dsh-client-ui-skin-tianlight 2.0.2 → 2.0.3

package/README.md

@@ -6,6 +6,14 @@
 >
 > npm 包名 `dsh-client-ui-skin-tianlight`（v2.0.2 起；旧链接安装包名 `@dsh-external/dsh-client-ui-skin-tianlight`）· 布线行 `ui-skin-tianlight` · body 属性 `data-dsh-tianlight`
 
+## v2.0.3 · 一条命令安装
+
+```bash
+npx dsh-client-ui-skin-tianlight@latest
+```
+
+先完全退出 DeepSeek Harness，再运行上面这一条命令；装完打开 DSH、页面按 Ctrl+F5 即可。它会自动找到 DSH 数据目录和 `desktop` profile，备份 profile 清单，按插件管理器的格式登记依赖与 bundle，自动注销旧包名，复制并逐字节校验插件文件。不改任何 `cordis.patch.yml`，不碰 `<profile>/tianlight/` 里的用户数据。另有 `npx dsh-client-ui-skin-tianlight doctor`（只读体检）和 `uninstall`（卸载，保留用户数据）。插件本体与 2.0.2 相同。
+
 ## v2.0.2 · 正式版：npm 发布 + 包名迁移
 
 `2.0.2` 把插件**发布到公开 npm registry**，安装从「下载 Release / 目录链接」变成一条命令（见下方「从 npm 安装」）：
@@ -423,8 +431,19 @@ v0.5.0 的 P0–P4 功能全部保留；这一版是增量补丁，同一份构
 
 ### 从 npm 安装（推荐，一条命令）
 
-npm 包：**`dsh-client-ui-skin-tianlight`**（公开 registry，预构建、免 `allowBuilds` 构建授权）。三种装法任选：
+npm 包：**`dsh-client-ui-skin-tianlight`**（公开 registry，预构建、免 `allowBuilds` 构建授权）。装法任选：
+
+- **一条命令（v2.0.3 起，推荐）**：先**完全退出 DSH**（含托盘图标），然后运行
+
+  ```bash
+  npx dsh-client-ui-skin-tianlight@latest
+  ```
 
+  装完打开 DSH，页面按 Ctrl+F5。需要本机有 Node.js 18+。常用参数：`--profile <名称>`（默认 `desktop`，只有一个 profile 时用它）、`--dsh-home <目录>`（默认 `$DSH_HOME` 或 `~/.dsh`）、`--dry-run`（只显示计划）、`--lang zh|en`。npm 官方源慢时可加 `--registry=https://registry.npmmirror.com`。
+  - 它做的事：备份 profile 的 `package.json` / `pnpm-lock.yaml` / `pnpm-workspace.yaml` 到 `<profile>/.tianlight-installer/backups/`（保留最近 3 份，旧版插件文件也放在这里便于回滚）；把依赖写成精确版本、在 `dsh.profile.bundles` 登记一次；注销旧包名 `@dsh-external/dsh-client-ui-skin-tianlight`、`@local/dsh-enable-tianlight`；把插件文件复制进 `node_modules/dsh-client-ui-skin-tianlight` 并逐字节校验。原来是 `link:` 链接安装的，只移除链接本身，不动链接指向的开发目录。
+  - 它不做的事：不改任何 `cordis.patch.yml`（发现 `ui-skin-tianlight` 被 `disabled: true` 或被手写插入时只提示）；不碰 `<profile>/tianlight/` 用户数据；DSH 运行时默认拒绝安装（Windows 会锁住正在使用的插件文件，强行替换会报 EPERM），确需继续可加 `--force`。
+  - 体检：`npx dsh-client-ui-skin-tianlight doctor`，只读，检查登记、旧包名残留、文件是否与发布包逐字节一致、被禁用的行、用户数据。卸载：`npx dsh-client-ui-skin-tianlight uninstall`（保留用户数据）。
+  - profile 的 `pnpm-lock.yaml` 由插件管理器在下一次安装/更新时自动补齐。
 - **DSH Desktop → 插件管理器**：安装/添加插件时输入包名 `dsh-client-ui-skin-tianlight`（或从市场页安装），插件管理器会把依赖与 `dsh.profile.bundles` 一起登记。
 - **命令行**：`dsh plugin --profile desktop add dsh-client-ui-skin-tianlight` 安装依赖，然后在插件管理器里启用 `ui-skin-tianlight` 行。
 - 升级：插件管理器的「更新」按 registry 新版本更新；或 `dsh plugin --profile desktop add dsh-client-ui-skin-tianlight@latest` 后重启。**升级后重启 DSH 一次 + Ctrl+F5。**

package/bin/cli.mjs

@@ -0,0 +1,355 @@
+#!/usr/bin/env node
+// npx dsh-client-ui-skin-tianlight [install|uninstall|doctor] [options]
+//
+//   install    (default) put this version into a DSH profile and register it
+//   uninstall  unregister + remove the package files (user data is kept)
+//   doctor     read-only health check of the DSH home / profile / install
+//
+// options: --profile <name>  --dsh-home <dir>  --dry-run  --force  --lang zh|en
+import { existsSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import {
+  LEGACY_PACKAGES,
+  PKG_NAME,
+  ROW_ID,
+  SELF_ROOT,
+  compareTrees,
+  countFiles,
+  inspectInstalled,
+  inspectUserData,
+  installFiles,
+  isDshRunning,
+  listProfiles,
+  makeBackupDir,
+  packageEntries,
+  pickProfile,
+  planInstall,
+  planUninstall,
+  pruneBackups,
+  readJson,
+  removeInstalledFiles,
+  resolveDshHome,
+  scanPatches,
+  writeJsonAtomic,
+} from './installer.mjs'
+
+const SELF = readJson(join(SELF_ROOT, 'package.json'))
+const VERSION = SELF.version
+
+// ---- args -------------------------------------------------------------------
+const argv = process.argv.slice(2)
+const flags = new Set(argv.filter((a) => a.startsWith('--') || a === '-h' || a === '-v'))
+const value = (name) => {
+  const i = argv.indexOf(name)
+  return i >= 0 && argv[i + 1] !== undefined && argv[i + 1].startsWith('--') === false ? argv[i + 1] : null
+}
+const valueFlags = new Set(['--profile', '--dsh-home', '--lang'])
+const positional = argv.filter((a, i) => a.startsWith('-') === false && valueFlags.has(argv[i - 1]) === false)
+const command = positional[0] ?? 'install'
+const dryRun = flags.has('--dry-run')
+const force = flags.has('--force')
+
+const envLocale = String(process.env.LC_ALL || process.env.LANG || Intl.DateTimeFormat().resolvedOptions().locale || '')
+const lang = value('--lang') === 'en' ? 'en' : value('--lang') === 'zh' ? 'zh' : /^zh/i.test(envLocale) ? 'zh' : 'en'
+
+// ---- messages ---------------------------------------------------------------
+const M = {
+  zh: {
+    title: `天光 TIANLIGHT 皮肤安装器 v${VERSION}`,
+    home: (p) => `DSH 数据目录：${p}`,
+    noHome: (p) => `找不到 DSH 数据目录 ${p}\n  请先安装并启动一次 DeepSeek Harness；数据目录不在默认位置时用 --dsh-home <目录> 指定。`,
+    noProfiles: '这个 DSH 数据目录里还没有 profile。请先启动一次 DSH 再运行本命令。',
+    profileMissing: (p, list) => `没有名为 "${p}" 的 profile。现有：${list.join('、') || '（无）'}`,
+    profileAmbiguous: (list) => `有多个 profile：${list.join('、')}\n  请用 --profile <名称> 指定要装到哪一个。`,
+    profile: (p) => `目标 profile：${p}`,
+    notProfile: 'profile 的 package.json 里没有 dsh.profile.bundles，看起来不是 DSH profile，已停止。',
+    running: 'DeepSeek Harness 正在运行。请先完全退出（包括托盘图标）再运行本命令；\n  运行中替换插件文件会被 Windows 拒绝（EPERM）。确实要继续可加 --force。',
+    runningForced: '注意：DSH 正在运行，已按 --force 继续。',
+    runningUnknown: '无法确认 DSH 是否在运行；如果开着，请先退出。',
+    current: (k, v) => (k === 'missing' ? '当前：未安装' : k === 'link' ? `当前：链接安装（指向 ${v ?? '未知'}），将改为 npm 版本，链接目标目录不会被改动` : `当前：已安装 ${v ?? '未知版本'}`),
+    plan: '将要执行：',
+    change: {
+      'legacy-dependency-removed': (c) => `移除旧包依赖 ${c.name}`,
+      'legacy-bundle-removed': (c) => `移除旧包 bundle 登记 ${c.name}`,
+      'dependency-set': (c) => `依赖 ${PKG_NAME}：${c.from ?? '（无）'} → ${c.to}`,
+      'bundle-added': () => `在 dsh.profile.bundles 登记 ${PKG_NAME}`,
+      'dependency-removed': (c) => `移除依赖 ${c.name}`,
+      'bundle-removed': (c) => `移除 bundle 登记 ${c.name}`,
+    },
+    copy: (n) => `复制插件文件到 node_modules/${PKG_NAME}（${n} 个文件）`,
+    sameFiles: '插件文件已是这个版本且逐字节一致，跳过复制',
+    manifestSame: 'profile 登记已经正确，无需修改',
+    dry: '（--dry-run：只显示计划，没有改动任何文件）',
+    backup: (p) => `已备份到：${p}`,
+    verified: (n) => `校验通过：${n} 个文件与发布包一致`,
+    verifyFailed: (n) => `校验失败：${n} 个文件不一致，安装可能不完整（备份在上面的目录）`,
+    patchDisabled: (f) => `警告：${f} 里有一段把 ${ROW_ID} 设为 disabled: true，皮肤会被禁用。\n    请在插件管理器里启用，或删掉那一段后重启 DSH（本工具不会改 cordis.patch.yml）。`,
+    patchInsert: (f) => `警告：${f} 里手写插入了 ${ROW_ID} 行，会与插件自带的行重复挂载，请删掉那一段。`,
+    data: (d) => (d.exists ? `你的天光数据保留在：${d.root}（设置版本 ${d.revision ?? '未知'}，上传 ${d.uploads} 个）` : '还没有天光用户数据（首次安装会自动套用作者默认外观）'),
+    installed: (v) => `完成：天光 ${v} 已安装。`,
+    next: [
+      '下一步：',
+      '  1. 打开 DeepSeek Harness（如果开着，请完全退出后重开）；',
+      '  2. 页面按 Ctrl+F5；',
+      '  3. 插件管理器里能看到 dsh-client-ui-skin-tianlight。',
+      '  profile 的 pnpm-lock.yaml 会在插件管理器下一次安装/更新时自动补齐。',
+    ],
+    uninstalled: '完成：已从 profile 移除天光（用户数据未删除；插件文件已移到备份目录）。',
+    nothing: '这个 profile 里没有安装天光，无需卸载。',
+    doctorTitle: '体检结果：',
+    ok: '正常',
+    warn: '注意',
+    err: '问题',
+    dRegistered: (s) => `已登记依赖 ${PKG_NAME}@${s}`,
+    dNotRegistered: `没有登记依赖 ${PKG_NAME}`,
+    dBundle: (y) => (y ? '已登记到 dsh.profile.bundles' : '没有登记到 dsh.profile.bundles（不会被加载）'),
+    dLegacy: (n) => `仍登记了旧包 ${n}（会重复挂载），运行 install 会自动移除`,
+    dFiles: (i) => (i.kind === 'missing' ? 'node_modules 里没有插件文件' : i.kind === 'link' ? `插件是链接安装，指向 ${i.linkTarget ?? '未知'}` : `已安装文件版本 ${i.version ?? '未知'}${i.buildInfo?.commit ? `（commit ${String(i.buildInfo.commit).slice(0, 8)}）` : ''}`),
+    dMismatch: (a, b) => `登记的版本 ${a} 与已安装文件版本 ${b} 不一致`,
+    dSameAsSelf: (n) => `已安装文件与本安装器自带的 ${VERSION} 发布包逐字节一致（${n} 个文件）`,
+    dDiffSelf: (n) => `已安装文件与 ${VERSION} 发布包有 ${n} 处不同（可能被修改或损坏），可运行 install 修复`,
+    dNewer: (v) => `有新版本可装：${v}（运行 npx ${PKG_NAME}@latest）`,
+    dRunning: (r) => (r === true ? 'DSH 正在运行' : r === false ? 'DSH 未运行' : '无法确认 DSH 是否在运行'),
+    summary: (e, w) => `结论：${e} 个问题，${w} 个注意事项`,
+    usage: `用法：npx ${PKG_NAME} [install|uninstall|doctor] [--profile <名称>] [--dsh-home <目录>] [--dry-run] [--force] [--lang zh|en]`,
+    unknownCommand: (c) => `未知命令：${c}`,
+    failed: (m) => `安装失败：${m}`,
+  },
+  en: {
+    title: `TIANLIGHT skin installer v${VERSION}`,
+    home: (p) => `DSH home: ${p}`,
+    noHome: (p) => `DSH home not found: ${p}\n  Install and start DeepSeek Harness once first, or pass --dsh-home <dir>.`,
+    noProfiles: 'This DSH home has no profile yet. Start DSH once, then run this command again.',
+    profileMissing: (p, list) => `No profile named "${p}". Existing: ${list.join(', ') || '(none)'}`,
+    profileAmbiguous: (list) => `Several profiles exist: ${list.join(', ')}\n  Pick one with --profile <name>.`,
+    profile: (p) => `Target profile: ${p}`,
+    notProfile: 'The profile package.json has no dsh.profile.bundles; it does not look like a DSH profile. Stopped.',
+    running: 'DeepSeek Harness is running. Quit it completely (tray icon too) and run this again;\n  Windows refuses to replace plugin files while DSH has them open (EPERM). Use --force to continue anyway.',
+    runningForced: 'Note: DSH is running; continuing because of --force.',
+    runningUnknown: 'Could not tell whether DSH is running; quit it first if it is.',
+    current: (k, v) => (k === 'missing' ? 'Current: not installed' : k === 'link' ? `Current: linked install (-> ${v ?? 'unknown'}); it becomes the npm version and the linked folder is left untouched` : `Current: installed ${v ?? 'unknown version'}`),
+    plan: 'Plan:',
+    change: {
+      'legacy-dependency-removed': (c) => `remove legacy dependency ${c.name}`,
+      'legacy-bundle-removed': (c) => `remove legacy bundle entry ${c.name}`,
+      'dependency-set': (c) => `dependency ${PKG_NAME}: ${c.from ?? '(none)'} -> ${c.to}`,
+      'bundle-added': () => `register ${PKG_NAME} in dsh.profile.bundles`,
+      'dependency-removed': (c) => `remove dependency ${c.name}`,
+      'bundle-removed': (c) => `remove bundle entry ${c.name}`,
+    },
+    copy: (n) => `copy the package files to node_modules/${PKG_NAME} (${n} files)`,
+    sameFiles: 'Package files are already this version and byte-identical; copy skipped',
+    manifestSame: 'Profile registration is already correct',
+    dry: '(--dry-run: plan only, nothing was changed)',
+    backup: (p) => `Backup: ${p}`,
+    verified: (n) => `Verified: ${n} files match the published package`,
+    verifyFailed: (n) => `Verification failed: ${n} files differ; the install may be incomplete (see the backup above)`,
+    patchDisabled: (f) => `Warning: ${f} sets ${ROW_ID} to disabled: true, which keeps the skin off.\n    Enable it in the plugin manager or delete that block and restart DSH (this tool never edits cordis.patch.yml).`,
+    patchInsert: (f) => `Warning: ${f} inserts a ${ROW_ID} row by hand; it double-mounts the skin. Delete that block.`,
+    data: (d) => (d.exists ? `Your Tianlight data stays in: ${d.root} (settings revision ${d.revision ?? 'unknown'}, ${d.uploads} uploads)` : 'No Tianlight user data yet (a fresh install applies the author default look)'),
+    installed: (v) => `Done: Tianlight ${v} is installed.`,
+    next: [
+      'Next:',
+      '  1. Open DeepSeek Harness (quit and reopen it if it was running);',
+      '  2. press Ctrl+F5 in the page;',
+      '  3. the plugin manager lists dsh-client-ui-skin-tianlight.',
+      '  The profile pnpm-lock.yaml is completed by the plugin manager on its next install/update.',
+    ],
+    uninstalled: 'Done: Tianlight was removed from the profile (user data kept; package files moved to the backup folder).',
+    nothing: 'Tianlight is not installed in this profile; nothing to remove.',
+    doctorTitle: 'Health check:',
+    ok: 'ok',
+    warn: 'warn',
+    err: 'problem',
+    dRegistered: (s) => `dependency ${PKG_NAME}@${s} is registered`,
+    dNotRegistered: `dependency ${PKG_NAME} is not registered`,
+    dBundle: (y) => (y ? 'registered in dsh.profile.bundles' : 'not in dsh.profile.bundles (it will not load)'),
+    dLegacy: (n) => `legacy package ${n} is still registered (double mount); install removes it`,
+    dFiles: (i) => (i.kind === 'missing' ? 'no package files in node_modules' : i.kind === 'link' ? `linked install -> ${i.linkTarget ?? 'unknown'}` : `installed files: version ${i.version ?? 'unknown'}${i.buildInfo?.commit ? ` (commit ${String(i.buildInfo.commit).slice(0, 8)})` : ''}`),
+    dMismatch: (a, b) => `registered version ${a} differs from installed files ${b}`,
+    dSameAsSelf: (n) => `installed files are byte-identical to the ${VERSION} package shipped with this installer (${n} files)`,
+    dDiffSelf: (n) => `installed files differ from the ${VERSION} package in ${n} places (modified or damaged); run install to repair`,
+    dNewer: (v) => `a newer version is available: ${v} (run npx ${PKG_NAME}@latest)`,
+    dRunning: (r) => (r === true ? 'DSH is running' : r === false ? 'DSH is not running' : 'could not tell whether DSH is running'),
+    summary: (e, w) => `Result: ${e} problems, ${w} warnings`,
+    usage: `usage: npx ${PKG_NAME} [install|uninstall|doctor] [--profile <name>] [--dsh-home <dir>] [--dry-run] [--force] [--lang zh|en]`,
+    unknownCommand: (c) => `unknown command: ${c}`,
+    failed: (m) => `install failed: ${m}`,
+  },
+}[lang]
+
+const say = (line = '') => console.log(line)
+const die = (line, code = 1) => {
+  console.error(line)
+  process.exit(code)
+}
+
+// ---- shared steps -----------------------------------------------------------
+function locate() {
+  const dshHome = resolveDshHome({ dshHome: value('--dsh-home') })
+  say(M.home(dshHome))
+  if (existsSync(dshHome) === false) die(M.noHome(dshHome))
+  const profiles = listProfiles(dshHome)
+  const picked = pickProfile(profiles, value('--profile'))
+  if (picked.ok === false) {
+    if (picked.reason === 'no-profiles') die(M.noProfiles)
+    if (picked.reason === 'profile-missing') die(M.profileMissing(value('--profile'), profiles))
+    die(M.profileAmbiguous(profiles))
+  }
+  say(M.profile(picked.profile))
+  return { dshHome, profile: picked.profile, profileDir: join(dshHome, 'profiles', picked.profile) }
+}
+
+function guardRunning() {
+  const running = isDshRunning()
+  if (running === true && force === false && dryRun === false) die(M.running, 3)
+  if (running === true && force) say(M.runningForced)
+  if (running === null) say(M.runningUnknown)
+}
+
+function reportPatches(dshHome, profileDir) {
+  let count = 0
+  for (const item of scanPatches(dshHome, profileDir)) {
+    say(item.finding === 'disabled' ? M.patchDisabled(item.file) : M.patchInsert(item.file))
+    count += 1
+  }
+  return count
+}
+
+// ---- commands ---------------------------------------------------------------
+function install() {
+  const { dshHome, profileDir } = locate()
+  guardRunning()
+  const manifestPath = join(profileDir, 'package.json')
+  const manifest = readJson(manifestPath)
+  const plan = planInstall(manifest, VERSION)
+  if (plan.ok === false) die(M.notProfile)
+  const before = inspectInstalled(profileDir)
+  say(M.current(before.kind, before.kind === 'link' ? before.linkTarget : before.version))
+
+  const entries = packageEntries(SELF_ROOT)
+  const fileCount = countFiles(SELF_ROOT, entries)
+  const sameFiles = before.kind === 'dir' && before.version === VERSION && compareTrees(SELF_ROOT, before.path, entries).length === 0
+  say(M.plan)
+  if (plan.changes.length === 0) say('  - ' + M.manifestSame)
+  for (const change of plan.changes) say('  - ' + M.change[change.kind](change))
+  say('  - ' + (sameFiles ? M.sameFiles : M.copy(fileCount)))
+  if (dryRun) {
+    reportPatches(dshHome, profileDir)
+    say(M.dry)
+    return
+  }
+
+  const backupDir = makeBackupDir(profileDir)
+  say(M.backup(backupDir))
+  if (sameFiles === false) installFiles({ srcRoot: SELF_ROOT, profileDir, backupDir, entries })
+  if (plan.changes.length > 0) writeJsonAtomic(manifestPath, plan.manifest)
+  pruneBackups(profileDir)
+
+  const problems = compareTrees(SELF_ROOT, join(profileDir, 'node_modules', PKG_NAME), entries)
+  if (problems.length > 0) {
+    for (const p of problems.slice(0, 10)) say(`  ${p.problem}: ${p.path}`)
+    die(M.verifyFailed(problems.length))
+  }
+  say(M.verified(fileCount))
+  reportPatches(dshHome, profileDir)
+  say(M.data(inspectUserData(profileDir)))
+  say()
+  say(M.installed(VERSION))
+  for (const line of M.next) say(line)
+}
+
+function uninstall() {
+  const { profileDir } = locate()
+  guardRunning()
+  const manifestPath = join(profileDir, 'package.json')
+  const plan = planUninstall(readJson(manifestPath))
+  const before = inspectInstalled(profileDir)
+  if (plan.changes.length === 0 && before.kind === 'missing') {
+    say(M.nothing)
+    return
+  }
+  say(M.plan)
+  for (const change of plan.changes) say('  - ' + M.change[change.kind](change))
+  if (dryRun) {
+    say(M.dry)
+    return
+  }
+  const backupDir = makeBackupDir(profileDir)
+  say(M.backup(backupDir))
+  removeInstalledFiles({ profileDir, backupDir })
+  if (plan.changes.length > 0) writeJsonAtomic(manifestPath, plan.manifest)
+  pruneBackups(profileDir)
+  say(M.data(inspectUserData(profileDir)))
+  say(M.uninstalled)
+}
+
+function doctor() {
+  const { dshHome, profileDir } = locate()
+  const rows = []
+  const add = (level, text) => rows.push({ level, text })
+  const running = isDshRunning()
+  add(running === null ? 'warn' : 'ok', M.dRunning(running))
+
+  const manifest = readJson(join(profileDir, 'package.json'))
+  const spec = manifest.dependencies?.[PKG_NAME]
+  const bundles = Array.isArray(manifest.dsh?.profile?.bundles) ? manifest.dsh.profile.bundles : []
+  add(spec ? 'ok' : 'err', spec ? M.dRegistered(spec) : M.dNotRegistered)
+  add(bundles.includes(PKG_NAME) ? 'ok' : 'err', M.dBundle(bundles.includes(PKG_NAME)))
+  for (const legacy of LEGACY_PACKAGES) {
+    if (manifest.dependencies?.[legacy] !== undefined || bundles.includes(legacy)) add('err', M.dLegacy(legacy))
+  }
+
+  const installed = inspectInstalled(profileDir)
+  add(installed.kind === 'missing' ? 'err' : installed.kind === 'link' ? 'warn' : 'ok', M.dFiles(installed))
+  if (installed.kind === 'dir' && spec && /^\d/.test(spec) && installed.version !== spec) add('err', M.dMismatch(spec, installed.version))
+  if (installed.kind === 'dir' && installed.version === VERSION) {
+    const entries = packageEntries(SELF_ROOT)
+    const diff = compareTrees(SELF_ROOT, installed.path, entries)
+    add(diff.length === 0 ? 'ok' : 'err', diff.length === 0 ? M.dSameAsSelf(countFiles(SELF_ROOT, entries)) : M.dDiffSelf(diff.length))
+  }
+  for (const item of scanPatches(dshHome, profileDir)) {
+    add('err', item.finding === 'disabled' ? M.patchDisabled(item.file) : M.patchInsert(item.file))
+  }
+  const data = inspectUserData(profileDir)
+  add('ok', M.data(data))
+  if (installed.kind === 'dir' && installed.version && compareVersions(VERSION, installed.version) > 0) add('warn', M.dNewer(VERSION))
+
+  say()
+  say(M.doctorTitle)
+  const label = { ok: M.ok, warn: M.warn, err: M.err }
+  for (const row of rows) say(`  [${label[row.level]}] ${row.text}`)
+  const errors = rows.filter((r) => r.level === 'err').length
+  const warns = rows.filter((r) => r.level === 'warn').length
+  say(M.summary(errors, warns))
+  if (errors > 0) process.exitCode = 1
+}
+
+function compareVersions(a, b) {
+  const pa = String(a).split(/[.-]/).map((x) => (/^\d+$/.test(x) ? Number(x) : x))
+  const pb = String(b).split(/[.-]/).map((x) => (/^\d+$/.test(x) ? Number(x) : x))
+  for (let i = 0; i < 3; i += 1) {
+    if (pa[i] !== pb[i]) return Number(pa[i]) > Number(pb[i]) ? 1 : -1
+  }
+  return 0
+}
+
+// ---- main -------------------------------------------------------------------
+if (flags.has('--help') || flags.has('-h') || command === 'help') {
+  say(M.usage)
+  process.exit(0)
+}
+if (flags.has('--version') || flags.has('-v')) {
+  say(VERSION)
+  process.exit(0)
+}
+say(M.title)
+try {
+  if (command === 'install') install()
+  else if (command === 'uninstall') uninstall()
+  else if (command === 'doctor') doctor()
+  else die(M.unknownCommand(command) + '\n' + M.usage, 2)
+} catch (error) {
+  const message = error instanceof Error ? `${error.code ? error.code + ' ' : ''}${error.message}` : String(error)
+  die(M.failed(message))
+}

package/bin/installer.mjs

@@ -0,0 +1,462 @@
+// One-command installer core for `npx dsh-client-ui-skin-tianlight`.
+//
+// npx has already downloaded (and integrity-checked) the published package into the
+// npm cache before this code runs, so installing is purely local:
+//   1. find $DSH_HOME and the target profile (desktop by default);
+//   2. back up the profile manifest (+ pnpm lock/workspace files);
+//   3. register the package the same way the DSH plugin manager does: an exact
+//      registry version in `dependencies` and one entry in `dsh.profile.bundles`
+//      (legacy package names are unregistered, never deleted);
+//   4. copy this package's published files into <profile>/node_modules/<name>,
+//      staged in a temp dir and swapped in, then verified byte-for-byte.
+//
+// The bundle's own cordis.patch.yml inserts the `ui-skin-tianlight` row, so nothing is
+// ever written to any cordis.patch.yml. User data (<profile>/tianlight/) is never
+// touched by install or uninstall. Everything here is pure Node (no dependencies) so
+// tools/test.mjs can drive it against a temporary fake DSH home.
+import { createHash } from 'node:crypto'
+import { spawnSync } from 'node:child_process'
+import {
+  cpSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readdirSync,
+  readFileSync,
+  readlinkSync,
+  realpathSync,
+  renameSync,
+  rmdirSync,
+  rmSync,
+  statSync,
+  unlinkSync,
+  writeFileSync,
+} from 'node:fs'
+import { homedir } from 'node:os'
+import { basename, dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+export const PKG_NAME = 'dsh-client-ui-skin-tianlight'
+export const ROW_ID = 'ui-skin-tianlight'
+/** Old names that must not stay registered next to the current one (double mount). */
+export const LEGACY_PACKAGES = ['@dsh-external/dsh-client-ui-skin-tianlight', '@local/dsh-enable-tianlight']
+export const INSTALLER_DIR = '.tianlight-installer'
+const KEEP_BACKUPS = 3
+
+/** Root of the package this file ships in (bin/.. ). */
+export const SELF_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+
+export function readJson(file) {
+  return JSON.parse(readFileSync(file, 'utf8'))
+}
+
+/** Write via temp file + rename so a crash never leaves half a manifest behind. */
+export function writeJsonAtomic(file, value) {
+  const tmp = `${file}.tl-tmp-${process.pid}`
+  writeFileSync(tmp, JSON.stringify(value, null, 2) + '\n', 'utf8')
+  renameSync(tmp, file)
+}
+
+// ---- locating DSH -----------------------------------------------------------
+
+export function resolveDshHome({ dshHome = null, env = process.env, home = homedir() } = {}) {
+  if (typeof dshHome === 'string' && dshHome.trim() !== '') return resolve(dshHome.trim())
+  if (typeof env.DSH_HOME === 'string' && env.DSH_HOME.trim() !== '') return resolve(env.DSH_HOME.trim())
+  return join(home, '.dsh')
+}
+
+/** Profiles = directories under <home>/profiles that carry a package.json. */
+export function listProfiles(dshHome) {
+  const root = join(dshHome, 'profiles')
+  if (existsSync(root) === false) return []
+  return readdirSync(root, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory() && existsSync(join(root, entry.name, 'package.json')))
+    .map((entry) => entry.name)
+    .sort()
+}
+
+/**
+ * Explicit --profile wins; otherwise `desktop` (DSH Desktop's profile); otherwise the
+ * only profile. Returns {ok, profile} or {ok:false, reason, profiles}.
+ */
+export function pickProfile(profiles, requested = null) {
+  if (typeof requested === 'string' && requested !== '') {
+    return profiles.includes(requested) ? { ok: true, profile: requested } : { ok: false, reason: 'profile-missing', profiles }
+  }
+  if (profiles.includes('desktop')) return { ok: true, profile: 'desktop' }
+  if (profiles.length === 1) return { ok: true, profile: profiles[0] }
+  if (profiles.length === 0) return { ok: false, reason: 'no-profiles', profiles }
+  return { ok: false, reason: 'profile-ambiguous', profiles }
+}
+
+/** `tasklist /FO CSV /NH` output -> is the DSH Desktop image running? */
+export function tasklistHasDsh(stdout) {
+  return String(stdout)
+    .split(/\r?\n/)
+    .some((line) => line.toLowerCase().startsWith('"deepseek harness.exe"'))
+}
+
+/**
+ * `ps -A -o pid=,comm=` output -> is a DSH process running? Matches the process NAME
+ * only (never full command lines, which would match this installer when a path
+ * contains "DeepSeek Harness") and ignores the given own pids.
+ */
+export function psHasDsh(stdout, ownPids = []) {
+  return String(stdout)
+    .split(/\r?\n/)
+    .some((line) => {
+      const match = /^\s*(\d+)\s+(.+)$/.exec(line)
+      if (match === null || ownPids.includes(Number(match[1]))) return false
+      const name = match[2].trim().split('/').pop()
+      return /^deepseek[ -]harness/i.test(name)
+    })
+}
+
+/** true / false / null (unknown). DSH must be closed: open files make Windows refuse the swap (EPERM). */
+export function isDshRunning(platform = process.platform) {
+  try {
+    if (platform === 'win32') {
+      const result = spawnSync('tasklist', ['/FO', 'CSV', '/NH'], { encoding: 'utf8', windowsHide: true })
+      if (result.status !== 0 || typeof result.stdout !== 'string') return null
+      return tasklistHasDsh(result.stdout)
+    }
+    const result = spawnSync('ps', ['-A', '-o', 'pid=,comm='], { encoding: 'utf8' })
+    if (result.status !== 0 || typeof result.stdout !== 'string') return null
+    return psHasDsh(result.stdout, [process.pid, process.ppid])
+  } catch {
+    return null
+  }
+}
+
+// ---- manifest planning (pure) -------------------------------------------------
+
+function bundlesOf(manifest) {
+  const bundles = manifest?.dsh?.profile?.bundles
+  return Array.isArray(bundles) ? bundles : null
+}
+
+/**
+ * Returns {ok, manifest, changes} with a NEW manifest object (input untouched).
+ * Refuses a manifest without dsh.profile.bundles: that is not a DSH profile and the
+ * base bundles cannot be guessed.
+ */
+export function planInstall(manifest, version) {
+  const next = JSON.parse(JSON.stringify(manifest))
+  const bundles = bundlesOf(next)
+  if (bundles === null) return { ok: false, reason: 'not-a-profile', changes: [] }
+  const changes = []
+  if (next.dependencies === undefined || next.dependencies === null || typeof next.dependencies !== 'object') {
+    next.dependencies = {}
+  }
+  for (const legacy of LEGACY_PACKAGES) {
+    if (Object.prototype.hasOwnProperty.call(next.dependencies, legacy)) {
+      delete next.dependencies[legacy]
+      changes.push({ kind: 'legacy-dependency-removed', name: legacy })
+    }
+    const at = bundles.indexOf(legacy)
+    if (at >= 0) {
+      bundles.splice(at, 1)
+      changes.push({ kind: 'legacy-bundle-removed', name: legacy })
+    }
+  }
+  const previous = next.dependencies[PKG_NAME]
+  if (previous !== version) {
+    next.dependencies[PKG_NAME] = version
+    changes.push({ kind: 'dependency-set', from: previous ?? null, to: version })
+  }
+  if (bundles.includes(PKG_NAME) === false) {
+    bundles.push(PKG_NAME)
+    changes.push({ kind: 'bundle-added' })
+  }
+  return { ok: true, manifest: next, changes }
+}
+
+export function planUninstall(manifest) {
+  const next = JSON.parse(JSON.stringify(manifest))
+  const bundles = bundlesOf(next)
+  const changes = []
+  for (const name of [PKG_NAME, ...LEGACY_PACKAGES]) {
+    if (next.dependencies && Object.prototype.hasOwnProperty.call(next.dependencies, name)) {
+      delete next.dependencies[name]
+      changes.push({ kind: 'dependency-removed', name })
+    }
+    if (bundles !== null) {
+      const at = bundles.indexOf(name)
+      if (at >= 0) {
+        bundles.splice(at, 1)
+        changes.push({ kind: 'bundle-removed', name })
+      }
+    }
+  }
+  return { ok: true, manifest: next, changes }
+}
+
+// ---- cordis patch scan (read-only) ------------------------------------------
+
+/**
+ * Finds `ui-skin-tianlight` rows in a cordis.patch.yml text. Each top-level list
+ * item is one block; a block that targets the row and sets `disabled: true` keeps the
+ * skin off, and a block that inserts the row by hand double-mounts it.
+ */
+export function scanPatchText(text) {
+  const findings = []
+  const blocks = String(text).replace(/\r\n/g, '\n').split(/\n(?=- )/)
+  const rowPattern = new RegExp(`id:\\s*['"]?${ROW_ID}['"]?\\s*$`, 'm')
+  for (const block of blocks) {
+    if (rowPattern.test(block) === false) continue
+    if (/^\s*disabled:\s*true\s*$/m.test(block)) findings.push('disabled')
+    if (/^-\s*insert:/m.test(block)) findings.push('manual-insert')
+  }
+  return findings
+}
+
+export function scanPatches(dshHome, profileDir) {
+  const result = []
+  for (const file of [join(dshHome, 'cordis.patch.yml'), join(profileDir, 'cordis.patch.yml')]) {
+    if (existsSync(file) === false) continue
+    for (const finding of scanPatchText(readFileSync(file, 'utf8'))) result.push({ file, finding })
+  }
+  return result
+}
+
+// ---- package files ----------------------------------------------------------
+
+/** The published file list: package.json + `files` (only entries that exist). */
+export function packageEntries(srcRoot = SELF_ROOT) {
+  const manifest = readJson(join(srcRoot, 'package.json'))
+  const listed = Array.isArray(manifest.files) ? manifest.files : []
+  return ['package.json', ...listed.filter((entry) => entry !== 'package.json')].filter((entry) =>
+    existsSync(join(srcRoot, entry)),
+  )
+}
+
+function walkFiles(root, rel = '') {
+  const out = []
+  const full = join(root, rel)
+  const info = statSync(full)
+  if (info.isDirectory() === false) return [rel]
+  for (const name of readdirSync(full).sort()) out.push(...walkFiles(root, rel === '' ? name : `${rel}/${name}`))
+  return out
+}
+
+/** Number of files under the published entries (what install copies and verifies). */
+export function countFiles(srcRoot, entries) {
+  let total = 0
+  for (const entry of entries) total += walkFiles(srcRoot, entry).length
+  return total
+}
+
+function sha256File(file) {
+  return createHash('sha256').update(readFileSync(file)).digest('hex')
+}
+
+/** Byte comparison of every published file; returns the list of differing/missing paths. */
+export function compareTrees(srcRoot, targetDir, entries) {
+  const problems = []
+  for (const entry of entries) {
+    for (const rel of walkFiles(srcRoot, entry)) {
+      const target = join(targetDir, rel)
+      if (existsSync(target) === false) {
+        problems.push({ path: rel, problem: 'missing' })
+        continue
+      }
+      if (rel === 'package.json') {
+        // the dev-tree manifest carries `private`; installed copies drop it (like tools/pack.mjs)
+        const a = readJson(join(srcRoot, rel))
+        const b = readJson(target)
+        delete a.private
+        delete b.private
+        if (JSON.stringify(a) !== JSON.stringify(b)) problems.push({ path: rel, problem: 'differs' })
+        continue
+      }
+      if (sha256File(join(srcRoot, rel)) !== sha256File(target)) problems.push({ path: rel, problem: 'differs' })
+    }
+  }
+  return problems
+}
+
+const samePath = (a, b, platform) => (platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b)
+
+/**
+ * If `path` is a link of any kind, returns where it points; otherwise null.
+ * Windows junctions (what `link:` installs create) are NOT always reported by
+ * lstat().isSymbolicLink(): on Node 24 they show up as plain directories and
+ * readlink() fails with EINVAL. So a directory whose real path is not
+ * <real parent>/<name> is treated as a link too. Anything treated as a link is only
+ * ever unlinked, never renamed into backups or removed recursively.
+ */
+export function linkTargetOf(path, { lstat = lstatSync, realpath = realpathSync.native, platform = process.platform } = {}) {
+  let info
+  try {
+    info = lstat(path)
+  } catch {
+    return null
+  }
+  if (info.isSymbolicLink()) {
+    try {
+      return realpath(path)
+    } catch {
+      try {
+        return readlinkSync(path)
+      } catch {
+        return '(unresolved link)'
+      }
+    }
+  }
+  if (info.isDirectory() === false) return null
+  try {
+    const real = realpath(path)
+    const expected = join(realpath(dirname(path)), basename(path))
+    return samePath(real, expected, platform) ? null : real
+  } catch {
+    return null
+  }
+}
+
+/** Recursive delete that unlinks links instead of descending into them. */
+export function safeRemoveTree(path) {
+  let info
+  try {
+    info = lstatSync(path)
+  } catch {
+    return
+  }
+  if (linkTargetOf(path) !== null) {
+    removeLink(path)
+    return
+  }
+  if (info.isDirectory()) {
+    for (const name of readdirSync(path)) safeRemoveTree(join(path, name))
+    rmdirSync(path)
+    return
+  }
+  unlinkSync(path)
+}
+
+/** missing | link (symlink/junction, e.g. a `link:` dev install) | dir. */
+export function inspectInstalled(profileDir) {
+  const target = join(profileDir, 'node_modules', PKG_NAME)
+  try {
+    lstatSync(target)
+  } catch {
+    return { kind: 'missing', path: target }
+  }
+  const linkTarget = linkTargetOf(target)
+  if (linkTarget !== null) return { kind: 'link', path: target, linkTarget }
+  let version = null
+  let buildInfo = null
+  try {
+    version = readJson(join(target, 'package.json')).version ?? null
+  } catch {
+    version = null
+  }
+  try {
+    buildInfo = readJson(join(target, 'build-info.json'))
+  } catch {
+    buildInfo = null
+  }
+  return { kind: 'dir', path: target, version, buildInfo }
+}
+
+/**
+ * Removes only the link itself — never recurses into a linked development tree.
+ * A non-recursive rmdir on a junction/directory symlink deletes the reparse point,
+ * not the target's contents; unlink covers file symlinks and POSIX links.
+ */
+export function removeLink(path) {
+  try {
+    unlinkSync(path)
+  } catch {
+    rmdirSync(path)
+  }
+  if (existsSync(path)) throw new Error('could not remove link ' + path)
+}
+
+function stampNow() {
+  return new Date().toISOString().replace(/[:.]/g, '-')
+}
+
+export function makeBackupDir(profileDir) {
+  const dir = join(profileDir, INSTALLER_DIR, 'backups', stampNow())
+  mkdirSync(dir, { recursive: true })
+  for (const name of ['package.json', 'pnpm-lock.yaml', 'pnpm-workspace.yaml']) {
+    const file = join(profileDir, name)
+    if (existsSync(file)) cpSync(file, join(dir, name))
+  }
+  return dir
+}
+
+/** Keep the newest KEEP_BACKUPS backup folders (each may hold a previous package copy). */
+export function pruneBackups(profileDir, keep = KEEP_BACKUPS) {
+  const root = join(profileDir, INSTALLER_DIR, 'backups')
+  if (existsSync(root) === false) return []
+  const names = readdirSync(root).sort()
+  const removed = names.slice(0, Math.max(0, names.length - keep))
+  for (const name of removed) safeRemoveTree(join(root, name))
+  return removed
+}
+
+/**
+ * Stage the published files next to the target, move the previous copy into the
+ * backup folder (a link is just unlinked), then swap the staged copy in. If the swap
+ * fails the previous copy is put back.
+ */
+export function installFiles({ srcRoot = SELF_ROOT, profileDir, backupDir, entries = packageEntries(srcRoot) }) {
+  const modules = join(profileDir, 'node_modules')
+  mkdirSync(modules, { recursive: true })
+  const target = join(modules, PKG_NAME)
+  const staging = join(modules, `.${PKG_NAME}.tl-staging-${process.pid}`)
+  rmSync(staging, { recursive: true, force: true })
+  mkdirSync(staging, { recursive: true })
+  for (const entry of entries) cpSync(join(srcRoot, entry), join(staging, entry), { recursive: true })
+  const stagedManifestPath = join(staging, 'package.json')
+  const stagedManifest = readJson(stagedManifestPath)
+  if (stagedManifest.private !== undefined) {
+    delete stagedManifest.private
+    writeFileSync(stagedManifestPath, JSON.stringify(stagedManifest, null, 2) + '\n', 'utf8')
+  }
+
+  const before = inspectInstalled(profileDir)
+  let parked = null
+  if (before.kind === 'link') {
+    removeLink(target)
+  } else if (before.kind === 'dir') {
+    parked = join(backupDir, 'previous-package')
+    renameSync(target, parked)
+  }
+  try {
+    renameSync(staging, target)
+  } catch (error) {
+    if (parked !== null && existsSync(target) === false) renameSync(parked, target)
+    rmSync(staging, { recursive: true, force: true })
+    throw error
+  }
+  return { previous: before, parked }
+}
+
+export function removeInstalledFiles({ profileDir, backupDir }) {
+  const before = inspectInstalled(profileDir)
+  if (before.kind === 'link') removeLink(before.path)
+  else if (before.kind === 'dir') renameSync(before.path, join(backupDir, 'previous-package'))
+  return before
+}
+
+// ---- user data (read-only) ----------------------------------------------------
+
+export function inspectUserData(profileDir) {
+  const root = join(profileDir, 'tianlight')
+  if (existsSync(root) === false) return { exists: false, root }
+  let revision = null
+  try {
+    revision = readJson(join(root, 'state', 'settings.json')).revision ?? null
+  } catch {
+    revision = null
+  }
+  let uploads = 0
+  try {
+    uploads = readdirSync(join(root, 'uploads')).length
+  } catch {
+    uploads = 0
+  }
+  return { exists: true, root, revision, uploads }
+}

package/build-info.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "product": "dsh-client-ui-skin-tianlight",
-  "version": "2.0.2",
-  "commit": "4f2496eb29db818e8fd591d64d7cc047b807bed6",
-  "builtAt": "2026-11-12T14:20:01+08:00",
+  "version": "2.0.3",
+  "commit": "e257c5800dbf9dafeba84093f8c57a292ce0eb9c",
+  "builtAt": "2026-11-12T23:55:42+08:00",
   "source": "pack"
 }

package/lib/index.js

@@ -73,7 +73,7 @@ const HOST_API = '2'
  * manifest is stamped with it. The handshake no longer compares it, so a
  * browser-half-only update can run against an unchanged host process.
  */
-const BUILD = '2.0.2'
+const BUILD = '2.0.3'
 
 function readRoots() {
   try {

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "dsh-client-ui-skin-tianlight",
   "description": "Tianlight skin for the dsh web GUI: Makoto Shinkai daylight skies, a looping video wallpaper, a wallpaper library with upload/rotation, optional WebWallGL scene support, and a draggable Mint chibi-cat desktop companion",
-  "version": "2.0.2",
+  "version": "2.0.3",
   "type": "module",
   "main": "lib/index.js",
+  "bin": {
+    "dsh-client-ui-skin-tianlight": "bin/cli.mjs"
+  },
   "exports": {
     ".": "./lib/index.js",
     "./client": "./lib/client.js",
@@ -59,6 +62,7 @@
     "npm:publish:dry": "node tools/npm-publish.mjs --dry-run"
   },
   "files": [
+    "bin",
     "lib",
     "vendor",
     "assets",

package/skin.json

@@ -2,7 +2,7 @@
   "id": "tianlight",
   "name": "天光",
   "nameEn": "TIANLIGHT",
-  "version": "2.0.2",
+  "version": "2.0.3",
   "author": "local",
   "tagline": "新海诚式天光 ・ 动态壁纸与可上传壁纸库 ・ 可选 WebWallGL 场景 ・ 薄荷小猫桌宠 ・ 职责通道（role pack → 桌宠气泡/选择） ・ 生活节奏与主动开口预算 ・ 可替换图片/≤32MiB 视频形象 ・ 液态玻璃三档 ・ AI 桌宠（严格权限） ・ 接入 DSH Agent（受控） ・ 桌宠即入口 ・ 兼容 DSH 0.2.0–0.2.2",
   "description": "以新海诚天光为基调的沉浸式皮肤：全屏循环视频壁纸置于内容之下，半透明天光玻璃面板；壁纸库支持上传、隐藏、轮播、画面滤镜与标签检索；可选的 WebWallGL 通道实时渲染 Wallpaper Engine 场景；可拖拽的薄荷 Q 版小猫桌宠会靠近回应、陪你互动。v0.5.0 加入了宿主配置同步与 schema 迁移、模块开关、渲染预算、特效与氛围层、时段/专注联动、系统音频与 Now Playing、网页壁纸、动态分辨率与预裁剪缓存、可选转码、导入导出包与配方分享链接、排版增强、可读性护栏、键盘无障碍与 zh/en 双语；v0.6.0 接入 Wallpaper Engine 壁纸库；v0.7.0 新增职责通道：外部角色包可在桌宠旁显示带按钮的职责气泡（审批/完成/喝水等），并把用户选择（等会儿/静音/休息时再说）回传给职责引擎。本版只改浏览器半，无需重启 DSH（Ctrl+F5 即可）。同一份构建适配 DSH 0.2.0 / 0.2.1 / 0.2.2（选择器桥按运行时钩子分层降级）。　v1.0.0 正式版：桌宠升级为有生活节奏的角色智能体——虚拟时钟/每日作息/主动开口预算/跨会话记忆，职责提醒可被静默与预算闸门延迟并在窗口期自动回放；形象可替换为本地图片或 ≤32 MiB 视频；新增可选液态玻璃（真实/柔和/磨砂，低电量自动降级）；新增「角色 / 生活」设置页与专注计时；无宿主路由改动，Ctrl+F5 即可。　v1.1.0：角色中枢（侧栏入口 + 全屏面板，一屏管生活/形象/玻璃/记忆）、AI 桌宠（本地大脑 + 可选 LLM 适配器，严格能力白名单与硬上限、审计与暂停开关）、形象支持本地上传图片/视频（≤32MiB）。　v1.2.0：桌宠右键直达角色中枢；新增受控 DSH Agent 接入（agentChat 权限默认关闭、显式授权、无自动触发、每日≤10 次/≤500 字/60s，可连接现有会话或新建桌宠会话）。　v1.3.0：角色入口收进桌宠——去掉设置页「角色 / 生活」与侧栏「角色」按钮，右键桌宠（或桌宠菜单「角色中枢」）打开全部功能；生活节奏设置已并入角色中枢。　v1.4.0：权限模型调整——「驱动 DSH」仍强烈永久禁止；直接联网/读写文件/执行命令/代审批/代发消息/安装插件改为用户可显式授予的高风险权限（默认关闭、可撤销、全程审计；皮肤不内置实现，需你注册能力适配器才会被调用）。　v1.5.0：恢复默认桌宠形象、液态玻璃默认开启并加预览（实时可见）、角色中枢新增天气卡（启用/城市/定位/刷新，显示当前天气）、一键功能自检、应用内反馈面板（复制/预填 GitHub Issue/下载 JSON）+ GitHub issue 模板。　v1.6.0：安全上限整体上调（主动开口 12/50、本地 chat 20/分 1200/天、输入 1000 字、LLM 日 60/上限 120、分钟 6、输出 1200 字、20s 超时、Agent 日 30/上限 100、输入 1000 字/120s）；液态玻璃在 depth!=off 时统一应用到全部界面（侧栏/设置/壁纸库/中枢/对话框/菜单/列表框/输入区/气泡/胶囊/提示等），无壁纸场景时自动补一层玻璃兜底，关闭档零变化、低电量自动降级。　v1.6.1：液态玻璃升级 v2（OriginOS 风更厚磨砂、多层 specular 高光、1px 亮暗边、外柔光、细噪点与柔和回弹）；修复侧栏「新会话」按钮深色块并玻璃化；DSH 主界面右上新增常驻天气胶囊（点击打开角色中枢天气卡）。　v1.6.2：移除壁纸左上角固定的「晨光/太阳」装饰（旧版每张壁纸重建场景都会绘制一个 top-left dawn burst，看起来像常驻小太阳）；场景层只保留 veil 天空光渐变，切换壁纸不再出现任何固定角标（仅视觉变化）。　v1.6.3：显示名精简为「天光」（skin id / 包名 / data 属性 / 设置键均不变，旧用户无迁移成本）；完成 DSH 0.2.0-rc.2 / 0.2.1-rc.5 / 0.2.2-rc.1 三线兼容性实证（compat-matrix 三行全 COMPATIBLE、hook-scan 全桥接钩子在位、upgrade-check 升级假设全部成立）。　v1.6.4（公开 v1.0.3 正式版）：桌宠新增「AI 对话」菜单（输入条 + 气泡回复，识别当前替换的图片/视频形象，视频上方空间不足自动翻转）；每个自定义形象可编辑一套动作名与回复（按 mediaId 生效，未改动跟随默认）；角色中枢形象文件名常显列表（文件名/类型/大小，点击切换）；完成全代码审查修复（默认文案冻结、WE 宿主 stream error、低电量异步泄漏、bridge 节点清理、转码超时兜底、宿主同源栅栏收紧、聊天视口翻转）。　v1.6.5（公开 v1.0.4 正式版）：修复桌宠「AI 对话」关不掉的问题——新增面板「×」关闭按钮、点空白关闭、全局 Esc 关闭、[hidden] 真正隐藏，并支持桌宠靠近屏幕底部时点桌宠直接退出（菜单被裁到视口外也能退出）。仅浏览器半，无宿主路由改动，Ctrl+F5 即可。　v1.6.6（公开 v1.0.5 正式版）：修复 AI 对话面板在桌宠默认靠右位置时「×」关闭按钮被视口裁掉的问题（面板水平夹取进视口，拖拽/窗口缩放后重算），并把顶部翻转阈值改为按面板实际高度计算（新增按钮行后不再裁到顶部），略增大关闭按钮点击区域。仅浏览器半；版本常量变更，Ctrl+F5 + 重启 DSH 一次可消除宿主半 stale 提示。　v1.6.7（公开 v1.0.6 正式版）：壁纸面板默认视图新增一等「URL 地址」「ShaderToy 代码」快捷来源（点击直达编辑器，并修复 URL/Shader 应用假成功与卡死）；桌宠「AI 对话」收到回复即自动收起输入面板、只留气泡回复；新增「☰」对话历史（与 AI 对话相邻）：可查看历史、开启新对话、编辑已发消息、删除对话，数据存本机 localStorage。仅浏览器半；版本常量变更，Ctrl+F5 + 重启 DSH 一次可消除宿主半 stale 提示。　v1.6.8（公开 v1.0.7 正式版）：桌宠新增「自主思考」智能体——按间隔做内心独白、可自主开口（受既有主动开口预算约束），聊天回复融入最近对话/时段/记忆/当前想法更像人；角色中枢新增「自主思考」卡片（开关/间隔/自主开口/现在想一下/最近想法/清空）。不新增权限与网络通道，不驱动 DSH Agent；仅浏览器半，Ctrl+F5 即可；版本常量变更，重启 DSH 一次可消除宿主半 stale 提示。　v2.0.0：桌宠 AI 对话接入 DSH 自带 LLM（宿主路由 _pet-chat；默认跟随 DSH 默认模型，仍须在角色中枢两步授权 llm；不建会话、不调工具、60/日、6/分、1200 字、20s 超时；失败按稳定错误码提示）；版本号统一为 2.0.0（仓库 / DSH 安装 / GitHub 发布同名同号）；并入 v1.6.8 之后的体检修复批次（设置同步合并与冲突保护、宿主/桥接安全收口、统一浮层层序、壁纸切换与性能、可读性/低电量、导出导入一致性）；默认演示素材精简为 bg-4k.mp4（H.264 4K）与 cat.png，bg-main.mp4 改为可选自备首选槽。本版改了宿主半：升级后必须重启 DSH 一次 + Ctrl+F5，之后纯浏览器半更新仍只需 Ctrl+F5。",