dsh-cliproxyapi-pro 1.4.1 → 1.5.1

package/lib/client.js

@@ -7,7 +7,7 @@ window.__ModuleLoader__.load({
 
     const React = require("react");
     const h = React.createElement;
-    const { useState, useEffect, useCallback, useMemo } = React;
+    const { useState, useEffect, useCallback, useMemo, useRef } = React;
 
     const PACKAGE_NAME = "dsh-cliproxyapi-pro";
     const MODULE_ID = "dsh-cliproxyapi-pro";
@@ -20,6 +20,10 @@ window.__ModuleLoader__.load({
       save: "api/dsh-cliproxyapi/save",
       addAccount: "api/dsh-cliproxyapi/accounts/add",
       removeAccount: "api/dsh-cliproxyapi/accounts/remove",
+      updateStatus: "api/dsh-cliproxyapi/updates/status",
+      updateCheck: "api/dsh-cliproxyapi/updates/check",
+      updateSave: "api/dsh-cliproxyapi/updates/save",
+      updateDownload: "api/dsh-cliproxyapi/updates/download",
     };
 
     const zh = {
@@ -118,6 +122,80 @@ window.__ModuleLoader__.load({
       resetParamsBtn: "恢复自动探测",
       paramsHint: "留空并保存即恢复 CLIProxyAPI 自动探测值。修改后请点击「保存模型勾选」才会写入模型选择器。",
       discoveredValue: "探测值",
+      updateTitle: "插件更新",
+      updateToggleDetails: "展开或收起插件更新设置",
+      updateCompactCurrent: "当前 {version}",
+      updateCompactAvailable: "有新版本 {version}",
+      updateCompactDownloaded: "{version} 已下载",
+      updateCompactError: "更新异常",
+      updateCompactStatusUnavailable: "更新服务未就绪",
+      updateCompactErrorNetwork: "网络异常",
+      updateCompactErrorChannel: "通道未发布",
+      updateStatusUnavailableHint: "无法读取更新服务，可能是插件宿主代码尚未重载：重启 DSH（仅刷新页面不够），或检查更新接口是否可用。",
+      updateServiceUnavailableError: "更新服务未就绪：当前运行的插件宿主代码仍是旧版，可能尚未重启 DSH。重启 DSH 后重试。",
+      updateSubtitle: "仅更新 CLIProxyAPI 插件自身，不更新 CPA 服务或 DSH 宿主。设置修改后立即保存。",
+      updateNewVersion: "新版本",
+      updateVersionSummary: "当前版本 {current} · 最新版本 {latest}",
+      updateUnknownVersion: "未知",
+      updateNotChecked: "尚未检查",
+      updateLoading: "正在读取更新状态…",
+      updateUpToDate: "已是所选通道最新版本",
+      updateAvailable: "有可用更新",
+      updateCheckBtn: "检查更新",
+      updateChecking: "正在检查…",
+      updateRetryBtn: "重新读取状态",
+      updateDownloadBtn: "下载更新",
+      updateDownloading: "正在下载并校验…",
+      updateDownloadedBtn: "重新下载",
+      updateChannelLabel: "更新通道",
+      updateChannelHint: "稳定版适合日常使用；Beta 和开发版可能不稳定。切换后请重新检查更新。",
+      updateChannelStable: "稳定",
+      updateChannelBeta: "Beta",
+      updateChannelDev: "开发",
+      updateRegionLabel: "下载区域",
+      updateRegionHint: "自动选择可用下载区域；也可手动指定全球或中国大陆源。",
+      updateRegionAuto: "自动",
+      updateRegionGlobal: "全球",
+      updateRegionCn: "中国大陆",
+      updateEffectiveRegion: "当前使用：{region}",
+      updateAutoCheckLabel: "自动检查更新",
+      updateAutoCheckHint: "启动时及每 6 小时检查所选通道；关闭后仍可手动检查。",
+      updateAutoDownloadLabel: "自动下载更新",
+      updateAutoDownloadHint: "自动检查发现新版本后下载并校验离线包；需开启自动检查，不会自动安装或重启 DSH。",
+      updateLastChecked: "上次检查：{time}",
+      updateSaving: "正在保存更新设置…",
+      updateSaved: "更新设置已保存",
+      updateLoadFailed: "无法读取插件更新状态，请重试。",
+      updateCheckFailed: "检查更新失败，请稍后重试或切换下载区域。",
+      updateSaveFailed: "更新设置保存失败，请重试。",
+      updateDownloadFailed: "下载更新失败，请稍后重试或切换下载区域。",
+      updateNetworkError: "无法连接更新源，请检查网络或切换下载区域后重试。",
+      updateMetadataError: "更新源返回了无效的版本信息，请稍后重试。",
+      updateChannelUnavailable: "所选通道尚未发布可用版本，请选择其他通道。",
+      updateIntegrityError: "下载包完整性校验失败，未应用任何更改。请重新下载。",
+      updateInvalidPackage: "下载包不是有效的本插件更新包，未应用任何更改。",
+      updateStorageError: "无法保存更新设置或离线包，请检查磁盘空间和目录写入权限。",
+      updateBusyError: "已有更新任务正在进行，请等待完成后重试。",
+      updateStaleVersion: "可用版本已变化，请重新检查更新后再下载。",
+      updateDisposedError: "插件正在重新加载，请稍后重新读取更新状态。",
+      updateHttpError: "更新服务请求失败（HTTP {status}），请重试。",
+      updateLinkedHint: "当前为本地链接安装，更新不会覆盖源码目录。可检查并下载离线包；若要保留源码开发方式，请自行更新代码。",
+      updateUnsupportedHint: "当前 DSH 宿主不支持此更新操作，请升级 DSH 后重试。",
+      updateNotInstalledHint: "未找到已安装的插件，无法准备更新。请先通过 DSH 插件管理器安装本插件。",
+      updateBlockedHint: "当前安装方式无法准备更新，请使用 DSH 插件管理器检查安装状态。",
+      updateConfirmTitle: "确认下载版本 {version}？",
+      updateConfirmHint: "只下载并校验离线包，不会自动安装或重启。下载后需关闭 DSH，执行提示的升级命令，再重新启动。",
+      updateLinkedConfirmHint: "只下载并校验离线包，不会覆盖源码、安装或重启。若要保留本地链接方式，请手动更新源码后重新启动 DSH；通过离线包重新安装会切换插件安装来源。",
+      updateConfirmBtn: "确认下载",
+      updateCancelBtn: "取消",
+      updateDownloadRequested: "下载任务已提交，完成后将在此显示离线包与升级命令。",
+      updateDownloadedHint: "版本 {version} 已下载并校验。请先保存工作并关闭 DSH，再执行下方命令升级，最后重新启动 DSH 生效。",
+      updateLinkedDownloadedHint: "版本 {version} 的离线包已下载并校验。当前为本地链接安装；如需保留源码方式，请手动更新源码，之后重新启动 DSH 生效。不要将离线包覆盖到正在使用的源码目录。",
+      updateLinkedSourceHint: "未提供自动升级命令以保护本地链接来源。通过离线包重新安装会切换插件安装来源。",
+      updateDownloadPathLabel: "已校验的离线包",
+      updateUpgradeCommandLabel: "关闭 DSH 后执行升级命令",
+      updateCommandUnavailable: "未生成升级命令。请先确认 DSH 支持的离线包升级方式；升级前关闭 DSH，完成后重新启动。",
+      updateOfflineHint: "自动下载不等于自动安装。插件不会关闭、重启 DSH，也不会覆盖正在使用的插件文件。",
     };
 
     const en = {
@@ -216,6 +294,80 @@ window.__ModuleLoader__.load({
       resetParamsBtn: "Reset to Discovered",
       paramsHint: "Clear a value and save to restore the value discovered from CLIProxyAPI. Click Apply Selected Models to write changes to the picker.",
       discoveredValue: "Discovered",
+      updateTitle: "Plugin Updates",
+      updateToggleDetails: "Expand or collapse plugin update settings",
+      updateCompactCurrent: "Current {version}",
+      updateCompactAvailable: "Update {version}",
+      updateCompactDownloaded: "{version} downloaded",
+      updateCompactError: "Update error",
+      updateCompactStatusUnavailable: "Update service unavailable",
+      updateCompactErrorNetwork: "Network error",
+      updateCompactErrorChannel: "Channel unpublished",
+      updateStatusUnavailableHint: "Could not reach the update service; the running host plugin code may still be the previous version. Restart DSH (refreshing the page is not enough), or check that the update endpoint is registered.",
+      updateServiceUnavailableError: "The update service is not ready: the running host plugin code is still the previous version, so DSH may not have been restarted. Restart DSH and retry.",
+      updateSubtitle: "Updates this CLIProxyAPI plugin only, not the CPA server or DSH. Changes to update settings are saved immediately.",
+      updateNewVersion: "New Version",
+      updateVersionSummary: "Current {current} · Latest {latest}",
+      updateUnknownVersion: "Unknown",
+      updateNotChecked: "Not checked yet",
+      updateLoading: "Loading update status…",
+      updateUpToDate: "Up to date on this channel",
+      updateAvailable: "Update available",
+      updateCheckBtn: "Check for Updates",
+      updateChecking: "Checking…",
+      updateRetryBtn: "Reload Status",
+      updateDownloadBtn: "Download Update",
+      updateDownloading: "Downloading & verifying…",
+      updateDownloadedBtn: "Download Again",
+      updateChannelLabel: "Update Channel",
+      updateChannelHint: "Stable is recommended for daily use. Beta and development builds may be unstable. Check again after switching channels.",
+      updateChannelStable: "Stable",
+      updateChannelBeta: "Beta",
+      updateChannelDev: "Dev",
+      updateRegionLabel: "Download Region",
+      updateRegionHint: "Automatically select an available region, or choose the global or Mainland China source manually.",
+      updateRegionAuto: "Auto",
+      updateRegionGlobal: "Global",
+      updateRegionCn: "Mainland China",
+      updateEffectiveRegion: "Using: {region}",
+      updateAutoCheckLabel: "Automatically Check for Updates",
+      updateAutoCheckHint: "Check the selected channel at startup and every 6 hours. Manual checks remain available when disabled.",
+      updateAutoDownloadLabel: "Automatically Download Updates",
+      updateAutoDownloadHint: "Download and verify packages found by automatic checks (requires Auto Check). Never installs or restarts DSH automatically.",
+      updateLastChecked: "Last checked: {time}",
+      updateSaving: "Saving update settings…",
+      updateSaved: "Update settings saved",
+      updateLoadFailed: "Could not load plugin update status. Please retry.",
+      updateCheckFailed: "Could not check for updates. Retry later or change the download region.",
+      updateSaveFailed: "Could not save update settings. Please retry.",
+      updateDownloadFailed: "Could not download the update. Retry later or change the download region.",
+      updateNetworkError: "Could not reach the update source. Check your network or change the download region and retry.",
+      updateMetadataError: "The update source returned invalid version information. Please retry later.",
+      updateChannelUnavailable: "No release has been published on this channel. Please choose another channel.",
+      updateIntegrityError: "Package integrity verification failed. No changes were applied. Please download again.",
+      updateInvalidPackage: "The downloaded file is not a valid update package for this plugin. No changes were applied.",
+      updateStorageError: "Could not save update settings or the offline package. Check free disk space and write permissions.",
+      updateBusyError: "Another update operation is in progress. Wait for it to finish and retry.",
+      updateStaleVersion: "The available version changed. Check for updates again before downloading.",
+      updateDisposedError: "The plugin is reloading. Please reload update status shortly.",
+      updateHttpError: "The update service request failed (HTTP {status}). Please retry.",
+      updateLinkedHint: "This is a linked local installation. Updates never overwrite its source directory. You can check and download an offline package; update the source yourself to keep the development setup.",
+      updateUnsupportedHint: "This DSH version does not support this update operation. Upgrade DSH and retry.",
+      updateNotInstalledHint: "No installed plugin was found, so an update cannot be prepared. Install this plugin through the DSH plugin manager first.",
+      updateBlockedHint: "An update cannot be prepared for this installation. Check it in the DSH plugin manager.",
+      updateConfirmTitle: "Download version {version}?",
+      updateConfirmHint: "Only downloads and verifies the offline package. Nothing is installed or restarted automatically. Then close DSH, run the provided upgrade command, and start DSH again.",
+      updateLinkedConfirmHint: "Only downloads and verifies the offline package. It never overwrites source code, installs, or restarts DSH. To keep the linked setup, update the source manually and restart DSH. Reinstalling from the offline package changes the installation source.",
+      updateConfirmBtn: "Confirm Download",
+      updateCancelBtn: "Cancel",
+      updateDownloadRequested: "Download requested. The verified package and upgrade command will appear here when ready.",
+      updateDownloadedHint: "Version {version} has been downloaded and verified. Save your work and close DSH, then run the command below to upgrade. Start DSH again for it to take effect.",
+      updateLinkedDownloadedHint: "The offline package for version {version} has been downloaded and verified. This is a linked installation. To keep the source-based setup, update the source manually, then restart DSH. Do not extract the package over source files that are in use.",
+      updateLinkedSourceHint: "No upgrade command is provided, to protect the linked installation source. Reinstalling from the offline package changes that source.",
+      updateDownloadPathLabel: "Verified Offline Package",
+      updateUpgradeCommandLabel: "Upgrade Command — Run After Closing DSH",
+      updateCommandUnavailable: "No upgrade command was generated. First verify the offline-package upgrade method supported by your DSH version. Close DSH before upgrading, then start it again.",
+      updateOfflineHint: "Automatic downloading is not automatic installation. This plugin never closes or restarts DSH, or overwrites plugin files that are in use.",
     };
 
     const CSS = `
@@ -443,7 +595,7 @@ window.__ModuleLoader__.load({
 .dcpa-seg-btn[data-active="true"] {
   background: var(--dsw-alias-bg-base);
   color: var(--dsw-alias-label-primary);
-  box-shadow: 0 1px 2px rgba(0,0,0,0.08);
+  box-shadow: 0 1px 2px var(--dsw-alias-border-l1);
 }
 .dcpa-toolbar {
   display: flex;
@@ -650,6 +802,136 @@ window.__ModuleLoader__.load({
 .dcpa-btn-danger:hover:not(:disabled) {
   border-color: var(--dsw-alias-state-error-primary);
 }
+.dcpa-update-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  padding: 11px 0;
+  border-top: 0.5px solid var(--dsw-alias-border-l1);
+}
+.dcpa-update-row .dcpa-field {
+  flex: 1;
+  min-width: 0;
+}
+.dcpa-update-row .dcpa-seg, .dcpa-update-row .dcpa-actions {
+  flex: none;
+}
+.dcpa-update-version {
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--dsw-alias-label-primary);
+  overflow-wrap: anywhere;
+}
+.dcpa-update-card {
+  display: block;
+  padding: 0;
+}
+.dcpa-update-summary {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  min-height: 42px;
+  padding: 10px 14px;
+  border-radius: 12px;
+  cursor: pointer;
+  list-style: none;
+}
+.dcpa-update-summary::-webkit-details-marker { display: none; }
+.dcpa-update-summary:hover { background: var(--dsw-alias-bg-layer-2); }
+.dcpa-update-summary:focus-visible {
+  outline: 2px solid var(--dsw-alias-brand-primary);
+  outline-offset: 2px;
+}
+.dcpa-update-summary-title {
+  flex: none;
+  font-weight: 600;
+}
+.dcpa-update-summary-current, .dcpa-update-summary-status {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  color: var(--dsw-alias-label-secondary);
+  font-size: 12px;
+}
+.dcpa-update-summary-current { flex: 0 1 auto; }
+.dcpa-update-summary-status { flex: 1; text-align: right; }
+.dcpa-update-summary-status[data-state="available"],
+.dcpa-update-summary-status[data-state="downloaded"] { color: var(--dsw-alias-brand-primary); }
+.dcpa-update-summary-status[data-state="error"] { color: var(--dsw-alias-state-error-primary); }
+.dcpa-update-summary::after {
+  content: "";
+  flex: none;
+  width: 7px;
+  height: 7px;
+  margin-right: 3px;
+  border-right: 1.5px solid var(--dsw-alias-label-secondary);
+  border-bottom: 1.5px solid var(--dsw-alias-label-secondary);
+  transform: rotate(-45deg);
+}
+.dcpa-update-card[open] > .dcpa-update-summary::after { transform: rotate(45deg); }
+.dcpa-update-content {
+  padding: 0 14px 12px;
+  border-top: 0.5px solid var(--dsw-alias-border-l1);
+}
+.dcpa-update-content > .dcpa-subtitle { padding: 10px 0; }
+.dcpa-update-card .dcpa-seg {
+  flex-wrap: wrap;
+}
+.dcpa-update-card .dcpa-seg-btn:disabled, .dcpa-update-card .dcpa-switch:disabled {
+  opacity: 0.5;
+  cursor: default;
+}
+.dcpa-update-card button:focus-visible {
+  outline: 2px solid var(--dsw-alias-brand-primary);
+  outline-offset: 2px;
+}
+.dcpa-update-notice {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  margin: 8px 0;
+  padding: 10px 12px;
+  border: 0.5px solid var(--dsw-alias-border-l2);
+  border-radius: 8px;
+  background: var(--dsw-alias-bg-layer-2);
+}
+.dcpa-update-notice p {
+  margin: 0;
+}
+.dcpa-update-code {
+  display: block;
+  margin: 0;
+  padding: 8px 10px;
+  border: 0.5px solid var(--dsw-alias-border-l1);
+  border-radius: 6px;
+  background: var(--dsw-alias-bg-base);
+  color: var(--dsw-alias-label-primary);
+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  font-size: 11px;
+  line-height: 17px;
+  white-space: pre-wrap;
+  overflow-wrap: anywhere;
+  user-select: text;
+}
+.dcpa-update-footer {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  border-top: 0.5px solid var(--dsw-alias-border-l1);
+  padding-top: 10px;
+}
+@media (max-width: 620px) {
+  .dcpa-update-row:not(.dcpa-switch-row) {
+    align-items: flex-start;
+    flex-direction: column;
+    gap: 8px;
+  }
+  .dcpa-update-row .dcpa-actions {
+    flex-wrap: wrap;
+  }
+}
 `;
 
     const REASONING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
@@ -705,6 +987,369 @@ window.__ModuleLoader__.load({
         : "dcpa-dot dcpa-dot-idle";
     }
 
+    const SERVICE_UNAVAILABLE_STATUS = new Set([404, 405, 501]);
+    const UPDATE_ERROR_KEYS = {
+      "network-error": "updateNetworkError",
+      "invalid-metadata": "updateMetadataError",
+      "invalid-response": "updateMetadataError",
+      "service-unavailable": "updateServiceUnavailableError",
+      "channel-unavailable": "updateChannelUnavailable",
+      "unavailable-channel": "updateChannelUnavailable",
+      "integrity-error": "updateIntegrityError",
+      "invalid-package": "updateInvalidPackage",
+      "storage-error": "updateStorageError",
+      busy: "updateBusyError",
+      "stale-version": "updateStaleVersion",
+      disposed: "updateDisposedError",
+      "linked-install": "updateLinkedHint",
+      "unsupported-host": "updateUnsupportedHint",
+      "not-installed": "updateNotInstalledHint",
+    };
+
+    function updateErrorText(t, failure, fallback) {
+      const code = failure?.updateCode;
+      if (typeof code === "string" && Object.prototype.hasOwnProperty.call(UPDATE_ERROR_KEYS, code)) {
+        return t(UPDATE_ERROR_KEYS[code]);
+      }
+      if (failure?.httpStatus) {
+        return t("updateHttpError").replace("{status}", String(failure.httpStatus));
+      }
+      // Server messages may be English or contain internal paths. Do not expose them.
+      return t(fallback);
+    }
+
+    async function requestPluginUpdate(url, payload, signal) {
+      let res;
+      try {
+        res = await fetch(url, {
+          signal,
+          cache: "no-store",
+          ...(payload === undefined
+            ? {}
+            : {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(payload),
+              }),
+        });
+      } catch (err) {
+        if (err?.name === "AbortError") throw err;
+        const failure = new Error("Update network request failed");
+        failure.updateCode = "network-error";
+        throw failure;
+      }
+      let body;
+      try {
+        body = await res.json();
+      } catch {
+        const failure = new Error("Invalid update response");
+        // A missing route (host plugin not reloaded) answers 404/405 with no
+        // update payload; that is "service unavailable", not bad metadata.
+        failure.updateCode = !res.ok && SERVICE_UNAVAILABLE_STATUS.has(res.status) ? "service-unavailable" : "invalid-response";
+        if (!res.ok) failure.httpStatus = res.status;
+        throw failure;
+      }
+      const validState = body?.update && typeof body.update === "object" && !Array.isArray(body.update);
+      if (!res.ok || body?.ok === false || !validState ||
+          payload !== undefined && (body.update.error || body.update.errorCode)) {
+        const failure = new Error("Update request failed");
+        failure.updateCode = body?.errorCode || body?.update?.errorCode ||
+          (!validState ? (!res.ok && SERVICE_UNAVAILABLE_STATUS.has(res.status) ? "service-unavailable" : "invalid-response") : null);
+        failure.httpStatus = !res.ok ? res.status : null;
+        failure.updateState = validState ? body.update : null;
+        throw failure;
+      }
+      return body.update;
+    }
+
+    /** Update state is isolated: polling never reloads account data or drafts. */
+    function PluginUpdatePanel({ t }) {
+      const [update, setUpdate] = useState(null);
+      const [loading, setLoading] = useState(true);
+      const [busy, setBusy] = useState(null);
+      const [error, setError] = useState(null);
+      const [notice, setNotice] = useState(null);
+      const [confirmVersion, setConfirmVersion] = useState(null);
+      const lifecycle = useRef(null);
+
+      const loadStatus = useCallback(async () => {
+        const life = lifecycle.current;
+        if (!life?.mounted || life.action || life.polling) return;
+        life.polling = true;
+        const serial = ++life.serial;
+        const controller = new AbortController();
+        life.controllers.add(controller);
+        life.statusController = controller;
+        try {
+          // This GET is read-only. Only an explicit check action probes the registry.
+          const next = await requestPluginUpdate(API.updateStatus, undefined, controller.signal);
+          if (!life.mounted || serial !== life.serial) return;
+          life.snapshot = next;
+          setUpdate(next);
+          setError((previous) => (previous?.source === "status" ? null : previous));
+        } catch (failure) {
+          if (!life.mounted || serial !== life.serial || failure?.name === "AbortError") return;
+          setError((previous) =>
+            previous && previous.source !== "status"
+              ? previous
+              : { failure, fallback: "updateLoadFailed", source: "status" }
+          );
+        } finally {
+          life.controllers.delete(controller);
+          if (life.statusController === controller) life.statusController = null;
+          life.polling = false;
+          if (life.mounted) setLoading(false);
+        }
+      }, []);
+
+      useEffect(() => {
+        // A fresh lifetime also prevents old StrictMode/HMR requests from winning.
+        const life = {
+          mounted: true,
+          action: false,
+          polling: false,
+          serial: 0,
+          controllers: new Set(),
+          statusController: null,
+          snapshot: null,
+        };
+        lifecycle.current = life;
+        let timer;
+        const poll = async () => {
+          await loadStatus();
+          if (life.mounted) {
+            timer = setTimeout(poll, life.snapshot?.checking || life.snapshot?.downloading ? 2000 : 15000);
+          }
+        };
+        void poll();
+        return () => {
+          life.mounted = false;
+          life.serial += 1;
+          clearTimeout(timer);
+          for (const controller of life.controllers) controller.abort();
+          life.controllers.clear();
+        };
+      }, [loadStatus]);
+
+      const runAction = useCallback(async (kind, payload = {}) => {
+        const life = lifecycle.current;
+        if (!life?.mounted || life.action || life.snapshot?.checking || life.snapshot?.downloading) return;
+        life.action = true;
+        life.serial += 1;
+        life.statusController?.abort();
+        setBusy(kind);
+        setError(null);
+        setNotice(null);
+        setConfirmVersion(null);
+        const controller = new AbortController();
+        life.controllers.add(controller);
+        const url = kind === "save" ? API.updateSave : kind === "download" ? API.updateDownload : API.updateCheck;
+        try {
+          const next = await requestPluginUpdate(url, payload, controller.signal);
+          if (!life.mounted) return;
+          life.snapshot = next;
+          setUpdate(next);
+          if (kind === "save") setNotice("updateSaved");
+          if (kind === "download" && !next.downloadedVersion) setNotice("updateDownloadRequested");
+        } catch (failure) {
+          if (!life.mounted || failure?.name === "AbortError") return;
+          if (failure?.updateState && typeof failure.updateState === "object") {
+            life.snapshot = failure.updateState;
+            setUpdate(failure.updateState);
+          }
+          setError({
+            failure,
+            fallback: kind === "save" ? "updateSaveFailed" : kind === "download" ? "updateDownloadFailed" : "updateCheckFailed",
+            source: kind,
+          });
+        } finally {
+          life.controllers.delete(controller);
+          life.action = false;
+          if (life.mounted) setBusy(null);
+        }
+      }, []);
+
+      const working = loading || busy !== null || update?.checking === true || update?.downloading === true;
+      const blockedReason = update?.blockedReason;
+      const downloadBlocked = !!blockedReason && blockedReason !== "linked-install";
+      const blockedKey = blockedReason === "linked-install"
+        ? "updateLinkedHint"
+        : blockedReason === "unsupported-host"
+        ? "updateUnsupportedHint"
+        : blockedReason === "not-installed"
+        ? "updateNotInstalledHint"
+        : "updateBlockedHint";
+      const canDownload = !!update?.available && typeof update.latestVersion === "string" && !!update.latestVersion && !downloadBlocked;
+      const downloading = busy === "download" || update?.downloading === true;
+      const checking = busy === "check" || update?.checking === true;
+      const availableVersion = update?.latestVersion || t("updateNotChecked");
+      const versionSummary = t("updateVersionSummary")
+        .replace("{current}", update?.currentVersion || t("updateUnknownVersion"))
+        .replace("{latest}", availableVersion);
+      const statusError = update?.error || update?.errorCode
+        ? { updateCode: update.errorCode }
+        : null;
+      const compactState = loading ? "loading" : downloading ? "downloading" : checking ? "checking" :
+        error || statusError ? "error" : update?.downloadedVersion && update.downloadedVersion === update.latestVersion ? "downloaded" :
+          update?.available ? "available" : "idle";
+      // Name the actual failure instead of a generic "update error": the
+      // status endpoint missing (host not reloaded) reads very differently
+      // from a registry that could not be reached.
+      const failureCode = statusError?.updateCode ?? update?.errorCode ?? null;
+      const compactErrorKey = error
+        ? error.source === "status" ? "updateCompactStatusUnavailable" : "updateCompactError"
+        : failureCode === "network-error" ? "updateCompactErrorNetwork"
+        : failureCode === "service-unavailable" ? "updateCompactStatusUnavailable"
+        : failureCode === "channel-unavailable" ? "updateCompactErrorChannel"
+        : "updateCompactError";
+      const compactText = loading ? t("updateLoading") : downloading ? t("updateDownloading") : checking ? t("updateChecking") :
+        error || statusError ? t(compactErrorKey) : compactState === "downloaded"
+          ? t("updateCompactDownloaded").replace("{version}", update.downloadedVersion)
+          : update?.available ? t("updateCompactAvailable").replace("{version}", availableVersion)
+          : update?.latestVersion ? t("updateUpToDate") : t("updateNotChecked");
+      let checkedAt = t("updateNotChecked");
+      if (update?.lastCheckedAt) {
+        const date = new Date(update.lastCheckedAt);
+        if (Number.isFinite(date.getTime())) checkedAt = date.toLocaleString();
+      }
+      const regionName = (region) => t(region === "cn" ? "updateRegionCn" : "updateRegionGlobal");
+      const segmented = (field, label, options, selected) =>
+        h(
+          "div",
+          { className: "dcpa-seg", role: "group", "aria-label": t(label) },
+          options.map(([value, key]) =>
+            h("button", {
+              key: value,
+              type: "button",
+              className: "dcpa-seg-btn",
+              disabled: working || !update,
+              "aria-pressed": selected === value,
+              "data-active": selected === value ? "true" : "false",
+              onClick: () => { if (selected !== value) void runAction("save", { [field]: value }); },
+            }, t(key))
+          )
+        );
+      const toggle = (field, label, hint, checked) =>
+        h(
+          "div",
+          { className: "dcpa-update-row dcpa-switch-row" },
+          h("div", { className: "dcpa-field" },
+            h("span", { className: "dcpa-label" }, t(label)),
+            h("p", { className: "dcpa-hint" }, t(hint))
+          ),
+          h("button", {
+            type: "button",
+            role: "switch",
+            className: "dcpa-switch",
+            "aria-label": t(label),
+            "aria-checked": checked,
+            disabled: working || !update,
+            onClick: () => { void runAction("save", { [field]: !checked }); },
+          }, h("span", { className: "dcpa-switch-thumb" }))
+        );
+
+      // Native details starts closed. Do not control `open`: polling and saves
+      // must preserve the user's expanded/collapsed choice without remounting.
+      return h(
+        "details",
+        { className: "dcpa-card dcpa-update-card", "aria-label": t("updateTitle"), "aria-busy": working },
+        h("summary", { className: "dcpa-update-summary", title: t("updateToggleDetails") },
+          h("span", { className: "dcpa-update-summary-title" }, t("updateTitle")),
+          h("span", { className: "dcpa-update-summary-current" },
+            t("updateCompactCurrent").replace("{version}", update?.currentVersion || t("updateUnknownVersion"))),
+          h("span", { className: "dcpa-update-summary-status", "data-state": compactState, role: "status", "aria-live": "polite" }, compactText)
+        ),
+        h("div", { className: "dcpa-update-content" },
+        h("p", { className: "dcpa-subtitle" }, t("updateSubtitle")),
+        h("div", { className: "dcpa-update-row" },
+          h("div", { className: "dcpa-field" },
+            h("span", { className: "dcpa-label" }, t("updateNewVersion")),
+            h("span", { className: "dcpa-update-version", role: "status", "aria-live": "polite" },
+              loading ? t("updateLoading") : downloading ? t("updateDownloading") : checking ? t("updateChecking") :
+                update?.available ? availableVersion : update?.latestVersion ? t("updateUpToDate") : t("updateNotChecked")
+            ),
+            h("p", { className: "dcpa-hint" }, versionSummary),
+            update?.available ? h("span", { className: "dcpa-hint" }, t("updateAvailable")) : null
+          ),
+          h("div", { className: "dcpa-actions" },
+            h("button", {
+              type: "button",
+              className: "dcpa-btn",
+              disabled: working,
+              onClick: () => { if (update) void runAction("check"); else { setLoading(true); void loadStatus(); } },
+            }, checking ? t("updateChecking") : !update && !loading ? t("updateRetryBtn") : t("updateCheckBtn")),
+            h("button", {
+              type: "button",
+              className: "dcpa-btn dcpa-btn-primary",
+              disabled: working || !canDownload,
+              onClick: () => setConfirmVersion(update.latestVersion),
+            }, downloading ? t("updateDownloading") : update?.downloadedVersion === update?.latestVersion && update?.downloadedVersion
+              ? t("updateDownloadedBtn") : t("updateDownloadBtn"))
+          )
+        ),
+        confirmVersion ? h("div", {
+          className: "dcpa-update-notice",
+          role: "alertdialog",
+          "aria-modal": false,
+          "aria-label": t("updateConfirmTitle").replace("{version}", confirmVersion),
+        },
+          h("p", { className: "dcpa-label" }, t("updateConfirmTitle").replace("{version}", confirmVersion)),
+          h("p", { className: "dcpa-hint" }, t(blockedReason === "linked-install" ? "updateLinkedConfirmHint" : "updateConfirmHint")),
+          h("div", { className: "dcpa-actions" },
+            h("button", {
+              type: "button",
+              className: "dcpa-btn dcpa-btn-primary",
+              disabled: working || !canDownload || confirmVersion !== update?.latestVersion,
+              onClick: () => { void runAction("download", { version: confirmVersion }); },
+            }, t("updateConfirmBtn")),
+            h("button", { type: "button", className: "dcpa-btn", onClick: () => setConfirmVersion(null) }, t("updateCancelBtn"))
+          ),
+          confirmVersion !== update?.latestVersion ? h("p", { className: "dcpa-hint" }, t("updateStaleVersion")) : null
+        ) : null,
+        h("div", { className: "dcpa-update-row" },
+          h("div", { className: "dcpa-field" },
+            h("span", { className: "dcpa-label" }, t("updateChannelLabel")),
+            h("p", { className: "dcpa-hint" }, t("updateChannelHint"))
+          ),
+          segmented("channel", "updateChannelLabel", [
+            ["stable", "updateChannelStable"], ["beta", "updateChannelBeta"], ["dev", "updateChannelDev"],
+          ], update?.channel || "stable")
+        ),
+        h("div", { className: "dcpa-update-row" },
+          h("div", { className: "dcpa-field" },
+            h("span", { className: "dcpa-label" }, t("updateRegionLabel")),
+            h("p", { className: "dcpa-hint" }, t("updateRegionHint")),
+            update?.effectiveRegion ? h("p", { className: "dcpa-hint" }, t("updateEffectiveRegion").replace("{region}", regionName(update.effectiveRegion))) : null
+          ),
+          segmented("region", "updateRegionLabel", [
+            ["auto", "updateRegionAuto"], ["global", "updateRegionGlobal"], ["cn", "updateRegionCn"],
+          ], update?.region || "auto")
+        ),
+        toggle("autoCheck", "updateAutoCheckLabel", "updateAutoCheckHint", update?.autoCheck !== false),
+        toggle("autoDownload", "updateAutoDownloadLabel", "updateAutoDownloadHint", update?.autoDownload === true),
+        blockedReason ? h("div", { className: "dcpa-update-notice" }, h("p", { className: "dcpa-hint" }, t(blockedKey))) : null,
+        update?.downloadedVersion && update?.downloadPath ? h("div", { className: "dcpa-update-notice", role: "status" },
+          h("p", { className: "dcpa-label" }, t(blockedReason === "linked-install" ? "updateLinkedDownloadedHint" : "updateDownloadedHint").replace("{version}", update.downloadedVersion)),
+          h("span", { className: "dcpa-label" }, t("updateDownloadPathLabel")),
+          h("code", { className: "dcpa-update-code" }, update.downloadPath),
+          blockedReason !== "linked-install" && update.upgradeCommand ? h(React.Fragment, null,
+            h("span", { className: "dcpa-label" }, t("updateUpgradeCommandLabel")),
+            h("pre", { className: "dcpa-update-code" }, h("code", null, update.upgradeCommand))
+          ) : h("p", { className: "dcpa-hint" }, t(blockedReason === "linked-install" ? "updateLinkedSourceHint" : "updateCommandUnavailable"))
+        ) : null,
+        h("div", { className: "dcpa-update-footer" },
+          error ? h("p", { className: "dcpa-error", role: "alert" }, updateErrorText(t, error.failure, error.fallback)) :
+            statusError ? h("p", { className: "dcpa-error", role: "alert" }, updateErrorText(t, statusError, "updateCheckFailed")) : null,
+          error?.source === "status" ? h("p", { className: "dcpa-hint", role: "note" }, t("updateStatusUnavailableHint")) : null,
+          busy === "save" ? h("p", { className: "dcpa-hint", role: "status" }, t("updateSaving")) :
+            notice ? h("p", { className: "dcpa-success", role: "status" }, t(notice)) : null,
+          h("p", { className: "dcpa-hint" }, t("updateLastChecked").replace("{time}", checkedAt)),
+          h("p", { className: "dcpa-hint" }, t("updateOfflineHint"))
+        )
+        )
+      );
+    }
+
     /**
      * Account list + switcher. Each account is edited in its own
      * {@link AccountPanel}, remounted when the selection changes.
@@ -859,6 +1504,7 @@ window.__ModuleLoader__.load({
           error ? h("p", { className: "dcpa-error", role: "alert" }, error) : null,
           toast ? h("p", { className: "dcpa-success", role: "status" }, toast) : null
         ),
+        h(PluginUpdatePanel, { t }),
         active
           ? h(AccountPanel, {
               key: active.id,