@michengai/dsh-automation 1.0.6 → 1.0.8

package/lib/index.js

@@ -2707,10 +2707,10 @@ function isValidJWT(token, algorithm = null) {
     const tokensParts = token.split(".");
     if (tokensParts.length !== 3)
       return false;
-    const [header2] = tokensParts;
-    if (!header2)
+    const [header3] = tokensParts;
+    if (!header3)
       return false;
-    const parsedHeader = JSON.parse(atob(header2));
+    const parsedHeader = JSON.parse(atob(header3));
     if ("typ" in parsedHeader && parsedHeader?.typ !== "JWT")
       return false;
     if (!parsedHeader.alg)
@@ -21629,8 +21629,8 @@ async function settlesWithin(promise2, timeoutMs) {
   try {
     return await Promise.race([
       promise2.then(() => true, () => false),
-      new Promise((resolve2) => {
-        timer = setTimeout(() => resolve2(false), timeoutMs);
+      new Promise((resolve3) => {
+        timer = setTimeout(() => resolve3(false), timeoutMs);
       })
     ]);
   } finally {
@@ -21771,19 +21771,19 @@ async function executeAutomationRun(ctx, definition, run, config2) {
     let timedOut = false;
     let aborted2 = false;
     const idle = handle.agent.whenIdle();
-    const deadline = new Promise((resolve2) => {
+    const deadline = new Promise((resolve3) => {
       timeout = setTimeout(() => {
         timedOut = true;
         handle?.agent.cancel({ kind: "hook", reason: "automation run timeout" });
-        resolve2();
+        resolve3();
       }, config2.runTimeoutMs);
     });
-    const cancellation = new Promise((resolve2) => {
+    const cancellation = new Promise((resolve3) => {
       if (config2.signal === void 0) return;
       const cancel = () => {
         aborted2 = true;
         handle?.agent.cancel({ kind: "hook", reason: "automation service disposed" });
-        resolve2();
+        resolve3();
       };
       if (config2.signal.aborted) cancel();
       else {
@@ -22703,8 +22703,8 @@ var AutomationService = class _AutomationService {
 function readListedSessionId(item) {
   if (typeof item !== "object" || item === null) return void 0;
   const value = item;
-  const header2 = typeof value.header === "object" && value.header !== null ? value.header : void 0;
-  for (const id of [header2?.id, value.id]) {
+  const header3 = typeof value.header === "object" && value.header !== null ? value.header : void 0;
+  for (const id of [header3?.id, value.id]) {
     if (typeof id === "string" && id.trim() !== "") return id;
   }
   return void 0;
@@ -23822,6 +23822,13 @@ function registerPluginUpdater(ctx, options) {
     path: options.endpoint,
     handler: async (request, response) => {
       try {
+        if (options.isEnabled) {
+          const allowed = await options.isEnabled();
+          if (!allowed) {
+            json3(response, 403, { ok: false, error: "\u5728\u7EBF\u66F4\u65B0\u5DF2\u88AB\u7981\u7528\u3002" });
+            return;
+          }
+        }
         const target = runtime(host);
         if (request.method === "GET" || request.method === "HEAD") {
           const payload = await status(options, target);
@@ -23871,6 +23878,275 @@ function registerPluginUpdater(ctx, options) {
   });
 }
 
+// src/settings-manager.ts
+import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, writeFileSync } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join2, resolve as resolve2 } from "node:path";
+var SETTINGS_API_HEADER = "x-michengai-client";
+var MAX_SETTINGS_BODY_BYTES = 64 * 1024;
+function resolveProfileDir(ctx) {
+  try {
+    return resolveUpdateRuntime(ctx).profileDir;
+  } catch {
+    const env = process.env;
+    const home = homedir3();
+    return resolve2(env.DSH_PROFILE_DIR ?? resolve2(home, ".dsh", "profiles", "web"));
+  }
+}
+function header2(request, name2) {
+  const value = request.headers?.[name2];
+  return Array.isArray(value) ? value[0] : value;
+}
+function validateApiMutation(request) {
+  const method = (request.method ?? "GET").toUpperCase();
+  if (method === "GET" || method === "HEAD") return void 0;
+  const marker = header2(request, SETTINGS_API_HEADER);
+  if (marker !== "1") return { status: 403, error: "forbidden mutation request" };
+  const contentType = header2(request, "content-type")?.split(";", 1)[0]?.trim().toLowerCase();
+  if (contentType !== "application/json") return { status: 415, error: "content-type must be application/json" };
+  return void 0;
+}
+var SettingsManager = class {
+  file;
+  hostUpdateDisabled;
+  store = {};
+  constructor(options) {
+    this.hostUpdateDisabled = options.hostUpdateDisabled === true;
+    if (options.stateDir !== void 0 && options.stateDir !== "") {
+      this.file = isAbsolute2(options.stateDir) ? join2(options.stateDir, "settings.json") : resolve2(options.stateDir, "settings.json");
+    } else {
+      const profileDir = resolveProfileDir(options.ctx);
+      this.file = join2(profileDir, "automation-settings.json");
+    }
+    this.load();
+  }
+  load() {
+    if (!existsSync3(this.file)) return;
+    try {
+      const content = readFileSync3(this.file, "utf8");
+      const parsed = JSON.parse(content);
+      if (typeof parsed === "object" && parsed !== null) {
+        const item = parsed;
+        this.store = {
+          sidebarEntry: typeof item.sidebarEntry === "boolean" ? item.sidebarEntry : void 0,
+          onlineUpdate: typeof item.onlineUpdate === "boolean" ? item.onlineUpdate : void 0,
+          hideOfficialSchedule: typeof item.hideOfficialSchedule === "boolean" ? item.hideOfficialSchedule : void 0
+        };
+      }
+    } catch {
+      this.store = {};
+    }
+  }
+  flush() {
+    try {
+      const dir = dirname2(this.file);
+      if (!existsSync3(dir)) {
+        mkdirSync(dir, { recursive: true });
+      }
+      writeFileSync(this.file, JSON.stringify(this.store, null, 2), "utf8");
+    } catch {
+    }
+  }
+  getSidebarEntry() {
+    return this.store.sidebarEntry !== false;
+  }
+  async setSidebarEntry(enabled) {
+    if (typeof enabled !== "boolean") throw new Error("enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C");
+    this.store.sidebarEntry = enabled;
+    this.flush();
+    return enabled;
+  }
+  getHideOfficialSchedule() {
+    return this.store.hideOfficialSchedule ?? this.getSidebarEntry();
+  }
+  async setHideOfficialSchedule(enabled) {
+    if (typeof enabled !== "boolean") throw new Error("enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C");
+    this.store.hideOfficialSchedule = enabled;
+    this.flush();
+    return enabled;
+  }
+  isHostUpdateDisabled() {
+    return this.hostUpdateDisabled;
+  }
+  isUpdateEnabled() {
+    if (this.hostUpdateDisabled) return false;
+    return this.store.onlineUpdate !== false;
+  }
+  async setOnlineUpdate(enabled) {
+    if (typeof enabled !== "boolean") throw new Error("enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C");
+    if (this.hostUpdateDisabled) throw new Error("\u5728\u7EBF\u66F4\u65B0\u5DF2\u88AB\u5BBF\u4E3B\u914D\u7F6E\u9501\u5B9A\u7981\u7528");
+    this.store.onlineUpdate = enabled;
+    this.flush();
+    return enabled;
+  }
+};
+function registerSettingsApi(ctx, manager) {
+  const host = ctx;
+  if (typeof host.webServer?.register !== "function") return () => {
+  };
+  const json4 = (res, status2, body) => {
+    res.writeHead(status2, {
+      "content-type": "application/json; charset=utf-8",
+      "cache-control": "no-store"
+    });
+    res.end(JSON.stringify(body));
+  };
+  const checkAuthAndMutation = (request, response) => {
+    const connection = typeof ctx.get === "function" ? ctx.get("connection") : void 0;
+    if (typeof connection?.requestRejection === "function") {
+      const rejection = connection.requestRejection(request);
+      if (rejection !== void 0) {
+        json4(response, rejection, { ok: false, error: rejection === 401 ? "\u8BF7\u5148\u767B\u5F55 DSH / Sign in to DSH first" : "\u5BBF\u4E3B\u62D2\u7EDD\u6B64\u8BF7\u6C42 / Request forbidden" });
+        return false;
+      }
+    }
+    const mutationError = validateApiMutation(request);
+    if (mutationError !== void 0) {
+      json4(response, mutationError.status, { ok: false, error: mutationError.error });
+      return false;
+    }
+    return true;
+  };
+  const readBody = (req) => new Promise((resolveBody) => {
+    const chunks = [];
+    let received = 0;
+    let oversized = false;
+    req.on("data", (chunk) => {
+      received += chunk.length;
+      if (received > MAX_SETTINGS_BODY_BYTES) {
+        oversized = true;
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on("end", () => {
+      if (oversized) {
+        resolveBody({ ok: false, status: 413, error: "payload too large" });
+        return;
+      }
+      try {
+        const raw = Buffer.concat(chunks).toString("utf8");
+        resolveBody({ ok: true, data: raw ? JSON.parse(raw) : {} });
+      } catch {
+        resolveBody({ ok: false, status: 400, error: "invalid json" });
+      }
+    });
+    req.on("error", () => resolveBody({ ok: false, status: 400, error: "read error" }));
+  });
+  const offSidebar = host.webServer.register({
+    kind: "exact",
+    path: "/api/michengai/dsh-automation/sidebar-entry",
+    handler: async (request, response) => {
+      if (!checkAuthAndMutation(request, response)) return;
+      const method = request.method;
+      if (method === "GET" || method === "HEAD") {
+        if (method === "HEAD") {
+          response.writeHead(200, { "cache-control": "no-store" });
+          response.end();
+          return;
+        }
+        json4(response, 200, { ok: true, enabled: manager.getSidebarEntry() });
+        return;
+      }
+      if (method === "POST") {
+        const bodyRes = await readBody(request);
+        if (!bodyRes.ok || !bodyRes.data || typeof bodyRes.data.enabled !== "boolean") {
+          json4(response, bodyRes.status ?? 400, { ok: false, error: bodyRes.error ?? "enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C" });
+          return;
+        }
+        const enabled = await manager.setSidebarEntry(bodyRes.data.enabled);
+        json4(response, 200, { ok: true, enabled });
+        return;
+      }
+      response.writeHead(405, { allow: "GET, HEAD, POST" });
+      response.end();
+    }
+  });
+  const offUpdate = host.webServer.register({
+    kind: "exact",
+    path: "/api/michengai/dsh-automation/online-update",
+    handler: async (request, response) => {
+      if (!checkAuthAndMutation(request, response)) return;
+      const method = request.method;
+      if (method === "GET" || method === "HEAD") {
+        if (method === "HEAD") {
+          response.writeHead(200, { "cache-control": "no-store" });
+          response.end();
+          return;
+        }
+        json4(response, 200, {
+          ok: true,
+          enabled: manager.isUpdateEnabled(),
+          locked: manager.isHostUpdateDisabled()
+        });
+        return;
+      }
+      if (method === "POST") {
+        if (manager.isHostUpdateDisabled()) {
+          json4(response, 403, { ok: false, error: "\u5728\u7EBF\u66F4\u65B0\u5DF2\u88AB\u5BBF\u4E3B\u914D\u7F6E\u9501\u5B9A\u7981\u7528" });
+          return;
+        }
+        const bodyRes = await readBody(request);
+        if (!bodyRes.ok || !bodyRes.data || typeof bodyRes.data.enabled !== "boolean") {
+          json4(response, bodyRes.status ?? 400, { ok: false, error: bodyRes.error ?? "enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C" });
+          return;
+        }
+        const enabled = await manager.setOnlineUpdate(bodyRes.data.enabled);
+        json4(response, 200, { ok: true, enabled });
+        return;
+      }
+      response.writeHead(405, { allow: "GET, HEAD, POST" });
+      response.end();
+    }
+  });
+  const offOfficial = host.webServer.register({
+    kind: "exact",
+    path: "/api/michengai/dsh-automation/official-schedule",
+    handler: async (request, response) => {
+      if (!checkAuthAndMutation(request, response)) return;
+      const method = request.method;
+      if (method === "GET" || method === "HEAD") {
+        if (method === "HEAD") {
+          response.writeHead(200, { "cache-control": "no-store" });
+          response.end();
+          return;
+        }
+        json4(response, 200, {
+          ok: true,
+          enabled: manager.getHideOfficialSchedule()
+        });
+        return;
+      }
+      if (method === "POST") {
+        const bodyRes = await readBody(request);
+        if (!bodyRes.ok || !bodyRes.data || typeof bodyRes.data.enabled !== "boolean") {
+          json4(response, bodyRes.status ?? 400, { ok: false, error: bodyRes.error ?? "enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C" });
+          return;
+        }
+        const enabled = await manager.setHideOfficialSchedule(bodyRes.data.enabled);
+        json4(response, 200, { ok: true, enabled });
+        return;
+      }
+      response.writeHead(405, { allow: "GET, HEAD, POST" });
+      response.end();
+    }
+  });
+  return () => {
+    try {
+      offSidebar();
+    } catch {
+    }
+    try {
+      offUpdate();
+    } catch {
+    }
+    try {
+      offOfficial();
+    } catch {
+    }
+  };
+}
+
 // src/index.ts
 var name = "dsh-automation";
 var inject = [
@@ -23889,7 +24165,10 @@ var inject = [
 var Config = z2.object({
   runTimeoutMinutes: z2.number().step(1).min(1).max(1440).default(60),
   misfireGraceMinutes: z2.number().step(1).min(0).max(10080).default(15),
-  historyLimit: z2.number().step(1).min(1).max(5e3).default(200)
+  historyLimit: z2.number().step(1).min(1).max(5e3).default(200),
+  stateDir: z2.string(),
+  updater: z2.boolean(),
+  onlineUpdate: z2.boolean()
 });
 var MUTATING_TOOLS = /* @__PURE__ */ new Set([
   "automation_create",
@@ -23915,11 +24194,19 @@ function humanApprovalReason(toolName) {
   return toolName === "automation_delete" ? "\u6B64\u64CD\u4F5C\u4F1A\u6C38\u4E45\u5220\u9664\u81EA\u52A8\u5316\u5B9A\u4E49\u3002\u8FD0\u884C\u5386\u53F2\u4F1A\u4FDD\u7559\uFF0C\u4F46\u8BA1\u5212\u65E0\u6CD5\u81EA\u52A8\u6062\u590D\u3002" : "\u6B64\u64CD\u4F5C\u4F1A\u521B\u5EFA\u6216\u6269\u5927\u65E0\u4EBA\u503C\u5B88\u7684\u672A\u6765\u5DE5\u4F5C\u3002\u8BF7\u6838\u5BF9\u4EFB\u52A1\u8BF4\u660E\u3001\u8BA1\u5212\u3001\u5DE5\u4F5C\u533A\u548C\u6743\u9650\u8FB9\u754C\u3002";
 }
 async function apply(ctx, rawConfig) {
+  const hostUpdateDisabled = rawConfig.updater === false || rawConfig.onlineUpdate === false;
+  const settingsManager = new SettingsManager({
+    ctx,
+    ...rawConfig.stateDir !== void 0 ? { stateDir: rawConfig.stateDir } : {},
+    hostUpdateDisabled
+  });
   ctx.effect(() => registerPluginUpdater(ctx, {
     endpoint: "/api/michengai/dsh-automation/update",
     packageName: "@michengai/dsh-automation",
-    manifestUrl: new URL("../package.json", import.meta.url)
+    manifestUrl: new URL("../package.json", import.meta.url),
+    isEnabled: async () => !hostUpdateDisabled && settingsManager.isUpdateEnabled()
   }), "dsh-automation: plugin updater");
+  ctx.effect(() => registerSettingsApi(ctx, settingsManager), "dsh-automation: settings api");
   const config2 = rawConfig;
   await ctx.effect(async () => {
     let alive = true;

package/lib/types/client/api-base.d.ts

@@ -0,0 +1,20 @@
+/**
+ * API 基址解析：把插件自己的根绝对路径端点解析到页面实际所在的 base 之下。
+ *
+ * 为什么需要：DSH 可能被挂在带路径前缀的反向代理后面（例如 https://host/app/dsh/，
+ * 网关转发前剥掉前缀）。此时浏览器把根绝对路径 "/api/..." 解析到站点根，前缀丢失，
+ * 网关返回自己的 HTML 404，面板就报「服务端返回非 JSON 响应（HTTP 404）」。
+ *
+ * 为什么这么解析：宿主前端同样以页面 base 解析 API 路径（参见 dsh-client-connection 的
+ * openConnectionWebSocket 与 dsh-client-file-upload 的 new URL(path, document.baseURI)），
+ * 这里沿用同一约定——先去掉前导 "/"，再用 new URL 相对解析；若直接 new URL("/api/x", base)
+ * 会丢弃 base 的路径段，前缀就没了。
+ */
+/**
+ * 解析插件端点 URL。
+ *
+ * @param path 端点路径，通常是 "/api/michengai/dsh-automation/xxx" 这类根绝对路径。
+ * @returns 基于页面 base 的绝对 URL；相对路径、完整 URL、协议相对 URL、无 document
+ *          或 base 非法时原样返回，保证非浏览器环境与测试夹具行为不变。
+ */
+export declare function resolveApiUrl(path: string): string;

package/lib/types/client/bundle-config.d.ts

@@ -0,0 +1,59 @@
+import { type ReactElement } from 'react';
+import type { ClientContext } from './contracts.js';
+export declare const BUNDLE_KEY = "@michengai/dsh-automation";
+export declare const SIDEBAR_PANEL_ID = "dsh-automation";
+export declare const SIDEBAR_PANEL_ORDER = 4;
+export declare const HIDE_OFFICIAL_SCHEDULE_STYLE_TAG = "dsh-automation-hide-official-schedule";
+export declare const STORAGE_KEY_HIDE_OFFICIAL = "dsh-automation.hide-official-schedule";
+export declare const STORAGE_KEY_SIDEBAR_ENTRY = "dsh-automation.sidebar-entry";
+export declare function readCachedSidebarEntry(): boolean;
+export declare function readCachedHideOfficial(): boolean;
+export declare function applyHideOfficialScheduleStyle(hidden: boolean): void;
+export declare function AutomationSidebarIcon(props: {
+    readonly size?: number;
+}): ReactElement;
+export interface BundleConfigCardProps {
+    readonly t: (key: string) => string;
+    readonly enabled: boolean;
+    readonly disabled?: boolean;
+    readonly onToggle: (next: boolean) => void;
+    readonly onlineUpdateEnabled?: boolean;
+    readonly onlineUpdateDisabled?: boolean;
+    readonly onlineUpdateLocked?: boolean;
+    readonly onToggleOnlineUpdate?: (next: boolean) => void;
+    readonly hideOfficialScheduleEnabled?: boolean;
+    readonly hideOfficialScheduleDisabled?: boolean;
+    readonly onToggleHideOfficialSchedule?: (next: boolean) => void;
+}
+export declare function AutomationBundleConfigCard(props: BundleConfigCardProps): ReactElement;
+export interface BundleConfigWrapperProps {
+    readonly t: (key: string) => string;
+    readonly getEnabled: () => boolean;
+    readonly setSidebar: (next: boolean) => Promise<boolean>;
+    readonly getOnlineUpdateEnabled?: () => boolean;
+    readonly getOnlineUpdateLocked?: () => boolean;
+    readonly setOnlineUpdate?: (next: boolean) => Promise<boolean>;
+    readonly getHideOfficialScheduleEnabled?: () => boolean;
+    readonly setHideOfficialSchedule?: (next: boolean) => Promise<boolean>;
+    readonly subscribe: (listener: () => void) => () => void;
+}
+export declare function AutomationBundleConfigCardWrapper(props: BundleConfigWrapperProps): ReactElement;
+export interface SetupSidebarEntryOptions {
+    readonly callApi: (path: string, options?: RequestInit) => Promise<any>;
+    readonly renderPanel: (ownerProps: any) => ReactElement;
+    readonly ns: string;
+    readonly injectProps?: Record<string, unknown> | (() => Record<string, unknown>);
+    readonly onOnlineUpdateChange?: (enabled: boolean) => void;
+}
+export interface SidebarController {
+    isEnabled(): boolean;
+    isSupported(): boolean;
+    setEnabled(next: boolean): Promise<boolean>;
+    isOnlineUpdateEnabled(): boolean;
+    isOnlineUpdateLocked(): boolean;
+    setOnlineUpdate(next: boolean): Promise<boolean>;
+    isHideOfficialScheduleEnabled(): boolean;
+    setHideOfficialSchedule(next: boolean): Promise<boolean>;
+    destroy(): void;
+}
+export declare function setupSidebarEntry(ctx: ClientContext, options: SetupSidebarEntryOptions): SidebarController;

package/lib/types/client/contracts.d.ts

@@ -21,6 +21,7 @@ export interface ClientRpc {
 export interface SlotRegisterOptions {
     readonly name: string;
     readonly id?: string;
+    readonly key?: string;
     readonly order?: number;
     readonly locale?: string;
     readonly label?: () => string;

package/lib/types/client/index.d.ts

@@ -2,3 +2,5 @@ import type { ClientContext } from './contracts.js';
 export declare const name = "dsh-automation-client";
 export declare const inject: string[];
 export declare function apply(ctx: ClientContext): void;
+export { resolveApiUrl } from './api-base.js';
+export { setupSidebarEntry } from './bundle-config.js';

package/lib/types/client/locales.d.ts

@@ -15,6 +15,16 @@ export declare const en: {
     readonly "sidebar.workspaces": "Workspaces";
     readonly "sidebar.search": "Search";
     readonly "sidebar.clearSearch": "Clear search";
+    readonly "sidebar.entry.title": "Sidebar entry";
+    readonly "sidebar.entry.desc": "Show dedicated scheduled tasks entry in the primary sidebar";
+    readonly "sidebar.entry.toggle": "Toggle sidebar entry";
+    readonly "update.entry.title": "Online update";
+    readonly "update.entry.desc": "Check for updates and notify when new versions are available";
+    readonly "update.entry.toggle": "Toggle online update";
+    readonly "officialSchedule.entry.title": "Hide official automation entry";
+    readonly "officialSchedule.entry.desc": "Hide built-in 'Automation tasks' sidebar entry to avoid conflict. Restores automatically when disabled or uninstalled.";
+    readonly "officialSchedule.entry.toggle": "Toggle hide official automation entry";
+    readonly "error.update.disabled": "locked by host configuration";
     readonly "header.lead": "Plan automatic tasks, or trigger them by hand. Describe the recurring work in any chat to create it quickly.";
     readonly "header.githubProject": "GitHub";
     readonly "header.githubFeedback": "Issues";

package/lib/types/client/plugin-update-ui.d.ts

@@ -1,5 +1,6 @@
 import { handlePluginUpdateEscape, manualPluginUpdateCommand } from './plugin-update-model.js';
 export { handlePluginUpdateEscape, manualPluginUpdateCommand };
+export declare const PLUGIN_UPDATE_TOGGLE_EVENT = "dsh-automation-update-toggle";
 export type PluginUpdateUiOptions = {
     readonly endpoint: string;
     readonly packageName: string;
@@ -8,6 +9,7 @@ export type PluginUpdateUiOptions = {
     readonly zhName: string;
     readonly enName: string;
     readonly createIcon: (name: PluginUpdateIconName) => HTMLElement;
+    readonly isEnabled?: () => boolean;
 };
 export type PluginUpdateIconName = 'refresh' | 'download' | 'copy' | 'close';
 export declare function observePluginUpdate(options: PluginUpdateUiOptions): () => void;

package/lib/types/client/settings-nav-icon.d.ts

@@ -5,20 +5,14 @@
  * 会与宿主/皮肤的内容级图标规则互相覆盖。这里改为插入独立的宿主时钟图标，
  * 只通过 marker 属性隐藏宿主 svg，卸载时可以完整还原。
  */
-export declare const SETTINGS_NAV_ICON_CLASS = "dsh-st-nav-icon-schedule";
 export declare const SETTINGS_NAV_ICON_MARKER = "data-dsh-schedule-nav";
 /**
- * 为目标导航按钮注入 mask 图标。
- *
- * @param button 设置弹窗导航按钮
- * @param labels 返回当前语言下目标分区名称的函数
- * @returns 是否发生了实际变更；重复调用保持幂等
+ * 100% 对齐 dshmarket：用纯属性标记控制 ::before 伪元素渲染图标。
+ * 不修改任何 DOM 节点，避免移动端列表项排版下与文字重叠冲突。
  */
-export declare function applySettingsNavIcon(button: HTMLButtonElement, labels: () => readonly string[], markup?: () => string): boolean;
+export declare function applySettingsNavIcon(button: HTMLButtonElement, labels: () => readonly string[], _markup?: () => string): boolean;
 /**
- * 还原导航按钮：移除 marker 与插件插入的图标，宿主 svg 从未被修改。
- *
- * @returns 是否清理了插件留下的内容
+ * 还原导航按钮：移除 marker，宿主 svg 恢复显示。
  */
 export declare function restoreSettingsNavIcon(button: HTMLButtonElement): boolean;
 /**

package/lib/types/index.d.ts

@@ -6,6 +6,9 @@ export interface Config {
     readonly runTimeoutMinutes?: number;
     readonly misfireGraceMinutes?: number;
     readonly historyLimit?: number;
+    readonly stateDir?: string;
+    readonly updater?: boolean;
+    readonly onlineUpdate?: boolean;
 }
 export declare const Config: any;
 export type SessionApprovalPolicy = 'ask' | 'never';

package/lib/types/plugin-updater.d.ts

@@ -39,6 +39,7 @@ export type PluginUpdaterOptions = {
     readonly endpoint: string;
     readonly packageName: string;
     readonly manifestUrl: URL;
+    readonly isEnabled?: () => Promise<boolean> | boolean;
 };
 type Runtime = {
     profileName: string;

package/lib/types/settings-manager.d.ts

@@ -0,0 +1,27 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const SETTINGS_API_HEADER = "x-michengai-client";
+export interface PersistedSettings {
+    sidebarEntry?: boolean | undefined;
+    onlineUpdate?: boolean | undefined;
+    hideOfficialSchedule?: boolean | undefined;
+}
+export declare class SettingsManager {
+    private readonly file;
+    private readonly hostUpdateDisabled;
+    private store;
+    constructor(options: {
+        ctx: Context;
+        stateDir?: string;
+        hostUpdateDisabled?: boolean;
+    });
+    private load;
+    private flush;
+    getSidebarEntry(): boolean;
+    setSidebarEntry(enabled: boolean): Promise<boolean>;
+    getHideOfficialSchedule(): boolean;
+    setHideOfficialSchedule(enabled: boolean): Promise<boolean>;
+    isHostUpdateDisabled(): boolean;
+    isUpdateEnabled(): boolean;
+    setOnlineUpdate(enabled: boolean): Promise<boolean>;
+}
+export declare function registerSettingsApi(ctx: Context, manager: SettingsManager): () => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-automation",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "DSH Automation — 在独立 DSH Session 中按计划执行和管理编码任务 · Schedule and manage coding tasks in isolated DSH sessions",
   "type": "module",
   "packageManager": "pnpm@11.22.0",
@@ -73,21 +73,21 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1 <5.0.0",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-permission-presets": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-workspace": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-agent-default-model": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-permission-presets": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-workspace": "0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
     "@deepseek-ai/schemastery": ">=3.18.1 <4.0.0",
     "react": "^18.2.0"
   },