@dickpy/dsh-imagegen 1.0.1 → 1.0.3

package/lib/index.js

@@ -4,6 +4,7 @@ import { randomUUID } from "node:crypto";
 import { promises } from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
+import { spawn } from "node:child_process";
 //#region src/protocol.ts
 /**
 * Wire contract shared by the host and client halves of dsh-imagegen: the
@@ -12,6 +13,8 @@ import path from "node:path";
 */
 /** Settings namespace this plugin owns (host settings seam + bridge). */
 const IMAGEGEN_SETTINGS_NAMESPACE = "dsh-imagegen";
+/** Published package version shared by the host updater and the client UI. */
+const PLUGIN_VERSION = "1.0.3";
 /** Same-origin route family (loopback-only, mirroring the dsh-ssh fence). */
 const SETTINGS_API = {
 	describe: "/api/dsh-imagegen/settings/describe",
@@ -19,6 +22,11 @@ const SETTINGS_API = {
 };
 /** The image-generation proxy route. */
 const GENERATE_API = "/api/dsh-imagegen/generate";
+/** Host-mediated GitHub Release update routes. */
+const UPDATE_API = {
+	check: "/api/dsh-imagegen/update/check",
+	apply: "/api/dsh-imagegen/update/apply"
+};
 /**
 * Same-origin route family for the host-persisted generation history. Images
 * live as files under ~/.dsh/dsh-imagegen/images/ and are served back through
@@ -429,6 +437,106 @@ async function readHistoryImage(file) {
 	}
 }
 //#endregion
+//#region src/updater.ts
+/** GitHub Release discovery and explicit, user-triggered plugin updates. */
+/** Keep this in sync with package.json for each published release. */
+const CURRENT_VERSION = PLUGIN_VERSION;
+const PACKAGE_NAME = "@dickpy/dsh-imagegen";
+const RELEASES_URL = "https://api.github.com/repos/dickpy/dsh-imagegen/releases/latest";
+const CHECK_TIMEOUT_MS = 1e4;
+const CACHE_TTL_MS = 15 * 6e4;
+let cached;
+/** Compare stable semver triples; returns positive when `left` is newer. */
+function compareVersions(left, right) {
+	const parse = (value) => {
+		const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(value.trim());
+		if (match === null) return [
+			0,
+			0,
+			0
+		];
+		return [
+			Number(match[1]),
+			Number(match[2]),
+			Number(match[3])
+		];
+	};
+	const a = parse(left);
+	const b = parse(right);
+	return a[0] - b[0] || a[1] - b[1] || a[2] - b[2];
+}
+function normalizedReleaseVersion(tag) {
+	if (typeof tag !== "string" || !/^v?\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(tag.trim())) return void 0;
+	return tag.trim().replace(/^v/, "");
+}
+/** Read the latest stable GitHub Release, with a short host-side cache. */
+async function checkForUpdate(fetchFn = fetch, now = Date.now()) {
+	if (cached !== void 0 && cached.expiresAt > now) return cached.value;
+	const response = await fetchFn(RELEASES_URL, {
+		headers: {
+			accept: "application/vnd.github+json",
+			"user-agent": "dsh-imagegen-update-check"
+		},
+		signal: AbortSignal.timeout(CHECK_TIMEOUT_MS)
+	});
+	if (!response.ok) throw new Error(`GitHub Releases returned HTTP ${response.status}`);
+	const payload = await response.json();
+	if (payload === null || typeof payload !== "object") throw new Error("GitHub Releases returned malformed JSON");
+	const release = payload;
+	if (release.draft === true || release.prerelease === true) throw new Error("latest GitHub Release is not stable");
+	const latestVersion = normalizedReleaseVersion(release.tag_name);
+	if (latestVersion === void 0) throw new Error("latest GitHub Release has an invalid version tag");
+	const releaseUrl = typeof release.html_url === "string" ? release.html_url : "https://github.com/dickpy/dsh-imagegen/releases";
+	const value = {
+		currentVersion: CURRENT_VERSION,
+		latestVersion,
+		updateAvailable: compareVersions(latestVersion, CURRENT_VERSION) > 0,
+		releaseUrl,
+		...typeof release.published_at === "string" ? { publishedAt: release.published_at } : {}
+	};
+	cached = {
+		expiresAt: now + CACHE_TTL_MS,
+		value
+	};
+	return value;
+}
+/** Resolve the profile that launched the current DSH process. */
+function profileFromProcess(argv = process.argv, env = process.env) {
+	const envProfile = env.DSH_PROFILE?.trim();
+	if (envProfile !== void 0 && /^[a-zA-Z0-9_-]+$/.test(envProfile)) return envProfile;
+	const profileIndex = argv.indexOf("--profile");
+	const explicit = profileIndex >= 0 ? argv[profileIndex + 1]?.trim() : void 0;
+	if (explicit !== void 0 && /^[a-zA-Z0-9_-]+$/.test(explicit)) return explicit;
+	if (argv.includes("web")) return "web";
+	return "web";
+}
+/** Run the same official command documented for plugin installation. */
+function installUpdate(version, spawnFn = spawn, argv = process.argv, env = process.env) {
+	if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) return Promise.reject(/* @__PURE__ */ new Error("invalid update version"));
+	const profile = profileFromProcess(argv, env);
+	const child = spawnFn(process.platform === "win32" ? "dsh.cmd" : "dsh", [
+		"plugin",
+		"--profile",
+		profile,
+		"add",
+		`${PACKAGE_NAME}@${version}`
+	], {
+		shell: process.platform === "win32",
+		stdio: "ignore"
+	});
+	return new Promise((resolve, reject) => {
+		child.once("error", reject);
+		child.once("exit", (code, signal) => {
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error(signal === null ? `plugin update exited with code ${code ?? "unknown"}` : `plugin update terminated by ${signal}`));
+		});
+	});
+}
+/** Test helper: clear the host-side Release cache. */
+function clearUpdateCache() {
+	cached = void 0;
+}
+//#endregion
 //#region src/routes.ts
 /** Cap on JSON request bodies (settings ops and generate payloads are small). */
 const MAX_JSON_BODY_BYTES = 24 * 1024 * 1024;
@@ -727,6 +835,66 @@ function makeRoutes(deps) {
 				}
 			}
 		},
+		{
+			kind: "exact",
+			path: UPDATE_API.check,
+			handler: async (req, res) => {
+				if (!guard(req, res, "POST")) return;
+				try {
+					writeJson(res, 200, {
+						ok: true,
+						update: await checkForUpdate()
+					});
+				} catch (error) {
+					writeJson(res, 200, {
+						ok: false,
+						code: "update-check-failed",
+						message: messageOf(error)
+					});
+				}
+			}
+		},
+		{
+			kind: "exact",
+			path: UPDATE_API.apply,
+			handler: async (req, res) => {
+				if (!guard(req, res, "POST")) return;
+				const body = await readJsonBody(req);
+				const version = body !== void 0 && typeof body.version === "string" ? body.version.trim() : "";
+				if (version === "") {
+					writeJson(res, 200, {
+						ok: false,
+						code: "bad-request",
+						message: "update version is required"
+					});
+					return;
+				}
+				try {
+					const latest = await checkForUpdate();
+					if (!latest.updateAvailable || latest.latestVersion !== version) {
+						writeJson(res, 200, {
+							ok: false,
+							code: "update-not-available",
+							message: `version ${version} is not the latest available release`
+						});
+						return;
+					}
+					await installUpdate(version);
+					writeJson(res, 200, {
+						ok: true,
+						currentVersion: CURRENT_VERSION,
+						updatedVersion: version,
+						restartRequired: true
+					});
+				} catch (error) {
+					writeJson(res, 200, {
+						ok: false,
+						code: "update-failed",
+						message: messageOf(error)
+					});
+				}
+			}
+		},
 		{
 			kind: "exact",
 			path: HISTORY_API.list,
@@ -942,4 +1110,4 @@ function apply(ctx, config) {
 	sync();
 }
 //#endregion
-export { Config, IMAGEGEN_GUIDANCE, ImageGenError, ImageGenSettingsNamespace, apply, generateImage, inject, makeRoutes, name };
+export { CURRENT_VERSION, Config, IMAGEGEN_GUIDANCE, ImageGenError, ImageGenSettingsNamespace, apply, checkForUpdate, clearUpdateCache, compareVersions, generateImage, inject, installUpdate, makeRoutes, name, profileFromProcess };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dickpy/dsh-imagegen",
   "description": "AI 生图 (image generation) plugin for the dsh web GUI: text-to-image and image-to-image through a configurable OpenAI-compatible endpoint (gpt-image-2 / gpt-image-1 / dall-e-3), with a settings card for api_url / api_key and a sidebar entry opening a split-pane generation studio.",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "type": "module",
   "main": "lib/index.js",
   "exports": {

package/src/client/ImageGenPanel.tsx

@@ -13,7 +13,7 @@ import { createPortal } from 'react-dom'
 import { Button, Pill } from '@deepseek-ai/dsh-client-ui-primitives'
 import type { ImageGenApi } from './api.ts'
 import { errorMessage, tt } from './helpers.ts'
-import type { GeneratedImage, GenerateMode, GenerateRequest, HistoryEntry, HistoryImageRef } from '../protocol.ts'
+import type { GeneratedImage, GenerateMode, GenerateRequest, HistoryEntry, HistoryImageRef, UpdateInfo } from '../protocol.ts'
 import type { ImageGenConfig, ImageGenScope } from './settings-scope.ts'
 import css from './panel.module.css'
 
@@ -50,6 +50,13 @@ function useConfig(scope: ImageGenScope): ImageGenConfig | undefined {
   return value
 }
 
+/** Track the redacted api-key presence bit exposed by the settings bridge. */
+function useKeySet(scope: ImageGenScope): boolean {
+  const [keySet, setKeySet] = useState(scope.getKeySetSnapshot())
+  useEffect(() => scope.subscribeKeySet(() => { setKeySet(scope.getKeySetSnapshot()) }), [scope])
+  return keySet
+}
+
 /** Tick a seconds counter while `running`. */
 function useElapsed(running: boolean, startedAt: number | null): number {
   const [elapsed, setElapsed] = useState(0)
@@ -108,6 +115,8 @@ export function ImageGenPanel(props: {
   const enabled = config?.enabled ?? true
   const apiUrl = config?.apiUrl ?? ''
   const configured = apiUrl.trim() !== ''
+  const keySet = useKeySet(scope)
+  const connected = enabled && configured && keySet
 
   const [mode, setMode] = useState<GenerateMode>('text')
   const [prompt, setPrompt] = useState('')
@@ -124,6 +133,10 @@ export function ImageGenPanel(props: {
   const [history, setHistory] = useState<HistoryEntry[]>([])
   const [viewingHistoryId, setViewingHistoryId] = useState<string | null>(null)
   const [preview, setPreview] = useState<{ images: GeneratedImage[]; index: number } | null>(null)
+  const [update, setUpdate] = useState<UpdateInfo | null>(null)
+  const [updating, setUpdating] = useState(false)
+  const [updateMessage, setUpdateMessage] = useState<string | null>(null)
+  const [updateResult, setUpdateResult] = useState<'success' | 'failed' | null>(null)
   const fileInput = useRef<HTMLInputElement>(null)
   const elapsed = useElapsed(generating, startedAt)
 
@@ -137,6 +150,35 @@ export function ImageGenPanel(props: {
     return () => { disposed = true }
   }, [api])
 
+  // Release checks are host-mediated and intentionally best-effort: a GitHub
+  // outage must never make the image-generation studio unavailable.
+  useEffect(() => {
+    let disposed = false
+    api.updateCheck()
+      .then(info => {
+        if (!disposed && info.updateAvailable) setUpdate(info)
+      })
+      .catch(() => { /* update discovery is optional */ })
+    return () => { disposed = true }
+  }, [api])
+
+  const applyUpdate = async (): Promise<void> => {
+    if (update === null || updating) return
+    setUpdating(true)
+    setUpdateMessage(null)
+    setUpdateResult(null)
+    try {
+      const result = await api.updateApply(update.latestVersion)
+      setUpdateMessage(tt('update.success', { version: result.updatedVersion }))
+      setUpdateResult('success')
+    } catch {
+      setUpdateMessage(tt('update.failed'))
+      setUpdateResult('failed')
+    } finally {
+      setUpdating(false)
+    }
+  }
+
   /** Read an uploaded reference image into a data URL. */
   const acceptFile = (file: File | undefined): void => {
     if (file === undefined) return
@@ -283,15 +325,34 @@ export function ImageGenPanel(props: {
   return (
     <div className={css.panel}>
       <header className={css.panelHeader}>
-        <h2 className={css.panelTitle}>{tt('panel.title')}</h2>
-        <span className={css.panelSubtitle}>{tt('panel.subtitle')}</span>
+        <span className={css.panelHeading}>
+          <h2 className={css.panelTitle}>{tt('panel.title')}</h2>
+          <span className={css.panelSubtitle}>{tt('panel.subtitle')}</span>
+        </span>
+        <button
+          type="button"
+          className={css.connectionStatus}
+          data-connected={connected ? 'true' : 'false'}
+          aria-label={tt(connected ? 'connection.connected' : 'connection.disconnected')}
+        >
+          <span className={css.connectionDot} aria-hidden="true" />
+          {tt(connected ? 'connection.connected' : 'connection.disconnected')}
+        </button>
       </header>
 
-      {!enabled
-        ? <div className={css.banner} data-kind="warn">{tt('config.disabled')}</div>
-        : !configured
-          ? <div className={css.banner} data-kind="warn">{tt('config.missing')}</div>
-          : <div className={css.banner} data-kind="ok">{tt('config.configured', { url: apiUrl })}</div>}
+      {update !== null ? (
+        <div className={css.updateBanner} data-kind={updateResult === 'success' ? 'ok' : 'warn'}>
+          <span className={css.updateText}>
+            {updateMessage ?? tt('update.available', { version: update.latestVersion })}
+          </span>
+          <span className={css.updateActions}>
+            <a className={css.updateRelease} href={update.releaseUrl} target="_blank" rel="noreferrer">{tt('update.release')}</a>
+            <Button variant="primary" size="sm" disabled={updating || updateMessage !== null} onClick={() => { void applyUpdate() }}>
+              {updating ? tt('update.installing') : tt('update.install')}
+            </Button>
+          </span>
+        </div>
+      ) : null}
 
       <div className={css.studio}>
         {/* ---------------------------------------------------- config sidebar */}

package/src/client/SettingsCard.tsx

@@ -11,6 +11,7 @@ import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-cli
 import { createSnapshotStore, type SnapshotStore } from '@deepseek-ai/dsh-client-runtime/client'
 import { CardForm, booleanField, secretField, textField, type CardActions, type CardShell, type FieldState as CardFieldState } from './settings-form.ts'
 import type { ImageGenScope } from './settings-scope.ts'
+import { PLUGIN_VERSION } from '../protocol.ts'
 import css from './settings-card.module.css'
 
 /** The fields this card edits (the namespace's full schema). */
@@ -161,6 +162,10 @@ export function ImageGenSettingsCard(props: ImageGenSettingsCardProps) {
         ? (
           <div className={css.body}>
             {!state.writable ? <p className={css.readOnly} role="status">{t('settings.readOnly')}</p> : null}
+            <div className={css.versionRow}>
+              <span className={css.versionLabel}>{t('settings.currentVersion')}</span>
+              <code className={css.versionValue}>v{PLUGIN_VERSION}</code>
+            </div>
             <ValueField
               id="dsh-imagegen-settings-apikey"
               label={t('settings.apiKey')}

package/src/client/api.ts

@@ -3,7 +3,7 @@
  * data access path the panel uses — plain fetch, same origin.
  */
 
-import { GENERATE_API, HISTORY_API, type GenerateRequest, type GenerateResult, type HistoryEntry } from '../protocol.ts'
+import { GENERATE_API, HISTORY_API, UPDATE_API, type GenerateRequest, type GenerateResult, type HistoryEntry, type UpdateInfo } from '../protocol.ts'
 
 /** Error carrying the route's JSON error message. */
 export class ImageGenApiError extends Error {
@@ -40,6 +40,24 @@ async function readEnvelope<T>(response: Response): Promise<T> {
 
 /** The browser half's data entry point. */
 export class ImageGenApi {
+  /** Ask the host to check the latest stable GitHub Release. */
+  async updateCheck(): Promise<UpdateInfo> {
+    const response = await fetch(UPDATE_API.check, { method: 'POST' })
+    const body = await readEnvelope<{ ok: true; update: UpdateInfo }>(response)
+    return body.update
+  }
+
+  /** Ask the host to install a previously discovered Release. */
+  async updateApply(version: string): Promise<{ updatedVersion: string; restartRequired: boolean }> {
+    const response = await fetch(UPDATE_API.apply, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ version }),
+    })
+    const body = await readEnvelope<{ ok: true; updatedVersion: string; restartRequired: boolean }>(response)
+    return { updatedVersion: body.updatedVersion, restartRequired: body.restartRequired }
+  }
+
   /** Forward one generate request to the host proxy. */
   async generate(request: GenerateRequest): Promise<GenerateResult> {
     const response = await fetch(GENERATE_API, {

package/src/client/locales.ts

@@ -76,9 +76,19 @@ export const zh = {
   'config.missing': '尚未配置 API：请前往「设置 → 插件 → 可配置」为 AI 生图填写 api_url 与 api_key。',
   'config.configured': '已连接 {url}',
   'config.disabled': '插件已停用，请在设置中重新启用。',
+  'connection.connected': '已连接',
+  'connection.disconnected': '未连接',
+  // plugin update
+  'update.available': '检测到新版本：{version}',
+  'update.install': '在线更新',
+  'update.installing': '更新中…',
+  'update.success': '已更新到 {version}，请重启 DSH',
+  'update.failed': '更新失败，请重试',
+  'update.release': '查看 Release',
   // settings card
   'settings.title': 'AI 生图（dsh-imagegen）',
   'settings.description': '配置图像生成 API 地址与密钥',
+  'settings.currentVersion': '当前版本',
   'settings.apiUrl': 'API 地址（api_url）',
   'settings.apiUrlHint': 'OpenAI 兼容接口基址，如 https://api.openai.com/v1；将自动拼接 /images/generations 与 /images/edits',
   'settings.apiKey': 'API 密钥（api_key）',
@@ -171,8 +181,17 @@ export const en: Record<keyof typeof zh, string> = {
   'config.missing': 'API not configured: open "Settings → Plugins → Configurable" and fill in api_url and api_key for AI Image.',
   'config.configured': 'Connected to {url}',
   'config.disabled': 'The plugin is disabled — re-enable it in Settings.',
+  'connection.connected': 'Connected',
+  'connection.disconnected': 'Disconnected',
+  'update.available': 'A new version is available: {version}',
+  'update.install': 'Update online',
+  'update.installing': 'Updating…',
+  'update.success': 'Updated to {version}; restart DSH to load it',
+  'update.failed': 'Update failed; please try again',
+  'update.release': 'View Release',
   'settings.title': 'AI Image (dsh-imagegen)',
   'settings.description': 'Configure the image generation API endpoint and key',
+  'settings.currentVersion': 'Current version',
   'settings.apiUrl': 'API URL (api_url)',
   'settings.apiUrlHint': 'OpenAI-compatible base URL, e.g. https://api.openai.com/v1; /images/generations and /images/edits are appended',
   'settings.apiKey': 'API Key (api_key)',

package/src/client/panel.module.css

@@ -121,10 +121,18 @@ html[data-dsh-imagegen-active]:not([data-dsh-taskboard-active]):not([data-dsh-ss
 }
 
 .panelHeader {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  flex: none;
+}
+
+.panelHeading {
   display: flex;
   align-items: baseline;
   gap: 10px;
-  flex: none;
+  min-width: 0;
 }
 
 .panelTitle {
@@ -143,27 +151,95 @@ html[data-dsh-imagegen-active]:not([data-dsh-taskboard-active]):not([data-dsh-ss
   text-overflow: ellipsis;
 }
 
-/* --- banners ------------------------------------------------------------------ */
+/* --- connection status and update notice -------------------------------------- */
+
+.connectionStatus {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  flex: none;
+  height: 28px;
+  padding: 0 10px;
+  border: 1px solid var(--dsw-alias-label-error);
+  border-radius: 8px;
+  background: transparent;
+  color: var(--dsw-alias-label-error);
+  font: inherit;
+  font-size: 12px;
+  line-height: 1;
+  white-space: nowrap;
+}
+
+.connectionStatus[data-connected='true'] {
+  border-color: var(--dsw-alias-state-success-primary);
+  color: var(--dsw-alias-state-success-primary);
+}
+
+.connectionDot {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: currentColor;
+}
 
-.banner {
+.updateBanner {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
   flex: none;
-  padding: 7px 12px;
+  padding: 7px 10px 7px 12px;
   font-size: 12px;
   line-height: 1.5;
   border-radius: 10px;
-  border: 1px solid var(--dsw-alias-border-l2);
-  color: var(--dsw-alias-label-secondary);
+  border: 1px solid var(--dsw-alias-state-warn-primary);
+  color: var(--dsw-alias-state-warn-primary);
   overflow-wrap: anywhere;
 }
 
-.banner[data-kind='ok'] {
+.updateBanner[data-kind='ok'] {
   color: var(--dsw-alias-state-success-primary);
   border-color: var(--dsw-alias-state-success-primary);
 }
 
-.banner[data-kind='warn'] {
-  color: var(--dsw-alias-state-warn-primary);
-  border-color: var(--dsw-alias-state-warn-primary);
+.updateText {
+  min-width: 0;
+}
+
+.updateActions {
+  display: inline-flex;
+  align-items: center;
+  gap: 10px;
+  flex: none;
+}
+
+.updateRelease {
+  color: inherit;
+  text-decoration: underline;
+  text-underline-offset: 2px;
+  white-space: nowrap;
+}
+
+@media (max-width: 700px) {
+  .panelHeader {
+    align-items: flex-start;
+  }
+
+  .panelHeading {
+    align-items: flex-start;
+    flex-direction: column;
+    gap: 2px;
+  }
+
+  .updateBanner {
+    align-items: flex-start;
+    flex-direction: column;
+  }
+
+  .updateActions {
+    width: 100%;
+    justify-content: space-between;
+  }
 }
 
 /* --- studio split: left config sidebar (narrow) + right canvas (wide) --------- */

package/src/client/settings-card.module.css

@@ -95,6 +95,32 @@
   padding-bottom: 8px;
 }
 
+.versionRow {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  padding: 12px 0;
+  border-bottom: 1px solid var(--dsw-alias-border-l2);
+}
+
+.versionLabel {
+  font-size: 13px;
+  font-weight: 500;
+  line-height: 1.5;
+  color: var(--dsw-alias-label-primary);
+}
+
+.versionValue {
+  padding: 1px 8px;
+  border-radius: 999px;
+  background: var(--dsw-alias-bg-module-platform);
+  color: var(--dsw-alias-label-secondary);
+  font-family: var(--dsw-font-family-mono, monospace);
+  font-size: 12px;
+  line-height: 1.5;
+}
+
 /* --- fields (mirror of the official plugin-config fields) --------------------- */
 
 .field {

package/src/index.ts

@@ -26,6 +26,7 @@ export const inject = ['webServer', 'systemPrompt']
 // contract only requires name / inject / Config / apply.
 export { makeRoutes } from './routes.ts'
 export { generateImage, ImageGenError } from './engine.ts'
+export { checkForUpdate, clearUpdateCache, compareVersions, CURRENT_VERSION, installUpdate, profileFromProcess } from './updater.ts'
 
 /** The branded settings namespace of this plugin (the card edits it). */
 export const ImageGenSettingsNamespace = settingsNamespace(IMAGEGEN_SETTINGS_NAMESPACE)

package/src/protocol.ts

@@ -7,6 +7,9 @@
 /** Settings namespace this plugin owns (host settings seam + bridge). */
 export const IMAGEGEN_SETTINGS_NAMESPACE = 'dsh-imagegen'
 
+/** Published package version shared by the host updater and the client UI. */
+export const PLUGIN_VERSION = '1.0.3'
+
 /** Same-origin route family (loopback-only, mirroring the dsh-ssh fence). */
 export const SETTINGS_API = {
   describe: '/api/dsh-imagegen/settings/describe',
@@ -16,6 +19,12 @@ export const SETTINGS_API = {
 /** The image-generation proxy route. */
 export const GENERATE_API = '/api/dsh-imagegen/generate'
 
+/** Host-mediated GitHub Release update routes. */
+export const UPDATE_API = {
+  check: '/api/dsh-imagegen/update/check',
+  apply: '/api/dsh-imagegen/update/apply',
+} as const
+
 /**
  * Same-origin route family for the host-persisted generation history. Images
  * live as files under ~/.dsh/dsh-imagegen/images/ and are served back through
@@ -82,6 +91,15 @@ export interface GenerateResult {
   historyError?: string
 }
 
+/** GitHub Release update information shown by the client. */
+export interface UpdateInfo {
+  currentVersion: string
+  latestVersion: string
+  updateAvailable: boolean
+  releaseUrl: string
+  publishedAt?: string
+}
+
 /** One history image reference as the browser consumes it (a served URL). */
 export interface HistoryImageRef {
   /** Same-origin URL: `${HISTORY_API.image}/<file>`. */