@linxin666/dsh-pet 0.2.4 → 0.2.5

package/lib/types/client/renderers/live2d.js

@@ -32,6 +32,26 @@ const TAP_GROUP = 'TapBody';
  * downsampled atlas only when the effective on-screen scale warrants it.
  */
 const TEXTURE_OPTIONS = { lod: 'single-auto' };
+/** Recursively release the activation without invalidating shared texture caches. */
+const DESTROY_OPTIONS = { children: true };
+/** Remove only this activation's canvas; `true` would release Pixi globals. */
+const RENDERER_DESTROY_OPTIONS = { removeView: true };
+/** Ignore hidden/zero boxes and keep Pixi dimensions stable and integral. */
+function normalizeRendererSize(width, height) {
+    if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0)
+        return undefined;
+    return {
+        width: Math.max(1, Math.round(width)),
+        height: Math.max(1, Math.round(height)),
+    };
+}
+/** Fit the model from its unscaled dimensions into the current Pixi screen. */
+function layoutModel(app, model, sourceSize, config) {
+    const fit = Math.min(app.renderer.width / sourceSize.width, app.renderer.height / sourceSize.height) * 0.92;
+    model.scale.set(fit * (config.scale ?? 1));
+    model.anchor.set(0.5);
+    model.position.set(app.renderer.width / 2 + (config.translate?.x ?? 0), app.renderer.height / 2 + (config.translate?.y ?? 0));
+}
 let vendorConfigured = false;
 /** Configure pixi extensions + the Cubism SDK once per page. */
 function configureOnce(vendor) {
@@ -67,11 +87,65 @@ export const live2dRenderer = {
         let disposed = false;
         let app;
         let model;
+        let modelAttached = false;
+        let modelSourceSize;
+        let resizeObserver;
+        let resizeTracking = false;
         let errorListener;
         let unsubscribe;
         /** The motion group the current phase maps to (resume target after taps). */
         let phaseGroup = config.motions.idle;
         let tapPlaying = false;
+        const stopResizeTracking = () => {
+            resizeTracking = false;
+            resizeObserver?.disconnect();
+            resizeObserver = undefined;
+        };
+        const resizeRenderer = (pixiApp, width, height) => {
+            const next = normalizeRendererSize(width, height);
+            if (disposed || !resizeTracking || next === undefined)
+                return;
+            if (pixiApp.renderer.width === next.width && pixiApp.renderer.height === next.height)
+                return;
+            pixiApp.renderer.resize(next.width, next.height);
+            if (model !== undefined && modelSourceSize !== undefined) {
+                layoutModel(pixiApp, model, modelSourceSize, config);
+            }
+        };
+        const trackContainerSize = (pixiApp) => {
+            if (typeof ResizeObserver === 'undefined')
+                return;
+            resizeTracking = true;
+            resizeObserver = new ResizeObserver((entries) => {
+                const entry = entries.find(candidate => candidate.target === ctx.container);
+                if (entry === undefined)
+                    return;
+                resizeRenderer(pixiApp, entry.contentRect.width, entry.contentRect.height);
+            });
+            resizeObserver.observe(ctx.container);
+            // Catch a synchronous layout change between init() and observe().
+            resizeRenderer(pixiApp, ctx.container.clientWidth, ctx.container.clientHeight);
+        };
+        /** Release every resource currently owned by this activation exactly once. */
+        const destroyResources = () => {
+            stopResizeTracking();
+            unsubscribe?.();
+            unsubscribe = undefined;
+            const currentApp = app;
+            const currentModel = model;
+            const modelOwnedByApp = currentApp !== undefined && modelAttached;
+            app = undefined;
+            model = undefined;
+            modelSourceSize = undefined;
+            modelAttached = false;
+            try {
+                if (currentModel !== undefined && !modelOwnedByApp)
+                    currentModel.destroy(DESTROY_OPTIONS);
+            }
+            finally {
+                currentApp?.destroy(RENDERER_DESTROY_OPTIONS, DESTROY_OPTIONS);
+            }
+        };
         const playGroup = (group) => {
             if (model === undefined)
                 return;
@@ -107,40 +181,62 @@ export const live2dRenderer = {
             }
             configureOnce(vendor);
             const pixiApp = new vendor.Application();
-            await pixiApp.init({
-                width: Math.max(1, ctx.container.clientWidth || 160),
-                height: Math.max(1, ctx.container.clientHeight || 174),
-                backgroundAlpha: 0,
-                antialias: true,
-                autoDensity: true,
-                preference: 'webgl',
-            });
+            const initialSize = normalizeRendererSize(ctx.container.clientWidth, ctx.container.clientHeight) ?? {
+                width: 160,
+                height: 174,
+            };
+            try {
+                await pixiApp.init({
+                    width: initialSize.width,
+                    height: initialSize.height,
+                    backgroundAlpha: 0,
+                    antialias: true,
+                    autoDensity: true,
+                    preference: 'webgl',
+                });
+            }
+            catch (error) {
+                // init() can fail after allocating a partial renderer; cleanup is
+                // best-effort because Pixi may not consider that partial app ready.
+                try {
+                    pixiApp.destroy(RENDERER_DESTROY_OPTIONS, DESTROY_OPTIONS);
+                }
+                catch { }
+                throw error;
+            }
             if (disposed) {
-                pixiApp.destroy(true, { children: true });
+                pixiApp.destroy(RENDERER_DESTROY_OPTIONS, DESTROY_OPTIONS);
                 return;
             }
+            app = pixiApp;
             pixiApp.canvas.style.display = 'block';
             pixiApp.canvas.style.width = '100%';
             pixiApp.canvas.style.height = '100%';
             ctx.container.appendChild(pixiApp.canvas);
+            // Keep a model that rejects during setup off Ticker.shared; from()
+            // does not expose that partial instance to callers for disposal.
+            trackContainerSize(pixiApp);
             const loaded = await vendor.Live2DModel.from(config.modelUrl, {
+                autoUpdate: false,
                 autoHitTest: false,
                 autoFocus: false,
                 textureOptions: TEXTURE_OPTIONS,
             });
+            model = loaded;
             if (disposed) {
-                pixiApp.destroy(true, { children: true });
+                destroyResources();
                 return;
             }
-            app = pixiApp;
-            model = loaded;
+            modelSourceSize = {
+                width: Math.max(1, loaded.width),
+                height: Math.max(1, loaded.height),
+            };
             // Auto-fit the model into the container; the manifest scale multiplies
             // the fit and translate offsets from the center anchor.
-            const fit = Math.min(pixiApp.renderer.width / Math.max(1, loaded.width), pixiApp.renderer.height / Math.max(1, loaded.height)) * 0.92;
-            loaded.scale.set(fit * (config.scale ?? 1));
-            loaded.anchor.set(0.5);
-            loaded.position.set(pixiApp.renderer.width / 2 + (config.translate?.x ?? 0), pixiApp.renderer.height / 2 + (config.translate?.y ?? 0));
+            layoutModel(pixiApp, loaded, modelSourceSize, config);
             pixiApp.stage.addChild(loaded);
+            modelAttached = true;
+            loaded.automator.autoUpdate = true;
             // Resume the phase group once a tap motion finishes playing.
             loaded.on('motionFinish', () => {
                 if (tapPlaying) {
@@ -152,20 +248,20 @@ export const live2dRenderer = {
             unsubscribe = ctx.phase.subscribe(applyPhase);
         };
         void boot().catch(() => {
-            if (!disposed)
-                errorListener?.('load-failed');
+            try {
+                destroyResources();
+            }
+            finally {
+                if (!disposed)
+                    errorListener?.('load-failed');
+            }
         });
         return {
             dispose() {
                 if (disposed)
                     return;
                 disposed = true;
-                unsubscribe?.();
-                model = undefined;
-                if (app !== undefined) {
-                    app.destroy(true, { children: true });
-                    app = undefined;
-                }
+                destroyResources();
             },
             tap(x, y) {
                 const current = model;

package/lib/types/image-dimensions.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Minimal PNG/WebP dimension reader — header-only, no decoding, no
+ * dependencies. Used by the decoration registry to verify a strip's actual
+ * pixel geometry matches its descriptor (single-row sprite strip; the client
+ * renders by frame-column offsets, so a mismatched strip silently shows the
+ * wrong frames). Parsing is best-effort: an unrecognized or truncated header
+ * returns undefined (the caller decides whether to warn).
+ *
+ * PNG: signature (8) + IHDR chunk — length (4) + 'IHDR' (4) + width (4) +
+ * height (4), both big-endian uint32 at fixed offsets 16/20.
+ * WebP: RIFF header (12) + chunk — 'VP8X' extended (width-1/height-1 as
+ * little-endian uint24 at 24/27), 'VP8L' lossless (packed 14-bit dims at
+ * 21), or 'VP8 ' lossy (frame header, low 14 bits of the uint16 at 26/28).
+ * @module @linxin666/dsh-pet/image-dimensions
+ */
+export interface ImageDimensions {
+    width: number;
+    height: number;
+}
+/**
+ * Read image pixel dimensions from a PNG or WebP buffer. Returns undefined
+ * for formats this reader does not recognize (never throws). Callers treat
+ * undefined as "cannot verify", not as an error.
+ */
+export declare function imageDimensions(buf: Buffer): ImageDimensions | undefined;
+//# sourceMappingURL=image-dimensions.d.ts.map

package/lib/types/image-dimensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-dimensions.d.ts","sourceRoot":"","sources":["../../src/image-dimensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AA8CD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAGxE"}

package/lib/types/image-dimensions.js

@@ -0,0 +1,77 @@
+/**
+ * Minimal PNG/WebP dimension reader — header-only, no decoding, no
+ * dependencies. Used by the decoration registry to verify a strip's actual
+ * pixel geometry matches its descriptor (single-row sprite strip; the client
+ * renders by frame-column offsets, so a mismatched strip silently shows the
+ * wrong frames). Parsing is best-effort: an unrecognized or truncated header
+ * returns undefined (the caller decides whether to warn).
+ *
+ * PNG: signature (8) + IHDR chunk — length (4) + 'IHDR' (4) + width (4) +
+ * height (4), both big-endian uint32 at fixed offsets 16/20.
+ * WebP: RIFF header (12) + chunk — 'VP8X' extended (width-1/height-1 as
+ * little-endian uint24 at 24/27), 'VP8L' lossless (packed 14-bit dims at
+ * 21), or 'VP8 ' lossy (frame header, low 14 bits of the uint16 at 26/28).
+ * @module @linxin666/dsh-pet/image-dimensions
+ */
+const PNG_SIGNATURE = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+/** Read the pixel size of a PNG buffer, or undefined when unrecognized. */
+function pngDimensions(buf) {
+    if (buf.length < 24)
+        return undefined;
+    if (!buf.subarray(0, 8).equals(PNG_SIGNATURE))
+        return undefined;
+    if (buf.toString('ascii', 12, 16) !== 'IHDR')
+        return undefined;
+    return { width: buf.readUInt32BE(16), height: buf.readUInt32BE(20) };
+}
+/** Read the pixel size of a WebP buffer, or undefined when unrecognized. */
+function webpDimensions(buf) {
+    if (buf.length < 21)
+        return undefined;
+    if (buf.toString('ascii', 0, 4) !== 'RIFF')
+        return undefined;
+    if (buf.toString('ascii', 8, 12) !== 'WEBP')
+        return undefined;
+    const fourcc = buf.toString('ascii', 12, 16);
+    if (fourcc === 'VP8X') {
+        // Extended header: 1-byte flags at 20, then width-1/height-1 uint24 LE.
+        if (buf.length < 30)
+            return undefined;
+        return {
+            width: 1 + buf.readUIntLE(24, 3),
+            height: 1 + buf.readUIntLE(27, 3),
+        };
+    }
+    if (fourcc === 'VP8L') {
+        // Lossless header: 0x2f marker at 20, then 14-bit width / 14-bit height
+        // packed into the little-endian uint32 at 21.
+        if (buf.length < 25)
+            return undefined;
+        const bits = buf.readUInt32LE(21);
+        return {
+            width: 1 + (bits & 0x3fff),
+            height: 1 + ((bits >>> 14) & 0x3fff),
+        };
+    }
+    if (fourcc === 'VP8 ') {
+        // Lossy frame header: 3-byte tag + 3-byte start code, then width/height
+        // as uint16 LE whose low 14 bits carry the dimension.
+        if (buf.length < 30)
+            return undefined;
+        return {
+            width: buf.readUInt16LE(26) & 0x3fff,
+            height: buf.readUInt16LE(28) & 0x3fff,
+        };
+    }
+    return undefined;
+}
+/**
+ * Read image pixel dimensions from a PNG or WebP buffer. Returns undefined
+ * for formats this reader does not recognize (never throws). Callers treat
+ * undefined as "cannot verify", not as an error.
+ */
+export function imageDimensions(buf) {
+    if (buf.length >= 12 && buf.toString('ascii', 0, 4) === 'RIFF')
+        return webpDimensions(buf);
+    return pngDimensions(buf);
+}

package/lib/types/index.js

@@ -80,7 +80,7 @@ function applyImpl(ctx, config = {}) {
     // pattern as dsh-remote-web-ui's /api/pair family). The routes are
     // registered while the plugin is enabled; toggling the setting off makes
     // the pet API disappear until it is re-enabled.
-    const routes = makePetRoutes({ service });
+    const routes = makePetRoutes({ service, ctx });
     let disposeRoutes;
     const syncRoutes = () => {
         const enabled = current().enabled ?? true;

package/lib/types/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC7D,OAAO,EAAuB,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAC5F,OAAO,EAAuC,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAExG,OAAO,EAA8B,KAAK,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAElG,OAAO,EAAgE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAGrH,yDAAyD;AACzD,eAAO,MAAM,aAAa,EAAE,SAAS,YAAY,EAUhD,CAAA;AAED,6BAA6B;AAC7B,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,EAAE,OAAqC,CAAA;AACpE,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,IAAI,CAAA;AACpC,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,IAAI,CAAA;AAEtC;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAgC,CAAA;AAElF,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAQnG;AAeD,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,uDAAuD;IACvD,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,yEAAyE;IACzE,IAAI,EAAE,OAAO,CAAA;IACb,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB;AAED,2DAA2D;AAC3D,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,YAAY,EAAE;IACxD,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB,CAUA,CAAA;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAA;IACnB,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,eAAe,EAAE,MAAM,CAAA;IACvB,+DAA+D;IAC/D,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACxD,wFAAwF;IACxF,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC7B;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,SAAS,CAAC,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtC,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAClE,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;IACpD,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,QAAQ,EAAE,eAAe,CAAA;IACzB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,6BAA6B;IAC7B,IAAI,EAAE,OAAO,CAAA;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;IACzC,sFAAsF;IACtF,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAC1D,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAA;CACrB;AAED,uDAAuD;AACvD,MAAM,WAAW,QAAS,SAAQ,aAAa;IAC7C,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB;AAED,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,QAAQ,EAAE,CAAA;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,uFAAuF;IACvF,WAAW,EAAE,qBAAqB,EAAE,CAAA;IACpC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,2EAA2E;IAC3E,YAAY,IAAI,QAAQ,CAAA;IACxB;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,CAAA;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,eAAe,EAAE,CAAA;IAC/B,oCAAoC;IACpC,cAAc,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAAA;CACzD;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IACjB,sEAAsE;IACtE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAA;IAC1B,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAwB;AACxB,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,KAAK,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;CAC/B;AAkFD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAC1D,QAAQ,GAAG,SAAS,CAoEtB;AAmKD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAY,CAAA;AA2D1C,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAiE5D;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAiFxE;AAED,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,UAAU,CAAA;AAE5C,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,CAYrE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,CAoBpF;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEpD"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC7D,OAAO,EAAuB,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAC5F,OAAO,EAAuC,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAGxG,OAAO,EAA8B,KAAK,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAElG,OAAO,EAAgE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAGrH,yDAAyD;AACzD,eAAO,MAAM,aAAa,EAAE,SAAS,YAAY,EAUhD,CAAA;AAED,6BAA6B;AAC7B,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,EAAE,OAAqC,CAAA;AACpE,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,IAAI,CAAA;AACpC,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,IAAI,CAAA;AAEtC;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAgC,CAAA;AAElF,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAQnG;AAeD,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,uDAAuD;IACvD,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,yEAAyE;IACzE,IAAI,EAAE,OAAO,CAAA;IACb,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB;AAED,2DAA2D;AAC3D,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,YAAY,EAAE;IACxD,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB,CAUA,CAAA;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAA;IACnB,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,eAAe,EAAE,MAAM,CAAA;IACvB,+DAA+D;IAC/D,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACxD,wFAAwF;IACxF,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC7B;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,SAAS,CAAC,EAAE;QAAE,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtC,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAClE,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;IACpD,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,QAAQ,EAAE,eAAe,CAAA;IACzB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,6BAA6B;IAC7B,IAAI,EAAE,OAAO,CAAA;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;IACzC,sFAAsF;IACtF,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAC1D,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAA;CACrB;AAED,uDAAuD;AACvD,MAAM,WAAW,QAAS,SAAQ,aAAa;IAC7C,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB;AAED,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,QAAQ,EAAE,CAAA;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,uFAAuF;IACvF,WAAW,EAAE,qBAAqB,EAAE,CAAA;IACpC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,2EAA2E;IAC3E,YAAY,IAAI,QAAQ,CAAA;IACxB;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,CAAA;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,eAAe,EAAE,CAAA;IAC/B,oCAAoC;IACpC,cAAc,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAAA;CACzD;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IACjB,sEAAsE;IACtE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAA;IAC1B,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAwB;AACxB,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,KAAK,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;CAC/B;AAkFD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAC1D,QAAQ,GAAG,SAAS,CAoEtB;AAmKD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAY,CAAA;AA2D1C,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAuG5D;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAiFxE;AAED,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,UAAU,CAAA;AAE5C,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,CAYrE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,CAoBpF;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEpD"}

package/lib/types/registry.js

@@ -26,13 +26,14 @@
  * whale-girl manifest overrides its own durations.
  * @module @linxin666/dsh-pet/registry
  */
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { closeSync, existsSync, openSync, readFileSync, readSync, readdirSync, statSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { normalizePetRemarks } from './remarks.js';
 import { mergeVoicePacks, normalizeVoicePack } from './voice-pack.js';
 import { parseDecorationManifest } from './decoration.js';
+import { imageDimensions } from './image-dimensions.js';
 import { PET_DECORATION_API_VERSION } from './contracts/status-decoration.js';
 import { dshHome } from './dsh-home.js';
 import { parsePetManifest } from './manifest-v2.js';
@@ -473,6 +474,29 @@ function loadVoicePackFile(file, options) {
 }
 /** Decoration asset URL prefix (served by the decoration route, M5). */
 export const DECORATION_ASSET_PREFIX = '/api/pet/decoration';
+/** Read the pixel dimensions of a decoration strip (PNG/WebP), if decodable. */
+function readImageDimensions(file) {
+    let header;
+    try {
+        // Only the header is needed for dimensions; cap the read so a huge or
+        // corrupt strip cannot balloon memory during the registry scan.
+        const fd = openSync(file, 'r');
+        try {
+            header = Buffer.alloc(64);
+            const read = readSync(fd, header, 0, header.length, 0);
+            if (read < 0)
+                return undefined;
+            header = header.subarray(0, read);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return imageDimensions(header);
+}
 /**
  * Scan one directory of decoration folders ('decoration.json' + strip).
  * Later scans override earlier ones on id collision; a bad descriptor warns
@@ -523,6 +547,24 @@ function scanDecorationDir(dir, options) {
             options.warnings?.push(message);
             options.diagnostics?.push({ level: 'warning', source: entryDir, message });
         }
+        else {
+            // Geometry check: the client renders the strip as a single row of
+            // 'columns' frames (background-position advances by frame width only),
+            // so the strip must be exactly cell.width * columns wide and cell.height
+            // tall. A mismatched strip silently shows the wrong/partial frames —
+            // warn-and-keep, mirroring the missing-strip discipline (never throw).
+            const actual = readImageDimensions(join(entryDir, manifest.entry));
+            if (actual !== undefined) {
+                const expectedWidth = manifest.cell.width * manifest.columns;
+                if (actual.width !== expectedWidth || actual.height !== manifest.cell.height) {
+                    const message = 'decoration ' + manifest.id + ': strip ' + actual.width + 'x' + actual.height
+                        + ' does not match cell ' + manifest.cell.width + 'x' + manifest.cell.height + ' x ' + manifest.columns
+                        + ' columns (expected ' + expectedWidth + 'x' + manifest.cell.height + '); frames will render wrong';
+                    options.warnings?.push(message);
+                    options.diagnostics?.push({ level: 'warning', source: entryDir, message });
+                }
+            }
+        }
         entries.push({
             apiVersion: PET_DECORATION_API_VERSION,
             id: manifest.id,

package/lib/types/routes.d.ts

@@ -5,9 +5,13 @@
  * domains are platform-registered, so the pet serves its own API and media —
  * the same pattern as dsh-remote-web-ui's '/api/pair' family. The asset route
  * is one prefix registration serving every registry entry (manifest, atlas,
- * optional previews), so adding a pet never touches route wiring.
+ * optional previews), so adding a pet never touches route wiring. Both the
+ * JSON API, the asset prefix, and the Live2D runtime prefix are loopback-only
+ * by default; a live paired-device cookie is an extra allow path when
+ * remote-web-ui is loaded.
  * @module @linxin666/dsh-pet/routes
  */
+import type { Context } from '@deepseek-ai/cordis';
 import type { WebRoute } from '@deepseek-ai/dsh-host-webserver';
 import type { PetService } from './service.ts';
 /** Browser-facing base path of the pet API. */
@@ -53,6 +57,7 @@ export interface PetRuntimeRoots {
 /** Build the full route family (API + assets + runtime) for one service. */
 export declare function makePetRoutes(deps: {
     service: PetService;
+    ctx: Context;
     assetCaps?: PetAssetCaps;
 } & PetRuntimeRoots): WebRoute[];
 export { petPackageRoot } from './registry.ts';

package/lib/types/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAM9C,+CAA+C;AAC/C,eAAO,MAAM,cAAc,aAAa,CAAA;AAExC,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,SAAS,CAAA;AAMtC;;;;GAIG;AACH,eAAO,MAAM,cAAc;IACzB,yBAAyB;aACzB,QAAQ;IACR,iDAAiD;aACjD,KAAK;IACL,8EAA8E;aAC9E,KAAK;CACG,CAAA;AAEV,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAWD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUrF;AAsPD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,QAA8B,CAAA;AAe7D,4EAA4E;AAC5E,eAAO,MAAM,eAAe,QAAmB,CAAA;AAE/C,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAwMD,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG,eAAe,GAAG,QAAQ,EAAE,CAwDnH;AAGD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAM9C,+CAA+C;AAC/C,eAAO,MAAM,cAAc,aAAa,CAAA;AAExC,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,SAAS,CAAA;AAMtC;;;;GAIG;AACH,eAAO,MAAM,cAAc;IACzB,yBAAyB;aACzB,QAAQ;IACR,iDAAiD;aACjD,KAAK;IACL,8EAA8E;aAC9E,KAAK;CACG,CAAA;AAEV,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAWD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUrF;AAsPD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,QAA8B,CAAA;AAe7D,4EAA4E;AAC5E,eAAO,MAAM,eAAe,QAAmB,CAAA;AAE/C,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAwMD,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG,eAAe,GAAG,QAAQ,EAAE,CAwDjI;AAGD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA"}

package/lib/types/routes.js

@@ -5,14 +5,17 @@
  * domains are platform-registered, so the pet serves its own API and media —
  * the same pattern as dsh-remote-web-ui's '/api/pair' family. The asset route
  * is one prefix registration serving every registry entry (manifest, atlas,
- * optional previews), so adding a pet never touches route wiring.
+ * optional previews), so adding a pet never touches route wiring. Both the
+ * JSON API, the asset prefix, and the Live2D runtime prefix are loopback-only
+ * by default; a live paired-device cookie is an extra allow path when
+ * remote-web-ui is loaded.
  * @module @linxin666/dsh-pet/routes
  */
 import { existsSync, realpathSync, statSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import { join, sep } from 'node:path';
 import { DECORATION_ASSET_PREFIX, petEntryView, petPackageRoot } from './registry.js';
-import { isLoopbackRequest } from './loopback.js';
+import { isPetAllowed } from './access.js';
 import { dshHome } from './dsh-home.js';
 /** Browser-facing base path of the pet API. */
 export const PET_API_PREFIX = '/api/pet';
@@ -114,20 +117,20 @@ function readJsonBody(req) {
         req.on('error', reject);
     });
 }
-/** Shared route fence: the browser UI is a loopback client; LAN hosts stay out. */
-function guard(req, res) {
-    if (isLoopbackRequest(req))
+/** Shared route fence: loopback always passes; a live paired-device cookie is an extra allow path. */
+function guard(ctx, req, res) {
+    if (isPetAllowed(ctx, req))
         return true;
     json(res, 403, { ok: false, error: 'forbidden: loopback-only' });
     return false;
 }
 /** Wrap one async service call as a GET JSON route. */
-function getRoute(path, run) {
+function getRoute(ctx, path, run) {
     return {
         kind: 'exact',
         path,
         handler: (req, res) => {
-            if (!guard(req, res))
+            if (!guard(ctx, req, res))
                 return;
             if (!requireMethod(req, res, 'GET'))
                 return;
@@ -138,12 +141,12 @@ function getRoute(path, run) {
     };
 }
 /** Wrap one async service call as a POST JSON route (body passed through). */
-function postRoute(path, run) {
+function postRoute(ctx, path, run) {
     return {
         kind: 'exact',
         path,
         handler: (req, res) => {
-            if (!guard(req, res))
+            if (!guard(ctx, req, res))
                 return Promise.resolve();
             if (!requireMethod(req, res, 'POST'))
                 return Promise.resolve();
@@ -178,10 +181,10 @@ function dirAliases(registry) {
  * match; containedRealpath stays as the second layer. Composed pets without
  * a manifest file get a synthesized pet.json.
  */
-function assetHandler(registry, caps) {
+function assetHandler(ctx, registry, caps) {
     const aliases = dirAliases(registry);
-    return (req, res) => {
-        if (!guard(req, res))
+    return ((req, res) => {
+        if (!guard(ctx, req, res))
             return;
         if (req.method !== 'GET' && req.method !== 'HEAD') {
             res.writeHead(405);
@@ -289,7 +292,7 @@ function assetHandler(registry, caps) {
             res.end();
             return;
         }
-        readFile(resolved).then((body) => {
+        return readFile(resolved).then((body) => {
             res.writeHead(200, {
                 'content-type': mimeFor(resolved),
                 'content-length': String(body.byteLength),
@@ -304,7 +307,7 @@ function assetHandler(registry, caps) {
             res.writeHead(404);
             res.end();
         });
-    };
+    });
 }
 /** Browser-facing base path of the plugin runtime files (pet-center M3). */
 export const PET_RUNTIME_PREFIX = PET_API_PREFIX + '/runtime';
@@ -328,9 +331,9 @@ export const PET_RUNTIME_CAP = 16 * 1024 * 1024;
  * guidance (the Cubism Core is user-supplied, so its absence is a normal
  * state, not an error).
  */
-function runtimeHandler(roots) {
-    return (req, res) => {
-        if (!guard(req, res))
+function runtimeHandler(ctx, roots) {
+    return ((req, res) => {
+        if (!guard(ctx, req, res))
             return;
         if (req.method !== 'GET' && req.method !== 'HEAD') {
             res.writeHead(405);
@@ -387,7 +390,7 @@ function runtimeHandler(roots) {
             res.end();
             return;
         }
-        readFile(resolved).then((body) => {
+        return readFile(resolved).then((body) => {
             res.writeHead(200, {
                 'content-type': name.endsWith('.map') ? 'application/json' : 'application/javascript; charset=utf-8',
                 'content-length': String(body.byteLength),
@@ -402,7 +405,7 @@ function runtimeHandler(roots) {
             res.writeHead(404);
             res.end();
         });
-    };
+    });
 }
 /**
  * The decoration asset handler behind '/api/pet/decoration/<id>/<file>'
@@ -411,9 +414,9 @@ function runtimeHandler(roots) {
  * match, with realpath containment and the same size ceilings as pet
  * assets. Crafted '..' or '.' segments never match the normalized closure.
  */
-function decorationHandler(registry, caps) {
+function decorationHandler(ctx, registry, caps) {
     return (req, res) => {
-        if (!guard(req, res))
+        if (!guard(ctx, req, res))
             return;
         if (req.method !== 'GET' && req.method !== 'HEAD') {
             res.writeHead(405);
@@ -529,36 +532,36 @@ function decorationHandler(registry, caps) {
 }
 /** Build the full route family (API + assets + runtime) for one service. */
 export function makePetRoutes(deps) {
-    const { service } = deps;
+    const { service, ctx } = deps;
     const apiRoutes = [
-        getRoute(PET_API_PREFIX + '/state', () => service.state()),
-        getRoute(PET_API_PREFIX + '/pets', () => service.pets()),
-        getRoute(PET_API_PREFIX + '/diagnostics', () => service.diagnostics()),
-        postRoute(PET_API_PREFIX + '/interact', (body) => {
+        getRoute(ctx, PET_API_PREFIX + '/state', () => service.state()),
+        getRoute(ctx, PET_API_PREFIX + '/pets', () => service.pets()),
+        getRoute(ctx, PET_API_PREFIX + '/diagnostics', () => service.diagnostics()),
+        postRoute(ctx, PET_API_PREFIX + '/interact', (body) => {
             const kind = body.kind;
             if (kind !== 'pet' && kind !== 'feed')
                 return Promise.reject(new Error('invalid-kind'));
             return service.interact(kind);
         }),
-        postRoute(PET_API_PREFIX + '/set-visible', (body) => {
+        postRoute(ctx, PET_API_PREFIX + '/set-visible', (body) => {
             const visible = body.visible;
             if (typeof visible !== 'boolean')
                 return Promise.reject(new Error('invalid-visible'));
             return service.setVisible(visible);
         }),
-        postRoute(PET_API_PREFIX + '/set-config', (body) => service.setConfig({
+        postRoute(ctx, PET_API_PREFIX + '/set-config', (body) => service.setConfig({
             ...(typeof body.size === 'number' ? { size: body.size } : {}),
             ...(typeof body.right === 'number' ? { right: body.right } : {}),
             ...(typeof body.bottom === 'number' ? { bottom: body.bottom } : {}),
             ...(typeof body.visible === 'boolean' ? { visible: body.visible } : {}),
         })),
-        postRoute(PET_API_PREFIX + '/set-name', (body) => {
+        postRoute(ctx, PET_API_PREFIX + '/set-name', (body) => {
             const name = body.name;
             if (typeof name !== 'string')
                 return Promise.reject(new Error('invalid-name'));
             return service.setName(name);
         }),
-        postRoute(PET_API_PREFIX + '/set-pet', (body) => {
+        postRoute(ctx, PET_API_PREFIX + '/set-pet', (body) => {
             const petId = body.petId;
             if (typeof petId !== 'string')
                 return Promise.reject(new Error('invalid-pet'));
@@ -568,12 +571,12 @@ export function makePetRoutes(deps) {
     const assetRoute = {
         kind: 'prefix',
         path: PET_ASSET_PREFIX,
-        handler: assetHandler(service.registrySnapshot(), deps.assetCaps ?? PET_ASSET_CAPS),
+        handler: assetHandler(ctx, service.registrySnapshot(), deps.assetCaps ?? PET_ASSET_CAPS),
     };
     const runtimeRoute = {
         kind: 'prefix',
         path: PET_RUNTIME_PREFIX,
-        handler: runtimeHandler({
+        handler: runtimeHandler(ctx, {
             runtimeDir: deps.runtimeDir ?? join(dshHome(), 'pets', '.runtime'),
             vendorDir: deps.vendorDir ?? join(petPackageRoot(import.meta.url), 'lib'),
         }),
@@ -581,7 +584,7 @@ export function makePetRoutes(deps) {
     const decorationRoute = {
         kind: 'prefix',
         path: DECORATION_ASSET_PREFIX,
-        handler: decorationHandler(service.registrySnapshot(), deps.assetCaps ?? PET_ASSET_CAPS),
+        handler: decorationHandler(ctx, service.registrySnapshot(), deps.assetCaps ?? PET_ASSET_CAPS),
     };
     return [...apiRoutes, assetRoute, runtimeRoute, decorationRoute];
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-pet",
   "description": "Multi-pet companion plugin for the dsh web GUI: a registry-driven floating pet that reacts to model activity, with per-pet naming, petting/feeding interactions and an affinity score",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"