dsh-workbuddy-connect 0.6.2 → 0.6.4

package/lib/client.js

@@ -30,6 +30,14 @@ window.__ModuleLoader__.load({
 		*/
 		const WORKBUDDY_AI_STATUS_PATH = "/plugins/dsh-workbuddy-connect/ai/status";
 		const WORKBUDDY_AI_PROBE_PATH = "/plugins/dsh-workbuddy-connect/ai/probe";
+		/**
+		* Same-origin route backing the browser's update reminder.
+		*
+		* Read-only like the status route, so the same loopback Host/Origin gate
+		* applies; it answers public npm/GitHub metadata only and never token
+		* material.
+		*/
+		const WORKBUDDY_UPDATE_PATH = "/plugins/dsh-workbuddy-connect/update";
 		/** Every reason code, for validation without trusting a wire value. */
 		const SIGNED_OUT_REASON_CODES = [
 			"no-credential",
@@ -163,7 +171,7 @@ window.__ModuleLoader__.load({
 						children: t("assistantHeading")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("assistantIntro")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -173,7 +181,7 @@ window.__ModuleLoader__.load({
 							children: prompt
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 							type: "button",
-							style: buttonStyle$1,
+							style: buttonStyle$2,
 							onClick: () => {
 								(async () => {
 									const ok = await copyPrompt(prompt);
@@ -195,14 +203,14 @@ window.__ModuleLoader__.load({
 						children: t("assistantCopyFailed")
 					}) : null,
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("assistantAfter")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						style: rowStyle,
+						style: rowStyle$1,
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 							type: "button",
-							style: buttonStyle$1,
+							style: buttonStyle$2,
 							disabled: busy,
 							onClick: onRecheck,
 							children: busy ? t("assistantRechecking") : t("assistantRecheck")
@@ -259,13 +267,13 @@ window.__ModuleLoader__.load({
 			borderTop: "1px solid var(--dsw-alias-border-l2)",
 			padding: "16px 14px 18px"
 		};
-		const bodyStyle = {
+		const bodyStyle$1 = {
 			margin: 0,
 			fontSize: 14,
 			lineHeight: "22px",
 			color: "var(--dsw-alias-label-secondary)"
 		};
-		const rowStyle = {
+		const rowStyle$1 = {
 			display: "flex",
 			alignItems: "center",
 			justifyContent: "space-between",
@@ -280,7 +288,7 @@ window.__ModuleLoader__.load({
 			fontWeight: 500,
 			color: "var(--dsw-alias-label-primary)"
 		};
-		const buttonStyle$1 = {
+		const buttonStyle$2 = {
 			boxSizing: "border-box",
 			minHeight: 34,
 			padding: "6px 14px",
@@ -293,7 +301,7 @@ window.__ModuleLoader__.load({
 			cursor: "pointer"
 		};
 		const errorStyle = {
-			...bodyStyle,
+			...bodyStyle$1,
 			color: "var(--dsw-alias-state-error-primary)"
 		};
 		const quotaListStyle = {
@@ -511,8 +519,8 @@ window.__ModuleLoader__.load({
 		* theme as a pair: `brand-primary` is a light accent here, so pairing it with a
 		* hardcoded white would render white-on-white.
 		*/
-		const primaryButtonStyle$1 = {
-			...buttonStyle$1,
+		const primaryButtonStyle$2 = {
+			...buttonStyle$2,
 			border: "1px solid var(--dsw-alias-button-primary-fill)",
 			background: "var(--dsw-alias-button-primary-fill)",
 			color: "var(--dsw-alias-label-primary-foreground)"
@@ -580,7 +588,7 @@ window.__ModuleLoader__.load({
 							"aria-valuetext": quotaText
 						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-							style: bodyStyle,
+							style: bodyStyle$1,
 							children: quotaText
 						})
 					]
@@ -612,7 +620,7 @@ window.__ModuleLoader__.load({
 						children: percent === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { style: progressFillStyle(percent) })
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: detail
 					})
 				]
@@ -710,7 +718,7 @@ window.__ModuleLoader__.load({
 						})]
 					}) : null,
 					visibility === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("visibilityIntro")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -822,19 +830,19 @@ window.__ModuleLoader__.load({
 						children: t("probeHeading")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("probeIntro")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("probeConsentHint")
 					}),
 					probe.running ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("probeRunningGeneric")
 					}) : null,
 					probe.candidates.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle,
+						style: bodyStyle$1,
 						children: t("probeResultEmpty")
 					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						style: quotaGroupStyle,
@@ -853,7 +861,7 @@ window.__ModuleLoader__.load({
 												children: result.validation === "validating" && result.efforts.length > 0 ? result.efforts.join(" / ") : t(result.validation === "non-validating" ? "probeResultNotValidating" : "probeResultUnknown")
 											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 												type: "button",
-												style: buttonStyle$1,
+												style: buttonStyle$2,
 												disabled: probe.running || busy,
 												onClick: () => {
 													setPending(id);
@@ -869,20 +877,20 @@ window.__ModuleLoader__.load({
 									pending === id ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 										style: confirmBoxStyle,
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-											style: bodyStyle,
+											style: bodyStyle$1,
 											children: t("probeConfirmBody", { model: name })
 										}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 											style: confirmRowStyle$1,
 											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 												type: "button",
-												style: buttonStyle$1,
+												style: buttonStyle$2,
 												onClick: () => {
 													setPending(void 0);
 												},
 												children: t("cancel")
 											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 												type: "button",
-												style: primaryButtonStyle$1,
+												style: primaryButtonStyle$2,
 												disabled: probe.running || busy,
 												onClick: () => {
 													setRunningModel(id);
@@ -899,7 +907,7 @@ window.__ModuleLoader__.load({
 					}),
 					probe.results.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
-						style: buttonStyle$1,
+						style: buttonStyle$2,
 						disabled: busy,
 						onClick: () => {
 							onClear();
@@ -1207,7 +1215,7 @@ window.__ModuleLoader__.load({
 							children: t("accountHeading")
 						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: rowStyle,
+							style: rowStyle$1,
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: statusStyle,
 								role: "status",
@@ -1218,7 +1226,7 @@ window.__ModuleLoader__.load({
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
 							}), assistCode === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								style: buttonStyle$1,
+								style: buttonStyle$2,
 								disabled: busy,
 								onClick: () => {
 									manualRefresh();
@@ -1232,17 +1240,17 @@ window.__ModuleLoader__.load({
 						}),
 						status?.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 							status.expiresAt === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								style: bodyStyle,
+								style: bodyStyle$1,
 								children: t("accessTokenExpires", { time: formatTime(status.expiresAt) })
 							}),
 							status.catalog === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								style: rowStyle,
+								style: rowStyle$1,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-									style: bodyStyle,
+									style: bodyStyle$1,
 									children: [status.catalog.source === "live" && status.catalog.fetchedAt !== void 0 ? t("catalogLive", { time: formatTime(status.catalog.fetchedAt) }) : status.catalog.source === "saved" && status.catalog.fetchedAt !== void 0 ? t("catalogSaved", { time: formatTime(status.catalog.fetchedAt) }) : t("catalogFallback"), status.catalog.appVersion === void 0 ? "" : ` · ${t("catalogAppVersion", { version: status.catalog.appVersion })}`]
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 									type: "button",
-									style: buttonStyle$1,
+									style: buttonStyle$2,
 									disabled: busy,
 									onClick: () => {
 										refreshModels();
@@ -1281,12 +1289,12 @@ window.__ModuleLoader__.load({
 									status.credits === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 										style: quotaListStyle,
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-											style: rowStyle,
+											style: rowStyle$1,
 											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
 												style: quotaTitleStyle,
 												children: t("creditsHeading")
 											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-												style: bodyStyle,
+												style: bodyStyle$1,
 												children: status.credits.unlimited === true ? t("creditsTotalUnlimited") : t("creditsTotal", { total: formatNumber(status.credits.total) })
 											})]
 										}), status.credits.cycleResetTime === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -1363,7 +1371,7 @@ window.__ModuleLoader__.load({
 							})
 						] }) : null,
 						status?.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-							style: status.reason === void 0 ? bodyStyle : errorStyle,
+							style: status.reason === void 0 ? bodyStyle$1 : errorStyle,
 							children: status.reason ?? t(variant.signedOutKey)
 						}), assistCode === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AssistBlock, {
 							t,
@@ -1424,7 +1432,7 @@ window.__ModuleLoader__.load({
 			transform: "translateY(2px)",
 			marginRight: -8
 		};
-		const buttonStyle = {
+		const buttonStyle$1 = {
 			display: "inline-flex",
 			alignItems: "center",
 			justifyContent: "center",
@@ -1509,7 +1517,7 @@ window.__ModuleLoader__.load({
 		* theme's own pair for exactly this, and is what `dsh-codex-connect` uses for
 		* the same job.
 		*/
-		const primaryButtonStyle = {
+		const primaryButtonStyle$1 = {
 			...confirmButtonStyle,
 			border: "1px solid var(--dsw-alias-button-primary-fill)",
 			background: "var(--dsw-alias-button-primary-fill)",
@@ -1727,7 +1735,7 @@ window.__ModuleLoader__.load({
 							setTooltipVisible(false);
 						},
 						style: {
-							...buttonStyle,
+							...buttonStyle$1,
 							opacity: disabled && !confirming ? .6 : 1,
 							cursor: disabled ? "default" : "pointer"
 						},
@@ -1782,7 +1790,7 @@ window.__ModuleLoader__.load({
 								children: t("cancel")
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								style: primaryButtonStyle,
+								style: primaryButtonStyle$1,
 								onClick: () => {
 									detect();
 								},
@@ -1813,6 +1821,748 @@ window.__ModuleLoader__.load({
 			return t("probeNoteUnknown");
 		}
 		//#endregion
+		//#region src/update.ts
+		/**
+		* Public update metadata and bounded version checking for WorkBuddy Connect.
+		*
+		* Two upstreams, strictly layered so the judgement never depends on the
+		* enrichment: npm's dist-tags decide whether a newer release exists, and only
+		* then is GitHub's release list consulted — one request that feeds both the
+		* "versions behind" count and the per-release notes. Every upstream answer is
+		* treated as untrusted input: bodies are size-capped while streaming, releases
+		* are re-validated on the browser side by {@link parseWorkBuddyUpdateResult}
+		* before anything renders.
+		*
+		* This module is host/browser shared and dependency-free by design (the client
+		* bundle's runtime imports stay React + local modules only).
+		*
+		* @module dsh-workbuddy-connect/update
+		*/
+		const WORKBUDDY_REPOSITORY_URL = "https://github.com/corrinehu/dsh-workbuddy-connect";
+		`${WORKBUDDY_REPOSITORY_URL.replace("https://github.com", "https://api.github.com/repos")}`;
+		const WORKBUDDY_RELEASE_PAGE_BASE = `${WORKBUDDY_REPOSITORY_URL}/releases/tag/`;
+		/** GitHub caps one page at 100 releases; ours is far below that today. */
+		const RELEASES_LIST_MAX = 100;
+		const RELEASE_NAME_MAX_CHARS = 200;
+		const RELEASE_NOTES_MAX_CHARS = 16e3;
+		/** Parse one exact SemVer version, accepting the conventional leading `v`. */
+		function parseWorkBuddyVersion(raw) {
+			if (typeof raw !== "string") return void 0;
+			const normalized = raw.startsWith("v") ? raw.slice(1) : raw;
+			const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/u.exec(normalized);
+			if (match === null) return void 0;
+			const rawPrerelease = match[4] === void 0 ? [] : match[4].split(".");
+			if (rawPrerelease.some((identifier) => /^\d+$/u.test(identifier) && !/^(0|[1-9]\d*)$/u.test(identifier))) return void 0;
+			const prerelease = rawPrerelease.map((identifier) => /^(0|[1-9]\d*)$/u.test(identifier) ? Number(identifier) : identifier);
+			if (prerelease.some((identifier) => typeof identifier === "number" && !Number.isSafeInteger(identifier))) return void 0;
+			const parsed = {
+				major: Number(match[1]),
+				minor: Number(match[2]),
+				patch: Number(match[3]),
+				prerelease
+			};
+			return [
+				parsed.major,
+				parsed.minor,
+				parsed.patch
+			].every(Number.isSafeInteger) ? parsed : void 0;
+		}
+		/**
+		* One canonical spelling per SemVer value: leading `v` and build metadata
+		* fold away, so `v0.6.4`, `0.6.4`, and `0.6.4+build` dedupe as one release.
+		* Returns `undefined` for unparseable input; callers drop those first.
+		*/
+		function canonicalWorkBuddyVersion(version) {
+			const parsed = parseWorkBuddyVersion(version);
+			if (parsed === void 0) return void 0;
+			return `${String(parsed.major)}.${String(parsed.minor)}.${String(parsed.patch)}` + (parsed.prerelease.length === 0 ? "" : `-${parsed.prerelease.join(".")}`);
+		}
+		function compareIdentifiers(left, right) {
+			if (typeof left === "number" && typeof right === "number") return left < right ? -1 : left > right ? 1 : 0;
+			if (typeof left === "number") return -1;
+			if (typeof right === "number") return 1;
+			return left < right ? -1 : left > right ? 1 : 0;
+		}
+		/** Compare two versions using SemVer precedence (build metadata ignored). */
+		function compareWorkBuddyVersions(left, right) {
+			const a = parseWorkBuddyVersion(left);
+			const b = parseWorkBuddyVersion(right);
+			if (a === void 0 || b === void 0) throw new TypeError("invalid WorkBuddy Connect version");
+			for (const [aPart, bPart] of [
+				[a.major, b.major],
+				[a.minor, b.minor],
+				[a.patch, b.patch]
+			]) if (aPart !== bPart) return aPart < bPart ? -1 : 1;
+			if (a.prerelease.length === 0 && b.prerelease.length !== 0) return 1;
+			if (a.prerelease.length !== 0 && b.prerelease.length === 0) return -1;
+			for (let index = 0; index < Math.max(a.prerelease.length, b.prerelease.length); index += 1) {
+				const aPart = a.prerelease[index];
+				const bPart = b.prerelease[index];
+				if (aPart === void 0) return -1;
+				if (bPart === void 0) return 1;
+				const comparison = compareIdentifiers(aPart, bPart);
+				if (comparison !== 0) return comparison;
+			}
+			return 0;
+		}
+		/** Strip control characters, normalize newlines, and cap the length. */
+		function cleanReleaseText(value, maxLength) {
+			if (typeof value !== "string" || value.length === 0) return void 0;
+			const clean = value.replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/gu, "").replace(/\r\n?/gu, "\n").trim().slice(0, maxLength);
+			return clean.length === 0 ? void 0 : clean;
+		}
+		function cleanPublishedAt(value) {
+			return typeof value === "string" && /^\d{4}-\d{2}-\d{2}T/iu.test(value) ? value.slice(0, 64) : void 0;
+		}
+		function releasePageUrl(version) {
+			return `${WORKBUDDY_RELEASE_PAGE_BASE}v${version}`;
+		}
+		/**
+		* Validate a route response before the browser renders it. Same distrust as
+		* the host side: the versions must parse, `update-available` must still hold
+		* under a fresh comparison, the release URL must equal the one derived from
+		* the version, and every listed release must fall in (current, latest] — a
+		* host that invents content fails closed here.
+		*/
+		function parseWorkBuddyUpdateResult(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+			const record = value;
+			const currentVersion = record["currentVersion"];
+			if (typeof currentVersion !== "string" || parseWorkBuddyVersion(currentVersion) === void 0) return void 0;
+			if (record["status"] === "unavailable") {
+				const reason = record["reason"];
+				return reason === "invalid-current-version" || reason === "registry-unavailable" || reason === "invalid-registry-response" ? {
+					status: "unavailable",
+					currentVersion,
+					reason
+				} : void 0;
+			}
+			const latestVersion = record["latestVersion"];
+			if (typeof latestVersion !== "string" || parseWorkBuddyVersion(latestVersion) === void 0) return void 0;
+			if (record["status"] === "up-to-date") return {
+				status: "up-to-date",
+				currentVersion,
+				latestVersion
+			};
+			if (record["status"] !== "update-available" || compareWorkBuddyVersions(latestVersion, currentVersion) <= 0) return void 0;
+			const expectedUrl = releasePageUrl(latestVersion);
+			if (record["releaseUrl"] !== expectedUrl) return void 0;
+			if (!Array.isArray(record["releases"]) || record["releases"].length > RELEASES_LIST_MAX) return void 0;
+			const seen = /* @__PURE__ */ new Set();
+			const releases = [];
+			for (const raw of record["releases"]) {
+				if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
+				const entry = raw;
+				const version = entry["version"];
+				if (typeof version !== "string" || parseWorkBuddyVersion(version) === void 0) return void 0;
+				if (compareWorkBuddyVersions(version, currentVersion) <= 0 || compareWorkBuddyVersions(version, latestVersion) > 0) return void 0;
+				const canonical = canonicalWorkBuddyVersion(version);
+				if (canonical === void 0 || seen.has(canonical)) return void 0;
+				seen.add(canonical);
+				const name = cleanReleaseText(entry["name"], RELEASE_NAME_MAX_CHARS);
+				const notes = cleanReleaseText(entry["notes"], RELEASE_NOTES_MAX_CHARS);
+				const publishedAt = cleanPublishedAt(entry["publishedAt"]);
+				releases.push({
+					version,
+					...name === void 0 ? {} : { name },
+					...notes === void 0 ? {} : { notes },
+					...publishedAt === void 0 ? {} : { publishedAt }
+				});
+			}
+			const rawVersionsBehind = record["versionsBehind"];
+			if (rawVersionsBehind !== void 0 && (typeof rawVersionsBehind !== "number" || !Number.isSafeInteger(rawVersionsBehind) || rawVersionsBehind !== releases.length)) return void 0;
+			return {
+				status: "update-available",
+				currentVersion,
+				latestVersion,
+				releaseUrl: expectedUrl,
+				releases,
+				...rawVersionsBehind === void 0 ? {} : { versionsBehind: rawVersionsBehind }
+			};
+		}
+		//#endregion
+		//#region src/client/WorkBuddyUpdateNotice.tsx
+		/**
+		* The bottom-right update reminder: one floating panel, rendered only while a
+		* newer release exists and has not been dismissed. Each in-range release
+		* shows as a collapsed title row (our release titles are written as bilingual
+		* user-facing summaries, so the row doubles as the highlight line); opening
+		* one reveals its notes under the markdown whitelist below.
+		*/
+		const DEFAULT_T = (key, _params) => String(key);
+		const panelStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 10,
+			padding: "13px 15px",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 12,
+			background: "var(--dsw-alias-bg-module-platform)",
+			color: "var(--dsw-alias-label-primary)"
+		};
+		const overlayStyle = {
+			position: "fixed",
+			bottom: 16,
+			right: 20,
+			zIndex: 30,
+			width: "min(440px, calc(100vw - 40px))",
+			pointerEvents: "auto",
+			maxHeight: "calc(100vh - 32px)",
+			overflowY: "auto",
+			boxSizing: "border-box",
+			boxShadow: "0 8px 28px rgba(0, 0, 0, 0.16)"
+		};
+		const rowStyle = {
+			display: "flex",
+			alignItems: "center",
+			justifyContent: "space-between",
+			gap: 12,
+			flexWrap: "wrap"
+		};
+		const titleStyle = {
+			margin: 0,
+			fontSize: 14,
+			lineHeight: "20px",
+			fontWeight: 600
+		};
+		const bodyStyle = {
+			margin: 0,
+			color: "var(--dsw-alias-label-secondary)",
+			fontSize: 13,
+			lineHeight: "20px"
+		};
+		const sectionStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 6
+		};
+		const releaseRowStyle = {
+			display: "flex",
+			alignItems: "flex-start",
+			gap: 8,
+			padding: "7px 9px",
+			borderRadius: 7,
+			background: "var(--dsw-alias-bg-layer-2, rgba(0, 0, 0, 0.04))",
+			border: 0,
+			width: "100%",
+			boxSizing: "border-box",
+			color: "inherit",
+			font: "inherit",
+			fontSize: 13,
+			lineHeight: "19px",
+			textAlign: "left",
+			cursor: "pointer",
+			overflowWrap: "anywhere"
+		};
+		const buttonStyle = {
+			display: "inline-flex",
+			alignItems: "center",
+			justifyContent: "center",
+			boxSizing: "border-box",
+			minHeight: 32,
+			padding: "4px 11px",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 7,
+			background: "var(--dsw-alias-bg-layer-1)",
+			color: "var(--dsw-alias-label-primary)",
+			font: "inherit",
+			fontSize: 12,
+			lineHeight: "20px",
+			whiteSpace: "nowrap",
+			cursor: "pointer"
+		};
+		const primaryButtonStyle = {
+			...buttonStyle,
+			borderColor: "var(--dsw-alias-button-primary-fill)",
+			background: "var(--dsw-alias-button-primary-fill)",
+			color: "var(--dsw-alias-label-primary-foreground)"
+		};
+		const textButtonStyle = {
+			border: 0,
+			padding: 0,
+			background: "transparent",
+			color: "var(--dsw-alias-brand-primary)",
+			font: "inherit",
+			fontSize: 12,
+			lineHeight: "20px",
+			cursor: "pointer",
+			textDecoration: "underline",
+			textUnderlineOffset: 2
+		};
+		const promptRowStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 8,
+			padding: "7px 8px 7px 10px",
+			borderRadius: 7,
+			background: "var(--dsw-alias-bg-layer-2, rgba(0, 0, 0, 0.06))"
+		};
+		const promptTextStyle = {
+			flex: "1 1 auto",
+			minWidth: 0,
+			margin: 0,
+			padding: 0,
+			background: "transparent",
+			color: "var(--dsw-alias-label-primary)",
+			fontSize: 12,
+			lineHeight: "19px",
+			whiteSpace: "pre-wrap",
+			overflowWrap: "anywhere"
+		};
+		const notesStyle = {
+			maxHeight: 220,
+			overflowY: "auto",
+			margin: "4px 0 0",
+			padding: "9px 10px",
+			borderRadius: 7,
+			background: "var(--dsw-alias-bg-layer-2, rgba(0, 0, 0, 0.06))",
+			color: "var(--dsw-alias-label-secondary)",
+			fontSize: 12,
+			lineHeight: "19px",
+			overflowWrap: "anywhere"
+		};
+		const notesListStyle = {
+			margin: "4px 0",
+			paddingLeft: 18
+		};
+		const notesHeadingStyle = {
+			margin: "0 0 4px",
+			fontSize: 12,
+			lineHeight: "19px",
+			fontWeight: 600,
+			color: "var(--dsw-alias-label-primary)"
+		};
+		async function copyAgentPrompt(prompt) {
+			try {
+				if (navigator.clipboard?.writeText === void 0) return false;
+				await navigator.clipboard.writeText(prompt);
+				return true;
+			} catch {
+				return false;
+			}
+		}
+		/** Only same-origin GitHub links may render as anchors; everything else is text. */
+		function safeReleaseUrl(value) {
+			try {
+				const url = new URL(value);
+				return url.protocol === "https:" && url.hostname === "github.com" ? url.href : void 0;
+			} catch {
+				return;
+			}
+		}
+		function renderInlineMarkdown(text, keyPrefix) {
+			const tokens = /(?:\*\*[^*]+\*\*|\[[^\]]+\]\(https:\/\/[^)\s]+\)|https:\/\/[^\s<]+)/gu;
+			const children = [];
+			let lastIndex = 0;
+			let match;
+			let tokenIndex = 0;
+			while ((match = tokens.exec(text)) !== null) {
+				if (match.index > lastIndex) children.push(text.slice(lastIndex, match.index));
+				const token = match[0];
+				const bold = /^\*\*([^*]+)\*\*$/u.exec(token);
+				const markdownLink = /^\[([^\]]+)\]\((https:\/\/[^)\s]+)\)$/u.exec(token);
+				const bareUrl = /^https:\/\/[^\s<]+$/u.test(token) ? token.replace(/[.,]$/u, "") : void 0;
+				if (bold !== null) children.push(/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: bold[1] ?? "" }, `${keyPrefix}-bold-${tokenIndex}`));
+				else if (markdownLink !== null) {
+					const label = markdownLink[1] ?? token;
+					const href = markdownLink[2] === void 0 ? void 0 : safeReleaseUrl(markdownLink[2]);
+					children.push(href === void 0 ? label : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+						href,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: label
+					}, `${keyPrefix}-link-${tokenIndex}`));
+				} else if (bareUrl !== void 0) {
+					const href = safeReleaseUrl(bareUrl);
+					children.push(href === void 0 ? token : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+						href,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: token
+					}, `${keyPrefix}-url-${tokenIndex}`));
+				} else children.push(token);
+				lastIndex = match.index + token.length;
+				tokenIndex += 1;
+			}
+			if (lastIndex < text.length) children.push(text.slice(lastIndex));
+			return children;
+		}
+		function renderReleaseNotes(markdown) {
+			const content = [];
+			let bullets = [];
+			const flushBullets = () => {
+				if (bullets.length === 0) return;
+				content.push(/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+					style: notesListStyle,
+					children: bullets
+				}, `list-${content.length}`));
+				bullets = [];
+			};
+			markdown.split("\n").forEach((line, index) => {
+				const trimmed = line.trim();
+				const bullet = /^[-*]\s+(.+)$/u.exec(trimmed);
+				const heading = /^#{1,6}\s+(.+)$/u.exec(trimmed);
+				if (bullet !== null) bullets.push(/* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: renderInlineMarkdown(bullet[1] ?? "", `item-${index}`) }, `item-${index}`));
+				else if (heading !== null) {
+					flushBullets();
+					content.push(/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", {
+						style: notesHeadingStyle,
+						children: renderInlineMarkdown(heading[1] ?? "", `heading-${index}`)
+					}, `heading-${index}`));
+				} else if (trimmed !== "") {
+					flushBullets();
+					content.push(/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: {
+							...bodyStyle,
+							fontSize: 12,
+							lineHeight: "19px"
+						},
+						children: renderInlineMarkdown(trimmed, `paragraph-${index}`)
+					}, `paragraph-${index}`));
+				} else flushBullets();
+			});
+			flushBullets();
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				style: notesStyle,
+				children: content
+			});
+		}
+		/** One in-range release: a collapsed title row that opens its notes. */
+		function ReleaseRow({ release, t }) {
+			const [open, setOpen] = (0, react.useState)(false);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				type: "button",
+				style: releaseRowStyle,
+				"aria-expanded": open,
+				onClick: () => {
+					setOpen(!open);
+				},
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					"aria-hidden": true,
+					children: open ? "▾" : "▸"
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					style: {
+						flex: "1 1 auto",
+						minWidth: 0
+					},
+					children: release.name ?? `v${release.version}`
+				})]
+			}), open ? release.notes === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				style: {
+					...bodyStyle,
+					fontSize: 12,
+					padding: "4px 9px 0",
+					margin: 0
+				},
+				children: t("releaseNotesUnavailable")
+			}) : renderReleaseNotes(release.notes) : null] });
+		}
+		/** Bottom-right reminder registered in the shell.overlay list seat. */
+		function WorkBuddyUpdateOverlay({ t = DEFAULT_T, updater }) {
+			if (updater === void 0) return null;
+			const snapshot = (0, react.useSyncExternalStore)(updater.subscribe, updater.getSnapshot, updater.getSnapshot);
+			const latestVersion = snapshot.latestVersion;
+			const [copied, setCopied] = (0, react.useState)(false);
+			const [copyFailed, setCopyFailed] = (0, react.useState)(false);
+			const [recheckRequested, setRecheckRequested] = (0, react.useState)(false);
+			const noticeKey = latestVersion === void 0 ? void 0 : `${snapshot.currentVersion}:${latestVersion}`;
+			if (!(recheckRequested && (snapshot.status === "checking" || snapshot.status === "unavailable")) && (snapshot.status !== "update-available" || noticeKey === void 0 || snapshot.dismissedNotice === noticeKey)) return null;
+			const available = snapshot.status === "update-available";
+			const releases = snapshot.releases ?? [];
+			const agentPrompt = t("agentUpgradePrompt", { repository: WORKBUDDY_REPOSITORY_URL });
+			const copy = async () => {
+				setCopyFailed(false);
+				const ok = await copyAgentPrompt(agentPrompt);
+				setCopied(ok);
+				setCopyFailed(!ok);
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: {
+					...panelStyle,
+					...overlayStyle
+				},
+				role: "status",
+				"aria-label": t("updateNoticeLabel"),
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: rowStyle,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", {
+							style: titleStyle,
+							children: available ? t("newVersionAvailable", { version: latestVersion }) : t("updateNoticeLabel")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							style: buttonStyle,
+							"aria-label": t("dismissUpdate"),
+							onClick: () => {
+								setRecheckRequested(false);
+								if (noticeKey !== void 0) updater.dismiss(noticeKey);
+							},
+							children: t("dismissUpdate")
+						})]
+					}),
+					available ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						style: bodyStyle,
+						children: [t("versionSummary", {
+							current: snapshot.currentVersion,
+							latest: latestVersion
+						}), snapshot.versionsBehind === void 0 ? ` · ${t("versionsBehindUnknown")}` : ` · ${t("versionsBehind", { count: snapshot.versionsBehind })}`]
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: sectionStyle,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", {
+							style: titleStyle,
+							children: t("releasesHeading")
+						}), releases.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: bodyStyle,
+							children: t("releaseListUnavailable")
+						}) : releases.map((release) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ReleaseRow, {
+							release,
+							t
+						}, release.version))]
+					})] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle,
+						children: t("updateCheckUnavailable")
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: sectionStyle,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: promptRowStyle,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+									style: promptTextStyle,
+									children: agentPrompt
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: buttonStyle,
+									onClick: () => {
+										copy();
+									},
+									children: copied ? t("agentPromptCopied") : t("copyForAgent")
+								})]
+							}),
+							copyFailed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: {
+									...bodyStyle,
+									fontSize: 12,
+									margin: 0
+								},
+								children: t("agentPromptCopyFailed")
+							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: rowStyle,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									style: primaryButtonStyle,
+									disabled: !available,
+									onClick: () => {
+										setRecheckRequested(true);
+										updater.refresh(true);
+									},
+									children: snapshot.status === "checking" ? t("checkingForUpdates") : t("recheckAfterUpgrade")
+								}), snapshot.releaseUrl === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+									href: snapshot.releaseUrl,
+									target: "_blank",
+									rel: "noopener noreferrer",
+									style: textButtonStyle,
+									children: t("openReleasePage")
+								})]
+							}),
+							recheckRequested && snapshot.status === "update-available" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: {
+									...bodyStyle,
+									fontSize: 12,
+									margin: 0
+								},
+								children: t("upgradeStillAvailable", { version: snapshot.currentVersion })
+							}) : null
+						]
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/update-store.ts
+		/**
+		* Browser-owned cache and observable state for the update reminder.
+		*
+		* One reminder for the whole bundle — the check compares this npm package's
+		* own version, so both provider cards share it. The cache is localStorage
+		* with a 7-day TTL and the current version embedded, so an upgrade
+		* invalidates it by itself. `unavailable` answers are never cached: the next
+		* mount retries, and one in-page retry is scheduled after five minutes while
+		* the page stays open.
+		*/
+		const WORKBUDDY_UPDATE_CACHE_KEY = "dsh-workbuddy-connect:update-check";
+		const WORKBUDDY_UPDATE_DISMISSED_KEY = "dsh-workbuddy-connect:update-dismissed";
+		/** Retry transient update-check failures while the page remains open. */
+		const WORKBUDDY_UPDATE_RECHECK_MS = 3e5;
+		/** The reminder's own fetch deadline, independent of the host's upstream one. */
+		const ROUTE_TIMEOUT_MS = 3e4;
+		function storage() {
+			try {
+				return typeof localStorage === "undefined" ? void 0 : localStorage;
+			} catch {
+				return;
+			}
+		}
+		function resultSnapshot(result, dismissedNotice) {
+			return {
+				status: result.status,
+				currentVersion: result.currentVersion,
+				...result.status === "up-to-date" || result.status === "update-available" ? { latestVersion: result.latestVersion } : {},
+				...result.status === "update-available" ? {
+					releaseUrl: result.releaseUrl,
+					releases: result.releases,
+					...result.versionsBehind === void 0 ? {} : { versionsBehind: result.versionsBehind }
+				} : {},
+				...dismissedNotice === void 0 ? {} : { dismissedNotice }
+			};
+		}
+		/** Observable browser state behind the bottom-right reminder. */
+		var WorkBuddyUpdateStore = class {
+			currentVersion;
+			snapshot;
+			listeners = /* @__PURE__ */ new Set();
+			request;
+			disposed = false;
+			recheckTimer;
+			constructor(currentVersion) {
+				this.currentVersion = currentVersion;
+				this.snapshot = {
+					status: "idle",
+					currentVersion
+				};
+			}
+			getSnapshot = () => this.snapshot;
+			subscribe = (listener) => {
+				this.listeners.add(listener);
+				return () => {
+					this.listeners.delete(listener);
+				};
+			};
+			setSnapshot(next) {
+				if (this.disposed) return;
+				this.snapshot = next;
+				for (const listener of this.listeners) listener();
+			}
+			dismissedNotice() {
+				try {
+					const value = storage()?.getItem(WORKBUDDY_UPDATE_DISMISSED_KEY);
+					return value === null || value === "" ? void 0 : value;
+				} catch {
+					return;
+				}
+			}
+			readCached() {
+				try {
+					const raw = storage()?.getItem(WORKBUDDY_UPDATE_CACHE_KEY);
+					if (raw === null || raw === void 0) return void 0;
+					const cached = JSON.parse(raw);
+					if (!Number.isSafeInteger(cached.checkedAt) || cached.checkedAt > Date.now() || Date.now() - cached.checkedAt > 6048e5) return void 0;
+					const result = parseWorkBuddyUpdateResult(cached.result);
+					if (result === void 0 || result.status === "unavailable") return void 0;
+					return {
+						result,
+						checkedAt: cached.checkedAt
+					};
+				} catch {
+					return;
+				}
+			}
+			writeCached(result, checkedAt) {
+				try {
+					if (result.status === "unavailable") storage()?.removeItem(WORKBUDDY_UPDATE_CACHE_KEY);
+					else storage()?.setItem(WORKBUDDY_UPDATE_CACHE_KEY, JSON.stringify({
+						checkedAt,
+						result
+					}));
+				} catch {}
+			}
+			acceptResult(result) {
+				if (this.disposed) return;
+				const checkedAt = Date.now();
+				this.writeCached(result, checkedAt);
+				const next = resultSnapshot(result, this.dismissedNotice());
+				if (result.status === "unavailable" && this.snapshot.latestVersion !== void 0) next.latestVersion = this.snapshot.latestVersion;
+				this.setSnapshot({
+					...next,
+					checkedAt
+				});
+				if (result.status === "unavailable") this.recheckTimer = setTimeout(() => {
+					this.refresh(true);
+				}, WORKBUDDY_UPDATE_RECHECK_MS);
+			}
+			/** Reuse a result for a week; force bypasses the cache. */
+			async refresh(force = false) {
+				if (this.disposed || this.request !== void 0) return;
+				clearTimeout(this.recheckTimer);
+				this.recheckTimer = void 0;
+				const controller = new AbortController();
+				this.request = controller;
+				const timer = setTimeout(() => {
+					controller.abort(/* @__PURE__ */ new Error("update route timed out"));
+				}, ROUTE_TIMEOUT_MS);
+				this.setSnapshot({
+					status: "checking",
+					currentVersion: this.currentVersion,
+					...this.snapshot.latestVersion === void 0 ? {} : { latestVersion: this.snapshot.latestVersion },
+					...this.snapshot.dismissedNotice === void 0 ? {} : { dismissedNotice: this.snapshot.dismissedNotice }
+				});
+				try {
+					if (!force) {
+						const cached = this.readCached();
+						if (cached !== void 0 && cached.result.currentVersion === this.currentVersion) {
+							this.setSnapshot({
+								...resultSnapshot(cached.result, this.dismissedNotice()),
+								checkedAt: cached.checkedAt
+							});
+							return;
+						}
+					}
+					const response = await fetch(WORKBUDDY_UPDATE_PATH, {
+						method: "GET",
+						headers: { accept: "application/json" },
+						credentials: "same-origin",
+						signal: controller.signal
+					});
+					const value = await response.json().catch(() => void 0);
+					const result = response.ok ? parseWorkBuddyUpdateResult(value) : void 0;
+					this.acceptResult(result ?? {
+						status: "unavailable",
+						currentVersion: this.currentVersion,
+						reason: "registry-unavailable"
+					});
+				} catch {
+					if (!this.disposed) this.acceptResult({
+						status: "unavailable",
+						currentVersion: this.currentVersion,
+						reason: "registry-unavailable"
+					});
+				} finally {
+					clearTimeout(timer);
+					if (this.request === controller) this.request = void 0;
+				}
+			}
+			dismiss(notice) {
+				try {
+					storage()?.setItem(WORKBUDDY_UPDATE_DISMISSED_KEY, notice);
+				} catch {}
+				this.setSnapshot({
+					...this.snapshot,
+					dismissedNotice: notice
+				});
+			}
+			dispose() {
+				this.disposed = true;
+				clearTimeout(this.recheckTimer);
+				this.request?.abort();
+				this.request = void 0;
+				this.listeners.clear();
+			}
+		};
+		//#endregion
+		//#region src/version.ts
+		const WORKBUDDY_CONNECT_VERSION = "0.6.4";
+		//#endregion
 		//#region src/client/WorkBuddyConfigPage.tsx
 		/**
 		* The cards' list; the page supplies no other chrome. A semantic `<ul>` —
@@ -1952,7 +2702,25 @@ window.__ModuleLoader__.load({
 			assistIncomplete: "the automatic search could not be completed",
 			assistPathInvalid: "the configured program path is not usable",
 			assistUnavailableCN: "no decryption program is configured for this platform",
-			assistUnavailableAI: "no decryption program is configured for WorkBuddy AI"
+			assistUnavailableAI: "no decryption program is configured for WorkBuddy AI",
+			updateNoticeLabel: "WorkBuddy Connect update",
+			newVersionAvailable: "New version available: {version}",
+			versionSummary: "Current {current} · Latest {latest}",
+			versionsBehind: "{count} release(s) behind",
+			versionsBehindUnknown: "release gap unavailable",
+			releasesHeading: "What changed",
+			releaseListUnavailable: "The per-release summary is unavailable right now; see the release page for details.",
+			releaseNotesUnavailable: "Release notes for this version are unavailable.",
+			copyForAgent: "Copy for agent",
+			agentPromptCopied: "Copied",
+			agentPromptCopyFailed: "Copy failed — select and copy the prompt manually.",
+			recheckAfterUpgrade: "Re-check after upgrading",
+			upgradeStillAvailable: "Upgrade not detected yet (still {version}). After upgrading, fully quit and restart DSH, then check again.",
+			dismissUpdate: "Don't remind me again",
+			openReleasePage: "Open release page",
+			checkingForUpdates: "Checking…",
+			updateCheckUnavailable: "Update information is unavailable right now. Check again later.",
+			agentUpgradePrompt: "Please open {repository}, check its latest version, and install or update the plugin \"dsh-workbuddy-connect\" in my current DSH profile following the project README (the install command differs by profile). After upgrading, fully quit and restart DSH."
 		};
 		const zh = {
 			title: "DSH WorkBuddy Connect",
@@ -2053,7 +2821,25 @@ window.__ModuleLoader__.load({
 			assistIncomplete: "自动定位未能完成",
 			assistPathInvalid: "指定的程序路径不可用",
 			assistUnavailableCN: "当前平台尚未配置解密程序",
-			assistUnavailableAI: "尚未配置 WorkBuddy AI 的解密程序"
+			assistUnavailableAI: "尚未配置 WorkBuddy AI 的解密程序",
+			updateNoticeLabel: "WorkBuddy Connect 更新",
+			newVersionAvailable: "发现新版本：{version}",
+			versionSummary: "当前 {current} · 最新 {latest}",
+			versionsBehind: "落后 {count} 个版本",
+			versionsBehindUnknown: "版本差距暂时不可知",
+			releasesHeading: "更新内容",
+			releaseListUnavailable: "各版本的更新说明暂时不可用，请到 Release 页面查看。",
+			releaseNotesUnavailable: "该版本的发布说明不可用。",
+			copyForAgent: "复制给 Agent",
+			agentPromptCopied: "已复制",
+			agentPromptCopyFailed: "复制失败，请手动选中复制。",
+			recheckAfterUpgrade: "升级完成后，重新检查",
+			upgradeStillAvailable: "暂未检测到升级（仍是 {version}）。升级后请完全退出并重启 DSH 再检查。",
+			dismissUpdate: "不再提醒",
+			openReleasePage: "打开 Release 页面",
+			checkingForUpdates: "检查中…",
+			updateCheckUnavailable: "暂时无法获取更新信息，请稍后再试。",
+			agentUpgradePrompt: "请打开 {repository}，查看最新版本，并按项目 README 把插件 dsh-workbuddy-connect 安装或更新到我当前使用的 DSH profile（不同 profile 的安装命令不同）。升级完成后请完全退出并重启 DSH。"
 		};
 		//#endregion
 		//#region src/client/index.tsx
@@ -2147,6 +2933,27 @@ window.__ModuleLoader__.load({
 				}), "dsh-workbuddy-connect: settings copy");
 			});
 			const t = ctx.locale.bind(namespace);
+			const updater = new WorkBuddyUpdateStore(WORKBUDDY_CONNECT_VERSION);
+			guardClientContribution("update reminder lifecycle", () => {
+				ctx.effect(() => {
+					updater.refresh();
+					return () => {
+						updater.dispose();
+					};
+				}, "dsh-workbuddy-connect: update checker");
+			});
+			guardClientContribution("update reminder overlay", () => {
+				ctx.slots.inject("shell.overlay", () => guardClientContribution("update reminder overlay", () => ctx.slots.register({
+					name: "shell.overlay",
+					id: "workbuddy-update",
+					order: 40,
+					locale: namespace,
+					inject: () => ({
+						t,
+						updater
+					})
+				}, WorkBuddyUpdateOverlay)) ?? NOOP_DISPOSER);
+			});
 			for (const [index, variant] of CARD_VARIANTS.entries()) {
 				const label = `settings.plugin.item card "${variant.id}"`;
 				guardClientContribution(label, () => {