@goodandready/dsh-subscriptions 0.6.8 → 0.6.9

package/README.md

@@ -260,6 +260,16 @@ Supports Anthropic's adaptive thinking (`thinking: { type: "adaptive" }`) and re
 
 ---
 
+## 🚀 One-Click Plugin Updater & Stability Hardening (Added in v0.6.9)
+
+- **Host One-Click Updater**: Automatic in-place updater mounted at `/dsh-subscriptions/update`, checking the npm registry for newer releases and executing single-flight installation via the host DSH CLI (`dsh plugin add --config.minimumReleaseAge=0`).
+- **Security & Origin Protection**: Updater endpoints enforce strict loopback address checks (supporting IPv4 `127.0.0.1`, IPv6 `::1`, `localhost`), `x-dsh-plugin-update` header verification, and same-origin validation to prevent unauthorized updates.
+- **Header Badge & UI Action**: The settings header bar displays current plugin version, an update warning badge when a new release is detected, and an instant "Update" button with live restart countdown.
+- **Network Timeout Hardening**: Quota balance and smoke test probes now enforce guaranteed 15-second abort timeouts (`AbortSignal.timeout(15_000)`), preventing hanging sockets during vendor outages.
+- **Parameter Normalization & Deduplication**: Unified support for `provider || vendor` and `index || accountIndex` aliases in check endpoints, and deduplicated threshold notification loops.
+
+---
+
 ## 🌐 Localization
 
 The plugin source language is English only. Russian and other translations are provided at runtime by separate language plugins (for example the russification plugin), which translate the registered locale keys - the package itself ships no bundled translations (Changed in 0.6.1).

package/README.ru.md

@@ -233,6 +233,16 @@ dsh-subscriptions:
 
 ---
 
+## 🚀 Обновление в один клик и повышение стабильности (Добавлено в v0.6.9)
+
+- **Встроенный апдейтер в один клик**: Фоновая проверка новых версий в npm registry и обновление на месте по маршруту `/dsh-subscriptions/update` через хостовый CLI DSH (`dsh plugin add --config.minimumReleaseAge=0`).
+- **Безопасность и защита эндпоинта**: Строгая верификация loopback-адресов (поддержка IPv4 `127.0.0.1`, IPv6 `::1`, `localhost`), валидация заголовка `x-dsh-plugin-update` и защита от CSRF/cross-origin запросов.
+- **Индикатор в шапке и кнопка обновления**: В строке состояния панели отображается текущая версия, бейдж наличия обновления и кнопка быстрого обновления («Update → vX.Y.Z») с уведомлением о перезапуске службы.
+- **Сетевые таймауты и устойчивость**: Ограничение времени ожидания запросов баланса и smoke-тестов до 15 секунд (`AbortSignal.timeout(15_000)`), предотвращающее зависание сокетов при недоступности внешних API.
+- **Нормализация параметров и дедупликация**: Поддержка алиасов параметров `provider || vendor` и `index || accountIndex` в статусных маршрутах, а также устранение дублирующего цикла нотификаций в `lib/accounts.js`.
+
+---
+
 ## 🌐 Локализация
 
 Исходный язык плагина - только английский. Русский и другие переводы во время работы предоставляют отдельные языковые плагины (например, плагин русификации), переводящие зарегистрированные ключи локали, - сам пакет не содержит встроенных переводов (Changed in 0.6.1).

package/README.zh.md

@@ -155,6 +155,16 @@ dsh plugin --profile web add @goodandready/dsh-subscriptions
 
 ---
 
+## 🚀 一键插件自更新与稳定性强化 (v0.6.9 新增)
+
+- **宿主端一键更新**: 挂载于 `/dsh-subscriptions/update` 的就地更新机制，自动对比 npm registry 最新版本并通过宿主 DSH CLI 执行单飞安装 (`dsh plugin add --config.minimumReleaseAge=0`)。
+- **安全与来源防护**: 更新接口严格校验环回地址（支持 IPv4 `127.0.0.1`、IPv6 `::1`、`localhost`）、`x-dsh-plugin-update` 请求头及同源策略，阻断未授权跨站调用。
+- **状态栏徽章与更新按钮**: 设置面板顶部状态栏显示当前插件版本，有新版本时提示告警徽章并提供一键更新按钮与重启提示。
+- **网络超时熔断**: 配额检测与冒烟测试增加 15 秒超时信号保护 (`AbortSignal.timeout(15_000)`)，防止外部服务商接口故障导致请求挂起。
+- **参数容错与逻辑去重**: 状态接口兼容 `provider || vendor` 与 `index || accountIndex` 参数别名，并消除 `lib/accounts.js` 中的重复配额通知循环。
+
+---
+
 ## 🌐 本地化
 
 插件源语言仅为英语。俄语及其他翻译由独立的语言插件（如俄化插件）在运行时对注册的本地化键进行翻译，包本身不内置翻译（Changed in 0.6.1）。

package/lib/accounts.js

@@ -268,23 +268,6 @@ export function createAccountStore({ credentials, getConfig, fetchImpl, fetchFor
             }
           }
         }
-        // Notification thresholds: 70/90/100% — fire once per window until reset.
-        if (Array.isArray(snap.windows)) {
-          for (const win of snap.windows) {
-            if (!win || !Number.isFinite(Number(win.usedPercent))) continue
-            const pct = Number(win.usedPercent)
-            const key = slot.ref + ':' + win.id
-            const prev = notifyThresholds.get(key) || 0
-            const THRESHOLDS = [70, 90, 100]
-            for (const th of THRESHOLDS) {
-              if (pct >= th && prev < th) {
-                notifyThresholds.set(key, th)
-                try { onLimitNotice && onLimitNotice(slot.provider, slot.ref, win, th) } catch {}
-                break
-              }
-            }
-          }
-        }
         const list = Array.isArray(snap.windows) ? snap.windows : null
         if (list) {
           windows.set(slot.ref, list)

package/lib/client.js

@@ -481,7 +481,14 @@ const cssId = 'dsh-subscriptions/settings.module.css'
       "instructionsTitle": "How to obtain token",
       "close": "Close",
       "reconnectRequired": "Reconnect required",
-      "manualTitle": "If the browser did not come back"
+      "manualTitle": "If the browser did not come back",
+      "updateChecking": "Checking updates…",
+      "updateUpToDate": "Up to date",
+      "updateAvailable": "Update available",
+      "updateNow": "Update",
+      "updating": "Updating…",
+      "updateSuccessRestart": "Update complete. Restarting service…",
+      "updateFailed": "Update failed"
 };
 
     const zh = {
@@ -643,7 +650,14 @@ const cssId = 'dsh-subscriptions/settings.module.css'
       "instructionsTitle": "获取令牌指引",
       "close": "关闭",
       "reconnectRequired": "需要重新连接",
-      "manualTitle": "若浏览器未能自动跳转回调"
+      "manualTitle": "若浏览器未能自动跳转回调",
+      "updateChecking": "检查更新中…",
+      "updateUpToDate": "已是最新版本",
+      "updateAvailable": "有新版本可用",
+      "updateNow": "立即更新",
+      "updating": "正在更新…",
+      "updateSuccessRestart": "更新成功，服务重启中…",
+      "updateFailed": "更新失败"
 };
     // #51: live countdown to the quota window reset (account.quota.resetAt).
                 function cleanErrorMessage(raw) {
@@ -831,6 +845,43 @@ const cssId = 'dsh-subscriptions/settings.module.css'
       const [hostPing, setHostPing] = React.useState({ ok: true, latencyMs: null })
       const [telemetry, setTelemetry] = React.useState(null)
       const [smoke, setSmoke] = React.useState({ testing: false, result: null })
+      const [updater, setUpdater] = React.useState({ checking: false, updating: false, status: null, message: '' })
+
+      const checkUpdater = () => {
+        setUpdater((u) => Object.assign({}, u, { checking: true, message: '' }))
+        return fetch('/dsh-subscriptions/update', { cache: 'no-store' })
+          .then((res) => res.json())
+          .then((data) => {
+            setUpdater((u) => Object.assign({}, u, { checking: false, status: data }))
+            return data
+          })
+          .catch((e) => {
+            setUpdater((u) => Object.assign({}, u, { checking: false, message: cleanErrorMessage(e.message || e) }))
+          })
+      }
+
+      const performUpdate = async () => {
+        setUpdater((u) => Object.assign({}, u, { updating: true, message: '' }))
+        try {
+          const res = await fetch('/dsh-subscriptions/update', {
+            method: 'POST',
+            headers: {
+              'Content-Type': 'application/json',
+              'x-dsh-plugin-update': '1',
+            },
+          })
+          const data = await res.json().catch(() => ({}))
+          if (!res.ok || !data.ok) {
+            throw new Error((data && data.error && (data.error.message || data.error.code)) || ('HTTP ' + res.status))
+          }
+          setUpdater((u) => Object.assign({}, u, { updating: false, message: t('updateSuccessRestart') }))
+          setTimeout(() => {
+            window.location.reload()
+          }, 3500)
+        } catch (e) {
+          setUpdater((u) => Object.assign({}, u, { updating: false, message: (t('updateFailed') + ': ' + cleanErrorMessage(e.message || e)) }))
+        }
+      }
 
       const reloadTelemetry = () => {
         fetch('/dsh-subscriptions/telemetry', { cache: 'no-store' })
@@ -886,6 +937,7 @@ const cssId = 'dsh-subscriptions/settings.module.css'
       React.useEffect(() => {
         let alive = true
         reload().catch((e) => { if (alive) setErr(String(e && e.message ? e.message : e)) })
+        checkUpdater().catch(() => {})
         return () => { alive = false }
       }, [])
 
@@ -1107,14 +1159,38 @@ const cssId = 'dsh-subscriptions/settings.module.css'
             React.createElement('span', {
               className: 'dsub-badge dsub-badge-neutral'
             }, 'Pool: ' + accounts.length + ' accounts'),
+            updater.status && updater.status.updateAvailable
+              ? React.createElement('span', { className: 'dsub-badge dsub-badge-warn' },
+                  '⬆ ' + t('updateAvailable') + ' (v' + (updater.status.latestVersion || '') + ')'
+                )
+              : (updater.status && updater.status.currentVersion
+                  ? React.createElement('span', { className: 'dsub-badge dsub-badge-neutral' },
+                      'v' + updater.status.currentVersion
+                    )
+                  : null
+                ),
+          ),
+          React.createElement('div', { className: 'dsub-row', style: { marginTop: 0, gap: '8px' } },
+            updater.status && updater.status.updateAvailable && updater.status.canAutoUpdate
+              ? React.createElement('button', {
+                  type: 'button',
+                  className: 'dsub-mini dsub-btn-primary',
+                  disabled: updater.updating,
+                  onClick: () => performUpdate(),
+                }, updater.updating ? t('updating') : (t('updateNow') + ' → v' + updater.status.latestVersion))
+              : null,
+            React.createElement('button', {
+              type: 'button',
+              className: 'dsub-mini',
+              disabled: smoke.testing,
+              onClick: () => runSmokeTest(),
+            }, smoke.testing ? t('smokeTesting') : t('runSmoke')),
           ),
-          React.createElement('button', {
-            type: 'button',
-            className: 'dsub-mini dsub-btn-primary',
-            disabled: smoke.testing,
-            onClick: () => runSmokeTest(),
-          }, smoke.testing ? t('smokeTesting') : t('runSmoke')),
         ),
+        updater.message ? React.createElement('div', {
+          className: updater.message.includes(t('updateSuccessRestart')) ? 'dsub-alert-ok' : 'dsub-alert-bad',
+          style: { marginBottom: '12px' }
+        }, updater.message) : null,
         smoke.result ? React.createElement('div', {
           className: smoke.result.ok ? 'dsub-alert-ok' : 'dsub-alert-bad',
           style: { marginBottom: '12px' }

package/lib/http.js

@@ -30,6 +30,13 @@ export function readBody(req, maxBytes = 64 * 1024) {
   })
 }
 
+export function isLoopback(value) {
+  const address = value?.toLowerCase().replace(/^\[|\]$/g, '')
+  return address === 'localhost' || address === 'localhost.' || address === '::1'
+    || address?.startsWith('127.') === true
+    || address?.startsWith('::ffff:127.') === true
+}
+
 /**
  * @param {import('node:http').IncomingMessage} request
  * @returns {boolean}

package/lib/routes/status.js

@@ -177,26 +177,27 @@ export function registerStatusRoutes(ctx, state) {
         writeJson(res, 400, { ok: false, error: { code: 'json', message: 'invalid json' } })
         return
       }
-      const provider = payload.provider
+      const provider = payload.provider || payload.vendor
+      const index = payload.index || (payload.accountIndex != null ? payload.accountIndex + 1 : 1)
       if (!isProvider(provider)) {
         writeJson(res, 200, { ok: false, provider, error: { code: 'provider', message: 'unknown provider' } })
         return
       }
       const t0 = Date.now()
-      const ref = oauthRef(provider, payload.index)
+      const ref = oauthRef(provider, index)
       const info = await store.describeRef(ref)
       if (!info.configured) {
-        writeJson(res, 200, { ok: false, provider, index: payload.index, ref, error: { code: 'not_connected', message: 'not connected' } })
+        writeJson(res, 200, { ok: false, provider, index: index, ref, error: { code: 'not_connected', message: 'not connected' } })
         return
       }
       let blob
       try { blob = await store.loadBlob(ref) } catch (e) {
-        writeJson(res, 200, { ok: false, provider, index: payload.index, ref, error: { code: 'auth', message: String(e && e.message || e) } })
+        writeJson(res, 200, { ok: false, provider, index: index, ref, error: { code: 'auth', message: String(e && e.message || e) } })
         return
       }
       try { blob = await store.ensureFresh(provider, blob, ref) } catch (e) {
         writeJson(res, 200, {
-          ok: false, provider, index: payload.index, ref,
+          ok: false, provider, index: index, ref,
           email: pmE(blob.email), label: pmL(blob.label), expiresAt: blob.expiresAt || null,
           quota: info.quota || null,
           error: { code: 'refresh', message: String(e && e.message || e) },
@@ -205,12 +206,14 @@ export function registerStatusRoutes(ctx, state) {
       }
       const vendor = getVendor(provider)
       if (typeof vendor.check !== 'function') {
-        writeJson(res, 200, { ok: true, provider, index: payload.index, ref, email: pmE(blob.email), label: pmL(blob.label), expiresAt: blob.expiresAt || null, quota: info.quota || null })
+        writeJson(res, 200, { ok: true, provider, index: index, ref, email: pmE(blob.email), label: pmL(blob.label), expiresAt: blob.expiresAt || null, quota: info.quota || null })
         return
       }
       let capturedQuota = null
-      const probeFetch = async (url, init) => {
-        const res2 = await fetch(url, init)
+      const probeFetch = async (url, init = {}) => {
+        const timeoutSignal = AbortSignal.timeout(15_000)
+        const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal
+        const res2 = await fetch(url, { ...init, signal })
         try {
           const snap = quotaSnapshot(provider, res2.headers, null, Date.now())
           if (snap) { capturedQuota = snap; store.rememberQuota(ref, snap) }
@@ -220,10 +223,10 @@ export function registerStatusRoutes(ctx, state) {
       try {
         await vendor.check(blob, vendorConfig(provider, live()), probeFetch)
         const latencyMs = Date.now() - t0;
-        writeJson(res, 200, { ok: true, provider, index: payload.index, ref, latencyMs, email: pmE(blob.email), label: pmL(blob.label), expiresAt: blob.expiresAt || null, quota: capturedQuota || info.quota || null, usagePercent: info.usagePercent ?? null })
+        writeJson(res, 200, { ok: true, provider, index: index, ref, latencyMs, email: pmE(blob.email), label: pmL(blob.label), expiresAt: blob.expiresAt || null, quota: capturedQuota || info.quota || null, usagePercent: info.usagePercent ?? null })
       } catch (e) {
         writeJson(res, 200, {
-          ok: false, provider, index: payload.index, ref,
+          ok: false, provider, index: index, ref,
           latencyMs: Date.now() - t0,
           email: pmE(blob.email), label: pmL(blob.label), expiresAt: blob.expiresAt || null,
           quota: capturedQuota || info.quota || null,
@@ -321,8 +324,10 @@ export function registerStatusRoutes(ctx, state) {
       const vendor = getVendor(provider)
       if (typeof vendor.check === 'function') {
         let capturedQuota = null
-        const probeFetch = async (url, init) => {
-          const res2 = await fetch(url, init)
+        const probeFetch = async (url, init = {}) => {
+          const timeoutSignal = AbortSignal.timeout(15_000)
+          const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal
+          const res2 = await fetch(url, { ...init, signal })
           try {
             const snap = quotaSnapshot(provider, res2.headers, null, Date.now())
             if (snap) { capturedQuota = snap; store.rememberQuota(ref, snap) }

package/lib/routes.js

@@ -1,10 +1,11 @@
 import { publicConfig } from './config-schema.js'
 import { PROVIDERS, displayName } from './refs.js'
-import { escapeHtml, writeHtml, writeJson } from './http.js'
+import { escapeHtml, isLoopback, writeHtml, writeJson } from './http.js'
 import { registerStatusRoutes } from './routes/status.js'
 import { registerOauthRoutes } from './routes/oauth.js'
 import { registerAccountsRoutes } from './routes/accounts.js'
 import { registerProxyRoutes } from './routes/proxy.js'
+import { registerPluginUpdater } from './updater.js'
 
 export function registerRoutes(ctx, state) {
   const {
@@ -22,6 +23,11 @@ export function registerRoutes(ctx, state) {
     }
   }
 
+  ctx.effect(() => registerPluginUpdater(ctx, {
+    endpoint: '/dsh-subscriptions/update',
+    packageName: '@goodandready/dsh-subscriptions',
+    manifestUrl: new URL('../package.json', import.meta.url),
+  }), 'dsh-subscriptions: /update')
 
   ctx.effect(() => ctx.webServer.register({
     kind: 'exact',
@@ -32,7 +38,8 @@ export function registerRoutes(ctx, state) {
         return
       }
       const host = (req.headers.host || '').split(':')[0]
-      if (host !== 'localhost' && host !== '127.0.0.1') {
+      const remote = req.socket?.remoteAddress
+      if (!isLoopback(host) || (remote && !isLoopback(remote))) {
         writeHtml(res, 403, '<!doctype html><meta charset="utf-8"><p>Subscriptions overview is localhost-only.</p>')
         return
       }

package/lib/updater.js

@@ -0,0 +1,260 @@
+import { spawn } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { basename, dirname, isAbsolute, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { writeJson } from './http.js'
+
+const UPDATE_HEADER = 'x-dsh-plugin-update'
+const UPDATE_TIMEOUT_MS = 10 * 60_000
+const VERSION_CACHE_MS = 5 * 60_000
+let latestCache
+
+function header(request, name) {
+  const value = request.headers?.[name]
+  return Array.isArray(value) ? value[0] : value
+}
+
+export function isLoopback(value) {
+  const address = value?.toLowerCase().replace(/^\[|\]$/g, '')
+  return address === 'localhost' || address === 'localhost.' || address === '::1'
+    || address?.startsWith('127.') === true
+    || address?.startsWith('::ffff:127.') === true
+}
+
+export function isTrustedUpdateRequest(request) {
+  const customHeader = header(request, UPDATE_HEADER)
+  if (customHeader !== '1') {
+    // In browser fetch, allow if sec-fetch-site is same-origin or same-site
+    const site = header(request, 'sec-fetch-site')
+    if (site === 'cross-site') return false
+  }
+  const remote = request.socket?.remoteAddress
+  if (remote && !isLoopback(remote)) return false
+  const origin = header(request, 'origin')
+  const host = header(request, 'host')
+  if (origin && host) {
+    try {
+      const url = new URL(origin)
+      if (url.host !== host && !isLoopback(url.hostname)) return false
+    } catch {
+      return false
+    }
+  }
+  return true
+}
+
+function validProfileName(value) {
+  return typeof value === 'string' && value !== '' && value !== '.' && value !== '..'
+    && !value.includes('/') && !value.includes('\\') && !/[\0-\x1f\x7f]/.test(value)
+}
+
+function profileNameFromArgv(argv) {
+  for (let index = 2; index < argv.length; index += 1) {
+    if (argv[index] === '--profile') return argv[index + 1]
+    if (argv[index]?.startsWith('--profile=')) return argv[index].slice('--profile='.length)
+  }
+  return argv[2] === 'web' ? 'web' : undefined
+}
+
+function findDshCliEntry() {
+  const value = process.argv[1]
+  if (value === undefined || value === '') return undefined
+  const entry = value.startsWith('file:') ? fileURLToPath(value) : resolve(process.cwd(), value)
+  if (!existsSync(entry)) return undefined
+  for (let directory = dirname(entry); ; directory = dirname(directory)) {
+    const manifestPath = resolve(directory, 'package.json')
+    if (existsSync(manifestPath)) {
+      try {
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'))
+        const bin = typeof manifest.bin === 'string'
+          ? manifest.bin
+          : typeof manifest.bin === 'object' && manifest.bin !== null
+            ? manifest.bin.dsh
+            : undefined
+        if (manifest.name === '@deepseek-ai/dsh' && typeof bin === 'string'
+          && !isAbsolute(bin) && resolve(directory, bin) === resolve(entry)) return entry
+      } catch {
+        // Continue searching parent package directories.
+      }
+    }
+    const parent = dirname(directory)
+    if (parent === directory) return undefined
+  }
+}
+
+function getRuntime() {
+  const profileDir = resolve(process.env.DSH_PROFILE_DIR
+    ?? resolve(homedir(), '.dsh', 'profiles', 'web'))
+  const selected = profileNameFromArgv(process.argv)
+  const profileName = validProfileName(selected)
+    ? selected
+    : validProfileName(basename(profileDir)) ? basename(profileDir) : 'web'
+  const cliEntry = findDshCliEntry()
+  return cliEntry === undefined ? { profileName, profileDir } : { profileName, profileDir, cliEntry }
+}
+
+export function parseSemver(value) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(value)
+  if (match === null) return undefined
+  return {
+    core: [Number(match[1]), Number(match[2]), Number(match[3])],
+    prerelease: match[4]?.split('.') ?? [],
+  }
+}
+
+function comparePrerelease(left, right) {
+  if (left.length === 0 || right.length === 0) return left.length === right.length ? 0 : left.length === 0 ? 1 : -1
+  const length = Math.max(left.length, right.length)
+  for (let index = 0; index < length; index += 1) {
+    const a = left[index]
+    const b = right[index]
+    if (a === undefined || b === undefined) return a === b ? 0 : a === undefined ? -1 : 1
+    if (a === b) continue
+    const aNumeric = /^\d+$/.test(a)
+    const bNumeric = /^\d+$/.test(b)
+    if (aNumeric && bNumeric) {
+      const aNumber = BigInt(a)
+      const bNumber = BigInt(b)
+      if (aNumber !== bNumber) return aNumber > bNumber ? 1 : -1
+      continue
+    }
+    if (aNumeric !== bNumeric) return aNumeric ? -1 : 1
+    return a > b ? 1 : -1
+  }
+  return 0
+}
+
+export function isNewerVersion(currentValue, candidateValue) {
+  const current = parseSemver(currentValue)
+  const candidate = parseSemver(candidateValue)
+  if (current === undefined || candidate === undefined) return false
+  for (let index = 0; index < 3; index += 1) {
+    if (candidate.core[index] !== current.core[index]) return candidate.core[index] > current.core[index]
+  }
+  return comparePrerelease(candidate.prerelease, current.prerelease) > 0
+}
+
+export async function fetchLatestVersion(packageName, registry = 'https://registry.npmjs.org') {
+  if (latestCache?.packageName === packageName && latestCache.registry === registry && Date.now() < latestCache.expiresAt) {
+    return latestCache.version
+  }
+  try {
+    const response = await fetch(`${registry.replace(/\/$/, '')}/${encodeURIComponent(packageName)}/latest`, {
+      signal: AbortSignal.timeout(8_000),
+    })
+    if (!response.ok) return undefined
+    const value = await response.json()
+    if (typeof value?.version !== 'string' || value.version === '') return undefined
+    latestCache = { packageName, registry, version: value.version, expiresAt: Date.now() + VERSION_CACHE_MS }
+    return value.version
+  } catch {
+    return undefined
+  }
+}
+
+export async function readCurrentVersion(manifestUrl) {
+  const value = JSON.parse(await readFile(manifestUrl, 'utf8'))
+  if (typeof value?.version !== 'string' || value.version === '') throw new Error('Cannot read current plugin version.')
+  return value.version
+}
+
+export async function getUpdaterStatus(options, target = getRuntime()) {
+  const current = await readCurrentVersion(options.manifestUrl)
+  const latest = await fetchLatestVersion(options.packageName, options.registry ?? 'https://registry.npmjs.org')
+  return {
+    ok: true,
+    packageName: options.packageName,
+    currentVersion: current,
+    ...(latest === undefined ? {} : { latestVersion: latest }),
+    latestCheckFailed: latest === undefined,
+    updateAvailable: latest !== undefined && isNewerVersion(current, latest),
+    profileName: target.profileName,
+    canAutoUpdate: target.cliEntry !== undefined,
+  }
+}
+
+export async function installExactPackage(target, packageSpec, options) {
+  if (target.cliEntry === undefined) throw new Error('Automatic update is unavailable in this runtime.')
+  await new Promise((resolvePromise, reject) => {
+    const child = spawn(process.execPath, [
+      target.cliEntry, 'plugin', '--profile', target.profileName, 'add',
+      '--config.minimumReleaseAge=0', packageSpec,
+      `--registry=${options.registry ?? 'https://registry.npmjs.org/'}`,
+    ], {
+      cwd: target.profileDir,
+      windowsHide: true,
+      stdio: ['ignore', 'pipe', 'pipe'],
+      env: { ...process.env, NO_COLOR: '1' },
+    })
+    let detail = ''
+    child.stdout?.on('data', chunk => { detail = (detail + String(chunk)).slice(-4_000) })
+    child.stderr?.on('data', chunk => { detail = (detail + String(chunk)).slice(-4_000) })
+    const timer = setTimeout(() => {
+      child.kill()
+      reject(new Error('Update timed out; use the normal DSH update flow.'))
+    }, UPDATE_TIMEOUT_MS)
+    child.once('error', error => { clearTimeout(timer); reject(error) })
+    child.once('exit', code => {
+      clearTimeout(timer)
+      if (code === 0) resolvePromise()
+      else reject(new Error(detail.trim() || `Update exited with code ${String(code)}.`))
+    })
+  })
+}
+
+export function registerPluginUpdater(ctx, options) {
+  let installing = false
+  return ctx.webServer.register({
+    kind: 'exact',
+    path: options.endpoint,
+    handler: async (request, response) => {
+      try {
+        const target = getRuntime()
+        if (request.method === 'GET' || request.method === 'HEAD') {
+          const payload = await getUpdaterStatus(options, target)
+          writeJson(response, 200, payload)
+          return
+        }
+        if (request.method !== 'POST') {
+          response.writeHead(405, { allow: 'GET, HEAD, POST' })
+          response.end()
+          return
+        }
+        if (!isTrustedUpdateRequest(request)) {
+          writeJson(response, 403, { ok: false, error: { code: 'forbidden', message: 'Rejected non-local or cross-origin update request.' } })
+          return
+        }
+        if (installing) {
+          writeJson(response, 409, { ok: false, error: { code: 'busy', message: 'This plugin is already updating.' } })
+          return
+        }
+        installing = true
+        try {
+          const before = await getUpdaterStatus(options, target)
+          if (before.latestVersion === undefined) {
+            writeJson(response, 503, { ok: false, error: { code: 'unavailable', message: 'The latest version is temporarily unavailable.' } })
+            return
+          }
+          if (!before.updateAvailable) {
+            writeJson(response, 200, { ok: true, ...before })
+            return
+          }
+          await installExactPackage(target, `${options.packageName}@${before.latestVersion}`, options)
+          writeJson(response, 200, {
+            ok: true,
+            ...before,
+            updatedVersion: before.latestVersion,
+            restartRequired: true,
+          })
+        } finally {
+          installing = false
+        }
+      } catch (error) {
+        ctx.logger?.warn?.(`plugin updater failed: ${String(error)}`)
+        writeJson(response, 503, { ok: false, error: { code: 'update_failed', message: String(error?.message || error) } })
+      }
+    },
+  })
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-subscriptions",
-  "version": "0.6.8",
+  "version": "0.6.9",
   "description": "Use ChatGPT Codex, Claude, Grok, Antigravity, Kimi, GLM, Cursor, Kiro, Copilot, Qwen, ERNIE, Spark, JetBrains, Perplexity, Replit, and Cody subscriptions as DeepSeek Harness LLM providers via OAuth.",
   "license": "MIT",
   "type": "module",
@@ -34,6 +34,10 @@
   "bugs": {
     "url": "https://github.com/GooDAnDReaDY/dsh-subscriptions/issues"
   },
+  "scripts": {
+    "test": "eslint lib/ && node --test test/*.test.mjs",
+    "typecheck": "tsc -p tsconfig.checkjs.json"
+  },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -62,9 +66,5 @@
     "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
     "@types/node": "^22.20.2",
     "typescript": "^7.0.2"
-  },
-  "scripts": {
-    "test": "eslint lib/ && node --test test/*.test.mjs",
-    "typecheck": "tsc -p tsconfig.checkjs.json"
   }
-}
+}