@goodandready/dsh-key-rotation 0.8.10 → 0.8.11

package/README.md

@@ -38,6 +38,13 @@
 
 ## ⚡ Overview & The Problem
 
+### 🚀 What's New in v0.8.11 (One-click Updater & Quality Gate)
+
+- **Plugin updater in Settings**: see current/latest version and update from the card without leaving DSH (`#307`).
+- **Safer best-effort side effects**: intentional non-critical failures log at debug instead of silent empty `catch` (`#315`).
+- **Theme-only client colors** and production-path test cleanup (`#311`, `#314`).
+- **Leaner publication set**: agent-only files no longer ship in git/npm (`#308`).
+
 ### 🚀 What's New in v0.8.10 (Stream Concurrency Hardening & Auto-Pruning)
 - **Zero Concurrency Leaks**: Guaranteed release of stream concurrency slots via deterministic `try ... finally` block, preventing key starvation during clean finishes or client stream aborts.
 - **Robust Probe Retry**: Added transient network socket error retry (`PROBE_RETRY_DELAY_MS`) in `SandboxRunner.probeModels` before marking keys as broken.
@@ -164,6 +171,17 @@ graph LR
 
 ---
 
+
+### 🔁 8. One-click Plugin Updater
+
+The settings card includes an **Updater** section:
+
+1. **Check for updates** — `GET /api/dsh-key-rotation/update` returns `currentVersion`, `latestVersion`, `updateAvailable`, `canAutoUpdate` (version metadata only; no secrets).
+2. **Update now** — `POST` with the same path installs the exact latest npm version through the standard `dsh plugin add` flow. The request is accepted only from loopback with a matching same-origin `Origin`/`Host` (and the dedicated header). Cross-origin or missing-origin POST is rejected with `403`.
+3. After a successful install the UI tells you to **restart DSH** so the new host code loads.
+
+No `--force`, no raw shell, no install from worktree/DEV paths. Update runs only after an explicit click.
+
 ## 🖥️ Rich Web GUI & Dashboard
 
 Access full visual management under **Settings → Key Rotation** or via the Header quick-widget.

package/README.ru.md

@@ -36,6 +36,13 @@
 
 ---
 
+### 🚀 Что нового в v0.8.11 (обновление в один клик и quality gate)
+
+- **Обновление плагина в карточке настроек**: текущая/последняя версия и кнопка установки без выхода из DSH (#307).
+- **bestEffort вместо пустых catch**: осознанные побочные эффекты логируются на debug, а не глотаются (#315).
+- **Цвета клиента только из токенов темы** и чистка production-path тестов (#311, #314).
+- **Публикационный набор без служебных файлов агентов** (#308).
+
 ## ⚡ Обзор и решаемая проблема
 
 ### 🚀 Что нового в версии 0.8.10 (Надёжность стриминга и очистка памяти)
@@ -190,6 +197,17 @@ graph LR
 
 ---
 
+
+### 🔁 8. Обновление плагина в один клик
+
+В карточке настроек есть раздел **Updater**:
+
+1. **Проверить обновления** — `GET /api/dsh-key-rotation/update` возвращает `currentVersion`, `latestVersion`, `updateAvailable`, `canAutoUpdate` (только метаданные версии).
+2. **Обновить сейчас** — `POST` ставит точную последнюю npm-версию штатным `dsh plugin add`. Запрос принимается только с loopback и совпадающим same-origin `Origin`/`Host`; иначе `403`.
+3. После установки UI предлагает **перезапустить DSH**.
+
+Без `--force`, без raw shell и установки из worktree/DEV. Обновление — только по явному нажатию.
+
 ## 📦 Установка
 
 ```bash

package/README.zh.md

@@ -38,6 +38,13 @@
 
 ## ⚡ 概述与核心痛点
 
+### 🚀 v0.8.11 新特性（一键更新与质量门禁）
+
+- **设置卡片中的插件更新器**：查看当前/最新版本并一键安装（#307）。
+- **bestEffort 替代空 catch**：非关键副作用在 debug 级别记录，不再被静默吞掉（#315）.
+- **客户端颜色仅使用主题变量**，并清理 production-path 测试（#311、#314）。
+- **发布集不再包含代理专用文件**（#308）。
+
 ### 🚀 v0.8.10 版本新特性（流并发加固与状态自动修剪）
 - **杜绝并发计数泄漏**：在 `try ... finally` 中强制释放流并发占用，防止在正常完成或客户端中断时密钥被永久锁定。
 - **探测抗网络抖动重试**：在 `probeModels` 中遇到套接字网络临时错误时自动重试一次，避免密钥被误判损坏。

package/lib/best-effort.js

@@ -0,0 +1,26 @@
+/** Run a non-critical side effect; never throw. Logs at debug when a logger is provided. */
+export function bestEffort(label, fn, logger) {
+  const log = (err) => {
+    try {
+      logger?.debug?.(`dsh-key-rotation: best-effort ${label}`, err);
+    } catch {
+      /* logger itself must not throw */
+    }
+  };
+  try {
+    const result = fn();
+    if (result && typeof result.then === 'function') {
+      return result.then(
+        (value) => value,
+        (err) => {
+          log(err);
+          return undefined;
+        },
+      );
+    }
+    return result;
+  } catch (err) {
+    log(err);
+    return undefined;
+  }
+}

package/lib/bucket.js

@@ -1,65 +1,6 @@
-// lib/bucket.js - per-key RPM token bucket (#192) + O(1) accumulator and adaptive tuning.
+// lib/bucket.js - per-key RPM token bucket (#192).
 const WINDOW_MS = 60000;
 
-/**
- * O(1) Mathematical Token Bucket Accumulator.
- * tokens = min(capacity, tokens + (now - lastRefill) * refillRate)
- */
-export class TokenBucketAccumulator {
-  constructor(capacity, windowMs = WINDOW_MS, now = Date.now()) {
-    this.capacity = Math.max(1, capacity);
-    this.tokens = this.capacity;
-    this.windowMs = windowMs;
-    this.refillRate = this.capacity / this.windowMs; // tokens per ms
-    this.lastRefill = now;
-  }
-
-  refill(now = Date.now()) {
-    const elapsed = Math.max(0, now - this.lastRefill);
-    if (elapsed > 0) {
-      this.tokens = Math.min(this.capacity, this.tokens + elapsed * this.refillRate);
-      this.lastRefill = now;
-    }
-  }
-
-  allow(cost = 1, now = Date.now()) {
-    this.refill(now);
-    if (this.tokens >= cost) {
-      this.tokens -= cost;
-      return true;
-    }
-    return false;
-  }
-
-  retryMs(cost = 1, now = Date.now()) {
-    this.refill(now);
-    if (this.tokens >= cost) return 0;
-    const needed = cost - this.tokens;
-    return Math.ceil(needed / this.refillRate);
-  }
-
-  updateCapacity(newCapacity, now = Date.now()) {
-    this.refill(now);
-    const prevCap = this.capacity;
-    this.capacity = Math.max(1, newCapacity);
-    this.refillRate = this.capacity / this.windowMs;
-    // Scale current tokens proportionally or clamp
-    this.tokens = Math.min(this.capacity, Math.max(0, this.tokens + (this.capacity - prevCap)));
-  }
-
-  info(now = Date.now()) {
-    this.refill(now);
-    const used = Math.max(0, Math.round(this.capacity - this.tokens));
-    const remaining = Math.max(0, Math.floor(this.tokens));
-    return {
-      used,
-      remaining,
-      resetMs: this.retryMs(1, now),
-      capacity: this.capacity,
-    };
-  }
-}
-
 /** Sliding-window check: true if `ref` is under `limit` requests/min. */
 export function bucketAllow(windows, ref, limit, now = Date.now()) {
   if (!limit || limit <= 0) return true;
@@ -74,14 +15,6 @@ export function bucketAllow(windows, ref, limit, now = Date.now()) {
   return true;
 }
 
-/** Record a hit without checking (use after a successful resolve). */
-export function bucketHit(windows, ref, now = Date.now()) {
-  const cut = now - WINDOW_MS;
-  const hits = (windows.get(ref) ?? []).filter((t) => t > cut);
-  hits.push(now);
-  windows.set(ref, hits);
-}
-
 /** ms until `ref` may retry again (0 = now). */
 export function bucketRetryMs(windows, ref, limit, now = Date.now()) {
   if (!limit || limit <= 0) return 0;
@@ -108,22 +41,3 @@ export function bucketInfo(windows, ref, limit, now = Date.now()) {
   };
 }
 
-/**
- * Adaptive limit computation from HTTP headers with manual limit precedence.
- * If manualLimit is given (> 0), it acts as the upper ceiling.
- * If adaptive is enabled and upstream reports a lower limit/remaining, adapt downwards.
- */
-export function computeEffectiveLimit(headerRateLimit, manualLimit, adaptiveEnabled = true) {
-  const manual = (Number.isFinite(manualLimit) && manualLimit > 0) ? manualLimit : null;
-  if (!adaptiveEnabled || !headerRateLimit) {
-    return manual;
-  }
-  const headerLimit = headerRateLimit.limit;
-  if (Number.isFinite(headerLimit) && headerLimit > 0) {
-    if (manual) {
-      return Math.min(manual, headerLimit); // manual acts as upper ceiling
-    }
-    return headerLimit;
-  }
-  return manual;
-}

package/lib/cascade.js

@@ -1,39 +1,27 @@
-// cascade.js — cross-provider failover cascade (issue #194).
-// ponytail: minimal — pick fallback provider from a RegionMap-like config.
-
-export const CASCADE_MAX_DEPTH = 1;
-
-export function pickCascadeFallback(provider, cfg, pools) {
-  const list = Array.isArray(cfg && cfg.cascade) ? cfg.cascade : [];
-  for (const entry of list) {
-    const fb = typeof entry === 'string' ? { provider: entry } : entry;
-    if (!fb || !fb.provider || fb.provider === provider) continue;
-    const pool = pools instanceof Map ? pools.get(fb.provider) : (pools ? pools[fb.provider] : null);
-    if (!pool) continue;
-    const now = Date.now();
-    let healthy = 0;
-    for (const ref of pool.refs) {
-      const failedUntil = (pool.state && pool.state.failedUntil && pool.state.failedUntil.get(ref)) || 0;
-      if (failedUntil > now) continue;
-      const exp = pool.expiresAt ? pool.expiresAt[ref] : undefined;
-      if (exp !== undefined && now >= exp) continue;
-      healthy += 1;
-    }
-    if (healthy === 0) continue;
-    return { provider: fb.provider, pool, model: fb.model || null };
-  }
-  return null;
-}
-
-export function hasHealthyKey(pool, now) {
-  now = now || Date.now();
-  if (!pool || !Array.isArray(pool.refs)) return false;
-  for (const ref of pool.refs) {
-    const failedUntil = (pool.state && pool.state.failedUntil && pool.state.failedUntil.get(ref)) || 0;
-    if (failedUntil > now) continue;
-    const exp = pool.expiresAt ? pool.expiresAt[ref] : undefined;
-    if (exp !== undefined && now >= exp) continue;
-    return true;
-  }
-  return false;
-}
+// cascade.js — cross-provider failover cascade (issue #194).
+// ponytail: minimal — pick fallback provider from a RegionMap-like config.
+
+export const CASCADE_MAX_DEPTH = 1;
+
+export function pickCascadeFallback(provider, cfg, pools) {
+  const list = Array.isArray(cfg && cfg.cascade) ? cfg.cascade : [];
+  for (const entry of list) {
+    const fb = typeof entry === 'string' ? { provider: entry } : entry;
+    if (!fb || !fb.provider || fb.provider === provider) continue;
+    const pool = pools instanceof Map ? pools.get(fb.provider) : (pools ? pools[fb.provider] : null);
+    if (!pool) continue;
+    const now = Date.now();
+    let healthy = 0;
+    for (const ref of pool.refs) {
+      const failedUntil = (pool.state && pool.state.failedUntil && pool.state.failedUntil.get(ref)) || 0;
+      if (failedUntil > now) continue;
+      const exp = pool.expiresAt ? pool.expiresAt[ref] : undefined;
+      if (exp !== undefined && now >= exp) continue;
+      healthy += 1;
+    }
+    if (healthy === 0) continue;
+    return { provider: fb.provider, pool, model: fb.model || null };
+  }
+  return null;
+}
+

package/lib/client.js

@@ -9,7 +9,7 @@
 // manual route typing is ever needed. The plugin derives the fallback chain and
 // auto-creates clone routes from the key count.
 //
-// Localization: source strings are English only (ctx.locale.register(NS, { en })).
+// Localization: source strings are English; Chinese is a first-class locale (en + zh).
 // Other languages come from the DSH core locale service / translation plugins
 // via props.t (slot locale: NS). Active locale prefers ctx.locale.getSnapshot().active,
 // else first navigator.languages entry, else 'en' — same fallback chain as DSH core.
@@ -301,12 +301,18 @@ window.__ModuleLoader__.load({
       selfHealingHint: '定期轻量探测以自动恢复损坏密钥 (0 为禁用)',
     };
 
-    // Коды, на которых имеет смысл переключать ключ. Список из хоста
-    // (DEFAULT_SWITCH_CODES); конфиг может содержать и свои — они показываются
-    // отдельными отмеченными галочками, чтобы правило нельзя было потерять.
+    // Codes worth switching on. Host list is DEFAULT_SWITCH_CODES; config may
+    // add extras — those render as separate checked boxes so a custom rule is
+    // not dropped on first save.
     const KNOWN_CODES = ['QUOTA', 'RATE_LIMIT', 'SERVER', 'TIMEOUT', 'TRANSPORT', 'EMPTY_RESPONSE', 'UNKNOWN_MODEL', 'AUTH'];
 
     // #273: keep the settings list item mounted if the section throws.
+        const bestEffort = (label, fn) => {
+          try { return fn(); } catch (err) {
+            try { console.debug('[dsh-key-rotation] best-effort ' + label, err); } catch { /* console unavailable */ }
+            return undefined;
+          }
+        };
     class KeyRotationErrorBoundary extends React.Component {
       constructor(props) {
         super(props);
@@ -316,7 +322,7 @@ window.__ModuleLoader__.load({
         return { error };
       }
       componentDidCatch(error, info) {
-        try { console.error('[dsh-key-rotation] settings card crashed', error, info); } catch (_) {}
+        bestEffort('error-boundary.log', () => { console.error('[dsh-key-rotation] settings card crashed', error, info); });
       }
       render() {
         if (this.state.error) {
@@ -333,7 +339,7 @@ window.__ModuleLoader__.load({
       }
     }
 
-    /** Опрос статуса ротации, пока раздел настроек открыт (smart polling). */
+    /** Poll rotation status while the settings section is open (smart polling). */
     function useRotationStatus() {
       const [byProvider, setByProvider] = React.useState({});
       React.useEffect(() => {
@@ -348,7 +354,7 @@ window.__ModuleLoader__.load({
               for (const entry of data.providers) map[entry.provider] = entry;
               setByProvider(map);
             })
-            .catch(() => { /* статус необязателен: карточка остаётся редактором */ });
+            .catch(() => { /* status is optional: card stays a working editor */ });
         };
         pull();
         const id = setInterval(pull, 4000);
@@ -363,7 +369,7 @@ window.__ModuleLoader__.load({
       return byProvider;
     }
 
-    /** Последний probe-результат по каждому ключу (#219): /sandbox-cache (smart polling). */
+    /** Latest probe result per key (#219): /sandbox-cache (smart polling). */
     function useProbeCache() {
       const [cache, setCache] = React.useState({});
       React.useEffect(() => {
@@ -373,7 +379,7 @@ window.__ModuleLoader__.load({
           fetch('/dsh-key-rotation/sandbox-cache', { headers: { accept: 'application/json' } })
             .then((r) => (r.ok ? r.json() : null))
             .then((data) => { if (alive && data) setCache(data); })
-            .catch(() => { /* кэш не критичен: карточка работает и без него */ });
+            .catch(() => { /* cache is non-critical: card works without it */ });
         };
         pull();
         const id = setInterval(pull, 4000);
@@ -397,10 +403,9 @@ window.__ModuleLoader__.load({
       return t('hoursAgo').replace('{n}', String(Math.round(sec / 3600)));
     }
 
-    // Разметка карточки: сетка, а не набор inline-стилей. Фиксированные ширины
-    // здесь уже приводили к тому, что имя ключа обрезалось, а кнопки наезжали
-    // на поле значения, поэтому имя занимает свою строку, а служебная строка
-    // под ним ужимается сама.
+    // Card layout uses a grid, not ad-hoc inline widths. Fixed widths used to
+    // clip key names and collide actions with the value field, so the name owns
+    // its own row and the meta row shrinks on its own.
     const CARD_CSS = [
       '.krot{display:flex;flex-direction:column;gap:20px;max-width:960px;padding:6px 0 24px;box-sizing:border-box}',
       '.krot-header{display:flex;flex-direction:column;gap:8px;padding-bottom:16px;border-bottom:1px solid var(--dsw-alias-border-l2)}',
@@ -408,7 +413,7 @@ window.__ModuleLoader__.load({
       '.krot-page-sub{font-size:13px;color:var(--dsw-alias-label-secondary);line-height:1.5}',
       '.krot p{margin:0}',
       '.krot-hint{font-size:12px;color:var(--dsw-alias-label-secondary);line-height:1.4}',
-      '.krot-err{font-size:13px;color:var(--dsw-alias-state-error-primary);padding:10px 14px;border-radius:8px;background:rgba(239,68,68,0.1);display:flex;align-items:center;gap:8px}',
+      '.krot-err{font-size:13px;color:var(--dsw-alias-state-error-primary);padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 10%, transparent);display:flex;align-items:center;gap:8px}',
       '.krot-label{font-size:13px;font-weight:500;color:var(--dsw-alias-label-primary)}',
       '.krot-field{display:flex;flex-direction:column;gap:6px}',
       '.krot-in{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;height:36px;font-family:inherit;min-width:0;width:100%;box-sizing:border-box;transition:border-color .15s ease}',
@@ -431,15 +436,15 @@ window.__ModuleLoader__.load({
       '.krot-load-legend{display:flex;flex-wrap:wrap;gap:8px;margin-top:6px;font-size:11px}',
       '.krot-load-item{display:inline-flex;align-items:center;gap:4px}',
       '.krot-load-dot{width:7px;height:7px;border-radius:50%}',
-      '.krot-modal-backdrop{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,0.55);z-index:9999;display:flex;align-items:center;justify-content:center;backdrop-filter:blur(2px)}',
-      '.krot-modal-card{width:90%;max-width:420px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;box-shadow:0 12px 36px rgba(0,0,0,0.28);padding:20px;display:flex;flex-direction:column;gap:12px}',
+      '.krot-modal-backdrop{position:fixed;top:0;left:0;right:0;bottom:0;background:var(--dsw-alias-bg-overlay, color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 55%, transparent));z-index:9999;display:flex;align-items:center;justify-content:center;backdrop-filter:blur(2px)}',
+      '.krot-modal-card{width:90%;max-width:420px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;box-shadow:0 12px 36px color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 28%, transparent);padding:20px;display:flex;flex-direction:column;gap:12px}',
       '.krot-modal-title{font-size:16px;font-weight:600;color:var(--dsw-alias-label-primary)}',
       '.krot-modal-desc{font-size:13px;color:var(--dsw-alias-label-secondary);line-height:1.45}',
       '.krot-modal-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:8px}',
       '.krot-badge{font-size:12px;padding:3px 10px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);display:inline-flex;align-items:center;gap:5px;font-weight:500;white-space:nowrap}',
-      '.krot-badge-ok{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary);background:rgba(16,185,129,0.08)}',
-      '.krot-badge-warn{border-color:var(--dsw-alias-state-warning-primary);color:var(--dsw-alias-state-warning-primary);background:rgba(245,158,11,0.08)}',
-      '.krot-badge-bad{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary);background:rgba(239,68,68,0.08)}',
+      '.krot-badge-ok{border-color:var(--dsw-alias-state-success-primary);color:var(--dsw-alias-state-success-primary);background:color-mix(in srgb, var(--dsw-alias-state-success-primary, #10b981) 8%, transparent)}',
+      '.krot-badge-warn{border-color:var(--dsw-alias-state-warning-primary);color:var(--dsw-alias-state-warning-primary);background:color-mix(in srgb, var(--dsw-alias-state-warning-primary, #f59e0b) 8%, transparent)}',
+      '.krot-badge-bad{border-color:var(--dsw-alias-state-error-primary);color:var(--dsw-alias-state-error-primary);background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 8%, transparent)}',
       '.krot-prov{display:flex;flex-direction:column;gap:12px;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-2);padding:14px 16px}',
       '.krot-prov-head{display:flex;gap:10px;align-items:center;flex-wrap:wrap}',
       '.krot-prov-head select{flex:1;min-width:180px}',
@@ -457,21 +462,22 @@ window.__ModuleLoader__.load({
       '.krot-btn:hover:not(:disabled){background:var(--dsw-alias-bg-layer-4,var(--dsw-alias-bg-layer-2));border-color:var(--dsw-alias-label-dimmed,var(--dsw-alias-border-l2))}',
       '.krot-btn-primary,.krot-save{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3);border-color:transparent;font-weight:600}',
       '.krot-btn-primary:hover:not(:disabled),.krot-save:hover:not(:disabled){background:var(--dsw-alias-label-primary)!important;color:var(--dsw-alias-bg-layer-3)!important;opacity:0.88}',
-      '.krot-btn-danger{color:var(--dsw-alias-state-error-primary);border-color:rgba(239,68,68,0.3)}',
-      '.krot-btn-danger:hover:not(:disabled){background:rgba(239,68,68,0.12)!important;border-color:rgba(239,68,68,0.5)}',
+      '.krot-btn-danger{color:var(--dsw-alias-state-error-primary);border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 30%, transparent)}',
+      '.krot-btn-danger:hover:not(:disabled){background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 12%, transparent)!important;border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 50%, transparent)}',
       '.krot-btn:disabled{opacity:0.45;cursor:not-allowed}',
       '.krot-foot{display:flex;gap:10px;align-items:center;flex-wrap:wrap}',
       '.krot-filter-bar{display:flex;gap:8px;margin:4px 0 10px;flex-wrap:wrap}',
       '.krot-pill{appearance:none;background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:4px 12px;font-size:12px;font-weight:500;color:var(--dsw-alias-label-secondary);cursor:pointer;transition:all .15s ease}',
       '.krot-pill:hover{background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary)}',
       '.krot-pill-active{background:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)!important;font-weight:600}',
-      '.krot-pill-warn{border-color:rgba(245,158,11,0.3);color:var(--dsw-alias-state-warning-primary)}',
-      '.krot-pill-err{border-color:rgba(239,68,68,0.3);color:var(--dsw-alias-state-error-primary)}',
-      '.krot-alert-ok{padding:10px 14px;border-radius:8px;background:rgba(16,185,129,0.1);color:var(--dsw-alias-state-success-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
-      '.krot-alert-bad{padding:10px 14px;border-radius:8px;background:rgba(239,68,68,0.1);color:var(--dsw-alias-state-error-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
+      '.krot-pill-warn{border-color:color-mix(in srgb, var(--dsw-alias-state-warning-primary, #f59e0b) 30%, transparent);color:var(--dsw-alias-state-warning-primary)}',
+      '.krot-pill-err{border-color:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 30%, transparent);color:var(--dsw-alias-state-error-primary)}',
+      '.krot-alert-ok{padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-success-primary, #10b981) 10%, transparent);color:var(--dsw-alias-state-success-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
+      '.krot-alert-bad{padding:10px 14px;border-radius:8px;background:color-mix(in srgb, var(--dsw-alias-state-error-primary, #ef4444) 10%, transparent);color:var(--dsw-alias-state-error-primary);font-size:13px;display:flex;align-items:center;gap:10px}',
       '.krot-event-stream{display:flex;flex-direction:column;gap:6px;margin-top:8px;padding:10px 12px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:8px}',
       '.krot-event-row{display:flex;align-items:center;gap:8px;font-size:12px;padding:4px 0;border-bottom:1px solid var(--dsw-alias-border-l1)}',
       '.krot-event-time{font-family:ui-monospace,Menlo,Consolas,monospace;color:var(--dsw-alias-label-tertiary);font-size:11px}',
+      ':root{--krot-chart-4:var(--dsw-alias-state-brand-primary);--krot-chart-5:var(--dsw-alias-state-error-primary);--krot-chart-6:var(--dsw-alias-state-success-primary)}',
       '.krot-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none}',
       '.krot-card-header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;display:flex;align-items:center;gap:12px;padding:14px 16px}',
       '.krot-card-head-text{display:flex;flex-direction:column;flex:1;gap:4px;min-width:0}',
@@ -481,7 +487,7 @@ window.__ModuleLoader__.load({
       '.krot-card-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding:16px 0 8px}',
       '.krot-header-chip{display:inline-flex;align-items:center;gap:6px;height:26px;padding:0 10px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font-size:12px;font-weight:600;cursor:pointer;position:relative;user-select:none;transition:all .15s ease}',
       '.krot-header-chip:hover{background:var(--dsw-alias-interactive-bg-hover,var(--dsw-alias-bg-layer-3));border-color:var(--dsw-alias-border-l1);transform:translateY(-0.5px)}',
-      '.krot-popover{position:absolute;top:calc(100% + 6px);right:0;z-index:10000;min-width:220px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;padding:12px 14px;box-shadow:0 16px 40px rgba(0,0,0,.45),0 2px 8px rgba(0,0,0,.15);backdrop-filter:blur(16px);-webkit-backdrop-filter:blur(16px);display:flex;flex-direction:column;gap:8px;text-align:left}',
+      '.krot-popover{position:absolute;top:calc(100% + 6px);right:0;z-index:10000;min-width:220px;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;padding:12px 14px;box-shadow:0 16px 40px color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 45%, transparent),0 2px 8px color-mix(in srgb, var(--dsw-alias-bg-layer-1, #000) 15%, transparent);backdrop-filter:blur(16px);-webkit-backdrop-filter:blur(16px);display:flex;flex-direction:column;gap:8px;text-align:left}',
       '.krot-pop-title{font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--dsw-alias-label-secondary)}',
       '.krot-pop-row{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:4px 0}',
       '.krot-pop-name{font-size:13px;font-weight:600;color:var(--dsw-alias-label-primary);display:flex;align-items:center;gap:8px}',
@@ -499,13 +505,13 @@ window.__ModuleLoader__.load({
     }
 
     /**
-     * Имя переменной под новый ключ.
+     * Env-var name for a newly added key.
      *
-     * Пользователь его больше не печатает: первый ключ провайдера получает имя
-     * вида <PROVIDER>_API_KEY, следующие — тот же корень с суффиксом _2, _3…
-     * Корень берётся у уже существующих ключей, чтобы вручную заведённые имена
-     * не ломались, и проверяется на занятость по ВСЕМ провайдерам — иначе два
-     * провайдера незаметно делили бы одну учётную запись.
+     * Users no longer type it: the first key of a provider becomes
+     * <PROVIDER>_API_KEY, later keys reuse that root with _2, _3… suffixes.
+     * The root is taken from existing keys so hand-made names keep working,
+     * and uniqueness is checked across ALL providers — otherwise two providers
+     * would silently share one credential.
      */
     // nextKeyRef also in lib/client-helpers.js
     function nextKeyRef(providerId, existingKeys, allRefs) {
@@ -650,7 +656,7 @@ window.__ModuleLoader__.load({
           cancelAnimationFrame(id);
           const prev = modalReturnFocusRef.current;
           if (prev && typeof prev.focus === 'function') {
-            try { prev.focus(); } catch (_) {}
+            bestEffort('modal.returnFocus', () => { prev.focus(); });
           }
         };
       }, [confirmModal]);
@@ -885,8 +891,7 @@ window.__ModuleLoader__.load({
         stashUndo({ type: 'provider', index: pIndex, entry: arr[pIndex] });
         return { ...cur, providers: arr.filter((_, i) => i !== pIndex) };
       });
-      // Порядок ключей = порядок попыток, поэтому его надо менять кнопками,
-      // а не перепечатыванием имён.
+      // Key order is attempt order — move it with buttons, do not retype names.
       const moveKey = (pIndex, kIndex, delta) => setField((cur) => {
         const providers = [...(cur.providers ?? [])];
         const entry = { ...(providers[pIndex] ?? {}) };
@@ -921,8 +926,8 @@ window.__ModuleLoader__.load({
         return { ...cur, providers };
       });
 
-      // Коды из конфига, которых нет в известном списке, показываем тоже:
-      // иначе галочки молча выбросили бы чужое правило при первом сохранении.
+      // Config codes missing from the known list still render as checked items;
+      // otherwise the checkboxes would silently drop a custom rule on first save.
       const selectedCodes = new Set(Array.isArray(val.switchCodes) ? val.switchCodes : []);
       const codeList = [...KNOWN_CODES, ...[...selectedCodes].filter((c) => !KNOWN_CODES.includes(c))];
       const toggleCode = (code, on) => setField((cur) => {
@@ -992,8 +997,8 @@ window.__ModuleLoader__.load({
         title: (opts && opts.title) || undefined,
       }, labelText);
 
-      // Точка состояния ключа: цвет и подпись читаются с одного взгляда,
-      // а «ключ не найден» ловит опечатку в имени env, которая иначе молчит.
+      // Key state dot: color and label read at a glance; "key not found"
+      // catches an env-name typo that would otherwise stay silent.
       const keyStatus = (providerId, ref) => {
         const hit = keyInfo(providerId, ref);
         if (!hit) return null;
@@ -1062,8 +1067,7 @@ window.__ModuleLoader__.load({
           const typed = secretDraft[rowKey];
           const fromEnv = Boolean(info && info.source === 'env');
 
-          // Имя ключа занимает свою строку целиком: раньше оно обрезалось и
-          // соседние ключи выглядели одинаково.
+          // Key name owns a full row so neighbouring keys stay distinguishable.
           const nameRow = [
             h('span', { className: 'krot-num', key: 'n' }, String(kIndex + 1)),
             h('span', { key: 'i', className: 'krot-name', title: key + ' (click to copy)', style: { cursor: 'copy' }, onClick: () => {
@@ -1204,13 +1208,13 @@ window.__ModuleLoader__.load({
           });
           const total = keyUsages.reduce((acc, x) => acc + x.usage, 0);
           const palette = [
-            'var(--dsw-alias-state-brand-primary, #6366f1)',
-            'var(--dsw-alias-state-success-primary, #10b981)',
-            'var(--dsw-alias-state-warning-primary, #f59e0b)',
-            'var(--dsw-alias-state-info-primary, #3b82f6)',
-            '#8b5cf6',
-            '#ec4899',
-            '#14b8a6',
+            'var(--dsw-alias-state-brand-primary)',
+            'var(--dsw-alias-state-success-primary)',
+            'var(--dsw-alias-state-warning-primary)',
+            'var(--dsw-alias-state-info-primary)',
+            'var(--krot-chart-4)',
+            'var(--krot-chart-5)',
+            'var(--krot-chart-6)',
           ];
           return h('div', { className: 'krot-load-chart' },
             h('div', { className: 'krot-load-header' },
@@ -1311,7 +1315,8 @@ window.__ModuleLoader__.load({
           filterBar,
           loadChart,
           h('div', { className: 'krot-keys' }, keyRows),
-          h('div', { className: 'krot-foot' },
+          h(UpdaterSection, { t }),
+      h('div', { className: 'krot-foot' },
             btn(t('addKey'), () => addKey(pIndex), { title: t('addKeyTitle') }),
             switchesLine,
             budgetLine,
@@ -1710,7 +1715,72 @@ window.__ModuleLoader__.load({
       // Collapsible card in Settings -> Plugins -> Plugin settings
       // (settings.plugin.item), matching Model Sync / Spendmeter / Vision Bridge.
       // key MUST equal the settings namespace (NS), else the tab silently skips it.
-      function KeyRotationCard(props) {
+      
+  function UpdaterSection({ t }) {
+    const [state, setState] = React.useState({ phase: 'idle', current: '', latest: '', message: '' });
+    const load = React.useCallback(async () => {
+      setState((s) => ({ ...s, phase: 'loading', message: '' }));
+      try {
+        const res = await fetch('/api/dsh-key-rotation/update', { headers: { 'x-dsh-plugin-update': '1' } });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data?.error?.message || t('updateFailed'));
+        setState({
+          phase: data.updateAvailable ? 'available' : 'current',
+          current: data.currentVersion || '',
+          latest: data.latestVersion || '',
+          message: data.updateAvailable ? t('updateAvailable') : t('updateNone'),
+        });
+      } catch (e) {
+        setState({ phase: 'error', current: '', latest: '', message: e?.message || t('updateFailed') });
+      }
+    }, [t]);
+    React.useEffect(() => { load(); }, [load]);
+    const run = async () => {
+      setState((s) => ({ ...s, phase: 'running', message: t('updateRunning') }));
+      try {
+        const res = await fetch('/api/dsh-key-rotation/update', {
+          method: 'POST',
+          headers: { 'x-dsh-plugin-update': '1', 'content-type': 'application/json' },
+        });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data?.error?.message || t('updateFailed'));
+        setState({
+          phase: 'done',
+          current: data.currentVersion || '',
+          latest: data.installedVersion || data.latestVersion || '',
+          message: t('updateRestart'),
+        });
+      } catch (e) {
+        setState({ phase: 'error', current: '', latest: '', message: e?.message || t('updateFailed') });
+      }
+    };
+    return h('div', { className: 'krot-update', style: { marginTop: 12, paddingTop: 12, borderTop: '1px solid var(--dsw-alias-border-l2)' } },
+      h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
+        h('span', { style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary)' } },
+          t('currentVersion') + ': ' + (state.current || '—')),
+        state.latest ? h('span', { style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary)' } },
+          t('latestVersion') + ': ' + state.latest) : null,
+        h('button', {
+          className: 'krot-btn',
+          type: 'button',
+          disabled: state.phase === 'running' || state.phase === 'loading',
+          onClick: load,
+        }, t('updateCheck')),
+        state.phase === 'available' ? h('button', {
+          className: 'krot-btn krot-btn-primary',
+          type: 'button',
+          disabled: state.phase === 'running',
+          onClick: run,
+        }, t('updateRun')) : null,
+      ),
+      state.message ? h('div', {
+        className: state.phase === 'error' ? 'krot-alert-bad' : state.phase === 'done' ? 'krot-alert-ok' : '',
+        style: { marginTop: 8, fontSize: 12 },
+      }, state.message) : null,
+    );
+  }
+
+  function KeyRotationCard(props) {
         const locale = useLocale();
         const t = resolveT(props);
         const [open, setOpen] = React.useState(false);
@@ -1733,11 +1803,31 @@ window.__ModuleLoader__.load({
             KeyRotationCard,
           ));
       } catch (e) {
-        try { console.error('[dsh-key-rotation] settings.plugin.item register failed', e); } catch (_) {}
+        bestEffort('slots.register.log', () => { console.error('[dsh-key-rotation] settings.plugin.item register failed', e); });
       }
     }
 
     module.exports = { apply, inject: ['slots', 'locale', 'settingsScope'] };
     return module.exports;
   },
+    updateCheck: 'Check for updates',
+    updateAvailable: 'Update available',
+    updateNone: 'Plugin is up to date',
+    updateRun: 'Update now',
+    updateRestart: 'Update installed. Restart DSH to load the new version.',
+    updateRunning: 'Updating…',
+    updateFailed: 'Update failed',
+    currentVersion: 'Current version',
+    latestVersion: 'Latest version',
+
+    updateCheck: '检查更新',
+    updateAvailable: '有可用更新',
+    updateNone: '插件已是最新版本',
+    updateRun: '立即更新',
+    updateRestart: '更新已安装。请重启 DSH 以加载新版本。',
+    updateRunning: '更新中…',
+    updateFailed: '更新失败',
+    currentVersion: '当前版本',
+    latestVersion: '最新版本',
+
 });

package/lib/clock.js

@@ -20,5 +20,3 @@ export function nowMono() {
   return performance.timeOrigin + performance.now();
 }
 
-/** Default clock injectable into pure helpers. */
-export const defaultClock = { nowWall, nowMono };

package/lib/error-taxonomy.js

@@ -61,6 +61,3 @@ export function classifyFailure(failureOrPayload) {
 }
 
 /** True when classification says switch to next key. */
-export function shouldSwitch(failureOrPayload) {
-  return classifyFailure(failureOrPayload).action === 'switch';
-}

package/lib/http-bridge.js

@@ -78,13 +78,6 @@ export function providerCatalog(ctx, cloneIds) {
   return out;
 }
 
-export function guardLocal(req, res, label) {
-  if (!isTrustedBridgeRequest(req)) {
-    json(res, 403, { error: { code: 'forbidden', message: `dsh-key-rotation: ${label} is local-only` } });
-    return false;
-  }
-  return true;
-}
 
 export function scanForLiveSecrets(section) {
   const masked = structuredClone(section);

package/lib/index.js

@@ -52,6 +52,7 @@ import { safeParseJson } from './atomic-io.js';
 import { registerOpsRoutes } from './routes-ops.js';
 import { StatePersistence, resolveStatePath } from './persistence.js';
 import path from 'node:path';
+import { registerPluginUpdater } from './plugin-updater.js'
 
 /** The llm-pi-ai namespace whose provider profiles map providers to pools. */
 const PIAI_NS = 'llm-pi-ai';
@@ -362,14 +363,17 @@ export function apply(ctx, config = {}) {
           if (!val) return { ok: false };
           return runner.probeModels(ref, val);
         });
-      } catch (_) {}
+      } catch (e) { ctx.logger?.warn?.('[dsh-key-rotation] auto-unbreak failed', e); }
     }, intervalMs);
     if (typeof timer.unref === 'function') timer.unref();
     return () => clearInterval(timer);
   }, 'dsh-key-rotation: auto-unbreak');
 
   ctx.effect(() => {
-    const timer = setInterval(() => { try { schedulePersist(); } catch (_) {} }, 15000);
+    const timer = setInterval(() => {
+      try { schedulePersist(); }
+      catch (e) { ctx.logger?.warn?.('[dsh-key-rotation] periodic persist failed', e); }
+    }, 15000);
     if (typeof timer.unref === 'function') timer.unref();
     return () => {
       clearInterval(timer);
@@ -383,7 +387,9 @@ export function apply(ctx, config = {}) {
           }
           statePersistence.dispose();
         }
-      } catch (_) {}
+      } catch (e) {
+        ctx.logger?.warn?.('[dsh-key-rotation] dispose persist failed', e);
+      }
     };
   }, 'dsh-key-rotation: state persistence');
   // Periodic sweep of expired cooldowns — keeps health probe cheap and avoids waiting for next user request
@@ -857,6 +863,7 @@ export function apply(ctx, config = {}) {
   // the resolve patch hands out the next key on each dispatch.
   // Operational routes (status/usage/snapshot/key/import/test/health/webhook) (#253)
   registerOpsRoutes(ctx, {
+
     buildRuntime,
     latencyHistogram,
     lastTestCache,
@@ -868,6 +875,16 @@ export function apply(ctx, config = {}) {
     quotaStore,
   });
 
+  // One-click plugin updater (#307). GET status / POST install exact registry version.
+  ctx.effect(() => {
+    if (typeof ctx.webServer?.register !== 'function') return;
+    registerPluginUpdater(ctx, {
+      endpoint: '/api/dsh-key-rotation/update',
+      packageName: '@goodandready/dsh-key-rotation',
+      manifestUrl: new URL('../package.json', import.meta.url),
+    });
+  }, 'dsh-key-rotation: plugin updater');
+
   ctx.effect(() => ctx.on('llm/stream', (options, next) => {
     if (options[MARKER]) return next();
     if (rotationDisabled) return next(); // #199: disabled via webhook action

package/lib/plugin-updater.js

@@ -0,0 +1,277 @@
+import { spawn } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { basename, dirname, isAbsolute, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+/**
+ * Host-side one-click updater for a DSH Web plugin.
+ *
+ * Mount from apply():
+ *
+ * registerPluginUpdater(ctx, {
+ *   endpoint: '/dsh-key-rotation/update',
+ *   packageName: '@goodandready/dsh-key-rotation',
+ *   manifestUrl: new URL('../package.json', import.meta.url),
+ * })
+ *
+ * GET returns status. POST is accepted only from the local same-origin UI and
+ * installs the exact registry version through the normal DSH CLI.
+ */
+
+const UPDATE_HEADER = 'x-dsh-plugin-update'
+const UPDATE_TIMEOUT_MS = 10 * 60_000
+const VERSION_CACHE_MS = 5 * 60_000
+let latestCache
+
+function header(request, name) {
+  const value = request.headers?.[name]
+  return Array.isArray(value) ? value[0] : value
+}
+
+function isLoopback(value) {
+  const address = value?.toLowerCase().replace(/^\[|\]$/g, '')
+  return address === 'localhost' || address === 'localhost.' || address === '::1'
+    || address?.startsWith('127.') === true
+    || address?.startsWith('::ffff:127.') === true
+}
+
+export function isTrustedUpdateRequest(request) {
+  if (header(request, UPDATE_HEADER) !== '1') return false
+  if (!isLoopback(request.socket?.remoteAddress)) return false
+  const site = header(request, 'sec-fetch-site')
+  if (site !== undefined && site !== 'same-origin') return false
+  const origin = header(request, 'origin')
+  const host = header(request, 'host')
+  if (origin === undefined || host === undefined) return false
+  try {
+    const url = new URL(origin)
+    return (url.protocol === 'http:' || url.protocol === 'https:')
+      && isLoopback(url.hostname) && url.host === host
+  } catch {
+    return false
+  }
+}
+
+function validProfileName(value) {
+  return typeof value === 'string' && value !== '' && value !== '.' && value !== '..'
+    && !value.includes('/') && !value.includes('\\') && !/[\0-\x1f\x7f]/.test(value)
+}
+
+function profileNameFromArgv(argv) {
+  for (let index = 2; index < argv.length; index += 1) {
+    if (argv[index] === '--profile') return argv[index + 1]
+    if (argv[index]?.startsWith('--profile=')) return argv[index].slice('--profile='.length)
+  }
+  return argv[2] === 'web' ? 'web' : undefined
+}
+
+function findDshCliEntry() {
+  const value = process.argv[1]
+  if (value === undefined || value === '') return undefined
+  const entry = value.startsWith('file:') ? fileURLToPath(value) : resolve(process.cwd(), value)
+  if (!existsSync(entry)) return undefined
+  for (let directory = dirname(entry); ; directory = dirname(directory)) {
+    const manifestPath = resolve(directory, 'package.json')
+    if (existsSync(manifestPath)) {
+      try {
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'))
+        const bin = typeof manifest.bin === 'string'
+          ? manifest.bin
+          : typeof manifest.bin === 'object' && manifest.bin !== null
+            ? manifest.bin.dsh
+            : undefined
+        if (manifest.name === '@deepseek-ai/dsh' && typeof bin === 'string'
+          && !isAbsolute(bin) && resolve(directory, bin) === resolve(entry)) return entry
+      } catch {
+        // Continue searching parent package directories.
+      }
+    }
+    const parent = dirname(directory)
+    if (parent === directory) return undefined
+  }
+}
+
+function runtime() {
+  const profileDir = resolve(process.env.DSH_PROFILE_DIR
+    ?? resolve(homedir(), '.dsh', 'profiles', 'web'))
+  const selected = profileNameFromArgv(process.argv)
+  const profileName = validProfileName(selected)
+    ? selected
+    : validProfileName(basename(profileDir)) ? basename(profileDir) : 'web'
+  const cliEntry = findDshCliEntry()
+  return cliEntry === undefined ? { profileName, profileDir } : { profileName, profileDir, cliEntry }
+}
+
+function parseSemver(value) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(value)
+  if (match === null) return undefined
+  return {
+    core: [Number(match[1]), Number(match[2]), Number(match[3])],
+    prerelease: match[4]?.split('.') ?? [],
+  }
+}
+
+function comparePrerelease(left, right) {
+  if (left.length === 0 || right.length === 0) return left.length === right.length ? 0 : left.length === 0 ? 1 : -1
+  const length = Math.max(left.length, right.length)
+  for (let index = 0; index < length; index += 1) {
+    const a = left[index]
+    const b = right[index]
+    if (a === undefined || b === undefined) return a === b ? 0 : a === undefined ? -1 : 1
+    if (a === b) continue
+    const aNumeric = /^\d+$/.test(a)
+    const bNumeric = /^\d+$/.test(b)
+    if (aNumeric && bNumeric) {
+      const aNumber = BigInt(a)
+      const bNumber = BigInt(b)
+      if (aNumber !== bNumber) return aNumber > bNumber ? 1 : -1
+      continue
+    }
+    if (aNumeric !== bNumeric) return aNumeric ? -1 : 1
+    return a > b ? 1 : -1
+  }
+  return 0
+}
+
+export function isNewerVersion(currentValue, candidateValue) {
+  const current = parseSemver(currentValue)
+  const candidate = parseSemver(candidateValue)
+  if (current === undefined || candidate === undefined) return false
+  for (let index = 0; index < 3; index += 1) {
+    if (candidate.core[index] !== current.core[index]) return candidate.core[index] > current.core[index]
+  }
+  return comparePrerelease(candidate.prerelease, current.prerelease) > 0
+}
+
+async function latestVersion(packageName, registry) {
+  if (latestCache?.packageName === packageName && latestCache.registry === registry && Date.now() < latestCache.expiresAt) return latestCache.version
+  try {
+    const response = await fetch(`${registry.replace(/\/$/, '')}/${encodeURIComponent(packageName)}/latest`, {
+      signal: AbortSignal.timeout(8_000),
+    })
+    if (!response.ok) return undefined
+    const value = await response.json()
+    if (typeof value.version !== 'string' || value.version === '') return undefined
+    latestCache = { packageName, registry, version: value.version, expiresAt: Date.now() + VERSION_CACHE_MS }
+    return value.version
+  } catch {
+    return undefined
+  }
+}
+
+async function currentVersion(manifestUrl) {
+  const value = JSON.parse(await readFile(manifestUrl, 'utf8'))
+  if (typeof value.version !== 'string' || value.version === '') throw new Error('Cannot read current plugin version.')
+  return value.version
+}
+
+async function status(options, target) {
+  const current = await currentVersion(options.manifestUrl)
+  const latest = await latestVersion(options.packageName, options.registry ?? 'https://registry.npmjs.org')
+  return {
+    packageName: options.packageName,
+    currentVersion: current,
+    ...(latest === undefined ? {} : { latestVersion: latest }),
+    latestCheckFailed: latest === undefined,
+    updateAvailable: latest !== undefined && isNewerVersion(current, latest),
+    profileName: target.profileName,
+    canAutoUpdate: target.cliEntry !== undefined,
+  }
+}
+
+async function installExact(target, packageSpec, options) {
+  if (target.cliEntry === undefined) throw new Error('Automatic update is unavailable in this runtime.')
+  await new Promise((resolvePromise, reject) => {
+    const child = spawn(process.execPath, [
+      target.cliEntry, 'plugin', '--profile', target.profileName, 'add',
+      '--config.minimumReleaseAge=0', packageSpec,
+      `--registry=${options.registry ?? 'https://registry.npmjs.org/'}`,
+    ], {
+      cwd: target.profileDir,
+      windowsHide: true,
+      stdio: ['ignore', 'pipe', 'pipe'],
+      env: { ...process.env, NO_COLOR: '1' },
+    })
+    let detail = ''
+    child.stdout?.on('data', chunk => { detail = (detail + String(chunk)).slice(-4_000) })
+    child.stderr?.on('data', chunk => { detail = (detail + String(chunk)).slice(-4_000) })
+    const timer = setTimeout(() => {
+      child.kill()
+      reject(new Error('Update timed out; use the normal DSH update flow.'))
+    }, UPDATE_TIMEOUT_MS)
+    child.once('error', error => { clearTimeout(timer); reject(error) })
+    child.once('exit', code => {
+      clearTimeout(timer)
+      if (code === 0) resolvePromise()
+      else reject(new Error(detail.trim() || `Update exited with code ${String(code)}.`))
+    })
+  })
+}
+
+function json(response, statusCode, value) {
+  response.writeHead(statusCode, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+  })
+  response.end(JSON.stringify(value))
+}
+
+export function registerPluginUpdater(ctx, options) {
+  let installing = false
+  return ctx.webServer.register({
+    kind: 'exact',
+    path: options.endpoint,
+    handler: async (request, response) => {
+      try {
+        const target = runtime()
+        if (request.method === 'GET' || request.method === 'HEAD') {
+          const payload = await status(options, target)
+          response.writeHead(200, {
+            'content-type': 'application/json; charset=utf-8',
+            'cache-control': 'no-store',
+          })
+          response.end(request.method === 'HEAD' ? undefined : JSON.stringify(payload))
+          return
+        }
+        if (request.method !== 'POST') {
+          response.writeHead(405, { allow: 'GET, HEAD, POST' })
+          response.end()
+          return
+        }
+        if (!isTrustedUpdateRequest(request)) {
+          json(response, 403, { error: 'Rejected non-local or cross-origin update request.' })
+          return
+        }
+        if (installing) {
+          json(response, 409, { error: 'This plugin is already updating.' })
+          return
+        }
+        installing = true
+        try {
+          const before = await status(options, target)
+          if (before.latestVersion === undefined) {
+            json(response, 503, { error: 'The latest version is temporarily unavailable.' })
+            return
+          }
+          if (!before.updateAvailable) {
+            json(response, 200, before)
+            return
+          }
+          await installExact(target, `${options.packageName}@${before.latestVersion}`, options)
+          json(response, 200, {
+            ...before,
+            updatedVersion: before.latestVersion,
+            restartRequired: true,
+          })
+        } finally {
+          installing = false
+        }
+      } catch (error) {
+        ctx.logger?.warn?.(`plugin updater failed: ${String(error)}`)
+        json(response, 503, { error: 'Plugin update failed; see server logs.' })
+      }
+    },
+  })
+}

package/lib/pool.js

@@ -1,3 +1,4 @@
+import { bestEffort } from './best-effort.js';
 // lib/pool.js — pure pool arithmetic and selection logic for dsh-key-rotation.
 // Isolated from cordis/dsh runtime so unit tests run in vanilla Node.js.
 
@@ -71,11 +72,6 @@ export const SOFT_FAILURE_CODES = new Set([
 ]);
 
 /** True if failure code or message represents a soft/transient drop. */
-export function isSoftFailure(code, message = '') {
-  if (code && SOFT_FAILURE_CODES.has(String(code).toUpperCase())) return true;
-  if (/502|503|504|timeout|econnreset|econnrefused|socket hang up/i.test(message)) return true;
-  return false;
-}
 
 /** Ref name validator. Same rule lib/index.js enforces in PUT/DELETE /key. */
 const REF_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
@@ -469,7 +465,7 @@ export function budgetVerdict(spend, budget) {
 /** Safely reset a provider's circuit breaker to closed state. */
 export function resetCircuitForProvider(circuitBreaker, provider) {
   if (!circuitBreaker || !provider) return false;
-  try {
+  const ok = bestEffort('resetCircuitForProvider', () => {
     if (typeof circuitBreaker.reset === 'function') {
       circuitBreaker.reset(provider);
       return true;
@@ -478,6 +474,7 @@ export function resetCircuitForProvider(circuitBreaker, provider) {
       circuitBreaker.onSuccess(provider);
       return true;
     }
-  } catch (_) {}
-  return false;
+    return false;
+  });
+  return ok === true;
 }

package/lib/routes-ops.js

@@ -24,6 +24,7 @@ import { findSecrets, looksLikeApiSecret } from './keycheck.js';
 import { nextQuotaReset } from './quota-window.js';
 import { classifyFailure } from './error-taxonomy.js';
 import { sanitizeSnapshot } from './sanitize-snapshot.js';
+import { bestEffort } from './best-effort.js';
 
 const STATUS_PATH = '/dsh-key-rotation/status';
 const SNAPSHOT_PATH = '/dsh-key-rotation/snapshot';
@@ -316,7 +317,7 @@ export function registerOpsRoutes(ctx, deps) {
             st.brokenUntil?.delete(ref);
             if (st.lastUsed === ref) st.lastUsed = undefined;
           }
-          try { lastTestCache?.delete?.(ref); } catch (_) {}
+          bestEffort('lastTestCache.delete', () => { lastTestCache?.delete?.(ref); }, ctx.logger);
           json(res, 200, { ok: true, ref });
           return;
         }
@@ -482,7 +483,7 @@ export function registerOpsRoutes(ctx, deps) {
         const valid = present ? Boolean(effectiveValue && typeof effectiveValue === 'string' && effectiveValue.length > 0) : Boolean(testValue);
         const tail = valid ? keyTail(effectiveValue) : '';
         let source = null;
-        try { const d = await base?.describe?.(ref); source = d?.source ?? null; } catch {}
+        await bestEffort('credentials.describe', async () => { const d = await base?.describe?.(ref); source = d?.source ?? null; }, ctx.logger);
         if (!present && !testValue) { json(res, 200, { ok: false, ref, code: 'no-credential', message: 'no such credential' }); return; }
         if (!present && testValue) { source = 'pre-save'; }
         else if (!present) {

package/lib/webhook.js

@@ -1,3 +1,4 @@
+import { bestEffort } from './best-effort.js';
 // lib/webhook.js — webhook sender with throttle, interactive actions + alert digest debouncer (#199, #10).
 export const WEBHOOK_TIMEOUT_MS = 5000;
 export const WEBHOOK_MIN_INTERVAL_MS = 1000;
@@ -187,7 +188,7 @@ export class AlertDebouncer {
 
     const res = await this._sender.send(url, payload);
     for (const cb of entry.callbacks) {
-      try { cb(res); } catch (_) {}
+      bestEffort('webhook.callback', () => { cb(res); }, this._logger);
     }
     return res;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-key-rotation",
-  "version": "0.8.10",
+  "version": "0.8.11",
   "packageManager": "pnpm@10.33.2",
   "description": "Per-provider API key rotation for DeepSeek Harness: a key pool per provider, auto-created clone routes, and switching to the next key on quota/rate-limit errors. Includes a Settings section (Key Rotation) to edit the key pools, cooldown and switch codes.",
   "keywords": [
@@ -41,7 +41,10 @@
     },
     "client": {
       "platform": "web",
-      "inject": []
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
     }
   },
   "license": "MIT",