@linxin666/dsh-client-ui-skin-center 0.3.2 → 0.3.3

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   node scripts/verify-docs.mjs --write <dir>
-README.md: 42f90dbff0368a591f28ced7509f7fe522ee0f64
-README.zh.md: f617359c4750785da8f0731aec2cca9cacf77e7f
+README.md: 04b1c524d8222926a64008329b4fb9454ab2f0c0
+README.zh.md: 56cd3679ad66705e5543409086911be3bf723fbd

package/README.md

@@ -22,9 +22,9 @@ dsh plugin --profile web add @linxin666/dsh-client-ui-skin-center
 # From the repo (dev): dsh plugin --profile web add link:$(pwd)/packages/skins/skin-center
 ```
 
-`$(pwd)` is your clone of the dsh-web-ui monorepo. Only the default skin (blue-fantasy) ships inside this package; every other skin installs on demand from dsh-market.com into `$DSH_HOME/skins/<id>/`, and community skins are plain directories in the same place (no install command, no restart — reopen the card or reload to pick them up). A fresh install activates blue-fantasy by default (host seed); an update whose active skin is no longer available falls back to the stock look. The package ships `skins/blue-fantasy` only; the remaining skins stay in the repository under `skins/` as the market-build and gallery source and are never published in the package.
+`$(pwd)` is your clone of the dsh-web monorepo. Only the default skin (blue-fantasy) ships inside this package; every other skin installs on demand from dsh-market.com into `$DSH_HOME/skins/<id>/`, and community skins are plain directories in the same place (no install command, no restart — reopen the card or reload to pick them up). A fresh install activates blue-fantasy by default (host seed); an update whose active skin is no longer available falls back to the stock look. The package ships `skins/blue-fantasy` only; the remaining skins stay in the repository under `skins/` as the market-build and gallery source and are never published in the package.
 
-skin-center is a self-contained bundle meeting the official DSH plugin standard (`dsh.bundle.patch` points to `cordis.patch.yml`); it can also be installed via git: `dsh plugin --profile web add github:<org>/dsh-web-ui#<sha>` (the `prepare` script builds `lib/` in place). pnpm ≥10 requires authorizing `allowBuilds` before installing a git dependency; a local `link:` install has no such requirement.
+skin-center is a self-contained bundle meeting the official DSH plugin standard (`dsh.bundle.patch` points to `cordis.patch.yml`); it can also be installed via git: `dsh plugin --profile web add github:<org>/dsh-web#<sha>` (the `prepare` script builds `lib/` in place). pnpm ≥10 requires authorizing `allowBuilds` before installing a git dependency; a local `link:` install has no such requirement.
 
 ## Configuration
 
@@ -40,7 +40,7 @@ skin-center is a self-contained bundle meeting the official DSH plugin standard
 - All `/api/skin-center/*` routes are same-origin only: writes reject cross-site requests (Sec-Fetch-Site / Origin fence), and asset reads are contained inside each skin directory (path escapes fail closed).
 - Skin CSS is sanitized (whitelist) before serving; `patches.css` (L3) is arbitrary CSS by design and disclosed as such — it runs with full page styling power and is not a security boundary.
 - The custom-theme editor emits only fixed declarations from `CUSTOM_THEME_ALLOWED_TOKENS`, each verified against the official token registry. User input is normalized color/contrast data and never becomes a selector, URL or free-form CSS payload.
-- `hooks.mjs` is trusted code that shares this repository's review and release; it is served same-origin only and its import/apply errors can never take the static skin down.
+- `hooks.mjs` is trusted code that shares this repository's review and release; it is served same-origin only and its import/apply errors can never take the static skin down. Hooks run for built-in skins, and for user-directory skins installed from the official DSH Market whose `dsh-market.provenance.json` sha256-pins the on-disk `skin.json` and hooks entry to the market-served bytes (verified by `src/provenance.ts`, issue #1073); a missing or mismatched provenance — hand-dropped or tampered directories — keeps the hooks facet refused while the declarative parts still load.
 
 ## Known limitations
 
@@ -48,6 +48,10 @@ skin-center is a self-contained bundle meeting the official DSH plugin standard
 - Plugins that do not output semantic attributes (and have no stable DOM anchors) receive L1 token coverage only.
 - A skin video background keeps playing regardless of the wallpaper pause-on-hidden setting; pause-on-hidden applies to the Wallpaper Engine bridge only.
 
+## Telemetry
+
+The browser half sends one anonymous install heartbeat per UTC day to dsh-market.com: a random localStorage id plus this package's name, nothing else. The server stores only a salted hash of that id, never IP addresses, and exposes aggregate counts only. See [docs/telemetry.md](../../../docs/telemetry.md) for the full contract.
+
 ## Directory structure
 
 ```
@@ -57,6 +61,7 @@ skins/skin-center/
   src/core/css-safety/                      # lightningcss scoping + whitelist pipeline
   src/index.ts                              # host entry: routes, tapIndex adapter, legacy bridge
   src/skin-repo.ts                          # dual-source skin catalog (built-in + $DSH_HOME/skins)
+  src/provenance.ts                         # official-market install provenance verification (hooks trust)
   src/routes-v2.ts                          # /api/skin-center/v2/* routes
   src/tap-index-adapter.ts                  # the single tapIndex adapter (anti-FOUC)
   src/active-state.ts                       # active-skin selection persistence

package/README.zh.md

@@ -22,9 +22,9 @@ dsh plugin --profile web add @linxin666/dsh-client-ui-skin-center
 # 仓库开发：dsh plugin --profile web add link:$(pwd)/packages/skins/skin-center
 ```
 
-`$(pwd)` 是 dsh-web-ui monorepo 的本地克隆。只有默认皮肤（蓝色幻想）随这个包发布；其余皮肤在 dsh-market.com 按需安装到 `$DSH_HOME/skins/<id>/`，社区皮肤同样是放进该目录的普通目录（均无安装命令、无需重启——重开卡片或刷新页面即收录）。新装默认激活蓝色幻想（宿主种子）；升级后原激活皮肤已不可用时回退官方主题。包内只发布 `skins/blue-fantasy`；其余皮肤保留在仓库 `skins/` 下，作为市场构建与画廊的目录来源，绝不进入 npm 包。
+`$(pwd)` 是 dsh-web monorepo 的本地克隆。只有默认皮肤（蓝色幻想）随这个包发布；其余皮肤在 dsh-market.com 按需安装到 `$DSH_HOME/skins/<id>/`，社区皮肤同样是放进该目录的普通目录（均无安装命令、无需重启——重开卡片或刷新页面即收录）。新装默认激活蓝色幻想（宿主种子）；升级后原激活皮肤已不可用时回退官方主题。包内只发布 `skins/blue-fantasy`；其余皮肤保留在仓库 `skins/` 下，作为市场构建与画廊的目录来源，绝不进入 npm 包。
 
-皮肤中心是符合官方 DSH 插件标准的自包含 bundle（`dsh.bundle.patch` 指向 `cordis.patch.yml`）；也可经 git 安装：`dsh plugin --profile web add github:<org>/dsh-web-ui#<sha>`（`prepare` 脚本就地构建 `lib/`）。pnpm ≥10 安装 git 依赖前需授权 `allowBuilds`；本地 `link:` 安装无此要求。
+皮肤中心是符合官方 DSH 插件标准的自包含 bundle（`dsh.bundle.patch` 指向 `cordis.patch.yml`）；也可经 git 安装：`dsh plugin --profile web add github:<org>/dsh-web#<sha>`（`prepare` 脚本就地构建 `lib/`）。pnpm ≥10 安装 git 依赖前需授权 `allowBuilds`；本地 `link:` 安装无此要求。
 
 ## 配置
 
@@ -40,7 +40,7 @@ dsh plugin --profile web add @linxin666/dsh-client-ui-skin-center
 - 所有 `/api/skin-center/*` 路由仅接受同源请求：写操作拒绝跨站请求（Sec-Fetch-Site / Origin 围栏），资产读取限定在各皮肤目录之内（路径逃逸 fail-closed）。
 - 皮肤 CSS 在服务前经白名单净化；`patches.css`（L3）按设计就是任意 CSS 并如实公示——它拥有完整页面样式能力，不构成安全边界。
 - 自定义主题编辑器只会从 `CUSTOM_THEME_ALLOWED_TOKENS` 生成固定声明，且每个 token 都对照官方 token 注册表校验。用户输入只作为规范化后的颜色/对比度数据，不会成为选择器、URL 或自由 CSS 载荷。
-- `hooks.mjs` 是与本仓库同审同发的受信代码，仅同源 serve，其 import/apply 错误永远不会拖垮静态皮肤。
+- `hooks.mjs` 是与本仓库同审同发的受信代码，仅同源 serve，其 import/apply 错误永远不会拖垮静态皮肤。hooks 对内置皮肤放行；对用户目录皮肤，仅当其从官方 DSH 市场安装且 `dsh-market.provenance.json` 以 sha256 钉住磁盘上的 `skin.json` 与 hooks 入口字节时放行（由 `src/provenance.ts` 校验，issue #1073）；provenance 缺失或不匹配——手工投放或被篡改的目录——hooks facet 保持拒绝，声明式部分仍正常加载。
 
 ## 已知限制
 
@@ -48,6 +48,10 @@ dsh plugin --profile web add @linxin666/dsh-client-ui-skin-center
 - 不输出语义属性（且无稳定 DOM 锚点）的插件只享受 L1 token 覆盖。
 - 皮肤视频背景不受壁纸「隐藏时暂停」设置影响；该设置仅作用于 Wallpaper Engine 桥。
 
+## 数据遥测
+
+浏览器半区每个 UTC 日向 dsh-market.com 发送一次匿名安装心跳：仅含一个 localStorage 随机 ID 与本包名，无其他数据。服务端只存储该 ID 的加盐哈希，不存 IP，且只暴露聚合计数。完整契约见 [docs/telemetry.md](../../../docs/telemetry.md)。
+
 ## 目录结构
 
 ```
@@ -57,6 +61,7 @@ skins/skin-center/
   src/core/css-safety/                      # lightningcss 作用域限定 + 白名单管线
   src/index.ts                              # host 入口：路由、tapIndex 适配器、旧版迁移桥
   src/skin-repo.ts                          # 双来源皮肤目录册（内置 + $DSH_HOME/skins）
+  src/provenance.ts                         # 官方市场安装 provenance 校验（hooks 信任）
   src/routes-v2.ts                          # /api/skin-center/v2/* 路由
   src/tap-index-adapter.ts                  # 单一 tapIndex 适配器（防 FOUC）
   src/active-state.ts                       # 活动皮肤选择持久化

package/contracts/README.md

@@ -37,6 +37,24 @@ manifests would be rejected by their own validator. Optional legal metadata
 (`license`, `licenseUrl`, `noticeUrl`, `sourceUrl`, `attribution`) is
 first-class in v2.
 
+## Hooks trust model
+
+`hooks.mjs` is trusted executable code that shares this repository's review
+and release. It is served verbatim over `GET /skins/<id>/hooks.mjs` only for:
+
+- **built-in skins** — shipped inside the skin-center npm package, same
+  review and release by definition;
+- **official-market installs** — user-directory skins carrying a
+  `dsh-market.provenance.json` whose sha256 pins the on-disk `skin.json`
+  and hooks entry to the bytes the official DSH Market served (the market
+  content is built from this repository, so a hash match means the bytes
+  are the reviewed ones). Verification lives in `src/provenance.ts` and
+  fails closed: any missing, foreign-source or mismatched provenance keeps
+  the hooks facet refused with a catalog warning while the declarative
+  parts (skin.css / patches.css / assets) still load (issue #1073).
+
+Locally dropped or third-party skin directories never run hooks.
+
 ## Loader-side rules (pinned here, enforced in M2)
 
 - All skin CSS is force-scoped under `html[data-dsh-skin="<id>"]` by the

package/contracts/semantic-attrs-v1.md

@@ -111,7 +111,7 @@ family / 插件区域：
 | `git-graph` | dsh-git-graph | slot entry id `git-graph`；`[data-gitgraph-chip-anchor]` / `[data-gitgraph-dialog]` |
 | `pet` | dsh-pet | `[data-dsh-pet-root]`；一级设置分区 settings.section id `pet`（只列内置与已安装宠物） |
 | `remote-web-ui` | dsh-remote-web-ui | slot entry id `remote-web-ui` |
-| `web-ui-settings` | dsh-web-ui-settings | settings.section id `web-ui-plugins` |
+| `web-ui-settings` | dsh-web-settings | settings.section id `web-ui-plugins` |
 | `skill-explorer` | dsh-skill-explorer | `[data-dsh-skill-explorer-view]` / `[data-dsh-skill-explorer-entry]` |
 | `doctor` | dsh-doctor | web-ui.plugin.item 槽 entry id `doctor`（设置 → Web UI 插件 → Doctor 卡片）；卡片内 `[data-dsh-plugin="doctor"]` |
 | `aionui-panel` | dsh-aionui-panel（停更） | dock entry id `aionui-*` |

package/contracts/skin-manifest-v2.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://schemas.linxin666.org/dsh-skin/v2.json",
   "title": "DSH Skin Manifest v2",
-  "description": "Declarative manifest for a dsh-web-ui skin asset directory. Skins are pure assets; the skin-center package is the only loader/renderer. Validators must use this local schema copy and never fetch the $id URL.",
+  "description": "Declarative manifest for a dsh-web skin asset directory. Skins are pure assets; the skin-center package is the only loader/renderer. Validators must use this local schema copy and never fetch the $id URL.",
   "type": "object",
   "additionalProperties": false,
   "required": [

package/lib/client.js

@@ -570,6 +570,7 @@ window.__ModuleLoader__.load({
 			volumeValue = 100;
 			dimValue = 25;
 			blurValue = 0;
+			opacityValue = 100;
 			dirsValue = [];
 			listeners = /* @__PURE__ */ new Set();
 			scope;
@@ -598,13 +599,16 @@ window.__ModuleLoader__.load({
 			/** Detached frame-capture video; released on error/abort/loadeddata and on
 			*  teardown so it never keeps buffering the source file. */
 			captureVideo = null;
+			/** Guard flag: suppresses readAll during applyThemeDefaults scope writes
+			*  to prevent mid-write listener cascades from resetting values. */
+			seeding = false;
 			constructor(scope, options = {}) {
 				this.scope = scope;
 				this.options = options;
 				this.doc = options.doc ?? document;
 				this.readAll();
 				this.unsubscribe = scope.subscribe(() => {
-					if (this.disposed) return;
+					if (this.disposed || this.seeding) return;
 					this.readAll();
 					if (this.enabledValue && this.selectionValue && (!this.applied || this.applied.id !== this.selectionValue)) this.fetchAndSync();
 					else {
@@ -625,6 +629,7 @@ window.__ModuleLoader__.load({
 					});
 					this.mountObserver.observe(this.doc.body, { childList: true });
 				}
+				this.applyThemeDefaults();
 				if (this.enabledValue && this.selectionValue) this.fetchAndSync();
 			}
 			fetchAndSync() {
@@ -722,6 +727,7 @@ window.__ModuleLoader__.load({
 			fit = () => this.fitValue;
 			dim = () => this.dimValue;
 			wallpaperBlur = () => this.blurValue;
+			wallpaperOpacity = () => this.opacityValue;
 			pauseOnHidden = () => this.pauseOnHiddenValue;
 			sound = () => this.soundValue;
 			volume = () => this.volumeValue;
@@ -781,6 +787,12 @@ window.__ModuleLoader__.load({
 				this.publish();
 				this.scope.set("wallpaperBlur", this.blurValue);
 			}
+			setOpacity(value) {
+				this.opacityValue = clamp(value, 0, 100);
+				this.render();
+				this.publish();
+				this.scope.set("wallpaperOpacity", this.opacityValue);
+			}
 			setPauseOnHidden(value) {
 				this.pauseOnHiddenValue = value;
 				this.publish();
@@ -860,6 +872,32 @@ window.__ModuleLoader__.load({
 				this.doc.removeEventListener("keydown", this.onFirstGesture);
 				this.teardownLayers();
 			}
+			/**
+			* Seed dim and opacity with theme-tuned values when neither has been
+			* explicitly set (both are at schema defaults: dim=25, opacity=100).
+			* This runs once at construction so a fresh wallpaper install gets
+			* readable defaults for the active theme. Users who have already
+			* adjusted either slider keep their values (#1051).
+			*/
+			applyThemeDefaults() {
+				const snapshot = this.scope.getSnapshot();
+				const value = snapshot.value ?? {};
+				if (value.dim !== void 0 || value.wallpaperOpacity !== void 0) return;
+				if (snapshot.writable === false) return;
+				if ((this.options.themeGet !== void 0 ? this.options.themeGet() : this.doc.body?.hasAttribute("data-ds-dark-theme") ? "dark" : "light") === "light") {
+					this.dimValue = 0;
+					this.opacityValue = 40;
+				} else {
+					this.dimValue = 40;
+					this.opacityValue = 100;
+				}
+				this.seeding = true;
+				try {
+					this.scope.set("dim", this.dimValue);
+					this.scope.set("wallpaperOpacity", this.opacityValue);
+				} catch {}
+				this.seeding = false;
+			}
 			readAll() {
 				const value = this.scope.getSnapshot().value ?? {};
 				this.enabledValue = typeof value.enabled === "boolean" ? value.enabled : true;
@@ -872,6 +910,7 @@ window.__ModuleLoader__.load({
 				this.volumeValue = typeof value.volume === "number" && Number.isFinite(value.volume) ? clamp(value.volume, 0, 100) : 100;
 				this.dimValue = typeof value.dim === "number" && Number.isFinite(value.dim) ? clamp(value.dim, 0, 90) : 25;
 				this.blurValue = typeof value.wallpaperBlur === "number" && Number.isFinite(value.wallpaperBlur) ? clamp(value.wallpaperBlur, 0, 60) : 0;
+				this.opacityValue = typeof value.wallpaperOpacity === "number" && Number.isFinite(value.wallpaperOpacity) ? clamp(value.wallpaperOpacity, 0, 100) : 100;
 				this.dirsValue = Array.isArray(value.weLibraryDirs) ? value.weLibraryDirs.filter((d) => typeof d === "string" && d.trim() !== "") : [];
 			}
 			/** Resume a policy-blocked video on the first user gesture (#580). */
@@ -914,9 +953,16 @@ window.__ModuleLoader__.load({
 					this.rootNeutralizer.dataset.dshWallpaperRoot = "";
 					this.rootNeutralizer.textContent = `
         [id="root"] { background: transparent; }
-        html[data-dsh-wallpaper-active],
+        /* Wallpaper opacity backdrop (#1051): light-mode fades to white,
+           dark-mode fades to black.  :has() tracks theme switches live. */
+        html[data-dsh-wallpaper-active] {
+          background-color: white !important;
+          background-image: none !important;
+        }
+        html[data-dsh-wallpaper-active]:has(body[data-ds-dark-theme]) {
+          background-color: black !important;
+        }
         body[data-dsh-wallpaper-active],
-        html[data-dsh-skin][data-dsh-wallpaper-active],
         html[data-dsh-skin][data-dsh-wallpaper-active] body,
         html[data-dsh-skin] body[data-dsh-wallpaper-active],
         body[data-dsh-wallpaper-active][data-ds-dark-theme],
@@ -985,6 +1031,7 @@ window.__ModuleLoader__.load({
 				const blur = this.blurValue > 0 ? "blur(" + String(this.blurValue) + "px)" : "";
 				this.mediaLayer.style.filter = blur;
 				this.mediaLayer.style.transform = this.blurValue > 0 ? "scale(1.05)" : "";
+				this.mediaLayer.style.opacity = this.opacityValue < 100 ? String(this.opacityValue / 100) : "";
 				this.scrimLayer.style.background = "rgba(0, 0, 0, " + String(this.dimValue / 100) + ")";
 			}
 			/** Push the current sizing mode onto the mounted media element. */
@@ -1477,6 +1524,7 @@ window.__ModuleLoader__.load({
 			const fit = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.fit);
 			const dim = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.dim);
 			const blur = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.wallpaperBlur);
+			const opacity = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.wallpaperOpacity);
 			const pauseOnHidden = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.pauseOnHidden);
 			const sound = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.sound);
 			const volume = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.volume);
@@ -1485,6 +1533,7 @@ window.__ModuleLoader__.load({
 			const dirs = (0, react.useSyncExternalStore)(wallpaper.subscribe, wallpaper.dirs);
 			const [shownDim, setShownDim] = useLiveValue$1(dim);
 			const [shownBlur, setShownBlur] = useLiveValue$1(blur);
+			const [shownOpacity, setShownOpacity] = useLiveValue$1(opacity);
 			const [shownVolume, setShownVolume] = useLiveValue$1(volume);
 			const [dirInput, setDirInput] = (0, react.useState)("");
 			const [picking, setPicking] = (0, react.useState)(false);
@@ -1723,6 +1772,30 @@ window.__ModuleLoader__.load({
 											wallpaper.setDim(value);
 										}
 									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										className: skin_center_module_css_default.backgroundHead,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: skin_center_module_css_default.backgroundLabel,
+											children: t("wallpaperOpacity")
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											className: skin_center_module_css_default.backgroundValue,
+											"aria-hidden": "true",
+											children: [shownOpacity, "%"]
+										})]
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SliderControl, {
+										className: skin_center_module_css_default.backgroundRange,
+										min: 0,
+										max: 100,
+										step: 5,
+										value: opacity,
+										ariaValuetext: shownOpacity + "%",
+										ariaLabel: t("wallpaperOpacity"),
+										onChanging: setShownOpacity,
+										onChange: (value) => {
+											wallpaper.setOpacity(value);
+										}
+									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 										className: skin_center_module_css_default.backgroundHead,
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
@@ -2599,6 +2672,36 @@ window.__ModuleLoader__.load({
 		};
 		/** The fields normalize/sanitize know about; unknown keys are dropped. */
 		const SKIN_BACKGROUND_FIELDS = Object.keys(SKIN_BACKGROUND_DEFAULTS);
+		function clampInt(value, min, max) {
+			return Math.max(min, Math.min(max, Math.round(value)));
+		}
+		const RANGES = {
+			backgroundOpacity: [0, 100],
+			backgroundBlurEmpty: [0, 20],
+			backgroundBlurContent: [0, 20],
+			inputCardBlur: [0, 20],
+			bubbleOpacity: [0, 100]
+		};
+		function isRecord$1(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value);
+		}
+		/**
+		* Lenient normalization for stored/legacy data: unknown keys and wrongly
+		* typed fields are dropped, numeric fields are clamped into range. Never
+		* fails; a non-object input yields an empty config.
+		*/
+		function normalizeSkinBackground(value) {
+			if (!isRecord$1(value)) return {};
+			const out = {};
+			if (typeof value.enabled === "boolean") out.enabled = value.enabled;
+			for (const field of Object.keys(RANGES)) {
+				const raw = value[field];
+				if (typeof raw !== "number" || !Number.isFinite(raw)) continue;
+				const [min, max] = RANGES[field];
+				out[field] = clampInt(raw, min, max);
+			}
+			return out;
+		}
 		/** Fill every absent field from {@link SKIN_BACKGROUND_DEFAULTS}. */
 		function resolveSkinBackground(value) {
 			return {
@@ -2653,7 +2756,7 @@ window.__ModuleLoader__.load({
 		/**
 		* Selector for a conversation message row inside the shell's center column.
 		* Official shell message rows carry `data-chat-anchor-key`; the
-		* `data-pane="conversation"` attribute is stamped by the dsh-web-ui-all compat
+		* `data-pane="conversation"` attribute is stamped by the dsh-web-all compat
 		* shim on the center column, where the _userRow / _compactionRow /
 		* _contextRow / _turnErrorRow suffixes are CSS-module message-row classes
 		* (hash prefix varies, suffix is stable).
@@ -2914,6 +3017,62 @@ window.__ModuleLoader__.load({
 			}
 		};
 		//#endregion
+		//#region src/core/background-scope.ts
+		/**
+		* Safe reconciliation helpers for the legacy skin-background settings scope.
+		*
+		* The scope's resolved value contains schema defaults, while its raw user layer
+		* contains only fields explicitly stored by the user. The v2 active-state
+		* document is authoritative, so a scope update may merge only those raw fields
+		* into the live background values.
+		*/
+		function isRecord(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value);
+		}
+		/** Return the known, explicitly stored skin-background fields from a user layer. */
+		function extractSkinBackgroundUserLayer(value) {
+			if (!isRecord(value)) return null;
+			const normalized = normalizeSkinBackground(value);
+			const knownFields = Object.keys(normalized);
+			if (knownFields.length === 0) return null;
+			const owned = {};
+			for (const field of knownFields) owned[field] = normalized[field];
+			return owned;
+		}
+		/**
+		* Build a v2-safe patch from the raw user layer. Absent fields, including
+		* schema-default fields absent from the user layer, never enter the patch.
+		*/
+		function skinBackgroundUserPatch(current, user) {
+			const userConfig = extractSkinBackgroundUserLayer(user);
+			if (userConfig === null) return null;
+			const patch = {};
+			for (const field of SKIN_BACKGROUND_FIELDS) {
+				if (!Object.hasOwn(userConfig, field)) continue;
+				const value = userConfig[field];
+				if (value === void 0 || value === current[field]) continue;
+				patch[field] = value;
+			}
+			return Object.keys(patch).length === 0 ? null : patch;
+		}
+		/**
+		* Accept a scope publication only when its namespace revision is new. The
+		* caller records the returned revision even when there is no user patch, so a
+		* later mirror publication with the same revision stays inert.
+		*/
+		function reconcileSkinBackgroundScope(current, snapshot, lastRevision) {
+			if (snapshot.revision === void 0 || snapshot.revision === lastRevision) return {
+				accepted: false,
+				revision: lastRevision,
+				patch: null
+			};
+			return {
+				accepted: true,
+				revision: snapshot.revision,
+				patch: skinBackgroundUserPatch(current, snapshot.user)
+			};
+		}
+		//#endregion
 		//#region src/client/locales.ts
 		const en = {
 			title: "Skin Center",
@@ -2967,6 +3126,7 @@ window.__ModuleLoader__.load({
 			wallpaperFitFill: "Stretch",
 			wallpaperClear: "Turn off wallpaper",
 			wallpaperDim: "Wallpaper dimming",
+			wallpaperOpacity: "Wallpaper opacity",
 			wallpaperBlur: "Wallpaper blur",
 			wallpaperPauseHidden: "Pause when window hidden",
 			wallpaperSound: "Wallpaper sound",
@@ -3008,7 +3168,7 @@ window.__ModuleLoader__.load({
 			customThemeSaveFailed: "Could not save custom theme changes."
 		};
 		const zh = {
-			title: "皮肤中心",
+			title: "皮肤",
 			cardDescription: "在 GUI 内即时试穿任意皮肤，退出即完全还原；应用一键完成并自动刷新。",
 			enabled: "启用皮肤中心",
 			enabledHint: "关闭后停用试穿、应用与背景控件，重新打开即恢复。",
@@ -3059,6 +3219,7 @@ window.__ModuleLoader__.load({
 			wallpaperFitFill: "拉伸铺满",
 			wallpaperClear: "关闭壁纸",
 			wallpaperDim: "壁纸暗化",
+			wallpaperOpacity: "壁纸不透明度",
 			wallpaperBlur: "壁纸模糊",
 			wallpaperPauseHidden: "窗口隐藏时暂停",
 			wallpaperSound: "壁纸声音",
@@ -4384,6 +4545,76 @@ window.__ModuleLoader__.load({
 			}
 		};
 		//#endregion
+		//#region src/client/telemetry.ts
+		const VISITOR_KEY = "dsh-web-ui-telemetry-visitor";
+		const DAY_KEY_PREFIX = "dsh-web-ui-telemetry-day:";
+		const ENDPOINT = "https://dsh-market.com/api/telemetry/event";
+		/** The building package's version, when the bundle carries it. */
+		function bakedVersion() {
+			try {
+				return "0.3.3";
+			} catch {
+				return;
+			}
+		}
+		/** Read or lazily create the anonymous visitor id; null when storage is unavailable. */
+		function visitorId() {
+			try {
+				const existing = localStorage.getItem(VISITOR_KEY);
+				if (existing && /^[A-Za-z0-9_-]{16,64}$/.test(existing)) return existing;
+				const fresh = crypto.randomUUID().replaceAll("-", "");
+				localStorage.setItem(VISITOR_KEY, fresh);
+				return fresh;
+			} catch {
+				return null;
+			}
+		}
+		/** Drop stale per-day dedup keys so localStorage does not grow forever. */
+		function pruneDayKeys(today) {
+			try {
+				for (let index = localStorage.length - 1; index >= 0; index -= 1) {
+					const key = localStorage.key(index);
+					if (key !== null && key.startsWith(DAY_KEY_PREFIX) && key !== DAY_KEY_PREFIX + today) localStorage.removeItem(key);
+				}
+			} catch {}
+		}
+		/**
+		* Fire the daily heartbeat for the given items at most once per UTC day per
+		* browser. Never throws and never blocks the caller. Items without an explicit
+		* version inherit the bundle's baked build version.
+		*/
+		function reportDailyHeartbeat(items) {
+			try {
+				if (items.length === 0) return;
+				const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+				if (navigator.webdriver) return;
+				if (localStorage.getItem(DAY_KEY_PREFIX + today) !== null) return;
+				const visitor = visitorId();
+				if (visitor === null) return;
+				pruneDayKeys(today);
+				const payloadItems = items.map((item) => {
+					const out = { name: item.name };
+					const version = item.version ?? bakedVersion();
+					if (version !== void 0) out.version = version;
+					if (item.channel !== void 0) out.channel = item.channel;
+					return out;
+				});
+				const body = JSON.stringify({
+					kind: "heartbeat",
+					visitor,
+					items: payloadItems
+				});
+				fetch(ENDPOINT, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body,
+					keepalive: true
+				}).then((response) => {
+					if (response.ok) localStorage.setItem(DAY_KEY_PREFIX + today, "1");
+				}).catch(() => {});
+			} catch {}
+		}
+		//#endregion
 		//#region src/client/index.ts
 		/** Locale namespace owned by this plugin. */
 		const NS = "skinCenter";
@@ -4397,12 +4628,36 @@ window.__ModuleLoader__.load({
 			"remote",
 			"workspaces"
 		];
+		/** Self-report item for the install heartbeat. */
+		const SELF_ITEM = [{ name: "@linxin666/dsh-client-ui-skin-center" }];
+		/**
+		* Beat the install heartbeat (docs/telemetry.md), enriching it with the
+		* installed skin inventory (skin:<id> + version + channel) once the v2
+		* catalog answers. Offline or pre-boot the beat stays package-only.
+		*/
+		function beatHeartbeat() {
+			reportDailyHeartbeat(SELF_ITEM);
+			fetch("/api/skin-center/v2/catalog").then((res) => res.ok ? res.json() : null).then((catalog) => {
+				if (!catalog || !Array.isArray(catalog.skins)) return;
+				const items = [...SELF_ITEM];
+				for (const skin of catalog.skins) {
+					const id = skin && skin.manifest && typeof skin.manifest.id === "string" ? skin.manifest.id : "";
+					if (!id) continue;
+					const item = { name: "skin:" + id };
+					if (typeof skin.manifest.version === "string") item.version = skin.manifest.version;
+					if (typeof skin.channel === "string") item.channel = skin.channel;
+					items.push(item);
+				}
+				reportDailyHeartbeat(items.slice(0, 64));
+			}).catch(() => {});
+		}
 		/**
 		* Register the skin-center dictionaries, the body scope attribute, and the
 		* Skin Center as a first-level settings section.
 		* @param ctx - client root context.
 		*/
 		function apply(ctx) {
+			beatHeartbeat();
 			ctx.effect(() => {
 				try {
 					return ctx.locale.register(NS, {
@@ -4448,19 +4703,37 @@ window.__ModuleLoader__.load({
 			const scopeConfig = () => {
 				const value = backgroundScope.getSnapshot().value;
 				if (value === void 0 || value === null) return null;
-				if (!SKIN_BACKGROUND_FIELDS.some((field) => value[field] !== void 0)) return null;
 				return value;
 			};
+			let v2Loaded = false;
+			let lastScopeRevision = backgroundScope.getSnapshot().revision;
 			const background = new BackgroundController(scopeConfig(), persistBackground);
-			fetch(V2_ACTIVE_URL).then((res) => res.ok ? res.json() : null).then((body) => {
-				if (body) background.init(body.background ?? null);
-			}).catch(() => {});
-			ctx.effect(() => backgroundScope.subscribe(() => {
-				const next = scopeConfig();
-				if (next === null) return;
-				background.init(next);
+			const reconcileScope = () => {
+				if (!v2Loaded) return;
+				const snapshot = backgroundScope.getSnapshot();
+				const result = reconcileSkinBackgroundScope(background.snapshot(), {
+					revision: snapshot.revision,
+					user: snapshot.user
+				}, lastScopeRevision);
+				if (!result.accepted) return;
+				lastScopeRevision = result.revision;
+				if (result.patch === null) return;
+				const current = background.snapshot();
+				background.init({
+					...current,
+					...result.patch
+				});
 				persistBackground(background.snapshot());
-			}), "ui-skin-center: background scope sync");
+			};
+			fetch(V2_ACTIVE_URL).then((res) => res.ok ? res.json() : null).then((body) => {
+				v2Loaded = true;
+				if (body?.background) background.init(body.background);
+				reconcileScope();
+			}).catch(() => {
+				v2Loaded = true;
+				reconcileScope();
+			});
+			ctx.effect(() => backgroundScope.subscribe(reconcileScope), "ui-skin-center: background scope sync");
 			ctx.effect(() => () => {
 				flushBackground();
 				background.dispose();
@@ -4509,6 +4782,7 @@ window.__ModuleLoader__.load({
 					fit: () => wallpaper.fit(),
 					dim: () => wallpaper.dim(),
 					wallpaperBlur: () => wallpaper.wallpaperBlur(),
+					wallpaperOpacity: () => wallpaper.wallpaperOpacity(),
 					pauseOnHidden: () => wallpaper.pauseOnHidden(),
 					sound: () => wallpaper.sound(),
 					volume: () => wallpaper.volume(),
@@ -4524,6 +4798,7 @@ window.__ModuleLoader__.load({
 					setFit: (fit) => wallpaper.setFit(fit),
 					setDim: (value) => wallpaper.setDim(value),
 					setBlur: (value) => wallpaper.setBlur(value),
+					setOpacity: (value) => wallpaper.setOpacity(value),
 					setPauseOnHidden: (value) => wallpaper.setPauseOnHidden(value),
 					setSound: (value) => wallpaper.setSound(value),
 					setVolume: (value) => wallpaper.setVolume(value),