dsh-crwu-workbench 0.0.11 → 0.0.13

package/lib/client.js

@@ -64,6 +64,34 @@ window.__ModuleLoader__.load({
 			versionDev: "crwu-audit-version-dev",
 			versionInstalled: "crwu-audit-version-installed",
 			versionUnknown: "crwu-audit-version-unknown",
+			/**
+			* 版本徽标成为**自助更新入口**后的附加类（侧栏入口与面板头部共用同一枚徽标）。
+			*
+			* 它只是"这枚徽标可点"，形状仍是 `.crwu-audit-version`；语气由下面三个修饰类表达。
+			*/
+			updateBadge: "crwu-audit-update-badge",
+			/** 有可安装的新版本。 */
+			updateBadgeAccent: "crwu-audit-update-badge-accent",
+			/** 正在安装 / 已经更新到新版本（正向进行态）。 */
+			updateBadgeOk: "crwu-audit-update-badge-ok",
+			/** 已经装好、等待重启。 */
+			updateBadgeWarn: "crwu-audit-update-badge-warn",
+			/** 自助更新面板（`UpdateDialog.tsx`）：固定浮层 + 遮罩，盖在面板之上。 */
+			updateDialogBackdrop: "crwu-audit-update-dialog-backdrop",
+			updateDialog: "crwu-audit-update-dialog",
+			updateDialogHead: "crwu-audit-update-dialog-head",
+			updateDialogTitle: "crwu-audit-update-dialog-title",
+			updateDialogBody: "crwu-audit-update-dialog-body",
+			updateDialogNotice: "crwu-audit-update-dialog-notice",
+			updateDialogNoticeHint: "crwu-audit-update-dialog-notice-hint",
+			updateDialogStages: "crwu-audit-update-dialog-stages",
+			updateDialogStage: "crwu-audit-update-dialog-stage",
+			updateDialogStageOn: "crwu-audit-update-dialog-stage-on",
+			updateDialogReason: "crwu-audit-update-dialog-reason",
+			updateDialogError: "crwu-audit-update-dialog-error",
+			updateDialogActions: "crwu-audit-update-dialog-actions",
+			updateDialogDiag: "crwu-audit-update-dialog-diag",
+			updateDialogDiagRow: "crwu-audit-update-dialog-diag-row",
 			/** 头部右侧那句问候（`下午好，某某某`）；姓名拿不到时整句不渲染。 */
 			greeting: "crwu-audit-greeting",
 			description: "crwu-audit-description",
@@ -2105,6 +2133,83 @@ body[data-ds-dark-theme] .crwu-audit-root {
 .crwu-audit-mono { font-family: var(--crwu-font-mono); font-size: 12.5px; }
 .crwu-audit-placeholder-tag { background: var(--crwu-surface-subtle); border-color: var(--crwu-border); color: var(--crwu-text-secondary); }
 .crwu-audit-loading, .crwu-audit-loading-inline { color: var(--crwu-text-secondary); }
+
+/* ────────────────────────────────────────────────────────────────────────────
+   21. 自助更新：可点的版本徽标 + 更新面板（Task 6）
+
+   徽标沿用 §… 的 .crwu-audit-version（10px 等宽小标签），这里只加"可点"的语气与三种状态色；
+   语气一律写成**双类**（.crwu-audit-version.crwu-audit-update-badge-*），理由见 §3.5：
+   单类会被 §20 的覆盖层吃掉。
+
+   更新面板是 position: fixed 浮层：遮罩 940 / 面板 941（高过抽屉的 900/901，
+   低于授权那类真正的阻塞层）。整块都长在 .crwu-audit-root 里，所以 --crwu-* 照常继承。
+   ──────────────────────────────────────────────────────────────────────────── */
+.crwu-audit-update-badge { cursor: pointer; font-family: inherit; }
+.crwu-audit-update-badge:hover { background: var(--crwu-hover); border-color: var(--crwu-border-strong); }
+.crwu-audit-update-badge:focus-visible { outline: 2px solid var(--crwu-brand); outline-offset: 2px; }
+.crwu-audit-version.crwu-audit-update-badge-accent {
+  color: var(--crwu-brand);
+  border-color: color-mix(in srgb, var(--crwu-brand) 45%, transparent);
+  background: color-mix(in srgb, var(--crwu-brand) 10%, transparent);
+}
+.crwu-audit-version.crwu-audit-update-badge-ok {
+  color: var(--dsw-alias-state-success-primary);
+  border-color: color-mix(in srgb, var(--dsw-alias-state-success-primary) 45%, transparent);
+  background: color-mix(in srgb, var(--dsw-alias-state-success-primary) 10%, transparent);
+}
+.crwu-audit-version.crwu-audit-update-badge-warn {
+  color: var(--dsw-alias-state-warn-primary);
+  border-color: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 45%, transparent);
+  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 12%, transparent);
+}
+
+.crwu-audit-update-dialog-backdrop {
+  position: fixed; inset: 0; z-index: 940;
+  background: var(--crwu-scrim);
+  animation: crwu-audit-scrim-in 140ms var(--crwu-ease) both;
+}
+.crwu-audit-update-dialog {
+  position: fixed; z-index: 941; top: 50%; left: 50%; transform: translate(-50%, -50%);
+  box-sizing: border-box; width: 460px; max-width: calc(100vw - 32px); max-height: calc(100vh - 64px);
+  display: flex; flex-direction: column;
+  padding: var(--crwu-space-5); border-radius: var(--crwu-radius-lg);
+  border: 1px solid var(--crwu-border-strong); background: var(--crwu-surface);
+  box-shadow: var(--crwu-shadow-dialog);
+  animation: crwu-audit-float-in 160ms var(--crwu-ease) both;
+}
+.crwu-audit-update-dialog-head { display: flex; align-items: center; gap: var(--crwu-space-3); }
+.crwu-audit-update-dialog-title {
+  flex: 1 1 auto; font-size: 16px; font-weight: 600; letter-spacing: -0.01em; color: var(--crwu-text-primary);
+}
+.crwu-audit-update-dialog-body { margin-top: var(--crwu-space-3); overflow: auto; min-height: 0; }
+.crwu-audit-update-dialog-notice {
+  margin-bottom: var(--crwu-space-3); padding: var(--crwu-space-3);
+  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary) 35%, transparent);
+  border-left-width: 3px; border-radius: var(--crwu-radius-md);
+  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 8%, transparent);
+  color: var(--crwu-text-primary); font-size: 13px; line-height: 20px;
+}
+.crwu-audit-update-dialog-notice-hint { margin-top: var(--crwu-space-2); color: var(--crwu-text-secondary); }
+.crwu-audit-update-dialog-stages { display: flex; align-items: center; gap: var(--crwu-space-2); margin-top: var(--crwu-space-3); }
+.crwu-audit-update-dialog-stage {
+  display: inline-flex; align-items: center; padding: 3px 10px; border-radius: 999px;
+  border: 1px solid var(--crwu-border); background: var(--crwu-surface-subtle);
+  color: var(--crwu-text-secondary); font-size: 12px; line-height: 18px;
+}
+.crwu-audit-update-dialog-stage-on {
+  border-color: color-mix(in srgb, var(--crwu-brand) 40%, transparent);
+  background: color-mix(in srgb, var(--crwu-brand) 10%, transparent);
+  color: var(--crwu-text-primary); font-weight: 600;
+}
+.crwu-audit-update-dialog-reason { margin-top: var(--crwu-space-3); color: var(--crwu-text-secondary); font-size: 12.5px; line-height: 19px; }
+.crwu-audit-update-dialog-error { margin-top: var(--crwu-space-3); color: var(--dsw-alias-state-error-primary); font-size: 12.5px; line-height: 19px; }
+.crwu-audit-update-dialog-actions { display: flex; justify-content: flex-end; gap: var(--crwu-space-2); margin-top: var(--crwu-space-4); }
+.crwu-audit-update-dialog-diag { margin-top: var(--crwu-space-4); border-top: 1px solid var(--crwu-border); padding-top: var(--crwu-space-3); }
+.crwu-audit-update-dialog-diag-row { display: flex; gap: var(--crwu-space-3); padding: 2px 0; align-items: baseline; }
+
+@media (prefers-reduced-motion: reduce) {
+  .crwu-audit-update-dialog-backdrop, .crwu-audit-update-dialog { animation: none; }
+}
 `;
 		//#endregion
 		//#region src/client/components/primitives.tsx
@@ -2227,9 +2332,9 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			versionHint: "当前运行的宿主插件版本",
 			versionUnknown: "版本未知",
 			loadingHost: "正在读取 Host…",
-			hostStaleTitle: "宿主插件是旧构建，请重启 web profile",
-			hostStaleHint: "客户端产物刷新页面就会换新，宿主产物只有重启 profile 才会换。现在跑着的宿主代码比你看到的界面旧，审核会按旧逻辑挂到「当前会话」下（而不是建在工作空间里的审核根会话），所以先不要发起审核。",
-			hostStaleGate: "宿主插件是旧构建：请先重启 web profile",
+			hostStaleTitle: "宿主插件是旧构建：请完全退出并重新打开 DeepSeek Harness",
+			hostStaleHint: "客户端产物刷新页面就会换新，宿主产物只有完全退出并重新打开 DeepSeek Harness 才会换。现在跑着的宿主代码比你看到的界面旧，审核会按旧逻辑挂到「当前会话」下（而不是建在工作空间里的审核根会话），所以先不要发起审核。退出时要**完全退出**（macOS 上关闭窗口不等于退出：从应用菜单选择「退出」，或按 Command-Q），再重新打开。",
+			hostStaleGate: "宿主插件是旧构建：请先完全退出并重新打开 DeepSeek Harness",
 			loadingEnv: "正在自检环境",
 			loadingHint: "正在检查工具、登录态、上传配置与外部数据，通过后会自动继续",
 			loadingList: "正在加载…",
@@ -2969,6 +3074,59 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			cloudSearchEmpty: "OSS 上没有这个流水号的交付件",
 			cloudSearchInvalid: "流水号形状不对：示例 2026-301705-LX10170-BG8746（只允许字母、数字与 - _ .，不能含 /）",
 			cloudFailed: "云端审核结果清单没拉到（不影响氚云列表）：",
+			updateBadgeSeparator: " · ",
+			updateBadgeUpdate: "有更新",
+			updateBadgeChecking: "检查中…",
+			updateBadgeInstalling: "正在更新…",
+			updateBadgeAwaitingRestart: "待重启",
+			updateBadgeUpdated: "已更新",
+			updateReasonDevelopment: "当前是本地开发安装，不参与自助更新。",
+			updateReasonEnterprise: "当前由企业源管理，更新请联系管理员。",
+			updateReasonManagerUnavailable: "当前桌面版没有可用的插件管理服务，更新请联系管理员。",
+			updateReasonAuditActive: "有审核任务正在进行，完成后即可安装更新。",
+			updateReasonInstallActive: "正在安装更新，请稍候。",
+			updateReasonAwaitingRestart: "新版本已安装，请完全退出并重新打开 DeepSeek Harness。",
+			updateReasonCandidateExpired: "候选版本已过期，请重新检查更新。",
+			updateReasonNoCandidate: "当前没有可安装的更新。",
+			updateCheckFailedManual: "检查更新失败，请稍后重试。",
+			updateInstallFailed: "更新失败，当前版本仍可继续使用。",
+			updateCancelFailed: "取消更新失败，更新可能仍在进行，请稍后重试。",
+			updateBadgeTitle: "查看 CRWU 更新（当前 {version}）",
+			updateBadgeTitleUpdate: "有新版本可以安装（当前 {version}）",
+			updateBadgeTitleUpdated: "CRWU 已经是新版本（{version}）",
+			updateBadgeTitleRestart: "新版本已安装：需要完全退出并重新打开 DeepSeek Harness",
+			updateBadgeTitleDev: "本地开发安装（dev）：不参与自助更新",
+			updateDialogTitle: "CRWU 更新",
+			updateFieldCurrent: "当前版本",
+			updateFieldTarget: "目标版本",
+			updateFieldPublished: "发布时间",
+			updateFieldSource: "公开来源",
+			updateFieldStage: "安装阶段",
+			updateSourceNpmmirror: "国内镜像（npmmirror）",
+			updateSourceNpm: "官方源（npm）",
+			updateStageConnecting: "正在连接更新源",
+			updateStageDownloading: "正在下载安装包",
+			updateStageInstalling: "正在写入插件目录",
+			updateStageCancelling: "正在取消…",
+			updateActionCheck: "检查更新",
+			updateActionInstall: "安装更新",
+			updateActionCancel: "取消安装",
+			updateActionClose: "关闭",
+			updateActionOk: "我知道了",
+			updateNoCandidateLine: "当前没有可安装的新版本。",
+			updateDiagnostics: "诊断信息（不含凭据、私有源地址与完整日志）",
+			updateDiagCheck: "检查结论",
+			updateDiagInstall: "安装结论",
+			updateDiagStage: "安装阶段",
+			updateDiagTarget: "目标版本",
+			updateDiagSource: "来源类型",
+			updateDiagError: "最近错误",
+			updateDiagNone: "无",
+			updateInstalledLine: "CRWU v{version} 已安装。请完全退出并重新打开 DeepSeek Harness，使新版生效。",
+			updateUpdatedLine: "CRWU 已更新到 v{version}。",
+			updateRestartMac: "在 macOS 上，关闭窗口不一定退出应用：请从应用菜单选择「退出」，或按 Command-Q，然后重新打开 DeepSeek Harness。",
+			updateRestartOther: "请完全退出 DeepSeek Harness（不只是关闭窗口），再重新打开。",
+			updateInstallCancelled: "已取消更新，当前版本继续可用。",
 			activePrefix: "已有审核进行中：",
 			activeSuffix: "（同一时间只允许一条，其它条目已禁用）。",
 			stopHint: "停止会取消子会话剩余工作并释放占用，已产出的文件保留。"
@@ -2977,6 +3135,19 @@ body[data-ds-dark-theme] .crwu-audit-root {
 		//#region src/shared/consts.ts
 		/** Host 与 Client 共用的同源工作台端点。 */
 		const WORKBENCH_ROUTE = "/api/crwu-workbench";
+		/**
+		* 自助更新的四个 Host 操作名（协议 16）。
+		*
+		* 与 `WORKBENCH_ROUTE` 同级：它们是**跨进程契约**的一部分（Host 的操作表、`boot.ported.done`、
+		* 冻结清单与 Task 5 的 Client 门面共用这一份名字，避免各写一遍然后漂移）。
+		* 四个操作都返回 `{ ok, check, install }`；安装目标不接受调用方参数（见 `host/update/ops.ts`）。
+		*/
+		const UPDATE_OPERATION_NAMES = [
+			"update-status",
+			"update-check",
+			"update-install",
+			"update-cancel"
+		];
 		/** 员工排障入口：用户公开分享的钉钉个人名片链接（来自名片二维码）。 */
 		const DEVELOPER_CONTACT_URL = "https://n.dingtalk.com/dingding/h5-profile/outside/index.html?fr_source=13&uidCipher=7O4cP9kgKCT4CvRDZlgrxQ%3D%3D&cardToken=dff1f30a70&profile=%40kgDOFH5CaA";
 		/**
@@ -3010,6 +3181,269 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			return await response.json();
 		}
 		//#endregion
+		//#region src/client/features/update/api.ts
+		/**
+		* 更新专用的 Client 门面：四个操作名 + **运行时收窄**。
+		*
+		* 两条边界：
+		* 1. **只发空参数**。四个方法都是零参数方法，每次请求都发 `{}`；调用方就算硬塞
+		*    `version` / `registry` / `spec` / `command`，也进不了请求体。安装目标只能由 Host 自己
+		*    授权（Host 侧 `update/ops.ts` 会拒绝任何带参数的 `update-install`）。
+		* 2. **Host 返回的是不可信 JSON**。这里逐字段重建安全对象：未知状态、未知枚举、类型不符、
+		*    多余的 registry metadata / 日志 / requestId 一律不接受。收窄结果喂给 Store，绝不把
+		*    原始 JSON 直接当成 UI 状态。
+		*/
+		/**
+		* 方法名 → Host 操作名。
+		*
+		* 操作名来自共享常量（协议 16 的单一事实源），`OPERATION_OF` 从这张局部映射**组合**出来 ——
+		* 不允许在聚合表里再手写一遍字符串。
+		*/
+		const UPDATE_METHOD_OPERATION = {
+			updateStatus: UPDATE_OPERATION_NAMES[0],
+			updateCheck: UPDATE_OPERATION_NAMES[1],
+			updateInstall: UPDATE_OPERATION_NAMES[2],
+			updateCancel: UPDATE_OPERATION_NAMES[3]
+		};
+		/**
+		* 建立四个更新方法。
+		*
+		* 返回值刻意是 `Promise<unknown>`：Host 的 JSON 还没经过收窄，谁都不能把它断言成可信状态。
+		* 收窄是 `parseUpdateResponse()` 的职责，由 Store 调用。
+		*/
+		function createUpdateApi(transport = (operation, args) => rpc(operation, args)) {
+			const call = (operation) => async () => await transport(operation, {});
+			return {
+				updateStatus: call(UPDATE_METHOD_OPERATION.updateStatus),
+				updateCheck: call(UPDATE_METHOD_OPERATION.updateCheck),
+				updateInstall: call(UPDATE_METHOD_OPERATION.updateInstall),
+				updateCancel: call(UPDATE_METHOD_OPERATION.updateCancel)
+			};
+		}
+		/** 默认门面（组合进 `workbenchApi` 的那一份）。 */
+		const updateApi = createUpdateApi();
+		const CHECK_STATUSES = [
+			"idle",
+			"checking",
+			"up-to-date",
+			"available",
+			"unsupported",
+			"error"
+		];
+		const UNSUPPORTED_REASONS = [
+			"development-install",
+			"manager-unavailable",
+			"enterprise-registry"
+		];
+		const CHECK_ERROR_KINDS = [
+			"network",
+			"timeout",
+			"not-found",
+			"invalid-metadata",
+			"too-large",
+			"unknown"
+		];
+		const INSTALL_STATUSES = [
+			"idle",
+			"installing",
+			"awaiting-restart",
+			"failed",
+			"cancelled",
+			"updated"
+		];
+		const INSTALL_STAGES = [
+			"connecting",
+			"downloading",
+			"installing",
+			"cancelling"
+		];
+		const INSTALL_ERROR_KINDS = [
+			"source-unavailable",
+			"not-found",
+			"network",
+			"timeout",
+			"disk-full",
+			"permission",
+			"integrity",
+			"build-blocked",
+			"incompatible-version",
+			"audit-active",
+			"busy",
+			"cancelled",
+			"unknown"
+		];
+		const SOURCE_KINDS = ["npmmirror", "npm"];
+		function asRecord$1(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+			return value;
+		}
+		function asText(value) {
+			return typeof value === "string" ? value : null;
+		}
+		function oneOf(value, allowed) {
+			return typeof value === "string" && allowed.includes(value) ? value : null;
+		}
+		/** 候选：只保留线协议允许的六个字段，其余（registry / 日志 / requestId …）一律丢掉。 */
+		function narrowCandidate(value) {
+			const raw = asRecord$1(value);
+			if (raw === null) return null;
+			const currentVersion = asText(raw.currentVersion);
+			const targetVersion = asText(raw.targetVersion);
+			const sourceKind = oneOf(raw.sourceKind, SOURCE_KINDS);
+			const checkedAt = asText(raw.checkedAt);
+			const expiresAt = asText(raw.expiresAt);
+			if (currentVersion === null || targetVersion === null || sourceKind === null) return null;
+			if (checkedAt === null || expiresAt === null) return null;
+			const candidate = {
+				currentVersion,
+				targetVersion,
+				sourceKind,
+				checkedAt,
+				expiresAt
+			};
+			if (raw.publishedAt !== void 0) {
+				const publishedAt = asText(raw.publishedAt);
+				if (publishedAt === null) return null;
+				candidate.publishedAt = publishedAt;
+			}
+			return candidate;
+		}
+		function narrowCheck(value) {
+			const raw = asRecord$1(value);
+			if (raw === null) return null;
+			const status = oneOf(raw.status, CHECK_STATUSES);
+			if (status === null) return null;
+			switch (status) {
+				case "idle": return { status };
+				case "checking": {
+					if (raw.cached === void 0) return { status };
+					const cached = narrowCandidate(raw.cached);
+					return cached === null ? null : {
+						status,
+						cached
+					};
+				}
+				case "up-to-date": {
+					const checkedAt = asText(raw.checkedAt);
+					return checkedAt === null ? null : {
+						status,
+						checkedAt
+					};
+				}
+				case "available": {
+					const checkedAt = asText(raw.checkedAt);
+					const candidate = narrowCandidate(raw.candidate);
+					return checkedAt === null || candidate === null ? null : {
+						status,
+						checkedAt,
+						candidate
+					};
+				}
+				case "unsupported": {
+					const reason = oneOf(raw.reason, UNSUPPORTED_REASONS);
+					return reason === null ? null : {
+						status,
+						reason
+					};
+				}
+				case "error": {
+					const kind = oneOf(raw.kind, CHECK_ERROR_KINDS);
+					const checkedAt = asText(raw.checkedAt);
+					return kind === null || checkedAt === null ? null : {
+						status,
+						kind,
+						checkedAt
+					};
+				}
+			}
+		}
+		function narrowInstall(value) {
+			const raw = asRecord$1(value);
+			if (raw === null) return null;
+			const status = oneOf(raw.status, INSTALL_STATUSES);
+			if (status === null) return null;
+			switch (status) {
+				case "idle": return { status };
+				case "installing": {
+					const stage = oneOf(raw.stage, INSTALL_STAGES);
+					const targetVersion = asText(raw.targetVersion);
+					const startedAt = asText(raw.startedAt);
+					return stage === null || targetVersion === null || startedAt === null ? null : {
+						status,
+						stage,
+						targetVersion,
+						startedAt
+					};
+				}
+				case "awaiting-restart": {
+					const targetVersion = asText(raw.targetVersion);
+					const installedAt = asText(raw.installedAt);
+					return targetVersion === null || installedAt === null ? null : {
+						status,
+						targetVersion,
+						installedAt
+					};
+				}
+				case "failed": {
+					const kind = oneOf(raw.kind, INSTALL_ERROR_KINDS);
+					if (kind === null) return null;
+					const state = {
+						status,
+						kind
+					};
+					if (raw.targetVersion !== void 0) {
+						const targetVersion = asText(raw.targetVersion);
+						if (targetVersion === null) return null;
+						state.targetVersion = targetVersion;
+					}
+					return state;
+				}
+				case "cancelled": {
+					const state = { status };
+					if (raw.targetVersion !== void 0) {
+						const targetVersion = asText(raw.targetVersion);
+						if (targetVersion === null) return null;
+						state.targetVersion = targetVersion;
+					}
+					return state;
+				}
+				case "updated": {
+					const version = asText(raw.version);
+					return version === null ? null : {
+						status,
+						version
+					};
+				}
+			}
+		}
+		/** 收窄一次更新操作响应。任何不认识的东西都不会进入 UI 状态。 */
+		function parseUpdateResponse(raw) {
+			const envelope = asRecord$1(raw);
+			if (envelope === null) return {
+				kind: "malformed",
+				code: "malformed-envelope"
+			};
+			if (envelope.ok === false) return asText(envelope.error) === null ? {
+				kind: "malformed",
+				code: "malformed-envelope"
+			} : { kind: "rejected" };
+			if (envelope.ok !== true) return {
+				kind: "malformed",
+				code: "malformed-envelope"
+			};
+			const invalid = [];
+			const check = narrowCheck(envelope.check);
+			if (check === null) invalid.push("check");
+			const install = narrowInstall(envelope.install);
+			if (install === null) invalid.push("install");
+			return {
+				kind: "ok",
+				check,
+				install,
+				invalid
+			};
+		}
+		//#endregion
 		//#region src/shared/environment/model.ts
 		/** 除了 ready，其它状态一律不放行 —— 少一个 `proceed` 判断就会静默放行 `check-failed`。 */
 		function statusProceedable(status) {
@@ -3183,6 +3617,7 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			return await rpc(operation, args ?? {});
 		}
 		const workbenchApi = {
+			...createUpdateApi(),
 			boot: () => call("boot"),
 			env: (args) => call("env", args),
 			pending: (args) => call("pending", args),
@@ -3211,6 +3646,7 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			ifindCredentialClear: (args) => call("ifind-credential-clear", args),
 			ifindProbe: (args) => call("ifind-probe", args ?? {})
 		};
+		({ ...UPDATE_METHOD_OPERATION });
 		/**
 		* 报告页需要的门禁。
 		*
@@ -9288,7 +9724,7 @@ body[data-ds-dark-theme] .crwu-audit-root {
 		function describe(cause) {
 			return cause instanceof Error ? cause.message : String(cause);
 		}
-		const EMPTY = {
+		const EMPTY$1 = {
 			ok: false,
 			error: "",
 			rev: "",
@@ -9299,7 +9735,7 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			parentSessionId: ""
 		};
 		function createBuildStore() {
-			let snapshot = EMPTY;
+			let snapshot = EMPTY$1;
 			const listeners = /* @__PURE__ */ new Set();
 			let inflight = null;
 			const emit = () => {
@@ -9363,6 +9799,16 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			return snapshot.protocol !== null && snapshot.protocol !== 16;
 		}
 		/**
+		* 当前运行的版本号（**不带 `v` 前缀**）：`0.0.11` / dev 形态回空串。
+		*
+		* 侧栏徽标与更新面板都要把它交给更新 View Model（`v{currentVersion}`），
+		* 口径必须只有一处 —— 以前两边各自 `build.version || rev` 拼过，dev 形态会拼出 `vdev`。
+		*/
+		function currentVersionOf(snapshot) {
+			if (snapshot.version !== "") return snapshot.version;
+			return snapshot.rev === "" ? "" : snapshot.rev.replace(/^pkg-/, "");
+		}
+		/**
 		* 小标签的取值（纯函数，可单测）。
 		*
 		* 用户口径（2026-09-22）：**这里要写清是 dev 模式，还是他直接安装的具体版本**。
@@ -9393,6 +9839,442 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			};
 		}
 		//#endregion
+		//#region src/client/features/update/view-model.ts
+		/**
+		* 更新徽标 / 面板的**纯** View Model。
+		*
+		* 这里没有任何副作用：不碰 fetch、不读时钟（时间由 `nowMs` 传入）、不碰 window / localStorage /
+		* React。业务规则（能不能装、为什么不能装、徽标说什么、哪句话该显示）只在这一处算清楚，
+		* Task 6 的组件照着画，**不允许**组件再拼一套"候选是否过期 / 是否正在装"的竞态逻辑。
+		*
+		* 用户可见中文全部来自 `zh-CN.ts`；同时给出稳定 code（`installBlockedReason` /
+		* `installErrorKind`），便于 Task 6 映射更细的文案或做诊断。
+		*
+		* 2026-09-28 审查修正：错误按**动作**分派（检查 / 安装 / 取消），且"正在安装"取
+		* "本地在飞 **或** Host 事实说 installing"，所以刷新页面后也能正确显示安装中并允许取消。
+		*
+		* 第三轮补充：`snapshot.installCurrent === false` 表示快照里那份安装状态属于**上一事务**
+		* （用户点了重试、新事务已经开始，但 Host 还没回报）。这种"历史状态"不得再当作当前事实
+		* 显示安装失败或"已更新"；`awaiting-restart` 例外 —— 它是"磁盘上已经是新版本、进程还没重启"
+		* 这个**持久事实**，重试期间也必须继续提示用户重启。
+		*/
+		/** 安装阶段 → 诚实的离散中文（**不写百分比、不写预计剩余时间**）。 */
+		const STAGE_LABELS = {
+			connecting: zhCN.updateStageConnecting,
+			downloading: zhCN.updateStageDownloading,
+			installing: zhCN.updateStageInstalling,
+			cancelling: zhCN.updateStageCancelling
+		};
+		/** 公开来源类型 → 本地中文标签（私有源地址永远不进界面）。 */
+		const SOURCE_LABELS = {
+			npmmirror: zhCN.updateSourceNpmmirror,
+			npm: zhCN.updateSourceNpm
+		};
+		const BLOCK_TEXTS = {
+			"development-install": zhCN.updateReasonDevelopment,
+			"enterprise-registry": zhCN.updateReasonEnterprise,
+			"manager-unavailable": zhCN.updateReasonManagerUnavailable,
+			"candidate-expired": zhCN.updateReasonCandidateExpired,
+			"audit-active": zhCN.updateReasonAuditActive,
+			"install-active": zhCN.updateReasonInstallActive,
+			"awaiting-restart": zhCN.updateReasonAwaitingRestart,
+			"no-candidate": zhCN.updateReasonNoCandidate
+		};
+		/** `expiresAt` 有效且还没到期才算新鲜；非法时间一律按已过期处理（fail closed）。 */
+		function isFresh(expiresAt, nowMs) {
+			const at = Date.parse(expiresAt);
+			return !Number.isNaN(at) && at > nowMs;
+		}
+		function updateViewModelOf(input) {
+			const { snapshot, currentVersion, auditBusy, nowMs } = input;
+			const platform = input.platform ?? "other";
+			const buildKind = input.buildKind ?? "";
+			const check = snapshot.check;
+			const install = snapshot.install;
+			const error = snapshot.error;
+			const candidate = check !== null && check.status === "available" ? check.candidate : null;
+			const installCurrent = snapshot.installCurrent;
+			const awaitingRestart = install !== null && install.status === "awaiting-restart";
+			const showUpdated = installCurrent && install !== null && install.status === "updated";
+			const installing = snapshot.installing || installCurrent && install !== null && install.status === "installing";
+			const cancelling = snapshot.cancelling;
+			const checking = snapshot.checking || check !== null && check.status === "checking";
+			const unsupported = check !== null && check.status === "unsupported" ? check.reason : null;
+			const candidateExpired = candidate !== null && !isFresh(candidate.expiresAt, nowMs);
+			const isDev = buildKind === "dev" || unsupported === "development-install";
+			const blocked = awaitingRestart ? "awaiting-restart" : installing || cancelling ? "install-active" : unsupported === "development-install" ? "development-install" : unsupported === "enterprise-registry" ? "enterprise-registry" : unsupported === "manager-unavailable" ? "manager-unavailable" : auditBusy ? "audit-active" : candidate === null ? "no-candidate" : candidateExpired ? "candidate-expired" : null;
+			const versionLabel = currentVersion === "" ? zhCN.buildTagUnknown : `v${currentVersion}`;
+			let badgeSuffix = "";
+			let badgeTone = "neutral";
+			let badgeText = versionLabel;
+			if (isDev) badgeText = zhCN.buildTagDev;
+			else if (showUpdated) {
+				badgeSuffix = zhCN.updateBadgeUpdated;
+				badgeTone = "success";
+			} else if (awaitingRestart) {
+				badgeSuffix = zhCN.updateBadgeAwaitingRestart;
+				badgeTone = "warn";
+			} else if (installing || cancelling) {
+				badgeSuffix = zhCN.updateBadgeInstalling;
+				badgeTone = "accent";
+			} else if (checking) badgeSuffix = zhCN.updateBadgeChecking;
+			else if (candidate !== null) {
+				badgeSuffix = zhCN.updateBadgeUpdate;
+				badgeTone = "accent";
+			}
+			if (badgeSuffix !== "") badgeText = `${versionLabel}${zhCN.updateBadgeSeparator}${badgeSuffix}`;
+			let badgeTitle = zhCN.updateBadgeTitle.replace("{version}", versionLabel);
+			if (isDev) badgeTitle = zhCN.updateBadgeTitleDev;
+			else if (showUpdated) badgeTitle = zhCN.updateBadgeTitleUpdated.replace("{version}", versionLabel);
+			else if (awaitingRestart) badgeTitle = zhCN.updateBadgeTitleRestart;
+			else if (candidate !== null) badgeTitle = zhCN.updateBadgeTitleUpdate.replace("{version}", versionLabel);
+			const installNotice = installCurrent && install !== null && install.status === "awaiting-restart" ? {
+				line: zhCN.updateInstalledLine.replace("{version}", install.targetVersion),
+				hint: platform === "mac" ? zhCN.updateRestartMac : zhCN.updateRestartOther
+			} : installCurrent && install !== null && install.status === "updated" ? {
+				line: zhCN.updateUpdatedLine.replace("{version}", install.version),
+				hint: ""
+			} : null;
+			const showManualCheckError = error !== null && error.action === "check" && error.origin === "manual" || check !== null && check.status === "error" && snapshot.checkOrigin === "manual";
+			const showInstallError = installCurrent && install !== null && install.status === "failed" || error !== null && error.action === "install";
+			const showCancelError = error !== null && error.action === "cancel";
+			return {
+				badgeText,
+				badgeSuffix,
+				badgeTone,
+				hasCandidate: candidate !== null,
+				currentVersion,
+				currentVersionLabel: isDev ? zhCN.buildTagDev : versionLabel,
+				targetVersion: candidate === null ? "" : candidate.targetVersion,
+				publishedAt: candidate === null || candidate.publishedAt === void 0 ? "" : candidate.publishedAt,
+				sourceKind: candidate === null ? null : candidate.sourceKind,
+				canCheck: !checking && unsupported === null,
+				canInstall: blocked === null,
+				canCancel: installing || cancelling,
+				installBlockedReason: blocked,
+				installBlockedText: blocked === null ? "" : BLOCK_TEXTS[blocked],
+				checking,
+				installing,
+				cancelling,
+				awaitingRestart,
+				showUpdated,
+				installStage: installCurrent && install !== null && install.status === "installing" ? install.stage : null,
+				showManualCheckError,
+				manualCheckErrorText: showManualCheckError ? zhCN.updateCheckFailedManual : "",
+				showInstallError,
+				installErrorText: showInstallError ? zhCN.updateInstallFailed : "",
+				showCancelError,
+				cancelErrorText: showCancelError ? zhCN.updateCancelFailed : "",
+				installErrorKind: installCurrent && install !== null && install.status === "failed" ? install.kind : null,
+				badgeTitle,
+				sourceKindLabel: candidate === null ? "" : SOURCE_LABELS[candidate.sourceKind],
+				installStageLabel: installing ? install !== null && install.status === "installing" ? STAGE_LABELS[install.stage] : zhCN.updateStageCancelling : cancelling ? zhCN.updateStageCancelling : "",
+				installNotice
+			};
+		}
+		//#endregion
+		//#region src/client/features/update/UpdateDialog.tsx
+		/** 弹窗容器的 id：焦点接管与 Tab 循环都要先在文档里找到它（无 ref 也能工作）。 */
+		const DIALOG_ID = "crwu-audit-update-dialog";
+		/** 弹窗里"当前可用"的可聚焦元素（disabled 的不在其中 —— 这是 Tab 循环的判据）。 */
+		const FOCUSABLE_SELECTOR = [
+			"button:not([disabled])",
+			"summary",
+			"a[href]",
+			"input:not([disabled])",
+			"select:not([disabled])",
+			"textarea:not([disabled])",
+			"[tabindex]:not([tabindex=\"-1\"])"
+		].join(", ");
+		/** 当前文档里那个弹窗容器内"可见可用"的可聚焦元素（选择器见上）。 */
+		function focusablesIn(doc) {
+			const found = (doc?.getElementById?.(DIALOG_ID) ?? null)?.querySelectorAll?.(FOCUSABLE_SELECTOR);
+			return found === void 0 ? [] : Array.from(found);
+		}
+		function join(...all) {
+			return all.filter((item) => typeof item === "string" && item !== "").join(" ");
+		}
+		function UpdateDialog(props) {
+			const { onClose } = props;
+			const view = updateViewModelOf({
+				snapshot: props.snapshot,
+				currentVersion: props.currentVersion,
+				auditBusy: props.auditBusy === true,
+				nowMs: props.nowMs ?? Date.now(),
+				buildKind: props.buildKind ?? "",
+				platform: props.platform ?? "other"
+			});
+			const titleId = "crwu-audit-update-dialog-title";
+			const critical = view.installing || view.cancelling;
+			/**
+			* 键盘处理挂在 dialog 元素上（React 的 `onKeyDown`），**不**用 document 监听 + ref：
+			* ref 要靠普通被动 effect 更新，从 idle 重渲染成 installing 之后、被动 effect 跑之前按下
+			* Escape，读到的还是旧的 critical=false —— 那一刻会错误关掉正在安装的弹窗。
+			* 挂在元素上时处理器随 render 原子更新，没有这个时间窗；焦点本来就被限制在弹窗内，
+			* 键盘事件会冒泡到容器。
+			*/
+			const onDialogKeyDown = (event) => {
+				if (event?.key === "Escape") {
+					if (critical) return;
+					onClose();
+					return;
+				}
+				if (event?.key !== "Tab") return;
+				const doc = globalThis.document;
+				const items = focusablesIn(doc);
+				if (items.length === 0) return;
+				const index = items.indexOf(doc?.activeElement ?? null);
+				const next = event.shiftKey === true ? index <= 0 ? items[items.length - 1] : items[index - 1] : index === -1 || index >= items.length - 1 ? items[0] : items[index + 1];
+				event.preventDefault?.();
+				next?.focus?.();
+			};
+			react.useEffect(() => {
+				const doc = globalThis.document;
+				const dialog = doc?.getElementById?.(DIALOG_ID) ?? null;
+				const previouslyFocused = doc?.activeElement ?? null;
+				const first = focusablesIn(doc)[0];
+				if (first !== void 0) first.focus?.();
+				else dialog?.focus?.();
+				return () => {
+					previouslyFocused?.focus?.();
+				};
+			}, []);
+			const notice = view.installNotice;
+			const sourceKind = view.sourceKind === null ? zhCN.updateDiagNone : view.sourceKind;
+			const errorLine = props.snapshot.error === null ? zhCN.updateDiagNone : `${props.snapshot.error.action}/${props.snapshot.error.code}`;
+			const rows = [{
+				key: "current",
+				label: zhCN.updateFieldCurrent,
+				value: view.currentVersionLabel,
+				mono: true
+			}];
+			if (view.targetVersion !== "") rows.push({
+				key: "target",
+				label: zhCN.updateFieldTarget,
+				value: `v${view.targetVersion}`,
+				mono: true
+			});
+			if (view.publishedAt !== "") rows.push({
+				key: "published",
+				label: zhCN.updateFieldPublished,
+				value: formatDateTime(view.publishedAt),
+				mono: true
+			});
+			if (view.sourceKindLabel !== "") rows.push({
+				key: "source",
+				label: zhCN.updateFieldSource,
+				value: view.sourceKindLabel,
+				mono: false
+			});
+			if (view.installStageLabel !== "") rows.push({
+				key: "stage",
+				label: zhCN.updateFieldStage,
+				value: view.installStageLabel,
+				mono: false
+			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: WORKBENCH_CLASSES.updateDialogBackdrop,
+				...critical ? {} : { onClick: onClose }
+			}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: WORKBENCH_CLASSES.updateDialog,
+				id: DIALOG_ID,
+				role: "dialog",
+				"aria-modal": "true",
+				"aria-labelledby": titleId,
+				tabIndex: -1,
+				onKeyDown: onDialogKeyDown,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: WORKBENCH_CLASSES.updateDialogHead,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: WORKBENCH_CLASSES.updateDialogTitle,
+							id: titleId,
+							children: zhCN.updateDialogTitle
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+							label: zhCN.updateActionClose,
+							onClick: onClose
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: WORKBENCH_CLASSES.updateDialogBody,
+						children: [
+							notice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: WORKBENCH_CLASSES.updateDialogNotice,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: notice.line }), notice.hint === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: WORKBENCH_CLASSES.updateDialogNoticeHint,
+									children: notice.hint
+								})]
+							}),
+							view.hasCandidate || view.installStageLabel !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.kv,
+								children: rows.map((row) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: WORKBENCH_CLASSES.kvKey,
+									children: row.label
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: WORKBENCH_CLASSES.kvValue,
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: row.mono ? WORKBENCH_CLASSES.mono : void 0,
+										children: row.value
+									})
+								})] }, row.key))
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.muted,
+								children: zhCN.updateNoCandidateLine
+							}),
+							view.installStageLabel === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.updateDialogStages,
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: join(WORKBENCH_CLASSES.updateDialogStage, view.installStage !== null && WORKBENCH_CLASSES.updateDialogStageOn),
+									children: view.installStageLabel
+								})
+							}),
+							view.installBlockedText === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.updateDialogReason,
+								children: view.installBlockedText
+							}),
+							view.showManualCheckError ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.updateDialogError,
+								children: view.manualCheckErrorText
+							}) : null,
+							view.showInstallError ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.updateDialogError,
+								children: view.installErrorText
+							}) : null,
+							view.showCancelError ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: WORKBENCH_CLASSES.updateDialogError,
+								children: view.cancelErrorText
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+								className: WORKBENCH_CLASSES.updateDialogDiag,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", {
+									className: WORKBENCH_CLASSES.detailsTitle,
+									children: zhCN.updateDiagnostics
+								}), [
+									{
+										key: "check",
+										label: zhCN.updateDiagCheck,
+										value: props.snapshot.check === null ? zhCN.updateDiagNone : props.snapshot.check.status
+									},
+									{
+										key: "install",
+										label: zhCN.updateDiagInstall,
+										value: props.snapshot.install === null ? zhCN.updateDiagNone : props.snapshot.install.status
+									},
+									{
+										key: "stage",
+										label: zhCN.updateDiagStage,
+										value: view.installStage ?? zhCN.updateDiagNone
+									},
+									{
+										key: "target",
+										label: zhCN.updateDiagTarget,
+										value: view.targetVersion === "" ? zhCN.updateDiagNone : view.targetVersion
+									},
+									{
+										key: "source",
+										label: zhCN.updateDiagSource,
+										value: sourceKind
+									},
+									{
+										key: "error",
+										label: zhCN.updateDiagError,
+										value: errorLine
+									}
+								].map((row) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: WORKBENCH_CLASSES.updateDialogDiagRow,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: WORKBENCH_CLASSES.kvKey,
+										children: row.label
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: join(WORKBENCH_CLASSES.kvValue, WORKBENCH_CLASSES.mono),
+										children: row.value
+									})]
+								}, row.key))]
+							})
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: WORKBENCH_CLASSES.updateDialogActions,
+						children: view.awaitingRestart ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+							label: zhCN.updateActionOk,
+							tone: "primary",
+							onClick: onClose
+						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react.Fragment, { children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+								label: zhCN.updateActionCheck,
+								disabled: !view.canCheck,
+								onClick: () => {
+									props.onCheck?.();
+								}
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+								label: zhCN.updateActionInstall,
+								tone: "primary",
+								disabled: !view.canInstall,
+								onClick: () => {
+									props.onInstall?.();
+								}
+							}),
+							view.canCancel ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Button, {
+								label: zhCN.updateActionCancel,
+								onClick: () => {
+									props.onCancel?.();
+								}
+							}) : null
+						] })
+					})
+				]
+			})] });
+		}
+		//#endregion
+		//#region src/client/features/update/react.ts
+		/**
+		* 更新 Feature 的 React 订阅适配层。
+		*
+		* 两个纯状态（`update-store.ts` 的更新状态、`dialog-store.ts` 的开关状态）都不认识 React；
+		* 组件只通过这里的 hook 读它们。写法与 `useBuild` / `useEnvStatus` / `useModule` 一致
+		* （本仓不引 react-dom，测试用的是替身 React，所以只允许 useState + useEffect 这一套）。
+		*
+		* 两个 hook 都接受**缺省**：面板在单测里可以不注入任何 store 直接渲染。
+		*/
+		/** 订阅更新状态（缺省 = 一份空快照：界面按"还没检查过"显示）。 */
+		function useUpdateStore(store) {
+			const [snapshot, setSnapshot] = react.useState(store?.get() ?? null);
+			react.useEffect(() => {
+				if (store === void 0) return void 0;
+				setSnapshot(store.get());
+				return store.subscribe(() => {
+					setSnapshot(store.get());
+				});
+			}, [store]);
+			return snapshot ?? EMPTY;
+		}
+		/** 订阅更新面板的开关状态（缺省 = 不显示）。 */
+		function useUpdateDialog(store) {
+			const [snapshot, setSnapshot] = react.useState(store?.get() ?? CLOSED);
+			react.useEffect(() => {
+				if (store === void 0) return void 0;
+				setSnapshot(store.get());
+				return store.subscribe(() => {
+					setSnapshot(store.get());
+				});
+			}, [store]);
+			return snapshot;
+		}
+		const CLOSED = { open: false };
+		/** 没有 store 时的空状态：与 `update-store.ts` 的初始快照同形。 */
+		const EMPTY = {
+			initialized: false,
+			check: null,
+			install: null,
+			installCurrent: false,
+			checkOrigin: null,
+			checking: false,
+			installing: false,
+			cancelling: false,
+			error: null
+		};
+		//#endregion
 		//#region src/client/features/workbench/greeting.ts
 		/**
 		* 面板头部右侧那句问候。
@@ -9453,6 +10335,13 @@ body[data-ds-dark-theme] .crwu-audit-root {
 		* 轮询本身不是新鲜事，但**必须可释放**：否则切走面板后请求还在跑。
 		*/
 		const POLL_INTERVAL_MS = 1e4;
+		/** 更新徽标的语气 → 附加类（与侧栏入口共用同一套）。 */
+		const UPDATE_TONE_CLASSES$1 = {
+			neutral: "",
+			accent: WORKBENCH_CLASSES.updateBadgeAccent,
+			warn: WORKBENCH_CLASSES.updateBadgeWarn,
+			success: WORKBENCH_CLASSES.updateBadgeOk
+		};
 		function WorkbenchPanel(props) {
 			const fallback = react.useRef(null);
 			if (fallback.current === null) fallback.current = createEnvStatusStore();
@@ -9484,6 +10373,8 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			const buildStore = props.build ?? buildFallback.current;
 			const build = useBuild(buildStore);
 			const tag = buildTagOf(build);
+			const updateSnapshot = useUpdateStore(props.update);
+			const updateDialogState = useUpdateDialog(props.updateDialog);
 			/** 被门禁拦住的界面状态：running = 正在重新自检，blocked = 自检没过。 */
 			const [gate, setGate] = react.useState("idle");
 			const [loginMessage, setLoginMessage] = react.useState("");
@@ -9633,6 +10524,7 @@ body[data-ds-dark-theme] .crwu-audit-root {
 				buildStore.refresh();
 				const current = envStatus.get();
 				if (current.env === null && !current.busy) envStatus.refresh();
+				if (props.update !== void 0 && !props.update.get().initialized) props.update.initialize();
 				return () => {
 					mounted.current = false;
 				};
@@ -9775,6 +10667,15 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			const awaitingEnv = env === null && !hostStale && snapshot.error === "";
 			const bootError = build.error;
 			const boundParentId = build.parentSessionId;
+			const gatingHasAudit = auditBusy !== "" || activeKey !== "";
+			const updateView = updateViewModelOf({
+				snapshot: updateSnapshot,
+				currentVersion: currentVersionOf(build),
+				auditBusy: gatingHasAudit,
+				nowMs: (props.now ?? Date.now)(),
+				buildKind: build.buildKind,
+				platform: props.platform ?? "other"
+			});
 			const gating = gatingOf(env, activeKey, {
 				busy,
 				...auditBusy === "" ? {} : { auditBusy },
@@ -9893,6 +10794,26 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: WORKBENCH_CLASSES.root,
 				children: [
+					updateDialogState.open && props.update !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UpdateDialog, {
+						snapshot: updateSnapshot,
+						currentVersion: currentVersionOf(build),
+						buildKind: build.buildKind,
+						auditBusy: gatingHasAudit,
+						nowMs: (props.now ?? Date.now)(),
+						platform: props.platform ?? "other",
+						onClose: () => {
+							props.updateDialog?.close();
+						},
+						onCheck: () => {
+							props.update?.check();
+						},
+						onInstall: () => {
+							props.update?.install();
+						},
+						onCancel: () => {
+							props.update?.cancel();
+						}
+					}) : null,
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: WORKBENCH_CLASSES.header,
 						children: [
@@ -9901,10 +10822,23 @@ body[data-ds-dark-theme] .crwu-audit-root {
 								className: WORKBENCH_CLASSES.title,
 								children: zhCN.title
 							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							props.update === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: [WORKBENCH_CLASSES.version, BUILD_TAG_CLASSES[tag.tone]].join(" "),
 								title: tag.title,
 								children: tag.text
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: [
+									WORKBENCH_CLASSES.version,
+									WORKBENCH_CLASSES.updateBadge,
+									UPDATE_TONE_CLASSES$1[updateView.badgeTone]
+								].filter((item) => item !== "").join(" "),
+								title: updateView.badgeTitle,
+								"aria-label": updateView.badgeTitle,
+								onClick: () => {
+									props.updateDialog?.open();
+								},
+								children: updateView.badgeText
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: WORKBENCH_CLASSES.grow }),
 							greeting === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
@@ -10136,6 +11070,13 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			busy: WORKBENCH_CLASSES.sideEntryMarkBusy,
 			idle: WORKBENCH_CLASSES.sideEntryMarkIdle
 		};
+		/** 更新徽标的语气 → 附加类（形状仍是 `.crwu-audit-version`）。 */
+		const UPDATE_TONE_CLASSES = {
+			neutral: "",
+			accent: WORKBENCH_CLASSES.updateBadgeAccent,
+			warn: WORKBENCH_CLASSES.updateBadgeWarn,
+			success: WORKBENCH_CLASSES.updateBadgeOk
+		};
 		const GLYPH = {
 			eval: EvalIcon,
 			audit: AuditIcon,
@@ -10146,8 +11087,17 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			const current = useModule(modules);
 			const snapshot = useEnvStatus(props.store);
 			const build = useBuild(props.build);
+			const updateSnapshot = useUpdateStore(props.update);
 			const tone = envLampOf(snapshot);
 			const tag = buildTagOf(build);
+			const updateView = props.update === void 0 ? null : updateViewModelOf({
+				snapshot: updateSnapshot,
+				currentVersion: currentVersionOf(build),
+				auditBusy: false,
+				nowMs: (props.now ?? Date.now)(),
+				buildKind: build.buildKind,
+				platform: props.platform ?? "other"
+			});
 			const active = props.usePanelInfo === void 0 ? false : props.usePanelInfo((info) => info.activePanelId === WORKBENCH_PANEL_KEY);
 			const wide = props.wide !== false;
 			react.useEffect(() => {
@@ -10155,7 +11105,12 @@ body[data-ds-dark-theme] .crwu-audit-root {
 				if (env.env === null && !env.busy) props.store.refresh();
 				const info = props.build.get();
 				if (info.rev === "" && info.error === "") props.build.refresh();
-			}, [props.store, props.build]);
+				if (props.update !== void 0 && !props.update.get().initialized) props.update.initialize();
+			}, [
+				props.store,
+				props.build,
+				props.update
+			]);
 			const markClass = [WORKBENCH_CLASSES.sideEntryMark, MARK_OF[tone] ?? WORKBENCH_CLASSES.sideEntryMarkIdle].join(" ");
 			const mark = tone === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(BadgeCheckIcon, { size: 12 }) : tone === "bad" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(BadgeWarnIcon, { size: 12 }) : null;
 			const title = `${zhCN.sidebarLabel} · ${tag.title}\n${envMarkTitle(tone)}`;
@@ -10193,10 +11148,21 @@ body[data-ds-dark-theme] .crwu-audit-root {
 							className: WORKBENCH_CLASSES.sideCardTitle,
 							children: zhCN.sidebarLabel
 						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						updateView === null ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							className: [WORKBENCH_CLASSES.version, BUILD_TAG_CLASSES[tag.tone]].join(" "),
 							title: tag.title,
 							children: tag.text
+						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: [
+								WORKBENCH_CLASSES.version,
+								WORKBENCH_CLASSES.updateBadge,
+								UPDATE_TONE_CLASSES[updateView.badgeTone]
+							].filter((item) => item !== "").join(" "),
+							title: updateView.badgeTitle,
+							"aria-label": updateView.badgeTitle,
+							onClick: props.onOpenUpdate,
+							children: updateView.badgeText
 						})
 					]
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -10236,6 +11202,564 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			});
 		}
 		//#endregion
+		//#region src/client/features/update/dialog-store.ts
+		function createUpdateDialogStore() {
+			let snapshot = { open: false };
+			const listeners = /* @__PURE__ */ new Set();
+			const set = (open) => {
+				if (snapshot.open === open) return;
+				snapshot = { open };
+				for (const listener of [...listeners]) listener();
+			};
+			return {
+				get: () => snapshot,
+				open: () => {
+					set(true);
+				},
+				close: () => {
+					set(false);
+				},
+				subscribe(listener) {
+					listeners.add(listener);
+					return () => {
+						listeners.delete(listener);
+					};
+				},
+				dispose() {
+					listeners.clear();
+				}
+			};
+		}
+		//#endregion
+		//#region src/client/features/update/update-store.ts
+		/**
+		* 实例级更新 Store：Client 侧唯一的更新状态事实源。
+		*
+		* 为什么要一个 store 而不是让组件各自请求：侧栏徽标与更新面板是**两个消费者**，
+		* 各拉一次就会出现「徽标说有一更新、面板说已是最新」这种自相矛盾（协议 15 那次环境页
+		* 就是同一个坑）。所以：
+		* - 每个 Client 插件实例**一份**（`createUpdateStore`，没有模块级单例）；
+		* - 初始化只有一条链（两个消费者共享同一个 Promise）；
+		* - 每个动作各自单飞（检查 / 安装 / 取消 / 状态刷新），重复点击不会多打上游；
+		* - Host 的 JSON 只在 `parseUpdateResponse()` 收窄之后才进快照（见 `api.ts`）。
+		*
+		* ## 2026-09-28 第一轮审查修正
+		*
+		* 1. **操作状态互不覆盖**：`checking` / `installing` / `cancelling` 三个独立布尔。
+		* 2. **轮询由 Host 事实驱动**：`shouldPoll()` 只看 `install.status` 与"本次事务是否在飞"。
+		* 3. **过期响应按世代作废**：`install()` 开新世代，响应带着发出时的世代回来。
+		*
+		* ## 2026-09-28 第二轮审查修正（本节的四条是这一轮的重点）
+		*
+		* A. **新事务一开，旧世代立刻失效**：比较基准是"当前事务世代"（`activeEpoch`），不是
+		*    "已经写入过的最高世代"。旧代码用后者，于是"旧 status 挂住 → 点安装 → 旧 status 返回
+		*    failed"会把 failed 写进新事务，还会顺手停掉新事务的轮询。
+		* B. **`fetchStatus` 的返回值 = 是否取得当前事务可用的合法 install 事实**，不是"Promise 没
+		*    throw"：malformed / rejected / install 字段非法 / 不属于当前世代 都不算事实。
+		* C. **status 单飞按世代保存**：旧世代 already-inflight 的 status 不能拿来当当前事实 ——
+		*    先等它落定（结果丢弃），再明确发一次当前世代的 status。
+		* D. **不确定结果统一处理**：`update-install` / `update-cancel` 即使没有 throw，只要信封
+		*    不认识 / 被拒 / install 字段非法 / 不被当前世代接受，都要补一次 status 取事实，
+		*    再决定是"确实在推进"还是"这次动作没生效/取不到事实"。
+		*
+		* ## 2026-09-28 第三轮审查修正
+		*
+		* E. **快照里的安装状态带出"它属于哪个事务"**（`installCurrent`）：上一事务的 failed / cancelled
+		*    不能挡住新事务的轮询（`shouldPoll()` 只看当前事务是否落定、当前事务是否在装），
+		*    也不能在重试期间继续当作"当前 Host 事实"显示安装失败。
+		* F. **事务内再加一层 revision**：光靠世代分不出同一事务里"谁更新" —— 两者世代相同。
+		*    每次写入安装状态都递增 `installRevision`，每个请求把**发出时**的 revision 带回来；
+		*    返回时若 `installRevision` 已经更大，就说明期间有更新的状态被接受，这份观察作废
+		*    （终态之前发出的旧观察、以及更新的 update-install 之后回来的旧 poll，都走这一条）。
+		*
+		* ## 2026-09-28 第四轮审查修正
+		*
+		* G. **revision 保护所有观察响应，不只终态之后**：`write.revision < installRevision` 的
+		*    非权威响应一律拒绝 —— 否则"update-install 先写 installing、较早发出的 poll 后返回 idle"
+		*    会把状态打回 idle 并把轮询停掉。终态之后只额外多一条"只允许确认完全相同的终态"。
+		*    当前 revision 的观察照常推进（connecting → downloading → installing 不受影响）。
+		*
+		* 这里**不碰 UI**：没有 React、没有 localStorage、没有 Node 模块；时间只用于轮询间隔，
+		* 由注入的 scheduler 决定，单测不做真实等待。
+		*/
+		const DEFAULT_POLL_INTERVAL_MS = 2e3;
+		const TERMINAL_INSTALL_STATUSES = [
+			"awaiting-restart",
+			"updated",
+			"cancelled",
+			"failed"
+		];
+		function defaultScheduler() {
+			return { schedule(callback, delayMs) {
+				const timer = setTimeout(callback, delayMs);
+				return () => {
+					clearTimeout(timer);
+				};
+			} };
+		}
+		/** 值比较：收窄时重建的对象键序稳定，所以序列化比较可靠（用于"没变就不通知"）。 */
+		function sameValue(left, right) {
+			if (left === right) return true;
+			if (left === null || right === null || typeof left !== "object" || typeof right !== "object") return false;
+			return JSON.stringify(left) === JSON.stringify(right);
+		}
+		function isTerminalInstall(state) {
+			return TERMINAL_INSTALL_STATUSES.includes(state.status);
+		}
+		function createUpdateStore(deps) {
+			const scheduler = deps.scheduler ?? defaultScheduler();
+			const pollIntervalMs = deps.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+			const listeners = /* @__PURE__ */ new Set();
+			let snapshot = {
+				initialized: false,
+				check: null,
+				install: null,
+				installCurrent: false,
+				checkOrigin: null,
+				checking: false,
+				installing: false,
+				cancelling: false,
+				error: null
+			};
+			let disposed = false;
+			let initializing = null;
+			let checkInflight = null;
+			let installInflight = null;
+			let cancelInflight = null;
+			/** 状态取数与它所属的世代一起保存：旧世代的在飞请求不能拿来当当前事实。 */
+			let statusInflight = null;
+			let pollCancel = null;
+			/**
+			* **当前**安装事务世代。`install()` 一开新事务就 +1 —— 那一刻起，所有带着更早世代回来的
+			* 响应立刻失效（不是"等新事务写入第一条状态之后"）。
+			*/
+			let activeEpoch = 1;
+			/** `snapshot.install` 属于哪个世代（0 = 还没有过）。不等于 `activeEpoch` 就是"历史状态"。 */
+			let installEpoch = 0;
+			/** 哪个世代已经落定（写过终态）；值等于 `activeEpoch` 表示"当前事务已经是终态"。 */
+			let settledEpoch = -1;
+			/**
+			* 安装状态的**写入序号**：每接受一次安装状态 +1（事务内也递增）。
+			*
+			* 请求发出时捕获它，返回时再比一次：`write.revision < installRevision` 就是"这份观察发出之后
+			* 已经有更新的状态被接受了" —— 过期观察，任何结论（含任意终态）都不许覆盖当前状态。
+			*/
+			let installRevision = 0;
+			/** 检查 / 取消请求的序号：旧请求的 finally 不许清掉新请求的活动状态。 */
+			let checkSeq = 0;
+			let cancelSeq = 0;
+			function get() {
+				return snapshot;
+			}
+			function subscribe(listener) {
+				listeners.add(listener);
+				return () => {
+					listeners.delete(listener);
+				};
+			}
+			function update(patch) {
+				if (disposed) return snapshot;
+				let changed = false;
+				for (const key of Object.keys(patch)) if (!sameValue(snapshot[key], patch[key])) {
+					changed = true;
+					break;
+				}
+				if (!changed) return snapshot;
+				snapshot = {
+					...snapshot,
+					...patch
+				};
+				for (const listener of [...listeners]) try {
+					listener(snapshot);
+				} catch (error) {}
+				return snapshot;
+			}
+			/** 记一条客户端侧失败。 */
+			function recordError(next) {
+				const current = snapshot.error;
+				if (next.origin === "background" && current !== null && current.origin === "manual") return;
+				update({ error: next });
+			}
+			/** 清掉某个手动动作留下的错误（事实证明这次动作确实生效了）。 */
+			function clearManualError(action) {
+				const current = snapshot.error;
+				if (current !== null && current.origin === "manual" && current.action === action) update({ error: null });
+			}
+			/**
+			* 这份安装状态是否还有资格写进快照（过期响应保护）。
+			*
+			* 判定顺序：
+			* 1. `write.epoch !== activeEpoch` → 拒（跨事务的旧响应全部失效）；
+			* 2. 非权威且 `write.revision < installRevision` → 拒（**过期观察**：期间已有更新的状态被接受）；
+			* 3. 当前事务已落定 → 非权威的只允许确认完全相同的终态，且任何响应都不许退回非终态；
+			* 4. 检查响应顺带带回的快照，安装进行时不得用非终态覆盖。
+			*
+			* @param next - 收窄后的安装状态。
+			* @param write - 这份状态来自哪个世代、哪个 revision、是不是本次事务的权威结论。
+			* @returns 可以写入为 true。
+			*/
+			function acceptsInstall(next, write) {
+				if (write.epoch !== activeEpoch) return false;
+				if (!write.authoritative && write.revision < installRevision) return false;
+				if (settledEpoch === activeEpoch) {
+					if (!write.authoritative && !sameValue(next, snapshot.install)) return false;
+					if (!isTerminalInstall(next)) return false;
+				}
+				const installActive = snapshot.installing || snapshot.cancelling || currentTransactionInstalling();
+				if (write.incidental && installActive && !isTerminalInstall(next)) return false;
+				return true;
+			}
+			/** 写入安装状态；返回是否真的被接受。 */
+			function applyInstall(next, write) {
+				if (!acceptsInstall(next, write)) return false;
+				installRevision += 1;
+				installEpoch = activeEpoch;
+				if (isTerminalInstall(next)) settledEpoch = activeEpoch;
+				update({
+					install: next,
+					installCurrent: currentInstallIsVisible()
+				});
+				syncPolling();
+				return true;
+			}
+			function applyEnvelope(raw, options) {
+				const parsed = parseUpdateResponse(raw);
+				const { action, origin } = options;
+				const empty = {
+					envelopeValid: false,
+					rejected: false,
+					checkValid: false,
+					installValid: false,
+					installAccepted: false,
+					isCurrentFact: false
+				};
+				if (parsed.kind === "rejected") {
+					recordError({
+						action,
+						origin,
+						code: "rejected"
+					});
+					return {
+						...empty,
+						envelopeValid: true,
+						rejected: true
+					};
+				}
+				if (parsed.kind === "malformed") {
+					recordError({
+						action,
+						origin,
+						code: "malformed-envelope"
+					});
+					return empty;
+				}
+				if (parsed.check !== null) {
+					const patch = { check: parsed.check };
+					if (options.setCheckOrigin === true || snapshot.checkOrigin === null) patch.checkOrigin = origin;
+					update(patch);
+				}
+				const installAccepted = parsed.install === null ? false : applyInstall(parsed.install, {
+					epoch: options.epoch,
+					revision: options.revision,
+					authoritative: options.authoritative === true,
+					incidental: options.incidentalInstall === true
+				});
+				const failure = parsed.invalid.includes("check") ? "malformed-check" : parsed.invalid.includes("install") ? "malformed-install" : null;
+				if (failure !== null) recordError({
+					action,
+					origin,
+					code: failure
+				});
+				else if (origin === "manual" && snapshot.error !== null && snapshot.error.origin === "manual" && snapshot.error.action === action) update({ error: null });
+				return {
+					envelopeValid: true,
+					rejected: false,
+					checkValid: parsed.check !== null,
+					installValid: parsed.install !== null,
+					installAccepted,
+					isCurrentFact: parsed.install !== null && installAccepted
+				};
+			}
+			/** 为什么这次 status 响应不能当作当前事务的事实。 */
+			function statusFailureCodeOf(outcome) {
+				if (!outcome.envelopeValid) return "malformed-envelope";
+				if (outcome.rejected) return "rejected";
+				if (!outcome.installValid) return "malformed-install";
+				return "stale";
+			}
+			/**
+			* 取一次状态，并回答"**是否取得了当前事务可用的合法 install 事实**"。
+			*
+			* 与 `updateStatus()` 的成功/失败不是一回事：信封不认识、被拒绝、install 字段非法、
+			* 或者响应属于更早的事务，都不算事实。
+			*
+			* @param action - 这次取数是谁发起的（`status` 主动刷新 / `poll` 安装期间的轮询）。
+			* @returns 事实与"没取到时为什么"。
+			*/
+			async function fetchStatus(action) {
+				for (;;) {
+					const inflight = statusInflight;
+					if (inflight !== null && inflight.epoch === activeEpoch) return inflight.promise;
+					if (inflight !== null) {
+						await inflight.promise.catch(() => void 0);
+						continue;
+					}
+					const at = activeEpoch;
+					const revision = installRevision;
+					const run = (async () => {
+						let outcome;
+						try {
+							outcome = applyEnvelope(await deps.api.updateStatus(), {
+								action,
+								origin: "background",
+								epoch: at,
+								revision,
+								setCheckOrigin: snapshot.checkOrigin === null
+							});
+						} catch (error) {
+							recordError({
+								action,
+								origin: "background",
+								code: "transport"
+							});
+							return {
+								fact: false,
+								code: "transport"
+							};
+						}
+						if (outcome.isCurrentFact) return {
+							fact: true,
+							code: null
+						};
+						return {
+							fact: false,
+							code: statusFailureCodeOf(outcome)
+						};
+					})();
+					statusInflight = {
+						epoch: at,
+						promise: run
+					};
+					try {
+						return await run;
+					} finally {
+						if (statusInflight !== null && statusInflight.promise === run) statusInflight = null;
+					}
+				}
+			}
+			/** 一次检查：手动与后台共用单飞闸门（两个消费者同时点也只发一次）。 */
+			function startCheck(origin) {
+				if (checkInflight !== null) return checkInflight;
+				const at = activeEpoch;
+				const revision = installRevision;
+				const seq = checkSeq += 1;
+				const run = (async () => {
+					update({ checking: true });
+					try {
+						applyEnvelope(await deps.api.updateCheck(), {
+							action: "check",
+							origin,
+							epoch: at,
+							revision,
+							setCheckOrigin: true,
+							incidentalInstall: true
+						});
+					} catch (error) {
+						recordError({
+							action: "check",
+							origin,
+							code: "transport"
+						});
+					} finally {
+						if (seq === checkSeq) update({ checking: false });
+						checkInflight = null;
+						syncPolling();
+					}
+					return snapshot;
+				})();
+				checkInflight = run;
+				return run;
+			}
+			/** `snapshot.install` 是不是当前事务的结论。 */
+			function currentInstallIsVisible() {
+				return installEpoch === activeEpoch;
+			}
+			/** 当前事务是否已经落定（终态已经写进快照）。 */
+			function currentTransactionSettled() {
+				return settledEpoch === activeEpoch;
+			}
+			/** 当前事务的 Host 事实说"正在装"。上一事务留下的 installing 不算。 */
+			function currentTransactionInstalling() {
+				return currentInstallIsVisible() && snapshot.install !== null && snapshot.install.status === "installing";
+			}
+			/**
+			* 轮询该不该开着。
+			*
+			* - Host 已落定（awaiting-restart / updated / cancelled / failed）→ 关：没有更多可观察的进展；
+			* - 本地有安装 / 取消请求在飞 → 开：Host 可能还没把 `installing` 报出来，而阶段变化只能靠轮询看；
+			* - 否则只看 Host 是否在装 —— 刷新页面后恢复安装状态走的就是这条；
+			* - Host 说 idle 而本地也没有在飞的事务 → 关。
+			*
+			* `check()` 完全不参与这个判断，所以它清不掉轮询。
+			*/
+			function shouldPoll() {
+				if (disposed) return false;
+				if (currentTransactionSettled()) return false;
+				if (snapshot.installing || snapshot.cancelling) return true;
+				return currentTransactionInstalling();
+			}
+			function stopPolling() {
+				const cancel = pollCancel;
+				pollCancel = null;
+				if (cancel !== null) cancel();
+			}
+			function startPolling() {
+				if (disposed || pollCancel !== null) return;
+				pollCancel = scheduler.schedule(() => {
+					pollCancel = null;
+					pollTick();
+				}, pollIntervalMs);
+			}
+			function syncPolling() {
+				if (shouldPoll()) startPolling();
+				else stopPolling();
+			}
+			async function pollTick() {
+				if (!shouldPoll()) {
+					stopPolling();
+					return;
+				}
+				await fetchStatus("poll");
+				syncPolling();
+			}
+			return {
+				get,
+				subscribe,
+				initialize() {
+					if (snapshot.initialized) return Promise.resolve(snapshot);
+					if (initializing !== null) return initializing;
+					const run = (async () => {
+						try {
+							await fetchStatus("status");
+							syncPolling();
+							const check = snapshot.check;
+							if (!(check !== null && check.status !== "idle" && check.status !== "checking") && !disposed) await startCheck("background");
+						} catch (error) {} finally {
+							initializing = null;
+							syncPolling();
+							update({ initialized: true });
+						}
+						return snapshot;
+					})();
+					initializing = run;
+					return run;
+				},
+				check() {
+					return startCheck("manual");
+				},
+				install() {
+					if (installInflight !== null) return installInflight;
+					activeEpoch += 1;
+					clearManualError("install");
+					const at = activeEpoch;
+					const revision = installRevision;
+					const run = (async () => {
+						update({
+							installing: true,
+							installCurrent: currentInstallIsVisible()
+						});
+						syncPolling();
+						try {
+							let outcome = null;
+							try {
+								outcome = applyEnvelope(await deps.api.updateInstall(), {
+									action: "install",
+									origin: "manual",
+									epoch: at,
+									revision,
+									authoritative: true
+								});
+							} catch (error) {
+								outcome = null;
+							}
+							if (outcome === null || !outcome.isCurrentFact) {
+								const status = await fetchStatus("status");
+								const state = snapshot.install;
+								const progressing = state !== null && (state.status === "installing" || isTerminalInstall(state));
+								if (status.fact && progressing) clearManualError("install");
+								else if (status.fact) recordError({
+									action: "install",
+									origin: "manual",
+									code: "no-effect"
+								});
+								else recordError({
+									action: "install",
+									origin: "manual",
+									code: status.code ?? "transport"
+								});
+							}
+						} finally {
+							installInflight = null;
+							update({ installing: false });
+							syncPolling();
+						}
+						return snapshot;
+					})();
+					installInflight = run;
+					return run;
+				},
+				cancel() {
+					if (cancelInflight !== null) return cancelInflight;
+					const at = activeEpoch;
+					const revision = installRevision;
+					const seq = cancelSeq += 1;
+					clearManualError("cancel");
+					const run = (async () => {
+						update({ cancelling: true });
+						syncPolling();
+						try {
+							let outcome = null;
+							try {
+								outcome = applyEnvelope(await deps.api.updateCancel(), {
+									action: "cancel",
+									origin: "manual",
+									epoch: at,
+									revision,
+									authoritative: true
+								});
+							} catch (error) {
+								outcome = null;
+							}
+							if (outcome === null || !outcome.isCurrentFact) {
+								const status = await fetchStatus("status");
+								if (status.fact) clearManualError("cancel");
+								else recordError({
+									action: "cancel",
+									origin: "manual",
+									code: status.code ?? "transport"
+								});
+							}
+						} finally {
+							if (seq === cancelSeq) update({ cancelling: false });
+							cancelInflight = null;
+							syncPolling();
+						}
+						return snapshot;
+					})();
+					cancelInflight = run;
+					return run;
+				},
+				refreshStatus() {
+					return fetchStatus("status").then(() => snapshot);
+				},
+				dispose() {
+					disposed = true;
+					stopPolling();
+					listeners.clear();
+				}
+			};
+		}
+		//#endregion
 		//#region src/client/features/workbench/styles.ts
 		/** 安装当前插件自己的样式，并在 Cordis effect 释放时清理。 */
 		function installWorkbenchStyles() {
@@ -10287,6 +11811,13 @@ body[data-ds-dark-theme] .crwu-audit-root {
 			const envStatus = createEnvStatusStore();
 			const buildStore = createBuildStore();
 			const modules = createModuleStore();
+			const updateStore = createUpdateStore({ api: updateApi });
+			const updateDialog = createUpdateDialogStore();
+			ctx.effect(() => () => {
+				updateStore.dispose();
+				updateDialog.dispose();
+			}, "crwu-workbench: update state");
+			const platform = /Mac|iPhone|iPad/i.test(globalThis.navigator?.userAgent ?? "") ? "mac" : "other";
 			const openPanel = () => {
 				const target = services.layout;
 				if (target?.selectPanel !== void 0) target.selectPanel(WORKBENCH_PANEL_KEY);
@@ -10301,9 +11832,14 @@ body[data-ds-dark-theme] .crwu-audit-root {
 					store: envStatus,
 					build: buildStore,
 					modules,
+					update: updateStore,
 					wide: props.wide !== false,
 					...props.usePanelInfo === void 0 ? {} : { usePanelInfo: props.usePanelInfo },
-					onOpen: openPanel
+					onOpen: openPanel,
+					onOpenUpdate: () => {
+						openPanel();
+						updateDialog.open();
+					}
 				});
 			}));
 			ctx.slots.inject("main", () => ctx.slots.register({
@@ -10313,7 +11849,10 @@ body[data-ds-dark-theme] .crwu-audit-root {
 				services,
 				envStatus,
 				build: buildStore,
-				modules
+				modules,
+				update: updateStore,
+				updateDialog,
+				platform
 			})));
 			ctx.slots.inject("tool.view.cordis", () => ctx.slots.register({
 				name: "tool.view.cordis",