@starwish-ai/xingyuan-dsh 0.5.1 → 0.5.3

package/CHANGELOG.md

@@ -5,6 +5,127 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.3] - 2026-08-28
+
+> **Note:** this is a patch release but it carries one breaking change — the `xingyuan`
+> settings namespace is replaced by `xingyuan-pref` (see *Removed*). Consumers of the
+> `./domain` subpath must also adapt to `makeXingyuanStore()` taking a second, required
+> argument. Read *Upgrading from 0.5.2 or earlier* before updating.
+
+**Chat preferences are now always editable.** Settings → XingYuan rendered the
+write-confirmation toggle and the memory-injection limit as permanently disabled until a
+XingYuan session had been opened once since the last dsh start; clicking them did nothing
+and produced no error. Both preferences lived in the preset-layer namespace, which only
+comes into existence when the preset is first mounted, so they now live in a
+bundle-resident namespace registered whenever the bundle row is active.
+
+### Upgrading from 0.5.2 or earlier
+
+The two chat preferences moved from the `xingyuan` block of `$DSH_HOME/settings.yaml` to a
+new `xingyuan-pref` block. **A value you had customised is not carried over** and falls back
+to the default: `confirmWrites` returns to `true` (the safe direction — write actions ask for
+confirmation again) and `memoryInjectLimit` to `40`. Re-apply your choices under
+**Settings → XingYuan → Chat preferences**. The leftover `xingyuan:` block is inert and is
+safe to delete.
+
+### Added
+- **`xingyuan-pref` settings namespace** (`src/pref-settings.ts`), installed by the bundle
+  layer next to the existing `xingyuan-ui` namespace, carrying `confirmWrites` (default
+  `true`) and `memoryInjectLimit` (default `40`, integer `5`–`200`). The schema declares
+  `.step(1)`, so the Host also rejects fractional values that a hand-edited settings
+  document or a direct RPC write could otherwise smuggle in.
+- **Shared preference policy module** (`src/pref-policy.ts`) holding the bounds, defaults
+  and input parser for both halves — the host module depends on
+  `@deepseek-ai/dsh-settings` and must never reach the browser bundle. This also removes
+  the `5`/`200`/`40` literals that were previously repeated in the settings page. Covered
+  by `test/pref-policy.test.ts`.
+- **Write verification**: `scope.set()` resolves rather than rejects on failure (the client
+  controller catches, recovers and returns silently), so `toastError` never fired. The page
+  now compares the snapshot after each write and raises a "did not save" toast when the
+  value did not change. Both controls share one scope — and therefore one write queue — so
+  the comparison is gated on a per-component write sequence number to stay honest under
+  interleaved writes (see below).
+- **Regression lock** (`test/pref-settings.test.ts`): five tests pinning that the bundle
+  layer registers `xingyuan-pref` as soon as the settings service is available, that the
+  read thunk resolves fresh on every call, that the headless path falls back to the schema
+  defaults, and — structurally — that **no namespace bound by the settings page is ever
+  registered from the preset layer**. That last one is the abstract shape of this bug and is
+  what stops it from coming back.
+- **Four-way readiness notice** for the preferences card: loading, remote/temporary
+  connection (`mode === 'memory'`), namespace not registered, and read-only document. The
+  previous code only covered the first two, leaving the rest as silently disabled controls.
+
+### Fixed
+- The two preferences could not be changed before the first XingYuan session of the process
+  — the root cause described above.
+- The write-confirmation toggle rendered as **on** whenever its value was unavailable
+  (`value?.confirmWrites !== false` reads "unknown" as "true"), which is the worst possible
+  default for a safety switch. It now falls back to the schema default explicitly.
+- Namespace-unavailable and read-only states disabled the controls with no explanation.
+- The "did not save" toast could fire on a write that **had** been saved. Both controls share
+  one settings scope, and the client controller fences writes with a generation counter: when
+  a write is superseded by a newer one it only records a pending revision and does **not**
+  fold the result into the snapshot, while the superseded write's `.then` still runs first and
+  sees the stale value. Verification is now skipped for superseded writes, and the number
+  input got the pending guard the toggle already had.
+- Clearing the memory-injection-limit field and blurring reported "enter an integer between 5
+  and 200" while simultaneously refilling the field with the saved value — two contradictory
+  messages at once. An empty field is again treated as abandoning the edit.
+- Tool descriptions for the creation / check-in / cancel-check-in tools asserted that a system
+  confirmation card would appear. Toggle **Confirm write actions** off and the model kept
+  telling users a card had been shown when none was. Tool descriptions are baked in at
+  registration and dsh-tools requires a plain string (no getter), so they are now worded to
+  hold in both states instead of asserting the card. Delete tools are unaffected — deletes
+  always confirm.
+
+### Changed
+- The preset layer no longer registers a settings namespace. It reads preferences through
+  `ctx.xingyuan.prefs()` — a thunk that resolves the current value on every call, so edits
+  still take effect immediately without re-registering tools or prompts. The remaining
+  `Config` fields (`batchWishLimit`, `chartTrendDays`, …) have no settings UI and stay as
+  composition-only entry config, which matches the upstream rule that a namespace should
+  carry only the user-editable subset.
+- **Breaking for `./domain` consumers**: `makeXingyuanStore(domain)` now takes a second,
+  required argument — `makeXingyuanStore(domain, readPrefs)`, where `readPrefs` is a thunk
+  returning the resolved chat preferences. The required-ness is deliberate: every call site
+  (one in production, five in tests) is surfaced by the compiler rather than silently
+  missing the wiring. `XingyuanStore` gained a matching `prefs()` method.
+
+### Removed
+- The preset-layer `xingyuan` settings namespace and the `confirmWrites` /
+  `memoryInjectLimit` fields of the preset `Config`. **A value customised under the old
+  `xingyuan:` section of `$DSH_HOME/settings.yaml` is no longer read and falls back to the
+  default** — `confirmWrites` therefore returns to `true`, the conservative direction. The
+  stale section is left in the document and is harmless.
+
+## [0.5.2] - 2026-08-27
+
+### Added
+- **Controllable conversation-view tabs**: the six tabs (Today / Wishes / Tasks /
+  Calendar / Growth / Memory) are no longer always present. Default mode **follows the
+  session preset** — tabs appear only in sessions composed from the `xingyuan` preset and
+  stay out of every other conversation. Settings → XingYuan gains a **Tab visibility**
+  card with three modes (`Follow session` / `Always show` / `Always hide`) plus
+  per-tab toggles (`hiddenTabs`, all shown by default). The preference namespace
+  (`xingyuan-ui`) is installed by the bundle layer, so it works before any XingYuan
+  session exists and stays reachable even when tabs are fully hidden (a preset-layer
+  namespace would be unavailable exactly when needed). Today's page shows a one-line
+  notice when "Always show" puts the tabs into a non-XingYuan session (pages stay fully
+  browsable and operable; only the chat-side capabilities are absent). Read-only URL
+  pages (`/xingyuan/*`) and chat cards are unaffected.
+- New tab-visibility policy (`visibleTabIds`) with dirty-value tolerance (unknown/duplicate
+  hidden ids are ignored); covered by `test/tab-policy.test.ts`.
+
+### Fixed
+- Client boot crash: the tab-visibility controller subscribed to the injected `sessions`
+  service itself, which has no `subscribe` — the session-list snapshot lives on
+  `sessions.list`. The client half failed to load entirely ("Failed to load plugins"),
+  which also hid the Settings → XingYuan card. Subscriptions now target
+  `sessions.list` (`getSnapshot`/`subscribe`).
+- Tab-visibility toggles had inverted semantics: the check chips rendered "hidden" as
+  "checked", so ticking a tab produced no change. `shown` now reads
+  `!hiddenTabs.includes(id)` (checked = shown).
+
 ## [0.5.1] - 2026-08-27
 
 Patch release. Two hardening changes: sessions that contain `xingyuan/*` card events

package/README.en-US.md

@@ -14,7 +14,7 @@ XingYuan is a wish & habit-building companion, shipped as a DeepSeek Harness plu
 - **Opportunity-day check-ins**: check-in, make-up, cancel, and future pre-checks; progress always recomputed against today
 - **Micro-actions**: break an overwhelming goal into 3–7 tiny steps and walk through them guided
 - **Growth system**: levels Lv.1–Lv.10, streak bonuses, stat cards, 30-day bar chart
-- **Session view tabs**: Today / Wishes / Tasks / Calendar / Growth / Memory — buttons call action endpoints directly
+- **Session view tabs**: Today / Wishes / Tasks / Calendar / Growth / Memory — buttons call action endpoints directly; shown only in XingYuan-preset sessions by default, switchable to always show/hide and per-tab in Settings
 - **Memory**: important memories injected into context (limit configurable), full CRUD
 - **Charts**: 15 chart types rendered as cards
 - **Safe writes**: write operations confirmed by default (configurable); deletion always confirmed
@@ -42,6 +42,7 @@ Business data lives at `~/.dsh/xingyuan/xingyuan.sqlite` and survives uninstall
 | User profile | Nickname, occupation, interests |
 | Write confirmation | Whether create / check-in writes need confirmation (deletion always does) |
 | Memory injection limit | Max memories injected per turn |
+| Tab visibility | Three modes (follow session / always show / always hide) plus per-tab toggles; defaults to follow session |
 
 ## Development
 

package/README.md

@@ -14,7 +14,8 @@
 - **机会日打卡**：周期任务打卡、补卡、取消、未来预勾，进度跨天恒为最新
 - **微行动拆解**：把无从下手的目标拆成 3–7 个小步，引导式逐个完成或跳过
 - **成长体系**：等级 Lv.1–Lv.10、连击加成、统计卡与近 30 天柱状图
-- **会话视图页**：今日 / 愿望 / 任务 / 日历 / 成长 / 记忆 六个标签页，页面按钮直连动作接口
+- **会话视图页**：今日 / 愿望 / 任务 / 日历 / 成长 / 记忆 六个标签页，页面按钮直连动作接口；
+  默认仅星愿预设的会话显示，可在设置里切换「始终显示 / 始终隐藏」并按标签勾选
 - **记忆**：重要记忆自动注入上下文（上限可配），支持增删改查
 - **图表**：15 种统计图表自动渲染为卡片
 - **安全确认**：写操作默认二次确认（可关闭），删除始终确认
@@ -42,6 +43,7 @@ dsh plugin --profile web add @starwish-ai/xingyuan-dsh
 | 用户画像 | 昵称、职业、兴趣 |
 | 写操作二次确认 | 创建 / 打卡类写操作是否确认（删除始终确认） |
 | 记忆注入上限 | 每次注入上下文的记忆条数上限 |
+| 标签页显示 | 三态模式（跟随会话 / 始终显示 / 始终隐藏）+ 六个标签逐个勾选；默认跟随会话 |
 
 ## 开发
 

package/lib/client/i18n.js

@@ -230,12 +230,24 @@ const ZH_DICT = {
     'settings.pref.title': '对话偏好',
     'settings.pref.unavailable': '当前连接不支持持久化偏好（远程或临时模式），以下两项不可用。',
     'settings.pref.loading': '偏好加载中…',
+    'settings.pref.notRegistered': '偏好暂不可用（组件未就绪），请稍后重试。',
+    'settings.pref.readOnly': '当前设置文档为只读，无法保存修改。',
     'settings.pref.confirmWrites': '写操作二次确认',
     'settings.pref.confirmWritesHint': '创建愿望/任务、打卡、取消打卡时先弹应用内确认卡（删除始终确认）；关闭后对话中的这类操作将直接执行。',
     'settings.pref.memoryLimit': '记忆注入上限',
     'settings.pref.memoryLimitHint': '每次对话自动注入上下文的记忆条数上限（5-200，默认 40）；失焦后保存。',
     'settings.pref.limitInvalid': '请输入 5-200 的整数',
+    'settings.pref.writeFailed': '保存未生效，请重试。',
+    'settings.tabs.title': '标签页显示',
+    'settings.tabs.mode.follow': '跟随会话',
+    'settings.tabs.mode.show': '始终显示',
+    'settings.tabs.mode.hide': '始终隐藏',
+    'settings.tabs.chooseTab': '显示的标签页',
+    'settings.tabs.loading': '标签页选项加载中…',
+    'settings.tabs.unavailable': '当前连接不支持持久化设置，标签页显示选项不可用。',
+    'settings.tabs.hint': '跟随会话：仅星愿预设的会话显示标签页；其他会话自动隐藏。可单独勾选/取消各标签。',
     'settings.dataHint': '业务数据存于本机 ~/.dsh/xingyuan/，备份即拷贝该目录。',
+    'today.noPresetHint': '当前会话未启用星愿预设：页面数据可浏览、操作可用，但对话中的星愿能力不可用。',
     // --- 微行动卡 ---
     'micro.cleared': '已清除「{task}」的拆解',
     'micro.finished': '「{task}」微行动完成（可打卡了）',
@@ -527,12 +539,24 @@ const EN_DICT = {
     'settings.pref.title': 'Chat preferences',
     'settings.pref.unavailable': 'This connection cannot persist preferences (remote or temporary mode); the two options below are disabled.',
     'settings.pref.loading': 'Loading preferences…',
+    'settings.pref.notRegistered': 'Preferences are unavailable right now (component not ready); please retry later.',
+    'settings.pref.readOnly': 'The settings document is read-only; changes cannot be saved.',
     'settings.pref.confirmWrites': 'Confirm write actions',
     'settings.pref.confirmWritesHint': 'Show an in-app confirmation before creating wishes/tasks, checking in or canceling (deletes always confirm). Turn off to execute directly.',
     'settings.pref.memoryLimit': 'Memory injection limit',
     'settings.pref.memoryLimitHint': 'Max memories auto-injected per chat (5-200, default 40); saved on blur.',
     'settings.pref.limitInvalid': 'Enter an integer between 5 and 200',
+    'settings.pref.writeFailed': 'The change did not save; please try again.',
+    'settings.tabs.title': 'Tab visibility',
+    'settings.tabs.mode.follow': 'Follow session',
+    'settings.tabs.mode.show': 'Always show',
+    'settings.tabs.mode.hide': 'Always hide',
+    'settings.tabs.chooseTab': 'Visible tabs',
+    'settings.tabs.loading': 'Loading tab options…',
+    'settings.tabs.unavailable': 'This connection cannot persist settings; tab visibility options are unavailable.',
+    'settings.tabs.hint': 'Follow session: tabs appear only in sessions using the XingYuan preset; other sessions hide them automatically. Toggle individual tabs below.',
     'settings.dataHint': 'Data lives locally at ~/.dsh/xingyuan/ — back it up by copying the folder.',
+    'today.noPresetHint': 'This session is not using the XingYuan preset: pages stay browsable and usable, but XingYuan chat capabilities are unavailable.',
     'micro.cleared': 'Cleared the micro-step plan of “{task}”',
     'micro.finished': 'Micro-steps of “{task}” finished (ready to check in)',
     'micro.step': '“{task}” micro-steps · step {current}/{total}',

package/lib/client/index.js

@@ -2,7 +2,7 @@ import { t, XY_NS, setupLocale } from './i18n.js';
 import { disposeConfirms, disposeToasts } from './ui.js';
 import { STYLE_TEXT } from './styles.js';
 import { CARD_VIEWS } from './cards.js';
-import { CalendarPage, GrowthPage, MemoryPage, TasksPage, TodayPage, WishesPage } from './pages/index.js';
+import { installTabVisibility } from './tab-visibility.js';
 import { SettingsSection } from './pages/settings.js';
 export const inject = ['slots', 'settingsScope', 'conversationEvents'];
 /** 事件类型 → 渲染 kind。 */
@@ -73,19 +73,18 @@ export function apply(ctx) {
         ctx.slots.register({ name: 'conversation.chat.node', key: 'xy-chart' }, CARD_VIEWS.ChartView),
         ctx.slots.register({ name: 'conversation.chat.node', key: 'xy-micro' }, CARD_VIEWS.MicroView),
     ]);
-    // 会话视图环标签页：今日 / 愿望 / 任务 / 日历 / 成长 / 记忆（仅激活时挂载，进入即取最新数据）。
+    // 会话视图环标签页：今日 / 愿望 / 任务 / 日历 / 成长 / 记忆。
+    // 显隐由 tab-visibility 控制器按「界面偏好设置 × 会话预设」动态维护：
+    // 默认跟随会话（星愿预设的会话才显示），设置可切始终显示/始终隐藏并按标签勾选。
     // label 用 thunk 跟随当前语言；locale 声明让壳在语言切换时刷新标签行。
-    ctx.slots.inject('conversation.view', () => [
-        ctx.slots.register({ name: 'conversation.view', id: 'xy-today', order: 21, label: () => t('tab.today'), locale: XY_NS }, TodayPage),
-        ctx.slots.register({ name: 'conversation.view', id: 'xy-wishes', order: 22, label: () => t('tab.wishes'), locale: XY_NS }, WishesPage),
-        ctx.slots.register({ name: 'conversation.view', id: 'xy-tasks', order: 23, label: () => t('tab.tasks'), locale: XY_NS }, TasksPage),
-        ctx.slots.register({ name: 'conversation.view', id: 'xy-calendar', order: 24, label: () => t('tab.calendar'), locale: XY_NS }, CalendarPage),
-        ctx.slots.register({ name: 'conversation.view', id: 'xy-growth', order: 25, label: () => t('tab.growth'), locale: XY_NS }, GrowthPage),
-        ctx.slots.register({ name: 'conversation.view', id: 'xy-memory', order: 26, label: () => t('tab.memory'), locale: XY_NS }, MemoryPage),
-    ]);
-    // 星愿设置整页（设置 → 星愿）：教练风格/画像（星愿库）+ 二次确认开关与注入上限（设置命名空间）
+    ctx.slots.inject('conversation.view', () => installTabVisibility(ctx));
+    // 星愿设置整页（设置 → 星愿）：教练风格/画像（星愿库）+ 二次确认开关与注入上限
+    // （bundle 常驻命名空间 xingyuan-pref）+ 标签页显隐（bundle 常驻命名空间 xingyuan-ui）。
+    // 两个偏好命名空间都挂在常驻层：整页由本文件无条件注册，命名空间若随 preset 懒加载
+    // 缺席，就会出现「整页可见但两项写不进去且静默失败」。
     ctx.slots.inject('settings.section', () => {
-        const scope = ctx.settingsScope.bind({ namespace: 'xingyuan' });
-        return ctx.slots.register({ name: 'settings.section', id: 'xingyuan', order: 60, label: () => t('settings.tabLabel'), locale: XY_NS }, () => SettingsSection({ scope }));
+        const prefscope = ctx.settingsScope.bind({ namespace: 'xingyuan-pref' });
+        const uiscope = ctx.settingsScope.bind({ namespace: 'xingyuan-ui' });
+        return ctx.slots.register({ name: 'settings.section', id: 'xingyuan', order: 60, label: () => t('settings.tabLabel'), locale: XY_NS }, () => SettingsSection({ scope: prefscope, uiscope }));
     });
 }

package/lib/client/pages/settings.js

@@ -1,17 +1,39 @@
-/** 星愿设置整页（设置 → 星愿）：教练风格/画像（星愿库）+ 二次确认开关与注入上限（设置命名空间）。 */
+/** 星愿设置整页（设置 → 星愿）：教练风格/画像（星愿库）+ 二次确认开关与注入上限
+ * （bundle 常驻命名空间 xingyuan-pref）+ 标签页显隐（bundle 常驻命名空间 xingyuan-ui，
+ * 未选星愿也可调）。 */
 import { createElement, useEffect, useRef, useState, useSyncExternalStore } from 'react';
 import { getJson, postJson } from '../api.js';
 import { toastError } from '../ui.js';
 import { useXyT, activeLocale } from '../i18n.js';
+import { TAB_IDS } from '../../tab-policy.js';
+import { MEMORY_LIMIT_MAX, MEMORY_LIMIT_MIN, PREF_DEFAULTS, parseMemoryLimit, } from '../../pref-policy.js';
 const COACH_IDS = ['gentle', 'strict', 'humorous'];
 const COACH_KEYS = ['settings.coach.gentle', 'settings.coach.strict', 'settings.coach.humorous'];
+/** 显隐三态（顺序即分段按钮顺序；与 tab-policy 字面量同源）。 */
+const MODE_OPTIONS = [
+    { mode: 'follow', key: 'settings.tabs.mode.follow' },
+    { mode: 'show', key: 'settings.tabs.mode.show' },
+    { mode: 'hide', key: 'settings.tabs.mode.hide' },
+];
+/** 六个标签的显示名键（与 tab-visibility 的 entry labelKey 同源）。 */
+const TAB_LABEL_KEYS = {
+    today: 'tab.today',
+    wishes: 'tab.wishes',
+    tasks: 'tab.tasks',
+    calendar: 'tab.calendar',
+    growth: 'tab.growth',
+    memory: 'tab.memory',
+};
 export function SettingsSection(props) {
     const t = useXyT();
     const scope = props.scope;
     // 正确订阅：useSyncExternalStore + getSnapshot（scope 契约见 dsh-client-runtime contract/settings-scope）
     const snap = useSyncExternalStore((listener) => scope.subscribe(listener), () => scope.getSnapshot());
     const writable = snap.status === 'ready' && snap.writable;
-    const limit = String(snap.value?.memoryInjectLimit ?? 40);
+    const limit = String(snap.value?.memoryInjectLimit ?? PREF_DEFAULTS.memoryInjectLimit);
+    // 界面偏好命名空间（标签页显隐）独立订阅：两个命名空间各自走自己的快照
+    const uisnap = useSyncExternalStore((listener) => props.uiscope.subscribe(listener), () => props.uiscope.getSnapshot());
+    const uiWritable = uisnap.status === 'ready' && uisnap.writable;
     // 教练风格与画像存于星愿数据库 global 单例（与对话侧工具同一数据源），经 /xingyuan/api/profile 读写
     const [profile, setProfile] = useState(undefined);
     const [profileError, setProfileError] = useState(undefined);
@@ -21,15 +43,63 @@ export function SettingsSection(props) {
     // 记忆注入上限：草稿态编辑（null=显示快照值），失焦才校验提交——避免逐键持久化与非法中间值死锁
     const [limitDraft, setLimitDraft] = useState(null);
     const [limitError, setLimitError] = useState(false);
+    // 记忆注入上限：写入在途的乐观值（与开关的 pendingToggle 同款，用于禁用控件并顶住回显，
+    // 否则提交后到快照回折前会闪回旧值）
+    const [pendingLimit, setPendingLimit] = useState(undefined);
     const [saving, setSaving] = useState(false);
     const [savedMsg, setSavedMsg] = useState('');
     // 二次确认开关：本地乐观值（undefined=跟随远端快照）——写入在途时 UI 立即响应，失败回滚
     const [pendingToggle, setPendingToggle] = useState(undefined);
+    // 标签页显隐：模式与勾选各自乐观（写入在途时禁用对应控件，失败回滚 + toast）
+    const [pendingMode, setPendingMode] = useState(undefined);
+    const [pendingHidden, setPendingHidden] = useState(undefined);
     const savedTimer = useRef(undefined);
     // 档案加载代数守卫：慢响应不得覆盖用户已开始的草稿
     const profileSeqRef = useRef(0);
-    // 开关显示值：乐观本地值优先（写入在途），否则跟随远端快照
-    const confirmWrites = pendingToggle !== undefined ? pendingToggle : snap.value?.confirmWrites !== false;
+    // 偏好写序号：两个控件共用同一个 scope（即同一条写队列）。控制器以 writeGeneration
+    // 做栅栏——一次写被更新的写取代时只记 pendingRevision、不回折快照，而其 .then 又
+    // 先于后继写执行，此时比对快照必然读到旧值。故只有最后结算的那次有权判定成败。
+    const writeSeqRef = useRef(0);
+    // 开关显示值：乐观本地值优先（写入在途），否则远端快照，值缺席回落 schema 默认。
+    // 不可写成 `!== false`——那样「值未知」会被渲染成「已开启」，安全策略类开关尤其不能撒谎。
+    const confirmWrites = pendingToggle ?? snap.value?.confirmWrites ?? PREF_DEFAULTS.confirmWrites;
+    // 偏好区提示：判定顺序不可换——memory 模式下 status 同样是 unavailable，
+    // 先判 mode 才不会把「远程/临时模式」误报成「命名空间未就绪」
+    const prefNoticeKey = snap.status === 'loading' ? 'settings.pref.loading'
+        : snap.mode === 'memory' ? 'settings.pref.unavailable'
+            : snap.status === 'unavailable' ? 'settings.pref.notRegistered'
+                : !snap.writable ? 'settings.pref.readOnly'
+                    : undefined;
+    // 标签页显隐显示值：乐观优先，否则远端快照，再兜底 schema 默认
+    const tabMode = pendingMode ?? uisnap.value?.tabVisibilityMode ?? 'follow';
+    const hiddenTabs = pendingHidden ?? uisnap.value?.hiddenTabs ?? [];
+    /** 切换显隐模式：乐观写，失效即回滚（分段按钮视觉与持久化口径一致）。 */
+    const switchTabMode = (next) => {
+        if (!uiWritable || pendingMode !== undefined || next === tabMode)
+            return;
+        setPendingMode(next);
+        void props.uiscope.set('tabVisibilityMode', next)
+            .then(() => setPendingMode(undefined))
+            .catch((err) => {
+            setPendingMode(undefined);
+            toastError(err);
+        });
+    };
+    /** 勾选单个标签（勾选 = 显示）：成员关系按 TAB_IDS 稳定序重算，写入整体数组。 */
+    const toggleTab = (id, willShow) => {
+        if (!uiWritable || pendingHidden !== undefined || tabMode === 'hide')
+            return;
+        const next = willShow
+            ? TAB_IDS.filter((tid) => tid !== id && hiddenTabs.includes(tid))
+            : TAB_IDS.filter((tid) => tid === id || hiddenTabs.includes(tid));
+        setPendingHidden(next);
+        void props.uiscope.set('hiddenTabs', next)
+            .then(() => setPendingHidden(undefined))
+            .catch((err) => {
+            setPendingHidden(undefined);
+            toastError(err);
+        });
+    };
     const loadProfile = () => {
         const seq = ++profileSeqRef.current;
         setProfileError(undefined);
@@ -63,28 +133,59 @@ export function SettingsSection(props) {
         setSaving(true);
         run().catch(toastError).finally(() => setSaving(false));
     };
+    /**
+     * 校验偏好是否真的落盘：scope.set() 失败时是 resolve 而非 reject（内部 catch 后静默
+     * recover），故只能在写入结算后比对快照——值没变即视为未保存，须显式告知用户。
+     *
+     * seq 为发起写时取的号：只有仍是队列里最后一次写才校验，否则快照本就不会回折本次
+     * 的结果（被更新的写取代），比对必然误报。见 writeSeqRef。
+     */
+    const verifyWritten = (seq, field, value) => {
+        if (seq !== writeSeqRef.current)
+            return;
+        if (scope.getSnapshot().value?.[field] !== value)
+            toastError(new Error(t('settings.pref.writeFailed')));
+    };
     const commitLimit = () => {
         const raw = limitDraft;
         setLimitDraft(null);
         setLimitError(false);
-        if (raw === null || !writable || raw.trim() === '')
+        if (raw === null || !writable)
             return;
-        const n = Number(raw);
+        // 空串视为放弃编辑：静默回显保存值。若在此报错，会同时出现「已填回旧值」与
+        // 「请输入 5-200 的整数」两条互相矛盾的信息。
+        if (raw.trim() === '')
+            return;
+        const parsed = parseMemoryLimit(raw);
         // 非法输入就地报错（不再静默回弹）：用户明确知道哪里错、该怎么改
-        if (!Number.isFinite(n) || Math.round(n) !== n) {
+        if (parsed === undefined) {
             setLimitError(true);
             return;
         }
-        const clamped = Math.min(200, Math.max(5, Math.round(n)));
-        if (clamped !== Number(raw)) {
-            // 越界但可夹取：直接按夹取值提交并回显，同时给出行内提示
-            void scope.set('memoryInjectLimit', clamped).then(() => setLimitDraft(String(clamped))).catch(toastError);
+        if (parsed.clamped) {
+            // 越界但可夹取：按夹取值提交并回显，同时给出行内提示
+            const seq = ++writeSeqRef.current;
+            setPendingLimit(parsed.value);
+            void scope.set('memoryInjectLimit', parsed.value)
+                .then(() => {
+                setLimitDraft(String(parsed.value));
+                setPendingLimit(undefined);
+                verifyWritten(seq, 'memoryInjectLimit', parsed.value);
+            })
+                .catch((err) => { setPendingLimit(undefined); toastError(err); });
             setLimitError(true);
             return;
         }
-        if (clamped === snap.value?.memoryInjectLimit)
+        if (parsed.value === snap.value?.memoryInjectLimit)
             return;
-        void scope.set('memoryInjectLimit', clamped).catch(toastError);
+        const seq = ++writeSeqRef.current;
+        setPendingLimit(parsed.value);
+        void scope.set('memoryInjectLimit', parsed.value)
+            .then(() => {
+            setPendingLimit(undefined);
+            verifyWritten(seq, 'memoryInjectLimit', parsed.value);
+        })
+            .catch((err) => { setPendingLimit(undefined); toastError(err); });
     };
     const coachLabel = (id) => {
         const index = COACH_IDS.indexOf(id);
@@ -145,11 +246,11 @@ export function SettingsSection(props) {
         className: 'xy-btn xy-btn-primary', disabled: saving, onClick: saveProfile,
     }, saving ? t('settings.profile.saving') : t('settings.profile.save')), savedMsg !== '' ? createElement('span', { className: 'xy-saved', role: 'status' }, 
     // 勾形装饰对读屏隐藏（语义由文案承担），与卡片完成态同一语法
-    createElement('span', { 'aria-hidden': 'true' }, '✓ '), savedMsg) : null), createElement('p', { className: 'xy-hint' }, t('settings.profile.sharedHint'))), createElement('section', { className: 'xy-panel' }, createElement('h3', { className: 'xy-panel-head' }, t('settings.pref.title')), snap.status === 'unavailable'
-        ? createElement('p', { className: 'xy-hint' }, t('settings.pref.unavailable'))
-        : snap.status === 'loading'
-            ? createElement('p', { className: 'xy-hint' }, t('settings.pref.loading'))
-            : null, createElement('label', { className: 'xy-field' }, createElement('span', { className: 'xy-field-head' }, createElement('input', {
+    createElement('span', { 'aria-hidden': 'true' }, '✓ '), savedMsg) : null), createElement('p', { className: 'xy-hint' }, t('settings.profile.sharedHint'))), createElement('section', { className: 'xy-panel' }, createElement('h3', { className: 'xy-panel-head' }, t('settings.pref.title')), 
+    // 整页 section 没有官方卡片那套「按命名空间自动显隐」的保护，失败呈现归注册方
+    prefNoticeKey !== undefined
+        ? createElement('p', { className: 'xy-hint' }, t(prefNoticeKey))
+        : null, createElement('label', { className: 'xy-field' }, createElement('span', { className: 'xy-field-head' }, createElement('input', {
         type: 'checkbox',
         className: 'xy-toggle',
         name: 'confirmWrites',
@@ -161,19 +262,23 @@ export function SettingsSection(props) {
             // 乐观写：先落 UI 再等持久化；失败回滚到快照口径并 toast
             const next = e.target.checked;
             setPendingToggle(next);
+            const seq = ++writeSeqRef.current;
             void scope.set('confirmWrites', next)
-                .then(() => setPendingToggle(undefined))
+                .then(() => { setPendingToggle(undefined); verifyWritten(seq, 'confirmWrites', next); })
                 .catch((err) => {
                 setPendingToggle(undefined);
                 toastError(err);
             });
         },
     }), t('settings.pref.confirmWrites')), createElement('p', { className: 'xy-hint' }, t('settings.pref.confirmWritesHint'))), createElement('label', { className: 'xy-field' }, createElement('span', { className: 'xy-field-head' }, t('settings.pref.memoryLimit')), createElement('input', {
-        type: 'number', min: 5, max: 200, className: 'xy-input xy-input-num', name: 'memoryInjectLimit', inputMode: 'numeric',
+        type: 'number', min: MEMORY_LIMIT_MIN, max: MEMORY_LIMIT_MAX,
+        className: 'xy-input xy-input-num', name: 'memoryInjectLimit', inputMode: 'numeric',
         'aria-label': t('settings.pref.memoryLimit'),
         'aria-invalid': limitError || undefined,
         ...(limitError ? { 'aria-describedby': 'xy-limit-error' } : {}),
-        value: limitDraft ?? limit, disabled: !writable,
+        // 写入在途时顶住乐观值并禁用（与开关同款），避免闪回旧值与并发写交错
+        value: limitDraft ?? (pendingLimit !== undefined ? String(pendingLimit) : limit),
+        disabled: !writable || pendingLimit !== undefined,
         onChange: (e) => { setLimitDraft(e.target.value); setLimitError(false); },
         onBlur: commitLimit,
         onKeyDown: (e) => {
@@ -182,5 +287,32 @@ export function SettingsSection(props) {
         },
     }), createElement('span', { className: 'xy-hint' }, t('settings.pref.memoryLimitHint')), limitError
         ? createElement('span', { id: 'xy-limit-error', className: 'xy-field-err', role: 'alert' }, t('settings.pref.limitInvalid'))
-        : null)), createElement('p', { className: 'xy-hint' }, t('settings.dataHint')));
+        : null)), 
+    // 标签页显示：模式三态（跟随会话/始终显示/始终隐藏）+ 六个标签勾选 chips。
+    // 与教练风格卡同一 xy-seg 视觉语法；「始终隐藏」时勾选区整组禁用置灰。
+    // 命名空间常驻于 bundle 层（未选星愿预设也可调），见 src/ui-settings.ts 头注。
+    createElement('section', { className: 'xy-panel' }, createElement('h3', { className: 'xy-panel-head' }, t('settings.tabs.title')), uisnap.status === 'unavailable'
+        ? createElement('p', { className: 'xy-hint' }, t('settings.tabs.unavailable'))
+        : uisnap.status === 'loading'
+            ? createElement('p', { className: 'xy-hint' }, t('settings.tabs.loading'))
+            : null, createElement('div', { className: 'xy-seg', role: 'group', 'aria-label': t('settings.tabs.title') }, ...MODE_OPTIONS.map((opt) => createElement('button', {
+        key: opt.mode,
+        className: `xy-seg-btn${tabMode === opt.mode ? ' xy-on' : ''}`,
+        'aria-pressed': tabMode === opt.mode,
+        disabled: !uiWritable || pendingMode !== undefined,
+        onClick: () => switchTabMode(opt.mode),
+    }, t(opt.key)))), createElement('div', {
+        className: 'xy-seg',
+        role: 'group',
+        'aria-label': t('settings.tabs.chooseTab'),
+    }, ...TAB_IDS.map((id) => {
+        const shown = !hiddenTabs.includes(id);
+        return createElement('button', {
+            key: id,
+            className: `xy-seg-btn${shown ? ' xy-on' : ''}`,
+            'aria-pressed': shown,
+            disabled: !uiWritable || pendingHidden !== undefined || tabMode === 'hide',
+            onClick: () => toggleTab(id, !shown),
+        }, t(TAB_LABEL_KEYS[id]));
+    })), createElement('p', { className: 'xy-hint' }, t('settings.tabs.hint'))), createElement('p', { className: 'xy-hint' }, t('settings.dataHint')));
 }

package/lib/client/pages/today.js

@@ -1,14 +1,17 @@
 /** 今日页：今日打卡总览 + 一键打卡/领取 + 已完成撤销。 */
-import { createElement } from 'react';
+import { createElement, useSyncExternalStore } from 'react';
 import { postAction } from '../api.js';
 import { toast } from '../ui.js';
 import { useXyT } from '../i18n.js';
 import { softConfirm, useActionGuard, usePageData, useStableScrollbar, localYmd } from '../hooks.js';
 import { PageEmpty, PageError, PageSkeleton } from '../ui.js';
 import { cycleLabel, dateSuffix, formatFriendlyDate } from './format.js';
+import { todayHintStore } from '../tab-hint.js';
 export function TodayPage() {
     const t = useXyT();
     const stabilize = useStableScrollbar();
+    // 「始终显示 × 非星愿会话」轻提示：控制器写值，本页订阅渲染（默认 false 零开销）
+    const showNoPresetHint = useSyncExternalStore(todayHintStore.subscribe, todayHintStore.getSnapshot);
     const overview = usePageData('/xingyuan/api/overview');
     const day = usePageData(() => `/xingyuan/api/day?date=${localYmd(new Date())}`);
     const { busy, guard } = useActionGuard();
@@ -73,7 +76,9 @@ export function TodayPage() {
             'aria-valuenow': ratio,
             'aria-label': heroTitle,
         }, createElement('div', { className: 'xy-bar-fill', style: { transform: `scaleX(${ratio / 100})` } }))
-        : null, allDone ? createElement('div', { className: 'xy-banner-ok' }, t('today.allDone')) : null), rows.length > 0 ? createElement('section', { className: 'xy-group' }, createElement('h3', { className: 'xy-group-head' }, createElement('span', { className: 'xy-group-dot xy-group-dot-warn', 'aria-hidden': 'true' }), createElement('span', null, t('today.sectionOpen')), createElement('span', { className: 'xy-group-count' }, String(rows.length))), createElement('ul', { className: 'xy-grouplist' }, rows)) : null, doneRows.length > 0 ? createElement('section', { className: 'xy-group' }, createElement('h3', { className: 'xy-group-head' }, createElement('span', { className: 'xy-group-dot xy-group-dot-ok', 'aria-hidden': 'true' }), createElement('span', null, t('today.sectionDone')), createElement('span', { className: 'xy-group-count' }, String(doneRows.length))), createElement('ul', { className: 'xy-grouplist' }, doneRows)) : null, data.total === 0
+        : null, allDone ? createElement('div', { className: 'xy-banner-ok' }, t('today.allDone')) : null), 
+    // 始终显示模式下非星愿会话：概览卡下一行轻提示（页面可浏览/操作，对话能力受限）
+    showNoPresetHint ? createElement('p', { className: 'xy-hint' }, t('today.noPresetHint')) : null, rows.length > 0 ? createElement('section', { className: 'xy-group' }, createElement('h3', { className: 'xy-group-head' }, createElement('span', { className: 'xy-group-dot xy-group-dot-warn', 'aria-hidden': 'true' }), createElement('span', null, t('today.sectionOpen')), createElement('span', { className: 'xy-group-count' }, String(rows.length))), createElement('ul', { className: 'xy-grouplist' }, rows)) : null, doneRows.length > 0 ? createElement('section', { className: 'xy-group' }, createElement('h3', { className: 'xy-group-head' }, createElement('span', { className: 'xy-group-dot xy-group-dot-ok', 'aria-hidden': 'true' }), createElement('span', null, t('today.sectionDone')), createElement('span', { className: 'xy-group-count' }, String(doneRows.length))), createElement('ul', { className: 'xy-grouplist' }, doneRows)) : null, data.total === 0
         ? createElement(PageEmpty, { title: t('today.empty.title'), hint: t('today.empty.hint') })
         : null);
 }

package/lib/client/tab-hint.js

@@ -0,0 +1,38 @@
+/**
+ * 「今日」页非星愿会话提示行的快照 store。
+ *
+ * 语义：仅「始终显示」模式 × 当前会话非星愿预设时为 true（该模式下标签页
+ * 出现在每个会话里，页面数据与操作可用，但对话中的星愿能力不可用——一行
+ * 轻提示点明落差）。跟随会话模式下非星愿会话标签页整体隐藏，无提示可言。
+ *
+ * 独立成模块：tab-visibility 控制器写入、今日页订阅，避免控制器 ↔ 页面
+ * 双向依赖环；写侧只在值变化时通知，订阅侧 useSyncExternalStore 直接消费。
+ */
+let hintVisible = false;
+const listeners = new Set();
+function publish(value) {
+    if (value === hintVisible)
+        return;
+    hintVisible = value;
+    for (const fn of [...listeners])
+        fn();
+}
+/** 今日页只读入口（getSnapshot/subscribe 满足 useSyncExternalStore 契约）。 */
+export const todayHintStore = {
+    getSnapshot: () => hintVisible,
+    subscribe(fn) {
+        listeners.add(fn);
+        return () => {
+            listeners.delete(fn);
+        };
+    },
+};
+/** 控制器在每次显隐重算后写入；值未变化时零通知。 */
+export function setTodayHint(value) {
+    publish(value);
+}
+/** 控制器卸载时清场（值复位 + 断订；今日页随模块重载自动取新模块实例）。 */
+export function clearTodayHint() {
+    listeners.clear();
+    hintVisible = false;
+}