:
+    // 手机上齿轮被截半 + 横向滚动条).
+    ".dsh-skins-pop{position:fixed;z-index:60;box-sizing:border-box;display:flex;flex-direction:column;gap:8px;width:min(390px,calc(100vw - 32px));max-height:calc(100vh - 24px);padding:14px;border:1px solid var(--dsw-alias-border-l2);border-radius:14px;background:var(--dsw-alias-bg-elevated,var(--dsw-alias-bg-overlay));background:color-mix(in srgb,var(--dsw-alias-bg-base,#1f1f1f) 86%,transparent);backdrop-filter:blur(14px) saturate(1.3);-webkit-backdrop-filter:blur(14px) saturate(1.3);color:var(--dsw-alias-label-primary);box-shadow:var(--dsw-shadow-lv3,0 8px 24px rgba(0,0,0,.14));overflow-y:auto;transition:width .2s ease-out}",
     // Slim themed scrollbars for the shell's own scroll region (list-only
     // popover): thin + token-colored thumb, WebKit and Firefox both covered.
     ".dsh-skins-pop{scrollbar-width:thin;scrollbar-color:var(--dsw-alias-border-l2) transparent}",
@@ -1749,7 +1755,11 @@ ${names}`,
     "body[data-ds-dark-theme]:not([data-dsh-meirenzhi-skin]):not([data-dsh-openbmc-skin]):not([data-dsh-uefi-harness]) .dsh-skins-pop{background:rgba(41,42,44,0.97)}",
     // -- combined shell (Q44/Q46): list column + docked panel column ----------
     ".dsh-skins-pop.dsh-skins-wide{flex-direction:row;align-items:stretch;width:min(1105px,calc(100vw - 24px))}",
-    ".dsh-skins-pop-main{display:flex;flex-direction:column;gap:8px;min-width:0;width:360px;flex:none}",
+    // List column: exactly 360px wherever the 390px narrow shell fits (the
+    // v2.5 宽度恒定 ruling #10/#11), shrinking only BELOW a 414px viewport —
+    // a fixed 360px column inside a narrower pop overflowed horizontally and
+    // pushed the gear column behind the pop's right edge (same field report).
+    ".dsh-skins-pop-main{display:flex;flex-direction:column;gap:8px;min-width:0;width:min(360px,100%);flex:none}",
     ".dsh-skins-pop.dsh-skins-wide .dsh-skins-pop-main{flex:0 0 360px}",
     // box-sizing is NOT inherited: without border-box here, the sweep's
     // measured rect width feeds flex-basis as a CONTENT width (+15px padding/
@@ -2005,7 +2015,7 @@ ${names}`,
       });
       const showPersonalization = personalizeId !== null && PersonalizationPanel !== null;
       const stackedSheet = showPersonalization && typeof window !== "undefined" && window.innerWidth <= 904;
-      const shellLeft = box === null ? void 0 : showPersonalization && typeof window !== "undefined" ? Math.max(12, Math.min(box.left, window.innerWidth - 1117)) : box.left;
+      const shellLeft = box === null ? void 0 : showPersonalization && typeof window !== "undefined" ? Math.max(12, Math.min(box.left, window.innerWidth - 1117)) : typeof window !== "undefined" ? Math.max(16, Math.min(box.left, window.innerWidth - Math.min(390, window.innerWidth - 32) - 16)) : box.left;
       const shellMaxHeight = box === null || typeof window === "undefined" || typeof window.innerHeight !== "number" ? void 0 : stackedSheet ? window.innerHeight - 24 : Math.max(220, window.innerHeight - box.bottom - 12);
       react.useLayoutEffect(() => {
         if (!open || box === null) return void 0;

package/lib/index.js

@@ -1065,7 +1065,7 @@ function mountPersonalizationRoutes(host, options) {
   const { store, assetsBasePath = "/dsh-skins/assets", trustedHosts = [] } = options;
   const disposers = [];
   const fence = (request, response) => {
-    if (isTrustedRequest(request, trustedHosts)) return true;
+    if (isTrustedRequest(request, typeof trustedHosts === "function" ? trustedHosts() : trustedHosts)) return true;
     sendJson(response, 403, { error: "trusted DSH Web request required" });
     return false;
   };
@@ -1182,6 +1182,20 @@ function mountPersonalizationRoutes(host, options) {
   };
 }
 
+// src/host/trusted-hosts.js
+function resolveTrustedHosts(ctx) {
+  let startup, runtime;
+  try {
+    startup = ctx?.get?.("webStartup");
+  } catch {
+  }
+  try {
+    runtime = ctx?.get?.("webRuntime");
+  } catch {
+  }
+  return startup?.trustedHosts ?? runtime?.trustedHosts ?? [];
+}
+
 // src/index.js
 var name = "@iasiv5/dsh-skins";
 function expandHomePath(path) {
@@ -1218,7 +1232,7 @@ function dataDirForProfile(root, profile) {
   return desktop;
 }
 function apply(ctx) {
-  ctx.inject(["webServer", "webRuntime"], (hostContext) => {
+  ctx.inject(["webServer"], (hostContext) => {
     const root = dshHome();
     const profile = hostProfileFor(root);
     const personalization = createPersonalizationStore({
@@ -1228,7 +1242,7 @@ function apply(ctx) {
     hostContext.effect(() => {
       return mountPersonalizationRoutes(hostContext, {
         store: personalization,
-        trustedHosts: hostContext.webRuntime.trustedHosts
+        trustedHosts: () => resolveTrustedHosts(ctx)
       });
     }, "dsh-skins: personalization routes");
   });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@iasiv5/dsh-skins",
   "description": "DSH Web 皮肤插件：多套品牌皮肤侧栏热切换。",
-  "version": "1.5.6",
+  "version": "1.5.8",
   "homepage": "https://github.com/iasiv5/dsh-skins#readme",
   "repository": {
     "type": "git",
@@ -55,18 +55,19 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-theme": ">=0.1.1-rc.2"
+    "@deepseek-ai/dsh-client-connection": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-runtime": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-theme": ">=0.2.0-rc.1 || >=0.2.1-rc.1"
   },
   "license": "MIT",
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
     "esbuild": "^0.28.2",
-    "playwright-core": "1.62.1"
+    "playwright-core": "1.62.1",
+    "semver": "^7.8.5"
   },
   "scripts": {
     "build": "node scripts/build-client.mjs",