@michengai/dsh-automation 0.1.31 → 0.1.34

package/CHANGELOG.md

@@ -4,6 +4,21 @@
 
 The five most recent published versions are listed below. Git tags and GitHub Releases now mirror these entries; historical sections retain links to their original release commits.
 
+## Unreleased
+
+## 0.1.34 - 2026-09-07
+
+- Aligned the release workflow's pnpm version with the package-declared version so tag publishing can start its checks.
+
+## 0.1.33 - 2026-09-07
+
+- Added independent in-product update checks with automatic updates when a verified DSH update service is available and a profile-specific manual fallback otherwise.
+- Removed the update-button dependency on `react-dom/client` so the client can load on Hosts that do not register that module id.
+
+## 0.1.32 — 2026-09-06
+
+- Removed the fixed unattended tool allowlist and background-shell ban so tool calls and background process management follow DSH. Retained automatic rejection of approval requests and task timeout cancellation.
+
 ## 0.1.31 — 2026-09-05
 
 - Aligned the scheduled-task editor with the Host modal surface, elevation, themed mask, and borderless close icon while preserving its existing dismissal behavior.

package/CHANGELOG.zh-CN.md

@@ -4,6 +4,21 @@
 
 以下记录最近发布的五个版本。Git 标签与 GitHub Release 现已和这些条目同步；历史条目继续保留原始发布提交链接。
 
+## 未发布
+
+## 0.1.34 - 2026-09-07
+
+- 将发布工作流的 pnpm 版本与包内声明对齐，使标签发布能够进入完整校验。
+
+## 0.1.33 - 2026-09-07
+
+- 新增独立的插件内检查更新能力：仅在已验证的 DSH 更新服务可用时自动更新，其余环境提供与 Profile 对应的手工更新命令。
+- 更新按钮图标不再依赖 `react-dom/client`，避免宿主未注册该模块 id 时客户端无法加载。
+
+## 0.1.32 — 2026-09-06
+
+- 移除无人值守自动化的固定工具白名单和后台 shell 禁令，工具调用及后台进程管理统一遵循 DSH；保留需要审批即拒绝和任务超时取消约束。
+
 ## 0.1.31 — 2026-09-05
 
 - 将定时任务编辑器的浮层背景、阴影、主题遮罩和无边框关闭图标与宿主统一，同时保留原有关闭行为。

package/README.md

@@ -104,6 +104,10 @@ dsh --profile web --dump-config
 
 Restart DSH Web and hard-refresh the browser. Local installation reads and applies `cordis.patch.yml`; do not copy `lib` files manually.
 
+## Updates
+
+The settings title shows the installed version and a **Check for updates** button. When a newer release is available, **Update automatically** runs only when the DSH CLI or Desktop update service is available; otherwise, the dialog provides a profile-specific manual command to copy and run.
+
 ## Usage
 
 Open **Settings → Scheduled Tasks**, then use the panel as follows:
@@ -124,6 +128,7 @@ Each dispatched run uses the saved prompt, workspace, model, and permission boun
 | Item | Behavior |
 | --- | --- |
 | Permission | Options and the default come directly from the Host `permissionPresets` service, including custom presets. |
+| Tool calls | Follow Host tool availability, permission, and approval checks without an additional fixed tool allowlist or a background-shell ban. The Host manages background processes. |
 | Full access | The official `danger-full-access` option uses the same risk confirmation and orange warning as Chat. |
 | Approval | Chat create follows the session policy. Full access (`never`) proceeds; Workspace Write / Read Only (`ask`) shows the official card. Unattended runs stay fail-closed `never`. |
 | Retry | No automatic retry after a started run. |

package/README.zh-CN.md

@@ -104,6 +104,10 @@ dsh --profile web --dump-config
 
 完成后重启 DSH Web 并硬刷新浏览器。`dsh plugin ... add .` 会自动读取并应用 `cordis.patch.yml`；不要手工复制 `lib` 文件。
 
+## 在线更新
+
+设置标题会显示当前版本和“检查更新”按钮。发现新版后，只有检测到 DSH CLI 或 Desktop 更新服务时才可使用“自动更新”；其他环境会在弹窗中提供可复制、与当前 Profile 对应的手工更新命令。
+
 ## 使用
 
 打开「设置 → 定时任务」，再按下表操作：
@@ -124,6 +128,7 @@ dsh --profile web --dump-config
 | 项目 | 行为 |
 | --- | --- |
 | 权限 | 列表和默认值直接来自 Host 官方 `permissionPresets` 服务；支持 Host 注册的自定义预设。 |
+| 工具调用 | 遵循 Host 的工具可用性、权限和审批检查，不额外维护固定工具白名单或禁止后台 shell；后台进程由 Host 管理。 |
 | 完全访问 | 选择官方 `danger-full-access` 时显示与 Chat 一致的风险确认和橙色提示。 |
 | 审批 | 对话创建跟随当前会话策略。Full access（`never`）直接创建；Workspace Write / Read Only（`ask`）走官方授权卡。无人值守运行仍是 fail-closed 的 `never`。 |
 | 重试 | 已经开始的运行不会自动重试。 |

package/lib/client.js

@@ -4223,9 +4223,325 @@ function openSettingsSection(labels, onSelected, onMissing) {
   schedule();
 }
 
+// src/client/plugin-update-ui.ts
+var UPDATE_HEADER = "x-michengai-plugin-update";
+var STYLE_ID2 = "michengai-plugin-update-ui";
+var CSS = `
+.mpi-version{margin-left:8px;color:var(--dsw-alias-label-tertiary,#9da1aa);font-family:inherit;font-size:12px;font-weight:500;line-height:18px;letter-spacing:0;white-space:nowrap;vertical-align:baseline}.mpi-check{display:inline-flex;align-items:center;justify-content:center;gap:6px;min-height:28px;padding:0 8px;border:1px solid var(--dsw-alias-border-l2,#4b4d52);border-radius:7px;background:transparent;color:var(--dsw-alias-label-secondary,#b8bbc2);font:inherit;font-size:12px;font-weight:500;line-height:18px;white-space:nowrap;cursor:pointer}.mpi-check:hover{background:var(--dsw-alias-interactive-bg-hover,#3a3b3f);color:var(--dsw-alias-label-primary,#fff)}.mpi-check:focus-visible,.mpi-action:focus-visible,.mpi-dialog-close:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary,#4f8cff);outline-offset:2px}.mpi-icon{display:inline-flex;flex:0 0 auto;width:16px;height:16px;align-items:center;justify-content:center;pointer-events:none}.mpi-icon svg{display:block;width:16px;height:16px}
+.mpi-overlay{position:fixed;inset:0;z-index:2147483647;display:flex;align-items:center;justify-content:center;padding:24px;background:rgba(0,0,0,.62)}.mpi-dialog{position:relative;box-sizing:border-box;width:min(680px,100%);max-height:calc(100vh - 48px);overflow:auto;border:1px solid var(--dsw-alias-border-l2,#4b4d52);border-radius:14px;padding:22px;background:var(--dsw-alias-bg-layer-2,var(--dsw-specific-menu,#202124));color:var(--dsw-alias-label-primary,#fff);box-shadow:var(--dsw-shadow-lv3,0 16px 48px rgba(0,0,0,.24));font-family:inherit}.mpi-head{display:flex;align-items:center;justify-content:space-between;gap:12px}.mpi-dialog h2{margin:0;font-size:18px;line-height:26px}.mpi-dialog-close{display:inline-flex;flex:0 0 28px;width:28px;height:28px;align-items:center;justify-content:center;padding:0;border:0;border-radius:8px;background:transparent;color:var(--dsw-alias-label-secondary,#b8bbc2);cursor:pointer}.mpi-dialog-close:hover{background:var(--dsw-alias-interactive-bg-hover,#3a3b3f);color:var(--dsw-alias-label-primary,#fff)}.mpi-intro{margin:8px 0 18px;color:var(--dsw-alias-label-secondary,#c2c4ca);font-size:13px;line-height:20px}.mpi-meta{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:8px 18px;margin:0 0 16px;font-size:12px;line-height:18px}.mpi-meta dt{color:var(--dsw-alias-label-secondary,#c2c4ca)}.mpi-meta dd{margin:0;font-family:ui-monospace,SFMono-Regular,Consolas,monospace}.mpi-status{margin:0 0 18px;border-radius:7px;padding:12px 14px;background:var(--dsw-alias-bg-layer-3,var(--dsw-specific-menu-item-hover,#252527));font-size:13px;font-weight:600;line-height:20px}.mpi-status[data-kind=error]{color:var(--dsw-alias-state-error-primary,#ff6464)}.mpi-status[data-kind=success]{color:var(--dsw-alias-state-success-primary,#36d67a)}.mpi-manual{border-top:1px solid var(--dsw-alias-border-l2,#4b4d52);padding-top:16px}.mpi-manual h3{margin:0 0 6px;font-size:14px;line-height:20px}.mpi-manual p{margin:0 0 10px;color:var(--dsw-alias-label-secondary,#c2c4ca);font-size:12px;line-height:18px}.mpi-command{display:flex;align-items:center;gap:8px;border:1px solid var(--dsw-alias-border-l2,#4b4d52);border-radius:7px;padding:10px;background:var(--dsw-alias-bg-layer-3,var(--dsw-specific-menu-item-hover,#252527))}.mpi-command code{min-width:0;flex:1;overflow:auto;font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:12px;line-height:18px;white-space:nowrap}.mpi-actions{display:flex;align-items:center;justify-content:flex-end;gap:12px;margin-top:18px}.mpi-actions-group{display:flex;gap:8px}.mpi-action{display:inline-flex;align-items:center;justify-content:center;gap:6px;min-height:32px;border:1px solid var(--dsw-alias-border-l2,#4b4d52);border-radius:7px;padding:6px 10px;background:transparent;color:inherit;font:inherit;font-size:12px;cursor:pointer}.mpi-action:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover,#414247)}.mpi-action:disabled{cursor:not-allowed;opacity:.55}.mpi-primary{border-color:var(--dsw-alias-state-business-primary,#4f8cff);background:var(--dsw-alias-state-business-primary,#4f8cff);color:#fff}.mpi-progress{height:4px;margin-top:10px;overflow:hidden;border-radius:99px;background:var(--dsw-alias-border-l2,#4b4d52)}.mpi-progress::after{display:block;width:32%;height:100%;background:var(--dsw-alias-state-business-primary,#4f8cff);content:'';animation:mpi-wave 1.15s ease-in-out infinite}@keyframes mpi-wave{from{transform:translateX(-110%)}to{transform:translateX(330%)}}@media(max-width:560px){.mpi-overlay{padding:10px}.mpi-dialog{max-height:calc(100vh - 20px);padding:16px}.mpi-actions{align-items:stretch}.mpi-actions-group{justify-content:flex-end;flex-wrap:wrap}.mpi-meta{grid-template-columns:1fr;gap:2px}.mpi-meta dd{margin-bottom:6px}}
+`;
+var ZH = {
+  check: "\u68C0\u67E5\u66F4\u65B0",
+  update: "\u66F4\u65B0",
+  close: "\u5173\u95ED",
+  recheck: "\u91CD\u65B0\u68C0\u67E5",
+  auto: "\u81EA\u52A8\u66F4\u65B0",
+  updating: "\u6B63\u5728\u66F4\u65B0\u2026",
+  copy: "\u590D\u5236\u547D\u4EE4",
+  copied: "\u5DF2\u590D\u5236",
+  copyFailed: "\u590D\u5236\u5931\u8D25",
+  checking: "\u6B63\u5728\u68C0\u67E5\u66F4\u65B0\u2026",
+  latest: "\u5DF2\u662F\u6700\u65B0\u7248\u672C",
+  found: "\u53D1\u73B0\u65B0\u7248\u672C",
+  failed: "\u68C0\u67E5\u66F4\u65B0\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002",
+  current: "\u8FD0\u884C\u7248\u672C",
+  latestLabel: "\u6700\u65B0\u7248\u672C",
+  profile: "\u76EE\u6807 profile",
+  unknown: "\u672A\u77E5",
+  manual: "\u624B\u5DE5\u66F4\u65B0",
+  manualHint: "\u81EA\u52A8\u66F4\u65B0\u5931\u8D25\u65F6\uFF0C\u53EF\u5728\u5F53\u524D DSH \u7EC8\u7AEF\u6267\u884C\u4EE5\u4E0B\u547D\u4EE4\uFF0C\u5B8C\u6210\u540E\u91CD\u542F DSH Web\u3002",
+  intro: "\u4EC5\u68C0\u67E5\u5E76\u66F4\u65B0\u5F53\u524D\u63D2\u4EF6\uFF0C\u4E0D\u4F1A\u8054\u52A8\u5B89\u88C5\u5176\u4ED6\u63D2\u4EF6\u3002",
+  restart: "\u66F4\u65B0\u5B8C\u6210\uFF0C\u8BF7\u91CD\u542F DSH Web\u3002",
+  restarting: "\u66F4\u65B0\u5B8C\u6210\uFF0C\u6B63\u5728\u91CD\u542F DSH Desktop\u2026",
+  unavailable: "\u5F53\u524D\u73AF\u5883\u4E0D\u652F\u6301\u81EA\u52A8\u66F4\u65B0\uFF0C\u8BF7\u4F7F\u7528\u624B\u5DE5\u66F4\u65B0\u547D\u4EE4\u3002"
+};
+var EN = {
+  check: "Check for updates",
+  update: "Update",
+  close: "Close",
+  recheck: "Check again",
+  auto: "Update automatically",
+  updating: "Updating\u2026",
+  copy: "Copy command",
+  copied: "Copied",
+  copyFailed: "Copy failed",
+  checking: "Checking for updates\u2026",
+  latest: "You are up to date",
+  found: "New version available",
+  failed: "Could not check for updates. Try again later.",
+  current: "Running version",
+  latestLabel: "Latest version",
+  profile: "Target profile",
+  unknown: "Unknown",
+  manual: "Manual update",
+  manualHint: "If automatic update fails, run this command in the current DSH terminal, then restart DSH Web.",
+  intro: "Only this plugin is checked and updated. Other plugins are not changed.",
+  restart: "Update complete. Restart DSH Web.",
+  restarting: "Update complete. Restarting DSH Desktop\u2026",
+  unavailable: "Automatic update is unavailable. Use the manual command."
+};
+function strings() {
+  const lang = document.documentElement.lang.toLowerCase();
+  const settings = document.querySelector('[role="dialog"]')?.textContent ?? "";
+  return lang.startsWith("en") || settings.includes("Settings") && !settings.includes("\u8BBE\u7F6E") ? EN : ZH;
+}
+function ensureStyle() {
+  if (document.getElementById(STYLE_ID2) !== null) return;
+  const style = document.createElement("style");
+  style.id = STYLE_ID2;
+  style.textContent = CSS;
+  (document.head ?? document.documentElement).append(style);
+}
+function validPayload(value) {
+  if (value === null || typeof value !== "object") return false;
+  const item = value;
+  return typeof item.packageName === "string" && typeof item.currentVersion === "string" && typeof item.updateAvailable === "boolean" && typeof item.profileName === "string" && typeof item.canAutoUpdate === "boolean" && typeof item.latestCheckFailed === "boolean" && (item.latestVersion === void 0 || typeof item.latestVersion === "string");
+}
+async function requestStatus(endpoint, method, signal) {
+  const signalOption = signal === void 0 ? {} : { signal };
+  const response = await fetch(endpoint, method === "GET" ? { cache: "no-store", ...signalOption } : {
+    method: "POST",
+    headers: { "content-type": "application/json", [UPDATE_HEADER]: "1" },
+    body: "{}",
+    ...signalOption
+  });
+  const value = await response.json();
+  if (!response.ok || !validPayload(value)) throw new Error(typeof value.error === "string" ? value.error : strings().failed);
+  return value;
+}
+function manualPluginUpdateCommand(profileName, packageName, version) {
+  const profile = profileName.trim() === "" ? "" : ` --profile ${profileName.trim()}`;
+  return `dsh plugin${profile} add ${packageName}@${version} --registry=https://registry.npmjs.org/`;
+}
+function handlePluginUpdateEscape(event, close) {
+  if (event.key !== "Escape") return false;
+  event.preventDefault();
+  event.stopPropagation();
+  event.stopImmediatePropagation();
+  close();
+  return true;
+}
+function observePluginUpdate(options) {
+  if (typeof document === "undefined" || document.body === null) return () => {
+  };
+  ensureStyle();
+  const controller = new AbortController();
+  let payload;
+  let overlay;
+  let frame;
+  const setButtonContent = (button, label, iconName) => {
+    const icon = options.createIcon(iconName);
+    icon.classList.add("mpi-icon");
+    icon.setAttribute("aria-hidden", "true");
+    const text = document.createElement("span");
+    text.dataset.mpiLabel = "";
+    text.textContent = label;
+    button.replaceChildren(icon, text);
+  };
+  const setButtonLabel = (button, label) => {
+    const text = button.querySelector("[data-mpi-label]");
+    if (text === null) button.textContent = label;
+    else text.textContent = label;
+  };
+  const applyControls = () => {
+    const row = document.querySelector(options.titleRowSelector);
+    if (row === null) return;
+    const heading = row.querySelector("h1,h2");
+    if (heading !== null && payload !== void 0) {
+      let version = heading.querySelector(`.mpi-version[data-package="${options.packageName}"]`);
+      if (version === null) {
+        version = document.createElement("span");
+        version.className = "mpi-version";
+        version.dataset.package = options.packageName;
+        heading.append(version);
+      }
+      const versionLabel = `v${payload.currentVersion}`;
+      if (version.textContent !== versionLabel) version.textContent = versionLabel;
+    }
+    const links = row.querySelector(options.linksSelector);
+    if (links === null || links.querySelector(`[data-mpi-check="${options.packageName}"]`) !== null) return;
+    const button = document.createElement("button");
+    button.type = "button";
+    button.className = "mpi-check";
+    button.dataset.mpiCheck = options.packageName;
+    setButtonContent(button, strings().check, "refresh");
+    button.addEventListener("click", openDialog);
+    links.append(button);
+  };
+  const load = async () => {
+    payload = await requestStatus(options.endpoint, "GET", controller.signal);
+    applyControls();
+    return payload;
+  };
+  const closeDialog = () => {
+    overlay?.remove();
+    overlay = void 0;
+  };
+  function openDialog() {
+    closeDialog();
+    const text = strings();
+    overlay = document.createElement("div");
+    overlay.className = "mpi-overlay";
+    const dialog = document.createElement("section");
+    dialog.className = "mpi-dialog";
+    dialog.setAttribute("role", "dialog");
+    dialog.setAttribute("aria-modal", "true");
+    dialog.innerHTML = `<header class="mpi-head"><h2></h2><button type="button" class="mpi-dialog-close" data-action="close"></button></header><p class="mpi-intro"></p><dl class="mpi-meta"><dt></dt><dd data-role="current"></dd><dt></dt><dd data-role="latest"></dd><dt></dt><dd data-role="profile"></dd></dl><div class="mpi-status" role="status"></div><div class="mpi-progress" hidden></div><section class="mpi-manual"><h3></h3><p></p><div class="mpi-command"><code></code><button type="button" class="mpi-action" data-action="copy"></button></div></section><footer class="mpi-actions"><div class="mpi-actions-group"><button type="button" class="mpi-action" data-action="check"></button><button type="button" class="mpi-action mpi-primary" data-action="update"></button></div></footer>`;
+    const name2 = document.documentElement.lang.toLowerCase().startsWith("en") ? options.enName : options.zhName;
+    dialog.querySelector("h2").textContent = `${name2} ${text.update}`;
+    dialog.querySelector(".mpi-intro").textContent = text.intro;
+    const terms = dialog.querySelectorAll("dt");
+    terms[0].textContent = text.current;
+    terms[1].textContent = text.latestLabel;
+    terms[2].textContent = text.profile;
+    dialog.querySelector(".mpi-manual h3").textContent = text.manual;
+    dialog.querySelector(".mpi-manual p").textContent = text.manualHint;
+    const status = dialog.querySelector(".mpi-status");
+    const progress = dialog.querySelector(".mpi-progress");
+    const command = dialog.querySelector(".mpi-command code");
+    const close = dialog.querySelector("[data-action=close]");
+    const check = dialog.querySelector("[data-action=check]");
+    const update = dialog.querySelector("[data-action=update]");
+    const copy = dialog.querySelector("[data-action=copy]");
+    setButtonContent(close, text.close, "close");
+    close.querySelector("[data-mpi-label]")?.remove();
+    close.setAttribute("aria-label", text.close);
+    close.title = text.close;
+    setButtonContent(check, text.recheck, "refresh");
+    setButtonContent(update, text.auto, "download");
+    setButtonContent(copy, text.copy, "copy");
+    let busy = false;
+    const setMessage = (message, kind = "") => {
+      status.textContent = message;
+      status.dataset.kind = kind;
+    };
+    const setBusy = (value) => {
+      busy = value;
+      check.disabled = value;
+      copy.disabled = value;
+      update.disabled = value || payload?.canAutoUpdate !== true || payload.updateAvailable !== true;
+      progress.hidden = !value;
+    };
+    const render = () => {
+      dialog.querySelector("[data-role=current]").textContent = payload === void 0 ? text.unknown : `v${payload.currentVersion}`;
+      dialog.querySelector("[data-role=latest]").textContent = payload?.latestVersion === void 0 ? text.unknown : `v${payload.latestVersion}`;
+      dialog.querySelector("[data-role=profile]").textContent = payload?.profileName ?? text.unknown;
+      command.textContent = manualPluginUpdateCommand(payload?.profileName ?? "", options.packageName, payload?.latestVersion ?? "latest");
+      update.disabled = busy || payload?.canAutoUpdate !== true || payload.updateAvailable !== true;
+      if (payload === void 0) setMessage(text.checking);
+      else if (payload.latestCheckFailed) setMessage(text.failed, "error");
+      else if (payload.updateAvailable) setMessage(`${text.found}: v${payload.latestVersion ?? text.unknown}`);
+      else setMessage(text.latest, "success");
+      if (payload !== void 0 && !payload.canAutoUpdate && payload.updateAvailable) setMessage(text.unavailable);
+    };
+    const checkNow = async () => {
+      if (busy) return;
+      setBusy(true);
+      setMessage(text.checking);
+      try {
+        await load();
+        setBusy(false);
+        render();
+      } catch (error) {
+        setBusy(false);
+        setMessage(error instanceof Error ? error.message : text.failed, "error");
+      }
+    };
+    const updateNow = async () => {
+      if (busy) return;
+      setBusy(true);
+      setButtonLabel(update, text.updating);
+      setMessage(text.updating);
+      try {
+        payload = await requestStatus(options.endpoint, "POST", controller.signal);
+        applyControls();
+        render();
+        setMessage(payload.autoReload === true ? text.restarting : text.restart, "success");
+      } catch (error) {
+        setMessage(error instanceof Error ? error.message : text.failed, "error");
+      } finally {
+        setButtonLabel(update, text.auto);
+        setBusy(false);
+      }
+    };
+    close.addEventListener("click", closeDialog);
+    check.addEventListener("click", () => {
+      void checkNow();
+    });
+    update.addEventListener("click", () => {
+      void updateNow();
+    });
+    copy.addEventListener("click", () => {
+      void navigator.clipboard?.writeText(command.textContent ?? "").then(() => {
+        setButtonLabel(copy, text.copied);
+        setTimeout(() => {
+          setButtonLabel(copy, text.copy);
+        }, 1400);
+      }).catch(() => {
+        setButtonLabel(copy, text.copyFailed);
+      });
+    });
+    overlay.addEventListener("click", (event) => {
+      if (event.target === overlay) closeDialog();
+    });
+    overlay.addEventListener("keydown", (event) => {
+      handlePluginUpdateEscape(event, closeDialog);
+    }, true);
+    overlay.append(dialog);
+    document.body.append(overlay);
+    render();
+    close.focus();
+    void checkNow();
+  }
+  const observer = new MutationObserver(() => {
+    if (frame !== void 0) return;
+    frame = window.requestAnimationFrame(() => {
+      frame = void 0;
+      applyControls();
+    });
+  });
+  observer.observe(document.body, { childList: true, subtree: true });
+  applyControls();
+  void load().catch(() => {
+  });
+  return () => {
+    controller.abort();
+    observer.disconnect();
+    closeDialog();
+    if (frame !== void 0) window.cancelAnimationFrame(frame);
+    document.querySelectorAll(`[data-mpi-check="${options.packageName}"],.mpi-version[data-package="${options.packageName}"]`).forEach((node) => node.remove());
+  };
+}
+
 // src/client/index.ts
 var name = "dsh-automation-client";
 var inject = ["slots", "locale", "connection", "sessions"];
+var UPDATE_ICON_PATHS = {
+  refresh: ["M13.5 5.5V2.5m0 0h-3m3 0-2.1 2.1A5.5 5.5 0 1 0 13.2 12"],
+  download: ["M8 2v8m0 0 3-3m-3 3-3-3M3 13v2h10v-2"],
+  copy: ["M5 5h8v8H5z", "M3 3h8"],
+  close: ["m4 4 8 8M12 4 4 12"]
+};
+function createPluginUpdateIcon(name2) {
+  const element = document.createElement("span");
+  const svg = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+  svg.setAttribute("viewBox", "0 0 16 16");
+  svg.setAttribute("width", "16");
+  svg.setAttribute("height", "16");
+  svg.setAttribute("fill", "none");
+  svg.setAttribute("stroke", "currentColor");
+  svg.setAttribute("stroke-width", "1.5");
+  svg.setAttribute("stroke-linecap", "round");
+  svg.setAttribute("stroke-linejoin", "round");
+  svg.setAttribute("aria-hidden", "true");
+  for (const d of UPDATE_ICON_PATHS[name2]) {
+    const path = document.createElementNS("http://www.w3.org/2000/svg", "path");
+    path.setAttribute("d", d);
+    svg.append(path);
+  }
+  element.append(svg);
+  return element;
+}
 var SETTINGS_CLOCK_SVG = '<svg viewBox="0 0 16 16" width="16" height="16" fill="none" aria-hidden="true" data-dsh-schedule-icon="1"><path fill="currentColor" d="M8 1.15A6.85 6.85 0 1 0 8 14.85 6.85 6.85 0 0 0 8 1.15Zm0 1.4a5.45 5.45 0 1 1 0 10.9 5.45 5.45 0 0 1 0-10.9Z"/><path fill="currentColor" d="M8.62 4.35H7.28v4.2l3.02 1.78.67-1.13-2.35-1.39V4.35Z"/></svg>';
 function isSessionSelector(value) {
   return typeof value === "function";
@@ -4265,6 +4581,15 @@ function installSettingsNavIcon(labels) {
 function apply(ctx) {
   ctx.effect(() => installStyles(), "dsh-automation: styles");
   ctx.effect(() => ctx.locale.register(NS, { zh, en }), "dsh-automation: locale");
+  ctx.effect(() => observePluginUpdate({
+    endpoint: "/api/michengai/dsh-automation/update",
+    packageName: "@michengai/dsh-automation",
+    titleRowSelector: ".dsh-st-heading-row",
+    linksSelector: ".dsh-st-heading-links",
+    zhName: "\u5B9A\u65F6\u4EFB\u52A1",
+    enName: "Scheduled tasks",
+    createIcon: createPluginUpdateIcon
+  }), "dsh-automation: plugin update ui");
   const t = ctx.locale.bind(NS);
   const permissionT = ctx.locale.bind("permission.access");
   const modelT = ctx.locale.bind("model");