deck-plugin-sdk 1.7.0 → 1.8.0

package/README.md

@@ -36,6 +36,7 @@ an optimisation but a requirement: two Reacts in one tree break hooks.
 | `deck-plugin dev` | rebuild whenever a source changes, and install each build into the test Deck |
 | `deck-plugin check` | validate `plugin.json` without building |
 | `deck-plugin install` | build once, then install into your real Deck |
+| `deck-plugin publish` | check everything Deck's registry checks, then tag, release on GitHub and submit it (`--dry-run`: only check); see [Publishing](../docs/guide/publishing.md) |
 
 `--target test` or `--target main` picks the other Deck for either command. The test Deck keeps
 its plugins in `%APPDATA%\Deck-Dev\plugins`, your real Deck in `%APPDATA%\Deck\plugins`.

package/bin/deck-plugin.mjs

@@ -1,10 +1,12 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 // The Deck plugin CLI.
 //
 //   deck-plugin build          bundle src/ into plugin.js
 //   deck-plugin dev            rebuild whenever a source changes, into the test Deck each time
 //   deck-plugin check          validate plugin.json without building
 //   deck-plugin install        build once and copy into your Deck
+//   deck-plugin publish        check, tag, release on GitHub, and submit to Deck's registry
+//                              (--dry-run: only check; see ../publish.mjs)
 //
 //   --target test|main         which Deck dev and install write to (defaults: dev -> test, install -> main)
 //
@@ -13,6 +15,7 @@ import { watch } from "node:fs";
 import { cpSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { buildPlugin } from "../build-plugin.mjs";
+import { publish } from "../publish.mjs";
 
 const argv = process.argv.slice(2);
 const at = argv.indexOf("--target");
@@ -104,6 +107,12 @@ switch (cmd) {
     break;
   }
 
+  case "publish": {
+    const manifest = check();
+    await publish(dir, manifest, { dryRun: argv.includes("--dry-run"), buildPlugin });
+    break;
+  }
+
   case "install": {
     const manifest = check();
     await buildPlugin(dir);

package/package.json

@@ -1,57 +1,60 @@
-{
-  "name": "deck-plugin-sdk",
-  "version": "1.7.0",
-  "description": "Build a plugin for Deck, outside the Deck repository.",
-  "type": "module",
-  "license": "MIT",
-  "bin": {
-    "deck-plugin": "bin/deck-plugin.mjs"
-  },
-  "exports": {
-    "./build": "./build-plugin.mjs",
-    "./*": {
-      "types": "./shim/*.d.ts",
-      "default": "./shim/*.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "bin",
-    "shim",
-    "types",
-    "template",
-    "build-plugin.mjs",
-    "packages.mjs",
-    "README.md"
-  ],
-  "dependencies": {
-    "esbuild": "^0.28.0"
-  },
-  "peerDependencies": {
-    "@types/react": "^19.0.0",
-    "framer-motion": "^13.0.0",
-    "lucide-react": "^1.0.0",
-    "monaco-editor": "^0.56.0",
-    "react": "^19.0.0",
-    "typescript": "^5.0.0"
-  },
-  "peerDependenciesMeta": {
-    "framer-motion": {
-      "optional": true
-    },
-    "monaco-editor": {
-      "optional": true
-    },
-    "typescript": {
-      "optional": true
-    }
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "keywords": [
-    "deck",
-    "plugin",
-    "sdk"
-  ]
-}
+{
+  "name": "deck-plugin-sdk",
+  "version": "1.8.0",
+  "description": "Build a plugin for Deck, outside the Deck repository.",
+  "type": "module",
+  "license": "MIT",
+  "bin": {
+    "deck-plugin": "bin/deck-plugin.mjs"
+  },
+  "exports": {
+    "./build": "./build-plugin.mjs",
+    "./*": {
+      "types": "./shim/*.d.ts",
+      "default": "./shim/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "bin",
+    "shim",
+    "types",
+    "template",
+    "build-plugin.mjs",
+    "packages.mjs",
+    "README.md",
+    "permissions.json",
+    "publish.mjs",
+    "validate.mjs"
+  ],
+  "dependencies": {
+    "esbuild": "^0.28.0"
+  },
+  "peerDependencies": {
+    "@types/react": "^19.0.0",
+    "framer-motion": "^13.0.0",
+    "lucide-react": "^1.0.0",
+    "monaco-editor": "^0.56.0",
+    "react": "^19.0.0",
+    "typescript": "^5.0.0"
+  },
+  "peerDependenciesMeta": {
+    "framer-motion": {
+      "optional": true
+    },
+    "monaco-editor": {
+      "optional": true
+    },
+    "typescript": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "deck",
+    "plugin",
+    "sdk"
+  ]
+}

package/permissions.json

@@ -0,0 +1,230 @@
+{
+  "generated": "by sdk/gen-permissions.mjs from src/core/permissions.ts; do not edit",
+  "permissions": {
+    "files": "Read and change files anywhere on this PC",
+    "processes": "Run programs and commands",
+    "git": "Read and change git repositories, and push",
+    "network": "Connect to servers: web requests, SSH, databases and other Decks",
+    "terminals": "Use your terminals and the AI agents running in them",
+    "browser": "Control Deck's browser and the pages open in it",
+    "secrets": "Use your saved passwords, your Google account and sudo passwords",
+    "system": "Change this PC's apps, startup programs, wallpaper and running processes",
+    "deck": "Change Deck itself: its settings, backups, plugins and languages"
+  },
+  "bridge": {
+    "adblockConfig": "browser",
+    "adblockInfo": "browser",
+    "adblockRebuild": "browser",
+    "adblockUpdate": "browser",
+    "agentClis": "terminals",
+    "agentMcpStatus": "terminals",
+    "agentStop": "terminals",
+    "askSudoPassword": "secrets",
+    "backupExport": "deck",
+    "backupInspect": "deck",
+    "backupRestore": "deck",
+    "bookmarksBarMode": "browser",
+    "browserAgentAnswer": "browser",
+    "browserAgentConfig": "browser",
+    "browserAgentFillAnswer": "browser",
+    "browserBounds": "browser",
+    "browserCapture": "browser",
+    "browserCdp": "browser",
+    "browserClear": "browser",
+    "browserClose": "browser",
+    "browserDefaultRegister": "browser",
+    "browserDefaultStatus": "browser",
+    "browserDevtools": "browser",
+    "browserDownload": "browser",
+    "browserFind": "browser",
+    "browserHistoryCount": "browser",
+    "browserHistoryForgetRange": "browser",
+    "browserHistoryForgetUrl": "browser",
+    "browserHistoryList": "browser",
+    "browserHistoryRecent": "browser",
+    "browserHistorySuggest": "browser",
+    "browserHistoryVisit": "browser",
+    "browserMute": "browser",
+    "browserNav": "browser",
+    "browserNotificationClicked": "browser",
+    "browserOpen": "browser",
+    "browserOpenAppLink": "browser",
+    "browserPermissionAnswer": "browser",
+    "browserPermissions": "browser",
+    "browserPermissionSet": "browser",
+    "browserPrint": "browser",
+    "browserPrivacy": "browser",
+    "browserReloadHung": "browser",
+    "browserSetKeys": "browser",
+    "browserSite": "browser",
+    "browserSiteAnswer": "browser",
+    "browserSiteClear": "browser",
+    "browserSleep": "browser",
+    "browserWindowFullscreen": "browser",
+    "browserZoom": "browser",
+    "claudePlanLimits": "terminals",
+    "claudeUsage": "terminals",
+    "clearWallpaper": "system",
+    "convertFileSrc": "files",
+    "dbConnect": "network",
+    "dbDisconnect": "network",
+    "dbQuery": "network",
+    "dbSchema": "network",
+    "deleteIconPack": "deck",
+    "exec": "processes",
+    "extensionInstallFolder": "browser",
+    "extensionInstallStore": "browser",
+    "extensionPopup": "browser",
+    "extensionPopupClose": "browser",
+    "extensionReload": "browser",
+    "extensionRemove": "browser",
+    "extensionSetEnabled": "browser",
+    "extensionsList": "browser",
+    "fsCopy": "files",
+    "fsCreateDir": "files",
+    "fsCreateFile": "files",
+    "fsDelete": "files",
+    "fsDrives": "files",
+    "fsFiles": "files",
+    "fsFind": "files",
+    "fsHash": "files",
+    "fsList": "files",
+    "fsMove": "files",
+    "fsOpen": "files",
+    "fsRead": "files",
+    "fsReadBytes": "files",
+    "fsRename": "files",
+    "fsReplace": "files",
+    "fsReveal": "files",
+    "fsSaveUnique": "files",
+    "fsSearch": "files",
+    "fsSize": "files",
+    "fsThumbnail": "files",
+    "fsTrash": "files",
+    "fsWrite": "files",
+    "fsWriteBytes": "files",
+    "ghPrLineComment": "network",
+    "ghPrThreads": "network",
+    "ghRun": "processes",
+    "ghThreadReply": "network",
+    "ghThreadResolve": "network",
+    "gitAiCommitMsg": "git",
+    "gitBlameLine": "git",
+    "gitCheckout": "git",
+    "gitCheckoutDetach": "git",
+    "gitCheckoutNew": "git",
+    "gitCheckoutTrack": "git",
+    "gitCommitFiles": "git",
+    "gitDiscard": "git",
+    "gitFileBytes": "git",
+    "gitFileDiff": "git",
+    "gitInfo": "git",
+    "gitLogGraph": "git",
+    "gitPoll": "git",
+    "gitRangeFiles": "git",
+    "gitRefs": "git",
+    "gitRepos": "git",
+    "gitRun": "git",
+    "gitStatus": "git",
+    "glabApi": "network",
+    "glabRun": "processes",
+    "googleAccount": "secrets",
+    "googleSignIn": "secrets",
+    "googleSignOut": "secrets",
+    "googleToken": "secrets",
+    "httpCancel": "network",
+    "httpSend": "network",
+    "httpSendAs": "network",
+    "httpSendReply": "network",
+    "importIconPack": "deck",
+    "installAgentHooks": "terminals",
+    "installAgentMcp": "terminals",
+    "installAgentSkills": "terminals",
+    "installFromRegistry": "deck",
+    "launchFiles": "files",
+    "listApps": "system",
+    "listInstalled": "system",
+    "logLatest": "deck",
+    "mediaMeta": "files",
+    "memKill": "system",
+    "openFile": "files",
+    "openTestDeck": "deck",
+    "procKill": "processes",
+    "procStream": "processes",
+    "procWrite": "processes",
+    "readIconPackTheme": "deck",
+    "readTermLayout": "terminals",
+    "readTrackMeta": "files",
+    "remoteHome": "network",
+    "remoteStat": "network",
+    "remoteSudoPassword": "secrets",
+    "removeLanguage": "deck",
+    "restartApp": "deck",
+    "runScriptNow": "processes",
+    "sessionList": "terminals",
+    "setAutostart": "system",
+    "setDebugTargets": "processes",
+    "setWallpaper": "system",
+    "sshHosts": "network",
+    "sshTunnelClose": "network",
+    "sshTunnelOpen": "network",
+    "vaultChangePassword": "secrets",
+    "vaultConfig": "secrets",
+    "vaultCreate": "secrets",
+    "vaultDelete": "secrets",
+    "vaultExport": "secrets",
+    "vaultFill": "secrets",
+    "vaultFillNew": "secrets",
+    "vaultGenerate": "secrets",
+    "vaultImport": "secrets",
+    "vaultList": "secrets",
+    "vaultLock": "secrets",
+    "vaultMatches": "secrets",
+    "vaultNeverList": "secrets",
+    "vaultNeverRemove": "secrets",
+    "vaultOfferAnswer": "secrets",
+    "vaultSave": "secrets",
+    "vaultSecret": "secrets",
+    "vaultStatus": "secrets",
+    "vaultTotp": "secrets",
+    "vaultUnlock": "secrets",
+    "vpsRunsPull": "network",
+    "watchFiles": "files"
+  },
+  "modules": {
+    "terminals": "terminals",
+    "p2p": "network"
+  },
+  "free": [
+    "DEFAULT_SETTINGS",
+    "FOOTER_ITEMS",
+    "configDelete",
+    "configRead",
+    "configWrite",
+    "dataDir",
+    "deckReady",
+    "dirsDownload",
+    "footerOrder",
+    "fsHomeDir",
+    "getAutostart",
+    "isFullscreen",
+    "languagesDir",
+    "launchUrls",
+    "mediaSetNowPlaying",
+    "mediaSetPlayback",
+    "memUsage",
+    "notifyOs",
+    "openExternal",
+    "pickAnyFile",
+    "pickExe",
+    "pickFile",
+    "pickFolder",
+    "pickImage",
+    "pickSavePath",
+    "pickScript",
+    "pluginsDir",
+    "revealInFolder",
+    "startupMarks",
+    "toggleFullscreen"
+  ]
+}

package/publish.mjs

@@ -0,0 +1,116 @@
+// `deck-plugin publish`: put this version of a plugin in Deck's registry.
+//
+//   deck-plugin publish --dry-run    check everything, publish nothing
+//   deck-plugin publish              tag, release on GitHub, and open the submission PR
+//
+// Runs on the author's machine the checks the registry runs on its own (validate.mjs, shared),
+// so a submission that would fail fails here, before anything is public:
+//   the manifest, README, LICENSE and package-lock.json; a clean, pushed git tree; a build from
+//   the lockfile exactly as the registry will repeat it (npm ci, then this SDK's build); the
+//   release's files and sizes; and that its permissions cover what the bundle calls.
+// Then it tags v<version>, makes the GitHub release with the built files, and opens a pull
+// request to the registry adding submissions/<id>.json, through the author's fork. The registry's
+// checks run on that PR and merge it when they pass.
+//
+// Needs git and the GitHub CLI (gh), signed in.
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { checkAssets, checkId, checkLockfile, checkManifest, checkPermissions } from "./validate.mjs";
+
+const here = dirname(fileURLToPath(import.meta.url));
+const REGISTRY = "deck-desktop/deck-registry";
+
+/** npm's own entry point, run with node: on Windows npm is npm.cmd, which Node will not execFile. */
+function npmCli() {
+  for (const p of [join(dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js"),
+    join(dirname(process.execPath), "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")]) if (existsSync(p)) return p;
+  return null;
+}
+
+export async function publish(dir, manifest, { dryRun, buildPlugin }) {
+  const run = (cmd, args, opts = {}) => execFileSync(cmd, args, { cwd: dir, stdio: ["ignore", "pipe", "pipe"], ...opts }).toString().trim();
+  const ok = (cmd, args) => { try { run(cmd, args); return true; } catch { return false; } };
+  const errors = [], notes = [];
+  const say = (s) => console.log(s);
+
+  // ---- what is in the folder ----
+  errors.push(...checkId(manifest.id ?? ""), ...checkManifest(manifest));
+  if (!existsSync(join(dir, "README.md"))) errors.push("no README.md: it is the plugin's page in Deck and on the website");
+  if (!["LICENSE", "LICENSE.md", "LICENSE.txt", "COPYING"].some((f) => existsSync(join(dir, f)))) errors.push("no LICENSE: say how others may use it (the scaffold's is MIT)");
+  if (existsSync(join(dir, ".npmrc"))) errors.push("there is an .npmrc: the registry installs from registry.npmjs.org only, so remove it");
+  const lockAt = join(dir, "package-lock.json");
+  if (!existsSync(lockAt)) errors.push("no package-lock.json: commit it, so the registry can repeat the build exactly");
+  else errors.push(...checkLockfile(JSON.parse(readFileSync(lockAt, "utf8"))));
+  const custom = existsSync(join(dir, "deck-plugin.config.mjs"));
+  if (custom) notes.push("It has a deck-plugin.config.mjs, which the build runs, so the registry will not rebuild it to check it: it is listed as build not verified.");
+
+  // ---- git and GitHub ----
+  if (!ok("git", ["rev-parse", "--is-inside-work-tree"])) errors.push("this is not a git repository");
+  let repo = "";
+  try {
+    const url = run("git", ["remote", "get-url", "origin"]);
+    repo = /github\.com[:/]([\w.-]+\/[\w.-]+?)(?:\.git)?$/.exec(url)?.[1] ?? "";
+    if (!repo) errors.push(`origin is ${url}, not a GitHub repository`);
+  } catch { errors.push("there is no origin remote: push it to a public GitHub repository first"); }
+  if (ok("git", ["rev-parse", "HEAD"]) && run("git", ["status", "--porcelain"])) errors.push("there are uncommitted changes: commit them, so the release is what the repository holds");
+  if (!ok("gh", ["auth", "status"])) errors.push("the GitHub CLI is not signed in: run `gh auth login`");
+  const tag = `v${manifest.version}`;
+  if (ok("git", ["rev-parse", "-q", "--verify", `refs/tags/${tag}`])) errors.push(`${tag} is already tagged: bump the version in plugin.json`);
+  if (repo && ok("gh", ["release", "view", tag, "--repo", repo])) errors.push(`${repo} already has a release ${tag}: bump the version in plugin.json`);
+  if (repo && ok("gh", ["api", `repos/${repo}`]) && JSON.parse(run("gh", ["api", `repos/${repo}`])).private) errors.push(`${repo} is private: a package's source has to be public`);
+
+  if (errors.length) {
+    for (const e of errors) console.error(`  ✗ ${e}`);
+    process.exit(1);
+  }
+
+  // ---- the build, exactly as the registry will repeat it ----
+  say("Building from the lockfile, as the registry will…");
+  const npm = npmCli();
+  if (!npm) { console.error("  ✗ npm was not found beside node"); process.exit(1); }
+  run(process.execPath, [npm, "ci", "--ignore-scripts", "--no-audit", "--no-fund"]);
+  await buildPlugin(dir);
+  const files = ["plugin.json", "plugin.js", "mcp.js"].filter((f) => existsSync(join(dir, f)));
+  errors.push(...checkAssets("plugin", files.map((f) => ({ name: f, size: statSync(join(dir, f)).size }))));
+  const table = JSON.parse(readFileSync(join(here, "permissions.json"), "utf8"));
+  const perms = checkPermissions(manifest.permissions, readFileSync(join(dir, "plugin.js"), "utf8"), table);
+  errors.push(...perms.errors);
+  notes.push(...perms.notes);
+  if (errors.length) {
+    for (const e of errors) console.error(`  ✗ ${e}`);
+    process.exit(1);
+  }
+
+  say(`\n${manifest.name} ${manifest.version} is ready: ${files.join(", ")}${manifest.permissions.length ? `; it uses ${manifest.permissions.join(", ")}` : ""}.`);
+  for (const n of notes) say(`  note: ${n}`);
+  if (dryRun) {
+    say(`\nDry run: nothing was tagged, released or submitted. Without --dry-run this tags ${tag}, releases it on ${repo}, and opens a PR to ${REGISTRY}.`);
+    return;
+  }
+
+  // ---- tag, release, submit ----
+  say(`Tagging ${tag} and pushing…`);
+  run("git", ["tag", tag]);
+  run("git", ["push", "-q", "origin", "HEAD", tag]);
+  say(`Releasing ${tag} on ${repo}…`);
+  run("gh", ["release", "create", tag, ...files.map((f) => join(dir, f)), "--repo", repo,
+    "--title", `${manifest.name} ${manifest.version}`, "--notes", `${manifest.name} ${manifest.version}, for Deck ${manifest.minDeck} and later.`]);
+
+  say(`Opening the submission to ${REGISTRY}…`);
+  const me = JSON.parse(run("gh", ["api", "user"])).login;
+  ok("gh", ["repo", "fork", REGISTRY, "--clone=false"]);
+  const fork = `${me}/${REGISTRY.split("/")[1]}`;
+  // The fork may be behind; the submission branch starts from the registry's main as it is now.
+  ok("gh", ["repo", "sync", fork, "--source", REGISTRY]);
+  const sha = JSON.parse(run("gh", ["api", `repos/${fork}/git/ref/heads/main`])).object.sha;
+  const branch = `submit/${manifest.id}-${manifest.version}`;
+  run("gh", ["api", "-X", "POST", `repos/${fork}/git/refs`, "-f", `ref=refs/heads/${branch}`, "-f", `sha=${sha}`]);
+  const body = JSON.stringify({ kind: "plugin", repo, tag }) + "\n";
+  run("gh", ["api", "-X", "PUT", `repos/${fork}/contents/submissions/${manifest.id}.json`,
+    "-f", `message=Submit ${manifest.id} ${tag}`, "-f", `content=${Buffer.from(body).toString("base64")}`, "-f", `branch=${branch}`]);
+  const pr = run("gh", ["pr", "create", "--repo", REGISTRY, "--base", "main", "--head", `${me}:${branch}`,
+    "--title", `Submit ${manifest.id} ${tag}`, "--body", `${manifest.name} ${manifest.version} from ${repo}.\n\nOpened by \`deck-plugin publish\`.`]);
+  say(`\nSubmitted: ${pr}\nThe registry's checks run there and comment what they find; when they pass it is merged and listed.`);
+}

package/shim/bridge.js

@@ -4,8 +4,10 @@
 // evaluated during loadPlugins, and a reference copied out then would capture a half-built
 // object. Functions forward their arguments; plain values are proxied.
 import { pluginId, scoped } from "./scope.js";
+// The plugin's own view (Deck 1.8+), which refuses what its permissions do not cover; an older
+// Deck has only the whole bridge.
 const b = () => {
-  const x = window.__deck?.bridge;
+  const x = window.__deck?.forPlugin?.(pluginId)?.bridge ?? window.__deck?.bridge;
   if (!x) throw new Error("window.__deck.bridge is missing — this plugin only runs inside Deck");
   return x;
 };

package/shim/p2p.js

@@ -1,15 +1,16 @@
-// GENERATED by sdk/gen-shim.mjs — do not edit.
-//
-// Deck's live connections to other Decks. Resolved at USE time like the bridge: a plugin module is evaluated
-// during loadPlugins, and a reference copied out at import time would capture a half-built
-// object. One transport for every plugin, so a fix to it reaches all of them.
-const t = () => {
-  const x = window.__deck?.p2p;
-  if (!x) throw new Error("window.__deck.p2p is missing — this plugin only runs inside Deck");
-  return x;
-};
-
-export const cleanCode = (...a) => t().cleanCode(...a);
-export const newCode = (...a) => t().newCode(...a);
-export const selfId = (...a) => t().selfId(...a);
-export const share = (...a) => t().share(...a);
+// GENERATED by sdk/gen-shim.mjs — do not edit.
+//
+// Deck's live connections to other Decks. Resolved at USE time like the bridge: a plugin module is evaluated
+// during loadPlugins, and a reference copied out at import time would capture a half-built
+// object. One transport for every plugin, so a fix to it reaches all of them.
+import { pluginId } from "./scope.js";
+const t = () => {
+  const x = window.__deck?.forPlugin?.(pluginId)?.p2p ?? window.__deck?.p2p;
+  if (!x) throw new Error("window.__deck.p2p is missing — this plugin only runs inside Deck");
+  return x;
+};
+
+export const cleanCode = (...a) => t().cleanCode(...a);
+export const newCode = (...a) => t().newCode(...a);
+export const selfId = (...a) => t().selfId(...a);
+export const share = (...a) => t().share(...a);

package/shim/settings.js

@@ -1,16 +1,17 @@
-// GENERATED by sdk/gen-shim.mjs — do not edit.
-//
-// Deck's settings store. Use this ONLY for settings Deck itself defines and its Rust side reads;
-// a plugin's own settings belong in its own config file via configRead/configWrite.
-const s = () => {
-  const x = window.__deck?.settings;
-  if (!x) throw new Error("window.__deck.settings is missing — this plugin only runs inside Deck");
-  return x;
-};
-
-export const useSettings = (...a) => s().use(...a);
-export const getSettings = (...a) => s().get(...a);
-export const saveSettings = (...a) => s().save(...a);
-// What to call the user (needs a Deck newer than 1.1): the name set in Settings, else their Google or Windows
-// account's. For a plugin that shows the user to someone else.
-export const userName = (...a) => s().userName(...a);
+// GENERATED by sdk/gen-shim.mjs — do not edit.
+//
+// Deck's settings store. Use this ONLY for settings Deck itself defines and its Rust side reads;
+// a plugin's own settings belong in its own config file via configRead/configWrite.
+import { pluginId } from "./scope.js";
+const s = () => {
+  const x = window.__deck?.forPlugin?.(pluginId)?.settings ?? window.__deck?.settings;
+  if (!x) throw new Error("window.__deck.settings is missing — this plugin only runs inside Deck");
+  return x;
+};
+
+export const useSettings = (...a) => s().use(...a);
+export const getSettings = (...a) => s().get(...a);
+export const saveSettings = (...a) => s().save(...a);
+// What to call the user (needs a Deck newer than 1.1): the name set in Settings, else their Google or Windows
+// account's. For a plugin that shows the user to someone else.
+export const userName = (...a) => s().userName(...a);

package/shim/terminals.js

@@ -4,8 +4,9 @@
 // during loadPlugins, and a reference copied out at import time would capture a half-built
 // object. The layout store is shared, not copied — a second one would not know about the panes
 // Deck already has open.
+import { pluginId } from "./scope.js";
 const t = () => {
-  const x = window.__deck?.terminals;
+  const x = window.__deck?.forPlugin?.(pluginId)?.terminals ?? window.__deck?.terminals;
   if (!x) throw new Error("window.__deck.terminals is missing — this plugin only runs inside Deck");
   return x;
 };