dsh-any-background 0.2.4 → 0.2.6

package/lib/index.js

@@ -1,5 +1,6 @@
 import { access, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { createReadStream, createWriteStream } from "node:fs";
+import { Readable } from "node:stream";
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
 //#region src/index.ts
 /**
@@ -21,11 +22,20 @@ const inject = ["connection", "webServer"];
 const DATA_DIR = ".dsh-any-background-data";
 const CONFIG_FILE = "theme-config.json";
 const WALLPAPER_FILE = "wallpaper.jpg";
+const ROTATION_DIR = "rotation";
 const VIDEO_ROUTE = "/dsh-any-background/video";
 const UPLOAD_ROUTE = "/dsh-any-background/video/upload";
+const WALLPAPER_ROUTE = "/dsh-any-background/wallpaper";
+const WALLPAPER_UPLOAD_ROUTE = "/dsh-any-background/wallpaper/upload";
 const UPLOAD_TMP = "wallpaper.upload.tmp";
+const VIDEO_UPLOAD_TMP = "video.upload.tmp";
+const WALLPAPER_UPLOAD_MAX = 104857600;
+const VIDEO_UPLOAD_MAX = 2147483648;
 const WALLPAPER_FETCH_MAX = 26214400;
 const WALLPAPER_FETCH_TIMEOUT = 2e4;
+const VIDEO_FETCH_MAX = 2147483648;
+const VIDEO_FETCH_TIMEOUT = 6e4;
+const VIDEO_FETCH_IDLE_TIMEOUT = 6e4;
 function videoFileName(mime) {
 	switch (mime) {
 		case "video/mp4": return "wallpaper.mp4";
@@ -84,7 +94,26 @@ const DEFAULT_CONFIG = {
 	generatedBg: null,
 	regenerateOnReload: false,
 	chatTextOpacity: 0,
-	trajectoryOpacity: 1
+	trajectoryOpacity: 1,
+	profiles: [],
+	rotation: {
+		enabled: false,
+		mode: "shuffle",
+		interval: "daily",
+		current: 0,
+		items: [],
+		lastRotate: null
+	},
+	schedule: {
+		enabled: false,
+		mode: "time",
+		dayProfile: null,
+		nightProfile: null,
+		dayStart: "07:00",
+		nightStart: "19:00"
+	},
+	schemeOverride: "auto",
+	activeProfile: null
 };
 const dataDir = () => dshHomePath(DATA_DIR);
 const configPath = () => dshHomePath(DATA_DIR, CONFIG_FILE);
@@ -196,7 +225,12 @@ function normalizeConfig(raw) {
 		generatedBg,
 		regenerateOnReload: typeof r.regenerateOnReload === "boolean" ? r.regenerateOnReload : DEFAULT_CONFIG.regenerateOnReload,
 		chatTextOpacity: clamp(r.chatTextOpacity, 0, 1, DEFAULT_CONFIG.chatTextOpacity),
-		trajectoryOpacity: clamp(r.trajectoryOpacity, 0, 1, DEFAULT_CONFIG.trajectoryOpacity)
+		trajectoryOpacity: clamp(r.trajectoryOpacity, 0, 1, DEFAULT_CONFIG.trajectoryOpacity),
+		profiles: normalizeProfiles(r.profiles),
+		rotation: normalizeRotation(r.rotation),
+		schedule: normalizeSchedule(r.schedule),
+		schemeOverride: r.schemeOverride === "light" || r.schemeOverride === "dark" ? r.schemeOverride : "auto",
+		activeProfile: typeof r.activeProfile === "string" ? r.activeProfile : null
 	};
 }
 function normalizeGeneratedBg(p) {
@@ -211,7 +245,8 @@ function normalizeGeneratedBg(p) {
 		preset: [
 			"aurora",
 			"nebula",
-			"noise"
+			"noise",
+			"starfield"
 		].includes(p.preset) ? p.preset : "aurora",
 		speed: clamp(p.speed, 0, 2, .3),
 		scale: clamp(p.scale, .3, 3, 1),
@@ -222,7 +257,10 @@ function normalizeGeneratedBg(p) {
 		preset: [
 			"dots",
 			"waves",
-			"poly"
+			"poly",
+			"rain",
+			"contour",
+			"meta"
 		].includes(p.preset) ? p.preset : "dots",
 		density: clamp(p.density, 0, 1, .5),
 		scale: clamp(p.scale, .3, 3, 1),
@@ -230,6 +268,101 @@ function normalizeGeneratedBg(p) {
 	};
 	return null;
 }
+const MAX_PROFILES = 20;
+const MAX_ROTATION_ITEMS = 30;
+const MAX_THUMB_BYTES = 65536;
+const HHMM_RE = /^([01]\d|2[0-3]):[0-5]\d$/;
+/** Coerce an unknown value into a ProfileAppearance (appearance subset only). */
+function normalizeProfileAppearance(raw) {
+	const a = raw ?? {};
+	const c = a.color;
+	const ops = a.opacities ?? {};
+	const bl = a.blurs ?? {};
+	const blurs = {};
+	for (const k of [
+		"bg",
+		"sidebar",
+		"card",
+		"settings",
+		"chat",
+		"trajectory",
+		"input"
+	]) blurs[k] = clamp(bl[k], 0, 60, DEFAULT_CONFIG.blurs[k]);
+	return {
+		color: Array.isArray(c) && c.length === 3 && c.every((x) => typeof x === "number" && isFinite(x)) ? [
+			clamp(c[0], 0, 360, 220),
+			clamp(c[1], 0, 1, .55),
+			clamp(c[2], 0, 1, .25)
+		] : null,
+		opacities: {
+			bg: clamp(ops.bg, 0, 1, DEFAULT_CONFIG.opacities.bg),
+			sidebar: clamp(ops.sidebar, 0, 1, DEFAULT_CONFIG.opacities.sidebar),
+			card: clamp(ops.card, 0, 1, DEFAULT_CONFIG.opacities.card),
+			input: clamp(ops.input, 0, 1, DEFAULT_CONFIG.opacities.input)
+		},
+		blurs,
+		settingsOpacity: clamp(a.settingsOpacity, 0, 1, DEFAULT_CONFIG.settingsOpacity),
+		wallpaperOpacity: clamp(a.wallpaperOpacity, 0, 1, DEFAULT_CONFIG.wallpaperOpacity),
+		blur: clamp(a.blur, 0, 60, DEFAULT_CONFIG.blur),
+		chatTextOpacity: clamp(a.chatTextOpacity, 0, 1, DEFAULT_CONFIG.chatTextOpacity),
+		trajectoryOpacity: clamp(a.trajectoryOpacity, 0, 1, DEFAULT_CONFIG.trajectoryOpacity)
+	};
+}
+function normalizeProfiles(raw) {
+	if (!Array.isArray(raw)) return [];
+	const out = [];
+	for (const item of raw.slice(0, MAX_PROFILES)) {
+		const p = item ?? {};
+		if (typeof p.id !== "string" || p.id.length === 0 || p.id.length > 64) continue;
+		if (out.some((e) => e.id === p.id)) continue;
+		out.push({
+			id: p.id,
+			name: typeof p.name === "string" && p.name.trim() ? p.name.slice(0, 60) : "Profile",
+			createdAt: typeof p.createdAt === "string" ? p.createdAt : "",
+			config: normalizeProfileAppearance(p.config)
+		});
+	}
+	return out;
+}
+/** Rotation items live as files under the rotation dir; only the server
+*  creates those names, so a stored `file` is accepted only when it is a bare
+*  filename with a known image extension (no path traversal). */
+function safeRotationFile(name) {
+	if (typeof name !== "string" || !/^[\w-]+\.(jpg|jpeg|png|gif|webp)$/i.test(name)) return null;
+	return name;
+}
+function normalizeRotation(raw) {
+	const r = raw ?? {};
+	const items = [];
+	if (Array.isArray(r.items)) for (const item of r.items.slice(0, MAX_ROTATION_ITEMS)) {
+		const it = item ?? {};
+		const file = safeRotationFile(it.file);
+		if (file === null) continue;
+		items.push({
+			file,
+			thumb: typeof it.thumb === "string" && it.thumb.startsWith("data:image/") && it.thumb.length <= MAX_THUMB_BYTES ? it.thumb : ""
+		});
+	}
+	return {
+		enabled: r.enabled === true,
+		mode: r.mode === "order" ? "order" : "shuffle",
+		interval: r.interval === "reload" || r.interval === "weekly" ? r.interval : "daily",
+		current: typeof r.current === "number" && isFinite(r.current) && r.current >= 0 ? Math.floor(r.current) : 0,
+		items,
+		lastRotate: typeof r.lastRotate === "string" ? r.lastRotate : null
+	};
+}
+function normalizeSchedule(raw) {
+	const r = raw ?? {};
+	return {
+		enabled: r.enabled === true,
+		mode: r.mode === "system" ? "system" : "time",
+		dayProfile: typeof r.dayProfile === "string" ? r.dayProfile : null,
+		nightProfile: typeof r.nightProfile === "string" ? r.nightProfile : null,
+		dayStart: typeof r.dayStart === "string" && HHMM_RE.test(r.dayStart) ? r.dayStart : DEFAULT_CONFIG.schedule.dayStart,
+		nightStart: typeof r.nightStart === "string" && HHMM_RE.test(r.nightStart) ? r.nightStart : DEFAULT_CONFIG.schedule.nightStart
+	};
+}
 async function ensureDir() {
 	try {
 		await mkdir(dataDir(), { recursive: true });
@@ -256,9 +389,12 @@ async function writeConfig(config) {
 		return false;
 	}
 }
-async function readWallpaper() {
+/** The wallpaper slot is served over HTTP (never shipped as base64 inside the
+*  read RPC): the browser decodes it natively through the same pipeline as any
+*  <img>, so boot only transfers a tiny URL instead of the whole image. */
+async function wallpaperServeUrl() {
 	try {
-		return `data:image/jpeg;base64,${(await readFile(wallpaperPath())).toString("base64")}`;
+		return (await stat(wallpaperPath())).size > 0 ? WALLPAPER_ROUTE : null;
 	} catch {
 		return null;
 	}
@@ -289,15 +425,16 @@ function sniffImageMime(buf) {
 	return "image/jpeg";
 }
 /** Download a wallpaper from a network URL and persist it into the local
-*  wallpaper.jpg slot (replacing whatever was stored), so type switches,
-*  export and import keep working through the existing data-URL path.
-*  null removes the wallpaper. Returns { ok, dataUrl?, error? }. */
+*  wallpaper.jpg slot (replacing whatever was stored), so type switches and
+*  rotation keep working through the single active slot. The response carries
+*  the serve URL, never the bytes. null removes the wallpaper.
+*  Returns { ok, wallpaperUrl?, error? }. */
 async function writeWallpaperFromUrl(url) {
 	if (url === null) {
 		const ok = await writeWallpaper(null);
 		return {
 			ok,
-			dataUrl: null,
+			wallpaperUrl: null,
 			error: ok ? void 0 : "remove failed"
 		};
 	}
@@ -359,18 +496,294 @@ async function writeWallpaperFromUrl(url) {
 			error: "read failed"
 		};
 	}
-	const dataUrl = `data:${sniffImageMime(buf)};base64,${buf.toString("base64")}`;
-	return await writeWallpaper(dataUrl) ? {
+	await ensureDir();
+	try {
+		await writeFile(wallpaperPath(), buf);
+	} catch (e) {
+		console.error("dsh-any-background: failed to write the downloaded wallpaper", e);
+		return {
+			ok: false,
+			error: "write failed"
+		};
+	}
+	return {
+		ok: true,
+		wallpaperUrl: WALLPAPER_ROUTE
+	};
+}
+const rotationDir = () => dshHomePath(DATA_DIR, ROTATION_DIR);
+async function ensureRotationDir() {
+	try {
+		await mkdir(rotationDir(), { recursive: true });
+	} catch {}
+}
+function imageExtFor(mime) {
+	if (mime === "image/png") return "png";
+	if (mime === "image/gif") return "gif";
+	if (mime === "image/webp") return "webp";
+	return "jpg";
+}
+/** Accept only an inline base64 image data URL (same fence as writeWallpaper). */
+function decodeImageDataUrl(dataUrl) {
+	if (typeof dataUrl !== "string") return null;
+	const m = /^data:image\/[a-zA-Z0-9.+-]+;base64,([A-Za-z0-9+/=]+)$/.exec(dataUrl);
+	if (!m) return null;
+	const buf = Buffer.from(m[1], "base64");
+	return buf.length > 0 ? buf : null;
+}
+/** Persist a thumbnail string only when it is a small inline image data URL. */
+function sanitizeThumb(thumb) {
+	return typeof thumb === "string" && thumb.startsWith("data:image/") && thumb.length <= MAX_THUMB_BYTES ? thumb : "";
+}
+async function handleRotationAdd(payload) {
+	const buf = decodeImageDataUrl(payload?.dataUrl);
+	if (buf === null) return {
+		ok: false,
+		error: "invalid image"
+	};
+	const thumb = sanitizeThumb(payload?.thumb);
+	await ensureDir();
+	await ensureRotationDir();
+	if ((await readConfig()).rotation.items.length >= MAX_ROTATION_ITEMS) return {
+		ok: false,
+		error: "too many items"
+	};
+	const file = `wp-${Date.now().toString(36)}.${imageExtFor(sniffImageMime(buf))}`;
+	try {
+		await writeFile(dshHomePath(DATA_DIR, ROTATION_DIR, file), buf);
+	} catch (e) {
+		console.error("dsh-any-background: failed to write a rotation wallpaper", e);
+		return {
+			ok: false,
+			error: "write failed"
+		};
+	}
+	const fresh = await readConfig();
+	fresh.rotation.items.push({
+		file,
+		thumb
+	});
+	if (!await writeConfig(fresh)) return {
+		ok: false,
+		error: "config write failed"
+	};
+	return {
+		ok: true,
+		index: fresh.rotation.items.length - 1,
+		items: fresh.rotation.items
+	};
+}
+async function handleRotationRemove(payload) {
+	const idx = payload?.index;
+	if (typeof idx !== "number" || !isFinite(idx)) return {
+		ok: false,
+		error: "invalid index"
+	};
+	const cfg = await readConfig();
+	const i = Math.floor(idx);
+	if (i < 0 || i >= cfg.rotation.items.length) return {
+		ok: false,
+		error: "not found"
+	};
+	const [removed] = cfg.rotation.items.splice(i, 1);
+	cfg.rotation.current = Math.max(0, Math.min(cfg.rotation.current >= i ? cfg.rotation.current - 1 : cfg.rotation.current, Math.max(0, cfg.rotation.items.length - 1)));
+	if (removed !== void 0) try {
+		await rm(dshHomePath(DATA_DIR, ROTATION_DIR, removed.file), { force: true });
+	} catch {}
+	if (!await writeConfig(cfg)) return {
+		ok: false,
+		error: "config write failed"
+	};
+	return {
 		ok: true,
-		dataUrl
-	} : {
+		items: cfg.rotation.items
+	};
+}
+/** Activate a rotation item: copy its bytes over the active wallpaper slot and
+*  return the serve URL so the client applies it live (bytes never round-trip
+*  through the RPC response). */
+async function handleRotationSet(payload) {
+	const idx = payload?.index;
+	if (typeof idx !== "number" || !isFinite(idx)) return {
 		ok: false,
-		error: "write failed"
+		error: "invalid index"
+	};
+	const cfg = await readConfig();
+	const i = Math.floor(idx);
+	const item = cfg.rotation.items[i];
+	if (item === void 0) return {
+		ok: false,
+		error: "not found"
+	};
+	let buf;
+	try {
+		buf = await readFile(dshHomePath(DATA_DIR, ROTATION_DIR, item.file));
+	} catch {
+		return {
+			ok: false,
+			error: "file missing"
+		};
+	}
+	try {
+		await writeFile(wallpaperPath(), buf);
+	} catch (e) {
+		console.error("dsh-any-background: failed to activate a rotation wallpaper", e);
+		return {
+			ok: false,
+			error: "write failed"
+		};
+	}
+	return {
+		ok: true,
+		wallpaperUrl: WALLPAPER_ROUTE
 	};
 }
 async function videoUrl() {
 	return await findVideoFile() ? VIDEO_ROUTE : null;
 }
+/** Guess a video MIME from the URL's path extension (fallback for servers that
+*  send no precise Content-Type). */
+function videoMimeFromUrl(u) {
+	const p = u.pathname.toLowerCase();
+	if (/\.(mp4|m4v)$/.test(p)) return "video/mp4";
+	if (/\.webm$/.test(p)) return "video/webm";
+	if (/\.(ogg|ogv)$/.test(p)) return "video/ogg";
+	if (/\.(mov|qt)$/.test(p)) return "video/quicktime";
+	if (/\.(mkv|mk3d|mka)$/.test(p)) return "video/x-matroska";
+	return null;
+}
+/** Download a background video from a network URL and store it in the video
+*  slot (streamed to a temp file — never buffered whole), then record the MIME
+*  in the config so findVideoFile/serve resolve immediately. */
+async function writeVideoFromUrl(url) {
+	if (url === null) return {
+		ok: false,
+		error: "invalid url"
+	};
+	let u;
+	try {
+		u = new URL(url);
+	} catch {
+		return {
+			ok: false,
+			error: "invalid url"
+		};
+	}
+	if (u.protocol !== "http:" && u.protocol !== "https:") return {
+		ok: false,
+		error: "unsupported scheme"
+	};
+	let res;
+	try {
+		const ctl = new AbortController();
+		const timer = setTimeout(() => ctl.abort(), VIDEO_FETCH_TIMEOUT);
+		try {
+			res = await fetch(url, {
+				redirect: "follow",
+				signal: ctl.signal
+			});
+		} finally {
+			clearTimeout(timer);
+		}
+	} catch (e) {
+		return {
+			ok: false,
+			error: e instanceof Error && e.name === "AbortError" ? "timeout" : "network error"
+		};
+	}
+	if (!res.ok) return {
+		ok: false,
+		error: `http ${res.status}`
+	};
+	let mime = (res.headers.get("content-type") ?? "").split(";")[0].trim().toLowerCase();
+	if (mime === "" || mime === "application/octet-stream" || mime === "binary/octet-stream") mime = videoMimeFromUrl(u) ?? "video/mp4";
+	if (!mime.startsWith("video/")) return {
+		ok: false,
+		error: "not a video"
+	};
+	const declared = Number(res.headers.get("content-length") ?? "");
+	if (Number.isFinite(declared) && declared > VIDEO_FETCH_MAX) return {
+		ok: false,
+		error: "too large"
+	};
+	await ensureDir();
+	const tmp = dshHomePath(DATA_DIR, "video.download.tmp");
+	const target = videoPathFor(mime);
+	try {
+		if (res.body === null) return {
+			ok: false,
+			error: "empty response"
+		};
+		const out = createWriteStream(tmp);
+		let received = 0;
+		let failed = false;
+		const fail = () => {
+			if (failed) return;
+			failed = true;
+			out.destroy();
+			rm(tmp, { force: true });
+		};
+		const nodeStream = Readable.fromWeb(res.body);
+		let idle = null;
+		const pokeIdle = () => {
+			if (idle) clearTimeout(idle);
+			idle = setTimeout(() => {
+				nodeStream.destroy();
+				fail();
+			}, VIDEO_FETCH_IDLE_TIMEOUT);
+		};
+		nodeStream.on("data", (chunk) => {
+			pokeIdle();
+			received += chunk.byteLength;
+			if (received > VIDEO_FETCH_MAX) {
+				nodeStream.destroy();
+				fail();
+			}
+		});
+		nodeStream.on("end", () => {
+			if (idle) clearTimeout(idle);
+			idle = null;
+		});
+		nodeStream.on("aborted", fail);
+		nodeStream.on("error", fail);
+		out.on("error", fail);
+		pokeIdle();
+		await new Promise((resolve, reject) => {
+			nodeStream.pipe(out);
+			out.on("finish", () => resolve());
+			out.on("close", () => {
+				if (failed) reject(/* @__PURE__ */ new Error("download failed"));
+			});
+			nodeStream.on("error", () => reject(/* @__PURE__ */ new Error("download failed")));
+		});
+		if (failed) return {
+			ok: false,
+			error: "read failed"
+		};
+		for (const name of VIDEO_CANDIDATES) {
+			const p = dshHomePath(DATA_DIR, name);
+			if (p !== target) await rm(p, { force: true });
+		}
+		await rm(target, { force: true });
+		await rename(tmp, target);
+		const cfg = await readConfig();
+		if (cfg.videoMime !== mime) {
+			cfg.videoMime = mime;
+			await writeConfig(cfg);
+		}
+		return {
+			ok: true,
+			mime
+		};
+	} catch (e) {
+		console.error("dsh-any-background: failed to download the background video", e);
+		rm(tmp, { force: true });
+		return {
+			ok: false,
+			error: e instanceof Error && e.message === "download failed" ? "read failed" : "write failed"
+		};
+	}
+}
 /** Persist a video from a data URL (null removes every variant); only used
 *  for removal and small legacy/import payloads. */
 async function writeVideo(dataUrl) {
@@ -488,9 +901,10 @@ async function handleVideoUpload(req, res) {
 	}
 	try {
 		await ensureDir();
-		const tmp = dshHomePath(DATA_DIR, UPLOAD_TMP);
+		const tmp = dshHomePath(DATA_DIR, VIDEO_UPLOAD_TMP);
 		const target = videoPathFor(mime);
 		const out = createWriteStream(tmp);
+		let received = 0;
 		let failed = false;
 		const fail = () => {
 			if (failed) return;
@@ -500,6 +914,13 @@ async function handleVideoUpload(req, res) {
 		};
 		req.on("aborted", fail);
 		req.on("error", fail);
+		req.on("data", (chunk) => {
+			received += chunk.byteLength;
+			if (received > VIDEO_UPLOAD_MAX) {
+				req.destroy();
+				fail();
+			}
+		});
 		out.on("error", () => {
 			fail();
 			try {
@@ -517,6 +938,11 @@ async function handleVideoUpload(req, res) {
 				}
 				await rm(target, { force: true });
 				await rename(tmp, target);
+				const cfg = await readConfig();
+				if (cfg.videoMime !== mime) {
+					cfg.videoMime = mime;
+					await writeConfig(cfg);
+				}
 				res.writeHead(200, { "Content-Type": "application/json" });
 				res.end(JSON.stringify({ ok: true }));
 			} catch (e) {
@@ -536,23 +962,195 @@ async function handleVideoUpload(req, res) {
 		} catch {}
 	}
 }
+/** Stream the stored wallpaper: sniffed MIME, no caching (uploads and rotation
+*  replace the file in place). */
+async function serveWallpaper(req, res) {
+	if (req.method !== "GET" && req.method !== "HEAD") {
+		res.writeHead(405, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({
+			ok: false,
+			error: "wallpaper route only serves GET/HEAD"
+		}));
+		return;
+	}
+	try {
+		const st = await stat(wallpaperPath());
+		if (st.size === 0) {
+			res.writeHead(404);
+			res.end();
+			return;
+		}
+		const mime = sniffImageMime(await new Promise((resolve, reject) => {
+			const chunks = [];
+			const s = createReadStream(wallpaperPath(), {
+				start: 0,
+				end: 15
+			});
+			s.on("data", (c) => chunks.push(c));
+			s.on("end", () => resolve(Buffer.concat(chunks)));
+			s.on("error", reject);
+		}));
+		res.writeHead(200, {
+			"Content-Type": mime,
+			"Content-Length": st.size,
+			"Cache-Control": "no-store"
+		});
+		if (req.method === "HEAD") {
+			res.end();
+			return;
+		}
+		createReadStream(wallpaperPath()).pipe(res);
+	} catch {
+		res.writeHead(404);
+		res.end("no wallpaper stored");
+	}
+}
+/** Accept a raw wallpaper upload (POST): pipe the body straight into the
+*  wallpaper slot — no base64 inflation, original pixels preserved. */
+async function handleWallpaperUpload(req, res) {
+	if (req.method !== "POST") {
+		res.writeHead(405);
+		res.end();
+		return;
+	}
+	if (!(typeof req.headers["content-type"] === "string" ? req.headers["content-type"] : "").split(";")[0].trim().startsWith("image/")) {
+		req.resume();
+		res.writeHead(415, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({
+			ok: false,
+			error: "unsupported media type, expected image/*"
+		}));
+		return;
+	}
+	try {
+		await ensureDir();
+		const tmp = dshHomePath(DATA_DIR, UPLOAD_TMP);
+		const out = createWriteStream(tmp);
+		let received = 0;
+		let failed = false;
+		const fail = () => {
+			if (failed) return;
+			failed = true;
+			out.destroy();
+			rm(tmp, { force: true });
+		};
+		req.on("aborted", fail);
+		req.on("error", fail);
+		out.on("error", () => {
+			fail();
+			try {
+				res.writeHead(500);
+				res.end();
+			} catch {}
+		});
+		req.on("data", (chunk) => {
+			received += chunk.byteLength;
+			if (received > WALLPAPER_UPLOAD_MAX) {
+				req.destroy();
+				fail();
+			}
+		});
+		req.pipe(out);
+		out.on("finish", async () => {
+			if (failed) return;
+			try {
+				if (received === 0) {
+					fail();
+					res.writeHead(400, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						ok: false,
+						error: "empty upload"
+					}));
+					return;
+				}
+				await rm(wallpaperPath(), { force: true });
+				await rename(tmp, wallpaperPath());
+				res.writeHead(200, { "Content-Type": "application/json" });
+				res.end(JSON.stringify({
+					ok: true,
+					wallpaperUrl: WALLPAPER_ROUTE
+				}));
+			} catch (e) {
+				console.error("dsh-any-background: failed to finalize the wallpaper upload", e);
+				rm(tmp, { force: true });
+				try {
+					res.writeHead(500);
+					res.end();
+				} catch {}
+			}
+		});
+	} catch (e) {
+		console.error("dsh-any-background: failed to accept the wallpaper upload", e);
+		try {
+			res.writeHead(500);
+			res.end();
+		} catch {}
+	}
+}
 const NS = "dshAnyBackground";
 const RPC_CHANNEL = "/dsh-any-background";
 const RPC_BODY_MAX = 314572800;
+/** ISO week key — mirrors the client's rotationDue so daily/weekly cadence
+*  decisions agree across both halves. */
+function isoWeekKey(d) {
+	const t = new Date(Date.UTC(d.getFullYear(), d.getMonth(), d.getDate()));
+	const day = t.getUTCDay() || 7;
+	t.setUTCDate(t.getUTCDate() + 4 - day);
+	const yearStart = new Date(Date.UTC(t.getUTCFullYear(), 0, 1));
+	const week = Math.ceil(((t.getTime() - yearStart.getTime()) / 864e5 + 1) / 7);
+	return `${t.getUTCFullYear()}-W${week}`;
+}
+/** Advance the rotation pool when its cadence is due: pick the next item,
+*  copy it over the active wallpaper slot, and persist the rotation state.
+*  Runs inside `read` so a reload restores the NEW wallpaper directly — the
+*  old one never reaches the screen. The client's maybeRotate stays as a
+*  fallback and skips when this already advanced (the `rotated` flag). */
+async function advanceRotationIfDue() {
+	const cfg = await readConfig();
+	const rot = cfg.rotation;
+	if (!rot.enabled || rot.items.length === 0) return false;
+	const now = /* @__PURE__ */ new Date();
+	const last = rot.lastRotate !== null ? new Date(rot.lastRotate) : null;
+	if (!(rot.interval === "reload" || last === null || isNaN(last.getTime()) || (rot.interval === "daily" ? last.toDateString() !== now.toDateString() : isoWeekKey(last) !== isoWeekKey(now)))) return false;
+	const n = rot.items.length;
+	let idx = rot.current;
+	if (rot.mode === "shuffle" && n > 1) while (idx === rot.current) idx = Math.floor(Math.random() * n);
+	else idx = (rot.current + 1) % n;
+	const item = rot.items[idx];
+	if (item === void 0) return false;
+	try {
+		const buf = await readFile(dshHomePath(DATA_DIR, ROTATION_DIR, item.file));
+		await writeFile(wallpaperPath(), buf);
+	} catch (e) {
+		console.error("dsh-any-background: failed to advance the rotation pool", e);
+		return false;
+	}
+	cfg.rotation = {
+		...rot,
+		current: idx,
+		lastRotate: now.toISOString()
+	};
+	if (!await writeConfig(cfg)) return false;
+	return true;
+}
 /** Dispatch one decoded RPC method to the matching persistence routine and
 *  return the wire `result` half of the server-response envelope. */
 async function handleRpcMethod(endpoint, payload) {
 	const method = endpoint.slice(`${NS}/`.length);
 	try {
 		switch (method) {
-			case "read": return {
-				ok: true,
-				value: {
-					config: await readConfig(),
-					wallpaper: await readWallpaper(),
-					videoUrl: await videoUrl()
-				}
-			};
+			case "read": {
+				const rotated = await advanceRotationIfDue();
+				return {
+					ok: true,
+					value: {
+						config: await readConfig(),
+						wallpaperUrl: await wallpaperServeUrl(),
+						videoUrl: await videoUrl(),
+						rotated
+					}
+				};
+			}
 			case "writeConfig": return {
 				ok: true,
 				value: await writeConfig(payload?.config ?? {})
@@ -569,6 +1167,22 @@ async function handleRpcMethod(endpoint, payload) {
 				ok: true,
 				value: await writeWallpaperFromUrl(payload?.url ?? null)
 			};
+			case "setVideoUrl": return {
+				ok: true,
+				value: await writeVideoFromUrl(payload?.url ?? null)
+			};
+			case "rotationAdd": return {
+				ok: true,
+				value: await handleRotationAdd(payload)
+			};
+			case "rotationRemove": return {
+				ok: true,
+				value: await handleRotationRemove(payload)
+			};
+			case "rotationSet": return {
+				ok: true,
+				value: await handleRotationSet(payload)
+			};
 			default: return {
 				ok: false,
 				error: {
@@ -685,6 +1299,15 @@ function apply(ctx) {
 				}));
 			}
 		}), "dsh-any-background: rpc channel");
+		const fenceUpload = (handler) => (req, res) => {
+			const rejection = webCtx.connection.requestRejection(req);
+			if (rejection !== void 0) {
+				res.writeHead(rejection);
+				res.end(rejection === 401 ? "unauthorized" : "forbidden");
+				return;
+			}
+			handler(req, res);
+		};
 		webCtx.effect(() => webCtx.webServer.register({
 			kind: "prefix",
 			path: VIDEO_ROUTE,
@@ -693,8 +1316,18 @@ function apply(ctx) {
 		webCtx.effect(() => webCtx.webServer.register({
 			kind: "exact",
 			path: UPLOAD_ROUTE,
-			handler: handleVideoUpload
+			handler: fenceUpload(handleVideoUpload)
 		}), "dsh-any-background: upload route");
+		webCtx.effect(() => webCtx.webServer.register({
+			kind: "prefix",
+			path: WALLPAPER_ROUTE,
+			handler: serveWallpaper
+		}), "dsh-any-background: wallpaper route");
+		webCtx.effect(() => webCtx.webServer.register({
+			kind: "exact",
+			path: WALLPAPER_UPLOAD_ROUTE,
+			handler: fenceUpload(handleWallpaperUpload)
+		}), "dsh-any-background: wallpaper upload route");
 	});
 }
 //#endregion