@dan-ai-studio/dshopencodego 0.1.22 → 0.1.24

package/lib/client.js

@@ -152,6 +152,44 @@ var catalogRemote = {
   ]
 };
 
+// src/update/contract.ts
+function parseUpdateStatus(value) {
+  if (value === null || typeof value !== "object") throw new Error("invalid update reading");
+  const row = value;
+  if (typeof row["current"] !== "string") throw new Error("invalid update reading");
+  if (row["latest"] !== void 0 && typeof row["latest"] !== "string") throw new Error("invalid update reading");
+  if (typeof row["available"] !== "boolean") throw new Error("invalid update reading");
+  if (typeof row["checkedAt"] !== "number" || !Number.isFinite(row["checkedAt"])) {
+    throw new Error("invalid update reading");
+  }
+  return {
+    current: row["current"],
+    latest: typeof row["latest"] === "string" ? row["latest"] : void 0,
+    available: row["available"],
+    checkedAt: row["checkedAt"]
+  };
+}
+var codec2 = (typeSymbol, parse) => ({
+  mode: "strict",
+  typeSymbol,
+  schema: { parse },
+  create: () => ({ parse })
+});
+var updateRemote = {
+  package: "@dan-ai-studio/dshopencodego",
+  descriptors: [
+    {
+      id: "@dan-ai-studio/dshopencodego#opencodeGoUpdate/readUpdate",
+      service: "opencodeGoUpdate",
+      namespace: "opencodeGoUpdate",
+      method: "readUpdate",
+      invocation: { kind: "direct" },
+      parameters: [],
+      result: codec2("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
+    }
+  ]
+};
+
 // src/usage/contract.ts
 function parseWindow(value, key) {
   if (value === null || typeof value !== "object") throw new Error(`invalid usage window "${key}"`);
@@ -206,7 +244,7 @@ function parseGoMeter(value) {
     })
   };
 }
-var codec2 = (typeSymbol, parse) => ({
+var codec3 = (typeSymbol, parse) => ({
   mode: "strict",
   typeSymbol,
   schema: { parse },
@@ -222,7 +260,7 @@ var usageRemote = {
       method: "readWindows",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
+      result: codec3("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
     },
     {
       id: "@dan-ai-studio/dshopencodego#opencodeGoUsage/readMeter",
@@ -231,7 +269,7 @@ var usageRemote = {
       method: "readMeter",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
+      result: codec3("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
     }
   ]
 };
@@ -302,7 +340,25 @@ var en = {
   usageTokensUnit: "tokens",
   usageCached: "cached read",
   usageLocalHint: "The gateway publishes quota percentages only; token counts are what this process actually spent.",
-  usageLoading: "Loading\u2026"
+  usageLoading: "Loading\u2026",
+  updateTitle: "Plugin update",
+  updateChecking: "Checking for updates\u2026",
+  updateLatest: "Up to date:",
+  updateAvailable: "New version available:",
+  updateCurrent: "current",
+  updateNow: "Update now",
+  updateNotes: "Release notes",
+  updateRecheck: "Check again",
+  updateConfirmHint: "This removes the running version first, then installs",
+  updateConfirm: "Confirm update",
+  updateCancel: "Cancel",
+  updateApplying: "Updating\u2026 (removing the old version, then installing the new one)",
+  updateDone: "Updated to",
+  updateRestart: "Restart DSH to finish applying the update.",
+  updateFailed: "Update failed:",
+  updateStopProfile: "The running version cannot be removed without a restart; restart DSH first, then retry.",
+  updateIncompatible: "The new version is incompatible with this DSH build; finish the update from the plugin manager page (a version exemption needs your explicit approval).",
+  updatePendingBuilds: "Installation needs build-script approval; approve it on the plugin manager page, then retry."
 };
 var zh = {
   nav: "OpenCode Go",
@@ -369,12 +425,35 @@ var zh = {
   usageTokensUnit: "tokens",
   usageCached: "\u7F13\u5B58\u8BFB\u53D6",
   usageLocalHint: "\u7F51\u5173\u53EA\u516C\u5E03\u989D\u5EA6\u767E\u5206\u6BD4\uFF1Btoken \u6570\u4E3A\u672C\u8FDB\u7A0B\u5B9E\u9645\u6D88\u8017\u3002",
-  usageLoading: "\u52A0\u8F7D\u4E2D\u2026"
+  usageLoading: "\u52A0\u8F7D\u4E2D\u2026",
+  updateTitle: "\u63D2\u4EF6\u66F4\u65B0",
+  updateChecking: "\u6B63\u5728\u68C0\u67E5\u66F4\u65B0\u2026",
+  updateLatest: "\u5DF2\u662F\u6700\u65B0\u7248\u672C\uFF1A",
+  updateAvailable: "\u53D1\u73B0\u65B0\u7248\u672C\uFF1A",
+  updateCurrent: "\u5F53\u524D",
+  updateNow: "\u7ACB\u5373\u66F4\u65B0",
+  updateNotes: "\u66F4\u65B0\u8BF4\u660E",
+  updateRecheck: "\u91CD\u65B0\u68C0\u67E5",
+  updateConfirmHint: "\u5C06\u5148\u5378\u8F7D\u5F53\u524D\u8FD0\u884C\u7248\u672C\uFF0C\u518D\u5B89\u88C5",
+  updateConfirm: "\u786E\u8BA4\u66F4\u65B0",
+  updateCancel: "\u53D6\u6D88",
+  updateApplying: "\u66F4\u65B0\u4E2D\u2026\uFF08\u5148\u5378\u8F7D\u65E7\u7248\uFF0C\u518D\u5B89\u88C5\u65B0\u7248\uFF09",
+  updateDone: "\u5DF2\u66F4\u65B0\u5230",
+  updateRestart: "\u8BF7\u91CD\u542F DSH \u4EE5\u5B8C\u6210\u66F4\u65B0\u3002",
+  updateFailed: "\u66F4\u65B0\u5931\u8D25\uFF1A",
+  updateStopProfile: "\u8FD0\u884C\u4E2D\u7684\u7248\u672C\u9700\u91CD\u542F\u540E\u624D\u80FD\u79FB\u9664\uFF1B\u8BF7\u5148\u91CD\u542F DSH \u518D\u91CD\u8BD5\u3002",
+  updateIncompatible: "\u65B0\u7248\u672C\u4E0E\u5F53\u524D DSH \u4E0D\u517C\u5BB9\uFF0C\u8BF7\u524D\u5F80\u63D2\u4EF6\u7BA1\u7406\u9875\u5B8C\u6210\u66F4\u65B0\uFF08\u7248\u672C\u8C41\u514D\u9700\u660E\u786E\u6279\u51C6\uFF09\u3002",
+  updatePendingBuilds: "\u5B89\u88C5\u9700\u8981\u6279\u51C6\u6784\u5EFA\u811A\u672C\uFF1B\u8BF7\u524D\u5F80\u63D2\u4EF6\u7BA1\u7406\u9875\u6279\u51C6\u540E\u518D\u91CD\u8BD5\u3002"
 };
 
 // src/client/Section.tsx
 var import_react = require("react");
 
+// src/update/check.ts
+var PACKAGE_NAME = "@dan-ai-studio/dshopencodego";
+var REGISTRY_LATEST_URL = `https://registry.npmjs.org/${encodeURIComponent(PACKAGE_NAME)}/latest`;
+var CHECK_CACHE_MS = 6 * 60 * 60 * 1e3;
+
 // src/go-limits.ts
 var SEED_TRANSCRIBED = "2026-09-25";
 function monthlyRequestsRank(quota) {
@@ -453,16 +532,16 @@ function inputModalityLabels(model, t) {
   return (model.inputModalities ?? []).map((modality) => t(MODALITY_KEYS[modality]));
 }
 
-// plugin-css:D:\prj\dshopencodego\src\client\section.module.css
+// plugin-css:/home/runner/work/dshopencodego/dshopencodego/src/client/section.module.css
 var id = "@dan-ai-studio/dshopencodego/section.module.css";
 if (!document.querySelector("style[data-plugin-css=" + JSON.stringify(id) + "]")) {
   const style = document.createElement("style");
   style.dataset.plugin = "@dan-ai-studio/dshopencodego";
   style.dataset.pluginCss = id;
-  style.textContent = "._6tq0da_root{color:var(--dsw-alias-label-primary);flex-direction:column;gap:1.25rem;display:flex}._6tq0da_title{margin:0;font-size:1.05rem}._6tq0da_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:.8rem}._6tq0da_warn{color:var(--dsw-alias-state-warn-primary);margin:0;font-size:.8rem}._6tq0da_ok{color:var(--dsw-alias-state-success-primary);font-size:.8rem}._6tq0da_block{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-1);border-radius:.6rem;flex-direction:column;gap:.5rem;padding:.85rem;display:flex}._6tq0da_row{flex-wrap:wrap;align-items:center;gap:.5rem;display:flex}._6tq0da_row>strong{margin-right:auto}._6tq0da_input{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-base);min-width:10rem;color:var(--dsw-alias-label-primary);font:inherit;border-radius:.35rem;flex:14rem;padding:.35rem .5rem;font-size:.85rem}._6tq0da_button{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;border-radius:.35rem;padding:.35rem .7rem;font-size:.8rem}._6tq0da_button:disabled{color:var(--dsw-alias-state-idle-primary);cursor:default}._6tq0da_number{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-base);width:5rem;color:var(--dsw-alias-label-primary);font:inherit;border-radius:.35rem;padding:.25rem .4rem;font-size:.8rem}._6tq0da_select{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-base);width:auto;max-width:100%;color:var(--dsw-alias-label-primary);font:inherit;border-radius:.35rem;padding:.25rem .4rem;font-size:.8rem}._6tq0da_list{flex-direction:column;display:flex}._6tq0da_item{border-top:1px solid var(--dsw-alias-border-l1);align-items:flex-start;gap:.5rem;padding:.45rem .15rem;display:flex}._6tq0da_item input[type=checkbox]{accent-color:var(--dsw-alias-brand-primary);margin-top:.15rem}._6tq0da_itemBody{flex-direction:column;gap:.15rem;min-width:0;display:flex}._6tq0da_itemMain{flex-wrap:wrap;align-items:baseline;gap:.6rem;display:flex}._6tq0da_itemMeta{color:var(--dsw-alias-label-secondary);flex-wrap:wrap;gap:.75rem;font-size:.75rem;display:flex}._6tq0da_itemModalities{color:var(--dsw-alias-label-secondary);font-size:.75rem}._6tq0da_name{color:var(--dsw-alias-label-primary)}._6tq0da_mono{color:var(--dsw-alias-label-secondary);font-family:ui-monospace,SFMono-Regular,Menlo,monospace}._6tq0da_badge{color:var(--dsw-alias-brand-primary)}";
+  style.textContent = ".d7lz0W_root{color:var(--dsw-alias-label-primary);flex-direction:column;gap:1.25rem;display:flex}.d7lz0W_title{margin:0;font-size:1.05rem}.d7lz0W_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:.8rem}.d7lz0W_warn{color:var(--dsw-alias-state-warn-primary);margin:0;font-size:.8rem}.d7lz0W_ok{color:var(--dsw-alias-state-success-primary);font-size:.8rem}.d7lz0W_block{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-1);border-radius:.6rem;flex-direction:column;gap:.5rem;padding:.85rem;display:flex}.d7lz0W_row{flex-wrap:wrap;align-items:center;gap:.5rem;display:flex}.d7lz0W_row>strong{margin-right:auto}.d7lz0W_input{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-base);min-width:10rem;color:var(--dsw-alias-label-primary);font:inherit;border-radius:.35rem;flex:14rem;padding:.35rem .5rem;font-size:.85rem}.d7lz0W_button{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;border-radius:.35rem;padding:.35rem .7rem;font-size:.8rem}.d7lz0W_button:disabled{color:var(--dsw-alias-state-idle-primary);cursor:default}.d7lz0W_number{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-base);width:5rem;color:var(--dsw-alias-label-primary);font:inherit;border-radius:.35rem;padding:.25rem .4rem;font-size:.8rem}.d7lz0W_select{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-base);width:auto;max-width:100%;color:var(--dsw-alias-label-primary);font:inherit;border-radius:.35rem;padding:.25rem .4rem;font-size:.8rem}.d7lz0W_list{flex-direction:column;display:flex}.d7lz0W_item{border-top:1px solid var(--dsw-alias-border-l1);align-items:flex-start;gap:.5rem;padding:.45rem .15rem;display:flex}.d7lz0W_item input[type=checkbox]{accent-color:var(--dsw-alias-brand-primary);margin-top:.15rem}.d7lz0W_itemBody{flex-direction:column;gap:.15rem;min-width:0;display:flex}.d7lz0W_itemMain{flex-wrap:wrap;align-items:baseline;gap:.6rem;display:flex}.d7lz0W_itemMeta{color:var(--dsw-alias-label-secondary);flex-wrap:wrap;gap:.75rem;font-size:.75rem;display:flex}.d7lz0W_itemModalities{color:var(--dsw-alias-label-secondary);font-size:.75rem}.d7lz0W_name{color:var(--dsw-alias-label-primary)}.d7lz0W_mono{color:var(--dsw-alias-label-secondary);font-family:ui-monospace,SFMono-Regular,Menlo,monospace}.d7lz0W_badge{color:var(--dsw-alias-brand-primary)}";
   document.head.appendChild(style);
 }
-var section_default = { "item": "_6tq0da_item", "root": "_6tq0da_root", "input": "_6tq0da_input", "row": "_6tq0da_row", "itemMain": "_6tq0da_itemMain", "warn": "_6tq0da_warn", "badge": "_6tq0da_badge", "title": "_6tq0da_title", "block": "_6tq0da_block", "itemModalities": "_6tq0da_itemModalities", "mono": "_6tq0da_mono", "button": "_6tq0da_button", "hint": "_6tq0da_hint", "select": "_6tq0da_select", "name": "_6tq0da_name", "itemMeta": "_6tq0da_itemMeta", "list": "_6tq0da_list", "ok": "_6tq0da_ok", "itemBody": "_6tq0da_itemBody", "number": "_6tq0da_number" };
+var section_default = { "row": "d7lz0W_row", "itemModalities": "d7lz0W_itemModalities", "number": "d7lz0W_number", "hint": "d7lz0W_hint", "block": "d7lz0W_block", "button": "d7lz0W_button", "list": "d7lz0W_list", "select": "d7lz0W_select", "itemMeta": "d7lz0W_itemMeta", "badge": "d7lz0W_badge", "root": "d7lz0W_root", "title": "d7lz0W_title", "warn": "d7lz0W_warn", "ok": "d7lz0W_ok", "input": "d7lz0W_input", "item": "d7lz0W_item", "itemMain": "d7lz0W_itemMain", "itemBody": "d7lz0W_itemBody", "mono": "d7lz0W_mono", "name": "d7lz0W_name" };
 
 // src/client/Section.tsx
 var import_jsx_runtime = require("react/jsx-runtime");
@@ -478,7 +557,8 @@ var INITIAL = {
   settings: void 0,
   writable: false,
   saving: false,
-  filter: INITIAL_FILTER
+  filter: INITIAL_FILTER,
+  update: { phase: "idle", status: void 0, message: void 0 }
 };
 function settingsOf(value) {
   if (value === null || typeof value !== "object") return void 0;
@@ -492,7 +572,7 @@ function settingsOf(value) {
     refreshMinutes: minutes
   };
 }
-var SectionController = class {
+var SectionController = class _SectionController {
   state = INITIAL;
   listeners = /* @__PURE__ */ new Set();
   services;
@@ -514,6 +594,7 @@ var SectionController = class {
     }
     void this.load(false);
     void this.loadKey();
+    void this.checkUpdate(false);
   }
   subscribe = (listener) => {
     this.listeners.add(listener);
@@ -556,6 +637,117 @@ var SectionController = class {
       this.set({ keyConfigured: void 0 });
     }
   }
+  /**
+   * Ask the Host whether a newer release is published.
+   *
+   * The Host answers from a cached registry reading and fails silent, so an
+   * unreachable registry hides the panel instead of erroring the page. Runs
+   * once with the page and again only on explicit refresh.
+   */
+  async checkUpdate(force) {
+    const previous = this.state.update;
+    this.set({ update: { ...previous, phase: "checking", message: void 0 } });
+    try {
+      const result = await this.services.remote.opencodeGoUpdate.readUpdate(force);
+      if (!result.ok) throw result.error;
+      const status = result.value;
+      this.set({
+        update: {
+          phase: status.available && status.latest !== void 0 ? "ready" : "current",
+          status,
+          message: void 0
+        }
+      });
+    } catch (error) {
+      this.set({
+        update: {
+          ...previous,
+          phase: previous.phase === "checking" ? "idle" : previous.phase,
+          message: error instanceof Error ? error.message : void 0
+        }
+      });
+    }
+  }
+  /** Arm the confirm step; the destructive two-step runs only from `applyUpdate`. */
+  armUpdate() {
+    if (this.state.update.phase === "ready") {
+      this.set({ update: { ...this.state.update, phase: "confirming" } });
+    }
+  }
+  /** Stand down from the confirm step without doing anything. */
+  disarmUpdate() {
+    if (this.state.update.phase === "confirming") {
+      this.set({ update: { ...this.state.update, phase: "ready" } });
+    }
+  }
+  /** Read one field off an unknown host answer without guessing its shape. */
+  static field(value, key) {
+    return value !== null && typeof value === "object" ? value[key] : void 0;
+  }
+  /**
+   * One-click update: inspect, then the host's own remove + install.
+   *
+   * This mirrors the official plugin-update button exactly — the plugin never
+   * touches its own files. `removeBundle` stops the running build first, so
+   * the install call that follows is issued by this page (which survives),
+   * not by the Host code being removed. Outcomes that need a human —
+   * incompatibility (never auto-exempted), pending build approvals, a removal
+   * that needs a restart first — surface as guidance, never as silent retries.
+   */
+  async applyUpdate() {
+    const status = this.state.update.status;
+    const latest = status?.latest;
+    if (this.state.update.phase !== "confirming" || latest === void 0) return;
+    const manager = this.services.remote.pluginManager;
+    const spec = `${PACKAGE_NAME}@${latest}`;
+    this.set({ update: { phase: "updating", status, message: void 0 } });
+    const fail = (message) => {
+      this.set({ update: { phase: "failed", status, message } });
+    };
+    try {
+      const inspected = await manager.inspect(spec);
+      if (_SectionController.field(inspected, "bundle") === false) {
+        fail(`the registry target is not a DSH bundle: ${spec}`);
+        return;
+      }
+    } catch (error) {
+      fail(error instanceof Error ? error.message : `could not inspect ${spec}`);
+      return;
+    }
+    try {
+      const removed = await manager.removeBundle(PACKAGE_NAME);
+      if (!removed.ok) throw removed.error;
+      const stopCode = _SectionController.field(removed.value, "error");
+      const code = typeof stopCode === "object" && stopCode !== null ? _SectionController.field(stopCode, "code") : void 0;
+      if (code === "stop-profile") {
+        fail("stop-profile");
+        return;
+      }
+    } catch (error) {
+      fail(error instanceof Error ? error.message : `could not remove ${PACKAGE_NAME}`);
+      return;
+    }
+    try {
+      const installed = await manager.installBundle(spec, { saveExact: true });
+      if (!installed.ok) throw installed.error;
+      const value = installed.value ?? {};
+      if (value.error?.code === "incompatible-version") {
+        fail("incompatible-version");
+        return;
+      }
+      if (value.pendingBuilds !== void 0) {
+        fail("pending-builds");
+        return;
+      }
+      if (value.application === "restart-required") {
+        this.set({ update: { phase: "done", status, message: "restart-required" } });
+        return;
+      }
+      this.set({ update: { phase: "done", status, message: void 0 } });
+    } catch (error) {
+      fail(error instanceof Error ? error.message : `could not install ${spec}`);
+    }
+  }
   async saveKey(value) {
     const trimmed = value.trim();
     if (trimmed.length === 0) return;
@@ -697,6 +889,121 @@ function quotaLabel(model, t) {
   const requests = quota.monthlyRequests === "unlimited" ? t("quotaUnlimited") : `${compactCount(quota.monthlyRequests)} ${t("quotaPerMonth")}`;
   return `${usd} \xB7 ${requests}`;
 }
+function UpdateBanner({ controller, t, busy, act, update }) {
+  if (update.phase === "idle") return null;
+  const status = update.status;
+  const notes = `https://www.npmjs.com/package/${encodeURIComponent(PACKAGE_NAME)}`;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: section_default.block, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("updateTitle") }),
+    update.phase === "checking" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: t("updateChecking") }),
+    update.phase === "current" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("updateLatest")} ${status?.current ?? ""}`.trim() }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          type: "button",
+          className: section_default.button,
+          disabled: busy,
+          onClick: () => {
+            void act(async () => {
+              await controller.checkUpdate(true);
+            });
+          },
+          children: t("updateRecheck")
+        }
+      )
+    ] }),
+    update.phase === "ready" && status?.latest !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("updateAvailable")} ${status.latest} (${t("updateCurrent")} ${status.current})` }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          type: "button",
+          className: section_default.button,
+          disabled: busy,
+          onClick: () => {
+            controller.armUpdate();
+          },
+          children: t("updateNow")
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("a", { className: section_default.hint, href: notes, target: "_blank", rel: "noreferrer", children: t("updateNotes") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          type: "button",
+          className: section_default.button,
+          disabled: busy,
+          onClick: () => {
+            void act(async () => {
+              await controller.checkUpdate(true);
+            });
+          },
+          children: t("updateRecheck")
+        }
+      )
+    ] }),
+    update.phase === "confirming" && status?.latest !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: `${t("updateConfirmHint")} ${status.latest}` }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          type: "button",
+          className: section_default.button,
+          disabled: busy,
+          onClick: () => {
+            void act(async () => {
+              await controller.applyUpdate();
+            });
+          },
+          children: t("updateConfirm")
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          type: "button",
+          className: section_default.button,
+          disabled: busy,
+          onClick: () => {
+            controller.disarmUpdate();
+          },
+          children: t("updateCancel")
+        }
+      )
+    ] }),
+    update.phase === "updating" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: t("updateApplying") }),
+    update.phase === "done" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.ok, children: `${t("updateDone")} ${status?.latest ?? ""}`.trim() }),
+      update.message === "restart-required" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.warn, children: t("updateRestart") })
+    ] }),
+    update.phase === "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.warn, children: t("updateFailed") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: section_default.hint, children: updateFailureText(update.message, t) }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          type: "button",
+          className: section_default.button,
+          disabled: busy,
+          onClick: () => {
+            void act(async () => {
+              await controller.checkUpdate(true);
+            });
+          },
+          children: t("updateRecheck")
+        }
+      )
+    ] })
+  ] }) });
+}
+function updateFailureText(message, t) {
+  if (message === void 0 || message.length === 0) return "";
+  if (message === "stop-profile") return t("updateStopProfile");
+  if (message === "incompatible-version") return t("updateIncompatible");
+  if (message === "pending-builds") return t("updatePendingBuilds");
+  return message;
+}
 function Section({ controller, t, getLocale }) {
   const state = (0, import_react.useSyncExternalStore)(controller.subscribe, controller.snapshot, controller.snapshot);
   const [keyDraft, setKeyDraft] = (0, import_react.useState)("");
@@ -720,6 +1027,7 @@ function Section({ controller, t, getLocale }) {
   return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", { className: section_default.root, children: [
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { className: section_default.title, children: t("nav") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: section_default.hint, children: t("intro") }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(UpdateBanner, { controller, t, busy, act, update: state.update }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.block, children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: section_default.row, children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("keyTitle") }),
@@ -954,16 +1262,16 @@ function Section({ controller, t, getLocale }) {
 // src/client/UsagePill.tsx
 var import_react2 = require("react");
 
-// plugin-css:D:\prj\dshopencodego\src\client\pill.module.css
+// plugin-css:/home/runner/work/dshopencodego/dshopencodego/src/client/pill.module.css
 var id2 = "@dan-ai-studio/dshopencodego/pill.module.css";
 if (!document.querySelector("style[data-plugin-css=" + JSON.stringify(id2) + "]")) {
   const style = document.createElement("style");
   style.dataset.plugin = "@dan-ai-studio/dshopencodego";
   style.dataset.pluginCss = id2;
-  style.textContent = ".y-bZgq_root{align-items:center;display:inline-flex;position:relative}.y-bZgq_trigger{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-secondary);font:inherit;cursor:pointer;white-space:nowrap;border-radius:999px;padding:.35rem .6rem;font-size:.8rem;line-height:1}.y-bZgq_trigger:hover{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-border-l2)}.y-bZgq_panel{z-index:20;border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-overlay);width:18rem;color:var(--dsw-alias-label-primary);border-radius:.6rem;flex-direction:column;gap:.6rem;padding:.75rem .85rem;display:flex;position:absolute;bottom:calc(100% + .5rem);right:0;box-shadow:0 8px 24px #0000002e}.y-bZgq_window{flex-direction:column;gap:.25rem;display:flex}.y-bZgq_row{justify-content:space-between;gap:.5rem;font-size:.85rem;display:flex}.y-bZgq_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:.75rem}.y-bZgq_progress{width:100%;height:.35rem;accent-color:var(--dsw-alias-brand-primary)}.y-bZgq_limited{color:var(--dsw-alias-state-warn-primary);font-size:.75rem}.y-bZgq_warning{border:1px solid var(--dsw-alias-state-warn-primary);color:var(--dsw-alias-label-primary);border-radius:.4rem;padding:.4rem .5rem;font-size:.75rem}.y-bZgq_retry{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;border-radius:.35rem;align-self:flex-start;padding:.25rem .5rem;font-size:.75rem}.y-bZgq_local{border-top:1px solid var(--dsw-alias-border-l1);flex-direction:column;gap:.2rem;padding-top:.5rem;display:flex}";
+  style.textContent = ".mMNkkW_root{align-items:center;display:inline-flex;position:relative}.mMNkkW_trigger{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-secondary);font:inherit;cursor:pointer;white-space:nowrap;border-radius:999px;padding:.35rem .6rem;font-size:.8rem;line-height:1}.mMNkkW_trigger:hover{color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-border-l2)}.mMNkkW_panel{z-index:20;border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-overlay);width:18rem;color:var(--dsw-alias-label-primary);border-radius:.6rem;flex-direction:column;gap:.6rem;padding:.75rem .85rem;display:flex;position:absolute;bottom:calc(100% + .5rem);right:0;box-shadow:0 8px 24px #0000002e}.mMNkkW_window{flex-direction:column;gap:.25rem;display:flex}.mMNkkW_row{justify-content:space-between;gap:.5rem;font-size:.85rem;display:flex}.mMNkkW_hint{color:var(--dsw-alias-label-secondary);margin:0;font-size:.75rem}.mMNkkW_progress{width:100%;height:.35rem;accent-color:var(--dsw-alias-brand-primary)}.mMNkkW_limited{color:var(--dsw-alias-state-warn-primary);font-size:.75rem}.mMNkkW_warning{border:1px solid var(--dsw-alias-state-warn-primary);color:var(--dsw-alias-label-primary);border-radius:.4rem;padding:.4rem .5rem;font-size:.75rem}.mMNkkW_retry{border:1px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;border-radius:.35rem;align-self:flex-start;padding:.25rem .5rem;font-size:.75rem}.mMNkkW_local{border-top:1px solid var(--dsw-alias-border-l1);flex-direction:column;gap:.2rem;padding-top:.5rem;display:flex}";
   document.head.appendChild(style);
 }
-var pill_default = { "hint": "y-bZgq_hint", "panel": "y-bZgq_panel", "warning": "y-bZgq_warning", "local": "y-bZgq_local", "progress": "y-bZgq_progress", "limited": "y-bZgq_limited", "retry": "y-bZgq_retry", "root": "y-bZgq_root", "trigger": "y-bZgq_trigger", "window": "y-bZgq_window", "row": "y-bZgq_row" };
+var pill_default = { "retry": "mMNkkW_retry", "root": "mMNkkW_root", "panel": "mMNkkW_panel", "limited": "mMNkkW_limited", "trigger": "mMNkkW_trigger", "row": "mMNkkW_row", "window": "mMNkkW_window", "hint": "mMNkkW_hint", "progress": "mMNkkW_progress", "warning": "mMNkkW_warning", "local": "mMNkkW_local" };
 
 // src/client/UsagePill.tsx
 var import_jsx_runtime2 = require("react/jsx-runtime");
@@ -1121,7 +1429,7 @@ function apply(ctx) {
   ctx.effect(() => ctx.locale.register(NS, { zh, en }), "dshopencodego: copy dictionaries");
   const mounted = ctx.remote.$mount({
     package: usageRemote.package,
-    descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors]
+    descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors, ...updateRemote.descriptors]
   });
   ctx.effect(() => {
     let dispose;

package/lib/index.js

@@ -1178,6 +1178,7 @@ var ACCOUNT_QUOTA_CODE = "ACCOUNT_QUOTA";
 function classifyPiAiError(message) {
   if (/\b(?:401|403)\b/.test(message)) return "AUTH";
   if (isQuotaExceededError(message)) return ACCOUNT_QUOTA_CODE;
+  if (/server_error/i.test(message)) return "SERVER";
   if (/\b429\b|rate.?limit/i.test(message)) return "RATE_LIMIT";
   if (/\b413\b|payload too large|request body too large|length limit exceeded/i.test(message)) return "INVALID_REQUEST";
   if (/\b400\b|invalid.?request/i.test(message)) return "INVALID_REQUEST";
@@ -1766,6 +1767,44 @@ var catalogRemote = {
   ]
 };
 
+// src/update/contract.ts
+function parseUpdateStatus(value) {
+  if (value === null || typeof value !== "object") throw new Error("invalid update reading");
+  const row = value;
+  if (typeof row["current"] !== "string") throw new Error("invalid update reading");
+  if (row["latest"] !== void 0 && typeof row["latest"] !== "string") throw new Error("invalid update reading");
+  if (typeof row["available"] !== "boolean") throw new Error("invalid update reading");
+  if (typeof row["checkedAt"] !== "number" || !Number.isFinite(row["checkedAt"])) {
+    throw new Error("invalid update reading");
+  }
+  return {
+    current: row["current"],
+    latest: typeof row["latest"] === "string" ? row["latest"] : void 0,
+    available: row["available"],
+    checkedAt: row["checkedAt"]
+  };
+}
+var codec2 = (typeSymbol, parse) => ({
+  mode: "strict",
+  typeSymbol,
+  schema: { parse },
+  create: () => ({ parse })
+});
+var updateRemote = {
+  package: "@dan-ai-studio/dshopencodego",
+  descriptors: [
+    {
+      id: "@dan-ai-studio/dshopencodego#opencodeGoUpdate/readUpdate",
+      service: "opencodeGoUpdate",
+      namespace: "opencodeGoUpdate",
+      method: "readUpdate",
+      invocation: { kind: "direct" },
+      parameters: [],
+      result: codec2("@dan-ai-studio/dshopencodego#UpdateStatus", parseUpdateStatus)
+    }
+  ]
+};
+
 // src/usage/contract.ts
 function parseWindow(value, key) {
   if (value === null || typeof value !== "object") throw new Error(`invalid usage window "${key}"`);
@@ -1820,7 +1859,7 @@ function parseGoMeter(value) {
     })
   };
 }
-var codec2 = (typeSymbol, parse) => ({
+var codec3 = (typeSymbol, parse) => ({
   mode: "strict",
   typeSymbol,
   schema: { parse },
@@ -1836,7 +1875,7 @@ var usageRemote = {
       method: "readWindows",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
+      result: codec3("@dan-ai-studio/dshopencodego#GoUsageWindows", parseUsageWindows)
     },
     {
       id: "@dan-ai-studio/dshopencodego#opencodeGoUsage/readMeter",
@@ -1845,7 +1884,7 @@ var usageRemote = {
       method: "readMeter",
       invocation: { kind: "direct" },
       parameters: [],
-      result: codec2("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
+      result: codec3("@dan-ai-studio/dshopencodego#GoMeter", parseGoMeter)
     }
   ]
 };
@@ -1853,7 +1892,7 @@ var usageRemote = {
 // src/remotes.ts
 var contribution = {
   package: usageRemote.package,
-  descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors]
+  descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors, ...updateRemote.descriptors]
 };
 function registerRemotes(ctx) {
   ctx.inject(["typert"], (scope) => {
@@ -1948,6 +1987,106 @@ var OpencodeGoCatalogService = class extends TypertRemoteService {
   }
 };
 
+// src/update/check.ts
+var PACKAGE_NAME = "@dan-ai-studio/dshopencodego";
+var REGISTRY_LATEST_URL = `https://registry.npmjs.org/${encodeURIComponent(PACKAGE_NAME)}/latest`;
+var CHECK_CACHE_MS = 6 * 60 * 60 * 1e3;
+var CHECK_TIMEOUT_MS = 1e4;
+function parseVersion(value) {
+  const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?(?:\+[0-9a-zA-Z.-]+)?$/.exec(value.trim());
+  if (match === void 0 || match === null) return void 0;
+  const [, major, minor, patch, prerelease] = match;
+  return {
+    core: [Number(major), Number(minor), Number(patch)],
+    prerelease: prerelease === void 0 ? void 0 : prerelease.split(".")
+  };
+}
+function compareVersions(left, right) {
+  const ours = parseVersion(left);
+  const theirs = parseVersion(right);
+  if (ours === void 0 || theirs === void 0) throw new Error(`dshopencodego: cannot compare versions "${left}" and "${right}"`);
+  for (let index = 0; index < 3; index += 1) {
+    const difference = (ours.core[index] ?? 0) - (theirs.core[index] ?? 0);
+    if (difference !== 0) return difference;
+  }
+  if (ours.prerelease === void 0 && theirs.prerelease === void 0) return 0;
+  if (ours.prerelease === void 0) return 1;
+  if (theirs.prerelease === void 0) return -1;
+  const width = Math.max(ours.prerelease.length, theirs.prerelease.length);
+  for (let index = 0; index < width; index += 1) {
+    const oursPart = ours.prerelease[index];
+    const theirsPart = theirs.prerelease[index];
+    if (oursPart === void 0) return -1;
+    if (theirsPart === void 0) return 1;
+    if (oursPart !== theirsPart) return oursPart < theirsPart ? -1 : 1;
+  }
+  return 0;
+}
+function isUpdateAvailable(current, latest) {
+  if (latest === void 0) return false;
+  try {
+    return compareVersions(latest, current) > 0;
+  } catch {
+    return false;
+  }
+}
+function parseLatestVersion(body) {
+  if (body === null || typeof body !== "object") return void 0;
+  const version = body["version"];
+  return typeof version === "string" && parseVersion(version) !== void 0 ? version : void 0;
+}
+function createUpdateChecker(deps) {
+  const now = deps.now ?? Date.now;
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  let cached;
+  let inflight;
+  async function lookup() {
+    const checkedAt = now();
+    try {
+      const response = await fetchImpl(REGISTRY_LATEST_URL, { signal: AbortSignal.timeout(CHECK_TIMEOUT_MS) });
+      if (!response.ok) throw new Error(`registry answered ${response.status}`);
+      const latest = parseLatestVersion(await response.json());
+      return {
+        current: deps.currentVersion,
+        latest,
+        available: isUpdateAvailable(deps.currentVersion, latest),
+        checkedAt
+      };
+    } catch {
+      return { current: deps.currentVersion, latest: void 0, available: false, checkedAt };
+    }
+  }
+  return {
+    check(force = false) {
+      if (!force && cached !== void 0 && now() - cached.checkedAt < CHECK_CACHE_MS) return Promise.resolve(cached);
+      inflight ??= lookup().then((status) => {
+        cached = status;
+        inflight = void 0;
+        return status;
+      });
+      return inflight;
+    }
+  };
+}
+
+// src/update/version.ts
+var PLUGIN_VERSION = true ? "0.1.24" : "0.0.0-dev";
+
+// src/update/service.ts
+import { TypertRemoteService as TypertRemoteService2 } from "@deepseek-ai/dsh-typert-protocol";
+var OpencodeGoUpdateService = class extends TypertRemoteService2 {
+  check;
+  constructor(ctx, options) {
+    super(ctx, "opencodeGoUpdate");
+    const checker = createUpdateChecker({ currentVersion: options.currentVersion });
+    this.check = (force) => checker.check(force);
+  }
+  /** Whether a newer release is published; `force` bypasses the cache. */
+  readUpdate(force) {
+    return this.check(force);
+  }
+};
+
 // src/usage/meter.ts
 var EMPTY = {
   calls: 0,
@@ -2053,7 +2192,7 @@ async function readUsageWindows(options) {
 
 // src/usage/service.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { RemoteError as RemoteError2, TypertRemoteService as TypertRemoteService2 } from "@deepseek-ai/dsh-typert-protocol";
+import { RemoteError as RemoteError2, TypertRemoteService as TypertRemoteService3 } from "@deepseek-ai/dsh-typert-protocol";
 import { LlmError as LlmError11 } from "@deepseek-ai/dsh-llm";
 function usageFailure(error, source) {
   const missing = error instanceof LlmError11 && error.code === "MISSING_CREDENTIAL";
@@ -2064,7 +2203,7 @@ function usageFailure(error, source) {
     { cause: error }
   );
 }
-var OpencodeGoUsageService = class extends TypertRemoteService2 {
+var OpencodeGoUsageService = class extends TypertRemoteService3 {
   identity;
   options;
   constructor(ctx, options) {
@@ -2157,6 +2296,7 @@ function apply(ctx, raw) {
     catalog: () => adapter.catalogOf(current()),
     visibility: () => current().modelVisibility
   });
+  ctx.plugin(OpencodeGoUpdateService, { currentVersion: PLUGIN_VERSION });
   let registration;
   let visibilityFacts = JSON.stringify(current().modelVisibility);
   const applyRoute = (credentialConfigured) => {

package/lib/types/conversion/stream.js

@@ -51,6 +51,12 @@ export function classifyPiAiError(message) {
         return 'AUTH';
     if (isQuotaExceededError(message))
         return ACCOUNT_QUOTA_CODE;
+    // A 429 typed as `server_error` is the gateway reporting an unavailable
+    // upstream, not the caller exceeding a rate limit: the remedy is waiting for
+    // the endpoint to recover rather than slowing down, so it classifies as
+    // SERVER even though the status code alone reads as a rate limit.
+    if (/server_error/i.test(message))
+        return 'SERVER';
     if (/\b429\b|rate.?limit/i.test(message))
         return 'RATE_LIMIT';
     if (/\b413\b|payload too large|request body too large|length limit exceeded/i.test(message))

package/lib/types/index.js

@@ -36,6 +36,8 @@ import { DISPLAY_NAME, PROVIDER_ID, discoverCatalogModels } from "./catalog/inde
 import { assertBaseURL, PlainConfig, readConfig } from "./config.js";
 import { registerRemotes } from "./remotes.js";
 import { OpencodeGoCatalogService } from "./catalog/service.js";
+import { OpencodeGoUpdateService } from "./update/index.js";
+import { PLUGIN_VERSION } from "./update/index.js";
 import { OpencodeGoUsageService, UsageMeter } from "./usage/index.js";
 export { OpencodeGoAdapter } from "./adapter.js";
 export { DEFAULT_BASE_URL, CONSOLE_BASE_URL, DISPLAY_NAME, PROVIDER_ID, OpencodeGoCatalog, discoverCatalogModels } from "./catalog/index.js";
@@ -107,6 +109,7 @@ export function apply(ctx, raw) {
         catalog: () => adapter.catalogOf(current()),
         visibility: () => current().modelVisibility,
     });
+    ctx.plugin(OpencodeGoUpdateService, { currentVersion: PLUGIN_VERSION });
     let registration;
     let visibilityFacts = JSON.stringify(current().modelVisibility);
     /**

package/lib/types/remotes.js

@@ -8,11 +8,12 @@
  * @module @dan-ai-studio/dshopencodego/remotes
  */
 import { catalogRemote } from "./catalog/contract.js";
+import { updateRemote } from "./update/contract.js";
 import { usageRemote } from "./usage/contract.js";
 /** Every Remote method this package owns, mounted as one contribution. */
 const contribution = {
     package: usageRemote.package,
-    descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors],
+    descriptors: [...usageRemote.descriptors, ...catalogRemote.descriptors, ...updateRemote.descriptors],
 };
 /** Register this package's Remote contribution for the mount's lifetime. */
 export function registerRemotes(ctx) {

package/lib/types/update/check.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Self update check: is a newer release of this package published?
+ *
+ * This module only *reads*: it asks the npm registry for the latest published
+ * version and compares it with the running build. It never downloads,
+ * installs, or replaces anything — the actual update stays with the host's
+ * `pluginManager` (`removeBundle` + `installBundle`), driven by an explicit
+ * user click on the settings page. Automatic self-replacement would bypass
+ * the host's manifest lock, peer-compatibility checks, build approvals, and
+ * HMR lifecycle, so it is deliberately not implemented here.
+ *
+ * The check runs only when the settings page asks (page open or manual
+ * refresh), never on the model-request path, and fails silent: an unreachable
+ * registry simply hides the banner instead of erroring the page.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/check
+ */
+/** This package as addressed on the registry. */
+export declare const PACKAGE_NAME = "@dan-ai-studio/dshopencodego";
+/** Document address answering `{ "version": "x.y.z", ... }`. */
+export declare const REGISTRY_LATEST_URL: string;
+/** How long one lookup answers for before the registry is asked again. */
+export declare const CHECK_CACHE_MS: number;
+/** Bound on one registry round trip; expiry fails silent, never throws. */
+export declare const CHECK_TIMEOUT_MS = 10000;
+/** What the settings page renders. */
+export interface UpdateStatus {
+    /** Version of the running build. */
+    readonly current: string;
+    /** Latest published version, when the registry answered. */
+    readonly latest: string | undefined;
+    /** True when the registry answered and `latest` is newer than `current`. */
+    readonly available: boolean;
+    /** Milliseconds since the epoch of the lookup backing this reading. */
+    readonly checkedAt: number;
+}
+interface ParsedVersion {
+    readonly core: readonly number[];
+    /** Absent for a release; present (lower precedence) for `1.2.3-tag.4`. */
+    readonly prerelease: readonly string[] | undefined;
+}
+/** Split `1.2.3-tag.4+build` into comparable parts; invalid input yields undefined. */
+export declare function parseVersion(value: string): ParsedVersion | undefined;
+/**
+ * Compare two version strings.
+ * @returns negative when `left` is older, positive when newer, zero when equal.
+ * @throws {Error} when either side is not a version.
+ */
+export declare function compareVersions(left: string, right: string): number;
+/** True when `latest` is a newer release than `current`. Unparsable input is never an update. */
+export declare function isUpdateAvailable(current: string, latest: string | undefined): boolean;
+/** Read the `version` field out of a registry `latest` document. */
+export declare function parseLatestVersion(body: unknown): string | undefined;
+/** Dependencies the check needs, injectable for tests. */
+export interface UpdateCheckDeps {
+    /** Running build's version (build-time constant in production). */
+    readonly currentVersion: string;
+    /** Fetch implementation; defaults to the global one. */
+    readonly fetchImpl?: typeof fetch;
+    /** Clock; defaults to `Date.now`. */
+    readonly now?: () => number;
+}
+/**
+ * Ask the registry for the latest published version, cached per process.
+ *
+ * Concurrent callers share one in-flight lookup. A lookup that fails for any
+ * reason — network, timeout, malformed document — resolves as "no update
+ * known" rather than rejecting, so the settings page never breaks because
+ * the registry is unreachable.
+ */
+export declare function createUpdateChecker(deps: UpdateCheckDeps): {
+    check(force?: boolean): Promise<UpdateStatus>;
+};
+export {};

package/lib/types/update/check.js

@@ -0,0 +1,132 @@
+/**
+ * Self update check: is a newer release of this package published?
+ *
+ * This module only *reads*: it asks the npm registry for the latest published
+ * version and compares it with the running build. It never downloads,
+ * installs, or replaces anything — the actual update stays with the host's
+ * `pluginManager` (`removeBundle` + `installBundle`), driven by an explicit
+ * user click on the settings page. Automatic self-replacement would bypass
+ * the host's manifest lock, peer-compatibility checks, build approvals, and
+ * HMR lifecycle, so it is deliberately not implemented here.
+ *
+ * The check runs only when the settings page asks (page open or manual
+ * refresh), never on the model-request path, and fails silent: an unreachable
+ * registry simply hides the banner instead of erroring the page.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/check
+ */
+/** This package as addressed on the registry. */
+export const PACKAGE_NAME = '@dan-ai-studio/dshopencodego';
+/** Document address answering `{ "version": "x.y.z", ... }`. */
+export const REGISTRY_LATEST_URL = `https://registry.npmjs.org/${encodeURIComponent(PACKAGE_NAME)}/latest`;
+/** How long one lookup answers for before the registry is asked again. */
+export const CHECK_CACHE_MS = 6 * 60 * 60 * 1000;
+/** Bound on one registry round trip; expiry fails silent, never throws. */
+export const CHECK_TIMEOUT_MS = 10_000;
+/** Split `1.2.3-tag.4+build` into comparable parts; invalid input yields undefined. */
+export function parseVersion(value) {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?(?:\+[0-9a-zA-Z.-]+)?$/.exec(value.trim());
+    if (match === undefined || match === null)
+        return undefined;
+    const [, major, minor, patch, prerelease] = match;
+    return {
+        core: [Number(major), Number(minor), Number(patch)],
+        prerelease: prerelease === undefined ? undefined : prerelease.split('.'),
+    };
+}
+/**
+ * Compare two version strings.
+ * @returns negative when `left` is older, positive when newer, zero when equal.
+ * @throws {Error} when either side is not a version.
+ */
+export function compareVersions(left, right) {
+    const ours = parseVersion(left);
+    const theirs = parseVersion(right);
+    if (ours === undefined || theirs === undefined)
+        throw new Error(`dshopencodego: cannot compare versions "${left}" and "${right}"`);
+    for (let index = 0; index < 3; index += 1) {
+        const difference = (ours.core[index] ?? 0) - (theirs.core[index] ?? 0);
+        if (difference !== 0)
+            return difference;
+    }
+    if (ours.prerelease === undefined && theirs.prerelease === undefined)
+        return 0;
+    if (ours.prerelease === undefined)
+        return 1;
+    if (theirs.prerelease === undefined)
+        return -1;
+    const width = Math.max(ours.prerelease.length, theirs.prerelease.length);
+    for (let index = 0; index < width; index += 1) {
+        const oursPart = ours.prerelease[index];
+        const theirsPart = theirs.prerelease[index];
+        if (oursPart === undefined)
+            return -1;
+        if (theirsPart === undefined)
+            return 1;
+        if (oursPart !== theirsPart)
+            return oursPart < theirsPart ? -1 : 1;
+    }
+    return 0;
+}
+/** True when `latest` is a newer release than `current`. Unparsable input is never an update. */
+export function isUpdateAvailable(current, latest) {
+    if (latest === undefined)
+        return false;
+    try {
+        return compareVersions(latest, current) > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/** Read the `version` field out of a registry `latest` document. */
+export function parseLatestVersion(body) {
+    if (body === null || typeof body !== 'object')
+        return undefined;
+    const version = body['version'];
+    return typeof version === 'string' && parseVersion(version) !== undefined ? version : undefined;
+}
+/**
+ * Ask the registry for the latest published version, cached per process.
+ *
+ * Concurrent callers share one in-flight lookup. A lookup that fails for any
+ * reason — network, timeout, malformed document — resolves as "no update
+ * known" rather than rejecting, so the settings page never breaks because
+ * the registry is unreachable.
+ */
+export function createUpdateChecker(deps) {
+    const now = deps.now ?? Date.now;
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    let cached;
+    let inflight;
+    async function lookup() {
+        const checkedAt = now();
+        try {
+            const response = await fetchImpl(REGISTRY_LATEST_URL, { signal: AbortSignal.timeout(CHECK_TIMEOUT_MS) });
+            if (!response.ok)
+                throw new Error(`registry answered ${response.status}`);
+            const latest = parseLatestVersion(await response.json());
+            return {
+                current: deps.currentVersion,
+                latest,
+                available: isUpdateAvailable(deps.currentVersion, latest),
+                checkedAt,
+            };
+        }
+        catch {
+            return { current: deps.currentVersion, latest: undefined, available: false, checkedAt };
+        }
+    }
+    return {
+        check(force = false) {
+            if (!force && cached !== undefined && now() - cached.checkedAt < CHECK_CACHE_MS)
+                return Promise.resolve(cached);
+            inflight ??= lookup().then((status) => {
+                cached = status;
+                inflight = undefined;
+                return status;
+            });
+            return inflight;
+        },
+    };
+}

package/lib/types/update/contract.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Wire contract for the update Remote.
+ *
+ * `readUpdate` answers whether a newer release of this package is published.
+ * The reading is advisory — applying the update stays a user click that
+ * drives the host's `pluginManager`, never an automatic download.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/contract
+ */
+import type { RemoteResult, TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol';
+import type { UpdateStatus } from './check.ts';
+export type { UpdateStatus } from './check.ts';
+/** Validate an update reading crossing the wire. */
+export declare function parseUpdateStatus(value: unknown): UpdateStatus;
+declare module '@deepseek-ai/dsh-typert-protocol' {
+    interface TypertRemoteNamespaceMap {
+        opencodeGoUpdate: {
+            readUpdate(force?: boolean): Promise<RemoteResult<UpdateStatus>>;
+        };
+    }
+}
+/** Remote methods this package owns, mounted together by the plugin. */
+export declare const updateRemote: TypertRemoteContribution;

package/lib/types/update/contract.js

@@ -0,0 +1,52 @@
+/**
+ * Wire contract for the update Remote.
+ *
+ * `readUpdate` answers whether a newer release of this package is published.
+ * The reading is advisory — applying the update stays a user click that
+ * drives the host's `pluginManager`, never an automatic download.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/contract
+ */
+/** Validate an update reading crossing the wire. */
+export function parseUpdateStatus(value) {
+    if (value === null || typeof value !== 'object')
+        throw new Error('invalid update reading');
+    const row = value;
+    if (typeof row['current'] !== 'string')
+        throw new Error('invalid update reading');
+    if (row['latest'] !== undefined && typeof row['latest'] !== 'string')
+        throw new Error('invalid update reading');
+    if (typeof row['available'] !== 'boolean')
+        throw new Error('invalid update reading');
+    if (typeof row['checkedAt'] !== 'number' || !Number.isFinite(row['checkedAt'])) {
+        throw new Error('invalid update reading');
+    }
+    return {
+        current: row['current'],
+        latest: typeof row['latest'] === 'string' ? row['latest'] : undefined,
+        available: row['available'],
+        checkedAt: row['checkedAt'],
+    };
+}
+/** Codec shape accepted by both released and source DSH builds. */
+const codec = (typeSymbol, parse) => ({
+    mode: 'strict',
+    typeSymbol,
+    schema: { parse },
+    create: () => ({ parse }),
+});
+/** Remote methods this package owns, mounted together by the plugin. */
+export const updateRemote = {
+    package: '@dan-ai-studio/dshopencodego',
+    descriptors: [
+        {
+            id: '@dan-ai-studio/dshopencodego#opencodeGoUpdate/readUpdate',
+            service: 'opencodeGoUpdate',
+            namespace: 'opencodeGoUpdate',
+            method: 'readUpdate',
+            invocation: { kind: 'direct' },
+            parameters: [],
+            result: codec('@dan-ai-studio/dshopencodego#UpdateStatus', parseUpdateStatus),
+        },
+    ],
+};

package/lib/types/update/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Self update check (advisory only).
+ *
+ * @module @dan-ai-studio/dshopencodego/update
+ */
+export { PACKAGE_NAME, REGISTRY_LATEST_URL, CHECK_CACHE_MS, CHECK_TIMEOUT_MS } from './check.ts';
+export type { UpdateStatus } from './check.ts';
+export { compareVersions, createUpdateChecker, isUpdateAvailable, parseLatestVersion, parseVersion } from './check.ts';
+export { PLUGIN_VERSION } from './version.ts';
+export { OpencodeGoUpdateService } from './service.ts';
+export type { UpdateServiceOptions } from './service.ts';
+export { parseUpdateStatus, updateRemote } from './contract.ts';

package/lib/types/update/index.js

@@ -0,0 +1,10 @@
+/**
+ * Self update check (advisory only).
+ *
+ * @module @dan-ai-studio/dshopencodego/update
+ */
+export { PACKAGE_NAME, REGISTRY_LATEST_URL, CHECK_CACHE_MS, CHECK_TIMEOUT_MS } from "./check.js";
+export { compareVersions, createUpdateChecker, isUpdateAvailable, parseLatestVersion, parseVersion } from "./check.js";
+export { PLUGIN_VERSION } from "./version.js";
+export { OpencodeGoUpdateService } from "./service.js";
+export { parseUpdateStatus, updateRemote } from "./contract.js";

package/lib/types/update/service.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Host half of the update Remote.
+ *
+ * One method, one question: is a newer release of this package published?
+ * The service answers from the registry through the cached checker in
+ * `./check.ts`, so the settings page learns about updates without the model
+ * path ever touching the network. Applying an update is intentionally absent
+ * here — the page drives the host's own `pluginManager` (`removeBundle` then
+ * `installBundle`), which owns the manifest lock, peer checks, build
+ * approvals, and the HMR lifecycle a self-replacing plugin would bypass.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/service
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import type { UpdateStatus } from './check.ts';
+/** Host inputs for the update service. */
+export interface UpdateServiceOptions {
+    /** Running build's version. */
+    readonly currentVersion: string;
+}
+/** Update Remote: the cached registry reading for the settings page. */
+export declare class OpencodeGoUpdateService extends TypertRemoteService {
+    private readonly check;
+    constructor(ctx: Context, options: UpdateServiceOptions);
+    /** Whether a newer release is published; `force` bypasses the cache. */
+    readUpdate(force?: boolean): Promise<UpdateStatus>;
+}

package/lib/types/update/service.js

@@ -0,0 +1,28 @@
+/**
+ * Host half of the update Remote.
+ *
+ * One method, one question: is a newer release of this package published?
+ * The service answers from the registry through the cached checker in
+ * `./check.ts`, so the settings page learns about updates without the model
+ * path ever touching the network. Applying an update is intentionally absent
+ * here — the page drives the host's own `pluginManager` (`removeBundle` then
+ * `installBundle`), which owns the manifest lock, peer checks, build
+ * approvals, and the HMR lifecycle a self-replacing plugin would bypass.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/service
+ */
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import { createUpdateChecker } from "./check.js";
+/** Update Remote: the cached registry reading for the settings page. */
+export class OpencodeGoUpdateService extends TypertRemoteService {
+    check;
+    constructor(ctx, options) {
+        super(ctx, 'opencodeGoUpdate');
+        const checker = createUpdateChecker({ currentVersion: options.currentVersion });
+        this.check = (force) => checker.check(force);
+    }
+    /** Whether a newer release is published; `force` bypasses the cache. */
+    readUpdate(force) {
+        return this.check(force);
+    }
+}

package/lib/types/update/version.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The running build's own version.
+ *
+ * `scripts/build.mjs` replaces `__DSHOPENCODEGO_VERSION__` with the package
+ * version at bundle time, so the Host knows what it is without reading its
+ * own files back from disk. Outside the bundle (tests, source runs) the
+ * constant is absent and the value reads as a development placeholder; the
+ * update check treats an unparsable current version as "no update known"
+ * rather than erroring.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/version
+ */
+/** Version of this build, or a placeholder outside the bundle. */
+export declare const PLUGIN_VERSION: string;

package/lib/types/update/version.js

@@ -0,0 +1,16 @@
+/**
+ * The running build's own version.
+ *
+ * `scripts/build.mjs` replaces `__DSHOPENCODEGO_VERSION__` with the package
+ * version at bundle time, so the Host knows what it is without reading its
+ * own files back from disk. Outside the bundle (tests, source runs) the
+ * constant is absent and the value reads as a development placeholder; the
+ * update check treats an unparsable current version as "no update known"
+ * rather than erroring.
+ *
+ * @module @dan-ai-studio/dshopencodego/update/version
+ */
+/** Version of this build, or a placeholder outside the bundle. */
+export const PLUGIN_VERSION = typeof __DSHOPENCODEGO_VERSION__ === 'string'
+    ? __DSHOPENCODEGO_VERSION__
+    : '0.0.0-dev';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dan-ai-studio/dshopencodego",
-  "version": "0.1.22",
+  "version": "0.1.24",
   "description": "OpenCode Go provider for DeepSeek Harness: live gateway catalog, per-conversation session header, usage",
   "type": "module",
   "license": "MIT",