dsh-mpkg-wallpaper 3.1.0

package/lib/index.js

@@ -0,0 +1,509 @@
+// dsh-mpkg-wallpaper —— 宿主端（hybrid 模式：大文件流式上传 + Range 播放 + Steam 自动发现）
+// 纯客户端逻辑仍在 ./client.js。本文件提供：
+//   GET  /api/mpkg-wallpaper/ping                → { ok:true }（客户端探测 host 是否可用）
+//   POST /api/mpkg-wallpaper/upload              → 流式接收 mpkg → 存磁盘 → 返回条目索引
+//   GET  /api/mpkg-wallpaper/media?token=&index= → Range 流式返回 mpkg 内某个条目
+//   GET  /api/mpkg-wallpaper/steam-inventory     → (Windows) 自动发现壁纸引擎安装与壁纸列表
+import { createWriteStream, createReadStream, mkdirSync, existsSync, statSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+// tmpdir 不再使用（持久目录用 DATA_DIR）
+import crypto from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+
+const BASE = '/api/mpkg-wallpaper';
+const HEAD_BYTES = 2 * 1024 * 1024; // 与客户端一致的容器头读取量
+const WE_APPID = '431960';
+const STEAM_PROBE_DIRS = [
+  'C:\\Program Files (x86)\\Steam',
+  'C:\\Program Files\\Steam',
+  'D:\\Steam',
+  'D:\\SteamLibrary',
+  'E:\\SteamLibrary',
+];
+/** ①(修正) 持久数据目录：放 DSH_HOME/HOME 下而非 tmpdir —— Termux/proot 环境
+ *  /tmp 每次重启清空 → 重启后 mpkg 与 customDir 全部丢失（用户实测）。
+ *  用持久目录：上传的 mpkg、custom-dir.json、token 映射重启后都能恢复。 */
+const DATA_DIR = join(process.env.DSH_HOME || process.env.HOME || '.', '.dsh-mpkg-wallpaper');
+
+/** token → { path, size, dataStart, entries } */
+const files = new Map();
+/** ④(新) 本地壁纸库：ltoken → { dir, type, title, media, preview }（Steam 自动发现） */
+const library = new Map();
+/** ①(新) 自定义本地壁纸目录：用户指定的文件夹路径（只读媒体文件，安全校验） */
+let customDir = null;
+/** ①(修正) customDir 持久化：dsh 重启后恢复（否则 /custom-media 404 → 自定义目录壁纸消失）。
+ *  存入 tmpdir 下的 JSON，随 tmpdir 清理策略（上传的 mpkg 同目录）。 */
+function persistCustomDir() {
+  try {
+    const dir = DATA_DIR;
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, 'custom-dir.json'), JSON.stringify({ dir: customDir }));
+  } catch { /* 忽略 */ }
+}
+function restoreCustomDir() {
+  try {
+    const f = join(DATA_DIR, 'custom-dir.json');
+    if (!existsSync(f)) return;
+    const d = JSON.parse(readFileSync(f, 'utf8'));
+    if (d && d.dir && existsSync(d.dir) && statSync(d.dir).isDirectory()) customDir = d.dir;
+  } catch { /* 忽略 */ }
+}
+
+/** 解析 mpkg 容器头（与 client.js 的 parseMpkg 相同逻辑，返回 dataStart + 条目表）。 */
+function parseMpkgHead(buf) {
+  let pos = 0;
+  const versionLength = buf.readUInt32LE(pos); pos += 4;
+  pos += versionLength; // 跳过 version 字符串
+  const fileTotal = buf.readUInt32LE(pos); pos += 4;
+  const entries = [];
+  for (let i = 0; i < fileTotal; i++) {
+    const nameLength = buf.readUInt32LE(pos); pos += 4;
+    const name = buf.toString('utf8', pos, pos + nameLength); pos += nameLength;
+    const index = buf.readUInt32LE(pos); pos += 4;
+    const size = buf.readUInt32LE(pos); pos += 4;
+    entries.push({ name, index, size });
+  }
+  return { dataStart: pos, entries };
+}
+
+function json(res, code, obj) {
+  res.writeHead(code, { 'content-type': 'application/json' });
+  res.end(JSON.stringify(obj));
+}
+
+/** ①(新) 内容哈希：只哈希实际代码文件（client.js + index.js），README 变更不影响 */
+function codeHash() {
+  try {
+    const client = readFileSync(new URL('./client.js', import.meta.url), 'utf8');
+    const index = readFileSync(new URL('./index.js', import.meta.url), 'utf8');
+    return crypto.createHash('sha1').update(client + index).digest('hex').slice(0, 12);
+  } catch { return 'local'; }
+}
+/** ①(新) 从 GitHub 拉取某个文件的内容（自己的仓库，可信源） */
+async function fetchRaw(path) {
+  const r = await fetch('https://raw.githubusercontent.com/XHR666/dsh-mpkg-wallpaper/main/' + path);
+  if (!r.ok) throw new Error('HTTP ' + r.status);
+  return await r.text();
+}
+
+/** Steam 注册表里的安装路径（Windows）。 */
+function steamPathFromRegistry() {
+  if (process.platform !== 'win32') return null;
+  try {
+    const reg = join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'reg.exe');
+    const out = execFileSync(reg, ['query', 'HKCU\\Software\\Valve\\Steam', '/v', 'SteamPath'], {
+      encoding: 'utf8', windowsHide: true, timeout: 5000, stdio: ['ignore', 'pipe', 'ignore'],
+    });
+    const m = /SteamPath\s+REG_SZ\s+(.+)/i.exec(out);
+    return m ? m[1].trim().replace(/\\\\/g, '\\') : null;
+  } catch { return null; }
+}
+
+/** ③ 自动发现：定位壁纸引擎安装目录（Steam libraryfolders.vdf + 常见路径探测）。 */
+function locateWallpaperEngine() {
+  const probes = [];
+  const reg = steamPathFromRegistry();
+  if (reg) probes.push(reg);
+  probes.push(...STEAM_PROBE_DIRS);
+  const libraries = [];
+  for (const probe of probes) {
+    const vdf = join(probe, 'steamapps', 'libraryfolders.vdf');
+    if (existsSync(vdf)) {
+      try {
+        const text = readFileSync(vdf, 'utf8');
+        let current = null;
+        for (const line of text.split(/\r?\n/)) {
+          const m = /^\s*"path"\s+"([^"]+)"\s*$/.exec(line);
+          if (m) { current = m[1].replace(/\\\\/g, '\\'); continue; }
+          if (current && line.includes(WE_APPID) && !libraries.includes(current)) libraries.push(current);
+        }
+      } catch { /* skip */ }
+    }
+    if (existsSync(join(probe, 'steamapps', 'common', 'wallpaper_engine'))) libraries.push(probe);
+  }
+  const roots = [...new Set([...probes, ...libraries])];
+  for (const root of roots) {
+    const dir = join(root, 'steamapps', 'common', 'wallpaper_engine');
+    if (existsSync(join(dir, 'wallpaper32.exe'))) return dir;
+  }
+  const alt = 'C:\\Program Files (x86)\\Wallpaper Engine';
+  return existsSync(join(alt, 'wallpaper32.exe')) ? alt : null;
+}
+
+// ①(修正) 硬依赖 webServer：cordis 等待 HTTP 服务挂载后再 apply（dsh-wallpaper-engine 同款）。
+// 之前用 ctx.inject(['webServer'], (ws) => …) 时回调参数是 webCtx 而非服务对象，
+// ws.register 实际不存在 → 路由从未注册 → 客户端 ping 404 → hybrid 回退纯浏览器模式。
+export const inject = ['webServer'];
+
+/** ①(修正) 重启后恢复上传的 mpkg 映射：扫描临时目录下的 *.mpkg（文件名即 token），
+ *  重新解析容器头 → files Map 重建 → 浏览器里的 "host:" 背景在 dsh 重启后仍能加载。
+ *  之前 files Map 只在内存，dsh 重启即清空 → media 404 → 壁纸有时不显示。 */
+function restoreFiles() {
+  try {
+    const dir = DATA_DIR;
+    if (!existsSync(dir)) return;
+    for (const f of readdirSync(dir)) {
+      if (!f.endsWith('.mpkg')) continue;
+      const token = f.slice(0, -5);
+      if (files.has(token)) continue;
+      try {
+        const path = join(dir, f);
+        const head = readFileSync(path).subarray(0, HEAD_BYTES);
+        const { dataStart, entries } = parseMpkgHead(head);
+        files.set(token, { path, size: statSync(path).size, dataStart, entries });
+      } catch { /* 跳过损坏文件 */ }
+    }
+  } catch { /* 忽略 */ }
+}
+
+function apply(ctx) {
+  restoreFiles();
+  restoreCustomDir();
+  const webServer = ctx.webServer;
+  if (!webServer || typeof webServer.register !== 'function') return;
+  {
+    // 探测 host 可用性
+    webServer.register({
+      kind: 'exact', path: BASE + '/ping',
+      handler: (req, res) => json(res, 200, { ok: true }),
+    });
+
+    // 流式接收 mpkg → 磁盘 → 返回条目索引（hybrid 大文件模式）
+    webServer.register({
+      kind: 'exact', path: BASE + '/upload',
+      handler: async (req, res) => {
+        try {
+          const token = crypto.randomBytes(16).toString('hex');
+          const dir = DATA_DIR;
+          mkdirSync(dir, { recursive: true });
+          const filePath = join(dir, token + '.mpkg');
+          const out = createWriteStream(filePath);
+          let head = Buffer.alloc(0);
+          let size = 0;
+          for await (const chunk of req) {
+            size += chunk.length;
+            if (head.length < HEAD_BYTES) head = Buffer.concat([head, chunk]);
+            if (!out.write(chunk)) await new Promise((r) => out.once('drain', r));
+          }
+          await new Promise((r) => { out.end(r); });
+          const { dataStart, entries } = parseMpkgHead(head);
+          files.set(token, { path: filePath, size, dataStart, entries });
+          json(res, 200, { ok: true, token, size, entries });
+        } catch (err) {
+          json(res, 500, { ok: false, error: String(err && err.message || err) });
+        }
+      },
+    });
+
+    // Range 流式返回 mpkg 内某个条目（视频/图片直接播放）
+    webServer.register({
+      kind: 'exact', path: BASE + '/media',
+      handler: (req, res) => {
+        try {
+          const url = new URL(req.url || '', 'http://localhost');
+          const token = url.searchParams.get('token') || '';
+          const idx = Number(url.searchParams.get('index'));
+          let rec = files.get(token);
+          // ①(修正) 重启竞态兜底：dsh 重启后浏览器可能先请求 /media 而 restoreFiles()
+          // 尚未重建 Map（或该 token 恰好不在初始扫描结果里）→ 懒重扫一次再判 404，
+          // 避免"重启后壁纸偶尔消失且不再恢复"。
+          if (!rec) { restoreFiles(); rec = files.get(token); }
+          if (!rec || !rec.entries[idx]) { json(res, 404, { ok: false, error: 'not found' }); return; }
+          const entry = rec.entries[idx];
+          const st = statSync(rec.path);
+          const off = Math.max(0, Number(url.searchParams.get('offset')) || 0);
+          const start = rec.dataStart + entry.index + off;
+          const end = start + entry.size - 1 - off;
+          const name = entry.name.toLowerCase();
+          const mime = name.endsWith('.gif') ? 'image/gif'
+            : name.endsWith('.png') ? 'image/png'
+            : name.endsWith('.jpg') || name.endsWith('.jpeg') ? 'image/jpeg'
+            : name.endsWith('.webp') ? 'image/webp'
+            : name.endsWith('.mp4') ? 'video/mp4'
+            : name.endsWith('.webm') ? 'video/webm'
+            : 'application/octet-stream';
+          const range = req.headers.range;
+          if (range) {
+            const m = /bytes=(\d*)-(\d*)/.exec(range);
+            const rs = m && m[1] ? parseInt(m[1], 10) : 0;
+            const re = m && m[2] ? parseInt(m[2], 10) : entry.size - 1;
+            const s = start + Math.max(0, rs);
+            const e = start + Math.min(entry.size - 1, re);
+            if (s > e) { res.writeHead(416, { 'content-range': `bytes */${entry.size}` }); res.end(); return; }
+            res.writeHead(206, {
+              'content-type': mime, 'accept-ranges': 'bytes',
+              'content-range': `bytes ${s - start}-${e - start}/${entry.size}`,
+              'content-length': e - s + 1,
+            });
+            createReadStream(rec.path, { start: s, end: e }).pipe(res);
+          } else {
+            res.writeHead(200, { 'content-type': mime, 'accept-ranges': 'bytes', 'content-length': entry.size });
+            createReadStream(rec.path, { start, end }).pipe(res);
+          }
+        } catch (err) {
+          json(res, 500, { ok: false, error: String(err && err.message || err) });
+        }
+      },
+    });
+
+    // ①(新) 检测更新：对比 GitHub 上 client.js + index.js 的内容哈希（README 变更不触发）
+    webServer.register({
+      kind: 'exact', path: BASE + '/update-check',
+      handler: async (req, res) => {
+        try {
+          const local = codeHash();
+          let remote = null, remoteVersion = null, releaseAt = null;
+          try {
+            const remoteClient = await fetchRaw('lib/client.js');
+            const remoteIndex = await fetchRaw('lib/index.js');
+            remote = crypto.createHash('sha1').update(remoteClient + remoteIndex).digest('hex').slice(0, 12);
+            const pkg = JSON.parse(await fetchRaw('package.json'));
+            remoteVersion = pkg.version;
+            // ⑩(新) 最新 release 发布时间（用于"新版本刚发布可能有问题"提示）
+            try {
+              const rel = await fetch('https://api.github.com/repos/XHR666/dsh-mpkg-wallpaper/releases/latest');
+              if (rel.ok) { const rj = await rel.json(); releaseAt = rj.published_at || null; }
+            } catch { /* 忽略 */ }
+          } catch { /* 网络失败 → remote 保持 null */ }
+          const pkgLocal = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
+          json(res, 200, { ok: true, local, localVersion: pkgLocal.version, remote, remoteVersion, releaseAt, hasUpdate: !!remote && remote !== local });
+        } catch (err) { json(res, 500, { ok: false, error: String(err && err.message || err) }); }
+      },
+    });
+
+    // ①(新) 热更新：从 GitHub 下载最新 lib/client.js + lib/index.js 写回本插件目录
+    webServer.register({
+      kind: 'exact', path: BASE + '/update-apply',
+      handler: async (req, res) => {
+        try {
+          const dir = new URL('./', import.meta.url);
+          const client = await fetchRaw('lib/client.js');
+          const index = await fetchRaw('lib/index.js');
+          if (!client.includes('dsh-mpkg-wallpaper') || !index.includes('dsh-mpkg-wallpaper')) { json(res, 400, { ok: false, error: 'invalid payload' }); return; }
+          writeFileSync(new URL('./client.js', dir), client, 'utf8');
+          writeFileSync(new URL('./index.js', dir), index, 'utf8');
+          // 同步更新 package.json 版本号（让"更新到 vX"名副其实）
+          try {
+            const pkg = await fetchRaw('package.json');
+            const pj = JSON.parse(pkg);
+            if (pj && pj.version) {
+              const localPkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
+              localPkg.version = pj.version;
+              writeFileSync(new URL('../package.json', import.meta.url), JSON.stringify(localPkg, null, 2), 'utf8');
+            }
+          } catch { /* 版本号同步失败不阻塞更新 */ }
+          json(res, 200, { ok: true });
+        } catch (err) { json(res, 500, { ok: false, error: String(err && err.message || err) }); }
+      },
+    });
+
+    // ①(新) 目录浏览：返回指定路径下的子目录列表（跨平台，供文件夹选择器逐级浏览）
+    webServer.register({
+      kind: 'exact', path: BASE + '/list-dirs',
+      handler: (req, res) => {
+        try {
+          const url = new URL(req.url || '', 'http://localhost');
+          const p = (url.searchParams.get('path') || '').trim();
+          // ③(修正) 默认起始路径：Windows → C:\；其他平台 → 当前用户 HOME（proot 的 /root 等），
+          // 而不是直接开根目录（用户反馈打开的是安卓根目录、看不到自己环境）
+          const base = p || (process.platform === 'win32' ? 'C:\\' : (process.env.HOME || '/'));
+          if (!existsSync(base) || !statSync(base).isDirectory()) { json(res, 400, { ok: false, error: 'invalid dir' }); return; }
+          const subdirs = readdirSync(base, { withFileTypes: true })
+            .filter((d) => d.isDirectory() && !d.name.startsWith('.'))
+            .map((d) => d.name);
+          json(res, 200, { ok: true, dir: base, subdirs, home: process.env.HOME || '/', platform: process.platform });
+        } catch (err) { json(res, 500, { ok: false, error: String(err && err.message || err) }); }
+      },
+    });
+
+    // ①(新) 自定义本地壁纸目录：POST 设置并扫描目录内的媒体文件
+    webServer.register({
+      kind: 'exact', path: BASE + '/custom-dir',
+      handler: async (req, res) => {
+        try {
+          let body = "";
+          for await (const c of req) body += String(c);
+          const dir = (JSON.parse(body || '{}').dir || '').trim();
+          if (!dir || !existsSync(dir) || !statSync(dir).isDirectory()) { json(res, 400, { ok: false, error: 'invalid dir' }); return; }
+          customDir = dir;
+          persistCustomDir();
+          const exts = ['.gif', '.png', '.jpg', '.jpeg', '.webp', '.mp4', '.webm', '.mov', '.mpkg'];
+          // ①(安全) 只收图片/视频/mpkg；排除 exe/bat/sh/scr 等可执行与脚本（防病毒注入）
+          const files = readdirSync(dir)
+            .filter((f) => exts.some((e) => f.toLowerCase().endsWith(e)))
+            .map((f) => ({ name: f, type: /\.(mp4|webm|mov)$/i.test(f) ? 'video' : /\.mpkg$/i.test(f) ? 'mpkg' : 'image' }));
+          json(res, 200, { ok: true, dir, files });
+        } catch (err) { json(res, 500, { ok: false, error: String(err && err.message || err) }); }
+      },
+    });
+
+    // ⑥(新) 自定义目录里的 .mpkg：解析容器，分配 token，选素材（preview / 独立 mp4）
+    webServer.register({
+      kind: 'exact', path: BASE + '/custom-mpkg',
+      handler: (req, res) => {
+        try {
+          // ①(修正) 重启竞态兜底：懒恢复 customDir（防 404 壁纸消失）
+          if (!customDir) restoreCustomDir();
+          if (!customDir) { json(res, 404, { ok: false, error: 'no dir' }); return; }
+          const url = new URL(req.url || '', 'http://localhost');
+          const file = url.searchParams.get('file') || '';
+          if (!file || file.includes('..') || file.includes('/') || file.includes('\\')) { json(res, 403, { ok: false, error: 'forbidden' }); return; }
+          const filePath = join(customDir, file);
+          if (!existsSync(filePath) || !file.toLowerCase().endsWith('.mpkg')) { json(res, 404, { ok: false, error: 'not found' }); return; }
+          const head = readFileSync(filePath).subarray(0, HEAD_BYTES);
+          const { dataStart, entries } = parseMpkgHead(head);
+          const token = crypto.randomBytes(16).toString('hex');
+          files.set(token, { path: filePath, size: statSync(filePath).size, dataStart, entries });
+          // ④(修正) 选素材：preview 图片 > 独立 mp4 > 视频纹理 tex（含 ftyp）
+          const vid = entries.findIndex((e) => /\.(mp4|webm|mov)$/i.test(e.name));
+          const img = entries.findIndex((e) => /\.(gif|png|jpe?g|webp)$/i.test(e.name));
+          let sel = vid >= 0 ? { index: vid, name: entries[vid].name, isMp4: true }
+            : img >= 0 ? { index: img, name: entries[img].name, isMp4: false }
+            : null;
+          if (sel === null) {
+            // ④(新) 场景壁纸（无 preview/mp4）→ 尝试视频纹理 tex（内嵌 mp4）
+            const whole = readFileSync(filePath);
+            for (let i = 0; i < entries.length; i++) {
+              const e = entries[i];
+              if (!e.name.endsWith('.tex') || e.size < 1024 * 1024) continue;
+              if (/蓝幕|绿幕|bluescreen|greenscreen|chroma|keying|抠像|入场|intro|entry/i.test(e.name)) continue;
+              const seg = whole.subarray(dataStart + e.index, dataStart + e.index + 65536);
+              const p = seg.indexOf(Buffer.from('ftyp'));
+              if (p >= 4) { sel = { index: i, name: e.name, isMp4: true, offset: p - 4 }; break; }
+            }
+          }
+          if (sel === null) { json(res, 200, { ok: true, token, entries, selected: null }); return; }
+          json(res, 200, { ok: true, token, entries, selected: sel });
+        } catch (err) { json(res, 500, { ok: false, error: String(err && err.message || err) }); }
+      },
+    });
+
+    // ①(新) 自定义目录媒体：按文件名读取（Range），校验文件在自定义目录内且无路径穿越
+    webServer.register({
+      kind: 'exact', path: BASE + '/custom-media',
+      handler: (req, res) => {
+        try {
+          // ①(修正) 重启竞态兜底：懒恢复 customDir（防 404 壁纸消失）
+          if (!customDir) restoreCustomDir();
+          if (!customDir) { json(res, 404, { ok: false, error: 'no dir' }); return; }
+          const url = new URL(req.url || '', 'http://localhost');
+          const file = url.searchParams.get('file') || '';
+          if (!file || file.includes('..') || file.includes('/') || file.includes('\\')) { json(res, 403, { ok: false, error: 'forbidden' }); return; }
+          const filePath = join(customDir, file);
+          if (!existsSync(filePath) || !statSync(filePath).isFile()) { json(res, 404, { ok: false, error: 'not found' }); return; }
+          const st = statSync(filePath);
+          const name = file.toLowerCase();
+          const mime = name.endsWith('.mp4') ? 'video/mp4' : name.endsWith('.webm') ? 'video/webm'
+            : name.endsWith('.mov') ? 'video/quicktime' : name.endsWith('.gif') ? 'image/gif'
+            : name.endsWith('.png') ? 'image/png' : name.endsWith('.webp') ? 'image/webp'
+            : name.endsWith('.jpg') || name.endsWith('.jpeg') ? 'image/jpeg' : 'application/octet-stream';
+          const range = req.headers.range;
+          if (range) {
+            const m = /bytes=(\d*)-(\d*)/.exec(range);
+            const rs = m && m[1] ? parseInt(m[1], 10) : 0;
+            const re = m && m[2] ? parseInt(m[2], 10) : st.size - 1;
+            const s = Math.max(0, rs); const e = Math.min(st.size - 1, re);
+            if (s > e) { res.writeHead(416, { 'content-range': `bytes */${st.size}` }); res.end(); return; }
+            res.writeHead(206, { 'content-type': mime, 'accept-ranges': 'bytes', 'content-range': `bytes ${s}-${e}/${st.size}`, 'content-length': e - s + 1 });
+            createReadStream(filePath, { start: s, end: e }).pipe(res);
+          } else {
+            res.writeHead(200, { 'content-type': mime, 'accept-ranges': 'bytes', 'content-length': st.size });
+            createReadStream(filePath).pipe(res);
+          }
+        } catch (err) { json(res, 500, { ok: false, error: String(err && err.message || err) }); }
+      },
+    });
+
+    // ④(新) 本地壁纸库媒体：按 ltoken + 文件名读取（Range），校验防路径穿越
+    webServer.register({
+      kind: 'exact', path: BASE + '/library-media',
+      handler: (req, res) => {
+        try {
+          const url = new URL(req.url || '', 'http://localhost');
+          const lt = url.searchParams.get('ltoken') || '';
+          const file = url.searchParams.get('file') || '';
+          const rec = library.get(lt);
+          if (!rec || !rec.media) { json(res, 404, { ok: false, error: 'not found' }); return; }
+          // 安全：file 必须是 media 基础名（禁止 ../ 路径穿越）
+          if (file !== rec.media.split(/[\\/]/).pop()) { json(res, 403, { ok: false, error: 'forbidden' }); return; }
+          const filePath = rec.media;
+          if (!existsSync(filePath)) { json(res, 404, { ok: false, error: 'not found' }); return; }
+          const st = statSync(filePath);
+          const mime = filePath.toLowerCase().endsWith('.mp4') ? 'video/mp4'
+            : filePath.toLowerCase().endsWith('.webm') ? 'video/webm'
+            : filePath.toLowerCase().endsWith('.mov') ? 'video/quicktime'
+            : filePath.toLowerCase().endsWith('.html') || filePath.toLowerCase().endsWith('.htm') ? 'text/html'
+            : 'application/octet-stream';
+          const range = req.headers.range;
+          if (range) {
+            const m = /bytes=(\d*)-(\d*)/.exec(range);
+            const rs = m && m[1] ? parseInt(m[1], 10) : 0;
+            const re = m && m[2] ? parseInt(m[2], 10) : st.size - 1;
+            const s = Math.max(0, rs); const e = Math.min(st.size - 1, re);
+            if (s > e) { res.writeHead(416, { 'content-range': `bytes */${st.size}` }); res.end(); return; }
+            res.writeHead(206, {
+              'content-type': mime, 'accept-ranges': 'bytes',
+              'content-range': `bytes ${s}-${e}/${st.size}`, 'content-length': e - s + 1,
+            });
+            createReadStream(filePath, { start: s, end: e }).pipe(res);
+          } else {
+            res.writeHead(200, { 'content-type': mime, 'accept-ranges': 'bytes', 'content-length': st.size });
+            createReadStream(filePath).pipe(res);
+          }
+        } catch (err) {
+          json(res, 500, { ok: false, error: String(err && err.message || err) });
+        }
+      },
+    });
+
+    // ③(新) Steam 自动发现：返回壁纸引擎安装目录 + 可移植壁纸列表（video/web）
+    webServer.register({
+      kind: 'exact', path: BASE + '/steam-inventory',
+      handler: (req, res) => {
+        try {
+          const installDir = locateWallpaperEngine();
+          if (!installDir) { json(res, 200, { ok: true, installDir: null, wallpapers: [] }); return; }
+          const projectsRoots = [
+            join(installDir, 'projects', 'myprojects'),
+            join(installDir, 'projects', 'defaultprojects'),
+            join(installDir, 'steamapps', 'workshop', 'content', WE_APPID),
+          ];
+          const wallpapers = [];
+          const scan = (root) => {
+            if (!existsSync(root)) return;
+            for (const dir of readdirSync(root)) {
+              const p = join(root, dir);
+              const proj = join(p, 'project.json');
+              if (!existsSync(proj)) continue;
+              try {
+                const meta = JSON.parse(readFileSync(proj, 'utf8'));
+                const type = (meta.type || 'scene').toLowerCase();
+                // ④(安全) 排除 application / exe 壁纸：这类已弃用的 .exe 格式可能被注入病毒，
+                // 本插件绝不读取/执行任何 .exe。scene 只给预览图（无法渲染）。
+                if (type === 'application' || type === 'exe' || type === 'app') continue;
+                // 可移植类型（video/web）附带 media 路径（mp4/html）；scene 只给 preview
+                let media = null;
+                if (type === 'video') {
+                  const v = readdirSync(p).find((f) => /\.(mp4|webm|mov)$/i.test(f));
+                  if (v) media = join(p, v);
+                } else if (type === 'web') {
+                  const h = readdirSync(p).find((f) => /\.(html?|htm)$/i.test(f));
+                  if (h) media = join(p, h);
+                }
+                const ltoken = crypto.randomBytes(8).toString('hex');
+                library.set(ltoken, { dir: p, type, title: meta.title || dir, media, preview: join(p, 'preview.jpg') });
+                wallpapers.push({ title: meta.title || dir, type, ltoken, preview: join(p, 'preview.jpg'), media });
+              } catch { /* skip */ }
+            }
+          };
+          for (const root of projectsRoots) scan(root);
+          json(res, 200, { ok: true, installDir, wallpapers });
+        } catch (err) {
+          json(res, 500, { ok: false, error: String(err && err.message || err) });
+        }
+      },
+    });
+  }
+}
+
+export { apply };

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "dsh-mpkg-wallpaper",
+  "version": "3.1.0",
+  "description": "DSH Web 壁纸引擎 Wallpaper Engine mpkg 背景插件：浏览器内直接解析 .mpkg（preview.gif 动态背景/内嵌 mp4 视频/多时段切换），整屏统一虚化/对话框/弹层/遮罩独立虚化、镜头缩放平移、时钟、冲突检测。",
+  "private": false,
+  "type": "module",
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "LICENSE"
+  ],
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-api-remotes"
+      ],
+      "platform": "web",
+      "immediately": true
+    }
+  },
+  "peerDependencies": {
+    "react": "^18.2.0",
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/cordis": "^4.0.1"
+  },
+  "license": "MIT",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "wallpaper-engine",
+    "mpkg",
+    "background",
+    "web-ui"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/XHR666/dsh-mpkg-wallpaper.git"
+  },
+  "homepage": "https://github.com/XHR666/dsh-mpkg-wallpaper",
+  "bugs": {
+    "url": "https://github.com/XHR666/dsh-mpkg-wallpaper/issues"
+  }
+}