dsh_check_updates 0.1.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 replicant
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -0,0 +1,43 @@
+# dsh-update-check
+
+<!-- Hero -->
+<div align="center">
+  <b style="font-size: 1.15em;">让 DSH 拥有版本可见性</b><br /><br />
+  <code>dsh_check_updates</code> 模型工具 · Settings 更新检查页 · 周期自动复查<br /><br />
+  <b>只报告，不执行升级</b>——升级决策永远掌握在用户手里。
+</div>
+
+<div align="center">
+  🌏 <a href="./README.md"><b>中文</b></a> · <a href="./README_EN.md">English</a>
+</div>
+
+## ✨ 功能一览
+
+- **🔍 版本检查**：对照 npm registry dist-tags，检查 DeepSeek Harness 本体（`@deepseek-ai/dsh`）与 profile 已装插件（如 `@dsh-external/dsh-vision-toolkit`）的当前版本与最新版本
+- **🤖 模型工具** `dsh_check_updates`：agent 可在任意会话主动查询版本状态（支持传入额外包名）
+- **🖥️ Settings 页面**：侧栏新增「更新检查」页——版本表格（包名/当前/最新/状态）、上次检查时间、「立即检查」按钮
+- **⏰ 周期复查**：间隔可调（30 秒 / 1 分钟 / 30 分钟 / 1 小时 / 12 小时 / 24 小时 / 关闭），默认 1 小时；启动 30 秒后自动首查
+- **🛡️ 失败保护**：registry 不可达时保留上次成功快照并记录错误；单包失败隔离为 unknown 条目，不影响其余包
+- **🎨 原生风格**：UI 全部引用 DSH 主题 token（`--dsw-alias-*`），明暗主题自适应
+
+## 📦 安装
+
+```bash
+dsh plugin --profile web add <本仓库 / npm 包名>
+# 重启 dsh web 生效
+```
+
+## 🧠 设计要点
+
+- 本机版本读取：profile node_modules → npm 全局根（`npm prefix -g`）逐级探测，无硬编码路径
+- registry 查询：Node 原生 fetch（15 秒超时）
+- 浏览器端点：`/_dsh/update-check/snapshot`（GET 快照）、`/_dsh/update-check/refresh`（GET 复查）、`/_dsh/update-check/set-interval`（POST 设间隔）
+- 检查范围默认仅 DSH 本体 + profile 内已装插件；工具参数可临时扩展
+
+## 🧩 生态
+
+打上 <a href="https://github.com/topics/dsh-update-check"><code>dsh-update-check</code></a> topic 的插件可接入同一生态。欢迎通过 PR 改进本插件。
+
+## 📄 许可
+
+[MIT](./LICENSE)

package/README_EN.md

@@ -0,0 +1,42 @@
+# dsh-update-check
+
+<!-- Hero -->
+<div align="center">
+  <b style="font-size: 1.15em;">Version visibility for DeepSeek Harness</b><br /><br />
+  <code>dsh_check_updates</code> model tool · Settings page · periodic re-check<br /><br />
+  <b>Report only, never upgrade</b>——upgrade decisions stay in the user's hands.
+</div>
+
+<div align="center">
+  🌏 <a href="./README.md"><b>中文</b></a> · <a href="./README_EN.md">English</a>
+</div>
+
+## ✨ Features
+
+- **🔍 Version check**: compares installed versions against npm registry dist-tags for the DSH core (`@deepseek-ai/dsh`) and profile plugins (e.g. `@dsh-external/dsh-vision-toolkit`)
+- **🤖 Model tool** `dsh_check_updates`: agents can query version status in any session (optional extra package names)
+- **🖥️ Settings page**: a new "Update Check" section with a version table (name / current / latest / status), last-checked time, and a "Check now" button
+- **⏰ Periodic re-check**: configurable interval (30s / 1m / 30m / 1h / 12h / 24h / off), default 1 hour; first check runs 30s after startup
+- **🛡️ Failure protection**: keeps the last successful snapshot on registry outages; per-package failures are isolated as unknown entries
+- **🎨 Native look**: all colors reference DSH theme tokens (`--dsw-alias-*`), light/dark adaptive
+
+## 📦 Install
+
+```bash
+dsh plugin --profile web add <this repo / npm package>
+# restart dsh web
+```
+
+## 🧠 Design notes
+
+- Local version lookup: profile node_modules → npm global root (`npm prefix -g`), no hardcoded paths
+- Registry query: native Node fetch (15s timeout)
+- Browser endpoints: `/_dsh/update-check/snapshot` (GET), `/_dsh/update-check/refresh` (GET), `/_dsh/update-check/set-interval` (POST)
+
+## 🧩 Ecosystem
+
+Tag your own plugins with <a href="https://github.com/topics/dsh-update-check"><code>dsh-update-check</code></a> to join the ecosystem. PRs welcome.
+
+## 📄 License
+
+[MIT](./LICENSE)

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# dsh-update-check bundle patch: mounts the plugin into a profile layer stack.
+- insert:
+    - id: update-check
+      name: 'dsh_check_updates'
+

package/dsh.plugin.json

@@ -0,0 +1,16 @@
+{
+  "id": "dsh-external/dsh-update-check",
+  "version": "0.1.0",
+  "main": "./lib/index.js",
+  "description": "版本可见性：对照 npm registry 检查 DSH 与 profile 插件版本，模型工具 + Settings 页面 + 周期复查，只报告不升级",
+  "engines": {
+    "dsh": ">=0.0.1"
+  },
+  "contributes": {
+    "tools": ["dsh_check_updates"],
+    "skills": []
+  },
+  "client": {
+    "main": "./lib/client.js"
+  }
+}

package/lib/client.js

@@ -0,0 +1,258 @@
+window.__ModuleLoader__.load({ id: "dsh_check_updates", factory: (require) => {
+var module = { exports: {} }; var exports = module.exports;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apply = apply;
+
+/**
+ * dsh-update-check 浏览器半部：Settings「更新检查」页面。
+ * 数据经同源 HTTP 端点读取；样式引用 DSH 主题 token（--dsw-alias-*），明暗自适应。
+ */
+const react_1 = require("react");
+
+const NS = 'update-check';
+const CSS = '' +
+  '.upck-root{display:flex;flex-direction:column;gap:12px;color:var(--dsw-alias-label-primary);font-size:14px}' +
+  '.upck-title{font-size:16px;font-weight:600;margin:0}' +
+  '.upck-sub{color:var(--dsw-alias-label-secondary);font-size:12px}' +
+  '.upck-row{display:flex;align-items:center;gap:8px;flex-wrap:wrap}' +
+  '.upck-btn{padding:6px 14px;border:1px solid var(--dsw-alias-border-l1);border-radius:6px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);cursor:pointer;font-size:13px}' +
+  '.upck-btn:hover:not(:disabled){border-color:var(--dsw-alias-brand-primary);color:var(--dsw-alias-brand-primary)}' +
+  '.upck-btn:disabled{opacity:0.5;cursor:not-allowed}' +
+  '.upck-select{padding:5px 8px;border:1px solid var(--dsw-alias-border-l1);border-radius:6px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font-size:13px}' +
+  '.upck-card{border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-1);overflow:hidden}' +
+  '.upck-table{width:100%;border-collapse:collapse;font-size:13px}' +
+  '.upck-table th{text-align:left;padding:8px 12px;border-bottom:1px solid var(--dsw-alias-border-l1);color:var(--dsw-alias-label-secondary);font-weight:500}' +
+  '.upck-table td{padding:8px 12px;border-bottom:1px solid var(--dsw-alias-border-l1)}' +
+  '.upck-table tr:last-child td{border-bottom:none}' +
+  '.upck-ok{color:var(--dsw-alias-state-success-primary)}' +
+  '.upck-warn{color:var(--dsw-alias-state-warn-primary)}' +
+  '.upck-muted{color:var(--dsw-alias-label-secondary)}' +
+  '.upck-error{color:var(--dsw-alias-state-error-primary)}';
+
+const INTERVAL_OPTIONS = [
+  { label: '30 秒', value: 0.5 },
+  { label: '1 分钟', value: 1 },
+  { label: '30 分钟', value: 30 },
+  { label: '1 小时', value: 60 },
+  { label: '12 小时', value: 720 },
+  { label: '24 小时', value: 1440 },
+  { label: '关闭', value: 0 },
+];
+
+function formatTime(iso) {
+  if (!iso) return '从未检查';
+  try {
+    const d = new Date(iso);
+    if (Number.isNaN(d.getTime())) return String(iso);
+    return d.toLocaleString();
+  } catch (e) {
+    return String(iso);
+  }
+}
+
+function statusMeta(s) {
+  if (s === 'up-to-date') return { text: '已是最新', cls: 'upck-ok' };
+  if (s === 'outdated') return { text: '可更新', cls: 'upck-warn' };
+  if (s === 'upstream-new') return { text: '上游新版未发布', cls: 'upck-warn' };
+  if (s === 'unpublished') return { text: '未发布 npm', cls: 'upck-muted' };
+  if (s === 'unknown') return { text: '未知', cls: 'upck-muted' };
+  return { text: String(s || ''), cls: 'upck-muted' };
+}
+
+function cell(value) {
+  return String(value === null || value === undefined || value === '' ? '—' : value);
+}
+
+async function apiGet(path) {
+  const res = await fetch(path, { headers: { accept: 'application/json' } });
+  if (!res.ok) {
+    let detail = 'http ' + res.status;
+    try { const body = await res.json(); if (body && body.error) detail = body.error; } catch (e) { /* 保留 http 状态 */ }
+    throw new Error(detail);
+  }
+  return res.json();
+}
+
+function UpdateCheckSection() {
+  const [snapshot, setSnapshot] = react_1.useState(null);
+  const [loading, setLoading] = react_1.useState(true);
+  const [busy, setBusy] = react_1.useState(false);
+  const [error, setError] = react_1.useState(null);
+
+  async function loadSnapshot() {
+    setLoading(true);
+    try {
+      setSnapshot(await apiGet('/_dsh/update-check/snapshot'));
+      setError(null);
+    } catch (e) {
+      setError(String((e && e.message) || e));
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  async function handleRefresh() {
+    if (busy) return;
+    setBusy(true);
+    setError(null);
+    try {
+      setSnapshot(await apiGet('/_dsh/update-check/refresh'));
+    } catch (e) {
+      setError(String((e && e.message) || e));
+    } finally {
+      setBusy(false);
+    }
+  }
+
+  async function handleSetInterval(event) {
+    const minutes = Number((event && event.target) ? event.target.value : null);
+    setError(null);
+    try {
+      const res = await fetch('/_dsh/update-check/set-interval', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', accept: 'application/json' },
+        body: JSON.stringify({ minutes }),
+      });
+      const body = await res.json();
+      if (body && body.ok) {
+        setSnapshot(body.snapshot);
+      } else {
+        setError(String((body && body.error) || '设置间隔失败'));
+      }
+    } catch (e) {
+      setError(String((e && e.message) || e));
+    }
+  }
+
+  react_1.useEffect(function () {
+    loadSnapshot();
+  }, []);
+
+  const entries = (snapshot && Array.isArray(snapshot.entries)) ? snapshot.entries : [];
+  const lastCheckedAt = (snapshot && snapshot.lastCheckedAt) ? snapshot.lastCheckedAt : null;
+  const isEmpty = entries.length === 0;
+  const intervalMinutes = (snapshot && typeof snapshot.intervalMinutes === 'number') ? snapshot.intervalMinutes : 60;
+
+  react_1.useEffect(function () {
+    if (intervalMinutes <= 0) return;
+    const handle = window.setInterval(function () {
+      apiGet('/_dsh/update-check/snapshot').then(function (snap) {
+        setSnapshot(snap);
+      }).catch(function (e) {
+        setError(String((e && e.message) || e));
+      });
+    }, intervalMinutes * 60 * 1000 + 4000);
+    return function () {
+      window.clearInterval(handle);
+    };
+  }, [intervalMinutes]);
+
+  const title = react_1.createElement('h3', { className: 'upck-title' }, '更新检查');
+  const timeRow = react_1.createElement('div', { className: 'upck-sub' }, '上次检查：' + formatTime(lastCheckedAt));
+
+  const optionEls = INTERVAL_OPTIONS.map(function (opt) {
+    return react_1.createElement(
+      'option',
+      { key: 'interval-' + String(opt.value), value: String(opt.value) },
+      opt.label
+    );
+  });
+  const select = react_1.createElement(
+    'select',
+    { className: 'upck-select', value: String(intervalMinutes), onChange: handleSetInterval },
+    optionEls
+  );
+  const intervalRow = react_1.createElement(
+    'div',
+    { className: 'upck-row' },
+    react_1.createElement('span', null, '检查间隔：'),
+    select,
+    react_1.createElement('span', { className: 'upck-sub' }, '到期自动复查，结果静默更新')
+  );
+
+  const btn = react_1.createElement(
+    'button',
+    { className: 'upck-btn', onClick: handleRefresh, disabled: busy },
+    busy ? '检查中…' : '立即检查'
+  );
+  const errLine = error
+    ? react_1.createElement('div', { className: 'upck-error' }, '错误：' + error)
+    : null;
+  const actionRow = react_1.createElement('div', { className: 'upck-row' }, btn, errLine);
+
+  let body;
+  if (loading) {
+    body = react_1.createElement('div', { className: 'upck-sub' }, '加载中…');
+  } else if (isEmpty) {
+    body = react_1.createElement('div', { className: 'upck-sub' }, '暂无检查结果，点击“立即检查”。');
+  } else {
+    const rows = entries.map(function (entry, idx) {
+      const meta = statusMeta(entry && entry.status);
+      const latestText = (entry && entry.githubLatest)
+        ? cell(entry.latest) + ' / ' + cell(entry.githubLatest)
+        : cell(entry && entry.latest);
+      return react_1.createElement(
+        'tr',
+        { key: 'row-' + idx },
+        react_1.createElement('td', null, cell(entry && entry.name)),
+        react_1.createElement('td', { className: 'upck-muted' }, cell(entry && entry.current)),
+        react_1.createElement('td', null, latestText),
+        react_1.createElement('td', { className: meta.cls }, meta.text)
+      );
+    });
+    body = react_1.createElement(
+      'div',
+      { className: 'upck-card' },
+      react_1.createElement(
+        'table',
+        { className: 'upck-table' },
+        react_1.createElement(
+          'thead',
+          null,
+          react_1.createElement(
+            'tr',
+            null,
+            react_1.createElement('th', null, '包名'),
+            react_1.createElement('th', null, '当前'),
+            react_1.createElement('th', null, '最新'),
+            react_1.createElement('th', null, '状态')
+          )
+        ),
+        react_1.createElement('tbody', null, rows)
+      )
+    );
+  }
+
+  return react_1.createElement(
+    'div',
+    { className: 'upck-root' },
+    title,
+    timeRow,
+    intervalRow,
+    actionRow,
+    body
+  );
+}
+
+function apply(ctx) {
+  const slots = ctx.get('slots');
+  if (slots === undefined) return;
+
+  const styleEl = document.createElement('style');
+  styleEl.setAttribute('data-dsh-plugin', NS);
+  styleEl.textContent = CSS;
+  document.head.appendChild(styleEl);
+
+  slots.inject('settings.section', () => slots.register(
+    { name: 'settings.section', id: 'dsh-update-check', order: 35, label: () => '更新检查' },
+    () => react_1.createElement(UpdateCheckSection, null)
+  ));
+
+  ctx.effect(() => () => {
+    if (styleEl.parentNode) styleEl.parentNode.removeChild(styleEl);
+  }, NS + ':css');
+}
+
+return module.exports; } });
+

package/lib/index.js

@@ -0,0 +1,353 @@
+/**
+ * dsh-update-check — DeepSeek Harness 更新检查插件（Host 半部）。
+ *
+ * 能力：对照 npm registry 检查 DSH 本体与 profile 插件的版本；模型工具
+ * `dsh_check_updates` 实时查询；周期复查（间隔可配置）；`/_dsh/update-check/*`
+ * 三个 HTTP 端点供浏览器 Settings 页消费。只报告，不执行升级。
+ * @module dsh-update-check
+ */
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { execSync } from 'node:child_process';
+
+export const name = 'dsh-update-check';
+export const inject = ['timer', 'tools'];
+
+const ALLOWED_MINUTES = [0.5, 1, 30, 60, 720, 1440, 0];
+const REGISTRY = 'https://registry.npmjs.org/';
+const GITHUB_CACHE_TTL_MS = 60 * 60 * 1000;
+
+let globalRootCache = null;
+const githubCache = new Map();
+
+/** npm 全局根（`npm prefix -g`），惰性缓存。 */
+function globalRoot() {
+  if (globalRootCache !== null) return globalRootCache;
+  try {
+    const out = execSync('npm prefix -g', { encoding: 'utf8', timeout: 10000, windowsHide: true });
+    globalRootCache = out.trim();
+  } catch {
+    globalRootCache = '';
+  }
+  return globalRootCache;
+}
+
+/** DSH 家目录（DSH_HOME 或 ~/.dsh）。 */
+function dshHome() {
+  return process.env.DSH_HOME || join(homedir(), '.dsh');
+}
+
+/** 自动发现检查对象：DSH 本体 + profile 直接依赖中的插件类包 + 手动追加（跳过本插件自身）。 */
+function discoverPackages(extra) {
+  const names = ['@deepseek-ai/dsh'];
+  try {
+    const profilePath = join(dshHome(), 'profiles', 'web', 'package.json');
+    const profile = JSON.parse(readFileSync(profilePath, 'utf8'));
+    const deps = profile && profile.dependencies ? Object.keys(profile.dependencies) : [];
+    for (const key of deps) {
+      if (key === 'dsh-update-check') continue; // 不检查自身
+      if (key.startsWith('dsh-') || key.startsWith('@dsh-external/') || key.startsWith('@deepseek-ai/')) {
+        if (!names.includes(key)) names.push(key);
+      }
+    }
+  } catch {
+    // profile 不可读：仅查本体与手动追加
+  }
+  if (Array.isArray(extra)) {
+    for (const nm of extra) {
+      if (typeof nm === 'string' && nm && !names.includes(nm)) names.push(nm);
+    }
+  }
+  return names;
+}
+
+/** 从 npm repository.url 解析 GitHub owner/repo（失败返回 null）。 */
+function parseGithubRepo(repository) {
+  try {
+    const raw = typeof repository === 'string' ? repository : repository && repository.url;
+    if (typeof raw !== 'string') return null;
+    const m = raw.match(/github\.com[/:]([^/]+)\/([^/.]+?)(?:\.git)?\/?$/i);
+    if (!m) return null;
+    return m[1] + '/' + m[2];
+  } catch {
+    return null;
+  }
+}
+
+/** 读取本机已装版本：profile node_modules → npm 全局根 → APPDATA 兜底。 */
+function readLocalVersion(pkgName) {
+  const segments = pkgName.split('/');
+  const candidates = [];
+  const home = dshHome();
+  candidates.push(join(home, 'profiles', 'web', 'node_modules', ...segments, 'package.json'));
+  const gRoot = globalRoot();
+  if (gRoot) candidates.push(join(gRoot, 'node_modules', ...segments, 'package.json'));
+  if (process.env.APPDATA) candidates.push(join(process.env.APPDATA, 'npm', 'node_modules', ...segments, 'package.json'));
+  for (const p of candidates) {
+    try {
+      const data = JSON.parse(readFileSync(p, 'utf8'));
+      if (data && typeof data.version === 'string' && data.version) return data.version;
+    } catch {
+      // 路径不存在或不可读：继续下一候选
+    }
+  }
+  return null;
+}
+
+/** 读 registry latest 版本与 repository 元数据（15s 超时）。 */
+async function fetchLatestMeta(pkgName) {
+  const url = REGISTRY + pkgName.replace('/', '%2F') + '/latest';
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 15000);
+  try {
+    const res = await fetch(url, { signal: controller.signal, headers: { accept: 'application/json' } });
+    if (res.status === 404) return { version: null, githubRepo: null, unpublished: true };
+    if (!res.ok) throw new Error('http ' + res.status);
+    const data = await res.json();
+    if (!data || typeof data.version !== 'string') throw new Error('no version in registry response');
+    return { version: data.version, githubRepo: parseGithubRepo(data.repository) };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/** 读 GitHub latest release 的 tag（15s 超时 + 1h 缓存；失败返回 null 不阻断）。 */
+async function fetchGithubLatest(repo) {
+  const cached = githubCache.get(repo);
+  if (cached && Date.now() - cached.ts < GITHUB_CACHE_TTL_MS) return cached.tag;
+  const url = 'https://api.github.com/repos/' + repo + '/releases/latest';
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 15000);
+  try {
+    const res = await fetch(url, {
+      signal: controller.signal,
+      headers: { accept: 'application/vnd.github+json', 'user-agent': 'dsh-update-check' },
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    if (!data || typeof data.tag_name !== 'string') return null;
+    githubCache.set(repo, { tag: data.tag_name, ts: Date.now() });
+    return data.tag_name;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/** 语义化版本比较（容忍 v 前缀与缺段）：a>b 返回 1，相等 0，a<b 返回 -1。 */
+function semverCompare(a, b) {
+  const pa = String(a).replace(/^v/i, '').split('.').map(Number);
+  const pb = String(b).replace(/^v/i, '').split('.').map(Number);
+  const len = Math.max(pa.length, pb.length);
+  for (let i = 0; i < len; i++) {
+    const x = pa[i] || 0;
+    const y = pb[i] || 0;
+    if (x !== y) return x > y ? 1 : -1;
+  }
+  return 0;
+}
+
+/** 收集版本表：自动发现 profile 插件；单包失败隔离为 unknown；GitHub release 超前 npm 时标记 upstream-new。 */
+async function collectVersions(extra) {
+  const names = discoverPackages(extra);
+  const entries = [];
+  for (const pkgName of names) {
+    try {
+      const meta = await fetchLatestMeta(pkgName);
+      const latest = meta.version;
+      const current = readLocalVersion(pkgName);
+      const githubLatest = meta.githubRepo && !meta.unpublished ? await fetchGithubLatest(meta.githubRepo) : null;
+      let status;
+      if (meta.unpublished) {
+        // npm registry 上不存在该包（未发布）——仍展示本机版本
+        status = current === null || current === '' ? 'unknown' : 'unpublished';
+      } else if (current === null || current === '') {
+        status = 'unknown';
+      } else if (githubLatest && semverCompare(githubLatest, latest) > 0) {
+        // 上游 GitHub 已发新版但 npm 尚未发布——即使本机与 npm 一致也提示
+        status = 'upstream-new';
+      } else if (semverCompare(current, latest) < 0) {
+        status = 'outdated';
+      } else {
+        status = 'up-to-date';
+      }
+      const entry = { name: pkgName, current, latest, status };
+      if (meta.unpublished) entry.reason = '未发布到 npm registry';
+      if (githubLatest && semverCompare(githubLatest, latest) > 0) entry.githubLatest = githubLatest;
+      entries.push(entry);
+    } catch (error) {
+      entries.push({ name: pkgName, current: null, latest: null, status: 'unknown', reason: String((error && error.message) || error) });
+    }
+  }
+  return entries;
+}
+
+/** 收集 POST 请求的 JSON body。 */
+function readJsonBody(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    let size = 0;
+    req.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > 64 * 1024) {
+        reject(new Error('request body too large'));
+        req.destroy();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on('end', () => {
+      try {
+        resolve(chunks.length ? JSON.parse(Buffer.concat(chunks).toString('utf8')) : {});
+      } catch (e) {
+        reject(new Error('invalid json body'));
+      }
+    });
+    req.on('error', reject);
+  });
+}
+
+/** Plugin 入口。 */
+export async function apply(ctx, config = {}) {
+  const state = {
+    lastCheckedAt: null,
+    entries: [],
+    lastError: null,
+    intervalMinutes: typeof config.intervalMinutes === 'number' ? config.intervalMinutes : 60,
+  };
+  let intervalDisposer = null;
+
+  const snapshot = () => ({
+    lastCheckedAt: state.lastCheckedAt,
+    entries: state.entries,
+    lastError: state.lastError,
+    intervalMinutes: state.intervalMinutes,
+  });
+
+  async function refresh(extra) {
+    try {
+      const fresh = await collectVersions(extra);
+      const allUnknown = fresh.length > 0 && fresh.every((e) => e.status === 'unknown');
+      const anyCurrent = fresh.some((e) => e.current !== null && e.current !== '');
+      if (allUnknown && !anyCurrent) {
+        if (state.entries.length > 0) {
+          state.lastError = '整体检查失败：全部条目 unknown（registry 不可达或服务异常），保留上次成功快照';
+          return snapshot();
+        }
+        state.entries = fresh;
+        state.lastCheckedAt = new Date().toISOString();
+        state.lastError = '整体检查失败：全部条目 unknown；本机首次检查尚无快照';
+        return snapshot();
+      }
+      state.entries = fresh;
+      state.lastCheckedAt = new Date().toISOString();
+      state.lastError = null;
+    } catch (error) {
+      state.lastError = String((error && error.message) || error);
+    }
+    return snapshot();
+  }
+
+  function armInterval(minutes) {
+    if (intervalDisposer) {
+      intervalDisposer();
+      intervalDisposer = null;
+    }
+    if (minutes > 0) {
+      intervalDisposer = ctx.interval(() => {
+        refresh().catch(() => {});
+      }, minutes * 60 * 1000);
+    }
+  }
+
+  function setIntervalMinutes(minutes) {
+    if (typeof minutes !== 'number' || Number.isNaN(minutes)) {
+      return { ok: false, error: '间隔参数必须是数字', snapshot: snapshot() };
+    }
+    const allowed = ALLOWED_MINUTES.some((m) => Math.abs(m - minutes) < 1e-9);
+    if (!allowed) {
+      return { ok: false, error: '非法间隔值：仅支持 30 秒 / 1 分钟 / 30 分钟 / 1 小时 / 12 小时 / 24 小时 / 关闭', snapshot: snapshot() };
+    }
+    state.intervalMinutes = minutes;
+    armInterval(minutes);
+    return { ok: true, snapshot: snapshot() };
+  }
+
+  // 模型工具
+  const disposeTool = ctx.tools.register(defineTool({
+    name: 'dsh_check_updates',
+    description: '检查 DSH 本体与 web profile 插件的 npm 版本（current vs latest），只报告不执行升级。',
+    parameters: {
+      packages: { type: 'array', items: { type: 'string' }, description: '额外要检查的 npm 包名（可选）' },
+    },
+    output: {
+      schema: { type: 'string' },
+      render: (_a, v) => [{ type: 'text', text: v }],
+    },
+    execute: async (args) => {
+      const extra = args && args.packages ? args.packages : [];
+      const snap = await refresh(extra);
+      return JSON.stringify(snap, null, 2);
+    },
+  }));
+
+  // 浏览器 HTTP 端点（可选：webServer 存在时挂载）
+  ctx.inject(['webServer'], (webCtx) => {
+    const json = (res, status, data) => {
+      res.statusCode = status;
+      res.setHeader('Content-Type', 'application/json; charset=utf-8');
+      res.end(JSON.stringify(data));
+    };
+    const disposeGet = webCtx.webServer.register({
+      kind: 'exact',
+      path: '/_dsh/update-check/snapshot',
+      handler: (req, res) => {
+        if (req.method !== 'GET') { json(res, 405, { ok: false, error: 'method-not-allowed' }); return; }
+        json(res, 200, snapshot());
+      },
+    });
+    const disposeRefresh = webCtx.webServer.register({
+      kind: 'exact',
+      path: '/_dsh/update-check/refresh',
+      handler: async (req, res) => {
+        if (req.method !== 'GET') { json(res, 405, { ok: false, error: 'method-not-allowed' }); return; }
+        json(res, 200, await refresh());
+      },
+    });
+    const disposeInterval = webCtx.webServer.register({
+      kind: 'exact',
+      path: '/_dsh/update-check/set-interval',
+      handler: async (req, res) => {
+        if (req.method !== 'POST') { json(res, 405, { ok: false, error: 'method-not-allowed' }); return; }
+        try {
+          const body = await readJsonBody(req);
+          const result = setIntervalMinutes(body.minutes);
+          json(res, result.ok ? 200 : 400, result);
+        } catch (e) {
+          json(res, 400, { ok: false, error: String((e && e.message) || e), snapshot: snapshot() });
+        }
+      },
+    });
+    return () => {
+      disposeGet();
+      disposeRefresh();
+      disposeInterval();
+    };
+  });
+
+  // 启动 30s 首次检查 + 周期复查
+  const disposeTimeout = ctx.timeout(() => {
+    refresh().catch(() => {});
+  }, 30000);
+  armInterval(state.intervalMinutes);
+
+  return () => {
+    disposeTimeout();
+    if (intervalDisposer) intervalDisposer();
+    disposeTool();
+  };
+}
+

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "dsh_check_updates",
+  "version": "0.1.0",
+  "description": "DeepSeek Harness 更新检查插件：DSH 本体与 profile 插件版本可见性（模型工具 + Settings 页面 + 周期复查），只报告不执行升级。",
+  "keywords": [
+    "deepseek",
+    "deepseek-harness",
+    "update-check",
+    "version-check",
+    "npm"
+  ],
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "README_EN.md",
+    "dsh.plugin.json"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.0-rc.7 <5.0.0",
+    "@deepseek-ai/dsh-tools": ">=0.0.1-rc.1 <0.2.0",
+    "react": "^18.2.0"
+  },
+  "license": "MIT"
+}