dsh-any-background 0.2.9 → 0.3.0

package/lib/index.js

@@ -1,5 +1,6 @@
 import { access, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { createReadStream, createWriteStream } from "node:fs";
+import { basename, dirname, join } from "node:path";
 import { Readable } from "node:stream";
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
 //#region src/index.ts
@@ -100,7 +101,8 @@ const DEFAULT_CONFIG = {
 		trajectory: 30,
 		input: 30,
 		panel: 30,
-		produced: 30
+		produced: 30,
+		header: 30
 	},
 	strokes: {
 		bg: {
@@ -147,6 +149,11 @@ const DEFAULT_CONFIG = {
 			width: 0,
 			color: "auto",
 			customColor: "#808080"
+		},
+		header: {
+			width: 0,
+			color: "auto",
+			customColor: "#808080"
 		}
 	},
 	settingsOpacity: .5,
@@ -177,6 +184,7 @@ const DEFAULT_CONFIG = {
 	trajectoryOpacity: .5,
 	panelOpacity: .5,
 	producedOpacity: .5,
+	headerOpacity: .5,
 	profiles: [],
 	rotation: {
 		enabled: false,
@@ -197,6 +205,55 @@ const DEFAULT_CONFIG = {
 	schemeOverride: "auto",
 	activeProfile: null
 };
+const VERSION_RE = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+/** True when a string looks like a release version (a bare `~/.dsh` basename does not). */
+function looksLikeVersion(value) {
+	return VERSION_RE.test(value);
+}
+/** Read the installed `@deepseek-ai/dsh` manifest version for a launcher dir,
+*  or null when the layout does not apply (plain `~/.dsh`, non-launcher hosts). */
+async function readInstalledVersion(homeDir) {
+	const root = dirname(dirname(homeDir));
+	const versionSeg = basename(homeDir);
+	const manifest = join(root, "versions", versionSeg, "node_modules", "@deepseek-ai", "dsh", "package.json");
+	try {
+		const raw = JSON.parse(await readFile(manifest, "utf8"));
+		if (typeof raw.version === "string" && raw.version.trim() !== "") return raw.version.trim();
+	} catch {}
+	return null;
+}
+/** Cached verdict: the probe touches the filesystem, and the host version never
+*  changes within a process lifetime. */
+let hostInfoCache;
+/** Map a release string onto the generation bucket the plugin gates features by.
+*  The published lines are `0.1.5`, `0.1.6` and `0.1.7`, so the bucket is the
+*  `major.minor.patch` prefix — every rc/alpha within a line shares it. */
+function generationOf(version) {
+	if (version === null) return "unknown";
+	const m = /^(\d+\.\d+\.\d+)/.exec(version);
+	if (m === null) return "unknown";
+	const key = m[1];
+	return key === "0.1.5" || key === "0.1.6" || key === "0.1.7" ? key : "unknown";
+}
+/** Resolve (and cache) the host release + generation. */
+async function resolveHostInfo() {
+	if (hostInfoCache !== void 0) return hostInfoCache;
+	const homeDir = dshHomePath();
+	let version = null;
+	try {
+		version = await readInstalledVersion(homeDir);
+	} catch {}
+	if (version === null) {
+		const seg = basename(homeDir);
+		if (looksLikeVersion(seg)) version = seg;
+	}
+	if (version !== null && !looksLikeVersion(version)) version = null;
+	hostInfoCache = {
+		version,
+		generation: generationOf(version)
+	};
+	return hostInfoCache;
+}
 const dataDir = () => dshHomePath(DATA_DIR);
 const configPath = () => dshHomePath(DATA_DIR, CONFIG_FILE);
 const wallpaperPath = () => dshHomePath(DATA_DIR, WALLPAPER_FILE);
@@ -297,7 +354,8 @@ const STROKE_GROUPS = [
 	"trajectory",
 	"input",
 	"panel",
-	"produced"
+	"produced",
+	"header"
 ];
 const STROKE_COLOR_KEYS = [
 	"auto",
@@ -359,7 +417,8 @@ function normalizeConfig(raw) {
 		"trajectory",
 		"input",
 		"panel",
-		"produced"
+		"produced",
+		"header"
 	]) blurs[k] = clamp(bl[k], 0, 60, DEFAULT_CONFIG.blurs[k]);
 	return {
 		color,
@@ -387,6 +446,7 @@ function normalizeConfig(raw) {
 		trajectoryOpacity: clamp(r.trajectoryOpacity, 0, 1, DEFAULT_CONFIG.trajectoryOpacity),
 		panelOpacity: clamp(r.panelOpacity, 0, 1, DEFAULT_CONFIG.panelOpacity),
 		producedOpacity: clamp(r.producedOpacity, 0, 1, DEFAULT_CONFIG.producedOpacity),
+		headerOpacity: clamp(r.headerOpacity, 0, 1, DEFAULT_CONFIG.headerOpacity),
 		profiles: normalizeProfiles(r.profiles),
 		rotation: normalizeRotation(r.rotation),
 		schedule: normalizeSchedule(r.schedule),
@@ -471,7 +531,8 @@ function normalizeProfileAppearance(raw) {
 		chatTextOpacity: clamp(a.chatTextOpacity, 0, 1, DEFAULT_CONFIG.chatTextOpacity),
 		trajectoryOpacity: clamp(a.trajectoryOpacity, 0, 1, DEFAULT_CONFIG.trajectoryOpacity),
 		panelOpacity: clamp(a.panelOpacity, 0, 1, DEFAULT_CONFIG.panelOpacity),
-		producedOpacity: clamp(a.producedOpacity, 0, 1, DEFAULT_CONFIG.producedOpacity)
+		producedOpacity: clamp(a.producedOpacity, 0, 1, DEFAULT_CONFIG.producedOpacity),
+		headerOpacity: clamp(a.headerOpacity, 0, 1, DEFAULT_CONFIG.headerOpacity)
 	};
 }
 function normalizeProfiles(raw) {
@@ -536,12 +597,41 @@ async function ensureDir() {
 		console.warn(`dsh-any-background: cannot create data dir "${dataDir()}"`, e);
 	}
 }
+let configCacheKey = null;
+let configCacheValue = null;
+function dropConfigCache() {
+	configCacheKey = null;
+	configCacheValue = null;
+}
 async function readConfig() {
 	await ensureDir();
+	const file = configPath();
+	let text;
+	let key;
 	try {
-		const raw = await readFile(configPath(), "utf8");
-		return normalizeConfig(JSON.parse(raw));
+		const st = await stat(file);
+		key = {
+			mtimeMs: st.mtimeMs,
+			size: st.size
+		};
+		if (configCacheKey !== null && configCacheValue !== null && configCacheKey.mtimeMs === key.mtimeMs && configCacheKey.size === key.size) return configCacheValue;
+		text = await readFile(file, "utf8");
 	} catch {
+		dropConfigCache();
+		return { ...DEFAULT_CONFIG };
+	}
+	try {
+		const parsed = normalizeConfig(JSON.parse(text));
+		configCacheKey = key;
+		configCacheValue = parsed;
+		return parsed;
+	} catch (e) {
+		try {
+			const into = `${file}.corrupt-${Date.now()}`;
+			await rename(file, into);
+			console.warn(`dsh-any-background: theme-config.json was corrupt, archived to "${into}" and reset to defaults`, e);
+		} catch {}
+		dropConfigCache();
 		return { ...DEFAULT_CONFIG };
 	}
 }
@@ -573,13 +663,19 @@ function warnUnknownConfigKeys(raw, normalized) {
 }
 async function writeConfig(config) {
 	await ensureDir();
+	const tmp = `${configPath()}.tmp`;
 	try {
 		const normalized = normalizeConfig(config);
 		warnUnknownConfigKeys(config, normalized);
-		await writeFile(configPath(), JSON.stringify(normalized, null, 2), "utf8");
+		await writeFile(tmp, JSON.stringify(normalized, null, 2), "utf8");
+		await rename(tmp, configPath());
+		dropConfigCache();
 		return true;
 	} catch (e) {
 		console.error(`dsh-any-background: failed to write "${CONFIG_FILE}"`, e);
+		try {
+			await rm(tmp, { force: true });
+		} catch {}
 		return false;
 	}
 }
@@ -618,6 +714,17 @@ function sniffImageMime(buf) {
 	if (buf.length >= 12 && buf[0] === 82 && buf[1] === 73 && buf[2] === 70 && buf[3] === 70 && buf[8] === 87 && buf[9] === 69 && buf[10] === 66 && buf[11] === 80) return "image/webp";
 	return "image/jpeg";
 }
+/** True when the leading bytes are a container the serve route knows how to
+*  sniff. The Content-Type only reflects what the server claims; validating the
+*  bytes themselves rejects a mislabeled or hostile payload with a clear error
+*  instead of persisting a file that renders as a broken image. */
+function isImageBytes(buf) {
+	if (buf.length >= 4 && buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71) return true;
+	if (buf.length >= 3 && buf[0] === 255 && buf[1] === 216 && buf[2] === 255) return true;
+	if (buf.length >= 6 && buf[0] === 71 && buf[1] === 73 && buf[2] === 70) return true;
+	if (buf.length >= 12 && buf[0] === 82 && buf[1] === 73 && buf[2] === 70 && buf[3] === 70 && buf[8] === 87 && buf[9] === 69 && buf[10] === 66 && buf[11] === 80) return true;
+	return false;
+}
 /** Download a wallpaper from a network URL and persist it into the local
 *  wallpaper.jpg slot (replacing whatever was stored), so type switches and
 *  rotation keep working through the single active slot. The response carries
@@ -690,6 +797,10 @@ async function writeWallpaperFromUrl(url) {
 			error: "read failed"
 		};
 	}
+	if (!isImageBytes(buf)) return {
+		ok: false,
+		error: "not an image"
+	};
 	await ensureDir();
 	try {
 		await writeFile(wallpaperPath(), buf);
@@ -911,21 +1022,28 @@ async function writeVideoFromUrl(url) {
 		const out = createWriteStream(tmp);
 		let received = 0;
 		let failed = false;
-		const fail = () => {
-			if (failed) return;
-			failed = true;
-			out.destroy();
-			rm(tmp, { force: true });
-		};
 		const nodeStream = Readable.fromWeb(res.body);
 		let idle = null;
+		const clearIdle = () => {
+			if (idle !== null) {
+				clearTimeout(idle);
+				idle = null;
+			}
+		};
 		const pokeIdle = () => {
-			if (idle) clearTimeout(idle);
+			clearIdle();
 			idle = setTimeout(() => {
 				nodeStream.destroy();
 				fail();
 			}, VIDEO_FETCH_IDLE_TIMEOUT);
 		};
+		const fail = () => {
+			if (failed) return;
+			failed = true;
+			clearIdle();
+			out.destroy();
+			rmWhenClosed(out, tmp);
+		};
 		nodeStream.on("data", (chunk) => {
 			pokeIdle();
 			received += chunk.byteLength;
@@ -934,10 +1052,7 @@ async function writeVideoFromUrl(url) {
 				fail();
 			}
 		});
-		nodeStream.on("end", () => {
-			if (idle) clearTimeout(idle);
-			idle = null;
-		});
+		nodeStream.on("end", clearIdle);
 		nodeStream.on("aborted", fail);
 		nodeStream.on("error", fail);
 		out.on("error", fail);
@@ -1001,6 +1116,37 @@ async function writeVideo(dataUrl) {
 		return false;
 	}
 }
+/** Drop a partial upload's temp file once its sink is really closed. Windows
+*  refuses to unlink a file that still has an open handle, so removing it in the
+*  same tick as `out.destroy()` silently fails and leaves the aborted transfer
+*  on disk (up to the full limit) until some later upload overwrites it. */
+function rmWhenClosed(out, tmp) {
+	const drop = () => {
+		rm(tmp, { force: true });
+	};
+	if (out.closed === true) drop();
+	else out.once("close", drop);
+}
+/** Reject an oversized upload with a real status and tear the transfer down.
+*  The bare req.destroy()+fail() path left the client holding a network error
+*  with no way to tell "too large" from "connection died". The body is machine
+*  readable (`error` + the enforced `limit`) so the panel can phrase the
+*  refusal in the user's own language, with `message` kept for logs. */
+function rejectOversizedUpload(req, res, fail, limit) {
+	try {
+		res.writeHead(413, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({
+			ok: false,
+			error: "too large",
+			limit,
+			message: `too large (limit ${limit})`
+		}));
+	} catch {}
+	fail();
+	try {
+		req.destroy();
+	} catch {}
+}
 /** Stream the stored video: correct MIME, no caching, Range answers so the
 *  browser can seek (snapshot capture does). */
 async function serveVideo(req, res) {
@@ -1104,16 +1250,14 @@ async function handleVideoUpload(req, res) {
 			if (failed) return;
 			failed = true;
 			out.destroy();
-			rm(tmp, { force: true });
+			rmWhenClosed(out, tmp);
 		};
 		req.on("aborted", fail);
 		req.on("error", fail);
 		req.on("data", (chunk) => {
+			if (failed) return;
 			received += chunk.byteLength;
-			if (received > VIDEO_UPLOAD_MAX) {
-				req.destroy();
-				fail();
-			}
+			if (received > VIDEO_UPLOAD_MAX) rejectOversizedUpload(req, res, fail, "2 GB");
 		});
 		out.on("error", () => {
 			fail();
@@ -1226,7 +1370,7 @@ async function handleWallpaperUpload(req, res) {
 			if (failed) return;
 			failed = true;
 			out.destroy();
-			rm(tmp, { force: true });
+			rmWhenClosed(out, tmp);
 		};
 		req.on("aborted", fail);
 		req.on("error", fail);
@@ -1238,11 +1382,9 @@ async function handleWallpaperUpload(req, res) {
 			} catch {}
 		});
 		req.on("data", (chunk) => {
+			if (failed) return;
 			received += chunk.byteLength;
-			if (received > WALLPAPER_UPLOAD_MAX) {
-				req.destroy();
-				fail();
-			}
+			if (received > WALLPAPER_UPLOAD_MAX) rejectOversizedUpload(req, res, fail, "100 MB");
 		});
 		req.pipe(out);
 		out.on("finish", async () => {
@@ -1338,7 +1480,7 @@ async function handleFontUpload(req, res) {
 			if (failed) return;
 			failed = true;
 			out.destroy();
-			rm(tmp, { force: true });
+			rmWhenClosed(out, tmp);
 		};
 		req.on("aborted", fail);
 		req.on("error", fail);
@@ -1350,11 +1492,9 @@ async function handleFontUpload(req, res) {
 			} catch {}
 		});
 		req.on("data", (chunk) => {
+			if (failed) return;
 			received += chunk.byteLength;
-			if (received > FONT_UPLOAD_MAX) {
-				req.destroy();
-				fail();
-			}
+			if (received > FONT_UPLOAD_MAX) rejectOversizedUpload(req, res, fail, "100 MB");
 		});
 		req.pipe(out);
 		out.on("finish", async () => {
@@ -1458,8 +1598,7 @@ function isoWeekKey(d) {
 *  old one never reaches the screen. The client's maybeRotate stays as a
 *  fallback and skips when this already advanced (the `rotated` flag). */
 async function advanceRotationIfDue() {
-	const cfg = await readConfig();
-	const rot = cfg.rotation;
+	const rot = (await readConfig()).rotation;
 	if (!rot.enabled || rot.items.length === 0) return false;
 	const now = /* @__PURE__ */ new Date();
 	const last = rot.lastRotate !== null ? new Date(rot.lastRotate) : null;
@@ -1477,12 +1616,14 @@ async function advanceRotationIfDue() {
 		console.error("dsh-any-background: failed to advance the rotation pool", e);
 		return false;
 	}
-	cfg.rotation = {
-		...rot,
-		current: idx,
-		lastRotate: now.toISOString()
-	};
-	if (!await writeConfig(cfg)) return false;
+	if (!await writeConfig({
+		...await readConfig(),
+		rotation: {
+			...rot,
+			current: idx,
+			lastRotate: now.toISOString()
+		}
+	})) return false;
 	return true;
 }
 /** Dispatch one decoded RPC method to the matching persistence routine and
@@ -1504,7 +1645,8 @@ async function handleRpcMethod(endpoint, payload) {
 						videoUrl: await videoUrl(),
 						fontUrl: await fontUrl(),
 						rotated,
-						firstRun
+						firstRun,
+						host: await resolveHostInfo()
 					}
 				};
 			}
@@ -1588,6 +1730,22 @@ function apply(ctx) {
 					}));
 					return;
 				}
+				const declaredLen = Number(req.headers["content-length"] ?? "");
+				if (Number.isFinite(declaredLen) && declaredLen > RPC_BODY_MAX) {
+					res.writeHead(413, {
+						"Content-Type": "application/json",
+						connection: "close"
+					});
+					res.end(JSON.stringify({
+						ok: false,
+						error: {
+							code: "dsh-any-background/too-large",
+							message: `body exceeds ${RPC_BODY_MAX} bytes; uploads must use the binary routes`,
+							details: {}
+						}
+					}));
+					return;
+				}
 				const pathname = new URL(req.url ?? "/", "http://dsh.internal").pathname;
 				const endpoint = pathname.startsWith(`${RPC_CHANNEL}/`) ? pathname.slice(20) : void 0;
 				if (endpoint === void 0 || endpoint.length === 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-any-background",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "description": "Appearance plugin for DeepSeek Harness: custom theme color (PS-style color wheel), background wallpaper with opacity/blur controls, and separate main/settings interface opacity.",
   "keywords": [
     "deepseek-harness",
@@ -23,7 +23,7 @@
   "author": "Tkingxiao",
   "type": "module",
   "engines": {
-    "dsh": ">=0.1.5-rc.2"
+    "dsh": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1"
   },
   "exports": {
     ".": {
@@ -67,15 +67,23 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-store": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-theme": "^0.1.2-alpha.2",
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.2",
-    "react": "^18.2.0"
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-store": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-theme": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "@deepseek-ai/dsh-invariants": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
+    "react": "^18.2.0",
+    "dsh-better-sidebar": ">=0.4.0"
   },
   "peerDependenciesMeta": {
+    "dsh-better-sidebar": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-sidebar-right": {
+      "optional": true
+    },
     "react": {
       "optional": true
     },
@@ -103,9 +111,13 @@
   },
   "dsh": {
     "compatibility": {
-      "dsh": "0.1.5-rc.2",
+      "dsh": "0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1",
       "dshReleases": {
-        "0.1.5-rc.2": "compatible"
+        "0.1.5-rc.2": "compatible",
+        "0.1.5-rc.3": "compatible",
+        "0.1.6-alpha.1": "compatible",
+        "0.1.6-alpha.2": "compatible",
+        "0.1.7-alpha.1": "compatible"
       }
     },
     "bundle": {