@morehao/dsh-github-trending 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.3.1 - 2026-10-31
+
+### 新增
+
+- **插件自更新**：关于弹层显示当前版本与 npm 最新版，打开时静默检查（Host 侧 5 分钟缓存），也可手动「检查更新」（`GET /update?fresh=1`）。确认后经宿主 `pluginManager` 重装本插件：`installBundle` 返回 `already-installed` 时走 `removeBundle → installBundle`，remove 之后安装失败会尝试装回原版本，成功后提示重启 DSH 生效。`link:` / `file:` / `workspace:` 安装不提供一键更新，只给 `dsh plugin --profile <name> add ...@latest` 供复制；没有 `pluginManager` 时同样退化为手动命令。
+- **共享引擎 `@morehao/dsh-plugin-kit`**：更新引擎（查版本 / semver / registry 计划 / 安装路径 / 事件）与客户端状态机放进共享包，本仓新增 `src/host/update.ts` 只做 `ctx.get` 与 `execCapture` 接线；`POST /update` 的业务失败返回 409 + `UPDATE_FAILED` + `updateCode`，不占 500。
+- 客户端构建守卫允许依赖包源码进入 bundle（`link:` / `file:` 依赖会解析到仓库外），本仓 `src/`、`lib/` 仍禁止进客户端产物。
+
+### 修复
+
+- **关于弹层拿不到主题变量**：`AboutDialog` 挂在 `.dshgt-root` 之外，`--gt-*` 没定义，弹层背景/边框退化成透明、文字对比度极低。现在弹层外面包一层 `.dshgt-root` 再进 mask。
+- **日报里的表格不再被拍平成一个段落**：`client/markdown-core.ts` 补上 GFM 管道表解析——表头 + 分隔行（`---` / `:---` / `:---:` / `---:` 决定列对齐）+ 数据行，单元格按行内规则解析（链接、粗体、行内代码），支持反引号里的 `|` 与 `\|` 转义；表头/分隔行列数不一致或缺少分隔行时退回段落，不丢内容。`client/markdown.ts` 渲染 `table` / `thead` / `tbody` / `th` / `td` 并按对齐写 `text-align`；此前整张表会被当成「一行满是 `|` 的文字」。
+- 表格样式随附：表头浅底、行分隔线、偶数行斑马纹、窄容器横向滚动；单元格内 `word-break: normal`，避免 `185,423` 这类数字被拆成两行。
+
 ## 0.3.0 - 2026-10-31
 
 ### 变更（含破坏性）

package/README.md

@@ -37,11 +37,18 @@ dsh plugin --profile <profile> add @morehao/dsh-github-trending
 
 - 运行成功后，Host 从核心本次返回的 `outcome.files` 里挑当天的 `.md`（优先 `YYYY-MM-DD.md`，否则只有一个 `.md` 时用它），**只读**复制到 `$DSH_HOME/github-trending/previews/<runId>.md`：路径必须在 `repo.path` 内（词法 + realpath 各判一次）、不超过 512 KB、sha256 与契约声明一致；失败不阻断运行，只是这次没有预览。
 - 预览副本 0600、临时文件 + rename、最多保留 30 份；`state.json` / `history.json` 只存 `file` / `bytes` / `sha256` 元数据，不存正文。
-- `GET /preview?id=<runId>` 只接受历史里出现过的 id、不接路径参数；返回 `{ text, truncated }`。客户端渲染 Markdown 子集（标题 / 段落 / 列表 / 引用 / 粗体 / 行内代码 / 链接 / 分隔线），**只生成 React 文本节点**，链接仅放行 http(s)，不渲染图片或原始 HTML；也可以切「原文」。
+- `GET /preview?id=<runId>` 只接受历史里出现过的 id、不接路径参数；返回 `{ text, truncated }`。客户端渲染 Markdown 子集（标题 / 段落 / 列表 / 引用 / 代码块 / 表格（GFM 管道表，含列对齐）/ 粗体 / 行内代码 / 链接 / 分隔线），**只生成 React 文本节点**，链接仅放行 http(s)，不渲染图片或原始 HTML；也可以切「原文」。
 - 日报只列最近 30 天**有记录**的日期，每天一条；默认打开最近一期有预览的日报。失败 / 无变更 / 试跑 / 旧记录 / 副本被清理都有各自的空状态，不用示例内容兜底。
 - 预览是运行结束时的派生副本：你在仓库里事后编辑 canonical 文件，不会改变这次记录。
 - 关于入口在左轨底部：包名 / 版本 / GitHub 来自 `/state.plugin`（`repository` 由 `package.json` 规范化），仓库缺失时隐藏外链。
 
+## 插件更新
+
+- 关于弹层里会显示当前版本与 npm 上的最新版：打开时静默检查一次（Host 侧缓存 5 分钟），也可以点「检查更新」强制重查。只跟随 npm 的 `latest` 稳定版。
+- 确认后由宿主 `pluginManager` 重装本插件（`installBundle`；已装同 spec 时走 `removeBundle → installBundle`，失败会尝试装回原版本），完成后需要重启 DSH 生效。
+- 本地安装（`link:` / `file:` / `workspace:`）**不提供一键更新**：那会把开发链接换成 npm 版。此时只显示 `dsh plugin --profile <name> add @morehao/dsh-github-trending@latest` 供复制。
+- 更新引擎来自共享包 [`@morehao/dsh-plugin-kit`](https://www.npmjs.com/package/@morehao/dsh-plugin-kit)（`./update` + `./update/client`），本仓只做上下文与 `execCapture` 接线；`GET /update` / `POST /update` 与其它路由一样要求自定义头、`no-store`，业务失败返回 409 + `UPDATE_FAILED` + `updateCode`。
+
 ## 它需要什么 / 它访问哪里 / 它不上传什么
 
 **需要什么**

package/client.js

@@ -339,7 +339,25 @@ var DICT = {
     "about.license": "许可",
     "about.core": "核心",
     "about.env": "运行环境",
-    "about.env.value": "DSH Web · Node 插件"
+    "about.env.value": "DSH Web · Node 插件",
+    "about.update.title": "插件更新",
+    "about.update.check": "检查更新",
+    "about.update.checking": "正在检查最新版…",
+    "about.update.current": "已是最新（v{version}）",
+    "about.update.available": "有新版本 v{latest}（当前 v{current}）",
+    "about.update.apply": "更新到 v{version}",
+    "about.update.confirm": "确认更新到 v{version}？会重装本插件并重载面板，之后需要重启 DSH 生效。",
+    "about.update.confirmYes": "确认更新",
+    "about.update.cancel": "取消",
+    "about.update.applying": "正在更新到 v{version}…",
+    "about.update.done": "已更新到 v{version}，重启 DSH 后生效。",
+    "about.update.applied": "已更新到 v{version}。",
+    "about.update.failed": "更新失败：{message}",
+    "about.update.checkFailed": "检查更新失败：拿不到 registry 上的最新版。可以稍后重试，或手动执行下面的命令。",
+    "about.update.manual": "当前是本地 {kind} 安装，不能一键更新（会把开发链接换成 npm 版）。手动更新：",
+    "about.update.copy": "复制命令",
+    "about.update.copied": "已复制",
+    "about.update.hint": "只检查 npm 上的 latest 稳定版；更新后需要重启 DSH。"
   },
   en: {
     "section.title": "GitHub Trending",
@@ -635,7 +653,25 @@ var DICT = {
     "about.license": "License",
     "about.core": "Core",
     "about.env": "Runtime",
-    "about.env.value": "DSH Web · Node plugin"
+    "about.env.value": "DSH Web · Node plugin",
+    "about.update.title": "Plugin update",
+    "about.update.check": "Check for updates",
+    "about.update.checking": "Checking the latest version…",
+    "about.update.current": "Up to date (v{version})",
+    "about.update.available": "v{latest} is available (current v{current})",
+    "about.update.apply": "Update to v{version}",
+    "about.update.confirm": "Update to v{version}? The plugin will be reinstalled and the panel reloaded; restart DSH afterwards.",
+    "about.update.confirmYes": "Update now",
+    "about.update.cancel": "Cancel",
+    "about.update.applying": "Updating to v{version}…",
+    "about.update.done": "Updated to v{version}; restart DSH to apply.",
+    "about.update.applied": "Updated to v{version}.",
+    "about.update.failed": "Update failed: {message}",
+    "about.update.checkFailed": "Update check failed: cannot reach the registry for the latest version. Retry later or run the command below.",
+    "about.update.manual": "Installed from a local {kind} spec; one-click update is disabled (it would replace the dev link). Update manually:",
+    "about.update.copy": "Copy command",
+    "about.update.copied": "Copied",
+    "about.update.hint": "Checks the npm latest stable tag only; applying requires a DSH restart."
   }
 };
 function activeLang(locale) {
@@ -661,11 +697,11 @@ var CSS = `
 .dshgt-root{--gt-fg:var(--dsw-alias-label-primary,#1f2328);--gt-muted:var(--dsw-alias-label-secondary,#6b7280);--gt-bg:var(--dsw-alias-bg-base,#fff);--gt-card:var(--dsw-alias-bg-layer-1,#f8fafc);--gt-border:var(--dsw-alias-border-l2,#e5e7eb);--gt-accent:var(--dsw-alias-state-business-primary,#2563eb);--gt-ok:var(--dsw-alias-state-success-primary,#16a34a);--gt-warn:var(--dsw-alias-state-warn-primary,#d97706);--gt-err:var(--dsw-alias-state-error-primary,#dc2626);color:var(--gt-fg);font-size:14px;line-height:1.55;display:flex;flex-direction:column;gap:12px;}
 .dshgt-root *{box-sizing:border-box;}
 .dshgt-head{display:flex;align-items:baseline;gap:10px;flex-wrap:wrap;}
-.dshgt-title{font-size:15px;font-weight:600;}
+.dshgt-title{font-size:15px;font-weight:600;white-space:nowrap;}
 .dshgt-sub{color:var(--gt-muted);font-size:12px;}
 .dshgt-tabs{display:flex;gap:6px;border-bottom:1px solid var(--gt-border);}
 .dshgt-tab{appearance:none;border:none;background:none;padding:6px 10px;font:inherit;color:var(--gt-muted);cursor:pointer;border-bottom:2px solid transparent;}
-.dshgt-tab[aria-selected="true"]{color:var(--gt-fg);border-bottom-color:var(--gt-accent);font-weight:600;}
+.dshgt-tab[aria-selected="true"]{color:var(--gt-fg);border-bottom-color:var(--gt-accent);font-weight:600;white-space:nowrap;}
 .dshgt-shell{height:100%;min-height:0;overflow:hidden;}
 .dshgt-content{flex:1;min-height:0;display:flex;}
 .dshgt-scroll{flex:1;min-height:0;overflow-y:auto;display:flex;flex-direction:column;gap:12px;padding-right:4px;}
@@ -673,12 +709,12 @@ var CSS = `
 .dshgt-vtabs{display:flex;flex-direction:column;gap:2px;border-right:1px solid var(--gt-border);padding-right:8px;overflow-y:auto;}
 .dshgt-vtab{appearance:none;border:none;background:none;text-align:left;padding:7px 10px;border-radius:7px;color:var(--gt-muted);cursor:pointer;font:inherit;font-size:12px;display:flex;align-items:center;gap:6px;}
 .dshgt-vtab:hover{background:var(--dsw-alias-interactive-bg-hover,color-mix(in srgb,var(--gt-accent) 8%,transparent));}
-.dshgt-vtab[aria-selected="true"]{background:color-mix(in srgb,var(--gt-accent) 12%,transparent);color:var(--gt-fg);font-weight:600;}
+.dshgt-vtab[aria-selected="true"]{background:color-mix(in srgb,var(--gt-accent) 12%,transparent);color:var(--gt-fg);font-weight:600;white-space:nowrap;}
 .dshgt-vtab-dirty{width:6px;height:6px;border-radius:50%;background:var(--gt-warn);flex:none;margin-left:auto;}
 .dshgt-vpanel{min-width:0;min-height:0;overflow-y:auto;display:flex;flex-direction:column;gap:12px;padding-right:4px;}
 .dshgt-card{border:1px solid var(--gt-border);border-radius:10px;background:var(--gt-card);padding:12px 14px;display:flex;flex-direction:column;gap:8px;}
 .dshgt-card-h{display:flex;align-items:center;gap:8px;flex-wrap:wrap;}
-.dshgt-card-h h3{margin:0;font-size:13px;font-weight:600;}
+.dshgt-card-h h3{margin:0;font-size:13px;font-weight:600;white-space:nowrap;}
 .dshgt-hint{color:var(--gt-muted);font-size:12px;}
 .dshgt-desc{margin:0;color:var(--gt-muted);font-size:12px;}
 .dshgt-row{display:flex;gap:10px;align-items:center;min-height:28px;flex-wrap:wrap;}
@@ -736,7 +772,7 @@ var CSS = `
 .dshgt-nav-item{display:flex;align-items:center;gap:9px;height:36px;padding:0 9px;border:1px solid transparent;border-radius:8px;background:none;text-align:left;font-family:inherit;font-size:13.5px;color:var(--gt-muted);width:100%;cursor:pointer;}
 .dshgt-nav-item svg{flex:none;opacity:.82;}
 .dshgt-nav-item:hover{background:color-mix(in srgb,var(--gt-fg) 6%,var(--gt-bg));color:var(--gt-fg);}
-.dshgt-nav-item.on{background:var(--gt-bg);border-color:var(--gt-border);color:var(--gt-fg);font-weight:600;}
+.dshgt-nav-item.on{background:var(--gt-bg);border-color:var(--gt-border);color:var(--gt-fg);font-weight:600;white-space:nowrap;}
 .dshgt-nav-item.on svg{opacity:1;}
 .dshgt-nav-tail{margin-left:auto;display:flex;align-items:center;gap:5px;font-size:11.5px;color:var(--gt-muted);font-weight:400;}
 .dshgt-rail-spacer{flex:1;min-height:16px;}
@@ -833,14 +869,14 @@ var CSS = `
 .dshgt-digest-bar{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:9px 12px;border-bottom:1px solid color-mix(in srgb,var(--gt-border) 70%,transparent);background:color-mix(in srgb,var(--gt-fg) 2.5%,var(--gt-card));}
 .dshgt-seg{display:inline-flex;border:1px solid var(--gt-border);border-radius:8px;padding:2px;background:var(--gt-bg);gap:2px;}
 .dshgt-seg button{border:0;background:none;height:26px;padding:0 11px;border-radius:6px;font-family:inherit;font-size:12.5px;color:var(--gt-muted);cursor:pointer;}
-.dshgt-seg button.on{background:var(--gt-card);color:var(--gt-fg);font-weight:600;}
+.dshgt-seg button.on{background:var(--gt-card);color:var(--gt-fg);font-weight:600;white-space:nowrap;}
 .dshgt-digest-doc{padding:26px 32px 22px;min-width:0;}
 .dshgt-doc-meta{display:flex;gap:12px;flex-wrap:wrap;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;color:var(--gt-muted);padding-bottom:12px;border-bottom:1px solid color-mix(in srgb,var(--gt-border) 70%,transparent);}
 .dshgt-digest-raw{margin:0;padding:22px 28px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;line-height:1.75;white-space:pre-wrap;word-break:break-word;color:var(--gt-muted);background:color-mix(in srgb,var(--gt-fg) 2.5%,var(--gt-card));max-height:640px;overflow:auto;}
 .dshgt-digest-loading{padding:40px 28px;color:var(--gt-muted);font-size:13px;}
 .dshgt-digest-empty{padding:42px 36px 46px;max-width:720px;}
 .dshgt-status-line{display:flex;align-items:center;gap:8px;font-size:12.5px;color:var(--gt-muted);}
-.dshgt-status-line b{color:var(--gt-fg);font-weight:600;}
+.dshgt-status-line b{color:var(--gt-fg);font-weight:600;white-space:nowrap;}
 .dshgt-digest-empty h2{margin:14px 0 6px;font-size:20px;font-weight:650;letter-spacing:-.012em;}
 .dshgt-digest-empty p{margin:0;max-width:580px;font-size:13.5px;line-height:1.7;color:var(--gt-muted);}
 .dshgt-digest-error{margin-top:10px;color:var(--gt-err);}
@@ -855,6 +891,12 @@ var CSS = `
 .dshgt-md-list{margin:8px 0;padding-left:22px;}
 .dshgt-md-list li{margin:3px 0;}
 .dshgt-md-quote{margin:12px 0;padding:2px 0 2px 14px;border-left:3px solid var(--gt-border);color:var(--gt-muted);}
+.dshgt-md-tablewrap{margin:12px 0;border:1px solid var(--gt-border);border-radius:8px;overflow-x:auto;}
+.dshgt-md-table{width:100%;min-width:560px;border-collapse:collapse;font-size:13px;line-height:1.6;}
+.dshgt-md-table th,.dshgt-md-table td{padding:7px 10px;text-align:left;vertical-align:top;border-bottom:1px solid color-mix(in srgb,var(--gt-border) 65%,transparent);word-break:normal;overflow-wrap:break-word;}
+.dshgt-md-table th{background:color-mix(in srgb,var(--gt-fg) 4%,var(--gt-card));font-weight:600;white-space:nowrap;}
+.dshgt-md-table tbody tr:last-child td{border-bottom:0;}
+.dshgt-md-table tbody tr:nth-child(even){background:color-mix(in srgb,var(--gt-fg) 2%,var(--gt-card));}
 .dshgt-md-pre{margin:12px 0;padding:12px 14px;border-radius:8px;background:color-mix(in srgb,var(--gt-fg) 5%,var(--gt-card));overflow:auto;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;line-height:1.6;}
 .dshgt-md-code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;background:color-mix(in srgb,var(--gt-fg) 7%,var(--gt-card));padding:1px 4px;border-radius:4px;}
 .dshgt-md-hr{border:0;border-top:1px solid var(--gt-border);margin:18px 0;}
@@ -899,6 +941,17 @@ var CSS = `
 .dshgt-about .dshgt-kv{grid-template-columns:110px 1fr;}
 .dshgt-about .dshgt-kv a{color:var(--gt-accent);text-decoration:none;word-break:break-all;}
 .dshgt-about .dshgt-kv a:hover{text-decoration:underline;}
+.dshgt-update{margin-top:14px;padding-top:12px;border-top:1px solid color-mix(in srgb,var(--gt-border) 70%,transparent);}
+.dshgt-update-head{display:flex;align-items:baseline;gap:8px;flex-wrap:wrap;}
+.dshgt-update-head h4{margin:0;font-size:13px;font-weight:600;}
+.dshgt-update-head .dshgt-hint{font-size:11.5px;}
+.dshgt-update-line{margin:6px 0 0;font-size:12.5px;color:var(--gt-muted);line-height:1.55;}
+.dshgt-update-err{color:var(--gt-err);}
+.dshgt-update-warn{margin:6px 0 0;font-size:12px;color:var(--gt-warn);line-height:1.55;}
+.dshgt-update-actions{display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin-top:9px;}
+.dshgt-update-manual{margin-top:9px;padding:9px 10px;border:1px solid color-mix(in srgb,var(--gt-warn) 35%,var(--gt-border));border-radius:8px;background:color-mix(in srgb,var(--gt-warn) 6%,var(--gt-card));}
+.dshgt-update-manual .dshgt-update-warn{margin:0 0 6px;}
+.dshgt-update-cmd{display:block;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11.5px;line-height:1.5;color:var(--gt-fg);word-break:break-all;user-select:all;}
 
 @media (max-width:1100px){
   .dshgt-app{grid-template-columns:190px minmax(0,1fr);}
@@ -1117,6 +1170,17 @@ function getPreview(runId, signal) {
 function getLog(runId, signal) {
   return apiCall("GET", `/log?id=${encodeURIComponent(runId)}`, void 0, signal === void 0 ? {} : { signal });
 }
+async function getPluginUpdate(options = {}) {
+  const query = options.fresh === true ? "?fresh=1" : "";
+  const payload = await apiCall("GET", `/update${query}`, void 0, {
+    ...options.signal === void 0 ? {} : { signal: options.signal }
+  });
+  return payload.update;
+}
+async function applyPluginUpdate() {
+  const payload = await apiCall("POST", "/update", {});
+  return payload.result;
+}
 
 // client/store.ts
 var POLL_MS = 5e3;
@@ -2570,9 +2634,72 @@ var HR = /^\s*(?:-{3,}|\*{3,}|_{3,})\s*$/;
 var QUOTE = /^\s*>\s?(.*)$/;
 var BULLET = /^\s*[-*+]\s+(.*)$/;
 var ORDERED = /^\s*\d+[.)]\s+(.*)$/;
+var TABLE_DELIM_CELL = /^:?-+:?$/;
 function isBlockStart(line) {
   return FENCE.test(line) || HEADING.test(line) || HR.test(line) || QUOTE.test(line) || BULLET.test(line) || ORDERED.test(line);
 }
+function splitTableRow(line) {
+  const cells = [];
+  let current = "";
+  let inCode = false;
+  const text = line.trim();
+  for (let cursor = 0; cursor < text.length; cursor += 1) {
+    const char = text[cursor] ?? "";
+    if (char === "\\" && text[cursor + 1] === "|") {
+      current += "|";
+      cursor += 1;
+      continue;
+    }
+    if (char === "`") {
+      inCode = !inCode;
+      current += char;
+      continue;
+    }
+    if (char === "|" && !inCode) {
+      cells.push(current);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  cells.push(current);
+  if (cells.length > 1 && (cells[0] ?? "").trim() === "") cells.shift();
+  if (cells.length > 1 && (cells[cells.length - 1] ?? "").trim() === "") cells.pop();
+  return cells.map((cell) => cell.trim());
+}
+function parseAlignRow(line) {
+  const cells = splitTableRow(line);
+  if (cells.length === 0) return null;
+  const align = [];
+  for (const cell of cells) {
+    const value = cell.trim();
+    if (!TABLE_DELIM_CELL.test(value)) return null;
+    const left = value.startsWith(":");
+    const right = value.endsWith(":");
+    align.push(left && right ? "center" : right ? "right" : left ? "left" : void 0);
+  }
+  return align;
+}
+function tableAt(lines, index) {
+  const headerLine = lines[index] ?? "";
+  if (!headerLine.includes("|")) return null;
+  const align = parseAlignRow(lines[index + 1] ?? "");
+  if (align === null) return null;
+  const headerCells = splitTableRow(headerLine);
+  if (headerCells.length === 0 || headerCells.length !== align.length) return null;
+  const rows = [];
+  let cursor = index + 2;
+  while (cursor < lines.length) {
+    const line = lines[cursor] ?? "";
+    if (line.trim() === "" || !line.includes("|")) break;
+    if (isBlockStart(line)) break;
+    const cells = splitTableRow(line).slice(0, headerCells.length);
+    while (cells.length < headerCells.length) cells.push("");
+    rows.push(cells.map((cell) => parseInline(cell)));
+    cursor += 1;
+  }
+  return { align, header: headerCells.map((cell) => parseInline(cell)), rows, next: cursor };
+}
 function parseBlocks(body) {
   const lines = body.split("\n");
   const blocks = [];
@@ -2644,11 +2771,17 @@ function parseBlocks(body) {
       blocks.push({ type: "list", ordered: true, items });
       continue;
     }
+    const table = tableAt(lines, index);
+    if (table !== null) {
+      blocks.push({ type: "table", align: table.align, header: table.header, rows: table.rows });
+      index = table.next;
+      continue;
+    }
     const buffer = [];
     while (index < lines.length) {
       const current = lines[index] ?? "";
       if (current.trim() === "") break;
-      if (buffer.length > 0 && isBlockStart(current)) break;
+      if (buffer.length > 0 && (isBlockStart(current) || tableAt(lines, index) !== null)) break;
       buffer.push(current.trim());
       index += 1;
     }
@@ -2681,6 +2814,9 @@ function renderInline(nodes, prefix) {
     }
   });
 }
+function alignStyle(align) {
+  return align === void 0 ? void 0 : { textAlign: align };
+}
 function renderBlock(block, key) {
   switch (block.type) {
     case "heading": {
@@ -2705,6 +2841,43 @@ function renderBlock(block, key) {
       );
     case "hr":
       return h("hr", { key, className: "dshgt-md-hr" });
+    case "table":
+      return h(
+        "div",
+        { key, className: "dshgt-md-tablewrap" },
+        h(
+          "table",
+          { className: "dshgt-md-table" },
+          h(
+            "thead",
+            null,
+            h(
+              "tr",
+              null,
+              block.header.map(
+                (cell, index) => h("th", { key: `h${index}`, style: alignStyle(block.align[index]) }, renderInline(cell, `${key}-h${index}`))
+              )
+            )
+          ),
+          h(
+            "tbody",
+            null,
+            block.rows.map(
+              (row, rowIndex) => h(
+                "tr",
+                { key: `r${rowIndex}` },
+                row.map(
+                  (cell, cellIndex) => h(
+                    "td",
+                    { key: `c${cellIndex}`, style: alignStyle(block.align[cellIndex]) },
+                    renderInline(cell, `${key}-r${rowIndex}c${cellIndex}`)
+                  )
+                )
+              )
+            )
+          )
+        )
+      );
   }
 }
 function renderMarkdown(markdown) {
@@ -3006,10 +3179,117 @@ function metaLine(rendered) {
   );
 }
 
+// node_modules/@morehao/dsh-plugin-kit/dist/update-client.js
+var IDLE = { status: "idle", view: null, error: null };
+function errorOf(error) {
+  if (error !== null && typeof error === "object") {
+    const value = error;
+    const message = typeof value.message === "string" && value.message !== "" ? value.message : "操作失败";
+    return typeof value.code === "string" ? { code: value.code, message } : { message };
+  }
+  return { message: String(error ?? "操作失败") };
+}
+function createUpdateController(options) {
+  const now = options.now ?? Date.now;
+  let state = { ...IDLE };
+  const listeners = /* @__PURE__ */ new Set();
+  let inFlight = null;
+  function emit(next) {
+    state = next;
+    options.onChange?.(state);
+    for (const listener of listeners) listener(state);
+  }
+  async function check(checkOptions = {}) {
+    if (inFlight !== null) return;
+    inFlight = "check";
+    emit({ ...state, status: "checking", error: null });
+    try {
+      const view = await options.request.check(checkOptions);
+      const checkedAt = new Date(now()).toISOString();
+      if (view.checkFailed) {
+        emit({
+          status: "failed",
+          view,
+          error: { code: "CHECK_FAILED", message: "检查更新失败：拿不到 registry 上的最新版本" },
+          checkedAt
+        });
+      } else {
+        emit({ status: view.updateAvailable ? "available" : "current", view, error: null, checkedAt });
+      }
+    } catch (error) {
+      emit({ ...state, status: "failed", error: errorOf(error) });
+    } finally {
+      inFlight = null;
+    }
+  }
+  async function apply2() {
+    if (inFlight !== null) return;
+    const view = state.view;
+    if (view === null || !view.updateAvailable) {
+      emit({ ...state, status: "failed", error: { code: "NO_UPDATE", message: "没有可更新的版本，请先检查更新" } });
+      return;
+    }
+    if (!view.canApply) {
+      emit({
+        ...state,
+        status: "failed",
+        error: { code: "NO_APPLY", message: `当前环境不支持一键更新，请执行：${view.manualCommand}` }
+      });
+      return;
+    }
+    inFlight = "apply";
+    emit({ ...state, status: "applying", error: null });
+    try {
+      const result = await options.request.apply();
+      const restartRequired = result.restartRequired ?? result.application !== "applied";
+      emit({ ...state, status: restartRequired ? "restart-required" : "applied", error: null });
+    } catch (error) {
+      emit({ ...state, status: "failed", error: errorOf(error) });
+    } finally {
+      inFlight = null;
+    }
+  }
+  return {
+    getState: () => state,
+    subscribe: (listener) => {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    check,
+    apply: apply2,
+    reset: () => emit({ ...IDLE })
+  };
+}
+
 // client/about.ts
 function AboutDialog(props) {
   const { t, state } = props;
   const [copied, setCopied] = import_react.default.useState(false);
+  const [copiedCommand, setCopiedCommand] = import_react.default.useState(false);
+  const [confirming, setConfirming] = import_react.default.useState(false);
+  const controllerRef = import_react.default.useRef(null);
+  if (controllerRef.current === null) {
+    controllerRef.current = createUpdateController({
+      request: {
+        check: (options) => getPluginUpdate(options.fresh === true ? { fresh: true } : {}),
+        apply: () => applyPluginUpdate()
+      }
+    });
+  }
+  const controller = controllerRef.current;
+  const [updateState, setUpdateState] = import_react.default.useState(() => controller.getState());
+  import_react.default.useEffect(() => {
+    const unsubscribe = controller.subscribe(setUpdateState);
+    if (controller.getState().status === "idle") void controller.check();
+    return unsubscribe;
+  }, [controller]);
+  import_react.default.useEffect(() => {
+    if (updateState.status === "applying" || updateState.status === "restart-required" || updateState.status === "applied") {
+      setConfirming(false);
+    }
+  }, [updateState.status]);
   const plugin = state.plugin;
   const fullName = `${plugin.name}@v${plugin.version}`;
   const repository = plugin.repository;
@@ -3029,7 +3309,60 @@ function AboutDialog(props) {
       setTimeout(() => setCopied(false), 1600);
     });
   };
-  return h(
+  const copyCommand = () => {
+    const command = updateState.view?.manualCommand;
+    if (command === void 0) return;
+    void copyText(command).then((ok) => {
+      if (!ok) return;
+      setCopiedCommand(true);
+      setTimeout(() => setCopiedCommand(false), 1600);
+    });
+  };
+  const view = updateState.view;
+  const status = updateState.status;
+  const target = view !== null && view.updateAvailable ? view.latestVersion ?? "" : "";
+  const busy = status === "checking" || status === "applying";
+  const settled = status === "restart-required" || status === "applied";
+  const actionable = view !== null && view.updateAvailable && view.canApply && !settled && !busy;
+  const manual = view !== null && (!view.canApply || view.checkFailed) ? view.manualCommand : null;
+  const statusLine = () => {
+    if (status === "checking" || view === null) return t("about.update.checking");
+    if (status === "applying") return t("about.update.applying", { version: target });
+    if (status === "restart-required") return t("about.update.done", { version: view.latestVersion ?? target });
+    if (status === "applied") return t("about.update.applied", { version: view.latestVersion ?? target });
+    if (status === "failed") {
+      if (updateState.error?.code === "CHECK_FAILED") return t("about.update.checkFailed");
+      return t("about.update.failed", { message: updateState.error?.message ?? "" });
+    }
+    if (view.checkFailed) return t("about.update.checkFailed");
+    if (view.updateAvailable) return t("about.update.available", { latest: view.latestVersion ?? "", current: view.currentVersion });
+    return t("about.update.current", { version: view.currentVersion });
+  };
+  const updateActions = [
+    h(Btn, { key: "check", small: true, disabled: busy, onClick: () => void controller.check({ fresh: true }) }, t("about.update.check")),
+    manual === null ? null : h(
+      Btn,
+      { key: "copy-command", small: true, onClick: copyCommand },
+      copiedCommand ? t("about.update.copied") : t("about.update.copy")
+    ),
+    actionable ? confirming ? [
+      h(
+        Btn,
+        {
+          key: "confirm",
+          small: true,
+          variant: "danger",
+          onClick: () => {
+            setConfirming(false);
+            void controller.apply();
+          }
+        },
+        t("about.update.confirmYes")
+      ),
+      h(Btn, { key: "cancel", small: true, onClick: () => setConfirming(false) }, t("about.update.cancel"))
+    ] : h(Btn, { key: "apply", small: true, variant: "primary", onClick: () => setConfirming(true) }, t("about.update.apply", { version: target })) : null
+  ].filter((item) => item !== null);
+  const dialog = h(
     "div",
     { className: "dshgt-modal-mask", onClick: (event) => {
       if (event.target === event.currentTarget) props.onClose();
@@ -3059,9 +3392,29 @@ function AboutDialog(props) {
           [t("about.core"), state.core.version === void 0 ? "—" : `trendradar ${state.core.version}`],
           [t("about.env"), t("about.env.value")]
         ]
-      })
+      }),
+      h(
+        "div",
+        { className: "dshgt-update" },
+        h(
+          "div",
+          { className: "dshgt-update-head" },
+          h("h4", null, t("about.update.title")),
+          h("span", { className: "dshgt-hint" }, t("about.update.hint"))
+        ),
+        h("p", { className: `dshgt-update-line${status === "failed" ? " dshgt-update-err" : ""}` }, statusLine()),
+        confirming ? h("p", { className: "dshgt-update-warn" }, t("about.update.confirm", { version: target })) : null,
+        h("div", { className: "dshgt-update-actions" }, updateActions),
+        manual === null ? null : h(
+          "div",
+          { className: "dshgt-update-manual" },
+          h("p", { className: "dshgt-update-warn" }, t("about.update.manual", { kind: view?.installKind ?? "unknown" })),
+          h("code", { className: "dshgt-update-cmd" }, manual)
+        )
+      )
     )
   );
+  return h("div", { className: "dshgt-root" }, dialog);
 }
 
 // client/panel-icon.ts

package/lib/{chunk-X4PBXIZE.js → chunk-NMINPPWO.js}

@@ -3096,6 +3096,7 @@ __export(routes_exports, {
   ROUTE_PREFIX: () => ROUTE_PREFIX,
   createRoutes: () => createRoutes
 });
+import { PluginUpdateError } from "@morehao/dsh-plugin-kit/update";
 var ROUTE_PREFIX = "/api/morehao/github-trending";
 var HEADER = "x-dsh-github-trending";
 var MAX_BODY2 = 512 * 1024;
@@ -3143,6 +3144,17 @@ function createRoutes(deps) {
       if (!response.writableEnded) sendJson2(response, 200, { ok: true, ...result });
     } catch (error) {
       if (response.writableEnded) return;
+      if (error instanceof PluginUpdateError) {
+        deps.logger?.("update.failed", { code: error.code, message: error.message });
+        sendJson2(response, 409, {
+          ok: false,
+          code: "UPDATE_FAILED",
+          updateCode: error.code,
+          message: redact(error.message),
+          update: deps.update?.view() ?? null
+        });
+        return;
+      }
       const code = error instanceof IpcError ? error.code : "INTERNAL";
       const message = redact(error instanceof Error ? error.message : String(error));
       deps.logger?.("route.error", { pathname, method, code, message });
@@ -3155,6 +3167,18 @@ async function dispatch(method, pathname, url, request, deps) {
   const env = deps.env ?? process.env;
   const settings = deps.store.readSettings();
   if (method === "GET" && pathname === "/state") return statePayload(deps, settings);
+  if (method === "GET" && pathname === "/update") {
+    if (deps.update === void 0) throw new IpcError("NOT_FOUND", "\u81EA\u66F4\u65B0\u670D\u52A1\u4E0D\u53EF\u7528");
+    const update = await deps.update.check({ fresh: url.searchParams.get("fresh") === "1" });
+    return { update };
+  }
+  if (method === "POST" && pathname === "/update") {
+    if (deps.update === void 0) throw new IpcError("NOT_FOUND", "\u81EA\u66F4\u65B0\u670D\u52A1\u4E0D\u53EF\u7528");
+    const body = await readBody2(request);
+    const version = typeof body.version === "string" && body.version.trim() !== "" ? body.version.trim() : void 0;
+    const result = await deps.update.apply(version === void 0 ? {} : { version });
+    return { result, update: deps.update.view() };
+  }
   if (method === "GET" && pathname === "/core") {
     const core = await inspectCore(settings, { env, fresh: url.searchParams.get("fresh") === "1" });
     const coexistence = await detectCoexistence(core.path, { env });
@@ -3347,6 +3371,57 @@ async function statePayload(deps, settings) {
   };
 }
 
+// src/host/update.ts
+var update_exports = {};
+__export(update_exports, {
+  createUpdateService: () => createUpdateService
+});
+import { normalizeProfile } from "@morehao/dsh-plugin-kit";
+import { createPluginUpdater } from "@morehao/dsh-plugin-kit/update";
+function pnpmViewRunner(get, env, exec) {
+  return async (spec) => {
+    const profile = normalizeProfile(get("profileContext"));
+    if (profile === null || profile.dir === void 0) return null;
+    const command = profile.packageManager?.command ?? "pnpm";
+    const prefix = profile.packageManager?.args ?? [];
+    let result;
+    try {
+      result = await exec(command, [...prefix, "view", spec, "version", "--json"], {
+        cwd: profile.dir,
+        env: sanitizedEnv(env),
+        timeoutMs: 8e3,
+        maxStdout: 64 * 1024,
+        maxStderr: 16 * 1024
+      });
+    } catch {
+      return null;
+    }
+    if (result.code !== 0) return null;
+    const text = result.stdout.trim();
+    if (text === "") return null;
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch {
+      return null;
+    }
+    const value = Array.isArray(parsed) ? parsed[parsed.length - 1] : parsed;
+    return typeof value === "string" && value.trim() !== "" ? value.trim() : null;
+  };
+}
+function createUpdateService(deps) {
+  const exec = deps.exec ?? execCapture;
+  return createPluginUpdater({
+    meta: deps.meta,
+    getPluginManager: () => deps.get("pluginManager"),
+    getProfile: () => deps.get("profileContext"),
+    runPnpmView: pnpmViewRunner(deps.get, deps.env, exec),
+    ...deps.fetchImpl === void 0 ? {} : { fetchImpl: deps.fetchImpl },
+    ...deps.readFile === void 0 ? {} : { readFile: deps.readFile },
+    ...deps.logger === void 0 ? {} : { logger: deps.logger }
+  });
+}
+
 // src/tools.ts
 var tools_exports = {};
 __export(tools_exports, {
@@ -3540,6 +3615,8 @@ export {
   ROUTE_PREFIX,
   createRoutes,
   routes_exports,
+  createUpdateService,
+  update_exports,
   createTrendingRunTool,
   createTrendingHistoryTool,
   tools_exports

package/lib/index.js

@@ -6,8 +6,9 @@ import {
   createRoutes,
   createTrendingHistoryTool,
   createTrendingRunTool,
+  createUpdateService,
   readPluginInfo
-} from "./chunk-X4PBXIZE.js";
+} from "./chunk-NMINPPWO.js";
 import "./chunk-XLIFTAVL.js";
 
 // src/index.ts
@@ -59,7 +60,18 @@ function apply(ctx, config = {}) {
     onError: (error) => ctx.logger?.warn?.(`[dsh-github-trending] \u5B9A\u65F6\u8FD0\u884C\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}`)
   });
   const pluginInfo = readPluginInfo();
+  const update = createUpdateService({
+    get,
+    env,
+    meta: {
+      name: pluginInfo.name,
+      version: VERSION,
+      ...pluginInfo.repository === void 0 ? {} : { repository: pluginInfo.repository }
+    },
+    logger: log
+  });
   const handler = createRoutes({
+    update,
     store,
     runner,
     scheduler,

package/lib/internal.d.ts

@@ -1,5 +1,6 @@
 import { ErrorCode, FileArtifact, ErrorInfo, RunRequest, RunResult, State, StateRun } from '@morehao/trendradar-contract';
 import http from 'node:http';
+import { Updater, PluginMeta, Logger } from '@morehao/dsh-plugin-kit/update';
 
 /**
  * 错误码：核心码（契约包 `ipc.v2` / `errors.v2` 的 17 个）+ 插件自己的码。
@@ -1377,6 +1378,8 @@ interface RouteDeps {
     /** 注入用：pendingPr 对账的 fetch 实现（测试不联网）。 */
     fetchImpl?: typeof fetch;
     version: string;
+    /** 自更新服务（共享包引擎）；缺省时 /update 返回 404，不影响其它路由。 */
+    update?: Updater;
     /** 包名与仓库地址都来自 package.json，由 src/index.ts 传入。 */
     pluginName?: string;
     repository?: string;
@@ -1392,6 +1395,24 @@ declare namespace routes {
   export { routes_HEADER as HEADER, routes_ROUTE_PREFIX as ROUTE_PREFIX, type routes_RouteDeps as RouteDeps, routes_createRoutes as createRoutes };
 }
 
+interface UpdateServiceDeps {
+    get: (name: string) => unknown;
+    env: NodeJS.ProcessEnv;
+    meta: PluginMeta;
+    logger?: Logger;
+    fetchImpl?: typeof fetch;
+    /** 测试注入；默认走本仓的 execCapture。 */
+    exec?: (file: string, args: string[], options?: ExecOptions) => Promise<ExecResult>;
+    readFile?: (path: string) => Promise<string>;
+}
+declare function createUpdateService(deps: UpdateServiceDeps): Updater;
+
+type update_UpdateServiceDeps = UpdateServiceDeps;
+declare const update_createUpdateService: typeof createUpdateService;
+declare namespace update {
+  export { type update_UpdateServiceDeps as UpdateServiceDeps, update_createUpdateService as createUpdateService };
+}
+
 interface ImportCandidate {
     path: string;
     exists: boolean;
@@ -1633,4 +1654,4 @@ declare namespace tools {
   export { tools_createTrendingHistoryTool as createTrendingHistoryTool, tools_createTrendingRunTool as createTrendingRunTool };
 }
 
-export { channel, config, core, credentials, errors, exec, github, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, tools };
+export { channel, config, core, credentials, errors, exec, github, handshake$1 as handshake, importCli, ipc, locate, paths, pendingPr, pluginInfo, preflight, proxy, quickfill, release, repo, routes, run, runner, schedule, state, tools, update as updateService };

package/lib/internal.js

@@ -22,8 +22,9 @@ import {
   runner_exports,
   schedule_exports,
   state_exports,
-  tools_exports
-} from "./chunk-X4PBXIZE.js";
+  tools_exports,
+  update_exports
+} from "./chunk-NMINPPWO.js";
 import {
   exec_exports
 } from "./chunk-XLIFTAVL.js";
@@ -52,5 +53,6 @@ export {
   runner_exports as runner,
   schedule_exports as schedule,
   state_exports as state,
-  tools_exports as tools
+  tools_exports as tools,
+  update_exports as updateService
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morehao/dsh-github-trending",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "GitHub 趋势日报插件：每天定时 spawn 本地 trendradar 核心，抓取 Trending、生成中文简介与总结，提交到你的仓库并自动合并 PR。",
   "type": "module",
   "main": "lib/index.js",
@@ -50,6 +50,7 @@
     }
   },
   "dependencies": {
+    "@morehao/dsh-plugin-kit": "0.1.0",
     "@morehao/trendradar-contract": "0.2.0"
   },
   "dsh": {