@linxin666/dsh-remote-web-ui 0.1.9 → 0.1.11

package/lib/index.js

@@ -1,13 +1,16 @@
+import { createRequire } from "node:module";
 import { setInterval as setInterval$1 } from "node:timers";
 import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import z from "schemastery";
 import { randomBytes } from "node:crypto";
 import { readFile } from "node:fs/promises";
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { RpcId } from "@deepseek-ai/dsh-host-apiproxy/api/rpc";
 import { networkInterfaces } from "node:os";
 import { Tunnel, bin, install } from "cloudflared";
+import { dirname, join } from "node:path";
+import { spawn } from "node:child_process";
 //#region src/pairing.ts
 /**
 * Pairing state machine: one active one-time token, a device-session table,
@@ -439,7 +442,7 @@ const PAIR_PATHS = {
 	events: "/api/pair/events"
 };
 /** One JSON response. */
-function writeJson(res, status, body) {
+function writeJson$1(res, status, body) {
 	const payload = JSON.stringify(body);
 	res.writeHead(status, {
 		"content-type": "application/json; charset=utf-8",
@@ -555,7 +558,7 @@ function makeRoutes(deps) {
 	const handleIssue = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!loopbackFence(req)) {
-			writeJson(res, 403, {
+			writeJson$1(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -568,7 +571,7 @@ function makeRoutes(deps) {
 			const { token, expiresAt } = service.issue(workspaceId, address);
 			const base = address === void 0 ? service.publicBaseUrl ?? service.lanBaseUrl : service.lanBaseUrlFor(address);
 			if (base === void 0) throw new Error("remote-web-ui: base unavailable");
-			writeJson(res, 200, {
+			writeJson$1(res, 200, {
 				ok: true,
 				url: `${base}/?pair=${token}${workspaceId === void 0 ? "" : `&workspace=${encodeURIComponent(workspaceId)}`}`,
 				token,
@@ -578,7 +581,7 @@ function makeRoutes(deps) {
 			});
 		} catch (error) {
 			const unknownAddress = error instanceof UnknownLanAddressError;
-			writeJson(res, unknownAddress ? 400 : 409, {
+			writeJson$1(res, unknownAddress ? 400 : 409, {
 				ok: false,
 				code: unknownAddress ? "unknown-address" : "lan-required"
 			});
@@ -587,14 +590,14 @@ function makeRoutes(deps) {
 	const handleAccept = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!lanFence(req)) {
-			writeJson(res, 403, {
+			writeJson$1(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
 			return;
 		}
 		if (rateLimitAccept(req)) {
-			writeJson(res, 429, {
+			writeJson$1(res, 429, {
 				ok: false,
 				code: "rate-limited"
 			});
@@ -604,7 +607,7 @@ function makeRoutes(deps) {
 		const token = typeof body?.token === "string" ? body.token : "";
 		const result = service.accept(token);
 		if (!result.ok) {
-			writeJson(res, result.code === "used" ? 409 : 404, {
+			writeJson$1(res, result.code === "used" ? 409 : 404, {
 				ok: false,
 				code: result.code
 			});
@@ -622,7 +625,7 @@ function makeRoutes(deps) {
 	const handleStop = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!loopbackFence(req)) {
-			writeJson(res, 403, {
+			writeJson$1(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -630,12 +633,12 @@ function makeRoutes(deps) {
 		}
 		await readJsonBody$1(req);
 		service.stop();
-		writeJson(res, 200, { ok: true });
+		writeJson$1(res, 200, { ok: true });
 	};
 	const handleHeartbeat = async (req, res) => {
 		if (!requireMethod(req, res, "POST")) return;
 		if (!lanFence(req)) {
-			writeJson(res, 403, {
+			writeJson$1(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -644,25 +647,25 @@ function makeRoutes(deps) {
 		await readJsonBody$1(req);
 		const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
 		if (deviceId === void 0 || !service.heartbeat(deviceId)) {
-			writeJson(res, 401, {
+			writeJson$1(res, 401, {
 				ok: false,
 				code: "unpaired"
 			});
 			return;
 		}
-		writeJson(res, 200, { ok: true });
+		writeJson$1(res, 200, { ok: true });
 	};
 	const handleStatus = async (req, res) => {
 		if (!requireMethod(req, res, "GET")) return;
 		if (!lanFence(req)) {
-			writeJson(res, 403, {
+			writeJson$1(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
 			return;
 		}
 		const deviceId = readCookie(req.headers.cookie, service.config.cookieName);
-		writeJson(res, 200, {
+		writeJson$1(res, 200, {
 			ok: true,
 			paired: deviceId !== void 0 && service.hasDevice(deviceId),
 			...service.snapshot()
@@ -671,7 +674,7 @@ function makeRoutes(deps) {
 	const handleEvents = (req, res) => {
 		if (!requireMethod(req, res, "GET")) return;
 		if (!loopbackFence(req)) {
-			writeJson(res, 403, {
+			writeJson$1(res, 403, {
 				ok: false,
 				code: "forbidden"
 			});
@@ -1261,6 +1264,358 @@ var TunnelManager = class {
 		} catch {}
 	}
 };
+/** The aggregate package that is the canonical update entry point. */
+const AGGREGATE_PACKAGE = "@linxin666/dsh-web-ui-all";
+/** Fallback anchor: this plugin's own package when the aggregate is absent. */
+const SELF_PACKAGE = "@linxin666/dsh-remote-web-ui";
+/** A profile manifest `name` prefix (e.g. `dsh-profile-web`). */
+const PROFILE_NAME_PREFIX = "dsh-profile-";
+/** How many ancestor directories a profile search walks before giving up. */
+const PROFILE_WALK_DEPTH = 12;
+/**
+* Parse a semantic version string (leading `v` tolerated, build metadata
+* ignored). Returns undefined for unparseable input.
+* @param value - the version string, e.g. `0.1.10` or `0.1.11-rc.1`.
+* @returns the parsed parts, or undefined.
+*/
+function parseSemver(value) {
+	const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(value.trim());
+	if (match === null) return void 0;
+	return {
+		major: Number(match[1]),
+		minor: Number(match[2]),
+		patch: Number(match[3]),
+		prerelease: match[4] === void 0 ? [] : match[4].split(".")
+	};
+}
+/**
+* Compare two semantic versions per the semver precedence rules (a release
+* outranks any of its prereleases; numeric prerelease identifiers compare
+* numerically and sort below alphanumeric ones). An unparseable version sorts
+* below every parseable one; two unparseable versions compare equal.
+* @param a - first version.
+* @param b - second version.
+* @returns negative when a < b, 0 when equal, positive when a > b.
+*/
+function compareVersions(a, b) {
+	const pa = parseSemver(a);
+	const pb = parseSemver(b);
+	if (pa === void 0 && pb === void 0) return 0;
+	if (pa === void 0) return -1;
+	if (pb === void 0) return 1;
+	for (const key of [
+		"major",
+		"minor",
+		"patch"
+	]) if (pa[key] !== pb[key]) return pa[key] < pb[key] ? -1 : 1;
+	if (pa.prerelease.length === 0 && pb.prerelease.length === 0) return 0;
+	if (pa.prerelease.length === 0) return 1;
+	if (pb.prerelease.length === 0) return -1;
+	for (let index = 0; index < Math.max(pa.prerelease.length, pb.prerelease.length); index++) {
+		const ra = pa.prerelease[index];
+		const rb = pb.prerelease[index];
+		if (ra === void 0) return -1;
+		if (rb === void 0) return 1;
+		if (ra === rb) continue;
+		const numericA = /^\d+$/.test(ra);
+		const numericB = /^\d+$/.test(rb);
+		if (numericA && numericB) return Number(ra) < Number(rb) ? -1 : 1;
+		if (numericA) return -1;
+		if (numericB) return 1;
+		return ra < rb ? -1 : 1;
+	}
+	return 0;
+}
+/** Read a package.json at a path, tolerating any parse/IO failure. */
+function readManifest(path) {
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf8"));
+		return typeof parsed === "object" && parsed !== null ? parsed : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Locate the owning dsh profile by walking up from an installed package's
+* manifest until a manifest named `dsh-profile-*` appears (the profile
+* directory is the first ancestor whose package.json carries that name).
+* @param anchorManifestPath - absolute path of the anchor package.json.
+* @returns the profile name/dir, or undefined when not profile-installed.
+*/
+function findProfile(anchorManifestPath) {
+	let dir = dirname(anchorManifestPath);
+	for (let depth = 0; depth < PROFILE_WALK_DEPTH; depth++) {
+		const name = readManifest(join(dir, "package.json"))?.name;
+		if (typeof name === "string" && name.startsWith(PROFILE_NAME_PREFIX)) return {
+			name: name.slice(12),
+			dir
+		};
+		const parent = dirname(dir);
+		if (parent === dir) return void 0;
+		dir = parent;
+	}
+}
+/** Whether a dependency spec is a local link/file/dev-mode install. */
+function isLinkedSpec(spec) {
+	if (typeof spec !== "string") return false;
+	return /^(?:link|file):|^\.{1,2}(?:[/\\]|$)/.test(spec);
+}
+/**
+* Resolve the anchor package's manifest path. The aggregate package is the
+* canonical entry point; this plugin's own package is the fallback.
+* @param resolve - a Node resolve implementation scoped to the host process.
+* @returns the absolute manifest path, or undefined when neither is installed.
+*/
+function resolveAnchorManifest(resolve) {
+	for (const name of [AGGREGATE_PACKAGE, SELF_PACKAGE]) try {
+		return resolve(name + "/package.json");
+	} catch {}
+}
+/**
+* Resolve what an update would touch: the owning profile directory and the
+* family package list. Fails with an error code when the anchor is missing
+* ('not-found') or is a local dev install ('link').
+* @param deps - the anchor manifest path (resolveAnchorManifest output).
+* @returns the target, or the failure code.
+*/
+function resolveUpdateTarget(deps) {
+	const manifestPath = deps.anchorManifestPath;
+	if (manifestPath === void 0) return { error: "not-found" };
+	const manifest = readManifest(manifestPath);
+	if (manifest === void 0) return { error: "not-found" };
+	const anchor = typeof manifest.name === "string" ? manifest.name : void 0;
+	if (anchor === void 0) return { error: "not-found" };
+	const profile = findProfile(manifestPath);
+	if (profile === void 0) return { error: "link" };
+	const spec = (readManifest(join(profile.dir, "package.json"))?.dependencies)?.[anchor];
+	if (isLinkedSpec(spec)) return { error: "link" };
+	return {
+		profileName: profile.name,
+		profileDir: profile.dir,
+		packages: [anchor, ...familyChildren(manifest)]
+	};
+}
+/** Family children of the anchor: its dependencies under the family scope. */
+function familyChildren(anchorManifest) {
+	const dependencies = anchorManifest.dependencies;
+	if (typeof dependencies !== "object" || dependencies === null) return [];
+	const names = [];
+	for (const [name, spec] of Object.entries(dependencies)) if (name.startsWith("@linxin666/") && typeof spec === "string") names.push(name);
+	return names;
+}
+/**
+* Probe the npm registry for one package's latest release.
+* @param name - the package name (scope slash URL-encoded).
+* @param fetchImpl - the fetch implementation (global fetch in the host).
+* @param timeoutMs - probe timeout.
+* @returns the latest version string, or undefined on any failure.
+*/
+async function fetchLatestVersion(name, fetchImpl, timeoutMs = 1e4) {
+	try {
+		const controller = new AbortController();
+		const timer = setTimeout(() => {
+			controller.abort();
+		}, timeoutMs);
+		try {
+			const response = await fetchImpl("https://registry.npmjs.org/" + name.replace("/", "%2F") + "/latest");
+			if (!response.ok) return void 0;
+			const body = await response.json();
+			if (typeof body !== "object" || body === null) return void 0;
+			const version = body.version;
+			return typeof version === "string" ? version : void 0;
+		} finally {
+			clearTimeout(timer);
+		}
+	} catch {
+		return;
+	}
+}
+/** The resolved current version of one family package (probe failure tolerated). */
+function readInstalledVersion(resolve, name) {
+	try {
+		const path = resolve(name + "/package.json");
+		const version = path === void 0 ? void 0 : readManifest(path)?.version;
+		return typeof version === "string" ? version : "0.0.0";
+	} catch {
+		return "0.0.0";
+	}
+}
+/**
+* Build the update status: locate the anchor, detect the install mode, and
+* compare every family package against the npm registry.
+* @param deps - manifest resolution + registry probe seams.
+* @returns the status snapshot.
+*/
+async function checkUpdates(deps) {
+	const manifestPath = deps.anchorManifestPath;
+	if (manifestPath === void 0) return {
+		mode: "missing",
+		packages: [],
+		outdated: false
+	};
+	const manifest = readManifest(manifestPath);
+	if (manifest === void 0) return {
+		mode: "missing",
+		packages: [],
+		outdated: false
+	};
+	const anchor = typeof manifest.name === "string" ? manifest.name : void 0;
+	if (anchor === void 0) return {
+		mode: "missing",
+		packages: [],
+		outdated: false
+	};
+	const profile = findProfile(manifestPath);
+	const profileManifest = profile === void 0 ? void 0 : readManifest(join(profile.dir, "package.json"));
+	const linked = profile === void 0 || isLinkedSpec((profileManifest?.dependencies)?.[anchor]);
+	if (profile === void 0) return {
+		mode: "link",
+		packages: [],
+		outdated: false
+	};
+	const names = [anchor, ...familyChildren(manifest)];
+	const packages = [];
+	let probeFailures = 0;
+	for (const name of names) {
+		const latest = await deps.fetchLatest(name);
+		if (latest === void 0) probeFailures++;
+		const current = readInstalledVersion(deps.resolve, name);
+		packages.push({
+			name,
+			current,
+			latest,
+			outdated: latest !== void 0 && latest !== current && compareVersions(latest, current) > 0
+		});
+	}
+	const error = probeFailures === names.length && names.length > 0 ? "registry-unreachable" : void 0;
+	return {
+		mode: linked ? "link" : "npm",
+		profileName: profile.name,
+		anchor,
+		packages,
+		outdated: packages.some((packageStatus) => packageStatus.outdated),
+		...error !== void 0 ? { error } : {}
+	};
+}
+/** Cap on captured pnpm output (keeps error payloads bounded). */
+const OUTPUT_CAP = 16 * 1024;
+/**
+* Run the update: `pnpm update <packages>` inside the profile directory.
+* @param deps - profile dir, package list, and spawn/timeout seams.
+* @returns the outcome with captured output.
+*/
+function runUpdate(deps) {
+	return new Promise((resolve) => {
+		const child = (deps.spawnImpl ?? spawn)("pnpm", ["update", ...deps.packages], {
+			cwd: deps.profileDir,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let output = "";
+		const append = (chunk) => {
+			output += chunk.toString("utf8");
+			if (output.length > OUTPUT_CAP) output = output.slice(output.length - OUTPUT_CAP);
+		};
+		child.stdout?.on("data", append);
+		child.stderr?.on("data", append);
+		const timer = setTimeout(() => {
+			child.kill("SIGTERM");
+			resolve({
+				ok: false,
+				exitCode: null,
+				output,
+				error: "update timed out; install process killed",
+				errorCode: "timeout"
+			});
+		}, deps.timeoutMs ?? 10 * 6e4);
+		child.on("error", (error) => {
+			clearTimeout(timer);
+			const missing = error.code === "ENOENT";
+			resolve({
+				ok: false,
+				exitCode: null,
+				output,
+				error: missing ? "pnpm not found on PATH" : error.message,
+				errorCode: missing ? "pnpm-missing" : void 0
+			});
+		});
+		child.on("close", (code) => {
+			clearTimeout(timer);
+			resolve({
+				ok: code === 0,
+				exitCode: code,
+				output,
+				error: code === 0 ? void 0 : "pnpm exited with code " + String(code),
+				...code === 0 ? {} : { errorCode: "pnpm-failed" }
+			});
+		});
+	});
+}
+//#endregion
+//#region src/update-routes.ts
+/** Route paths (exact matches under /api). */
+const UPDATE_PATHS = {
+	status: "/api/update/status",
+	run: "/api/update/run"
+};
+/** One JSON response. */
+function writeJson(res, status, body) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"referrer-policy": "no-referrer"
+	});
+	res.end(payload);
+}
+/**
+* Build the /api/update route family.
+* @param deps - fence + check/run seams.
+* @returns the exact routes to register on webServer.
+*/
+function makeUpdateRoutes(deps) {
+	const handleStatus = async (req, res) => {
+		if (req.method !== "GET") {
+			res.writeHead(405, { "content-type": "text/plain; charset=utf-8" });
+			res.end("method not allowed");
+			return;
+		}
+		if (!deps.fence(req)) {
+			writeJson(res, 403, {
+				ok: false,
+				code: "forbidden"
+			});
+			return;
+		}
+		writeJson(res, 200, await deps.check());
+	};
+	const handleRun = async (req, res) => {
+		if (req.method !== "POST") {
+			res.writeHead(405, { "content-type": "text/plain; charset=utf-8" });
+			res.end("method not allowed");
+			return;
+		}
+		if (!deps.fence(req)) {
+			writeJson(res, 403, {
+				ok: false,
+				code: "forbidden"
+			});
+			return;
+		}
+		writeJson(res, 200, await deps.run());
+	};
+	return [{
+		kind: "exact",
+		path: UPDATE_PATHS.status,
+		handler: handleStatus
+	}, {
+		kind: "exact",
+		path: UPDATE_PATHS.run,
+		handler: handleRun
+	}];
+}
 //#endregion
 //#region src/index.ts
 /**
@@ -1375,6 +1730,39 @@ function apply(ctx, config) {
 	let disposeSweep;
 	const apiProxy = ctx.get("apiProxy");
 	if (apiProxy === void 0) console.warn("remote-web-ui: apiProxy service unavailable — the mobile data channel is disabled");
+	const requireFromHost = createRequire(import.meta.url);
+	const anchorManifestPath = resolveAnchorManifest((specifier) => requireFromHost.resolve(specifier));
+	const updateRoutes = makeUpdateRoutes({
+		fence: (request) => isTrustedApiRequest(request, []),
+		check: () => checkUpdates({
+			anchorManifestPath,
+			resolve: (specifier) => {
+				try {
+					return requireFromHost.resolve(specifier);
+				} catch {
+					return;
+				}
+			},
+			fetchLatest: (name) => fetchLatestVersion(name, fetch)
+		}),
+		run: async () => {
+			const target = resolveUpdateTarget({ anchorManifestPath });
+			if ("error" in target) {
+				const code = target.error;
+				return {
+					ok: false,
+					exitCode: null,
+					output: "",
+					error: code === "not-found" ? "dsh-web-ui aggregate not installed" : "local link install — update unavailable",
+					errorCode: code
+				};
+			}
+			return runUpdate({
+				profileDir: target.profileDir,
+				packages: target.packages
+			});
+		}
+	});
 	const routes = [
 		...makeRoutes({
 			service,
@@ -1384,7 +1772,8 @@ function apply(ctx, config) {
 		...apiProxy !== void 0 ? makeMobileApiRoutes({
 			service,
 			apiProxy
-		}) : []
+		}) : [],
+		...updateRoutes
 	];
 	const gate = makeGateListener(service, () => resolve().requirePairingForLan, () => resolve().enabled);
 	ctx.effect(() => ctx.on("api/gate", gate), "remote-web-ui: api gate");

package/lib/types/client/PluginSettingsCard.d.ts

@@ -29,7 +29,7 @@ export interface PluginSettingsCardProps {
 /**
  * Render one plugin settings card.
  * @param props - the plugin's copy keys, its form state, and its controls.
- * @returns the card, or nothing when the namespace is unavailable.
+ * @returns the card, or nothing while the namespace is still loading.
  */
 export declare function PluginSettingsCard(props: PluginSettingsCardProps): import("react").JSX.Element | null;
 /** Props every field control needs regardless of its value type. */

package/lib/types/client/PluginSettingsCard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PluginSettingsCard.d.ts","sourceRoot":"","sources":["../../../src/client/PluginSettingsCard.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAGnD,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,0CAA0C;IAC1C,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IACnC,uCAAuC;IACvC,QAAQ,EAAE,eAAe,CAAA;IACzB,4EAA4E;IAC5E,cAAc,EAAE,eAAe,CAAA;IAC/B,kFAAkF;IAClF,KAAK,EAAE,SAAS,CAAA;IAChB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,6BAA6B;IAC7B,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,sCAmDhE;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAA;IACnB,6DAA6D;IAC7D,OAAO,EAAE,OAAO,CAAA;IAChB,qCAAqC;IACrC,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAA;IACjB,wBAAwB;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,oEAAoE;IACpE,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB;AAED,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG;IAC7C,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,+BAqCA;AAED,0CAA0C;AAC1C,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG;IAC/C,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB,+BAmCA"}
+{"version":3,"file":"PluginSettingsCard.d.ts","sourceRoot":"","sources":["../../../src/client/PluginSettingsCard.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAGnD,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,0CAA0C;IAC1C,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IACnC,uCAAuC;IACvC,QAAQ,EAAE,eAAe,CAAA;IACzB,4EAA4E;IAC5E,cAAc,EAAE,eAAe,CAAA;IAC/B,kFAAkF;IAClF,KAAK,EAAE,SAAS,CAAA;IAChB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,6BAA6B;IAC7B,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,sCAiFhE;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAA;IACnB,6DAA6D;IAC7D,OAAO,EAAE,OAAO,CAAA;IAChB,qCAAqC;IACrC,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAA;IACjB,wBAAwB;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,oEAAoE;IACpE,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB;AAED,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG;IAC7C,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,+BAqCA;AAED,0CAA0C;AAC1C,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG;IAC/C,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB,+BAmCA"}

package/lib/types/client/PluginSettingsCard.js

@@ -12,7 +12,7 @@ import css from './settings-card.module.css';
 /**
  * Render one plugin settings card.
  * @param props - the plugin's copy keys, its form state, and its controls.
- * @returns the card, or nothing when the namespace is unavailable.
+ * @returns the card, or nothing while the namespace is still loading.
  */
 export function PluginSettingsCard(props) {
     const [open, setOpen] = useState(false);
@@ -21,6 +21,15 @@ export function PluginSettingsCard(props) {
         return null;
     const title = props.t(props.titleKey);
     const blocked = !state.dirty || state.invalid || state.saving;
+    // The namespace exists but the Host does not serve it to this client (the
+    // official settings allowlist omits third-party namespaces): show a card
+    // that explains the gap instead of vanishing, so a missing card never
+    // reads as a missing plugin.
+    if (!state.exposed) {
+        return (_jsxs("li", { className: css.card, children: [_jsxs("button", { type: "button", className: css.header, "aria-expanded": open, "aria-label": `${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`, onClick: () => { setOpen(!open); }, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, children: title }), _jsx("span", { className: css.description, children: props.t(props.descriptionKey) })] }), _jsx("span", { className: open ? css.chevronOpen : css.chevron, children: "\u25BE" })] }), open
+                    ? (_jsx("div", { className: css.body, children: _jsx("p", { className: css.notExposed, role: "status", children: props.t('settings.notExposed') }) }))
+                    : null] }));
+    }
     return (_jsxs("li", { className: css.card, children: [_jsxs("button", { type: "button", className: css.header, "aria-expanded": open, "aria-label": `${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`, onClick: () => { setOpen(!open); }, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, children: title }), _jsx("span", { className: css.description, children: props.t(props.descriptionKey) })] }), state.dirty ? _jsx("span", { className: css.pending, children: props.t('settings.unsaved') }) : null, _jsx("span", { className: open ? css.chevronOpen : css.chevron, children: "\u25BE" })] }), open
                 ? (_jsxs("div", { className: css.body, children: [!state.writable ? _jsx("p", { className: css.readOnly, role: "status", children: props.t('settings.readOnly') }) : null, props.children, _jsxs("div", { className: css.footer, children: [state.failed ? _jsx("p", { className: css.failed, role: "status", children: props.t('settings.saveFailed') }) : null, _jsx("button", { type: "button", className: css.discard, disabled: !state.dirty || state.saving, onClick: props.onDiscard, children: props.t('settings.discard') }), _jsx("button", { type: "button", className: css.save, disabled: blocked, onClick: props.onSave, children: props.t(!state.saving ? 'settings.save' : 'settings.saving') })] })] }))
                 : null] }));

package/lib/types/client/RemoteEntry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RemoteEntry.d.ts","sourceRoot":"","sources":["../../../src/client/RemoteEntry.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAOjF,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;AAcrF;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,gBAAgB,+BAoJvE"}
+{"version":3,"file":"RemoteEntry.d.ts","sourceRoot":"","sources":["../../../src/client/RemoteEntry.tsx"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAQjF,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;AAcrF;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,gBAAgB,+BAuJvE"}

package/lib/types/client/RemoteEntry.js

@@ -1,17 +1,19 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
- * The sidebar remote-control seat: the phone-icon trigger beside the
- * settings button plus the pairing panel modal. Owns the panel behavior —
- * token minting on open, the status SSE subscription, stop/refresh/copy —
- * and renders the pure {@link RemotePanel} body. Component-local state per
- * the client stack rules: nothing here survives remounts or crosses
- * entries.
+ * The sidebar remote-control seat: the update trigger plus the phone-icon
+ * trigger beside the settings button, and the pairing panel modal. Owns the
+ * panel behavior — token minting on open, the status SSE subscription,
+ * stop/refresh/copy — and renders the pure {@link RemotePanel} body. The
+ * update seat (the dsh-web-ui self-update flow) rides the same footer row,
+ * rendered by {@link UpdateEntry}. Component-local state per the client
+ * stack rules: nothing here survives remounts or crosses entries.
  */
 import { useCallback, useEffect, useRef, useState } from 'react';
 import { createPortal } from 'react-dom';
 import { RemotePanel } from "./RemotePanel.js";
 import { copyText, issuePair, stopPair } from "./pair-api.js";
 import { PhoneIcon } from "./PhoneIcon.js";
+import { UpdateEntry } from "./UpdateEntry.js";
 import css from './remote.module.css';
 /** Apply one status frame onto the current ready state. */
 function mergeFrame(state, frame) {
@@ -154,7 +156,7 @@ export function RemoteEntry({ wide, useWorkspaces, t }) {
             window.setTimeout(() => { setCopied(false); }, 1500);
         });
     }, [state]);
-    return (_jsxs(_Fragment, { children: [_jsx(TooltipAnchor, { wide: wide, label: t('entry.label'), onClick: openPanel }), open && createPortal((_jsxs("div", { className: css.overlay, role: "presentation", children: [_jsx("div", { className: css.mask, "aria-hidden": "true", onClick: closePanel }), _jsx(RemotePanel, { t: t, state: state, copied: copied, onClose: closePanel, onStop: handleStop, onRefresh: handleRefresh, onCopy: handleCopy, onPickAddress: handlePickAddress, onPickPublic: handlePickPublic })] })), document.body)] }));
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: css.entryRow, "data-rail": wide ? undefined : 'rail', children: [_jsx(UpdateEntry, { wide: wide, t: t }), _jsx(TooltipAnchor, { wide: wide, label: t('entry.label'), onClick: openPanel })] }), open && createPortal((_jsxs("div", { className: css.overlay, role: "presentation", children: [_jsx("div", { className: css.mask, "aria-hidden": "true", onClick: closePanel }), _jsx(RemotePanel, { t: t, state: state, copied: copied, onClose: closePanel, onStop: handleStop, onRefresh: handleRefresh, onCopy: handleCopy, onPickAddress: handlePickAddress, onPickPublic: handlePickPublic })] })), document.body)] }));
 }
 /** The trigger: an icon button matching the settings rail/row geometry. */
 function TooltipAnchor({ wide, label, onClick }) {

package/lib/types/client/UpdateEntry.d.ts

@@ -0,0 +1,14 @@
+import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
+/** Entry props: the sidebar column state + the standard locale seat. */
+export interface UpdateEntryProps {
+    /** Whether the sidebar renders wide content (false = 56px rail). */
+    wide: boolean;
+    t: TranslateNS<'remote'>;
+}
+/**
+ * Render the update trigger and panel.
+ * @param props - column state and locale seat.
+ * @returns the entry element tree.
+ */
+export declare function UpdateEntry({ wide, t }: UpdateEntryProps): import("react").JSX.Element;
+//# sourceMappingURL=UpdateEntry.d.ts.map

package/lib/types/client/UpdateEntry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateEntry.d.ts","sourceRoot":"","sources":["../../../src/client/UpdateEntry.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAOnE,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,IAAI,EAAE,OAAO,CAAA;IACb,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;CACzB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,gBAAgB,+BAmExD"}