@goodandready/dsh-key-rotation 0.8.10 → 0.8.12

package/lib/client.js

@@ -9,7 +9,7 @@
 // manual route typing is ever needed. The plugin derives the fallback chain and
 // auto-creates clone routes from the key count.
 //
-// Localization: source strings are English only (ctx.locale.register(NS, { en })).
+// Localization: source strings are English; Chinese is a first-class locale (en + zh).
 // Other languages come from the DSH core locale service / translation plugins
 // via props.t (slot locale: NS). Active locale prefers ctx.locale.getSnapshot().active,
 // else first navigator.languages entry, else 'en' — same fallback chain as DSH core.
@@ -301,12 +301,18 @@ window.__ModuleLoader__.load({
       selfHealingHint: '定期轻量探测以自动恢复损坏密钥 (0 为禁用)',
     };
 
-    // Коды, на которых имеет смысл переключать ключ. Список из хоста
-    // (DEFAULT_SWITCH_CODES); конфиг может содержать и свои — они показываются
-    // отдельными отмеченными галочками, чтобы правило нельзя было потерять.
+    // Codes worth switching on. Host list is DEFAULT_SWITCH_CODES; config may
+    // add extras — those render as separate checked boxes so a custom rule is
+    // not dropped on first save.
     const KNOWN_CODES = ['QUOTA', 'RATE_LIMIT', 'SERVER', 'TIMEOUT', 'TRANSPORT', 'EMPTY_RESPONSE', 'UNKNOWN_MODEL', 'AUTH'];
 
     // #273: keep the settings list item mounted if the section throws.
+        const bestEffort = (label, fn) => {
+          try { return fn(); } catch (err) {
+            try { console.debug('[dsh-key-rotation] best-effort ' + label, err); } catch { /* console unavailable */ }
+            return undefined;
+          }
+        };
     class KeyRotationErrorBoundary extends React.Component {
       constructor(props) {
         super(props);
@@ -316,7 +322,7 @@ window.__ModuleLoader__.load({
         return { error };
       }
       componentDidCatch(error, info) {
-        try { console.error('[dsh-key-rotation] settings card crashed', error, info); } catch (_) {}
+        bestEffort('error-boundary.log', () => { console.error('[dsh-key-rotation] settings card crashed', error, info); });
       }
       render() {
         if (this.state.error) {
@@ -333,7 +339,7 @@ window.__ModuleLoader__.load({
       }
     }
 
-    /** Опрос статуса ротации, пока раздел настроек открыт (smart polling). */
+    /** Poll rotation status while the settings section is open (smart polling). */
     function useRotationStatus() {
       const [byProvider, setByProvider] = React.useState({});
       React.useEffect(() => {
@@ -348,7 +354,7 @@ window.__ModuleLoader__.load({
               for (const entry of data.providers) map[entry.provider] = entry;
               setByProvider(map);
             })
-            .catch(() => { /* статус необязателен: карточка остаётся редактором */ });
+            .catch(() => { /* status is optional: card stays a working editor */ });
         };
         pull();
         const id = setInterval(pull, 4000);
@@ -363,7 +369,7 @@ window.__ModuleLoader__.load({
       return byProvider;
     }
 
-    /** Последний probe-результат по каждому ключу (#219): /sandbox-cache (smart polling). */
+    /** Latest probe result per key (#219): /sandbox-cache (smart polling). */
     function useProbeCache() {
       const [cache, setCache] = React.useState({});
       React.useEffect(() => {
@@ -373,7 +379,7 @@ window.__ModuleLoader__.load({
           fetch('/dsh-key-rotation/sandbox-cache', { headers: { accept: 'application/json' } })
             .then((r) => (r.ok ? r.json() : null))
             .then((data) => { if (alive && data) setCache(data); })
-            .catch(() => { /* кэш не критичен: карточка работает и без него */ });
+            .catch(() => { /* cache is non-critical: card works without it */ });
         };
         pull();
         const id = setInterval(pull, 4000);
@@ -397,10 +403,9 @@ window.__ModuleLoader__.load({
       return t('hoursAgo').replace('{n}', String(Math.round(sec / 3600)));
     }
 
-    // Разметка карточки: сетка, а не набор inline-стилей. Фиксированные ширины
-    // здесь уже приводили к тому, что имя ключа обрезалось, а кнопки наезжали
-    // на поле значения, поэтому имя занимает свою строку, а служебная строка
-    // под ним ужимается сама.
+    // Card layout uses a grid, not ad-hoc inline widths. Fixed widths used to
+    // clip key names and collide actions with the value field, so the name owns
+    // its own row and the meta row shrinks on its own.
     const CARD_CSS = [
       '.krot{display:flex;flex-direction:column;gap:20px;max-width:960px;padding:6px 0 24px;box-sizing:border-box}',
       '.krot-header{display:flex;flex-direction:column;gap:8px;padding-bottom:16px;border-bottom:1px solid var(--dsw-alias-border-l2)}',
@@ -408,7 +413,7 @@ window.__ModuleLoader__.load({
       '.krot-page-sub{font-size:13px;color:var(--dsw-alias-label-secondary);line-height:1.5}',
       '.krot p{margin:0}',
       '.krot-hint{font-size:12px;color:var(--dsw-alias-label-secondary);line-height:1.4}',
-      '.krot-err{font-size:13px;color:var(--dsw-alias-state-error-primary);padding:10px 14px;border-radius:8px;background:rgba(239,68,68,0.1);display:flex;align-items:center;gap:8px}',
+      '.krot-err{font-size:13px;color:var(--dsw-alias-state-error-primary);padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 10%, transparent);display:flex;align-items:center;gap:8px}',
       '.krot-label{font-size:13px;font-weight:500;color:var(--dsw-alias-label-primary)}',
       '.krot-field{display:flex;flex-direction:column;gap:6px}',
       '.krot-in{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;height:36px;font-family:inherit;min-width:0;width:100%;box-sizing:border-box;transition:border-color .15s ease}',
@@ -431,15 +436,15 @@ window.__ModuleLoader__.load({
       '.krot-load-legend{display:flex;flex-wrap:wrap;gap:8px;margin-top:6px;font-size:11px}',
       '.krot-load-item{display:inline-flex;align-items:center;gap:4px}',
       '.krot-load-dot{width:7px;height:7px;border-radius:50%}',
-      '.krot-modal-backdrop{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,0.55);z-index:9999;display:flex;align-items:center;justify-content:center;backdrop-filter:blur(2px)}',
-      '.krot-modal-card{width:90%;max-width:420px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;box-shadow:0 12px 36px rgba(0,0,0,0.28);padding:20px;display:flex;flex-direction:column;gap:12px}',
+      '.krot-modal-backdrop{position:fixed;top:0;left:0;right:0;bottom:0;background:var(--dsw-alias-bg-overlay, color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 55%, transparent));z-index:9999;display:flex;align-items:center;justify-content:center;backdrop-filter:blur(2px)}',
+      '.krot-modal-card{width:90%;max-width:420px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;box-shadow:0 12px 36px color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 28%, transparent);padding:20px;display:flex;flex-direction:column;gap:12px}',
       '.krot-modal-title{font-size:16px;font-weight:600;color:var(--dsw-alias-label-primary)}',
       '.krot-modal-desc{font-size:13px;color:var(--dsw-alias-label-secondary);line-height:1.45}',
       '.krot-modal-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:8px}',
       '.krot-badge{font-size:12px;padding:3px 10px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);display:inline-flex;align-items:center;gap:5px;font-weight:500;white-space:nowrap}',
-      '.krot-badge-ok{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary);background:rgba(16,185,129,0.08)}',
-      '.krot-badge-warn{border-color:var(--dsw-alias-state-warning-primary);color:var(--dsw-alias-state-warning-primary);background:rgba(245,158,11,0.08)}',
-      '.krot-badge-bad{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary);background:rgba(239,68,68,0.08)}',
+      '.krot-badge-ok{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary);background:color-mix(in srgb, var(--dsw-alias-state-success-primary, #10b981) 8%, transparent)}',
+      '.krot-badge-warn{border-color:var(--dsw-alias-state-warning-primary);color:var(--dsw-alias-state-warning-primary);background:color-mix(in srgb, var(--dsw-alias-state-warning-primary, #f59e0b) 8%, transparent)}',
+      '.krot-badge-bad{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary);background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 8%, transparent)}',
       '.krot-prov{display:flex;flex-direction:column;gap:12px;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-2);padding:14px 16px}',
       '.krot-prov-head{display:flex;gap:10px;align-items:center;flex-wrap:wrap}',
       '.krot-prov-head select{flex:1;min-width:180px}',
@@ -457,21 +462,22 @@ window.__ModuleLoader__.load({
       '.krot-btn:hover:not(:disabled){background:var(--dsw-alias-bg-layer-4,var(--dsw-alias-bg-layer-2));border-color:var(--dsw-alias-label-dimmed,var(--dsw-alias-border-l2))}',
       '.krot-btn-primary,.krot-save{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3);border-color:transparent;font-weight:600}',
       '.krot-btn-primary:hover:not(:disabled),.krot-save:hover:not(:disabled){background:var(--dsw-alias-label-primary)!important;color:var(--dsw-alias-bg-layer-3)!important;opacity:0.88}',
-      '.krot-btn-danger{color:var(--dsw-alias-state-error-primary);border-color:rgba(239,68,68,0.3)}',
-      '.krot-btn-danger:hover:not(:disabled){background:rgba(239,68,68,0.12)!important;border-color:rgba(239,68,68,0.5)}',
+      '.krot-btn-danger{color:var(--dsw-alias-state-error-primary);border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 30%, transparent)}',
+      '.krot-btn-danger:hover:not(:disabled){background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 12%, transparent)!important;border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 50%, transparent)}',
       '.krot-btn:disabled{opacity:0.45;cursor:not-allowed}',
       '.krot-foot{display:flex;gap:10px;align-items:center;flex-wrap:wrap}',
       '.krot-filter-bar{display:flex;gap:8px;margin:4px 0 10px;flex-wrap:wrap}',
       '.krot-pill{appearance:none;background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:4px 12px;font-size:12px;font-weight:500;color:var(--dsw-alias-label-secondary);cursor:pointer;transition:all .15s ease}',
       '.krot-pill:hover{background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary)}',
       '.krot-pill-active{background:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)!important;font-weight:600}',
-      '.krot-pill-warn{border-color:rgba(245,158,11,0.3);color:var(--dsw-alias-state-warning-primary)}',
-      '.krot-pill-err{border-color:rgba(239,68,68,0.3);color:var(--dsw-alias-state-error-primary)}',
-      '.krot-alert-ok{padding:10px 14px;border-radius:8px;background:rgba(16,185,129,0.1);color:var(--dsw-alias-state-success-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
-      '.krot-alert-bad{padding:10px 14px;border-radius:8px;background:rgba(239,68,68,0.1);color:var(--dsw-alias-state-error-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
+      '.krot-pill-warn{border-color:color-mix(in srgb, var(--dsw-alias-state-warning-primary, #f59e0b) 30%, transparent);color:var(--dsw-alias-state-warning-primary)}',
+      '.krot-pill-err{border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 30%, transparent);color:var(--dsw-alias-state-error-primary)}',
+      '.krot-alert-ok{padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-success-primary, #10b981) 10%, transparent);color:var(--dsw-alias-state-success-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
+      '.krot-alert-bad{padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 10%, transparent);color:var(--dsw-alias-state-error-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
       '.krot-event-stream{display:flex;flex-direction:column;gap:6px;margin-top:8px;padding:10px 12px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:8px}',
       '.krot-event-row{display:flex;align-items:center;gap:8px;font-size:12px;padding:4px 0;border-bottom:1px solid var(--dsw-alias-border-l1)}',
       '.krot-event-time{font-family:ui-monospace,Menlo,Consolas,monospace;color:var(--dsw-alias-label-tertiary);font-size:11px}',
+      ':root{--krot-chart-4:var(--dsw-alias-state-brand-primary);--krot-chart-5:var(--dsw-alias-state-error-primary);--krot-chart-6:var(--dsw-alias-state-success-primary)}',
       '.krot-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none}',
       '.krot-card-header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;display:flex;align-items:center;gap:12px;padding:14px 16px}',
       '.krot-card-head-text{display:flex;flex-direction:column;flex:1;gap:4px;min-width:0}',
@@ -481,7 +487,7 @@ window.__ModuleLoader__.load({
       '.krot-card-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding:16px 0 8px}',
       '.krot-header-chip{display:inline-flex;align-items:center;gap:6px;height:26px;padding:0 10px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font-size:12px;font-weight:600;cursor:pointer;position:relative;user-select:none;transition:all .15s ease}',
       '.krot-header-chip:hover{background:var(--dsw-alias-interactive-bg-hover,var(--dsw-alias-bg-layer-3));border-color:var(--dsw-alias-border-l1);transform:translateY(-0.5px)}',
-      '.krot-popover{position:absolute;top:calc(100% + 6px);right:0;z-index:10000;min-width:220px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;padding:12px 14px;box-shadow:0 16px 40px rgba(0,0,0,.45),0 2px 8px rgba(0,0,0,.15);backdrop-filter:blur(16px);-webkit-backdrop-filter:blur(16px);display:flex;flex-direction:column;gap:8px;text-align:left}',
+      '.krot-popover{position:absolute;top:calc(100% + 6px);right:0;z-index:10000;min-width:220px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;padding:12px 14px;box-shadow:0 16px 40px color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 45%, transparent),0 2px 8px color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 15%, transparent);backdrop-filter:blur(16px);-webkit-backdrop-filter:blur(16px);display:flex;flex-direction:column;gap:8px;text-align:left}',
       '.krot-pop-title{font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--dsw-alias-label-secondary)}',
       '.krot-pop-row{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:4px 0}',
       '.krot-pop-name{font-size:13px;font-weight:600;color:var(--dsw-alias-label-primary);display:flex;align-items:center;gap:8px}',
@@ -499,13 +505,13 @@ window.__ModuleLoader__.load({
     }
 
     /**
-     * Имя переменной под новый ключ.
+     * Env-var name for a newly added key.
      *
-     * Пользователь его больше не печатает: первый ключ провайдера получает имя
-     * вида <PROVIDER>_API_KEY, следующие — тот же корень с суффиксом _2, _3…
-     * Корень берётся у уже существующих ключей, чтобы вручную заведённые имена
-     * не ломались, и проверяется на занятость по ВСЕМ провайдерам — иначе два
-     * провайдера незаметно делили бы одну учётную запись.
+     * Users no longer type it: the first key of a provider becomes
+     * <PROVIDER>_API_KEY, later keys reuse that root with _2, _3… suffixes.
+     * The root is taken from existing keys so hand-made names keep working,
+     * and uniqueness is checked across ALL providers — otherwise two providers
+     * would silently share one credential.
      */
     // nextKeyRef also in lib/client-helpers.js
     function nextKeyRef(providerId, existingKeys, allRefs) {
@@ -650,7 +656,7 @@ window.__ModuleLoader__.load({
           cancelAnimationFrame(id);
           const prev = modalReturnFocusRef.current;
           if (prev && typeof prev.focus === 'function') {
-            try { prev.focus(); } catch (_) {}
+            bestEffort('modal.returnFocus', () => { prev.focus(); });
           }
         };
       }, [confirmModal]);
@@ -885,8 +891,7 @@ window.__ModuleLoader__.load({
         stashUndo({ type: 'provider', index: pIndex, entry: arr[pIndex] });
         return { ...cur, providers: arr.filter((_, i) => i !== pIndex) };
       });
-      // Порядок ключей = порядок попыток, поэтому его надо менять кнопками,
-      // а не перепечатыванием имён.
+      // Key order is attempt order — move it with buttons, do not retype names.
       const moveKey = (pIndex, kIndex, delta) => setField((cur) => {
         const providers = [...(cur.providers ?? [])];
         const entry = { ...(providers[pIndex] ?? {}) };
@@ -921,8 +926,8 @@ window.__ModuleLoader__.load({
         return { ...cur, providers };
       });
 
-      // Коды из конфига, которых нет в известном списке, показываем тоже:
-      // иначе галочки молча выбросили бы чужое правило при первом сохранении.
+      // Config codes missing from the known list still render as checked items;
+      // otherwise the checkboxes would silently drop a custom rule on first save.
       const selectedCodes = new Set(Array.isArray(val.switchCodes) ? val.switchCodes : []);
       const codeList = [...KNOWN_CODES, ...[...selectedCodes].filter((c) => !KNOWN_CODES.includes(c))];
       const toggleCode = (code, on) => setField((cur) => {
@@ -992,8 +997,8 @@ window.__ModuleLoader__.load({
         title: (opts && opts.title) || undefined,
       }, labelText);
 
-      // Точка состояния ключа: цвет и подпись читаются с одного взгляда,
-      // а «ключ не найден» ловит опечатку в имени env, которая иначе молчит.
+      // Key state dot: color and label read at a glance; "key not found"
+      // catches an env-name typo that would otherwise stay silent.
       const keyStatus = (providerId, ref) => {
         const hit = keyInfo(providerId, ref);
         if (!hit) return null;
@@ -1062,8 +1067,7 @@ window.__ModuleLoader__.load({
           const typed = secretDraft[rowKey];
           const fromEnv = Boolean(info && info.source === 'env');
 
-          // Имя ключа занимает свою строку целиком: раньше оно обрезалось и
-          // соседние ключи выглядели одинаково.
+          // Key name owns a full row so neighbouring keys stay distinguishable.
           const nameRow = [
             h('span', { className: 'krot-num', key: 'n' }, String(kIndex + 1)),
             h('span', { key: 'i', className: 'krot-name', title: key + ' (click to copy)', style: { cursor: 'copy' }, onClick: () => {
@@ -1204,13 +1208,13 @@ window.__ModuleLoader__.load({
           });
           const total = keyUsages.reduce((acc, x) => acc + x.usage, 0);
           const palette = [
-            'var(--dsw-alias-state-brand-primary, #6366f1)',
-            'var(--dsw-alias-state-success-primary, #10b981)',
-            'var(--dsw-alias-state-warning-primary, #f59e0b)',
-            'var(--dsw-alias-state-info-primary, #3b82f6)',
-            '#8b5cf6',
-            '#ec4899',
-            '#14b8a6',
+            'var(--dsw-alias-state-brand-primary)',
+            'var(--dsw-alias-state-success-primary)',
+            'var(--dsw-alias-state-warning-primary)',
+            'var(--dsw-alias-state-info-primary)',
+            'var(--krot-chart-4)',
+            'var(--krot-chart-5)',
+            'var(--krot-chart-6)',
           ];
           return h('div', { className: 'krot-load-chart' },
             h('div', { className: 'krot-load-header' },
@@ -1311,7 +1315,8 @@ window.__ModuleLoader__.load({
           filterBar,
           loadChart,
           h('div', { className: 'krot-keys' }, keyRows),
-          h('div', { className: 'krot-foot' },
+          h(UpdaterSection, { t }),
+      h('div', { className: 'krot-foot' },
             btn(t('addKey'), () => addKey(pIndex), { title: t('addKeyTitle') }),
             switchesLine,
             budgetLine,
@@ -1710,7 +1715,72 @@ window.__ModuleLoader__.load({
       // Collapsible card in Settings -> Plugins -> Plugin settings
       // (settings.plugin.item), matching Model Sync / Spendmeter / Vision Bridge.
       // key MUST equal the settings namespace (NS), else the tab silently skips it.
-      function KeyRotationCard(props) {
+      
+  function UpdaterSection({ t }) {
+    const [state, setState] = React.useState({ phase: 'idle', current: '', latest: '', message: '' });
+    const load = React.useCallback(async () => {
+      setState((s) => ({ ...s, phase: 'loading', message: '' }));
+      try {
+        const res = await fetch('/api/dsh-key-rotation/update', { headers: { 'x-dsh-plugin-update': '1' } });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data?.error?.message || t('updateFailed'));
+        setState({
+          phase: data.updateAvailable ? 'available' : 'current',
+          current: data.currentVersion || '',
+          latest: data.latestVersion || '',
+          message: data.updateAvailable ? t('updateAvailable') : t('updateNone'),
+        });
+      } catch (e) {
+        setState({ phase: 'error', current: '', latest: '', message: e?.message || t('updateFailed') });
+      }
+    }, [t]);
+    React.useEffect(() => { load(); }, [load]);
+    const run = async () => {
+      setState((s) => ({ ...s, phase: 'running', message: t('updateRunning') }));
+      try {
+        const res = await fetch('/api/dsh-key-rotation/update', {
+          method: 'POST',
+          headers: { 'x-dsh-plugin-update': '1', 'content-type': 'application/json' },
+        });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data?.error?.message || t('updateFailed'));
+        setState({
+          phase: 'done',
+          current: data.currentVersion || '',
+          latest: data.installedVersion || data.latestVersion || '',
+          message: t('updateRestart'),
+        });
+      } catch (e) {
+        setState({ phase: 'error', current: '', latest: '', message: e?.message || t('updateFailed') });
+      }
+    };
+    return h('div', { className: 'krot-update', style: { marginTop: 12, paddingTop: 12, borderTop: '1px solid var(--dsw-alias-border-l2)' } },
+      h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
+        h('span', { style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary)' } },
+          t('currentVersion') + ': ' + (state.current || '—')),
+        state.latest ? h('span', { style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary)' } },
+          t('latestVersion') + ': ' + state.latest) : null,
+        h('button', {
+          className: 'krot-btn',
+          type: 'button',
+          disabled: state.phase === 'running' || state.phase === 'loading',
+          onClick: load,
+        }, t('updateCheck')),
+        state.phase === 'available' ? h('button', {
+          className: 'krot-btn krot-btn-primary',
+          type: 'button',
+          disabled: state.phase === 'running',
+          onClick: run,
+        }, t('updateRun')) : null,
+      ),
+      state.message ? h('div', {
+        className: state.phase === 'error' ? 'krot-alert-bad' : state.phase === 'done' ? 'krot-alert-ok' : '',
+        style: { marginTop: 8, fontSize: 12 },
+      }, state.message) : null,
+    );
+  }
+
+  function KeyRotationCard(props) {
         const locale = useLocale();
         const t = resolveT(props);
         const [open, setOpen] = React.useState(false);
@@ -1733,11 +1803,31 @@ window.__ModuleLoader__.load({
             KeyRotationCard,
           ));
       } catch (e) {
-        try { console.error('[dsh-key-rotation] settings.plugin.item register failed', e); } catch (_) {}
+        bestEffort('slots.register.log', () => { console.error('[dsh-key-rotation] settings.plugin.item register failed', e); });
       }
     }
 
     module.exports = { apply, inject: ['slots', 'locale', 'settingsScope'] };
     return module.exports;
   },
+    updateCheck: 'Check for updates',
+    updateAvailable: 'Update available',
+    updateNone: 'Plugin is up to date',
+    updateRun: 'Update now',
+    updateRestart: 'Update installed. Restart DSH to load the new version.',
+    updateRunning: 'Updating…',
+    updateFailed: 'Update failed',
+    currentVersion: 'Current version',
+    latestVersion: 'Latest version',
+
+    updateCheck: '检查更新',
+    updateAvailable: '有可用更新',
+    updateNone: '插件已是最新版本',
+    updateRun: '立即更新',
+    updateRestart: '更新已安装。请重启 DSH 以加载新版本。',
+    updateRunning: '更新中…',
+    updateFailed: '更新失败',
+    currentVersion: '当前版本',
+    latestVersion: '最新版本',
+
 });

package/lib/clock.js

@@ -20,5 +20,3 @@ export function nowMono() {
   return performance.timeOrigin + performance.now();
 }
 
-/** Default clock injectable into pure helpers. */
-export const defaultClock = { nowWall, nowMono };

package/lib/error-taxonomy.js

@@ -61,6 +61,3 @@ export function classifyFailure(failureOrPayload) {
 }
 
 /** True when classification says switch to next key. */
-export function shouldSwitch(failureOrPayload) {
-  return classifyFailure(failureOrPayload).action === 'switch';
-}

package/lib/http-bridge.js

@@ -78,13 +78,6 @@ export function providerCatalog(ctx, cloneIds) {
   return out;
 }
 
-export function guardLocal(req, res, label) {
-  if (!isTrustedBridgeRequest(req)) {
-    json(res, 403, { error: { code: 'forbidden', message: `dsh-key-rotation: ${label} is local-only` } });
-    return false;
-  }
-  return true;
-}
 
 export function scanForLiveSecrets(section) {
   const masked = structuredClone(section);

package/lib/index.js

@@ -52,6 +52,9 @@ import { safeParseJson } from './atomic-io.js';
 import { registerOpsRoutes } from './routes-ops.js';
 import { StatePersistence, resolveStatePath } from './persistence.js';
 import path from 'node:path';
+import { registerPluginUpdater } from './plugin-updater.js'
+import { notifySwitch, notifyExhaustion, pushEvent } from './notify-events.js';
+export { notifySwitch, notifyExhaustion };
 
 /** The llm-pi-ai namespace whose provider profiles map providers to pools. */
 const PIAI_NS = 'llm-pi-ai';
@@ -62,40 +65,12 @@ let rotationDisabled = false;
 // #207/#208 dedupe maps: one notification per key/window per day.
 const expiryNotifiedAt = new Map();
 const budgetNotifiedAt = new Map();
-const switchNotifiedAt = new Map();
 const lowHealthNotifiedAt = new Map();
 const sloNotifiedAt = new Map();
 const DAY_MS = 86400000;
 
 // #216: one webhook per switch, deduped to at most one message per provider
 // per switchNotifyThrottleMs. Extracted for testability.
-export function notifySwitch(runtime, pool, info, hooks = { webhookSender, now: () => Date.now() }) {
-  if (!runtime?.notifyWebhook) return;
-  const throttle = Math.max(0, runtime.switchNotifyThrottleMs ?? 60000);
-  const last = switchNotifiedAt.get(info.provider) ?? 0;
-  const now = hooks.now();
-  if (now - last < throttle) return;
-  switchNotifiedAt.set(info.provider, now);
-  // #263: non-blocking — enqueue never awaits webhook I/O
-  const send = hooks.notifyQueue
-    ? (url, payload) => { hooks.notifyQueue.enqueue(url, payload); return { sent: true, queued: true }; }
-    : (url, payload) => hooks.webhookSender.send(url, payload);
-  send(runtime.notifyWebhook, {
-    title: `Key switched: ${info.provider}`,
-    text: `${info.from} failed (${info.code}) - next key in pool`,
-    provider: info.provider,
-    kind: 'switch',
-    from: info.from,
-    code: info.code,
-    at: info.at,
-  });
-}
-const MAX_EVENTS = 50;
-function pushEvent(pool, ref, reason, cooldownMs, type) {
-  const ev = { at: Date.now(), ref, reason: String(reason ?? 'UNKNOWN'), cooldownMs, type: type ?? 'fail' };
-  pool.state.events.push(ev);
-  if (pool.state.events.length > MAX_EVENTS) pool.state.events.shift();
-}
 
 
 // Fallback classification by failure message. pi-ai surfaces many real quota /
@@ -362,14 +337,17 @@ export function apply(ctx, config = {}) {
           if (!val) return { ok: false };
           return runner.probeModels(ref, val);
         });
-      } catch (_) {}
+      } catch (e) { ctx.logger?.warn?.('[dsh-key-rotation] auto-unbreak failed', e); }
     }, intervalMs);
     if (typeof timer.unref === 'function') timer.unref();
     return () => clearInterval(timer);
   }, 'dsh-key-rotation: auto-unbreak');
 
   ctx.effect(() => {
-    const timer = setInterval(() => { try { schedulePersist(); } catch (_) {} }, 15000);
+    const timer = setInterval(() => {
+      try { schedulePersist(); }
+      catch (e) { ctx.logger?.warn?.('[dsh-key-rotation] periodic persist failed', e); }
+    }, 15000);
     if (typeof timer.unref === 'function') timer.unref();
     return () => {
       clearInterval(timer);
@@ -383,7 +361,9 @@ export function apply(ctx, config = {}) {
           }
           statePersistence.dispose();
         }
-      } catch (_) {}
+      } catch (e) {
+        ctx.logger?.warn?.('[dsh-key-rotation] dispose persist failed', e);
+      }
     };
   }, 'dsh-key-rotation: state persistence');
   // Periodic sweep of expired cooldowns — keeps health probe cheap and avoids waiting for next user request
@@ -857,6 +837,7 @@ export function apply(ctx, config = {}) {
   // the resolve patch hands out the next key on each dispatch.
   // Operational routes (status/usage/snapshot/key/import/test/health/webhook) (#253)
   registerOpsRoutes(ctx, {
+
     buildRuntime,
     latencyHistogram,
     lastTestCache,
@@ -868,6 +849,16 @@ export function apply(ctx, config = {}) {
     quotaStore,
   });
 
+  // One-click plugin updater (#307). GET status / POST install exact registry version.
+  ctx.effect(() => {
+    if (typeof ctx.webServer?.register !== 'function') return;
+    registerPluginUpdater(ctx, {
+      endpoint: '/api/dsh-key-rotation/update',
+      packageName: '@goodandready/dsh-key-rotation',
+      manifestUrl: new URL('../package.json', import.meta.url),
+    });
+  }, 'dsh-key-rotation: plugin updater');
+
   ctx.effect(() => ctx.on('llm/stream', (options, next) => {
     if (options[MARKER]) return next();
     if (rotationDisabled) return next(); // #199: disabled via webhook action
@@ -930,29 +921,4 @@ export function apply(ctx, config = {}) {
 // Notify on exhaustion: webhook notification.
 // Extracted at module scope for testability. No I/O outside the injected hooks.
 // ponytail: thresholds and URLs are runtime-resolved per call, so changing Config is reflected immediately.
-export function notifyExhaustion(runtime, pool, options, hooks = { webhookSender }) {
-  if (!runtime || !pool) return;
-  const count = pool.state ? (pool.state.exhaustionCount ?? 0) : 0;
-  if (count <= 0) return;
-  try {
-    if (runtime.notifyWebhook && count >= (runtime.notifyThreshold ?? 0)) {
-      const token = runtime.webhookActionToken ?? '';
-      const payload = {
-        title: `Key pool exhausted: ${options.provider}`,
-        text: `${count} exhaustion(s); keys: ${(pool.refs ?? []).join(', ')}`,
-        provider: options.provider,
-        exhaustionCount: count,
-        at: pool.state.lastExhaustionAt,
-        keys: pool.refs,
-        actionToken: token || undefined,
-        actions: token ? [
-          { id: `reset-${options.provider}`, label: 'Reset cooldown' },
-          { id: `pause-${options.provider}`, label: 'Pause 1h' },
-        ] : undefined,
-      };
-      if (hooks.notifyQueue) hooks.notifyQueue.enqueue(runtime.notifyWebhook, payload);
-      else hooks.webhookSender.send(runtime.notifyWebhook, payload);
-    }
-  } catch (_) { /* ponytail: never crash rotate() */ }
-}
 

package/lib/notify-events.js

@@ -0,0 +1,64 @@
+// lib/notify-events.js — switch/exhaustion notify helpers and pool event ring (#312).
+// Extracted from index.js for size and testability; behavior unchanged.
+
+import { WebhookSender } from './webhook.js';
+
+const switchNotifiedAt = new Map();
+const MAX_EVENTS = 50;
+// Default sender for callers that omit hooks (matches former index.js module scope).
+const defaultWebhookSender = new WebhookSender({ fetchImpl: globalThis.fetch });
+
+export function notifySwitch(runtime, pool, info, hooks = { webhookSender: defaultWebhookSender, now: () => Date.now() }) {
+  if (!runtime?.notifyWebhook) return;
+  const throttle = Math.max(0, runtime.switchNotifyThrottleMs ?? 60000);
+  const last = switchNotifiedAt.get(info.provider) ?? 0;
+  const now = hooks.now();
+  if (now - last < throttle) return;
+  switchNotifiedAt.set(info.provider, now);
+  // #263: non-blocking — enqueue never awaits webhook I/O
+  const send = hooks.notifyQueue
+    ? (url, payload) => { hooks.notifyQueue.enqueue(url, payload); return { sent: true, queued: true }; }
+    : (url, payload) => hooks.webhookSender.send(url, payload);
+  send(runtime.notifyWebhook, {
+    title: `Key switched: ${info.provider}`,
+    text: `${info.from} failed (${info.code}) - next key in pool`,
+    provider: info.provider,
+    kind: 'switch',
+    from: info.from,
+    code: info.code,
+    at: info.at,
+  });
+}
+
+export function pushEvent(pool, ref, reason, cooldownMs, type) {
+  const ev = { at: Date.now(), ref, reason: String(reason ?? 'UNKNOWN'), cooldownMs, type: type ?? 'fail' };
+  pool.state.events.push(ev);
+  if (pool.state.events.length > MAX_EVENTS) pool.state.events.shift();
+}
+
+export function notifyExhaustion(runtime, pool, options, hooks = { webhookSender: defaultWebhookSender }) {
+  if (!runtime || !pool) return;
+  const count = pool.state ? (pool.state.exhaustionCount ?? 0) : 0;
+  if (count <= 0) return;
+  try {
+    if (runtime.notifyWebhook && count >= (runtime.notifyThreshold ?? 0)) {
+      const token = runtime.webhookActionToken ?? '';
+      const payload = {
+        title: `Key pool exhausted: ${options.provider}`,
+        text: `${count} exhaustion(s); keys: ${(pool.refs ?? []).join(', ')}`,
+        provider: options.provider,
+        exhaustionCount: count,
+        at: pool.state.lastExhaustionAt,
+        keys: pool.refs,
+        actionToken: token || undefined,
+        actions: token ? [
+          { id: `reset-${options.provider}`, label: 'Reset cooldown' },
+          { id: `pause-${options.provider}`, label: 'Pause 1h' },
+        ] : undefined,
+      };
+      if (hooks.notifyQueue) hooks.notifyQueue.enqueue(runtime.notifyWebhook, payload);
+      else hooks.webhookSender.send(runtime.notifyWebhook, payload);
+    }
+  } catch (_) { /* ponytail: never crash rotate() */ }
+}
+