beauticode-dsh 1.0.2 → 1.0.4

package/control-client.mjs

@@ -90,6 +90,47 @@ export function isPidAlive(pid) {
   }
 }
 
+let livenessModulePromise;
+
+function loadCoreLiveness() {
+  if (!livenessModulePromise) {
+    livenessModulePromise = (async () => {
+      const candidates = [
+        "@beauticode/core",
+        new URL("./vendor/core/index.js", import.meta.url).href,
+        new URL("../../packages/core/dist/index.js", import.meta.url).href,
+      ];
+      for (const specifier of candidates) {
+        try {
+          const mod = await import(specifier);
+          if (typeof mod.isRecordedPidLive === "function") return mod;
+        } catch {
+          /* try the next resolution path */
+        }
+      }
+      return null;
+    })();
+  }
+  return livenessModulePromise;
+}
+
+async function isLiveRecordedPid(pid, startedAt, mtimeMs) {
+  if (!isPidAlive(pid)) return false;
+  const recorded =
+    typeof startedAt === "string" && startedAt
+      ? startedAt
+      : Number.isFinite(mtimeMs)
+        ? new Date(mtimeMs).toISOString()
+        : null;
+  try {
+    const core = await loadCoreLiveness();
+    if (core) return await core.isRecordedPidLive(pid, recorded);
+  } catch {
+    /* fall back to the cheap PID check */
+  }
+  return true;
+}
+
 export function stripPathQuotes(value) {
   const text = String(value ?? "").trim();
   if (text.length >= 2) {
@@ -195,6 +236,7 @@ export async function writeDshControlFile(opts) {
     pid,
     url: new URL(url).origin,
     token,
+    startedAt: new Date().toISOString(),
   });
 }
 
@@ -219,6 +261,7 @@ export async function writeSessionHostFile(opts) {
     pid,
     url: new URL(url).origin,
     token,
+    startedAt: new Date().toISOString(),
   });
 }
 
@@ -253,8 +296,11 @@ export async function removeDshControlFile(opts) {
 export async function readDshControlFile(dataRoot, opts = {}) {
   const file = controlFilePath(dataRoot);
   let raw;
+  let mtimeMs = 0;
   try {
-    raw = await fs.readFile(file, "utf8");
+    const [text, stat] = await Promise.all([fs.readFile(file, "utf8"), fs.stat(file)]);
+    raw = text;
+    mtimeMs = stat.mtimeMs;
   } catch (error) {
     if (error && typeof error === "object" && error.code === "ENOENT") return null;
     throw error;
@@ -277,13 +323,19 @@ export async function readDshControlFile(dataRoot, opts = {}) {
   ) {
     return null;
   }
-  if (!opts.allowDead && !isPidAlive(parsed.pid)) return null;
+  if (
+    !opts.allowDead &&
+    !(await isLiveRecordedPid(parsed.pid, parsed.startedAt, mtimeMs))
+  ) {
+    return null;
+  }
   return {
     schema: CONTROL_SCHEMA,
     host: "dsh",
     pid: parsed.pid,
     url: new URL(parsed.url).origin,
     token: parsed.token,
+    startedAt: typeof parsed.startedAt === "string" ? parsed.startedAt : null,
   };
 }
 
@@ -305,8 +357,11 @@ export async function removeSessionHostFile(opts) {
 export async function readSessionHostFile(dataRoot, opts = {}) {
   const file = sessionHostFilePath(dataRoot);
   let raw;
+  let mtimeMs = 0;
   try {
-    raw = await fs.readFile(file, "utf8");
+    const [text, stat] = await Promise.all([fs.readFile(file, "utf8"), fs.stat(file)]);
+    raw = text;
+    mtimeMs = stat.mtimeMs;
   } catch (error) {
     if (error && typeof error === "object" && error.code === "ENOENT") return null;
     throw error;
@@ -329,21 +384,30 @@ export async function readSessionHostFile(dataRoot, opts = {}) {
   ) {
     return null;
   }
-  if (!opts.allowDead && !isPidAlive(parsed.pid)) return null;
+  if (
+    !opts.allowDead &&
+    !(await isLiveRecordedPid(parsed.pid, parsed.startedAt, mtimeMs))
+  ) {
+    return null;
+  }
   return {
     schema: SESSION_HOST_SCHEMA,
     host: parsed.host,
     pid: parsed.pid,
     url: new URL(parsed.url).origin,
     token: parsed.token,
+    startedAt: typeof parsed.startedAt === "string" ? parsed.startedAt : null,
   };
 }
 
 export async function readTrayClaim(dataRoot, opts = {}) {
   const file = trayClaimFilePath(dataRoot);
   let raw;
+  let mtimeMs = 0;
   try {
-    raw = await fs.readFile(file, "utf8");
+    const [text, stat] = await Promise.all([fs.readFile(file, "utf8"), fs.stat(file)]);
+    raw = text;
+    mtimeMs = stat.mtimeMs;
   } catch (error) {
     if (error && typeof error === "object" && error.code === "ENOENT") return null;
     throw error;
@@ -362,7 +426,12 @@ export async function readTrayClaim(dataRoot, opts = {}) {
   ) {
     return null;
   }
-  if (!opts.allowDead && !isPidAlive(parsed.pid)) return null;
+  if (
+    !opts.allowDead &&
+    !(await isLiveRecordedPid(parsed.pid, parsed.startedAt, mtimeMs))
+  ) {
+    return null;
+  }
   return {
     schema: TRAY_CLAIM_SCHEMA,
     pid: parsed.pid,

package/cordis.patch.yml

@@ -1,4 +1,4 @@
 - insert:
     - id: beauticode-bridge
-      name: 'beauticode-dsh'
+      name: beauticode-dsh
       inject: [webServer]

package/gallery-host.mjs

@@ -0,0 +1,253 @@
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import crypto from "node:crypto";
+import { Readable } from "node:stream";
+import { Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { fileURLToPath } from "node:url";
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+const SKIN_ID = /^skin-[a-z0-9]{8,40}$/;
+const MAX_IMAGE_BYTES = 18 * 1024 * 1024;
+const MAX_VIDEO_BYTES = 800 * 1024 * 1024;
+const INSTALL_TIMEOUT_MS = 30 * 60 * 1000;
+const LOOPBACK = new Set(["127.0.0.1", "localhost", "::1"]);
+
+export function isSafeSkinId(id) {
+  return typeof id === "string" && SKIN_ID.test(id);
+}
+
+export function normalizeSkinCenterUrl(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  if (!trimmed) return null;
+  try {
+    const url = new URL(trimmed);
+    if (url.username || url.password || url.hash) return null;
+    if (url.protocol !== "https:" && url.protocol !== "http:") return null;
+    if (url.protocol === "http:" && !LOOPBACK.has(url.hostname.toLowerCase())) return null;
+    const pathname = url.pathname === "/" ? "" : url.pathname.replace(/\/+$/, "");
+    return `${url.origin}${pathname}`;
+  } catch {
+    return null;
+  }
+}
+
+export async function readBundledSkinCenterUrl() {
+  try {
+    const raw = JSON.parse(await fsp.readFile(path.join(here, "skin-center.json"), "utf8"));
+    return normalizeSkinCenterUrl(raw.url);
+  } catch {
+    return null;
+  }
+}
+
+export async function resolveConfiguredSkinCenterUrl() {
+  return (
+    normalizeSkinCenterUrl(process.env.BEAUTICODE_SKIN_CENTER) ??
+    (await readBundledSkinCenterUrl())
+  );
+}
+
+export function skinUrl(center, id, part = "") {
+  const origin = normalizeSkinCenterUrl(center);
+  if (!origin || !isSafeSkinId(id)) {
+    throw new Error("Skin center is not configured.");
+  }
+  return part ? `${origin}/api/skins/${id}/${part}` : `${origin}/api/skins/${id}`;
+}
+
+export async function downloadToFile(url, dest, { maxBytes, expectedOrigin, onProgress } = {}) {
+  const expected = new URL(url);
+  if (expectedOrigin && expected.origin !== expectedOrigin) {
+    throw new Error("Skin media download host mismatch.");
+  }
+  const response = await fetch(url, { redirect: "follow" });
+  if (!response.ok || !response.body) {
+    throw new Error("Skin media download failed.");
+  }
+  const finalUrl = new URL(response.url);
+  if (finalUrl.origin !== expected.origin) {
+    throw new Error("Skin media download host mismatch.");
+  }
+  const length = Number(response.headers.get("content-length"));
+  if (Number.isFinite(length) && length > maxBytes) {
+    throw new Error("Skin media download exceeded the size limit.");
+  }
+  await fsp.mkdir(path.dirname(dest), { recursive: true });
+  let size = 0;
+  const limiter = new Transform({
+    transform(chunk, _enc, callback) {
+      size += chunk.length;
+      if (size > maxBytes) {
+        callback(new Error("Skin media download exceeded the size limit."));
+        return;
+      }
+      onProgress?.(size, Number.isFinite(length) ? length : 0);
+      callback(null, chunk);
+    },
+  });
+  await pipeline(Readable.fromWeb(response.body), limiter, fs.createWriteStream(dest));
+  return { bytes: size };
+}
+
+function extensionOf(url, fallback) {
+  try {
+    const ext = path.extname(new URL(url).pathname).toLowerCase();
+    if (ext) return ext;
+  } catch {
+    /* use fallback */
+  }
+  return fallback;
+}
+
+export function createGalleryHandlers({ dataRoot, actions }) {
+  async function importTheme(input) {
+    if (typeof actions.importTheme === "function") {
+      return actions.importTheme(input);
+    }
+    throw new Error("当前引擎不支持导入皮肤。");
+  }
+
+  return {
+    async config(req, res, sendJson, isSameOrigin) {
+      if (req.method !== "GET") {
+        res.writeHead(405).end();
+        return;
+      }
+      if (!isSameOrigin(req)) {
+        res.writeHead(403).end();
+        return;
+      }
+      const url = await resolveConfiguredSkinCenterUrl();
+      sendJson(res, 200, { ok: true, url, enabled: Boolean(url) });
+    },
+
+    async catalog(req, res, sendJson, isSameOrigin) {
+      if (req.method !== "GET") {
+        res.writeHead(405).end();
+        return;
+      }
+      if (!isSameOrigin(req)) {
+        res.writeHead(403).end();
+        return;
+      }
+      const center = await resolveConfiguredSkinCenterUrl();
+      if (!center) {
+        sendJson(res, 200, {
+          ok: false,
+          error: "尚未配置皮肤中心地址。",
+          skins: [],
+        });
+        return;
+      }
+      const incoming = new URL(req.url || "/", "http://127.0.0.1");
+      const target = new URL("/api/catalog", `${center}/`);
+      target.search = incoming.search;
+      const response = await fetch(target, { headers: { accept: "application/json" } });
+      const body = await response.json().catch(() => null);
+      if (!response.ok || !body || body.ok === false) {
+        sendJson(res, 422, {
+          ok: false,
+          error: body?.error || "无法读取皮肤目录。",
+          skins: [],
+        });
+        return;
+      }
+      sendJson(res, 200, {
+        ok: true,
+        skins: Array.isArray(body.skins) ? body.skins : [],
+        nextCursor: body.nextCursor ?? null,
+        url: center,
+      });
+    },
+
+    async install(req, res, sendJson, isSameOrigin, readJson) {
+      if (req.method !== "POST") {
+        res.writeHead(405).end();
+        return;
+      }
+      if (!isSameOrigin(req)) {
+        res.writeHead(403).end();
+        return;
+      }
+      const body = await readJson(req);
+      const id = String(body.id ?? "").trim();
+      if (!isSafeSkinId(id)) {
+        sendJson(res, 400, { ok: false, error: "皮肤 ID 无效。" });
+        return;
+      }
+      const center = await resolveConfiguredSkinCenterUrl();
+      if (!center) {
+        sendJson(res, 422, { ok: false, error: "尚未配置皮肤中心地址。" });
+        return;
+      }
+      const origin = new URL(center).origin;
+      res.writeHead(200, {
+        "content-type": "application/x-ndjson; charset=utf-8",
+        "cache-control": "no-store",
+      });
+      const write = (payload) => {
+        if (!res.writableEnded) res.write(`${JSON.stringify(payload)}\n`);
+      };
+      const tmpDir = path.join(dataRoot, "tmp", "gallery", `${Date.now()}-${crypto.randomBytes(4).toString("hex")}`);
+      try {
+        write({ phase: "fetch" });
+        const metaRes = await fetch(skinUrl(center, id), { headers: { accept: "application/json" } });
+        const meta = await metaRes.json().catch(() => null);
+        const skin = meta?.skin;
+        if (!metaRes.ok || !skin || skin.status && skin.status !== "approved") {
+          throw new Error("Skin is not available for download.");
+        }
+        await fsp.mkdir(tmpDir, { recursive: true });
+        const imageUrl = skinUrl(center, id, "image");
+        const imagePath = path.join(tmpDir, `image${extensionOf(imageUrl, ".png")}`);
+        write({ phase: "download", part: "image" });
+        await downloadToFile(imageUrl, imagePath, {
+          maxBytes: MAX_IMAGE_BYTES,
+          expectedOrigin: origin,
+          onProgress: (done, total) => write({ phase: "download", part: "image", done, total }),
+        });
+        let videoPath;
+        if (skin.type === "video") {
+          const videoUrl = skinUrl(center, id, "video");
+          videoPath = path.join(tmpDir, "background.mp4");
+          write({ phase: "download", part: "video" });
+          await downloadToFile(videoUrl, videoPath, {
+            maxBytes: MAX_VIDEO_BYTES,
+            expectedOrigin: origin,
+            onProgress: (done, total) => write({ phase: "download", part: "video", done, total }),
+          });
+        }
+        write({ phase: "import" });
+        const imported = await importTheme({
+          name: String(skin.name || id).slice(0, 80),
+          imagePath,
+          ...(videoPath ? { videoPath } : {}),
+          ...(skin.effects ? { effects: skin.effects } : {}),
+          source: { kind: "skin-center", skinId: id, centerUrl: center },
+        });
+        write({ phase: "apply" });
+        const applied = await actions.useTheme(imported.theme?.id || imported.id, undefined);
+        fetch(skinUrl(center, id, "download"), { method: "POST" }).catch(() => {});
+        write({
+          ok: true,
+          phase: "done",
+          theme: imported.theme || imported,
+          message: applied.message || `已安装并应用「${skin.name}」。`,
+        });
+      } catch (error) {
+        write({
+          ok: false,
+          error: error instanceof Error ? error.message : String(error),
+        });
+      } finally {
+        await fsp.rm(tmpDir, { recursive: true, force: true }).catch(() => {});
+        res.end();
+      }
+    },
+  };
+}
+
+export const GALLERY_INSTALL_TIMEOUT_MS = INSTALL_TIMEOUT_MS;

package/gallery.js

@@ -0,0 +1,178 @@
+(() => {
+  "use strict";
+  if (window.__beauticodeGalleryLoaded) return;
+  window.__beauticodeGalleryLoaded = true;
+
+  const style = document.createElement("style");
+  style.textContent = `
+#beauticode-gallery{position:fixed;inset:0;z-index:3000;display:flex;align-items:center;justify-content:center;background:rgba(11,13,18,.62)}
+#beauticode-gallery[hidden]{display:none}
+#beauticode-gallery .bcg-panel{width:min(880px,calc(100vw - 32px));height:min(640px,calc(100vh - 32px));display:flex;flex-direction:column;border:1px solid rgba(255,255,255,.08);border-radius:18px;background:#2c323c;color:#e8eaed;box-shadow:0 16px 48px rgba(0,0,0,.4);overflow:hidden}
+body:not([data-ds-dark-theme]) #beauticode-gallery .bcg-panel{background:#fff;color:#1b1f24;border-color:rgba(0,0,0,.08)}
+#beauticode-gallery .bcg-head{display:flex;align-items:center;gap:10px;padding:12px 14px;border-bottom:1px solid rgba(255,255,255,.08)}
+#beauticode-gallery .bcg-head h2{margin:0;font-size:15px;font-weight:600}
+#beauticode-gallery .bcg-head input,#beauticode-gallery .bcg-head select{height:32px;border:1px solid rgba(255,255,255,.1);border-radius:10px;background:rgba(255,255,255,.06);color:inherit;padding:0 8px}
+#beauticode-gallery .bcg-grid{flex:1;overflow:auto;padding:12px;display:grid;grid-template-columns:repeat(auto-fill,minmax(180px,1fr));gap:10px;align-content:start}
+#beauticode-gallery .bcg-card{display:block;border:none;padding:0;border-radius:12px;overflow:hidden;background:#232830;color:inherit;text-align:left;cursor:pointer}
+#beauticode-gallery .bcg-card img{width:100%;aspect-ratio:16/10;object-fit:cover;display:block;background:#111}
+#beauticode-gallery .bcg-card span{display:block;padding:8px 10px;font-size:13px}
+#beauticode-gallery .bcg-msg,#beauticode-gallery .bcg-foot{padding:0 14px 12px;color:#9aa3ad;font-size:12px}
+#beauticode-gallery .bcg-close{margin-left:auto}
+#beauticode-gallery .bcg-btn{height:32px;padding:0 10px;border:1px solid rgba(255,255,255,.1);border-radius:10px;background:rgba(255,255,255,.06);color:inherit;cursor:pointer}
+#beauticode-gallery .bcg-btn.primary{background:#4d6bfe;border-color:transparent}
+  `;
+  document.head.append(style);
+
+  const host = document.createElement("div");
+  host.id = "beauticode-gallery";
+  host.hidden = true;
+  host.innerHTML =
+    '<div class="bcg-panel" role="dialog" aria-modal="true" aria-labelledby="bcg-title">' +
+    '<div class="bcg-head">' +
+    '<h2 id="bcg-title">皮肤中心</h2>' +
+    '<input class="bcg-q" placeholder="搜索" />' +
+    '<select class="bcg-type"><option value="">全部</option><option value="image">图片</option><option value="video">视频</option></select>' +
+    '<button type="button" class="bcg-btn bcg-close">关闭</button>' +
+    "</div>" +
+    '<div class="bcg-grid"></div>' +
+    '<p class="bcg-msg"></p>' +
+    '<p class="bcg-foot"></p>' +
+    "</div>";
+  document.body.append(host);
+
+  const grid = host.querySelector(".bcg-grid");
+  const msg = host.querySelector(".bcg-msg");
+  const foot = host.querySelector(".bcg-foot");
+  const queryInput = host.querySelector(".bcg-q");
+  const typeSelect = host.querySelector(".bcg-type");
+  let centerUrl = "";
+  let busy = false;
+
+  function escapeText(value) {
+    return String(value ?? "")
+      .replaceAll("&", "&amp;")
+      .replaceAll("<", "&lt;")
+      .replaceAll(">", "&gt;");
+  }
+
+  async function request(path, init) {
+    const response = await fetch(path, init);
+    if ((response.headers.get("content-type") || "").includes("ndjson")) {
+      return readNdjson(response);
+    }
+    const body = await response.json().catch(() => null);
+    if (!response.ok || body?.ok === false) {
+      throw new Error(body?.error || `请求失败（${response.status}）`);
+    }
+    return body;
+  }
+
+  async function readNdjson(response) {
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let last = null;
+    while (true) {
+      const { value, done } = await reader.read();
+      buffer += decoder.decode(value || new Uint8Array(), { stream: !done });
+      const lines = buffer.split("\n");
+      buffer = lines.pop() || "";
+      for (const line of lines) {
+        if (!line.trim()) continue;
+        last = JSON.parse(line);
+        if (last.phase === "download" && last.total) {
+          const pct = Math.round((last.done / last.total) * 100);
+          msg.textContent = `正在下载${last.part === "video" ? "视频" : "图片"} ${pct}%`;
+        } else if (last.phase === "import") {
+          msg.textContent = "正在写入本机主题…";
+        } else if (last.phase === "apply") {
+          msg.textContent = "正在应用到当前窗口…";
+        }
+        if (last.ok === false) throw new Error(last.error || "安装失败。");
+      }
+      if (done) break;
+    }
+    if (last?.ok) return last;
+    throw new Error(last?.error || "安装失败。");
+  }
+
+  async function load() {
+    msg.textContent = "正在读取目录…";
+    const params = new URLSearchParams();
+    if (queryInput.value.trim()) params.set("q", queryInput.value.trim());
+    if (typeSelect.value) params.set("type", typeSelect.value);
+    const data = await request(`/__beauticode/ui/gallery/catalog?${params}`);
+    centerUrl = data.url || centerUrl;
+    grid.innerHTML = (data.skins || [])
+      .map(
+        (skin) =>
+          `<button type="button" class="bcg-card" data-id="${escapeText(skin.id)}">` +
+          `<img alt="" src="${escapeText(centerUrl)}/api/skins/${escapeText(skin.id)}/card">` +
+          `<span>${escapeText(skin.name)}${skin.type === "video" ? " · 视频" : ""}</span></button>`,
+      )
+      .join("");
+    msg.textContent = data.skins?.length ? "" : "目录是空的。";
+    foot.innerHTML = centerUrl
+      ? `上传与审核在 <a href="${escapeText(centerUrl)}" target="_blank" rel="noreferrer">皮肤中心网站</a>。安装会下载到本机后再应用。`
+      : "未配置皮肤中心地址。在插件的 skin-center.json 或环境变量 BEAUTICODE_SKIN_CENTER 里填入你的域名。";
+  }
+
+  async function open() {
+    host.hidden = false;
+    const config = await request("/__beauticode/ui/gallery/config");
+    centerUrl = config.url || "";
+    if (!config.enabled) {
+      grid.innerHTML = "";
+      msg.textContent = "尚未配置皮肤中心地址。";
+      foot.textContent = "设置 BEAUTICODE_SKIN_CENTER，或在 skin-center.json 填写站点 URL。";
+      return;
+    }
+    await load();
+  }
+
+  function close() {
+    host.hidden = true;
+  }
+
+  host.querySelector(".bcg-close").addEventListener("click", close);
+  host.addEventListener("click", (event) => {
+    if (event.target === host) close();
+  });
+  queryInput.addEventListener("keydown", (event) => {
+    if (event.key === "Enter") {
+      event.preventDefault();
+      void load();
+    }
+  });
+  typeSelect.addEventListener("change", () => void load());
+  grid.addEventListener("click", (event) => {
+    const card = event.target.closest("[data-id]");
+    if (!card || busy) return;
+    const id = card.getAttribute("data-id");
+    busy = true;
+    msg.textContent = "开始安装…";
+    request("/__beauticode/ui/gallery/install", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ id }),
+    })
+      .then((result) => {
+        msg.textContent = result.message || "已安装。";
+        document.dispatchEvent(new CustomEvent("beauticode-gallery-installed"));
+      })
+      .catch((error) => {
+        msg.textContent = error instanceof Error ? error.message : String(error);
+      })
+      .finally(() => {
+        busy = false;
+      });
+  });
+  document.addEventListener("keydown", (event) => {
+    if (event.key === "Escape" && !host.hidden) {
+      event.stopPropagation();
+      close();
+    }
+  });
+
+  window.BeauticodeGallery = { open, close };
+})();

package/index.mjs

@@ -215,7 +215,8 @@ export function apply(ctx, config = {}) {
       const script =
         '<script defer src="/__beauticode/atmosphere.js"></script>' +
         '<script defer src="/__beauticode/client.js" data-beauticode-bridge></script>' +
-        '<script defer src="/__beauticode/console.js"></script>';
+        '<script defer src="/__beauticode/console.js"></script>' +
+        '<script defer src="/__beauticode/gallery.js"></script>';
       return html.includes("</body>")
         ? html.replace("</body>", `${script}</body>`)
         : `${html}${script}`;
@@ -316,6 +317,23 @@ export function apply(ctx, config = {}) {
           res.end(req.method === "HEAD" ? undefined : source);
         },
       }),
+      ctx.webServer.register({
+        kind: "exact",
+        path: "/__beauticode/gallery.js",
+        handler: async (req, res) => {
+          if (req.method !== "GET" && req.method !== "HEAD") {
+            res.writeHead(405).end();
+            return;
+          }
+          const source = await fs.readFile(path.join(here, "gallery.js"));
+          res.writeHead(200, {
+            "content-type": "text/javascript; charset=utf-8",
+            "cache-control": "no-store",
+            "content-length": source.length,
+          });
+          res.end(req.method === "HEAD" ? undefined : source);
+        },
+      }),
       ctx.webServer.register({
         kind: "exact",
         path: "/__beauticode/console.js",
@@ -363,6 +381,21 @@ export function apply(ctx, config = {}) {
         path: "/__beauticode/ui/preset",
         handler: (req, res) => ui.applyPreset(req, res),
       }),
+      ctx.webServer.register({
+        kind: "exact",
+        path: "/__beauticode/ui/gallery/config",
+        handler: (req, res) => ui.galleryConfig(req, res),
+      }),
+      ctx.webServer.register({
+        kind: "exact",
+        path: "/__beauticode/ui/gallery/catalog",
+        handler: (req, res) => ui.galleryCatalog(req, res),
+      }),
+      ctx.webServer.register({
+        kind: "exact",
+        path: "/__beauticode/ui/gallery/install",
+        handler: (req, res) => ui.galleryInstall(req, res),
+      }),
       ctx.webServer.register({
         kind: "exact",
         path: "/__beauticode/events",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "beauticode-dsh",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Cordis plugin: image/video backgrounds for DeepSeek Harness web.",
   "type": "module",
   "main": "./index.mjs",
@@ -16,6 +16,9 @@
     "index.mjs",
     "client.js",
     "console.js",
+    "gallery.js",
+    "gallery-host.mjs",
+    "skin-center.json",
     "atmosphere.js",
     "presets.mjs",
     "agent.mjs",

package/skin-center.json

@@ -0,0 +1,3 @@
+{
+  "url": "https://hnnulwh.cn"
+}