@tianyulinfeng1/dsh-plugin-deepseek-chat 1.1.2 → 1.1.6

package/lib/client.js

@@ -1,41 +1,69 @@
 /**
- * Browser half of dsh-plugin-deepseek-chat (v1.1.1).
+ * Browser half of dsh-plugin-deepseek-chat (v1.1.6).
  *
- * Registers one global left-sidebar panel — the same mechanism the Plugins and
- * Scheduled tasks entries use:
- *   `sidebar.panellist` (list) contributes the icon row, and the root `main`
- *   keyed slot with the same key renders the panel page.
+ * Three contributions, all showing chat.deepseek.com in an Electron <webview>:
+ *   - the global left-sidebar panel (a `sidebar.panellist` icon row + the root
+ *     `main` keyed slot), the same mechanism Plugins / Scheduled tasks use;
+ *   - a conversation top-bar tab registered in the `conversation.view` list
+ *     slot, so the web chat is reachable from the 对话 / 轨迹 / 上下文 … tab row
+ *     without leaving the current Session (this one can be switched off);
+ *   - a Settings page (`settings.section`) with two preferences: whether the
+ *     top-bar tab is shown, and the tab's display name (default "DeepSeek 聊天",
+ *     user-customizable).
  *
- * The page hosts chat.deepseek.com in an Electron `<webview>`. The site sends
- * `content-security-policy: frame-ancestors 'none'`, so an iframe cannot carry
- * it; the desktop shell exposes `globalThis.dshDesktop.browser`, the same guest
- * lease bridge the built-in sidebar browser uses: acquire a lease → create a
- * webview named by the lease with its approved partition → load the URL.
- *
- * Stable login session (v1.1.1)
+ * Filling the conversation area
  * -----------------------------
+ * The conversation renderer places each view in `viewArea`, a sibling of the
+ * sticky `composerSeat`. In the `active` phase `viewArea` becomes
+ * `flex:1 0 auto`, so `height:100%` on the panel has no definite parent height
+ * and the Session's own messages/composer stay visible underneath. The tab is
+ * therefore wrapped in an absolutely positioned overlay: its containing block
+ * is the conversation body (`position:relative`), `inset:0` covers exactly
+ * that body, an opaque background plus a z-index above the composer's 9 hide
+ * the Session UI below, and the header with the tab row sits above the body so
+ * switching back to 对话 remains possible.
+ *
+ * The site sends `content-security-policy: frame-ancestors 'none'`, so an
+ * iframe cannot carry it; the desktop shell exposes
+ * `globalThis.dshDesktop.browser`, the same guest lease bridge the built-in
+ * sidebar browser uses: acquire a lease → create a webview named by the lease
+ * with its approved partition → load the URL.
+ *
+ * Stable login session
+ * --------------------
  * The desktop shell caches ONE process-lifetime session per `workspace` string
  * passed to acquire(), and release() destroys only the guest, never the
  * partition's cookies. So the workspace MUST be an absolute constant:
- * `panel:deepseek-chat`. v1.1.0 keyed it to an async account probe, which
- * transiently fails during reconnects — every change handed the panel a fresh
- * cookie jar and forced another QR scan. That regression is fixed here.
+ * `panel:deepseek-chat`. Changing it hands the panel a fresh cookie jar and
+ * forces another QR scan.
  *
- * Account awareness (display only)
- * --------------------------------
- * DSH's own sign-in is a platform.deepseek.com OAuth grant; the chat site uses
- * a different, site-owned Token. There is no official exchange, and the
- * renderer bridge exposes no token/cookie API, so a pure plugin cannot reuse
- * the DSH token for the web chat (see docs/login-persistence.md §6). All this
- * file does with the account is DISPLAY it:
+ * Settings persistence (v1.1.4)
+ * -----------------------------
+ * Settings live in window.localStorage under CONFIG_KEY, separate from the
+ * last-URL memory. The Settings page writes through writeConfig(), which
+ * notifies module-level subscribers. apply() uses that notification to dispose
+ * and re-inject the `conversation.view` entry: the tab row only recomputes its
+ * labels when the slot registry changes, so a label thunk alone cannot reflect
+ * a renamed tab. Re-registering also drives the showTab on/off switch.
  *
- *   - a soft probe reads the Client `remote.account` namespace
- *     (`getState`/`getProfile`, generated `{ ok, value }` envelopes) and shows
- *     the state/name in a small strip;
- *   - the account state NEVER feeds the lease identity, the storage key, an
- *     epoch, or the guest lifecycle — no rebuild, no partition change, ever;
- *   - a transient `unknown` is ignored; only a confirmed `signed-out` updates
- *     the strip; a missing/late Remote never blocks the guest from starting.
+ * About & update check (v1.1.5)
+ * ----------------------------
+ * The Settings page also shows the plugin's metadata (version, author, license,
+ * a short description and links to npm/GitHub) and a "检查更新" button. The
+ * latest published version is read directly from the two public JSON endpoints
+ * (npm registry first, GitHub raw package.json as a fallback) using the
+ * renderer's fetch — the main window sets no connect-src CSP restriction and
+ * both hosts answer with permissive CORS. No Host-side route is added, so the
+ * empty host half stays untouched. compareVersion() does a numeric semver
+ * comparison rather than string equality, because a local unreleased build
+ * (e.g. 1.1.6) can already be ahead of the published "latest" (1.1.2).
+ *
+ * No account awareness (v1.1.3)
+ * -----------------------------
+ * Earlier versions probed the DSH account and rendered a status strip. That
+ * strip and the whole account sync store (polling / probes / listeners) are
+ * removed; the chat uses its own site-owned login, and no DSH account state is
+ * read, displayed, or fed into the guest lifecycle.
  *
  * Failure containment is still the hard rule of this file. DSH treats any
  * uncaught error thrown by a plugin as a crash of its slot entry, and a crash
@@ -61,19 +89,34 @@ window.__ModuleLoader__.load({
 		const react = require("react");
 
 		const PANEL_ID = "deepseek-chat";
+		/** Cell key of the conversation top-bar tab (conversation.view list). */
+		const VIEW_ID = "deepseek-chat-view";
+		/** Position after the shipped views (chat 0, trajectory 10, stats …). */
+		const VIEW_ORDER = 100;
+		/** Cell key / position of the Settings page (settings.section list). */
+		const SETTINGS_ID = "deepseek-chat-settings";
+		const SETTINGS_ORDER = 48;
+		const CHAT_URL = "https://chat.deepseek.com/";
+
 		/**
-		 * DSH runtime version sent as `x-client-version` on Platform account
-		 * reads. The boot manifest carries the exact connected release; the
-		 * minimum supported release is the fallback for a page without it.
+		 * Plugin metadata shown in Settings. Kept as plain constants (the client
+		 * bundle cannot import package.json) and asserted against package.json by
+		 * the offline self-test — the same pattern the factory id uses.
 		 */
-		const HOST_VERSION_FALLBACK = "0.2.2-rc.1";
-		const CHAT_URL = "https://chat.deepseek.com/";
+		const PLUGIN_NAME = "@tianyulinfeng1/dsh-plugin-deepseek-chat";
+		const PLUGIN_VERSION = "1.1.6";
+		const PLUGIN_AUTHOR = "sweet560";
+		const PLUGIN_LICENSE = "MIT";
+		const NPM_PAGE_URL = "https://www.npmjs.com/package/@tianyulinfeng1/dsh-plugin-deepseek-chat";
+		const GITHUB_PAGE_URL = "https://github.com/sweet560/dsh-plugin-deepseek-chat";
+		/** Public JSON endpoints used by "检查更新" (npm first, GitHub fallback). */
+		const NPM_VERSION_URL = "https://registry.npmjs.org/-/package/@tianyulinfeng1%2fdsh-plugin-deepseek-chat/dist-tags";
+		const GITHUB_VERSION_URL = "https://raw.githubusercontent.com/sweet560/dsh-plugin-deepseek-chat/main/package.json";
 		/**
 		 * Constant storage identities for the guest partition and the
 		 * last-conversation memory. The main process keeps one partition per
-		 * `workspace` string for the process lifetime; both values MUST NOT
-		 * depend on account state, or a transient probe failure would swap the
-		 * cookie jar and force a fresh QR scan. v1.1.1 regression fix.
+		 * `workspace` string for the process lifetime; these MUST NOT change,
+		 * or a fresh cookie jar would force a fresh QR scan.
 		 */
 		const PARTITION_BASE = "panel:deepseek-chat";
 		const STORAGE_BASE = "dsh-plugin-deepseek-chat:last-url";
@@ -89,11 +132,33 @@ window.__ModuleLoader__.load({
 			crashed: "The embedded chat stopped responding",
 			timeout: "The embedded chat did not start",
 			retry: "Retry",
-			probing: "Syncing the DSH account…",
-			synced: "Synced with the DSH account",
-			syncedAs: (name) => `Synced with the DSH account · ${name}`,
-			unsigned: "No DSH account signed in — the chat panel is not synced",
-			unknown: "Account state unavailable — conversation kept locally"
+			settingsNav: "DeepSeek Chat",
+			settingsTitle: "DeepSeek Chat settings",
+			settingsEnableTab: "Show the conversation top-bar tab",
+			settingsEnableHint: "Add a web-chat entry to the 对话 / 轨迹 / 上下文 … tab row. Turn this off to keep only the left-sidebar panel.",
+			settingsTabLabel: "Top-bar tab name",
+			settingsTabLabelHint: "Default: DeepSeek 聊天. Leave the box empty to restore the default.",
+			settingsPlaceholder: "DeepSeek 聊天",
+			aboutTitle: "About this plugin",
+			infoVersion: "Version",
+			infoAuthor: "Author",
+			infoLicense: "License",
+			infoDescription: "Description",
+			infoSummary: "Opens chat.deepseek.com from the sidebar and the conversation tab row: a switchable, renameable top-bar tab, a full-area web chat, and last-conversation memory.",
+			infoLinks: "Links",
+			linkNpm: "npm package page",
+			linkGithub: "GitHub repository",
+			updateTitle: "Check for updates",
+			checkUpdate: "Check for updates",
+			updateIdle: "Click the button to read the latest published version from npm or GitHub.",
+			updateChecking: "Checking for updates…",
+			updateUpToDate: "You're up to date",
+			updateFound: "New version available",
+			updateFailed: "Update check failed",
+			updateNoFetch: "This environment cannot reach the network (fetch is unavailable).",
+			updateSource: "Source",
+			updateLatest: "Latest",
+			updateCurrent: "Current"
 		} : {
 			label: "DeepSeek 聊天",
 			loading: "正在加载 DeepSeek 聊天…",
@@ -102,29 +167,247 @@ window.__ModuleLoader__.load({
 			crashed: "内嵌聊天进程已退出",
 			timeout: "内嵌聊天页面没有启动",
 			retry: "重试",
-			probing: "正在同步 DSH 登录账号…",
-			synced: "已与 DSH 登录账号同步",
-			syncedAs: (name) => `已与 DSH 登录账号同步 · ${name}`,
-			unsigned: "未登录 DSH 账号，聊天面板暂未同步",
-			unknown: "账号状态不可用，会话按本地模式保存"
+			settingsNav: "DeepSeek 聊天",
+			settingsTitle: "DeepSeek 聊天设置",
+			settingsEnableTab: "显示顶部标签栏",
+			settingsEnableHint: "在会话顶栏「对话 / 轨迹 / 上下文 …」标签行加入网页聊天入口；关闭后只保留左侧栏面板。",
+			settingsTabLabel: "顶部标签栏名称",
+			settingsTabLabelHint: "默认：DeepSeek 聊天；留空即恢复默认。",
+			settingsPlaceholder: "DeepSeek 聊天",
+			aboutTitle: "关于本插件",
+			infoVersion: "插件版本号",
+			infoAuthor: "作者",
+			infoLicense: "开源许可证",
+			infoDescription: "功能简介",
+			infoSummary: "在左侧栏与会话顶栏直接打开 chat.deepseek.com 网页聊天；顶栏标签可开关、可改名，网页铺满会话区并记住上次会话。",
+			infoLinks: "相关链接",
+			linkNpm: "npm 插件页面",
+			linkGithub: "GitHub 仓库",
+			updateTitle: "检查更新",
+			checkUpdate: "检查更新",
+			updateIdle: "点击按钮，从 npm 或 GitHub 获取最新发布版本号。",
+			updateChecking: "正在检查更新…",
+			updateUpToDate: "已是最新版本",
+			updateFound: "发现新版本",
+			updateFailed: "检查更新失败",
+			updateNoFetch: "当前环境无法联网（没有可用的 fetch）。",
+			updateSource: "来源",
+			updateLatest: "最新版本",
+			updateCurrent: "当前版本"
 		};
 
-		/** Normalized account states the panel can distinguish. */
-		const ACCOUNT_UNKNOWN = "unknown";
-		const ACCOUNT_SIGNED_IN = "signed-in";
-		const ACCOUNT_SIGNED_OUT = "signed-out";
+		/** localStorage key for the two user preferences (separate from last-url memory). */
+		const CONFIG_KEY = "dsh-plugin-deepseek-chat:config";
+		const DEFAULT_TAB_LABEL = "DeepSeek 聊天";
+		const DEFAULTS = { showTab: true, tabLabel: DEFAULT_TAB_LABEL };
+		const configListeners = new Set();
+		let config = readConfig();
+
+		/** Read preferences, validating each field's type against DEFAULTS. */
+		function readConfig() {
+			const result = { ...DEFAULTS };
+			try {
+				const raw = window.localStorage.getItem(CONFIG_KEY);
+				if (typeof raw !== "string" || raw.length === 0) return result;
+				const parsed = JSON.parse(raw);
+				if (parsed === null || typeof parsed !== "object") return result;
+				if (typeof parsed.showTab === "boolean") result.showTab = parsed.showTab;
+				if (typeof parsed.tabLabel === "string") result.tabLabel = normalizeTabLabel(parsed.tabLabel);
+			} catch {
+				/* storage unavailable or corrupt: keep defaults */
+			}
+			return result;
+		}
+
+		/** Trim, bound length, and fall back to the default when empty. */
+		function normalizeTabLabel(value) {
+			const trimmed = value.trim();
+			if (trimmed.length === 0) return DEFAULT_TAB_LABEL;
+			return trimmed.slice(0, 40);
+		}
+
+		/** Snapshot of the in-memory preferences (authoritative after load). */
+		function getConfig() {
+			return { ...config };
+		}
+
+		/** Current tab label (never empty). */
+		function tabLabel() {
+			return config.tabLabel.length > 0 ? config.tabLabel : DEFAULT_TAB_LABEL;
+		}
+
+		/** Merge a patch, persist it, and notify subscribers (Settings → tab re-injection). */
+		function writeConfig(patch) {
+			const next = { ...config };
+			if (typeof patch.showTab === "boolean") next.showTab = patch.showTab;
+			if (typeof patch.tabLabel === "string") next.tabLabel = normalizeTabLabel(patch.tabLabel);
+			config = next;
+			try {
+				window.localStorage.setItem(CONFIG_KEY, JSON.stringify(config));
+			} catch {
+				/* storage unavailable: the in-memory value still applies this session */
+			}
+			for (const listener of [...configListeners]) {
+				try {
+					listener(config);
+				} catch {
+					/* one bad subscriber must not stop the others */
+				}
+			}
+		}
+
+		/** Subscribe to preference changes; returns a disposer. */
+		function subscribeConfig(listener) {
+			configListeners.add(listener);
+			return () => {
+				configListeners.delete(listener);
+			};
+		}
+
+		// ── 关于 & 检查更新（v1.1.5）────────────────────────────────────────────
+		/** status: idle | checking | up-to-date | found | failed. */
+		let updateState = { status: "idle" };
+		function getUpdateState() {
+			return { ...updateState };
+		}
+		function setUpdateState(next) {
+			updateState = next;
+		}
+		function resetUpdateState() {
+			updateState = { status: "idle" };
+		}
 
 		/**
-		 * ONE stable guest partition for the whole process.
-		 *
-		 * The desktop shell keys a process-lifetime partition Map by the
-		 * `workspace` string passed to acquire() and reuses the same session for
-		 * every acquire() with that key. release() destroys only the guest, never
-		 * the partition's cookies. Consequently, changing this value — even once
-		 * — hands the panel a fresh cookie jar and forces the user to scan the
-		 * chat login QR code again. It MUST NOT depend on the DSH account probe:
-		 * that probe is asynchronous, runs every 5 seconds, and can transiently
-		 * return "unknown" during a reconnect or session switch.
+		 * Numeric comparison of dotted versions, so 1.1.10 > 1.1.9. Missing
+		 * parts count as zero and a non-numeric part parses as zero. A local
+		 * unreleased build can legitimately be ahead of the published "latest".
+		 * @param a - first version.
+		 * @param b - second version.
+		 * @returns -1 when a < b, 0 when equal, 1 when a > b.
+		 */
+		function compareVersion(a, b) {
+			const partsA = String(a ?? "").split(".").map((part) => parseInt(part, 10) || 0);
+			const partsB = String(b ?? "").split(".").map((part) => parseInt(part, 10) || 0);
+			const length = Math.max(partsA.length, partsB.length);
+			for (let index = 0; index < length; index += 1) {
+				const left = partsA[index] ?? 0;
+				const right = partsB[index] ?? 0;
+				if (left > right) return 1;
+				if (left < right) return -1;
+			}
+			return 0;
+		}
+
+		/** Extract a dotted version from an npm dist-tags or package.json payload. */
+		function versionFromPayload(text) {
+			let parsed;
+			try {
+				parsed = JSON.parse(text);
+			} catch {
+				return void 0;
+			}
+			if (parsed === null || typeof parsed !== "object") return void 0;
+			const candidate = typeof parsed.latest === "string" && parsed.latest.length > 0
+				? parsed.latest
+				: parsed.version;
+			if (typeof candidate !== "string") return void 0;
+			const trimmed = candidate.trim();
+			return /^\d+(?:\.\d+)*$/u.test(trimmed) ? trimmed : void 0;
+		}
+
+		/** The renderer's fetch, if available (no Host route is added). */
+		function getFetch() {
+			try {
+				if (typeof fetch === "function") return fetch;
+				if (typeof globalThis !== "undefined" && typeof globalThis.fetch === "function") return globalThis.fetch;
+			} catch {
+				/* fetch unavailable */
+			}
+			return void 0;
+		}
+
+		/** GET one JSON endpoint with an abort timeout; return its version. */
+		async function readVersionFrom(fetchImpl, url, timeoutMs) {
+			const controller = typeof AbortController !== "undefined" ? new AbortController() : void 0;
+			const timer = controller !== void 0 ? setTimeout(() => controller.abort(), timeoutMs) : void 0;
+			try {
+				const options = controller !== void 0 ? { signal: controller.signal } : {};
+				const response = await fetchImpl(url, options);
+				if (response === null || response === void 0 || response.ok === false) {
+					throw new Error(`HTTP ${response?.status ?? "no response"}`);
+				}
+				const text = await response.text();
+				const version = versionFromPayload(text);
+				if (version === void 0) throw new Error("no version in payload");
+				return version;
+			} finally {
+				if (timer !== void 0) clearTimeout(timer);
+			}
+		}
+
+		/**
+		 * npm first, GitHub raw package.json as a fallback. Both endpoints are
+		 * public, need no authentication, and answer with permissive CORS.
+		 * @param fetchImpl - fetch implementation.
+		 * @param timeoutMs - per-request abort timeout.
+		 * @returns {Promise<{version: string, source: string}>}
+		 * @throws when both sources fail.
+		 */
+		async function fetchLatestVersion(fetchImpl, timeoutMs = 8000) {
+			let npmError;
+			try {
+				const version = await readVersionFrom(fetchImpl, NPM_VERSION_URL, timeoutMs);
+				return { version, source: "npm" };
+			} catch (error) {
+				npmError = error;
+			}
+			try {
+				const version = await readVersionFrom(fetchImpl, GITHUB_VERSION_URL, timeoutMs);
+				return { version, source: "GitHub" };
+			} catch {
+				/* fall through to the npm error */
+			}
+			throw npmError ?? new Error("npm and GitHub both failed");
+		}
+
+		/**
+		 * Run the update check. State transitions are published through
+		 * setUpdateState() and onChange() lets the Settings view repaint. Overlap
+		 * is ignored while a check is in flight.
+		 * @param onChange - called after each published state.
+		 */
+		async function checkForUpdates(onChange) {
+			if (updateState.status === "checking") return;
+			const publish = (next) => {
+				setUpdateState(next);
+				if (typeof onChange === "function") {
+					try {
+						onChange();
+					} catch {
+						/* a dead view must not break the check */
+					}
+				}
+			};
+			const fetchImpl = getFetch();
+			if (fetchImpl === void 0) {
+				publish({ status: "failed", reason: COPY.updateNoFetch });
+				return;
+			}
+			publish({ status: "checking" });
+			try {
+				const { version, source } = await fetchLatestVersion(fetchImpl);
+				publish(compareVersion(version, PLUGIN_VERSION) > 0
+					? { status: "found", latest: version, source }
+					: { status: "up-to-date", latest: version, source });
+			} catch (error) {
+				publish({ status: "failed", reason: String((error && error.message) || error) });
+			}
+		}
+
+		/**
+		 * ONE stable guest partition for the whole process. release() destroys
+		 * only the guest, never the partition's cookies, so this value is an
+		 * absolute constant.
 		 * @returns the fixed workspace identity for guest leases.
 		 */
 		function partitionKeyFor() {
@@ -132,9 +415,7 @@ window.__ModuleLoader__.load({
 		}
 
 		/**
-		 * ONE stable conversation-memory key. Account status changes must not
-		 * move it either, or a transient probe failure would silently lose the
-		 * remembered conversation.
+		 * ONE stable conversation-memory key.
 		 * @returns the fixed localStorage key.
 		 */
 		function storageKeyFor() {
@@ -190,8 +471,8 @@ window.__ModuleLoader__.load({
 		}
 
 		/**
-		 * Read the conversation remembered from the last visit for one account.
-		 * @param storageKey - account-scoped storage key.
+		 * Read the conversation remembered from the last visit.
+		 * @param storageKey - storage key.
 		 * @returns the URL to open; the site root when nothing usable is remembered.
 		 */
 		function rememberedTarget(storageKey) {
@@ -209,7 +490,7 @@ window.__ModuleLoader__.load({
 		 * A brand-new chat clears the memory so the next visit starts clean. An auth
 		 * page never overwrites it, so a login detour does not lose the conversation.
 		 * @param raw - current page URL reported by the guest.
-		 * @param storageKey - account-scoped storage key.
+		 * @param storageKey - storage key.
 		 */
 		function rememberTarget(raw, storageKey) {
 			const url = parseChatUrl(raw);
@@ -223,215 +504,6 @@ window.__ModuleLoader__.load({
 			}
 		}
 
-		// ── account sync store ────────────────────────────────────────────────
-		/**
-		 * One module-level snapshot shared by every mounted panel. The account
-		 * Remote is display/awareness only; it never feeds the lease identity or
-		 * the guest lifecycle, so a flaky probe can never recreate the webview.
-		 */
-		let accountSnapshot = { status: ACCOUNT_UNKNOWN, label: "", probed: false };
-		const accountListeners = new Set();
-
-		function notifyAccount() {
-			for (const listener of [...accountListeners]) {
-				try {
-					listener(accountSnapshot);
-				} catch {
-					/* a dead panel must not break another one */
-				}
-			}
-		}
-
-		/** Subscribe a mounted panel; returns its disposer. */
-		function subscribeAccount(listener) {
-			accountListeners.add(listener);
-			return () => {
-				accountListeners.delete(listener);
-			};
-		}
-
-		/**
-		 * Publish a probed account state. This ONLY updates the account strip:
-		 * it never bumps an epoch and never rebuilds the guest. A transient
-		 * "unknown" during reconnect is deliberately ignored so the displayed
-		 * state does not flicker; a confirmed sign-out is shown immediately.
-		 * @param status - normalized account state.
-		 */
-		function publishAccount(status) {
-			const previous = accountSnapshot;
-			// Ignore a transient unknown once we know a real state: it is usually
-			// a reconnect, not a sign-out, and must not disturb the panel.
-			const settled = status === ACCOUNT_UNKNOWN && previous.probed && previous.status !== ACCOUNT_UNKNOWN
-				? previous.status
-				: status;
-			accountSnapshot = {
-				status: settled,
-				// Preserve the name through a transient unknown; clear it only on a
-				// confirmed sign-out when the display explicitly publishes "".
-				label: settled === ACCOUNT_SIGNED_OUT ? "" : previous.label,
-				probed: true
-			};
-			notifyAccount();
-		}
-
-		/** Publish a display name; a stale result from an older probe is dropped. */
-		function publishAccountLabel(label) {
-			if (accountSnapshot.label === label) return;
-			accountSnapshot = { ...accountSnapshot, label };
-			notifyAccount();
-		}
-
-		/**
-		 * Read one generated `ctx.remote.account` method. Generated Remotes answer
-		 * with an `{ ok, value, error }` envelope, so a bare payload is never
-		 * assumed; an absent namespace or a refused call degrades to undefined.
-		 * @param ctx - client plugin context.
-		 * @param method - generated account method name.
-		 * @param args - method arguments.
-		 * @returns the envelope's `value`, or undefined when unavailable.
-		 */
-		async function callAccount(ctx, method, args = []) {
-			let remote;
-			try {
-				remote = typeof ctx.get === "function" ? ctx.get("remote") : ctx.remote;
-			} catch {
-				remote = void 0;
-			}
-			const account = remote?.account;
-			const call = account?.[method];
-			if (typeof call !== "function") return void 0;
-			const result = await call.apply(account, args);
-			if (result === null || typeof result !== "object" || result.ok !== true) return void 0;
-			return result.value;
-		}
-
-		/** Platform client identity headers, read at call time as the UI does. */
-		function accountClient(ctx) {
-			return {
-				version: globalThis.__DSH_BOOT__?.release?.version || HOST_VERSION_FALLBACK,
-				locale: typeof navigator !== "undefined" ? navigator.language || "en-US" : "en-US",
-				timezoneOffsetSeconds: -new Date().getTimezoneOffset() * 60
-			};
-		}
-
-		/**
-		 * Read the live DSH account state and display name. This is awareness
-		 * ONLY: no value here may ever feed the guest lease or rebuild the
-		 * webview, or a transient Remote failure would drop the chat session.
-		 * @param ctx - client plugin context.
-		 * @returns `{ status, label }`.
-		 */
-		async function probeAccount(ctx) {
-			let state;
-			try {
-				state = await callAccount(ctx, "getState");
-			} catch {
-				state = void 0;
-			}
-			if (state?.status !== "credential-stored") {
-				return {
-					status: state?.status === "signed-out" ? ACCOUNT_SIGNED_OUT : ACCOUNT_UNKNOWN,
-					label: ""
-				};
-			}
-			const probe = { status: ACCOUNT_SIGNED_IN, label: "" };
-			try {
-				const outcome = await callAccount(ctx, "getProfile", [accountClient(ctx)]);
-				const value = outcome?.status === "ready" ? outcome.value : void 0;
-				probe.label = [value?.name, value?.contact, value?.id]
-					.find((item) => typeof item === "string" && item.length > 0) ?? "";
-			} catch {
-				/* profile is display-only: failure keeps the bare state */
-			}
-			return probe;
-		}
-
-		/**
-		 * Start the account watcher once per plugin activation. A 5-second poll
-		 * plus `connection/reset` gives self-heal without depending on the exact
-		 * Client shape of the account `watch` stream, and every resource is
-		 * released through the plugin's own ctx effect.
-		 * @param ctx - client plugin context.
-		 */
-		let accountSyncStarted = false;
-		function startAccountSync(ctx) {
-			if (accountSyncStarted) return;
-			accountSyncStarted = true;
-			let stopped = false;
-			let timer;
-
-			const refresh = async () => {
-				if (stopped) return;
-				let probe = { status: ACCOUNT_UNKNOWN, label: "" };
-				try {
-					probe = await probeAccount(ctx);
-				} catch {
-					/* Remote unavailable: publishAccount ignores a transient unknown */
-					probe = { status: ACCOUNT_UNKNOWN, label: "" };
-				}
-				if (stopped) return;
-				publishAccount(probe.status);
-				if (probe.label !== "") publishAccountLabel(probe.label);
-			};
-
-			const schedule = () => {
-				if (stopped) return;
-				timer = setTimeout(() => {
-					void refresh().finally(schedule);
-				}, 5000);
-				// A long-lived page keeps the poll; a minimal context (or a Node
-				// self-check) must not be held open by its timer alone.
-				try {
-					if (typeof timer.unref === "function") timer.unref();
-				} catch {
-					/* not a Node timer */
-				}
-			};
-
-			void refresh().finally(schedule);
-
-			let offReset;
-			try {
-				if (typeof ctx.on === "function") offReset = ctx.on("connection/reset", () => {
-					void refresh();
-				});
-			} catch {
-				/* optional: the poll still self-heals */
-			}
-
-			let hasDisposal = false;
-			try {
-				if (typeof ctx.effect === "function") {
-					ctx.effect(() => () => {
-						stopped = true;
-						if (timer !== void 0) clearTimeout(timer);
-						try {
-							if (typeof offReset === "function") offReset();
-						} catch {
-							/* already detached */
-						}
-						accountListeners.clear();
-						accountSyncStarted = false;
-					}, "deepseek-chat: account sync");
-					hasDisposal = true;
-				}
-			} catch {
-				/* fall through to the no-disposal path */
-			}
-			if (!hasDisposal) {
-				stopped = true;
-				if (timer !== void 0) clearTimeout(timer);
-				try {
-					if (typeof offReset === "function") offReset();
-				} catch {
-					/* already detached */
-				}
-				// Without a real ctx effect there is no teardown to stop the poll;
-				// keep the first probe but never leave a repeating timer behind.
-				accountSyncStarted = false;
-			}
-		}
-
 		// ── guest helpers ─────────────────────────────────────────────────────
 		/**
 		 * Whether the guest element is still in the document. Electron's webview
@@ -502,29 +574,12 @@ window.__ModuleLoader__.load({
 			root: {
 				display: "flex",
 				flexDirection: "column",
+				flex: "1 1 auto",
 				height: "100%",
 				minHeight: "0",
 				background: "var(--dsw-alias-bg-base)",
 				color: "var(--dsw-alias-label-primary)"
 			},
-			accountBar: {
-				flex: "none",
-				display: "flex",
-				alignItems: "center",
-				gap: "6px",
-				minHeight: "24px",
-				padding: "3px 10px",
-				borderBottom: ".5px solid var(--dsw-alias-border-l3)",
-				color: "var(--dsw-alias-label-tertiary)",
-				font: "var(--dsw-font-xxxs-11)"
-			},
-			accountDot: {
-				width: "6px",
-				height: "6px",
-				borderRadius: "50%",
-				background: "currentColor",
-				flex: "none"
-			},
 			host: {
 				position: "relative",
 				flex: "1",
@@ -560,20 +615,121 @@ window.__ModuleLoader__.load({
 				padding: "4px 12px",
 				cursor: "pointer",
 				font: "var(--dsw-font-xxs-12)"
+			},
+			/**
+			 * Tab entry wrapper. The conversation renderer's `viewArea` is a
+			 * sibling of the sticky composerSeat; in the active phase it becomes
+			 * `flex:1 0 auto` so `height:100%` on the panel has no definite
+			 * parent height and the Session's own messages/composer stay visible
+			 * below. An absolutely positioned overlay whose containing block is
+			 * the conversation body (position:relative) covers exactly that body,
+			 * hides the composer with an opaque background and a z-index above
+			 * its 9, and leaves the header/tab row above the body clickable.
+			 */
+			overlay: {
+				position: "absolute",
+				inset: "0",
+				zIndex: "50",
+				display: "flex",
+				flexDirection: "column",
+				minHeight: "0",
+				overflow: "hidden",
+				background: "var(--dsw-alias-bg-base)"
+			},
+			settingsPage: {
+				boxSizing: "border-box",
+				maxWidth: "620px",
+				padding: "20px 24px",
+				color: "var(--dsw-alias-label-primary)"
+			},
+			settingsTitle: {
+				margin: "0 0 12px",
+				fontSize: "16px",
+				fontWeight: 600
+			},
+			settingsRow: {
+				display: "flex",
+				flexDirection: "column",
+				gap: "6px",
+				padding: "14px 0",
+				borderBottom: ".5px solid var(--dsw-alias-border-l3)"
+			},
+			settingsLabelRow: {
+				display: "flex",
+				alignItems: "center",
+				gap: "10px",
+				fontSize: "13px"
+			},
+			settingsCheckbox: {
+				width: "16px",
+				height: "16px",
+				margin: "0",
+				cursor: "pointer"
+			},
+			settingsHint: {
+				margin: "0",
+				fontSize: "12px",
+				lineHeight: "1.6",
+				color: "var(--dsw-alias-label-tertiary)"
+			},
+			settingsInput: {
+				boxSizing: "border-box",
+				width: "100%",
+				marginTop: "2px",
+				padding: "6px 10px",
+				border: ".5px solid var(--dsw-alias-border-l3)",
+				borderRadius: "var(--dsw-radius-sm)",
+				background: "var(--dsw-alias-bg-layer-1)",
+				color: "var(--dsw-alias-label-primary)",
+				font: "var(--dsw-font-xxs-12)"
+			},
+			aboutSectionTitle: {
+				margin: "18px 0 8px",
+				fontSize: "13px",
+				fontWeight: 600
+			},
+			aboutRow: {
+				display: "flex",
+				gap: "8px",
+				padding: "3px 0",
+				fontSize: "12px",
+				lineHeight: "1.6"
+			},
+			aboutLabel: {
+				flex: "0 0 88px",
+				color: "var(--dsw-alias-label-tertiary)"
+			},
+			aboutValue: {
+				flex: "1 1 auto",
+				minWidth: "0",
+				wordBreak: "break-word"
+			},
+			aboutLink: {
+				color: "var(--dsw-alias-label-link, var(--dsw-alias-label-primary))",
+				textDecoration: "underline",
+				cursor: "pointer",
+				marginRight: "14px"
+			},
+			updateButton: {
+				color: "var(--dsw-alias-label-primary)",
+				background: "var(--dsw-alias-bg-layer-1)",
+				border: ".5px solid var(--dsw-alias-border-l3)",
+				borderRadius: "var(--dsw-radius-sm)",
+				padding: "6px 14px",
+				cursor: "pointer",
+				font: "var(--dsw-font-xxs-12)"
+			},
+			updateResult: {
+				margin: "8px 0 0",
+				padding: "8px 10px",
+				borderRadius: "var(--dsw-radius-sm)",
+				background: "var(--dsw-alias-bg-layer-1)",
+				fontSize: "12px",
+				lineHeight: "1.7",
+				color: "var(--dsw-alias-label-primary)"
 			}
 		};
 
-		/** Copy for the account strip; the dot's opacity encodes the state. */
-		function accountCopy(account) {
-			if (account.status === ACCOUNT_SIGNED_IN) return {
-				text: account.label ? COPY.syncedAs(account.label) : COPY.synced,
-				opacity: "1"
-			};
-			if (account.status === ACCOUNT_SIGNED_OUT) return { text: COPY.unsigned, opacity: ".45" };
-			if (!account.probed) return { text: COPY.probing, opacity: ".3" };
-			return { text: COPY.unknown, opacity: ".3" };
-		}
-
 		/**
 		 * Keeps a rendering failure inside this panel. DSH has no boundary of its own
 		 * around slot entries: an escaping error unmounts the root slot, which is the
@@ -608,32 +764,22 @@ window.__ModuleLoader__.load({
 		}
 
 		/**
-		 * The global chat panel: an account strip and a guest webview filling the
-		 * main column.
+		 * The web chat panel: a guest webview filling the available column, with
+		 * no account strip above it.
 		 *
 		 * The guest is created only after the lease resolves, and it is mounted with
 		 * `name`/`partition`/`src` already set, because the main process inspects
 		 * exactly that bootstrap src when it approves the attachment. The identity
-		 * and the conversation memory are both scoped to the current DSH account;
-		 * an account transition bumps `epoch`, which tears down the old guest and
-		 * re-acquires a lease for the new identity.
+		 * and the conversation memory are both absolute constants, so switching
+		 * between the sidebar panel and the conversation tab preserves the login.
 		 */
 		function ChatPanel() {
 			const hostRef = react.useRef(null);
 			const lastUrlRef = react.useRef(void 0);
-			const [account, setAccount] = react.useState(accountSnapshot);
 			const [failure, setFailure] = react.useState(void 0);
 			const [loading, setLoading] = react.useState(true);
 			const [attempt, setAttempt] = react.useState(0);
 
-			react.useEffect(() => subscribeAccount((next) => {
-				try {
-					setAccount(next);
-				} catch {
-					/* the panel is gone */
-				}
-			}), []);
-
 			const retry = react.useCallback(() => {
 				try {
 					setFailure(void 0);
@@ -852,12 +998,7 @@ window.__ModuleLoader__.load({
 				};
 			}, [attempt]);
 
-			const copy = accountCopy(account);
-
 			return react.createElement("div", { style: styles.root },
-				react.createElement("div", { style: styles.accountBar },
-					react.createElement("span", { style: { ...styles.accountDot, opacity: copy.opacity }, "aria-hidden": "true" }),
-					react.createElement("span", null, copy.text)),
 				react.createElement("div", { style: styles.host, ref: hostRef },
 					failure === void 0 && loading
 						? react.createElement("div", { style: styles.notice }, COPY.loading)
@@ -874,49 +1015,234 @@ window.__ModuleLoader__.load({
 			return react.createElement(PanelBoundary, null, react.createElement(ChatPanel));
 		}
 
+		/**
+		 * The conversation top-bar tab. Unlike the left-sidebar panel, this entry
+		 * must fill the whole conversation body and cover the Session's own
+		 * messages/composer (the "页面没有铺满下面" bug): an opaque, absolutely
+		 * positioned overlay on the conversation body's containing block.
+		 * The component is created ONCE (not per render) so React never remounts
+		 * the guest webview on an unrelated re-render.
+		 */
+		function ViewTabShell() {
+			return react.createElement("div", {
+				"data-dsh-plugin-deepseek-chat": "view",
+				style: styles.overlay
+			}, react.createElement(PanelBoundary, null, react.createElement(ChatPanel)));
+		}
+
+		/** One metadata row: a fixed-width label plus a value. */
+		function infoRow(label, value) {
+			return react.createElement("div", { style: styles.aboutRow },
+				react.createElement("span", { style: styles.aboutLabel }, label),
+				react.createElement("span", { style: styles.aboutValue }, value));
+		}
+
+		/** External https link; the desktop shell opens it in the system browser. */
+		function externalLink(href, text) {
+			return react.createElement("a", {
+				href,
+				target: "_blank",
+				rel: "noopener noreferrer",
+				style: styles.aboutLink
+			}, text);
+		}
+
+		/** The two jump links shown in the About block and after an update check. */
+		function linkRow() {
+			return react.createElement("div", { style: styles.aboutRow },
+				react.createElement("span", { style: styles.aboutLabel }, COPY.infoLinks),
+				react.createElement("span", { style: styles.aboutValue },
+					externalLink(NPM_PAGE_URL, COPY.linkNpm),
+					externalLink(GITHUB_PAGE_URL, COPY.linkGithub)));
+		}
+
+		/** Human-readable one-line status for the current update-check state. */
+		function updateStatusLine(state) {
+			if (state.status === "idle") return COPY.updateIdle;
+			if (state.status === "checking") return COPY.updateChecking;
+			let line;
+			if (state.status === "found") {
+				line = `${COPY.updateFound} ${state.latest}（${COPY.updateCurrent} ${PLUGIN_VERSION}）`;
+			} else if (state.status === "up-to-date") {
+				line = `${COPY.updateUpToDate}（${COPY.updateLatest} ${state.latest}）`;
+			} else {
+				line = `${COPY.updateFailed}：${state.reason ?? ""}`;
+			}
+			if (state.source !== void 0) line += ` · ${COPY.updateSource} ${state.source}`;
+			return line;
+		}
+
+		/**
+		 * Settings page. Built once and reused: writing a checkbox or typing in the
+		 * text box calls writeConfig(), which persists and notifies apply()'s
+		 * subscriber; the local counter only refreshes this form's own state. The
+		 * About block and the "检查更新" button are also part of this one component.
+		 */
+		function makeSettingsView() {
+			return function SettingsView() {
+				const state = react.useState(0);
+				const rerender = () => state[1]((value) => value + 1);
+				const current = getConfig();
+				const update = getUpdateState();
+				// The default tab label is shown as a grey placeholder, never as a
+				// solid value the user must delete first. `draft` is component-local:
+				// it stays empty while the config holds the default, and follows what
+				// the user types. Clearing it makes writeConfig() fall back to the
+				// default again, so the box returns to its empty placeholder state.
+				const draftState = react.useState(current.tabLabel === DEFAULT_TAB_LABEL ? "" : current.tabLabel);
+				const draft = draftState[0];
+				const setDraft = draftState[1];
+
+				const onToggle = (event) => {
+					writeConfig({ showTab: !!event?.target?.checked });
+					rerender();
+				};
+				const onLabelChange = (event) => {
+					const value = String(event?.target?.value ?? "");
+					// Whitespace-only input resolves back to the default name, so keep
+					// the box empty to let the grey placeholder show even without a
+					// remount (real React keeps this component mounted).
+					setDraft(value.trim().length === 0 ? "" : value);
+					writeConfig({ tabLabel: value });
+					rerender();
+				};
+				const onCheckUpdate = () => {
+					void checkForUpdates(rerender);
+				};
+
+				const showLinks = update.status === "found" || update.status === "up-to-date" || update.status === "failed";
+
+				return react.createElement("div", { style: styles.settingsPage },
+					react.createElement("h2", { style: styles.settingsTitle }, COPY.settingsTitle),
+					react.createElement("div", { style: styles.settingsRow },
+						react.createElement("label", { style: styles.settingsLabelRow },
+							react.createElement("input", {
+								type: "checkbox",
+								style: styles.settingsCheckbox,
+								checked: current.showTab !== false,
+								onChange: onToggle
+							}),
+							COPY.settingsEnableTab),
+						react.createElement("p", { style: styles.settingsHint }, COPY.settingsEnableHint)),
+					react.createElement("div", { style: styles.settingsRow },
+						react.createElement("label", { style: styles.settingsLabelRow }, COPY.settingsTabLabel),
+						react.createElement("input", {
+							type: "text",
+							style: styles.settingsInput,
+							value: draft,
+							placeholder: COPY.settingsPlaceholder,
+							maxLength: 40,
+							onChange: onLabelChange
+						}),
+						react.createElement("p", { style: styles.settingsHint }, COPY.settingsTabLabelHint)),
+
+					// 关于本插件：版本号 / 作者 / 功能简介 / 许可证 / 相关链接。
+					react.createElement("h3", { style: styles.aboutSectionTitle }, COPY.aboutTitle),
+					infoRow(COPY.infoVersion, PLUGIN_VERSION),
+					infoRow(COPY.infoAuthor, PLUGIN_AUTHOR),
+					infoRow(COPY.infoDescription, COPY.infoSummary),
+					infoRow(COPY.infoLicense, PLUGIN_LICENSE),
+					linkRow(),
+
+					// 检查更新：按钮 + 文字状态 + 跳转链接。
+					react.createElement("h3", { style: styles.aboutSectionTitle }, COPY.updateTitle),
+					react.createElement("button", {
+						type: "button",
+						"data-dsh-plugin-deepseek-chat": "check-update",
+						style: styles.updateButton,
+						disabled: update.status === "checking",
+						onClick: onCheckUpdate
+					}, COPY.checkUpdate),
+					react.createElement("div", {
+						"data-dsh-plugin-deepseek-chat": "update-status",
+						style: styles.updateResult
+					},
+						react.createElement("div", null, updateStatusLine(update)),
+						showLinks ? linkRow() : null));
+			};
+		}
+
 		/** Client service this plugin reads; the loader waits for the slot registry. */
 		const inject = ["slots"];
 
 		/**
-		 * Register the left-sidebar entry and its main panel.
+		 * Register the contributions. On the Web surface there is no desktop guest
+		 * bridge and an iframe cannot carry the site, so the plugin stays inert
+		 * there. Each registration is isolated: one bad slot must not undo the
+		 * others.
+		 *
+		 * The conversation.view tab is dynamic: its label comes from the Settings
+		 * name, and its visibility from the showTab switch. The tab row only
+		 * recomputes when the slot registry changes, so on any preference change we
+		 * dispose that single injection and re-inject it (label thunk + showTab
+		 * check). The main/sidebar/settings entries are registered once.
 		 * @param ctx - client plugin context.
 		 */
 		function apply(ctx) {
+			let bridge;
 			try {
-				// The panel needs the desktop guest bridge; on the Web surface an iframe
-				// cannot carry the site, so the plugin stays inert there.
-				if (globalThis.dshDesktop?.browser === void 0) return;
+				bridge = globalThis.dshDesktop?.browser;
 			} catch {
 				return;
 			}
+			if (bridge === void 0 || bridge === null) return;
 
-			try {
-				startAccountSync(ctx);
-			} catch (error) {
+			const register = (slot, options, component) => {
 				try {
-					console.error("dsh-plugin-deepseek-chat: account sync failed", error);
-				} catch {
-					/* console unavailable */
+					return ctx.slots.inject(slot, () => ctx.slots.register(options, component));
+				} catch (error) {
+					try {
+						console.error(`dsh-plugin-deepseek-chat: ${slot} registration failed`, error);
+					} catch {
+						/* console unavailable */
+					}
+					return void 0;
 				}
-			}
+			};
 
-			try {
-				ctx.slots.inject("main", () => ctx.slots.register({
-					name: "main",
-					key: PANEL_ID
-				}, ChatPanelShell));
-
-				ctx.slots.inject("sidebar.panellist", () => ctx.slots.register({
-					name: "sidebar.panellist",
-					id: PANEL_ID,
-					order: 5,
-					label: () => COPY.label
-				}, ChatGlyph));
-			} catch (error) {
+			// Static entries: left-sidebar panel + full main panel + Settings page.
+			register("main", { name: "main", key: PANEL_ID }, ChatPanelShell);
+			register("sidebar.panellist", {
+				name: "sidebar.panellist",
+				id: PANEL_ID,
+				order: 5,
+				label: () => COPY.label
+			}, ChatGlyph);
+			register("settings.section", {
+				name: "settings.section",
+				id: SETTINGS_ID,
+				order: SETTINGS_ORDER,
+				label: () => COPY.settingsNav
+			}, makeSettingsView());
+
+			// Dynamic entry: the conversation top-bar tab. Re-injected whenever
+			// a preference changes so the tab row recomputes id/label/visibility.
+			let disposeView = void 0;
+			const syncView = () => {
+				if (typeof disposeView === "function") {
+					try {
+						disposeView();
+					} catch {
+						/* already gone */
+					}
+				}
+				disposeView = void 0;
+				if (config.showTab === false) return;
+				disposeView = register("conversation.view", {
+					name: "conversation.view",
+					id: VIEW_ID,
+					order: VIEW_ORDER,
+					label: () => tabLabel()
+				}, ViewTabShell);
+			};
+			syncView();
+
+			const unsubscribe = subscribeConfig(syncView);
+			if (typeof ctx.effect === "function") {
 				try {
-					console.error("dsh-plugin-deepseek-chat: registration failed", error);
+					ctx.effect(() => unsubscribe, "dsh-plugin-deepseek-chat: settings sync");
 				} catch {
-					/* console unavailable */
+					/* effect registration unavailable: the subscriber still lives */
 				}
 			}
 		}
@@ -924,24 +1250,41 @@ window.__ModuleLoader__.load({
 		exports.apply = apply;
 		exports.inject = inject;
 		exports.__test__ = {
-			ACCOUNT_UNKNOWN,
-			ACCOUNT_SIGNED_IN,
-			ACCOUNT_SIGNED_OUT,
 			CHAT_URL,
 			STORAGE_BASE,
-			accountCopy,
-			getSnapshot: () => accountSnapshot,
+			PANEL_ID,
+			VIEW_ID,
+			VIEW_ORDER,
+			SETTINGS_ID,
+			SETTINGS_ORDER,
+			CONFIG_KEY,
+			DEFAULTS,
+			PLUGIN_NAME,
+			PLUGIN_VERSION,
+			PLUGIN_AUTHOR,
+			PLUGIN_LICENSE,
+			NPM_PAGE_URL,
+			GITHUB_PAGE_URL,
+			NPM_VERSION_URL,
+			GITHUB_VERSION_URL,
+			parseChatUrl,
+			parsePopupUrl,
 			partitionKeyFor,
 			storageKeyFor,
-			publishAccount,
-			publishAccountLabel,
-			probeAccount,
-			callAccount,
-			resetAccountSync() {
-				accountSnapshot = { status: ACCOUNT_UNKNOWN, label: "", probed: false };
-				accountListeners.clear();
-				accountSyncStarted = false;
-			}
+			readConfig,
+			getConfig,
+			normalizeTabLabel,
+			tabLabel,
+			writeConfig,
+			subscribeConfig,
+			compareVersion,
+			versionFromPayload,
+			readVersionFrom,
+			fetchLatestVersion,
+			getUpdateState,
+			setUpdateState,
+			resetUpdateState,
+			checkForUpdates
 		};
 		return module.exports;
 	}