dsh-voice 0.3.6 → 0.4.0

package/CHANGELOG.md

@@ -4,6 +4,21 @@
 
 [历史英文记录](docs/CHANGELOG.en.md)
 
+## 0.4.0 (2026-10-26)
+
+- Add this plugin’s own update controls and independent preferences. Automatic installation stays off until explicitly enabled.
+- Confirm manual installs, preserve local sources and disabled state, pause for tasks or unsaved changes, and use native DSH recovery without forced restarts.
+- Require the public DSH 0.2.1-rc.3 update APIs; Suite components remain managed through Suite.
+
+## 0.3.7 (2026-10-20)
+
+- 修复 voice_stt 的引擎/地址错配：openai、groq 分支不再写死厂商地址，一律使用配置 `asrBaseUrl`；模型传的 `engine` 与配置 `asrEngine` 不一致时直接报错，避免把 groq 的密钥发给 OpenAI 或把自建服务的密钥发给厂商
+- 修复读写越界：`audio` 与 `output`/`outputDir` 解析后必须落在会话工作区内（含符号链接解析），工作区外的文件不再被整份上传给 ASR，也不再在工作区外创建文件
+- 拒绝跟随符号链接写入（含悬空链接），新建文件用 `O_EXCL`；转写文本改为 0600
+- `voice_preview` 复用 `resolveOutputPath`：`overwrite=false` 时同名样例加序号，不再直接覆盖
+- 音频大小按实际读到的字节数复查，`stat` 报 0 字节的伪文件不再绕过 25MB 预检
+- 新增 8 项回归测试（工作区越界、私钥不被上传、符号链接、engine 错配、自定义网关、preview 不覆盖）
+
 ## 0.3.6 (2026-10-05)
 
 - ASR 网络与响应体读取均受超时和取消控制；保留用户取消原因，空白或缺失识别结果明确报错，不伪造成功文本文件。

package/README.en.md

@@ -8,6 +8,8 @@ Generate speech from text or transcribe audio through a compatible API.
 
 [![npm](https://img.shields.io/npm/v/dsh-voice)](https://www.npmjs.com/package/dsh-voice) [![downloads](https://raw.githubusercontent.com/STARDUSTLC666/dsh-suite/npm-downloads/assets/dsh-voice-downloads.svg)](https://www.npmjs.com/package/dsh-voice)
 
+Feedback and contributions are welcome: report [issues](https://github.com/STARDUSTLC666/dsh-voice/issues) or submit [pull requests](https://github.com/STARDUSTLC666/dsh-voice/pulls).
+
 ## What it does
 
 - Generate speech using the Edge online read-aloud service.
@@ -41,6 +43,12 @@ Detailed configuration, tool arguments and troubleshooting are in the [usage gui
 - [Validation scope and history](docs/VALIDATION.md)
 - [Report a problem or suggest a feature](https://github.com/STARDUSTLC666/dsh-voice/issues)
 
+## Plugin updates
+
+Requires DSH 0.2.1-rc.3 or newer. Each plugin provides its own check, release-note and confirmed-install controls on its page or in settings. Preferences are independent. Automatic checks are on by default; **automatic installation is off by default**. Explicitly enabled automatic updates only install compatible stable patches while idle with no unsaved changes. Disable, defer or ignore reminders per plugin. DSH is never restarted or upgraded automatically, and local-source installs are preserved. Suite components clearly direct updates through Suite.
+
+Older releases need one manual update in native plugin management to acquire these controls. Publishing to npm does not replace an existing user installation.
+
 ## License
 
 [MIT](LICENSE)

package/README.md

@@ -8,6 +8,8 @@
 
 [![npm](https://img.shields.io/npm/v/dsh-voice)](https://www.npmjs.com/package/dsh-voice) [![downloads](https://raw.githubusercontent.com/STARDUSTLC666/dsh-suite/npm-downloads/assets/dsh-voice-downloads.svg)](https://www.npmjs.com/package/dsh-voice)
 
+欢迎使用，遇到问题或有改进建议，请提交 [issues](https://github.com/STARDUSTLC666/dsh-voice/issues) 和 [PR](https://github.com/STARDUSTLC666/dsh-voice/pulls)。
+
 ## 功能
 
 - 使用 Edge 在线朗读服务生成语音。
@@ -41,6 +43,12 @@ dsh plugin --profile desktop add dsh-voice
 - [验证范围与历史记录](docs/VALIDATION.md)
 - [问题反馈与功能建议](https://github.com/STARDUSTLC666/dsh-voice/issues)
 
+## 插件更新
+
+需要 DSH 0.2.1-rc.3 或更新版本。每个插件在自己的页面或设置项提供检查、更新记录与确认安装入口，开关独立保存。自动检查默认开启；**自动安装默认关闭**，只有明确授权后，兼容的稳定补丁才会在空闲且没有未保存修改时安装。可单独关闭、推迟或忽略提醒；不会强制重启 DSH、升级 DSH 本体或替换本地源码安装。Suite 安装的组件会明确提示通过 Suite 整包更新。
+
+旧版用户先在官方插件管理中手动更新一次，之后才会获得此入口。发布到 npm 不会直接替换用户已经安装的版本。
+
 ## License
 
 [MIT](LICENSE)

package/docs/USAGE.en.md

@@ -40,7 +40,7 @@ Then restart the web service. To clean up fully, also remove the plugin entry fr
 | Tool | Purpose | Key parameters |
 | :-- | :-- | :-- |
 | `voice_tts` | Synthesize MP3 from text (Edge online service) | `text` required; `voice`/`rate`/`pitch`/`output` optional |
-| `voice_stt` | Transcribe audio to text | `audio` required; `engine`/`model`/`language`/`prompt`/`output` optional |
+| `voice_stt` | Transcribe audio to text | `audio` required; `model`/`language`/`prompt`/`output` optional; `engine` may only repeat the configured `asrEngine` |
 | `voice_list` | Curated voice catalog | none |
 | `voice_preview` | Batch-generate short preview MP3s | optional `voices` (≤8) / `text` / `outputDir` |
 | `voice_health` | Offline config self-check | none |
@@ -50,7 +50,7 @@ Then restart the web service. To clean up fully, also remove the plugin entry fr
 ```text
 voice_tts { text: hello world }                              # outputs voice_output.mp3
 voice_tts { text: hello, voice: en-US-AriaNeural }           # English female voice
-voice_stt { audio: E:\audio\meeting.mp3, language: zh }     # transcribe a recording
+voice_stt { audio: meeting.mp3, language: zh }               # transcribe a recording inside the session workspace
 voice_list {}
 voice_preview { voices: [zh-CN-XiaoxiaoNeural, en-US-AriaNeural] } # generate two preview samples
 voice_health {}                                              # self-check TTS / ASR / proxy config
@@ -60,7 +60,11 @@ voice_health {}                                              # self-check TTS /
 
 - **Direct edge-tts protocol**: the Sec-MS-GEC token is **generated locally** with the official DRM algorithm (SHA256 of Windows file time + trusted client token, 5-minute windows); transport uses the `ws` library with permessage-deflate and an optional HTTP CONNECT proxy tunnel
 - **API configuration**: TTS needs no separate API key. STT uses your configured ASR service, whose pricing and limits apply.
-- Up-front validation: text ≤ 5000 chars, audio ≤ 25MB; same-name outputs auto-suffixed
+- Up-front validation: text ≤ 5000 chars, audio ≤ 25MB (re-checked against the bytes actually read); same-name outputs auto-suffixed
+- **Reads and writes stay inside the session workspace**: `audio`, `output` and `outputDir` must resolve (symlinks included) under `session.header.cwd`; anything outside is rejected. Copy the file in first.
+- **Symlinks are never written through**: a target that is a symlink (including a dangling one) is refused, and new files are created with `O_EXCL`.
+- **Transcripts are 0600**: the `.txt` written by `voice_stt` is owner-only (Windows does not enforce the mode bits).
+- **The key only goes to the configured endpoint**: ASR always uses `asrBaseUrl` from config (the groq/openai presets are defaults only); an `engine` argument that differs from config is rejected instead of shipping the key to another vendor.
 - Protocol aligned with current open-source edge-tts (7.x) — no reliance on the outdated token endpoint
 
 ## Development

package/docs/USAGE.md

@@ -40,7 +40,7 @@ dsh plugin --profile web remove dsh-voice
 | 工具 | 作用 | 关键参数 |
 | :-- | :-- | :-- |
 | `voice_tts` | 文字合成 MP3（Edge 在线服务） | `text` 必填；`voice`/`rate`/`pitch`/`output` 可选 |
-| `voice_stt` | 音频转文字 | `audio` 必填；`engine`/`model`/`language`/`prompt`/`output` 可选 |
+| `voice_stt` | 音频转文字 | `audio` 必填；`model`/`language`/`prompt`/`output` 可选；`engine` 只能与配置 `asrEngine` 相同 |
 | `voice_list` | 常用音色清单 | 无 |
 | `voice_preview` | 音色试听：批量生成短样例 MP3 | `voices`（≤8 个）/ `text` / `outputDir` 可选 |
 | `voice_health` | 配置自检（不联网） | 无 |
@@ -50,7 +50,7 @@ dsh plugin --profile web remove dsh-voice
 ```text
 voice_tts { text: 今天的 AI 早报来了 }                    # 晓晓女声，输出 voice_output.mp3
 voice_tts { text: hello, voice: en-US-AriaNeural }        # 英文女声
-voice_stt { audio: E:\audio\meeting.mp3, language: zh } # 转写会议录音
+voice_stt { audio: meeting.mp3, language: zh }           # 转写会话工作区里的录音
 voice_list {}
 voice_preview { voices: [zh-CN-XiaoxiaoNeural, en-US-AriaNeural] } # 生成两个试听样例
 voice_health {}                                          # 自检 TTS / ASR / 代理配置
@@ -60,7 +60,11 @@ voice_health {}                                          # 自检 TTS / ASR /
 
 - **edge-tts 协议直连**：Sec-MS-GEC 令牌按官方 DRM 算法**本地生成**（SHA256(Windows 文件时间 + TrustedClientToken)，5 分钟窗口），WS 传输用 `ws` 库 + permessage-deflate 压缩 + 可选 HTTP CONNECT 代理隧道
 - **接口配置**：TTS 无需另填 API Key；STT 使用你配置的 ASR 服务，其计费与额度由该服务决定。
-- 文本 ≤5000 字符、音频 ≤25MB 前置校验；输出同名自动加序号
+- 文本 ≤5000 字符、音频 ≤25MB 前置校验（读入后再按实际字节数复查一次）；输出同名自动加序号
+- **读写都在会话工作区内**：`audio` 与 `output` / `outputDir` 解析后（含符号链接）必须落在 `session.header.cwd` 之下，越界直接报错。想转写工作区外的录音，先复制进来；输出同理
+- **不跟随符号链接写文件**：目标是符号链接（含悬空链接）时拒绝写入，新建文件用 `O_EXCL`，避免检查完再被换成链接
+- **转写文本 0600**：`voice_stt` 写出的 `.txt` 只给当前用户读写（Windows 不检查权限位）
+- **密钥只发给配置的地址**：ASR 请求地址一律取配置 `asrBaseUrl`（groq/openai 的预设只是缺省值），模型传的 `engine` 与配置不一致会直接报错，避免把密钥发到另一家的主机
 - Edge TTS 协议适配保留在插件实现中，不使用旧令牌端点。
 
 ## 开发

package/lib/index.js

@@ -1,3 +1,4 @@
+import { registerUpdates } from '@stardustlc/dsh-updates';
 /**
  * dsh-voice —— 语音双件套工具插件（node 半身，配置走 cordis.patch.yml）。
  *
@@ -16,6 +17,7 @@ export const inject = ['tools'];
  * 插件入口：解析配置并注册五个语音工具。
  */
 export function apply(ctx, config) {
+    registerUpdates(ctx, { name: "dsh-voice" });
     let cfg;
     try {
         cfg = resolveConfig(config);

package/lib/paths.d.ts

@@ -1,4 +1,23 @@
-/** 校验音频文件存在且是文件；相对路径按 cwd（会话工作区）解析，返回绝对路径。 */
+/**
+ * 校验音频文件：必须存在于会话工作区内，且是普通文件。
+ *
+ * 相对路径按 cwd（会话工作区）解析，返回解析后的绝对路径；符号链接会先
+ * 解析真实路径再判断边界，避免把工作区外的隐私文件（如 id_ed25519）当成
+ * 音频整份上传给 ASR 服务。
+ */
 export declare function assertAudioFile(input: string, cwd?: string): string;
-/** 决定输出路径：缺省放在会话工作目录（缺省回退宿主 cwd），同名自动加 _1/_2 序号。 */
+/**
+ * 决定输出路径：缺省放在会话工作目录（缺省回退宿主 cwd），同名自动加 _1/_2 序号。
+ *
+ * 目标必须落在会话工作区内；已存在的符号链接直接拒绝，避免顺着悬空链接
+ * 在工作区外创建文件。overwrite=false 时跳过已存在的路径（含符号链接）。
+ */
 export declare function resolveOutputPath(explicit: string | undefined, defaultName: string, overwrite: boolean, cwd?: string): string;
+/** 确保输出目录存在且落在工作区内：不存在则创建，越界或符号链接报错。 */
+export declare function ensureWorkspaceDirectory(input: string, cwd?: string): string;
+/**
+ * 写工作区内的文件：先建父目录，再按「新建用 wx / 覆盖用 w」落盘。
+ *
+ * 新建时用 O_EXCL，避免检查完成到写入之间被人塞进一个符号链接。
+ */
+export declare function writeWorkspaceFile(target: string, data: string | Buffer, cwd?: string, mode?: number): void;

package/lib/paths.js

@@ -1,30 +1,152 @@
 /**
- * 输出路径与音频文件校验。
+ * 输出路径、音频文件与工作区边界校验。
  *
  * @module dsh-voice/paths
  */
-import { existsSync, statSync } from 'node:fs';
-import { basename, dirname, extname, join, resolve } from 'node:path';
-/** 校验音频文件存在且是文件；相对路径按 cwd（会话工作区）解析，返回绝对路径。 */
+import { lstatSync, mkdirSync, openSync, closeSync, realpathSync, statSync, writeFileSync } from 'node:fs';
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+/** 会话工作区的真实路径（解析符号链接）；取不到就退回解析后的绝对路径。 */
+function workspaceRoot(cwd) {
+    const absolute = resolve(cwd);
+    try {
+        return realpathSync(absolute);
+    }
+    catch {
+        return absolute;
+    }
+}
+/** candidate 是否等于 root 或位于 root 之下。 */
+function isInside(root, candidate) {
+    const rel = relative(root, candidate);
+    return rel === '' || (!isAbsolute(rel) && rel !== '..' && !rel.startsWith('..' + sep));
+}
+function pathState(target) {
+    try {
+        return lstatSync(target).isSymbolicLink() ? 'symlink' : 'present';
+    }
+    catch {
+        return 'missing';
+    }
+}
+/**
+ * 沿着最近的已存在祖先解析真实路径，再接回尚不存在的后缀。
+ *
+ * 用于输出路径：目标文件通常还不存在，但仍要判断它落盘时会不会被
+ * 中间某一层符号链接带到工作区之外。
+ */
+function resolveThroughExistingAncestor(target) {
+    let current = target;
+    const missing = [];
+    for (;;) {
+        try {
+            const real = realpathSync(current);
+            return missing.length === 0 ? real : join(real, ...missing.slice().reverse());
+        }
+        catch {
+            const parent = dirname(current);
+            if (parent === current)
+                return target;
+            missing.push(basename(current));
+            current = parent;
+        }
+    }
+}
+/** 输出路径必须落在工作区内，且不能是符号链接（含悬空链接）。 */
+function assertWritableTarget(target, root, label) {
+    if (pathState(target) === 'symlink') {
+        throw new Error(label + ' 是符号链接，拒绝写入：' + target + '（请改用工作区内的普通文件路径）');
+    }
+    const real = resolveThroughExistingAncestor(target);
+    if (!isInside(root, real)) {
+        throw new Error(label + ' 超出会话工作区：' + target + '（实际解析到 ' + real + '）。请把输出放在会话工作目录内。');
+    }
+}
+/**
+ * 校验音频文件：必须存在于会话工作区内，且是普通文件。
+ *
+ * 相对路径按 cwd（会话工作区）解析，返回解析后的绝对路径；符号链接会先
+ * 解析真实路径再判断边界，避免把工作区外的隐私文件（如 id_ed25519）当成
+ * 音频整份上传给 ASR 服务。
+ */
 export function assertAudioFile(input, cwd = process.cwd()) {
-    const absolute = resolve(cwd, input);
-    if (!existsSync(absolute) || !statSync(absolute).isFile()) {
+    const root = workspaceRoot(cwd);
+    const requested = resolve(root, input);
+    let real;
+    try {
+        real = realpathSync(requested);
+    }
+    catch {
         throw new Error('音频文件不存在：' + input);
     }
-    return absolute;
+    if (!isInside(root, real)) {
+        throw new Error('音频文件必须位于会话工作区内：' + input + '（实际解析到 ' + real + '）。请先复制到工作目录再转写。');
+    }
+    if (!statSync(real).isFile())
+        throw new Error('音频文件不是普通文件：' + input);
+    return requested;
 }
-/** 决定输出路径：缺省放在会话工作目录（缺省回退宿主 cwd），同名自动加 _1/_2 序号。 */
+/**
+ * 决定输出路径：缺省放在会话工作目录（缺省回退宿主 cwd），同名自动加 _1/_2 序号。
+ *
+ * 目标必须落在会话工作区内；已存在的符号链接直接拒绝，避免顺着悬空链接
+ * 在工作区外创建文件。overwrite=false 时跳过已存在的路径（含符号链接）。
+ */
 export function resolveOutputPath(explicit, defaultName, overwrite, cwd = process.cwd()) {
-    let target = explicit !== undefined && explicit.trim() !== '' ? resolve(cwd, explicit.trim()) : resolve(cwd, defaultName);
-    if (overwrite || !existsSync(target))
+    const root = workspaceRoot(cwd);
+    const requested = explicit !== undefined && explicit.trim() !== '' ? explicit.trim() : defaultName;
+    const target = resolve(root, requested);
+    assertWritableTarget(target, root, '输出路径');
+    if (overwrite || pathState(target) === 'missing')
         return target;
     const directory = dirname(target);
     const base = basename(target, extname(target));
     const extension = extname(target);
     for (let index = 1; index < 1000; index++) {
         const candidate = join(directory, base + '_' + index + extension);
-        if (!existsSync(candidate))
-            return candidate;
+        if (pathState(candidate) !== 'missing')
+            continue;
+        assertWritableTarget(candidate, root, '输出路径');
+        return candidate;
     }
     throw new Error('找不到可用的输出文件名（同名文件超过 999 个），请显式指定 output。');
 }
+/** 确保输出目录存在且落在工作区内：不存在则创建，越界或符号链接报错。 */
+export function ensureWorkspaceDirectory(input, cwd = process.cwd()) {
+    const root = workspaceRoot(cwd);
+    const target = resolve(root, input);
+    if (pathState(target) === 'symlink') {
+        throw new Error('输出目录是符号链接，拒绝写入：' + target);
+    }
+    const real = resolveThroughExistingAncestor(target);
+    if (!isInside(root, real)) {
+        throw new Error('输出目录超出会话工作区：' + target + '（实际解析到 ' + real + '）。请把输出放在会话工作目录内。');
+    }
+    mkdirSync(target, { recursive: true });
+    const after = realpathSync(target);
+    if (!isInside(root, after)) {
+        throw new Error('输出目录超出会话工作区：' + target + '（实际解析到 ' + after + '）');
+    }
+    return target;
+}
+/**
+ * 写工作区内的文件：先建父目录，再按「新建用 wx / 覆盖用 w」落盘。
+ *
+ * 新建时用 O_EXCL，避免检查完成到写入之间被人塞进一个符号链接。
+ */
+export function writeWorkspaceFile(target, data, cwd = process.cwd(), mode) {
+    const root = workspaceRoot(cwd);
+    assertWritableTarget(target, root, '输出路径');
+    mkdirSync(dirname(target), { recursive: true });
+    assertWritableTarget(target, root, '输出路径');
+    if (pathState(target) === 'missing') {
+        const fd = openSync(target, 'wx', mode);
+        try {
+            writeFileSync(fd, data);
+        }
+        finally {
+            closeSync(fd);
+        }
+        return;
+    }
+    writeFileSync(target, data, mode === undefined ? undefined : { mode });
+}

package/lib/tools.js

@@ -3,10 +3,10 @@
  *
  * @module dsh-voice/tools
  */
-import { mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
-import { basename, dirname, join, resolve } from 'node:path';
+import { readFileSync, statSync } from 'node:fs';
+import { basename, join } from 'node:path';
 import { synthesizeSpeech } from './edge-tts.js';
-import { assertAudioFile, resolveOutputPath } from './paths.js';
+import { assertAudioFile, ensureWorkspaceDirectory, resolveOutputPath, writeWorkspaceFile } from './paths.js';
 import { createProxyFetch } from './proxy-fetch.js';
 import { assertAudioSize, transcribe } from './stt.js';
 import { isValidVoiceId, VOICES } from './voices.js';
@@ -87,11 +87,6 @@ function sessionCwd(exec) {
     const cwd = exec?.agent?.session?.header?.cwd;
     return typeof cwd === 'string' && cwd.trim() !== '' ? cwd : process.cwd();
 }
-/** 写文件前先建父目录，避免合成/转写完成后才因 ENOENT 白烧一次接口调用。 */
-function writeFileWithDir(target, data) {
-    mkdirSync(dirname(target), { recursive: true });
-    writeFileSync(target, data);
-}
 const voiceItemSchema = {
     type: 'object',
     properties: { id: { type: 'string' }, gender: { type: 'string' }, locale: { type: 'string' } },
@@ -135,6 +130,8 @@ const previewSchema = {
     },
     additionalProperties: true,
 };
+/** 自定义端点没配 asrModel 时的兜底模型名。 */
+const FALLBACK_ASR_MODEL = 'whisper-1';
 /** 默认试听文本（中英混合，便于感知发音差异）。 */
 export const DEFAULT_PREVIEW_TEXT = '你好，这是音色试听。Hello, this is a voice preview.';
 /** voice_preview 同时合成的音色数上限：有界并发，避免 8 个音色串行把最坏等待拖成 8 倍超时。 */
@@ -203,7 +200,7 @@ export function buildVoiceTools(config, deps = {}) {
             const output = resolveOutputPath(optionalString(args, 'output'), 'voice_output.mp3', cfg.overwrite, sessionCwd(exec));
             const audio = await raceAbort((deps.tts ?? synthesizeSpeech)({ text, voice, rate, pitch }, { proxyUrl: cfg.proxyUrl }, timeout, signal), signal);
             throwIfAborted(signal);
-            writeFileWithDir(output, audio);
+            writeWorkspaceFile(output, audio, sessionCwd(exec));
             return { output, bytes: audio.length, voice, rate, pitch, textLength: text.length };
         },
         timeoutMs: timeout + 10000,
@@ -213,7 +210,7 @@ export function buildVoiceTools(config, deps = {}) {
         description: '语音转文字：调用 OpenAI 兼容 ASR 接口（默认 Groq whisper-large-v3-turbo；可切 openai/custom）。audio 为音频文件路径（mp3/wav/m4a/ogg/flac，≤25MB）；language/prompt 可选；output 可把转写文本写成 .txt。密钥用环境变量 DSH_VOICE_ASR_KEY 或配置 asrApiKey。',
         parameters: compileParameters({
             audio: { type: 'string', required: true, description: '音频文件路径（必填）。' },
-            engine: { type: 'string', enum: ['groq', 'openai', 'custom'], description: '引擎：groq / openai / custom（可选，默认配置值）。' },
+            engine: { type: 'string', enum: ['groq', 'openai', 'custom'], description: '引擎（可选）：只接受与配置 asrEngine 相同的值，用于显式确认；接口地址与密钥始终取配置。' },
             model: { type: 'string', description: '模型名（可选，覆盖配置）。' },
             language: { type: 'string', description: '语言提示，如 zh（可选）。' },
             prompt: { type: 'string', description: '提示词（专有名词/术语纠偏，可选）。' },
@@ -230,27 +227,26 @@ export function buildVoiceTools(config, deps = {}) {
             const signal = execSignal(exec);
             throwIfAborted(signal);
             const args = asRecord(rawArgs);
-            const audioPath = assertAudioFile(requiredString(args, 'audio', '音频文件'), sessionCwd(exec));
-            assertAudioSize(statSync(audioPath).size);
-            const engine = optionalString(args, 'engine') ?? cfg.asrEngine;
-            let baseUrl;
-            let model;
-            if (engine === 'openai') {
-                baseUrl = 'https://api.openai.com/v1';
-                model = optionalString(args, 'model') ?? 'whisper-1';
+            const cwd = sessionCwd(exec);
+            const audioPath = assertAudioFile(requiredString(args, 'audio', '音频文件'), cwd);
+            const requestedEngine = optionalString(args, 'engine');
+            if (requestedEngine !== undefined && !['groq', 'openai', 'custom'].includes(requestedEngine)) {
+                throw new Error('engine 必须是 groq / openai / custom 之一（当前：' + requestedEngine + '）。');
             }
-            else if (engine === 'custom') {
-                baseUrl = cfg.asrBaseUrl;
-                model = optionalString(args, 'model') ?? cfg.asrModel;
+            if (requestedEngine !== undefined && requestedEngine !== cfg.asrEngine) {
+                throw new Error('voice_stt 不支持用 engine 参数临时换引擎（配置 asrEngine=' + cfg.asrEngine + '，本次传入 ' + requestedEngine + '）。接口地址与密钥是一组配置，混着用会把密钥发到非预期的服务；如需切换请改配置里的 asrEngine / asrBaseUrl。');
             }
-            else if (engine === 'groq') {
-                baseUrl = 'https://api.groq.com/openai/v1';
-                model = optionalString(args, 'model') ?? (cfg.asrModel !== '' && cfg.asrEngine === 'groq' ? cfg.asrModel : 'whisper-large-v3-turbo');
-            }
-            else
-                throw new Error('engine 必须是 groq / openai / custom 之一（当前：' + engine + '）。');
+            // 接口地址一律取配置：openai/groq 预设已由 resolveConfig 回填，自定义端点原样使用。
+            const baseUrl = cfg.asrBaseUrl;
+            if (baseUrl === '')
+                throw new Error('未配置 ASR 接口地址：asrEngine=custom 时必须在配置里提供 asrBaseUrl。');
+            assertAudioSize(statSync(audioPath).size);
+            const audio = readFileSync(audioPath);
+            // 伪文件（如 procfs）stat 报 0 字节，按实际读到的长度再判一次。
+            assertAudioSize(audio.length);
+            const model = optionalString(args, 'model') ?? (cfg.asrModel !== '' ? cfg.asrModel : FALLBACK_ASR_MODEL);
             const { text } = await raceAbort((deps.stt ?? transcribe)(baseUrl, cfg.asrApiKey, {
-                audio: readFileSync(audioPath),
+                audio,
                 filename: basename(audioPath),
                 model,
                 language: optionalString(args, 'language'),
@@ -260,8 +256,9 @@ export function buildVoiceTools(config, deps = {}) {
             let transcriptFile = '';
             const output = optionalString(args, 'output');
             if (output !== undefined) {
-                const target = resolveOutputPath(output, '', cfg.overwrite, sessionCwd(exec));
-                writeFileWithDir(target, text);
+                const target = resolveOutputPath(output, '', cfg.overwrite, cwd);
+                // 转写文本可能含隐私内容，只用 0600 写入。
+                writeWorkspaceFile(target, text, cwd, 0o600);
                 transcriptFile = target;
             }
             // The output schema declares these as strings — never return null, or
@@ -309,8 +306,8 @@ export function buildVoiceTools(config, deps = {}) {
             const text = optionalString(args, 'text') ?? DEFAULT_PREVIEW_TEXT;
             if (text.length > 200)
                 throw new Error('试听文本请控制在 200 字以内（试听要短平快）。');
-            const outDir = resolve(sessionCwd(exec), optionalString(args, 'outputDir') ?? 'voice_previews');
-            mkdirSync(outDir, { recursive: true });
+            const cwd = sessionCwd(exec);
+            const outDir = ensureWorkspaceDirectory(optionalString(args, 'outputDir') ?? 'voice_previews', cwd);
             const outcomes = await mapLimit(targets, PREVIEW_CONCURRENCY, signal, async (voice) => {
                 throwIfAborted(signal);
                 if (!isValidVoiceId(voice)) {
@@ -319,8 +316,10 @@ export function buildVoiceTools(config, deps = {}) {
                 try {
                     const audio = await raceAbort((deps.tts ?? synthesizeSpeech)({ text, voice, rate: cfg.ttsRate, pitch: cfg.ttsPitch }, { proxyUrl: cfg.proxyUrl }, timeout, signal), signal);
                     throwIfAborted(signal);
-                    const file = join(outDir, 'voice-preview-' + voice.replace(/[^a-zA-Z0-9-]/g, '_') + '.mp3');
-                    writeFileSync(file, audio);
+                    const name = 'voice-preview-' + voice.replace(/[^a-zA-Z0-9-]/g, '_') + '.mp3';
+                    // 复用 resolveOutputPath：overwrite=false 时改名加序号，不再直接覆盖同名样例。
+                    const file = resolveOutputPath(join(outDir, name), '', cfg.overwrite, cwd);
+                    writeWorkspaceFile(file, audio, cwd);
                     return { voice, output: file, bytes: audio.length };
                 }
                 catch (error) {

package/lib/update-client.js

@@ -0,0 +1,408 @@
+// Generated: shared optional update controls; edit the original client templates.
+(function(){
+/* DSH workbench UI v1. MIT. Canonical source: dsh-suite/ui/workbench-ui.js.
+ * Vendored into each plugin: no Suite or extra runtime dependency is required.
+ * Styles are scoped to .dshw and never replace the host chrome or theme.
+ */
+function createWorkbenchUI(React) {
+  const h = React.createElement;
+  const { useEffect, useId, useRef } = React;
+  const cx = (...values) => values.filter(Boolean).join(' ');
+  const paths = {
+    book: ['M4 4h6a3 3 0 0 1 2 2v15a4 4 0 0 0-4-2H4z', 'M20 4h-6a3 3 0 0 0-2 2v15a4 4 0 0 1 4-2h4z'],
+    calendar: ['M5 5h14a2 2 0 0 1 2 2v13H3V7a2 2 0 0 1 2-2Z', 'M7 3v4M17 3v4M3 10h18'],
+    mail: ['M3 5h18v14H3z', 'm3 6 9 7 9-7'],
+    rss: ['M4 11a9 9 0 0 1 9 9M4 4a16 16 0 0 1 16 16', 'M4 19h.01'],
+    slides: ['M3 4h18v13H3z', 'M12 17v4M8 21h8'],
+    shield: ['m12 3 8 3v6c0 4-4 7-8 9-4-2-8-5-8-9V6z', 'm8 12 3 3 5-6'],
+    layers: ['M5 3h16v16H5z', 'M2 7v15h15'],
+    play: ['m9 6 9 6-9 6Z'],
+    video: ['M3 5h12v14H3z', 'm15 10 6-4v12l-6-4'],
+    search: ['M10.5 18a7.5 7.5 0 1 0 0-15 7.5 7.5 0 0 0 0 15Z', 'm16 16 5 5'],
+    plus: ['M12 5v14M5 12h14'],
+    refresh: ['M20 7a9 9 0 1 0 1 8', 'M20 2v5h-5'],
+    settings: ['m9 3-.7 2.4-2 .9L4 5.8 2.5 8.4l1.7 1.8v2.3L2.5 14 4 17l2.5-.4 1.9 1L9 20h3l.8-2.4 2-1 2.5.4 1.5-2.7-1.7-1.9v-2.2l1.7-1.8-1.5-2.6-2.5.4-2-1L12 3Z', 'M14 11.5a3.5 3.5 0 1 1-7 0 3.5 3.5 0 0 1 7 0Z'],
+    close: ['m6 6 12 12M18 6 6 18'],
+    left: ['m14 5-7 7 7 7'],
+    right: ['m10 5 7 7-7 7'],
+    down: ['m5 9 7 7 7-7'],
+    filter: ['M4 5h16M7 12h10M10 19h4'],
+    download: ['M12 3v12m-5-5 5 5 5-5', 'M4 16v5h16v-5'],
+    upload: ['M12 16V4m-5 5 5-5 5 5', 'M4 16v5h16v-5'],
+    copy: ['M8 8h13v13H8z', 'M16 8V3H3v13h5'],
+    external: ['M14 3h7v7m0-7L10 14', 'M10 3H3v18h18v-7'],
+    file: ['M4 3h10l6 6v12H4z', 'M14 3v6h6M8 13h8M8 17h6'],
+    folder: ['M3 5h7l2 3h9v12H3z'],
+    edit: ['m15 4 5 5-10 10-6 1 1-6Z', 'm13 6 5 5'],
+    trash: ['M3 6h18M9 6V3h6v3M5 6l1 15h12l1-15M10 10v7M14 10v7'],
+    more: ['M5 12h.01M12 12h.01M19 12h.01'],
+    info: ['M12 22a10 10 0 1 0 0-20 10 10 0 0 0 0 20Z', 'M12 11v6M12 7h.01'],
+    check: ['m5 12 4 4L19 6'],
+    quote: ['M4 12h6v7H3v-7c0-4 2-6 5-7M15 12h6v7h-7v-7c0-4 2-6 5-7'],
+    star: ['m12 3 2.8 5.7 6.2.9-4.5 4.4 1.1 6.2-5.6-3-5.6 3 1.1-6.2L3 9.6l6.2-.9Z'],
+    reply: ['m9 5-7 7 7 7v-5h6c3 0 5 2 6 5 0-8-4-11-12-11Z'],
+    link: ['m10 13 4-4M8 16l-2 2a4 4 0 0 1-6-6l4-4a4 4 0 0 1 6 0', 'm14 8 2-2a4 4 0 0 1 6 6l-4 4a4 4 0 0 1-6 0'],
+  };
+  function Icon({ name = 'file', size = 20, ...props }) {
+    return h('svg', { width: size, height: size, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 1.75, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true, focusable: false, ...props },
+      (paths[name] || paths.file).map((d, index) => h('path', { key: index, d })));
+  }
+  function Button({ children, icon, variant, className, ...props }) {
+    return h('button', { type: 'button', ...props, className: cx('w-button', variant && 'w-' + variant, className) }, icon ? h(Icon, { name: icon, size: 18 }) : null, children);
+  }
+  function IconButton({ label, icon, ...props }) {
+    return h(Button, { ...props, icon, className: cx('w-icon-button', props.className), 'aria-label': label, title: label });
+  }
+  function Page({ title, subtitle, actions, children, workbench = false, className, rootRef, ...props }) {
+    return h('section', { ...props, ref: rootRef, className: cx('dshw', 'w-page', className), 'data-main': workbench ? 'true' : 'false' },
+      h('style', null, styles),
+      h('header', { className: 'w-page-header' }, h('div', { className: 'w-heading' }, h('h1', null, title), subtitle ? h('p', { className: 'w-subtitle' }, subtitle) : null), actions ? h('div', { className: 'w-header-actions' }, actions) : null),
+      h('div', { className: 'w-body' }, children));
+  }
+  function Tabs({ items, value, onChange, label, children }) {
+    const id = useId();
+    const active = items.some(item => item.id === value) ? value : items[0]?.id;
+    function keys(event, index) {
+      if (!['ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(event.key)) return;
+      event.preventDefault();
+      const next = event.key === 'Home' ? 0 : event.key === 'End' ? items.length - 1 : (index + (event.key === 'ArrowRight' ? 1 : -1) + items.length) % items.length;
+      const node = event.currentTarget.parentElement?.querySelectorAll('[role=tab]')[next];
+      if (node) { onChange(items[next].id); node.focus(); }
+    }
+    return h('div', { className: 'w-tabs-layout' },
+      h('div', { className: 'w-tabs', role: 'tablist', 'aria-label': label }, items.map((item, index) => h('button', {
+        type: 'button', role: 'tab', key: item.id, id: id + '-' + item.id, 'aria-controls': id + '-panel', 'aria-selected': active === item.id, tabIndex: active === item.id ? 0 : -1,
+        onClick: () => onChange(item.id), onKeyDown: event => keys(event, index),
+      }, item.label, item.count !== undefined ? h('span', { className: 'w-count' }, item.count) : null))),
+      h('div', { className: 'w-tab-panel', id: id + '-panel', role: 'tabpanel', 'aria-labelledby': id + '-' + active }, children));
+  }
+  function Status({ children, tone = 'info', className }) {
+    if (!children) return null;
+    return h('div', { className: cx('w-status', 'w-status-' + tone, className), role: tone === 'error' ? 'alert' : 'status', 'aria-live': tone === 'error' ? 'assertive' : 'polite' }, h(Icon, { name: tone === 'success' ? 'check' : 'info', size: 18 }), h('div', null, children));
+  }
+  function Empty({ title, children, action, icon = 'file' }) {
+    return h('div', { className: 'w-empty' }, h(Icon, { name: icon, size: 32 }), h('h2', null, title), children ? h('div', { className: 'w-muted' }, children) : null, action ? h('div', { className: 'w-toolbar' }, action) : null);
+  }
+  function Split({ list, detail, selected, onBack, backLabel, className, listWidth = 360 }) {
+    const ref = useRef(null);
+    useEffect(() => {
+      if (!selected || !ref.current || ref.current.clientWidth > 760) return;
+      const heading = ref.current.querySelector('.w-detail h2');
+      if (heading) { heading.tabIndex = -1; heading.focus({ preventScroll: true }); }
+    }, [selected]);
+    return h('div', { ref, className: cx('w-split', className), 'data-selected': selected ? 'true' : 'false', style: { '--w-list-width': listWidth + 'px' } },
+      h('div', { className: 'w-master' }, list),
+      h('div', { className: 'w-detail' }, selected ? h(Button, { className: 'w-back', icon: 'left', variant: 'ghost', onClick: onBack }, backLabel) : null, detail));
+  }
+  function Row({ title, meta, description, active, onClick, children, status, className, disabled }) {
+    return h('div', { className: cx('w-row', active && 'w-selected', className) },
+      children ? h('div', { className: 'w-row-select' }, children) : null,
+      h('button', { type: 'button', className: 'w-row-button', onClick, disabled, 'aria-pressed': !!active },
+        h('span', { className: 'w-row-head' }, h('strong', null, title), status ? h('span', { className: 'w-tag' }, status) : null),
+        meta ? h('span', { className: 'w-row-meta' }, meta) : null,
+        description ? h('span', { className: 'w-row-description' }, description) : null));
+  }
+  function Search({ label, value, onChange, ...props }) {
+    const id = useId();
+    return h('div', { className: 'w-search' }, h(Icon, { name: 'search', size: 18 }), h('input', { type: 'search', id, 'aria-label': label, placeholder: label, value, onChange, ...props }));
+  }
+  function Switch({ label, checked, onChange, disabled }) {
+    return h('label', { className: 'w-switch-label' }, h('span', null, label), h('input', { type: 'checkbox', role: 'switch', checked, disabled, onChange, 'aria-label': label }), h('span', { className: 'w-switch-track', 'aria-hidden': true }));
+  }
+  function Dialog({ title, children, onClose, closeLabel, className, busy = false }) {
+    const id = useId(), panel = useRef(null);
+    useEffect(() => {
+      const previous = document.activeElement;
+      panel.current?.querySelector('button:not(:disabled), input:not(:disabled), select:not(:disabled), textarea:not(:disabled), [tabindex="0"]')?.focus();
+      return () => { if (previous?.isConnected) previous.focus({ preventScroll: true }); };
+    }, []);
+    function keydown(event) {
+      if (event.key === 'Escape' && !event.isComposing) { event.preventDefault(); event.stopPropagation(); if (!busy) onClose(); return; }
+      if (event.key !== 'Tab') return;
+      const controls = [...panel.current.querySelectorAll('button:not(:disabled), input:not(:disabled), select:not(:disabled), textarea:not(:disabled), a[href], [tabindex="0"]')].filter(node => node.getClientRects().length);
+      const first = controls[0], last = controls.at(-1);
+      if (!controls.length) { event.preventDefault(); panel.current.focus(); }
+      else if (event.shiftKey && document.activeElement === first) { event.preventDefault(); last.focus(); }
+      else if (!event.shiftKey && document.activeElement === last) { event.preventDefault(); first.focus(); }
+    }
+    return h('div', { className: 'w-overlay', onClick: event => { if (!busy && event.target === event.currentTarget) onClose(); } },
+      h('section', { ref: panel, className: cx('w-dialog', className), role: 'dialog', 'aria-modal': true, 'aria-labelledby': id, tabIndex: -1, onKeyDown: keydown },
+        h('header', { className: 'w-dialog-header' }, h('h2', { id }, title), h(IconButton, { icon: 'close', label: closeLabel, disabled: busy, onClick: onClose })), h('div', { className: 'w-dialog-body' }, children)));
+  }
+  function register(ctx, { id, label, icon, component, inject, order = 50 }) {
+    // The two slots are optional. Existing settings and manual tools still load
+    // in hosts without a workbench, while RC.3 owns navigation/pinning itself.
+    ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: id, inject: () => ({ ...(inject?.() || {}), workbench: true }) }, component));
+    ctx.slots.inject('sidebar.panellist', () => ctx.slots.register({ name: 'sidebar.panellist', id, order, label }, function WorkbenchIcon({ size }) { return h(Icon, { name: icon, size }); }));
+  }
+  const styles = `
+.dshw{--w-bg:var(--dsw-alias-bg-layer-1,#fff);--w-soft:var(--dsw-alias-bg-layer-2,#f7f8fa);--w-text:var(--dsw-alias-label-primary,#18202c);--w-muted:var(--dsw-alias-label-secondary,#667085);--w-border:var(--dsw-alias-border-l3,#e7e9ef);--w-accent:var(--dsh-plugin-workbench-accent,#4f6bdb);--w-selected:color-mix(in srgb,var(--w-accent) 10%,var(--w-bg));--w-primary:var(--w-text);--w-on-primary:var(--w-bg);container-type:inline-size;container-name:dsh-workbench;color:var(--w-text);background:var(--w-bg);font:14px/1.65 var(--dsh-font-family-content,system-ui,-apple-system,"Segoe UI","Microsoft YaHei",sans-serif);min-width:0;max-width:100%;box-sizing:border-box;text-align:start;color-scheme:inherit}
+.dshw *,.dshw *:before,.dshw *:after{box-sizing:border-box}.dshw h1,.dshw h2,.dshw h3,.dshw h4,.dshw p{margin:0}.dshw h1{font-size:30px;line-height:1.25;letter-spacing:-.025em;font-weight:650}.dshw h2{font-size:24px;line-height:1.35;font-weight:650;letter-spacing:-.015em;overflow-wrap:anywhere}.dshw h3,.dshw h4{font-size:16px;line-height:1.4;font-weight:600}.dshw a{color:var(--w-accent);text-underline-offset:3px;overflow-wrap:anywhere}.dshw button,.dshw input,.dshw select,.dshw textarea{font:inherit;color:inherit;max-width:100%}.dshw input:not([type=checkbox]):not([type=radio]):not([type=file]),.dshw select,.dshw textarea{background:var(--w-bg);border:1px solid var(--w-border);border-radius:8px;padding:8px 11px;min-width:0;line-height:1.5}.dshw input:not([type=checkbox]):not([type=radio]):not([type=file]),.dshw select{min-height:38px}.dshw textarea{resize:vertical}.dshw input[type=checkbox],.dshw input[type=radio]{width:16px;height:16px;flex-shrink:0;accent-color:var(--w-accent)}.dshw :focus-visible{outline:2px solid var(--w-accent);outline-offset:3px}.dshw button:disabled,.dshw input:disabled,.dshw select:disabled,.dshw textarea:disabled{opacity:.5;cursor:not-allowed}.dshw label{font-size:13px}.dshw fieldset{min-width:0;border:1px solid var(--w-border);border-radius:8px}.dshw summary{cursor:pointer;font-weight:550;list-style:none;display:flex;align-items:center;gap:8px}.dshw summary::-webkit-details-marker{display:none}.dshw summary:after{content:'';display:block;margin-inline-start:auto;width:7px;height:7px;border-inline-end:1.75px solid currentColor;border-bottom:1.75px solid currentColor;transform:rotate(45deg);flex-shrink:0}.dshw details[open]>summary:after{transform:rotate(225deg)}.dshw details>summary+*{margin-top:12px}.dshw pre{white-space:pre-wrap;overflow-wrap:anywhere;font:12px/1.7 ui-monospace,SFMono-Regular,Consolas,monospace;max-width:100%;background:var(--w-soft);border-radius:6px;padding:14px}.dshw img,.dshw video,.dshw iframe{max-width:100%}
+.w-page{display:flex;flex-direction:column;position:relative;padding:0;min-height:540px;gap:0}.w-page[data-main=true]{height:100%;min-height:0;padding:calc(24px + var(--dsh-frame-top-clearance,0px)) 28px 0 max(28px,var(--dsh-frame-leading-clearance,0px));overflow:auto}.w-page-header{display:flex;justify-content:space-between;gap:24px;align-items:flex-start;padding-bottom:22px;flex-shrink:0}.w-heading{min-width:0}.w-subtitle{margin-top:8px!important;font-size:14px;color:var(--w-muted);line-height:1.6}.w-header-actions,.w-toolbar,.w-actions{display:flex;align-items:center;flex-wrap:wrap;gap:8px;min-width:0}.w-header-actions{justify-content:flex-end}.w-body,.w-tabs-layout{display:flex;flex-direction:column;flex:1;min-height:0;min-width:0}.w-body{overflow:auto}.w-tab-panel{flex:1;min-width:0;min-height:0;display:flex;flex-direction:column;overflow:auto}.w-tabs{display:flex;align-items:stretch;gap:20px;border-bottom:1px solid var(--w-border);flex-shrink:0;overflow-x:auto;scrollbar-width:thin}.dshw .w-tabs>button{border:0;border-bottom:2px solid transparent;background:transparent;padding:11px 8px 13px;white-space:nowrap;font-size:14px;font-weight:550;cursor:pointer;color:var(--w-muted);display:flex;align-items:center;gap:7px}.dshw .w-tabs>button[aria-selected=true]{border-bottom-color:var(--w-accent);color:var(--w-accent)}.w-count,.w-tag{font-size:12px;line-height:1.5;display:inline-flex;align-items:center;flex-shrink:0;background:var(--w-soft);border-radius:5px;padding:1px 6px;color:var(--w-muted)}.w-tabs [aria-selected=true] .w-count,.w-selected .w-tag{color:var(--w-accent);background:var(--w-selected)}
+.dshw .w-button{display:inline-flex;justify-content:center;align-items:center;gap:7px;background:var(--w-bg);border:1px solid var(--w-border);border-radius:8px;padding:8px 12px;min-height:36px;line-height:1.4;font-size:14px;font-weight:500;cursor:pointer;text-decoration:none;white-space:normal}.dshw .w-button:not(:disabled):hover{background:var(--w-soft)}.dshw .w-primary{background:var(--w-primary);border-color:var(--w-primary);color:var(--w-on-primary)}.dshw .w-primary:not(:disabled):hover{background:var(--w-primary);opacity:.9}.dshw .w-ghost{background:transparent;border-color:transparent}.dshw .w-danger{color:var(--dsw-alias-state-error-primary,#b43c3c)}.dshw .w-icon-button{width:36px;min-width:36px;padding:8px}.dshw .w-button svg{flex-shrink:0}.w-muted{color:var(--w-muted);font-size:12px;line-height:1.6}.w-section{padding:24px 0;border-bottom:1px solid var(--w-border);min-width:0}.w-section>h3{margin-bottom:12px}.w-section>p+p{margin-top:8px}.w-fields{display:grid;gap:16px;min-width:0}.w-field{display:grid;gap:6px;min-width:0}.w-field>input,.w-field>select,.w-field>textarea{width:100%}.w-status{display:flex;align-items:flex-start;gap:8px;padding:11px 13px;margin:12px 0;border:1px solid var(--w-border);border-radius:8px;background:var(--w-soft);font-size:13px;overflow-wrap:anywhere;flex-shrink:0}.w-status>svg{flex-shrink:0;margin-top:2px}.w-status-error{color:var(--dsw-alias-state-error-primary,#ad3636)}.w-status-success{color:var(--dsw-alias-state-success-primary,#24794a)}.w-empty{display:flex;flex-direction:column;align-items:center;justify-content:center;text-align:center;gap:14px;max-width:580px;padding:48px 24px;margin:auto;min-height:280px;overflow-wrap:anywhere}.w-empty>svg{color:var(--w-muted)}.w-empty h2{font-size:20px}.w-empty .w-muted{font-size:14px}.w-empty .w-toolbar{justify-content:center}
+.w-split{display:grid;grid-template-columns:minmax(240px,var(--w-list-width)) minmax(0,1fr);min-height:460px;flex:1;min-width:0}.w-master{min-width:0;border-inline-end:1px solid var(--w-border);overflow:auto;padding-bottom:24px}.w-detail{min-width:0;padding:26px 28px;overflow:auto;overflow-wrap:anywhere;display:flex;flex-direction:column}.w-master-toolbar{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:20px 16px}.w-search{display:flex;align-items:center;gap:8px;border:1px solid var(--w-border);border-radius:8px;padding:0 10px;min-width:0;flex:1;background:var(--w-bg)}.w-search>svg{color:var(--w-muted);flex-shrink:0}.dshw .w-search>input{border:0!important;background:transparent!important;padding:8px 0!important;width:100%;outline-offset:0}.w-row{display:flex;gap:0;min-width:0;position:relative;border-bottom:1px solid var(--w-border);border-inline-start:3px solid transparent}.w-row-select{display:flex;align-items:flex-start;padding:21px 0 0 14px}.dshw .w-row-button{display:flex;flex-direction:column;align-items:stretch;gap:7px;text-align:start;width:100%;padding:18px 18px 18px 16px;border:0;background:transparent;color:inherit;min-width:0;cursor:pointer;line-height:1.5}.dshw .w-row-button:hover{background:var(--w-soft)}.w-row-head{display:flex;align-items:flex-start;gap:10px;justify-content:space-between;min-width:0}.w-row-head>strong{font-size:14px;line-height:1.5;font-weight:600;overflow-wrap:anywhere}.w-row-meta,.w-row-description{color:var(--w-muted);font-size:12px;line-height:1.6;overflow-wrap:anywhere}.w-row-description{display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden}.w-selected{background:var(--w-selected);border-inline-start-color:var(--w-accent)}.w-back{display:none!important}.w-detail-title{margin-bottom:12px!important}.w-detail-meta{color:var(--w-muted);font-size:13px;display:flex;align-items:center;gap:8px;flex-wrap:wrap}.w-detail-footer{padding:24px 0;display:flex;align-items:center;gap:10px;flex-wrap:wrap;margin-top:auto;border-top:1px solid var(--w-border)}.w-detail-footer .w-muted{flex:1;min-width:160px}.w-definition{display:grid;grid-template-columns:minmax(80px,120px) minmax(0,1fr);gap:8px 16px;font-size:14px;margin:20px 0}.w-definition dt{color:var(--w-muted)}.w-definition dd{margin:0;min-width:0;overflow-wrap:anywhere}
+.w-switch-label{display:inline-flex;align-items:center;gap:8px;font-size:13px;position:relative;cursor:pointer}.w-switch-label>input{position:absolute;opacity:0;inset-inline-end:0;width:36px!important;height:22px!important;margin:0;cursor:pointer}.w-switch-track{width:36px;height:22px;border-radius:12px;display:block;background:var(--w-border);border:1px solid var(--w-border);pointer-events:none;padding:2px;transition:background .15s}.w-switch-track:before{content:'';display:block;width:16px;height:16px;border-radius:50%;background:#fff;box-shadow:0 1px 2px #0002;transition:transform .15s}.w-switch-label>input:checked+.w-switch-track{background:var(--w-accent);border-color:var(--w-accent)}.w-switch-label>input:checked+.w-switch-track:before{transform:translateX(14px)}.w-switch-label>input:focus-visible+.w-switch-track{outline:2px solid var(--w-accent);outline-offset:3px}.w-switch-label:has(>input:disabled){opacity:.5;cursor:not-allowed}
+.w-overlay{position:fixed;inset:0;background:#0005;display:flex;justify-content:flex-end;z-index:1000;padding:12px;overflow:auto}.w-dialog{width:min(620px,100%);max-height:100%;display:flex;flex-direction:column;min-height:0;background:var(--w-bg);color:var(--w-text);border:1px solid var(--w-border);border-radius:12px;box-shadow:0 18px 70px #0003}.w-dialog-header{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:20px 24px;border-bottom:1px solid var(--w-border);flex-shrink:0}.w-dialog-header>h2{font-size:20px}.w-dialog-body{overflow:auto;padding:20px 24px;min-height:0}.w-editor-grid{display:grid;grid-template-columns:210px minmax(0,1fr) 300px;min-height:500px;flex:1}.w-editor-list{padding:20px 12px;border-inline-end:1px solid var(--w-border);min-width:0}.w-editor-canvas{background:var(--w-soft);padding:20px;min-width:0;display:flex;flex-direction:column;gap:14px}.w-editor-inspector{padding:24px;border-inline-start:1px solid var(--w-border);min-width:0;overflow:auto}.w-editor-inspector h3{margin-bottom:18px}.w-preview-empty{display:flex;flex-direction:column;justify-content:center;align-items:center;text-align:center;gap:12px;aspect-ratio:16/9;min-height:180px;background:var(--w-soft);border:1px solid var(--w-border);border-radius:8px;padding:24px;color:var(--w-muted)}.w-content-pad{padding:24px 0}.w-stack{display:flex;flex-direction:column;gap:16px;min-width:0}.w-scroll-x{overflow:auto;max-width:100%}
+@container dsh-workbench (max-width:1000px){.w-editor-grid{grid-template-columns:160px minmax(0,1fr)}.w-editor-inspector{grid-column:1/-1;border-inline-start:0;border-top:1px solid var(--w-border)}.w-header-actions{max-width:60%}.w-split{grid-template-columns:minmax(240px,32%) minmax(0,1fr)}}
+@container dsh-workbench (max-width:760px){.w-page-header{gap:14px;flex-wrap:wrap;padding-bottom:18px}.w-heading{flex:1;min-width:170px}.dshw h1{font-size:24px}.w-header-actions{max-width:100%;justify-content:flex-start}.w-subtitle{font-size:13px}.w-tabs{gap:12px}.dshw .w-tabs>button{padding:10px 4px 12px}.w-split{display:block;min-height:360px}.w-split[data-selected=false]>.w-detail{display:none}.w-split[data-selected=true]>.w-master{display:none}.w-master{border-inline-end:0}.w-detail{padding:20px 0}.w-back{display:inline-flex!important;align-self:flex-start;margin:0 0 16px!important}.w-detail h2{font-size:22px}.w-master-toolbar{padding:16px 0}.dshw .w-row-button{padding:16px 10px}.w-detail-footer{position:static}.w-detail-footer .w-muted{flex-basis:100%}.w-editor-grid{display:flex;flex-direction:column}.w-editor-list{border-inline-end:0;border-bottom:1px solid var(--w-border);padding:16px 0}.w-editor-canvas{padding:16px 0;background:var(--w-bg)}.w-editor-inspector{padding:20px 0}.w-dialog-header,.w-dialog-body{padding:16px}.w-button{min-height:40px}.w-definition{grid-template-columns:80px minmax(0,1fr)}}
+@media(max-width:700px){.w-page[data-main=true]{padding:calc(16px + var(--dsh-frame-top-clearance,0px)) 16px 0 max(16px,var(--dsh-frame-leading-clearance,0px))}.w-overlay{padding:8px}.w-dialog{width:100%}}
+@media(prefers-reduced-motion:reduce){.dshw *,.dshw *:before{scroll-behavior:auto!important;transition:none!important;animation:none!important}}
+`;
+  return { Icon, Button, IconButton, Page, Tabs, Status, Empty, Split, Row, Search, Switch, Dialog, register, styles };
+}
+
+/* One update control per plugin. Only transport, idle guards and installation
+ * coordination are shared; no global update page or update-all action exists. */
+function __stardustUpdatesGuards() {
+  const key = Symbol.for('stardustlc.plugin-updates.guards.v1');
+  return globalThis[key] ||= { values: new Map(), listeners: new Set(), viewListeners: new Set(), clients: new Set() };
+}
+function __stardustUpdatesGuard(React, name, { dirty = false, busy = false, retainOnClose = false } = {}) {
+  const token = React.useRef(null);
+  if (!token.current) token.current = {};
+  React.useLayoutEffect(() => {
+    const pool = __stardustUpdatesGuards();
+    if (!dirty && !busy) for (const [key, value] of pool.values) if (value.name === name && value.orphan) pool.values.delete(key);
+    pool.values.set(token.current, { name, dirty: !!dirty, busy: !!busy, retainOnClose, orphan: false });
+    for (const listener of pool.listeners) listener();
+  }, [name, !!dirty, !!busy, retainOnClose]);
+  React.useEffect(() => () => {
+    const pool = __stardustUpdatesGuards(), value = pool.values.get(token.current);
+    if (value?.retainOnClose && (value.dirty || value.busy)) value.orphan = true;
+    else pool.values.delete(token.current);
+    for (const listener of pool.listeners) listener();
+  }, []);
+}
+function __StardustPluginUpdateButton({ React, name }) {
+  const [, render] = React.useState(0), pool = __stardustUpdatesGuards();
+  React.useEffect(() => { const fn = () => render(value => value + 1); pool.viewListeners.add(fn); return () => pool.viewListeners.delete(fn); }, []);
+  const client = [...pool.clients].find(client => client.has(name));
+  if (!client) return null;
+  const available = client.row(name)?.available;
+  return React.createElement(client.Button, { icon: 'refresh', variant: available ? undefined : 'ghost', onClick: () => client.open(name), 'data-plugin-update': name }, available ? client.t('有更新', 'Update available') : client.t('插件更新', 'Update plugin'));
+}
+function __stardustUpdatesPage(React, props, name) {
+  return { ...props, actions: React.createElement(React.Fragment, null, props.actions, React.createElement(__StardustPluginUpdateButton, { React, name })) };
+}
+function __stardustUpdatesDisplayRows(next, known) {
+  for (const row of next.rows) known.set(row.name, row);
+  if (!['verifying', 'installing', 'cancelling', 'unknown', 'restore-failed'].includes(next.job?.state)) return next;
+  const rows = [...next.rows];
+  for (const row of known.values()) if ((row.name === next.job.name || row.bundledBy === next.job.name) && !rows.some(item => item.name === row.name)) rows.push({ ...row, updating: true });
+  return { ...next, rows };
+}
+function __stardustUpdatesWrap(definition, participant) {
+  return { ...definition, factory(require) {
+    const original = definition.factory(require);
+    if (!original || typeof original !== 'object') return original;
+    const React = require('react');
+    return { ...original, apply(ctx, ...args) {
+      const result = original.apply?.call(this, ctx, ...args);
+      if (typeof ctx.inject === 'function') ctx.inject(['slots', 'locale', 'remote', 'remote.pluginManager'], host => __stardustUpdatesJoin(host, React, require, participant));
+      return result;
+    } };
+  } };
+}
+function __stardustUpdatesJoin(host, React, require, participant) {
+  const key = Symbol.for('stardustlc.plugin-updates.client.v1'), pools = globalThis[key] ||= new WeakMap(), root = host.root || host;
+  if (typeof root.plugin !== 'function') return;
+  let record = pools.get(root);
+  if (!record) {
+    record = { refs: new Map(), timer: null, version: participant.version, alive: true, hold: false };
+    pools.set(root, record);
+    const shared = record;
+    record.fiber = root.plugin({ name: 'stardustlc-plugin-updates-client', inject: ['slots', 'locale', 'remote', 'remote.pluginManager'], apply(ctx) {
+      const client = __stardustUpdatesClient(ctx, React, require, shared);
+      ctx.effect(() => () => { shared.alive = false; client.dispose(); if (pools.get(root) === shared) pools.delete(root); });
+    } });
+    Promise.resolve(record.fiber).catch(() => { shared.alive = false; if (pools.get(root) === shared) pools.delete(root); });
+  }
+  clearTimeout(record.timer);
+  const ref = {}; record.refs.set(ref, participant);
+  host.effect(() => () => {
+    record.refs.delete(ref);
+    const stop = () => {
+      if (record.refs.size || !record.alive) return;
+      if (record.hold) { record.timer = setTimeout(stop, 1000); return; }
+      record.alive = false; Promise.resolve(record.fiber?.dispose?.()).catch(() => {});
+    };
+    if (!record.refs.size) record.timer = setTimeout(stop, 1000);
+  });
+}
+function __stardustUpdatesClient(ctx, React, require, shared) {
+  const h = React.createElement, W = createWorkbenchUI(React), route = new URL('api/stardustlc/plugin-updates', document.baseURI);
+  const { useState, useEffect } = React, id = crypto.randomUUID(), listeners = new Set(), pool = __stardustUpdatesGuards(), requests = new Set(), sections = new Map(), notified = new Set(), knownRows = new Map();
+  let alive = true, registered = false, state = null, lastInteraction = Date.now(), inPoll = false, activeName = null, manualOperation = false;
+  const language = () => String(ctx.locale?.getSnapshot?.().active || '').startsWith('en') ? 'en' : 'zh';
+  const t = (zh, en) => language() === 'en' ? en : zh;
+  const preferences = name => state?.preferences.packages[name] || { checkEnabled: true, autoInstall: false, deferredUntil: 0, ignoredVersion: null };
+  const originalRow = name => state?.rows.find(row => row.name === name);
+  const rowFor = name => { const row = originalRow(name); return row?.bundledBy ? originalRow(row.bundledBy) : row; };
+  const activeJob = () => ['verifying', 'installing', 'cancelling'].includes(state?.job?.state);
+  function notify() { shared.hold = manualOperation || activeJob(); for (const listener of listeners) listener(); for (const listener of pool.viewListeners) listener(); }
+  async function api(body = { action: 'state' }) {
+    const controller = new AbortController(); requests.add(controller);
+    const timeout = setTimeout(() => controller.abort(), body.action === 'check' ? 95000 : 45000);
+    try {
+      const response = await fetch(route, { method: 'POST', credentials: 'same-origin', cache: 'no-store', signal: controller.signal, headers: { 'content-type': 'application/json', 'x-stardustlc-updates': '1' }, body: JSON.stringify(body) });
+      let data; try { data = await response.json(); } catch { throw new Error('service-unavailable'); }
+      if (!response.ok || !data.ok) throw new Error(response.status === 403 ? 'owner-required' : data.code || 'service-unavailable');
+      return data.value;
+    } catch (error) { if (error?.name === 'AbortError') throw new Error('service-unavailable'); throw error; }
+    finally { clearTimeout(timeout); requests.delete(controller); }
+  }
+  function pageState(manual = manualOperation) {
+    const values = [...pool.values.values()];
+    const dialog = [...document.querySelectorAll('[role="dialog"],dialog[open]')].some(node => node.getClientRects().length && !(manual && (node.closest('.plugin-updates-page') || node.querySelector('.plugin-updates-page'))));
+    return { action: 'heartbeat', id, dirty: values.some(value => value.dirty), busy: values.some(value => value.busy) || dialog, idleForMs: Math.min(86400000, Math.max(0, Date.now() - lastInteraction)) };
+  }
+  const heartbeat = () => api(pageState());
+  function interaction() { lastInteraction = Date.now(); }
+  const guardChanged = () => { if (registered && alive) void heartbeat().catch(() => {}); };
+  for (const event of ['pointerdown', 'keydown', 'input']) document.addEventListener(event, interaction, { capture: true, passive: true });
+  pool.listeners.add(guardChanged);
+  const close = () => { void fetch(route, { method: 'POST', credentials: 'same-origin', keepalive: true, headers: { 'content-type': 'application/json', 'x-stardustlc-updates': '1' }, body: JSON.stringify({ action: 'client-close', id }) }).catch(() => {}); };
+  window.addEventListener('pagehide', close);
+  async function refresh() { const next = await api(); if (alive) { state = __stardustUpdatesDisplayRows(next, knownRows); notify(); } return next; }
+  function useSnapshot() {
+    const [, render] = useState(0);
+    useEffect(() => { const fn = () => render(value => value + 1); listeners.add(fn); const stop = ctx.locale?.subscribe?.(fn); return () => { listeners.delete(fn); stop?.(); }; }, []);
+    return state;
+  }
+  function message(code) {
+    return ({
+      'page-dirty': t('有未保存的修改。请先保存或放弃修改，再更新。', 'Save or discard unsaved changes before updating.'),
+      'page-busy': t('有页面操作或对话框尚未结束，请完成后再试。', 'Finish the active page operation or close its dialog, then retry.'),
+      'page-not-ready': t('还有窗口状态未确认，或旧版插件尚未提供状态保护。请刷新相关窗口，必要时先手动更新旧版插件。', 'A window state is unknown or an older plugin lacks state protection. Refresh the affected windows and manually update legacy plugins if needed.'),
+      busy: t('DSH 正在执行任务或安装，请等操作结束。', 'DSH is running a task or installation. Wait for it to finish.'),
+      'activity-unknown': t('无法确认任务是否空闲，已暂停安装。', 'Installation paused because task activity is unknown.'),
+      'restart-required': t('更新服务需要重启后继续。请在方便时手动重启 DSH。', 'The updater needs a restart. Restart DSH manually when convenient.'),
+      'operation-unconfirmed': t('上次安装未确认或恢复失败。请在官方插件管理中检查并修复，之后手动重启 DSH。', 'The last installation is unconfirmed or recovery failed. Check and repair it in native plugin management, then restart DSH manually.'),
+      'check-first': t('检查结果已过期，请重新检查。', 'This check expired. Check again.'),
+      'release-changed': t('发布信息已变化，本次未安装。请重新检查。', 'Release metadata changed. Nothing was installed; check again.'),
+      'preferences-conflict': t('另一个窗口修改了偏好，已刷新，请重试。', 'Preferences changed in another window. They have been refreshed; retry.'),
+      'preferences-unreadable': t('更新偏好文件无法读取，自动安装已关闭。请检查当前 profile 的 stardustlc-plugin-updates.json。', 'Preferences could not be read. Automatic installation is off. Check stardustlc-plugin-updates.json in this profile.'),
+      'no-update': t('版本已变化或暂不兼容，请重新检查。', 'The version changed or is incompatible. Check again.'),
+      'source-not-registry': t('本地源码、Git 等安装，请通过原安装方式更新。', 'Update local, Git and other external sources through their original installation method.'),
+      'managed-by-suite': t('这个插件随 Suite 安装，通过 Suite 更新。', 'This plugin was installed through Suite and is updated through Suite.'),
+      'owner-required': t('只有 profile 拥有者能管理更新。', 'Only the profile owner can manage updates.'),
+    })[code] || t('操作未完成，请刷新后重试。DSH 不会因此自动重启。', 'The operation could not be completed. Refresh and retry. DSH will not restart automatically.');
+  }
+  function jobLabel(job) {
+    return ({ verifying: t('正在核对版本', 'Verifying release'), installing: t('正在安装', 'Installing'), cancelling: t('正在请求取消', 'Requesting cancellation'), complete: t('已更新', 'Updated'), 'restart-required': t('已安装，等待你手动重启', 'Installed; manual restart needed'), restored: t('更新未成功，已恢复原版本', 'Update failed; previous version restored'), 'restore-failed': t('恢复未成功，请检查官方插件管理', 'Recovery failed; check native plugin management'), unknown: t('结果未确认，请检查官方插件管理', 'Result unconfirmed; check native plugin management'), cancelled: t('已取消', 'Cancelled'), failed: t('更新未成功', 'Update failed') })[job.state] || job.state;
+  }
+  function Panel({ name, compact = false }) {
+    const snapshot = useSnapshot(), [error, setError] = useState(''), [working, setWorking] = useState(false), [checking, setChecking] = useState(false), [dialog, setDialog] = useState(null), [notes, setNotes] = useState(null), [loadingNotes, setLoadingNotes] = useState(false);
+    const row = rowFor(name), original = originalRow(name), target = row?.name || name, prefs = preferences(target), job = snapshot?.job?.name === target ? snapshot.job : null;
+    async function perform(callback) { setError(''); setWorking(true); try { await callback(); await refresh(); } catch (error) { setError(error.message); await refresh().catch(() => {}); } finally { setWorking(false); } }
+    async function save(changes, consent) { await api({ action: 'preferences', name: target, revision: state.preferences.revision, changes, consent }); }
+    async function check() { setError(''); setChecking(true); try { await api({ action: 'check', name: target }); await refresh(); } catch (error) { setError(error.message); } finally { setChecking(false); } }
+    async function install() {
+      setDialog(null); manualOperation = true; notify();
+      await perform(async () => {
+        try {
+          await heartbeat();
+          const started = await api({ action: 'install', name: row.name, version: row.release.version, confirmation: 'update-installed-plugin' });
+          while (alive) {
+            await new Promise(resolve => setTimeout(resolve, 800)); await heartbeat(); await refresh();
+            if (state.job?.id !== started.id) throw new Error('operation-unconfirmed');
+            if (!activeJob()) break;
+          }
+        } finally { manualOperation = false; notify(); }
+      });
+    }
+    async function showNotes() {
+      setDialog('notes'); setNotes(null); setLoadingNotes(true); setError('');
+      try { setNotes(await api({ action: 'notes', name: target, version: row.release.version })); } catch (error) { setError(error.message); } finally { setLoadingNotes(false); }
+    }
+    if (!snapshot || !row) return h(W.Status, null, t('此插件尚未安装或已从当前 profile 移除。', 'This plugin is not installed in the current profile.'));
+    const title = language() === 'en' ? original.labelEn : original.label;
+    if (compact) return h('div', { className: 'dshw', style: { padding: 16 } }, h('style', null, W.styles), h('div', { className: 'w-stack' }, h('h3', null, title), h('p', { className: 'w-muted' }, original.name + ' · ' + original.version), h('p', null, t('这个插件的更新设置与安装入口。自动安装默认关闭。', 'Update settings and installation for this plugin. Automatic installation is off by default.')), h(W.Button, { icon: 'refresh', onClick: () => { activeName = name; notify(); } }, row.available ? t('查看可用更新', 'Review available update') : t('检查与更新', 'Check and update'))));
+    const unconfirmed = ['unknown', 'restore-failed'].includes(snapshot.job?.state), pageBusy = pageState(true).busy || (snapshot.pages.clients || []).some(client => client.id !== id && client.busy), installLocked = working || activeJob() || unconfirmed || snapshot.updaterRestart || snapshot.preferenceError || !snapshot.activity.known || snapshot.activity.busy || snapshot.pages.dirty || pageBusy || !snapshot.pages.known;
+    const checkingThis = checking || snapshot.checkingNames?.includes(target);
+    const status = row.sourceKind !== 'registry' ? t('本地 / 外部来源，保留原安装方式', 'Local / external source; keep original install method') : row.loadError ? t('加载异常，请先检查官方插件管理', 'Loading error; check native plugin management') : row.error ? t('检查失败，可以重试', 'Check failed; retry available') : row.release && !row.release.compatible ? t('新版本暂不兼容当前环境', 'Latest release is incompatible with this environment') : row.available ? (prefs.ignoredVersion === row.release.version ? t('已忽略提醒，仍可手动更新', 'Reminder ignored; manual update available') : t('有新版本', 'Update available')) : row.checkedAt ? t('当前已是最新稳定版', 'Latest stable version') : t('尚未检查', 'Not checked yet');
+    return h(W.Page, { title: title + t(' · 更新', ' · Updates'), subtitle: t('只管理这个插件。检查不会安装，也不会重启 DSH。', 'Manage this plugin. Checking does not install anything or restart DSH.'), className: 'plugin-updates-page', actions: h(W.Button, { icon: 'refresh', disabled: checkingThis || row.sourceKind !== 'registry', onClick: check }, checkingThis ? t('正在检查…', 'Checking…') : t('检查更新', 'Check for updates')) },
+      h('style', null, '.plugin-updates-page{min-height:0;padding:4px}.plugin-updates-page .updates-settings{display:grid;gap:24px;padding:20px 0}.plugin-updates-page .updates-note{margin-top:8px}.plugin-updates-page .updates-version{font:13px/1.7 ui-monospace,monospace;overflow-wrap:anywhere}.plugin-updates-page .w-overlay{z-index:1002}.plugin-updates-page .w-switch-label{max-width:100%}.plugin-updates-page .w-switch-track{flex-shrink:0}@media(max-width:700px){[data-shortcut-modal="settings"]:has(.plugin-updates-page){flex-direction:column!important;width:calc(100vw - 16px)!important;max-width:calc(100vw - 16px)!important}[data-shortcut-modal="settings"]:has(.plugin-updates-page)>nav{width:100%!important;flex-basis:auto!important;flex-shrink:0;max-height:180px;overflow:auto;border-right:0!important}[data-shortcut-modal="settings"]:has(.plugin-updates-page)>nav>div:has(>button){display:flex;flex-wrap:wrap;gap:4px}[data-shortcut-modal="settings"]:has(.plugin-updates-page)>div{min-width:0!important;width:100%!important}.plugin-updates-page .w-switch-label{display:flex;justify-content:space-between;align-items:flex-start;gap:16px}.plugin-updates-page .w-switch-label>span:first-child{min-width:0}.plugin-updates-page .w-switch-label>input{inset-inline-end:0}}'),
+      original.bundledBy && h(W.Status, null, t('此插件随 Suite 安装。以下设置与安装作用于 Suite 整包，以保持组件版本一致。单独安装的插件可以独立更新。', 'This plugin was installed through Suite. These controls update Suite as a package so its components stay consistent. Independently installed plugins update individually.')),
+      h('section', { className: 'w-section' }, h('p', { className: 'updates-version' }, target + ' · ' + row.version, row.release?.version && row.release.version !== row.version ? ' → ' + row.release.version : ''), h('p', { className: 'w-muted updates-note' }, status), !row.enabled && h('p', { className: 'w-muted' }, t('当前已停用，更新后仍保持停用。', 'Currently disabled; it will remain disabled after updating.')), row.checkedAt && h('p', { className: 'w-muted' }, t('上次检查：', 'Last checked: ') + new Date(row.checkedAt).toLocaleString(language() === 'en' ? 'en-US' : 'zh-CN')),
+        h('div', { className: 'w-toolbar', style: { marginTop: 16 } }, row.available && row.sourceKind === 'registry' && h(W.Button, { variant: 'primary', icon: 'download', disabled: installLocked || row.loadError, onClick: () => setDialog('install') }, t('更新此插件', 'Update this plugin')), row.release && h(W.Button, { variant: 'ghost', onClick: showNotes }, t('更新记录', 'Release notes')), row.available && h(W.Button, { variant: 'ghost', disabled: working, onClick: () => perform(() => api({ action: 'later', name: target, revision: state.preferences.revision })) }, t('明天再提醒', 'Remind me tomorrow')), row.available && prefs.ignoredVersion !== row.release.version && h(W.Button, { variant: 'ghost', disabled: working, onClick: () => perform(() => api({ action: 'ignore', name: target, revision: state.preferences.revision, version: row.release.version })) }, t('忽略此版本提醒', 'Ignore this reminder')))),
+      h('section', { className: 'updates-settings', 'aria-label': t('这个插件的更新偏好', 'Update preferences for this plugin') },
+        h('div', null, h(W.Switch, { label: t('自动检查这个插件的更新', 'Automatically check this plugin'), checked: prefs.checkEnabled, disabled: working || !!snapshot.preferenceError || row.sourceKind !== 'registry', onChange: event => perform(() => save({ checkEnabled: event.target.checked })) }), h('p', { className: 'w-muted updates-note' }, t('默认开启，每天最多一次。只影响这个插件，关闭后仍可手动检查。', 'On by default, at most once daily. This affects only this plugin; manual checks remain available.'))),
+        h('div', null, h(W.Switch, { label: t('空闲时自动安装这个插件的补丁', 'Install patches for this plugin while idle'), checked: prefs.autoInstall, disabled: working || !!snapshot.preferenceError || row.sourceKind !== 'registry', onChange: event => event.target.checked ? setDialog('automatic') : perform(() => save({ autoInstall: false })) }), h('p', { className: 'w-muted updates-note' }, t('默认关闭。明确开启后，仅空闲且没有未保存修改时安装兼容补丁。其他插件的开关不变。', 'Off by default. Explicitly enable compatible patches while idle with no unsaved changes. Other plugins’ settings stay unchanged.')))),
+      error && h(W.Status, { tone: 'error' }, message(error)), snapshot.preferenceError && h(W.Status, { tone: 'error' }, message('preferences-unreadable')),
+      snapshot.pendingRestart && h(W.Status, null, snapshot.updaterRestart ? message('restart-required') : t('已有更新等待手动重启后生效。你可以继续工作，自动安装已暂停。', 'Some updates need a manual restart. Continue your work; automatic installation is paused.')),
+      prefs.autoInstall && snapshot.autoReady === false && h(W.Status, null, message('page-not-ready')),
+      snapshot.pages.clients.some(client => !client.fresh) && h(W.Status, null, h('p', null, t('有窗口已断开，无法确认是否还有未保存修改。仍在使用的窗口请先保存并刷新；已关闭的窗口可以手动重新确认。', 'A disconnected window may contain unsaved changes. Save and refresh windows still in use. If they are closed, you can confirm that manually.')), h(W.Button, { onClick: () => setDialog('windows') }, t('重新确认已关闭的窗口', 'Confirm closed windows'))),
+      snapshot.pages.dirty && h(W.Status, null, message('page-dirty')), (snapshot.activity.busy || pageBusy) && h(W.Status, null, message(snapshot.activity.busy ? 'busy' : 'page-busy')),
+      prefs.deferredUntil > Date.now() && h(W.Status, null, t('此插件已推迟提醒和自动安装 24 小时，仍可手动更新。', 'Reminders and automatic installation for this plugin are deferred for 24 hours. Manual updates remain available.')),
+      unconfirmed && h(W.Status, { tone: 'error' }, message('operation-unconfirmed')),
+      job && h('section', { className: 'w-section', 'aria-label': t('这个插件的更新进度', 'Update progress for this plugin') }, h('h3', null, jobLabel(job)), h('p', { className: 'w-muted' }, job.from + ' → ' + job.to + (job.mode === 'automatic' ? t(' · 自动补丁更新', ' · Automatic patch') : '')), (job.reason || job.outcome?.result?.error?.code) && h(W.Status, { tone: 'error' }, message(job.reason || job.outcome.result.error.code)), activeJob() && h(W.Button, { disabled: job.state === 'cancelling', onClick: () => perform(() => api({ action: 'cancel', id: job.id })) }, t('取消更新', 'Cancel update')), h('p', { className: 'w-muted updates-note' }, t('安装开始后，取消由官方包管理器处理；已落盘的写入以实际结果或恢复状态为准。', 'After installation starts, the native package manager handles cancellation. Completed writes and recovery are reported as they occur.'))),
+      dialog && h(W.Dialog, { title: dialog === 'windows' ? t('断开的窗口都已关闭？', 'Are the disconnected windows closed?') : dialog === 'automatic' ? t('允许这个插件自动安装补丁？', 'Allow automatic patches for this plugin?') : dialog === 'notes' ? t('更新记录', 'Release notes') : t('确认更新此插件', 'Confirm this plugin update'), closeLabel: t('关闭', 'Close'), onClose: () => setDialog(null) },
+        dialog === 'windows' ? h('div', { className: 'w-stack' }, h('p', null, t('只清除超过 45 秒未回应的其他窗口记录。请先确认它们已经关闭；仍在使用的窗口请保存修改并刷新。当前或仍在回应的窗口保护会保留。', 'Only other windows silent for over 45 seconds are cleared. Confirm that they are closed; save and refresh windows still in use. Current and responsive windows remain protected.')), h('div', { className: 'w-toolbar' }, h(W.Button, { onClick: () => setDialog(null) }, t('取消', 'Cancel')), h(W.Button, { onClick: () => { setDialog(null); void perform(() => api({ ...pageState(true), action: 'reconfirm-windows', confirmation: 'other-stale-windows-are-closed' })); } }, t('已关闭，重新确认状态', 'They are closed; reconfirm')))) :
+        dialog === 'automatic' ? h('div', { className: 'w-stack' }, h('p', null, (language() === 'en' ? row.labelEn : row.label) + ' · ' + target), h('p', null, t('你正在主动启用这个插件的自动安装。只处理兼容的稳定补丁；有任务、未保存修改、未知窗口或等待重启时暂停。', 'You are explicitly enabling automatic installation for this plugin. Only compatible stable patches qualify; running tasks, unsaved changes, unknown windows or a pending restart pause it.')), h('p', null, t('不会自动重启 DSH，其他插件不会跟着开启。可随时关闭。', 'DSH will not restart automatically, and other plugins will not be enabled for automatic updates. Turn it off anytime.')), h('div', { className: 'w-toolbar' }, h(W.Button, { onClick: () => setDialog(null) }, t('保持关闭', 'Keep off')), h(W.Button, { variant: 'primary', onClick: () => { setDialog(null); void perform(() => save({ checkEnabled: true, autoInstall: true }, 'enable-idle-patch-updates')); } }, t('允许此插件自动安装补丁', 'Allow patches for this plugin')))) :
+        dialog === 'notes' ? h('div', { className: 'w-stack' }, h('p', null, target + ' · ' + row.release.version), loadingNotes ? h('p', null, t('正在读取…', 'Loading…')) : notes?.text ? h('pre', null, notes.text) : h('p', null, t('未找到此版本的独立更新记录。', 'No separate notes were found for this version.')), notes?.url && h('a', { href: notes.url, target: '_blank', rel: 'noreferrer noopener' }, t('查看仓库更新记录', 'View repository changelog'))) :
+        h('div', { className: 'w-stack' }, h('p', { className: 'updates-version' }, target + ': ' + row.version + ' → ' + row.release.version), h('p', null, t('通过 DSH 官方插件管理器安装。需要重启时，由你手动决定时间；停用状态会保留。', 'Install through DSH’s native plugin manager. Choose when to restart if needed; disabled status is preserved.')), h('p', { className: 'w-muted' }, t('来源：npm 官方 registry，网络不可达时回退 npmmirror。安装前再次核对版本与完整性。', 'Source: official npm registry, with npmmirror fallback if unreachable. Version and integrity are checked again before installation.')), h('div', { className: 'w-toolbar' }, h(W.Button, { onClick: () => setDialog(null) }, t('取消', 'Cancel')), h(W.Button, { variant: 'primary', onClick: install }, t('确认安装此版本', 'Install this version')))))
+    );
+  }
+  function Overlay() {
+    useSnapshot();
+    const row = activeName && originalRow(activeName);
+    if (!row) return null;
+    const content = h('div', { className: 'dshw' }, h('style', null, W.styles), h(W.Dialog, { title: (language() === 'en' ? row.labelEn : row.label) + t(' · 更新设置', ' · Update settings'), closeLabel: t('关闭更新设置', 'Close update settings'), onClose: () => { activeName = null; notify(); } }, h(Panel, { key: activeName, name: activeName })));
+    const settings = document.querySelector('[data-shortcut-modal="settings"]');
+    // Keep the dialog inside the native settings focus boundary when its
+    // per-plugin entry was opened there. The shared fiber survives HMR.
+    return settings ? require('react-dom').createPortal(content, settings) : content;
+  }
+  function Reminder() {
+    useSnapshot();
+    const row = state?.rows.find(row => { const prefs = preferences(row.name); return row.available && !row.updating && !row.bundledBy && prefs.checkEnabled && prefs.deferredUntil <= Date.now() && prefs.ignoredVersion !== row.release.version && !notified.has(row.name + '@' + row.release.version); });
+    if (!row) return null;
+    let Toast; try { Toast = require('@deepseek-ai/dsh-client-ui-primitives').Toast; } catch { return null; }
+    if (!Toast) return null;
+    const key = row.name + '@' + row.release.version;
+    return h(Toast, { key, text: (language() === 'en' ? row.labelEn : row.label) + t('有新版本，可在它的页面或设置中查看。', ' has an update. Review it on its page or in settings.'), icon: h(W.Icon, { name: 'refresh', size: 18 }), holdMs: 7000, onDone: () => { notified.add(key); notify(); } });
+  }
+  function register() {
+    if (!alive) return;
+    if (!registered) {
+      registered = true; pool.clients.add(client);
+      ctx.slots.inject('shell.overlay', () => ctx.slots.register({ name: 'shell.overlay', id: 'stardustlc.plugin-update-dialog' }, Overlay));
+      ctx.slots.inject('shell.overlay', () => ctx.slots.register({ name: 'shell.overlay', id: 'stardustlc.plugin-update-reminder' }, Reminder));
+      notify();
+    }
+    for (const row of state.rows) {
+      const hasWorkbench = [...shared.refs.values()].some(participant => participant.name === row.name && participant.hasWorkbench);
+      if (hasWorkbench) { if (sections.has(row.name)) { void sections.get(row.name).dispose(); sections.delete(row.name); } continue; }
+      if (sections.has(row.name)) continue;
+      const label = () => (language() === 'en' ? row.labelEn : row.label) + t(' · 更新', ' · Updates');
+      const fiber = ctx.plugin({ name: 'plugin-update-settings-' + row.name, inject: ['slots', 'locale'], apply(section) {
+        section.slots.inject('settings.section', () => section.slots.register({ name: 'settings.section', id: row.name + '.updates', label, order: 89 }, () => h(Panel, { name: row.name })));
+      } });
+      sections.set(row.name, fiber);
+    }
+  }
+  async function poll() {
+    if (inPoll || !alive || !shared.refs.size) return;
+    inPoll = true;
+    try { await refresh(); register(); await heartbeat(); }
+    catch { /* Owner-only controls stay absent for guests and unsupported hosts. */ }
+    finally { inPoll = false; }
+  }
+  const timer = setInterval(() => { void poll(); }, 15000), first = setTimeout(() => { void poll(); }, 100);
+  const client = { t, Button: W.Button, has: name => registered && !!originalRow(name), row: rowFor, open(name) { activeName = name; notify(); }, dispose() {
+    close(); alive = false; clearTimeout(first); clearInterval(timer); pool.clients.delete(client);
+    pool.listeners.delete(guardChanged); listeners.clear();
+    for (const event of ['pointerdown', 'keydown', 'input']) document.removeEventListener(event, interaction, true);
+    window.removeEventListener('pagehide', close);
+    for (const controller of requests) controller.abort();
+    for (const listener of pool.viewListeners) listener();
+  } };
+  return client;
+}
+
+/* STARDUSTLC_UPDATE_CLIENT_BODY_START */
+window.__ModuleLoader__.load(__stardustUpdatesWrap({id:"dsh-voice",factory:require=>({apply(){}})},{"name":"dsh-voice","version":"0.1.0","hasWorkbench":false}));
+
+/* STARDUSTLC_UPDATE_CLIENT_BODY_END */
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-voice",
-  "version": "0.3.6",
+  "version": "0.4.0",
   "description": "把文字生成语音，或通过兼容接口把音频转为文字。",
   "type": "module",
   "main": "lib/index.js",
@@ -11,7 +11,8 @@
       "default": "./lib/index.js"
     },
     "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./client": "./lib/update-client.js"
   },
   "files": [
     "lib",
@@ -22,7 +23,7 @@
     "CHANGELOG.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && node scripts/build-updates.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "pnpm run build && node --test \"test/*.test.mjs\"",
     "test:integration": "pnpm run build && node --test \"integration/*.test.mjs\"",
@@ -31,6 +32,14 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
     }
   },
   "keywords": [
@@ -45,12 +54,14 @@
   ],
   "license": "MIT",
   "engines": {
-    "node": "^22.19.0 || >=24.0.0"
+    "node": "^22.19.0 || >=24.0.0",
+    "dsh": ">=0.2.1-rc.3"
   },
   "dependencies": {
     "https-proxy-agent": "^9.1.0",
     "undici": "^8.10.0",
-    "ws": "^8.21.3"
+    "ws": "^8.21.3",
+    "@stardustlc/dsh-updates": "0.1.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",