@mrrisega/dsh-remote 0.4.1 → 0.4.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrisega/dsh-remote",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "手机远程控制 DeepSeek Harness · Remote control DeepSeek Harness (dsh web) from any phone browser — 100% 全功能 App 级体验：发消息、看工具执行、审批权限、改设置、管凭据，含特权操作，免内网穿透。一条命令安装 npx @mrrisega/dsh-remote。Mobile remote control for DSH, self-host or SaaS, no server needed on LAN.",
   "keywords": [
     "deepseek-harness",

package/packages/dsh-remote-ui/lib/client.js

@@ -124,6 +124,11 @@ window.__ModuleLoader__.load({
       ".dru-popup-foot button{border:none;background:none;color:#57606a;cursor:pointer;font-size:12px;font-family:inherit;padding:4px 6px}",
       ".dru-popup-foot button:hover{color:#0969da}",
       ".dru-popup .dru-msg{text-align:left}",
+      // ── 自管理：版本与更新（插件面板内提供在线更新/彻底卸载，市场无更新按钮） ──
+      ".dru-ver-badge{display:inline-block;font-size:11px;border-radius:999px;padding:1px 8px;margin-left:6px;vertical-align:1px}",
+      ".dru-ver-badge-new{color:#9a6700;background:#fff8c5;border:1px solid #eed888}",
+      ".dru-ver-badge-ok{color:#1a7f37;background:#dafbe1;border:1px solid #aceebb}",
+      ".dru-up-log{margin-top:8px;background:#0d1117;color:#e6edf3;border-radius:8px;padding:8px 10px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11.5px;line-height:1.5;white-space:pre-wrap;word-break:break-word;max-height:150px;overflow:auto}",
     ].join("\n");
     document.head.appendChild(styleEl);
 
@@ -607,6 +612,161 @@ window.__ModuleLoader__.load({
     // 通用「远程控制」图标（🖥 风格 emoji，与面板内既有 emoji 图标体系一致）：
     // 栏目导航 label 与栏目头部均使用它。原侧边栏入口（电源图标按钮）已随入口迁移移除。
 
+    // ── 版本与更新卡片（自管理：市场没有更新按钮，这里提供在线一键更新/彻底卸载） ──
+    // 数据来自 node 半新增的 /dsh-remote/self* 路由；逻辑均在插件 node 半实现，
+    // 因此无论插件从「插件市场」还是 npx 安装，界面与行为完全一致。
+    function SelfManageCard() {
+      var verArr = useState(null); var ver = verArr[0]; var setVer = verArr[1];       // {version, runtimeReady}
+      var chkArr = useState(null); var chk = chkArr[0]; var setChk = chkArr[1];       // {current, latest, outdated}
+      var chkBusyArr = useState(false); var chkBusy = chkBusyArr[0]; var setChkBusy = chkBusyArr[1];
+      var upBusyArr = useState(false); var upBusy = upBusyArr[0]; var setUpBusy = upBusyArr[1];
+      var unBusyArr = useState(false); var unBusy = unBusyArr[0]; var setUnBusy = unBusyArr[1];
+      var logArr = useState(""); var log = logArr[0]; var setLog = logArr[1];         // 更新日志尾部
+      var updArr = useState(false); var updating = updArr[0]; var setUpdating = updArr[1]; // 更新任务是否仍在跑
+      var doneArr = useState(false); var updated = doneArr[0]; var setUpdated = doneArr[1]; // 本轮已更新完成（提示重启）
+      var armArr = useState(false); var armed = armArr[0]; var setArmed = armArr[1];   // 彻底卸载二次确认
+      var msgArr = useState(null); var selfMsg = msgArr[0]; var setSelfMsg = msgArr[1]; // {kind, text}
+
+      var loadVer = useCallback(function () {
+        api("/dsh-remote/self").then(function (b) {
+          if (b && b.ok) setVer(b);
+        }).catch(function () {});
+      }, []);
+
+      var doCheck = useCallback(function () {
+        setChkBusy(true);
+        api("/dsh-remote/self/update-check").then(function (b) {
+          if (b && b.ok) setChk(b);
+          else setSelfMsg({ kind: "err", text: "检查更新失败：" + ((b && (b.error || b.detail)) || "未知错误") });
+        }).catch(function (e) {
+          setSelfMsg({ kind: "err", text: "无法连接更新服务：" + e.message });
+        }).finally(function () { setChkBusy(false); });
+      }, []);
+
+      // 轮询更新日志：点击一键更新后，每 2s 拉一次日志；直到 running=false 视为完成
+      var logTimer = useCallback(function (force) {
+        if (!force && updating) return;
+        api("/dsh-remote/self/update-log").then(function (b) {
+          if (b && b.ok) {
+            setLog(b.log || "");
+            if (!b.running) {
+              setUpdating(false);
+              setUpdated(true);
+              loadVer();
+              return;
+            }
+          }
+          setUpdating(true);
+        }).catch(function () { setUpdating(false); });
+      }, [updating, loadVer]);
+
+      useEffect(function () { loadVer(); doCheck(); }, [loadVer, doCheck]);
+      useEffect(function () {
+        if (!updating) return;
+        var iv = setInterval(function () {
+          api("/dsh-remote/self/update-log").then(function (b) {
+            if (!b || !b.ok) return;
+            setLog(b.log || "");
+            if (!b.running) {
+              clearInterval(iv);
+              setUpdating(false);
+              setUpdated(true);
+              loadVer();
+              doCheck();
+            }
+          }).catch(function () {});
+        }, 2000);
+        return function () { clearInterval(iv); };
+      }, [updating, loadVer, doCheck]);
+
+      var doUpdate = function () {
+        setUpBusy(true);
+        setUpdated(false);
+        setSelfMsg(null);
+        post("/dsh-remote/self/update", {}).then(function (b) {
+          if (b && b.ok) {
+            setSelfMsg({ kind: "ok", text: "更新已在后台开始，正在下载安装…（本页会实时显示进度日志）" });
+            setUpdating(true);
+            logTimer(true);
+          } else {
+            var detail = String((b && (b.detail || b.error)) || "更新启动失败");
+            // 另一种常见情况：node 半返回 ok:false + “已有更新在进行中” → 转为跟踪进度而非报错
+            api("/dsh-remote/self/update-log").then(function (lb) {
+              if (lb && lb.ok && lb.running) {
+                setSelfMsg({ kind: "ok", text: "检测到已有一次更新正在进行，正在跟踪进度…" });
+                setUpdating(true);
+                logTimer(true);
+              } else {
+                setSelfMsg({ kind: "err", text: detail });
+              }
+            }).catch(function () { setSelfMsg({ kind: "err", text: detail }); });
+          }
+        }).catch(function (e) {
+          setSelfMsg({ kind: "err", text: "更新失败：" + e.message });
+        }).finally(function () { setUpBusy(false); });
+      };
+
+      var doUninstall = function () {
+        if (!armed) { setArmed(true); return; }
+        setUnBusy(true);
+        setSelfMsg(null);
+        post("/dsh-remote/self/uninstall", {}).then(function (b) {
+          if (b && b.ok) {
+            setArmed(false);
+            setSelfMsg({ kind: "ok", text: "已移除插件引用与本地文件。请重启 dsh web：插件将完全卸载（本栏目也会消失）。之后如需重新安装，直接在插件市场再次安装即可。" });
+          } else {
+            setArmed(false);
+            setSelfMsg({ kind: "err", text: "卸载失败：" + ((b && (b.error || b.detail)) || "未知错误") });
+          }
+        }).catch(function (e) {
+          setArmed(false);
+          setSelfMsg({ kind: "err", text: "卸载失败：" + e.message });
+        }).finally(function () { setUnBusy(false); });
+      };
+
+      var outdated = !!(chk && chk.outdated && chk.latest && chk.latest !== chk.current);
+      var currentV = (ver && ver.version) || (chk && chk.current) || "…";
+      var runtimeReady = ver ? !!ver.runtimeReady : null;
+
+      return h("div", { className: "dru-card", style: { marginTop: 2 } },
+        h("h3", null, "🔄 版本与更新"),
+        h("div", { className: "dru-status-line" },
+          h("span", null, "插件版本 v" + currentV),
+          chk === null && chkBusy ? h("span", { className: "dru-meta", style: { margin: 0 } }, "（检查新版本中…）") : null,
+          chk && outdated
+            ? h("span", { className: "dru-ver-badge dru-ver-badge-new" }, "发现新版本 v" + chk.latest)
+            : chk && !outdated ? h("span", { className: "dru-ver-badge dru-ver-badge-ok" }, "已是最新版本") : null
+        ),
+        h("div", { className: "dru-meta" },
+          runtimeReady === false ? "⚠ 桌面运行环境缺失（点击下方「一键更新」会自动补全并启动）" : runtimeReady === true ? "桌面运行环境正常" : "读取运行环境中…"
+        ),
+        h("div", { className: "dru-actions", style: { marginTop: 10 } },
+          outdated
+            ? h("button", { type: "button", className: "dru-btn dru-btn-primary", disabled: upBusy || unBusy || chkBusy || updating, onClick: doUpdate },
+                upBusy ? "更新启动中…" : updating ? "正在更新…" : "一键更新到 v" + chk.latest)
+            : h("button", { type: "button", className: "dru-btn dru-btn-ghost", disabled: upBusy || unBusy || chkBusy || updating, onClick: doUpdate },
+                updating ? "正在更新…" : (ver && !ver.runtimeReady) ? "安装并启动（一键修复）" : "重新检查 / 修复"),
+          h("button", { type: "button", className: "dru-btn dru-btn-ghost", disabled: chkBusy || updating || upBusy, onClick: doCheck }, chkBusy ? "检查中…" : "检查更新"),
+          h("button", {
+            type: "button",
+            className: "dru-btn dru-btn-danger",
+            style: { marginLeft: "auto" },
+            disabled: unBusy || updating || upBusy,
+            onClick: doUninstall
+          }, unBusy ? "卸载中…" : armed ? "⚠ 再点一次确认彻底卸载" : "彻底卸载")
+        ),
+        updated
+          ? h("div", { className: "dru-msg dru-msg-ok" },
+              "✅ 更新已完成，最新代码已就位。请", h("strong", null, "重启 dsh web"), "后生效；桌面 bridge 会随系统自启自动运行新版本。")
+          : null,
+        log ? h("div", { className: "dru-up-log", title: "更新日志（尾部）" }, log) : null,
+        selfMsg ? h("div", { className: "dru-msg dru-msg-" + selfMsg.kind }, selfMsg.text) : null,
+        h("div", { className: "dru-hint", style: { marginTop: 8 } },
+          armed ? "卸载会移除插件引用与本地文件；远程控制用的桌面 bridge 与数据目录保留，可随时重新安装。" :
+            "插件市场没有更新/卸载按钮（dsh 官方市场暂不提供），本卡片即官方管理入口：检测新版、一键在线更新、彻底卸载都在这里完成。")
+      );
+    }
+
     // ── 面板主体（渲染于设置页 settings.section 栏目内） ─────────────────────
     function RemoteControlSection(props) {
 
@@ -1023,6 +1183,8 @@ window.__ModuleLoader__.load({
             h("div", { className: "dru-hint", style: { marginBottom: 6 } }, "③ 也可以自建：项目完全开源，有服务器可自行部署，流量走自己的服务器，闭环自控。"),
             h("div", { className: "dru-hint" }, "④ 一句话总结：简单省心用 SaaS，技术玩家可自建。")
           ]),
+          // 版本与更新（自管理：检测新版 / 一键在线更新 / 彻底卸载）
+          h(SelfManageCard, null),
           message && h("div", { className: "dru-msg dru-msg-" + message.kind }, message.text)
         );
       }

package/packages/dsh-remote-ui/lib/index.js

@@ -4,12 +4,17 @@
 //   - 读写 dsh-remote-open/.dsh-config.json（0600）
 //   - 查询/启停 bridge（launchctl，plist 缺失时自动生成，逻辑与 dsh-setup.mjs 一致）
 //   - 代理 relay API（captcha / register / login / public-config），直连、不走系统代理
+//   - 自管理 self*（版本可见 / 新版检测 / 一键在线更新 / 彻底卸载）：插件市场没有更新卸载按钮，
+//     面板内即官方管理入口；更新=后台 npx @mrrisega/dsh-remote@latest（幂等补齐运行环境并重启 bridge）
+//   - 运行时自愈：缺运行环境自动后台安装、登录后自动拉起 bridge（0.4.2 起）
+//   - 0.1.2+ ?token 浏览器鉴权会话代持（0.4.1 起）
 //
 // 不依赖任何第三方包：只使用 node 内置模块与 cordis 注入的 webServer 服务。
-import { readFileSync, writeFileSync, mkdirSync, existsSync, realpathSync, accessSync, chmodSync, constants as fsConstants } from "node:fs";
+import { readFileSync, writeFileSync, mkdirSync, existsSync, realpathSync, accessSync, chmodSync, openSync, closeSync, rmSync, constants as fsConstants } from "node:fs";
 import { join, dirname } from "node:path";
-import { execSync } from "node:child_process";
+import { execSync, spawn } from "node:child_process";
 import { homedir, hostname, platform } from "node:os";
+import { fileURLToPath } from "node:url";
 
 /** 本插件在 host 侧的服务依赖。 */
 export const inject = ["webServer"];
@@ -250,6 +255,74 @@ function manualStatus() {
   return { watcher, bridge };
 }
 
+// ---------- 插件市场一键全功能：缺桌面运行环境时自动后台安装 dsh-remote ----------
+
+const PROVISION_MARKER = ".dsh-setup-installing";
+const AUTO_INSTALL_LOG = ".dsh-setup-install.log";
+const STALE_MARKER_MS = 30 * 60 * 1000; // 超过该时长视为上次进程残留，插件启动时清理
+
+/** 向日志追加一行（多个子进程写同一日志用 append 模式，互不覆盖）。 */
+function appendLogLine(relayDir, name, line) {
+  try {
+    const fd = openSync(join(relayDir, name), "a");
+    try {
+      writeFileSync(fd, `\n${line}\n`);
+    } finally {
+      closeSync(fd);
+    }
+  } catch { /* 非关键 */ }
+}
+
+/**
+ * 清理“进程残留”标记：dsh web 在后台安装/更新期间被重启/强杀时，
+ * 子进程的清理回调会随宿主进程一起丢失，marker 会永久卡住后续安装/更新。
+ * 插件每次启动时把超时的 marker 清掉（内容=创建时间戳）。
+ */
+function sweepStaleMarkers(relayDir) {
+  const now = Date.now();
+  for (const name of [PROVISION_MARKER, UPDATE_MARKER]) {
+    const p = join(relayDir, name);
+    try {
+      const t = Number((readFileSync(p, "utf8") || "0").trim());
+      if (Number.isFinite(t) && t > 0 && now - t > STALE_MARKER_MS) {
+        rmSync(p, { force: true });
+        appendLogLine(relayDir, AUTO_INSTALL_LOG, `[dsh-remote-ui] 清理残留标记 ${name}（${new Date(t).toISOString()} 创建，已超时）`);
+      }
+    } catch { /* 无文件等 → 忽略 */ }
+  }
+}
+
+/** 插件市场只装了 UI 插件;若桌面缺 dsh-remote 运行环境(dsh-setup.mjs=bridge/自启动),
+ * 由插件在后台自动执行一次 `npx @mrrisega/dsh-remote` 补齐,用户无需手动跑命令。
+ * 已有环境(包括手动 npx 装过)直接跳过。返回 true=已就绪。 */
+function ensureRuntime(relayDir) {
+  if (existsSync(join(relayDir, "dsh-setup.mjs"))) return true;
+  const marker = join(relayDir, PROVISION_MARKER);
+  if (existsSync(marker)) return false; // 正在安装中
+  try {
+    mkdirSync(relayDir, { recursive: true });
+    writeFileSync(marker, String(Date.now()), { mode: 0o600 });
+    const log = join(relayDir, AUTO_INSTALL_LOG);
+    const npx = process.platform === "win32" ? "npx.cmd" : "npx";
+    const child = spawn(npx, ["--yes", "@mrrisega/dsh-remote"], {
+      detached: true,
+      stdio: ["ignore", openSync(log, "a"), openSync(log, "a")]
+    });
+    child.on("exit", (code) => {
+      // 安装结束即移除 marker（无论成败，失败由下一轮 scheduleRuntime 重试）
+      try { rmSync(marker, { force: true }); } catch { /* ignore */ }
+      appendLogLine(relayDir, AUTO_INSTALL_LOG, `[auto-install] npx 退出 code=${code ?? "?"}`);
+    });
+    child.unref();
+    console.log(`[dsh-remote-ui] 检测到缺少桌面运行环境,已在后台自动安装(日志: ${log}),完成后将自动启动 bridge`);
+    return false;
+  } catch (e) {
+    console.warn(`[dsh-remote-ui] 自动安装启动失败: ${e.message}`);
+    try { rmSync(marker, { force: true }); } catch { /* ignore */ }
+    return false;
+  }
+}
+
 /** 生成 plist（与 dsh-setup.mjs writeAutostartFile 同构），返回路径。 */
 function writeAutostartFile(relayDir) {
   const plistPath = launchAgentPath();
@@ -291,6 +364,29 @@ function startBridge(relayDir) {
   return { ok: st.running, status: st.running ? "running" : "failed", pid: st.pid, detail: st.running ? void 0 : "服务未进入运行态" };
 }
 
+/** 运行时自愈 watcher:账号就绪后若环境缺失则自动安装;装好/重启后自动拉起 bridge。 */
+function scheduleRuntime(relayDir) {
+  let done = false;
+  const iv = setInterval(() => {
+    if (done) { clearInterval(iv); return; }
+    try {
+      const cfg = loadConfig(relayDir);
+      const hasAcct = Boolean((cfg.phone || cfg.email) && cfg.password) || Boolean(cfg.local_key);
+      if (!hasAcct) return;
+      const setupUrl = join(relayDir, "dsh-setup.mjs");
+      if (!existsSync(setupUrl)) {
+        ensureRuntime(relayDir);
+        return;
+      }
+      const st = launchdStatus();
+      if (st.running) { done = true; clearInterval(iv); return; }
+      startBridge(relayDir);
+    } catch { /* 下一轮再试 */ }
+  }, 12_000);
+  iv.unref?.();
+  return () => clearInterval(iv);
+}
+
 /** 停止 bridge：launchctl bootout。 */
 function stopBridge() {
   const target = launchTarget();
@@ -538,11 +634,167 @@ async function proxyFeedback(relayDir, req, res, pathname) {
   }
 }
 
+// ---------- 自管理：版本 / 在线更新 / 彻底卸载（面板内“版本与更新”卡片） ----------
+
+/** 插件自身发布版本（与 dsh-remote 根包同步递增）。 */
+const PLUGIN_VERSION = "0.4.3";
+const UPDATE_LOG = ".dsh-update.log";
+const UPDATE_MARKER = ".dsh-update-running";
+
+/** 查询 npm 最新版（官方源优先，失败回退 npmmirror；纯服务端无 CORS 限制）。 */
+async function npmLatestVersion() {
+  for (const reg of ["https://registry.npmjs.org/@mrrisega/dsh-remote", "https://registry.npmmirror.com/@mrrisega/dsh-remote"]) {
+    try {
+      const res = await fetch(reg, { signal: AbortSignal.timeout(8000) });
+      if (!res.ok) continue;
+      const j = await res.json();
+      if (j && j["dist-tags"] && typeof j["dist-tags"].latest === "string") return j["dist-tags"].latest;
+    } catch { /* 试下一个源 */ }
+  }
+  return "";
+}
+
+/** 以 detached 子进程执行 `npx --yes @mrrisega/dsh-remote@latest`（env 可覆盖 npm 源）。 */
+function spawnUpdater(relayDir, extraEnv) {
+  const log = join(relayDir, UPDATE_LOG);
+  const npx = process.platform === "win32" ? "npx.cmd" : "npx";
+  return spawn(npx, ["--yes", "@mrrisega/dsh-remote@latest"], {
+    detached: true,
+    cwd: homedir(),
+    env: { ...process.env, ...(extraEnv || {}) },
+    stdio: ["ignore", openSync(log, "a"), openSync(log, "a")]
+  });
+}
+
+/**
+ * 后台执行在线一键更新：npx @mrrisega/dsh-remote@latest（幂等自愈：补运行环境/更新 bridge/重写 include）。
+ * 稳健性：
+ *   - 默认 npx 源（国内常为 npmmirror）未同步到最新版导致失败时，自动用官方 npm 源重试一次；
+ *   - marker 由子进程退出回调清理；若宿主 dsh web 在更新期间被重启，残留 marker 由启动时的 sweepStaleMarkers 兜底。
+ */
+function runOnlineUpdate(relayDir) {
+  try {
+    mkdirSync(relayDir, { recursive: true });
+    const marker = join(relayDir, UPDATE_MARKER);
+    if (existsSync(marker)) return { ok: false, detail: "已有更新在进行中，请稍候" };
+    writeFileSync(marker, String(Date.now()), { mode: 0o600 });
+    appendLogLine(relayDir, UPDATE_LOG, `[update] 开始在线更新 @mrrisega/dsh-remote@latest (${new Date().toISOString()})`);
+
+    let retried = false;
+    const run = () => {
+      const child = spawnUpdater(relayDir, retried ? { npm_config_registry: "https://registry.npmjs.org" } : {});
+      child.on("exit", (code) => {
+        if (!retried && code !== 0) {
+          retried = true;
+          appendLogLine(relayDir, UPDATE_LOG, `[update] 默认源安装失败(exit=${code})，改用官方 npm 源重试…`);
+          run();
+          return;
+        }
+        appendLogLine(relayDir, UPDATE_LOG, `[update] npx 退出 code=${code ?? "?"}（默认源${retried ? "/官方源" : ""}）`);
+        try { rmSync(marker, { force: true }); } catch { /* ignore */ }
+      });
+      child.unref();
+      return child;
+    };
+    const child = run();
+    return { ok: true, pid: child.pid, log: join(relayDir, UPDATE_LOG) };
+  } catch (e) {
+    try { rmSync(join(relayDir, UPDATE_MARKER), { force: true }); } catch { /* ignore */ }
+    return { ok: false, detail: String(e.message || e) };
+  }
+}
+
+/** 读日志尾部(更新进度展示)。 */
+function tailOf(filePath, lines = 24) {
+  try {
+    const all = readFileSync(filePath, "utf8").split("\n");
+    return all.slice(-lines).join("\n");
+  } catch { return ""; }
+}
+
+/** 彻底卸载（兼容市场“拒绝改写用户补丁”的场景）：移除 include、依赖、bundle、本地目录与链接。 */
+function uninstallSelf(relayDir, profileDir, patchFile, pkgFile) {
+  const out = { removedPatch: false, removedDep: false, removedDir: false, removedBundle: false };
+  try {
+    const patch = readFileSync(patchFile, "utf8");
+    const cleaned = patch
+      .replace(/\n?# >>> dsh-remote-ui .*?# <<< dsh-remote-ui\s*/s, "\n")
+      .replace(/\n{3,}/g, "\n\n")
+      .trimEnd() + "\n";
+    if (cleaned !== patch) { writeFileSync(patchFile, cleaned); out.removedPatch = true; }
+  } catch { /* 无 patch 忽略 */ }
+  try {
+    const pkg = JSON.parse(readFileSync(pkgFile, "utf8"));
+    if (pkg.dependencies && pkg.dependencies["dsh-remote-ui"]) { delete pkg.dependencies["dsh-remote-ui"]; out.removedDep = true; }
+    const bundles = pkg.dsh && pkg.dsh.profile && Array.isArray(pkg.dsh.profile.bundles) ? pkg.dsh.profile.bundles : null;
+    if (bundles) {
+      const i = bundles.indexOf("dsh-remote-ui");
+      if (i >= 0) { bundles.splice(i, 1); out.removedBundle = true; }
+    }
+    if (out.removedDep || out.removedBundle) writeFileSync(pkgFile, JSON.stringify(pkg, null, 2) + "\n");
+  } catch { /* 无 package.json 忽略 */ }
+  try {
+    rmSync(join(profileDir, "dsh-remote-ui-plugin"), { recursive: true, force: true });
+    rmSync(join(profileDir, "node_modules", "dsh-remote-ui"), { recursive: true, force: true });
+    out.removedDir = true;
+  } catch { /* ignore */ }
+  return out;
+}
+
 // ---------- 路由 ----------
 
 /** 路由表：{method, path, handler}。 */
 function registerRoutes(ctx, relayDir) {
+  // 本插件所在 profile(由插件自身文件位置推导,覆盖市场 git 安装与本地 include 两种形态)
+  let profileDir = join(homedir(), ".dsh", "profiles", "web");
+  try {
+    const here = fileURLToPath(import.meta.url);
+    // 依次尝试两种安装布局；split()[0] 未命中时返回原串，需显式判断后再试下一种
+    let m = here.split("/dsh-remote-ui-plugin/")[0];
+    if (m === here) m = here.split("/node_modules/dsh-remote-ui/")[0];
+    if (m !== here) profileDir = m;
+  } catch { /* 保持默认 */ }
   const routes = [
+    // 自管理：版本信息 / 检查更新 / 一键更新 / 更新日志 / 彻底卸载
+    {
+      method: "GET",
+      path: "/dsh-remote/self",
+      handler: async (_req, res) => {
+        const runtimeReady = existsSync(join(relayDir, "dsh-setup.mjs"));
+        sendJson(res, 200, { ok: true, version: PLUGIN_VERSION, runtimeReady, relayDir });
+      },
+    },
+    {
+      method: "GET",
+      path: "/dsh-remote/self/update-check",
+      handler: async (_req, res) => {
+        const latest = await npmLatestVersion();
+        const current = PLUGIN_VERSION;
+        sendJson(res, 200, { ok: true, current, latest, outdated: !!latest && latest !== current });
+      },
+    },
+    {
+      method: "POST",
+      path: "/dsh-remote/self/update",
+      handler: async (_req, res) => {
+        sendJson(res, 200, { ok: true, ...runOnlineUpdate(relayDir) });
+      },
+    },
+    {
+      method: "GET",
+      path: "/dsh-remote/self/update-log",
+      handler: async (_req, res) => {
+        sendJson(res, 200, { ok: true, running: existsSync(join(relayDir, UPDATE_MARKER)), log: tailOf(join(relayDir, UPDATE_LOG)) });
+      },
+    },
+    {
+      method: "POST",
+      path: "/dsh-remote/self/uninstall",
+      handler: async (_req, res) => {
+        const r = uninstallSelf(relayDir, profileDir, join(profileDir, "cordis.patch.yml"), join(profileDir, "package.json"));
+        sendJson(res, 200, { ok: true, ...r, detail: "已移除插件引用与本地文件，重启 dsh web 后完全卸载生效" });
+      },
+    },
     {
       method: "GET",
       path: "/dsh-remote/status",
@@ -811,8 +1063,12 @@ function registerRoutes(ctx, relayDir) {
  */
 export function apply(ctx, config = {}) {
   const relayDir = config.relayDir || process.env.DSH_RELAY_DIR || DEFAULT_RELAY_DIR;
+  // 清理上次进程残留的安装/更新 marker（宿主被重启/强杀时子进程清理回调会丢失）
+  sweepStaleMarkers(relayDir);
   ctx.effect(() => registerRoutes(ctx, relayDir), "dsh-remote-ui: /dsh-remote routes");
   // 0.1.2-rc.1+ 浏览器会话代持：换取 Harness 会话 Cookie 供 bridge 上游携带（手机点设备不再 401 白页）
   ctx.effect(() => scheduleHarnessMint(ctx, relayDir), "dsh-remote-ui: harness browser-session mint");
+  // 插件市场一键全功能:缺桌面运行环境则自动安装,登录后自动拉起 bridge(不依赖用户跑 npx)
+  ctx.effect(() => scheduleRuntime(relayDir), "dsh-remote-ui: runtime self-provision");
   ctx.logger?.info?.(`dsh-remote-ui: /dsh-remote routes ready (relayDir=${relayDir})`);
 }

package/packages/dsh-remote-ui/test/self-manage.test.mjs

@@ -0,0 +1,197 @@
+// 插件 node 半「自管理」回归：/dsh-remote/self | update-check | update | update-log | uninstall。
+// 覆盖用户三项诉求对应的机制：
+//   1) 插件市场没有「更新按钮」→ 面板内 self* 路由提供版本检测与一键在线更新；
+//   2) 市场无法卸载（我们的 include 引用挡住）→ uninstall 路由移除 include/依赖/bundle/本地文件；
+//   3) 版本可见 + 新版本检测 + 稳健更新（含残留 marker 清理兜底逻辑在 apply 时执行）。
+import assert from "node:assert/strict";
+import http from "node:http";
+import { mkdtemp, mkdir, rm, writeFile, readFile } from "node:fs/promises";
+import { readFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+import { apply } from "../lib/index.js";
+
+const PLUGIN_BLOCK = `# >>> dsh-remote-ui (managed by dsh-remote plugin; do not edit)
+- type: plugin
+  name: dsh-remote-ui
+  apply: dsh-remote-ui
+# <<< dsh-remote-ui
+`;
+
+/** 加载插件（tempHome 可覆盖 os.homedir()，供 uninstall 的默认 profile 推导用）。 */
+function boot(tempHome, relayDir) {
+  const routes = new Map();
+  const previousHome = process.env.HOME;
+  if (tempHome) process.env.HOME = tempHome;
+  try {
+    apply({
+      webServer: { register(route) { routes.set(route.path, route.handler); return () => {}; } },
+      effect(register) { return register(); },
+      logger: { info() {}, warn() {} }
+    }, { relayDir });
+  } finally {
+    if (tempHome) process.env.HOME = previousHome;
+  }
+  return routes;
+}
+
+/** 起一个指向 routes 的 http server，返回 base url。 */
+async function serve(routes) {
+  const host = http.createServer((req, res) => {
+    const url = new URL(req.url, "http://x");
+    const handler = routes.get(url.pathname);
+    (handler || ((_r, rs) => { rs.writeHead(404); rs.end(); }))(req, res);
+  });
+  await new Promise((resolve) => host.listen(0, "127.0.0.1", resolve));
+  return { host, base: `http://127.0.0.1:${host.address().port}` };
+}
+
+test("self 路由：版本可见 + 运行环境状态（无 npx 环境时不谎报已就绪）", async () => {
+  const tempDir = await mkdtemp(path.join(os.tmpdir(), "dsh-ui-self-"));
+  try {
+    const routes = boot(null, tempDir);
+    const { host, base } = await serve(routes);
+    try {
+      const self = await (await fetch(`${base}/dsh-remote/self`)).json();
+      assert.equal(self.ok, true);
+      assert.match(self.version, /^\d+\.\d+\.\d+$/, `version 应为 semver，实际 ${self.version}`);
+      assert.equal(self.runtimeReady, false, "temp 目录没有 dsh-setup.mjs → runtimeReady=false");
+      assert.equal(self.relayDir, tempDir);
+    } finally {
+      host.close();
+    }
+  } finally {
+    await rm(tempDir, { recursive: true, force: true });
+  }
+});
+
+test("update-check 路由：从 npm 检测新版本（dist-tags.latest 0.4.4 > 当前）", async () => {
+  const tempDir = await mkdtemp(path.join(os.tmpdir(), "dsh-ui-upchk-"));
+  const origFetch = globalThis.fetch;
+  try {
+    const routes = boot(null, tempDir);
+    const { host, base } = await serve(routes);
+    // 假 npm 源：registry 请求回 0.4.4，其余请求（本测试自身的 HTTP 调用）走真实 fetch
+    globalThis.fetch = async (url, init) => {
+      if (String(url).startsWith("https://registry.")) {
+        return { ok: true, status: 200, json: async () => ({ "dist-tags": { latest: "0.4.4" } }) };
+      }
+      return origFetch(url, init);
+    };
+    try {
+      const r = await (await fetch(`${base}/dsh-remote/self/update-check`)).json();
+      assert.equal(r.ok, true);
+      assert.equal(r.latest, "0.4.4");
+      assert.equal(r.outdated, true, "0.4.4 > 当前版本 → outdated 应为 true");
+      assert.notEqual(r.current, r.latest);
+    } finally {
+      host.close();
+    }
+  } finally {
+    globalThis.fetch = origFetch;
+    await rm(tempDir, { recursive: true, force: true });
+  }
+});
+
+test("update-log 路由：running 由 marker 决定，日志返回尾部", async () => {
+  const tempDir = await mkdtemp(path.join(os.tmpdir(), "dsh-ui-uplog-"));
+  try {
+    const routes = boot(null, tempDir);
+    const { host, base } = await serve(routes);
+    try {
+      // 无 marker：不 running
+      let r = await (await fetch(`${base}/dsh-remote/self/update-log`)).json();
+      assert.equal(r.ok, true);
+      assert.equal(r.running, false);
+
+      // 写入 marker + 日志 → running=true 且返回日志尾部
+      const lines = Array.from({ length: 30 }, (_, i) => `line ${i}`);
+      await writeFile(path.join(tempDir, ".dsh-update-running"), String(Date.now()));
+      await writeFile(path.join(tempDir, ".dsh-update.log"), lines.join("\n"));
+      r = await (await fetch(`${base}/dsh-remote/self/update-log`)).json();
+      assert.equal(r.running, true);
+      assert.ok(r.log.includes("line 29"), "日志应含尾部内容");
+      assert.ok(!r.log.includes("line 0"), "日志过长时应只截尾部（tailOf 生效）");
+    } finally {
+      host.close();
+    }
+  } finally {
+    await rm(tempDir, { recursive: true, force: true });
+  }
+});
+
+test("update 路由：已有更新进行中时拒绝重复触发（防重入）", async () => {
+  const tempDir = await mkdtemp(path.join(os.tmpdir(), "dsh-ui-up-"));
+  try {
+    const routes = boot(null, tempDir);
+    const { host, base } = await serve(routes);
+    try {
+      await writeFile(path.join(tempDir, ".dsh-update-running"), String(Date.now()));
+      const r = await (await fetch(`${base}/dsh-remote/self/update`, { method: "POST" })).json();
+      assert.equal(r.ok, false);
+      assert.match(String(r.detail), /进行中/, `detail 应提示进行中，实际: ${r.detail}`);
+    } finally {
+      host.close();
+    }
+  } finally {
+    await rm(tempDir, { recursive: true, force: true });
+  }
+});
+
+test("uninstall 路由：移除 include 块 + package.json 依赖/bundle + 本地目录（解锁市场卸载）", async () => {
+  const tempHome = await mkdtemp(path.join(os.tmpdir(), "dsh-ui-home-"));
+  const relayDir = path.join(tempHome, "relay");
+  await mkdir(relayDir, { recursive: true });
+  // 模拟真实 profile 布局：cordis.patch.yml + package.json + 本地插件目录/链接
+  const profile = path.join(tempHome, ".dsh", "profiles", "web");
+  await mkdir(path.join(profile, "dsh-remote-ui-plugin"), { recursive: true });
+  await mkdir(path.join(profile, "node_modules", "dsh-remote-ui"), { recursive: true });
+  const patchFile = path.join(profile, "cordis.patch.yml");
+  const pkgFile = path.join(profile, "package.json");
+  await writeFile(patchFile, `base: .\ninclude:\n${PLUGIN_BLOCK}  - other-plugin\n`);
+  await writeFile(pkgFile, JSON.stringify({
+    dependencies: { "dsh-remote-ui": "github:mrRisega/dsh-remote#path:/packages/dsh-remote-ui", "other": "^1.0.0" },
+    dsh: { profile: { bundles: ["dsh-remote-ui", "other-bundle"] } },
+  }));
+  await writeFile(path.join(profile, "dsh-remote-ui-plugin", "index.js"), "// stub");
+  await writeFile(path.join(profile, "node_modules", "dsh-remote-ui", "index.js"), "// stub");
+  await writeFile(path.join(relayDir, ".dsh-config.json"), "{}");
+
+  try {
+    // 关键：以 tempHome 为 HOME 启动，profileDir 默认推导才会落在 temp profile 而非真实 ~/.dsh
+    const routes = boot(tempHome, relayDir);
+    const { host, base } = await serve(routes);
+    try {
+      const r = await (await fetch(`${base}/dsh-remote/self/uninstall`, { method: "POST" })).json();
+      assert.equal(r.ok, true);
+      assert.equal(r.removedPatch, true, "应移除 patch 中的 include 块");
+      assert.equal(r.removedDep, true, "应移除 package.json 依赖");
+      assert.equal(r.removedBundle, true, "应移除 dsh.profile.bundles 条目");
+      assert.equal(r.removedDir, true, "应删除本地插件目录与 node_modules 链接");
+
+      const patch = await readFile(patchFile, "utf8");
+      assert.ok(!patch.includes("dsh-remote-ui"), "patch 不应再引用 dsh-remote-ui");
+      assert.ok(patch.includes("other-plugin"), "其他插件 include 不应被误伤");
+
+      const pkg = JSON.parse(await readFile(pkgFile, "utf8"));
+      assert.equal(pkg.dependencies["dsh-remote-ui"], undefined, "依赖应被删除");
+      assert.equal(pkg.dependencies["other"], "^1.0.0", "其他依赖应保留");
+      assert.deepEqual(pkg.dsh.profile.bundles, ["other-bundle"], "其他 bundle 应保留");
+    } finally {
+      host.close();
+    }
+  } finally {
+    await rm(tempHome, { recursive: true, force: true });
+  }
+});
+
+test("源码约束：浏览器半提供版本与更新卡片（含彻底卸载确认）", () => {
+  const source = readFileSync(new URL("../lib/client.js", import.meta.url), "utf8");
+  assert.match(source, /🔄 版本与更新/);
+  assert.match(source, /dsh-remote\/self\/update-check/);
+  assert.match(source, /一键更新/);
+  assert.match(source, /彻底卸载/);
+  assert.match(source, /dsh-remote\/self\/uninstall/);
+  assert.match(source, /再点一次确认彻底卸载/);
+});