dsh-collab-workbench 0.1.2 → 0.1.3

package/README.md

@@ -60,13 +60,15 @@ dsh-collab-workbench
 
 在工作台侧栏底部打开“关于”，点击“检查更新”。
 
-- npm registry 来源的安装可查询新版本；有更新时出现侧栏云朵和更新入口。
-- 更新需用户点击并确认，不会自动安装。
-- 安装成功后按提示重启 Harness，再确认当前版本。
-- 本地 tgz 或目录安装不提供 npm 在线更新，也不会擅自切换来源。
+- npm registry 来源的安装可查询新版本；有更新时出现侧栏云朵和“关于”页入口。
+- **插件不会自动安装更新**，也不会卸载自身。当前 Harness 拒绝用同名包覆盖运行中的插件，因此“关于”页只显示新版本号和升级步骤。
+- 升级步骤：在 Harness 的插件页面卸载本插件，再安装“关于”页给出的版本（例如 `dsh-collab-workbench@0.1.3`），然后重启 Harness 并刷新页面。
+- 卸载后若安装失败，工作台会暂时不可用；请先备份数据并确认网络与 registry 可用。
+- 升级只替换程序，`$DSH_HOME/dsh-workbench` 中的角色、群组和任务数据会保留。
+- 本地 tgz 或目录安装不提供 npm 在线检查，也不会擅自切换来源。
 - 网络或 registry 异常只影响检查；不会因此删除工作台数据。
 
-验证升级需先从 npm 安装较早版本，例如 `dsh-collab-workbench@0.1.1`，再在发布 0.1.2 后检查更新。同版本安装不会显示“发现新版”。
+验证升级需先从 npm 安装较早版本，例如 `dsh-collab-workbench@0.1.2`，再在发布更高版本后检查更新。同版本安装不会显示“发现新版”。
 
 ## 数据与权限边界
 
@@ -86,6 +88,12 @@ dsh-collab-workbench
 
 ## 版本记录
 
+### 0.1.3
+
+- 修正更新入口：当前 Harness 不支持覆盖运行中的插件，因此移除一键安装按钮与安装接口，改为显示新版本号和手动升级步骤。
+- 检查更新仍为只读；有新版时保留侧栏云朵提示。
+- 增加升级风险说明与数据保留说明；不更改任务调度逻辑。
+
 ### 0.1.2
 
 - 重写面向使用者的说明：补充安装、快速开始、角色模板、更新方式和数据权限边界。

package/client.js

@@ -153,20 +153,38 @@ function createApprovalUI(React, ctx, call) {
 // END WORKBENCH APPROVAL UI
 
 // BEGIN WORKBENCH UPDATE UI
-// Update controls for the existing Workbench panel; embedded into client.js at build time.
-// All styles live in the components that render them, so no other page owns their CSS.
+// Update check and manual-upgrade guidance for the existing Workbench panel;
+// embedded into client.js at build time. Styles are owned by these components.
 function createUpdateUI(React, ctx, call) {
   const h = React.createElement
   const NS = 'dwbUpdates'
   const zh = {
-    about:'关于', cloud:'有新版本', title:'协作工作台', current:'当前版本', latest:'最新版本', check:'检查更新', checking:'正在检查…', update:'更新', updating:'正在安装…', restart:'更新已安装，请重启 DSH 后使用', ready:'发现新版本', currentState:'已是最新版本', local:'当前从本地文件安装，请从原安装来源更新。', other:'当前安装来源不支持在线更新。', pending:'尚未检查更新', failed:'检查或安装失败', confirm:'确认安装协作工作台 {version}？安装后需要重启 DSH。', release:'版本信息', inaccessible:'此版本暂不提供更新检查。', error:'无法检查更新，请检查网络后重试。'
+    about:'关于', cloud:'有新版本', title:'协作工作台', current:'当前版本', latest:'最新版本',
+    check:'检查更新', checking:'正在检查…', update:'可升级',
+    ready:'发现新版本，可按下方步骤手动升级。', currentState:'已是最新版本',
+    local:'当前从本地文件安装，请从原安装来源更新。', other:'当前安装来源不支持在线检查更新。',
+    pending:'尚未检查更新', failed:'检查更新失败', error:'无法检查更新，请检查网络后重试。',
+    guideTitle:'升级步骤', note:'当前 Harness 不允许覆盖运行中的插件，因此不会自动安装。',
+    step1:'打开 Harness 的插件（管理）页面。', step2:'卸载「协作工作台」。',
+    step3:'安装下面这个版本，然后重启 Harness 并刷新页面。', spec:'安装版本',
+    warning:'卸载后若安装失败，工作台会暂时不可用；请先备份工作台数据和项目文件，并确认网络与 registry 可用。',
+    dataSafe:'升级只替换插件程序；$DSH_HOME/dsh-workbench 中的角色、群组和任务数据会保留。',
   }
   const en = {
-    about:'About', cloud:'Update available', title:'Collaboration Workbench', current:'Installed version', latest:'Latest version', check:'Check for updates', checking:'Checking…', update:'Update', updating:'Installing…', restart:'Update installed. Restart DSH to use it.', ready:'New version available', currentState:'Up to date', local:'Installed from a local file; update it from the original source.', other:'Updates are not available for this install source.', pending:'Not checked yet', failed:'Update check or install failed', confirm:'Install Collaboration Workbench {version}? Restart DSH afterwards.', release:'Release information', inaccessible:'Update checks are unavailable in this version.', error:'Could not check for updates. Check your network and try again.'
+    about:'About', cloud:'Update available', title:'Collaboration Workbench', current:'Installed version', latest:'Latest version',
+    check:'Check for updates', checking:'Checking…', update:'Upgrade',
+    ready:'A new version is available. Follow the steps below to upgrade manually.', currentState:'Up to date',
+    local:'Installed from a local file; update it from the original source.', other:'This install source cannot check for updates.',
+    pending:'Not checked yet', failed:'Update check failed', error:'Could not check for updates. Check your network and try again.',
+    guideTitle:'Upgrade steps', note:'This Harness does not allow replacing a running plugin, so nothing is installed automatically.',
+    step1:'Open the Harness plugins page.', step2:'Uninstall Collaboration Workbench.',
+    step3:'Install the version below, then restart Harness and refresh the page.', spec:'Install version',
+    warning:'If the install fails after uninstalling, the workbench stays unavailable until it succeeds. Back up workbench data and project files, and make sure the network and registry work first.',
+    dataSafe:'Upgrading only replaces the plugin program; roles, groups and tasks in $DSH_HOME/dsh-workbench are preserved.',
   }
   ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'collaboration workbench: update locales')
   const t = ctx.locale.bind(NS)
-  const css = `.dwb-update-cloud{width:52px;min-height:42px;padding:5px 0;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-brand-primary);cursor:pointer;display:flex;align-items:center;justify-content:center;flex-direction:column;gap:2px}.dwb-update-cloud:hover{background:var(--dsw-alias-bg-layer-2)}.dwb-update-cloud:focus-visible,.dwb-update-about button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.dwb-update-cloud span{font-size:10px}.dwb-update-about{flex:1;min-width:0;overflow:auto;background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);padding:56px 24px 24px}.dwb-update-card{max-width:640px;padding:20px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-1)}.dwb-update-about h2{font-size:18px;margin:0 0 18px}.dwb-update-about dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:10px 20px;margin:0 0 18px}.dwb-update-about dt{color:var(--dsw-alias-label-secondary)}.dwb-update-about dd{margin:0;overflow-wrap:anywhere}.dwb-update-state{font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);margin:0 0 16px}.dwb-update-error{color:var(--dsw-alias-state-error-primary)}.dwb-update-actions{display:flex;gap:10px;flex-wrap:wrap}.dwb-update-about button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);border-radius:8px;padding:7px 12px;min-height:34px;cursor:pointer}.dwb-update-about button:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}.dwb-update-about button:disabled{opacity:.5;cursor:default}.dwb-update-about button.dwb-update-primary{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}.dwb-update-about button.dwb-update-primary:hover:not(:disabled){filter:brightness(1.06)}`
+  const css = `.dwb-update-cloud{width:52px;min-height:42px;padding:5px 0;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-brand-primary);cursor:pointer;display:flex;align-items:center;justify-content:center;flex-direction:column;gap:2px}.dwb-update-cloud:hover{background:var(--dsw-alias-bg-layer-2)}.dwb-update-cloud:focus-visible,.dwb-update-about button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.dwb-update-cloud span{font-size:10px}.dwb-update-about{flex:1;min-width:0;overflow:auto;background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);padding:56px 24px 24px}.dwb-update-card{max-width:640px;padding:20px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-1)}.dwb-update-about h2{font-size:18px;margin:0 0 18px}.dwb-update-about h3{font-size:14px;margin:18px 0 8px}.dwb-update-about dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:10px 20px;margin:0 0 18px}.dwb-update-about dt{color:var(--dsw-alias-label-secondary)}.dwb-update-about dd{margin:0;overflow-wrap:anywhere}.dwb-update-state{font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);margin:0 0 16px}.dwb-update-error{color:var(--dsw-alias-state-error-primary)}.dwb-update-actions{display:flex;gap:10px;flex-wrap:wrap}.dwb-update-about button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);border-radius:8px;padding:7px 12px;min-height:34px;cursor:pointer}.dwb-update-about button:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}.dwb-update-about button:disabled{opacity:.5;cursor:default}.dwb-update-steps{margin:0;padding-left:20px;font-size:13px;line-height:1.9}.dwb-update-spec{display:inline-block;margin-top:8px;padding:6px 10px;border-radius:8px;background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l1);font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;user-select:all;overflow-wrap:anywhere}.dwb-update-note,.dwb-update-safe{font-size:12px;line-height:1.7;color:var(--dsw-alias-label-secondary);margin:10px 0 0}.dwb-update-safe{color:var(--dsw-alias-state-success-primary)}`
   function useUpdates() {
     const [status, setStatus] = React.useState({ phase:'idle', source:'unknown', current:null, latest:null, available:false })
     const [error, setError] = React.useState(null)
@@ -190,18 +208,10 @@ function createUpdateUI(React, ctx, call) {
         catch (failure) { if (active) setError(String(failure?.message ?? failure)) }
       }
       void check()
-      const timer = setInterval(check, status.phase === 'installing' ? 2_000 : 60_000)
+      const timer = setInterval(check, 60_000)
       return () => { active = false; clearInterval(timer) }
-    }, [status.phase])
-    const install = React.useCallback(async () => {
-      if (!status.available || busy || !window.confirm(t('confirm').replace('{version}', status.latest))) return
-      setBusy(true)
-      setError(null)
-      try { setStatus(await call('updates.install')) }
-      catch (failure) { setError(String(failure?.message ?? failure)) }
-      finally { setBusy(false) }
-    }, [status.available, status.latest, busy])
-    return {status, error, busy, refresh, install}
+    }, [])
+    return {status, error, busy, refresh}
   }
   function UpdateCloud({ onClick }) {
     return h(React.Fragment, null, h('style', null, css),
@@ -211,18 +221,28 @@ function createUpdateUI(React, ctx, call) {
           h('path',{d:'m12 15 0-6m-2.5 2.5L12 9l2.5 2.5'})),
         h('span',null,t('update'))))
   }
-  function UpdateAbout({ status, error, busy, refresh, install }) {
-    const state = status.phase === 'installed' ? t('restart') : status.phase === 'installing' ? t('updating') : error || status.phase === 'failed' ? t('failed') : status.source === 'local' ? t('local') : status.source !== 'registry' ? t('other') : status.available ? t('ready') : status.checkedAt ? status.latest ? t('currentState') : t('error') : t('pending')
-    const canUpdate = status.available && status.phase !== 'installing' && status.phase !== 'installed'
+  function UpdateAbout({ status, error, busy, refresh }) {
+    const failed = Boolean(error) || status.phase === 'failed'
+    const state = failed ? t('failed') : status.source === 'local' ? t('local') : status.source !== 'registry' ? t('other')
+      : status.available ? t('ready') : status.checkedAt ? status.latest ? t('currentState') : t('error') : t('pending')
+    const spec = status.latest ? `dsh-collab-workbench@${status.latest}` : null
     return h('section', {className:'dwb-update-about', 'aria-label':t('title')},
       h('style',null,css),
       h('div',{className:'dwb-update-card'},
         h('h2',null,t('title')),
         h('dl',null,h('dt',null,t('current')),h('dd',null,status.current ?? '—'),h('dt',null,t('latest')),h('dd',null,status.latest ?? '—')),
-        h('p',{className:`dwb-update-state ${error || status.phase === 'failed' ? 'dwb-update-error' : ''}`,role:error || status.phase === 'failed' ? 'alert':undefined}, state, error ? `: ${error}` : status.phase === 'failed' && status.error ? `: ${status.error}` : ''),
+        h('p',{className:`dwb-update-state ${failed ? 'dwb-update-error' : ''}`,role:failed ? 'alert':undefined},
+          state, failed ? `: ${error ?? status.error ?? t('error')}` : ''),
         h('div',{className:'dwb-update-actions'},
-          h('button',{type:'button',onClick:()=>refresh(true),disabled:busy || status.phase === 'installing'},busy?t('checking'):t('check')),
-          canUpdate ? h('button',{type:'button',className:'dwb-update-primary',onClick:install,disabled:busy},t('update')) : null)))
+          h('button',{type:'button',onClick:()=>refresh(true),disabled:busy},busy?t('checking'):t('check'))),
+        status.available ? h(React.Fragment, null,
+          h('h3',null,t('guideTitle')),
+          h('ol',{className:'dwb-update-steps'},
+            h('li',null,t('step1')), h('li',null,t('step2')),
+            h('li',null,t('step3'), spec ? h('div',null,h('code',{className:'dwb-update-spec'},spec)) : null)),
+          h('p',{className:'dwb-update-note'},t('note')),
+          h('p',{className:'dwb-update-note'},t('warning')),
+          h('p',{className:'dwb-update-safe'},t('dataSafe'))) : null))
   }
   return {useUpdates, UpdateCloud, UpdateAbout, t}
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-collab-workbench",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "DeepSeek Harness 多 Agent 协作工作台：自定义角色、项目群聊、任务自动调度、群内权限审批与执行恢复", 
   "keywords": [
     "dsh-plugin",

package/src/client/update-ui.js

@@ -1,17 +1,35 @@
-// Update controls for the existing Workbench panel; embedded into client.js at build time.
-// All styles live in the components that render them, so no other page owns their CSS.
+// Update check and manual-upgrade guidance for the existing Workbench panel;
+// embedded into client.js at build time. Styles are owned by these components.
 export function createUpdateUI(React, ctx, call) {
   const h = React.createElement
   const NS = 'dwbUpdates'
   const zh = {
-    about:'关于', cloud:'有新版本', title:'协作工作台', current:'当前版本', latest:'最新版本', check:'检查更新', checking:'正在检查…', update:'更新', updating:'正在安装…', restart:'更新已安装，请重启 DSH 后使用', ready:'发现新版本', currentState:'已是最新版本', local:'当前从本地文件安装，请从原安装来源更新。', other:'当前安装来源不支持在线更新。', pending:'尚未检查更新', failed:'检查或安装失败', confirm:'确认安装协作工作台 {version}？安装后需要重启 DSH。', release:'版本信息', inaccessible:'此版本暂不提供更新检查。', error:'无法检查更新，请检查网络后重试。'
+    about:'关于', cloud:'有新版本', title:'协作工作台', current:'当前版本', latest:'最新版本',
+    check:'检查更新', checking:'正在检查…', update:'可升级',
+    ready:'发现新版本，可按下方步骤手动升级。', currentState:'已是最新版本',
+    local:'当前从本地文件安装，请从原安装来源更新。', other:'当前安装来源不支持在线检查更新。',
+    pending:'尚未检查更新', failed:'检查更新失败', error:'无法检查更新，请检查网络后重试。',
+    guideTitle:'升级步骤', note:'当前 Harness 不允许覆盖运行中的插件，因此不会自动安装。',
+    step1:'打开 Harness 的插件（管理）页面。', step2:'卸载「协作工作台」。',
+    step3:'安装下面这个版本，然后重启 Harness 并刷新页面。', spec:'安装版本',
+    warning:'卸载后若安装失败，工作台会暂时不可用；请先备份工作台数据和项目文件，并确认网络与 registry 可用。',
+    dataSafe:'升级只替换插件程序；$DSH_HOME/dsh-workbench 中的角色、群组和任务数据会保留。',
   }
   const en = {
-    about:'About', cloud:'Update available', title:'Collaboration Workbench', current:'Installed version', latest:'Latest version', check:'Check for updates', checking:'Checking…', update:'Update', updating:'Installing…', restart:'Update installed. Restart DSH to use it.', ready:'New version available', currentState:'Up to date', local:'Installed from a local file; update it from the original source.', other:'Updates are not available for this install source.', pending:'Not checked yet', failed:'Update check or install failed', confirm:'Install Collaboration Workbench {version}? Restart DSH afterwards.', release:'Release information', inaccessible:'Update checks are unavailable in this version.', error:'Could not check for updates. Check your network and try again.'
+    about:'About', cloud:'Update available', title:'Collaboration Workbench', current:'Installed version', latest:'Latest version',
+    check:'Check for updates', checking:'Checking…', update:'Upgrade',
+    ready:'A new version is available. Follow the steps below to upgrade manually.', currentState:'Up to date',
+    local:'Installed from a local file; update it from the original source.', other:'This install source cannot check for updates.',
+    pending:'Not checked yet', failed:'Update check failed', error:'Could not check for updates. Check your network and try again.',
+    guideTitle:'Upgrade steps', note:'This Harness does not allow replacing a running plugin, so nothing is installed automatically.',
+    step1:'Open the Harness plugins page.', step2:'Uninstall Collaboration Workbench.',
+    step3:'Install the version below, then restart Harness and refresh the page.', spec:'Install version',
+    warning:'If the install fails after uninstalling, the workbench stays unavailable until it succeeds. Back up workbench data and project files, and make sure the network and registry work first.',
+    dataSafe:'Upgrading only replaces the plugin program; roles, groups and tasks in $DSH_HOME/dsh-workbench are preserved.',
   }
   ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'collaboration workbench: update locales')
   const t = ctx.locale.bind(NS)
-  const css = `.dwb-update-cloud{width:52px;min-height:42px;padding:5px 0;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-brand-primary);cursor:pointer;display:flex;align-items:center;justify-content:center;flex-direction:column;gap:2px}.dwb-update-cloud:hover{background:var(--dsw-alias-bg-layer-2)}.dwb-update-cloud:focus-visible,.dwb-update-about button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.dwb-update-cloud span{font-size:10px}.dwb-update-about{flex:1;min-width:0;overflow:auto;background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);padding:56px 24px 24px}.dwb-update-card{max-width:640px;padding:20px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-1)}.dwb-update-about h2{font-size:18px;margin:0 0 18px}.dwb-update-about dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:10px 20px;margin:0 0 18px}.dwb-update-about dt{color:var(--dsw-alias-label-secondary)}.dwb-update-about dd{margin:0;overflow-wrap:anywhere}.dwb-update-state{font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);margin:0 0 16px}.dwb-update-error{color:var(--dsw-alias-state-error-primary)}.dwb-update-actions{display:flex;gap:10px;flex-wrap:wrap}.dwb-update-about button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);border-radius:8px;padding:7px 12px;min-height:34px;cursor:pointer}.dwb-update-about button:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}.dwb-update-about button:disabled{opacity:.5;cursor:default}.dwb-update-about button.dwb-update-primary{background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-brand-primary);border-color:var(--dsw-alias-brand-primary)}.dwb-update-about button.dwb-update-primary:hover:not(:disabled){filter:brightness(1.06)}`
+  const css = `.dwb-update-cloud{width:52px;min-height:42px;padding:5px 0;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-brand-primary);cursor:pointer;display:flex;align-items:center;justify-content:center;flex-direction:column;gap:2px}.dwb-update-cloud:hover{background:var(--dsw-alias-bg-layer-2)}.dwb-update-cloud:focus-visible,.dwb-update-about button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.dwb-update-cloud span{font-size:10px}.dwb-update-about{flex:1;min-width:0;overflow:auto;background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-primary);padding:56px 24px 24px}.dwb-update-card{max-width:640px;padding:20px;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-1)}.dwb-update-about h2{font-size:18px;margin:0 0 18px}.dwb-update-about h3{font-size:14px;margin:18px 0 8px}.dwb-update-about dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:10px 20px;margin:0 0 18px}.dwb-update-about dt{color:var(--dsw-alias-label-secondary)}.dwb-update-about dd{margin:0;overflow-wrap:anywhere}.dwb-update-state{font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);margin:0 0 16px}.dwb-update-error{color:var(--dsw-alias-state-error-primary)}.dwb-update-actions{display:flex;gap:10px;flex-wrap:wrap}.dwb-update-about button{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);border-radius:8px;padding:7px 12px;min-height:34px;cursor:pointer}.dwb-update-about button:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2)}.dwb-update-about button:disabled{opacity:.5;cursor:default}.dwb-update-steps{margin:0;padding-left:20px;font-size:13px;line-height:1.9}.dwb-update-spec{display:inline-block;margin-top:8px;padding:6px 10px;border-radius:8px;background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l1);font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;user-select:all;overflow-wrap:anywhere}.dwb-update-note,.dwb-update-safe{font-size:12px;line-height:1.7;color:var(--dsw-alias-label-secondary);margin:10px 0 0}.dwb-update-safe{color:var(--dsw-alias-state-success-primary)}`
   function useUpdates() {
     const [status, setStatus] = React.useState({ phase:'idle', source:'unknown', current:null, latest:null, available:false })
     const [error, setError] = React.useState(null)
@@ -35,18 +53,10 @@ export function createUpdateUI(React, ctx, call) {
         catch (failure) { if (active) setError(String(failure?.message ?? failure)) }
       }
       void check()
-      const timer = setInterval(check, status.phase === 'installing' ? 2_000 : 60_000)
+      const timer = setInterval(check, 60_000)
       return () => { active = false; clearInterval(timer) }
-    }, [status.phase])
-    const install = React.useCallback(async () => {
-      if (!status.available || busy || !window.confirm(t('confirm').replace('{version}', status.latest))) return
-      setBusy(true)
-      setError(null)
-      try { setStatus(await call('updates.install')) }
-      catch (failure) { setError(String(failure?.message ?? failure)) }
-      finally { setBusy(false) }
-    }, [status.available, status.latest, busy])
-    return {status, error, busy, refresh, install}
+    }, [])
+    return {status, error, busy, refresh}
   }
   function UpdateCloud({ onClick }) {
     return h(React.Fragment, null, h('style', null, css),
@@ -56,18 +66,28 @@ export function createUpdateUI(React, ctx, call) {
           h('path',{d:'m12 15 0-6m-2.5 2.5L12 9l2.5 2.5'})),
         h('span',null,t('update'))))
   }
-  function UpdateAbout({ status, error, busy, refresh, install }) {
-    const state = status.phase === 'installed' ? t('restart') : status.phase === 'installing' ? t('updating') : error || status.phase === 'failed' ? t('failed') : status.source === 'local' ? t('local') : status.source !== 'registry' ? t('other') : status.available ? t('ready') : status.checkedAt ? status.latest ? t('currentState') : t('error') : t('pending')
-    const canUpdate = status.available && status.phase !== 'installing' && status.phase !== 'installed'
+  function UpdateAbout({ status, error, busy, refresh }) {
+    const failed = Boolean(error) || status.phase === 'failed'
+    const state = failed ? t('failed') : status.source === 'local' ? t('local') : status.source !== 'registry' ? t('other')
+      : status.available ? t('ready') : status.checkedAt ? status.latest ? t('currentState') : t('error') : t('pending')
+    const spec = status.latest ? `dsh-collab-workbench@${status.latest}` : null
     return h('section', {className:'dwb-update-about', 'aria-label':t('title')},
       h('style',null,css),
       h('div',{className:'dwb-update-card'},
         h('h2',null,t('title')),
         h('dl',null,h('dt',null,t('current')),h('dd',null,status.current ?? '—'),h('dt',null,t('latest')),h('dd',null,status.latest ?? '—')),
-        h('p',{className:`dwb-update-state ${error || status.phase === 'failed' ? 'dwb-update-error' : ''}`,role:error || status.phase === 'failed' ? 'alert':undefined}, state, error ? `: ${error}` : status.phase === 'failed' && status.error ? `: ${status.error}` : ''),
+        h('p',{className:`dwb-update-state ${failed ? 'dwb-update-error' : ''}`,role:failed ? 'alert':undefined},
+          state, failed ? `: ${error ?? status.error ?? t('error')}` : ''),
         h('div',{className:'dwb-update-actions'},
-          h('button',{type:'button',onClick:()=>refresh(true),disabled:busy || status.phase === 'installing'},busy?t('checking'):t('check')),
-          canUpdate ? h('button',{type:'button',className:'dwb-update-primary',onClick:install,disabled:busy},t('update')) : null)))
+          h('button',{type:'button',onClick:()=>refresh(true),disabled:busy},busy?t('checking'):t('check'))),
+        status.available ? h(React.Fragment, null,
+          h('h3',null,t('guideTitle')),
+          h('ol',{className:'dwb-update-steps'},
+            h('li',null,t('step1')), h('li',null,t('step2')),
+            h('li',null,t('step3'), spec ? h('div',null,h('code',{className:'dwb-update-spec'},spec)) : null)),
+          h('p',{className:'dwb-update-note'},t('note')),
+          h('p',{className:'dwb-update-note'},t('warning')),
+          h('p',{className:'dwb-update-safe'},t('dataSafe'))) : null))
   }
   return {useUpdates, UpdateCloud, UpdateAbout, t}
 }

package/src/host/api.js

@@ -192,9 +192,8 @@ export function install(rt) {
     'execution.stop': async (payload) => ({runs:await rt.stopTaskExecution(payload.taskId)}),
     'decisions.resolve': async (payload) => ({decision:await rt.resolveDecision(payload.groupId,payload.answer,payload.seq)}),
 
-    // ---- 协作工作台版本更新（仅浏览器用户界面调用；不注册 Agent 工具） ----
+    // ---- 协作工作台版本检查（只读；不注册 Agent 工具，也没有安装接口） ----
     'updates.check': async (payload) => rt.updateCheck({ fresh: payload.fresh === true }),
-    'updates.install': async () => rt.updateStart(),
 
     // ---- 群消息 ----
     'messages.post': async (payload) => ({

package/src/host/update.js

@@ -1,4 +1,5 @@
-// Update checks are read-only until a user invokes updateStart from the UI.
+// Read-only update checks: newest published version versus this installed one.
+// Installation is never performed here (this Harness refuses in-place replacement).
 // Keep npm identity separate from the historical workbench data and RPC paths.
 import { readFileSync } from 'node:fs'
 
@@ -47,17 +48,16 @@ async function registries(manager) {
   return publicRegistry ? [...new Set([own, ...fallback])] : [own]
 }
 
-/** Install into the existing runtime in index.js; no tool or automatic installer is registered. */
+/** Read-only update check installed by index.js; no installer and no agent tool are registered. */
 export function install(rt, { fetchImpl = globalThis.fetch, now = Date.now } = {}) {
   const manager = () => rt.ctx.get?.('pluginManager')
   const status = {
     name: PKG.name, current: PKG.version, latest: null, source: 'unknown',
-    checkedAt: 0, phase: 'idle', installed: null, error: null,
+    checkedAt: 0, phase: 'idle', error: null,
   }
   let target = null
   let checking = null
-  const view = () => ({ ...status, available: target !== null && newer(status.latest, status.current)
-    && status.phase !== 'installing' && status.phase !== 'installed' })
+  const view = () => ({ ...status, available: target !== null && newer(status.latest, status.current) })
 
   async function runCheck() {
     const service = manager()
@@ -92,7 +92,6 @@ export function install(rt, { fetchImpl = globalThis.fetch, now = Date.now } = {
   }
 
   function check({ fresh = false } = {}) {
-    if (status.phase === 'installing' || status.phase === 'installed') return Promise.resolve(view())
     if (checking) return checking
     if (!fresh && status.checkedAt && now() - status.checkedAt < CHECK_TTL_MS) return Promise.resolve(view())
     status.phase = 'checking'
@@ -106,30 +105,9 @@ export function install(rt, { fetchImpl = globalThis.fetch, now = Date.now } = {
     return checking
   }
 
-  function start() {
-    if (checking || status.phase === 'installing') throw new Error('Update operation is already in progress')
-    if (!target || status.source !== 'registry' || now() - status.checkedAt >= CHECK_TTL_MS) throw new Error('No checked npm update is available')
-    const service = manager()
-    if (typeof service?.installBundle !== 'function') throw new Error('The plugin manager is unavailable')
-    const chosen = target
-    status.phase = 'installing'
-    status.error = null
-    // The plugin can unload while installing itself; never let that reject a detached promise.
-    void Promise.resolve().then(() => service.installBundle(chosen.spec, { registry: chosen.registry }))
-      .then(result => {
-        if (result?.error || !['applied', 'restart-required'].includes(result?.application)
-          || (result.bundle && result.bundle !== PKG.name)
-          || (result.version && result.version !== chosen.version)) {
-          throw new Error(result?.error?.diagnostic ?? result?.error?.code ?? `Install ${result?.application ?? 'failed'}`)
-        }
-        status.phase = 'installed'
-        status.installed = chosen.version
-      })
-      .catch(error => {
-        status.phase = 'failed'
-        status.error = String(error?.message ?? error).slice(0, 300)
-      })
-    return view()
-  }
-  Object.assign(rt, { updateView: view, updateCheck: check, updateStart: start })
+  // Checking is read-only. Installing is deliberately not exposed: this Harness
+  // refuses to replace a running plugin in place, and removing the bundle first
+  // would unload this code before the reinstall could run. The About page shows
+  // the manual upgrade steps instead.
+  Object.assign(rt, { updateView: view, updateCheck: check })
 }