dsh-model 0.14.0 → 0.15.0

package/README.en.md

@@ -55,6 +55,9 @@ On a dsh-vps server, use `sudo dsh-model setup`.
 | **Models** | Pick which models of each source appear in dsh (5 suggested per source by default); the rest stay available through the endpoint |
 | **API keys** | OpenAI-style, one per device. Requests, success rate, latency and speed over 24 hours; copy, rotate, revoke |
 | **Model stats** | Success rate, latency and speed per model |
+| **About** | Current and latest npm version; one-click Update and Uninstall (on a VPS these need root, so the commands are shown instead) |
+
+If the service is not set up on this machine yet, the page says what is missing and offers a "Set up now" button, so you can also start by installing dsh-model from the dsh plugin marketplace and finish from this page.
 
 dsh-model does every sign-in itself. No provider CLI is installed and the server needs no browser:
 
@@ -94,6 +97,7 @@ dsh-model only connects; it provides no quota of its own.
 | `remote enable --via caddy\|ssh\|tailscale` / `remote disable` | Remote access (on a VPS, setup already enables caddy) |
 | `engine version\|upgrade\|rollback` | Engine version |
 | `logs [--bridge]` / `repair` | Logs / repair |
+| `update [--to ver]` | Update to the latest npm version: program, dsh plugin and services together |
 | `uninstall` | Clean uninstall |
 
 Every command accepts `--lang zh|en` and `--json`.

package/README.md

@@ -55,6 +55,9 @@ dsh-model setup
 | **选模型** | 每个来源选哪些模型显示在 dsh 里，默认每家推荐 5 个，其余的经统一地址照样可用 |
 | **API key** | OpenAI 格式，每台设备一把。显示 24 小时内的请求数、成功率、延迟和速度，可复制、轮换、吊销 |
 | **模型统计** | 按模型显示成功率、延迟和速度 |
+| **关于** | 当前版本和 npm 上的最新版本；「更新」「卸载」一键完成（VPS 上要 root，这里给出命令） |
+
+还没在这台机器上装好服务时，这一页会说明缺什么，并提供「一键安装」按钮。所以也可以先从 dsh 的插件市场装 dsh-model，再在这一页里点安装。
 
 登录全由 dsh-model 自己完成，服务器上不装各家的 CLI，也不需要浏览器：
 
@@ -94,6 +97,7 @@ dsh-model 只负责转接，不提供额度。
 | `remote enable --via caddy\|ssh\|tailscale` / `remote disable` | 远程访问（VPS 上 setup 已自动开通 caddy） |
 | `engine version\|upgrade\|rollback` | 引擎版本 |
 | `logs [--bridge]` / `repair` | 日志 / 修复 |
+| `update [--to 版本]` | 更新到 npm 上的最新版：程序、dsh 插件和服务一起更新 |
 | `uninstall` | 干净卸载 |
 
 所有命令都支持 `--lang zh|en` 和 `--json`。

package/dist/bridge/server.js

@@ -4,6 +4,7 @@
 // 路由按产品分前缀：/cn/v1/...（WorkBuddy 国内版）、/ai/v1/...（WorkBuddy AI 国际版）。
 // 协议细节（凭据解密、客户端身份、刷新、目录）来自移植的 ./workbuddy/*（MIT，见其 LICENSE）。
 import { timingSafeEqual } from 'node:crypto';
+import { initLang } from '../i18n.js';
 import { createServer } from 'node:http';
 import { Readable } from 'node:stream';
 import { aggregateSse } from './aggregate.js';
@@ -93,6 +94,10 @@ export function createBridge(options) {
                     return oaiError(res, 400, 'invalid_json', 'request body is not JSON');
                 }
             }
+            // 提示语跟着调用方的语言（dsh 页面 / CLI 的 --lang）；守护进程自己由 launchd 启动时没有 LANG
+            const lang = String(req.headers['x-dsh-model-lang'] ?? '');
+            if (lang === 'zh' || lang === 'en')
+                initLang(lang);
             const r = await options.onControl(req.method ?? 'GET', url.slice('/control'.length), body, fullUrl.searchParams);
             return json(res, r.status, r.body);
         }

package/dist/cli.js

@@ -9,6 +9,7 @@ import { repair, service } from './commands/service.js';
 import { setup } from './commands/setup.js';
 import { doctor, status } from './commands/status.js';
 import { uninstall } from './commands/uninstall.js';
+import { selfUpdate } from './commands/self.js';
 import { opencode } from './commands/opencode.js';
 import { workbuddy } from './commands/workbuddy.js';
 import { bridge } from './commands/bridge.js';
@@ -46,6 +47,8 @@ const OPTIONS = {
     'skip-dsh-plugin': { type: 'boolean' },
     stdin: { type: 'boolean' },
     'skip-verify': { type: 'boolean' },
+    to: { type: 'string' },
+    'remove-plugin': { type: 'boolean' },
 };
 function help() {
     const ups = UPSTREAMS.map((u) => u.id).join('|');
@@ -76,6 +79,7 @@ function help() {
   service status|install|start|stop|restart|uninstall
   repair                               按台账修复配置、服务与接线
   logs [--lines N] [--bridge]          引擎 / bridge 日志
+  update [--to 版本]                   更新到 npm 上的最新版（程序、dsh 插件、服务一起）
   uninstall [--yes] [--keep-auth]      干净卸载
 
 通用选项：--lang zh|en  --json  --help  --version
@@ -106,6 +110,7 @@ Usage: dsh-model <command> [options]
   service status|install|start|stop|restart|uninstall
   repair                               Repair config, service and wiring from the ledger
   logs [--lines N] [--bridge]          Engine / bridge logs
+  update [--to ver]                    Update to the latest npm version (program, dsh plugin and services)
   uninstall [--yes] [--keep-auth]      Clean uninstall
 
 Global: --lang zh|en  --json  --help  --version
@@ -184,7 +189,10 @@ export async function main(argv) {
             case 'logs':
                 return await logs(ctx, o.lines ? Number(o.lines) : undefined, o.bridge ? 'bridge' : 'engine');
             case 'uninstall':
-                return await uninstall(ctx, { yes: o.yes, keepAuth: o['keep-auth'] });
+                return await uninstall(ctx, { yes: o.yes, keepAuth: o['keep-auth'], removePlugin: o['remove-plugin'] });
+            case 'self-update':
+            case 'update':
+                return await selfUpdate(ctx, { to: o.to });
             default:
                 fail(L(`未知命令：${cmd}`, `Unknown command: ${cmd}`));
                 console.log(dim(L('查看帮助：dsh-model --help', 'See: dsh-model --help')));

package/dist/commands/opencode.js

@@ -7,6 +7,13 @@ import { loadAll, syncAll } from '../ops.js';
 import { withLock } from '../state.js';
 import { info, isJsonMode, ok, printJson, skip } from '../util/output.js';
 import { canPrompt, promptSecret, readStdin } from '../util/prompt.js';
+/** 交互地问 OpenCode key（回车跳过 → ''；不能交互 → undefined） */
+export async function askOpencodeKey() {
+    if (!canPrompt())
+        return undefined;
+    info(L(`OpenCode Zen 的 API key（${OPENCODE_KEY_PAGE}，要先充值；没有就直接回车跳过，以后在 dsh 的管理页填）。输入不会显示。`, `Your OpenCode Zen API key (${OPENCODE_KEY_PAGE}; needs a top-up. Press Enter to skip and add it later in dsh's management page). Input is hidden.`));
+    return promptSecret('OpenCode Zen API key: ');
+}
 /** 拿 key → 实测 → 存进 secrets.json → 拉模型目录。返回是否有变化（调用方随后 syncAll） */
 export async function configureOpencode(ctx, all, opts = {}) {
     if ((await opencodeConfigured(ctx)) && !opts.replace) {
@@ -18,9 +25,8 @@ export async function configureOpencode(ctx, all, opts = {}) {
     if (opts.stdin) {
         key = await readStdin();
     }
-    else if (canPrompt()) {
-        info(L(`需要你的 OpenCode Zen API key（免费注册：${OPENCODE_KEY_PAGE}）。输入不会显示，直接回车跳过。`, `Needs your OpenCode Zen API key (free sign-up: ${OPENCODE_KEY_PAGE}). Input is hidden; press Enter to skip.`));
-        key = await promptSecret('OpenCode Zen API key: ');
+    else if (opts.key !== undefined || canPrompt()) {
+        key = opts.key ?? (await askOpencodeKey()) ?? '';
         if (!key) {
             skip(L('已跳过；之后可执行 dsh-model opencode key', 'Skipped; later run dsh-model opencode key'));
             return false;

package/dist/commands/self.js

@@ -0,0 +1,116 @@
+// commands/self.ts — 更新 dsh-model 自己（命令行与 dsh 管理页的「更新」共用）
+//
+// 1. 新版本装到原来的位置：npm 全局装的就 npm install -g；从 dsh 管理页一键安装的（程序就在插件目录里）跳过这步；
+// 2. dsh 里的插件换成同一版本（插件页的新代码要重启一次 dsh 才生效）；
+// 3. 用新版本执行一次 repair：重写服务文件、重启引擎与守护进程、同步模型。
+import { realpath } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { requireRootInVps } from '../context.js';
+import { DshModelError, isDshModelError } from '../errors.js';
+import { L, lang } from '../i18n.js';
+import { installDshPlugin, pluginRoot } from '../integrations/dshplugin.js';
+import { loadAll, saveAll } from '../ops.js';
+import { withLock } from '../state.js';
+import { run, runInherit } from '../util/exec.js';
+import { exists } from '../util/fs.js';
+import { info, next, ok, skip, warn } from '../util/output.js';
+import { PKG_ROOT, pkgVersion } from '../util/pkg.js';
+const REGISTRY = 'https://registry.npmjs.org/dsh-model';
+/** a 比 b 新（只比 major.minor.patch） */
+export function isNewer(a, b) {
+    const pa = a.split(/[.-]/).map((x) => parseInt(x, 10) || 0);
+    const pb = b.split(/[.-]/).map((x) => parseInt(x, 10) || 0);
+    for (let i = 0; i < 3; i++)
+        if ((pa[i] ?? 0) !== (pb[i] ?? 0))
+            return (pa[i] ?? 0) > (pb[i] ?? 0);
+    return false;
+}
+export async function latestVersion() {
+    try {
+        const r = await fetch(`${REGISTRY}/latest`, { signal: AbortSignal.timeout(10_000) });
+        if (!r.ok)
+            return null;
+        return String((await r.json()).version ?? '') || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** 和当前 node 同目录的 npm，以及让它能找到 node 的环境 */
+async function npmBeside() {
+    if (process.versions.electron)
+        return null;
+    const dir = dirname(process.execPath);
+    const npm = join(dir, 'npm');
+    if (!(await exists(npm)))
+        return null;
+    return { npm, env: { ...process.env, PATH: `${dir}:${process.env.PATH ?? ''}` } };
+}
+/** 当前程序是不是 npm 全局装的（是就能用 npm install -g 原地更新） */
+async function npmGlobalInstall() {
+    const n = await npmBeside();
+    if (!n)
+        return null;
+    const r = await run(n.npm, ['root', '-g'], { env: n.env, timeoutMs: 20_000 });
+    if (r.code !== 0)
+        return null;
+    try {
+        return (await realpath(join(r.stdout.trim(), 'dsh-model'))) === (await realpath(PKG_ROOT)) ? n : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function selfUpdate(ctx, opts = {}) {
+    requireRootInVps(ctx);
+    const current = pkgVersion();
+    const target = opts.to ?? (await latestVersion());
+    if (!target)
+        throw new DshModelError('no_latest', L('查不到 npm 上的最新版本（网络？）', 'Could not get the latest version from npm (network?)'), L('稍后再试，或指定：dsh-model self-update --to <版本>', 'Try later, or pass one: dsh-model self-update --to <version>'));
+    if (!opts.to && !isNewer(target, current)) {
+        ok(L(`已是最新（${current}；npm 上最新 ${target}）`, `Up to date (${current}; latest on npm is ${target})`));
+        return 0;
+    }
+    info(L(`当前 ${current}，目标 ${target}`, `Current ${current}, target ${target}`));
+    // 1. 程序本身
+    let root = PKG_ROOT;
+    const npm = await npmGlobalInstall();
+    if (target === current)
+        skip(L('程序已是这个版本', 'The program is already at this version'));
+    else if (npm) {
+        info(L(`npm install -g dsh-model@${target}`, `npm install -g dsh-model@${target}`));
+        const code = await runInherit(npm.npm, ['install', '-g', `dsh-model@${target}`], { env: npm.env });
+        if (code !== 0)
+            throw new DshModelError('update_failed', L(`npm 安装失败（退出码 ${code}）`, `npm install failed (exit code ${code})`));
+        ok(L(`程序已更新到 ${target}`, `Program updated to ${target}`));
+    }
+    else {
+        skip(L('程序在 dsh 的插件目录里，随插件一起更新', 'The program lives in the dsh plugin directory and is updated with it'));
+    }
+    // 2. dsh 里的插件
+    // 插件没换成也继续：服务照样要用新版本重装，插件之后可以在 dsh 的插件市场更新
+    try {
+        await withLock(ctx, async () => {
+            const all = await loadAll(ctx);
+            await installDshPlugin(ctx, all, { version: target, replaceUser: true });
+            await saveAll(ctx, all);
+            if (!npm)
+                root = (await pluginRoot(ctx, all.config.dsh.profile)) ?? root;
+        });
+    }
+    catch (error) {
+        warn(`${error.message}${isDshModelError(error) && error.hint ? ` — ${error.hint}` : ''}`);
+    }
+    // 3. 用新版本重装服务并重启
+    info(L('用新版本重装服务…', 'Reinstalling the services with the new version…'));
+    const code = await runInherit(process.execPath, [join(root, 'bin', 'dsh-model.js'), 'repair', '--lang', lang()], {
+        env: { ...process.env, ...(process.versions.electron ? { ELECTRON_RUN_AS_NODE: '1' } : {}) },
+    });
+    if (code !== 0) {
+        warn(L(`repair 没有完成（退出码 ${code}）：执行 dsh-model repair 重试`, `repair did not finish (exit code ${code}); run dsh-model repair to retry`));
+        return 1;
+    }
+    ok(L(`已更新到 ${target}`, `Updated to ${target}`));
+    next(L('重启一次 dsh，管理页的新代码才会生效', 'Restart dsh once so the management page picks up the new code'));
+    return 0;
+}

package/dist/commands/setup.js

@@ -17,13 +17,16 @@ import { ensureDir } from '../util/fs.js';
 import { bold, info, next, ok, skip, warn } from '../util/output.js';
 import { findFreePort, isPortFree } from '../util/port.js';
 import { detectProxy, normalizeProxyUrl, redactProxy } from '../util/proxy.js';
-import { configureOpencode } from './opencode.js';
+import { askOpencodeKey, configureOpencode } from './opencode.js';
+import { opencodeConfigured } from '../integrations/opencode.js';
 import { ensureDaemon } from '../daemon/service.js';
 import { installDshPlugin } from '../integrations/dshplugin.js';
 import { enableCaddy } from './remote.js';
 import { DEFAULT_PUBLIC_PORT, publicHost } from '../remote/public.js';
 export async function setup(ctx, opts) {
     requireRootInVps(ctx);
+    // 要问的先问完再拿锁：等你输入时不占着锁，dsh 管理页照常能用（实测：卡在问 key 时页面新增 key 报"另一个命令正在运行"）
+    const opencodeKey = opts.skipOpencode || (await opencodeConfigured(ctx)) ? undefined : await askOpencodeKey();
     return withLock(ctx, async () => {
         const all = await loadAll(ctx);
         await ensureDir(ctx.paths.home, { owner: ctx.owner });
@@ -72,7 +75,7 @@ export async function setup(ctx, opts) {
         if (opts.skipOpencode)
             skip(L('已跳过（--skip-opencode）', 'Skipped (--skip-opencode)'));
         else
-            await step('opencode', () => configureOpencode(ctx, all));
+            await step('opencode', () => configureOpencode(ctx, all, opencodeKey !== undefined ? { key: opencodeKey } : {}));
         info('');
         info(bold('WorkBuddy'));
         if (opts.skipWorkbuddy)

package/dist/commands/uninstall.js

@@ -57,7 +57,7 @@ export async function uninstall(ctx, opts) {
             await disableRemote(ctx, all);
     });
     await step('dsh-plugin', async () => {
-        if (await removeDshPlugin(ctx, all))
+        if (await removeDshPlugin(ctx, all, { force: opts.removePlugin }))
             ok(L('已从 dsh 移除 dsh-model 插件', 'Removed the dsh-model plugin from dsh'));
     });
     await step('workbuddy', async () => {

package/dist/daemon/client.js

@@ -1,7 +1,7 @@
 // daemon/client.ts — 调守护进程 /control/*（CLI 用；dsh 插件宿主端也照这个格式调）
 import { loadBridgeConfig } from '../bridge/runtime.js';
 import { DshModelError } from '../errors.js';
-import { L } from '../i18n.js';
+import { L, lang } from '../i18n.js';
 export async function control(ctx, method, path, body, timeoutMs = 60_000) {
     const cfg = await loadBridgeConfig(ctx.paths.home);
     if (!cfg)
@@ -10,7 +10,7 @@ export async function control(ctx, method, path, body, timeoutMs = 60_000) {
     try {
         res = await fetch(`http://127.0.0.1:${cfg.port}/control${path}`, {
             method,
-            headers: { Authorization: `Bearer ${cfg.secret}`, ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}) },
+            headers: { Authorization: `Bearer ${cfg.secret}`, 'x-dsh-model-lang': lang(), ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}) },
             body: body !== undefined ? JSON.stringify(body) : undefined,
             signal: AbortSignal.timeout(timeoutMs),
         });

package/dist/daemon/core.js

@@ -5,6 +5,14 @@
 // 职责：来源状态与开关、登录会话（引擎 OAuth / WorkBuddy 自有登录 / OpenCode key）、key 管理、用量统计。
 // CLI 与 dsh 插件都只通过 /control/* 调这里，逻辑只有一份。
 import { spawn } from 'node:child_process';
+import { closeSync, openSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { latestVersion } from '../commands/self.js';
+import { lang } from '../i18n.js';
+import { which } from '../util/exec.js';
+import { PKG_ROOT, pkgVersion } from '../util/pkg.js';
 import { randomBytes } from 'node:crypto';
 import { currentBinary } from '../engine/install.js';
 import { buildRuntime, availableVariants, refreshCatalog, loadCatalogs } from '../bridge/runtime.js';
@@ -37,6 +45,7 @@ const RESYNC_RETRY_MS = 60_000;
 const USAGE_REFRESH_MS = 5 * 60 * 1000;
 /** 查不了用量的来源多久重新实测一次 */
 const PROBE_MS = 6 * 60 * 60 * 1000;
+const log_ = (m) => log(m);
 const log = (m) => console.error(`[${new Date().toISOString()}] ${m}`);
 export class Daemon {
     ctx;
@@ -622,6 +631,51 @@ export class Daemon {
             .filter((k) => !k.revokedAt)
             .map((k) => ({ name: k.name, key: redactKey(k.key), createdAt: k.createdAt, ...(snap.byKey[k.name] ? { stats: snap.byKey[k.name] } : {}) }));
     }
+    // —— 更新 / 卸载（管理页的按钮）——
+    selfJob;
+    /** 版本与能不能在页面上自管理（VPS 上要 root，只给命令） */
+    async selfInfo() {
+        const vps = this.ctx.mode === 'vps';
+        let log = '';
+        if (this.selfJob)
+            log = await readFile(this.selfJob.log, 'utf8').catch(() => '');
+        return {
+            version: pkgVersion(),
+            latest: await latestVersion(),
+            canManage: !vps,
+            ...(this.selfJob ? { job: { action: this.selfJob.action, startedAt: this.selfJob.startedAt, log: log.replace(/\x1b\[[0-9;]*m/g, '').slice(-6000) } } : {}),
+            commands: vps
+                ? { update: 'sudo npm install -g dsh-model@latest && sudo dsh-model setup', uninstall: 'sudo dsh-model uninstall' }
+                : { update: 'dsh-model update', uninstall: 'dsh-model uninstall' },
+        };
+    }
+    /**
+     * 在独立进程里跑 update / uninstall：两者都会重启或移除守护进程本身，所以不能在守护进程里做。
+     * 用 detached 让它脱离守护进程的进程组（launchd 重启服务时不会被一起杀掉）。
+     */
+    async startSelfJob(action, opts = {}) {
+        if (this.ctx.mode === 'vps')
+            throw new DshModelError('needs_root', L('服务器上要 root 权限，请在终端里执行命令', 'On the server this needs root; run the command in a terminal'));
+        // 卸载会删掉 home，日志放在外面
+        const log = action === 'uninstall' ? join(homedir(), 'dsh-model-uninstall.log') : join(this.ctx.paths.home, 'update.log');
+        const args = action === 'update' ? ['update'] : ['uninstall', '--yes', '--remove-plugin', ...(opts.keepAuth ? ['--keep-auth'] : [])];
+        const out = openSync(log, 'w', 0o600);
+        const cmd = [process.execPath, join(PKG_ROOT, 'bin', 'dsh-model.js'), ...args, '--lang', lang()];
+        // Linux 的 systemd --user 重启服务会杀掉整个 cgroup：交给 systemd-run 另起一个
+        const useSystemdRun = this.ctx.platform === 'linux' && (await which('systemd-run'));
+        const keepEnv = ['PATH', 'HOME', 'LANG', 'DSH_HOME', 'DSH_MODEL_HOME', 'HTTPS_PROXY', 'HTTP_PROXY', 'NO_PROXY'].filter((k) => process.env[k]).map((k) => `--setenv=${k}=${process.env[k]}`);
+        const viaSystemd = ['--user', '--collect', '--quiet', ...keepEnv, '--setenv=NO_COLOR=1', '/bin/sh', '-c', 'log="$1"; shift; exec "$@" >"$log" 2>&1', 'sh', log, ...cmd];
+        const child = spawn(useSystemdRun ? 'systemd-run' : cmd[0], useSystemdRun ? viaSystemd : cmd.slice(1), {
+            detached: true,
+            stdio: ['ignore', out, out],
+            env: { ...process.env, NO_COLOR: '1', NODE_NO_WARNINGS: '1', ...(process.versions.electron ? { ELECTRON_RUN_AS_NODE: '1' } : {}) },
+        });
+        child.unref();
+        closeSync(out);
+        this.selfJob = { action, startedAt: new Date().toISOString(), log };
+        log_(`daemon: started ${action} (pid ${child.pid})`);
+        return { started: true, log };
+    }
     /** 这个来源的全部模型，以及哪些显示在 dsh 里 */
     async sourceModels(id) {
         const def = mustSource(id);
@@ -758,6 +812,12 @@ export class Daemon {
                 return ok(this.statsSnapshot());
             if (method === 'GET' && path === '/endpoints')
                 return ok(await this.endpoints());
+            if (method === 'GET' && path === '/self')
+                return ok(await this.selfInfo());
+            if (method === 'POST' && path === '/self/update')
+                return ok(await this.startSelfJob('update'));
+            if (method === 'POST' && path === '/self/uninstall')
+                return ok(await this.startSelfJob('uninstall', { keepAuth: b.keepAuth === true }));
             if (method === 'GET' && path === '/usage')
                 return ok(await this.usage(query.get('refresh') === '1'));
             return fail(404, 'not_found', `${method} ${path}`);

package/dist/dsh/cli.js

@@ -45,10 +45,28 @@ function wrap(ctx, bin, args, proxy) {
     }
     return { cmd: bin, args };
 }
+/**
+ * 这个 profile 的 node_modules 当初链接的 pnpm 仓库：沿用它。
+ * 从终端调 dsh 和 dsh 桌面版自己用的仓库位置可能不同，不沿用就报 ERR_PNPM_UNEXPECTED_STORE（Mac 上实测）
+ */
+async function profileStoreDir(ctx, profile) {
+    try {
+        const text = await readFile(join(ctx.dshHome, 'profiles', profile, 'node_modules', '.modules.yaml'), 'utf8');
+        const dir = /"?storeDir"?\s*:\s*"?([^"\n,]+)"?/.exec(text)?.[1]?.trim();
+        if (!dir)
+            return null;
+        // 记录的是带版本的子目录（…/store/v11），store-dir 要它的上一级
+        return dir.replace(/\/v\d+$/, '');
+    }
+    catch {
+        return null;
+    }
+}
 /** dsh plugin --profile <p> <pnpm-args...>，输出直接给用户看（pnpm 进度） */
 export async function dshPlugin(ctx, profile, pnpmArgs, proxy) {
     const bin = await locateDshCli(ctx);
-    const w = wrap(ctx, bin, ['plugin', '--profile', profile, ...pnpmArgs], proxy);
+    const store = await profileStoreDir(ctx, profile);
+    const w = wrap(ctx, bin, ['plugin', '--profile', profile, ...pnpmArgs, ...(store ? [`--config.store-dir=${store}`] : [])], proxy);
     return runInherit(w.cmd, w.args, { env: dshEnv(ctx, proxy) });
 }
 /** profile 的 package.json 里有没有这个依赖（有就是用户或 dsh 已经装了） */

package/dist/integrations/dshplugin.js

@@ -1,35 +1,82 @@
 // integrations/dshplugin.ts — 把 dsh-model 自己装进 dsh 当插件（设置 → dsh-model 页面，设计 §14.5）
 //
-// 用 dsh 自己的插件管理：dsh plugin --profile <p> add <本包目录>。pnpm 对目录用 link:，
-// 所以以后 npm 更新 dsh-model，插件跟着更新，不用重装。卸载时只移除 dsh-model 装的那份。
+// 用 dsh 自己的插件管理：dsh plugin --profile <p> add dsh-model@<本版本>，和插件市场装的是同一个 npm 包。
+// 早先用 link: 指到 npm 全局目录：VPS 上那个目录归 root，之后从插件市场装就会 EACCES（实测），所以改掉。
+// 用户自己从市场 / GitHub 装的（依赖写法不是我们的）就不动它。卸载时只移除 dsh-model 装的那份。
+import { lstat, realpath, unlink } from 'node:fs/promises';
+import { join } from 'node:path';
 import { dshPlugin, profileHasDependency } from '../dsh/cli.js';
 import { resolveProfile } from '../dsh/locate.js';
 import { DshModelError } from '../errors.js';
 import { L } from '../i18n.js';
-import { PKG_ROOT } from '../util/pkg.js';
+import { pkgVersion } from '../util/pkg.js';
 import { ok, skip } from '../util/output.js';
 export const PLUGIN_NAME = 'dsh-model';
-export async function installDshPlugin(ctx, all) {
+/** 插件在 profile 里的实际目录（pnpm 的真实路径） */
+export async function pluginRoot(ctx, profile) {
+    try {
+        return await realpath(join(ctx.dshHome, 'profiles', await resolveProfile(ctx, profile), 'node_modules', PLUGIN_NAME));
+    }
+    catch {
+        return null;
+    }
+}
+const NPM_PACKAGE_URL = `https://registry.npmjs.org/${PLUGIN_NAME}`;
+const GITHUB_SPEC = 'https://github.com/AIcivilization/dsh-model/archive/refs/heads/main.tar.gz';
+/** 我们自己写进 profile 的依赖：link:（旧版）、精确版本号、GitHub 主干包 */
+function isOurSpec(spec) {
+    return spec.startsWith('link:') || /^\d+\.\d+\.\d+(-[\w.]+)?$/.test(spec) || spec === GITHUB_SPEC;
+}
+/** 本版本发到 npm 了就用 npm（和插件市场同一个包），否则（开发版）用 GitHub 主干 */
+async function desiredSpec() {
+    const v = pkgVersion();
+    try {
+        const r = await fetch(`${NPM_PACKAGE_URL}/${v}`, { signal: AbortSignal.timeout(10_000) });
+        if (r.ok)
+            return { spec: v, install: `${PLUGIN_NAME}@${v}` };
+    }
+    catch {
+        // 网络不通：退到 GitHub
+    }
+    return { spec: GITHUB_SPEC, install: GITHUB_SPEC };
+}
+/**
+ * opts.version：装这个 npm 版本（更新时用）；opts.replaceUser：用户自己从市场装的也换成它（管理页点「更新」时）
+ */
+export async function installDshPlugin(ctx, all, opts = {}) {
     const profile = await resolveProfile(ctx, all.config.dsh.profile);
     const existing = await profileHasDependency(ctx, profile, PLUGIN_NAME);
-    if (existing) {
+    if (existing && !isOurSpec(existing) && !opts.replaceUser) {
+        skip(L(`dsh 插件已由你自己安装（${existing}），不改动`, `dsh plugin was installed by you (${existing}); left as is`));
+        all.state.plugins = [...(all.state.plugins ?? []).filter((p) => p.name !== PLUGIN_NAME), { name: PLUGIN_NAME, version: existing, installedByUs: false, installedAt: new Date().toISOString() }];
+        return;
+    }
+    const want = opts.version ? { spec: opts.version, install: `${PLUGIN_NAME}@${opts.version}` } : await desiredSpec();
+    if (existing === want.spec) {
         skip(L(`dsh 插件已安装（${existing}）`, `dsh plugin already installed (${existing})`));
-        if (!all.state.plugins?.some((p) => p.name === PLUGIN_NAME)) {
-            all.state.plugins = [...(all.state.plugins ?? []), { name: PLUGIN_NAME, version: existing, installedByUs: existing.startsWith('link:'), installedAt: new Date().toISOString() }];
-        }
         return;
     }
-    const code = await dshPlugin(ctx, profile, ['add', PKG_ROOT, '--config.strict-dep-builds=false'], all.config.proxy);
+    // 旧版留下的符号链接（profile 里已没有这个依赖，或者是 link:）：先去掉，pnpm 才不会往链接的目标里写
+    const linkPath = join(ctx.dshHome, 'profiles', profile, 'node_modules', PLUGIN_NAME);
+    try {
+        if ((await lstat(linkPath)).isSymbolicLink())
+            await unlink(linkPath);
+    }
+    catch {
+        // 不存在
+    }
+    const code = await dshPlugin(ctx, profile, ['add', want.install, '--config.strict-dep-builds=false'], all.config.proxy);
     const installed = await profileHasDependency(ctx, profile, PLUGIN_NAME);
     if (code !== 0 || !installed) {
-        throw new DshModelError('plugin_install_failed', L(`把 dsh-model 装进 dsh 失败（退出码 ${code}）`, `Failed to install dsh-model into dsh (exit code ${code})`), L('可以在 dsh 的插件页手动安装', 'You can install it from the dsh Plugins page'));
+        throw new DshModelError('plugin_install_failed', L(`把 dsh-model 装进 dsh 失败（退出码 ${code}）`, `Failed to install dsh-model into dsh (exit code ${code})`), L('可以在 dsh 的插件市场搜索 dsh-model 安装', 'You can install it from the dsh plugin marketplace (search dsh-model)'));
     }
     all.state.plugins = [...(all.state.plugins ?? []).filter((p) => p.name !== PLUGIN_NAME), { name: PLUGIN_NAME, version: installed, installedByUs: true, installedAt: new Date().toISOString() }];
-    ok(L('dsh 插件已安装：在 dsh「设置 → dsh-model」里管理来源、用量和 key（刷新一下页面）', 'dsh plugin installed: manage sources, usage and keys in dsh Settings → dsh-model (reload the page)'));
+    ok(L(`dsh 插件已安装（${installed}）：重启一次 dsh，在「设置 → dsh-model」里管理来源、用量和 key`, `dsh plugin installed (${installed}): restart dsh once, then manage sources, usage and keys in Settings → dsh-model`));
 }
-export async function removeDshPlugin(ctx, all) {
+/** 只移除我们装的那份；force（管理页点「卸载」）时用户自己从市场装的也移除 */
+export async function removeDshPlugin(ctx, all, opts = {}) {
     const rec = all.state.plugins?.find((p) => p.name === PLUGIN_NAME);
-    if (!rec?.installedByUs)
+    if (!rec?.installedByUs && !opts.force)
         return false;
     const profile = await resolveProfile(ctx, all.config.dsh.profile);
     if (await profileHasDependency(ctx, profile, PLUGIN_NAME)) {

package/dist/service/index.js

@@ -25,6 +25,8 @@ function bridgeProgram() {
 export function bridgeEnv(ctx, proxy) {
     return {
         DSH_MODEL_HOME: ctx.paths.home,
+        // 从 dsh 桌面版的管理页一键安装时，process.execPath 是 DeepSeek Harness（Electron）：服务里也要让它当 Node 跑
+        ...(process.versions.electron ? { ELECTRON_RUN_AS_NODE: '1' } : {}),
         ...(proxy ? { NODE_USE_ENV_PROXY: '1', HTTPS_PROXY: proxy, HTTP_PROXY: proxy, NO_PROXY: '127.0.0.1,localhost,::1,.tencent.com,.codebuddy.cn,.workbuddy.cn,.qq.com' } : {}),
     };
 }

package/dist/state.js

@@ -67,7 +67,7 @@ export async function withLock(ctx, fn) {
             throw error;
         const pid = Number((await readFile(ctx.paths.lock, 'utf8').catch(() => '')).trim());
         if (pid && pid !== process.pid && isAlive(pid)) {
-            throw new DshModelError('locked', L(`另一个 dsh-model 命令正在运行（pid ${pid}）`, `Another dsh-model command is running (pid ${pid})`));
+            throw new DshModelError('locked', L(`另一个 dsh-model 命令正在运行（pid ${pid}），等它结束再试`, `Another dsh-model command is running (pid ${pid}); try again when it finishes`), L('如果是终端里的命令停在等你输入，回到终端完成它', 'If a command in a terminal is waiting for your input, finish it there'));
         }
         await rm(ctx.paths.lock, { force: true });
         await acquire();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-model",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Many model sources behind one authenticated OpenAI-compatible endpoint for DeepSeek Harness (dsh) and your tools: WorkBuddy, OpenCode Zen and your CLI subscriptions (Codex, Kimi…), with a management page inside dsh. 多家模型汇成一个 OpenAI 兼容地址，dsh 和其他软件都能直接用。",
   "keywords": [
     "dsh-plugin",

package/plugin/client.js

@@ -33,7 +33,7 @@ window.__ModuleLoader__.load({
         method: 'POST',
         credentials: 'same-origin',
         headers: { 'content-type': 'application/json', 'x-dsh-model-token': token },
-        body: JSON.stringify({ method, path, ...(body !== undefined ? { body } : {}) }),
+        body: JSON.stringify({ method, path, lang: isZh() ? 'zh' : 'en', ...(body !== undefined ? { body } : {}) }),
       })
       const j = await r.json().catch(() => ({}))
       if (r.status === 403 && !retried && j?.error?.code === 'refused') {
@@ -327,6 +327,8 @@ window.__ModuleLoader__.load({
         }, (e) => alive && setMsg(e.message))
         return () => { alive = false }
       }, [source.id])
+      if (selfJob) return h(SelfProgress, { job: selfJob, onDone: () => { setSelfJob(null); void load(true) } })
+      if (errCode === 'daemon_not_configured' || errCode === 'daemon_unreachable') return h(Onboarding, { code: errCode, onDone: () => void load(true) })
       if (!data) return h('div', { style: { ...S.meta, paddingLeft: 46, marginTop: 8 } }, msg || L('加载中…', 'Loading…'))
       const flip = (id) => setSel((x) => { const n = new Set(x); n.has(id) ? n.delete(id) : n.add(id); return n })
       const save = async (models) => {
@@ -499,19 +501,155 @@ window.__ModuleLoader__.load({
             h('td', { style: S.td }, v.d1.tokensPerSec ?? '-')))))))
     }
 
+    /** 守护进程还没装 / 没在运行：说明 + 一键安装（本机）或命令（VPS 上要 root） */
+    function Onboarding({ code, onDone }) {
+      const [busy, setBusy] = useState(false)
+      const [res, setRes] = useState(null)
+      const notInstalled = code === 'daemon_not_configured'
+      const action = notInstalled ? 'setup' : 'repair'
+      const run = async () => {
+        setBusy(true)
+        setRes(null)
+        try {
+          const r = await fetch('/api-dsh-model/setup', {
+            method: 'POST',
+            credentials: 'same-origin',
+            headers: { 'content-type': 'application/json', 'x-dsh-model-token': token },
+            body: JSON.stringify({ action, lang: isZh() ? 'zh' : 'en' }),
+          })
+          const j = await r.json().catch(() => ({}))
+          if (r.status === 403 && j?.error?.code === 'refused') { await refreshToken(); setBusy(false); return run() }
+          setRes(j)
+          if (j.code === 0) setTimeout(onDone, 1500)
+        } catch (e) {
+          setRes({ code: -1, output: e.message })
+        } finally {
+          setBusy(false)
+        }
+      }
+      const cmds = notInstalled ? ['npm install -g dsh-model', 'dsh-model setup'] : ['dsh-model repair']
+      const vpsCmds = notInstalled ? ['sudo npm install -g dsh-model', 'sudo dsh-model setup'] : ['sudo dsh-model repair']
+      const cmdBlock = (list) => h('div', { style: { ...S.card, padding: '8px 12px', marginTop: 8 } }, list.map((c) => h('div', { key: c, style: { ...S.line, minHeight: 30 } }, h('code', { style: { ...S.mono, ...S.grow } }, c), h(CopyButton, { get: c }))))
+      return h('div', { style: { color: C.text, maxWidth: 820 } },
+        h('div', { style: S.section },
+          h('div', { style: S.h }, notInstalled ? L('还差一步：在这台机器上装好 dsh-model', 'One more step: set up dsh-model on this machine') : L('dsh-model 的服务没在运行', 'The dsh-model service is not running')),
+          h('p', { style: S.note }, notInstalled
+            ? L('这个页面只是管理界面；模型由 dsh-model 在本机运行的服务提供（统一端点、WorkBuddy bridge、登录与用量）。装好后，来源、key 和模型都在这里管理。', 'This page is only the control panel; models are served by dsh-model\'s local service (the unified endpoint, WorkBuddy bridge, sign-ins and usage). Once it is set up, manage sources, keys and models here.')
+            : L('可能是电脑重启后服务没起来，或者刚升级。修复会按记录重新注册并启动服务。', 'The service may not have started after a reboot, or was just upgraded. Repair re-registers and starts it from the saved records.')),
+          res?.vps ? h('div', null,
+            h('p', { style: { ...S.note, color: C.text } }, L('这是 dsh-vps 服务器：安装要 root 权限，请在服务器终端里执行：', 'This is a dsh-vps server: setup needs root, so run this in a server terminal:')),
+            cmdBlock(vpsCmds),
+            h('p', { style: { ...S.note, marginTop: 8 } }, L('装好后刷新本页。', 'Reload this page when done.'))) : h('div', null,
+            h('div', { style: S.line },
+              h('button', { type: 'button', style: S.btnPrimary, disabled: busy, onClick: run }, busy ? (notInstalled ? L('安装中…（约 1 分钟）', 'Setting up… (about a minute)') : L('修复中…', 'Repairing…')) : (notInstalled ? L('一键安装', 'Set up now') : L('修复', 'Repair'))),
+              h('button', { type: 'button', style: S.btn, onClick: onDone }, L('重新检测', 'Check again'))),
+            h('p', { style: { ...S.note, marginTop: 10 } }, L('也可以在终端里执行：', 'Or run in a terminal:')),
+            cmdBlock(cmds)),
+          res && !res.vps ? h('div', { style: { marginTop: 12 } },
+            h('div', { style: { fontSize: 12, color: res.code === 0 ? C.ok : C.err, marginBottom: 6 } }, res.code === 0 ? L('完成，正在加载…', 'Done, loading…') : L(`没有完成（退出码 ${res.code}），输出如下：`, `Did not finish (exit code ${res.code}); output:`)),
+            h('pre', { style: { ...S.mono, ...S.card, padding: 10, maxHeight: 260, overflow: 'auto', whiteSpace: 'pre-wrap', margin: 0 } }, res.output || '')) : null))
+    }
+
+    const newer = (a, b) => {
+      const pa = String(a || '').split(/[.-]/).map((x) => parseInt(x, 10) || 0)
+      const pb = String(b || '').split(/[.-]/).map((x) => parseInt(x, 10) || 0)
+      for (let i = 0; i < 3; i++) if ((pa[i] || 0) !== (pb[i] || 0)) return (pa[i] || 0) > (pb[i] || 0)
+      return false
+    }
+
+    /** 版本、更新、卸载 */
+    function AboutCard({ onJob }) {
+      const [info, setInfo] = useState(null)
+      const [confirming, setConfirming] = useState(false)
+      const [keepAuth, setKeepAuth] = useState(false)
+      const [err, setErr] = useState('')
+      useEffect(() => {
+        let alive = true
+        api('GET', '/self').then((r) => alive && setInfo(r), () => {})
+        return () => { alive = false }
+      }, [])
+      if (!info) return null
+      const hasUpdate = info.latest && newer(info.latest, info.version)
+      const start = async (action) => {
+        setErr('')
+        try {
+          await api('POST', `/self/${action}`, action === 'uninstall' ? { keepAuth } : {})
+          onJob({ action, from: info.version, target: info.latest })
+        } catch (e) {
+          setErr(e.message)
+        }
+      }
+      return h('div', { style: S.section },
+        h('div', { style: S.h }, L('关于', 'About')),
+        h('div', { style: { ...S.card, padding: '12px 14px' } },
+          h('div', { style: S.line },
+            h('span', { style: { ...S.label, ...S.grow } }, `dsh-model ${info.version}`,
+              h('span', { style: { ...S.meta, marginLeft: 8 } }, info.latest ? (hasUpdate ? L(`有新版本 ${info.latest}`, `${info.latest} available`) : L('已是最新', 'Up to date')) : L('查不到最新版本', 'Latest version unknown'))),
+            info.canManage && hasUpdate ? h('button', { type: 'button', style: S.btnPrimary, onClick: () => void start('update') }, L(`更新到 ${info.latest}`, `Update to ${info.latest}`)) : null,
+            info.canManage ? h('button', { type: 'button', style: { ...S.btn, color: C.err }, onClick: () => setConfirming(true) }, L('卸载', 'Uninstall')) : null),
+          !info.canManage ? h('div', { style: { marginTop: 8 } },
+            h('div', { style: S.meta }, L('服务器上更新和卸载要 root 权限，请在服务器终端里执行：', 'On the server, update and uninstall need root; run in a server terminal:')),
+            [[L('更新', 'Update'), info.commands.update], [L('卸载', 'Uninstall'), info.commands.uninstall]].map(([t, c]) => h('div', { key: c, style: { ...S.line, minHeight: 30 } },
+              h('span', { style: { ...S.meta, width: 40 } }, t), h('code', { style: { ...S.mono, ...S.grow } }, c), h(CopyButton, { get: c })))) : null,
+          confirming ? h('div', { style: { marginTop: 10, padding: 10, border: `1px solid ${C.err}`, borderRadius: 8 } },
+            h('div', { style: { fontSize: 13, color: C.text, lineHeight: 1.7 } }, L('卸载会：关闭对外访问 → 移除这个管理页 → 把 dsh 里的模型配置还原 → 停止并删除引擎与守护进程 → 删除 ~/.dsh-model（含各家登录、OpenCode key、WorkBuddy 令牌副本）。', 'Uninstall will: turn off remote access → remove this page → restore dsh\'s model config → stop and delete the engine and daemon → delete ~/.dsh-model (including sign-ins, the OpenCode key and WorkBuddy token copies).')),
+            h('label', { style: { ...S.line, fontSize: 13, marginTop: 6, cursor: 'pointer' } },
+              h('input', { type: 'checkbox', checked: keepAuth, onChange: (e) => setKeepAuth(e.target.checked) }),
+              L('先把各家登录凭据备份到主目录（以后重装可以拷回来）', 'Back up provider sign-ins to the home folder first (to reuse after reinstalling)')),
+            h('div', { style: { ...S.line, marginTop: 8 } },
+              h('button', { type: 'button', style: { ...S.btnPrimary, background: C.err }, onClick: () => void start('uninstall') }, L('确认卸载', 'Uninstall')),
+              h('button', { type: 'button', style: S.btn, onClick: () => setConfirming(false) }, L('取消', 'Cancel')))) : null,
+          err ? h('div', { style: { fontSize: 12, color: C.err, marginTop: 6 } }, err) : null))
+    }
+
+    /** 更新 / 卸载进行中：守护进程会重启或消失，期间不显示别的 */
+    function SelfProgress({ job, onDone }) {
+      const [state, setState] = useState({ phase: 'running', log: '' })
+      useEffect(() => {
+        let stop = false
+        const tick = async () => {
+          if (stop) return
+          try {
+            const r = await api('GET', '/self')
+            if (r.job?.log) setState((s) => ({ ...s, log: r.job.log }))
+            if (job.action === 'update' && r.version !== job.from) { setState({ phase: 'done', log: r.job?.log || '' }); return }
+          } catch (e) {
+            if (job.action === 'uninstall' && e.code === 'daemon_not_configured') { setState((s) => ({ ...s, phase: 'done' })); return }
+          }
+          setTimeout(tick, 2000)
+        }
+        const t = setTimeout(tick, 2000)
+        return () => { stop = true; clearTimeout(t) }
+      }, [])
+      const upd = job.action === 'update'
+      const title = state.phase === 'done'
+        ? (upd ? L('更新完成', 'Update complete') : L('已卸载', 'Uninstalled'))
+        : (upd ? L(`正在更新到 ${job.target}…（服务会重启一下）`, `Updating to ${job.target}… (the service restarts briefly)`) : L('正在卸载…', 'Uninstalling…'))
+      return h('div', { style: { color: C.text, maxWidth: 820 } },
+        h('div', { style: S.section },
+          h('div', { style: S.h }, title),
+          state.phase === 'done' ? h('p', { style: { ...S.note, color: C.text } }, upd
+            ? L('完全退出 dsh 再打开一次，管理页的新代码才会生效。', 'Quit dsh completely and open it again so the management page loads the new code.')
+            : L('dsh 里的 dsh-model 模型已移除。完全退出 dsh 再打开，这一页就会消失。日志在主目录的 dsh-model-uninstall.log。', 'dsh-model\'s models are gone from dsh. Quit dsh completely and reopen it and this page disappears. The log is ~/dsh-model-uninstall.log.')) : null,
+          state.log ? h('pre', { style: { ...S.mono, ...S.card, padding: 10, maxHeight: 300, overflow: 'auto', whiteSpace: 'pre-wrap', margin: 0 } }, state.log) : null,
+          state.phase === 'done' && upd ? h('button', { type: 'button', style: { ...S.btn, marginTop: 10 }, onClick: onDone }, L('返回', 'Back')) : null))
+    }
+
     // —— 整页 ——
     function SettingsSection() {
       const [data, setData] = useState(null)
       const [err, setErr] = useState('')
+      const [errCode, setErrCode] = useState('')
+      const [selfJob, setSelfJob] = useState(null)
       const [login, setLogin] = useState(null)
       const [keyDialog, setKeyDialog] = useState(false)
       const alive = useRef(true)
       const load = useCallback(async (refresh) => {
         try {
           const [sources, keys, stats, endpoints] = await Promise.all([api('GET', refresh ? '/sources?refresh=1' : '/sources'), api('GET', '/keys'), api('GET', '/stats'), api('GET', '/endpoints').catch(() => null)])
-          if (alive.current) { setData({ sources, keys, stats, endpoints }); setErr('') }
+          if (alive.current) { setData({ sources, keys, stats, endpoints }); setErr(''); setErrCode('') }
         } catch (e) {
-          if (alive.current) setErr(e.hint ? `${e.message}（${e.hint}）` : e.message)
+          if (alive.current) { setErr(e.hint ? `${e.message}（${e.hint}）` : e.message); setErrCode(e.code || '') }
         }
       }, [])
       useEffect(() => {
@@ -527,6 +665,7 @@ window.__ModuleLoader__.load({
         h(SourcesCard, { sources: data.sources, reload: () => load(false), onLogin: (s, session) => setLogin({ source: s, session }), onKey: () => setKeyDialog(true) }),
         h(KeysCard, { keys: data.keys, reload: () => load(false) }),
         h(ModelsCard, { stats: data.stats }),
+        h(AboutCard, { onJob: setSelfJob }),
         login ? h(LoginDialog, { source: login.source, session: login.session, onDone: () => { setLogin(null); void load(true) }, onClose: () => { setLogin(null); void load(false) } }) : null,
         keyDialog ? h(KeyDialog, { onDone: () => { setKeyDialog(false); void load(true) }, onClose: () => setKeyDialog(false) }) : null)
     }

package/plugin/index.js

@@ -7,10 +7,16 @@
 // - 只转发白名单里的控制接口。
 // 写法照 dsh-vps-manager（同作者）的 routes.js。
 
+import { spawn } from 'node:child_process'
 import { randomBytes } from 'node:crypto'
-import { readFile } from 'node:fs/promises'
+import { access, readFile } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+/** 本包根目录：插件就是完整的 dsh-model 包，自带命令行 */
+const PKG_ROOT = fileURLToPath(new URL('..', import.meta.url))
+const VPS_ROOT = '/opt/dsh-vps'
 
 export const name = 'dsh-model'
 export const inject = []
@@ -29,6 +35,8 @@ const ALLOWED = [
   ['POST', /^\/keys\/[A-Za-z0-9._-]{1,40}\/rotate$/],
   ['POST', /^\/keys\/[A-Za-z0-9._-]{1,40}\/reveal$/],
   ['GET', /^\/endpoints$/],
+  ['GET', /^\/self$/],
+  ['POST', /^\/self\/(update|uninstall)$/],
   ['GET', /^\/sources\/[a-z-]{2,20}\/models$/],
   ['POST', /^\/sources\/[a-z-]{2,20}\/models$/],
   ['POST', /^\/sources\/[a-z-]{2,20}\/(enable|disable|logout)$/],
@@ -87,6 +95,29 @@ function check(req, token, needToken = true) {
   return null
 }
 
+const exists = (p) => access(p).then(() => true, () => false)
+
+/** 从页面一键执行 setup / repair（只在本机模式：VPS 上要 root，页面只给命令）。同一时间只跑一个 */
+let running = null
+function runCli(args) {
+  if (running) return running
+  running = new Promise((resolve) => {
+    let out = ''
+    const child = spawn(process.execPath, [join(PKG_ROOT, 'bin/dsh-model.js'), ...args], {
+      // dsh 桌面版可能跑在 Electron 里：让它当普通 Node 用
+      env: { ...process.env, ELECTRON_RUN_AS_NODE: '1', NO_COLOR: '1', FORCE_COLOR: '0' },
+      stdio: ['ignore', 'pipe', 'pipe'],
+    })
+    const add = (b) => { out = (out + b.toString()).slice(-20000) }
+    child.stdout.on('data', add)
+    child.stderr.on('data', add)
+    const timer = setTimeout(() => child.kill('SIGTERM'), 10 * 60 * 1000)
+    child.on('error', (e) => { clearTimeout(timer); resolve({ code: -1, output: `${out}\n${e.message}` }) })
+    child.on('exit', (code) => { clearTimeout(timer); resolve({ code: code ?? -1, output: out.replace(/\x1b\[[0-9;]*m/g, '') }) })
+  }).finally(() => { running = null })
+  return running
+}
+
 export function apply(ctx) {
   const token = randomBytes(24).toString('hex')
   ctx.inject(['webServer'], (webCtx) => {
@@ -122,7 +153,7 @@ export function apply(ctx) {
           try {
             const r = await fetch(`http://127.0.0.1:${cfg.port}/control${path}`, {
               method,
-              headers: { Authorization: `Bearer ${cfg.secret}`, ...(call.body !== undefined ? { 'Content-Type': 'application/json' } : {}) },
+              headers: { Authorization: `Bearer ${cfg.secret}`, 'x-dsh-model-lang': call.lang === 'en' ? 'en' : 'zh', ...(call.body !== undefined ? { 'Content-Type': 'application/json' } : {}) },
               body: call.body !== undefined && method !== 'GET' ? JSON.stringify(call.body) : undefined,
               signal: AbortSignal.timeout(90_000),
             })
@@ -136,6 +167,29 @@ export function apply(ctx) {
       }),
     )
 
+    // 页面上的「一键安装 / 修复」
+    track(
+      ws.register({
+        kind: 'exact',
+        path: '/api-dsh-model/setup',
+        handler: async (req, res) => {
+          const bad = check(req, token)
+          if (bad) return json(res, bad.code, { error: { code: 'refused', message: bad.error } })
+          let body
+          try {
+            body = JSON.parse((await readBody(req)) || '{}')
+          } catch {
+            return json(res, 400, { error: { code: 'invalid_json', message: 'invalid JSON' } })
+          }
+          if (await exists(VPS_ROOT)) return json(res, 200, { vps: true })
+          const action = body.action === 'repair' ? 'repair' : 'setup'
+          const lang = body.lang === 'en' ? 'en' : 'zh'
+          const r = await runCli(action === 'repair' ? ['repair', '--lang', lang] : ['setup', '--skip-dsh-plugin', '--lang', lang])
+          return json(res, 200, r)
+        },
+      }),
+    )
+
     // 令牌对不上时（dsh 重启、插件热更新）页面悄悄来换：只认同源 JSON，并且先过 dsh 自己的登录
     track(
       ws.register({