@ninkch/dsh-infinite-canvas 0.16.0 → 0.17.0

package/README.md

@@ -64,6 +64,14 @@ Text models come from Harness itself (no extra keys). Image, video and TTS backe
 
 When the companion [`dsh-artcraft`](../dsh-artcraft/README.md) plugin is installed, the canvas talks to the local **PhotoCraft / FilmCraft / EffectCraft** toolchain over same-origin HTTP: assets sync to a per-project data folder, images get headless PhotoCraft grading (single or batch), and final cuts export as FCP7 XML + SRT for FilmCraft to render as MP4. Status lights, graceful degradation and a full contract live in [`docs/artcraft-handoff.md`](./docs/artcraft-handoff.md).
 
+## Publishing (maintainers)
+
+Publishing runs through **npm Trusted Publishing** (OIDC) — no npm token exists anywhere:
+
+- **Release flow**: create a GitHub Release (tag `v0.17.0`, …) → Actions publishes that version automatically.
+- **Manual flow**: repo → Actions → *publish* → Run workflow → type a version.
+- The `publish.yml` workflow resolves the version from the release tag (or your input) and publishes with a `provenance` badge.
+
 ## Data & privacy
 
 - Canvas documents, projects, settings and the series bible live in browser `localStorage` (`dsh-ic:*`); assets live in IndexedDB (`dsh-infinite-canvas`).

package/README.zh-CN.md

@@ -64,6 +64,14 @@ flowchart LR
 
 安装配套的 [`dsh-artcraft`](../dsh-artcraft/README.md) 插件后，画布通过同源 HTTP 调用本地 **PhotoCraft / FilmCraft / EffectCraft** 工具链：资产同步到按项目隔离的数据目录，图片走 PhotoCraft 无头调色（单张或批量），成片导出 FCP7 XML + SRT 交给 FilmCraft 渲染 MP4。状态灯、优雅降级与完整契约见 [`docs/artcraft-handoff.md`](./docs/artcraft-handoff.md)。
 
+## 发布（维护者）
+
+发布走 **npm Trusted Publishing**（OIDC）——不依赖任何 npm 令牌：
+
+- **Release 流程**：GitHub 仓库创建 Release（tag `v0.17.0`…）→ Actions 自动发布该版本。
+- **手动流程**：仓库 → Actions → *publish* → Run workflow → 输入版本号。
+- `publish.yml` 从 release tag（或手动输入）解析版本号，发布时带 `provenance` 徽标。
+
 ## 数据与隐私
 
 - 画布文档、项目、设置与设定集存于浏览器 `localStorage`（`dsh-ic:*`）；资产存于 IndexedDB（`dsh-infinite-canvas`）。

package/client.js

@@ -329,6 +329,11 @@ window.__ModuleLoader__.load({
       'ttsCategory': '配音',
       'audioKind': '音频',
       'finalcutCategory': '成片',
+      'updateBtn': '检查更新',
+      'updateAvailable': '新版本可用',
+      'updateNow': '一键更新',
+      'updateUpToDate': '已是最新版本',
+      'releaseNotes': '发布说明',
       'history': '历史版本',
       'refList': '参考图（[图N] 按此顺序绑定进提示词）',
       'moveUp': '上移',
@@ -577,6 +582,11 @@ window.__ModuleLoader__.load({
       'ttsCategory': 'Voice',
       'audioKind': 'Audio',
       'finalcutCategory': 'Final cut',
+      'updateBtn': 'Check updates',
+      'updateAvailable': 'New version available',
+      'updateNow': 'Update now',
+      'updateUpToDate': 'Up to date',
+      'releaseNotes': 'release notes',
       'history': 'History',
       'refList': 'Refs ([图N] bound to prompt in this order)',
       'moveUp': 'Move up',
@@ -1814,6 +1824,41 @@ window.__ModuleLoader__.load({
     //  3) craft.file(outRel) 回收入库；预留 file.exportLottie 导出按钮位（Lottie 可在画布网页内预览）
     //  实现时复用 craft.jobStart/craft.file 与 PhotoCraftDialog 的任务轮询模式。
 
+    // ============================================================
+    // 自动更新：npm/git 双信息源，一键 git pull（Host RPC）
+    // ============================================================
+    const PLUGIN_VERSION = '0.16.0';
+    async function checkUpdate(silent) {
+      update((s) => { s.updateInfo = null; s.updateChecking = true; s.updateMsg = null; });
+      try {
+        const info = await hostRpc('updateCheck');
+        update((s) => { s.updateInfo = info; s.updateChecking = false; });
+        return info;
+      } catch (e) {
+        update((s) => { s.updateInfo = null; s.updateChecking = false; s.updateMsg = silent ? null : String(e.message || e); });
+        if (!silent) toast('更新检查失败：' + (e.message || e));
+        return null;
+      }
+    }
+    async function applyUpdate() {
+      update((s) => { s.updateBusy = true; s.updateMsg = '正在拉取更新…'; });
+      try {
+        const res = await hostRpc('updateApply');
+        if (!res.ok) {
+          update((s) => { s.updateBusy = false; s.updateMsg = '更新失败：' + (res.output || '').slice(-300); });
+          return;
+        }
+        if (res.hostChanged) {
+          update((s) => { s.updateBusy = false; s.updateMsg = '已更新到 v' + res.version + ' — 后台已变更，请重启一次 Harness 后刷新页面'; });
+        } else {
+          update((s) => { s.updateBusy = false; s.updateMsg = '已更新到 v' + res.version + ' — 正在刷新页面…'; });
+          setTimeout(() => location.reload(), 1200);
+        }
+      } catch (e) {
+        update((s) => { s.updateBusy = false; s.updateMsg = '更新失败：' + (e.message || e); });
+      }
+    }
+
     // ============================================================
     // 尺寸 / 比例（Toonflow 式：清晰度 × 比例 → 像素）
     // ============================================================
@@ -2071,6 +2116,11 @@ window.__ModuleLoader__.load({
       assetsTick: 0,
       tick: 0,
       craftStatus: null, // {at, data} | {at, error}
+      updateInfo: null,      // Host updateCheck 结果
+      updateChecking: false,
+      updateBusy: false,
+      updateMsg: null,
+      updateDismissed: false,
     };
     const listeners = new Set();
     let saveTimer = null;
@@ -4146,6 +4196,12 @@ window.__ModuleLoader__.load({
           : h('button', { type: 'button', className: 'dshic-btn', style: { fontWeight: 600, maxWidth: 180, overflow: 'hidden' }, onDoubleClick: () => setNaming(true), title: T('renameHint') },
               h('span', { style: { overflow: 'hidden', textOverflow: 'ellipsis' } }, proj ? proj.name : '')),
         h('div', { className: 'dshic-toolbar-sep' }),
+        h('button', {
+          type: 'button', className: cls('dshic-btn'), style: { fontSize: 11, color: 'var(--dsw-alias-label-secondary)', gap: 4 },
+          title: T('updateBtn'), disabled: S.updateChecking,
+          onClick: () => { checkUpdate(false).then((info) => { if (info && info.upToDate) toast(T('updateUpToDate')); }); },
+        }, 'v' + PLUGIN_VERSION, S.updateChecking ? h('span', { className: 'dshic-spin' }) : (updAvail ? ' ⬆' : '')),
+        h('div', { className: 'dshic-toolbar-sep' }),
         h(Btn, {
           active: S.rightOpen, title: T('toggleRight'),
           onClick: () => update((s) => { s.rightOpen = !s.rightOpen; }),
@@ -4905,7 +4961,7 @@ window.__ModuleLoader__.load({
         h(ApiListEditor, { key: 'imglist', kind: 'image' }),
         h(ApiListEditor, { key: 'vidlist', kind: 'video' }),
         h(ApiListEditor, { key: 'ttslist', kind: 'tts' }),
-        h('div', { key: 'note', className: 'dshic-hint' }, 'DeepSeek Harness · dsh-infinite-canvas v0.16.0'),
+        h('div', { key: 'note', className: 'dshic-hint' }, 'DeepSeek Harness · dsh-infinite-canvas v0.17.0'),
       ];
     }
 
@@ -5082,6 +5138,8 @@ window.__ModuleLoader__.load({
         return () => el.removeEventListener('wheel', fn);
       }, []);
       const nodes = Object.values(S.graph.nodes);
+      const upd = S.updateInfo;
+      const updAvail = upd && !upd.upToDate;
       return h('div', { className: 'dshic-page' },
         !S.hostOk && S.hostError
           ? h('div', {
@@ -5095,6 +5153,44 @@ window.__ModuleLoader__.load({
               h('span', { style: { opacity: 0.75, fontSize: 11 } }, '(' + S.hostError + ')'),
             )
           : null,
+        updAvail && !S.updateDismissed
+          ? h('div', {
+              style: {
+                flex: 'none', display: 'flex', alignItems: 'center', gap: 8, padding: '6px 12px',
+                background: 'color-mix(in srgb, var(--dsw-alias-state-success-primary) 14%, transparent)',
+                color: 'var(--dsw-alias-state-success-primary)', fontSize: 12, lineHeight: '18px',
+              },
+            },
+              h('span', {}, '🚀 ' + T('updateAvailable') + ' v' + (upd.remoteVersion || '') + (upd.behind ? '（落后 ' + upd.behind + ' 个提交）' : '')),
+              S.updateBusy
+                ? h('span', { className: 'dshic-spin' })
+                : h('button', {
+                    type: 'button', className: 'dshic-mini',
+                    onPointerDown: (e) => e.stopPropagation(),
+                    onClick: applyUpdate,
+                  }, Ic('download', 11), T('updateNow')),
+              h('a', {
+                href: 'https://github.com/NINKCH/dsh-infinite_canvas/releases', target: '_blank', rel: 'noreferrer',
+                style: { color: 'inherit', opacity: 0.8, fontSize: 11 },
+                onPointerDown: (e) => e.stopPropagation(),
+              }, T('releaseNotes') + ' ↗'),
+              h('span', { style: { flex: 1 } }),
+              h('button', {
+                type: 'button', className: 'dshic-node-x', title: T('cancel'),
+                onPointerDown: (e) => e.stopPropagation(),
+                onClick: () => update((s) => { s.updateDismissed = true; }),
+              }, '✕'),
+            )
+          : null,
+        S.updateMsg
+          ? h('div', {
+              style: {
+                flex: 'none', padding: '6px 12px', fontSize: 12,
+                background: 'color-mix(in srgb, var(--dsw-alias-brand-primary) 12%, transparent)',
+                color: 'var(--dsw-alias-brand-primary)',
+              },
+            }, S.updateMsg)
+          : null,
         h(Toolbar),
         h('div', { className: 'dshic-main' },
           h('div', {
@@ -5188,6 +5284,8 @@ window.__ModuleLoader__.load({
           const unsub = ctx.locale.subscribe(() => notify());
           // ArtCraft 后期工具链状态探测（失败静默，Craft 功能各自降级）
           probeCraft();
+          // 检查更新（Host RPC；Host 旧版未带此方法时静默）
+          checkUpdate(true);
           // 后台路由探活：失败时在画布顶部给出可操作的提示
           hostRpc('ping').then(() => { S.hostOk = true; S.hostError = null; notify(); }).catch((e) => {
             S.hostOk = false;

package/index.js

@@ -6,7 +6,72 @@
  * through the Harness `llm` Service — the same providers/models the user has
  * configured for the Harness itself, no extra API key handling here.
  */
+import { spawn } from 'node:child_process';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
 const NAME = 'infinite-canvas';
+const VERSION = '0.17.0';
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+
+/** 运行 git 子命令（cwd = 插件目录 = 仓库根）。 */
+function runGit(args, timeoutMs = 90000) {
+  return new Promise((resolve) => {
+    const started = Date.now();
+    const stdout = [];
+    const stderr = [];
+    let child;
+    try {
+      child = spawn('git', args.map(String), { cwd: HERE, windowsHide: true });
+    } catch (e) {
+      resolve({ ok: false, stdout: '', stderr: String(e?.message ?? e) });
+      return;
+    }
+    const timer = setTimeout(() => { try { child.kill(); } catch { /* ignore */ } }, Math.max(5000, timeoutMs));
+    child.stdout?.setEncoding('utf8');
+    child.stderr?.setEncoding('utf8');
+    child.stdout?.on('data', (d) => stdout.push(String(d)));
+    child.stderr?.on('data', (d) => stderr.push(String(d)));
+    child.on('error', (e) => { clearTimeout(timer); resolve({ ok: false, stdout: stdout.join(''), stderr: String(e?.message ?? e) }); });
+    child.on('close', (code) => {
+      clearTimeout(timer);
+      resolve({ ok: code === 0, code, stdout: stdout.join(''), stderr: stderr.join(''), ms: Date.now() - started });
+    });
+  });
+}
+
+/** 更新检查：fetch origin + 对比本地/远端版本。 */
+async function updateCheck() {
+  const fetchRes = await runGit(['fetch', 'origin', '--quiet'], 60000);
+  if (!fetchRes.ok) throw new Error('git fetch 失败：' + (fetchRes.stderr || '').slice(0, 300));
+  const head = (await runGit(['rev-parse', '--short', 'HEAD'])).stdout.trim();
+  const remoteHead = (await runGit(['rev-parse', '--short', 'origin/main'])).stdout.trim();
+  const behind = Number((await runGit(['rev-list', '--count', 'HEAD..origin/main'])).stdout.trim()) || 0;
+  let remoteVersion = null;
+  try {
+    const pj = await runGit(['show', 'origin/main:package.json']);
+    remoteVersion = JSON.parse(pj.stdout).version ?? null;
+  } catch { /* 远端无 package.json 时忽略 */ }
+  let runningVersion = null;
+  try { runningVersion = JSON.parse(await fs.readFile(path.join(HERE, 'package.json'), 'utf8')).version ?? null; } catch { /* 忽略 */ }
+  return { head, remoteHead, behind, remoteVersion, runningVersion, upToDate: head === remoteHead };
+}
+
+/** 应用更新：git pull --ff-only；报告 index.js 是否变更（决定是否需要重启 Harness）。 */
+async function updateApply() {
+  const before = (await runGit(['rev-parse', 'HEAD:index.js'])).stdout.trim();
+  const pull = await runGit(['pull', '--ff-only', 'origin', 'main'], 180000);
+  const after = (await runGit(['rev-parse', 'HEAD:index.js'])).stdout.trim();
+  let version = null;
+  try { version = JSON.parse(await fs.readFile(path.join(HERE, 'package.json'), 'utf8')).version ?? null; } catch { /* 忽略 */ }
+  return {
+    ok: pull.ok,
+    output: ((pull.stdout || '') + '\n' + (pull.stderr || '')).trim().slice(-1500),
+    hostChanged: pull.ok && before !== after,
+    version,
+  };
+}
 
 export const inject = ['webServer'];
 
@@ -86,9 +151,11 @@ export function apply(ctx) {
     }
 
     const methods = {
-      async ping() { return { ok: true, version: '0.5.0' }; },
+      async ping() { return { ok: true, version: VERSION }; },
       async llmOptions() { return listLlmOptions(); },
       async llmComplete(args) { return complete(args); },
+      async updateCheck() { return updateCheck(); },
+      async updateApply() { return updateApply(); },
       async listSkills() {
         const skills = ctx.get('skills');
         if (!skills) return { skills: [], error: 'skills 服务不可用' };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ninkch/dsh-infinite-canvas",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Node-based short-drama studio for DeepSeek Harness: script → storyboard → assets → shots → voiced, subtitled final cut on an infinite canvas.",
   "keywords": [
     "dsh",