@rezti/dsh-rez-suite 0.1.18 → 0.1.20

package/README.md

@@ -6,10 +6,10 @@
 # 第一次
 dsh plugin --profile web add @rezti/dsh-rez-suite
 
-# 以后升级（只记这一条）
+# 以后升级：侧栏底部「升级」按钮，或
 dsh plugin --profile web update @rezti/dsh-rez-suite
 ```
 
 包名是 `@rezti/dsh-rez-suite`，不是 `dsh-rezti-suite`。不要对同一 profile 再单独 add 子包，会重复注册。
 
-拆分包（`dsh-rez-odoo` 等）给开发改代码用。Web 面板（含微信扫码）暂时仍在本包。老板三室（搞钱 / 产品 / 运营）也在本包内播种并登记侧栏，**不要**再装 `@rezti/dsh-rez-boss-desk`。
+拆分包（`dsh-rez-odoo` 等）给开发改代码用。Web 面板（含微信扫码）暂时仍在本包。设置里角色选「老板」后，才会在侧栏登记搞钱 / 产品 / 运营；切走老板会拿掉这三间（文件夹保留）。**不要**再装 `@rezti/dsh-rez-boss-desk`。

package/lib/client.d.ts

@@ -7349,6 +7349,13 @@ declare const zh: {
   readonly 'weixin.listening': "通道在听：微信 → 网页「微信」会话（同一条，不另开窗口）→ 回微信。";
   readonly 'weixin.loggedIn': "已登录，通道未在听。点「重新连接」即可拉起，不必再扫码。";
   readonly 'weixin.loggedOut': "尚未登录。";
+  readonly 'upgrade.label': "升级";
+  readonly 'upgrade.current': "已最新";
+  readonly 'upgrade.aria': "升级 ReZ-TI 插件";
+  readonly 'upgrade.running': "升级中…";
+  readonly 'upgrade.reloading': "正在重载";
+  readonly 'upgrade.already': "已是 {version}";
+  readonly 'upgrade.reloadTimeout': "升级完成，但网页还没重新连上。请刷新这一页。";
 };
 type RezKey = keyof typeof zh;
 //#endregion
@@ -7372,6 +7379,13 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
         children?: never;
       };
     };
+    'sidebar.footer.action': {
+      kind: 'list';
+      scope: 'root';
+      owner: {
+        wide: boolean;
+      };
+    };
   }
 }
 declare const inject: string[];

package/lib/client.js

@@ -4,7 +4,7 @@ window.__ModuleLoader__.load({
 		var module = { exports: {} };
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-(function(){var id="dsh-rez-suite-css";if(typeof document==="undefined"||document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent=".LOjPTW_shell {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_card {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-3);\n  border-radius: 12px;\n  list-style: none;\n  transition: border-color .16s, background .16s;\n}\n\n.LOjPTW_card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_cardOpen {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_header {\n  appearance: none;\n  width: 100%;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  background: none;\n  border: 0;\n  border-radius: 12px;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  display: flex;\n}\n\n.LOjPTW_header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_headText {\n  flex-direction: column;\n  flex: 1;\n  gap: 4px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_name {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n}\n\n.LOjPTW_description {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 13px;\n  line-height: 1.5;\n}\n\n.LOjPTW_chevron {\n  color: var(--dsw-alias-label-tertiary);\n  flex: none;\n  transition: transform .16s;\n}\n\n.LOjPTW_chevronOpen {\n  transform: rotate(180deg);\n}\n\n.LOjPTW_body {\n  border-top: 1px solid var(--dsw-alias-border-l2);\n  margin: 0 16px 12px;\n  padding-top: 8px;\n}\n\n.LOjPTW_tabBar {\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  flex: none;\n  gap: 2px;\n  display: flex;\n}\n\n.LOjPTW_tab {\n  color: var(--dsw-alias-label-secondary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-bottom: 2px solid #0000;\n  border-radius: 6px 6px 0 0;\n  padding: 7px 14px;\n  font-size: 13px;\n}\n\n.LOjPTW_tab:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_tab[data-active] {\n  color: var(--dsw-alias-label-primary);\n  border-bottom-color: var(--dsw-alias-state-business-primary);\n  font-weight: 600;\n}\n\n.LOjPTW_tabBody {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  padding: 12px 0 4px;\n  display: flex;\n}\n\n.LOjPTW_section {\n  border: 1px solid var(--dsw-alias-border-l1);\n  background: var(--dsw-alias-bg-layer-1, var(--dsw-alias-bg-base));\n  border-radius: 10px;\n  flex-direction: column;\n  gap: 8px;\n  padding: 12px;\n  display: flex;\n}\n\n.LOjPTW_sectionTitle {\n  color: var(--dsw-alias-label-primary);\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n}\n\n.LOjPTW_field {\n  flex-direction: column;\n  align-items: stretch;\n  gap: 4px;\n  display: flex;\n}\n\n.LOjPTW_label {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n}\n\n.LOjPTW_input, .LOjPTW_select {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  outline: none;\n  padding: 6px 8px;\n  font-size: 13px;\n}\n\n.LOjPTW_checkbox {\n  justify-self: start;\n  width: 15px;\n  height: 15px;\n}\n\n.LOjPTW_toolbar {\n  flex-wrap: wrap;\n  flex: none;\n  align-items: center;\n  gap: 8px;\n  display: flex;\n}\n\n.LOjPTW_button {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  border-radius: 8px;\n  padding: 7px 12px;\n  font-size: 13px;\n}\n\n.LOjPTW_button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_button:disabled {\n  opacity: .4;\n  cursor: default;\n}\n\n.LOjPTW_primaryButton {\n  background: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n\n.LOjPTW_dangerButton {\n  background: var(--dsw-alias-state-danger, #c62828);\n  border-color: var(--dsw-alias-state-danger, #c62828);\n  color: #fff;\n}\n\n.LOjPTW_qr {\n  background: #fff;\n  border-radius: 8px;\n  width: 200px;\n  height: 200px;\n  margin: 8px 0;\n  display: block;\n}\n\n.LOjPTW_message {\n  color: var(--dsw-alias-label-secondary);\n  margin: 0;\n  font-size: 12.5px;\n  line-height: 1.5;\n}\n\n.LOjPTW_error {\n  color: var(--dsw-alias-state-danger, #c62828);\n}\n\n.LOjPTW_tableWrap {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  overflow: auto;\n}\n\n.LOjPTW_table {\n  border-collapse: collapse;\n  width: 100%;\n  font-size: 12.5px;\n}\n\n.LOjPTW_table th {\n  z-index: 1;\n  text-align: left;\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  padding: 8px 10px;\n  position: sticky;\n  top: 0;\n}\n\n.LOjPTW_table td {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  vertical-align: top;\n  padding: 8px 10px;\n}\n\n.LOjPTW_badge {\n  border-radius: 999px;\n  padding: 2px 8px;\n  font-size: 11px;\n  display: inline-block;\n}\n\n.LOjPTW_badgeOk {\n  color: #229a55;\n  background: #229a5524;\n}\n\n.LOjPTW_badgeFail {\n  color: #c62828;\n  background: #c6282824;\n}\n\n.LOjPTW_cards {\n  grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_stat {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  padding: 10px;\n}\n\n.LOjPTW_cardLabel {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 11px;\n}\n\n.LOjPTW_cardValue {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n}\n";document.head.appendChild(s);})();
+(function(){var id="dsh-rez-suite-css";if(typeof document==="undefined"||document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent=".LOjPTW_shell {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_card {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-3);\n  border-radius: 12px;\n  list-style: none;\n  transition: border-color .16s, background .16s;\n}\n\n.LOjPTW_card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_cardOpen {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_header {\n  appearance: none;\n  width: 100%;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  background: none;\n  border: 0;\n  border-radius: 12px;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  display: flex;\n}\n\n.LOjPTW_header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_headText {\n  flex-direction: column;\n  flex: 1;\n  gap: 4px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_name {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n}\n\n.LOjPTW_description {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 13px;\n  line-height: 1.5;\n}\n\n.LOjPTW_chevron {\n  color: var(--dsw-alias-label-tertiary);\n  flex: none;\n  transition: transform .16s;\n}\n\n.LOjPTW_chevronOpen {\n  transform: rotate(180deg);\n}\n\n.LOjPTW_body {\n  border-top: 1px solid var(--dsw-alias-border-l2);\n  margin: 0 16px 12px;\n  padding-top: 8px;\n}\n\n.LOjPTW_tabBar {\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  flex: none;\n  gap: 2px;\n  display: flex;\n}\n\n.LOjPTW_tab {\n  color: var(--dsw-alias-label-secondary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-bottom: 2px solid #0000;\n  border-radius: 6px 6px 0 0;\n  padding: 7px 14px;\n  font-size: 13px;\n}\n\n.LOjPTW_tab:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_tab[data-active] {\n  color: var(--dsw-alias-label-primary);\n  border-bottom-color: var(--dsw-alias-state-business-primary);\n  font-weight: 600;\n}\n\n.LOjPTW_tabBody {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  padding: 12px 0 4px;\n  display: flex;\n}\n\n.LOjPTW_section {\n  border: 1px solid var(--dsw-alias-border-l1);\n  background: var(--dsw-alias-bg-layer-1, var(--dsw-alias-bg-base));\n  border-radius: 10px;\n  flex-direction: column;\n  gap: 8px;\n  padding: 12px;\n  display: flex;\n}\n\n.LOjPTW_sectionTitle {\n  color: var(--dsw-alias-label-primary);\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n}\n\n.LOjPTW_field {\n  flex-direction: column;\n  align-items: stretch;\n  gap: 4px;\n  display: flex;\n}\n\n.LOjPTW_label {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n}\n\n.LOjPTW_input, .LOjPTW_select {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  outline: none;\n  padding: 6px 8px;\n  font-size: 13px;\n}\n\n.LOjPTW_checkbox {\n  justify-self: start;\n  width: 15px;\n  height: 15px;\n}\n\n.LOjPTW_toolbar {\n  flex-wrap: wrap;\n  flex: none;\n  align-items: center;\n  gap: 8px;\n  display: flex;\n}\n\n.LOjPTW_button {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  border-radius: 8px;\n  padding: 7px 12px;\n  font-size: 13px;\n}\n\n.LOjPTW_button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_button:disabled {\n  opacity: .4;\n  cursor: default;\n}\n\n.LOjPTW_primaryButton {\n  background: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n\n.LOjPTW_dangerButton {\n  background: var(--dsw-alias-state-danger, #c62828);\n  border-color: var(--dsw-alias-state-danger, #c62828);\n  color: #fff;\n}\n\n.LOjPTW_qr {\n  background: #fff;\n  border-radius: 8px;\n  width: 200px;\n  height: 200px;\n  margin: 8px 0;\n  display: block;\n}\n\n.LOjPTW_message {\n  color: var(--dsw-alias-label-secondary);\n  margin: 0;\n  font-size: 12.5px;\n  line-height: 1.5;\n}\n\n.LOjPTW_error {\n  color: var(--dsw-alias-state-danger, #c62828);\n}\n\n.LOjPTW_tableWrap {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  overflow: auto;\n}\n\n.LOjPTW_table {\n  border-collapse: collapse;\n  width: 100%;\n  font-size: 12.5px;\n}\n\n.LOjPTW_table th {\n  z-index: 1;\n  text-align: left;\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  padding: 8px 10px;\n  position: sticky;\n  top: 0;\n}\n\n.LOjPTW_table td {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  vertical-align: top;\n  padding: 8px 10px;\n}\n\n.LOjPTW_badge {\n  border-radius: 999px;\n  padding: 2px 8px;\n  font-size: 11px;\n  display: inline-block;\n}\n\n.LOjPTW_badgeOk {\n  color: #229a55;\n  background: #229a5524;\n}\n\n.LOjPTW_badgeFail {\n  color: #c62828;\n  background: #c6282824;\n}\n\n.LOjPTW_cards {\n  grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_stat {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  padding: 10px;\n}\n\n.LOjPTW_cardLabel {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 11px;\n}\n\n.LOjPTW_cardValue {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n}\n\n.LOjPTW_upgradeLayer {\n  flex: none;\n  align-items: center;\n  width: 100%;\n  height: 42px;\n  margin: 8px 0 0;\n  display: flex;\n  position: relative;\n}\n\n.LOjPTW_upgradeLayerRail {\n  width: 36px;\n  height: 36px;\n  margin: 0;\n}\n\n.LOjPTW_upgradeButton {\n  width: calc(100% + 4px);\n  height: 42px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-radius: 12px;\n  align-items: center;\n  gap: 8px;\n  margin: 0 -2px;\n  padding: 0 10px 0 8px;\n  font-family: inherit;\n  font-size: 14px;\n  display: inline-flex;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeButton:hover, .LOjPTW_upgradeButton[data-outdated] {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_upgradeButton:disabled {\n  cursor: progress;\n  opacity: .72;\n}\n\n.LOjPTW_upgradeButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_upgradeLayerRail .LOjPTW_upgradeButton {\n  border-radius: 50%;\n  justify-content: center;\n  gap: 0;\n  width: 36px;\n  height: 36px;\n  padding: 0;\n}\n\n.LOjPTW_upgradeLabel {\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  min-width: 0;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeMeta {\n  color: var(--dsw-alias-label-tertiary);\n  font-variant-numeric: tabular-nums;\n  flex: none;\n  margin-left: auto;\n  font-size: 12px;\n  line-height: 16px;\n}\n\n.LOjPTW_upgradeDot {\n  background: var(--dsw-alias-brand-primary);\n  border-radius: 50%;\n  flex: none;\n  width: 7px;\n  height: 7px;\n}\n";document.head.appendChild(s);})();
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let react = require("react");
 let react_jsx_runtime = require("react/jsx-runtime");
@@ -109,7 +109,14 @@ const zh = {
 	"weixin.qrAlt": "微信登录二维码",
 	"weixin.listening": "通道在听：微信 → 网页「微信」会话（同一条，不另开窗口）→ 回微信。",
 	"weixin.loggedIn": "已登录，通道未在听。点「重新连接」即可拉起，不必再扫码。",
-	"weixin.loggedOut": "尚未登录。"
+	"weixin.loggedOut": "尚未登录。",
+	"upgrade.label": "升级",
+	"upgrade.current": "已最新",
+	"upgrade.aria": "升级 ReZ-TI 插件",
+	"upgrade.running": "升级中…",
+	"upgrade.reloading": "正在重载",
+	"upgrade.already": "已是 {version}",
+	"upgrade.reloadTimeout": "升级完成，但网页还没重新连上。请刷新这一页。"
 };
 const en = {
 	"entry.label": "Rez",
@@ -208,7 +215,14 @@ const en = {
 	"weixin.qrAlt": "WeChat login QR",
 	"weixin.listening": "Channel is live: WeChat → the WeChat folder session on the left → WeChat.",
 	"weixin.loggedIn": "Logged in, listener idle. Click Reconnect — no need to scan again.",
-	"weixin.loggedOut": "Not logged in."
+	"weixin.loggedOut": "Not logged in.",
+	"upgrade.label": "Upgrade",
+	"upgrade.current": "Up to date",
+	"upgrade.aria": "Upgrade the ReZ-TI plugin",
+	"upgrade.running": "Updating…",
+	"upgrade.reloading": "Reloading",
+	"upgrade.already": "Already {version}",
+	"upgrade.reloadTimeout": "Update finished, but the page did not reconnect. Refresh this tab."
 };
 /** Minimal {name} interpolator shared by the panel helpers. */
 function t(dict, key, values) {
@@ -225,7 +239,8 @@ const REZ_API = {
 	audit: "/api/dsh-rez-suite/audit",
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
-	weixinVerify: "/api/dsh-rez-suite/weixin/verify"
+	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
 //#region src/client/api.ts
@@ -287,6 +302,12 @@ var RezApi = class {
 	async weixinLogout() {
 		return readJson(await fetch(REZ_API.weixin, { method: "DELETE" }));
 	}
+	async updateStatus() {
+		return readJson(await fetch(REZ_API.update));
+	}
+	async applyUpdate() {
+		return readJson(await fetch(REZ_API.update, { method: "POST" }));
+	}
 };
 //#endregion
 //#region src/client/panel/helpers.ts
@@ -341,7 +362,13 @@ var panel_module_default = {
 	"tabBody": "LOjPTW_tabBody",
 	"table": "LOjPTW_table",
 	"tableWrap": "LOjPTW_tableWrap",
-	"toolbar": "LOjPTW_toolbar"
+	"toolbar": "LOjPTW_toolbar",
+	"upgradeButton": "LOjPTW_upgradeButton",
+	"upgradeDot": "LOjPTW_upgradeDot",
+	"upgradeLabel": "LOjPTW_upgradeLabel",
+	"upgradeLayer": "LOjPTW_upgradeLayer",
+	"upgradeLayerRail": "LOjPTW_upgradeLayerRail",
+	"upgradeMeta": "LOjPTW_upgradeMeta"
 };
 //#endregion
 //#region src/client/panel/AuditTab.tsx
@@ -1249,6 +1276,109 @@ function RezPluginCard() {
 	});
 }
 //#endregion
+//#region src/client/upgrade-button.tsx
+/**
+* Sidebar footer action: upgrade @rezti/dsh-rez-suite without a terminal.
+* Host code still needs a process respawn; the button does that after pnpm add.
+*/
+function UpgradeIcon() {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
+		width: "16",
+		height: "16",
+		viewBox: "0 0 16 16",
+		"aria-hidden": "true",
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", {
+			d: "M8 12.5V4.8M8 4.8 4.8 8M8 4.8 11.2 8M3 13.2h10",
+			fill: "none",
+			stroke: "currentColor",
+			strokeWidth: "1.4",
+			strokeLinecap: "round",
+			strokeLinejoin: "round"
+		})
+	});
+}
+async function waitUntilHostBack(api, timeoutMs = 6e4) {
+	const deadline = Date.now() + timeoutMs;
+	await new Promise((resolve) => setTimeout(resolve, 800));
+	while (Date.now() < deadline) try {
+		await api.updateStatus();
+		return;
+	} catch {
+		await new Promise((resolve) => setTimeout(resolve, 700));
+	}
+	throw new Error(tt("upgrade.reloadTimeout"));
+}
+function UpgradeButton({ wide }) {
+	const api = (0, react.useMemo)(() => new RezApi(), []);
+	const [info, setInfo] = (0, react.useState)();
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [note, setNote] = (0, react.useState)("");
+	(0, react.useEffect)(() => {
+		let cancelled = false;
+		api.updateStatus().then((value) => {
+			if (!cancelled) setInfo(value);
+		}).catch((error) => {
+			if (!cancelled) setNote(error instanceof Error ? error.message : String(error));
+		});
+		return () => {
+			cancelled = true;
+		};
+	}, [api]);
+	const label = busy ? tt("upgrade.running") : info?.outdated === true ? tt("upgrade.label") : tt("upgrade.current");
+	const meta = note !== "" ? note : info === void 0 ? "" : info.outdated ? info.latest : info.installed;
+	async function onClick() {
+		if (busy) return;
+		setBusy(true);
+		setNote("");
+		try {
+			const snapshot = info ?? await api.updateStatus();
+			setInfo(snapshot);
+			if (!snapshot.outdated) {
+				setNote(tt("upgrade.already", { version: snapshot.installed }));
+				return;
+			}
+			const result = await api.applyUpdate();
+			setInfo(result);
+			if (result.restarting) {
+				setNote(tt("upgrade.reloading"));
+				await waitUntilHostBack(api);
+				window.location.reload();
+				return;
+			}
+			setNote(tt("upgrade.already", { version: result.installed }));
+		} catch (error) {
+			setNote(error instanceof Error ? error.message : String(error));
+		} finally {
+			setBusy(false);
+		}
+	}
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: wide ? panel_module_default.upgradeLayer : `${panel_module_default.upgradeLayer} ${panel_module_default.upgradeLayerRail}`,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+			type: "button",
+			className: panel_module_default.upgradeButton,
+			"data-outdated": info?.outdated === true ? "" : void 0,
+			"aria-label": tt("upgrade.aria"),
+			disabled: busy,
+			onClick: () => {
+				onClick();
+			},
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UpgradeIcon, {}),
+				wide && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: panel_module_default.upgradeLabel,
+					children: label
+				}),
+				wide && meta !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: panel_module_default.upgradeMeta,
+					children: meta
+				}),
+				!wide && info?.outdated === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: panel_module_default.upgradeDot })
+			]
+		})
+	});
+}
+//#endregion
 //#region src/client/index.ts
 const NS = "dsh-rez-suite";
 const inject = ["slots", "locale"];
@@ -1270,6 +1400,13 @@ function apply(ctx) {
 		label: () => t("settings.title"),
 		locale: NS
 	}, RezSettingsPage));
+	ctx.slots.inject("sidebar.footer.action", () => ctx.slots.register({
+		name: "sidebar.footer.action",
+		id: "rez-upgrade",
+		order: 10,
+		label: () => t("upgrade.label"),
+		locale: NS
+	}, UpgradeButton));
 }
 //#endregion
 exports.apply = apply;

package/lib/index.d.ts

@@ -1741,7 +1741,8 @@ declare const name = "rez-suite";
 declare const inject: string[];
 declare const REZ_SETTINGS_NAMESPACE: SettingsNamespace;
 declare const Config: Schema<RezConfig>;
-declare const REZ_GUIDANCE: string;
+declare const REZ_GUIDANCE_CORE: string;
+declare function rezGuidanceFor(role: RezConfig['role']): string;
 declare function apply(ctx: Context, config?: RezConfig): void;
 //#endregion
-export { Config, REZ_GUIDANCE, REZ_SETTINGS_NAMESPACE, apply, inject, name };
+export { Config, REZ_GUIDANCE_CORE, REZ_SETTINGS_NAMESPACE, apply, inject, name, rezGuidanceFor };

package/lib/index.js

@@ -2,9 +2,10 @@ import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { dirname, join, relative } from "node:path";
 import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, mergeConnections, secretConfigured, writeManagedCredential } from "@rezti/dsh-rez-sso";
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { DatabaseSync } from "node:sqlite";
 import { fileURLToPath } from "node:url";
+import { spawn } from "node:child_process";
 //#region ../../node_modules/.pnpm/@deepseek-ai+cosmokit@1.8.2/node_modules/@deepseek-ai/cosmokit/lib/index.js
 /** Return true when a value is `null` or `undefined`. */
 function isNullable(value) {
@@ -2955,7 +2956,8 @@ const REZ_API = {
 	audit: "/api/dsh-rez-suite/audit",
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
-	weixinVerify: "/api/dsh-rez-suite/weixin/verify"
+	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
 //#region src/store.ts
@@ -3205,7 +3207,7 @@ function applyPublicPatch(current, patch) {
 }
 /** Build every /api/dsh-rez-suite route (exact paths). */
 function makeRoutes(deps) {
-	const { getConfig, updateConfig, host, tokens, onCredentialWritten } = deps;
+	const { getConfig, updateConfig, host, tokens, onCredentialWritten, selfUpdate } = deps;
 	const guard = (req, res, method) => {
 		if (!isLoopbackRequest(req)) {
 			writeJson(res, 403, { error: "forbidden: loopback-only" });
@@ -3277,6 +3279,31 @@ function makeRoutes(deps) {
 				tokens.reset();
 				writeJson(res, 200, { ok: true });
 			}
+		},
+		{
+			kind: "exact",
+			path: REZ_API.update,
+			handler: async (req, res) => {
+				const method = req.method === "POST" ? "POST" : "GET";
+				if (!guard(req, res, method)) return;
+				if (selfUpdate === void 0) {
+					writeJson(res, 501, { error: "self-update is not available" });
+					return;
+				}
+				try {
+					if (method === "GET") {
+						writeJson(res, 200, await selfUpdate.status());
+						return;
+					}
+					const result = await selfUpdate.apply();
+					writeJson(res, 200, result);
+					if (result.restarting) setTimeout(() => {
+						selfUpdate.relaunch();
+					}, 400);
+				} catch (error) {
+					writeJson(res, 502, { error: error instanceof Error ? error.message : String(error) });
+				}
+			}
 		}
 	];
 }
@@ -7667,9 +7694,32 @@ function rezConfigTool(config) {
 }
 //#endregion
 //#region src/boss/register.ts
+/**
+* Register or drop the three boss rooms in the official workspace sidebar.
+* `workspaceRegistry.create` is idempotent: same canonical path returns the
+* existing record. New records are prepended, so we register in reverse to
+* keep 搞钱 → 产品 → 运营 at the top of the sidebar.
+* `delete` only drops the registry row — directories and session logs stay.
+*/
+function canon(path) {
+	try {
+		return realpathSync(path);
+	} catch {
+		return path;
+	}
+}
+function isRegisteredBossRoom(workspace, rooms) {
+	return new Set(rooms.map((room) => canon(room.path))).has(canon(workspace.path));
+}
 async function registerBossWorkspaces(registry, rooms) {
 	for (const room of [...rooms].reverse()) await registry.create(room.path, room.folder);
 }
+async function unregisterBossWorkspaces(registry, rooms) {
+	for (const workspace of registry.list()) {
+		if (!isRegisteredBossRoom(workspace, rooms)) continue;
+		await registry.delete(workspace.id);
+	}
+}
 //#endregion
 //#region src/boss/seed.ts
 const BOSS_ROOMS = [
@@ -7766,27 +7816,195 @@ function listFiles(root) {
 }
 //#endregion
 //#region src/boss/mount.ts
+const BOSS_ROLE_HINT = "设置 → 插件 → ReZ-TI → 角色选「老板」后，左侧会出现搞钱 / 产品 / 运营三室。不必手动「添加工作区」。";
 const BOSS_GUIDANCE = [
-	"老板三室已播种并登记为侧栏工作区：~/.dsh/workspaces/搞钱、产品、运营。不必手动「添加工作区」。",
-	"设置 → 插件 → ReZ-TI → 角色选「老板」。每个文件夹是独立作战室，官方 dsh 会注入该目录 AGENTS.md。",
+	"当前角色是老板。侧栏已登记三室：~/.dsh/workspaces/搞钱、产品、运营。不必手动「添加工作区」。",
+	"每个文件夹是独立作战室，官方 dsh 会注入该目录 AGENTS.md。",
 	"若该室仍有 BOOTSTRAP.md：本会话先做短问三拍，沉淀到 PRIORITIES.md / MEMORY.md，然后删除 BOOTSTRAP.md。",
 	"已初始化后：读 PRIORITIES.md + MEMORY.md + 今日/昨日 memory/；回答固定四行：结论 → 数字（哪家公司、哪段时间）→ 拍板 1～3 件事 → 未执行任何过账/付款/对外发送。",
 	"微信文件夹仍是收件箱，不要在那边查账或砍 SKU。"
 ].join("");
+function bossGuidanceFor(role) {
+	return role === "boss" ? BOSS_GUIDANCE : BOSS_ROLE_HINT;
+}
 function destRoot(env = process.env) {
 	if (env.REZ_BOSS_WORKSPACES !== void 0 && env.REZ_BOSS_WORKSPACES !== "") return env.REZ_BOSS_WORKSPACES;
 	return join(env.DSH_HOME !== void 0 && env.DSH_HOME !== "" ? env.DSH_HOME : join(homedir(), ".dsh"), "workspaces");
 }
-/** Seed files, then register official workspaces once workspaceRegistry is ready. */
-function mountBossDesk(ctx) {
-	const seeded = seedBossWorkspaces({ destRoot: destRoot() });
-	ctx.inject(["workspaceRegistry"], (inner) => {
-		registerBossWorkspaces(inner.get("workspaceRegistry"), seeded.rooms).catch((error) => {
-			const why = error instanceof Error ? error.message : String(error);
-			console.error("[dsh-rez-suite] workspaceRegistry.create failed:", why);
+function expectedBossRooms(env = process.env) {
+	const root = destRoot(env);
+	return BOSS_ROOMS.map((room) => ({
+		path: join(root, room.folder),
+		folder: room.folder
+	}));
+}
+async function syncBossWorkspaces(registry, role, env = process.env) {
+	if (role === "boss") {
+		await registerBossWorkspaces(registry, seedBossWorkspaces({ destRoot: destRoot(env) }).rooms);
+		return;
+	}
+	await unregisterBossWorkspaces(registry, expectedBossRooms(env));
+}
+/** Seed/register 三室 only for role=boss; drop sidebar rows otherwise. Returns a re-sync function. */
+function mountBossDesk(ctx, getRole) {
+	const run = () => {
+		ctx.inject(["workspaceRegistry"], (inner) => {
+			syncBossWorkspaces(inner.get("workspaceRegistry"), getRole()).catch((error) => {
+				const why = error instanceof Error ? error.message : String(error);
+				console.error("[dsh-rez-suite] boss workspace sync failed:", why);
+			});
+		});
+	};
+	run();
+	return run;
+}
+//#endregion
+//#region src/self-update.ts
+/**
+* In-place upgrade of @rezti/dsh-rez-suite inside the running dsh profile.
+* pnpm add writes the new bits; Node cannot replace an already-imported host
+* module, so we respawn the same argv after the HTTP response flushes.
+*/
+const SUITE_PACKAGE = "@rezti/dsh-rez-suite";
+const NPM_LATEST = "https://registry.npmjs.org/@rezti/dsh-rez-suite/latest";
+const PNPM_TIMEOUT_MS = 18e4;
+function compareVersions(left, right) {
+	const a = left.split(".").map((part) => Number.parseInt(part, 10) || 0);
+	const b = right.split(".").map((part) => Number.parseInt(part, 10) || 0);
+	const n = Math.max(a.length, b.length);
+	for (let i = 0; i < n; i += 1) {
+		const av = a[i] ?? 0;
+		const bv = b[i] ?? 0;
+		if (av > bv) return 1;
+		if (av < bv) return -1;
+	}
+	return 0;
+}
+function readInstalledVersion(packageDir) {
+	const raw = JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8"));
+	if (typeof raw.version !== "string" || raw.version === "") throw new Error("suite package.json missing version");
+	return raw.version;
+}
+function findProfileDir(startDir) {
+	let dir = startDir;
+	for (let i = 0; i < 12; i += 1) {
+		const manifest = join(dir, "package.json");
+		if (existsSync(manifest)) try {
+			const raw = JSON.parse(readFileSync(manifest, "utf8"));
+			if (Array.isArray(raw.dsh?.profile?.bundles)) return dir;
+		} catch {}
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	throw new Error("cannot find dsh profile directory (no package.json with dsh.profile.bundles)");
+}
+function shellQuote(value) {
+	return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+function relaunchScript(argv, parentPid) {
+	return `while kill -0 ${parentPid} 2>/dev/null; do sleep 0.15; done; sleep 0.25; exec ${argv.map(shellQuote).join(" ")}`;
+}
+async function fetchLatestVersion(fetchImpl = fetch) {
+	const response = await fetchImpl(NPM_LATEST, { headers: { accept: "application/json" } });
+	if (!response.ok) throw new Error(`npm registry HTTP ${response.status}`);
+	const body = await response.json();
+	if (typeof body.version !== "string" || body.version === "") throw new Error("npm registry missing version");
+	return body.version;
+}
+function runPnpmAdd(cwd, spec, env = process.env) {
+	return new Promise((resolve, reject) => {
+		const child = spawn("pnpm", ["add", spec], {
+			cwd,
+			env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stderr = "";
+		child.stderr.on("data", (chunk) => {
+			stderr += chunk.toString();
+		});
+		const timer = setTimeout(() => {
+			child.kill("SIGTERM");
+			reject(/* @__PURE__ */ new Error("pnpm add timed out after 3 minutes"));
+		}, PNPM_TIMEOUT_MS);
+		child.on("error", (error) => {
+			clearTimeout(timer);
+			reject(error);
+		});
+		child.on("close", (code) => {
+			clearTimeout(timer);
+			if (code === 0) resolve();
+			else reject(new Error(stderr.trim() || `pnpm add exited ${String(code)}`));
 		});
 	});
 }
+function spawnRelaunch(argv, parentPid, cwd, env = process.env) {
+	spawn("/bin/bash", ["-c", relaunchScript(argv, parentPid)], {
+		cwd,
+		env,
+		detached: true,
+		stdio: "ignore"
+	}).unref();
+}
+let inflight;
+function createSelfUpdate(io) {
+	const status = async () => {
+		const installed = readInstalledVersion(io.packageDir);
+		const latest = await io.fetchLatest();
+		return {
+			package: SUITE_PACKAGE,
+			installed,
+			latest,
+			outdated: compareVersions(latest, installed) > 0
+		};
+	};
+	const apply = async () => {
+		if (inflight !== void 0) throw new Error("upgrade already running");
+		const work = (async () => {
+			const snapshot = await status();
+			if (!snapshot.outdated) return {
+				...snapshot,
+				restarting: false
+			};
+			const profileDir = findProfileDir(io.packageDir);
+			await io.install(profileDir, `${SUITE_PACKAGE}@${snapshot.latest}`);
+			return {
+				...snapshot,
+				installed: snapshot.latest,
+				outdated: false,
+				restarting: true
+			};
+		})();
+		inflight = work;
+		try {
+			return await work;
+		} finally {
+			inflight = void 0;
+		}
+	};
+	return {
+		status,
+		apply,
+		relaunch: io.relaunch
+	};
+}
+function liveSelfUpdate() {
+	return createSelfUpdate({
+		packageDir: dirname(fileURLToPath(new URL(".", import.meta.url))),
+		fetchLatest: () => fetchLatestVersion(),
+		install: (profileDir, spec) => runPnpmAdd(profileDir, spec),
+		relaunch: () => {
+			spawnRelaunch(process.argv, process.pid, process.cwd());
+			setTimeout(() => {
+				process.exit(0);
+			}, 50);
+		}
+	});
+}
 //#endregion
 //#region src/index.ts
 const name = "rez-suite";
@@ -7845,15 +8063,17 @@ const Config = Schema.object({
 	})
 });
 const SECTION_ORDER = 150;
-const REZ_GUIDANCE = [
+const REZ_GUIDANCE_CORE = [
 	"本机已安装 ReZ-TI 拆分包：工作身份由 dsh-rez-sso 提供，MCP 由官方 dsh-mcp-client 接入 Odoo / Nextcloud / 企业微信 / Home Assistant。",
 	"工具名 mcp__odoo__*、mcp__nextcloud__*、mcp__wechat__*、mcp__homeassistant__*。",
 	"密钥：REZ_ODOO_TOKEN、REZ_NEXTCLOUD_PASSWORD、REZ_WECHAT_WEBHOOK、REZ_HA_TOKEN。",
 	"个人微信（QClaw/ClawBot）：打开 设置 → 插件 → ReZ-TI → 微信 扫码，然后直接在微信里说话。消息进入网页左侧「微信」文件夹并延续同一会话，模型跟网页默认。网页归档了再从微信说话会自动恢复到侧栏。发「重启对话」会新开一条可见会话并把旧会话归档。网页端必须开着。不必再跑命令、也不要调用微信 MCP 工具。",
 	"意图用 rez_set_intent（erp/files/chat/home/auto）。审计用 rez_audit。",
-	"涉及资金、对外发送、设备控制、生产写入时先征得用户批准。",
-	BOSS_GUIDANCE
+	"涉及资金、对外发送、设备控制、生产写入时先征得用户批准。"
 ].join("");
+function rezGuidanceFor(role) {
+	return REZ_GUIDANCE_CORE + bossGuidanceFor(role);
+}
 function normalize(input) {
 	return mergeConfig(defaultConfig(), input ?? {});
 }
@@ -7873,8 +8093,8 @@ function delegatedHost(ctx, getConfig) {
 	};
 }
 function apply(ctx, config) {
-	mountBossDesk(ctx);
 	let current = () => normalize(config);
+	const syncBossDesk = mountBossDesk(ctx, () => current().role);
 	const tokens = new TokenManager(joinTokenDb());
 	const host = delegatedHost(ctx, () => current());
 	ctx.effect(() => () => {
@@ -7887,6 +8107,7 @@ function apply(ctx, config) {
 			const value = normalize(next);
 			saveConfig(value);
 			current = () => value;
+			syncBossDesk();
 			try {
 				const settings = ctx.get("settings");
 				if (settings?.update !== void 0) await settings.update(REZ_SETTINGS_NAMESPACE, value);
@@ -7900,7 +8121,8 @@ function apply(ctx, config) {
 		onCredentialWritten: (ref) => {
 			const emit = ctx.emit;
 			emit("credentials/updated", ref);
-		}
+		},
+		selfUpdate: liveSelfUpdate()
 	});
 	let disposeRoutes;
 	let disposeTools;
@@ -7923,7 +8145,7 @@ function apply(ctx, config) {
 		if (value.announceToAgent) disposeSection = ctx.systemPrompt.section({
 			name: "plugin:dsh-rez-suite",
 			order: SECTION_ORDER,
-			text: REZ_GUIDANCE
+			text: rezGuidanceFor(value.role)
 		});
 		disposeRoutes = ctx.effect(() => {
 			const disposers = routes.map((route) => ctx.webServer.register(route));
@@ -7942,8 +8164,12 @@ function apply(ctx, config) {
 		setSource: (source) => {
 			current = source;
 			sync();
+			syncBossDesk();
 		},
-		onChange: sync
+		onChange: () => {
+			sync();
+			syncBossDesk();
+		}
 	});
 	sync();
 }
@@ -7951,4 +8177,4 @@ function joinTokenDb() {
 	return join(homedir(), ".dsh", "dsh-rez-token-manager.sqlite");
 }
 //#endregion
-export { Config, REZ_GUIDANCE, REZ_SETTINGS_NAMESPACE, apply, inject, name };
+export { Config, REZ_GUIDANCE_CORE, REZ_SETTINGS_NAMESPACE, apply, inject, name, rezGuidanceFor };