dsh-m 0.9.0 → 0.9.1

package/README.en.md

@@ -48,6 +48,12 @@ The default registry includes DSH Skins, ModSearch, the Lark / QQ / Weixin / WeC
 
 The restart chain below applies to **Web only** (Desktop takes effect via the official app lifecycle: after installing, quit and reopen the Desktop app — see the 0.9.0 section). After any mutation, the already-open Market and Installed views refresh the profile state together, keeping badges and cards in sync without closing and reopening the marketplace; a "⚡ Restart" banner appears — under systemd, the DSH launcher's `appExit` hook hands the restart back to a unit configured with `Restart=on-failure` or `Restart=always`, avoiding a `systemctl` helper inside the unit cgroup that is about to stop; if `appExit` is unavailable, the fallback uses a manager-owned transient `systemd-run` service and only then a detached helper. The client confirms the replacement by boot id and dismisses the banner, leaving DSH Web's own background connection recovery in control; it does not force a full-page reload during the auth/route handoff. The restart chain has been live-verified on the current DSH Web `0.2.0-rc.2` (2026-10-01): dsh-m probes the unit's `Restart=` policy, hands the stop back via `appExit`, the `status=75/TEMPFAIL` exit is caught by the Restart policy and auto-started, and after recovery the page reconnects in the background with the panel fully functional. Historical scope: the `0.1.5-rc.1` era covered live `/dshm` ping and authenticated `303 → 200` checks; `0.1.2-rc.1` is covered by contract checks plus runtime shape-detection fallback (see the verified array) — with the deployment moved on, no live E2E is chased on retired generations; the transient `systemd-run` fallback only applies to hosts without `appExit` (all supported generations provide it) and stays a documented fallback rather than a release gate; repeated install/uninstall is covered by the profile-transaction test surface (compensation, post-install guard, 813 cases) plus the 0.4.0→0.4.2 consecutive-release evidence. Installs stream live pnpm progress (resolve → download → link → build).
 
+### New in 0.9.1 — Header version chip upgrade notice (lights up only when an update exists)
+
+- **Silent by default**: the panel-header `dsh-m vX.Y.Z` chip keeps the static look introduced in 0.7.5 — up to date, failed check, or a local dev build ahead of npm (ahead) never interrupt (ahead only shows a "local dev build" hint in the hover title).
+- **Lights up only when outdated**: when `self-check` (npm latest vs the installed version, read-only) finds a newer version, the chip turns into a warn state showing `⬆ v<latest>`; clicking it runs `self-upgrade` (same mutation session + post-install guard) and a "⚡ Restart" banner follows on success. On Desktop the click is rejected structurally by the capability table (409, with official lifecycle guidance).
+- **TTL cache + version guard**: check results are cached in browser localStorage for 30 minutes so opening the panel doesn't hit npm every time; after an upgrade + restart the cache auto-invalidates by version. Failed checks stay silent — no error is shown.
+
 ### New in 0.9.0 — Official Desktop (dual profile) support
 
 - **One package, two profiles**: dsh-m now installs into the official Desktop's `desktop` profile (`~/.dsh/profiles/desktop`) alongside the Web `web` profile; the catalog, panel, and agent tools are shared, and everything manages the host's current profile (official `profileContext` as the single source of truth).

package/README.md

@@ -48,6 +48,12 @@
 
 以下重启链路仅适用于 **Web**（Desktop 的生效走官方应用生命周期：安装完成后退出并重新打开 Desktop 应用即可，见 0.9.0 节）。安装 / 卸载 / 升级完成后，当前已打开的市场页与已装页会一起重新读取 profile 状态并同步徽标/卡片，不需要关闭后重新打开插件市场；随后出现「⚡ 一键重启」横幅——受 systemd 管理时通过 DSH launcher 的 `appExit` 交给服务的 `Restart` 策略，避免在待停止 unit 的 cgroup 内启动 `systemctl` helper；无 `appExit` 的 systemd 兜底改用 manager-owned transient `systemd-run`，最后才退回 detached-helper。客户端按 boot id 确认新进程已恢复后关闭横幅，交由 DSH Web 自身的后台连接重试恢复页面，不强制整页刷新，避免认证/路由切换期间白屏。重启链路已在当前 DSH Web `0.2.0-rc.2` 实机核验（2026-10-01）：dsh-m 探测 unit `Restart=` 策略后经 `appExit` 交还 systemd，`status=75/TEMPFAIL` 退出由 Restart 策略接住自动拉起，服务恢复后页面后台重连、面板全功能可用。历史口径：`0.1.5-rc.1` 时代已核验 `/dshm` ping 与带认证 `303 → 200`；`0.1.2-rc.1` 按契约核对 + 形态探测兜底收录（verified 数组），部署面演进后不再追旧代 live E2E；transient `systemd-run` 兜底仅适用于无 `appExit` 的宿主（受支持代际均提供 `appExit`），保持设计兜底而非发布门槛；连续安装/卸载由 profile 事务测试面（补偿事务、装后守卫等 813 用例）与 0.4.0→0.4.2 连续发布实证覆盖。安装过程实时显示 pnpm 进度（解析 → 下载 → 链接 → 构建）。
 
+### 0.9.1 新增：头部版本角标升级提示（有更新才点亮）
+
+- **静默口径**：面板头部 `dsh-m vX.Y.Z` 角标常态维持 0.7.5 起的静态展示——已是最新、检查失败、本地 dev 版领先 npm（ahead）一律不打扰（ahead 仅在悬停 title 里提示「本地开发版」）。
+- **仅 outdated 点亮**：`self-check`（npm latest vs 装机版本，只读）判定有新版本时，角标点亮为 warn 态并显示 `⬆ v<最新>`；点击即触发 `self-upgrade`（同一 mutation session + 装后守卫），成功后出「⚡ 一键重启」横幅。Desktop 下点击按能力表结构化拒绝（409，带官方生命周期指引）。
+- **TTL 缓存 + 版本护栏**：检查结果在浏览器 localStorage 缓存 30 分钟，开面板不重复打 npm registry；升级重启后缓存按版本号自动作废。检查失败静默，不弹任何错误。
+
 ### 0.9.0 新增：官方 Desktop（双 profile）支持
 
 - **同一包、两个 profile**：dsh-m 现在可装入官方 Desktop 的 `desktop` profile（`~/.dsh/profiles/desktop`），与 Web 的 `web` profile 并列；市场目录、面板与 agent 工具同一套，管理对象始终是宿主当前 profile（官方 `profileContext` 单一事实源）。

package/lib/client.js

@@ -965,6 +965,73 @@ var init_favorites = __esm({
   }
 });
 
+// src/client/self-check.js
+var self_check_exports = {};
+__export(self_check_exports, {
+  SELF_CHECK_STORAGE_KEY: () => SELF_CHECK_STORAGE_KEY,
+  SELF_CHECK_TTL_MS: () => SELF_CHECK_TTL_MS,
+  clearSelfCheckCache: () => clearSelfCheckCache,
+  deriveChipState: () => deriveChipState,
+  readSelfCheckCache: () => readSelfCheckCache,
+  writeSelfCheckCache: () => writeSelfCheckCache
+});
+function readSelfCheckCache(storage, opts = {}) {
+  if (!storage || typeof storage.getItem !== "function") return null;
+  const now = typeof opts.now === "number" ? opts.now : Date.now();
+  const ttlMs = typeof opts.ttlMs === "number" ? opts.ttlMs : SELF_CHECK_TTL_MS;
+  let raw = null;
+  try {
+    raw = storage.getItem(SELF_CHECK_STORAGE_KEY);
+  } catch {
+    return null;
+  }
+  if (typeof raw !== "string" || raw === "") return null;
+  let box;
+  try {
+    box = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!box || typeof box !== "object") return null;
+  if (typeof box.ts !== "number" || !Number.isFinite(box.ts)) return null;
+  if (now - box.ts > ttlMs) return null;
+  const data = box.data;
+  if (!data || typeof data !== "object" || typeof data.current !== "string") return null;
+  if (typeof opts.version === "string" && opts.version !== "" && data.current !== opts.version) return null;
+  return data;
+}
+function writeSelfCheckCache(storage, data, opts = {}) {
+  if (!storage || typeof storage.setItem !== "function") return;
+  if (!data || typeof data !== "object" || typeof data.current !== "string") return;
+  const now = typeof opts.now === "number" ? opts.now : Date.now();
+  try {
+    storage.setItem(SELF_CHECK_STORAGE_KEY, JSON.stringify({ ts: now, data }));
+  } catch {
+  }
+}
+function clearSelfCheckCache(storage) {
+  try {
+    if (storage && typeof storage.removeItem === "function") storage.removeItem(SELF_CHECK_STORAGE_KEY);
+  } catch {
+  }
+}
+function deriveChipState(check, version) {
+  if (!check || typeof check !== "object") return { kind: "idle" };
+  if (check.outdated === true && typeof check.latest === "string" && check.latest !== "") {
+    return { kind: "outdated", latest: check.latest };
+  }
+  if (check.ahead === true) return { kind: "ahead", latest: typeof check.latest === "string" ? check.latest : null };
+  return { kind: "idle" };
+}
+var SELF_CHECK_STORAGE_KEY, SELF_CHECK_TTL_MS;
+var init_self_check = __esm({
+  "src/client/self-check.js"() {
+    "use strict";
+    SELF_CHECK_STORAGE_KEY = "dshm-selfcheck";
+    SELF_CHECK_TTL_MS = 30 * 60 * 1e3;
+  }
+});
+
 // src/client/main.jsx
 var React = require("react");
 var rd = require("react-dom");
@@ -982,6 +1049,7 @@ var { RESTART_POLL_MS: RESTART_POLL_MS2, RESTART_DEADLINE_MS: RESTART_DEADLINE_M
 var { refreshAfterMutation: refreshAfterMutation2 } = (init_view_refresh(), __toCommonJS(view_refresh_exports));
 var { createOperationsStore: createOperationsStore2, restoreRecords: restoreRecords2, createOpsPump: createOpsPump2, opAppliesTo: opAppliesTo2 } = (init_operations(), __toCommonJS(operations_exports));
 var { createFavoritesStore: createFavoritesStore2, partitionStale: partitionStale2 } = (init_favorites(), __toCommonJS(favorites_exports));
+var { readSelfCheckCache: readSelfCheckCache2, writeSelfCheckCache: writeSelfCheckCache2, clearSelfCheckCache: clearSelfCheckCache2, deriveChipState: deriveChipState2 } = (init_self_check(), __toCommonJS(self_check_exports));
 var ZH = {
   "market.title": "\u63D2\u4EF6\u5E02\u573A",
   "tab.market": "\u5E02\u573A",
@@ -1206,6 +1274,8 @@ var ZH = {
   "notify.leftovers": "\uFF1B\u68C0\u6D4B\u5230\u7591\u4F3C\u6B8B\u7559\u6570\u636E\uFF1A{paths}",
   "notify.upgraded": "\u5DF2\u5347\u7EA7 {pkg}\uFF08{from} \u2192 {to}\uFF09",
   "notify.upgradehint": "\uFF08\u6CE8\u610F\uFF1A\u8BE5\u63D2\u4EF6\u6267\u884C\u4E86\u6784\u5EFA\u811A\u672C\uFF09",
+  "notify.selfupgraded": "dsh-m \u5DF2\u5347\u7EA7\uFF08v{from} \u2192 v{to}\uFF09",
+  "notify.selfupgraded.failed": "dsh-m \u5347\u7EA7\u5931\u8D25\uFF1A{err}",
   "failed.install": "\u5B89\u88C5\u5931\u8D25\uFF1A{err}",
   "failed.uninstall": "\u5378\u8F7D\u5931\u8D25\uFF1A{err}",
   "failed.upgrade": "\u5347\u7EA7\u5931\u8D25\uFF1A{err}",
@@ -1221,6 +1291,9 @@ var ZH = {
   "restart.hint.done": "\u5DF2\u8BF7\u6C42\u91CD\u542F DSH web\uFF08via {via}\uFF09\u3002\u670D\u52A1\u6062\u590D\u540E DSH Web \u4F1A\u5728\u540E\u53F0\u81EA\u52A8\u91CD\u8FDE\u3002",
   "profile.restartHint": "\u53D8\u66F4\u5B8C\u6210\u3002Desktop \u63D2\u4EF6\u7531\u5B98\u65B9\u5E94\u7528\u7BA1\u7406\uFF1A\u8BF7\u9000\u51FA\u5E76\u91CD\u65B0\u6253\u5F00 Desktop \u5E94\u7528\uFF08\u5173\u95ED\u7A97\u53E3\u53EF\u80FD\u53EA\u662F\u9690\u85CF\uFF09\u4EE5\u52A0\u8F7D\u65B0\u72B6\u6001\u3002",
   "profile.chipTitle": "\u5F53\u524D DSH profile\uFF1A{name}\uFF08Desktop \u9996\u53D1\u4EC5\u652F\u6301\u53EA\u8BFB\u5E02\u573A\u3001\u5B89\u88C5\u65B0\u5305\u4E0E\u5F00\u5173\uFF09",
+  "selfupdate.available": "\u53D1\u73B0\u65B0\u7248\u672C v{v}\uFF0C\u70B9\u51FB\u5347\u7EA7",
+  "selfupdate.ahead": "\u672C\u5730\u5F00\u53D1\u7248\uFF08\u9886\u5148 npm\uFF1Av{v}\uFF09",
+  "selfupdate.checking": "\u68C0\u67E5\u66F4\u65B0\u4E2D\u2026",
   "phase.resolving": "\u89E3\u6790\u4F9D\u8D56",
   "phase.downloading": "\u4E0B\u8F7D",
   "phase.linking": "\u94FE\u63A5\u5B89\u88C5",
@@ -1461,6 +1534,8 @@ var EN = {
   "notify.leftovers": "; possible leftover data: {paths}",
   "notify.upgraded": "Upgraded {pkg} ({from} \u2192 {to})",
   "notify.upgradehint": " (note: this plugin ran build scripts)",
+  "notify.selfupgraded": "dsh-m upgraded (v{from} \u2192 v{to})",
+  "notify.selfupgraded.failed": "dsh-m upgrade failed: {err}",
   "failed.install": "Install failed: {err}",
   "failed.uninstall": "Uninstall failed: {err}",
   "failed.upgrade": "Upgrade failed: {err}",
@@ -1476,6 +1551,9 @@ var EN = {
   "restart.hint.done": "Restart requested (via {via}). DSH Web will reconnect in the background after the service returns.",
   "profile.restartHint": "Changes applied. Desktop plugins are managed by the official app: quit and reopen the Desktop app (closing the window may only hide it) to load the new state.",
   "profile.chipTitle": "Current DSH profile: {name} (Desktop first release supports read-only market, installing new packages, and toggles)",
+  "selfupdate.available": "New version v{v} available \u2014 click to upgrade",
+  "selfupdate.ahead": "Local dev build (ahead of npm: v{v})",
+  "selfupdate.checking": "Checking for updates\u2026",
   "phase.resolving": "Resolving",
   "phase.downloading": "Downloading",
   "phase.linking": "Linking",
@@ -1700,6 +1778,12 @@ button.dshm-badge:hover{filter:brightness(.95)}
 /* \u5934\u90E8 dsh-m \u7248\u672C\u89D2\u6807\uFF1A\u7B49\u5BBD\u5C0F\u5B57\u5706\u89D2\uFF0C\u9759\u6001\u5C55\u793A\u4E0D\u52A0\u7C97\u4E0D\u53EF\u70B9\uFF080.7.5 \u8D77\u6539\u663E dsh-m \u7248\u672C\uFF09 */
 .dshm-dshchip{display:inline-flex;align-items:center;gap:4px;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);background:var(--dsw-alias-bg-layer-1,#f5f6f8);color:var(--dsw-alias-label-secondary,#4b5563);border-radius:999px;padding:5px 10px;font:11px/1 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;white-space:nowrap;flex:none}
 .dshm-dshchip-v{font-weight:400;color:inherit}
+/* 0.9.1\uFF1A\u4EC5 self-check \u5224 outdated \u624D\u70B9\u4EAE\u2014\u2014warn \u6001\u4E3A\u53EF\u70B9\u6309\u94AE\uFF08\u70B9\u51FB\u5373\u81EA\u5347\u7EA7\uFF09\uFF1B\u5176\u4F59\u9759\u9ED8\u590D\u7528\u9759\u6001\u6837\u5F0F */
+button.dshm-dshchip{cursor:pointer}
+button.dshm-dshchip:disabled{cursor:default;opacity:.75}
+.dshm-dshchip.warn{border-color:color-mix(in srgb,var(--dsw-alias-state-warn-primary,#b45309) 45%,transparent);background:var(--dsw-alias-state-warn-tertiary,#fffbeb);color:var(--dsw-alias-state-warn-primary,#b45309)}
+.dshm-dshchip.warn:hover:not(:disabled){filter:brightness(.96)}
+.dshm-dshchip .dshm-up{font-weight:600}
 
 /* 0.4.0\uFF1A\u5F00\u5173 / \u76F8\u4F4D\u70B9 / \u517C\u5BB9\u786E\u8BA4\u5F39\u7A97 */
 .dshm-dot{font-size:9px;line-height:1;vertical-align:middle;margin-right:2px}
@@ -3258,10 +3342,64 @@ var TABS = [
   ["installed", "tab.installed", "installed"],
   ["settings", "tab.settings", null]
 ];
-function DshmVersionChip({ version }) {
+function DshmVersionChip({ version, notify, initialCheck }) {
+  const [check, setCheck] = useState(
+    () => initialCheck !== void 0 ? initialCheck : typeof window !== "undefined" && window.localStorage ? readSelfCheckCache2(window.localStorage, { version }) : null
+  );
+  const [busy, setBusy] = useState(false);
+  useEffect(() => {
+    if (initialCheck !== void 0) return;
+    let live = true;
+    api("self-check").then((data) => {
+      if (!live) return;
+      if (data && typeof data === "object" && typeof data.current === "string") {
+        writeSelfCheckCache2(typeof window !== "undefined" && window.localStorage ? window.localStorage : null, data);
+        setCheck(data);
+      }
+    }).catch(() => {
+    });
+    return () => {
+      live = false;
+    };
+  }, [initialCheck]);
+  const doUpgrade = async () => {
+    if (busy) return;
+    setBusy(true);
+    try {
+      const res = await api("self-upgrade");
+      clearSelfCheckCache2(typeof window !== "undefined" && window.localStorage ? window.localStorage : null);
+      setCheck({ current: version, latest: null, outdated: false, ahead: false });
+      notify({
+        kind: "ok",
+        needsRestart: true,
+        text: lookup("notify.selfupgraded", { from: version, to: res.version || "latest" }) + (res.buildApprovals && res.buildApprovals.length ? lookup("notify.builds", { names: res.buildApprovals.join(", ") }) : res.fallbackAllBuilds ? lookup("notify.builds.fallback") : "")
+      });
+    } catch (e) {
+      notify({ kind: "err", text: lookup("notify.selfupgraded.failed", { err: e && e.message || e }) });
+    } finally {
+      setBusy(false);
+    }
+  };
+  const state = deriveChipState2(check, version);
+  if (state.kind === "outdated") {
+    return h(
+      "button",
+      {
+        type: "button",
+        className: "dshm-dshchip warn",
+        title: lookup("selfupdate.available", { v: state.latest }),
+        onClick: doUpgrade,
+        disabled: busy
+      },
+      "dsh-m ",
+      h("span", { className: "dshm-dshchip-v" }, `v${version}`),
+      busy ? h(Spin) : h("span", { className: "dshm-up" }, `\u2B06 v${state.latest}`)
+    );
+  }
+  const title = state.kind === "ahead" && state.latest ? lookup("selfupdate.ahead", { v: state.latest }) : `dsh-m v${version}`;
   return h(
     "span",
-    { className: "dshm-dshchip", title: `dsh-m v${version}` },
+    { className: "dshm-dshchip", title },
     "dsh-m ",
     h("span", { className: "dshm-dshchip-v" }, `v${version}`)
   );
@@ -3466,7 +3604,7 @@ function MarketPanel({ onClose }) {
           )
         ),
         h("span", { className: "dshm-spacer" }),
-        pluginVersion ? h(DshmVersionChip, { version: pluginVersion }) : null,
+        pluginVersion ? h(DshmVersionChip, { version: pluginVersion, notify }) : null,
         profile && profile.kind !== "web" ? h("span", { className: "dshm-dshchip", title: lookup("profile.chipTitle", { name: profile.name }) }, profile.name) : null,
         // 窗口控制组（0.7.7）：最大化/还原 + 关闭，连体设计（系统化窗口按钮）
         h(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-m",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "可自定义收录清单的 DSH 插件市场：收录、安装、卸载、升级一站完成，附 agent 工具与 dshm CLI。",
   "license": "MIT",
   "type": "module",