@tyapinalexandr/dsh-account-identity-fallback 0.2.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 tyapinalexandr
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,100 @@
+# @tyapinalexandr/dsh-account-identity-fallback
+
+Keeps the DeepSeek account name and avatar visible when the Platform profile
+endpoint is unavailable, with an in-app editor for both.
+
+## What it does
+
+The account UI shows the generic avatar and "Signed in to DeepSeek" when
+`platform.deepseek.com/auth-api/v0/users/current` is blocked (AWS WAF
+challenge / CloudFront 403). The plugin wraps the `deepseekAccount` service: a
+successful profile read is cached, and a failed read is answered from that
+cache or from the identity saved in the plugin settings. It does not bypass bot
+protection; balance, sign-in/out and model calls are untouched.
+
+## Install
+
+Plugins → Add plugin → `@tyapinalexandr/dsh-account-identity-fallback` →
+Install → Enable now.
+
+```sh
+dsh plugin --profile <profile> add @tyapinalexandr/dsh-account-identity-fallback
+```
+
+After installing or updating, reload the Harness page once so the browser half
+loads.
+
+## Configure
+
+Plugins → Installed plugins → the plugin's page: set **Account name** and
+**Avatar** (image URL or a local file up to 512 KB, stored in the profile
+configuration), then **Save**. Saved fields apply immediately without a restart
+and take priority over the cached profile; empty fields use the cached value.
+
+The same two fields can be set in the profile's `cordis.patch.yml` (`name`,
+`avatarUrl`).
+
+## Cache
+
+`$DSH_HOME/cache/account-identity-fallback/profile-cache.json`
+(`~/.dsh/cache/...` by default). Delete it to fall back to the configured
+identity.
+
+## Uninstall
+
+Plugins → Remove, or:
+
+```sh
+dsh plugin --profile <profile> remove @tyapinalexandr/dsh-account-identity-fallback
+```
+
+---
+
+## Русский
+
+Показывает имя и аватар аккаунта DeepSeek, когда платформа не отдаёт профиль,
+и позволяет задать их в интерфейсе DSH.
+
+### Что делает
+
+Аккаунт показывает стандартную иконку и «Signed in to DeepSeek», когда
+`platform.deepseek.com/auth-api/v0/users/current` блокируется (AWS WAF challenge
+/ CloudFront 403). Плагин оборачивает сервис `deepseekAccount`: успешное чтение
+профиля кешируется, неуспешное — отвечает из кеша или из настроек плагина.
+Антибот-защиту он не обходит; баланс, вход/выход и вызовы моделей не
+затрагиваются.
+
+### Установка
+
+**Plugins → Add plugin** → `@tyapinalexandr/dsh-account-identity-fallback` →
+**Install** → **Enable now**.
+
+```sh
+dsh plugin --profile <профиль> add @tyapinalexandr/dsh-account-identity-fallback
+```
+
+После установки или обновления один раз перезагрузите страницу Harness, чтобы
+загрузилась браузерная часть.
+
+### Настройка
+
+**Plugins → Installed plugins** → страница плагина: задайте **Имя в аккаунте**
+и **Аватар** (ссылка или локальный файл до 512 КБ, сохраняется в конфигурации
+профиля), затем **Сохранить**. Сохранённые поля применяются сразу, без
+перезапуска, и имеют приоритет над кешем; пустые поля используют кеш.
+
+Те же два поля можно задать в `cordis.patch.yml` профиля (`name`,
+`avatarUrl`).
+
+### Кеш
+
+`$DSH_HOME/cache/account-identity-fallback/profile-cache.json` (по умолчанию
+`~/.dsh/cache/...`). Удалите файл, чтобы вернуться к значениям из настроек.
+
+### Удаление
+
+**Plugins → Remove** или:
+
+```sh
+dsh plugin --profile <профиль> remove @tyapinalexandr/dsh-account-identity-fallback
+```

package/client.js

@@ -0,0 +1,343 @@
+// Browser half of @tyapinalexandr/dsh-account-identity-fallback.
+//
+// Registers a row configuration page on the Plugins page: Plugins → this
+// bundle → the "account-identity-fallback" row → Configure. The page edits the
+// plugin's volatile identity fields, so a save is applied to the running Host
+// plugin without a restart and the account surfaces refresh.
+window.__ModuleLoader__.load({
+	id: "@tyapinalexandr/dsh-account-identity-fallback",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		const React = require("react");
+		const h = React.createElement;
+
+		const NS = "accountIdentityFallback";
+		const PACKAGE = "@tyapinalexandr/dsh-account-identity-fallback";
+		const ROW_ID = "account-identity-fallback";
+		const FIELD_NAMES = ["name", "avatarUrl"];
+		const MAX_AVATAR_BYTES = 512 * 1024;
+
+		const en = {
+			summary: "Set the account name and avatar shown when the Platform profile is unavailable.",
+			title: "Account identity fallback",
+			loading: "Loading settings…",
+			unavailable: "Configuration is not available for this row.",
+			readOnly: "This profile does not accept configuration writes.",
+			nameLabel: "Account name",
+			nameHint: "Shown in the account menu and Settings. Leave empty to use the last known Platform profile.",
+			avatarLabel: "Avatar",
+			avatarHint: "Paste an image URL, or choose a local image file (up to 512 KB; it is embedded in the profile configuration). Leave empty to use the last known Platform avatar.",
+			avatarChoose: "Choose image…",
+			replaceImage: "Replace image…",
+			useLink: "Use a link instead",
+			uploadedImage: "Uploaded image",
+			avatarClear: "Remove image",
+			save: "Save",
+			saving: "Saving…",
+			saved: "Saved",
+			noChanges: "Nothing to save",
+			failed: "Could not save the settings",
+			notImage: "Choose an image file",
+			tooLarge: "The image is larger than 512 KB",
+			readFailed: "Could not read the image file",
+			cacheHint: "Empty fields fall back to the last known Platform profile, then to the built-in account label.",
+		};
+
+		const ru = {
+			summary: "Имя и аватар аккаунта, когда профиль платформы недоступен.",
+			title: "Имя и аватар аккаунта",
+			loading: "Загрузка настроек…",
+			unavailable: "Настройки для этой строки недоступны.",
+			readOnly: "Этот профиль не принимает записи настроек.",
+			nameLabel: "Имя в аккаунте",
+			nameHint: "Показывается в меню аккаунта и настройках. Пусто — использовать последний известный профиль платформы.",
+			avatarLabel: "Аватар",
+			avatarHint: "Вставьте ссылку на изображение или выберите файл (до 512 КБ; он сохраняется внутри конфигурации профиля). Пусто — использовать последний известный аватар платформы.",
+			avatarChoose: "Выбрать изображение…",
+			replaceImage: "Заменить изображение…",
+			useLink: "Вместо файла — ссылка",
+			uploadedImage: "Загруженное изображение",
+			avatarClear: "Убрать изображение",
+			save: "Сохранить",
+			saving: "Сохранение…",
+			saved: "Сохранено",
+			noChanges: "Нечего сохранять",
+			failed: "Не удалось сохранить настройки",
+			notImage: "Выберите файл изображения",
+			tooLarge: "Изображение больше 512 КБ",
+			readFailed: "Не удалось прочитать файл изображения",
+			cacheHint: "Пустые поля берут последний известный профиль платформы, а затем встроенную подпись аккаунта.",
+		};
+
+		const styles = {
+			root: { display: "flex", flexDirection: "column", gap: "14px", padding: "4px 0", fontSize: "13px", lineHeight: "20px" },
+			grid: { display: "flex", flexDirection: "column", gap: "12px" },
+			row: { display: "flex", flexDirection: "column", gap: "4px" },
+			label: { color: "var(--dsw-alias-label-primary)", fontWeight: 500 },
+			hint: { color: "var(--dsw-alias-label-tertiary)", fontSize: "12px", lineHeight: "18px" },
+			input: {
+				boxSizing: "border-box", width: "100%", height: "32px", padding: "0 10px",
+				color: "var(--dsw-alias-label-primary)", background: "var(--dsw-alias-bg-base)",
+				border: "0.5px solid var(--dsw-alias-border-l2)", borderRadius: "var(--dsw-radius-md)", font: "inherit",
+			},
+			avatarRow: { display: "flex", gap: "10px", alignItems: "center", flexWrap: "wrap" },
+			avatar: {
+				width: "48px", height: "48px", borderRadius: "50%", objectFit: "cover",
+				background: "var(--dsw-alias-bg-skeleton)", flex: "none",
+			},
+			uploaded: {
+				display: "inline-flex", alignItems: "center", gap: "8px", minHeight: "32px", padding: "0 10px",
+				color: "var(--dsw-alias-label-secondary)", background: "var(--dsw-alias-bg-skeleton)",
+				border: "0.5px solid var(--dsw-alias-border-l2)", borderRadius: "var(--dsw-radius-md)",
+			},
+			uploadedSize: { color: "var(--dsw-alias-label-tertiary)", fontSize: "12px" },
+			actions: { display: "flex", gap: "8px", alignItems: "center", flexWrap: "wrap" },
+			button: {
+				height: "32px", padding: "0 14px", borderRadius: "var(--dsw-radius-md)",
+				border: "0.5px solid var(--dsw-alias-border-l3)", background: "transparent",
+				color: "var(--dsw-alias-label-primary)", font: "inherit", cursor: "pointer",
+			},
+			primary: {
+				background: "var(--dsw-alias-button-primary-fill)", borderColor: "transparent",
+				color: "var(--dsw-alias-label-primary-foreground)", fontWeight: 500,
+			},
+			ok: { color: "var(--dsw-alias-label-tertiary)" },
+			fail: { color: "var(--dsw-alias-state-error-primary, #e5484d)" },
+		};
+
+		/** Read the form's current identity values into a plain draft object. */
+		function draftFrom(snapshot) {
+			const value = snapshot && snapshot.value && typeof snapshot.value === "object" ? snapshot.value : {};
+			const draft = {};
+			for (const field of FIELD_NAMES) {
+				draft[field] = typeof value[field] === "string" ? value[field] : "";
+			}
+			return draft;
+		}
+
+		/** Whether a value is an embedded image URL. */
+		function isDataUrl(value) {
+			return typeof value === "string" && value.startsWith("data:");
+		}
+
+		/** Approximate decoded size in KB of a data: URL. */
+		function dataUrlSizeKb(value) {
+			const comma = value.indexOf(",");
+			const payload = comma === -1 ? "" : value.slice(comma + 1);
+			const padding = payload.endsWith("==") ? 2 : payload.endsWith("=") ? 1 : 0;
+			return Math.max(1, Math.round((payload.length * 3) / 4 - padding) / 1024);
+		}
+
+		/** Render one label + control + hint block. */
+		function fieldBlock(label, hint, control) {
+			return h("label", { style: styles.row, key: label }, [
+				h("span", { style: styles.label, key: "label" }, label),
+				control,
+				hint ? h("span", { style: styles.hint, key: "hint" }, hint) : null,
+			]);
+		}
+
+		/** Configuration page rendered on the plugin's page in Plugins. */
+		function ConfigPage(props) {
+			const t = typeof props.t === "function" ? props.t : (key) => en[key] ?? key;
+			const form = props.form;
+			const [snapshot, setSnapshot] = React.useState(
+				() => (form !== undefined && typeof form.getSnapshot === "function" ? form.getSnapshot() : undefined),
+			);
+			const [draft, setDraft] = React.useState(() => draftFrom(snapshot));
+			const [saving, setSaving] = React.useState(false);
+			const [notice, setNotice] = React.useState(null);
+			const fileRef = React.useRef(null);
+			const revision = snapshot ? snapshot.revision : undefined;
+
+			React.useEffect(() => {
+				if (form === undefined || typeof form.getSnapshot !== "function" || typeof form.subscribe !== "function") return undefined;
+				const publish = () => setSnapshot(form.getSnapshot());
+				publish();
+				return form.subscribe(publish);
+			}, [form]);
+
+			React.useEffect(() => {
+				setDraft(draftFrom(snapshot));
+				setNotice(null);
+			}, [revision]);
+
+			if (props.view === "summary") return h("span", null, t("summary"));
+			if (form === undefined || snapshot === undefined) return h("p", { style: styles.hint }, t("unavailable"));
+			if (snapshot.status === "loading") return h("p", { style: styles.hint }, t("loading"));
+			if (snapshot.status === "unavailable") return h("p", { style: styles.hint }, t("unavailable"));
+			const writable = snapshot.writable === true;
+
+			const setField = (field) => (event) => {
+				const value = event.target.value;
+				setDraft((previous) => ({ ...previous, [field]: value }));
+			};
+
+			const chooseFile = () => {
+				if (fileRef.current !== null) fileRef.current.click();
+			};
+
+			const readFile = (event) => {
+				const file = event.target.files && event.target.files[0];
+				event.target.value = "";
+				if (file === undefined) return;
+				if (typeof file.type === "string" && file.type !== "" && !file.type.startsWith("image/")) {
+					setNotice({ ok: false, text: t("notImage") });
+					return;
+				}
+				if (file.size > MAX_AVATAR_BYTES) {
+					setNotice({ ok: false, text: t("tooLarge") });
+					return;
+				}
+				const reader = new FileReader();
+				reader.onload = () => {
+					setDraft((previous) => ({ ...previous, avatarUrl: String(reader.result || "") }));
+					setNotice(null);
+				};
+				reader.onerror = () => setNotice({ ok: false, text: t("readFailed") });
+				reader.readAsDataURL(file);
+			};
+
+			const save = async () => {
+				if (saving || !writable) return;
+				setSaving(true);
+				setNotice(null);
+				try {
+					const before = draftFrom(snapshot);
+					const ops = [];
+					for (const field of FIELD_NAMES) {
+						const next = String(draft[field] ?? "").trim();
+						if (next === before[field]) continue;
+						if (next === "") ops.push({ op: "unset", path: [field] });
+						else ops.push({ op: "set", path: [field], value: next });
+					}
+					if (ops.length === 0) {
+						setNotice({ ok: true, text: t("noChanges") });
+						return;
+					}
+					const accepted = await form.mutate(ops, snapshot.revision);
+					setNotice({ ok: accepted, text: t(accepted ? "saved" : "failed") });
+				} catch (_error) {
+					setNotice({ ok: false, text: t("failed") });
+				} finally {
+					setSaving(false);
+				}
+			};
+
+			const avatarPreview = draft.avatarUrl === ""
+				? null
+				: h("img", {
+					key: "preview",
+					style: styles.avatar,
+					src: draft.avatarUrl,
+					alt: t("avatarLabel"),
+					referrerPolicy: "no-referrer",
+					onError: (event) => { event.currentTarget.style.visibility = "hidden"; },
+					onLoad: (event) => { event.currentTarget.style.visibility = "visible"; },
+				});
+
+			return h("div", { style: styles.root, "data-account-identity-fallback": "" }, [
+				!writable ? h("p", { style: styles.hint, key: "readonly" }, t("readOnly")) : null,
+				h("div", { style: styles.grid, key: "grid" }, [
+					fieldBlock(t("nameLabel"), t("nameHint"), h("input", {
+						key: "name",
+						style: styles.input,
+						type: "text",
+						value: draft.name,
+						disabled: !writable || saving,
+						onChange: setField("name"),
+						placeholder: t("nameLabel"),
+					})),
+					fieldBlock(t("avatarLabel"), t("avatarHint"), h("div", { style: styles.avatarRow, key: "avatar" }, [
+						avatarPreview,
+						isDataUrl(draft.avatarUrl)
+							? h("span", { key: "uploaded", style: styles.uploaded }, [
+								h("span", { key: "label" }, t("uploadedImage")),
+								h("span", { key: "size", style: styles.uploadedSize }, `${dataUrlSizeKb(draft.avatarUrl)} KB`),
+							])
+							: h("input", {
+								key: "avatar-url",
+								style: { ...styles.input, flex: "1 1 240px" },
+								type: "text",
+								value: draft.avatarUrl,
+								disabled: !writable || saving,
+								onChange: setField("avatarUrl"),
+								placeholder: "https://…",
+							}),
+						h("input", {
+							key: "file",
+							ref: fileRef,
+							type: "file",
+							accept: "image/*",
+							style: { display: "none" },
+							onChange: readFile,
+						}),
+						h("button", {
+							key: "choose",
+							type: "button",
+							style: styles.button,
+							disabled: !writable || saving,
+							onClick: chooseFile,
+						}, t(isDataUrl(draft.avatarUrl) ? "replaceImage" : "avatarChoose")),
+						isDataUrl(draft.avatarUrl) ? h("button", {
+							key: "use-link",
+							type: "button",
+							style: styles.button,
+							disabled: !writable || saving,
+							onClick: () => setDraft((previous) => ({ ...previous, avatarUrl: "" })),
+						}, t("useLink")) : null,
+						draft.avatarUrl === "" ? null : h("button", {
+							key: "clear",
+							type: "button",
+							style: styles.button,
+							disabled: !writable || saving,
+							onClick: () => setDraft((previous) => ({ ...previous, avatarUrl: "" })),
+						}, t("avatarClear")),
+					])),
+				]),
+				h("div", { style: styles.actions, key: "actions" }, [
+					h("button", {
+						key: "save",
+						type: "button",
+						style: { ...styles.button, ...styles.primary },
+						disabled: !writable || saving,
+						onClick: save,
+					}, t(saving ? "saving" : "save")),
+					notice === null ? null : h("span", {
+						key: "notice",
+						style: notice.ok ? styles.ok : styles.fail,
+						role: notice.ok ? "status" : "alert",
+					}, notice.text),
+				]),
+				h("p", { style: styles.hint, key: "cache-hint" }, t("cacheHint")),
+			]);
+		}
+
+		/** Required services: slot registry, locale dictionaries and configuration forms. */
+		const inject = ["slots", "locale", "configForms"];
+
+		/**
+		 * Register the configuration page on the bundle's own page in Plugins.
+		 * The page declares `plugins.bundle.config` without a form, so this
+		 * plugin obtains the settings form for its row itself.
+		 * @param ctx - browser plugin context.
+		 */
+		function apply(ctx) {
+			ctx.effect(() => ctx.locale.register(NS, { en, ru }), "account-identity-fallback: dictionaries");
+			const t = ctx.locale.bind(NS);
+			const form = ctx.configForms.get(ROW_ID);
+			ctx.effect(() => ctx.configForms.whileServed([ROW_ID], () => ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
+				name: "plugins.bundle.config",
+				key: PACKAGE,
+				locale: NS,
+				inject: () => ({ t, form }),
+			}, ConfigPage))), "account-identity-fallback: configuration page");
+		}
+
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});

package/cordis.patch.yml

@@ -0,0 +1,21 @@
+# Bundle layer: insert the fallback plugin row.
+#
+# The identity itself (name / avatar / contact) is per-deployment data, so this
+# layer is intentionally empty. Override it in the profile's own
+# cordis.patch.yml, which is applied after every bundle layer:
+#
+#   - id: account-identity-fallback
+#     config:
+#       name: 'Your display name'
+#       avatarUrl: 'https://static.deepseek.com/user-avatar/<avatar-id>'
+#       contact: ''
+#       id: ''
+#
+- insert:
+    - id: account-identity-fallback
+      name: '@tyapinalexandr/dsh-account-identity-fallback'
+      config:
+        name: ''
+        contact: ''
+        avatarUrl: ''
+        id: ''

package/icon.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" role="img" aria-label="Account identity fallback">
+  <rect width="64" height="64" rx="14" fill="#1f2833"/>
+  <circle cx="32" cy="24" r="9" fill="#e8eef7"/>
+  <path d="M32 36c-9.4 0-17 5.4-17 12v2h34v-2c0-6.6-7.6-12-17-12z" fill="#e8eef7"/>
+  <path d="M47 17a11 11 0 0 0-15.2 2.6" fill="none" stroke="#4f9dff" stroke-width="4" stroke-linecap="round"/>
+  <path d="M51.4 12.6 49 20l-7.4-2.2" fill="none" stroke="#4f9dff" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
+  <path d="M52 47a11 11 0 0 1-2.6 15.2" fill="none" stroke="#4f9dff" stroke-width="4" stroke-linecap="round" transform="translate(0 0)"/>
+</svg>

package/index.js

@@ -0,0 +1,264 @@
+/**
+ * Account identity fallback for DeepSeek Harness.
+ *
+ * The DeepSeek Platform profile read (`platform.deepseek.com/auth-api/v0/users/current`)
+ * can be rejected by the Platform's edge protection (AWS WAF challenge / CloudFront 403)
+ * even while the stored account credential is still valid. In that state the account UI
+ * shows the generic avatar and the "Signed in to DeepSeek" label, because the profile
+ * payload (name, contact, picture) never arrives.
+ *
+ * This Host plugin wraps the `deepseekAccount` service so that:
+ *   - a successful profile read refreshes a small on-disk profile cache;
+ *   - a failed (or throwing) profile read is answered from that cache, or from the
+ *     plugin configuration when no cache exists yet.
+ *
+ * The identity is editable in the Harness UI (Plugins → this bundle → its row →
+ * Configure): `name`, `contact` and `avatarUrl` are volatile config fields, so a
+ * save reaches the running plugin in place and the account surfaces refresh.
+ *
+ * The account UI and Settings then render the last known identity instead of the
+ * fallback label. Balance, sign-out, sign-in and model usage are untouched.
+ */
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import Schema from '@deepseek-ai/schemastery'
+
+export const name = 'account-identity-fallback'
+export const inject = ['deepseekAccount']
+
+/**
+ * Identity fields exposed by the Plugins configuration page. These are volatile
+ * fields: the settings service projects them into a form, and a volatile-only
+ * edit is committed into the running plugin without restarting it.
+ */
+export const Config = Schema.object({
+  name: Schema.string()
+    .default('')
+    .volatile()
+    .description('Account name shown in the account menu and Settings. Empty falls back to the last known profile.'),
+  contact: Schema.string()
+    .default('')
+    .description('Advanced (YAML only): contact line shown in Settings → Account under the name.'),
+  avatarUrl: Schema.string()
+    .default('')
+    .volatile()
+    .description('Avatar image URL (https:) or data: URL. Empty falls back to the last known profile.'),
+  id: Schema.string()
+    .default('')
+    .description('Advanced (YAML only): account id used to prefill the Feedback form.'),
+})
+
+const LOG_PREFIX = '[account-identity-fallback]'
+const CACHE_VERSION = 1
+/** Account-service instance marker holding the original profile reader. */
+const ORIGINAL_GET_PROFILE = Symbol.for('@tyapinalexandr/dsh-account-identity-fallback/original-get-profile')
+
+/**
+ * Resolve the Harness data root the same way the harness does: an explicit
+ * `$DSH_HOME` wins, and `~/.dsh` is the default. The cache must live outside
+ * the installed package so reinstalling or upgrading the plugin keeps it.
+ * @returns absolute DSH home directory.
+ */
+function resolveDshHome() {
+  const configured = process.env.DSH_HOME
+  if (typeof configured === 'string' && configured.trim() !== '') return resolve(configured.trim())
+  return join(homedir(), '.dsh')
+}
+
+/** Last-known profile cache under the DSH data root. */
+const CACHE_FILE = join(resolveDshHome(), 'cache', 'account-identity-fallback', 'profile-cache.json')
+
+/** Return a non-empty string, or null. */
+function textOrNull(value) {
+  return typeof value === 'string' && value.length > 0 ? value : null
+}
+
+/**
+ * Project an untrusted profile payload onto the account UI's profile shape.
+ * @param value - value received from the account service.
+ * @returns sanitized profile, or undefined when nothing usable remains.
+ */
+function projectProfile(value) {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) return undefined
+  return {
+    id: textOrNull(value.id),
+    name: textOrNull(value.name),
+    contact: textOrNull(value.contact),
+    avatarUrl: textOrNull(value.avatarUrl),
+  }
+}
+
+/** Whether a profile carries anything the account UI can display. */
+function hasIdentity(profile) {
+  return profile !== undefined
+    && (profile.name !== null || profile.contact !== null || profile.avatarUrl !== null)
+}
+
+/**
+ * Read one volatile configuration reference. Volatile fields arrive as
+ * `Volatile` references whose `get()` returns the value committed by the
+ * loader; reading at call time therefore sees a save made in the UI.
+ * @param value - volatile reference or plain value.
+ * @returns current value.
+ */
+function readVolatile(value) {
+  return value !== null && typeof value === 'object' && typeof value.get === 'function' ? value.get() : value
+}
+
+/**
+ * Build the identity named by the live plugin configuration.
+ * @param config - live row configuration.
+ * @returns configured profile, or undefined when the row names no identity.
+ */
+function configuredProfile(config) {
+  const value = config ?? {}
+  const profile = projectProfile({
+    id: readVolatile(value.id),
+    name: readVolatile(value.name),
+    contact: readVolatile(value.contact),
+    avatarUrl: readVolatile(value.avatarUrl),
+  })
+  return hasIdentity(profile) ? profile : undefined
+}
+
+/**
+ * Merge the configured identity over the last known profile, field by field.
+ * Explicit settings win; an empty field keeps the cached value.
+ * @param configured - identity named by the configuration, if any.
+ * @param cached - last profile read from the Platform, if any.
+ * @returns the identity to serve, or undefined when neither source has one.
+ */
+function mergeProfile(configured, cached) {
+  if (configured === undefined) return cached
+  if (cached === undefined) return configured
+  const merged = {
+    id: configured.id ?? cached.id,
+    name: configured.name ?? cached.name,
+    contact: configured.contact ?? cached.contact,
+    avatarUrl: configured.avatarUrl ?? cached.avatarUrl,
+  }
+  return hasIdentity(merged) ? merged : undefined
+}
+
+/** Read the persisted last-known profile; an absent or corrupt cache is not an error. */
+async function readCachedProfile() {
+  try {
+    const parsed = JSON.parse(await readFile(CACHE_FILE, 'utf8'))
+    if (parsed === null || typeof parsed !== 'object' || parsed.version !== CACHE_VERSION) return undefined
+    return projectProfile(parsed.profile)
+  } catch (error) {
+    if (error?.code !== 'ENOENT') console.error(`${LOG_PREFIX} profile cache read failed`, { code: error?.code })
+    return undefined
+  }
+}
+
+/** Persist the last successful profile for the next blocked read. */
+async function writeCachedProfile(profile) {
+  try {
+    await mkdir(dirname(CACHE_FILE), { recursive: true })
+    const temp = `${CACHE_FILE}.${process.pid}.tmp`
+    await writeFile(temp, JSON.stringify({
+      version: CACHE_VERSION,
+      updatedAt: new Date().toISOString(),
+      profile,
+    }), { encoding: 'utf8', mode: 0o600 })
+    await rename(temp, CACHE_FILE)
+  } catch (error) {
+    console.error(`${LOG_PREFIX} profile cache write failed`, { code: error?.code })
+  }
+}
+
+/**
+ * Install the profile-read adapter.
+ * @param ctx - Host context owning the account service.
+ * @param config - volatile identity configuration; `name`, `contact`, `avatarUrl`, `id`.
+ */
+export function apply(ctx, config) {
+  let cached
+  const cacheReady = readCachedProfile().then((value) => { cached = value })
+  const configuredSignature = () => {
+    const profile = configuredProfile(config)
+    if (profile === undefined) return ''
+    return [profile.name, profile.contact, profile.avatarUrl, profile.id].map((value) => value ?? '').join('\u0000')
+  }
+  const fallback = () => mergeProfile(configuredProfile(config), cached)
+  const nudge = () => {
+    try {
+      if (typeof account.changed === 'function') account.changed()
+    } catch (error) {
+      console.error(`${LOG_PREFIX} account change notification failed`, { code: error?.code })
+    }
+  }
+
+  const account = ctx.deepseekAccount
+  if (typeof account?.getProfile !== 'function') {
+    console.error(`${LOG_PREFIX} deepseekAccount.getProfile is unavailable; fallback was not installed`)
+    return
+  }
+
+  // Keep one true original reader on the service instance. A configuration
+  // change can remount the plugin before the previous instance is disposed;
+  // re-using the marker prevents stacking a patched reader on a patched
+  // reader, which would make a fallback reply look like a real Platform read.
+  const original = account[ORIGINAL_GET_PROFILE] ?? account.getProfile
+  if (account[ORIGINAL_GET_PROFILE] === undefined) {
+    try {
+      Object.defineProperty(account, ORIGINAL_GET_PROFILE, { value: original, configurable: true })
+    } catch (_error) {}
+  }
+  async function getProfile(client) {
+    let result
+    try {
+      result = await original.call(account, client)
+    } catch (error) {
+      console.error(`${LOG_PREFIX} profile read threw`, { code: error?.code })
+      result = undefined
+    }
+
+    if (result !== null && typeof result === 'object' && result.status === 'ready') {
+      const profile = projectProfile(result.value)
+      if (profile !== undefined) {
+        cached = profile
+        void writeCachedProfile(profile)
+      }
+      return result
+    }
+
+    // Only a signed-in-but-unreadable profile is replaced; null keeps sign-out.
+    const blocked = result === undefined
+      || (result !== null && typeof result === 'object' && result.status === 'failed')
+    if (blocked) {
+      await cacheReady
+      const profile = fallback()
+      if (profile !== undefined) return { status: 'ready', value: profile }
+    }
+    return result
+  }
+
+  account.getProfile = getProfile
+  ctx.effect(() => () => {
+    if (account.getProfile === getProfile) account.getProfile = original
+  }, 'account-identity-fallback: restore profile read')
+
+  // A configuration save from the Plugins page commits volatile fields in
+  // place and emits `loader/volatile-update`; ask connected account surfaces to
+  // read the profile again so the edited identity appears immediately.
+  ctx.on('loader/volatile-update', nudge)
+
+  // The loader event is the primary signal; the signature watch also covers a
+  // remount race where the save lands between plugin instances.
+  let lastSignature = configuredSignature()
+  const watch = setInterval(() => {
+    const next = configuredSignature()
+    if (next === lastSignature) return
+    lastSignature = next
+    nudge()
+  }, 1000)
+  watch.unref?.()
+  ctx.effect(() => () => clearInterval(watch), 'account-identity-fallback: configuration watch')
+
+  // Nudge connected clients once at load so the restored identity is read now
+  // instead of waiting for the next Settings visit or app restart.
+  setTimeout(nudge, 0)
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Account identity fallback",
+    "description": "Keeps the DeepSeek account name and avatar visible when the Platform profile endpoint is blocked."
+  }
+}

package/locale/ru.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Имя и аватар аккаунта",
+    "description": "Показывает имя и аватар аккаунта DeepSeek, когда платформа не отдаёт профиль."
+  }
+}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@tyapinalexandr/dsh-account-identity-fallback",
+  "version": "0.2.4",
+  "description": "Keeps the DeepSeek account name and avatar visible when the Platform profile endpoint is blocked, with an in-app name/avatar editor",
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "README.md",
+    "icon.svg",
+    "locale/*.json"
+  ],
+  "icon": "./icon.svg",
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "deepseek",
+    "account",
+    "profile",
+    "fallback"
+  ],
+  "author": "tyapinalexandr",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/schemastery": "^3.18.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/schemastery": "^3.18.0"
+  },
+  "engines": {
+    "dsh": ">=0.2.1-rc.5 <0.3.0"
+  }
+}