@goodandready/dsh-tts 0.4.10 → 0.4.16

package/README.md

@@ -214,7 +214,6 @@ Provider **API keys are never stored in plugin settings**. Paste them in the cha
 
 Config-only (not in the card): `*KeyEnv` fields (`openaiKeyEnv`, `elevenlabsKeyEnv`, …). They only rename the credential slot the plugin looks up. Change them in `settings.yaml` if you must rebind a key name; the defaults match the usual environment variable names.
 
-The sidebar `settings.section` entry is a **fallback** and is registered only when `settings.plugin.item` is missing from the build.
 
 ## 🤖 HTTP Endpoints Reference
 

package/README.ru.md

@@ -197,7 +197,6 @@ dsh-tts:
 
 Только в конфиге (нет в карточке): поля `*KeyEnv` (`openaiKeyEnv`, `elevenlabsKeyEnv`, …). Они задают **имя** credential-слота; по умолчанию совпадают с привычными именами env-переменных. Меняйте в `settings.yaml`, если нужно перевязать имя ключа.
 
-Пункт `settings.section` в боковом меню — **fallback** и регистрируется, только если в сборке нет `settings.plugin.item`.
 
 ## 🤖 HTTP роуты API
 

package/README.zh.md

@@ -164,7 +164,6 @@ dsh plugin --profile web add @goodandready/dsh-tts
 
 API 密钥不写入插件设置，只在链编辑器粘贴，经 `PUT /dsh-tts/credential` 写入 DSH credential store。
 
-仅配置文件：`*KeyEnv` 字段（凭证槽位名称）。侧边栏 `settings.section` 仅为 fallback。
 
 ## ⚙️ 配置示例（`settings.yaml`）
 

package/lib/client-src/20-player.js

@@ -256,7 +256,7 @@
     function connectSseStream() {
       if (typeof window === 'undefined' || typeof window.EventSource === 'undefined') return
       if (sseSource) {
-        try { sseSource.close() } catch {}
+        try { sseSource.close() } catch (alreadyClosed) { /* intentional cleanup */ }
         sseSource = null
       }
       try {
@@ -281,7 +281,7 @@
                 drainQueue()
               }
             }
-          } catch {}
+          } catch (parseErr) { /* ignore malformed SSE payload */ }
         })
         sseSource.addEventListener('chime', (e) => {
           sseAttempt = 0
@@ -291,11 +291,11 @@
               player.queue.push(item)
               drainQueue()
             }
-          } catch {}
+          } catch (parseErr) { /* ignore malformed chime payload */ }
         })
         sseSource.onerror = () => {
           if (sseSource) {
-            try { sseSource.close() } catch {}
+            try { sseSource.close() } catch (alreadyClosed) { /* intentional cleanup */ }
             sseSource = null
           }
           sseAttempt++
@@ -307,7 +307,7 @@
             connectSseStream()
           }, delay)
         }
-      } catch {}
+      } catch (esErr) { /* EventSource failed */ }
     }
 
 async function pollPending() {
@@ -413,7 +413,7 @@ async function pollPending() {
           document.body.appendChild(a)
           a.click()
           document.body.removeChild(a)
-          setTimeout(() => { try { URL.revokeObjectURL(url) } catch {} }, 2000)
+          setTimeout(() => { try { URL.revokeObjectURL(url) } catch (alreadyRevoked) { /* already revoked */ } }, 2000)
         })
         .catch(() => {})
     }

package/lib/client-src/40-editors.js

@@ -132,33 +132,7 @@
       )
     }
 
-    const CLIENT_IT_TERMS = [
-      { from: 'SQL', to: 'сиквел', whole: true, lang: 'ru' },
-      { from: 'Nginx', to: 'энджинкс', whole: true, lang: 'ru' },
-      { from: 'Kubernetes', to: 'кубернетис', whole: true, lang: 'ru' },
-      { from: 'K8s', to: 'кубернетис', whole: true, lang: 'ru' },
-      { from: 'PostgreSQL', to: 'постгрес', whole: true, lang: 'ru' },
-      { from: 'Redis', to: 'рэдис', whole: true, lang: 'ru' },
-      { from: 'Docker', to: 'докер', whole: true, lang: 'ru' },
-      { from: 'API', to: 'апи', whole: true, lang: 'ru' },
-      { from: 'JSON', to: 'джейсон', whole: true, lang: 'ru' },
-      { from: 'YAML', to: 'ямл', whole: true, lang: 'ru' },
-      { from: 'GUI', to: 'гуи', whole: true, lang: 'ru' },
-      { from: 'CLI', to: 'си элай', whole: true, lang: 'ru' },
-      { from: 'CI/CD', to: 'си ай си ди', whole: false, lang: 'ru' },
-      { from: 'PR', to: 'пулл реквест', whole: true, lang: 'ru' },
-      { from: 'Regex', to: 'регэкс', whole: true, lang: 'ru' },
-      { from: 'OAuth', to: 'о-аус', whole: true, lang: 'ru' },
-      { from: 'HTTP', to: 'эйч ти ти пи', whole: true, lang: 'ru' },
-      { from: 'HTTPS', to: 'эйч ти ти пи эс', whole: true, lang: 'ru' },
-      { from: 'URL', to: 'юрл', whole: true, lang: 'ru' },
-      { from: 'SSH', to: 'эс эс эйч', whole: true, lang: 'ru' },
-      { from: 'IP', to: 'ай пи', whole: true, lang: 'ru' },
-      { from: 'DNS', to: 'ди эн эс', whole: true, lang: 'ru' },
-      { from: 'CPU', to: 'си пи ю', whole: true, lang: 'ru' },
-      { from: 'GPU', to: 'джи пи ю', whole: true, lang: 'ru' },
-      { from: 'RAM', to: 'рам', whole: true, lang: 'ru' },
-    ]
+    const CLIENT_IT_TERMS = []
 
     // Pronunciation dictionary editor: rules apply top-down.
     function PronEditor(props) {
@@ -187,7 +161,7 @@
         document.body.appendChild(a)
         a.click()
         document.body.removeChild(a)
-        setTimeout(() => { try { URL.revokeObjectURL(url) } catch {} }, 1000)
+        setTimeout(() => { try { URL.revokeObjectURL(url) } catch (alreadyRevoked) { /* already revoked */ } }, 1000)
       }
 
       const triggerImport = () => {

package/lib/client-src/60-card-dock.js

@@ -140,36 +140,14 @@
     // Primary settings home is the plugin-settings tab card. The tab looks up
     // a slot by entryKey equal to the namespace name: key must equal NS or
     // the card never appears, with no log error.
-      const tryPluginItem = () => {
-        try {
-          const res = ctx.slots.inject('settings.plugin.item', () => ctx.slots.register(
-            {
-              name: 'settings.plugin.item',
-              key: NS,
-              locale: NS,
-              inject: () => ({ ctx: ctx }),
-            },
-            TtsCard,
-          ))
-          if (res === false) return false
-          return true
-        } catch (noPluginItemSlot) {
-          return false
-        }
-      }
-      if (tryPluginItem()) return
-    // Fallback for builds without settings.plugin.item: keep the sidebar section
-    // so settings cannot disappear.
-      ctx.slots.inject('settings.section', () => ctx.slots.register(
+      ctx.slots.inject('settings.plugin.item', () => ctx.slots.register(
         {
-          name: 'settings.section',
-          id: '@goodandready/dsh-tts',
-          order: 32,
+          name: 'settings.plugin.item',
+          key: NS,
           locale: NS,
-          label: () => t('title'),
           inject: () => ({ ctx: ctx }),
         },
-        (props) => React.createElement(ErrorBoundary, null, React.createElement(TtsSection, props)),
+        TtsCard,
       ))
     }
 
@@ -182,7 +160,7 @@
         if (typeof window === 'undefined') return () => {}
         const onKey = (e) => {
           if (e.ctrlKey && e.key === 'Escape') { togglePause(); e.preventDefault() }
-          else if (e.altKey && (e.key === 's' || e.key === 'S' || e.key === 'ы')) { stopPlayback(); e.preventDefault() }
+          else if (e.altKey && (e.code === 'KeyS' || e.key === 's' || e.key === 'S')) { stopPlayback(); e.preventDefault() }
           else if (e.altKey && e.key === 'ArrowRight') { skipCurrent(); e.preventDefault() }
         }
         window.addEventListener('keydown', onKey)

package/lib/client.js

@@ -395,7 +395,7 @@ window.__ModuleLoader__.load({
     function connectSseStream() {
       if (typeof window === 'undefined' || typeof window.EventSource === 'undefined') return
       if (sseSource) {
-        try { sseSource.close() } catch {}
+        try { sseSource.close() } catch (alreadyClosed) { /* intentional cleanup */ }
         sseSource = null
       }
       try {
@@ -420,7 +420,7 @@ window.__ModuleLoader__.load({
                 drainQueue()
               }
             }
-          } catch {}
+          } catch (parseErr) { /* ignore malformed SSE payload */ }
         })
         sseSource.addEventListener('chime', (e) => {
           sseAttempt = 0
@@ -430,11 +430,11 @@ window.__ModuleLoader__.load({
               player.queue.push(item)
               drainQueue()
             }
-          } catch {}
+          } catch (parseErr) { /* ignore malformed chime payload */ }
         })
         sseSource.onerror = () => {
           if (sseSource) {
-            try { sseSource.close() } catch {}
+            try { sseSource.close() } catch (alreadyClosed) { /* intentional cleanup */ }
             sseSource = null
           }
           sseAttempt++
@@ -446,7 +446,7 @@ window.__ModuleLoader__.load({
             connectSseStream()
           }, delay)
         }
-      } catch {}
+      } catch (esErr) { /* EventSource failed */ }
     }
 
 async function pollPending() {
@@ -552,7 +552,7 @@ async function pollPending() {
           document.body.appendChild(a)
           a.click()
           document.body.removeChild(a)
-          setTimeout(() => { try { URL.revokeObjectURL(url) } catch {} }, 2000)
+          setTimeout(() => { try { URL.revokeObjectURL(url) } catch (alreadyRevoked) { /* already revoked */ } }, 2000)
         })
         .catch(() => {})
     }
@@ -1069,33 +1069,7 @@ async function pollPending() {
       )
     }
 
-    const CLIENT_IT_TERMS = [
-      { from: 'SQL', to: 'сиквел', whole: true, lang: 'ru' },
-      { from: 'Nginx', to: 'энджинкс', whole: true, lang: 'ru' },
-      { from: 'Kubernetes', to: 'кубернетис', whole: true, lang: 'ru' },
-      { from: 'K8s', to: 'кубернетис', whole: true, lang: 'ru' },
-      { from: 'PostgreSQL', to: 'постгрес', whole: true, lang: 'ru' },
-      { from: 'Redis', to: 'рэдис', whole: true, lang: 'ru' },
-      { from: 'Docker', to: 'докер', whole: true, lang: 'ru' },
-      { from: 'API', to: 'апи', whole: true, lang: 'ru' },
-      { from: 'JSON', to: 'джейсон', whole: true, lang: 'ru' },
-      { from: 'YAML', to: 'ямл', whole: true, lang: 'ru' },
-      { from: 'GUI', to: 'гуи', whole: true, lang: 'ru' },
-      { from: 'CLI', to: 'си элай', whole: true, lang: 'ru' },
-      { from: 'CI/CD', to: 'си ай си ди', whole: false, lang: 'ru' },
-      { from: 'PR', to: 'пулл реквест', whole: true, lang: 'ru' },
-      { from: 'Regex', to: 'регэкс', whole: true, lang: 'ru' },
-      { from: 'OAuth', to: 'о-аус', whole: true, lang: 'ru' },
-      { from: 'HTTP', to: 'эйч ти ти пи', whole: true, lang: 'ru' },
-      { from: 'HTTPS', to: 'эйч ти ти пи эс', whole: true, lang: 'ru' },
-      { from: 'URL', to: 'юрл', whole: true, lang: 'ru' },
-      { from: 'SSH', to: 'эс эс эйч', whole: true, lang: 'ru' },
-      { from: 'IP', to: 'ай пи', whole: true, lang: 'ru' },
-      { from: 'DNS', to: 'ди эн эс', whole: true, lang: 'ru' },
-      { from: 'CPU', to: 'си пи ю', whole: true, lang: 'ru' },
-      { from: 'GPU', to: 'джи пи ю', whole: true, lang: 'ru' },
-      { from: 'RAM', to: 'рам', whole: true, lang: 'ru' },
-    ]
+    const CLIENT_IT_TERMS = []
 
     // Pronunciation dictionary editor: rules apply top-down.
     function PronEditor(props) {
@@ -1124,7 +1098,7 @@ async function pollPending() {
         document.body.appendChild(a)
         a.click()
         document.body.removeChild(a)
-        setTimeout(() => { try { URL.revokeObjectURL(url) } catch {} }, 1000)
+        setTimeout(() => { try { URL.revokeObjectURL(url) } catch (alreadyRevoked) { /* already revoked */ } }, 1000)
       }
 
       const triggerImport = () => {
@@ -1924,36 +1898,14 @@ async function pollPending() {
     // Primary settings home is the plugin-settings tab card. The tab looks up
     // a slot by entryKey equal to the namespace name: key must equal NS or
     // the card never appears, with no log error.
-      const tryPluginItem = () => {
-        try {
-          const res = ctx.slots.inject('settings.plugin.item', () => ctx.slots.register(
-            {
-              name: 'settings.plugin.item',
-              key: NS,
-              locale: NS,
-              inject: () => ({ ctx: ctx }),
-            },
-            TtsCard,
-          ))
-          if (res === false) return false
-          return true
-        } catch (noPluginItemSlot) {
-          return false
-        }
-      }
-      if (tryPluginItem()) return
-    // Fallback for builds without settings.plugin.item: keep the sidebar section
-    // so settings cannot disappear.
-      ctx.slots.inject('settings.section', () => ctx.slots.register(
+      ctx.slots.inject('settings.plugin.item', () => ctx.slots.register(
         {
-          name: 'settings.section',
-          id: '@goodandready/dsh-tts',
-          order: 32,
+          name: 'settings.plugin.item',
+          key: NS,
           locale: NS,
-          label: () => t('title'),
           inject: () => ({ ctx: ctx }),
         },
-        (props) => React.createElement(ErrorBoundary, null, React.createElement(TtsSection, props)),
+        TtsCard,
       ))
     }
 
@@ -1966,7 +1918,7 @@ async function pollPending() {
         if (typeof window === 'undefined') return () => {}
         const onKey = (e) => {
           if (e.ctrlKey && e.key === 'Escape') { togglePause(); e.preventDefault() }
-          else if (e.altKey && (e.key === 's' || e.key === 'S' || e.key === 'ы')) { stopPlayback(); e.preventDefault() }
+          else if (e.altKey && (e.code === 'KeyS' || e.key === 's' || e.key === 'S')) { stopPlayback(); e.preventDefault() }
           else if (e.altKey && e.key === 'ArrowRight') { skipCurrent(); e.preventDefault() }
         }
         window.addEventListener('keydown', onKey)

package/lib/http-util.js

@@ -21,7 +21,37 @@ export function readBody(req, maxBytes) {
   })
 }
 
-/** Reject cross-site POSTs. Do not require loopback or Origin==Host: the Web UI is used over LAN and reverse proxies. */
+function isLoopback(address) {
+  if (!address) return false
+  return address === '127.0.0.1' || address === '::1' || address === '::ffff:127.0.0.1' || address === 'localhost'
+}
+
+/**
+ * Strict fail-closed check for administrative/settings requests.
+ * Accepts loopback, same-origin/same-site sec-fetch-site, matching origin/host, or authorization header.
+ * Rejects cross-site or unauthenticated requests missing origin context.
+ */
 export function isTrustedSettingsRequest(request) {
-  return request.headers['sec-fetch-site'] !== 'cross-site'
+  if (!request || !request.headers) return false
+
+  const authHeader = request.headers['authorization'] || request.headers['x-dsh-auth']
+  if (authHeader && authHeader.length > 5) return true
+
+  const remoteAddr = request.socket?.remoteAddress || request.connection?.remoteAddress
+  if (remoteAddr && isLoopback(remoteAddr)) return true
+
+  const secFetchSite = request.headers['sec-fetch-site']
+  if (secFetchSite === 'same-origin' || secFetchSite === 'same-site') {
+    return true
+  }
+	  const origin = request.headers['origin']
+  const host = request.headers['host']
+  if (origin && host) {
+    try {
+      const originHost = new URL(origin).host
+      if (originHost === host) return true
+    } catch { /* invalid origin URL */ }
+  }
+
+  return false
 }

package/lib/routes.js

@@ -1,3 +1,5 @@
+import { resolve } from 'node:path'
+import { registerPluginUpdater } from './updater.js'
 import { writeJson, readBody, isTrustedSettingsRequest } from './http-util.js'
 import { addStreamSubscriber, removeStreamSubscriber, streamSubscriberCount } from './stream-hub.js'
 import { pendingKeyWrites, stripSecretsFromConfig, needsApiKey } from './keys.js'
@@ -229,7 +231,6 @@ export function registerHttpRoutes(ctx, api) {
       const lang = String(cfg.language || '').toLowerCase()
       let phrase = 'Voice check.'
       if (lang.startsWith('zh')) phrase = '语音合成测试。'
-      else if (lang.startsWith('ru')) phrase = 'Проверка голоса.'
       try {
         const probe = Object.assign({}, cfg, {
           chain: [{ provider: body.provider || '', model: body.model || '', voice: body.voice || '' }],
@@ -410,4 +411,10 @@ export function registerHttpRoutes(ctx, api) {
       }
     },
   }), 'dsh-tts: /speak route')
+
+  registerPluginUpdater(ctx, {
+    endpoint: '/dsh-tts/updater',
+    packageName: '@goodandready/dsh-tts',
+    manifestUrl: new URL('../package.json', import.meta.url),
+  })
 }

package/lib/text.js

@@ -15,14 +15,12 @@ export function blocksToText(content) {
 // the configured speech language; {n} is filled with a line/row count.
 export const SPEECH_PHRASES = {
   en: { codeBlock: 'code block, {n} lines', table: 'table, {n} rows', summaryIntro: 'Summary of the reply.' },
-  ru: { codeBlock: 'блок кода, {n} строк', table: 'таблица, {n} строк', summaryIntro: 'Пересказ ответа.' },
   zh: { codeBlock: '代码块，共 {n} 行', table: '表格，共 {n} 行', summaryIntro: '回复摘要。' },
 }
 
 export function speechPhrases(language) {
   const lang = String(language || '').toLowerCase()
   if (lang.startsWith('zh')) return SPEECH_PHRASES.zh
-  if (lang.startsWith('ru')) return SPEECH_PHRASES.ru
   return SPEECH_PHRASES.en
 }
 
@@ -43,12 +41,12 @@ export function applyNarrationFilters(text, cfg) {
   return out
 }
 
-// Rough language heuristic: whichever script has more letters wins.
+// Rough language heuristic using Unicode Script properties.
 export function detectLang(text) {
   const s = String(text || '')
-  const cjk = (s.match(/[\u4E00-\u9FFF]/g) || []).length
-  const cyr = (s.match(/[\u0400-\u04FF]/g) || []).length
-  const lat = (s.match(/[A-Za-z]/g) || []).length
+  const cjk = (s.match(/\p{Script=Han}/gu) || []).length
+  const cyr = (s.match(/\p{Script=Cyrillic}/gu) || []).length
+  const lat = (s.match(/\p{Script=Latin}/gu) || []).length
   if (cjk >= cyr && cjk >= lat && cjk > 0) return 'zh'
   return cyr > lat ? 'ru' : 'en'
 }
@@ -61,33 +59,7 @@ function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
 }
 
-export const BUILTIN_IT_DICTIONARY = [
-  { from: 'SQL', to: 'сиквел', whole: true, lang: 'ru' },
-  { from: 'Nginx', to: 'энджинкс', whole: true, lang: 'ru' },
-  { from: 'Kubernetes', to: 'кубернетис', whole: true, lang: 'ru' },
-  { from: 'K8s', to: 'кубернетис', whole: true, lang: 'ru' },
-  { from: 'PostgreSQL', to: 'постгрес', whole: true, lang: 'ru' },
-  { from: 'Redis', to: 'рэдис', whole: true, lang: 'ru' },
-  { from: 'Docker', to: 'докер', whole: true, lang: 'ru' },
-  { from: 'API', to: 'апи', whole: true, lang: 'ru' },
-  { from: 'JSON', to: 'джейсон', whole: true, lang: 'ru' },
-  { from: 'YAML', to: 'ямл', whole: true, lang: 'ru' },
-  { from: 'GUI', to: 'гуи', whole: true, lang: 'ru' },
-  { from: 'CLI', to: 'си элай', whole: true, lang: 'ru' },
-  { from: 'CI/CD', to: 'си ай си ди', whole: false, lang: 'ru' },
-  { from: 'PR', to: 'пулл реквест', whole: true, lang: 'ru' },
-  { from: 'Regex', to: 'регэкс', whole: true, lang: 'ru' },
-  { from: 'OAuth', to: 'о-аус', whole: true, lang: 'ru' },
-  { from: 'HTTP', to: 'эйч ти ти пи', whole: true, lang: 'ru' },
-  { from: 'HTTPS', to: 'эйч ти ти пи эс', whole: true, lang: 'ru' },
-  { from: 'URL', to: 'юрл', whole: true, lang: 'ru' },
-  { from: 'SSH', to: 'эс эс эйч', whole: true, lang: 'ru' },
-  { from: 'IP', to: 'ай пи', whole: true, lang: 'ru' },
-  { from: 'DNS', to: 'ди эн эс', whole: true, lang: 'ru' },
-  { from: 'CPU', to: 'си пи ю', whole: true, lang: 'ru' },
-  { from: 'GPU', to: 'джи пи ю', whole: true, lang: 'ru' },
-  { from: 'RAM', to: 'рам', whole: true, lang: 'ru' },
-]
+export const BUILTIN_IT_DICTIONARY = []
 
 export function applyPronunciation(text, rules, language, enableBuiltinIt = false) {
   let out = String(text || '')
@@ -152,13 +124,8 @@ export function assistantText(message) {
   return blocksToText(message.content)
 }
 
-// Protect common abbreviations from false sentence splits
+// Protect common English abbreviations from false sentence splits
 const PROTECTED_ABBREVIATIONS = [
-  // Russian abbreviations
-  'т.е.', 'т.д.', 'т.п.', 'т.к.', 'руб.', 'коп.', 'ул.', 'пер.', 'пр.', 'просп.',
-  'д.', 'корп.', 'стр.', 'кв.', 'г.', 'гг.', 'в.', 'вв.', 'см.', 'ср.', 'напр.',
-  'рис.', 'табл.', 'им.', 'акад.', 'проф.', 'доц.', 'млн.', 'млрд.', 'тыс.',
-  // English abbreviations
   'e.g.', 'i.e.', 'vs.', 'etc.', 'dr.', 'mr.', 'mrs.', 'ms.', 'prof.',
   'approx.', 'dept.', 'est.', 'min.', 'max.', 'no.', 'vol.', 'p.m.', 'a.m.'
 ]
@@ -173,7 +140,7 @@ export function protectAbbreviations(text) {
   // Decimal numbers and versions: e.g. 3.14, v0.4.6, 192.168.0.1
   res = res.replace(/(?<=[vV]?\d+)\.(?=\d+)/g, '\u2024')
   // List numbering at line/word starts: 1. item, 2. item
-  res = res.replace(/(?<=^|[\s\n])(\d+)\.(?=\s+[A-Za-zА-Яа-я\u4E00-\u9FFF])/g, '$1\u2024')
+  res = res.replace(/(?<=^|[\s\n])(\d+)\.(?=\s+[A-Za-z\u4E00-\u9FFF])/g, '$1\u2024')
   // Common file extensions: e.g. package.json, index.js, script.py
   res = res.replace(/(?<=[a-zA-Z0-9_-])\.(?:js|mjs|cjs|ts|tsx|jsx|json|ya?ml|md|py|sh|tgz|tar|gz|zip|html?|css|rs|go|c|cpp|h|txt)(?=[ \t\n"«'\)\]\},;\.\?!]|$)/gi, (m) => m.replace(/\./g, '\u2024'))
   // Hostnames and domains: e.g. goodandready.app, github.com

package/lib/updater.js

@@ -0,0 +1,333 @@
+import { spawn } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { basename, dirname, isAbsolute, resolve } from 'node:path'
+
+/**
+ * Host-side one-click updater for @goodandready/dsh-tts.
+ * Implements the unified DSH plugin updater specification.
+ */
+
+const UPDATE_HEADER = 'x-dsh-plugin-update'
+const UPDATE_TIMEOUT_MS = 10 * 60_000
+const VERSION_CACHE_MS = 5 * 60_000
+let latestCache = undefined
+
+function header(request, name) {
+  const value = request?.headers?.[name]
+  return Array.isArray(value) ? value[0] : value
+}
+
+function isLoopback(value) {
+  const address = value?.toLowerCase().replace(/^\[|\]$/g, '')
+  return (
+    address === 'localhost' ||
+    address === 'localhost.' ||
+    address === '::1' ||
+    address?.startsWith('127.') === true ||
+    address?.startsWith('::ffff:127.') === true
+  )
+}
+
+function isPrivateLan(value) {
+  const address = value?.toLowerCase().replace(/^\[|\]$/g, '')
+  if (!address) return false
+  const ipv4 = address.startsWith('::ffff:') ? address.slice(7) : address
+  return (
+    ipv4.startsWith('192.168.') ||
+    ipv4.startsWith('10.') ||
+    /^172\.(1[6-9]|2[0-9]|3[0-1])\./.test(ipv4)
+  )
+}
+
+export function isTrustedUpdateRequest(request) {
+  if (header(request, UPDATE_HEADER) !== '1') return false
+  const remote = request.socket?.remoteAddress
+  if (!isLoopback(remote) && !isPrivateLan(remote)) return false
+  const site = header(request, 'sec-fetch-site')
+  if (site !== undefined && site !== 'same-origin') return false
+  const origin = header(request, 'origin')
+  const host = header(request, 'host')
+  if (origin === undefined || host === undefined) return false
+  try {
+    const url = new URL(origin)
+    return (
+      (url.protocol === 'http:' || url.protocol === 'https:') &&
+      (isLoopback(url.hostname) || isPrivateLan(url.hostname)) &&
+      url.host === host
+    )
+  } catch {
+    return false
+  }
+}
+
+function validProfileName(value) {
+  return (
+    typeof value === 'string' &&
+    value !== '' &&
+    value !== '.' &&
+    value !== '..' &&
+    !value.includes('/') &&
+    !value.includes('\\') &&
+    !/[\0-\x1f\x7f]/.test(value)
+  )
+}
+
+function profileNameFromArgv(argv) {
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--profile' && argv[index + 1] !== undefined) return argv[index + 1]
+    if (typeof arg === 'string' && arg.startsWith('--profile=')) return arg.slice(10)
+  }
+  return undefined
+}
+
+function findDshCliEntry() {
+  const entry = process.argv[1]
+  if (typeof entry !== 'string' || entry === '') return undefined
+  let directory = process.cwd()
+  for (let depth = 0; depth < 6; depth += 1) {
+    const manifestPath = resolve(directory, 'package.json')
+    if (existsSync(manifestPath)) {
+      try {
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'))
+        const bin =
+          typeof manifest.bin === 'string'
+            ? manifest.bin
+            : typeof manifest.bin === 'object' && manifest.bin !== null
+              ? manifest.bin.dsh
+              : undefined
+        if (
+          manifest.name === '@deepseek-ai/dsh' &&
+          typeof bin === 'string' &&
+          !isAbsolute(bin) &&
+          resolve(directory, bin) === resolve(entry)
+        ) {
+          return entry
+        }
+      } catch {
+        // Continue searching parent directories
+      }
+    }
+    const parent = dirname(directory)
+    if (parent === directory) return undefined
+  }
+}
+
+function runtime() {
+  const profileDir = resolve(
+    process.env.DSH_PROFILE_DIR ?? resolve(homedir(), '.dsh', 'profiles', 'web')
+  )
+  const selected = profileNameFromArgv(process.argv)
+  const profileName = validProfileName(selected)
+    ? selected
+    : validProfileName(basename(profileDir))
+      ? basename(profileDir)
+      : 'web'
+  const cliEntry = findDshCliEntry()
+  return cliEntry === undefined ? { profileName, profileDir } : { profileName, profileDir, cliEntry }
+}
+
+function parseSemver(value) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(value)
+  if (match === null) return undefined
+  return {
+    core: [Number(match[1]), Number(match[2]), Number(match[3])],
+    prerelease: match[4]?.split('.') ?? [],
+  }
+}
+
+function comparePrerelease(left, right) {
+  if (left.length === 0 || right.length === 0) return left.length === right.length ? 0 : left.length === 0 ? 1 : -1
+  const length = Math.max(left.length, right.length)
+  for (let index = 0; index < length; index += 1) {
+    const a = left[index]
+    const b = right[index]
+    if (a === undefined || b === undefined) return a === b ? 0 : a === undefined ? -1 : 1
+    if (a === b) continue
+    const aNumeric = /^\d+$/.test(a)
+    const bNumeric = /^\d+$/.test(b)
+    if (aNumeric && bNumeric) {
+      const aNumber = BigInt(a)
+      const bNumber = BigInt(b)
+      if (aNumber !== bNumber) return aNumber > bNumber ? 1 : -1
+      continue
+    }
+    if (aNumeric !== bNumeric) return aNumeric ? -1 : 1
+    return a > b ? 1 : -1
+  }
+  return 0
+}
+
+export function isNewerVersion(currentValue, candidateValue) {
+  const current = parseSemver(currentValue)
+  const candidate = parseSemver(candidateValue)
+  if (current === undefined || candidate === undefined) return false
+  for (let index = 0; index < 3; index += 1) {
+    if (candidate.core[index] !== current.core[index]) return candidate.core[index] > current.core[index]
+  }
+  return comparePrerelease(candidate.prerelease, current.prerelease) > 0
+}
+
+async function latestVersion(packageName, registry) {
+  if (
+    latestCache?.packageName === packageName &&
+    latestCache.registry === registry &&
+    Date.now() < latestCache.expiresAt
+  ) {
+    return latestCache.version
+  }
+  try {
+    const response = await fetch(`${registry.replace(/\/$/, '')}/${encodeURIComponent(packageName)}/latest`, {
+      signal: typeof AbortSignal !== 'undefined' && AbortSignal.timeout ? AbortSignal.timeout(8000) : undefined,
+    })
+    if (!response.ok) return undefined
+    const value = await response.json()
+    if (typeof value?.version !== 'string' || value.version === '') return undefined
+    latestCache = { packageName, registry, version: value.version, expiresAt: Date.now() + VERSION_CACHE_MS }
+    return value.version
+  } catch {
+    return undefined
+  }
+}
+
+async function currentVersion(manifestUrl) {
+  const value = JSON.parse(await readFile(manifestUrl, 'utf8'))
+  if (typeof value?.version !== 'string' || value.version === '') {
+    throw new Error('Cannot read current plugin version.')
+  }
+  return value.version
+}
+
+export async function status(options, target) {
+  const current = await currentVersion(options.manifestUrl)
+  const latest = await latestVersion(options.packageName, options.registry ?? 'https://registry.npmjs.org')
+  return {
+    packageName: options.packageName,
+    currentVersion: current,
+    ...(latest === undefined ? {} : { latestVersion: latest }),
+    latestCheckFailed: latest === undefined,
+    updateAvailable: latest !== undefined && isNewerVersion(current, latest),
+    profileName: target.profileName,
+    canAutoUpdate: target.cliEntry !== undefined,
+  }
+}
+
+async function installExact(target, packageSpec, options) {
+  if (target.cliEntry === undefined) throw new Error('Automatic update is unavailable in this runtime.')
+  await new Promise((resolvePromise, reject) => {
+    const child = spawn(
+      process.execPath,
+      [
+        target.cliEntry,
+        'plugin',
+        '--profile',
+        target.profileName,
+        'add',
+        '--config.minimumReleaseAge=0',
+        packageSpec,
+        `--registry=${options.registry ?? 'https://registry.npmjs.org/'}`,
+      ],
+      {
+        cwd: target.profileDir,
+        windowsHide: true,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        env: { ...process.env, NO_COLOR: '1' },
+      }
+    )
+    let detail = ''
+    child.stdout?.on('data', (chunk) => {
+      detail = (detail + String(chunk)).slice(-4000)
+    })
+    child.stderr?.on('data', (chunk) => {
+      detail = (detail + String(chunk)).slice(-4000)
+    })
+    const timer = setTimeout(() => {
+      child.kill()
+      reject(new Error('Update timed out; use the normal DSH update flow.'))
+    }, UPDATE_TIMEOUT_MS)
+    child.once('error', (error) => {
+      clearTimeout(timer)
+      reject(error)
+    })
+    child.once('exit', (code) => {
+      clearTimeout(timer)
+      if (code === 0) resolvePromise()
+      else reject(new Error(detail.trim() || `Update exited with code ${String(code)}.`))
+    })
+  })
+}
+
+function json(response, statusCode, value) {
+  response.writeHead(statusCode, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+  })
+  response.end(JSON.stringify(value))
+}
+
+export function registerPluginUpdater(ctx, options) {
+  let installing = false
+  if (typeof ctx?.webServer?.register !== 'function') {
+    ctx?.logger?.warn?.('[dsh-tts] webServer service unavailable, updater skipped')
+    return () => {}
+  }
+
+  return ctx.webServer.register({
+    kind: 'exact',
+    path: options.endpoint,
+    handler: async (request, response) => {
+      try {
+        const target = runtime()
+        if (request.method === 'GET' || request.method === 'HEAD') {
+          const payload = await status(options, target)
+          response.writeHead(200, {
+            'content-type': 'application/json; charset=utf-8',
+            'cache-control': 'no-store',
+          })
+          response.end(request.method === 'HEAD' ? undefined : JSON.stringify(payload))
+          return
+        }
+        if (request.method !== 'POST') {
+          response.writeHead(405, { allow: 'GET, HEAD, POST' })
+          response.end()
+          return
+        }
+        if (!isTrustedUpdateRequest(request)) {
+          json(response, 403, { error: 'Rejected non-local or cross-origin update request.' })
+          return
+        }
+        if (installing) {
+          json(response, 409, { error: 'This plugin is already updating.' })
+          return
+        }
+        installing = true
+        try {
+          const before = await status(options, target)
+          if (before.latestVersion === undefined) {
+            json(response, 503, { error: 'The latest version is temporarily unavailable.' })
+            return
+          }
+          if (!before.updateAvailable) {
+            json(response, 200, before)
+            return
+          }
+          await installExact(target, `${options.packageName}@${before.latestVersion}`, options)
+          json(response, 200, {
+            ...before,
+            updatedVersion: before.latestVersion,
+            restartRequired: true,
+          })
+        } catch (err) {
+          json(response, 503, { error: `Plugin update failed: ${String(err?.message || err)}` })
+        } finally {
+          installing = false
+        }
+      } catch (error) {
+        ctx?.logger?.warn?.(`[dsh-tts] plugin updater failed: ${String(error)}`)
+        json(response, 503, { error: 'Plugin update failed; see server logs.' })
+      }
+    },
+  })
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-tts",
-  "version": "0.4.10",
+  "version": "0.4.16",
   "description": "Text-to-speech for DeepSeek Harness: speak agent replies in the Web UI with a provider fallback chain (OpenAI, ElevenLabs, Google, Azure, Groq, Deepgram, OpenRouter, Edge, Piper, eSpeak).",
   "license": "MIT",
   "type": "module",