@linbin-mk/dsh-brand-deepseek 0.1.4 → 0.2.1

package/README.en.md

@@ -20,13 +20,13 @@ It fills two single slots: `sidebar.brand.mark` (the whale mark) and `sidebar.br
   - a **custom style** toggle — off restores the official default brand (`DSH 本地构建` / `DSH Local Build` + build-version badge): the brand slots are unregistered, so the shell fallback renders;
   - a **hero headline** toggle — switches the blank-session title row independently (defaults to on);
   - **trajectory tab** and **session log button** toggles — show or hide those two pieces of harness chrome in the conversation header (both default to on). Implemented purely at the DOM level: no harness source is touched and the data behind them (trajectory records, export) is unaffected;
-  - **ten brand colors** (the current scheme — official DeepSeek blue — is the default). Choices apply immediately and persist through the Host settings RPC, so they survive reloads.
+  - **ten brand colors** (the current scheme — official DeepSeek blue — is the default). Choices apply immediately and are written back to the Host configuration, so they survive reloads.
 - **Live preview** — the settings preview panel mirrors both states; with the custom style off it renders the shell fallback (fish mark, localized label and the build-version badge).
 
 ## Requirements
 
 - Node.js `^22.19` or `>=24`
-- DeepSeek Harness `0.1.5-rc.1` or a compatible `0.1.5` prerelease, on a **Web profile** that provides `ctx.slots`, `ctx.remote.settings` and `ctx.locale`
+- DeepSeek Harness `0.1.7-alpha.1` or a compatible `0.1.7` prerelease, on a **Web profile** that provides `ctx.slots`, `ctx.configForms` and `ctx.locale`
 - The client modules the plugin declares (`@deepseek-ai/dsh-client-ui-primitives`, `-ui-sidebar`, `-ui-settings`, `-ui-renderer`, `-locale`, `dsh-api-remotes`) — the default Web profile already ships them
 - No path dependency on a Harness checkout
 
@@ -58,7 +58,7 @@ dsh plugin --profile web-brand remove @linbin-mk/dsh-brand-deepseek
 
 ## Settings
 
-The host half registers the `dsh-brand-deepseek` settings namespace. The fields default as follows and are written through the harness's revision-guarded settings transport, so changes take effect immediately with no restart. The namespace is **deliberately not the package name**: the package name is the loader identity (`@linbin-mk/dsh-brand-deepseek`), while the namespace only persists values — renaming the package does not invalidate existing settings.
+The host half declares the brand style as this plugin's Cordis `Config`: all five fields are `.volatile()`, so every one of them is live-editable, with the defaults below. The settings namespace is the loader row id `brand-deepseek` from `cordis.patch.yml` — **deliberately not the package name**, which is the loader identity (`@linbin-mk/dsh-brand-deepseek`); renaming the package does not invalidate existing settings. The client half reads and writes that row's configuration form through `ctx.configForms.get('brand-deepseek')`, and the harness settings domain owns revision fencing and write serialization, so changes take effect immediately with no restart. On a non-loopback page (settings stay process-local) every write control is disabled instead of pretending to save.
 
 | Setting | Default | Effect |
 | --- | --- | --- |
@@ -70,7 +70,7 @@ The host half registers the `dsh-brand-deepseek` settings namespace. The fields
 
 ## How it works
 
-- The **host half** (`lib/index.js`) does exactly one thing: it registers the `dsh-brand-deepseek` settings namespace so the client half's `settings.describe` / `settings.mutate` calls are accepted and persisted.
+- The **host half** (`lib/index.js`) does two things: it declares the brand-style Cordis `Config` (five `.volatile()` fields — the whole of the `brand-deepseek` settings namespace) and registers `{ auto: false }` for its own row, since the plugin ships its own settings page and the sidebar Plugins list must not generate a second one.
 - The **client half** (`lib/client.js`) is a CJS bundle built by tsdown that self-registers through `window.__ModuleLoader__.load({ id, factory })`. The `id` must equal the **package name** — the harness keys its client module table by entry name, and a mismatch makes the row unresolvable and takes the whole GUI down while `--dump-config` still looks fine. `tsdown.config.ts` derives the id from `package.json#name` and `scripts/smoke-client.mjs` re-asserts the equality, so a rename cannot drift silently.
 - The **hero style sheet** targets the harness's CSS-module locals by their `<hash>_<local>` shape, scoped to the conversation shell's `[data-composer-seat]` and anchored on the hero's own `_fishHitbox` descendant, so the shared `.headline` locals of other modules (ContextMeter, ApprovalPanel) are never touched. The official default title is hidden under **every** local it has shipped with — `_headlineText` in `0.1.5-rc.1` and the `_titleGroup` wrapper (title plus badge) introduced in `0.1.5-rc.2`; on a harness that never had a given local the matching selector is simply a no-op. Should those names change again, the plugin degrades to the brand title rendering next to the official one instead of erroring or taking the page down.
 - The **two harness-chrome toggles** locate elements by class-name suffix with the localized label as a fallback, and a `MutationObserver` re-applies the state after React remounts the header. If both the class and the label change, the element stays visible rather than being hidden by mistake.
@@ -81,10 +81,11 @@ The host half registers the `dsh-brand-deepseek` settings namespace. The fields
 pnpm install
 pnpm build         # src/ -> lib/ (lib/ is committed; installs need no build step)
 pnpm build:check   # rebuild and assert lib/ matches what is committed
-pnpm test          # both smoke tests
+pnpm test          # four smoke tests
+npx tsc -p tsconfig.json --noEmit   # type check (build.mjs does not run tsc)
 ```
 
-`pnpm test` runs `scripts/smoke-client.mjs` (loads `lib/client.js` the way the browser loader does, asserting bundle id == package name plus the export and `inject` contract) and `scripts/smoke-visibility.mjs` (mounts `apply()` on a jsdom document and verifies that both persisted toggles drive the DOM, including the observer re-apply after a remount and the label fallback locator). jsdom is a development dependency of this package only; the plugin never needs it at runtime.
+`pnpm test` runs `scripts/smoke-client.mjs` (loads `lib/client.js` the way the browser loader does, asserting bundle id == package name plus the export and `inject` contract), `scripts/smoke-host.mjs` (loads `lib/index.js` and asserts all five fields are volatile with the documented defaults, and that the host half registers `{ auto: false }` for its **own fiber**), `scripts/smoke-visibility.mjs` (mounts `apply()` on a jsdom document and verifies that both persisted toggles drive the DOM, including the observer re-apply after a remount and the label fallback locator) and `scripts/smoke-config.mjs` (mounts `apply()` over a fake configuration form and verifies that the form is fetched by the `brand-deepseek` row id, that the accepted section drives the runtime, that toggles write through `form.set`, and that a refused write or a non-writable page never pretends to save). jsdom is a development dependency of this package only; the plugin never needs it at runtime.
 
 ## Troubleshooting
 
@@ -105,7 +106,7 @@ pnpm test          # both smoke tests
 
 ## Privacy and scope
 
-The plugin makes no network requests, reads no conversation content and reports no telemetry. It does three things only: register slot occupants, read and write the `dsh-brand-deepseek` settings namespace, and hide two DOM elements in the conversation header (the trajectory tab and the session log button) according to your settings. Values live in the harness profile settings and never leave the machine. Hiding affects rendering only — trajectory data and export are untouched.
+The plugin makes no network requests, reads no conversation content and reports no telemetry. It does three things only: register slot occupants, read and write the `brand-deepseek` configuration row, and hide two DOM elements in the conversation header (the trajectory tab and the session log button) according to your settings. Values live in the harness profile configuration and never leave the machine. Hiding affects rendering only — trajectory data and export are untouched.
 
 ## License
 

package/README.md

@@ -20,13 +20,13 @@
   - **自定义样式**开关 —— 关闭即恢复官方默认品牌（`DSH 本地构建` / `DSH Local Build` + 构建版本徽章）：品牌插槽整体注销，由外壳回退渲染；
   - **会话页标题**开关 —— 独立切换标题行（默认开启）；
   - **轨迹页签**与 **Session 日志按钮**开关 —— 独立显示/隐藏会话页头部这两处外壳元素（默认都开启），纯 DOM 层操作，不影响背后的轨迹数据与导出功能；
-  - **十种品牌颜色**可选（当前配色 = 官方 DeepSeek 蓝，为默认项），选择后立即生效并通过 Host 设置 RPC 持久化，刷新后仍在。
+  - **十种品牌颜色**可选（当前配色 = 官方 DeepSeek 蓝，为默认项），选择后立即生效并写回 Host 配置，刷新后仍在。
 - **实时预览** —— 设置页的预览区跟随两个状态渲染：自定义样式关闭时展示当前外壳回退品牌（鱼形标志、本地化标签与构建版本徽章）。
 
 ## 要求
 
 - Node.js `^22.19` 或 `>=24`
-- DeepSeek Harness `0.1.5-rc.1` 或兼容的 `0.1.5` 预发布版本，以及提供 `ctx.slots`、`ctx.remote.settings` 与 `ctx.locale` 的 **Web profile**
+- DeepSeek Harness `0.1.7-alpha.1` 或兼容的 `0.1.7` 预发布版本，以及提供 `ctx.slots`、`ctx.configForms` 与 `ctx.locale` 的 **Web profile**
 - Web profile 中需带有插件声明的客户端模块（`@deepseek-ai/dsh-client-ui-primitives`、`-ui-sidebar`、`-ui-settings`、`-ui-renderer`、`-locale`、`dsh-api-remotes`）；默认 Web profile 已包含
 - 产物不含任何指向 Harness checkout 的路径依赖
 
@@ -58,7 +58,7 @@ dsh plugin --profile web-brand remove @linbin-mk/dsh-brand-deepseek
 
 ## 设置
 
-Host 半侧注册 `dsh-brand-deepseek` 设置命名空间，字段默认值如下，通过 Harness 带修订保护的设置传输写入，因此修改立即生效、无需重启 Harness。命名空间名与包名**故意不同**：包名是加载标识（`@linbin-mk/dsh-brand-deepseek`），命名空间只用于持久化，改包名不会让已有设置失效。
+Host 半侧把品牌样式声明成本插件的 Cordis `Config`：五个字段全部 `.volatile()`，因此都是可在运行时改写的活配置，默认值如下。设置命名空间就是 `cordis.patch.yml` 里的 loader 行 id `brand-deepseek`——它与包名（加载标识 `@linbin-mk/dsh-brand-deepseek`）**故意不同**，改包名不会让已有设置失效。客户端半侧通过 `ctx.configForms.get('brand-deepseek')` 读写该行的配置表单，写入由 Harness 的设置域做修订号保护与串行化，因此修改立即生效、无需重启 Harness；非 loopback 页面（设置只能留在进程内存里）下写入控件整体禁用，不会假装已保存。
 
 | 设置 | 默认值 | 作用 |
 | --- | --- | --- |
@@ -70,7 +70,7 @@ Host 半侧注册 `dsh-brand-deepseek` 设置命名空间，字段默认值如
 
 ## 工作原理
 
-- **Host 半侧**（`lib/index.js`）只做一件事：注册 `dsh-brand-deepseek` 设置命名空间，让客户端半侧的 `settings.describe` / `settings.mutate` 调用被接受并持久化。
+- **Host 半侧**（`lib/index.js`）只做两件事：声明品牌样式的 Cordis `Config`（五个 `.volatile()` 字段，即设置命名空间 `brand-deepseek` 的全部内容），并为自己这一行声明 `{ auto: false }`——本插件自带设置页，不需要侧边栏「插件」列表再自动生成一个。
 - **客户端半侧**（`lib/client.js`）是一个由 tsdown 打包、以 `window.__ModuleLoader__.load({ id, factory })` 自注册的 CJS bundle。`id` 必须等于**包名**——Harness 用入口名索引客户端模块表，名字不一致时该行解析失败、整个 GUI 起不来（而 `--dump-config` 仍显示正常）。`tsdown.config.ts` 直接从 `package.json` 取 `name` 写进 banner，`scripts/smoke-client.mjs` 再断言一次两者相等，因此重命名不会静默漂移。
 - **标题行样式**按 CSS Module 的 `<hash>_<local>` 形状匹配 Harness 的局部类名，并用会话外壳的 `[data-composer-seat]` 限定作用域、锚定在标题行自己的 `_fishHitbox` 后代上，因此不会波及其他模块（ContextMeter、ApprovalPanel）的同名 `.headline`。官方默认标题按它用过的**每个**局部名隐藏——`0.1.5-rc.1` 的 `_headlineText`，以及 `0.1.5-rc.2` 起包裹标题与徽章的 `_titleGroup`；没出现过该局部名的版本上，对应选择器只是空操作。若将来这些名字被再次改掉，插件退化为「品牌标题 + 官方标题并排显示」，而不是报错或让整个页面起不来。
 - **两个外壳开关**（轨迹页签、Session 日志按钮）按类名后缀定位元素、用本地化文案兜底，并用 `MutationObserver` 在 React 重挂载后重新应用；若两者都改名，元素保持可见，而不是误隐藏。
@@ -81,10 +81,11 @@ Host 半侧注册 `dsh-brand-deepseek` 设置命名空间，字段默认值如
 pnpm install
 pnpm build         # src/ -> lib/（lib/ 已提交，安装后无需构建）
 pnpm build:check   # 重新构建并断言 lib/ 与提交内容一致
-pnpm test          # 两个冒烟测试
+pnpm test          # 四个冒烟测试
+npx tsc -p tsconfig.json --noEmit   # 类型检查（build.mjs 不跑 tsc）
 ```
 
-`pnpm test` 依次跑：`scripts/smoke-client.mjs`（按浏览器加载器的真实方式加载 `lib/client.js`，断言 bundle id == 包名、导出与 `inject` 契约）和 `scripts/smoke-visibility.mjs`（在 jsdom 里挂载 `apply()`，验证两个持久化开关驱动 DOM，包括重挂载后的观察者补偿与文案兜底定位）。jsdom 只是本包的开发依赖，运行时不需要。
+`pnpm test` 依次跑：`scripts/smoke-client.mjs`（按浏览器加载器的真实方式加载 `lib/client.js`，断言 bundle id == 包名、导出与 `inject` 契约）、`scripts/smoke-host.mjs`（加载 `lib/index.js`，断言五个字段都是 volatile、默认值正确，且 Host 半侧以**自己的 fiber** 注册 `{ auto: false }`）、`scripts/smoke-visibility.mjs`（在 jsdom 里挂载 `apply()`，验证两个持久化开关驱动 DOM，包括重挂载后的观察者补偿与文案兜底定位）和 `scripts/smoke-config.mjs`（用假的配置表单挂载 `apply()`，验证按行 id `brand-deepseek` 取表单、读到的配置驱动运行时、开关经 `form.set` 写回、Host 拒绝写入或页面不可写时不假装已保存）。jsdom 只是本包的开发依赖，运行时不需要。
 
 ## 常见问题
 
@@ -105,7 +106,7 @@ pnpm test          # 两个冒烟测试
 
 ## 隐私与作用域
 
-插件不发起任何网络请求、不读取会话内容、不上报遥测。它只做三件事：注册插槽占位、读写 `dsh-brand-deepseek` 设置命名空间、在会话页头部按设置隐藏两个 DOM 元素（轨迹页签、Session 日志按钮）。设置值保存在 Harness 的 profile 设置里，不离开本机。隐藏元素只影响渲染，轨迹数据与导出功能不受影响。
+插件不发起任何网络请求、不读取会话内容、不上报遥测。它只做三件事：注册插槽占位、读写本插件 `brand-deepseek` 这一行的配置、在会话页头部按设置隐藏两个 DOM 元素（轨迹页签、Session 日志按钮）。设置值保存在 Harness 的 profile 配置里，不离开本机。隐藏元素只影响渲染，轨迹数据与导出功能不受影响。
 
 ## 许可证
 

package/lib/client.js

@@ -196,6 +196,7 @@ window.__ModuleLoader__.load({
 				trajectoryTab: true,
 				sessionLogButton: true,
 				color: DEFAULT_BRAND_COLOR,
+				writable: false,
 				busy: false,
 				error: null
 			};
@@ -209,9 +210,24 @@ window.__ModuleLoader__.load({
 				};
 			};
 			/**
-			* Reload the persisted style. The load handler also applies the side
-			* effects (brand slot registration and the color variable), so both the
-			* boot refresh and every page visit converge on the persisted state.
+			* Adopt one Host-accepted style without a write (the first read, a write
+			* folded back, or an edit made from elsewhere). In-flight or failed
+			* operations keep their own status, so an accepted push never masks an error.
+			* @param state - accepted brand-style values.
+			* @param writable - whether the Host document accepts writes from this page.
+			*/
+			adopt = (state, writable) => {
+				this.state = {
+					...this.state,
+					...state,
+					writable
+				};
+				this.emit();
+			};
+			/**
+			* Reload the accepted style. The load handler also applies the side effects
+			* (brand slot registration and the color variable), so both the boot refresh
+			* and every page visit converge on the accepted state.
 			*/
 			refresh = async () => {
 				const load = this.handlers?.load;
@@ -223,14 +239,10 @@ window.__ModuleLoader__.load({
 				};
 				this.emit();
 				try {
-					const { enabled, hero, trajectoryTab, sessionLogButton, color } = await load();
+					const accepted = await load();
 					this.state = {
 						...this.state,
-						enabled,
-						hero,
-						trajectoryTab,
-						sessionLogButton,
-						color,
+						...accepted,
 						busy: false,
 						error: null
 					};
@@ -254,10 +266,10 @@ window.__ModuleLoader__.load({
 				};
 				this.emit();
 				try {
-					await handler(enabled);
+					const accepted = await handler(enabled);
 					this.state = {
 						...this.state,
-						enabled,
+						...accepted,
 						busy: false,
 						error: null
 					};
@@ -281,10 +293,10 @@ window.__ModuleLoader__.load({
 				};
 				this.emit();
 				try {
-					await handler(hero);
+					const accepted = await handler(hero);
 					this.state = {
 						...this.state,
-						hero,
+						...accepted,
 						busy: false,
 						error: null
 					};
@@ -308,10 +320,10 @@ window.__ModuleLoader__.load({
 				};
 				this.emit();
 				try {
-					await handler(visible);
+					const accepted = await handler(visible);
 					this.state = {
 						...this.state,
-						trajectoryTab: visible,
+						...accepted,
 						busy: false,
 						error: null
 					};
@@ -335,10 +347,10 @@ window.__ModuleLoader__.load({
 				};
 				this.emit();
 				try {
-					await handler(visible);
+					const accepted = await handler(visible);
 					this.state = {
 						...this.state,
-						sessionLogButton: visible,
+						...accepted,
 						busy: false,
 						error: null
 					};
@@ -362,10 +374,10 @@ window.__ModuleLoader__.load({
 				};
 				this.emit();
 				try {
-					await handler(color);
+					const accepted = await handler(color);
 					this.state = {
 						...this.state,
-						color,
+						...accepted,
 						busy: false,
 						error: null
 					};
@@ -414,8 +426,11 @@ window.__ModuleLoader__.load({
 		* the sidebar preview.
 		*
 		* The page remounts on every visit (the settings shell renders only the
-		* active section), so it always starts from a fresh read of the persisted
-		* document. Writes go through the Host settings RPC, owned by the apply half.
+		* active section), so it always starts from a fresh adoption of the accepted
+		* Config section. Writes go through the plugin's Config form, owned by the
+		* apply half; every control is disabled while a write is in flight and when
+		* the Host document cannot accept writes from this page (a non-loopback page
+		* keeps no durable settings).
 		*/
 		/**
 		* The sidebar's local-build badge format (ui-sidebar `localBuildVersion()`):
@@ -574,7 +589,7 @@ window.__ModuleLoader__.load({
 					window.clearTimeout(timer);
 				};
 			}, [state.enabled]);
-			const disabled = state.busy;
+			const disabled = state.busy || !state.writable;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
 				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", { children: t("settings.title") }),
 				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("settings.intro") }),
@@ -1028,20 +1043,31 @@ window.__ModuleLoader__.load({
 			"brand.heroDefaultBadge": "Preview"
 		};
 		//#endregion
+		//#region src/settings.ts
+		/**
+		* Brand-style configuration shared by the plugin's two faces.
+		*
+		* The host half declares its Cordis Config as the volatile projection of this
+		* shape, and the loader row id becomes the settings namespace; the client half
+		* addresses that entry's live form through {@link BRAND_DEEPSEEK_ENTRY_ID}.
+		* The module carries no imports of its own, so the client bundle inlines
+		* declarations plus one string constant and nothing else.
+		*/
+		/** Loader entry id (`cordis.patch.yml`) owning the brand-style settings. */
+		const BRAND_DEEPSEEK_ENTRY_ID = "brand-deepseek";
+		//#endregion
 		//#region src/client/index.ts
 		const inject = [
 			"slots",
 			"remote",
-			"remote.settings",
+			"configForms",
 			"locale"
 		];
-		/** Settings namespace holding the persisted brand style. */
-		const NAMESPACE = "dsh-brand-deepseek";
 		/** Document-root color variable the brand SVGs fill from. */
 		const COLOR_VAR = "--dsh-brand-deepseek-color";
 		/** DOM id of the injected hero-headline sheet. */
 		const HERO_STYLE_ID = "dsh-brand-deepseek-hero-style";
-		/** Read the persisted brand style; the defaults keep today's look. */
+		/** Read the accepted brand style; the defaults keep today's look. */
 		function defaultsOf(stored) {
 			const value = stored ?? {};
 			return {
@@ -1053,7 +1079,7 @@ window.__ModuleLoader__.load({
 			};
 		}
 		/**
-		* Client plugin body: locale dictionaries, the persisted brand-style wiring
+		* Client plugin body: locale dictionaries, the live brand-style wiring
 		* (brand slot registration + color variable), and the settings page entry.
 		* @param ctx - client root context.
 		*/
@@ -1062,8 +1088,8 @@ window.__ModuleLoader__.load({
 				zh,
 				en
 			}), "dsh-brand-deepseek: dictionaries");
-			const api = ctx.remote.settings;
 			const t = ctx.locale.bind("dsh-brand-deepseek");
+			const form = ctx.configForms.get(BRAND_DEEPSEEK_ENTRY_ID);
 			let brandDispose;
 			const installBrand = () => {
 				if (brandDispose !== void 0) return;
@@ -1108,7 +1134,7 @@ window.__ModuleLoader__.load({
 			};
 			const visibility = createVisibilityController();
 			visibility.start();
-			/** Reconcile the runtime with one persisted style (idempotent). */
+			/** Reconcile the runtime with one brand style (idempotent). */
 			const applyState = (state) => {
 				if (state.enabled) installBrand();
 				else uninstallBrand();
@@ -1119,87 +1145,56 @@ window.__ModuleLoader__.load({
 				visibility.setTrajectoryTab(state.trajectoryTab);
 				visibility.setSessionLogButton(state.sessionLogButton);
 			};
-			const readPersisted = async () => {
-				const response = await api.describe();
-				if (!response.ok) throw new Error(response.error.message);
-				return defaultsOf(response.value.namespaces.find((view) => view.ns === NAMESPACE)?.value);
+			/** Whether the Host document accepts writes from this page. */
+			const writable = () => {
+				const snapshot = form.getSnapshot();
+				return snapshot.status === "ready" && snapshot.writable && snapshot.mode === "host";
 			};
-			const mutate = async (ops) => {
-				const response = await api.mutate(NAMESPACE, ops, void 0);
-				if (!response.ok) throw new Error(response.error.message);
+			/**
+			* Adopt the section the Host last accepted (the schema defaults while none
+			* stands): apply its side effects and publish it to the settings page.
+			*/
+			const adopt = () => {
+				const state = defaultsOf(form.getSnapshot().value);
+				applyState(state);
+				brandStyle.adopt(state, writable());
+				return state;
 			};
-			const currentOf = () => {
-				const current = brandStyle.getSnapshot();
-				return {
-					enabled: current.enabled,
-					hero: current.hero,
-					trajectoryTab: current.trajectoryTab,
-					sessionLogButton: current.sessionLogButton,
-					color: current.color
-				};
+			/**
+			* Write one field. A page the Host refuses to persist never pretends to:
+			* the write is skipped, and a refused write leaves the accepted section
+			* standing for the page to re-adopt.
+			*/
+			const write = async (field, value) => {
+				if (!writable()) throw new Error("this page cannot persist plugin settings");
+				if (!await form.set(field, value)) throw new Error(`the Host refused the "${field}" change`);
 			};
 			brandStyle.handlers = {
-				load: async () => {
-					const state = await readPersisted();
-					applyState(state);
-					return state;
-				},
+				load: async () => adopt(),
 				setEnabled: async (enabled) => {
-					await mutate([{
-						op: "set",
-						path: ["enabled"],
-						value: enabled
-					}]);
-					applyState({
-						...currentOf(),
-						enabled
-					});
+					await write("enabled", enabled);
+					return adopt();
 				},
 				setHero: async (hero) => {
-					await mutate([{
-						op: "set",
-						path: ["hero"],
-						value: hero
-					}]);
-					applyState({
-						...currentOf(),
-						hero
-					});
+					await write("hero", hero);
+					return adopt();
 				},
 				setTrajectoryTab: async (trajectoryTab) => {
-					await mutate([{
-						op: "set",
-						path: ["trajectoryTab"],
-						value: trajectoryTab
-					}]);
-					applyState({
-						...currentOf(),
-						trajectoryTab
-					});
+					await write("trajectoryTab", trajectoryTab);
+					return adopt();
 				},
 				setSessionLogButton: async (sessionLogButton) => {
-					await mutate([{
-						op: "set",
-						path: ["sessionLogButton"],
-						value: sessionLogButton
-					}]);
-					applyState({
-						...currentOf(),
-						sessionLogButton
-					});
+					await write("sessionLogButton", sessionLogButton);
+					return adopt();
 				},
 				setColor: async (color) => {
-					await mutate([{
-						op: "set",
-						path: ["color"],
-						value: color
-					}]);
-					applyState({
-						...currentOf(),
-						color
-					});
+					await write("color", color);
+					return adopt();
 				}
 			};
+			ctx.effect(() => form.subscribe(() => {
+				adopt();
+			}), "dsh-brand-deepseek: config form adoption");
 			brandStyle.refresh();
 			ctx.effect(() => () => {
 				visibility.dispose();

package/lib/index.js

@@ -1,26 +1,22 @@
 import z from "@deepseek-ai/schemastery";
 //#region src/index.ts
-const inject = ["settings"];
-/** Settings namespace holding the persisted brand style. */
-const NS = "dsh-brand-deepseek";
-/** Host plugin body — registers the namespace, nothing else. */
+/** Config schema; the defaults match the plugin's shipped look. */
+const Config = z.object({
+	enabled: z.boolean().default(true).volatile(),
+	hero: z.boolean().default(true).volatile(),
+	trajectoryTab: z.boolean().default(true).volatile(),
+	sessionLogButton: z.boolean().default(true).volatile(),
+	color: z.string().default("#4176e6").volatile()
+});
+/**
+* Host plugin body: declare this instance's settings presentation. The client
+* ships the Settings page, so the registry generates none of its own.
+* @param ctx - host plugin context.
+*/
 function apply(ctx) {
-	ctx.effect(() => {
-		ctx.settings.register(NS, z.object({
-			enabled: z.boolean().default(true),
-			hero: z.boolean().default(true),
-			trajectoryTab: z.boolean().default(true),
-			sessionLogButton: z.boolean().default(true),
-			color: z.string().default("#4176e6")
-		}), { base: {
-			enabled: true,
-			hero: true,
-			trajectoryTab: true,
-			sessionLogButton: true,
-			color: "#4176e6"
-		} });
-		return () => {};
-	}, "dsh-brand-deepseek: settings namespace");
+	ctx.inject(["settings"], (child) => {
+		child.effect(() => child.settings.configure({ auto: false }, ctx.fiber));
+	});
 }
 //#endregion
-export { apply, inject };
+export { Config, apply };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linbin-mk/dsh-brand-deepseek",
-  "version": "0.1.4",
+  "version": "0.2.1",
   "description": "Third-party DeepSeek Harness brand plugin: whale mark plus a minimal 'deepseek' wordmark for the Web client sidebar.",
   "type": "module",
   "main": "./lib/index.js",
@@ -32,7 +32,7 @@
   "scripts": {
     "build": "node build.mjs",
     "build:check": "node build.mjs && git diff --exit-code -- lib",
-    "test": "node scripts/smoke-client.mjs && node scripts/smoke-visibility.mjs"
+    "test": "node scripts/smoke-client.mjs && node scripts/smoke-host.mjs && node scripts/smoke-visibility.mjs && node scripts/smoke-config.mjs"
   },
   "files": [
     "lib/**/*.js",
@@ -47,43 +47,65 @@
   },
   "packageManager": "pnpm@11.7.0",
   "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.2"
+    "@deepseek-ai/schemastery": "^3.18.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1"
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-settings": "^0.1.7-alpha.1"
   },
   "peerDependenciesMeta": {
-    "@deepseek-ai/cordis": { "optional": true },
-    "@deepseek-ai/dsh-api-remotes": { "optional": true },
-    "@deepseek-ai/dsh-client-locale": { "optional": true },
-    "@deepseek-ai/dsh-client-ui-conversation": { "optional": true },
-    "@deepseek-ai/dsh-client-ui-primitives": { "optional": true },
-    "@deepseek-ai/dsh-client-ui-renderer": { "optional": true },
-    "@deepseek-ai/dsh-client-ui-settings": { "optional": true },
-    "@deepseek-ai/dsh-client-ui-sidebar": { "optional": true },
-    "@deepseek-ai/dsh-client-ui-slots": { "optional": true },
-    "@deepseek-ai/dsh-settings": { "optional": true }
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-api-remotes": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-locale": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-conversation": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-primitives": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-renderer": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-sidebar": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-slots": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-store": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-settings": "^0.1.7-alpha.1",
+    "@types/node": "^22.20.4",
     "@types/react": "^18.3.1",
     "jsdom": "^25.0.1",
     "react": "^18.2.0",