@linxin666/dsh-remote-web-ui 0.4.2 → 0.4.3

package/src/tunnel.ts

@@ -12,9 +12,16 @@
  *
  * The cloudflared package's Tunnel is a thin spawn wrapper; this manager
  * owns the lifecycle policy (binary readiness, URL timeout, restart
- * backoff) around it. All seams — the tunnel factory, binary readiness,
- * timers — are injectable so the whole lifecycle is unit-testable without
- * a real binary or network.
+ * backoff, and the public-URL readiness watchdog) around it. All seams — the
+ * tunnel factory, binary readiness, the URL probe, timers — are injectable
+ * so the whole lifecycle is unit-testable without a real binary or network.
+ *
+ * 'running' is not a terminal state: the connector can lose its edge
+ * registration while the process keeps living, which leaves a hostname that
+ * no longer resolves. The watchdog below probes the public URL of a running
+ * tunnel and reuses the crash-restart path when it stops answering, so the
+ * relay is re-registered against a freshly minted URL instead of proxying a
+ * dead one (issue #1723).
  */
 
 import { existsSync } from 'node:fs'
@@ -108,6 +115,45 @@ export interface TunnelHandle {
   stop(): boolean
 }
 
+/**
+ * Probe one public tunnel URL from the host. Resolves true when the URL is
+ * served (any HTTP answer below 500 — a harness without credentials answers
+ * 401/403, which is a healthy round trip), false for a DNS failure, a refused
+ * connection, a timeout, or a Cloudflare 5xx (530 "Origin DNS error" / 1033)
+ * — the shapes a tunnel that lost its edge registration produces.
+ *
+ * The probe must never reject: the watchdog reads a rejection as a dead
+ * tunnel and restarts on it, so a local programming error would otherwise
+ * recycle working tunnels forever.
+ * @param url - the tunnel's public URL.
+ * @param timeoutMs - how long one probe may take.
+ * @returns whether the URL answered as a live origin.
+ */
+export async function probeTunnelUrl(url: string, timeoutMs: number): Promise<boolean> {
+  const controller = new AbortController()
+  const timer = setTimeout(() => { controller.abort() }, timeoutMs)
+  try {
+    const response = await fetch(url, {
+      method: 'GET',
+      redirect: 'manual',
+      cache: 'no-store',
+      signal: controller.signal,
+    })
+    // Drain so the connection is reusable instead of half-read.
+    await response.body?.cancel().catch(() => undefined)
+    return response.status < 500
+  } catch {
+    return false
+  } finally {
+    clearTimeout(timer)
+  }
+}
+
+/** Default probe: the real network round trip. */
+async function defaultProbe(url: string, timeoutMs: number): Promise<boolean> {
+  return await probeTunnelUrl(url, timeoutMs)
+}
+
 /** Injectable seams (defaults are the real cloudflared package + node timers). */
 export interface TunnelManagerOptions {
   /** Spawn one tunnel process for the target (quick or named). */
@@ -122,6 +168,14 @@ export interface TunnelManagerOptions {
   restartMaxMs?: number
   /** Timer source (injected in tests). */
   timer?: { setTimeout(fn: () => void, ms: number): unknown; clearTimeout(t: unknown): void }
+  /** Probe one public URL; false means the tunnel stopped answering. */
+  probe?: (url: string, timeoutMs: number) => Promise<boolean>
+  /** How often to probe the public URL of a running tunnel (0 disables it). */
+  healthCheckIntervalMs?: number
+  /** Consecutive probe failures after which the tunnel is restarted. */
+  healthCheckFailures?: number
+  /** How long one probe may take. */
+  probeTimeoutMs?: number
 }
 
 /** Time box for the `--version` probe that validates a staged binary. */
@@ -195,6 +249,13 @@ export function createBinaryReadiness(executable: string, seams: BinaryReadiness
 /** How many archive downloads one process may attempt before giving up. */
 export const MAX_BINARY_INSTALL_ATTEMPTS = 3
 
+/** How often a running tunnel's public URL is probed (issue #1723). */
+export const DEFAULT_HEALTH_CHECK_INTERVAL_MS = 60_000
+/** Consecutive failed probes before the tunnel is declared dead. */
+export const DEFAULT_HEALTH_CHECK_FAILURES = 2
+/** How long one public-URL probe may take. */
+export const DEFAULT_PROBE_TIMEOUT_MS = 10_000
+
 /** The readiness policy the manager uses by default: the package's real binary path. */
 const defaultBinaryReadiness = createBinaryReadiness(bin)
 
@@ -289,6 +350,10 @@ export class TunnelManager {
   private readonly restartBaseMs: number
   private readonly restartMaxMs: number
   private readonly timer: { setTimeout(fn: () => void, ms: number): unknown; clearTimeout(t: unknown): void }
+  private readonly probe: (url: string, timeoutMs: number) => Promise<boolean>
+  private readonly healthCheckIntervalMs: number
+  private readonly healthCheckFailures: number
+  private readonly probeTimeoutMs: number
 
   private phase: TunnelPhase = 'stopped'
   private url: string | undefined
@@ -297,6 +362,8 @@ export class TunnelManager {
   private handle: TunnelHandle | undefined
   private urlTimer: unknown | undefined
   private restartTimer: unknown | undefined
+  private healthTimer: unknown | undefined
+  private healthFailures = 0
   private attempts = 0
   // Generation counter: a stale ensureBinary resolution from an earlier
   // start() must not spawn a second handle after a stop/start cycle.
@@ -315,6 +382,10 @@ export class TunnelManager {
     this.restartBaseMs = options.restartBaseMs ?? 5_000
     this.restartMaxMs = options.restartMaxMs ?? 60_000
     this.timer = options.timer ?? nodeTimer
+    this.probe = options.probe ?? defaultProbe
+    this.healthCheckIntervalMs = options.healthCheckIntervalMs ?? DEFAULT_HEALTH_CHECK_INTERVAL_MS
+    this.healthCheckFailures = options.healthCheckFailures ?? DEFAULT_HEALTH_CHECK_FAILURES
+    this.probeTimeoutMs = options.probeTimeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS
   }
 
   /** The current status frame. */
@@ -418,6 +489,9 @@ export class TunnelManager {
     this.error = undefined
     this.attempts = 0
     this.setPhase('running')
+    // The URL is out; from here the connector can still lose its edge
+    // registration without the process exiting, so readiness is supervised.
+    this.startHealthWatch(value)
     for (const listener of this.urlListeners) {
       try {
         listener(value)
@@ -427,6 +501,69 @@ export class TunnelManager {
     }
   }
 
+  /**
+   * Watch the readiness of a running tunnel. cloudflared can keep its process
+   * (and its metrics port) alive while every edge connection is gone, leaving
+   * a minted hostname that no longer resolves: the manager used to report
+   * 'running' forever and the relay kept forwarding to that dead address, so
+   * the phone hit Cloudflare 1016 instead of the relay's offline page
+   * (issue #1723). A bounded number of consecutive probe failures ends the
+   * attempt through the ordinary fail/backoff path, which mints a new URL and
+   * re-announces the relay.
+   */
+  private startHealthWatch(url: string): void {
+    this.stopHealthWatch()
+    // A phase listener may have stopped the tunnel or replaced its target
+    // while this URL was being announced; only a live running phase schedules.
+    if (this.stopping || this.phase !== 'running') return
+    if (this.healthCheckIntervalMs <= 0 || this.healthCheckFailures <= 0) return
+    this.healthFailures = 0
+    const schedule = (): void => {
+      this.healthTimer = this.timer.setTimeout(() => {
+        this.healthTimer = undefined
+        void this.healthCheck(url)
+      }, this.healthCheckIntervalMs)
+    }
+    schedule()
+  }
+
+  /** One probe round of the running tunnel's public URL. */
+  private async healthCheck(url: string): Promise<void> {
+    // The tunnel may have been stopped, failed, or replaced while the probe
+    // was in flight; only a still-running tunnel toward this same URL is
+    // judged by the result.
+    if (this.stopping || this.phase !== 'running' || this.url !== url) return
+    let alive = false
+    try {
+      alive = await this.probe(url, this.probeTimeoutMs)
+    } catch {
+      alive = false
+    }
+    if (this.stopping || this.phase !== 'running' || this.url !== url) return
+    if (alive) {
+      this.healthFailures = 0
+    } else {
+      this.healthFailures += 1
+      if (this.healthFailures >= this.healthCheckFailures) {
+        this.fail('the tunnel stopped answering on its public URL')
+        return
+      }
+    }
+    this.healthTimer = this.timer.setTimeout(() => {
+      this.healthTimer = undefined
+      void this.healthCheck(url)
+    }, this.healthCheckIntervalMs)
+  }
+
+  /** Cancel the readiness watchdog (teardown, restart, stop). */
+  private stopHealthWatch(): void {
+    if (this.healthTimer !== undefined) {
+      this.timer.clearTimeout(this.healthTimer)
+      this.healthTimer = undefined
+    }
+    this.healthFailures = 0
+  }
+
   private handleExit(): void {
     // The exit handler is detached during teardown, so reaching this point
     // means an unexpected death: fail the current phase and schedule a retry.
@@ -446,6 +583,7 @@ export class TunnelManager {
       this.timer.clearTimeout(this.urlTimer)
       this.urlTimer = undefined
     }
+    this.stopHealthWatch()
     this.setPhase('failed')
     this.attempts += 1
     const delay = Math.min(this.restartBaseMs * 2 ** (this.attempts - 1), this.restartMaxMs)
@@ -458,6 +596,7 @@ export class TunnelManager {
   /** Stop the current process and cancel every pending timer (no phase change). */
   private teardown(): void {
     this.stopping = true
+    this.stopHealthWatch()
     if (this.urlTimer !== undefined) {
       this.timer.clearTimeout(this.urlTimer)
       this.urlTimer = undefined

package/lib/types/client/UpdateEntry.d.ts

@@ -1,14 +0,0 @@
-import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
-/** Entry props: the sidebar column state + the standard locale seat. */
-export interface UpdateEntryProps {
-    /** Whether the sidebar renders wide content (false = 56px rail). */
-    wide: boolean;
-    t: TranslateNS<'remote'>;
-}
-/**
- * Render the update trigger and panel.
- * @param props - column state and locale seat.
- * @returns the entry element tree.
- */
-export declare function UpdateEntry({ wide, t }: UpdateEntryProps): import("react").JSX.Element;
-//# sourceMappingURL=UpdateEntry.d.ts.map

package/lib/types/client/UpdateEntry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UpdateEntry.d.ts","sourceRoot":"","sources":["../../../src/client/UpdateEntry.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAOnE,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,IAAI,EAAE,OAAO,CAAA;IACb,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;CACzB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,gBAAgB,+BAkHxD"}

package/lib/types/client/UpdateEntry.js

@@ -1,112 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-/**
- * The sidebar update seat: the download trigger beside the remote-control
- * trigger plus the update panel modal. Owns the flow — probe the registry
- * on open, show the result, and let the user start the update from the
- * result view (#507), then report the outcome (restart hint on success,
- * translated failure on error).
- * Component-local state per the client stack rules.
- */
-import { useCallback, useEffect, useRef, useState } from "react";
-import { createPortal } from "react-dom";
-import { IconDownloadOutlineRegular } from '@deepseek-ai/dsh-client-ui-primitives';
-import { fetchUpdateStatus, runUpdate, UpdateStatusError } from "./update-api.js";
-import { UpdatePanel } from "./UpdatePanel.js";
-import css from "./remote.module.css";
-/**
- * Render the update trigger and panel.
- * @param props - column state and locale seat.
- * @returns the entry element tree.
- */
-export function UpdateEntry({ wide, t }) {
-    const [open, setOpen] = useState(false);
-    const [view, setView] = useState({ kind: "checking" });
-    const [updateAvailable, setUpdateAvailable] = useState(false);
-    const runToken = useRef(0);
-    const availabilityToken = useRef(0);
-    const mounted = useRef(false);
-    const probeAvailability = useCallback(async () => {
-        const token = ++availabilityToken.current;
-        try {
-            const status = await fetchUpdateStatus();
-            if (token === availabilityToken.current) {
-                setUpdateAvailable(status.mode === "npm" && status.outdated);
-            }
-        }
-        catch {
-            if (token === availabilityToken.current)
-                setUpdateAvailable(false);
-        }
-    }, []);
-    const check = useCallback(async () => {
-        const availabilityCheck = ++availabilityToken.current;
-        setView({ kind: "checking" });
-        let status;
-        try {
-            status = await fetchUpdateStatus();
-        }
-        catch (error) {
-            if (availabilityCheck === availabilityToken.current)
-                setUpdateAvailable(false);
-            // HTTP 404: the update route is not mounted — the host process runs an
-            // older plugin build (client refreshed, host did not). Restarting dsh
-            // web loads the new plugin; a plain network failure gets the generic
-            // offline copy instead of a misleading "cannot reach update source".
-            if (error instanceof UpdateStatusError && error.status === 404) {
-                setView({ kind: "error", message: t("update.unmounted"), detail: t("update.unmountedDetail") });
-                return;
-            }
-            setView({ kind: "error", message: t("update.offline"), detail: t("update.offlineDetail") });
-            return;
-        }
-        if (availabilityCheck === availabilityToken.current) {
-            setUpdateAvailable(status.mode === "npm" && status.outdated);
-        }
-        if (status.error === "registry-unreachable") {
-            setView({ kind: "result", status });
-            return;
-        }
-        // Checking never starts an update by itself (#507): the result view
-        // carries the confirmation button that calls startUpdate.
-        setView({ kind: "result", status });
-    }, [t]);
-    const startUpdate = useCallback(async (status) => {
-        if (status.mode !== "npm" || !status.outdated)
-            return;
-        setView({ kind: "updating", status });
-        const token = ++runToken.current;
-        try {
-            const result = await runUpdate();
-            if (result.ok && mounted.current)
-                setUpdateAvailable(false);
-            if (token !== runToken.current)
-                return;
-            setView({ kind: "done", result });
-        }
-        catch {
-            if (token !== runToken.current)
-                return;
-            setView({ kind: "error", message: t("update.error"), detail: t("update.offlineDetail") });
-        }
-    }, [t]);
-    const openPanel = useCallback(() => {
-        setOpen(true);
-        void check();
-    }, [check]);
-    const closePanel = useCallback(() => {
-        runToken.current++;
-        setOpen(false);
-    }, []);
-    // Check once after mount without opening the panel or starting an update.
-    useEffect(() => {
-        mounted.current = true;
-        void probeAvailability();
-        return () => {
-            mounted.current = false;
-            runToken.current++;
-            availabilityToken.current++;
-        };
-    }, [probeAvailability]);
-    const updateLabel = updateAvailable ? t("update.availableLabel") : t("update.label");
-    return (_jsxs(_Fragment, { children: [_jsxs("button", { type: "button", className: css.trigger, "data-wide": wide ? (updateAvailable ? "wide" : undefined) : "rail", "data-update-available": updateAvailable ? "true" : undefined, "aria-label": updateLabel, "aria-expanded": open, title: updateLabel, onClick: openPanel, children: [_jsx(IconDownloadOutlineRegular, { size: wide ? 16 : 18 }), updateAvailable && wide && (_jsx("span", { className: css.updateBadgeText, children: t("update.badge") }))] }), open && createPortal((_jsxs("div", { className: css.overlay, role: "presentation", children: [_jsx("div", { className: css.mask, "aria-hidden": "true", onClick: closePanel }), _jsx(UpdatePanel, { t: t, view: view, onClose: closePanel, onRecheck: () => { void check(); }, onStartUpdate: (status) => { void startUpdate(status); } })] })), document.body)] }));
-}

package/lib/types/client/UpdatePanel.d.ts

@@ -1,42 +0,0 @@
-/**
- * The update panel body: check progress, version comparison, the
- * auto-update in-flight state, and the outcome (restart hint on success,
- * translated failure on error). Pure presentation — all state arrives
- * through props from the entry behavior component.
- */
-import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
-import type { UpdateRunResult, UpdateStatus } from '../update.ts';
-/** The panel view state, owned by the entry component. */
-export type UpdateView = {
-    kind: 'checking';
-} | {
-    kind: 'result';
-    status: UpdateStatus;
-} | {
-    kind: 'updating';
-    status: UpdateStatus;
-} | {
-    kind: 'done';
-    result: UpdateRunResult;
-} | {
-    kind: 'error';
-    message: string;
-    detail?: string;
-};
-/** Full panel props: copy + view state + actions. */
-export interface UpdatePanelProps {
-    t: TranslateNS<'remote'>;
-    view: UpdateView;
-    onClose(): void;
-    /** Re-run the check from a terminal state. */
-    onRecheck(): void;
-    /** Start the update from the result view (the confirmation step, #507). */
-    onStartUpdate(status: UpdateStatus): void;
-}
-/**
- * Render the update panel.
- * @param props - copy, view state, and actions.
- * @returns the panel element tree.
- */
-export declare function UpdatePanel({ t, view, onClose, onRecheck, onStartUpdate }: UpdatePanelProps): import("react").JSX.Element;
-//# sourceMappingURL=UpdatePanel.d.ts.map

package/lib/types/client/UpdatePanel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UpdatePanel.d.ts","sourceRoot":"","sources":["../../../src/client/UpdatePanel.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAEnE,OAAO,KAAK,EAAsB,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAGrF,0DAA0D;AAC1D,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;IACxB,IAAI,EAAE,UAAU,CAAA;IAChB,OAAO,IAAI,IAAI,CAAA;IACf,8CAA8C;IAC9C,SAAS,IAAI,IAAI,CAAA;IACjB,2EAA2E;IAC3E,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAA;CAC1C;AAYD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,gBAAgB,+BAiD3F"}

package/lib/types/client/UpdatePanel.js

@@ -1,101 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { IconCloseOutlineRegular, IconRefreshOutlineRegular } from '@deepseek-ai/dsh-client-ui-primitives';
-import css from "./remote.module.css";
-/** The anchor package name (aggregate first) for copy purposes. */
-function anchorName(status) {
-    return status?.anchor ?? status?.packages[0]?.name;
-}
-/** The latest npm release of the anchor, for reference copy. */
-function anchorLatest(status) {
-    return status?.packages[0]?.latest;
-}
-/**
- * Render the update panel.
- * @param props - copy, view state, and actions.
- * @returns the panel element tree.
- */
-export function UpdatePanel({ t, view, onClose, onRecheck, onStartUpdate }) {
-    const status = view.kind === "result" || view.kind === "updating" ? view.status : undefined;
-    const title = view.kind === "done" && view.result.ok ? t("update.done") : t("update.title");
-    const subtitle = subtitleOf(t, view);
-    return (_jsxs("div", { className: css.panel, role: "dialog", "aria-modal": "true", "aria-label": title, children: [_jsxs("div", { className: css.header, children: [_jsxs("div", { className: css.heading, children: [_jsx("h2", { className: css.title, children: title }), subtitle !== undefined && _jsx("p", { className: css.subtitle, children: subtitle })] }), _jsx("button", { type: "button", className: css.close, "aria-label": t("update.close"), onClick: onClose, children: _jsx(IconCloseOutlineRegular, {}) })] }), view.kind === "checking" && _jsx("p", { className: css.updateStatus, children: t("update.checking") }), view.kind === "result" && status !== undefined && _jsx(ResultBody, { t: t, status: status }), view.kind === "result" && status !== undefined && status.mode === "npm" && status.outdated && status.error === undefined && (_jsx("div", { className: css.updateActions, children: _jsx("button", { type: "button", className: css.updateRetry, onClick: () => onStartUpdate(status), children: t("update.start") }) })), view.kind === "updating" && status !== undefined && (_jsxs("div", { children: [_jsx("p", { className: css.updateStatus, children: t("update.updating", { name: anchorName(status) ?? "", version: anchorLatest(status) ?? "" }) }), _jsx("p", { className: css.updateDetail, children: t("update.cooldownNotice") }), _jsx(PackageSummary, { t: t, status: status })] })), view.kind === "done" && _jsx(DoneBody, { t: t, result: view.result }), view.kind === "error" && (_jsxs("div", { children: [_jsx("p", { className: css.updateError, children: view.message }), view.detail !== undefined && _jsx("pre", { className: css.updateOutput, children: view.detail })] })), (view.kind === "done" || view.kind === "error") && (_jsx("div", { className: css.updateActions, children: _jsxs("button", { type: "button", className: css.updateRetry, onClick: onRecheck, children: [_jsx(IconRefreshOutlineRegular, {}), " ", t("update.retry")] }) }))] }));
-}
-/** The subtitle copy per view state (absent on plain results). */
-function subtitleOf(t, view) {
-    switch (view.kind) {
-        case "checking":
-            return t("update.checking");
-        case "updating":
-            return t("update.updatingTitle");
-        case "result":
-            return undefined;
-        case "done":
-            return view.result.ok ? t("update.doneDetail") : t("update.error");
-        case "error":
-            // The error body below carries the message; no subtitle duplication.
-            return undefined;
-    }
-}
-/** The checked result body: mode banner + version list. */
-function ResultBody({ t, status }) {
-    const anchor = anchorName(status);
-    const latest = anchorLatest(status);
-    if (status.mode === "link") {
-        return (_jsxs("div", { children: [_jsx("p", { className: css.updateStatus, children: t("update.linkMode") }), _jsx("p", { className: css.updateDetail, children: t("update.linkModeDetail", { version: latest ?? "-" }) })] }));
-    }
-    if (status.mode === "missing") {
-        return (_jsxs("div", { children: [_jsx("p", { className: css.updateStatus, children: t("update.missing") }), _jsx("p", { className: css.updateDetail, children: t("update.missingDetail") })] }));
-    }
-    if (status.error === "registry-unreachable") {
-        return (_jsxs("div", { children: [_jsx("p", { className: css.updateStatus, children: t("update.offline") }), _jsx("p", { className: css.updateDetail, children: t("update.offlineDetail") })] }));
-    }
-    if (status.outdated) {
-        return (_jsxs("div", { children: [_jsx("p", { className: css.updateStatus, children: t("update.found") }), _jsx("p", { className: css.updateDetail, children: anchor !== undefined ? t("update.foundDetail", { name: anchor, version: latest ?? "" }) : "" }), _jsx("p", { className: css.updateDetail, children: t("update.cooldownNotice") }), _jsx(PackageSummary, { t: t, status: status })] }));
-    }
-    return (_jsxs("div", { children: [_jsx("p", { className: css.updateStatus, children: t("update.upToDate") }), anchor !== undefined && latest !== undefined && (_jsx("p", { className: css.updateDetail, children: t("update.upToDateDetail", { name: anchor, version: latest }) })), _jsx(PackageSummary, { t: t, status: status })] }));
-}
-/** Release-note summary when available; otherwise fall back to the package list. */
-function PackageSummary({ t, status }) {
-    if (status.notes === undefined)
-        return _jsx(PackageList, { status: status });
-    return (_jsxs("div", { children: [_jsx(ReleaseNotes, { t: t, notes: status.notes }), _jsxs("details", { className: css.updateVersions, children: [_jsx("summary", { className: css.updateVersionsSummary, children: t("update.componentVersions") }), _jsx(PackageList, { status: status })] })] }));
-}
-/** Render GitHub Release sections as a compact three-group list. */
-function ReleaseNotes({ t, notes }) {
-    const sections = [
-        { key: 'features', title: t("update.releaseFeatures"), items: notes.features },
-        { key: 'fixes', title: t("update.releaseFixes"), items: notes.fixes },
-        { key: 'other', title: t("update.releaseOther"), items: notes.other },
-    ].filter(section => section.items.length > 0);
-    if (sections.length === 0)
-        return _jsx("p", { className: css.updateDetail, children: t("update.releaseUnavailable") });
-    return (_jsxs("div", { className: css.updateNotes, children: [_jsx("h3", { className: css.updateNotesTitle, children: t("update.releaseNotes", { version: notes.version }) }), sections.map(section => (_jsxs("section", { className: css.updateNoteSection, children: [_jsx("h4", { className: css.updateNoteHeading, children: section.title }), _jsx("ul", { className: css.updateNoteList, children: section.items.map((item, index) => (_jsx("li", { className: css.updateNoteItem, children: item }, index))) })] }, section.key)))] }));
-}
-/** The per-package current → latest comparison list. */
-function PackageList({ status }) {
-    if (status.packages.length === 0)
-        return null;
-    return (_jsx("ul", { className: css.updateList, children: status.packages.map(packageStatus => (_jsxs("li", { className: css.updateListItem, children: [_jsx("span", { className: css.updateListName, children: packageStatus.name }), _jsxs("span", { className: css.updateListVersions, children: [packageStatus.current, packageStatus.latest !== undefined && packageStatus.latest !== packageStatus.current && (_jsxs(_Fragment, { children: [" \u2192 ", packageStatus.latest] }))] })] }, packageStatus.name))) }));
-}
-/** The outcome body: success + restart hint, or the translated failure. */
-function DoneBody({ t, result }) {
-    if (result.ok) {
-        // The title already reads "Update complete"; the body carries the details.
-        return (_jsxs("div", { children: [_jsx("p", { className: css.updateDetail, children: t("update.doneDetail") }), _jsx("p", { className: css.updateDetail, children: t("update.restartHint") })] }));
-    }
-    const message = errorMessageOf(t, result);
-    return (_jsxs("div", { children: [_jsx("p", { className: css.updateError, children: message }), result.output.trim() !== "" && _jsx("pre", { className: css.updateOutput, children: result.output.trim() })] }));
-}
-/** Translate a structured failure code; fall back to the raw message. */
-function errorMessageOf(t, result) {
-    switch (result.errorCode) {
-        case "pnpm-missing": return t("update.error.pnpmMissing");
-        case "timeout": return t("update.error.timeout");
-        case "not-found": return t("update.error.notFound");
-        case "link": return t("update.error.link");
-        case "pnpm-failed": return t("update.error.pnpmFailed", { code: String(result.exitCode ?? "?") });
-        case "stale": return t("update.error.stale");
-        case "verify-failed": return t("update.error.verifyFailed");
-        default: return result.error ?? t("update.error.unknown");
-    }
-}

package/lib/types/client/update-api.d.ts

@@ -1,29 +0,0 @@
-/**
- * Browser-side wire helpers for the /api/update surface. Plain fetch over
- * same-origin /api like the pairing client; the host half enforces the
- * loopback-only fence and owns the pnpm run.
- */
-import type { UpdateRunResult, UpdateStatus } from '../update.ts';
-/**
- * Error thrown when the update status probe fails: carries the HTTP status
- * so the panel can tell "the update route is not mounted" (404 — the host
- * process runs an older plugin build) apart from real network failures.
- */
-export declare class UpdateStatusError extends Error {
-    /** HTTP status of the failed response (0 when the fetch never returned). */
-    readonly status: number;
-    constructor(status: number);
-}
-/**
- * Probe the update status: install mode, owning profile, and the
- * current-vs-latest comparison for every family package.
- * @returns the status snapshot.
- */
-export declare function fetchUpdateStatus(): Promise<UpdateStatus>;
-/**
- * Run the update (pnpm update in the owning profile). Blocks until pnpm
- * exits — the panel shows an in-flight state meanwhile.
- * @returns the run outcome.
- */
-export declare function runUpdate(): Promise<UpdateRunResult>;
-//# sourceMappingURL=update-api.d.ts.map

package/lib/types/client/update-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"update-api.d.ts","sourceRoot":"","sources":["../../../src/client/update-api.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEjE;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBACX,MAAM,EAAE,MAAM;CAI3B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,YAAY,CAAC,CAU/D;AAED;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,CAI1D"}

package/lib/types/client/update-api.js

@@ -1,47 +0,0 @@
-/**
- * Browser-side wire helpers for the /api/update surface. Plain fetch over
- * same-origin /api like the pairing client; the host half enforces the
- * loopback-only fence and owns the pnpm run.
- */
-/**
- * Error thrown when the update status probe fails: carries the HTTP status
- * so the panel can tell "the update route is not mounted" (404 — the host
- * process runs an older plugin build) apart from real network failures.
- */
-export class UpdateStatusError extends Error {
-    /** HTTP status of the failed response (0 when the fetch never returned). */
-    status;
-    constructor(status) {
-        super('update status unavailable (HTTP ' + String(status) + ')');
-        this.status = status;
-    }
-}
-/**
- * Probe the update status: install mode, owning profile, and the
- * current-vs-latest comparison for every family package.
- * @returns the status snapshot.
- */
-export async function fetchUpdateStatus() {
-    let response;
-    try {
-        response = await fetch('api/update/status');
-    }
-    catch {
-        // Network-level failure: nothing came back at all.
-        throw new UpdateStatusError(0);
-    }
-    if (!response.ok)
-        throw new UpdateStatusError(response.status);
-    return await response.json();
-}
-/**
- * Run the update (pnpm update in the owning profile). Blocks until pnpm
- * exits — the panel shows an in-flight state meanwhile.
- * @returns the run outcome.
- */
-export async function runUpdate() {
-    const response = await fetch('api/update/run', { method: 'POST' });
-    if (!response.ok)
-        throw new Error('update run unavailable');
-    return await response.json();
-}

package/lib/types/console-output.d.ts

@@ -1,41 +0,0 @@
-/**
- * Console-output capture shared by the family's Host halves.
- *
- * A child process's stdout/stderr are raw bytes, and on Windows a console
- * program writes the OEM code page (CP936/GBK on a zh-CN system), not UTF-8.
- * Decoding each chunk on its own corrupts the text twice over: the
- * encoding is guessed wrong, and a multi-byte character split across two reads
- * decodes into two replacement characters. This capture accumulates raw bytes
- * under a byte budget and decodes exactly once, at read time.
- */
-/** Bounded byte accumulator for one child process's interleaved stdout/stderr. */
-export interface OutputCapture {
-    /** Append one raw chunk (the bytes are copied into the budget). */
-    push(chunk: Uint8Array): void;
-    /**
-     * Decode everything captured so far. Idempotent, so a caller may read the
-     * tail both after a failure branch and at settlement.
-     */
-    read(): string;
-}
-/**
- * Decode one console byte buffer. Strict UTF-8 wins whenever it is valid;
- * otherwise the bytes are not UTF-8 at all and the console wrote its own code
- * page, so the candidate that loses the least text is taken.
- * @param bytes - the captured bytes.
- * @returns the decoded text.
- */
-export declare function decodeConsoleBytes(bytes: Uint8Array): string;
-/**
- * Create a capture bounded to a byte budget. Overflow drops from the FRONT
- * (the tail is what carries a failure reason), and the cut never lands inside
- * a character: leading UTF-8 continuation bytes are dropped with it, and a
- * legacy code page's dangling lead byte — indistinguishable from a real byte
- * without knowing the encoding until the whole buffer is decoded — is removed
- * with the one replacement character it produced, so an over-long stream still
- * reads cleanly at the seam.
- * @param maxBytes - maximum retained bytes.
- * @returns the capture.
- */
-export declare function createOutputCapture(maxBytes: number): OutputCapture;
-//# sourceMappingURL=console-output.d.ts.map

package/lib/types/console-output.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"console-output.d.ts","sourceRoot":"","sources":["../../src/console-output.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IAC7B;;;OAGG;IACH,IAAI,IAAI,MAAM,CAAA;CACf;AAWD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CA2B5D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAiBnE"}