dsh-vpn 0.1.5 → 0.1.7

package/README.md

@@ -38,6 +38,10 @@ dsh plugin --profile web add dsh-vpn
 3. 在「节点二维码」里点「刷新二维码」，用手机或电脑上的客户端扫码导入。
 4. 服务器防火墙的端口由插件自动放行，不用手动操作；安装完成后提示框会列出放行了哪些端口。
 
+**找回已有节点**：如果重装过 dsh 或 dsh-vpn，本地保存的设置会丢失，但 VPS 上的节点还在。重新填写服务器 IP、端口、用户名和密码后点「保存」，插件会自动检查这台服务器上是否已有安装（也可以随时点「检查已有安装」）。找到后直接显示原来的节点二维码，并按服务器上的实际情况勾选协议和证书类型，已经导入手机或电脑客户端的配置可以继续使用，不用重新扫码。
+
+页面第一行显示插件版本，有新版本时旁边会提示，点「更新」即可升级插件，重启 dsh 后生效（需要 dsh 0.2 及以上；更早的版本请在「设置 → 插件」中更新）。为了供应链安全，发布不足 24 小时的新版本会等满 24 小时再提供更新。
+
 ## 语言
 
 整个插件的语言跟随 dsh 的界面语言（「设置 → 通用设置 → 语言」），目前支持 dsh 提供的中文和 English：

package/lib/client.js

@@ -54,8 +54,14 @@ var vpnApi = {
   test: () => post("/test"),
   status: () => post("/status"),
   links: () => post("/links"),
+  /** Find an earlier installation on the server and adopt its protocols and certificate mode. */
+  detect: () => post("/detect"),
   install: (regenerate) => post("/install", { regenerate }),
   uninstall: () => post("/uninstall"),
+  /** Installed version; with `check`, also the newest release on npm. */
+  version: (check = false) => post("/version", { check }),
+  /** Install the newest release through dsh's plugin manager. */
+  update: () => post("/update"),
   /** Tell the host which language dsh's UI shows (approval prompts follow it). */
   reportUiLocale: (locale) => post("/ui-locale", { locale })
 };
@@ -66,6 +72,17 @@ var zh = {
   title: "VPN \u8282\u70B9",
   nav: "VPN \u8BBE\u7F6E",
   description: "\u5728\u4F60\u81EA\u5DF1\u7684 VPS \u4E0A\u4E00\u952E\u90E8\u7F72\u52A0\u5BC6 VPN\uFF0C\u4FDD\u62A4\u4F60\u5728\u516C\u5171 Wi-Fi \u7B49\u7F51\u7EDC\u4E2D\u7684\u8FDE\u63A5\u5B89\u5168\u548C\u9690\u79C1\uFF1B\u626B\u7801\u5373\u53EF\u5BFC\u5165\u624B\u673A\u6216\u7535\u8111\u4E0A\u7684\u5BA2\u6237\u7AEF\u3002",
+  version: "\u7248\u672C v{version}",
+  update: "\u66F4\u65B0",
+  updating: "\u6B63\u5728\u66F4\u65B0\u2026",
+  "update.latest": "\u5DF2\u662F\u6700\u65B0\u7248\u672C",
+  "update.available": "\u6709\u65B0\u7248\u672C v{version}",
+  "update.tooNew": "\u65B0\u7248\u672C v{version} \u521A\u53D1\u5E03\uFF0C\u4E3A\u5B89\u5168\u8D77\u89C1 {time} \u540E\u53EF\u66F4\u65B0",
+  "update.done": "\u5DF2\u66F4\u65B0\u5230 v{version}\uFF0C\u91CD\u542F dsh \u540E\u751F\u6548",
+  "update.unsupported": "\u5F53\u524D dsh \u7248\u672C\u4E0D\u652F\u6301\u5728\u6B64\u66F4\u65B0\uFF0C\u8BF7\u5728\u300C\u8BBE\u7F6E \u2192 \u63D2\u4EF6\u300D\u4E2D\u66F4\u65B0 dsh-vpn\u3002",
+  "update.busy": "\u6B63\u5728\u66F4\u65B0\uFF0C\u8BF7\u7A0D\u5019\u3002",
+  "update.check_failed": "\u65E0\u6CD5\u68C0\u67E5\u65B0\u7248\u672C\uFF1A{message}",
+  "update.install_failed": "\u66F4\u65B0\u5931\u8D25\uFF1A{message}",
   serverSection: "\u670D\u52A1\u5668",
   host: "\u670D\u52A1\u5668 IP \u6216\u57DF\u540D",
   hostHint: "\u4F60\u8D2D\u4E70\u7684 VPS \u7684\u516C\u7F51\u5730\u5740\u3002",
@@ -117,6 +134,10 @@ var zh = {
   working: "\u6267\u884C\u4E2D\u2026",
   qrSection: "\u8282\u70B9\u4E8C\u7EF4\u7801",
   qrHint: "\u7528 v2rayN\u3001NekoBox\u3001Shadowrocket\u3001sing-box\u3001Clash Meta \u7B49\u5BA2\u6237\u7AEF\u626B\u63CF\u5BFC\u5165\u3002\u4E8C\u7EF4\u7801\u7B49\u540C\u4E8E\u5BC6\u7801\uFF0C\u8BF7\u52FF\u5916\u4F20\u3002",
+  detect: "\u68C0\u67E5\u5DF2\u6709\u5B89\u88C5",
+  detectFound: "\u5DF2\u627E\u5230\u4E4B\u524D\u7684\u5B89\u88C5\uFF1Asing-box {version}\uFF0C\u534F\u8BAE\uFF1A{protocols}\uFF08{cert}\uFF09\u3002\u8282\u70B9\u4E8C\u7EF4\u7801\u5DF2\u663E\u793A\u5728\u4E0B\u65B9\uFF0C\u539F\u6709\u7684\u5BA2\u6237\u7AEF\u914D\u7F6E\u53EF\u4EE5\u7EE7\u7EED\u4F7F\u7528\u3002",
+  detectSynced: "\u5DF2\u6309\u670D\u52A1\u5668\u4E0A\u7684\u5B9E\u9645\u60C5\u51B5\u66F4\u65B0\u4E86\u534F\u8BAE\u52FE\u9009\u548C\u8BC1\u4E66\u7C7B\u578B\u3002",
+  detectNone: "\u8FD9\u53F0\u670D\u52A1\u5668\u4E0A\u6CA1\u6709\u627E\u5230\u4E4B\u524D\u7684\u5B89\u88C5\uFF0C\u53EF\u4EE5\u76F4\u63A5\u70B9\u300C\u5B89\u88C5 / \u66F4\u65B0\u300D\u3002",
   refresh: "\u5237\u65B0\u4E8C\u7EF4\u7801",
   refreshing: "\u6B63\u5728\u5237\u65B0\u2026",
   refreshedAt: "\u4E0A\u6B21\u5237\u65B0 {time}",
@@ -157,6 +178,17 @@ var en = {
   title: "VPN node",
   nav: "VPN",
   description: "Deploy an encrypted VPN to your own VPS in one click to keep your connections private and secure on networks like public Wi-Fi; import it into client apps by scanning QR codes.",
+  version: "Version v{version}",
+  update: "Update",
+  updating: "Updating\u2026",
+  "update.latest": "You have the latest version",
+  "update.available": "v{version} is available",
+  "update.tooNew": "v{version} was just released; for safety it can be installed after {time}",
+  "update.done": "Updated to v{version}. Restart dsh to use it.",
+  "update.unsupported": "This dsh version cannot update plugins from here. Update dsh-vpn in Settings \u2192 Plugins.",
+  "update.busy": "An update is already running.",
+  "update.check_failed": "Could not check for updates: {message}",
+  "update.install_failed": "Update failed: {message}",
   serverSection: "Server",
   host: "Server IP or domain",
   hostHint: "Public address of your VPS.",
@@ -208,6 +240,10 @@ var en = {
   working: "Working\u2026",
   qrSection: "Node QR codes",
   qrHint: "Scan with v2rayN, NekoBox, Shadowrocket, sing-box, Clash Meta and similar apps. A QR code is as secret as a password.",
+  detect: "Find existing install",
+  detectFound: "Found an earlier installation: sing-box {version}, protocols: {protocols} ({cert}). Its QR codes are shown below; clients you already set up keep working.",
+  detectSynced: "The protocol selection and certificate type now match the server.",
+  detectNone: "No earlier installation was found on this server. Click Install / Update to set one up.",
   refresh: "Refresh QR codes",
   refreshing: "Refreshing\u2026",
   refreshedAt: "Last refreshed {time}",
@@ -282,7 +318,11 @@ var STYLES = `
 .dshvpn-qr svg { width: 180px; height: 180px; }
 .dshvpn-link { display: block; max-width: 100%; max-height: 3.2em; overflow: hidden; color: var(--dsw-alias-label-secondary, #666); }
 .dshvpn-section { display: flex; flex-direction: column; gap: 16px; }
-.dshvpn-section-head h2 { margin: 0 0 4px; font-size: 18px; font-weight: 600; }
+.dshvpn-section-head h2 { margin: 0; font-size: 18px; font-weight: 600; }
+.dshvpn-title-row { display: flex; align-items: center; flex-wrap: wrap; gap: 10px; margin-bottom: 4px; }
+.dshvpn-version { font-size: 12px; font-variant-numeric: tabular-nums; color: var(--dsw-alias-label-secondary, #666); }
+.dshvpn-update-note { font-size: 12px; color: var(--dsw-alias-label-secondary, #666); }
+.dshvpn-update-note.dshvpn-new { color: var(--dsw-alias-state-success-primary, #2f855a); font-weight: 600; }
 .dshvpn-section-head p { margin: 0; }
 .dshvpn-qr-section { padding: 14px; border-radius: 12px; border: 1px solid var(--dsw-alias-border-l2, rgba(127,127,127,.3)); }
 .dshvpn-qr-section h3 { font-size: 15px; }
@@ -296,6 +336,10 @@ var STYLES = `
 .dshvpn-qr-empty-icon { font-size: 36px; line-height: 1; color: var(--dsw-alias-label-tertiary, #888); }
 `;
 
+// src/client/VpnSettingsSection.tsx
+var import_react2 = require("react");
+var import_dsh_client_ui_primitives2 = require("@deepseek-ai/dsh-client-ui-primitives");
+
 // src/client/VpnSettingsPage.tsx
 var import_react = require("react");
 var import_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
@@ -1099,11 +1143,35 @@ function VpnSettingsPage({ view, t, api }) {
       setBusy(null);
     }
   }
-  const save = () => op("save", () => api.saveSettings(form), (r) => {
-    setSaved(r.settings);
-    setForm(formOf(r.settings));
-    return { tone: "success", text: t("saved") };
-  });
+  const detect = async () => {
+    await op("detect", api.detect, (r) => {
+      const res = r.result ?? {};
+      if (res.installed !== true) return { tone: "info", text: t("detectNone") };
+      if (r.links) {
+        setLinks(r.links);
+        setRefreshedAt(/* @__PURE__ */ new Date());
+      }
+      const protocols = (res.protocols ?? []).map((id) => PROTOCOLS.find((p) => p.id === id)?.name ?? id).join("\u3001");
+      const cert = res.certMode === "ip" ? t("certIp") : t("certSelf");
+      const text = t("detectFound", { version: String(res.version ?? ""), protocols, cert });
+      return { tone: "success", text: res.synced === true ? `${text}
+${t("detectSynced")}` : text };
+    });
+    const s = await api.getSettings();
+    if (s.ok) {
+      setSaved(s.settings);
+      setForm(formOf(s.settings));
+    }
+  };
+  const save = async () => {
+    const first = !saved.configured;
+    const r = await op("save", () => api.saveSettings(form), (r2) => {
+      setSaved(r2.settings);
+      setForm(formOf(r2.settings));
+      return { tone: "success", text: t("saved") };
+    });
+    if (r.ok && first) await detect();
+  };
   const refreshSettings = async () => {
     const r = await api.getSettings();
     if (r.ok) {
@@ -1266,6 +1334,9 @@ ${t("cloudHint")}`;
           children: t("test")
         }
       ),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { variant: "outline", disabled: disabled || needsSave, onClick: () => {
+        void detect();
+      }, children: busy === "detect" ? t("working") : t("detect") }),
       dirty && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("small", { className: "dshvpn-warn", children: t("unsaved") })
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", { children: [
@@ -1377,13 +1448,57 @@ ${fw.backend === "none" ? t("fwNone") : t("fwStatus", { backend: fw.backend, cou
 // src/client/VpnSettingsSection.tsx
 var import_jsx_runtime2 = require("react/jsx-runtime");
 function VpnSettingsSection(props) {
-  const { t } = props;
+  const { t, api } = props;
+  const [info, setInfo] = (0, import_react2.useState)(null);
+  const [note, setNote] = (0, import_react2.useState)(null);
+  const [updating, setUpdating] = (0, import_react2.useState)(false);
+  const when = (iso) => new Date(iso).toLocaleString();
+  const describe = (v) => {
+    if (v.target) return { text: t("update.available", { version: v.target }), fresh: true };
+    if (v.availableAt && v.latest) return { text: t("update.tooNew", { version: v.latest, time: when(v.availableAt) }) };
+    return null;
+  };
+  (0, import_react2.useEffect)(() => {
+    let live = true;
+    void api.version().then((r) => {
+      if (live && r.ok) setInfo(r);
+    });
+    void api.version(true).then((r) => {
+      if (!live || !r.ok) return;
+      setInfo(r);
+      setNote(describe(r));
+    });
+    return () => {
+      live = false;
+    };
+  }, [api]);
+  const update = async () => {
+    setUpdating(true);
+    setNote(null);
+    const r = await api.update();
+    setUpdating(false);
+    if (!r.ok) {
+      const known = ["unsupported", "busy", "check_failed"].includes(r.error) ? r.error : "install_failed";
+      setNote({ text: t(`update.${known}`, { message: r.message ?? r.error }) });
+      return;
+    }
+    setInfo((prev) => ({ ...prev, ...r.info, canUpdate: prev?.canUpdate ?? true }));
+    if (r.status === "updated") setNote({ text: t("update.done", { version: r.version }), fresh: true });
+    else setNote(describe(r.info) ?? { text: t("update.latest") });
+  };
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { className: "dshvpn-section", children: [
     /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("header", { className: "dshvpn-section-head", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("h2", { children: t("nav") }),
+      /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { className: "dshvpn-title-row", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("h2", { children: t("nav") }),
+        info?.current && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { className: "dshvpn-version", children: t("version", { version: info.current }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_dsh_client_ui_primitives2.Button, { size: "sm", variant: "outline", disabled: updating, onClick: () => {
+          void update();
+        }, children: updating ? t("updating") : t("update") }),
+        note && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { className: `dshvpn-update-note${note.fresh ? " dshvpn-new" : ""}`, children: note.text })
+      ] }),
       /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "dshvpn-muted", children: t("description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(VpnSettingsPage, { t, api: props.api, view: "page" })
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(VpnSettingsPage, { t, api, view: "page" })
   ] });
 }
 

package/lib/index.js

@@ -20264,8 +20264,19 @@ function json(status, value) {
     headers: { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" }
   });
 }
-function apiHandlers(service, uiLang, onUiLang) {
+function apiHandlers(service, uiLang, onUiLang, updater) {
   return {
+    "/version": async (body, signal) => {
+      const current = updater?.current;
+      const canUpdate = updater?.manager !== void 0;
+      if (!updater || body.check !== true) return { ok: true, current, canUpdate };
+      try {
+        return { ok: true, canUpdate, ...await updater.check(signal) };
+      } catch (err) {
+        return { ok: false, error: "check_failed", current, canUpdate, message: err instanceof Error ? err.message : String(err) };
+      }
+    },
+    "/update": async (_body, signal) => updater ? updater.update(signal) : { ok: false, error: "unsupported" },
     "/ui-locale": async (body) => {
       if (typeof body.locale !== "string" || body.locale.length > 35) return { ok: false, error: "bad_request", message: "locale must be a string" };
       if (uiLang?.set(body.locale)) onUiLang?.();
@@ -20287,6 +20298,7 @@ function apiHandlers(service, uiLang, onUiLang) {
     "/test": (_body, signal) => service.test(signal),
     "/status": (_body, signal) => service.status(signal),
     "/links": (_body, signal) => service.links(signal),
+    "/detect": (_body, signal) => service.detect(signal),
     "/install": (body, signal) => service.install({ regenerate: body.regenerate === true }, signal),
     "/uninstall": (_body, signal) => service.uninstall(signal)
   };
@@ -20310,8 +20322,8 @@ async function handle(handler, request) {
     return json(500, { ok: false, error: "internal", message: err instanceof Error ? err.message : String(err) });
   }
 }
-function registerApi(ctx, service, uiLang, onUiLang) {
-  for (const [path, handler] of Object.entries(apiHandlers(service, uiLang, onUiLang))) {
+function registerApi(ctx, service, uiLang, onUiLang, updater) {
+  for (const [path, handler] of Object.entries(apiHandlers(service, uiLang, onUiLang, updater))) {
     ctx.effect(() => ctx.connection.fetch.register({
       path: `${API_BASE}${path}`,
       methods: ["POST"],
@@ -20604,6 +20616,34 @@ var VpnService = class {
   links(signal) {
     return this.run("links", (s) => ["--server", s.linkAddress ?? s.host], signal);
   }
+  /**
+   * Find an existing installation (e.g. after dsh-vpn was removed and its local
+   * settings lost): read the server's protocols, certificate mode and links,
+   * and adopt the protocols and certificate mode into local settings so a
+   * later 安装 / 更新 keeps the node as it is.
+   */
+  async detect(signal) {
+    const status = await this.status(signal);
+    if (!status.ok || status.result?.installed !== true) return status.ok ? { ok: true, result: { installed: false } } : status;
+    const r = status.result;
+    const protocols = String(r.protocols ?? "").split(",").filter(isProtocolId);
+    const mode = r.cert?.mode;
+    const certMode = mode === "ip" || mode === "self" ? mode : void 0;
+    let synced = false;
+    await this.store.update((cur) => {
+      if (!cur) return void 0;
+      const next = { ...cur, ...protocols.length > 0 ? { protocols } : {}, ...certMode ? { certMode } : {} };
+      synced = next.certMode !== cur.certMode || next.protocols.join() !== cur.protocols.join();
+      return synced ? next : void 0;
+    });
+    const links = await this.links(signal);
+    return {
+      ok: links.ok,
+      ...links.error ? { error: links.error, message: links.message } : {},
+      result: { installed: true, active: r.active, version: r.version, protocols, certMode, synced },
+      ...links.links ? { links: links.links } : {}
+    };
+  }
   uninstall(signal) {
     return this.run("uninstall", () => [], signal);
   }
@@ -20743,6 +20783,126 @@ function notConfiguredMessage(lang) {
   return lang === "zh" ? "\u5C1A\u672A\u914D\u7F6E\u670D\u52A1\u5668\u3002\u8BF7\u70B9 dsh \u5DE6\u4E0B\u89D2\u300C\u8BBE\u7F6E\u300D\u2192\u300CVPN \u8BBE\u7F6E\u300D\uFF0C\u586B\u5199\u670D\u52A1\u5668 IP\u3001\u7AEF\u53E3\u3001\u7528\u6237\u540D\u548C\u5BC6\u7801\u3002" : "No server configured. Open dsh Settings (bottom left) \u2192 VPN and fill in the server IP, port, username and password first.";
 }
 
+// src/update.ts
+import { readFileSync } from "node:fs";
+var PACKAGE_NAME = "dsh-vpn";
+var MIN_RELEASE_AGE_MS = 24 * 60 * 60 * 1e3;
+var NPM_REGISTRY = "https://registry.npmjs.org/";
+function currentVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+    return typeof pkg.version === "string" ? pkg.version : "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+var RELEASE = /^(\d+)\.(\d+)\.(\d+)$/;
+function compareVersions(a, b) {
+  const pa = RELEASE.exec(a);
+  const pb = RELEASE.exec(b);
+  if (!pa || !pb) return 0;
+  for (let i = 1; i <= 3; i++) {
+    const d = Number(pa[i]) - Number(pb[i]);
+    if (d !== 0) return d;
+  }
+  return 0;
+}
+function planUpdate(current, doc, now = Date.now()) {
+  const latest = doc["dist-tags"]?.latest;
+  const info = { current };
+  if (typeof latest !== "string" || !RELEASE.test(latest)) return info;
+  info.latest = latest;
+  if (compareVersions(latest, current) <= 0) return info;
+  const published = (v) => Date.parse(doc.time?.[v] ?? "");
+  const mature = (v) => {
+    const t = published(v);
+    return Number.isFinite(t) && now - t >= MIN_RELEASE_AGE_MS;
+  };
+  const candidates = Object.keys(doc.versions ?? { [latest]: {} }).filter((v) => RELEASE.test(v) && compareVersions(v, current) > 0 && compareVersions(v, latest) <= 0 && mature(v)).sort(compareVersions);
+  const target = candidates.at(-1);
+  if (target) info.target = target;
+  if (target !== latest) {
+    const t = published(latest);
+    if (Number.isFinite(t)) info.availableAt = new Date(t + MIN_RELEASE_AGE_MS).toISOString();
+  }
+  return info;
+}
+async function registriesOf(manager) {
+  const list = [];
+  if (manager) {
+    try {
+      const r = await manager.registries();
+      for (const url of [r.resolved, r.registry, ...r.fallbackRegistries]) if (url) list.push(url);
+    } catch {
+    }
+  }
+  list.push(NPM_REGISTRY);
+  return [...new Set(list.map((u) => u.endsWith("/") ? u : `${u}/`))];
+}
+async function fetchPackument(registries, signal, fetchImpl = fetch) {
+  let lastError;
+  for (const registry of registries) {
+    try {
+      const res = await fetchImpl(`${registry}${PACKAGE_NAME}`, {
+        headers: { accept: "application/json" },
+        signal: AbortSignal.any([AbortSignal.timeout(15e3), ...signal ? [signal] : []])
+      });
+      if (!res.ok) throw new Error(`${registry}: HTTP ${res.status}`);
+      return await res.json();
+    } catch (err) {
+      lastError = err;
+    }
+  }
+  throw lastError instanceof Error ? lastError : new Error(String(lastError));
+}
+var Updater = class {
+  constructor(current = currentVersion(), fetchImpl = fetch, now = Date.now) {
+    this.current = current;
+    this.fetchImpl = fetchImpl;
+    this.now = now;
+  }
+  current;
+  fetchImpl;
+  now;
+  manager;
+  running = false;
+  async check(signal) {
+    const doc = await fetchPackument(await registriesOf(this.manager), signal, this.fetchImpl);
+    return planUpdate(this.current, doc, this.now());
+  }
+  async update(signal) {
+    const manager = this.manager;
+    if (!manager) return { ok: false, error: "unsupported" };
+    if (this.running) return { ok: false, error: "busy" };
+    this.running = true;
+    try {
+      let info;
+      try {
+        info = await this.check(signal);
+      } catch (err) {
+        return { ok: false, error: "check_failed", message: messageOf(err) };
+      }
+      if (!info.target) return { ok: true, status: info.availableAt ? "too-new" : "up-to-date", info };
+      const result = await manager.installBundle(`${PACKAGE_NAME}@${info.target}`);
+      if (result.application === "applied" || result.application === "restart-required") {
+        return { ok: true, status: "updated", info, version: info.target, restartRequired: result.application === "restart-required" };
+      }
+      const output = result.packageResult?.output?.trim();
+      return { ok: false, error: "install_failed", info, message: tail(output || messageOf(result.error) || result.application) };
+    } finally {
+      this.running = false;
+    }
+  }
+};
+function messageOf(err) {
+  if (err instanceof Error) return err.message;
+  if (err && typeof err === "object" && "message" in err && typeof err.message === "string") return err.message;
+  return err === void 0 ? "" : String(err);
+}
+function tail(text, max = 600) {
+  return text.length > max ? `\u2026${text.slice(-max)}` : text;
+}
+
 // src/index.ts
 var name = "dsh-vpn";
 var inject = ["tools", "credentials"];
@@ -20852,8 +21012,15 @@ function apply(ctx, config) {
       };
     });
   }
+  const updater = new Updater();
+  ctx.inject(["pluginManager"], (pmCtx) => {
+    updater.manager = pmCtx.pluginManager;
+    pmCtx.effect(() => () => {
+      updater.manager = void 0;
+    }, "dsh-vpn: plugin manager");
+  });
   ctx.inject(["connection"], (webCtx) => {
-    registerApi(webCtx, service, uiLang, persistUiLang);
+    registerApi(webCtx, service, uiLang, persistUiLang, updater);
   });
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vpn",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "DeepSeek Harness plugin: deploy an encrypted VPN (sing-box) to your own VPS in one click, to protect your connections and privacy on untrusted networks",
   "keywords": [
     "anytls",