@iasiv5/dsh-skins 1.5.7 → 1.5.8

package/README.en.md

@@ -42,6 +42,13 @@ dsh plugin --profile web remove @iasiv5/dsh-skins    # uninstall
 
 With the [dsh-m](https://github.com/iasiv5/dsh-m) plugin marketplace installed, you can also install / uninstall this plugin with one click inside the DSH Web UI.
 
+**Pick the plugin version for your DSH version**:
+
+| Your DSH version | Plugin version |
+|---|---|
+| `0.2.0-rc.1` and later (Web and Desktop alike) | `@latest` (1.5.8+) |
+| `0.1.x` | `1.5.7` (last release supporting that line) |
+
 <details>
 <summary>Hand the install to your Agent (prompt install)</summary>
 
@@ -140,7 +147,7 @@ In the **DSH Desktop app**, the shell chrome — sidebar, caption strip, right p
 
 ![Desktop profile — solid chrome + wallpaper in the conversation area (meirenzhi · dark)](docs/assets/preview-desktop-1.webp)
 
-- Verified with dsh Desktop `0.2.0-rc.2` (Windows); macOS / Linux Desktop currently follow the Web form and will be adapted in a later release.
+- Verified with dsh Desktop `0.2.1-rc.2` (Windows); macOS / Linux Desktop currently follow the Web form and will be adapted in a later release.
 - The right panel in fullscreen is the solid skin base color; the wallpaper is not shown through it.
 
 ## The skin switcher
@@ -173,10 +180,10 @@ Pick "DeepSeek Harness (Official)" in the skin switcher, or open `/?skin=officia
 Update duty has moved to the dsh-m marketplace and the DSH CLI (ADR-0008); the skin switcher only handles skins and personalization.
 
 **Which DSH Web versions are supported?**
-Verified with DSH Web `0.2.0-rc.2`. Later rc builds of the same series are expected to work, but unverified versions carry no promise.
+Verified with DSH Web `0.2.0-rc.2`. Later rc builds of the same series are expected to work, but unverified versions carry no promise. Requires DSH `0.2.0-rc.1` or later; older DSH versions are blocked from upgrading to 1.5.8+ by the peer dependency floor.
 
 **Is the Desktop profile supported?**
-Yes. The DSH Desktop app and the Web profile are installed independently and do not affect each other; the desktop form (solid chrome + wallpaper in the conversation area) is described under "The Desktop profile". Verified with dsh Desktop `0.2.0-rc.2` (Windows).
+Yes. The DSH Desktop app and the Web profile are installed independently and do not affect each other; the desktop form (solid chrome + wallpaper in the conversation area) is described under "The Desktop profile". Verified with dsh Desktop `0.2.1-rc.2` (Windows).
 
 **Does my appearance preference sync across browsers?**
 In the browser on the DSH host machine (loopback), the preference is persisted by the DSH Host and shared naturally. Other remote browsers keep the preference in their own `localStorage` — independent per browser, never overwritten.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   node scripts/verify-readme-pairing.mjs --write
-README.md: 00a34bf2d930204da3aff8299779b931719ee5cd
-README.en.md: d741fa3991323516fe07e4b81c4f6862c6800456
+README.md: efd7cba38981f2250296678a90448e6ecda7088a
+README.en.md: 31497e8721472557f89af32cdb78a827ff9f0232

package/README.md

@@ -42,6 +42,13 @@ dsh plugin --profile web remove @iasiv5/dsh-skins    # 卸载
 
 安装了 [dsh-m](https://github.com/iasiv5/dsh-m) 插件市场的话，也可以直接在 DSH Web 界面里一键安装 / 卸载本插件。
 
+**按 DSH 版本选插件版本**：
+
+| 你的 DSH 版本 | 插件版本 |
+|---|---|
+| `0.2.0-rc.1` 及以上（web 与 Desktop 通用） | `@latest`（1.5.8+） |
+| `0.1.x` | `1.5.7`（该线的最后支持版） |
+
 <details>
 <summary>把安装交给 Agent（提示词安装法）</summary>
 
@@ -140,7 +147,7 @@ dsh plugin --profile web remove @iasiv5/dsh-skins    # 卸载
 
 ![Desktop profile — 实色外壳 + 会话区壁纸（美人志 · 深色）](docs/assets/preview-desktop-1.webp)
 
-- 已在 dsh Desktop `0.2.0-rc.2`（Windows）验证；macOS / Linux Desktop 当前跟随 Web 形态，后续版本适配。
+- 已在 dsh Desktop `0.2.1-rc.2`（Windows）验证；macOS / Linux Desktop 当前跟随 Web 形态，后续版本适配。
 - 右栏面板全屏时为实色皮肤底、不透出壁纸；面板「收起/关闭」后的空轨道行为属宿主布局。
 
 ## 皮肤切换器
@@ -173,10 +180,10 @@ URL 也能切皮肤：`/?skin=official`、`/?skin=openbmc`、`/?skin=uefi-harnes
 更新职责已移交 dsh-m 市场与 DSH CLI（ADR-0008）；皮肤切换器只负责换肤与个性化。
 
 **支持哪些 DSH Web 版本？**
-已使用 DSH Web `0.2.0-rc.2` 验证。同系列 rc 版本理论上兼容，未经验证的版本不作承诺。
+已使用 DSH Web `0.2.0-rc.2` 验证。同系列 rc 版本理论上兼容，未经验证的版本不作承诺。最低支持 DSH `0.2.0-rc.1`：更旧的 DSH 版本会被 peer 依赖门槛挡住，无法升级到 1.5.8+。
 
 **支持 Desktop profile 吗？**
-支持。DSH Desktop 应用与 Web profile 各自独立安装、互不影响；桌面形态（实色外壳 + 会话区壁纸）见「Desktop profile 上的形态」。已使用 dsh Desktop `0.2.0-rc.2`（Windows）验证。
+支持。DSH Desktop 应用与 Web profile 各自独立安装、互不影响；桌面形态（实色外壳 + 会话区壁纸）见「Desktop profile 上的形态」。已使用 dsh Desktop `0.2.1-rc.2`（Windows）验证。
 
 **外观偏好在不同的浏览器间同步吗？**
 在 DSH 所在机器的浏览器（loopback）上，偏好由 DSH Host 持久化，天然共享。其他远程浏览器由插件将偏好存入本地 `localStorage`，各浏览器独立、互不覆盖。

package/lib/index.js

@@ -1065,7 +1065,7 @@ function mountPersonalizationRoutes(host, options) {
   const { store, assetsBasePath = "/dsh-skins/assets", trustedHosts = [] } = options;
   const disposers = [];
   const fence = (request, response) => {
-    if (isTrustedRequest(request, trustedHosts)) return true;
+    if (isTrustedRequest(request, typeof trustedHosts === "function" ? trustedHosts() : trustedHosts)) return true;
     sendJson(response, 403, { error: "trusted DSH Web request required" });
     return false;
   };
@@ -1182,6 +1182,20 @@ function mountPersonalizationRoutes(host, options) {
   };
 }
 
+// src/host/trusted-hosts.js
+function resolveTrustedHosts(ctx) {
+  let startup, runtime;
+  try {
+    startup = ctx?.get?.("webStartup");
+  } catch {
+  }
+  try {
+    runtime = ctx?.get?.("webRuntime");
+  } catch {
+  }
+  return startup?.trustedHosts ?? runtime?.trustedHosts ?? [];
+}
+
 // src/index.js
 var name = "@iasiv5/dsh-skins";
 function expandHomePath(path) {
@@ -1218,7 +1232,7 @@ function dataDirForProfile(root, profile) {
   return desktop;
 }
 function apply(ctx) {
-  ctx.inject(["webServer", "webRuntime"], (hostContext) => {
+  ctx.inject(["webServer"], (hostContext) => {
     const root = dshHome();
     const profile = hostProfileFor(root);
     const personalization = createPersonalizationStore({
@@ -1228,7 +1242,7 @@ function apply(ctx) {
     hostContext.effect(() => {
       return mountPersonalizationRoutes(hostContext, {
         store: personalization,
-        trustedHosts: hostContext.webRuntime.trustedHosts
+        trustedHosts: () => resolveTrustedHosts(ctx)
       });
     }, "dsh-skins: personalization routes");
   });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@iasiv5/dsh-skins",
   "description": "DSH Web 皮肤插件：多套品牌皮肤侧栏热切换。",
-  "version": "1.5.7",
+  "version": "1.5.8",
   "homepage": "https://github.com/iasiv5/dsh-skins#readme",
   "repository": {
     "type": "git",
@@ -55,18 +55,19 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-theme": ">=0.1.1-rc.2"
+    "@deepseek-ai/dsh-client-connection": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-runtime": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.2.0-rc.1 || >=0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-theme": ">=0.2.0-rc.1 || >=0.2.1-rc.1"
   },
   "license": "MIT",
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
     "esbuild": "^0.28.2",
-    "playwright-core": "1.62.1"
+    "playwright-core": "1.62.1",
+    "semver": "^7.8.5"
   },
   "scripts": {
     "build": "node scripts/build-client.mjs",