dsh-plugin-yanyan-toolkit 1.2.0 → 1.4.0

package/packages/dsh-plugin-yanyan-icon/lib/client.js

@@ -0,0 +1,388 @@
+// dsh-plugin-yanyan-icon — 浏览器半区（__ModuleLoader__ 装载形态）。
+//
+// 严格照抄 dsh-plugin-yanyan-update/lib/client.js 的装载 / 座位 / MutationObserver /
+// 单 ctx.effect 清理骨架，零第三方依赖、不依赖 React。所有 UI 文案中文，禁用 emoji。
+//
+// 流程：选图 -> 原生 Canvas 居中裁切正方形并缩到 48x48 PNG -> POST 到 host
+// /generate 拿到自包含 SVG -> 按插件列表 30px 行 / 36px 卡片尺寸预览 -> 下载 icon.svg。
+
+(function (root) {
+  if (!root) return;
+  if (!root.__ModuleLoader__ || typeof root.__ModuleLoader__.load !== 'function') return;
+
+  root.__ModuleLoader__.load({
+    id: 'dsh-plugin-yanyan-icon',
+    factory: () => {
+      var module = { exports: {} };
+      var exports = module.exports;
+      Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+      var BASE = '/__dsh-plugin-yanyan-icon';
+      var CANVAS_SIZE = 48;
+      var MARK = 'data-yanyan-icon-toolbar';
+
+      // 文案全部中文，不接入 locale 服务，零依赖零异常风险。
+      var T = {
+        open: '图标生成',
+        close: '关闭',
+        chooseHint: '选择 PNG / JPEG / WebP 图片，自动居中裁切为正方形。',
+        empty: '尚未生成图标',
+        working: '正在生成…',
+        ok: '已生成，可预览并下载 icon.svg',
+        badFile: '请选择 PNG / JPEG / WebP 图片',
+        badImage: '图片读取失败，请换一张',
+        fail: '生成失败，请重试',
+        download: '下载 icon.svg',
+        reset: '重新选择',
+        rowLabel: '列表行 30px',
+        cardLabel: '详情卡片 36px',
+        usage: '把下载的 icon.svg 放到插件包根目录，并在 package.json 里声明 "icon": "icon.svg" 与 exports["./icon"]，重启 DSH 后即可在插件列表显示。',
+      };
+
+      var CSS = [
+        '.yyic-root{position:relative;display:inline-flex;align-items:center;margin-left:8px;font-family:inherit;vertical-align:middle;}',
+        '.yyic-main{background:var(--dsw-alias-button-primary-fill,#4f46e5);color:var(--dsw-alias-label-primary-foreground,#fff);border:0;border-radius:6px;padding:4px 12px;font-size:12px;line-height:1.6;cursor:pointer;}',
+        '.yyic-main:hover{background:var(--dsw-alias-button-primary-hover,#4338ca);}',
+        '.yyic-panel{position:absolute;top:calc(100% + 6px);right:0;z-index:50;width:320px;max-width:82vw;box-sizing:border-box;background:var(--yyic-panel-bg,#ffffff);color:var(--yyic-panel-fg,#374151);border:1px solid var(--yyic-panel-border,#e5e7eb);border-radius:10px;box-shadow:0 8px 24px rgba(0,0,0,.18);padding:12px;font-size:12px;}',
+        '.yyic-head{font-weight:600;margin-bottom:8px;color:var(--yyic-head-fg,#111827);}',
+        '.yyic-hint{color:#6b7280;line-height:1.6;margin-bottom:8px;}',
+        '.yyic-file{display:block;width:100%;box-sizing:border-box;font-size:12px;margin-bottom:10px;}',
+        '.yyic-previews{display:flex;align-items:flex-end;gap:20px;justify-content:center;padding:12px 4px;border:1px dashed var(--yyic-panel-border,#d1d5db);border-radius:8px;margin-bottom:10px;background:var(--yyic-preview-bg,#f9fafb);}',
+        '.yyic-pv{text-align:center;}',
+        '.yyic-pv img{display:block;margin:0 auto 6px;border-radius:6px;background:#eef2ff;border:1px solid #c7d2fe;}',
+        '.yyic-pv span{color:#6b7280;}',
+        '.yyic-foot{display:flex;justify-content:flex-end;gap:8px;margin-top:6px;}',
+        '.yyic-btn{background:var(--dsw-alias-button-primary-fill,#4f46e5);color:var(--dsw-alias-label-primary-foreground,#fff);border:0;border-radius:6px;padding:4px 12px;font-size:12px;cursor:pointer;}',
+        '.yyic-btn:disabled{opacity:.5;cursor:default;}',
+        '.yyic-ghost{background:transparent;border:1px solid var(--yyic-panel-border,#d1d5db);border-radius:6px;padding:4px 10px;font-size:12px;cursor:pointer;color:inherit;}',
+        '.yyic-status{margin-top:8px;color:#b45309;min-height:16px;}',
+        '.yyic-usage{margin-top:10px;color:#6b7280;line-height:1.6;border-top:1px solid var(--yyic-panel-border,#f3f4f6);padding-top:8px;}',
+      ].join('\n');
+
+      var inject = [];
+
+      function apply(ctx) {
+        var container = null;
+        var mainBtn = null;
+        var panel = null;
+        var fileInput = null;
+        var previewRow = null;
+        var previewCard = null;
+        var statusEl = null;
+        var downloadBtn = null;
+        var generatedSvg = null;
+        var objectUrl = null;
+        var busy = false;
+        var ensureTimer = null;
+        var observer = null;
+
+        function seat() {
+          try {
+            var group = document.querySelector('[data-plugin-panel] [data-plugin-group="bundles"]');
+            if (!group) return null;
+            return group.firstElementChild || null;
+          } catch (e) {
+            return null;
+          }
+        }
+
+        function makePreview(label, px) {
+          var wrap = document.createElement('div');
+          wrap.className = 'yyic-pv';
+          var img = document.createElement('img');
+          img.width = px;
+          img.height = px;
+          img.alt = '';
+          img.style.width = px + 'px';
+          img.style.height = px + 'px';
+          wrap.appendChild(img);
+          var cap = document.createElement('span');
+          cap.textContent = label;
+          wrap.appendChild(cap);
+          return { wrap: wrap, img: img };
+        }
+
+        function buildContainer() {
+          var c = document.createElement('div');
+          c.setAttribute('data-dsh-plugin', 'yanyan-icon');
+          c.setAttribute('data-dsh-part', 'icon-toolbar');
+          c.setAttribute(MARK, '');
+          c.className = 'yyic-root';
+          c.setAttribute('role', 'group');
+
+          var style = document.createElement('style');
+          style.setAttribute('data-yyic-style', '');
+          style.textContent = CSS;
+          c.appendChild(style);
+
+          mainBtn = document.createElement('button');
+          mainBtn.type = 'button';
+          mainBtn.className = 'yyic-main';
+          mainBtn.setAttribute('data-yyic-toggle', '');
+          mainBtn.setAttribute('aria-haspopup', 'true');
+          mainBtn.setAttribute('aria-expanded', 'false');
+          mainBtn.textContent = T.open;
+          c.appendChild(mainBtn);
+
+          panel = document.createElement('div');
+          panel.className = 'yyic-panel';
+          panel.setAttribute('role', 'region');
+          panel.setAttribute('aria-label', T.open);
+          panel.style.display = 'none';
+
+          var head = document.createElement('div');
+          head.className = 'yyic-head';
+          head.textContent = T.open;
+          panel.appendChild(head);
+
+          var hint = document.createElement('div');
+          hint.className = 'yyic-hint';
+          hint.textContent = T.chooseHint;
+          panel.appendChild(hint);
+
+          fileInput = document.createElement('input');
+          fileInput.type = 'file';
+          fileInput.accept = 'image/png,image/jpeg,image/webp';
+          fileInput.className = 'yyic-file';
+          fileInput.setAttribute('aria-label', T.open);
+          try { fileInput.addEventListener('change', onFileChange); } catch (e) {}
+          panel.appendChild(fileInput);
+
+          var previews = document.createElement('div');
+          previews.className = 'yyic-previews';
+          previewRow = makePreview(T.rowLabel, 30);
+          previewCard = makePreview(T.cardLabel, 36);
+          previews.appendChild(previewRow.wrap);
+          previews.appendChild(previewCard.wrap);
+          panel.appendChild(previews);
+
+          statusEl = document.createElement('div');
+          statusEl.className = 'yyic-status';
+          statusEl.textContent = T.empty;
+          panel.appendChild(statusEl);
+
+          var foot = document.createElement('div');
+          foot.className = 'yyic-foot';
+          downloadBtn = document.createElement('button');
+          downloadBtn.type = 'button';
+          downloadBtn.className = 'yyic-btn';
+          downloadBtn.setAttribute('data-yyic-download', '');
+          downloadBtn.textContent = T.download;
+          downloadBtn.disabled = true;
+          foot.appendChild(downloadBtn);
+          var resetBtn = document.createElement('button');
+          resetBtn.type = 'button';
+          resetBtn.className = 'yyic-ghost';
+          resetBtn.setAttribute('data-yyic-reset', '');
+          resetBtn.textContent = T.reset;
+          foot.appendChild(resetBtn);
+          var closeBtn = document.createElement('button');
+          closeBtn.type = 'button';
+          closeBtn.className = 'yyic-ghost';
+          closeBtn.setAttribute('data-yyic-close', '');
+          closeBtn.textContent = T.close;
+          foot.appendChild(closeBtn);
+          panel.appendChild(foot);
+
+          var usage = document.createElement('div');
+          usage.className = 'yyic-usage';
+          usage.textContent = T.usage;
+          panel.appendChild(usage);
+
+          try { c.addEventListener('click', onClick); } catch (e) {}
+          c.appendChild(panel);
+          return c;
+        }
+
+        function openPanel() {
+          if (!panel || !mainBtn) return;
+          panel.style.display = 'block';
+          mainBtn.setAttribute('aria-expanded', 'true');
+        }
+        function closePanel() {
+          if (!panel || !mainBtn) return;
+          panel.style.display = 'none';
+          mainBtn.setAttribute('aria-expanded', 'false');
+        }
+        function setStatus(text) {
+          if (statusEl) statusEl.textContent = text;
+        }
+        function setBusy(v) {
+          busy = v;
+          if (downloadBtn) downloadBtn.disabled = v || !generatedSvg;
+        }
+
+        // 居中裁切：把原图按 cover 规则裁成正方形，再缩到 CANVAS_SIZE。
+        function drawCover(img) {
+          var canvas = document.createElement('canvas');
+          canvas.width = CANVAS_SIZE;
+          canvas.height = CANVAS_SIZE;
+          var g = canvas.getContext('2d');
+          var sw = img.naturalWidth || img.width;
+          var sh = img.naturalHeight || img.height;
+          var side = Math.min(sw, sh);
+          var sx = (sw - side) / 2;
+          var sy = (sh - side) / 2;
+          g.clearRect(0, 0, CANVAS_SIZE, CANVAS_SIZE);
+          g.drawImage(img, sx, sy, side, side, 0, 0, CANVAS_SIZE, CANVAS_SIZE);
+          return canvas.toDataURL('image/png');
+        }
+
+        function post(pathname, body) {
+          return fetch(pathname, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body || {}),
+          }).then(function (resp) { return resp.json(); });
+        }
+
+        function onFileChange(e) {
+          var file = e.target && e.target.files && e.target.files[0];
+          if (!file) return;
+          if (!/^image\/(png|jpeg|webp)$/.test(file.type)) {
+            setStatus(T.badFile);
+            return;
+          }
+          setBusy(true);
+          setStatus(T.working);
+          var reader = new FileReader();
+          reader.onload = function () {
+            var image = new Image();
+            image.onload = function () {
+              var dataUrl;
+              try { dataUrl = drawCover(image); }
+              catch (err) { setBusy(false); setStatus(T.badImage); return; }
+              post(BASE + '/generate', { dataUrl: dataUrl }).then(function (data) {
+                if (!data || data.ok !== true || typeof data.svg !== 'string') {
+                  throw new Error((data && data.message) || 'invalid-response');
+                }
+                generatedSvg = data.svg;
+                var src = 'data:image/svg+xml;base64,' + btoa(generatedSvg);
+                if (previewRow) previewRow.img.src = src;
+                if (previewCard) previewCard.img.src = src;
+                setStatus(T.ok);
+              }).catch(function (err) {
+                setStatus((err && err.message) || T.fail);
+              }).then(function () { setBusy(false); });
+            };
+            image.onerror = function () { setBusy(false); setStatus(T.badImage); };
+            image.src = String(reader.result);
+          };
+          reader.onerror = function () { setBusy(false); setStatus(T.badImage); };
+          reader.readAsDataURL(file);
+        }
+
+        function doDownload() {
+          if (!generatedSvg) return;
+          try {
+            var blob = new Blob([generatedSvg], { type: 'image/svg+xml;charset=utf-8' });
+            if (objectUrl) URL.revokeObjectURL(objectUrl);
+            objectUrl = URL.createObjectURL(blob);
+            var a = document.createElement('a');
+            a.href = objectUrl;
+            a.download = 'icon.svg';
+            document.body.appendChild(a);
+            a.click();
+            document.body.removeChild(a);
+          } catch (e) {
+            setStatus(T.fail);
+          }
+        }
+
+        function onClick(e) {
+          var t = e.target;
+          var btn = t && t.closest ? t.closest('button') : null;
+          if (!btn) return;
+          if (btn.hasAttribute('data-yyic-toggle')) {
+            if (panel && panel.style.display === 'none') openPanel(); else closePanel();
+            return;
+          }
+          if (btn.hasAttribute('data-yyic-close')) { closePanel(); return; }
+          if (btn.hasAttribute('data-yyic-download')) { doDownload(); return; }
+          if (btn.hasAttribute('data-yyic-reset')) {
+            generatedSvg = null;
+            if (fileInput) fileInput.value = '';
+            if (previewRow) previewRow.img.removeAttribute('src');
+            if (previewCard) previewCard.img.removeAttribute('src');
+            if (downloadBtn) downloadBtn.disabled = true;
+            setStatus(T.empty);
+          }
+        }
+
+        function onKey(e) {
+          if (e.key === 'Escape' || e.keyCode === 27) closePanel();
+        }
+        function onOutside(e) {
+          if (!container || !container.contains(e.target)) closePanel();
+        }
+
+        // 座位消失则摘除容器，重新出现则重新 append；重复 apply 通过标记去重。
+        function ensureMounted() {
+          var s = seat();
+          if (!s) {
+            if (container && container.parentNode) {
+              try { container.parentNode.removeChild(container); } catch (e) {}
+            }
+            closePanel();
+            return;
+          }
+          if (!container) {
+            var stale = document.querySelector('[' + MARK + ']');
+            if (stale && stale.parentNode) {
+              try { stale.parentNode.removeChild(stale); } catch (e) {}
+            }
+            container = buildContainer();
+          }
+          if (container.parentNode !== s) {
+            try { s.appendChild(container); } catch (e) {}
+          }
+        }
+
+        function scheduleEnsure() {
+          if (ensureTimer !== null) return;
+          ensureTimer = setTimeout(function () {
+            ensureTimer = null;
+            ensureMounted();
+          }, 16);
+        }
+
+        // 所有 observer / 事件监听统一在这个 effect 内注册，并在清理函数里统一撤销。
+        ctx.effect(function () {
+          ensureMounted();
+          try {
+            observer = new MutationObserver(function () { scheduleEnsure(); });
+            observer.observe(document.body, { childList: true, subtree: true });
+          } catch (e) {
+            observer = null;
+          }
+          try { document.addEventListener('keydown', onKey); } catch (e) {}
+          try { document.addEventListener('click', onOutside, true); } catch (e) {}
+
+          return function () {
+            try { if (observer) observer.disconnect(); } catch (e) {}
+            observer = null;
+            if (ensureTimer !== null) {
+              try { clearTimeout(ensureTimer); } catch (e) {}
+              ensureTimer = null;
+            }
+            try { document.removeEventListener('keydown', onKey); } catch (e) {}
+            try { document.removeEventListener('click', onOutside, true); } catch (e) {}
+            if (objectUrl) { try { URL.revokeObjectURL(objectUrl); } catch (e) {} objectUrl = null; }
+            if (container) {
+              try { container.removeEventListener('click', onClick); } catch (e) {}
+              if (fileInput) { try { fileInput.removeEventListener('change', onFileChange); } catch (e) {} }
+              if (container.parentNode) {
+                try { container.parentNode.removeChild(container); } catch (e) {}
+              }
+            }
+            container = null;
+          };
+        }, 'yanyan-icon: toolbar');
+      }
+
+      exports.inject = inject;
+      exports.apply = apply;
+      return module.exports;
+    },
+  });
+})(typeof window !== 'undefined' ? window : typeof self !== 'undefined' ? self : null);

package/packages/dsh-plugin-yanyan-icon/lib/index.js

@@ -0,0 +1,237 @@
+// dsh-plugin-yanyan-icon — Host 半区。
+//
+// 职责：把浏览器半区预处理好的正方形 PNG / JPEG / WebP base64 图片，包装成
+// 适配 DSH 插件列表图标位（<img> 加载、行 30px / 卡片 36px 显示）的自包含静态 SVG。
+//
+// 形态照抄 dsh-plugin-yanyan-update/lib/index.js 的 respond / readBody / apply /
+// ctx.effect + ctx.webServer.register 骨架；准入一律走 ctx.connection.requestRejection。
+//
+// 约束：纯 JavaScript ESM，模块顶层不得访问 document / window / ctx；apply 只在被调用时
+// 才注册路由。buildIconSvg / normalizeOptions / validateDataUrl / parseGenerateRequest
+// 都是纯函数，无 DSH 依赖，单测可直接导入。
+
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+export const name = 'dsh-plugin-yanyan-icon';
+export const inject = ['webServer', 'connection'];
+export const ROUTE_BASE = '/__dsh-plugin-yanyan-icon';
+export const HEALTH_ROUTE = ROUTE_BASE + '/health';
+export const GENERATE_ROUTE = ROUTE_BASE + '/generate';
+
+const PKG_DIR = dirname(dirname(fileURLToPath(import.meta.url)));
+
+function readJsonSafe(file) {
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'));
+  } catch (error) {
+    return null;
+  }
+}
+
+// 版本一律从自身 package.json 动态读取，避免硬编码常量与包声明失同步。
+export const VERSION = String((readJsonSafe(join(PKG_DIR, 'package.json')) || {}).version || '0.0.0');
+
+const BODY_LIMIT = 2 * 1024 * 1024;
+// DSH 市场索引对内联 data: 图标的硬上限（dsh-plugin-market-index 的
+// MAX_INLINE_ICON_BYTES = 32 * 1024）。本地 icon.svg 不强制，但对齐该上限可保证
+// 生成物在任何装载路径下都不会被拒，且 30/36px 显示也不需要更大的文件。
+const MAX_OUTPUT_BYTES = 32 * 1024;
+
+const FORBIDDEN_BODY = {
+  ok: false,
+  error: 'forbidden',
+  message: '请求未通过 DSH 准入裁决。',
+};
+const METHOD_BODY = {
+  ok: false,
+  error: 'method-not-allowed',
+  message: '只接受 GET 或 POST 请求。',
+};
+
+// 只允许位图 base64 data URL；SVG / javascript: / 外链一律拒绝，避免把脚本或外部引用
+// 带进会被 <img> 渲染的图标里。正则与 dsh-plugin-market-index 的 DATA_ICON 同源。
+const DATA_ICON = /^data:(image\/png|image\/jpeg|image\/webp);base64,([A-Za-z0-9+/]*={0,2})$/u;
+
+export function validateDataUrl(value) {
+  return typeof value === 'string' && DATA_ICON.test(value);
+}
+
+// 颜色只接受 #rgb / #rrggbb，杜绝把引号或标签注入到 SVG 属性里。
+function safeColor(value, fallback) {
+  return typeof value === 'string' && /^#[0-9a-fA-F]{3}([0-9a-fA-F]{3})?$/.test(value)
+    ? value
+    : fallback;
+}
+
+function clampInt(value, min, max, fallback) {
+  const n = Number(value);
+  if (!Number.isFinite(n)) return fallback;
+  return Math.min(max, Math.max(min, Math.round(n)));
+}
+
+// 整段覆盖、不深合并：只认列出的键，逐个做类型与范围规范化。纯函数，可单测。
+export function normalizeOptions(raw) {
+  const c = raw && typeof raw === 'object' ? raw : {};
+  return {
+    background: safeColor(c.background, '#eef2ff'),
+    border: safeColor(c.border, '#c7d2fe'),
+    radius: clampInt(c.radius, 0, 28, 14),
+    padding: clampInt(c.padding, 0, 16, 4),
+    borderWidth: clampInt(c.borderWidth, 0, 4, 1),
+  };
+}
+
+// 核心纯函数：生成 64×64 viewBox、圆角矩形背景、居中内嵌位图的自包含静态 SVG。
+// 无 script、无 foreignObject、无外链、无 currentColor（<img> 上下文不继承页面色，
+// 所有颜色都给显式值），内嵌图片经 clipPath 裁成圆角，四周留出 padding 呼吸空间。
+// 只写 xlink:href 一个 href，避免同一份 base64 在文件里出现两次把体积翻倍。
+export function buildIconSvg(dataUrl, rawOptions) {
+  if (!validateDataUrl(dataUrl)) {
+    throw new Error('仅支持 PNG / JPEG / WebP 的 base64 图片数据。');
+  }
+  const o = normalizeOptions(rawOptions);
+  const outer = 6;
+  const frameSize = 52;
+  const inner = frameSize - o.padding * 2;
+  const ix = outer + o.padding;
+  const innerRadius = Math.max(0, o.radius - o.padding);
+  const svg = [
+    '<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 64 64" width="64" height="64" role="img" aria-label="plugin icon">',
+    '<defs><clipPath id="yyicon-clip"><rect x="' + ix + '" y="' + ix + '" width="' + inner + '" height="' + inner + '" rx="' + innerRadius + '"/></clipPath></defs>',
+    '<rect x="' + outer + '" y="' + outer + '" width="' + frameSize + '" height="' + frameSize + '" rx="' + o.radius + '" fill="' + o.background + '" stroke="' + o.border + '" stroke-width="' + o.borderWidth + '"/>',
+    '<image x="' + ix + '" y="' + ix + '" width="' + inner + '" height="' + inner + '" preserveAspectRatio="xMidYMid slice" clip-path="url(#yyicon-clip)" xlink:href="' + dataUrl + '"/>',
+    '</svg>',
+  ].join('\n');
+  const bytes = Buffer.byteLength(svg, 'utf8');
+  if (bytes > MAX_OUTPUT_BYTES) {
+    throw new Error('生成图标超过 32 KiB 上限，请换一张更小的图片。');
+  }
+  return svg;
+}
+
+// 从请求体字符串解析出生成参数；非法 JSON / 缺字段 / 非法图片统一抛可读错误。
+// 纯函数，单测可直接调用，不需要 DSH 运行时。
+export function parseGenerateRequest(rawBody) {
+  let body;
+  try {
+    body = JSON.parse(rawBody);
+  } catch (error) {
+    throw new Error('请求体不是合法 JSON。');
+  }
+  if (!body || typeof body !== 'object' || !validateDataUrl(body.dataUrl)) {
+    throw new Error('缺少合法的 dataUrl 图片数据。');
+  }
+  return { dataUrl: body.dataUrl, options: normalizeOptions(body.options) };
+}
+
+function respond(res, status, body) {
+  const payload = JSON.stringify(body);
+  res.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+    'content-length': Buffer.byteLength(payload),
+  });
+  res.end(payload);
+}
+
+function makeFence(ctx) {
+  return (req) => {
+    try {
+      return ctx.connection.requestRejection(req) === undefined;
+    } catch (error) {
+      return false;
+    }
+  };
+}
+
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on('data', (chunk) => {
+      const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+      size += buf.length;
+      if (size > BODY_LIMIT) {
+        reject(new Error('请求体超过 2 MiB 上限。'));
+        try { req.destroy(); } catch (error) {}
+        return;
+      }
+      chunks.push(buf);
+    });
+    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+    req.on('error', reject);
+  });
+}
+
+function makeHealthHandler(fence) {
+  return (req, res) => {
+    if (!fence(req)) {
+      respond(res, 403, FORBIDDEN_BODY);
+      return;
+    }
+    const method = String(req.method || 'GET').toUpperCase();
+    if (method !== 'GET' && method !== 'POST') {
+      respond(res, 405, METHOD_BODY);
+      return;
+    }
+    respond(res, 200, { ok: true, name, version: VERSION });
+  };
+}
+
+function makeGenerateHandler(fence) {
+  return (req, res) => {
+    if (!fence(req)) {
+      respond(res, 403, FORBIDDEN_BODY);
+      return;
+    }
+    const method = String(req.method || 'GET').toUpperCase();
+    if (method !== 'POST') {
+      respond(res, 405, METHOD_BODY);
+      return;
+    }
+    readBody(req).then((raw) => {
+      let parsed;
+      try {
+        parsed = parseGenerateRequest(raw);
+      } catch (error) {
+        respond(res, 400, { ok: false, error: 'invalid-image', message: String((error && error.message) || error) });
+        return;
+      }
+      try {
+        const svg = buildIconSvg(parsed.dataUrl, parsed.options);
+        respond(res, 200, {
+          ok: true,
+          svg,
+          size: Buffer.byteLength(svg, 'utf8'),
+          hint: '把下载的 icon.svg 放到插件包根目录，并在 package.json 声明 icon 与 exports["./icon"]。',
+        });
+      } catch (error) {
+        respond(res, 400, { ok: false, error: 'invalid-image', message: String((error && error.message) || error) });
+      }
+    }).catch((error) => {
+      respond(res, 400, { ok: false, error: 'bad-request', message: String((error && error.message) || error) });
+    });
+  };
+}
+
+// register 的返回值直接作为 effect 的清理函数，禁用 / HMR 时路由自动撤销。
+export function apply(ctx) {
+  const fence = makeFence(ctx);
+  const routes = [
+    { path: HEALTH_ROUTE, handler: makeHealthHandler(fence) },
+    { path: GENERATE_ROUTE, handler: makeGenerateHandler(fence) },
+  ];
+  for (const route of routes) {
+    ctx.effect(
+      () => ctx.webServer.register({ kind: 'exact', path: route.path, handler: route.handler }),
+      'dsh-plugin-yanyan-icon: route ' + route.path,
+    );
+  }
+  try {
+    ctx.logger?.info?.('[dsh-plugin-yanyan-icon] host routes ready');
+  } catch (error) {
+    // 日志服务不可用时不影响路由注册
+  }
+}

package/packages/dsh-plugin-yanyan-icon/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Icon Generator",
+    "description": "Center-crop an uploaded image and generate an icon.svg fitted for the plugin list artwork slot"
+  }
+}

package/packages/dsh-plugin-yanyan-icon/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "图标生成",
+    "description": "根据上传的图片居中裁切并生成适配插件列表图标位的 icon.svg"
+  }
+}

package/packages/dsh-plugin-yanyan-icon/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "dsh-plugin-yanyan-icon",
+  "version": "1.0.0",
+  "description": "图标生成：根据上传的图片生成适配插件列表图标位的 icon.svg",
+  "type": "module",
+  "main": "lib/index.js",
+  "icon": "icon.svg",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg"
+  },
+  "files": ["lib/index.js","lib/client.js","cordis.patch.yml","icon.svg","locale/en.json","locale/zh.json","README.md","README.zh.md"],
+  "keywords": ["deepseek-harness","dsh-plugin","plugin-manager","icon","svg","cordis"],
+  "author": "sweet560",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sweet560/dsh-plugin-yanyan-toolkit.git",
+    "directory": "packages/dsh-plugin-yanyan-icon"
+  },
+  "engines": { "node": "^22.19.0 || >=24.0.0" },
+  "scripts": { "test": "node --test test/*.test.mjs" },
+  "dsh": {
+    "engines": { "dsh": ">=0.2.2-rc.2" },
+    "bundle": { "patch": "./cordis.patch.yml" },
+    "client": { "inject": [], "platform": "web" },
+    "manifestVersion": 1
+  }
+}