From 94b7a25e340d3f8ca69c1cecefdad5a7406fbd83 Mon Sep 17 00:00:00 2001
From: carl chen <ccheartszzz@gmail.com>
Date: Mon, 12 Oct 2026 15:35:00 +0800
Subject: [PATCH 1/6] =?UTF-8?q?feat:=20macOS=20=E6=89=93=E5=8C=85=E4=B8=BA?=
 =?UTF-8?q?=20.app=20+=20DMG=EF=BC=8C=E8=A7=A3=E5=86=B3=20Gatekeeper=20?=
 =?UTF-8?q?=E5=92=8C=E8=A3=B8=E4=BA=8C=E8=BF=9B=E5=88=B6=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 新增 scripts/build-macos-app.sh：构建 .app bundle、ad-hoc 签名、生成 DMG
- CI macOS 分支改为上传 DMG 而非裸二进制
- 版本号升至 0.2.0

Co-Authored-By: Claude Code <noreply@anthropic.com>
---
 .github/workflows/release.yml |  23 +++++-
 package.json                  |   4 +-
 scripts/build-macos-app.sh    | 147 ++++++++++++++++++++++++++++++++++
 3 files changed, 171 insertions(+), 3 deletions(-)
 create mode 100755 scripts/build-macos-app.sh

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 632546f..7204025 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -104,7 +104,19 @@ jobs:
             echo "UPX not available, skipping compression"
           fi
 
-      - name: Upload binary
+      - name: Build macOS DMG
+        if: matrix.os == 'macos-latest'
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ github.ref_type == 'tag' && github.ref_name || inputs.tag }}
+        run: |
+          # 安装 create-dmg（比裸 hdiutil 好看得多）
+          brew install create-dmg || true
+          chmod +x scripts/build-macos-app.sh
+          scripts/build-macos-app.sh "native/${{ matrix.output }}" "resources/icon.icns" "${RELEASE_TAG#v}"
+
+      - name: Upload binary (Linux/Windows)
+        if: matrix.os != 'macos-latest'
         uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.artifact }}-release
@@ -112,6 +124,15 @@ jobs:
           if-no-files-found: error
           retention-days: 7
 
+      - name: Upload DMG (macOS)
+        if: matrix.os == 'macos-latest'
+        uses: actions/upload-artifact@v7
+        with:
+          name: macos-release
+          path: dist/Muse-*-macOS.dmg
+          if-no-files-found: error
+          retention-days: 7
+
   publish:
     name: Publish GitHub Release
     needs: build
diff --git a/package.json b/package.json
index d9796a6..f600615 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "muse",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "private": true,
   "license": "MIT",
   "description": "Muse monorepo 根 — 纯编排（前端在 app/，Go 壳在 native/）",
@@ -18,4 +18,4 @@
   "devDependencies": {
     "esbuild": "^0.28.1"
   }
-}
\ No newline at end of file
+}
diff --git a/scripts/build-macos-app.sh b/scripts/build-macos-app.sh
new file mode 100755
index 0000000..e681ae9
--- /dev/null
+++ b/scripts/build-macos-app.sh
@@ -0,0 +1,147 @@
+#!/usr/bin/env bash
+# build-macos-app.sh — 将 Go 二进制打包为 macOS .app bundle 并生成 DMG
+#
+# 用法（CI 中调用）：
+#   scripts/build-macos-app.sh <binary> <icon.icns> <version>
+#
+# 输出：
+#   dist/Muse.app          — 完整的 .app bundle
+#   dist/Muse-<version>-macOS.dmg — 安装镜像
+
+set -euo pipefail
+
+BINARY="${1:?Usage: $0 <binary> <icon.icns> <version>}"
+ICON="${2:?Usage: $0 <binary> <icon.icns> <version>}"
+VERSION="${3:?Usage: $0 <binary> <icon.icns> <version>}"
+
+APP_NAME="Muse"
+BUNDLE_ID="com.muse.app"
+DIST_DIR="$(cd "$(dirname "$0")/.." && pwd)/dist"
+STAGE="$DIST_DIR/stage"
+DMG_OUT="$DIST_DIR/Muse-${VERSION}-macOS.dmg"
+
+rm -rf "$DIST_DIR"
+mkdir -p "$STAGE"
+
+# ── 1. 构建 .app bundle 结构 ──────────────────────────────────────────────
+
+APP="$STAGE/${APP_NAME}.app"
+mkdir -p "$APP/Contents/MacOS"
+mkdir -p "$APP/Contents/Resources"
+
+# 复制二进制
+cp "$BINARY" "$APP/Contents/MacOS/${APP_NAME}"
+chmod +x "$APP/Contents/MacOS/${APP_NAME}"
+
+# 复制图标
+cp "$ICON" "$APP/Contents/Resources/icon.icns"
+
+# ── 2. Info.plist ─────────────────────────────────────────────────────────
+
+cat > "$APP/Contents/Info.plist" << PLIST
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleExecutable</key>
+	<string>${APP_NAME}</string>
+	<key>CFBundleIconFile</key>
+	<string>icon</string>
+	<key>CFBundleIdentifier</key>
+	<string>${BUNDLE_ID}</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>${APP_NAME}</string>
+	<key>CFBundleDisplayName</key>
+	<string>${APP_NAME}</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>${VERSION}</string>
+	<key>CFBundleVersion</key>
+	<string>${VERSION}</string>
+	<key>LSMinimumSystemVersion</key>
+	<string>13.0</string>
+	<key>NSHighResolutionCapable</key>
+	<true/>
+	<key>NSPrincipalClass</key>
+	<string>NSApplication</string>
+	<key>LSApplicationCategoryType</key>
+	<string>public.app-category.productivity</string>
+</dict>
+</plist>
+PLIST
+
+echo "✅ .app bundle 创建完成: $APP"
+
+# ── 3. Ad-hoc 签名（让 Gatekeeper 至少知道这是一个签名过的应用）──────────────
+
+# 没有 Apple Developer ID 时做 ad-hoc 签名
+# 有证书时可以在 CI 里用 Developer ID Application 证书替换这步
+codesign --force --deep --sign - "$APP" 2>/dev/null || true
+
+# ── 4. 生成 DMG ───────────────────────────────────────────────────────────
+
+if command -v create-dmg &>/dev/null; then
+  echo "使用 create-dmg 生成 DMG..."
+  create-dmg \
+    --volname "${APP_NAME}" \
+    --volicon "$ICON" \
+    --window-pos 200 120 \
+    --window-size 600 400 \
+    --icon-size 100 \
+    "${APP_NAME}.app" 180 185 \
+    --hide-extension "${APP_NAME}.app" \
+    --app-drop-link 420 185 \
+    --background "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==" \
+    "$DMG_OUT"
+else
+  echo "使用 hdiutil 生成 DMG..."
+  # hdiutil fallback — 创建一个简单的 DMG
+  TMP_DMG="$DIST_DIR/tmp.dmg"
+  MOUNT_POINT="/Volumes/${APP_NAME}"
+
+  # 创建临时 DMG，足够放下 .app
+  APP_SIZE=$(du -sh "$APP" | cut -f1)
+  # 计算大小（MB），最少 50MB
+  SIZE_MB=$(du -sm "$APP" | cut -f1)
+  SIZE_MB=$((SIZE_MB < 50 ? 50 : SIZE_MB + 20))
+
+  hdiutil create -size "${SIZE_MB}m" -fs HFS+ -volname "${APP_NAME}" "$TMP_DMG"
+  hdiutil attach "$TMP_DMG" -nobrowse -mountpoint "$MOUNT_POINT"
+
+  # 复制 .app 到 DMG
+  cp -R "$APP" "$MOUNT_POINT/"
+
+  # 创建 Applications 快捷方式
+  ln -s /Applications "$MOUNT_POINT/Applications"
+
+  # 设置 DMG 布局（AppleScript）
+  osascript << APPLESCRIPT
+tell application "Finder"
+  tell disk "${APP_NAME}"
+    open
+    set current view of container window to icon view
+    set toolbar visible of container window to false
+    set statusbar visible of container window to false
+    set bounds of container window to {400, 100, 1000, 500}
+    set viewOptions to icon view options of container window
+    set arrangement of viewOptions to not arranged
+    set icon size of viewOptions to 100
+    set position of item "${APP_NAME}.app" of container window to {150, 200}
+    set position of item "Applications" of container window to {450, 200}
+    close
+  end tell
+end tell
+APPLESCRIPT
+
+  hdiutil detach "$MOUNT_POINT"
+  hdiutil convert "$TMP_DMG" -format UDZO -o "$DMG_OUT"
+  rm -f "$TMP_DMG"
+fi
+
+echo "✅ DMG 创建完成: $DMG_OUT"
+echo ""
+echo "输出文件："
+ls -lh "$DMG_OUT"

From 2e51c08ef32a2226dd32ce3026cbca1feff90f07 Mon Sep 17 00:00:00 2001
From: carl chen <ccheartszzz@gmail.com>
Date: Mon, 12 Oct 2026 15:54:00 +0800
Subject: [PATCH 2/6] =?UTF-8?q?fix(ci):=20=E4=BF=AE=E5=A4=8D=20create-dmg?=
 =?UTF-8?q?=20=E8=B0=83=E7=94=A8=E5=8F=82=E6=95=B0=EF=BC=8C=E8=A1=A5?=
 =?UTF-8?q?=E4=B8=8A=20--icon=20=E5=89=8D=E7=BC=80=E5=92=8C=E6=BA=90?=
 =?UTF-8?q?=E6=96=87=E4=BB=B6=E5=A4=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Code <noreply@anthropic.com>
---
 scripts/build-macos-app.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/scripts/build-macos-app.sh b/scripts/build-macos-app.sh
index e681ae9..f8a08cc 100755
--- a/scripts/build-macos-app.sh
+++ b/scripts/build-macos-app.sh
@@ -91,11 +91,12 @@ if command -v create-dmg &>/dev/null; then
     --window-pos 200 120 \
     --window-size 600 400 \
     --icon-size 100 \
-    "${APP_NAME}.app" 180 185 \
+    --icon "${APP_NAME}.app" 180 185 \
     --hide-extension "${APP_NAME}.app" \
     --app-drop-link 420 185 \
     --background "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==" \
-    "$DMG_OUT"
+    "$DMG_OUT" \
+    "$STAGE"
 else
   echo "使用 hdiutil 生成 DMG..."
   # hdiutil fallback — 创建一个简单的 DMG

From 819389d3dab35c20ae27a44f810e80528bf1be07 Mon Sep 17 00:00:00 2001
From: carl chen <ccheartszzz@gmail.com>
Date: Mon, 12 Oct 2026 16:16:39 +0800
Subject: [PATCH 3/6] =?UTF-8?q?fix(ci):=20=E5=8E=BB=E6=8E=89=20create-dmg?=
 =?UTF-8?q?=20=E7=9A=84=20--background=20data=20URI=20=E5=8F=82=E6=95=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

create-dmg 的 --background 只接受真实文件路径，不支持 data URI。
去掉该参数，DMG 使用默认白色背景。

Co-Authored-By: Claude Code <noreply@anthropic.com>
---
 scripts/build-macos-app.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/scripts/build-macos-app.sh b/scripts/build-macos-app.sh
index f8a08cc..a8207ae 100755
--- a/scripts/build-macos-app.sh
+++ b/scripts/build-macos-app.sh
@@ -94,7 +94,6 @@ if command -v create-dmg &>/dev/null; then
     --icon "${APP_NAME}.app" 180 185 \
     --hide-extension "${APP_NAME}.app" \
     --app-drop-link 420 185 \
-    --background "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==" \
     "$DMG_OUT" \
     "$STAGE"
 else

From 823730e25da8cfe09efe200e3f3b8c1c79f7e7ae Mon Sep 17 00:00:00 2001
From: carl chen <ccheartszzz@gmail.com>
Date: Mon, 12 Oct 2026 16:53:42 +0800
Subject: [PATCH 4/6] fix(ci): build release from triggering commit

---
 .github/workflows/release.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7204025..45f5269 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
     inputs:
       tag:
-        description: 'Release tag to publish (for example, v0.1.2)'
+        description: 'Release tag to publish from the selected branch/tag (must match package.json version)'
         required: true
         type: string
 
@@ -40,7 +40,8 @@ jobs:
       - name: Check out source
         uses: actions/checkout@v7
         with:
-          ref: ${{ github.ref_type == 'tag' && github.ref_name || inputs.tag }}
+          # Build the triggering commit so manual runs include fixes from the selected ref.
+          ref: ${{ github.sha }}
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v6

From 8db7eaa2fcc53df47b16e1dc5008634df64129b8 Mon Sep 17 00:00:00 2001
From: carl chen <ccheartszzz@gmail.com>
Date: Mon, 12 Oct 2026 18:07:54 +0800
Subject: [PATCH 5/6] feat: release v0.2.1 with signed automatic updates and
 Magpie support

---
 .github/workflows/release.yml           |  38 +++++++-
 CHANGELOG.md                            |  10 ++
 README.md                               |   2 +
 README.zh-CN.md                         |   2 +
 app/package.json                        |   4 +-
 app/src/App.vue                         |  12 +--
 app/src/chat/useChat.ts                 |   2 +-
 app/src/components.d.ts                 |   3 +
 app/src/components/DocumentTitle.vue    |  78 ++++++++++++++++
 app/src/components/ProviderSettings.vue | 117 ++++++++++++++----------
 app/src/components/SettingsModal.vue    |   7 +-
 app/src/components/UpdateSettings.vue   |  81 ++++++++++++++++
 app/src/composables/providerPresets.ts  |  92 +++----------------
 app/src/platform/mygoBridge.ts          |   4 +
 app/src/styles/base.css                 |  20 ++++
 app/vite.config.ts                      |  10 +-
 native/e2e/assertions.js                |  88 ++++++++++++++++++
 native/main.go                          |  16 ++++
 native/mygo.config.ts                   |   5 +-
 native/services/ai.go                   |  90 +++++++++++++++---
 native/services/ai_test.go              |  69 ++++++++++++++
 native/services/updates.go              |  36 ++++++++
 package.json                            |   4 +-
 resources/update-public-key.txt         |   1 +
 scripts/build-native.mjs                |  21 +++++
 scripts/package-update.mjs              |  34 +++++++
 26 files changed, 683 insertions(+), 163 deletions(-)
 create mode 100644 CHANGELOG.md
 create mode 100644 app/src/components/DocumentTitle.vue
 create mode 100644 app/src/components/UpdateSettings.vue
 create mode 100644 native/services/ai_test.go
 create mode 100644 native/services/updates.go
 create mode 100644 resources/update-public-key.txt
 create mode 100644 scripts/build-native.mjs
 create mode 100644 scripts/package-update.mjs

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 45f5269..808e366 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,12 +29,15 @@ jobs:
           - os: macos-latest
             artifact: macos
             output: Muse
+            target: darwin-arm64
           - os: windows-latest
             artifact: windows
             output: Muse.exe
+            target: windows-amd64
           - os: ubuntu-latest
             artifact: linux
             output: Muse-linux
+            target: linux-amd64
 
     steps:
       - name: Check out source
@@ -74,6 +77,9 @@ jobs:
       - name: Build frontend
         run: pnpm run build:web
 
+      - name: Typecheck frontend
+        run: pnpm run typecheck
+
       - name: Lint (gofmt)
         working-directory: native
         shell: bash
@@ -83,11 +89,15 @@ jobs:
         working-directory: native
         run: go vet ./...
 
-      - name: Build binary
+      - name: Test native services
         working-directory: native
+        run: go test ./...
+
+      - name: Build binary
         env:
-          CGO_ENABLED: '0'
-        run: go build -ldflags="-s -w" -o ${{ matrix.output }} .
+          GOOS: ${{ matrix.artifact == 'macos' && 'darwin' || matrix.artifact }}
+          GOARCH: ${{ matrix.artifact == 'macos' && 'arm64' || 'amd64' }}
+        run: node scripts/build-native.mjs ${{ matrix.output }}
 
       - name: Compress with UPX (Linux/Windows)
         if: matrix.os != 'macos-latest'
@@ -116,6 +126,27 @@ jobs:
           chmod +x scripts/build-macos-app.sh
           scripts/build-macos-app.sh "native/${{ matrix.output }}" "resources/icon.icns" "${RELEASE_TAG#v}"
 
+      - name: Sign automatic update
+        shell: bash
+        env:
+          MYGO_UPDATER_PRIVATE_KEY: ${{ secrets.MYGO_UPDATER_PRIVATE_KEY }}
+        run: |
+          if [ "$RUNNER_OS" = "macOS" ]; then
+            node scripts/package-update.mjs dist/stage Muse.app "${{ matrix.target }}"
+          else
+            node scripts/package-update.mjs native "${{ matrix.output }}" "${{ matrix.target }}"
+          fi
+
+      - name: Upload signed update
+        uses: actions/upload-artifact@v7
+        with:
+          name: ${{ matrix.artifact }}-update
+          path: |
+            dist/Muse-*.tar.gz
+            dist/update-*.json
+          if-no-files-found: error
+          retention-days: 7
+
       - name: Upload binary (Linux/Windows)
         if: matrix.os != 'macos-latest'
         uses: actions/upload-artifact@v7
@@ -151,4 +182,5 @@ jobs:
           tag_name: ${{ github.ref_type == 'tag' && github.ref_name || inputs.tag }}
           name: Muse ${{ github.ref_type == 'tag' && github.ref_name || inputs.tag }}
           generate_release_notes: true
+          make_latest: true
           files: release-assets/*
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..513b74c
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,10 @@
+# Changelog
+
+## 0.2.1
+
+- Add signed automatic updates: daily background checks, release notes, download progress, install and restart, and optional automatic downloads. / 新增签名自动更新：每天后台检查，查看更新说明、下载进度、安装并重启，可选择自动下载安装。
+- Add Magpie local gateway preset and discover models through `/v1/models`, preserving custom model IDs on refresh. / 新增 Magpie 本地网关预设，自动获取模型，刷新时保留自定义 ID。
+- Wrap long document titles and tokens, widen the responsive editor, and keep tables within the page. / 修复长标题截断，优化正文宽度、长链接与表格换行。
+- Load the Muse logo explicitly in the Dock. / Dock 显式加载 Muse Logo。
+
+Install 0.2.1 manually once if upgrading from 0.2.0; future versions can update in the app. macOS builds support Apple Silicon; Windows and Linux builds support x64. / 从 0.2.0 升级需手动安装一次 0.2.1，后续可在应用内更新。macOS 支持 Apple Silicon，Windows 与 Linux 支持 x64。
diff --git a/README.md b/README.md
index a900dbc..8f6f52b 100644
--- a/README.md
+++ b/README.md
@@ -53,6 +53,8 @@
 * **AI tool calling (agent)** — describe a document problem in natural language and the AI edits the document directly through tools (read / replace selection / insert at caret / append to end / replace all); ⌘Z undoes it. Selecting text reveals a quick action bar: Polish / Expand / Summarize / Translate
 * **Find & replace** — ⌘F to open, ⌘G / ⇧⌘G for prev/next, highlighted matches
 * **Word count** — live stats in the status bar
+* **Automatic updates (0.2.1+)** — signed daily update checks, in-app download/install and restart; Settings > App Updates controls automatic checks/downloads. Install 0.2.1 manually once when upgrading from 0.2.0.
+
 * **Settings panel** — font size / line height, applied instantly and persisted
 * **File management** — open / save / save as / new via native menus and shortcuts (⌘N / ⌘O / ⌘S / ⌘⇧S)
   * Drag & drop to open files
diff --git a/README.zh-CN.md b/README.zh-CN.md
index 0a065ba..08ce22f 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -29,6 +29,8 @@
 
 一个**所见即所得（WYSIWYG）的 Markdown 桌面编辑器**：打字时 `#` 立刻变成标题、`**加粗**` 即时生效、代码块用 **Shiki** 实时语法高亮。基于 **Milkdown 7**（ProseMirror）构建，未来计划接入 **AI 流式输出**（Muse 的真正主线）。
 
+* **自动更新（0.2.1 起）** — 每天后台检查、签名验证、应用内下载安装并重启；设置 → 应用更新可控制自动检查和自动下载。从 0.2.0 升级需手动安装一次 0.2.1。
+
 ## ✨ 功能特性
 
 * **所见即所得** — Milkdown 7 内核，边打字边渲染 Markdown（标题 / 加粗 / 列表 / 引用 / 表格 / 任务列表等）
diff --git a/app/package.json b/app/package.json
index 4df6d8b..ff6df81 100644
--- a/app/package.json
+++ b/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@muse/app",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "private": true,
   "description": "Muse · Typora 式所见即所得 Markdown 编辑器（Shiki 高亮 + Milkdown 7）",
   "license": "MIT",
@@ -49,4 +49,4 @@
     "vue": "^3.5.0",
     "vue-tsc": "^3.0.0"
   }
-}
\ No newline at end of file
+}
diff --git a/app/src/App.vue b/app/src/App.vue
index 752346e..427459d 100644
--- a/app/src/App.vue
+++ b/app/src/App.vue
@@ -6,6 +6,7 @@ import { XProvider } from '@antdv-next/x'
 import type { XProviderProps } from '@antdv-next/x'
 import MilkdownEditor from './editor/MilkdownEditor.vue'
 import TitleBar from './components/TitleBar.vue'
+import DocumentTitle from './components/DocumentTitle.vue'
 import SidePanel from './components/SidePanel.vue'
 import OutlinePanel from './components/OutlinePanel.vue'
 import ChatPanel from './chat/ChatPanel.vue'
@@ -283,7 +284,7 @@ function onTreeRenamed(e: Event): void {
 
 const showSettings = ref(false)
 const recentFiles = ref<string[]>([])
-const titleInputRef = ref<HTMLInputElement | null>(null)
+const titleInputRef = ref<InstanceType<typeof DocumentTitle> | null>(null)
 function focusTitleInput(): void {
   titleInputRef.value?.focus()
   titleInputRef.value?.select()
@@ -754,15 +755,12 @@ const getDocContext = (): string => fullContent.value
                 :class="{ 'focus-mode': viewMode.focus }"
                 @scroll.passive="onEditorScroll"
               >
-                <div class="mx-auto max-w-[46rem] px-12 pt-8 pb-32">
-                  <input
+                <div class="document-page">
+                  <DocumentTitle
                     v-show="!viewMode.source"
                     ref="titleInputRef"
                     v-model="titleText"
-                    placeholder="无标题"
-                    class="title-input w-full bg-transparent outline-none border-none text-[30px] font-bold leading-tight placeholder:text-[var(--fg-soft)] placeholder:opacity-60 mb-4 text-left"
-                    spellcheck="false"
-                    @keydown.enter="onTitleEnter"
+                    @enter="onTitleEnter"
                   />
                   <div v-show="!viewMode.source">
                     <MilkdownEditor v-model="doc" />
diff --git a/app/src/chat/useChat.ts b/app/src/chat/useChat.ts
index 27a002c..00a05d9 100644
--- a/app/src/chat/useChat.ts
+++ b/app/src/chat/useChat.ts
@@ -139,7 +139,7 @@ export function useChat() {
     (p) => {
       setChatConnection(p ? { baseUrl: p.baseUrl ?? '', apiKey: p.apiKey } : null)
     },
-    { immediate: true }
+    { immediate: true, deep: true }
   )
 
   // ===== Provider（真实请求走主进程 IPC；无供应商时回退本地 mock）=====
diff --git a/app/src/components.d.ts b/app/src/components.d.ts
index 4458a06..a61726a 100644
--- a/app/src/components.d.ts
+++ b/app/src/components.d.ts
@@ -26,9 +26,11 @@ declare module 'vue' {
     ARow: typeof import('antdv-next')['Row']
     ASegmented: typeof import('antdv-next')['Segmented']
     ASlider: typeof import('antdv-next')['Slider']
+    ASwitch: typeof import('antdv-next')['Switch']
     ATag: typeof import('antdv-next')['Tag']
     ATooltip: typeof import('antdv-next')['Tooltip']
     ATypographyText: typeof import('antdv-next')['TypographyText']
+    DocumentTitle: typeof import('./components/DocumentTitle.vue')['default']
     EditorContextMenu: typeof import('./components/EditorContextMenu.vue')['default']
     EntryScreen: typeof import('./components/EntryScreen.vue')['default']
     FileTreePanel: typeof import('./components/FileTreePanel.vue')['default']
@@ -42,5 +44,6 @@ declare module 'vue' {
     SourceEditor: typeof import('./components/SourceEditor.vue')['default']
     StatusBar: typeof import('./components/StatusBar.vue')['default']
     TitleBar: typeof import('./components/TitleBar.vue')['default']
+    UpdateSettings: typeof import('./components/UpdateSettings.vue')['default']
   }
 }
diff --git a/app/src/components/DocumentTitle.vue b/app/src/components/DocumentTitle.vue
new file mode 100644
index 0000000..de2f7b0
--- /dev/null
+++ b/app/src/components/DocumentTitle.vue
@@ -0,0 +1,78 @@
+<script setup lang="ts">
+import { onMounted, onUnmounted, ref, watch } from 'vue'
+
+const title = defineModel<string>({ required: true })
+const emit = defineEmits<{ enter: [event: KeyboardEvent] }>()
+const area = ref<HTMLTextAreaElement | null>(null)
+let observer: ResizeObserver | undefined
+let lastWidth = 0
+let frame = 0
+
+function resize(): void {
+  if (!area.value) return
+  area.value.style.height = '0px'
+  area.value.style.height = `${area.value.scrollHeight}px`
+}
+
+function onInput(event: Event): void {
+  const element = event.target as HTMLTextAreaElement
+  // The title stays one Markdown heading even when pasted text contains newlines.
+  title.value = element.value.replace(/[\r\n]+/g, ' ')
+  element.value = title.value
+  resize()
+}
+
+watch(title, resize, { flush: 'post' })
+onMounted(() => {
+  resize()
+  observer = new ResizeObserver(([entry]) => {
+    if (entry && entry.contentRect.width !== lastWidth) {
+      lastWidth = entry.contentRect.width
+      cancelAnimationFrame(frame)
+      frame = requestAnimationFrame(resize)
+    }
+  })
+  if (area.value) observer.observe(area.value)
+})
+onUnmounted(() => {
+  observer?.disconnect()
+  cancelAnimationFrame(frame)
+})
+defineExpose({ focus: () => area.value?.focus(), select: () => area.value?.select() })
+</script>
+
+<template>
+  <textarea
+    ref="area"
+    :value="title"
+    class="title-input"
+    placeholder="无标题"
+    aria-label="文档标题"
+    rows="1"
+    spellcheck="false"
+    @input="onInput"
+    @keydown.enter="emit('enter', $event)"
+  />
+</template>
+
+<style scoped>
+.title-input {
+  display: block;
+  width: 100%;
+  min-height: 38px;
+  margin-bottom: 16px;
+  padding: 0;
+  resize: none;
+  overflow: hidden;
+  border: none;
+  outline: none;
+  background: transparent;
+  color: var(--fg);
+  font: 700 30px/1.3 var(--font);
+  overflow-wrap: anywhere;
+}
+.title-input::placeholder {
+  color: var(--fg-soft);
+  opacity: 0.6;
+}
+</style>
diff --git a/app/src/components/ProviderSettings.vue b/app/src/components/ProviderSettings.vue
index 8c017c5..bb9e117 100644
--- a/app/src/components/ProviderSettings.vue
+++ b/app/src/components/ProviderSettings.vue
@@ -1,9 +1,9 @@
 <script setup lang="ts">
 import { computed, ref, watch } from 'vue'
-import { Plus, Trash2, Server, Wifi } from '@lucide/vue'
+import { Plus, Trash2, Server, Wifi, RefreshCw } from '@lucide/vue'
 import message from 'antdv-next/dist/message/index'
 import { useSettings, type ProviderConfig, type ProviderModel } from '../composables/useSettings'
-import { PROVIDER_PRESETS, type ProviderPreset } from '../composables/providerPresets'
+import { PROVIDER_PRESETS } from '../composables/providerPresets'
 
 const { settings, addProvider, removeProvider } = useSettings()
 
@@ -29,7 +29,15 @@ const draftName = ref('')
 const draftBaseUrl = ref('')
 const draftApiKey = ref('')
 const testing = ref(false)
-const testResult = ref<{ ok: boolean; status?: number; message: string } | null>(null)
+interface ModelsResult {
+  ok: boolean
+  status?: number
+  message: string
+  models?: ProviderModel[]
+}
+const testResult = ref<ModelsResult | null>(null)
+
+watch([draftBaseUrl, draftApiKey], () => { testResult.value = null })
 
 watch(addOpen, (open) => {
   if (!open) return
@@ -47,15 +55,24 @@ watch(addMode, () => {
   testResult.value = null
 })
 
-/** 联通测试统一走主进程 IPC（Node fetch，无 CORS） */
+async function fetchModels(baseUrl: string, apiKey?: string): Promise<ModelsResult> {
+  try {
+    const res = await window.muse?.invoke('ai:list-models', { baseUrl, apiKey })
+    return (res as ModelsResult | undefined) ?? { ok: false, message: '请在桌面应用中获取模型' }
+  } catch (error) {
+    return { ok: false, message: error instanceof Error ? error.message : '获取模型失败' }
+  }
+}
+
+/** Requests go through Go so local gateways do not require browser CORS support. */
 async function runTest(baseUrl: string, apiKey: string): Promise<void> {
   testing.value = true
   testResult.value = null
   try {
-    const res = (await window.muse?.invoke('ai:test-connection', { baseUrl, apiKey })) as
-      | { ok: boolean; status?: number; message: string }
-      | undefined
-    testResult.value = res ?? { ok: false, message: 'IPC 不可用' }
+    const result = await fetchModels(baseUrl, apiKey)
+    if (addOpen.value && baseUrl === draftBaseUrl.value && apiKey === draftApiKey.value) {
+      testResult.value = result
+    }
   } finally {
     testing.value = false
   }
@@ -71,25 +88,25 @@ function goConfig(): void {
   step.value = 'config'
 }
 
-const canAdd = computed(() => Boolean(draftName.value.trim()) && testResult.value?.ok === true)
+const canAdd = computed(() => Boolean(draftName.value.trim() && draftBaseUrl.value.trim()) && !testing.value)
 
-function confirmAdd(): void {
+async function confirmAdd(): Promise<void> {
+  if (!canAdd.value) return
+  if (!testResult.value) await runTest(draftBaseUrl.value, draftApiKey.value)
+  if (!addOpen.value || !canAdd.value || !testResult.value) return
   const name = draftName.value.trim()
-  const fromPreset = addMode.value === 'preset' && PROVIDER_PRESETS.some((p) => p.id === draftPresetId.value)
   const created = addProvider({
     name,
     baseUrl: draftBaseUrl.value.trim() || undefined,
     apiKey: draftApiKey.value.trim() || undefined,
-    models: fromPreset
-      ? clone(PROVIDER_PRESETS.find((p) => p.id === draftPresetId.value)?.models ?? [])
-      : [],
+    models: testResult.value?.ok ? clone(testResult.value.models ?? []) : [],
   })
   if (!created) {
     message.error('名称不能为空或已存在，请更换名称')
     return
   }
   selectedName.value = name
-  message.success(fromPreset ? `已添加 ${name}（含预设模型，可在详情中调整）` : `已添加 ${name}`)
+  message.success(`已添加 ${name}（${testResult.value?.models?.length ?? 0} 个模型）`)
   addOpen.value = false
 }
 
@@ -112,22 +129,32 @@ function removeModel(model: ProviderModel): void {
 }
 
 const cardTesting = ref(false)
-const cardTest = ref<{ ok: boolean; status?: number; message: string } | null>(null)
-watch(selectedName, () => {
+const cardTest = ref<ModelsResult | null>(null)
+watch(() => [selectedName.value, provider.value?.baseUrl, provider.value?.apiKey], () => {
   cardTest.value = null
 })
 
 async function testProvider(): Promise<void> {
   const p = provider.value
-  if (!p) return
+  if (!p || cardTesting.value) return
+  const baseUrl = p.baseUrl ?? ''
+  const apiKey = p.apiKey
   cardTesting.value = true
   cardTest.value = null
   try {
-    const res = (await window.muse?.invoke('ai:test-connection', {
-      baseUrl: p.baseUrl,
-      apiKey: p.apiKey,
-    })) as { ok: boolean; status?: number; message: string } | undefined
-    cardTest.value = res ?? { ok: false, message: 'IPC 不可用' }
+    const res = await fetchModels(baseUrl, apiKey)
+    if (provider.value !== p || p.baseUrl !== baseUrl || p.apiKey !== apiKey) return
+    cardTest.value = res
+    if (res.ok) {
+      // Keep custom IDs and user-edited metadata while importing new server models.
+      const existing = new Map(p.models.map((model) => [model.id, model]))
+      for (const model of res.models ?? []) {
+        if (!existing.has(model.id)) {
+          p.models.push(model)
+          existing.set(model.id, model)
+        }
+      }
+    }
   } finally {
     cardTesting.value = false
   }
@@ -144,7 +171,7 @@ function clone<T>(value: T): T {
     <div>
       <div class="text-lg font-semibold">模型供应商</div>
       <p class="text-xs text-fg-soft mt-1">
-        配置 AI 对话可用的模型服务。添加时可测试联通性，确保配置可用。
+        配置 AI 对话可用的模型服务。添加后自动获取模型列表，也可保留自定义模型 ID。
       </p>
     </div>
 
@@ -190,11 +217,11 @@ function clone<T>(value: T): T {
                   <div class="flex gap-2">
                     <a-input-password
                       v-model:value="provider.apiKey"
-                      placeholder="sk-…"
+                      placeholder="可选；本地网关未启用认证时留空"
                       class="flex-1 min-w-0"
                     />
                     <a-button :loading="cardTesting" @click="testProvider" class="shrink-0">
-                      <Wifi :size="14" />测试联通
+                      <Wifi :size="14" />获取模型
                     </a-button>
                   </div>
                   <template #extra>
@@ -204,7 +231,7 @@ function clone<T>(value: T): T {
                       </a-tag>
                       {{ cardTest.message }}
                     </span>
-                    <span v-else>填写后点击「测试联通」，验证 Base URL 与密钥。</span>
+                    <span v-else>通过 /v1/models 获取模型；自定义 API 前缀请填写完整地址。</span>
                   </template>
                 </a-form-item>
               </a-col>
@@ -215,15 +242,20 @@ function clone<T>(value: T): T {
           <div class="mt-1">
             <div class="flex items-center justify-between mb-2">
               <span class="text-xs text-fg-soft">模型（{{ provider.models.length }}）</span>
+              <div class="flex items-center gap-1 flex-wrap">
+              <a-button type="text" size="small" :loading="cardTesting" @click="testProvider">
+                <RefreshCw :size="14" />刷新模型
+              </a-button>
               <a-button type="text" size="small" class="!text-accent" @click="addModel">
-                <Plus :size="14" />添加模型
+                <Plus :size="14" />自定义 ID
               </a-button>
+              </div>
             </div>
             <div v-if="provider.models.length" class="flex flex-col gap-1.5">
               <div
                 v-for="(model, index) in provider.models"
-                :key="model.id + index"
-                class="flex items-center gap-2 px-3 py-2 rounded-md border border-border-subtle"
+                :key="index"
+                class="flex items-center gap-2 flex-wrap px-3 py-2 rounded-md border border-border-subtle"
               >
                 <a-input v-model:value="model.id" placeholder="model-id" class="flex-1 min-w-0" />
                 <a-input
@@ -240,7 +272,7 @@ function clone<T>(value: T): T {
               </div>
             </div>
             <div v-else class="text-xs text-fg-soft py-2">
-              尚未添加模型。手动创建可在此添加支持的模型；从预设导入的模型也可继续增删。
+              暂无模型，点击「获取模型」自动导入；接口不提供列表时可添加自定义 ID。
             </div>
           </div>
         </div>
@@ -288,8 +320,7 @@ function clone<T>(value: T): T {
             <div class="preset-item-body">
               <div class="preset-item-head">
                 <span class="text-sm font-semibold">{{ preset.label }}</span>
-                <a-tag v-if="preset.models.length">{{ preset.models.length }} 个模型</a-tag>
-                <a-tag v-else color="default">仅连接信息</a-tag>
+                <a-tag color="default">自动获取模型</a-tag>
               </div>
               <span class="text-xs text-fg-soft">{{ preset.description }}</span>
               <span class="text-[11px] text-fg-soft font-mono">
@@ -313,11 +344,11 @@ function clone<T>(value: T): T {
           <a-form-item label="Base URL">
             <a-input v-model:value="draftBaseUrl" placeholder="https://api.example.com/v1" />
           </a-form-item>
-          <a-form-item label="API Key" :extra="testResult ? undefined : '填写后点击「测试联通」验证配置。'">
+          <a-form-item label="API Key" :extra="testResult ? undefined : '添加时自动获取模型；API Key 可留空。'">
             <div class="flex gap-2">
-              <a-input-password v-model:value="draftApiKey" placeholder="sk-…" class="flex-1 min-w-0" />
+              <a-input-password v-model:value="draftApiKey" placeholder="可选；本地网关未启用认证时留空" class="flex-1 min-w-0" />
               <a-button :loading="testing" @click="runTest(draftBaseUrl, draftApiKey)" class="shrink-0">
-                <Wifi :size="14" />测试联通
+                <Wifi :size="14" />获取模型
               </a-button>
             </div>
           </a-form-item>
@@ -334,23 +365,17 @@ function clone<T>(value: T): T {
 
         <a-alert type="info" show-icon>
           <template #message>
-            {{ addMode === 'preset' ? '预设只是起点' : '手动创建' }}
+            自动获取可用模型
           </template>
           <template #description>
-            {{
-              addMode === 'preset'
-                ? '模型清单已从预设导入，可在添加后的详情里继续增删；模型 ID 会随厂商调整，请对照官方文档核对。'
-                : '创建后可在详情里手动添加支持的模型。'
-            }}
+            添加时从服务的 /v1/models 获取模型，无需手动填写 ID。接口不支持时仍可保存连接，再添加自定义 ID。刷新模型会保留已有模型和自定义配置。
           </template>
         </a-alert>
 
         <div class="flex justify-end gap-2 mt-4">
           <a-button v-if="addMode === 'preset'" @click="step = 'select'">上一步</a-button>
-          <a-button type="primary" :disabled="!canAdd" @click="confirmAdd">
-            <template v-if="!canAdd && testResult && !testResult.ok">修复后重新测试</template>
-            <template v-else-if="!canAdd">先通过联通测试</template>
-            <template v-else>添加</template>
+          <a-button type="primary" :disabled="!canAdd" :loading="testing" @click="confirmAdd">
+            {{ testResult && !testResult.ok ? '保存并自定义模型' : '添加并获取模型' }}
           </a-button>
         </div>
       </template>
diff --git a/app/src/components/SettingsModal.vue b/app/src/components/SettingsModal.vue
index f7a1cf1..b6a4b7c 100644
--- a/app/src/components/SettingsModal.vue
+++ b/app/src/components/SettingsModal.vue
@@ -1,9 +1,10 @@
 <script setup lang="ts">
 import { ref } from 'vue'
-import { Palette, Server, Globe, Type, Wifi, FileText, FolderOpen } from '@lucide/vue'
+import { Palette, Server, Globe, Type, Wifi, FileText, FolderOpen, RefreshCw } from '@lucide/vue'
 import { useSettings } from '../composables/useSettings'
 import { useTheme } from '../composables/useTheme'
 import ProviderSettings from './ProviderSettings.vue'
+import UpdateSettings from './UpdateSettings.vue'
 import type { WebSearchResponse } from '../chat/ipcProvider'
 
 const { settings } = useSettings()
@@ -13,7 +14,7 @@ defineProps<{ open: boolean }>()
 const emit = defineEmits<{ close: [] }>()
 
 /** 左侧分组导航：基础设置 / Agent 能力 */
-const activeTab = ref<'basic' | 'theme' | 'startup' | 'providers' | 'search'>('basic')
+const activeTab = ref<'basic' | 'theme' | 'startup' | 'providers' | 'search' | 'updates'>('basic')
 
 const NAV_ITEMS = [
   {
@@ -22,6 +23,7 @@ const NAV_ITEMS = [
       { key: 'theme', label: '主题', icon: Palette },
       { key: 'basic', label: '排版', icon: Type },
       { key: 'startup', label: '启动文档', icon: FileText },
+      { key: 'updates', label: '应用更新', icon: RefreshCw },
     ],
   },
   {
@@ -195,6 +197,7 @@ async function pickDefaultDir(): Promise<void> {
 
               <!-- Agent 能力：模型供应商 -->
               <ProviderSettings v-else-if="activeTab === 'providers'" />
+              <UpdateSettings v-else-if="activeTab === 'updates'" />
 
               <!-- Agent 能力：联网搜索 -->
               <div v-else-if="activeTab === 'search'">
diff --git a/app/src/components/UpdateSettings.vue b/app/src/components/UpdateSettings.vue
new file mode 100644
index 0000000..47472cc
--- /dev/null
+++ b/app/src/components/UpdateSettings.vue
@@ -0,0 +1,81 @@
+<script setup lang="ts">
+import { onMounted, ref } from 'vue'
+import { RefreshCw } from '@lucide/vue'
+
+interface Preferences {
+  version: string
+  enabled: boolean
+  automaticChecks: boolean
+  automaticDownloads: boolean
+  lastCheck: string
+}
+const prefs = ref<Preferences | null>(null)
+const busy = ref(false)
+const error = ref('')
+
+async function load(): Promise<void> {
+  try {
+    prefs.value = await window.muse?.invoke('app:update-preferences') as Preferences ?? null
+    if (!prefs.value) error.value = '请在桌面应用中管理更新。'
+  } catch (err) {
+    error.value = err instanceof Error ? err.message : '读取更新设置失败'
+  }
+}
+async function save(key: 'automaticChecks' | 'automaticDownloads', value: boolean): Promise<void> {
+  if (!prefs.value) return
+  busy.value = true
+  error.value = ''
+  try {
+    prefs.value = await window.muse?.invoke('app:set-update-preferences', {
+      automaticChecks: prefs.value.automaticChecks,
+      automaticDownloads: prefs.value.automaticDownloads,
+      [key]: value,
+    }) as Preferences
+  } catch (err) {
+    error.value = err instanceof Error ? err.message : '保存更新设置失败'
+  } finally {
+    busy.value = false
+  }
+}
+async function check(): Promise<void> {
+  busy.value = true
+  error.value = ''
+  try {
+    await window.muse?.invoke('app:check-for-updates')
+  } catch (err) {
+    error.value = err instanceof Error ? err.message : '检查更新失败'
+  } finally {
+    busy.value = false
+  }
+}
+onMounted(load)
+</script>
+
+<template>
+  <div class="flex flex-col gap-5">
+    <div>
+      <div class="text-lg font-semibold">应用更新</div>
+      <p class="text-xs text-fg-soft mt-1">自动检查 Muse 新版本，查看更新说明并在应用内下载安装。</p>
+    </div>
+    <template v-if="prefs">
+      <div class="rounded-lg border border-border-subtle p-4 flex items-center justify-between gap-3 flex-wrap">
+        <div>
+          <div class="text-sm font-semibold">Muse {{ prefs.version }}</div>
+          <div class="text-xs text-fg-soft mt-1">上次检查：{{ prefs.lastCheck ? new Date(prefs.lastCheck).toLocaleString() : '尚未检查' }}</div>
+        </div>
+        <a-button :loading="busy" @click="check"><RefreshCw :size="14" />检查更新</a-button>
+      </div>
+      <div class="flex items-center justify-between gap-4">
+        <div><div class="text-sm">自动检查更新</div><p class="text-xs text-fg-soft mt-1">每天在后台检查一次，有新版时提醒。</p></div>
+        <a-switch aria-label="自动检查更新" :checked="prefs.automaticChecks" :disabled="busy" @change="(value: boolean) => save('automaticChecks', value)" />
+      </div>
+      <div class="flex items-center justify-between gap-4">
+        <div><div class="text-sm">自动下载并安装</div><p class="text-xs text-fg-soft mt-1">发现新版后自动安装，下次启动生效，不中断当前写作。</p></div>
+        <a-switch aria-label="自动下载并安装" :checked="prefs.automaticDownloads" :disabled="busy" @change="(value: boolean) => save('automaticDownloads', value)" />
+      </div>
+      <a-alert v-if="!prefs.enabled" type="info" show-icon message="当前运行位置无法自动安装更新" description="开发模式或只读位置无法自更新。macOS 请先把 Muse 拖入 Applications 后运行；其他平台请放在有写入权限的目录。" />
+      <p class="text-xs text-fg-soft">更新来自 CarlOpenLab/muse 的 GitHub Releases，安装前验证发布签名。重启前仍会检查未保存的文档。</p>
+    </template>
+    <a-alert v-if="error" type="error" show-icon :message="error" />
+  </div>
+</template>
diff --git a/app/src/composables/providerPresets.ts b/app/src/composables/providerPresets.ts
index 46415bc..8839078 100644
--- a/app/src/composables/providerPresets.ts
+++ b/app/src/composables/providerPresets.ts
@@ -1,101 +1,31 @@
-/**
- * 模型供应商预设：参考 pim（Pi Coding Agent）的预设数据与交互。
- *
- * 预设只是起点：连接信息（Base URL / 模型清单）是稳定部分，
- * 模型 ID 会随厂商调整，导入后请对照官方文档核对。
- * API Key 由用户在向导里输入并做联通测试，预设不携带密钥。
- */
-import type { ProviderModel } from './useSettings'
-
+/** Connection presets only; available models come from the provider's models endpoint. */
 export interface ProviderPreset {
-  /** 预设 id（仅用于选择，不写入配置） */
   id: string
   label: string
   description: string
   docsUrl?: string
-  provider: {
-    baseUrl?: string
-  }
-  models: ProviderModel[]
+  provider: { baseUrl: string }
 }
 
 export const PROVIDER_PRESETS: ProviderPreset[] = [
+  {
+    id: 'magpie',
+    label: 'Magpie 本地网关',
+    description: '连接本机 Magpie，自动获取可用模型。默认无需 API Key；启用认证时填写网关密钥。',
+    provider: { baseUrl: 'http://127.0.0.1:3425/v1' },
+  },
   {
     id: 'deepseek',
     label: 'DeepSeek',
     description: 'DeepSeek 官方 API，OpenAI Chat Completions 兼容。',
     docsUrl: 'https://api-docs.deepseek.com',
-    provider: {
-      baseUrl: 'https://api.deepseek.com',
-    },
-    models: [
-      {
-        id: 'deepseek-v4-pro',
-        name: 'DeepSeek V4 Pro',
-        contextWindow: 1000000,
-        maxTokens: 384000,
-        input: ['text'],
-        reasoning: true,
-      },
-      {
-        id: 'deepseek-v4-flash',
-        name: 'DeepSeek V4 Flash',
-        contextWindow: 1000000,
-        maxTokens: 384000,
-        input: ['text'],
-        reasoning: true,
-      },
-    ],
+    provider: { baseUrl: 'https://api.deepseek.com/v1' },
   },
   {
     id: 'opencode-go',
     label: 'OpenCode Go',
-    description:
-      'OpenCode 的低成本开源编程模型订阅服务（首月 $5，之后 $10/月）。统一网关聚合多家开源模型；密钥在 OpenCode Zen 控制台获取。',
+    description: 'OpenCode Go 网关，密钥在 OpenCode Zen 控制台获取。',
     docsUrl: 'https://opencode.ai/docs/zh-cn/go/',
-    provider: {
-      baseUrl: 'https://opencode.ai/zen/go/v1',
-    },
-    models: [
-      { id: 'grok-4.5', name: 'Grok 4.5', reasoning: true, input: ['text'] },
-      { id: 'glm-5.2', name: 'GLM-5.2', reasoning: true, input: ['text'] },
-      { id: 'glm-5.1', name: 'GLM-5.1', reasoning: true, input: ['text'] },
-      { id: 'kimi-k3', name: 'Kimi K3', reasoning: true, input: ['text'] },
-      { id: 'kimi-k2.7-code', name: 'Kimi K2.7 Code', reasoning: true, input: ['text'] },
-      { id: 'kimi-k2.6', name: 'Kimi K2.6', reasoning: true, input: ['text'] },
-      {
-        id: 'deepseek-v4-pro',
-        name: 'DeepSeek V4 Pro',
-        contextWindow: 1000000,
-        maxTokens: 384000,
-        reasoning: true,
-        input: ['text'],
-      },
-      {
-        id: 'deepseek-v4-flash',
-        name: 'DeepSeek V4 Flash',
-        contextWindow: 1000000,
-        maxTokens: 384000,
-        reasoning: true,
-        input: ['text'],
-      },
-      { id: 'mimo-v2.5', name: 'MiMo V2.5', reasoning: true, input: ['text'] },
-      { id: 'mimo-v2.5-pro', name: 'MiMo V2.5 Pro', reasoning: true, input: ['text'] },
-      { id: 'hy3', name: 'Hy3', reasoning: true, input: ['text'] },
-      {
-        id: 'gpt-5.6-luna',
-        name: 'GPT 5.6 Luna',
-        contextWindow: 272000,
-        reasoning: true,
-        input: ['text'],
-      },
-      { id: 'minimax-m3', name: 'MiniMax M3', reasoning: true, input: ['text'] },
-      { id: 'minimax-m2.7', name: 'MiniMax M2.7', reasoning: true, input: ['text'] },
-      { id: 'minimax-m2.5', name: 'MiniMax M2.5', reasoning: true, input: ['text'] },
-      { id: 'qwen3.8-max', name: 'Qwen3.8 Max', reasoning: true, input: ['text'] },
-      { id: 'qwen3.7-max', name: 'Qwen3.7 Max', reasoning: true, input: ['text'] },
-      { id: 'qwen3.7-plus', name: 'Qwen3.7 Plus', reasoning: true, input: ['text'] },
-      { id: 'qwen3.6-plus', name: 'Qwen3.6 Plus', reasoning: true, input: ['text'] },
-    ],
+    provider: { baseUrl: 'https://opencode.ai/zen/go/v1' },
   },
 ]
diff --git a/app/src/platform/mygoBridge.ts b/app/src/platform/mygoBridge.ts
index 7400266..8fccf50 100644
--- a/app/src/platform/mygoBridge.ts
+++ b/app/src/platform/mygoBridge.ts
@@ -34,8 +34,12 @@ const INVOKE_MAP: Record<string, string> = {
   'app:get-open-paths': 'App.GetOpenPaths',
   'app:set-dirty': 'App.SetDirty',
   'app:close': 'App.Close',
+  'app:update-preferences': 'App.UpdatePreferences',
+  'app:set-update-preferences': 'App.SetUpdatePreferences',
+  'app:check-for-updates': 'App.CheckForUpdates',
   'dialog:confirm-unsaved': 'App.ConfirmUnsaved',
   'ai:test-connection': 'AI.TestConnection',
+  'ai:list-models': 'AI.ListModels',
   'ai:chat-stream': 'AI.ChatStream',
   'ai:chat-abort': 'AI.ChatAbort',
   'ai:web-search': 'AI.WebSearch',
diff --git a/app/src/styles/base.css b/app/src/styles/base.css
index 037ff55..c4325ae 100644
--- a/app/src/styles/base.css
+++ b/app/src/styles/base.css
@@ -558,11 +558,31 @@ body {
 }
 
 /* ===== 编辑器排版（设置面板控制） ===== */
+.document-page {
+  width: 100%;
+  max-width: 64rem;
+  margin-inline: auto;
+  padding: 32px clamp(24px, 4vw, 64px) 128px;
+}
+
 .milkdown-theme-nord.prose {
+  min-width: 0;
+  max-width: none;
+  overflow-wrap: anywhere;
   font-size: var(--editor-font-size, 16px);
   line-height: var(--editor-line-height, 1.7);
 }
 
+.milkdown-theme-nord.prose table {
+  width: 100%;
+  table-layout: fixed;
+}
+
+.milkdown-theme-nord.prose img {
+  max-width: 100%;
+  height: auto;
+}
+
 /* Nord 主题在 p/pre/code/标题等元素上直接声明了 font-size / line-height，
  * 会覆盖 .prose 的继承值，导致设置面板的「字号 / 行高」形同虚设。
  * 这里用更高特异性的选择器接管：
diff --git a/app/vite.config.ts b/app/vite.config.ts
index 819c737..0a3c037 100644
--- a/app/vite.config.ts
+++ b/app/vite.config.ts
@@ -1,4 +1,5 @@
 import { resolve } from 'node:path'
+import { copyFileSync } from 'node:fs'
 import { defineConfig } from 'vite'
 import vue from '@vitejs/plugin-vue'
 import UnoCSS from 'unocss/vite'
@@ -11,7 +12,12 @@ import { AntdvNextResolver } from '@antdv-next/auto-import-resolver'
 // Go 应用经 MYGO_DEV_URL 加载。
 export default defineConfig({
   base: './',
-  plugins: [UnoCSS(), vue(), Components({ resolvers: [AntdvNextResolver()], dts: 'src/components.d.ts' })],
+  plugins: [UnoCSS(), vue(), Components({ resolvers: [AntdvNextResolver()], dts: 'src/components.d.ts' }), {
+    name: 'muse-app-icon',
+    writeBundle() {
+      copyFileSync(resolve(__dirname, '../resources/icon.png'), resolve(__dirname, '../native/embed/dist/icon.png'))
+    },
+  }],
   build: {
     outDir: '../native/embed/dist',
     emptyOutDir: true,
@@ -23,4 +29,4 @@ export default defineConfig({
     port: 5173,
     strictPort: true
   }
-})
\ No newline at end of file
+})
diff --git a/native/e2e/assertions.js b/native/e2e/assertions.js
index 8522e42..a890539 100644
--- a/native/e2e/assertions.js
+++ b/native/e2e/assertions.js
@@ -60,6 +60,36 @@
     }
 
     // 1) 输入文本 → 标题命令（heading-1）
+    const title = document.querySelector('textarea.title-input')
+    const setTitle = Object.getOwnPropertyDescriptor(HTMLTextAreaElement.prototype, 'value').set
+    if (title) {
+      setTitle.call(title, 'yl-common 公共组件与方法提取清单（web / client）：长标题应当完整显示并自动换行 '.repeat(4))
+      title.dispatchEvent(new Event('input', { bubbles: true }))
+      await sleep(150)
+      results.longTitleWraps = title.clientHeight > 60 && title.scrollHeight <= title.clientHeight + 2
+      title.dispatchEvent(new KeyboardEvent('keydown', { key: 'Enter', bubbles: true, cancelable: true }))
+      await sleep(100)
+      results.titleEnterFocusesBody = document.activeElement === pm()
+      setTitle.call(title, '')
+      title.dispatchEvent(new Event('input', { bubbles: true }))
+      await sleep(100)
+      results.titleShrinks = title.clientHeight < 50
+    } else {
+      results.longTitleWraps = false
+    }
+
+    pm().focus()
+    document.execCommand('insertText', false, 'https://example.com/' + 'long-identifier'.repeat(70))
+    await sleep(150)
+    results.longTokensWrap = pm().scrollWidth <= pm().clientWidth + 2
+    const tokenRange = document.createRange()
+    tokenRange.selectNodeContents(pm())
+    const tokenSelection = window.getSelection()
+    tokenSelection.removeAllRanges()
+    tokenSelection.addRange(tokenRange)
+    document.execCommand('delete')
+    await sleep(150)
+
     pm().focus()
     document.execCommand('insertText', false, 'hello typora')
     await sleep(300)
@@ -567,9 +597,67 @@
       getComputedStyle(tExp).display === 'none'
     document.body.classList.remove('exporting')
 
+    // Settings discovery UI uses a deterministic gateway response; HTTP parsing is
+    // covered by services/ai_test.go so this suite works without a running gateway.
+    const originalInvoke = window.muse.invoke
+    window.muse.invoke = (channel, ...args) => channel === 'ai:list-models'
+      ? Promise.resolve({ ok: true, message: '获取 1 个模型', models: [{ id: 'gateway/model', name: 'Gateway model', reasoning: true }] })
+      : originalInvoke(channel, ...args)
+    try {
+      document.querySelector('button[aria-label="设置"]').click()
+      await sleep(200)
+      const clickText = (text) => [...document.querySelectorAll('button')].find((b) => b.textContent.trim() === text)?.click()
+      clickText('模型供应商')
+      await sleep(100)
+      clickText('添加 Provider')
+      await sleep(200)
+      const magpie = [...document.querySelectorAll('.preset-item')].find((el) => el.textContent.includes('Magpie 本地网关'))
+      results.magpiePreset = !!magpie
+      magpie?.click()
+      await sleep(100)
+      clickText('下一步')
+      await sleep(100)
+      clickText('添加并获取模型')
+      await sleep(300)
+      const modelInput = () => document.querySelector('input[placeholder="model-id"]')
+      results.modelsAutoImported = modelInput()?.value === 'gateway/model'
+      clickText('自定义 ID')
+      await sleep(100)
+      const custom = [...document.querySelectorAll('input[placeholder="model-id"]')].at(-1)
+      if (custom) {
+        Object.getOwnPropertyDescriptor(HTMLInputElement.prototype, 'value').set.call(custom, 'custom-id')
+        custom.dispatchEvent(new Event('input', { bubbles: true }))
+      }
+      await sleep(100)
+      clickText('刷新模型')
+      await sleep(200)
+      results.modelRefreshPreservesCustom = [...document.querySelectorAll('input[placeholder="model-id"]')].some((el) => el.value === 'custom-id')
+      results.modelRefreshDeduplicates = [...document.querySelectorAll('input[placeholder="model-id"]')].filter((el) => el.value === 'gateway/model').length === 1
+      clickText('应用更新')
+      await sleep(200)
+      const preferences = await originalInvoke('app:update-preferences')
+      results.updateSettingsVersion = preferences.version === '0.2.1'
+      results.updateSettingsVisible = document.body.textContent.includes('自动检查更新') && document.body.textContent.includes('自动下载并安装')
+      const changed = await originalInvoke('app:set-update-preferences', { automaticChecks: false, automaticDownloads: true })
+      results.updatePreferencesPersist = !changed.automaticChecks && changed.automaticDownloads
+    } finally {
+      window.muse.invoke = originalInvoke
+    }
+
     results.runtimeErrors = window.__errs
     results.ok =
       results.editorMounted &&
+      results.longTitleWraps &&
+      results.titleEnterFocusesBody &&
+      results.titleShrinks &&
+      results.longTokensWrap &&
+      results.magpiePreset &&
+      results.modelsAutoImported &&
+      results.modelRefreshPreservesCustom &&
+      results.modelRefreshDeduplicates &&
+      results.updateSettingsVersion &&
+      results.updateSettingsVisible &&
+      results.updatePreferencesPersist &&
       results.bridge.platform &&
       results.bridge.recentIsArray &&
       results.bridge.openPathsIsArray &&
diff --git a/native/main.go b/native/main.go
index 7d06e4c..43140df 100644
--- a/native/main.go
+++ b/native/main.go
@@ -22,6 +22,7 @@ import (
 	"time"
 
 	"github.com/egoist/mygo"
+	"github.com/egoist/mygo/plugins/updater"
 
 	"muse/services"
 )
@@ -37,6 +38,11 @@ func main() {
 	app.SetName("Muse")
 	// e2e 模式（MUSE_E2E=1）：用户数据改指临时目录，须在读取用户数据之前
 	e2ePrepareUserData()
+	icon, err := frontendDist.ReadFile("embed/dist/icon.png")
+	if err != nil {
+		log.Fatal(err)
+	}
+	mygo.Use(updater.New(updater.Options{Icon: icon, Language: "zh-Hans", DisableAutomaticChecks: e2eEnabled()}))
 
 	dist, err := fs.Sub(frontendDist, "embed/dist")
 	if err != nil {
@@ -57,6 +63,15 @@ func main() {
 	})
 
 	app.WhenReady(func() {
+		if runtime.GOOS == "darwin" {
+			icon, err := frontendDist.ReadFile("embed/dist/icon.png")
+			if err == nil {
+				err = app.Dock.SetIcon(icon)
+			}
+			if err != nil {
+				log.Printf("[muse] load Dock icon: %v", err)
+			}
+		}
 		openWindow()
 		if os.Getenv("MUSE_DEBUG_MENU") != "" {
 			scheduleDebugMenuTrigger()
@@ -237,6 +252,7 @@ func buildMenu(win *mygo.Window) {
 
 	mygo.App.SetMenu(mygo.NewMenu([]*mygo.MenuItem{
 		{Role: mygo.RoleAppMenu},
+		{Label: "更新", Submenu: []*mygo.MenuItem{updater.MenuItem()}},
 		{
 			Label: "文件",
 			Submenu: []*mygo.MenuItem{
diff --git a/native/mygo.config.ts b/native/mygo.config.ts
index 0479422..329da43 100644
--- a/native/mygo.config.ts
+++ b/native/mygo.config.ts
@@ -5,11 +5,12 @@ import { defineConfig } from "mygo-cli";
 // devCommand / buildCommand 委托根目录分包脚本（根 → app/）。
 export default defineConfig({
   name: "Muse",
-  identifier: "dev.muse.editor",
-  version: "0.1.2",
+  identifier: "com.muse.app",
+  version: "0.2.1",
   devUrl: "http://localhost:5173",
   devCommand: "pnpm --dir .. run dev:web",
   buildCommand: "pnpm --dir .. run build:web",
   frontendDist: "embed/dist",
   out: "build",
+  updates: { publicKey: "FG0Hg7hGBVq3w+Cin+CDYOH/tqOiXF+jOd+V3e0kAa0=", github: "CarlOpenLab/muse", changelog: "../CHANGELOG.md" },
 });
diff --git a/native/services/ai.go b/native/services/ai.go
index 7e86ca7..a7532dd 100644
--- a/native/services/ai.go
+++ b/native/services/ai.go
@@ -39,6 +39,20 @@ type TestConnRequest struct {
 	APIKey  string `json:"apiKey"`
 }
 
+type ProviderModel struct {
+	ID            string   `json:"id"`
+	Name          string   `json:"name,omitempty"`
+	Reasoning     bool     `json:"reasoning,omitempty"`
+	Input         []string `json:"input,omitempty"`
+	ContextWindow int      `json:"contextWindow,omitempty"`
+	MaxTokens     int      `json:"maxTokens,omitempty"`
+}
+
+type ModelsResult struct {
+	TestConnResult
+	Models []ProviderModel `json:"models,omitempty"`
+}
+
 // ChatStreamRequest 是流式对话的请求。
 type ChatStreamRequest struct {
 	RequestID string         `json:"requestId"`
@@ -82,7 +96,13 @@ func NewAI() *AI {
 }
 
 func normalizeBaseURL(raw string) string {
-	return strings.TrimRight(strings.TrimSpace(raw), "/")
+	base := strings.TrimRight(strings.TrimSpace(raw), "/")
+	u, err := url.Parse(base)
+	if err == nil && u.Host != "" && u.Path == "" {
+		u.Path = "/v1"
+		return u.String()
+	}
+	return base
 }
 
 func describeHTTPError(status int, raw string) string {
@@ -128,41 +148,81 @@ func osIsTimeout(err error) bool {
 
 // TestConnection 测试与 OpenAI 兼容端点的连通性。
 func (a *AI) TestConnection(req TestConnRequest) TestConnResult {
+	return a.ListModels(req).TestConnResult
+}
+
+// ListModels discovers models through the same API prefix used for chat requests.
+func (a *AI) ListModels(req TestConnRequest) ModelsResult {
+	failure := func(status int, message string) ModelsResult {
+		return ModelsResult{TestConnResult: TestConnResult{Status: status, Message: message}}
+	}
 	baseURL := normalizeBaseURL(req.BaseURL)
 	apiKey := strings.TrimSpace(req.APIKey)
 	if baseURL == "" {
-		return TestConnResult{Ok: false, Message: "请先填写 Base URL"}
+		return failure(0, "请先填写 Base URL")
 	}
 
 	ctx, cancel := context.WithTimeout(context.Background(), aiTimeout)
 	defer cancel()
 	httpReq, err := http.NewRequestWithContext(ctx, http.MethodGet, baseURL+"/models", nil)
 	if err != nil {
-		return TestConnResult{Ok: false, Message: err.Error()}
+		return failure(0, err.Error())
 	}
 	if apiKey != "" {
 		httpReq.Header.Set("Authorization", "Bearer "+apiKey)
 	}
+	httpReq.Header.Set("Accept", "application/json")
 	res, err := a.client.Do(httpReq)
 	if err != nil {
-		return TestConnResult{Ok: false, Message: describeNetworkError(err)}
+		return failure(0, describeNetworkError(err))
 	}
 	defer res.Body.Close()
 
-	if res.StatusCode >= 200 && res.StatusCode < 300 {
-		body, _ := io.ReadAll(io.LimitReader(res.Body, 1<<20))
-		var data struct {
-			Data []any `json:"data"`
+	body, err := io.ReadAll(io.LimitReader(res.Body, 4<<20))
+	if err != nil {
+		return failure(res.StatusCode, "读取模型列表失败")
+	}
+	if res.StatusCode < 200 || res.StatusCode >= 300 {
+		return failure(res.StatusCode, describeHTTPError(res.StatusCode, string(body)))
+	}
+	var data struct {
+		Data []struct {
+			ID            string `json:"id"`
+			Name          string `json:"name"`
+			DisplayName   string `json:"display_name"`
+			Reasoning     bool   `json:"reasoning"`
+			ContextWindow int    `json:"context_window"`
+			ContextLength int    `json:"context_length"`
+			MaxTokens     int    `json:"max_output_tokens"`
+			Modalities    struct {
+				Input []string `json:"input"`
+			} `json:"modalities"`
+		} `json:"data"`
+	}
+	if json.Unmarshal(body, &data) != nil || data.Data == nil {
+		return failure(res.StatusCode, "模型接口未返回有效的 data 列表，请检查 Base URL（通常以 /v1 结尾）")
+	}
+	models := make([]ProviderModel, 0, len(data.Data))
+	seen := map[string]bool{}
+	for _, m := range data.Data {
+		id := strings.TrimSpace(m.ID)
+		if id == "" || seen[id] {
+			continue
 		}
-		if json.Unmarshal(body, &data) == nil && data.Data != nil {
-			return TestConnResult{Ok: true, Status: res.StatusCode, Message: fmt.Sprintf("联通成功，发现 %d 个模型", len(data.Data))}
+		seen[id] = true
+		name := m.DisplayName
+		if name == "" {
+			name = m.Name
 		}
-		return TestConnResult{Ok: true, Status: res.StatusCode, Message: "联通成功"}
-	}
-	if res.StatusCode == 401 || res.StatusCode == 403 {
-		return TestConnResult{Ok: false, Status: res.StatusCode, Message: "认证失败，请检查 API Key"}
+		contextWindow := m.ContextWindow
+		if contextWindow == 0 {
+			contextWindow = m.ContextLength
+		}
+		models = append(models, ProviderModel{ID: id, Name: name, Reasoning: m.Reasoning,
+			Input: m.Modalities.Input, ContextWindow: contextWindow, MaxTokens: m.MaxTokens})
 	}
-	return TestConnResult{Ok: false, Status: res.StatusCode, Message: fmt.Sprintf("请求失败（HTTP %d）", res.StatusCode)}
+	return ModelsResult{TestConnResult: TestConnResult{Ok: true, Status: res.StatusCode,
+		Message: fmt.Sprintf("联通成功，获取 %d 个模型", len(models))}, Models: models}
 }
 
 // ChatStream 发起流式对话：POST {baseUrl}/chat/completions（stream: true），
diff --git a/native/services/ai_test.go b/native/services/ai_test.go
new file mode 100644
index 0000000..294465c
--- /dev/null
+++ b/native/services/ai_test.go
@@ -0,0 +1,69 @@
+package services
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"testing"
+)
+
+func TestListModels(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/v1/models" || r.Header.Get("Authorization") != "Bearer test-key" {
+			t.Errorf("unexpected request: %s, auth=%q", r.URL.Path, r.Header.Get("Authorization"))
+		}
+		_, _ = w.Write([]byte(`{"data":[{"id":"group/model","display_name":"Gateway model","reasoning":true,"context_window":256000,"max_output_tokens":32000,"modalities":{"input":["text","image"]}},{"id":"group/model"},{"id":""},{"id":"custom/model"}]}`))
+	}))
+	defer server.Close()
+	for _, base := range []string{server.URL, server.URL + "/v1/"} {
+		result := NewAI().ListModels(TestConnRequest{BaseURL: base, APIKey: " test-key "})
+		if !result.Ok || len(result.Models) != 2 {
+			t.Fatalf("discovery failed: %+v", result)
+		}
+		model := result.Models[0]
+		if model.Name != "Gateway model" || !model.Reasoning || model.ContextWindow != 256000 || model.MaxTokens != 32000 || len(model.Input) != 2 {
+			t.Fatalf("metadata missing: %+v", model)
+		}
+	}
+}
+
+func TestListModelsErrors(t *testing.T) {
+	for _, test := range []struct {
+		name   string
+		status int
+		body   string
+		ok     bool
+	}{
+		{"auth", 401, `{"error":{"message":"secret"}}`, false},
+		{"html", 200, `<html>gateway dashboard</html>`, false},
+		{"missing list", 200, `{}`, false},
+		{"empty list", 200, `{"data":[]}`, true},
+	} {
+		t.Run(test.name, func(t *testing.T) {
+			server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				if r.Header.Get("Authorization") != "" {
+					t.Error("optional key should not send authorization")
+				}
+				w.WriteHeader(test.status)
+				_, _ = w.Write([]byte(test.body))
+			}))
+			defer server.Close()
+			result := NewAI().ListModels(TestConnRequest{BaseURL: server.URL})
+			if result.Ok != test.ok || result.Status != test.status {
+				t.Fatalf("unexpected result: %+v", result)
+			}
+		})
+	}
+}
+
+func TestNormalizeBaseURL(t *testing.T) {
+	for input, want := range map[string]string{
+		" http://127.0.0.1:3425/ ":       "http://127.0.0.1:3425/v1",
+		"https://example.com/v1/":        "https://example.com/v1",
+		"https://example.com/zen/go/v1/": "https://example.com/zen/go/v1",
+		"":                               "",
+	} {
+		if got := normalizeBaseURL(input); got != want {
+			t.Errorf("normalize(%q) = %q, want %q", input, got, want)
+		}
+	}
+}
diff --git a/native/services/updates.go b/native/services/updates.go
new file mode 100644
index 0000000..8f853b6
--- /dev/null
+++ b/native/services/updates.go
@@ -0,0 +1,36 @@
+package services
+
+import (
+	"github.com/egoist/mygo"
+	"github.com/egoist/mygo/plugins/updater"
+)
+
+type UpdatePreferences struct {
+	Version            string `json:"version"`
+	Enabled            bool   `json:"enabled"`
+	AutomaticChecks    bool   `json:"automaticChecks"`
+	AutomaticDownloads bool   `json:"automaticDownloads"`
+	LastCheck          string `json:"lastCheck"`
+}
+
+func (a *App) UpdatePreferences() UpdatePreferences {
+	lastCheck := ""
+	if last := updater.LastCheck(); !last.IsZero() {
+		lastCheck = last.Format("2006-01-02T15:04:05Z07:00")
+	}
+	return UpdatePreferences{Version: mygo.App.Version(), Enabled: mygo.Updater.Enabled(),
+		AutomaticChecks: updater.AutomaticChecks(), AutomaticDownloads: updater.AutomaticDownloads(), LastCheck: lastCheck}
+}
+
+func (a *App) SetUpdatePreferences(req struct {
+	AutomaticChecks    bool `json:"automaticChecks"`
+	AutomaticDownloads bool `json:"automaticDownloads"`
+}) UpdatePreferences {
+	updater.SetAutomaticChecks(req.AutomaticChecks)
+	updater.SetAutomaticDownloads(req.AutomaticDownloads)
+	return a.UpdatePreferences()
+}
+
+func (a *App) CheckForUpdates() {
+	updater.CheckForUpdates()
+}
diff --git a/package.json b/package.json
index f600615..05969e8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "muse",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "private": true,
   "license": "MIT",
   "description": "Muse monorepo 根 — 纯编排（前端在 app/，Go 壳在 native/）",
@@ -10,7 +10,7 @@
     "dev:go": "MYGO_DEV_URL=http://localhost:5173 go run -C native .",
     "build": "pnpm build:go",
     "build:web": "pnpm --dir app run build",
-    "build:go": "pnpm build:web && cd native && CGO_ENABLED=0 go build -ldflags=\"-s -w\" -o Muse .",
+    "build:go": "pnpm build:web && node scripts/build-native.mjs",
     "typecheck": "pnpm --dir app run typecheck",
     "test:agent": "node scripts/test-agent.mjs",
     "test:e2e": "node scripts/e2e-muse.mjs"
diff --git a/resources/update-public-key.txt b/resources/update-public-key.txt
new file mode 100644
index 0000000..49f13d0
--- /dev/null
+++ b/resources/update-public-key.txt
@@ -0,0 +1 @@
+FG0Hg7hGBVq3w+Cin+CDYOH/tqOiXF+jOd+V3e0kAa0=
diff --git a/scripts/build-native.mjs b/scripts/build-native.mjs
new file mode 100644
index 0000000..7be7797
--- /dev/null
+++ b/scripts/build-native.mjs
@@ -0,0 +1,21 @@
+import { execFileSync } from 'node:child_process'
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+
+const root = fileURLToPath(new URL('../', import.meta.url))
+const { version } = JSON.parse(readFileSync(`${root}package.json`, 'utf8'))
+const publicKey = readFileSync(`${root}resources/update-public-key.txt`, 'utf8').trim()
+const target = execFileSync('go', ['env', 'GOOS', 'GOARCH'], { cwd: `${root}native`, encoding: 'utf8' }).trim().split(/\s+/).join('-')
+const output = process.argv[2] || (target.startsWith('windows-') ? 'Muse.exe' : 'Muse')
+const flags = [
+  '-s -w',
+  '-X github.com/egoist/mygo.production=1',
+  '-X github.com/egoist/mygo.packageName=Muse',
+  `-X github.com/egoist/mygo.packageVersion=${version}`,
+  '-X github.com/egoist/mygo.packageIdentifier=com.muse.app',
+  `-X github.com/egoist/mygo.packageUpdateKey=${publicKey}`,
+  `-X github.com/egoist/mygo.packageUpdateFeed=https://github.com/CarlOpenLab/muse/releases/latest/download/update-${target}.json`,
+].join(' ')
+execFileSync('go', ['build', `-ldflags=${flags}`, '-o', output, '.'], {
+  cwd: `${root}native`, env: { ...process.env, CGO_ENABLED: '0' }, stdio: 'inherit',
+})
diff --git a/scripts/package-update.mjs b/scripts/package-update.mjs
new file mode 100644
index 0000000..f14b8bb
--- /dev/null
+++ b/scripts/package-update.mjs
@@ -0,0 +1,34 @@
+import { createHash, createPrivateKey, createPublicKey, sign, verify } from 'node:crypto'
+import { execFileSync } from 'node:child_process'
+import { mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+
+const root = fileURLToPath(new URL('../', import.meta.url))
+const { version } = JSON.parse(readFileSync(`${root}package.json`, 'utf8'))
+const [source, entry, target] = process.argv.slice(2)
+if (!source || !entry || !/^(darwin|windows|linux)-(arm64|amd64)$/.test(target ?? '')) {
+  throw new Error('Usage: node scripts/package-update.mjs <source directory> <entry> <os-arch>')
+}
+const rawKey = Buffer.from((process.env.MYGO_UPDATER_PRIVATE_KEY ?? '').trim(), 'base64')
+if (rawKey.length !== 64) throw new Error('MYGO_UPDATER_PRIVATE_KEY must contain the Ed25519 signing key')
+const privateKey = createPrivateKey({ key: Buffer.concat([Buffer.from('302e020100300506032b657004220420', 'hex'), rawKey.subarray(0, 32)]), format: 'der', type: 'pkcs8' })
+const publicKey = createPublicKey(privateKey).export({ format: 'der', type: 'spki' }).subarray(-32)
+if (publicKey.toString('base64') !== readFileSync(`${root}resources/update-public-key.txt`, 'utf8').trim()) {
+  throw new Error('Signing key does not match the public key built into Muse')
+}
+mkdirSync(`${root}dist`, { recursive: true })
+const name = `Muse-${version}-${target}.tar.gz`
+const archive = `${root}dist/${name}`
+execFileSync('tar', ['-czf', archive, '-C', source, entry], { stdio: 'inherit', env: { ...process.env, COPYFILE_DISABLE: '1' } })
+const digest = createHash('sha256').update(readFileSync(archive)).digest()
+const signature = sign(null, digest, privateKey)
+if (!verify(null, digest, createPublicKey(privateKey), signature)) throw new Error('Signature verification failed')
+const changelog = readFileSync(`${root}CHANGELOG.md`, 'utf8')
+const section = changelog.split(`## ${version}\n`)[1]?.split('\n## ')[0]?.trim()
+if (!section) throw new Error(`CHANGELOG.md has no notes for ${version}`)
+writeFileSync(`${root}dist/update-${target}.json`, JSON.stringify({
+  version, notes: section, date: new Date().toISOString(),
+  url: `https://github.com/CarlOpenLab/muse/releases/download/v${version}/${name}`,
+  size: statSync(archive).size, signature: signature.toString('base64'),
+}, null, 2) + '\n')
+console.log(`Signed and verified ${name}`)

From a8fb5dd1693be28318d286ab49a31960f28b34b3 Mon Sep 17 00:00:00 2001
From: carl chen <ccheartszzz@gmail.com>
Date: Mon, 12 Oct 2026 18:14:39 +0800
Subject: [PATCH 6/6] fix(ci): use relative archive paths on Windows

---
 scripts/package-update.mjs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/scripts/package-update.mjs b/scripts/package-update.mjs
index f14b8bb..542f953 100644
--- a/scripts/package-update.mjs
+++ b/scripts/package-update.mjs
@@ -19,7 +19,10 @@ if (publicKey.toString('base64') !== readFileSync(`${root}resources/update-publi
 mkdirSync(`${root}dist`, { recursive: true })
 const name = `Muse-${version}-${target}.tar.gz`
 const archive = `${root}dist/${name}`
-execFileSync('tar', ['-czf', archive, '-C', source, entry], { stdio: 'inherit', env: { ...process.env, COPYFILE_DISABLE: '1' } })
+// Use a relative archive name: GNU tar treats Windows drive letters as remote hosts.
+execFileSync('tar', ['-czf', `dist/${name}`, '-C', source, entry], {
+  cwd: root, stdio: 'inherit', env: { ...process.env, COPYFILE_DISABLE: '1' },
+})
 const digest = createHash('sha256').update(readFileSync(archive)).digest()
 const signature = sign(null, digest, privateKey)
 if (!verify(null, digest, createPublicKey(privateKey), signature)) throw new Error('Signature verification failed')