@restregular/dsh-powerup 0.2.3 → 0.3.0

package/README.md

@@ -41,20 +41,31 @@ Open the built-in **Plugins** page. Every third-party card under **Installed
 plugins** gains a small update icon in its action area. Clicking it opens the
 update dialog:
 
-1. The dialog reads the package's published versions from the same registry the
-   **Add plugin** dialog uses — the remembered choice, or the Host's configured
-   registry, with npmmirror as a configured fallback. Type a version or pick one
-   from the dropdown.
-2. Confirming removes the installed copy, checks the new spec the way **Add
+1. The dialog reads the package's published versions from the Host's configured
+   registries — the same list the **Add plugin** dialog offers, including the
+   npmmirror fallback. Star any registry to make it Power-Up's default for
+   later updates; otherwise the list starts from the Add dialog's remembered
+   choice.
+2. Type a version or pick one from the floating version list. The current
+   installed version is tagged **Current**; the newest is tagged **latest**, and
+   a version that is both uses one **Current · latest** tag.
+3. Confirming removes the installed copy, checks the new spec the way **Add
    plugin** does, and installs the selected version without enabling it.
-3. The dialog then asks whether to enable the new version.
-4. After enabling, it asks whether to restart DSH. On the desktop app the
+4. The dialog then asks whether to enable the new version.
+5. After enabling, it asks whether to restart DSH. On the desktop app the
    `lib/restart-helper.cjs` helper relaunches the exact executable after the old
    Host exits; under `dsh web` the dialog explains that the terminal owns the
    process.
+6. A management call that reports `restart-required` keeps a **Restart needed**
+   tag on the card and adds the plugin to the count beside the **Installed
+   plugins** heading, where a **Restart DSH** button confirms and performs the
+   same restart.
 
-Power-Up does not update itself through this button: removing the plugin would
-unload the dialog mid-flow. Use **Add plugin** with the new package version.
+Power-Up updates itself through the same dialog. Because removing the plugin
+unloads this panel, the Host answers first and then hands `removeBundle` →
+`inspect` → `installBundle(enabled: true)` to the built-in manager service,
+which keeps running after the Power-Up Host fiber is unloaded. The panel closes;
+refresh the page when the install finishes.
 
 ## Design notes
 
@@ -78,9 +89,21 @@ unload the dialog mid-flow. Use **Add plugin** with the new package version.
   no per-card slot, so the overlay injects one button into every
   `[data-plugin-group="bundles"] [data-plugin-package]` card and re-asserts it
   after React renders. Version listing is a plain registry `GET`; removal and
-  installation use the same `remote.pluginManager` calls as **Add plugin**. Only
-  the process restart needs Host code: a loopback-only
-  `/dsh-powerup/api/restart` route.
+  installation use the same `remote.pluginManager` calls as **Add plugin**. The
+  Host adds two loopback-only routes: `/dsh-powerup/api/restart` for the
+  process restart, and `/dsh-powerup/api/self-update` for the self-update
+  handoff.
+- **Self-update outlives its own unload.** The Host route sends its answer, then
+  a timer starts `removeBundle` → `inspect` → `installBundle(enabled: true)`
+  through the built-in manager service. Removing the bundle unloads Power-Up's
+  own Host fiber, but the manager service and the pending promise stay in the
+  Host process, so the reinstall finishes; failures are appended to
+  `~/.dsh/powerup/self-update.log`.
+- **Restart status lives in this browser session.** A management result that
+  says `restart-required` is written to `sessionStorage`; the card gets a
+  **Restart needed** tag and the group heading gets a count plus a restart
+  button. A real app restart clears the session, while a page refresh keeps the
+  markers.
 - **The dialog mirrors the host modal.** The backdrop is
   `--dsw-alias-bg-mask-1` with the shared mask blur, the surface is
   `--dsw-alias-bg-layer-2` with `--dsw-radius-panel` and

package/client.js

@@ -44,7 +44,7 @@
 
       const NS = 'dsh-powerup';
       const SETTINGS_KEY = 'dsh-powerup:settings:v1';
-      const VERSION = '0.2.3';
+      const VERSION = '0.3.0';
       const MENU_GAP = 8;
       const MENU_WIDTH = 248;
 
@@ -154,6 +154,20 @@
           'update.restartUnsupported': '当前运行方式无法自动重启：{reason}',
           'update.restarting': 'DSH 正在重启，窗口即将关闭…',
           'update.restartFailed': '重启请求失败：{message}',
+          'update.selfUpdateWarning': '更新 Power-Up 会在后台卸载并安装新版本；本面板会关闭，完成后刷新页面。',
+          'update.selfUpdating': 'Power-Up 正在后台更新…',
+          'update.selfRefresh': '完成后请刷新页面。',
+          'update.setDefault': '设为默认',
+          'update.defaultTag': '默认',
+          'update.defaultHint': '更新列表默认使用此安装源',
+          'restart.tag': '需重启',
+          'restart.tagHint': '该插件已更新，重启 DSH 后生效',
+          'restart.pending': '{count} 个插件待重启',
+          'restart.action': '重启 DSH',
+          'restart.title': '重启 DSH？',
+          'restart.desc': '重启会关闭并重新打开 DSH，正在运行的任务会中断。',
+          'restart.cancel': '取消',
+          'restart.confirm': '立即重启',
           'update.doneTitle': '更新完成',
           'update.doneInstalled': '{name} 已更新到 {version}。',
           'update.doneDisabled': '{name} 已安装 {version}，尚未启用。',
@@ -276,6 +290,20 @@
           'update.restartUnsupported': 'This runtime cannot restart itself: {reason}',
           'update.restarting': 'DSH is restarting; this window will close…',
           'update.restartFailed': 'Restart request failed: {message}',
+          'update.selfUpdateWarning': 'Updating Power-Up removes and reinstalls it in the background; this panel closes, then refresh the page.',
+          'update.selfUpdating': 'Power-Up is updating in the background…',
+          'update.selfRefresh': 'Refresh the page when it finishes.',
+          'update.setDefault': 'Set as default',
+          'update.defaultTag': 'Default',
+          'update.defaultHint': 'The update list starts from this registry',
+          'restart.tag': 'Restart needed',
+          'restart.tagHint': 'Updated; restart DSH to apply',
+          'restart.pending': '{count} plugins need a restart',
+          'restart.action': 'Restart DSH',
+          'restart.title': 'Restart DSH?',
+          'restart.desc': 'Restarting closes and reopens DSH; running tasks are interrupted.',
+          'restart.cancel': 'Cancel',
+          'restart.confirm': 'Restart now',
           'update.doneTitle': 'Update complete',
           'update.doneInstalled': '{name} is now on {version}.',
           'update.doneDisabled': '{name} {version} is installed but not enabled.',
@@ -597,6 +625,15 @@
         );
       }
 
+      function StarIcon({ size = 12 }) {
+        return h(Icon, { size },
+          h('path', {
+            d: 'm8 2.6 1.6 3.3 3.6.5-2.6 2.5.6 3.6L8 10.8l-3.2 1.7.6-3.6L2.8 6.4l3.6-.5L8 2.6Z',
+            fill: 'currentColor',
+          }),
+        );
+      }
+
       function WarnIcon({ size = 16 }) {
         return h(Icon, { size },
           h('path', {
@@ -667,6 +704,15 @@
 @keyframes dsh-powerup-toast-in{from{opacity:0;transform:translate(-50%,5px)}to{opacity:1;transform:translate(-50%,0)}}
 .dsh-powerup-update-button{flex:none;display:inline-flex;align-items:center;justify-content:center;width:28px;height:28px;padding:0;border:0;border-radius:var(--dsw-radius-sm,6px);background:transparent;color:var(--dsw-alias-label-caption);cursor:pointer}
 .dsh-powerup-update-button:hover{background:var(--dsw-alias-interactive-bg-hover,var(--dsw-alias-bg-layer-2));color:var(--dsw-alias-label-secondary)}
+.dsh-powerup-restart-tag{flex:none;display:inline-flex;align-items:center;height:18px;padding:0 6px;border:.5px solid color-mix(in srgb,var(--dsw-alias-state-warn-primary) 32%,transparent);border-radius:999px;background:var(--dsw-alias-state-warn-tertiary);color:var(--dsw-alias-state-warn-label);font-size:10px;line-height:16px;white-space:nowrap}
+.dsh-powerup-restart-bar{display:flex;flex:none;align-items:center;gap:8px;margin-left:8px}
+.dsh-powerup-restart-count{color:var(--dsw-alias-state-warn-label);font-size:11.5px;line-height:18px;white-space:nowrap}
+.dsh-powerup-restart-action{height:26px;padding:0 10px;border:.5px solid color-mix(in srgb,var(--dsw-alias-state-warn-primary) 36%,transparent);border-radius:var(--dsw-radius-sm,6px);background:var(--dsw-alias-state-warn-tertiary);color:var(--dsw-alias-state-warn-label);font:inherit;font-size:11.5px;line-height:18px;cursor:pointer}
+.dsh-powerup-restart-action:hover{background:color-mix(in srgb,var(--dsw-alias-state-warn-primary) 14%,transparent)}
+.dsh-powerup-update-default{flex:none;display:inline-flex;align-items:center;justify-content:center;width:24px;height:24px;padding:0;border:0;border-radius:var(--dsw-radius-sm,6px);background:transparent;color:var(--dsw-alias-label-caption);cursor:pointer}
+.dsh-powerup-update-default:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-state-warn-label)}
+.dsh-powerup-update-default[aria-pressed=true]{color:var(--dsw-alias-state-warn-label)}
+.dsh-powerup-update-default-tag{flex:none;padding:0 6px;border:.5px solid color-mix(in srgb,var(--dsw-alias-state-warn-primary) 32%,transparent);border-radius:999px;color:var(--dsw-alias-state-warn-label);font-size:10px;line-height:16px;white-space:nowrap}
 .dsh-powerup-update-mask{position:fixed;inset:0;z-index:1200;display:flex;align-items:center;justify-content:center;padding:24px;background:var(--dsw-alias-bg-mask-1);backdrop-filter:var(--dsw-mask-blur,blur(3px));pointer-events:auto;animation:dsh-powerup-update-fade .16s ease-out}
 @keyframes dsh-powerup-update-fade{from{opacity:0}to{opacity:1}}
 .dsh-powerup-update-dialog{box-sizing:border-box;position:relative;display:flex;flex-direction:column;width:min(560px,100%);max-height:min(760px,calc(100vh - 48px));max-height:min(760px,calc(100dvh - 48px));border-radius:var(--dsw-radius-panel,14px);background:var(--dsw-alias-bg-layer-2);box-shadow:var(--dsw-elevation-prominent);color:var(--dsw-alias-label-primary);font-size:13px;line-height:20px;overflow:hidden;animation:dsh-powerup-update-rise .18s cubic-bezier(.2,.8,.3,1)}
@@ -751,7 +797,7 @@
 .dsh-powerup-update-ghost{height:36px;padding:0 14px;border:0;border-radius:var(--dsw-radius-md,8px);background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:14px;line-height:22px;cursor:pointer}
 .dsh-powerup-update-ghost:hover{background:var(--dsw-alias-interactive-bg-hover)}
 .dsh-powerup-update-ghost:active{background:var(--dsw-alias-interactive-bg-active)}
-.dsh-powerup-update-close:focus-visible,.dsh-powerup-update-toggle:focus-visible,.dsh-powerup-update-version:focus-visible,.dsh-powerup-update-select-trigger:focus-visible,.dsh-powerup-update-option:focus-visible,.dsh-powerup-update-primary:focus-visible,.dsh-powerup-update-ghost:focus-visible,.dsh-powerup-update-button:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));outline-offset:1px}
+.dsh-powerup-update-close:focus-visible,.dsh-powerup-update-toggle:focus-visible,.dsh-powerup-update-version:focus-visible,.dsh-powerup-update-select-trigger:focus-visible,.dsh-powerup-update-option:focus-visible,.dsh-powerup-update-primary:focus-visible,.dsh-powerup-update-ghost:focus-visible,.dsh-powerup-update-button:focus-visible,.dsh-powerup-restart-action:focus-visible,.dsh-powerup-update-default:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));outline-offset:1px}
 @media (max-width:680px){.dsh-powerup-page{padding:20px 16px 42px}.dsh-powerup-actions{grid-template-columns:minmax(0,1fr)}.dsh-powerup-hero-art{width:54px;height:54px}.dsh-powerup-hero h1{font-size:19px}.dsh-powerup-card-head{flex-wrap:wrap}.dsh-powerup-switch{margin-left:auto}.dsh-powerup-update-mask{padding:12px}.dsh-powerup-update-dialog{max-height:calc(100dvh - 24px)}.dsh-powerup-update-head{padding:18px 12px 10px 18px}.dsh-powerup-update-body{padding:0 18px 4px}.dsh-powerup-update-foot{padding:14px 18px 18px}}
 `;
 
@@ -1139,7 +1185,10 @@
       // Plugin update: entry button on the built-in Plugins page + dialog
       // ------------------------------------------------------------------
       const PLUGIN_REGISTRY_MEMORY_KEY = 'dsh.plugin-manager.install-registry';
+      const POWERUP_REGISTRY_KEY = 'dsh-powerup:update-registry:v1';
+      const PENDING_RESTART_KEY = 'dsh-powerup:pending-restart:v1';
       const UPDATE_API = '/dsh-powerup/api/restart';
+      const SELF_UPDATE_API = '/dsh-powerup/api/self-update';
       const OFFICIAL_REGISTRY = 'https://registry.npmjs.org/';
       const REGISTRY_HOSTS = new Map([
         ['registry.npmjs.org', 'update.registryDefault'],
@@ -1188,16 +1237,75 @@
         }
       }
 
+      /**
+       * Read the registry the user starred as Power-Up's list default.
+       * @returns {{ key?: string, value?: string | null, url?: string, label?: string, hint?: string } | null}
+       */
+      function readDefaultRegistry() {
+        try {
+          const raw = localStorage.getItem(POWERUP_REGISTRY_KEY);
+          if (typeof raw !== 'string' || raw === '') return null;
+          const parsed = JSON.parse(raw);
+          if (parsed === null || typeof parsed !== 'object') return null;
+          return parsed;
+        } catch {
+          return null;
+        }
+      }
+
+      /**
+       * Persist the registry the update list should start from.
+       * @param {{ key: string, value: string | null, url: string, label: string, hint: string }} choice
+       */
+      function writeDefaultRegistry(choice) {
+        try {
+          localStorage.setItem(POWERUP_REGISTRY_KEY, JSON.stringify({
+            key: choice.key,
+            value: choice.value,
+            url: choice.url,
+            label: choice.label,
+            hint: choice.hint,
+          }));
+        } catch {
+          /* A full or private store keeps the in-memory selection. */
+        }
+      }
+
+      /** Pending-restart records for this browser session (cleared by a real restart). */
+      function readPendingRestarts() {
+        try {
+          const raw = sessionStorage.getItem(PENDING_RESTART_KEY);
+          if (typeof raw !== 'string' || raw === '') return [];
+          const parsed = JSON.parse(raw);
+          return Array.isArray(parsed) ? parsed.filter((entry) => entry !== null && typeof entry === 'object' && typeof entry.name === 'string') : [];
+        } catch {
+          return [];
+        }
+      }
+
+      /**
+       * @param {Array<{ name: string, version?: string, reason?: string, at?: number }>} entries
+       */
+      function writePendingRestarts(entries) {
+        try {
+          sessionStorage.setItem(PENDING_RESTART_KEY, JSON.stringify(entries));
+        } catch {
+          /* The badge is a hint; failing to persist it must not break updates. */
+        }
+      }
+
       /**
        * The registry choices the update dialog offers: the Host's configured
        * default (with the URL pnpm actually names), each configured fallback,
-       * and a remembered custom address.
+       * the built-in Add dialog's remembered custom address, and Power-Up's
+       * own starred default.
        * @param {{ registry: string | null, fallbackRegistries: string[], resolved: string | null } | null} registries
        * @param {object | null} remembered
+       * @param {object | null} powerupDefault
        * @param {(key: string) => string} t
        * @returns {Array<{ key: string, label: string, hint: string, value: string | null, url: string }>}
        */
-      function buildRegistryChoices(registries, remembered, t) {
+      function buildRegistryChoices(registries, remembered, powerupDefault, t) {
         const choices = [];
         const seen = new Set();
         const add = (choice) => {
@@ -1246,6 +1354,18 @@
             url: normalizeRegistry(rememberedOffered),
           });
         }
+        if (powerupDefault !== null && typeof powerupDefault === 'object') {
+          const value = powerupDefault.value === undefined ? null : powerupDefault.value;
+          const url = powerupDefault.url ?? value ?? OFFICIAL_REGISTRY;
+          add({
+            label: typeof powerupDefault.label === 'string'
+              ? powerupDefault.label
+              : (value === null ? t('update.registryDefault') : t('update.registryCustom')),
+            hint: typeof powerupDefault.hint === 'string' ? powerupDefault.hint : registryHost(url),
+            value,
+            url: normalizeRegistry(url),
+          });
+        }
         if (choices.length === 0) {
           add({
             label: t('update.registryDefault'),
@@ -1258,12 +1378,35 @@
       }
 
       /**
-       * Choose the offered registry matching what the Add dialog remembered.
+       * Find the offered registry matching a persisted Power-Up default.
+       * @param {Array<{ key: string, value: string | null, url: string }>} choices
+       * @param {{ key?: string, value?: string | null, url?: string } | null} stored
+       * @returns {object | undefined}
+       */
+      function matchStoredChoice(choices, stored) {
+        if (stored === null || typeof stored !== 'object') return undefined;
+        if (typeof stored.key === 'string') {
+          const byKey = choices.find((choice) => choice.key === stored.key);
+          if (byKey !== undefined) return byKey;
+        }
+        const value = stored.value === undefined ? null : stored.value;
+        if (value === null) return choices.find((choice) => choice.value === null);
+        const wanted = normalizeRegistry(value ?? stored.url ?? OFFICIAL_REGISTRY);
+        return choices.find((choice) => choice.value !== null && normalizeRegistry(choice.value) === wanted)
+          ?? choices.find((choice) => normalizeRegistry(choice.url) === wanted);
+      }
+
+      /**
+       * Choose the registry the update list starts from: Power-Up's starred
+       * default, then what the Add dialog remembered, then the configured one.
        * @param {Array<{ key: string, value: string | null, url: string }>} choices
        * @param {object | null} remembered
+       * @param {object | null} powerupDefault
        * @returns {object}
        */
-      function pickRegistryChoice(choices, remembered) {
+      function pickRegistryChoice(choices, remembered, powerupDefault) {
+        const starred = matchStoredChoice(choices, powerupDefault);
+        if (starred !== undefined) return starred;
         if (remembered !== null && typeof remembered === 'object') {
           if (remembered.kind === 'offered') {
             const wanted = remembered.registry === null ? null : normalizeRegistry(remembered.registry);
@@ -1462,20 +1605,23 @@
 
       /** Tooltip/accessible label for one injected update button. */
       function updateButtonLabel(name, t) {
-        return name === MODULE_ID ? t('update.selfTitle') : `${t('update.button')} · ${name}`;
+        return `${t('update.button')} · ${name}`;
       }
 
       /**
        * Ensure every third-party card in the built-in "Installed plugins"
-       * group carries one update button. Idempotent, so React re-renders and
-       * the observer can call it repeatedly.
+       * group carries one update button and, when its update waits for a
+       * restart, a small restart tag. Idempotent, so React re-renders and the
+       * observer can call it repeatedly.
        * @param {Document} doc
        * @param {(name: string) => void} open
+       * @param {string[]} pendingNames
        * @param {(key: string, params?: object) => string} t
        * @param {Set<Element>} buttons
        */
-      function ensureUpdateButtons(doc, open, t, buttons) {
+      function ensureUpdateButtons(doc, open, pendingNames, t, buttons) {
         if (doc === null || doc === undefined || typeof doc.querySelectorAll !== 'function') return;
+        const pending = new Set(Array.isArray(pendingNames) ? pendingNames : []);
         const cards = doc.querySelectorAll('[data-plugin-group="bundles"] [data-plugin-package]');
         for (const card of cards) {
           const name = card.getAttribute('data-plugin-package');
@@ -1501,10 +1647,78 @@
           const label = updateButtonLabel(name, t);
           if (button.title !== label) button.title = label;
           if (button.getAttribute('aria-label') !== label) button.setAttribute('aria-label', label);
+
+          let tag = card.querySelector('[data-dsh-powerup-restart-tag]');
+          if (pending.has(name)) {
+            if (tag === null || tag === undefined) {
+              const head = card.firstElementChild;
+              const main = head === null || head === undefined ? null : head.children?.[1];
+              const titleRow = main === null || main === undefined ? null : main.firstElementChild;
+              if (titleRow !== null && titleRow !== undefined) {
+                tag = doc.createElement('span');
+                tag.className = 'dsh-powerup-restart-tag';
+                tag.setAttribute('data-dsh-powerup-restart-tag', '');
+                titleRow.appendChild(tag);
+              }
+            }
+            if (tag !== null && tag !== undefined) {
+              const text = t('restart.tag');
+              if (tag.textContent !== text) tag.textContent = text;
+              if (tag.title !== t('restart.tagHint')) tag.title = t('restart.tagHint');
+            }
+          } else if (tag !== null && tag !== undefined) {
+            tag.remove();
+          }
         }
         for (const button of [...buttons]) if (button.isConnected !== true) buttons.delete(button);
       }
 
+      /**
+       * Put "N plugins need a restart" and a restart button beside the
+       * Installed plugins heading. The group head owns the h3; the injected bar
+       * sits at the end of that row and is removed when nothing is pending.
+       * @param {Document} doc
+       * @param {number} count
+       * @param {() => void} onRestart
+       * @param {(key: string, params?: object) => string} t
+       */
+      function ensureRestartBar(doc, count, onRestart, t) {
+        if (doc === null || doc === undefined || typeof doc.querySelector !== 'function') return;
+        const group = doc.querySelector('[data-plugin-group="bundles"]');
+        if (group === null || group === undefined || count <= 0) {
+          const stale = group?.querySelector?.('[data-dsh-powerup-restart-bar]');
+          stale?.remove?.();
+          return;
+        }
+        const head = group.firstElementChild;
+        if (head === null || head === undefined) return;
+        let bar = group.querySelector('[data-dsh-powerup-restart-bar]');
+        if (bar === null || bar === undefined) {
+          bar = doc.createElement('div');
+          bar.className = 'dsh-powerup-restart-bar';
+          bar.setAttribute('data-dsh-powerup-restart-bar', '');
+          const label = doc.createElement('span');
+          label.className = 'dsh-powerup-restart-count';
+          const button = doc.createElement('button');
+          button.type = 'button';
+          button.className = 'dsh-powerup-restart-action';
+          button.addEventListener('click', (event) => {
+            event.preventDefault();
+            event.stopPropagation();
+            onRestart();
+          });
+          bar.appendChild(label);
+          bar.appendChild(button);
+          head.appendChild(bar);
+        }
+        const label = bar.firstElementChild;
+        const button = bar.lastElementChild;
+        const text = t('restart.pending', { count });
+        if (label !== null && label !== undefined && label.textContent !== text) label.textContent = text;
+        const action = t('restart.action');
+        if (button !== null && button !== undefined && button.textContent !== action) button.textContent = action;
+      }
+
       /**
        * Place a floating panel under an anchor, flipping above when the space
        * below is short, and clamp it to the viewport.
@@ -1542,6 +1756,11 @@
       function PluginUpdateOverlay({ manager, remote, ctx }) {
         const [view, setView] = useState(null);
         const [localeTick, forceLocale] = useState(0);
+        const [pending, setPending] = useState(() => readPendingRestarts());
+        const [restartAsk, setRestartAsk] = useState(false);
+        const [restartCapability, setRestartCapability] = useState(null);
+        const [restartBusy, setRestartBusy] = useState(false);
+        const [restartError, setRestartError] = useState(null);
         const tokenRef = useRef(null);
         const abortRef = useRef(null);
         const buttonsRef = useRef(new Set());
@@ -1551,6 +1770,7 @@
         const registryRef = useRef(null);
         const registryPanelRef = useRef(null);
         const versionSeq = useRef(0);
+        const openRestartRef = useRef(() => {});
         const tRef = useRef((key, params) => translateCurrent(key, params));
         tRef.current = (key, params) => translateCurrent(key, params);
 
@@ -1570,7 +1790,7 @@
 
         const close = useCallback(() => {
           const current = view;
-          if (current !== null && (current.phase === 'working' || current.phase === 'restarting' || current.enabling === true)) return;
+          if (current !== null && (current.phase === 'working' || current.phase === 'self-updating' || current.phase === 'restarting' || current.enabling === true)) return;
           tokenRef.current = null;
           try {
             abortRef.current?.abort?.();
@@ -1592,6 +1812,25 @@
           });
         }, []);
 
+        /** Remember that one updated plugin waits for a whole-app restart. */
+        const recordPending = useCallback((entry) => {
+          setPending((current) => {
+            const next = current.filter((item) => item.name !== entry.name);
+            next.push({ ...entry, at: Date.now() });
+            writePendingRestarts(next);
+            return next;
+          });
+        }, []);
+
+        /** Drop a pending marker when its update never started. */
+        const removePending = useCallback((name) => {
+          setPending((current) => {
+            const next = current.filter((item) => item.name !== name);
+            writePendingRestarts(next);
+            return next;
+          });
+        }, []);
+
         const loadVersions = useCallback(async (token, name, choice, choices, resetVersion) => {
           const t = tRef.current;
           const seq = versionSeq.current + 1;
@@ -1640,11 +1879,13 @@
           setView({
             name,
             title: name,
+            self: name === MODULE_ID,
             currentVersion: null,
             phase: 'loading',
             step: null,
             choices: [],
             registryKey: '',
+            defaultRegistryKey: null,
             versions: [],
             versionsState: 'loading',
             versionsError: null,
@@ -1660,10 +1901,6 @@
             enabling: false,
             restarting: false,
           });
-          if (name === MODULE_ID) {
-            patch(token, { phase: 'self' });
-            return;
-          }
           try {
             const [bundles, registries] = await Promise.all([manager.listBundles(), manager.registries()]);
             if (tokenRef.current !== token) return;
@@ -1680,8 +1917,10 @@
               return;
             }
             const remembered = readRememberedRegistry();
-            const choices = buildRegistryChoices(registries.ok ? registries.value : null, remembered, t);
-            const choice = pickRegistryChoice(choices, remembered);
+            const powerupDefault = readDefaultRegistry();
+            const choices = buildRegistryChoices(registries.ok ? registries.value : null, remembered, powerupDefault, t);
+            const choice = pickRegistryChoice(choices, remembered, powerupDefault);
+            const starred = matchStoredChoice(choices, powerupDefault);
             patch(token, {
               title: packageDisplayTitle(pkg),
               currentVersion: pkg.version ?? null,
@@ -1689,6 +1928,7 @@
               phase: 'choose',
               choices,
               registryKey: choice.key,
+              defaultRegistryKey: starred === undefined ? null : starred.key,
               versionsState: 'loading',
             });
             await loadVersions(token, name, choice, choices, false);
@@ -1710,7 +1950,9 @@
           const ensure = () => {
             scheduled = false;
             if (stopped) return;
-            ensureUpdateButtons(document, (name) => openRef.current(name), tRef.current, buttons);
+            const names = pending.map((entry) => entry.name);
+            ensureUpdateButtons(document, (name) => openRef.current(name), names, tRef.current, buttons);
+            ensureRestartBar(document, pending.length, () => openRestartRef.current(), tRef.current);
           };
           const schedule = () => {
             if (scheduled || stopped) return;
@@ -1733,7 +1975,7 @@
             }
             buttons.clear();
           };
-        }, [localeTick]);
+        }, [localeTick, pending]);
 
         // Keep the selected version input focused when the chooser opens.
         useEffect(() => {
@@ -1824,6 +2066,19 @@
           };
         }, [remote]);
 
+        // Escape dismisses the list-header restart confirmation unless a
+        // restart request is already in flight.
+        useEffect(() => {
+          if (!restartAsk) return undefined;
+          const onKeyDown = (event) => {
+            if (event.key !== 'Escape' || restartBusy) return;
+            event.stopPropagation();
+            setRestartAsk(false);
+          };
+          document.addEventListener('keydown', onKeyDown, true);
+          return () => document.removeEventListener('keydown', onKeyDown, true);
+        }, [restartAsk, restartBusy]);
+
         const chooseVersion = (version) => {
           if (tokenRef.current === null) return;
           setView((current) => current === null ? current : { ...current, version, listOpen: false, listPopover: null, formError: null });
@@ -1840,6 +2095,19 @@
           loadVersions(token, current.name, choice, current.choices, true);
         };
 
+        /** Star one registry as Power-Up's default and select it for this update. */
+        const setDefaultRegistry = (choice) => {
+          if (choice === null || choice === undefined) return;
+          const current = view;
+          writeDefaultRegistry(choice);
+          setView((state) => state === null ? state : {
+            ...state,
+            defaultRegistryKey: choice.key,
+            registryKey: choice.key,
+          });
+          if (current !== null) loadVersions(tokenRef.current, current.name, choice, current.choices, true);
+        };
+
         /** Open or close the floating version list under the input row. */
         const toggleVersionList = () => {
           const current = view;
@@ -1892,7 +2160,29 @@
           const registry = registryValue(choice);
           const spec = `${current.name}@${version}`;
           const requestId = newRequestId();
-          patch(token, { phase: 'working', step: 'removing', error: null, formError: null, log: '', logLabel: spec });
+          patch(token, { phase: 'working', step: current.self === true ? 'installing' : 'removing', error: null, formError: null, log: '', logLabel: spec });
+          if (current.self === true) {
+            // Power-Up cannot reinstall itself from its own client: removing
+            // the bundle unloads this dialog. The Host route receives the
+            // request, answers, then hands remove+inspect+install to the
+            // built-in manager service, which keeps running in the Host
+            // process after this plugin unloads.
+            recordPending({ name: MODULE_ID, version, reason: 'self-update' });
+            try {
+              const response = await fetch(SELF_UPDATE_API, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ version, registry }),
+              });
+              const data = await response.json().catch(() => null);
+              if (!response.ok || data?.ok !== true) throw new Error(data?.error ?? `HTTP ${response.status}`);
+              patch(token, { phase: 'self-updating', step: null });
+            } catch (error) {
+              removePending(MODULE_ID);
+              patch(token, { phase: 'error', step: null, error: errorText(error) || t('update.unknown') });
+            }
+            return;
+          }
           try {
             // The update flow removes the old version first: the Host's
             // inspection refuses a package that is still installed, so the
@@ -1915,11 +2205,19 @@
             const value = installed.value;
             if (value.error !== undefined || value.application === 'failed') throw new Error(operationReason(value, t));
             if (value.application === 'cancelled') throw new Error(t('update.cancelled'));
+            const restartRequired = value.application === 'restart-required';
+            if (restartRequired) {
+              recordPending({
+                name: current.name,
+                version: value.version ?? version,
+                reason: value.restartReason ?? '',
+              });
+            }
             patch(token, {
               phase: 'enable',
               step: null,
               installedVersion: value.version ?? version,
-              restartRequired: value.application === 'restart-required',
+              restartRequired,
               enabling: false,
             });
           } catch (error) {
@@ -1941,6 +2239,35 @@
           }
         };
 
+        /** Open the list-header restart confirmation and read the capability. */
+        const openRestart = () => {
+          setRestartAsk(true);
+          setRestartCapability(null);
+          setRestartError(null);
+          setRestartBusy(false);
+          void readRestartCapability().then((capability) => setRestartCapability(capability));
+        };
+        openRestartRef.current = openRestart;
+
+        /** Confirm the list-header restart. */
+        const confirmRestart = async () => {
+          if (restartBusy) return;
+          setRestartBusy(true);
+          setRestartError(null);
+          try {
+            const response = await fetch(UPDATE_API, {
+              method: 'POST',
+              headers: { 'content-type': 'application/json' },
+              body: JSON.stringify({ action: 'restart' }),
+            });
+            const data = await response.json().catch(() => null);
+            if (!response.ok || data?.ok !== true) throw new Error(data?.error ?? `HTTP ${response.status}`);
+          } catch (error) {
+            setRestartBusy(false);
+            setRestartError(errorText(error) || tRef.current('update.unknown'));
+          }
+        };
+
         const enableNow = async () => {
           const token = tokenRef.current;
           const current = view;
@@ -1952,6 +2279,13 @@
             if (tokenRef.current !== token) return;
             if (!result.ok) throw new Error(result.error?.message ?? t('update.unknown'));
             if (result.value.error !== undefined) throw new Error(operationReason(result.value, t));
+            if (result.value.application === 'restart-required' || current.restartRequired === true) {
+              recordPending({
+                name: current.name,
+                version: current.installedVersion ?? '',
+                reason: result.value.restartReason ?? '',
+              });
+            }
             const restart = await readRestartCapability();
             patch(token, { phase: 'restart', enabling: false, restart });
           } catch (error) {
@@ -1990,9 +2324,64 @@
           }
         };
 
-        if (view === null) return null;
         const t = (key, params) => translateCurrent(key, params);
-        const busy = view.phase === 'working' || view.phase === 'restarting' || view.enabling === true;
+
+        /** One tinted notice: the success/warn/error states share this chrome. */
+        const notice = (tone, icon, title, message) => h('div', { className: `dsh-powerup-update-notice ${tone}` },
+          icon,
+          h('div', { className: 'dsh-powerup-update-notice-copy' },
+            title === null || title === undefined ? null : h('span', { className: 'dsh-powerup-update-notice-title' }, title),
+            message === null || message === undefined ? null : h('span', null, message),
+          ),
+        );
+
+        const restartPrompt = restartAsk ? h('div', {
+          className: 'dsh-powerup-update-mask',
+          onMouseDown: (event) => {
+            if (event.target === event.currentTarget && !restartBusy) setRestartAsk(false);
+          },
+        },
+        h('div', {
+          className: 'dsh-powerup-update-dialog',
+          style: { width: 'min(420px,100%)' },
+          role: 'dialog',
+          'aria-modal': 'true',
+          'aria-labelledby': 'dsh-powerup-restart-title',
+        },
+        h('div', { className: 'dsh-powerup-update-head' },
+          h('div', { className: 'dsh-powerup-update-heading' },
+            h('h2', { id: 'dsh-powerup-restart-title' }, t('restart.title')),
+            h('p', null, t('restart.pending', { count: pending.length })),
+          ),
+          restartBusy ? null : h('button', { type: 'button', className: 'dsh-powerup-update-close', 'aria-label': t('update.close'), onClick: () => setRestartAsk(false) }, '×'),
+        ),
+        h('div', { className: 'dsh-powerup-update-body' },
+          h('p', { className: 'dsh-powerup-update-note' }, t('restart.desc')),
+          restartCapability !== null && restartCapability.supported !== true
+            ? notice('warn', h(WarnIcon, { size: 14 }), null, t('update.restartUnsupported', { reason: restartCapability.reason ?? '' }))
+            : null,
+          restartError === null ? null : notice('error', h(WarnIcon, { size: 14 }), null, restartError),
+          restartBusy
+            ? h('div', { className: 'dsh-powerup-update-status' },
+              h('span', { className: 'dsh-powerup-update-spinner', 'aria-hidden': 'true' }),
+              t('update.restarting'),
+            )
+            : null,
+        ),
+        h('div', { className: 'dsh-powerup-update-foot' },
+          h('button', { type: 'button', className: 'dsh-powerup-update-ghost', disabled: restartBusy, onClick: () => setRestartAsk(false) }, t('restart.cancel')),
+          h('button', {
+            type: 'button',
+            className: 'dsh-powerup-update-primary',
+            disabled: restartBusy || restartCapability?.supported !== true,
+            onClick: confirmRestart,
+          }, restartBusy ? t('update.restarting') : t('restart.confirm')),
+        ),
+        ),
+        ) : null;
+
+        if (view === null) return restartPrompt;
+        const busy = view.phase === 'working' || view.phase === 'self-updating' || view.phase === 'restarting' || view.enabling === true;
         const canClose = !busy;
         const title = view.title === undefined || view.title === '' ? view.name : view.title;
         const showVersions = view.phase === 'choose' && view.listOpen === true;
@@ -2023,21 +2412,12 @@
               supported ? h('button', { key: 'now', type: 'button', className: 'dsh-powerup-update-primary', disabled: view.restarting === true, onClick: restartNow }, view.restarting === true ? t('update.restarting') : t('update.restartNow')) : null,
             ].filter(Boolean);
           }
-          if (view.phase === 'restarting' || view.phase === 'working' || view.phase === 'loading') return [];
+          if (view.phase === 'restarting' || view.phase === 'working' || view.phase === 'self-updating' || view.phase === 'loading') return [];
           return [
             h('button', { key: 'done', type: 'button', className: 'dsh-powerup-update-primary', onClick: close }, view.phase === 'done' ? t('update.doneButton') : t('update.close')),
           ];
         })();
 
-        /** One tinted notice: the success/warn/error states share this chrome. */
-        const notice = (tone, icon, title, message) => h('div', { className: `dsh-powerup-update-notice ${tone}` },
-          icon,
-          h('div', { className: 'dsh-powerup-update-notice-copy' },
-            title === null || title === undefined ? null : h('span', { className: 'dsh-powerup-update-notice-title' }, title),
-            message === null || message === undefined ? null : h('span', null, message),
-          ),
-        );
-
         const currentChoice = view.choices.find((item) => item.key === view.registryKey) ?? view.choices[0];
 
         /** Rows of the floating version list, including its loading/error states. */
@@ -2102,8 +2482,15 @@
               t('update.loading'),
             );
           }
-          if (view.phase === 'self') {
-            return notice('warn', h(WarnIcon, { size: 15 }), t('update.selfTitle'), t('update.selfDesc'));
+          if (view.phase === 'self-updating') {
+            return [
+              h('div', { key: 'status', className: 'dsh-powerup-update-status' },
+                h('span', { className: 'dsh-powerup-update-spinner', 'aria-hidden': 'true' }),
+                t('update.selfUpdating'),
+              ),
+              h('p', { key: 'note', className: 'dsh-powerup-update-note' }, t('update.selfRefresh')),
+              h('span', { key: 'name', className: 'dsh-powerup-update-name' }, view.name),
+            ];
           }
           if (view.phase === 'blocked') {
             return notice('error', h(WarnIcon, { size: 15 }), t('update.unsupportedTitle'), view.error ?? t('update.notRemovable'));
@@ -2118,6 +2505,9 @@
                 ),
                 h('span', { className: 'dsh-powerup-update-name' }, view.name),
               ),
+              view.self === true
+                ? notice('warn', h(WarnIcon, { size: 14 }), null, t('update.selfUpdateWarning'))
+                : null,
               h('div', { key: 'version', className: 'dsh-powerup-update-field' },
                 h('label', { className: 'dsh-powerup-update-label', htmlFor: 'dsh-powerup-update-version' }, t('update.versionLabel')),
                 h('div', { className: 'dsh-powerup-update-row', ref: versionRef },
@@ -2289,20 +2679,42 @@
               role: 'listbox',
               'aria-label': t('update.registry'),
               style: view.registryPopover ?? fallbackPopover,
-            }, view.choices.map((choice) => h('button', {
-              key: choice.key,
-              type: 'button',
-              role: 'option',
-              className: 'dsh-powerup-update-option',
-              'aria-selected': choice.key === view.registryKey ? 'true' : 'false',
-              onClick: () => chooseRegistry(choice.key),
-            },
-            h('span', { className: 'dsh-powerup-update-option-copy' },
-              h('span', { className: 'dsh-powerup-update-option-title' }, choice.label),
-              h('span', { className: 'dsh-powerup-update-option-host' }, choice.hint),
-            ),
-            choice.key === view.registryKey ? h('span', { className: 'dsh-powerup-update-check' }, h(CheckIcon, { size: 13 })) : null,
-            )))
+            }, view.choices.map((choice) => {
+              const isDefault = choice.key === view.defaultRegistryKey;
+              const isChosen = choice.key === view.registryKey;
+              return h('div', {
+                key: choice.key,
+                role: 'option',
+                tabIndex: 0,
+                className: 'dsh-powerup-update-option',
+                'aria-selected': isChosen ? 'true' : 'false',
+                onClick: () => chooseRegistry(choice.key),
+                onKeyDown: (event) => {
+                  if (event.key !== 'Enter' && event.key !== ' ') return;
+                  event.preventDefault();
+                  chooseRegistry(choice.key);
+                },
+              },
+              h('span', { className: 'dsh-powerup-update-option-copy' },
+                h('span', { className: 'dsh-powerup-update-option-title' }, choice.label),
+                h('span', { className: 'dsh-powerup-update-option-host' }, choice.hint),
+              ),
+              isDefault
+                ? h('span', { className: 'dsh-powerup-update-default-tag', title: t('update.defaultHint') }, t('update.defaultTag'))
+                : h('button', {
+                  type: 'button',
+                  className: 'dsh-powerup-update-default',
+                  title: t('update.setDefault'),
+                  'aria-label': `${t('update.setDefault')} ${choice.label}`,
+                  onClick: (event) => {
+                    event.preventDefault();
+                    event.stopPropagation();
+                    setDefaultRegistry(choice);
+                  },
+                }, h(StarIcon, { size: 12 })),
+              isChosen ? h('span', { className: 'dsh-powerup-update-check' }, h(CheckIcon, { size: 13 })) : null,
+              );
+            }))
             : null,
         );
       }
@@ -2677,6 +3089,7 @@
           PowerUpOverlay,
           PluginUpdateOverlay,
           ensureUpdateButtons,
+          ensureRestartBar,
           updateButtonLabel,
           popoverPlacement,
           rowKeyParts,
@@ -2690,6 +3103,10 @@
           compareVersionsDesc,
           buildRegistryChoices,
           pickRegistryChoice,
+          matchStoredChoice,
+          readDefaultRegistry,
+          writeDefaultRegistry,
+          readPendingRestarts,
           lookupRegistries,
           fetchRegistryVersions,
           registryHost,

package/index.js

@@ -1,23 +1,38 @@
 /**
  * Host half of dsh-powerup.
  *
- * The plugin is primarily a Client UI upgrade. This Host entry exists for one
- * operation the browser cannot perform itself: restarting the whole DSH
- * desktop application after a plugin update. It exposes a small loopback-only
- * route under `/dsh-powerup/api`:
+ * The plugin is primarily a Client UI upgrade. This Host entry owns the two
+ * operations the browser cannot perform itself:
  *
- *   GET  /dsh-powerup/api/restart   → { ok, supported, reason? }
- *   POST /dsh-powerup/api/restart   → schedules the restart, then answers
+ *   GET  /dsh-powerup/api/restart       → { ok, supported, reason? }
+ *   POST /dsh-powerup/api/restart       → schedules a whole-app restart
+ *   POST /dsh-powerup/api/self-update   → removes and reinstalls this plugin
+ *                                         in the background, surviving the
+ *                                         plugin's own unload
  *
- * The Client half drives plugin installation through the built-in
- * `pluginManager` Remote; only the process restart needs Host code.
+ * The Client half drives other plugins' installation through the built-in
+ * `pluginManager` Remote. Only the process restart and the self-update handoff
+ * need Host code.
  */
 
+import { randomUUID } from 'node:crypto';
+import { appendFileSync, mkdirSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
 import { describeRestart, requestRestart } from './lib/restart.js';
 
 /** Prefix owned by this plugin. */
 const ROUTE = '/dsh-powerup/api';
 
+/** The bundle this pair of routes may replace while its own UI unloads. */
+const MODULE_ID = '@restregular/dsh-powerup';
+
+/** Let the HTTP response reach the browser before the plugin unloads. */
+const SELF_UPDATE_DELAY_MS = 600;
+
+/** Request body bound for the small JSON commands. */
+const BODY_LIMIT = 16 * 1024;
+
 /**
  * @param {import('node:http').ServerResponse} res
  * @param {unknown} payload
@@ -34,6 +49,23 @@ function sendJson(res, payload, status = 200) {
   res.end(body);
 }
 
+/**
+ * Read a bounded JSON request body.
+ * @param {import('node:http').IncomingMessage} req
+ * @returns {Promise<unknown>}
+ */
+async function readJsonBody(req) {
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of req) {
+    size += chunk.length;
+    if (size > BODY_LIMIT) throw new Error('body-too-large');
+    chunks.push(chunk);
+  }
+  if (size === 0) return {};
+  return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+
 /**
  * The request came from this machine.
  * @param {import('node:http').IncomingMessage} req
@@ -64,11 +96,89 @@ function sameOrigin(req) {
   }
 }
 
+/**
+ * Append one line to the self-update log; logging never blocks the operation.
+ * @param {string} line
+ */
+function appendSelfUpdateLog(line) {
+  try {
+    const path = join(process.env.DSH_HOME?.trim() || join(homedir(), '.dsh'), 'powerup', 'self-update.log');
+    mkdirSync(dirname(path), { recursive: true });
+    appendFileSync(path, `${new Date().toISOString()} ${line}\n`);
+  } catch {
+    /* The diagnostic log is optional. */
+  }
+}
+
+/**
+ * The concrete versions the update dialog accepts. The Client applies the same
+ * shape before it removes anything; this is the Host-side guard.
+ * @param {unknown} value
+ * @returns {string}
+ */
+function normalizeVersion(value) {
+  const text = String(value ?? '').trim().replace(/^v/u, '');
+  if (text === '' || /\s/u.test(text) || text.includes('@')) return '';
+  return /^\d+(?:\.\d+)*(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u.test(text) ? text : '';
+}
+
+/**
+ * Remove and reinstall this plugin through the built-in manager. The function
+ * is started after the HTTP response and keeps running in the Host process
+ * even when removing the bundle unloads this plugin's own Host fiber.
+ *
+ * @param {import('@deepseek-ai/cordis').Context} ctx
+ * @param {string} version
+ * @param {string | null} registry
+ * @param {{ manager?: unknown, log?: (line: string) => void }} [options]
+ * @returns {Promise<{ ok: boolean, stage?: string, error?: string }>}
+ */
+export async function performSelfUpdate(ctx, version, registry, options = {}) {
+  const log = options.log ?? appendSelfUpdateLog;
+  const manager = options.manager ?? ctx?.get?.('pluginManager');
+  if (manager === undefined || typeof manager.installBundle !== 'function') {
+    log('self-update: pluginManager service is unavailable');
+    return { ok: false, stage: 'manager', error: 'pluginManager service is unavailable' };
+  }
+  const spec = `${MODULE_ID}@${version}`;
+  log(`self-update: start ${spec} registry=${String(registry)}`);
+  let stage = 'remove';
+  try {
+    const removed = await manager.removeBundle(MODULE_ID);
+    if (removed?.error !== undefined) {
+      throw new Error(`remove failed: ${removed.error.code ?? 'error'} ${removed.error.diagnostic ?? ''}`.trim());
+    }
+    log(`self-update: removed (application=${removed?.application ?? 'unknown'})`);
+    stage = 'inspect';
+    const checked = await manager.inspect(spec, { registry });
+    if (checked?.status !== 'accepted') {
+      throw new Error(`inspect refused: ${checked?.problem ?? 'unknown'} ${checked?.reason ?? ''}`.trim());
+    }
+    log(`self-update: inspected (bundle=${String(checked.bundle)})`);
+    stage = 'install';
+    const installed = await manager.installBundle(spec, {
+      enabled: true,
+      registry,
+      requestId: randomUUID(),
+    });
+    if (installed?.error !== undefined) {
+      throw new Error(`install failed: ${installed.error.code ?? 'error'} ${installed.error.diagnostic ?? ''}`.trim());
+    }
+    log(`self-update: installed (application=${installed?.application ?? 'unknown'}, version=${installed?.version ?? 'unknown'})`);
+    return { ok: true, stage: 'install' };
+  } catch (error) {
+    const message = String(error?.message ?? error);
+    log(`self-update: failed at ${stage}: ${message}${error?.stack === undefined ? '' : `\n${error.stack}`}`);
+    return { ok: false, stage, error: message };
+  }
+}
+
 /**
  * @param {import('node:http').IncomingMessage} req
  * @param {import('node:http').ServerResponse} res
+ * @param {import('@deepseek-ai/cordis').Context} ctx
  */
-async function handle(req, res) {
+async function handle(req, res, ctx) {
   if (!isLoopback(req) || !sameOrigin(req)) {
     sendJson(res, { ok: false, error: 'forbidden' }, 403);
     return;
@@ -76,11 +186,44 @@ async function handle(req, res) {
 
   const url = new URL(req.url ?? ROUTE, 'http://localhost');
   const op = url.pathname.slice(ROUTE.length).replace(/^\/+/u, '') || url.searchParams.get('op') || '';
-  if (op !== '' && op !== 'restart') {
+  if (op !== '' && op !== 'restart' && op !== 'self-update') {
     sendJson(res, { ok: false, error: 'not-found' }, 404);
     return;
   }
 
+  if (op === 'self-update') {
+    if (req.method !== 'POST') {
+      sendJson(res, { ok: false, error: 'method-not-allowed' }, 405);
+      return;
+    }
+    let body;
+    try {
+      body = await readJsonBody(req);
+    } catch (error) {
+      sendJson(res, { ok: false, error: String(error?.message ?? error) }, 400);
+      return;
+    }
+    const version = normalizeVersion(body?.version);
+    if (version === '') {
+      sendJson(res, { ok: false, code: 'invalid-version', error: 'a concrete version is required' }, 400);
+      return;
+    }
+    const registry = typeof body?.registry === 'string' && body.registry.trim() !== '' ? body.registry.trim() : null;
+    const manager = ctx?.get?.('pluginManager');
+    if (manager === undefined || typeof manager.removeBundle !== 'function' || typeof manager.installBundle !== 'function' || typeof manager.inspect !== 'function') {
+      sendJson(res, { ok: false, code: 'manager-unavailable', error: 'pluginManager service is unavailable' }, 503);
+      return;
+    }
+    sendJson(res, { ok: true, started: true, version });
+    const timer = setTimeout(() => {
+      void performSelfUpdate(ctx, version, registry, { manager }).catch((error) => {
+        appendSelfUpdateLog(`self-update: uncaught ${String(error?.stack ?? error)}`);
+      });
+    }, SELF_UPDATE_DELAY_MS);
+    timer.unref?.();
+    return;
+  }
+
   if (req.method === 'GET') {
     sendJson(res, { ok: true, action: 'restart', ...describeRestart() });
     return;
@@ -100,7 +243,7 @@ async function handle(req, res) {
 }
 
 /**
- * Mount the restart route once the Web server exists.
+ * Mount the restart and self-update routes once the Web server exists.
  * @param {import('@deepseek-ai/cordis').Context} ctx
  */
 export function apply(ctx) {
@@ -109,11 +252,15 @@ export function apply(ctx) {
     const webServer = scope.get('webServer');
     if (webServer === undefined || typeof webServer.register !== 'function') return;
     scope.effect(
-      () => webServer.register({ kind: 'prefix', path: ROUTE, handler: handle }),
-      'dsh-powerup: restart route',
+      () => webServer.register({
+        kind: 'prefix',
+        path: ROUTE,
+        handler: (req, res) => handle(req, res, ctx),
+      }),
+      'dsh-powerup: restart and self-update routes',
     );
   });
 }
 
 /** Exported for tests only; the Host never reads this. */
-export const __test = { handle, isLoopback, sameOrigin, ROUTE };
+export const __test = { handle, isLoopback, sameOrigin, performSelfUpdate, normalizeVersion, ROUTE, MODULE_ID };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@restregular/dsh-powerup",
-  "version": "0.2.3",
-  "description": "Power-Up — small, opt-in upgrades for DeepSeek Harness. Adds a right-click action menu to the Trajectory ledger and an update control for third-party plugins installed from the Plugins page, with version lookup, uninstall-and-reinstall through the Add plugin path, and an optional DSH restart. · 为 DeepSeek Harness 提供小型增强：在轨迹页面右键记录即可复制、引用、查看详情或从该记录 Fork；并在插件页为第三方已安装插件提供带版本查询的更新按钮，沿用「添加插件」的安装流程，并可重启 DSH 使更改生效。",
+  "version": "0.3.0",
+  "description": "Power-Up — small, opt-in upgrades for DeepSeek Harness. Adds a right-click action menu to the Trajectory ledger and an update control for third-party plugins installed from the Plugins page, with version lookup from the configured registries, a starred default source, uninstall-and-reinstall through the Add plugin path, restart-needed markers, a background self-update, and an optional DSH restart. · 为 DeepSeek Harness 提供小型增强：在轨迹页面右键记录即可复制、引用、查看详情或从该记录 Fork；并在插件页为已安装插件提供带版本查询的更新按钮，安装源可设默认，沿用「添加插件」的安装流程，支持待重启标记、后台自更新与一键重启。",
   "icon": "./icon.svg",
   "type": "module",
   "main": "index.js",