dsh-deepseek-style-theme 2.0.89 → 2.1.91

package/lib/index.js

@@ -6,9 +6,9 @@
 // so this plugin owns the whole "open workspace" gesture instead. The same
 // channel carries the delivered-file gestures the browser half's card menu
 // needs: open with the default application, and reveal in the file manager.
-// It also owns the DSTT settings section and, once per activation, aligns the
-// official DeepSeek route's advisory model catalog with the ids the endpoint
-// actually advertises (see the catalog-sync block below).
+// It also owns the DSTT settings section and the desktop-wallpaper endpoint.
+// 模型目录同步（1.40.0 起那套"每次启动向端点问一次模型列表、按需对齐
+// llm-deepseek.models"）已在 2.1.90 整体删除：官方自带模型目录，选择器内容以官方为准。
 //
 // Wire contract: every return is an RpcResult<T> per rpc.schema.js. Error
 // codes must come from the closed enum (bad-request / internal) — an
@@ -63,11 +63,12 @@ const OPEN_TIMEOUT_MS = 10000;
  *   - always-green        → always green, no peak distinction;
  *   - always-blue         → always blue, no peak distinction.
  */
-// `settingsNamespace` from @deepseek-ai/dsh-settings was deleted in dsh
-// 0.1.2-alpha.1 (the settings service itself is unchanged - register /
-// describe / mutate below still take the namespace string), so this is now
-// a plain literal. Keep it in sync with the client half's DSTT_NS.
-const DSTT_SETTINGS_NS = "deepseek-style-theme";
+// 0.2.0 起，设置命名空间不再是插件随手注册的字符串，而是**profile 里那条插件条目的
+// id**（见下面 dsttSettingsNs）。历史上有过三个名字，按"当前产品优先、旧命名兜底"
+// 排列：`ui-skin-deepseek-style` 是本插件 cordis.patch.yml 里的条目 id，也是两端
+// profile 实际用的 id；后两个是旧版运行时注册用的名字，留着只是为了老 profile 不至于
+// 直接失去持久化。解析失败时返回 null，调用方一律回落到默认值，绝不抛。
+const DSTT_SETTINGS_NS_CANDIDATES = ["ui-skin-deepseek-style", "dsh-deepseek-style-theme", "deepseek-style-theme"];
 const DSTT_MODES = ["peakvalley-redblue", "peakvalley-redgreen", "always-green", "always-blue"];
 const DSTT_MODE_DEFAULT = "peakvalley-redblue";
 // 1.37.x persisted `auto` / `blue` / `green`. The schema still accepts them —
@@ -75,15 +76,6 @@ const DSTT_MODE_DEFAULT = "peakvalley-redblue";
 // persistence on upgrade — and apply() migrates them to the closest four-mode
 // value right after registration.
 const DSTT_LEGACY_MODES = { auto: "peakvalley-redblue", blue: "always-blue", green: "always-green" };
-/**
- * Catalog-sync policies, most automatic first:
- *   - auto → align the catalog with the endpoint, but only while every
- *     advertised id is one this plugin can describe (see syncDeepseekCatalog);
- *   - add  → append-only: adopt newly advertised ids, remove nothing ever;
- *   - off  → probe and report drift, write nothing.
- */
-const CATALOG_SYNC_POLICIES = ["auto", "add", "off"];
-const CATALOG_SYNC_DEFAULT = "auto";
 // Glass recipes. `liquid` is the Apple-style lens (edge refraction, a flowing
 // edge highlight, high translucency); `frosted` is the white frosted pane with
 // the brand-tinted shifting border this theme shipped before, kept byte for byte
@@ -134,21 +126,16 @@ const DsttSettingsSchema = z === null ? null : z.object({
 		z.const("auto"),
 		z.const("blue"),
 		z.const("green")
-	]).default(DSTT_MODE_DEFAULT),
-	catalogSync: z.union([
-		z.const("auto"),
-		z.const("add"),
-		z.const("off")
-	]).default(CATALOG_SYNC_DEFAULT),
+	]).default(DSTT_MODE_DEFAULT).volatile(),
 	// The fluid background's pointer brush writes a velocity wake into the flow
 	// field wherever the cursor goes. It is both the most expensive part of the
 	// simulation and the most intrusive visually, so it ships OFF; this setting
 	// exists only to turn it back on.
-	fluidBrush: z.boolean().default(false),
+	fluidBrush: z.boolean().default(false).volatile(),
 	glassStyle: z.union([
 		z.const("liquid"),
 		z.const("frosted")
-	]).default(GLASS_STYLE_DEFAULT),
+	]).default(GLASS_STYLE_DEFAULT).volatile(),
 	// Both ids are listed on purpose, and dropping either one breaks an upgrade:
 	// `wide` is what the write path accepts today, and `origin` is what a settings
 	// file written before the rename holds -- register() validates the STORED
@@ -160,19 +147,19 @@ const DsttSettingsSchema = z === null ? null : z.object({
 		z.const("wide"),
 		z.const("origin"),
 		z.const("off")
-	]).default(COMPOSER_REFRACTION_DEFAULT),
+	]).default(COMPOSER_REFRACTION_DEFAULT).volatile(),
 	// The `blur()` term in every glass surface's backdrop chain. Turning it off
 	// keeps the translucency, the sheen and the edge refraction and drops only
 	// the frosting -- implemented as four variables driven to 0px, so nothing
 	// else about the recipes moves.
-	backdropBlur: z.boolean().default(true),
+	backdropBlur: z.boolean().default(true).volatile(),
 	// The animated background layer itself: the WebGL2 fluid, or the 2D particle
 	// field on engines without it. Off leaves the static themed background (the
 	// per-colour gradients, or the user's own 自选背景) and changes nothing else.
 	// It exists because some integrated GPUs render the simulation wrong -- an
 	// Intel iGPU under ANGLE/D3D11 turned the noise into drifting squares even
 	// after the mediump fix -- and for those machines a switch beats a fight.
-	ambientBackground: z.boolean().default(true),
+	ambientBackground: z.boolean().default(true).volatile(),
 	// Every id the write path accepts is listed here for the reason spelled out
 	// on composerRefraction above: register() validates the stored document, so
 	// an id the schema does not know throws there and takes DSTT persistence
@@ -182,8 +169,8 @@ const DsttSettingsSchema = z === null ? null : z.object({
 		z.const("white"),
 		z.const("custom"),
 		z.const("bold")
-	]).default(BACKGROUND_MODE_DEFAULT),
-	customBackground: z.string().default("")
+	]).default(BACKGROUND_MODE_DEFAULT).volatile(),
+	customBackground: z.string().default("").volatile()
 });
 
 /** Map a legacy 1.37.x mode id onto a four-mode id, or null when nothing to do. */
@@ -198,32 +185,6 @@ function powershellLiteral(path) {
 	return `'${path.replace(/'/g, "''")}'`;
 }
 
-/**
- * Open one path with Shell.Application, then focus the matching Explorer
- * window. The open step is strict: any COM failure exits the script non-zero
- * so the caller reports a real failure instead of a false success. Focusing
- * stays best-effort — a directory that opened but could not be focused is
- * still a successful open.
- */
-function openExplorerForeground(path) {
-	return new Promise((resolve) => {
-		const script = [
-			"$ErrorActionPreference = 'Stop'",
-			`$p = ${powershellLiteral(path)}`,
-			"$sh = New-Object -ComObject Shell.Application",
-			"try { $sh.Open($p) } catch { exit 1 }",
-			"Start-Sleep -Milliseconds 500",
-			"$f = $false",
-			"foreach ($w in @($sh.Windows())) {",
-			"  try { if ($w.Document.Folder.Self.Path -ieq $p) { $null = $w.Focus(); $f = $true; break } } catch {}",
-			"}",
-			"if (-not $f) { $null = (New-Object -ComObject WScript.Shell).AppActivate((Split-Path $p -Leaf)) }"
-		].join("; ");
-		execFile("powershell.exe", ["-NoProfile", "-Command", script], { windowsHide: true, timeout: OPEN_TIMEOUT_MS }, (error) => {
-			resolve(error === null || error === undefined);
-		});
-	});
-}
 
 /**
  * Run a simple command and resolve with whether it exited cleanly.
@@ -243,23 +204,10 @@ function runOpener(command, args, lenient = false) {
 	});
 }
 
-/** Open a directory in the platform's default file manager. */
-function openPathGeneric(path) {
-	switch (process.platform) {
-		case "win32":
-			return openExplorerForeground(path);
-		case "darwin":
-			return runOpener("open", [path]);
-		case "linux":
-			return runOpener("xdg-open", [path]);
-		default:
-			return Promise.resolve(false);
-	}
-}
-
 /**
- * Open one file with the OS default application. Deliberately not
- * {@link openPathGeneric}: on Windows `Shell.Application.Open` on a file is the
+ * Open one file with the OS default application. Not the same gesture as
+ * opening a directory (that helper is gone with 2.1.90's "open workspace"
+ * removal): on Windows `Shell.Application.Open` on a file is the
  * shell's own gesture, while `Start-Process` hands the path to the registered
  * handler, which is what "用默认应用打开" means.
  */
@@ -300,298 +248,55 @@ function failure(code, message, details) {
 	return { ok: false, error: { code, message, details } };
 }
 
-/**
- * Advisory model-catalog sync for the official DeepSeek route.
- *
- * `dsh-llm-deepseek` deliberately never probes its gateway — `listModels()`
- * returns the declared catalog and the README states the defaults are published
- * "without probing gateway availability" — so the composer's model selector can
- * drift from what the endpoint actually serves, and nothing in the harness would
- * ever notice. On activation this plugin therefore asks the endpoint which ids
- * it advertises (the same call the Models page makes: GET {baseURL}/models) and
- * aligns `llm-deepseek.models` with the answer.
- *
- * Two properties keep that from being a liability:
- *
- *   1. It never invents capability metadata. The endpoint reports ids only, so
- *      it cannot supply `inputModalities`, `systemPromptUpdate` or a context
- *      window. Entries that already exist are preserved verbatim and new ids are
- *      filled from KNOWN_CATALOG_ENTRIES; an id this plugin cannot describe is
- *      reported rather than guessed, because a guessed entry silently downgrades
- *      a vision model to text-only.
- *   2. It only rewrites the list wholesale while every advertised id is
- *      describable. An official route advertises a handful of DeepSeek ids; an
- *      aggregating gateway in front of `baseURL` advertises its entire
- *      catalogue, and "the endpoint is authoritative" would then replace a
- *      curated two-entry catalog with hundreds of unrelated rows. A
- *      foreign-looking answer degrades to append-only plus a warning.
- *
- * Every failure mode (no settings, no credential, offline gateway, renamed
- * service, concurrent settings edit) is a no-op for the theme — a skin must
- * never be able to break the model catalog — and it only writes on real drift.
- * `catalogSync: "off"` probes and reports without ever writing.
- */
-const LLM_DEEPSEEK_NS = "llm-deepseek";
-/** Public endpoint; a deployment may point elsewhere through `$DEEPSEEK_BASE_URL`. */
-const PUBLIC_DEEPSEEK_BASE_URL = "https://api.deepseek.com";
-const DEEPSEEK_BASE_URL_ENV = "DEEPSEEK_BASE_URL";
-const DEFAULT_API_KEY_ENV = "DEEPSEEK_API_KEY";
-const CATALOG_SYNC_TIMEOUT_MS = 5000;
-/** Retry offsets (ms) while a boot-order prerequisite is still missing. */
-const CATALOG_SYNC_RETRIES = [0, 2000, 6000, 15000];
-/**
- * Outcomes worth retrying: activation order is not ours to choose, so the
- * provider may not have registered `llm-deepseek` yet and the credentials
- * service may not be reachable at the instant this plugin activates. A failed
- * or answered probe (in-sync / updated / endpoint-unreachable) is final.
- */
-const CATALOG_SYNC_RETRYABLE = ["provider-absent", "no-credentials"];
-
-/**
- * Capability metadata for ids this plugin knows by name. Only consulted for ids
- * the endpoint advertises that the stored catalog does not describe yet; an
- * existing entry is never overwritten, so a user's own edits survive.
- */
-const KNOWN_CATALOG_ENTRIES = {
-	"deepseek-flash": {
-		name: "DeepSeek-V41-Flash",
-		contextWindow: 1000000,
-		inputModalities: ["text", "image"],
-		imagePixelBudget: 640000,
-		imageMaxBytes: 1048576,
-		systemPromptUpdate: "in-history"
-	},
-	"deepseek-v4-pro": {
-		name: "DeepSeek-V4-Pro",
-		contextWindow: 1000000,
-		inputModalities: ["text"]
-	}
-};
-
-/** One registered namespace's descriptor (resolved value plus revision), or null. */
-function settingsDescriptor(ctx, ns) {
+/** Every settings namespace the service currently reports, or null. */
+function settingsNamespaces(ctx) {
 	const settings = ctx.get("settings");
 	if (settings === undefined || settings === null || typeof settings.describe !== "function") return null;
-	let descriptors;
 	try {
-		descriptors = settings.describe({ redactSecrets: true });
+		const descriptors = settings.describe({ redactSecrets: true });
+		return Array.isArray(descriptors) ? descriptors : null;
 	} catch (error) {
 		return null;
 	}
-	if (!Array.isArray(descriptors)) return null;
-	const descriptor = descriptors.find((candidate) => String(candidate.ns) === ns);
-	if (descriptor === undefined || descriptor === null) return null;
-	const value = descriptor.value;
-	if (value === null || typeof value !== "object") return null;
-	return { value, revision: descriptor.revision };
-}
-
-/** The resolved `llm-deepseek` settings section, or null while it is absent. */
-function llmDeepseekSection(ctx) {
-	return settingsDescriptor(ctx, LLM_DEEPSEEK_NS);
-}
-
-/** The configured catalog-sync policy, falling back to the schema default. */
-function catalogSyncPolicy(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
-	const policy = descriptor === null ? undefined : descriptor.value.catalogSync;
-	return CATALOG_SYNC_POLICIES.includes(policy) ? policy : CATALOG_SYNC_DEFAULT;
-}
-
-/**
- * The endpoint the official adapter itself would dial, resolved in that
- * adapter's own order (`dsh-llm-deepseek` resolves `config.baseURL ??
- * launchEnvironment.get("DEEPSEEK_BASE_URL") ?? "https://api.deepseek.com"`).
- * Falling straight back to the public host would post the resolved credential to
- * api.deepseek.com on a deployment whose gateway lives behind that variable —
- * and that credential may be a gateway token, not a DeepSeek key. The service's
- * own fallback is a raw `process.env` snapshot, so consulting `process.env` only
- * while the service is absent matches the adapter exactly instead of widening
- * trust.
- */
-function resolveBaseURL(ctx, section) {
-	if (typeof section.baseURL === "string" && section.baseURL !== "") return section.baseURL;
-	const environment = ctx.get("launchEnvironment");
-	if (environment === undefined || environment === null || typeof environment.get !== "function") {
-		const ambient = process.env[DEEPSEEK_BASE_URL_ENV];
-		return typeof ambient === "string" && ambient !== "" ? ambient : PUBLIC_DEEPSEEK_BASE_URL;
-	}
-	try {
-		const hit = environment.get(DEEPSEEK_BASE_URL_ENV);
-		const value = hit === undefined || hit === null ? undefined : hit.value;
-		if (typeof value === "string" && value !== "") return value;
-	} catch (error) {
-		// Fall through to the public endpoint, exactly like the adapter does.
-	}
-	return PUBLIC_DEEPSEEK_BASE_URL;
 }
 
 /**
- * Resolve the provider API key the same way `dsh-llm-deepseek` does: through the
- * credentials service under the configured `apiKeyEnv`, falling back to the
- * ambient environment of the launching process.
- */
-async function resolveProviderKey(ctx, apiKeyEnv) {
-	const ref = typeof apiKeyEnv === "string" && apiKeyEnv !== "" ? apiKeyEnv : DEFAULT_API_KEY_ENV;
-	const credentials = ctx.get("credentials");
-	if (credentials !== undefined && credentials !== null && typeof credentials.resolve === "function") {
-		try {
-			const hit = await credentials.resolve(ref);
-			if (hit !== undefined && hit !== null && typeof hit.value === "string" && hit.value !== "") return hit.value;
-		} catch (error) {
-			// Fall through to the ambient environment.
-		}
-	}
-	const ambient = typeof process !== "undefined" && process.env !== undefined ? process.env[ref] : undefined;
-	return typeof ambient === "string" && ambient !== "" ? ambient : null;
-}
-
-/** Ask the endpoint which model ids it advertises, in endpoint order. */
-async function fetchEndpointModelIds(baseURL, key) {
-	if (typeof fetch !== "function") return null;
-	const url = String(baseURL).replace(/\/+$/, "") + "/models";
-	const signal = typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function"
-		? AbortSignal.timeout(CATALOG_SYNC_TIMEOUT_MS)
-		: undefined;
-	const response = await fetch(url, {
-		headers: { authorization: "Bearer " + key, accept: "application/json" },
-		...(signal === undefined ? {} : { signal })
-	});
-	if (!response.ok) throw new Error("endpoint answered " + String(response.status));
-	const body = await response.json();
-	const rows = body !== null && typeof body === "object" && Array.isArray(body.data) ? body.data : [];
-	const ids = [];
-	for (const row of rows) {
-		const id = row !== null && typeof row === "object" && typeof row.id === "string" ? row.id.trim() : "";
-		if (id !== "" && !ids.includes(id)) ids.push(id);
-	}
-	return ids;
-}
-
-/** One catalog entry for an id the stored catalog does not describe yet. */
-function catalogEntryFor(id) {
-	const known = Object.prototype.hasOwnProperty.call(KNOWN_CATALOG_ENTRIES, id) ? KNOWN_CATALOG_ENTRIES[id] : undefined;
-	return known === undefined ? { id, name: id, inputModalities: ["text"] } : { id, ...known };
-}
-
-/** Whether this plugin can describe an id without inventing capability metadata. */
-function isDescribable(id) {
-	return Object.prototype.hasOwnProperty.call(KNOWN_CATALOG_ENTRIES, id);
-}
-
-/** The ids of a catalog array, in order, ignoring malformed entries. */
-function catalogIds(entries) {
-	return entries
-		.map((entry) => (entry !== null && typeof entry === "object" && typeof entry.id === "string" ? entry.id : ""))
-		.filter((id) => id !== "");
-}
-
-/**
- * Align the stored catalog with the endpoint's id list, preserving surviving
- * entries verbatim. Returns one of: provider-absent | no-credentials |
- * endpoint-unreachable | in-sync | updated | conflict.
+ * The settings namespace this plugin's profile entry answers to, or null.
+ *
+ * 0.2.0 makes the namespace the *entry id* instead of a string the plugin
+ * registers, so it can no longer be a compile-time constant: the id belongs to
+ * the profile, and a profile is free to insert this plugin under another one.
+ * Candidates are tried in order and the first one the service actually reports
+ * wins. The old registered name is last on purpose -- a profile that still
+ * carries it should keep persisting under it rather than silently start a
+ * second, empty namespace.
  */
-async function syncDeepseekCatalog(ctx) {
-	const section = llmDeepseekSection(ctx);
-	if (section === null) return "provider-absent";
-	const settings = ctx.get("settings");
-	if (settings === undefined || settings === null || typeof settings.mutate !== "function") return "provider-absent";
-	const policy = catalogSyncPolicy(ctx);
-	const baseURL = resolveBaseURL(ctx, section.value);
-	const key = await resolveProviderKey(ctx, section.value.apiKeyEnv);
-	if (key === null) return "no-credentials";
-	let ids;
-	try {
-		ids = await fetchEndpointModelIds(baseURL, key);
-	} catch (error) {
-		return "endpoint-unreachable";
-	}
-	if (ids === null || ids.length === 0) return "endpoint-unreachable";
-	const current = Array.isArray(section.value.models) ? section.value.models : [];
-	const byId = new Map();
-	for (const entry of current) {
-		if (entry !== null && typeof entry === "object" && typeof entry.id === "string") byId.set(entry.id, entry);
-	}
-	const currentIds = catalogIds(current);
-	// Advertised ids this plugin knows nothing about: reported, never guessed.
-	const undescribed = ids.filter((id) => !byId.has(id) && !isDescribable(id));
-
-	if (policy === "off") {
-		const missing = ids.filter((id) => !byId.has(id));
-		const stale = currentIds.filter((id) => !ids.includes(id));
-		if (missing.length === 0 && stale.length === 0) return "in-sync";
-		console.warn(
-			`[deepseek-style-theme] model catalog drift at ${baseURL} (catalogSync is "off", nothing written) — endpoint adds: ${missing.join(", ") || "none"}; endpoint no longer lists: ${stale.join(", ") || "none"}`
-		);
-		return "in-sync";
-	}
-
-	// A wholesale rewrite is only safe while every advertised id is one this
-	// plugin can describe; otherwise the answer looks like a gateway catalogue
-	// rather than the official route, and aligning to it would replace a curated
-	// catalog with unrelated rows.
-	const rewrites = policy === "auto" && undescribed.length === 0;
-	let models;
-	if (rewrites) {
-		if (currentIds.length === ids.length && currentIds.every((id, index) => id === ids[index])) return "in-sync";
-		models = ids.map((id) => (byId.has(id) ? byId.get(id) : catalogEntryFor(id)));
-	} else {
-		const added = ids.filter((id) => !byId.has(id) && isDescribable(id));
-		if (added.length === 0) {
-			if (undescribed.length > 0) {
-				console.warn(
-					`[deepseek-style-theme] ${baseURL} advertises ${undescribed.length} model id(s) this plugin cannot describe (${undescribed.slice(0, 5).join(", ")}); leaving llm-deepseek.models untouched rather than guessing their capabilities.`
-				);
-			}
-			return "in-sync";
-		}
-		models = [...current, ...added.map((id) => catalogEntryFor(id))];
+function dsttSettingsNs(ctx) {
+	const descriptors = settingsNamespaces(ctx);
+	if (descriptors === null) return null;
+	for (const ns of DSTT_SETTINGS_NS_CANDIDATES) {
+		if (descriptors.some((candidate) => candidate !== null && typeof candidate === "object" && String(candidate.ns) === ns)) return ns;
 	}
-
-	const removed = currentIds.filter((id) => !models.some((entry) => entry.id === id));
-	try {
-		// Pinned to the revision this decision was read from: a settings edit the
-		// user made in the meantime wins, and this activation simply does not sync.
-		await settings.mutate(LLM_DEEPSEEK_NS, [{ op: "set", path: ["models"], value: models }], section.revision);
-	} catch (error) {
-		return "conflict";
-	}
-	if (removed.length > 0) {
-		console.warn(
-			`[deepseek-style-theme] model catalog synced from ${baseURL}; removed id(s) the endpoint does not list: ${removed.join(", ")}`
-		);
-	} else {
-		console.info(`[deepseek-style-theme] model catalog synced from ${baseURL}`);
-	}
-	return "updated";
+	return null;
 }
 
 /**
- * Run the catalog sync once per activation, retrying briefly while a boot-order
- * prerequisite is still missing (the provider namespace or the credentials
- * service). Disposal cancels any pending retry.
+ * One namespace's descriptor (resolved value plus revision), or null.
+ *
+ * The namespace defaults to this plugin's own, resolved on every call rather
+ * than captured once: the profile patch is editable at runtime (that is what
+ * the settings service writes through), so an entry can appear or move while
+ * the process is up.
  */
-function startCatalogSync(ctx) {
-	return ctx.effect(() => {
-		let cancelled = false;
-		let timer = null;
-		const attempt = (step) => {
-			if (cancelled) return;
-			syncDeepseekCatalog(ctx).then((outcome) => {
-				if (cancelled) return;
-				// "updated" already logged exactly what it changed where it changed it.
-				if (outcome === "updated") return;
-				if (CATALOG_SYNC_RETRYABLE.includes(outcome) && step + 1 < CATALOG_SYNC_RETRIES.length) {
-					timer = setTimeout(() => attempt(step + 1), CATALOG_SYNC_RETRIES[step + 1]);
-				}
-			}).catch(() => {});
-		};
-		attempt(0);
-		return () => {
-			cancelled = true;
-			if (timer !== null) clearTimeout(timer);
-		};
-	}, "deepseek-style-theme: model catalog sync");
+function settingsDescriptor(ctx, ns = dsttSettingsNs(ctx)) {
+	if (ns === null || ns === undefined) return null;
+	const descriptors = settingsNamespaces(ctx);
+	if (descriptors === null) return null;
+	const descriptor = descriptors.find((candidate) => String(candidate.ns) === ns);
+	if (descriptor === undefined || descriptor === null) return null;
+	const value = descriptor.value;
+	if (value === null || typeof value !== "object") return null;
+	return { value, revision: descriptor.revision };
 }
 
 /**
@@ -747,7 +452,7 @@ function localPathOf(payload) {
  * the client rejects any off-enum answer anyway.
  */
 function dsttRead(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	if (descriptor === null) return failure("internal", "settings service unavailable", {});
 	const stored = descriptor.value.mode;
 	return {
@@ -793,8 +498,15 @@ async function dsttWrite(ctx, mode, fluidBrush, glassStyle, composerRefraction,
 	if (settings === undefined || settings === null || typeof settings.mutate !== "function") {
 		return failure("internal", "settings service unavailable", {});
 	}
+	// 命名空间是按 profile 条目 id 解析出来的，解析不到就不能硬写：写一个不存在
+	// 的 ns 会被服务以 `No configurable plugin entry` 拒掉，而那时错误信息会把
+	// "插件没被正确插入 profile"说成"设置写入失败"，误导排查方向。
+	const ns = dsttSettingsNs(ctx);
+	if (ns === null) {
+		return failure("internal", `no settings entry for this plugin (tried ${DSTT_SETTINGS_NS_CANDIDATES.join(", ")})`, {});
+	}
 	try {
-		await settings.mutate(DSTT_SETTINGS_NS, ops);
+		await settings.mutate(ns, ops);
 	} catch (error) {
 		return failure("internal", error instanceof Error ? error.message : "settings write failed", {});
 	}
@@ -819,7 +531,7 @@ async function dsttWrite(ctx, mode, fluidBrush, glassStyle, composerRefraction,
  * the client always gets one of the four ids it can gate its stylesheet on.
  */
 function dsttBackgroundValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	const stored = descriptor === null ? undefined : descriptor.value.backgroundMode;
 	return BACKGROUND_MODES.includes(stored) ? stored : BACKGROUND_MODE_DEFAULT;
 }
@@ -838,19 +550,19 @@ function normalizeCustomBackground(value) {
 
 /** The stored custom background (empty string when nothing is set). */
 function dsttCustomBackgroundValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	return normalizeCustomBackground(descriptor === null ? "" : descriptor.value.customBackground);
 }
 
 /** Whether the animated background layer may mount; on unless it was turned off. */
 function dsttAmbientValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	return descriptor === null ? true : descriptor.value.ambientBackground !== false;
 }
 
 /** The stored backdrop-blur preference, defaulting to on. */
 function dsttBlurValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	return descriptor === null ? true : descriptor.value.backdropBlur !== false;
 }
 
@@ -861,7 +573,7 @@ function dsttBlurValue(ctx) {
  * client only ever sees one id per state.
  */
 function dsttComposerValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	const stored = descriptor === null ? undefined : descriptor.value.composerRefraction;
 	if (stored === "origin") return "wide";
 	return COMPOSER_REFRACTIONS.includes(stored) ? stored : COMPOSER_REFRACTION_DEFAULT;
@@ -869,7 +581,7 @@ function dsttComposerValue(ctx) {
 
 /** The stored fluid-brush preference, defaulting to off. */
 function dsttBrushValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	return descriptor === null ? false : descriptor.value.fluidBrush === true;
 }
 
@@ -879,39 +591,72 @@ function dsttBrushValue(ctx) {
  * ids it can gate its stylesheet on.
  */
 function dsttGlassValue(ctx) {
-	const descriptor = settingsDescriptor(ctx, DSTT_SETTINGS_NS);
+	const descriptor = settingsDescriptor(ctx);
 	const stored = descriptor === null ? undefined : descriptor.value.glassStyle;
 	return GLASS_STYLES.includes(stored) ? stored : GLASS_STYLE_DEFAULT;
 }
 
 function apply(ctx) {
-	// Both registrations below are best-effort on purpose: dsh ships breaking
-	// changes to the settings / connection APIs between releases, and a throw
-	// here fails this bundle's loader entry — with it the whole plugin tree,
-	// which is far worse than a theme that merely loses its persistence.
+	// Best-effort on purpose: dsh ships breaking changes to the settings API
+	// between releases, and a throw here fails this bundle's loader entry — with
+	// it the whole plugin tree, which is far worse than a theme that merely
+	// loses its persistence.
+	//
+	// 0.2.0 removed `settings.register()` outright, so there is nothing to
+	// register any more: the namespace, its shape (`Config` above) and the
+	// profile entry that carries them are all owned by the product now. What is
+	// left for this plugin to do at boot is notice when that wiring is missing
+	// and say so once, in the loader log, instead of failing silently and
+	// leaving the user to discover it as "my switches reset every restart".
 	ctx.inject(["settings"], (settingsCtx) => {
-		if (DsttSettingsSchema === null) {
-			console.warn("[deepseek-style-theme] DSTT settings not registered (Schemastery is missing, see above): the mode will not persist");
-		} else {
-			try {
-				settingsCtx.settings.register(DSTT_SETTINGS_NS, DsttSettingsSchema);
-				const descriptor = settingsDescriptor(settingsCtx, DSTT_SETTINGS_NS);
+		// 0.2.0 的两条时序事实，这个块长成这样全是为了它们：
+		//
+		//   1. 设置服务的 describe() 只列出**已经 ACTIVE**（fiber.state === 2）的条目，
+		//      而本插件此刻正在自己的激活过程中，自己那条还是 LOADING。所以在这里
+		//      立刻解析命名空间必然是空的 —— 那不是配置错误，是时机不到。
+		//      实测证据：条目存在、runtime.Config 是 function，唯独 state === 1。
+		//   2. 取值路径（settingsDescriptor / dsttSettingsNs）是惰性的，每次调用都
+		//      重新解析，所以运行期的读写本来就正确。真正需要"开机做一次"的只有
+		//      下面两件事：自检（没接线就要说出来）与老 mode 值迁移。
+		//
+		// 于是退避重试到就绪为止；到点仍没有才出声，并把服务实际提供的命名空间
+		// 一并列出来 —— 少了那一行，下一个人只会看到"没有设置条目"，那句话是真的，
+		// 但完全帮不上忙（这一版就是这么绕了一圈才定位到的）。
+		try {
+			if (DsttSettingsSchema === null) {
+				console.warn("[deepseek-style-theme] DSTT settings have no schema (Schemastery is missing, see above): the mode will not persist");
+				return;
+			}
+			let attempts = 0;
+			const settle = () => {
+				attempts += 1;
+				const ns = dsttSettingsNs(settingsCtx);
+				if (ns === null) {
+					// 40 × 500ms = 20s：整棵插件树启动远用不了这么久，超过就是真没接线。
+					if (attempts < 40) return;
+					clearInterval(timer);
+					const available = (settingsNamespaces(settingsCtx) ?? [])
+						.map((row) => (row === null || typeof row !== "object" ? "?" : String(row.ns)))
+						.slice(0, 12);
+					console.warn(`[deepseek-style-theme] no settings entry for this plugin (tried ${DSTT_SETTINGS_NS_CANDIDATES.join(", ")}) after ${attempts} attempts: DSTT preferences will not persist. The settings service reports ${available.length} namespace(s): ${available.length === 0 ? "(none)" : available.join(", ")}`);
+					return;
+				}
+				clearInterval(timer);
+				const descriptor = settingsDescriptor(settingsCtx, ns);
 				const stored = descriptor === null ? undefined : descriptor.value.mode;
 				const migrated = migrateLegacyMode(stored);
 				if (migrated !== null) {
-					settingsCtx.settings.mutate(DSTT_SETTINGS_NS, [{ op: "set", path: ["mode"], value: migrated }])
+					settingsCtx.settings.mutate(ns, [{ op: "set", path: ["mode"], value: migrated }])
 						.then(() => console.warn(`[deepseek-style-theme] migrated DSTT mode "${stored}" -> "${migrated}"`))
 						.catch(() => {});
 				}
-			} catch (error) {
-				console.warn("[deepseek-style-theme] settings.register failed (DSTT mode will not persist):", error);
-			}
-		}
-		// Activation-time, best-effort, silent unless it really changed something.
-		try {
-			startCatalogSync(settingsCtx);
+			};
+			const timer = setInterval(settle, 500);
+			// 这个定时器不该拖着进程不让它退出。
+			if (typeof timer.unref === "function") timer.unref();
+			settle();
 		} catch (error) {
-			console.warn("[deepseek-style-theme] catalog sync unavailable:", error);
+			console.warn("[deepseek-style-theme] DSTT settings wiring failed (the mode will not persist):", error);
 		}
 	});
 
@@ -967,18 +712,9 @@ function apply(ctx) {
 				}
 				return { ok: true, value: { opened: true } };
 			}
-			if (endpoint !== "dshome/explorer.open") {
-				return failure("bad-request", `unknown endpoint "${endpoint}"`, { issues: [] });
-			}
-			const path = localPathOf(payload);
-			if (path === null) {
-				return failure("bad-request", "payload.path must be a non-empty absolute local path", { issues: [] });
-			}
-			const opened = await openPathGeneric(path);
-			if (!opened) {
-				return failure("internal", "the system file manager failed to open the path", {});
-			}
-			return { ok: true, value: { opened: true } };
+			// dshome/explorer.open 已随"打开工作区"菜单一并删除（2.1.90，需求第 9 条）：
+			// 那个手势改用官方的 open-in-app，本插件不再自己开文件管理器。
+			return failure("bad-request", `unknown endpoint "${endpoint}"`, { issues: [] });
 		} catch (error) {
 			const message = error instanceof Error ? error.message : "unexpected failure in the rpc handler";
 			return failure("internal", message, {});
@@ -1113,4 +849,21 @@ function sendJson(res, status, value) {
 // plugin's channel without tripping the guard described in apply().
 const inject = ["webServer"];
 
-export { apply, inject };
+// 0.2.0 changed how a plugin owns settings, and the change is structural rather
+// than a rename. There is no `settings.register(ns, schema)` any more anywhere
+// in the product; a settings namespace IS a profile entry, its id is the
+// namespace, and its shape is read off `fiber.runtime.Config` -- this export.
+// The service also refuses to write a field that is not marked volatile
+// (`volatile` is a Schemastery method that sets meta.volatile), which is why
+// every field above carries `.volatile()`: without it the section still renders
+// but every write fails with "has no volatile fields". Exporting `undefined`
+// when Schemastery is missing keeps the loader on "no schema" instead of
+// handing it a broken one.
+const Config = DsttSettingsSchema === null ? undefined : DsttSettingsSchema;
+
+// 两处都挂：cordis 读结构的位置是 `runtime.Config`，而 `runtime` 在功能型插件上
+// 可能是模块命名空间，也可能是被选中的那个函数本身。哪一种是实现细节，不值得赌，
+// 所以函数上也带一份。代价是同一个对象有两个名字，改的时候两边一起改。
+apply.Config = Config;
+
+export { apply, inject, Config };