herdr-remote 0.2.0 → 0.2.2

package/dist/tui.mjs

@@ -59,6 +59,7 @@ var require_config = __commonJS({
     }
     var PACKAGE_ROOT = findPackageRoot(__dirname);
     var ACCESS_MODES2 = ["local", "lan", "remote"];
+    var OFFICIAL_RELAY_URL2 = "wss://herdr-remote.564616.xyz";
     var LANGUAGES = ["auto", "zh", "en"];
     var KEEPALIVE_MANAGERS = ["auto", "systemd", "launchd", "supervisor", "none"];
     var DEFAULTS = {
@@ -325,6 +326,7 @@ var require_config = __commonJS({
       PACKAGE_ROOT,
       DEFAULTS,
       ACCESS_MODES: ACCESS_MODES2,
+      OFFICIAL_RELAY_URL: OFFICIAL_RELAY_URL2,
       LANGUAGES,
       KEEPALIVE_MANAGERS,
       configDir,
@@ -391,9 +393,11 @@ var require_en = __commonJS({
       "nav.about": "Language & about",
       "mode.local": "This machine only",
       "mode.lan": "Local network / Tailscale",
+      "mode.official": "Official relay (no server needed)",
       "mode.remote": "Self-hosted relay",
       "mode.local.description": "The relay listens on 127.0.0.1. Only a browser on this machine can reach it.",
       "mode.lan.description": "The relay listens on 0.0.0.0 (every interface), so phones on your LAN or tailnet can reach it.",
+      "mode.official.description": "Reach this machine from anywhere through the relay run by the Herdr Remote project. Nothing to deploy. Your terminal traffic passes through a server you do not control, and only devices you pair can open it.",
       "mode.remote.description": "No local relay. The workstation dials a relay you run, which is the only way in from outside your network.",
       "overview.title": "Status",
       "overview.mode": "Access mode",
@@ -553,7 +557,19 @@ var require_en = __commonJS({
       "hint.restartRequired": "Restart the services to apply these changes.",
       "hint.unsavedChanges": "Unsaved changes \u2014 press s to save.",
       "hint.save": "s save",
-      "hint.editing": "\u21B5 confirm \xB7 esc cancel"
+      "hint.editing": "\u21B5 confirm \xB7 esc cancel",
+      "update.title": "Updates",
+      "update.check": "Check for updates",
+      "update.checking": "Checking npm\u2026",
+      "update.upToDate": "Up to date ({version})",
+      "update.available": "Update available: {version} \u2014 press Enter to install",
+      "update.updating": "Installing {version}\u2026",
+      "update.done": "Updated to {version}",
+      "update.restartHint": "Update installed. Restart herdr-remote to use it.",
+      "update.errorNetwork": "Could not reach the npm registry",
+      "update.errorFailed": "The update failed. Try: npm install -g herdr-remote@latest",
+      "update.cannot.source": "Running from a source checkout \u2014 update with git, not npm",
+      "update.cannot.linked": "Running from a linked working copy \u2014 npm link manages this one"
     };
   }
 });
@@ -597,9 +613,11 @@ var require_zh = __commonJS({
       "nav.about": "\u8BED\u8A00\u4E0E\u5173\u4E8E",
       "mode.local": "\u4EC5\u672C\u673A",
       "mode.lan": "\u5C40\u57DF\u7F51 / Tailscale",
+      "mode.official": "\u5B98\u65B9 relay\uFF08\u65E0\u9700\u81EA\u5EFA\u670D\u52A1\u5668\uFF09",
       "mode.remote": "\u81EA\u5EFA relay",
       "mode.local.description": "relay \u76D1\u542C 127.0.0.1\uFF0C\u53EA\u6709\u672C\u673A\u6D4F\u89C8\u5668\u80FD\u8BBF\u95EE\u3002",
       "mode.lan.description": "relay \u76D1\u542C 0.0.0.0\uFF08\u6240\u6709\u7F51\u5361\uFF09\uFF0C\u5C40\u57DF\u7F51\u6216 tailnet \u91CC\u7684\u624B\u673A\u90FD\u80FD\u8BBF\u95EE\u3002",
+      "mode.official.description": "\u901A\u8FC7 Herdr Remote \u5B98\u65B9 relay \u4ECE\u4EFB\u610F\u7F51\u7EDC\u8BBF\u95EE\u672C\u673A\uFF0C\u65E0\u9700\u90E8\u7F72\u4EFB\u4F55\u670D\u52A1\u5668\u3002\u7EC8\u7AEF\u6D41\u91CF\u4F1A\u7ECF\u8FC7\u4E00\u53F0\u4F60\u65E0\u6CD5\u63A7\u5236\u7684\u670D\u52A1\u5668\uFF0C\u4F46\u53EA\u6709\u4F60\u914D\u5BF9\u8FC7\u7684\u8BBE\u5907\u624D\u80FD\u6253\u5F00\u7EC8\u7AEF\u3002",
       "mode.remote.description": "\u4E0D\u542F\u52A8\u672C\u5730 relay\u3002\u672C\u673A\u8FDE\u63A5\u4F60\u81EA\u5EFA\u7684 relay\uFF0C\u8FD9\u662F\u4ECE\u5916\u7F51\u8BBF\u95EE\u7684\u552F\u4E00\u65B9\u5F0F\u3002",
       "overview.title": "\u72B6\u6001",
       "overview.mode": "\u8BBF\u95EE\u65B9\u5F0F",
@@ -759,7 +777,19 @@ var require_zh = __commonJS({
       "hint.restartRequired": "\u9700\u8981\u91CD\u542F\u670D\u52A1\u624D\u80FD\u751F\u6548\u3002",
       "hint.unsavedChanges": "\u6709\u672A\u4FDD\u5B58\u7684\u4FEE\u6539 \u2014 \u6309 s \u4FDD\u5B58\u3002",
       "hint.save": "s \u4FDD\u5B58",
-      "hint.editing": "\u21B5 \u786E\u8BA4 \xB7 esc \u53D6\u6D88"
+      "hint.editing": "\u21B5 \u786E\u8BA4 \xB7 esc \u53D6\u6D88",
+      "update.title": "\u66F4\u65B0",
+      "update.check": "\u68C0\u67E5\u66F4\u65B0",
+      "update.checking": "\u6B63\u5728\u67E5\u8BE2 npm\u2026",
+      "update.upToDate": "\u5DF2\u662F\u6700\u65B0\uFF08{version}\uFF09",
+      "update.available": "\u6709\u65B0\u7248\u672C {version} \u2014\u2014 \u6309 Enter \u5B89\u88C5",
+      "update.updating": "\u6B63\u5728\u5B89\u88C5 {version}\u2026",
+      "update.done": "\u5DF2\u66F4\u65B0\u5230 {version}",
+      "update.restartHint": "\u66F4\u65B0\u5DF2\u5B89\u88C5\uFF0C\u91CD\u542F herdr-remote \u540E\u751F\u6548\u3002",
+      "update.errorNetwork": "\u65E0\u6CD5\u8FDE\u63A5 npm registry",
+      "update.errorFailed": "\u66F4\u65B0\u5931\u8D25\uFF0C\u53EF\u624B\u52A8\u6267\u884C\uFF1Anpm install -g herdr-remote@latest",
+      "update.cannot.source": "\u5F53\u524D\u4ECE\u6E90\u7801\u76EE\u5F55\u8FD0\u884C \u2014\u2014 \u8BF7\u7528 git \u66F4\u65B0\uFF0C\u800C\u4E0D\u662F npm",
+      "update.cannot.linked": "\u5F53\u524D\u662F npm link \u7684\u5DE5\u4F5C\u526F\u672C \u2014\u2014 \u7531 npm link \u7BA1\u7406"
     };
   }
 });
@@ -2266,6 +2296,116 @@ var require_herdr_plugin = __commonJS({
   }
 });
 
+// src/updater.js
+var require_updater = __commonJS({
+  "src/updater.js"(exports, module) {
+    "use strict";
+    var fs = __require("node:fs");
+    var path = __require("node:path");
+    var { spawn } = __require("node:child_process");
+    var { PACKAGE_ROOT } = require_config();
+    var PACKAGE_NAME = "herdr-remote";
+    var REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+    function currentVersion() {
+      try {
+        return __require(path.join(PACKAGE_ROOT, "package.json")).version;
+      } catch {
+        return "0.0.0";
+      }
+    }
+    function installKind2() {
+      const root = PACKAGE_ROOT;
+      if (!root.split(path.sep).includes("node_modules")) return "source";
+      try {
+        if (fs.lstatSync(root).isSymbolicLink()) return "linked";
+      } catch {
+      }
+      return "npm";
+    }
+    function canSelfUpdate2() {
+      return installKind2() === "npm";
+    }
+    function compareVersions(a, b) {
+      const parse = (value) => String(value).split("-")[0].split(".").map((part) => Number.parseInt(part, 10) || 0);
+      const left = parse(a);
+      const right = parse(b);
+      for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+        const diff = (left[index] || 0) - (right[index] || 0);
+        if (diff > 0) return 1;
+        if (diff < 0) return -1;
+      }
+      return 0;
+    }
+    async function checkForUpdate2({ timeoutMs = 8e3, fetchImpl = globalThis.fetch } = {}) {
+      const current = currentVersion();
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), timeoutMs);
+      try {
+        const response = await fetchImpl(REGISTRY_URL, {
+          signal: controller.signal,
+          headers: { Accept: "application/vnd.npm.install-v1+json" }
+        });
+        if (!response.ok) {
+          return { ok: false, current, errorKey: "update.errorNetwork" };
+        }
+        const body = await response.json();
+        const latest = typeof body?.version === "string" ? body.version : null;
+        if (!latest) return { ok: false, current, errorKey: "update.errorNetwork" };
+        return {
+          ok: true,
+          current,
+          latest,
+          updateAvailable: compareVersions(latest, current) > 0
+        };
+      } catch {
+        return { ok: false, current, errorKey: "update.errorNetwork" };
+      } finally {
+        clearTimeout(timer);
+      }
+    }
+    function performUpdate2({
+      spawnImpl = spawn,
+      timeoutMs = 18e4,
+      // Seam for tests: the suite runs from a checkout, where the guard below is
+      // correctly the only reachable outcome.
+      installKindImpl = installKind2
+    } = {}) {
+      return new Promise((resolve) => {
+        const kind = installKindImpl();
+        if (kind !== "npm") {
+          resolve({ ok: false, errorKey: `update.cannot.${kind}` });
+          return;
+        }
+        const child = spawnImpl("npm", ["install", "-g", `${PACKAGE_NAME}@latest`], {
+          encoding: "utf8",
+          timeout: timeoutMs
+        });
+        let output = "";
+        const collect = (chunk) => {
+          output += String(chunk);
+        };
+        child.stdout?.on("data", collect);
+        child.stderr?.on("data", collect);
+        child.on("error", (error) => {
+          resolve({ ok: false, errorKey: "update.errorFailed", output: error.message });
+        });
+        child.on("close", (code) => {
+          resolve({ ok: code === 0, output: output.trim().slice(-2e3) });
+        });
+      });
+    }
+    module.exports = {
+      PACKAGE_NAME,
+      canSelfUpdate: canSelfUpdate2,
+      checkForUpdate: checkForUpdate2,
+      compareVersions,
+      currentVersion,
+      installKind: installKind2,
+      performUpdate: performUpdate2
+    };
+  }
+});
+
 // tui/src/index.tsx
 import { render } from "ink";
 
@@ -2574,6 +2714,7 @@ var import_service = __toESM(require_service());
 var import_lifecycle = __toESM(require_lifecycle());
 var keepalive = __toESM(require_keepalive());
 var herdrPlugin = __toESM(require_herdr_plugin());
+var import_updater = __toESM(require_updater());
 function detectLocale(options = {}) {
   return (0, import_i18n.detectLocale)(options);
 }
@@ -3059,14 +3200,23 @@ function RelayScreen({ ctx }) {
     return /* @__PURE__ */ jsx7(Panel, { title: t("field.mode"), children: /* @__PURE__ */ jsx7(
       ChoiceList,
       {
-        options: ["local", "lan", "remote"].map((mode) => ({
-          id: mode,
-          label: t(`mode.${mode}`),
-          description: t(`mode.${mode}.description`)
-        })),
-        current: draft.relay.mode,
-        onPick: (mode) => {
-          applyField("mode", mode);
+        options: [
+          ...["local", "lan"].map((mode) => ({
+            id: mode,
+            label: t(`mode.${mode}`),
+            description: t(`mode.${mode}.description`)
+          })),
+          { id: "official", label: t("mode.official"), description: t("mode.official.description") },
+          { id: "remote", label: t("mode.remote"), description: t("mode.remote.description") }
+        ],
+        current: draft.relay.mode === "remote" && draft.relay.remoteUrl === import_config.OFFICIAL_RELAY_URL ? "official" : draft.relay.mode,
+        onPick: (choice) => {
+          if (choice === "official") {
+            if (applyField("mode", "remote")) applyField("remoteUrl", import_config.OFFICIAL_RELAY_URL);
+            ctx.setEditing(null);
+            return;
+          }
+          applyField("mode", choice);
           ctx.setEditing(null);
         },
         onCancel: () => ctx.setEditing(null)
@@ -3447,12 +3597,65 @@ import { jsx as jsx10, jsxs as jsxs9 } from "react/jsx-runtime";
 function About({ ctx }) {
   const { t, draft } = ctx;
   const [selected, setSelected] = useState8("auto");
+  const [update, setUpdate] = useState8({ phase: "idle" });
   const detected = detectLocale({ preference: "auto" });
-  const options = [
+  const languageOptions = [
     { id: "auto", label: t("about.languageAuto", { detected }) },
     { id: "zh", label: t("about.languageZh") },
     { id: "en", label: t("about.languageEn") }
   ];
+  const updatable = (0, import_updater.canSelfUpdate)();
+  const updateLabel = (() => {
+    switch (update.phase) {
+      case "checking":
+        return t("update.checking");
+      case "current":
+        return t("update.upToDate", { version: update.latest });
+      case "available":
+        return t("update.available", { version: update.latest });
+      case "updating":
+        return t("update.updating", { version: update.latest });
+      case "done":
+        return t("update.done", { version: update.latest });
+      case "error":
+        return t(update.messageKey);
+      default:
+        return t("update.check");
+    }
+  })();
+  const options = [...languageOptions, { id: "update", label: updateLabel }];
+  const runCheck = async () => {
+    setUpdate({ phase: "checking" });
+    const result = await (0, import_updater.checkForUpdate)();
+    if (!result.ok) {
+      setUpdate({ phase: "error", messageKey: result.errorKey ?? "update.errorNetwork" });
+      return;
+    }
+    setUpdate(result.updateAvailable ? { phase: "available", latest: result.latest } : { phase: "current", latest: result.latest });
+  };
+  const runUpdate = async (latest) => {
+    setUpdate({ phase: "updating", latest });
+    const result = await (0, import_updater.performUpdate)();
+    if (!result.ok) {
+      setUpdate({ phase: "error", messageKey: result.errorKey ?? "update.errorFailed" });
+      ctx.notify(t("update.errorFailed"), "error");
+      return;
+    }
+    setUpdate({ phase: "done", latest });
+    ctx.notify(t("update.restartHint"), "success");
+  };
+  const activateUpdate = () => {
+    if (update.phase === "checking" || update.phase === "updating") return;
+    if (update.phase === "available") {
+      if (!updatable) {
+        setUpdate({ phase: "error", messageKey: `update.cannot.${(0, import_updater.installKind)()}` });
+        return;
+      }
+      void runUpdate(update.latest);
+      return;
+    }
+    void runCheck();
+  };
   const choose = (language) => {
     const result = (0, import_settings_model.setField)(draft, "language", language);
     if (result.errorKey) {
@@ -3468,15 +3671,22 @@ function About({ ctx }) {
       ctx.notify(t("error.saveFailed", { message: error.message }), "error");
     }
   };
+  const activate = (id) => {
+    if (id === "update") {
+      activateUpdate();
+      return;
+    }
+    choose(id);
+  };
   useInput7((_input, key) => {
     const index = options.findIndex((option) => option.id === selected);
     if (key.upArrow) setSelected(options[(index - 1 + options.length) % options.length].id);
     else if (key.downArrow) setSelected(options[(index + 1) % options.length].id);
-    else if (key.return) choose(selected);
+    else if (key.return) activate(selected);
   }, { isActive: ctx.editingId === null });
   return /* @__PURE__ */ jsxs9(Panel, { title: t("about.title"), children: [
     /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: t("about.language") }),
-    /* @__PURE__ */ jsx10(Box9, { flexDirection: "column", marginTop: 1, marginBottom: 1, children: options.map((option) => /* @__PURE__ */ jsx10(
+    /* @__PURE__ */ jsx10(Box9, { flexDirection: "column", marginTop: 1, marginBottom: 1, children: languageOptions.map((option) => /* @__PURE__ */ jsx10(
       Selectable,
       {
         selected: selected === option.id,
@@ -3489,7 +3699,20 @@ function About({ ctx }) {
       },
       option.id
     )) }),
-    /* @__PURE__ */ jsx10(Row, { label: t("about.version"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: "0.2.0" }) }),
+    /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: t("update.title") }),
+    /* @__PURE__ */ jsx10(Box9, { flexDirection: "column", marginTop: 1, marginBottom: 1, children: /* @__PURE__ */ jsx10(
+      Selectable,
+      {
+        selected: selected === "update",
+        onSelect: () => {
+          setSelected("update");
+          activateUpdate();
+        },
+        onHover: () => setSelected("update"),
+        children: updateLabel
+      }
+    ) }),
+    /* @__PURE__ */ jsx10(Row, { label: t("about.version"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: "0.2.2" }) }),
     /* @__PURE__ */ jsx10(Row, { label: t("about.configPath"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: (0, import_config.configPath)() }) }),
     /* @__PURE__ */ jsx10(Row, { label: t("about.statePath"), children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: (0, import_config.stateDir)() }) }),
     /* @__PURE__ */ jsx10(Box9, { marginTop: 1, children: /* @__PURE__ */ jsx10(Text9, { color: theme.muted, children: t("about.docs") }) }),
@@ -3592,14 +3815,36 @@ function Wizard({ ctx, onDone }) {
       /* @__PURE__ */ jsx11(
         ChoiceList,
         {
-          options: ["local", "lan", "remote"].map((mode) => ({
-            id: mode,
-            label: t(`mode.${mode}`),
-            description: t(`mode.${mode}.description`)
-          })),
-          current: draft.relay.mode,
-          onPick: (mode) => {
-            if (apply("mode", mode)) advance("access", stepsFor(mode));
+          options: [
+            ...["local", "lan"].map((mode) => ({
+              id: mode,
+              label: t(`mode.${mode}`),
+              description: t(`mode.${mode}.description`)
+            })),
+            // Offered ahead of the self-hosted option because it is the one
+            // that needs no server. It is still a separate, explicit choice:
+            // it routes the terminal through a relay this user does not own.
+            {
+              id: "official",
+              label: t("mode.official"),
+              description: t("mode.official.description")
+            },
+            {
+              id: "remote",
+              label: t("mode.remote"),
+              description: t("mode.remote.description")
+            }
+          ],
+          current: draft.relay.mode === "remote" && draft.relay.remoteUrl === import_config.OFFICIAL_RELAY_URL ? "official" : draft.relay.mode,
+          onPick: (choice) => {
+            if (choice === "official") {
+              if (!apply("mode", "remote")) return;
+              if (!apply("remoteUrl", import_config.OFFICIAL_RELAY_URL)) return;
+              (0, import_service.setRelayPassword)("");
+              advance("access", ["language", "access", "finish"]);
+              return;
+            }
+            if (apply("mode", choice)) advance("access", stepsFor(choice));
           },
           onCancel: back
         }

package/herdr-plugin.toml

@@ -1,6 +1,6 @@
 id = "herdr.remote.web"
 name = "Herdr Remote Web"
-version = "0.2.0"
+version = "0.2.2"
 min_herdr_version = "0.8.2"
 description = "Mobile-first remote access to the native Herdr TUI through a local or self-hosted relay"
 platforms = ["linux", "macos"]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "herdr-remote",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Remote browser access to your Herdr terminal workspaces: Herdr plugin, host connector, and bilingual configuration TUI",
   "license": "MIT",
   "repository": {
@@ -42,7 +42,7 @@
     "start": "node bin/herdr-remote.js"
   },
   "dependencies": {
-    "herdr-remote-relay": "^0.2.0",
+    "herdr-remote-relay": "^0.2.1",
     "ink": "^7.1.1",
     "node-pty": "^1.1.0",
     "qrcode": "^1.5.4",

package/src/config.js

@@ -38,6 +38,13 @@ const PACKAGE_ROOT = findPackageRoot(__dirname);
 //   remote — no local relay; the host connector dials an operator-run relay,
 //            which is the only way in from outside the local network.
 const ACCESS_MODES = ['local', 'lan', 'remote'];
+
+// The relay this project runs for people who do not want to host one. Offered
+// as a one-keystroke choice during setup; it is never selected automatically,
+// because routing a terminal through someone else's server has to be a
+// deliberate decision. It is a plain public relay: no join password, and each
+// workstation stays reachable only through its own host token.
+const OFFICIAL_RELAY_URL = 'wss://herdr-remote.564616.xyz';
 const LANGUAGES = ['auto', 'zh', 'en'];
 const KEEPALIVE_MANAGERS = ['auto', 'systemd', 'launchd', 'supervisor', 'none'];
 
@@ -385,6 +392,7 @@ module.exports = {
   PACKAGE_ROOT,
   DEFAULTS,
   ACCESS_MODES,
+  OFFICIAL_RELAY_URL,
   LANGUAGES,
   KEEPALIVE_MANAGERS,
   configDir,

package/src/i18n/en.js

@@ -41,9 +41,11 @@ module.exports = {
 
   'mode.local': 'This machine only',
   'mode.lan': 'Local network / Tailscale',
+  'mode.official': 'Official relay (no server needed)',
   'mode.remote': 'Self-hosted relay',
   'mode.local.description': 'The relay listens on 127.0.0.1. Only a browser on this machine can reach it.',
   'mode.lan.description': 'The relay listens on 0.0.0.0 (every interface), so phones on your LAN or tailnet can reach it.',
+  'mode.official.description': 'Reach this machine from anywhere through the relay run by the Herdr Remote project. Nothing to deploy. Your terminal traffic passes through a server you do not control, and only devices you pair can open it.',
   'mode.remote.description': 'No local relay. The workstation dials a relay you run, which is the only way in from outside your network.',
 
   'overview.title': 'Status',
@@ -216,4 +218,16 @@ module.exports = {
   'hint.unsavedChanges': 'Unsaved changes — press s to save.',
   'hint.save': 's save',
   'hint.editing': '↵ confirm · esc cancel',
+  'update.title': 'Updates',
+  'update.check': 'Check for updates',
+  'update.checking': 'Checking npm…',
+  'update.upToDate': 'Up to date ({version})',
+  'update.available': 'Update available: {version} — press Enter to install',
+  'update.updating': 'Installing {version}…',
+  'update.done': 'Updated to {version}',
+  'update.restartHint': 'Update installed. Restart herdr-remote to use it.',
+  'update.errorNetwork': 'Could not reach the npm registry',
+  'update.errorFailed': 'The update failed. Try: npm install -g herdr-remote@latest',
+  'update.cannot.source': 'Running from a source checkout — update with git, not npm',
+  'update.cannot.linked': 'Running from a linked working copy — npm link manages this one',
 };

package/src/i18n/zh.js

@@ -40,9 +40,11 @@ module.exports = {
 
   'mode.local': '仅本机',
   'mode.lan': '局域网 / Tailscale',
+  'mode.official': '官方 relay（无需自建服务器）',
   'mode.remote': '自建 relay',
   'mode.local.description': 'relay 监听 127.0.0.1，只有本机浏览器能访问。',
   'mode.lan.description': 'relay 监听 0.0.0.0（所有网卡），局域网或 tailnet 里的手机都能访问。',
+  'mode.official.description': '通过 Herdr Remote 官方 relay 从任意网络访问本机，无需部署任何服务器。终端流量会经过一台你无法控制的服务器，但只有你配对过的设备才能打开终端。',
   'mode.remote.description': '不启动本地 relay。本机连接你自建的 relay，这是从外网访问的唯一方式。',
 
   'overview.title': '状态',
@@ -215,4 +217,16 @@ module.exports = {
   'hint.unsavedChanges': '有未保存的修改 — 按 s 保存。',
   'hint.save': 's 保存',
   'hint.editing': '↵ 确认 · esc 取消',
+  'update.title': '更新',
+  'update.check': '检查更新',
+  'update.checking': '正在查询 npm…',
+  'update.upToDate': '已是最新（{version}）',
+  'update.available': '有新版本 {version} —— 按 Enter 安装',
+  'update.updating': '正在安装 {version}…',
+  'update.done': '已更新到 {version}',
+  'update.restartHint': '更新已安装，重启 herdr-remote 后生效。',
+  'update.errorNetwork': '无法连接 npm registry',
+  'update.errorFailed': '更新失败，可手动执行：npm install -g herdr-remote@latest',
+  'update.cannot.source': '当前从源码目录运行 —— 请用 git 更新，而不是 npm',
+  'update.cannot.linked': '当前是 npm link 的工作副本 —— 由 npm link 管理',
 };

package/src/updater.js

@@ -0,0 +1,148 @@
+'use strict';
+
+// Self-update for the npm-installed CLI.
+//
+// The update path is only meaningful for a package installed from npm. A source
+// checkout is managed by git and a linked development copy by the developer, so
+// this refuses to touch either: silently running `npm install -g` over a
+// checkout would replace the tree someone is working in.
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawn } = require('node:child_process');
+const { PACKAGE_ROOT } = require('./config');
+
+const PACKAGE_NAME = 'herdr-remote';
+const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+
+function currentVersion() {
+  try {
+    return require(path.join(PACKAGE_ROOT, 'package.json')).version;
+  } catch {
+    return '0.0.0';
+  }
+}
+
+/**
+ * How this copy got here.
+ *
+ * - `npm`      installed from the registry; updating is `npm install -g`.
+ * - `linked`   `npm link`ed into a global tree from a working copy.
+ * - `source`   run straight out of a checkout.
+ *
+ * The distinction is drawn from the path rather than from npm, which would
+ * mean shelling out on every render.
+ */
+function installKind() {
+  const root = PACKAGE_ROOT;
+  // A real install always lives inside a node_modules tree.
+  if (!root.split(path.sep).includes('node_modules')) return 'source';
+  try {
+    // `npm link` leaves a symlink where a published install has a directory.
+    if (fs.lstatSync(root).isSymbolicLink()) return 'linked';
+  } catch {
+    // Unreadable: treat as a normal install and let npm report the problem.
+  }
+  return 'npm';
+}
+
+function canSelfUpdate() {
+  return installKind() === 'npm';
+}
+
+/** Compare two `MAJOR.MINOR.PATCH` strings. Returns 1, -1 or 0. */
+function compareVersions(a, b) {
+  const parse = (value) => String(value)
+    .split('-')[0]
+    .split('.')
+    .map((part) => Number.parseInt(part, 10) || 0);
+  const left = parse(a);
+  const right = parse(b);
+  for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+    const diff = (left[index] || 0) - (right[index] || 0);
+    if (diff > 0) return 1;
+    if (diff < 0) return -1;
+  }
+  return 0;
+}
+
+/**
+ * Ask the registry what the current release is.
+ *
+ * Never throws: an update check is a convenience, and a machine that is offline
+ * or behind a proxy should still get a working settings screen.
+ */
+async function checkForUpdate({ timeoutMs = 8000, fetchImpl = globalThis.fetch } = {}) {
+  const current = currentVersion();
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const response = await fetchImpl(REGISTRY_URL, {
+      signal: controller.signal,
+      headers: { Accept: 'application/vnd.npm.install-v1+json' },
+    });
+    if (!response.ok) {
+      return { ok: false, current, errorKey: 'update.errorNetwork' };
+    }
+    const body = await response.json();
+    const latest = typeof body?.version === 'string' ? body.version : null;
+    if (!latest) return { ok: false, current, errorKey: 'update.errorNetwork' };
+    return {
+      ok: true,
+      current,
+      latest,
+      updateAvailable: compareVersions(latest, current) > 0,
+    };
+  } catch {
+    return { ok: false, current, errorKey: 'update.errorNetwork' };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/**
+ * Install the newest release over this one.
+ *
+ * Resolves with `{ ok, output }` rather than rejecting, so the caller can show
+ * npm's own message; npm's diagnostics are more useful than anything that could
+ * be invented here.
+ */
+function performUpdate({
+  spawnImpl = spawn,
+  timeoutMs = 180_000,
+  // Seam for tests: the suite runs from a checkout, where the guard below is
+  // correctly the only reachable outcome.
+  installKindImpl = installKind,
+} = {}) {
+  return new Promise((resolve) => {
+    const kind = installKindImpl();
+    if (kind !== 'npm') {
+      resolve({ ok: false, errorKey: `update.cannot.${kind}` });
+      return;
+    }
+    const child = spawnImpl('npm', ['install', '-g', `${PACKAGE_NAME}@latest`], {
+      encoding: 'utf8',
+      timeout: timeoutMs,
+    });
+    let output = '';
+    const collect = (chunk) => { output += String(chunk); };
+    child.stdout?.on('data', collect);
+    child.stderr?.on('data', collect);
+    child.on('error', (error) => {
+      resolve({ ok: false, errorKey: 'update.errorFailed', output: error.message });
+    });
+    child.on('close', (code) => {
+      resolve({ ok: code === 0, output: output.trim().slice(-2000) });
+    });
+  });
+}
+
+module.exports = {
+  PACKAGE_NAME,
+  canSelfUpdate,
+  checkForUpdate,
+  compareVersions,
+  currentVersion,
+  installKind,
+  performUpdate,
+};