dsh-custom-mode 2.2.6 → 2.3.0

package/README.i18n.yaml

@@ -1,5 +1,5 @@
 # 双语配对一致性记录：两侧在「上次确认一致」时的 git blob 哈希。
 # 两份文档权威相同——改完任意一侧，请把另一侧也改掉，然后重新记录：
 #   node tools/verify-translation-pairing.mjs --write
-README.md: f43403111d49476d68271c74036aec063e8b3417
-README.zh.md: 43c26010c77fca3121c1c1906c40880c710c16e9
+README.md: c45d995f478c01972b08ea681831a593531c279a
+README.zh.md: f2a7906bddc3559d96585c8474a0a102d74cf44c

package/README.md

@@ -2,26 +2,17 @@
 
 English | [中文](README.zh.md)
 
-Edit a DeepSeek Harness (`dsh`) custom mode: system prompt, base mode, and plugin switches. Keep more than one assistant. 自定义模式、系统提示词、提示词编辑。
+Edit your DeepSeek Harness (`dsh`) assistants' system prompts, base modes and plugin switches. Keep separate assistants for different tasks.
 
 <p align="center">
 <img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/header.png" width="820" alt="dsh-custom-mode">
 </p>
 
-<table align="center">
-<tr>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/05-assistant-manager.png" width="360" alt="Assistants"></td>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/03-system-prompt.png" width="360" alt="System prompt"></td>
-</tr>
-<tr>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/01-mode-switch.png" width="360" alt="Base mode"></td>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/02-plugin-switches.png" width="360" alt="Plugin switches"></td>
-</tr>
-</table>
+[Install](#install-and-make-the-first-request) · [First use](#verify-the-whole-path) · [Updates](#plugin-updates) · [Screenshots](#screenshots) · [Compatibility](#compatibility-and-versioning) · [Help](#help-and-docs)
 
 ## Install and make the first request
 
-These instructions are for version `2.2.6`. Check the [exact-host results and acceptance limits](docs/CURRENT_COMPATIBILITY.md) before installing or updating.
+These instructions describe version `2.3.0`. Confirm that the exact version is available in [Releases](https://github.com/BOWLUNA/dsh-custom-mode/releases), and check the [exact-host results and acceptance limits](docs/CURRENT_COMPATIBILITY.md) before installing or updating.
 
 Start with an installed [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) and a model configured through its own interface. Check `dsh --version` against the exact hosts in the compatibility record. This package does not install the host or configure model credentials.
 
@@ -31,14 +22,14 @@ Pin the plugin version; a bare name can resolve an older build during pnpm's rel
 
 ```sh
 dsh --version
-dsh plugin --profile web add dsh-custom-mode@2.2.6
+dsh plugin --profile web add dsh-custom-mode@2.3.0
 ```
 
 Restart the process that serves this Web profile using its usual launcher. For a local CLI instance, the existing launch form is `dsh web --port 3081 --no-open`; use a free port and open the URL printed by that process. Restart only that instance. Installing a bundle does not refresh an already running host.
 
 ### Desktop and Windows
 
-In the desktop app, use its **Plugins** page to install `dsh-custom-mode@2.2.6`, then restart the app. This project's scripts deliberately refuse `--profile desktop`; do not modify its profile files by hand. Windows/Electron acceptance remains separate from Web acceptance; see the compatibility record.
+In the desktop app, use its **Plugins** page to install `dsh-custom-mode@2.3.0`, then restart the app. This project's scripts deliberately refuse `--profile desktop`; do not modify its profile files by hand. Windows/Electron acceptance remains separate from Web acceptance; see the compatibility record.
 
 On Windows, the npm installation above can use the host's `dsh` command from PowerShell. Only the optional clone installer requires Git Bash (plus Node.js and npm). If `dsh` is not on PATH, use the host's supplied launcher, or replace `dsh` with `node "<host-install>/node_modules/@deepseek-ai/dsh/lib/bin.js"`. Do not point that path at this plugin's directory unless the host is actually installed there.
 
@@ -50,6 +41,23 @@ On Windows, the npm installation above can use the host's `dsh` command from Pow
 4. Start a **new session**, open its mode/assistant selector, and explicitly choose that named assistant. Send `Readiness check.` through a model already configured in DSH.
 5. Success means the assistant is selectable without a broken-preset warning and returns the expected readiness reply without a prompt-assembly error. Restore your intended prompt after the check. If it fails, use the [current recovery steps](docs/TROUBLESHOOTING.md#current-recovery-steps).
 
+## Screenshots
+
+Captured from plugin `2.2.6` in an isolated DSH Web instance with synthetic assistants. These images show the editor, not the new update controls. [Capture sources and limits](docs/images/README.md).
+
+<table align="center">
+<tr>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/05-assistant-manager.png" width="360" alt="Create an assistant"><br>Create an assistant</td>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/03-system-prompt.png" width="360" alt="System prompt editor"><br>Edit its system prompt</td>
+</tr>
+<tr>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/01-mode-switch.png" width="360" alt="Base-mode choices"><br>Choose a base mode</td>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/02-plugin-switches.png" width="360" alt="Native plugin switches"><br>Adjust plugin switches</td>
+</tr>
+</table>
+
+[View the new-session assistant selector](https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/04-preset-picker.png).
+
 ## What each choice means
 
 The assistant selected on the settings page is the **one being edited**. Selecting or creating it does not change the assistant used by a new session. On first activation, the plugin may fill a missing default with the built-in `custom` assistant; an existing default is preserved. A newly created Writing assistant still needs to be chosen in the session selector.
@@ -64,11 +72,21 @@ Choose the creation starting settings first; a new assistant starts from Standar
 
 The prompt is stored in `prompt.md` and reread when the next model step is assembled. History and file import load a draft; saving writes it. A stale save is refused when the underlying file changed. `custom_prompt` asks for approval before it writes the same file. Turning off the Identity/persona row also turns off this prompt's injection.
 
+<a id="plugin-updates"></a>
+
 ## Upgrade, clone development, and removal
 
-The fixed-version npm path above is the normal installation path. Release assets, once published, also include `dsh-custom-mode-2.2.6.tgz`, a preset-only import archive, and `SHA256SUMS`. Verify a downloaded archive's hash before installing it; the preset-only archive does not include the settings page.
+The page header shows the **running plugin version**. With DSH `0.2.2-alpha.2`'s native update capability, select **Check for updates** to ask the host for eligible versions. A recommended version offers **Update in Plugins**, which opens the official plugin details for its own confirmation, progress and result. The custom page does not install a package itself. Save pending drafts and resolve activation/refresh warnings before leaving the page.
+
+On `0.2.1-rc.2`, `0.2.1-rc.4`, `0.2.0-rc.2` and `0.1.7-rc.2`, the native version-query API is absent: use **Open plugin details** or **Update guide** and the manual fixed-version path below. File, tarball and source-linked installations remain managed by their original source; checking does not silently convert them to npm. Permission denial, network failure, filtered versions or a partial result do not mean the plugin is current. A separate **Installed on disk** version does not prove that the running code has changed.
 
-For a clone, `./install.sh --profile web` keeps the source-linked development workflow. It requires Node.js, npm, Bash and the host CLI. Before changing the profile, it prepares the new package and an archive of the **actual installed old package** with offline `npm pack --ignore-scripts`. It preserves existing prompt, metadata and composition, and refreshes managed code only after installation checks. A failed replacement reinstalls the local old archive and restores refreshed code. Files newly created by the attempt are retained at printed recovery paths when rolled back. An unverified rollback exits with an error and keeps the archive and logs at the printed transaction path. A broken old install that cannot be archived is rejected before replacement. The script is not a substitute for the desktop plugin manager.
+When you update from 2.2.6 through a Web host's native Plugins page, or a failed update restores 2.2.6, restart that host once, then check the running version and assistant availability. Hot-stopping the old version can leave assistant registrations behind.
+
+For a manual registry upgrade, use the fixed-version npm command above with a published version, then restart the host and verify the running version. [GitHub Releases](https://github.com/BOWLUNA/dsh-custom-mode/releases) also provides the plugin `.tgz`, a preset-only import archive and `SHA256SUMS`. Verify downloaded hashes; the preset-only archive does not include the settings page.
+
+That command targets Web/CLI only. Desktop users must use an update path actually offered by their app. If it has none, do not substitute the Web CLI command or edit the desktop profile files.
+
+For source development, follow [the isolated setup](CONTRIBUTING.md#isolated-development). The optional `./install.sh --profile web` keeps the source-linked workflow and preserves existing prompt, metadata and composition. Its local package/code rollback and recovery paths are explained in [package and release assets](docs/PUBLISHING.md#package-and-release-assets).
 
 `./uninstall.sh` removes the plugin but keeps assistant data. `--purge` explicitly deletes the managed assistant directories and their prompts; keep your own backup before using it.
 
@@ -84,14 +102,17 @@ Release requires the compatibility and browser workflows. The unit runner, real
 
 The documented catalogs use different discovery and approval rules. Their 2026-10-09 listing results are historical, so a package may not be searchable in every market today. The fixed-version installation above remains the direct path. [Market interfaces and limits](docs/MARKETPLACES.md) explains the read-only adapter; it never executes catalog-provided shell commands or submits a listing.
 
-## Docs
+## Help and docs
 
 - [Troubleshooting](docs/TROUBLESHOOTING.md) — current recovery first, historical incidents below.
+- [Report a bug](https://github.com/BOWLUNA/dsh-custom-mode/issues/new?template=bug_report.yml) or [suggest a feature](https://github.com/BOWLUNA/dsh-custom-mode/issues/new?template=feature_request.yml).
+- [Security reports](SECURITY.md) — request a private channel without posting vulnerability details.
+- [Releases](https://github.com/BOWLUNA/dsh-custom-mode/releases) and [changelog](CHANGELOG.md).
+- [Contributing](CONTRIBUTING.md) — isolated development and checks.
 - [Architecture](docs/ARCHITECTURE.md) — prompt reading and host coupling points.
 - [Publishing](docs/PUBLISHING.md) — existing gated release path and read-back evidence.
-- [Contributing](CONTRIBUTING.md) — isolated development and checks.
 - [AGENTS.md](AGENTS.md) — repository instructions for agents.
 
 ## License
 
-MIT
+[MIT](LICENSE)

package/README.zh.md

@@ -2,26 +2,17 @@
 
 [English](README.md) | 中文
 
-在 DeepSeek Harness（`dsh`）里改自定义模式的系统提示词、基础模式和插件开关。可以有多个助手。custom mode、system prompt、prompt editor。
+在 DeepSeek Harness（`dsh`）里编辑助手的系统提示词、基础模式和插件开关，为不同任务保留独立助手。
 
 <p align="center">
 <img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/header.png" width="820" alt="dsh-custom-mode">
 </p>
 
-<table align="center">
-<tr>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/05-assistant-manager.png" width="360" alt="助手"></td>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/03-system-prompt.png" width="360" alt="系统提示词"></td>
-</tr>
-<tr>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/01-mode-switch.png" width="360" alt="基础模式"></td>
-<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/02-plugin-switches.png" width="360" alt="插件开关"></td>
-</tr>
-</table>
+[安装](#安装并完成首次请求) · [首次使用](#验证完整路径) · [更新](#plugin-updates) · [截图](#使用截图) · [兼容](#兼容与版本) · [求助](#帮助与文档)
 
 ## 安装并完成首次请求
 
-本说明适用于版本 `2.2.6`。安装或更新前，先核对[精确宿主结果与验收边界](docs/CURRENT_COMPATIBILITY.zh.md)。
+本说明描述版本 `2.3.0`。安装或更新前，先确认[发布版本](https://github.com/BOWLUNA/dsh-custom-mode/releases)中已有该精确版本，并核对[精确宿主结果与验收边界](docs/CURRENT_COMPATIBILITY.zh.md)。
 
 先安装 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)，并在宿主自己的界面中配置可用模型。用 `dsh --version` 对照兼容记录中的精确宿主版本。本插件不安装宿主，也不配置模型凭据。
 
@@ -31,14 +22,14 @@
 
 ```sh
 dsh --version
-dsh plugin --profile web add dsh-custom-mode@2.2.6
+dsh plugin --profile web add dsh-custom-mode@2.3.0
 ```
 
 用原有启动方式重启为该 Web profile 提供服务的进程。本地 CLI 的既有启动形式是 `dsh web --port 3081 --no-open`；选择空闲端口，打开该进程打印的地址。只重启这个实例。安装 bundle 不会刷新已经运行的宿主。
 
 ### 桌面端与 Windows
 
-在桌面应用的 **Plugins（插件）** 页安装 `dsh-custom-mode@2.2.6`，然后重启应用。本项目脚本明确拒绝 `--profile desktop`，不要手改它的 profile 文件。Windows/Electron 与 Web 分别验收，详见兼容记录。
+在桌面应用的 **Plugins（插件）** 页安装 `dsh-custom-mode@2.3.0`，然后重启应用。本项目脚本明确拒绝 `--profile desktop`，不要手改它的 profile 文件。Windows/Electron 与 Web 分别验收，详见兼容记录。
 
 Windows 上可在 PowerShell 中用宿主提供的 `dsh` 执行上面的 npm 安装命令。只有可选的 clone 安装脚本需要 Git Bash，另需 Node.js 和 npm。PATH 中没有 `dsh` 时，使用宿主自带启动器，或将 `dsh` 替换为 `node "<host-install>/node_modules/@deepseek-ai/dsh/lib/bin.js"`。除非宿主确实装在本插件目录中，否则不要把这个路径指向插件目录。
 
@@ -50,6 +41,23 @@ Windows 上可在 PowerShell 中用宿主提供的 `dsh` 执行上面的 npm 安
 4. 新建一个**会话**，打开该会话的模式/助手选择器，明确选择刚才命名的助手。通过 DSH 中已经配置的模型发送 `就绪检查。`
 5. 成功意味着助手可以选择、没有预设损坏告警，并返回预期就绪回复且不出现提示词组装错误。检查后恢复自己的提示词。失败时先看[当前自救步骤](docs/TROUBLESHOOTING.zh.md#当前自救步骤)。
 
+## 使用截图
+
+截图来自隔离DSH Web实例中的插件 `2.2.6`，助手内容均为合成数据。它们展示编辑页，不展示新增的更新控件。[截图来源与边界](docs/images/README.md)。
+
+<table align="center">
+<tr>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/05-assistant-manager.png" width="360" alt="新建助手"><br>新建助手</td>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/03-system-prompt.png" width="360" alt="系统提示词编辑区"><br>编辑系统提示词</td>
+</tr>
+<tr>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/01-mode-switch.png" width="360" alt="基础模式选择"><br>选择基础模式</td>
+<td align="center"><img src="https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/02-plugin-switches.png" width="360" alt="原生插件开关"><br>调整插件开关</td>
+</tr>
+</table>
+
+[查看新会话的助手选择器](https://raw.githubusercontent.com/BOWLUNA/dsh-custom-mode/main/docs/images/04-preset-picker.png)。
+
 ## 各项选择分别做什么
 
 设置页选中的助手是**正在编辑的对象**。选中或新建它不会改变新会话使用的助手。首次激活时，插件可能把缺失的默认值补为内置 `custom`；已经存在的默认值保持不变。新建写作助手后，仍需在会话选择器中选它。
@@ -64,11 +72,21 @@ Windows 上可在 PowerShell 中用宿主提供的 `dsh` 执行上面的 npm 安
 
 提示词保存在 `prompt.md`，下一步组装模型输入时会重读。历史与文件导入先载入草稿，保存才落盘。底层文件已变化时，过期保存会被拒绝。`custom_prompt` 写同一个文件前需要批准。关闭身份/persona 行也会关闭该提示词的注入。
 
+<a id="plugin-updates"></a>
+
 ## 升级、clone 开发与卸载
 
-上面的固定版本 npm 命令是普通安装入口。发布完成后，Release 还会提供 `dsh-custom-mode-2.2.6.tgz`、仅供预设导入的归档和 `SHA256SUMS`。安装下载的归档前先核对散列；仅供预设导入的归档没有设置页。
+页首显示**运行中的插件版本**。宿主提供DSH `0.2.2-alpha.2`的原生更新能力时，点「**检查更新**」让宿主查询可用版本。有推荐版本后，「**在插件管理中更新**」会打开官方插件详情，由它承接确认、进度与结果；自定义页不直接安装包。离开前先保存待处理草稿，并处理生效/读取告警。
+
+`0.2.1-rc.2`、`0.2.1-rc.4`、`0.2.0-rc.2`和`0.1.7-rc.2`没有原生版本查询API，可用「**打开插件详情**」或「**更新指引**」，再按下方固定版本方式手动更新。文件、tarball与源码链接安装继续由原来源管理，不会因检查更新而悄悄转成npm。权限拒绝、网络失败、版本被筛除或结果不完整都不代表已是最新。「**磁盘安装版本**」与运行版本不同，不能据此认定新代码已运行。
 
-clone 后可用 `./install.sh --profile web` 保留源码链接的开发方式，需要 Node.js、npm、Bash 和宿主 CLI。它在改动 profile 前，通过离线 `npm pack --ignore-scripts` 准备新包，并归档**实际已安装的旧包**。已有提示词、元数据与组成保持原样，安装自检通过后才刷新受管代码。替换失败时，用本地旧归档重新安装并恢复已刷新的代码；本次新建文件在回滚时留有恢复副本，路径会打印。回滚未验证则报错，并在打印的事务目录保留旧包和日志。旧安装损坏、无法归档时，脚本在替换前中止。这个脚本不能代替桌面应用的插件管理器。
+通过Web宿主的原生插件页从2.2.6更新，或更新失败后恢复到2.2.6时，请重启该宿主一次，再核对运行版本与助手是否可用。旧版热停止可能留下助手注册记录。
+
+手动更新注册表安装时，使用上面的固定版本npm命令并选择已发布版本，再重启宿主、核对运行版本。[GitHub Releases](https://github.com/BOWLUNA/dsh-custom-mode/releases)也提供插件`.tgz`、仅供预设导入的归档和`SHA256SUMS`。安装下载的归档前先核对散列；仅供预设导入的归档没有设置页。
+
+该命令仅适用于Web/CLI。桌面用户必须使用应用实际提供的更新路径；应用没有更新入口时，不要改用Web CLI命令或手改桌面profile文件。
+
+源码开发按[隔离准备步骤](CONTRIBUTING.zh.md#隔离开发)进行。可选的`./install.sh --profile web`保留源码链接方式，已有提示词、元数据和组成不被覆盖。本地包/代码回滚与恢复路径见[包与发布资产](docs/PUBLISHING.zh.md#包与发布资产)。
 
 `./uninstall.sh` 移除插件但保留助手数据。`--purge` 明确删除受管助手目录及提示词，使用前请自行备份。
 
@@ -84,14 +102,17 @@ clone 后可用 `./install.sh --profile web` 保留源码链接的开发方式
 
 各目录的发现与审核规则不同。2026-10-09 的上架结果属于历史记录，不能据此保证今天每个市场都能搜索到。上面的固定版本安装仍是直接入口。[市场接口与限制](docs/MARKETPLACES.zh.md) 说明只读适配器；它不执行目录提供的 shell 命令，也不提交收录。
 
-## 文档
+## 帮助与文档
 
 - [故障排查](docs/TROUBLESHOOTING.zh.md) — 当前自救在前，历史故障在后。
+- [报告故障](https://github.com/BOWLUNA/dsh-custom-mode/issues/new?template=bug_report.yml)或[建议功能](https://github.com/BOWLUNA/dsh-custom-mode/issues/new?template=feature_request.yml)。
+- [安全报告](SECURITY.zh.md) — 仅公开请求私下渠道，不发布漏洞细节。
+- [发布版本](https://github.com/BOWLUNA/dsh-custom-mode/releases)与[变更记录](CHANGELOG.zh.md)。
+- [贡献指南](CONTRIBUTING.zh.md) — 隔离开发与检查。
 - [架构](docs/ARCHITECTURE.zh.md) — 提示词读取与宿主耦合点。
 - [发布](docs/PUBLISHING.zh.md) — 既有发布门禁与读回证据。
-- [贡献指南](CONTRIBUTING.zh.md) — 隔离开发与检查。
 - [AGENTS.md](AGENTS.md) — 仓库代理约定。
 
 ## 许可证
 
-MIT
+[MIT](LICENSE)

package/client.js

@@ -58,11 +58,49 @@ try {
        * truth, checked for key parity by test/locales.test.mjs).
        */
       const ZH = {
+        "update.heading": "插件更新",
+        "update.orphanHint": "以下助手已不在当前列表，但本页仍保留其未保存草稿，因此暂不能离页。",
+        "update.orphanName": "{name}（ID：{id}）",
+        "update.orphanView": "查看并保留草稿",
+        "update.orphanHide": "收起草稿",
+        "update.orphanCopy": "下方包含完整提示词、名称、描述、模式和覆盖项，可选中复制到本地文件保留。放弃仅移除本页内存草稿，不修改磁盘文件。",
+        "update.orphanDiscard": "放弃此草稿…",
+        "update.orphanConfirm": "确认放弃“{name}”（ID：{id}）的未保存草稿？请先复制保留需要的内容。放弃后无法从本页恢复；磁盘文件不会改动。",
+        "update.orphanAcknowledge": "我已保留需要的内容，确认放弃后无法从本页恢复。",
+        "update.orphanChanged": "草稿或助手列表已变化，未放弃任何内容。请重新查看并确认。",
+        "update.orphanDiscarded": "已放弃所确认的本页草稿；磁盘文件未改动。",
+        "update.running": "运行中的插件版本：{version}",
+        "update.unknown": "未知",
+        "update.check": "检查更新",
+        "update.checking": "正在检查…",
+        "update.inPlugins": "在插件管理中更新",
+        "update.details": "打开插件详情",
+        "update.guide": "更新指引",
+        "update.idle": "仅在点击检查时查询宿主配置的包仓库；不会自动安装。",
+        "update.unavailable": "当前连接未提供原生版本检查能力。可打开插件详情或查看更新指引。",
+        "update.permission": "此操作缺少宿主授权，或权限服务暂不可用。",
+        "update.updatePermission": "可以查看版本，但当前连接没有更新权限。",
+        "update.available": "可用更新：{version}。安装由官方插件管理处理。",
+        "update.current": "此次检查未返回更高版本。",
+        "update.filtered": "发现较新版本，但没有符合官方默认条件的稳定兼容版本。",
+        "update.partial": "结果未覆盖全部新版本，暂未找到可推荐的更新。",
+        "update.omitted": "另有 {count} 个较新版本未列出。",
+        "update.disk": "磁盘安装版本：{version}；它可能尚未在运行中加载。",
+        "update.managed": "此安装无法使用原生包仓库更新，请通过原来源或插件详情管理；不会自动切换来源。",
+        "update.notFound": "宿主插件列表中没有找到此插件，无法确认更新。",
+        "update.network": "宿主查询包仓库失败，请稍后重试；尚不能确认更新状态。",
+        "update.refused": "宿主未提供可用的版本列表，尚不能确认更新状态。",
+        "update.failed": "未能完成更新检查，请重试或打开插件详情查看。",
+        "update.finishOperation": "请等待当前操作完成后再离开此页。",
+        "update.finishRecovery": "请先完成重试读取或重试生效，再离开此页。",
+        "update.saveDrafts": "请先保存或主动放弃所有助手草稿及未提交的新建输入，再离开此页。",
+        "update.navigationFailed": "未能打开插件详情；草稿已保留，可稍后重试。",
         "create.nextStep": "创建后可在上方继续编辑并保存；使用时，在新会话的模式菜单选择它。",
         "btn.retryRead": "重试读取",
         "btn.retrySync": "重试生效",
         "api.savedButSyncFailed": "文件已保存，但这些助手尚未生效：{ids}。请点「重试生效」，无需重复原操作。",
         "api.syncFailed": "这些助手仍未生效：{ids}。请重试；仍失败时查看宿主日志。",
+        "api.presetRegistrationSyncFailed": "尚未确认已保存的助手配置在宿主注册表中生效，请处理已有告警或查看宿主日志。",
         "api.synchronized": "配置已生效。新会话请从模式菜单选择助手。",
         "api.recoveryRequired": "助手文件需要恢复：{path}。请保留目录中的备份，并查看宿主日志中的恢复说明。",
         "msg.completedReadFailed": "{result} 页面刷新失败。请点「重试读取」，无需重复原操作。",
@@ -188,6 +226,8 @@ try {
         "warn.approvalGateMissing": "当前版本没有审批事件。会话内改写提示词不会请求确认。",
         "warn.unresolvableRows": "有的行在本机无法启动，此模式不会出现在新会话菜单里。点「按本线修复」只关闭那些行。",
         "warn.presetBroken": "此模式无法启动，不会出现在新会话菜单里。点「按本线修复」。原因见下一行。",
+        "warn.presetRegistrationSyncFailed": "尚未确认这位助手已保存的配置在宿主注册表中生效。请先处理已有告警或查看宿主日志；无需重复保存。",
+        "warn.presetRegistrationRestartSuggested": "尚未确认这位助手已保存的配置在宿主注册表中生效。如刚更新或恢复插件，建议重启 DeepSeek Harness 后重新检查；无需重复保存。",
         "warn.badPromptVariable": "提示词里有不可用的变量。改掉后再保存，否则此模式的请求会失败。",
         "warn.duplicateRowIds": "组成文件里有重复的行 id。开关只作用于第一处。",
         "warn.predicateFailed": "有一行的平台条件无法计算，已按关闭处理。",
@@ -320,11 +360,49 @@ try {
       }
 
       const EN = {
+        "update.heading": "Plugin updates",
+        "update.orphanHint": "These assistants left the current list, but this page still holds their unsaved drafts. Resolve them before leaving.",
+        "update.orphanName": "{name} (ID: {id})",
+        "update.orphanView": "View and keep draft",
+        "update.orphanHide": "Hide draft",
+        "update.orphanCopy": "The text below includes the full prompt, name, description, mode and overrides. Select and copy it to a local file to keep it. Discarding only removes this page's in-memory draft; files on disk are unchanged.",
+        "update.orphanDiscard": "Discard this draft…",
+        "update.orphanConfirm": "Discard the unsaved draft for \"{name}\" (ID: {id})? First copy any content you need to keep. This page cannot recover it after discarding; files on disk will remain unchanged.",
+        "update.orphanAcknowledge": "I have kept the content I need and understand this page cannot recover the discarded draft.",
+        "update.orphanChanged": "The draft or assistant list changed. Nothing was discarded. Review it again before confirming.",
+        "update.orphanDiscarded": "The confirmed draft was discarded from this page; files on disk are unchanged.",
+        "update.running": "Running plugin version: {version}",
+        "update.unknown": "unknown",
+        "update.check": "Check for updates",
+        "update.checking": "Checking…",
+        "update.inPlugins": "Update in Plugins",
+        "update.details": "Open plugin details",
+        "update.guide": "Update guide",
+        "update.idle": "Only a click checks the registries configured by the host; installation is never automatic.",
+        "update.unavailable": "This connection does not offer native version checks. Open plugin details or the update guide.",
+        "update.permission": "Host permission is missing for this action, or the access service is unavailable.",
+        "update.updatePermission": "You can view versions, but this connection does not have update permission.",
+        "update.available": "Update available: {version}. Official plugin management handles installation.",
+        "update.current": "This check returned no newer releases.",
+        "update.filtered": "Newer releases exist, but none meet the official default conditions for a stable compatible version.",
+        "update.partial": "The result omits some newer releases; no recommended update was found.",
+        "update.omitted": "{count} additional newer releases were omitted.",
+        "update.disk": "Installed on disk: {version}; this version may not be loaded in the running host yet.",
+        "update.managed": "Manage this installation through its original source or plugin details; it cannot use this native registry update path. The source will not be changed automatically.",
+        "update.notFound": "The host did not list this plugin, so its update status could not be determined.",
+        "update.network": "The host could not query the registry. Try again later; update status is unknown.",
+        "update.refused": "The host did not provide a usable version list; update status is unknown.",
+        "update.failed": "The update check could not finish. Retry or open plugin details.",
+        "update.finishOperation": "Wait for the current operation to finish before leaving this page.",
+        "update.finishRecovery": "Complete Retry refresh or Retry activation before leaving this page.",
+        "update.saveDrafts": "Save or explicitly discard all assistant drafts and unsubmitted new-assistant input before leaving this page.",
+        "update.navigationFailed": "Plugin details could not open. Your drafts are preserved; try again later.",
         "create.nextStep": "After creating, edit and save above. To use the assistant, choose it in the mode menu for a new session.",
         "btn.retryRead": "Retry refresh",
         "btn.retrySync": "Retry activation",
         "api.savedButSyncFailed": "Files are saved, but these assistants are not active yet: {ids}. Select Retry activation; you do not need to repeat the original action.",
         "api.syncFailed": "These assistants are still not active: {ids}. Retry, then check the host log if the problem continues.",
+        "api.presetRegistrationSyncFailed": "The saved assistant configuration has not been confirmed in the host registry. Address existing warnings or check the host log.",
         "api.synchronized": "Configuration is active. Choose an assistant in the mode menu for a new session.",
         "api.recoveryRequired": "Assistant files need recovery: {path}. Keep the backups in that directory and check the host log for recovery details.",
         "msg.completedReadFailed": "{result} The page could not refresh. Select Retry refresh; do not repeat the original action.",
@@ -453,6 +531,8 @@ try {
         "warn.approvalGateMissing": "This version has no approval event. In-session prompt edits are not confirmed.",
         "warn.unresolvableRows": "Some rows cannot start here, so this mode is absent from the new-session menu. Fix for this line turns off only those rows.",
         "warn.presetBroken": "This mode cannot start, so it will not appear for a new session. Use Fix for this line. The reason is on the next line.",
+        "warn.presetRegistrationSyncFailed": "This assistant's saved configuration has not been confirmed in the host registry. Address existing warnings or check the host log; you do not need to save again.",
+        "warn.presetRegistrationRestartSuggested": "This assistant's saved configuration has not been confirmed in the host registry. If the plugin was just updated or restored, consider restarting DeepSeek Harness, then check again; you do not need to save again.",
         "warn.badPromptVariable": "The prompt uses a variable that is not available. Fix it before saving.",
         "warn.duplicateRowIds": "A row id is repeated. A switch applies only to the first one.",
         "warn.predicateFailed": "A platform condition could not be evaluated. That row is treated as off.",
@@ -644,6 +724,47 @@ try {
        */
       let localeRef
 
+      const UPDATE_PACKAGE = "dsh-custom-mode"
+      let updateServices = { manager: null, navigation: null, list: false, versions: false, update: false, accessKnown: false, revision: 0 }
+      const updateListeners = new Set()
+      const publishUpdateServices = (patch) => {
+        updateServices = { ...updateServices, ...patch, revision: updateServices.revision + 1 }
+        for (const listener of updateListeners) listener()
+      }
+
+      /** Optional Cordis scopes own these reads; old hosts never block the editor. */
+      function mountUpdateServices(ctx) {
+        if (typeof ctx.inject !== "function") return
+        ctx.inject(["remote", "remote.pluginManager"], (scope) => {
+          const manager = scope.remote.pluginManager
+          if (manager === null || manager === undefined) return
+          publishUpdateServices({ manager, list: false, versions: false, update: false, accessKnown: false })
+          scope.effect(() => () => {
+            if (updateServices.manager === manager) publishUpdateServices({ manager: null, list: false, versions: false, update: false, accessKnown: false })
+          })
+          scope.inject(["remoteAccess"], (accessScope) => {
+            if (typeof accessScope.remoteAccess.whenAccess !== "function") return
+            if (updateServices.manager === manager) publishUpdateServices({ accessKnown: true })
+            for (const [key, action] of [["list", "listBundles"], ["versions", "listVersions"], ["update", "updateBundle"]]) {
+              if (typeof manager[action] !== "function") continue
+              accessScope.effect(() => accessScope.remoteAccess.whenAccess("pluginManager/" + action, () => {
+                if (updateServices.manager === manager) publishUpdateServices({ [key]: true })
+                return () => {
+                  if (updateServices.manager === manager) publishUpdateServices({ [key]: false })
+                }
+              }))
+            }
+          })
+        })
+        ctx.inject(["pluginNavigation"], (scope) => {
+          const navigation = scope.get("pluginNavigation")
+          publishUpdateServices({ navigation })
+          scope.effect(() => () => {
+            if (updateServices.navigation === navigation) publishUpdateServices({ navigation: null })
+          })
+        })
+      }
+
       /**
        * Plain-element stand-ins for the shell's atoms.
        *
@@ -847,6 +968,14 @@ try {
         ".cpfe-detail-value{min-width:0;overflow-wrap:anywhere}",
         ".cpfe-sec-head{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:8px}",
         ".cpfe-sec-head .cpfe-actions{margin-top:0}",
+        ".cpfe-update{display:flex;align-items:center;justify-content:space-between;gap:12px;flex-wrap:wrap;padding:16px 0;border-bottom:1px solid var(--dsw-alias-border-l1);margin-bottom:16px}",
+        ".cpfe-update-meta{flex:1 1 220px;min-width:0}",
+        ".cpfe-update-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap;min-width:0;max-width:100%}",
+        // The shared atoms expose no Link or anchor-shaped Button. Keep a real anchor;
+        // use official settings UI typography/link tokens, not Markdown prose styles.
+        ".cpfe-update-guide{max-width:100%;overflow-wrap:anywhere;font:var(--dsw-font-s-strong-14);color:var(--dsw-alias-link);text-decoration:none}",
+        "@media (hover:hover){.cpfe-update-guide:hover{text-decoration:underline}}",
+        ".cpfe-update-note{overflow-wrap:anywhere}",
         ".cpfe-newinput{box-sizing:border-box;flex:1 1 200px;min-width:0;max-width:100%}",
         // 单列、行高统一（对齐官方插件页的形态）；之前的自适应多列网格会让行高参差不齐。
         // ★ 对齐官方设置行（实测 0.1.7-rc.2 的行：padding 16px 0、无背景、无圆角，行间只有一条 1px
@@ -902,11 +1031,15 @@ try {
         ".cpfe-warn svg{flex:0 0 auto;margin-top:2px}",
       ].join("")
 
-      /** Apply the page stylesheet once, keyed so a re-mount never duplicates it. */
+      /** Keep one stylesheet, replacing stale content when an HMR bundle arrives. */
       function ensureStyles() {
         if (typeof document === "undefined") return
         const tagId = "dsh-custom-mode/system-prompt"
-        if (document.querySelector('style[data-plugin-css="' + tagId + '"]') !== null) return
+        const existing = document.querySelector('style[data-plugin-css="' + tagId + '"]')
+        if (existing !== null) {
+          if (existing.textContent !== CSS) existing.textContent = CSS
+          return
+        }
         const tag = document.createElement("style")
         tag.dataset.plugin = "dsh-custom-mode"
         tag.dataset.pluginCss = tagId
@@ -1254,20 +1387,42 @@ try {
           return t(fallbackKey)
         }
 
-        const [list, setList] = react.useState(null)
+        const [list, setListState] = react.useState(null)
+        const heldRoster = react.useRef(list)
+        const setList = (value) => { heldRoster.current = value; setListState(value) }
         const [selected, setSelected] = react.useState("")
         /** id → { payload, saved, value }: loaded state, baseline and live draft. */
-        const [entries, setEntries] = react.useState({})
+        const [entries, setEntriesState] = react.useState({})
+        const heldEntries = react.useRef(entries)
+        const setEntries = (next) => {
+          heldEntries.current = typeof next === "function" ? next(heldEntries.current) : next
+          setEntriesState(heldEntries.current)
+        }
         const [status, setStatus] = react.useState("")
         const [failed, setFailed] = react.useState(false)
         const [busy, setBusy] = react.useState(false)
         const [pending, setPending] = react.useState("")
-        const [syncNeeded, setSyncNeeded] = react.useState(false)
-        const [refreshNeeded, setRefreshNeeded] = react.useState(null)
+        const [syncNeeded, setSyncNeededState] = react.useState(false)
+        const [refreshNeeded, setRefreshNeededState] = react.useState(null)
+        const navigationState = react.useRef({ syncNeeded: false, refreshNeeded: null, newName: "" })
+        const setSyncNeeded = (value) => { navigationState.current.syncNeeded = value; setSyncNeededState(value) }
+        const setRefreshNeeded = (value) => { navigationState.current.refreshNeeded = value; setRefreshNeededState(value) }
         // A ref closes the interval before React renders disabled controls. Only the
         // owning operation may apply a response or release the busy state.
         const operation = react.useRef({ alive: true, current: null })
-        const [newName, setNewName] = react.useState("")
+        const [newName, setNewNameState] = react.useState("")
+        const setNewName = (value) => { navigationState.current.newName = value; setNewNameState(value) }
+        const [runtimeVersion, setRuntimeVersion] = react.useState("")
+        const [updateResult, setUpdateResult] = react.useState(null)
+        const [updateNotice, setUpdateNotice] = react.useState("")
+        const [updateChecking, setUpdateChecking] = react.useState(false)
+        const [, setUpdateRevision] = react.useState(0)
+        const updateOperation = react.useRef({ alive: true, current: null })
+        const [orphanView, setOrphanView] = react.useState("")
+        const [orphanDialog, setOrphanDialog] = react.useState(null)
+        const [orphanAcknowledged, setOrphanAcknowledged] = react.useState(false)
+        const orphanConfirmation = react.useRef(null)
+        const orphanAcknowledgement = react.useRef(false)
         const [postureChoices, setPostureChoices] = react.useState([])
         const [posture, setPosture] = react.useState("develop")
         const [deleteOpen, setDeleteOpen] = react.useState(false)
@@ -1437,6 +1592,7 @@ try {
           const assistants = Array.isArray(result.assistants) ? result.assistants : []
           const choices = Array.isArray(result.postures) ? result.postures.filter((item) => item !== null && typeof item === "object" && typeof item.id === "string") : []
           setListFailed(false)
+          if (typeof result.version === "string" && result.version !== "") setRuntimeVersion(result.version)
           setList(assistants)
           setPostureChoices(choices)
           setPosture((current) => (choices.some((item) => item.id === current) ? current : choices.length > 0 ? choices[0].id : "develop"))
@@ -1450,7 +1606,8 @@ try {
                   : ""
           setSelected(wanted)
           if (wanted === "") {
-            setEntries({})
+            // An empty remote roster does not discard the only in-memory copy of another draft.
+            setEntries((previous) => Object.fromEntries(Object.entries(previous).filter(([, held]) => !sameDraft(held.value, held.saved))))
             return
           }
           await open(wanted, { force: true, discard: options !== null && typeof options === "object" && options.discard === true }, token)
@@ -1466,6 +1623,7 @@ try {
           const result = await fetchList()
           if (!ownsOperation(token)) return
           if (result !== null && result !== undefined && result.ok === true) {
+            if (typeof result.version === "string" && result.version !== "") setRuntimeVersion(result.version)
             setList(Array.isArray(result.assistants) ? result.assistants : [])
           } else throw new Error(apiText(result, "msg.readFailed"))
         }
@@ -1494,6 +1652,149 @@ try {
           }
         }, [])
 
+        react.useEffect(() => {
+          updateOperation.current.alive = true
+          const changed = () => {
+            updateOperation.current.current = null
+            setUpdateChecking(false)
+            setUpdateResult(null)
+            setUpdateNotice("")
+            setUpdateRevision((value) => value + 1)
+          }
+          updateListeners.add(changed)
+          return () => {
+            updateListeners.delete(changed)
+            updateOperation.current.alive = false
+            updateOperation.current.current = null
+          }
+        }, [])
+
+        const hasNativeUpdates = (services) => typeof services.manager?.listBundles === "function" &&
+          typeof services.manager?.listVersions === "function" && typeof services.manager?.updateBundle === "function"
+        const ownsUpdateCheck = (token, services) => updateOperation.current.alive &&
+          updateOperation.current.current === token && updateServices.revision === services.revision
+        const checkUpdates = async () => {
+          if (!updateOperation.current.alive || operation.current.current !== null || updateOperation.current.current !== null) return
+          const services = updateServices
+          if (!hasNativeUpdates(services) || !services.list || !services.versions) return
+          const token = {}
+          updateOperation.current.current = token
+          setUpdateChecking(true)
+          setUpdateResult(null)
+          setUpdateNotice("")
+          const show = (key, details) => setUpdateResult({ key, ...details, revision: services.revision })
+          try {
+            const inventory = await services.manager.listBundles()
+            if (!ownsUpdateCheck(token, services)) return
+            if (inventory?.ok !== true || !Array.isArray(inventory.value)) throw new Error("inventory")
+            const bundle = inventory.value.find((item) => item?.name === UPDATE_PACKAGE)
+            if (bundle === undefined) { show("update.notFound"); return }
+            if (bundle.updatable !== true || bundle.installed !== true || bundle.availability !== "profile" ||
+                bundle.official !== false || bundle.readOnlyReason !== undefined || typeof bundle.source !== "string" ||
+                typeof bundle.version !== "string" || bundle.version === "") {
+              show("update.managed", { installed: bundle.version }); return
+            }
+            const answer = await services.manager.listVersions(UPDATE_PACKAGE, {})
+            if (!ownsUpdateCheck(token, services)) return
+            if (answer?.ok !== true || answer.value === null || typeof answer.value !== "object") throw new Error("versions")
+            const listing = answer.value
+            if (listing.status === "refused") {
+              show(listing.problem === "network" ? "update.network" : listing.problem === "not-updatable" ? "update.managed" : "update.refused")
+              return
+            }
+            if (listing.status !== "listed" || typeof listing.installed !== "string" || listing.installed !== bundle.version ||
+                !(listing.registry === null || typeof listing.registry === "string") || !Array.isArray(listing.attempts) ||
+                !Number.isInteger(listing.omitted) || listing.omitted < 0 || !Array.isArray(listing.versions) ||
+                !listing.versions.every((item) => item !== null && typeof item === "object" && typeof item.version === "string" &&
+                  item.version !== "" && typeof item.bundle === "boolean" && typeof item.prerelease === "boolean" && Array.isArray(item.tags))) {
+              throw new Error("incomplete listing")
+            }
+            // Match the official default candidate and trust the Host's semver ordering.
+            const candidate = listing.versions.find((item) => item.bundle && item.incompatible === undefined && item.deprecated === undefined && !item.prerelease)
+            show(candidate ? "update.available" : listing.omitted > 0 ? "update.partial" : listing.versions.length > 0 ? "update.filtered" : "update.current", {
+              candidate: candidate?.version, installed: listing.installed, omitted: listing.omitted,
+            })
+          } catch {
+            if (ownsUpdateCheck(token, services)) show("update.failed")
+          } finally {
+            if (ownsUpdateCheck(token, services)) {
+              updateOperation.current.current = null
+              setUpdateChecking(false)
+            }
+          }
+        }
+
+        /** Latest refs also guard a click before React commits the last keystroke. */
+        const updateNavigationBlock = () => {
+          if (operation.current.current !== null || busy || updateOperation.current.current !== null) return "update.finishOperation"
+          if (navigationState.current.syncNeeded || navigationState.current.refreshNeeded !== null) return "update.finishRecovery"
+          if (navigationState.current.newName !== "" || Object.values(heldEntries.current).some((held) => !sameDraft(held.value, held.saved))) return "update.saveDrafts"
+          return ""
+        }
+        const guardUpdateNavigation = () => {
+          if (!updateOperation.current.alive) return false
+          const block = updateNavigationBlock()
+          if (block !== "") { setUpdateNotice(block); return false }
+          return true
+        }
+        const openPluginDetails = () => {
+          if (!guardUpdateNavigation()) return
+          const services = updateServices
+          if (((hasNativeUpdates(services) || services.accessKnown) && !services.list) || typeof services.navigation?.openBundle !== "function" ||
+              (updateResult?.candidate && (updateResult.revision !== services.revision || !services.update))) {
+            setUpdateNotice("update.permission"); return
+          }
+          try { services.navigation.openBundle(UPDATE_PACKAGE) }
+          catch { setUpdateNotice("update.navigationFailed") }
+        }
+
+        const orphanDrafts = () => {
+          if (!Array.isArray(heldRoster.current)) return []
+          const visible = new Set(heldRoster.current.map((item) => item.id))
+          return Object.entries(heldEntries.current).filter(([id, held]) => !visible.has(id) && !sameDraft(held.value, held.saved))
+        }
+        const closeOrphanConfirmation = () => {
+          orphanConfirmation.current = null
+          orphanAcknowledgement.current = false
+          setOrphanAcknowledged(false)
+          setOrphanDialog(null)
+        }
+        const orphanActionBlock = () => operation.current.current !== null || busy || updateOperation.current.current !== null
+          ? "update.finishOperation"
+          : navigationState.current.syncNeeded || navigationState.current.refreshNeeded !== null ? "update.finishRecovery" : ""
+        const orphanSnapshotCurrent = (snapshot) => heldEntries.current === snapshot.entries && heldRoster.current === snapshot.roster &&
+          navigationState.current.newName === snapshot.newName && orphanDrafts().some(([id]) => id === snapshot.id)
+        const discardOrphan = (snapshot) => {
+          if (!updateOperation.current.alive || orphanConfirmation.current !== snapshot || !orphanAcknowledgement.current) return
+          const blocked = orphanActionBlock()
+          if (blocked || !orphanSnapshotCurrent(snapshot)) {
+            closeOrphanConfirmation()
+            setUpdateNotice(blocked || "update.orphanChanged")
+            return
+          }
+          setEntries((previous) => { const next = { ...previous }; delete next[snapshot.id]; return next })
+          closeOrphanConfirmation()
+          setOrphanView("")
+          setUpdateNotice("update.orphanDiscarded")
+        }
+        const askDiscardOrphan = (id, shown) => {
+          if (!updateOperation.current.alive) return
+          const snapshot = { ...shown, id }
+          const blocked = orphanActionBlock()
+          if (blocked || !orphanSnapshotCurrent(snapshot)) { setUpdateNotice(blocked || "update.orphanChanged"); return }
+          const value = snapshot.entries[id].value
+          snapshot.name = value.name || id
+          orphanConfirmation.current = snapshot
+          orphanAcknowledgement.current = false
+          setOrphanAcknowledged(false)
+          if (renderable(A.RiskConfirmation)) setOrphanDialog(snapshot)
+          else if (typeof window !== "undefined" && typeof window.confirm === "function" &&
+              window.confirm(fillPlaceholders(t("update.orphanConfirm"), { name: snapshot.name, id }))) {
+            orphanAcknowledgement.current = true
+            discardOrphan(snapshot)
+          } else closeOrphanConfirmation()
+        }
+
         /** Change one field of the selected assistant's draft. */
         const update = (patch, options) => {
           // ★ 忙碌期间**不接受**对草稿的修改（issue #6）。
@@ -1873,6 +2174,65 @@ try {
         )
 
         // ── assistant list ────────────────────────────────────────────────────
+        const nativeUpdates = hasNativeUpdates(updateServices)
+        const updateAllowed = nativeUpdates && updateServices.list && updateServices.versions
+        const checkedUpdate = updateResult?.revision === updateServices.revision ? updateResult : null
+        const navigationBlock = updateNavigationBlock()
+        const updateText = updateChecking ? t("update.checking") : checkedUpdate
+          ? fillPlaceholders(t(checkedUpdate.key), { version: checkedUpdate.candidate })
+          : !nativeUpdates ? t("update.unavailable") : !updateAllowed ? t("update.permission") : t("update.idle")
+        const shownOrphans = orphanDrafts()
+        const orphanSnapshot = { entries: heldEntries.current, roster: heldRoster.current, newName: navigationState.current.newName }
+        const updateSection = react.createElement(
+          "section", { className: "cpfe-update", "aria-label": t("update.heading"), "aria-busy": updateChecking },
+          react.createElement("div", { className: "cpfe-update-meta" },
+            react.createElement("h2", { className: "cpfe-h" }, t("update.heading")),
+            react.createElement("p", { className: "cpfe-version" }, fillPlaceholders(t("update.running"), { version: runtimeVersion || t("update.unknown") })),
+            react.createElement("p", { id: "cpfe-update-status", className: "cpfe-sub cpfe-update-note", role: "status", "aria-live": "polite", "aria-atomic": true }, updateText),
+            checkedUpdate?.installed && checkedUpdate.installed !== runtimeVersion
+              ? react.createElement("p", { className: "cpfe-sub cpfe-update-note" }, fillPlaceholders(t("update.disk"), { version: checkedUpdate.installed })) : null,
+            checkedUpdate?.omitted > 0
+              ? react.createElement("p", { className: "cpfe-sub" }, fillPlaceholders(t("update.omitted"), { count: checkedUpdate.omitted })) : null,
+            checkedUpdate?.candidate && !updateServices.update ? react.createElement("p", { className: "cpfe-sub" }, t("update.updatePermission")) : null,
+            updateNotice || navigationBlock ? react.createElement("p", { className: "cpfe-sub", role: "status" }, t(updateNotice || navigationBlock)) : null,
+            shownOrphans.length > 0 ? react.createElement("div", { className: "cpfe-warns cpfe-update-note" },
+              react.createElement("p", { className: "cpfe-sub" }, t("update.orphanHint")),
+              ...shownOrphans.map(([id, held]) => react.createElement("div", { key: id, className: "cpfe-node" },
+                react.createElement("span", { className: "cpfe-row-head" }, fillPlaceholders(t("update.orphanName"), { name: held.value.name || id, id })),
+                react.createElement(A.Button, { variant: "ghost", className: "cpfe-disclosure", "aria-expanded": orphanView === id,
+                  onClick: () => setOrphanView(orphanView === id ? "" : id) }, t(orphanView === id ? "update.orphanHide" : "update.orphanView")),
+                orphanView === id ? react.createElement("div", { className: "cpfe-node" },
+                  react.createElement("p", { className: "cpfe-sub" }, t("update.orphanCopy")),
+                  react.createElement("textarea", { className: "cpfe-editor cpfe-orphan-editor", readOnly: true, spellCheck: false,
+                    "aria-label": fillPlaceholders(t("update.orphanName"), { name: held.value.name || id, id }),
+                    value: JSON.stringify({ id, name: held.value.name, description: held.value.description, mode: held.value.mode, overrides: held.value.overrides, prompt: held.value.prompt }, null, 2) }),
+                  react.createElement(A.Button, { variant: "outline", className: "cpfe-disclosure", disabled: orphanActionBlock() !== "",
+                    onClick: () => askDiscardOrphan(id, orphanSnapshot) }, t("update.orphanDiscard")),
+                ) : null,
+              )),
+            ) : null,
+          ),
+          react.createElement("div", { className: "cpfe-update-actions" },
+            react.createElement(A.Button, {
+              variant: "outline", disabled: busy || updateChecking || !updateAllowed,
+              "aria-describedby": "cpfe-update-status", onClick: checkUpdates,
+            }, t(updateChecking ? "update.checking" : "update.check")),
+            react.createElement(A.Button, {
+              variant: "outline",
+              disabled: navigationBlock !== "" || ((nativeUpdates || updateServices.accessKnown) && !updateServices.list) || typeof updateServices.navigation?.openBundle !== "function" ||
+                (!!checkedUpdate?.candidate && !updateServices.update),
+              title: navigationBlock ? t(navigationBlock) : undefined,
+              onClick: openPluginDetails,
+            }, t(checkedUpdate?.candidate ? "update.inPlugins" : "update.details")),
+            react.createElement("a", {
+              className: "cpfe-update-guide",
+              href: "https://github.com/BOWLUNA/dsh-custom-mode/blob/main/README" + (activeLanguage(localeRef) === "zh" ? ".zh" : "") + ".md#plugin-updates",
+              target: "_blank", rel: "noopener noreferrer", "aria-disabled": navigationBlock !== "",
+              onClick: (event) => { if (!guardUpdateNavigation()) event.preventDefault() },
+            }, t("update.guide")),
+          ),
+        )
+
         const selectedAssistantLabel = (assistants.find((item) => item.id === selected) || {}).name || selected || t("assistant.heading")
         const pickedHistoryEntry = draft === null || draft.historyPick === "" ? undefined : draft.history.find((item) => String(item.n) === draft.historyPick)
         const historySelectionLabel = pickedHistoryEntry === undefined
@@ -2295,6 +2655,7 @@ try {
           // `cpfe-busy` 是 issue #6 的兜底：面板里**所有**会改草稿的控件在忙碌期间一律不可交互。
           // 逐个控件加 `disabled` 会漏（本轮就漏了行开关与描述框），一个根类 + 一条 CSS 反而漏不掉。
           { className: busy === true ? "cpfe cpfe-busy" : "cpfe", "aria-busy": busy === true },
+          updateSection,
           assistantList,
           editorReady ? null : react.createElement("div", { className: "cpfe-bar" }, ...feedback),
           // 配了却不生效的项：主动点名，而不是让用户对着"我明明写了"发呆。
@@ -2391,16 +2752,6 @@ try {
             ...feedback,
           ),
           ...(editorReady ? editorSections.filter((section) => section.key === "name") : []),
-          editorReady
-            ? react.createElement(
-                "p",
-                {
-                  className: "cpfe-version",
-                  title: String(payload.compositionPath ?? "") + "\n" + t("meta.versionHint"),
-                },
-                "v" + String(payload.version ?? "?"),
-              )
-            : null,
           ...(editorReady ? editorSections.filter((section) => section.key === "mode") : []),
           editorReady
             ? react.createElement(
@@ -2440,6 +2791,21 @@ try {
           createGroup,
           // The confirmation is a portal: rendering it here keeps every piece of this page's
           // state in one component.
+          renderable(A.RiskConfirmation) && orphanDialog !== null
+            ? react.createElement(A.RiskConfirmation, {
+                open: true, title: t("update.orphanDiscard"),
+                description: fillPlaceholders(t("update.orphanConfirm"), { name: orphanDialog.name, id: orphanDialog.id }),
+                acknowledgeLabel: t("update.orphanAcknowledge"), acknowledged: orphanAcknowledged,
+                onAcknowledgedChange: (value) => {
+                  if (!updateOperation.current.alive || orphanConfirmation.current !== orphanDialog) return
+                  orphanAcknowledgement.current = value === true
+                  setOrphanAcknowledged(value === true)
+                },
+                cancelLabel: t("btn.cancel"), closeLabel: t("btn.cancel"), confirmLabel: t("update.orphanDiscard"),
+                disabled: orphanActionBlock() !== "", onCancel: () => { if (updateOperation.current.alive && orphanConfirmation.current === orphanDialog) closeOrphanConfirmation() },
+                onConfirm: () => discardOrphan(orphanDialog),
+              })
+            : null,
           renderable(A.RiskConfirmation) && editorReady
             ? react.createElement(A.RiskConfirmation, {
                 open: deleteOpen,
@@ -2497,6 +2863,8 @@ try {
             console.warn("dsh-custom-mode: slots service unavailable; settings page not registered")
             return
           }
+          try { mountUpdateServices(ctx) }
+          catch { console.warn("dsh-custom-mode: optional native update services unavailable") }
           slots.inject("settings.section", () => {
             // `locale: NS` is the shipped contract: the shell then hands the
             // component a bound `t` in props.

package/index.mjs

@@ -468,7 +468,7 @@ export function readState(rows, id, options = {}) {
 }
 
 /**
- * The list payload: every managed assistant, plus the root they live in.
+ * The list payload: managed assistants, their root, and the running plugin version.
  *
  * @param {Array<object>} rows - the current roster.
  */
@@ -478,7 +478,7 @@ export function readList(rows) {
   const list = assistantsFromRoster(rows).map((item) =>
     typeof item.broken === 'string' ? { ...item, brokenRows: brokenRowIds(item.broken) } : item,
   )
-  return { ok: true, assistants: list, postures: publicPostures(), root: userPresetRoot(rows) }
+  return { ok: true, assistants: list, postures: publicPostures(), root: userPresetRoot(rows), version: PLUGIN_VERSION }
 }
 
 /**
@@ -1222,6 +1222,9 @@ export function apply(ctx) {
       backendVerdict.id === BACKEND_DECLARATIVE
         ? createDeclarativeBackend({ scope, log: console.log, warn: console.error })
         : null
+    if (declarative !== null) {
+      scope.effect(() => () => declarative.disposeAll(), 'custom-mode.presets')
+    }
 
     /**
      * 删除入口，按后端选。新线上服务**没有** `remove()`（唯一手段是 `register()` 的 disposer），
@@ -1363,6 +1366,26 @@ export function apply(ctx) {
      * 写操作之后的重同步由 `resyncPresets` 负责，不该让每个请求都等一遍。
      */
     let startupSync = null
+    let latestSync = { ok: true, failures: [] }
+    const synchronize = async () => {
+      const outcome = await doSync()
+      latestSync = outcome
+      return outcome
+    }
+    // Public synchronization evidence contains only bounded preset identifiers and
+    // typed codes. Raw registration errors stay in host logs.
+    const registrationSync = (assistantId) => {
+      const failures = assistantId === undefined ? latestSync.failures
+        : latestSync.failures.filter(({ id }) => typeof id !== 'string' || id === '' || id === assistantId)
+      if (latestSync.ok === true || failures.length === 0) return { ok: true, code: 'synchronized', ids: [] }
+      return {
+        ok: false,
+        code: 'presetRegistrationSyncFailed',
+        ids: [...new Set(failures.map(({ id }) => id)
+          .filter((id) => typeof id === 'string' && /^[A-Za-z0-9_.-]{1,128}$/.test(id)))].slice(0, 32),
+        restartSuggested: failures.some(({ code }) => code === 'registrationConflict' || code === 'registrationCleanupFailed'),
+      }
+    }
     const roster = async () => {
       if (startupSync !== null) await startupSync
       return rawRoster()
@@ -1370,12 +1393,12 @@ export function apply(ctx) {
 
     /** Called inside the write queue; readers also await the current synchronization. */
     const resyncPresets = () => {
-      startupSync = doSync()
+      startupSync = synchronize()
       return startupSync
     }
 
     // 启动即同步：新线不是"写盘即生效"，第一次进来必须先注册。
-    startupSync = doSync()
+    startupSync = synchronize()
 
     /**
      * One Fetch-shaped handler for the whole surface.
@@ -1404,11 +1427,20 @@ export function apply(ctx) {
         const url = new URL(request.url)
         if (request.method === 'GET' && pathname === ROUTE_PATH) {
           await ensureShipped()
-          return json(readList(await roster()))
+          const rows = await roster()
+          return json({ ...readList(rows), registrationSync: registrationSync() })
         }
         if (request.method === 'GET' && pathname === STATE_PATH) {
           await ensureShipped()
-          return json(readState(await roster(), url.searchParams.get('id') ?? '', { factoryPrompt: packagedPrompt() }))
+          const state = readState(await roster(), url.searchParams.get('id') ?? '', { factoryPrompt: packagedPrompt() })
+          const synchronization = registrationSync(state.id)
+          return json({
+            ...state,
+            registrationSync: synchronization,
+            ...(state.ok === true && synchronization.ok === false
+              ? { warnings: [...state.warnings, synchronization.restartSuggested ? 'presetRegistrationRestartSuggested' : 'presetRegistrationSyncFailed'] }
+              : {}),
+          })
         }
 
         if (request.method === 'GET' && pathname === HISTORY_PATH) {

package/locales.mjs

@@ -16,11 +16,49 @@
 
 /** Simplified Chinese dictionary — the key source of truth. */
 export const zh = {
+  'update.heading': '插件更新',
+  'update.orphanHint': '以下助手已不在当前列表，但本页仍保留其未保存草稿，因此暂不能离页。',
+  'update.orphanName': '{name}（ID：{id}）',
+  'update.orphanView': '查看并保留草稿',
+  'update.orphanHide': '收起草稿',
+  'update.orphanCopy': '下方包含完整提示词、名称、描述、模式和覆盖项，可选中复制到本地文件保留。放弃仅移除本页内存草稿，不修改磁盘文件。',
+  'update.orphanDiscard': '放弃此草稿…',
+  'update.orphanConfirm': '确认放弃“{name}”（ID：{id}）的未保存草稿？请先复制保留需要的内容。放弃后无法从本页恢复；磁盘文件不会改动。',
+  'update.orphanAcknowledge': '我已保留需要的内容，确认放弃后无法从本页恢复。',
+  'update.orphanChanged': '草稿或助手列表已变化，未放弃任何内容。请重新查看并确认。',
+  'update.orphanDiscarded': '已放弃所确认的本页草稿；磁盘文件未改动。',
+  'update.running': '运行中的插件版本：{version}',
+  'update.unknown': '未知',
+  'update.check': '检查更新',
+  'update.checking': '正在检查…',
+  'update.inPlugins': '在插件管理中更新',
+  'update.details': '打开插件详情',
+  'update.guide': '更新指引',
+  'update.idle': '仅在点击检查时查询宿主配置的包仓库；不会自动安装。',
+  'update.unavailable': '当前连接未提供原生版本检查能力。可打开插件详情或查看更新指引。',
+  'update.permission': '此操作缺少宿主授权，或权限服务暂不可用。',
+  'update.updatePermission': '可以查看版本，但当前连接没有更新权限。',
+  'update.available': '可用更新：{version}。安装由官方插件管理处理。',
+  'update.current': '此次检查未返回更高版本。',
+  'update.filtered': '发现较新版本，但没有符合官方默认条件的稳定兼容版本。',
+  'update.partial': '结果未覆盖全部新版本，暂未找到可推荐的更新。',
+  'update.omitted': '另有 {count} 个较新版本未列出。',
+  'update.disk': '磁盘安装版本：{version}；它可能尚未在运行中加载。',
+  'update.managed': '此安装无法使用原生包仓库更新，请通过原来源或插件详情管理；不会自动切换来源。',
+  'update.notFound': '宿主插件列表中没有找到此插件，无法确认更新。',
+  'update.network': '宿主查询包仓库失败，请稍后重试；尚不能确认更新状态。',
+  'update.refused': '宿主未提供可用的版本列表，尚不能确认更新状态。',
+  'update.failed': '未能完成更新检查，请重试或打开插件详情查看。',
+  'update.finishOperation': '请等待当前操作完成后再离开此页。',
+  'update.finishRecovery': '请先完成重试读取或重试生效，再离开此页。',
+  'update.saveDrafts': '请先保存或主动放弃所有助手草稿及未提交的新建输入，再离开此页。',
+  'update.navigationFailed': '未能打开插件详情；草稿已保留，可稍后重试。',
   'create.nextStep': '创建后可在上方继续编辑并保存；使用时，在新会话的模式菜单选择它。',
   'btn.retryRead': '重试读取',
   'btn.retrySync': '重试生效',
   'api.savedButSyncFailed': '文件已保存，但这些助手尚未生效：{ids}。请点「重试生效」，无需重复原操作。',
   'api.syncFailed': '这些助手仍未生效：{ids}。请重试；仍失败时查看宿主日志。',
+  'api.presetRegistrationSyncFailed': '尚未确认已保存的助手配置在宿主注册表中生效，请处理已有告警或查看宿主日志。',
   'api.synchronized': '配置已生效。新会话请从模式菜单选择助手。',
   'api.recoveryRequired': '助手文件需要恢复：{path}。请保留目录中的备份，并查看宿主日志中的恢复说明。',
   'msg.completedReadFailed': '{result} 页面刷新失败。请点「重试读取」，无需重复原操作。',
@@ -150,6 +188,8 @@ export const zh = {
   'warn.approvalGateMissing': '当前版本没有审批事件。会话内改写提示词不会请求确认。',
   'warn.unresolvableRows': '有的行在本机无法启动，此模式不会出现在新会话菜单里。点「按本线修复」只关闭那些行。',
   'warn.presetBroken': '此模式无法启动，不会出现在新会话菜单里。点「按本线修复」。原因见下一行。',
+  'warn.presetRegistrationSyncFailed': '尚未确认这位助手已保存的配置在宿主注册表中生效。请先处理已有告警或查看宿主日志；无需重复保存。',
+  'warn.presetRegistrationRestartSuggested': '尚未确认这位助手已保存的配置在宿主注册表中生效。如刚更新或恢复插件，建议重启 DeepSeek Harness 后重新检查；无需重复保存。',
   'warn.badPromptVariable': '提示词里有不可用的变量。改掉后再保存，否则此模式的请求会失败。',
   'warn.duplicateRowIds': '组成文件里有重复的行 id。开关只作用于第一处。',
   'warn.predicateFailed': '有一行的平台条件无法计算，已按关闭处理。',
@@ -302,11 +342,49 @@ export const zh = {
 
 /** English dictionary; the parity test keeps its key set equal to {@link zh}. */
 export const en = {
+  'update.heading': 'Plugin updates',
+  'update.orphanHint': 'These assistants left the current list, but this page still holds their unsaved drafts. Resolve them before leaving.',
+  'update.orphanName': '{name} (ID: {id})',
+  'update.orphanView': 'View and keep draft',
+  'update.orphanHide': 'Hide draft',
+  'update.orphanCopy': 'The text below includes the full prompt, name, description, mode and overrides. Select and copy it to a local file to keep it. Discarding only removes this page\'s in-memory draft; files on disk are unchanged.',
+  'update.orphanDiscard': 'Discard this draft…',
+  'update.orphanConfirm': 'Discard the unsaved draft for "{name}" (ID: {id})? First copy any content you need to keep. This page cannot recover it after discarding; files on disk will remain unchanged.',
+  'update.orphanAcknowledge': 'I have kept the content I need and understand this page cannot recover the discarded draft.',
+  'update.orphanChanged': 'The draft or assistant list changed. Nothing was discarded. Review it again before confirming.',
+  'update.orphanDiscarded': 'The confirmed draft was discarded from this page; files on disk are unchanged.',
+  'update.running': 'Running plugin version: {version}',
+  'update.unknown': 'unknown',
+  'update.check': 'Check for updates',
+  'update.checking': 'Checking…',
+  'update.inPlugins': 'Update in Plugins',
+  'update.details': 'Open plugin details',
+  'update.guide': 'Update guide',
+  'update.idle': 'Only a click checks the registries configured by the host; installation is never automatic.',
+  'update.unavailable': 'This connection does not offer native version checks. Open plugin details or the update guide.',
+  'update.permission': 'Host permission is missing for this action, or the access service is unavailable.',
+  'update.updatePermission': 'You can view versions, but this connection does not have update permission.',
+  'update.available': 'Update available: {version}. Official plugin management handles installation.',
+  'update.current': 'This check returned no newer releases.',
+  'update.filtered': 'Newer releases exist, but none meet the official default conditions for a stable compatible version.',
+  'update.partial': 'The result omits some newer releases; no recommended update was found.',
+  'update.omitted': '{count} additional newer releases were omitted.',
+  'update.disk': 'Installed on disk: {version}; this version may not be loaded in the running host yet.',
+  'update.managed': 'Manage this installation through its original source or plugin details; it cannot use this native registry update path. The source will not be changed automatically.',
+  'update.notFound': 'The host did not list this plugin, so its update status could not be determined.',
+  'update.network': 'The host could not query the registry. Try again later; update status is unknown.',
+  'update.refused': 'The host did not provide a usable version list; update status is unknown.',
+  'update.failed': 'The update check could not finish. Retry or open plugin details.',
+  'update.finishOperation': 'Wait for the current operation to finish before leaving this page.',
+  'update.finishRecovery': 'Complete Retry refresh or Retry activation before leaving this page.',
+  'update.saveDrafts': 'Save or explicitly discard all assistant drafts and unsubmitted new-assistant input before leaving this page.',
+  'update.navigationFailed': 'Plugin details could not open. Your drafts are preserved; try again later.',
   'create.nextStep': 'After creating, edit and save above. To use the assistant, choose it in the mode menu for a new session.',
   'btn.retryRead': 'Retry refresh',
   'btn.retrySync': 'Retry activation',
   'api.savedButSyncFailed': 'Files are saved, but these assistants are not active yet: {ids}. Select Retry activation; you do not need to repeat the original action.',
   'api.syncFailed': 'These assistants are still not active: {ids}. Retry, then check the host log if the problem continues.',
+  'api.presetRegistrationSyncFailed': 'The saved assistant configuration has not been confirmed in the host registry. Address existing warnings or check the host log.',
   'api.synchronized': 'Configuration is active. Choose an assistant in the mode menu for a new session.',
   'api.recoveryRequired': 'Assistant files need recovery: {path}. Keep the backups in that directory and check the host log for recovery details.',
   'msg.completedReadFailed': '{result} The page could not refresh. Select Retry refresh; do not repeat the original action.',
@@ -437,6 +515,8 @@ export const en = {
   'warn.approvalGateMissing': 'This version has no approval event. In-session prompt edits are not confirmed.',
   'warn.unresolvableRows': 'Some rows cannot start here, so this mode is absent from the new-session menu. Fix for this line turns off only those rows.',
   'warn.presetBroken': 'This mode cannot start, so it will not appear for a new session. Use Fix for this line. The reason is on the next line.',
+  'warn.presetRegistrationSyncFailed': 'This assistant\'s saved configuration has not been confirmed in the host registry. Address existing warnings or check the host log; you do not need to save again.',
+  'warn.presetRegistrationRestartSuggested': 'This assistant\'s saved configuration has not been confirmed in the host registry. If the plugin was just updated or restored, consider restarting DeepSeek Harness, then check again; you do not need to save again.',
   'warn.badPromptVariable': 'The prompt uses a variable that is not available. Fix it before saving.',
   'warn.duplicateRowIds': 'A row id is repeated. A switch applies only to the first one.',
   'warn.predicateFailed': 'A platform condition could not be evaluated. That row is treated as off.',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-custom-mode",
-  "version": "2.2.6",
-  "description": "Edit a DeepSeek Harness (dsh) custom mode: system prompt, base mode, and plugin switches.",
+  "version": "2.3.0",
+  "description": "Customize DeepSeek Harness assistants: edit system prompts, base modes, and plugin switches.",
   "license": "MIT",
   "type": "module",
   "author": "bowluna <ai@bowluna.com>",

package/preset-backend/declarative.mjs

@@ -103,6 +103,8 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
   /** presetId → { dispose, dir } —— 当前挂在注册表里的东西，注销的唯一凭据。 */
   const mounted = new Map()
   let mutations = Promise.resolve()
+  let stopped = false
+  const stoppedResult = () => ({ ok: false, code: 'backendStopped', error: 'backend stopped' })
   const serialize = (work) => {
     const next = mutations.then(work, work)
     mutations = next.then(() => undefined, () => undefined)
@@ -135,6 +137,7 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
    * registry refuses a duplicate id outright.
    */
   async function mountOne(assistant) {
+    if (stopped) return stoppedResult()
     let definition
     try {
       definition = buildDefinition(assistant)
@@ -142,26 +145,40 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
       // 解析失败是**用户可见**的问题（手改坏了 composition），要显式说，不能静默跳过。
       warn(`custom-mode: 预设 "${assistant.id}" 的 composition 解析失败 —— ${describe(error)}。该助手不会出现在选择器里。`)
       await unmount(assistant.id)
-      return { ok: false, error: describe(error) }
+      return { ok: false, code: 'compositionParseFailed', error: describe(error) }
     }
     if (definition === null) {
       await unmount(assistant.id)
-      return { ok: false, error: 'no composition' }
+      return { ok: false, code: 'noComposition', error: 'no composition' }
     }
+    let registering = false
     try {
       await unmount(assistant.id)
+      if (stopped) return stoppedResult()
+      registering = true
       const dispose = await scope.agentPresets.register(definition)
+      registering = false
       mounted.set(assistant.id, { dispose, dir: assistant.dir })
+      // register() can finish after the scope starts stopping. Keep its disposer until
+      // it succeeds, and release only this generation's own registration.
+      if (stopped) {
+        await unmount(assistant.id)
+        return stoppedResult()
+      }
       return { ok: true }
     } catch (error) {
       // register 会抛（Duplicate / id 空 / 已存在）：说清是哪个助手、哪条错误。
       warn(`custom-mode: 注册预设 "${assistant.id}" 失败 —— ${describe(error)}`)
-      return { ok: false, error: describe(error) }
+      const code = registering
+        ? describe(error) === 'Duplicate agent preset: ' + assistant.id ? 'registrationConflict' : 'registrationFailed'
+        : 'registrationCleanupFailed'
+      return { ok: false, code, error: describe(error) }
     }
   }
 
   /** Bring the registry in line with the given assistant list: mount all, drop the rest. */
   async function sync(assistants) {
+    if (stopped) return assistants.map(({ id }) => ({ id, ...stoppedResult() }))
     const results = []
     for (const assistant of assistants) results.push({ id: assistant.id, ...(await mountOne(assistant)) })
     const wanted = new Set(assistants.map((a) => a.id))
@@ -175,7 +192,11 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
   }
 
   async function disposeAll() {
-    for (const id of [...mounted.keys()]) await unmount(id)
+    const errors = []
+    for (const id of [...mounted.keys()]) {
+      try { await unmount(id) } catch (error) { errors.push(error) }
+    }
+    if (errors.length > 0) throw new AggregateError(errors, 'preset registration cleanup failed')
   }
 
   /**
@@ -262,8 +283,13 @@ export function createDeclarativeBackend({ scope, log = console.log, warn = cons
     sync: (assistants) => serialize(() => sync(assistants)),
     mountOne: (assistant) => serialize(() => mountOne(assistant)),
     unmount: (id) => serialize(() => unmount(id)),
-    remove: (id, dir) => serialize(() => remove(id, dir)),
-    disposeAll: () => serialize(disposeAll),
+    remove: (id, dir) => serialize(() => stopped ? stoppedResult() : remove(id, dir)),
+    disposeAll: () => {
+      // Close admission immediately, before awaiting queued/in-flight mutations. A
+      // startup sync still reading host metadata must not resurrect this backend.
+      stopped = true
+      return serialize(disposeAll)
+    },
     fetchBaseCompositions,
     mountedIds: () => [...mounted.keys()],
   }