@xmanrui/dsh-im 3.0.7 → 3.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "3.0.7",
+  "version": "3.1.0",
   "description": "把九种 IM 机器人和公网 AI Office 接入本机 DeepSeek Harness。 Connect nine IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",
@@ -102,6 +102,7 @@
     "https-proxy-agent": "5.0.1",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "react-test-renderer": "18.3.1"
+    "react-test-renderer": "18.3.1",
+    "semver": "7.8.5"
   }
 }

package/plugin-src/client/i18n.js

@@ -9,6 +9,62 @@ const EN = Object.freeze({
   'IM 渠道': 'IM channels',
   '让 DeepSeek Harness 触手可及': 'Connecting DeepSeek Harness',
   '当前版本': 'Current version',
+  'DSH-IM 更新': 'DSH-IM update',
+  '检查更新': 'Check for updates',
+  '重新检查': 'Check again',
+  '刷新状态': 'Refresh status',
+  '更新至': 'Update to',
+  '安装更新': 'Install update',
+  '正在更新…': 'Updating…',
+  '待手动重启': 'Restart needed',
+  '运行版本': 'Running version',
+  '已安装版本': 'Installed version',
+  'npm 最新版本': 'Latest on npm',
+  '目标 profile': 'Target profile',
+  '目标版本': 'Target version',
+  '更新来源': 'Update source',
+  '页面版本': 'Page version',
+  '无法确认': 'Unknown',
+  '发现新版本': 'Update available',
+  '已是最新版本': 'Up to date',
+  '当前版本无需更新': 'No newer version available',
+  '已获取 npm 最新版本': 'Latest npm version retrieved',
+  '检查 npm 最新版本，不会自动安装。': 'Check the latest npm version. Nothing is installed automatically.',
+  '正在从 npm 检查最新版本…': 'Checking npm for the latest version…',
+  '正在安装，请稍候…': 'Installing, please wait…',
+  '正在校验安装结果…': 'Verifying the installation…',
+  '已安装，待手动重启': 'Installed — manual restart needed',
+  '更新已生效': 'Updated version is active',
+  '更新失败': 'Update failed',
+  '更新请求失败': 'Update request failed',
+  '仅更新 DSH-IM。安装完成后需手动重启后台；本功能不会自动重启或主动刷新页面。': 'Only DSH-IM will be updated. Restart the backend manually after installation. This feature does not automatically restart it or initiate a page refresh.',
+  '当前是源码或链接安装，只能检查版本；请手动更新源码，或迁移到 npm 安装。': 'This is a source or linked installation. You can check versions, but must update the source manually or migrate to an npm installation.',
+  '无法确认当前 profile，请在对应的 Harness 环境中手动更新。': 'The current profile could not be identified. Update manually in the corresponding Harness environment.',
+  '当前运行环境不支持按钮安装，请手动更新插件。': 'This runtime cannot install through this button. Update the plugin manually.',
+  '当前 npm 源配置与官方源不一致，请先检查 registry 配置。': 'The npm registry configuration differs from the official registry. Check your registry settings first.',
+  '当前 Host 的 Node.js 版本不满足新版要求，请先更新运行环境。': 'The Host Node.js version does not meet the new version’s requirements. Update the runtime first.',
+  '新版本已安装，请在方便时手动重启当前 Harness 或 Desktop。': 'The new version is installed. Manually restart this Harness or Desktop when convenient.',
+  '上次安装结果无法确认，请先检查此 profile 的插件安装状态。': 'The previous installation result is uncertain. Check this profile’s plugin installation first.',
+  '无法访问 npm 或请求超时，请稍后重新检查。': 'npm is unreachable or the request timed out. Check again later.',
+  'npm 返回的版本信息无效，暂时无法更新。': 'npm returned invalid release information. Updating is unavailable.',
+  '版本确认已过期，请重新检查后再安装。': 'The version confirmation expired. Check again before installing.',
+  '插件安装状态已发生变化，请重新检查。': 'The plugin installation changed. Check again.',
+  '此 profile 正在更新，请稍后查看状态。': 'This profile is already updating. Check its status shortly.',
+  '安装失败，请检查当前安装状态后重试。': 'Installation failed. Check the current installation before retrying.',
+  '安装结果校验失败，请手动检查插件版本。': 'Installation verification failed. Check the plugin version manually.',
+  '无法安全保存更新状态，请先检查当前安装结果。': 'Update state could not be saved safely. Check the current installation result before retrying.',
+  '上次更新已中断，请检查安装状态后重试。': 'The previous update was interrupted. Check the installation before retrying.',
+  '更新服务已关闭，请手动重新打开设置页。': 'The update service has closed. Reopen settings manually.',
+  '更新请求无效，请重新检查版本。': 'The update request is invalid. Check the version again.',
+  '当前插件安装不完整或与 profile 不符，请手动检查安装配置。': 'The plugin installation is incomplete or does not match this profile. Check the installation configuration manually.',
+  '无法确认当前 npm 源配置，暂时不能安装更新。': 'The npm registry configuration could not be verified. Installation is unavailable.',
+  '安装超时，请先确认当前安装状态，再决定是否重试。': 'Installation timed out. Check the current installation before retrying.',
+  '更新请求失败，请重试。': 'The update request failed. Try again.',
+  '更新服务返回了无法识别的响应。': 'The update service returned an unrecognized response.',
+  '当前 Host 不支持更新接口，请先手动更新插件并重启。': 'This Host does not support the update API. Update the plugin manually and restart first.',
+  '关闭窗口不会取消安装。请勿同时在其他窗口管理此 profile 的插件。': 'Closing this window does not cancel installation. Do not manage this profile’s plugins in another window at the same time.',
+  '页面版本与运行版本不同，请手动刷新页面；若仍不一致，请手动重启 Harness 或 Desktop。': 'The page and running versions differ. Refresh the page manually; if they still differ, manually restart Harness or Desktop.',
+  '请在机器人空闲时安装；安装会修改当前 profile 的依赖，完成后需手动重启。': 'Install while bots are idle. This changes the current profile’s dependencies and requires a manual restart afterward.',
   'AI Office': 'AI Office',
   '（实验功能）': '(Experimental)',
   'AI Office 设置': 'AI Office settings',

package/plugin-src/client/index.js

@@ -48,6 +48,7 @@ import {
   replacePageLocation,
 } from './loopback-recovery.js';
 import { installImStyles } from './styles.js';
+import { UpdatePanel, UPDATE_RPC_CHANNEL } from './update-panel.js';
 import { WorkspaceDirectoryPickerContext } from './workspace-editor.js';
 
 export const name = 'im-settings';
@@ -155,17 +156,22 @@ export function IMSettingsTab({
   weixinRpcCall,
   whatsappRpcCall,
   officeRpcCall,
+  updateRpcCall,
   workspaceDirectoryPicker,
   browserLocation = globalThis.location,
   navigateToRecoveryUrl = replacePageLocation,
 }) {
   const [selected, setSelected] = React.useState('weixin');
   const [loopbackRecovery, setLoopbackRecovery] = React.useState(null);
+  const [runningVersion, setRunningVersion] = React.useState(IM_PLUGIN_VERSION);
   const githubTooltipId = React.useId();
   const active = CHANNELS.find((channel) => channel.id === selected) ?? CHANNELS[0];
   const reportLoopbackRecovery = React.useCallback((recovery) => {
     setLoopbackRecovery((current) => current?.url === recovery.url ? current : recovery);
   }, []);
+  const reportUpdateStatus = React.useCallback((snapshot) => {
+    setRunningVersion(snapshot.runningVersion);
+  }, []);
   const rpcCalls = React.useMemo(() => createLoopbackAwareRpcCalls({
     dingtalkRpcCall,
     discordRpcCall,
@@ -177,6 +183,7 @@ export function IMSettingsTab({
     weixinRpcCall,
     whatsappRpcCall,
     officeRpcCall,
+    updateRpcCall,
   }, {
     location: browserLocation,
     onRecovery: reportLoopbackRecovery,
@@ -190,6 +197,7 @@ export function IMSettingsTab({
     reportLoopbackRecovery,
     slackRpcCall,
     telegramRpcCall,
+    updateRpcCall,
     wecomRpcCall,
     weixinRpcCall,
     whatsappRpcCall,
@@ -200,8 +208,14 @@ export function IMSettingsTab({
       h('div', { className: 'dim-brand' },
         h('div', { className: 'dim-brandHeading' },
           h('strong', { className: 'dim-brandName' }, 'DSH-IM'),
-          h('span', { className: 'dim-brandVersion' }, `v${IM_PLUGIN_VERSION}`)),
+          h('span', { className: 'dim-brandVersion' }, `v${runningVersion}`)),
         h('p', null, '让 DeepSeek Harness 触手可及')),
+      h('div', { className: 'dim-titleActions' },
+        h(UpdatePanel, {
+          rpcCall: rpcCalls.updateRpcCall,
+          clientVersion: IM_PLUGIN_VERSION,
+          onStatus: reportUpdateStatus,
+        }),
       h('span', { className: 'dim-githubAction' },
         h('a', {
           className: 'dim-githubLink',
@@ -217,7 +231,7 @@ export function IMSettingsTab({
           id: githubTooltipId,
           className: 'dim-githubTooltip',
           role: 'tooltip',
-        }, '帮助与反馈 · 前往 GitHub')),
+        }, '帮助与反馈 · 前往 GitHub'))),
     ),
     h('div', { className: 'dim-layout' },
       h('nav', { className: 'dim-rail', role: 'tablist', 'aria-label': 'IM 渠道' },
@@ -318,6 +332,8 @@ export function apply(ctx) {
     ctx.connection.rpc.call(SLACK_RPC_CHANNEL, endpoint, payload, signal);
   const officeRpcCall = (endpoint, payload, signal) =>
     ctx.connection.rpc.call(OFFICE_RPC_CHANNEL, endpoint, payload, signal);
+  const updateRpcCall = (endpoint, payload, signal) =>
+    ctx.connection.rpc.call(UPDATE_RPC_CHANNEL, endpoint, payload, signal);
   const workspaceDirectoryPicker = Object.freeze({
     listDirectory: (path, signal) => ctx.workspaces.listDirectory(path, signal),
     pickDirectory: () => ctx.workspaces.pickDirectory(),
@@ -340,6 +356,7 @@ export function apply(ctx) {
       weixinRpcCall,
       whatsappRpcCall,
       officeRpcCall,
+      updateRpcCall,
       workspaceDirectoryPicker,
     }),
   }, IMSettingsTab));

package/plugin-src/client/styles.js

@@ -17,6 +17,32 @@ const CSS = String.raw`
 .dim-brandName { color: var(--dsw-alias-label-primary, #1f2329); font-size: 20px; line-height: 24px; font-weight: 800; letter-spacing: .04em; }
 .dim-brandVersion { color: var(--dsw-alias-label-tertiary, #8f959e); font: 500 10px/16px ui-monospace, SFMono-Regular, Menlo, monospace; letter-spacing: 0; }
 .dim-title p { margin: 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 12px; line-height: 18px; font-weight: 500; white-space: nowrap; }
+.dim-titleActions { display: flex; align-items: center; justify-content: flex-end; gap: 8px; flex-wrap: wrap; }
+.dim-updateButton { min-height: 30px; display: inline-flex; align-items: center; justify-content: center; gap: 3px; padding: 5px 10px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 8px; color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-size: 12px; line-height: 18px; font-weight: 560; cursor: pointer; }
+.dim-updateButton:hover:not(:disabled) { border-color: #aeb3bb; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-interactive-bg-hover, #f7f8fa); }
+.dim-updateButton:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: 2px; }
+.dim-updateButton:disabled { opacity: .55; cursor: default; }
+.dim-updateTrigger { white-space: nowrap; }
+.dim-updateBackdrop { position: fixed; inset: 0; z-index: 1000; display: grid; place-items: center; padding: 24px; background: rgb(15 17 21 / 42%); }
+.dim-updateBackdrop, .dim-updateBackdrop * { box-sizing: border-box; }
+.dim-updateDialog { width: min(480px, 100%); max-height: calc(100vh - 48px); overflow-y: auto; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 16px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 20px 70px rgb(0 0 0 / 20%); text-align: left; }
+.dim-updateDialog:focus { outline: none; }
+.dim-updateDialog h3 { margin: 22px 24px 8px; font-size: 18px; line-height: 25px; font-weight: 680; }
+.dim-updateDescription { margin: 0 24px; color: var(--dsw-alias-label-secondary, #646a73); font-size: 13px; line-height: 20px; }
+.dim-updateBody { padding: 18px 24px 20px; }
+.dim-updateVersions { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: 8px 18px; margin: 0 0 18px; font-size: 12px; line-height: 18px; }
+.dim-updateVersions dt { color: var(--dsw-alias-label-secondary, #646a73); }
+.dim-updateVersions dd { min-width: 0; margin: 0; overflow-wrap: anywhere; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
+.dim-updateStatus { padding: 12px 14px; border: 1px solid var(--dsw-alias-border-l1, #eef0f3); border-radius: 10px; background: var(--dsw-alias-bg-layer-1, #f7f8fa); font-size: 13px; line-height: 20px; }
+.dim-updateStatus strong { font-weight: 600; }
+.dim-updateStatus p { margin: 6px 0 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 12px; line-height: 19px; overflow-wrap: anywhere; }
+.dim-updateStatusError { border-color: color-mix(in srgb, var(--dsw-alias-state-danger-primary, #d92d20) 25%, var(--dsw-alias-border-l2, #dfe1e5)); }
+.dim-updateHint, .dim-updateError { margin: 12px 0 0; font-size: 12px; line-height: 19px; overflow-wrap: anywhere; }
+.dim-updateHint { color: var(--dsw-alias-label-secondary, #646a73); }
+.dim-updateError { color: var(--dsw-alias-state-danger-primary, #d92d20); }
+.dim-updateFooter { display: flex; align-items: center; justify-content: flex-end; flex-wrap: wrap; gap: 8px; padding: 14px 24px; border-top: 1px solid var(--dsw-alias-border-l1, #eef0f3); }
+.dim-updateFooter .dim-updateButton:first-child { margin-right: auto; }
+.dim-updatePrimary, .dim-updatePrimary:hover:not(:disabled) { border-color: var(--dsw-alias-state-business-primary, #3370ff); color: #fff; background: var(--dsw-alias-state-business-primary, #3370ff); }
 .dim-githubAction { position: relative; display: inline-flex; flex: none; }
 .dim-githubLink { min-height: 30px; display: inline-flex; align-items: center; gap: 5px; flex: none; padding: 0 10px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 8px; color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-layer-1, #fff); font-size: 12px; line-height: normal; font-weight: 560; text-decoration: none; transition: border-color .15s ease, color .15s ease, background .15s ease; }
 .dim-githubLink:hover { border-color: #aeb3bb; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-interactive-bg-hover, #f7f8fa); }
@@ -25,7 +51,7 @@ const CSS = String.raw`
 .dim-githubTooltip { position: absolute; top: calc(100% + 8px); right: 0; z-index: 20; width: max-content; max-width: min(220px, 80vw); padding: 6px 9px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 7px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 8px 24px rgb(31 35 41 / 14%); font-size: 11px; line-height: 16px; font-weight: 500; white-space: nowrap; opacity: 0; visibility: hidden; transform: translateY(-3px); pointer-events: none; transition: opacity .15s ease, transform .15s ease, visibility .15s ease; }
 .dim-githubAction:hover .dim-githubTooltip, .dim-githubAction:focus-within .dim-githubTooltip { opacity: 1; visibility: visible; transform: translateY(0); }
 .dim-layout { display: grid; grid-template-columns: 174px 1px minmax(0, 1fr); gap: 24px; align-items: start; }
-.dim-rail { max-height: 520px; display: grid; align-content: start; gap: 8px; overflow-y: auto; padding: 1px 4px 1px 1px; scrollbar-width: thin; scrollbar-color: var(--dsw-alias-border-l2, #dfe1e5) transparent; }
+.dim-rail { max-height: 520px; display: grid; align-content: start; gap: 8px; overflow-y: auto; padding: 0 4px 1px 1px; scrollbar-width: thin; scrollbar-color: var(--dsw-alias-border-l2, #dfe1e5) transparent; }
 .dim-rail::-webkit-scrollbar { width: 4px; }
 .dim-rail::-webkit-scrollbar-thumb { border-radius: 99px; background: var(--dsw-alias-border-l2, #dfe1e5); }
 .dim-channel { width: 100%; min-height: 48px; display: grid; grid-template-columns: 30px minmax(0, 1fr); align-items: center; gap: 10px; padding: 8px 12px; border: 1px solid var(--dsw-alias-border-l2, #eef0f3); border-radius: 14px; color: inherit; background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 2px 8px rgb(31 35 41 / 3%); font: inherit; text-align: left; cursor: pointer; transition: border-color .16s ease, background .16s ease, box-shadow .16s ease; }
@@ -284,6 +310,13 @@ const CSS = String.raw`
 @media (max-width: 560px) {
   .dim-title { flex-direction: column; gap: 10px; }
   .dim-title p { white-space: normal; }
+  .dim-titleActions { justify-content: flex-start; }
+  .dim-updateBackdrop { padding: 12px; }
+  .dim-updateDialog { max-height: calc(100vh - 24px); }
+  .dim-updateDialog h3 { margin: 18px 18px 8px; }
+  .dim-updateDescription { margin: 0 18px; }
+  .dim-updateBody { padding: 16px 18px; }
+  .dim-updateFooter { padding: 12px 18px; }
   .dim-githubTooltip { right: auto; left: 0; }
   .dim-rail { grid-template-columns: minmax(0, 1fr); }
   .dim-loopbackRecovery { align-items: stretch; flex-direction: column; gap: 12px; }

package/plugin-src/client/update-panel.js

@@ -0,0 +1,367 @@
+import * as React from 'react';
+import { createPortal } from 'react-dom';
+
+import { h } from './i18n.js';
+import { createPollScheduler } from './lifecycle.js';
+
+export const UPDATE_RPC_CHANNEL = '/dsh-im';
+
+const ACTIVE_STATES = new Set(['installing', 'verifying']);
+const BLOCKED_REASONS = Object.freeze({
+  'source-install': '当前是源码或链接安装，只能检查版本；请手动更新源码，或迁移到 npm 安装。',
+  'unknown-profile': '无法确认当前 profile，请在对应的 Harness 环境中手动更新。',
+  'unsupported-runtime': '当前运行环境不支持按钮安装，请手动更新插件。',
+  'registry-conflict': '当前 npm 源配置与官方源不一致，请先检查 registry 配置。',
+  'incompatible-node': '当前 Host 的 Node.js 版本不满足新版要求，请先更新运行环境。',
+  'pending-restart': '新版本已安装，请在方便时手动重启当前 Harness 或 Desktop。',
+  'recovery-required': '上次安装结果无法确认，请先检查此 profile 的插件安装状态。',
+});
+const ERROR_MESSAGES = Object.freeze({
+  'check-failed': '无法访问 npm 或请求超时，请稍后重新检查。',
+  'update-failed': '更新请求失败，请重试。',
+  'invalid-release': 'npm 返回的版本信息无效，暂时无法更新。',
+  'check-expired': '版本确认已过期，请重新检查后再安装。',
+  'installation-changed': '插件安装状态已发生变化，请重新检查。',
+  'update-busy': '此 profile 正在更新，请稍后查看状态。',
+  'install-failed': '安装失败，请检查当前安装状态后重试。',
+  'verify-failed': '安装结果校验失败，请手动检查插件版本。',
+  'state-unavailable': '无法安全保存更新状态，请先检查当前安装结果。',
+  interrupted: '上次更新已中断，请检查安装状态后重试。',
+  disposed: '更新服务已关闭，请手动重新打开设置页。',
+  'bad-request': '更新请求无效，请重新检查版本。',
+  'invalid-installation': '当前插件安装不完整或与 profile 不符，请手动检查安装配置。',
+  'executor-unavailable': BLOCKED_REASONS['unsupported-runtime'],
+  'registry-check-failed': '无法确认当前 npm 源配置，暂时不能安装更新。',
+  'install-interrupted': '上次更新已中断，请检查安装状态后重试。',
+  'install-timeout': '安装超时，请先确认当前安装状态，再决定是否重试。',
+  'invalid-version': 'npm 返回的版本信息无效，暂时无法更新。',
+});
+
+function unwrapSnapshot(result) {
+  if (result?.ok === false) {
+    const error = new Error(result.error?.message || '更新请求失败，请重试。');
+    error.code = result.error?.code;
+    throw error;
+  }
+  const value = result?.value;
+  if (result?.ok !== true || typeof value?.runningVersion !== 'string'
+    || typeof value?.canInstall !== 'boolean') {
+    throw new Error('更新服务返回了无法识别的响应。');
+  }
+  return value;
+}
+
+function presentError(error) {
+  const code = error?.rpcError?.code ?? error?.code ?? '';
+  const message = error?.rpcError?.message ?? error?.message ?? '';
+  if (code === 'update-unavailable'
+    || /(?:not[-_ ]found|unimplemented|unknown[-_ ](?:endpoint|channel)|no[-_ ]handler)/i.test(code)
+    || /(?:not found|unknown (?:endpoint|channel)|not registered|no .*handler|HTTP 404)/i.test(message)) {
+    return '当前 Host 不支持更新接口，请先手动更新插件并重启。';
+  }
+  return BLOCKED_REASONS[code] ?? ERROR_MESSAGES[code]
+    ?? (message.slice(0, 400) || '更新请求失败，请重试。');
+}
+
+function summary(snapshot, action, error) {
+  if (action === 'checking') return '正在从 npm 检查最新版本…';
+  if (action === 'starting' || snapshot?.job?.state === 'installing') return '正在安装，请稍候…';
+  if (snapshot?.job?.state === 'verifying') return '正在校验安装结果…';
+  if (snapshot?.job?.state === 'restart-required' || snapshot?.blockedReason === 'pending-restart') {
+    return '已安装，待手动重启';
+  }
+  if (snapshot?.job?.state === 'completed') return '更新已生效';
+  if (snapshot?.job?.state === 'failed') return '更新失败';
+  if (snapshot?.job?.state === 'interrupted') return '上次更新已中断，请检查安装状态后重试。';
+  if (error) return '更新请求失败';
+  if (snapshot?.canInstall) return '发现新版本';
+  if (snapshot?.checkedAt && snapshot.latestVersion === snapshot.runningVersion) return '已是最新版本';
+  if (snapshot?.blockedReason === 'no-update') return '当前版本无需更新';
+  if (snapshot?.checkedAt) return '已获取 npm 最新版本';
+  return '检查 npm 最新版本，不会自动安装。';
+}
+
+function retainDialogFocus(event) {
+  event?.currentTarget?.closest?.('.dim-updateDialog')?.focus?.({ preventScroll: true });
+}
+
+function UpdateDialog({ children, onClose }) {
+  const dialogRef = React.useRef(null);
+  const titleId = React.useId();
+  const descriptionId = React.useId();
+
+  React.useEffect(() => {
+    const previous = globalThis.document?.activeElement;
+    dialogRef.current?.focus?.();
+    return () => { if (previous?.isConnected) previous.focus?.(); };
+  }, []);
+
+  const content = h('div', {
+    className: 'dim-updateBackdrop',
+    onMouseDown: (event) => { if (event.target === event.currentTarget) onClose(); },
+  },
+  h('section', {
+    ref: dialogRef,
+    className: 'dim-updateDialog',
+    role: 'dialog',
+    'aria-modal': 'true',
+    'aria-labelledby': titleId,
+    'aria-describedby': descriptionId,
+    tabIndex: -1,
+    onKeyDown: (event) => {
+      if (event.key === 'Escape') {
+        event.preventDefault();
+        event.stopPropagation();
+        onClose();
+      }
+      if (event.key !== 'Tab') return;
+      const buttons = dialogRef.current?.querySelectorAll?.('button:not(:disabled)');
+      if (!buttons?.length) return;
+      const first = buttons[0];
+      const last = buttons[buttons.length - 1];
+      const active = globalThis.document?.activeElement;
+      if (event.shiftKey && (active === first || active === dialogRef.current)) {
+        event.preventDefault();
+        last.focus();
+      } else if (!event.shiftKey && (active === last || active === dialogRef.current)) {
+        event.preventDefault();
+        first.focus();
+      }
+    },
+  },
+  h('h3', { id: titleId }, 'DSH-IM 更新'),
+  h('p', { id: descriptionId, className: 'dim-updateDescription' },
+    '仅更新 DSH-IM。安装完成后需手动重启后台；本功能不会自动重启或主动刷新页面。'),
+  children));
+  return typeof document !== 'undefined' && document.body
+    ? createPortal(content, document.body)
+    : content;
+}
+
+export function UpdatePanel({ rpcCall, clientVersion, onStatus }) {
+  const [snapshot, setSnapshot] = React.useState(null);
+  const [action, setAction] = React.useState('status');
+  const [error, setError] = React.useState(null);
+  const [open, setOpen] = React.useState(false);
+  const [uncertainInstall, setUncertainInstall] = React.useState(false);
+  const mounted = React.useRef(false);
+  const busy = React.useRef(false);
+  const readController = React.useRef(null);
+  const pollReadController = React.useRef(null);
+  const installRequest = React.useRef(null);
+  const onStatusRef = React.useRef(onStatus);
+  onStatusRef.current = onStatus;
+
+  const accept = React.useCallback((next) => {
+    setSnapshot(next);
+    onStatusRef.current?.(next);
+  }, []);
+  const acceptAuthoritative = (next) => {
+    // Abort synchronously: effect cleanup alone can lose to an already queued reply.
+    pollReadController.current?.abort();
+    setUncertainInstall(false);
+    accept(next);
+  };
+  const invoke = React.useCallback(async (endpoint, payload = {}, signal) => {
+    if (typeof rpcCall !== 'function') {
+      const unavailable = new Error('当前 Host 不支持更新接口，请先手动更新插件并重启。');
+      unavailable.code = 'update-unavailable';
+      throw unavailable;
+    }
+    return unwrapSnapshot(await rpcCall(endpoint, payload, signal));
+  }, [rpcCall]);
+
+  React.useEffect(() => {
+    mounted.current = true;
+    busy.current = true;
+    const controller = new AbortController();
+    void invoke('update.status', {}, controller.signal).then((next) => {
+      if (!controller.signal.aborted) accept(next);
+    }).catch((cause) => {
+      if (!controller.signal.aborted) setError(presentError(cause));
+    }).finally(() => {
+      if (!controller.signal.aborted) {
+        busy.current = false;
+        setAction(null);
+      }
+    });
+    return () => {
+      mounted.current = false;
+      controller.abort();
+      readController.current?.abort();
+    };
+  }, [accept, invoke]);
+
+  const activeJob = ACTIVE_STATES.has(snapshot?.job?.state);
+  const restartRequired = snapshot?.job?.state === 'restart-required'
+    || snapshot?.blockedReason === 'pending-restart';
+  const shouldPoll = activeJob || uncertainInstall;
+
+  React.useEffect(() => {
+    if (!shouldPoll) return undefined;
+    let controller;
+    const scheduler = createPollScheduler({
+      setTimeoutFn: (callback, delay) => globalThis.setTimeout(callback, delay),
+      clearTimeoutFn: (timer) => globalThis.clearTimeout(timer),
+    });
+    const poll = async () => {
+      const pendingController = new AbortController();
+      controller = pendingController;
+      pollReadController.current = pendingController;
+      let keepPolling = true;
+      try {
+        const next = await invoke('update.status', {}, pendingController.signal);
+        if (!pendingController.signal.aborted) {
+          accept(next);
+          setError(null);
+          setUncertainInstall(false);
+          keepPolling = ACTIVE_STATES.has(next.job?.state);
+        }
+      } catch (cause) {
+        if (!pendingController.signal.aborted) setError(presentError(cause));
+      } finally {
+        if (pollReadController.current === pendingController) pollReadController.current = null;
+      }
+      if (keepPolling) scheduler.schedule(poll, 1_000);
+    };
+    scheduler.schedule(poll, 1_000);
+    return () => {
+      controller?.abort();
+      scheduler.dispose();
+    };
+  }, [accept, invoke, shouldPoll]);
+
+  const readSnapshot = async (endpoint) => {
+    const checkLatest = endpoint === 'update.check';
+    if (!mounted.current || busy.current || (checkLatest && (activeJob || restartRequired))) return;
+    busy.current = true;
+    setAction(checkLatest ? 'checking' : 'status');
+    setError(null);
+    if (checkLatest) {
+      installRequest.current = null;
+      setSnapshot((current) => current
+        ? { ...current, canInstall: false, checkId: null, latestVersion: null, checkedAt: null }
+        : current);
+    }
+    const controller = new AbortController();
+    readController.current = controller;
+    try {
+      const next = await invoke(endpoint, {}, controller.signal);
+      if (!controller.signal.aborted && mounted.current) {
+        if (checkLatest) accept(next);
+        else acceptAuthoritative(next);
+      }
+    } catch (cause) {
+      if (!controller.signal.aborted && mounted.current) setError(presentError(cause));
+    } finally {
+      if (!controller.signal.aborted && mounted.current) {
+        busy.current = false;
+        setAction(null);
+      }
+    }
+  };
+  const check = () => readSnapshot('update.check');
+  const refreshStatus = () => readSnapshot('update.status');
+
+  const install = async () => {
+    if (busy.current || !snapshot?.canInstall || !snapshot.checkId) return;
+    busy.current = true;
+    setAction('starting');
+    setError(null);
+    if (installRequest.current?.checkId !== snapshot.checkId) {
+      installRequest.current = {
+        checkId: snapshot.checkId,
+        requestId: globalThis.crypto?.randomUUID?.()
+          ?? `update-${Date.now()}-${Math.random().toString(36).slice(2)}`,
+      };
+    }
+    try {
+      // Closing this page only aborts reads, never an accepted Host installation.
+      const next = await invoke('update.install', installRequest.current);
+      if (mounted.current) acceptAuthoritative(next);
+    } catch (cause) {
+      if (mounted.current) {
+        setError(presentError(cause));
+        setUncertainInstall(true);
+      }
+    } finally {
+      if (mounted.current) {
+        busy.current = false;
+        setAction(null);
+      }
+    }
+  };
+
+  const busyAction = action !== null;
+  const blocked = BLOCKED_REASONS[snapshot?.blockedReason] ?? ERROR_MESSAGES[snapshot?.blockedReason];
+  const canConfirm = snapshot?.canInstall && snapshot.checkId && !activeJob && !restartRequired;
+  const versionsDiffer = snapshot && clientVersion && snapshot.runningVersion !== clientVersion;
+  const failedJob = ['failed', 'interrupted'].includes(snapshot?.job?.state);
+  const jobMessage = snapshot?.job?.message;
+  const targetVersion = snapshot?.job?.targetVersion;
+  const buttonLabel = action === 'checking' ? '检查中…'
+    : action === 'starting' || activeJob ? '正在更新…'
+      : restartRequired ? '待手动重启'
+        : snapshot?.canInstall ? '更新至'
+          : '检查更新';
+
+  return h(React.Fragment, null,
+    h('button', {
+      type: 'button',
+      className: 'dim-updateButton dim-updateTrigger',
+      disabled: busyAction,
+      'aria-haspopup': 'dialog',
+      onClick: () => {
+        setOpen(true);
+        if (restartRequired) void refreshStatus();
+        else if (!snapshot?.canInstall && !snapshot?.job) void check();
+      },
+    }, buttonLabel, buttonLabel === '更新至' ? ` v${snapshot.latestVersion}` : null),
+    open ? h(UpdateDialog, { onClose: () => setOpen(false) },
+      h('div', { className: 'dim-updateBody' },
+        h('dl', { className: 'dim-updateVersions' },
+          h('dt', null, '运行版本'), h('dd', null, `v${snapshot?.runningVersion ?? clientVersion}`),
+          snapshot?.installedVersion && snapshot.installedVersion !== snapshot.runningVersion
+            ? h(React.Fragment, null,
+                h('dt', null, '已安装版本'), h('dd', null, `v${snapshot.installedVersion}`)) : null,
+          h('dt', null, 'npm 最新版本'), h('dd', null, snapshot?.latestVersion ? `v${snapshot.latestVersion}` : '尚未检查'),
+          targetVersion ? h(React.Fragment, null,
+            h('dt', null, '目标版本'), h('dd', null, `v${targetVersion}`)) : null,
+          h('dt', null, '目标 profile'), h('dd', null, snapshot?.profileName ?? '无法确认'),
+          h('dt', null, '更新来源'), h('dd', null, 'registry.npmjs.org'),
+          versionsDiffer ? h(React.Fragment, null,
+            h('dt', null, '页面版本'), h('dd', null, `v${clientVersion}`)) : null),
+        h('div', {
+          className: `dim-updateStatus${error || failedJob ? ' dim-updateStatusError' : ''}`,
+          role: 'status',
+          'aria-live': 'polite',
+          'aria-atomic': 'true',
+        },
+          h('strong', null, summary(snapshot, action, error)),
+          activeJob || action === 'starting'
+            ? h('p', null, '关闭窗口不会取消安装。请勿同时在其他窗口管理此 profile 的插件。') : null,
+          restartRequired ? h('p', null, BLOCKED_REASONS['pending-restart']) : null,
+          failedJob && jobMessage ? h('p', null,
+            BLOCKED_REASONS[jobMessage] ?? ERROR_MESSAGES[jobMessage] ?? jobMessage) : null),
+        error ? h('p', { className: 'dim-updateError', role: 'alert' }, error) : null,
+        blocked && !restartRequired ? h('p', { className: 'dim-updateHint' }, blocked) : null,
+        versionsDiffer && !restartRequired ? h('p', { className: 'dim-updateHint' }, '页面版本与运行版本不同，请手动刷新页面；若仍不一致，请手动重启 Harness 或 Desktop。') : null,
+        canConfirm ? h('p', { className: 'dim-updateHint' },
+          '请在机器人空闲时安装；安装会修改当前 profile 的依赖，完成后需手动重启。') : null),
+      h('footer', { className: 'dim-updateFooter' },
+        h('button', { type: 'button', className: 'dim-updateButton', onClick: () => setOpen(false) }, '关闭'),
+        restartRequired || !activeJob ? h('button', {
+          type: 'button', className: 'dim-updateButton', disabled: busyAction,
+          onClick: (event) => {
+            retainDialogFocus(event);
+            void (restartRequired ? refreshStatus() : check());
+          },
+        }, restartRequired ? '刷新状态' : '重新检查') : null,
+        canConfirm ? h('button', {
+          type: 'button', className: 'dim-updateButton dim-updatePrimary', disabled: busyAction,
+          onClick: (event) => {
+            retainDialogFocus(event);
+            void install();
+          },
+        }, '安装更新') : null)) : null);
+}

package/plugin-src/host/channels/dingtalk/index.mjs

@@ -2,7 +2,7 @@ import { createProductionController } from './production.mjs';
 import { installDingtalkRpc } from './rpc.mjs';
 
 export const name = 'dsh-dingtalk-host';
-export const inject = ['connection', 'credentials', 'webServer', 'typertGateway'];
+export const inject = ['connection', 'credentials', 'apiProxy', 'typertGateway'];
 
 export async function apply(ctx, config = {}) {
   if (config?.controller) {

package/plugin-src/host/channels/dingtalk/production.mjs

@@ -17,17 +17,9 @@ import {
 import { listAgentPresetCatalog } from '../../../../src/channels/shared/agent-preset.mjs';
 import { createConnectionSupervisor } from './connection-supervisor.mjs';
 import { createHarnessCommandExecutor } from '../../harness-command-executor.mjs';
+import { harnessConnection } from '../../harness-connection.mjs';
 import { createHarnessSessionExecutors } from '../../harness-session-coordinator.mjs';
 
-function harnessOrigin(webServer, configured) {
-  if (configured !== undefined) return new URL(configured);
-  const port = webServer?.port;
-  if (!Number.isInteger(port) || port < 1 || port > 65_535) {
-    throw new Error('dsh-dingtalk requires an initialized DSH webServer port');
-  }
-  return new URL(`http://127.0.0.1:${port}`);
-}
-
 function pluginPaths(config) {
   const dshHome = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
   const root = resolve(config.dataDir ?? join(dshHome, 'integrations', 'dsh-dingtalk'));
@@ -41,7 +33,7 @@ function pluginPaths(config) {
 
 export async function createProductionController(ctx, config = {}, internals = {}) {
   if (!ctx?.credentials) throw new TypeError('dsh-dingtalk requires ctx.credentials');
-  if (!ctx?.webServer) throw new TypeError('dsh-dingtalk requires ctx.webServer');
+  const connection = harnessConnection(ctx, config);
 
   const ConfigStore = internals.ConfigStore ?? DingtalkConfigStore;
   const DeviceAuth = internals.DeviceAuth ?? DingtalkDeviceAuth;
@@ -92,7 +84,7 @@ export async function createProductionController(ctx, config = {}, internals = {
     fileIngressExecutor: internals.fileIngressExecutor,
   });
   const harness = new Harness({
-    baseUrl: harnessOrigin(ctx.webServer, config.harnessBaseUrl),
+    ...connection,
     workspace: defaultWorkspace,
     autostart: false,
     dshBin: config.dshBin ?? 'dsh',

package/plugin-src/host/channels/discord/index.mjs

@@ -2,7 +2,7 @@ import { createProductionController } from './production.mjs';
 import { installDiscordRpc } from './rpc.mjs';
 
 export const name = 'dsh-im-discord-host';
-export const inject = ['connection', 'credentials', 'webServer', 'typertGateway'];
+export const inject = ['connection', 'credentials', 'apiProxy', 'typertGateway'];
 
 export async function apply(ctx, config = {}) {
   if (config?.controller) {