@rezti/dsh-rez-suite 0.1.19 → 0.1.20

package/README.md

@@ -6,7 +6,7 @@
 # 第一次
 dsh plugin --profile web add @rezti/dsh-rez-suite
 
-# 以后升级（只记这一条）
+# 以后升级：侧栏底部「升级」按钮，或
 dsh plugin --profile web update @rezti/dsh-rez-suite
 ```
 

package/lib/client.d.ts

@@ -7349,6 +7349,13 @@ declare const zh: {
   readonly 'weixin.listening': "通道在听：微信 → 网页「微信」会话（同一条，不另开窗口）→ 回微信。";
   readonly 'weixin.loggedIn': "已登录，通道未在听。点「重新连接」即可拉起，不必再扫码。";
   readonly 'weixin.loggedOut': "尚未登录。";
+  readonly 'upgrade.label': "升级";
+  readonly 'upgrade.current': "已最新";
+  readonly 'upgrade.aria': "升级 ReZ-TI 插件";
+  readonly 'upgrade.running': "升级中…";
+  readonly 'upgrade.reloading': "正在重载";
+  readonly 'upgrade.already': "已是 {version}";
+  readonly 'upgrade.reloadTimeout': "升级完成，但网页还没重新连上。请刷新这一页。";
 };
 type RezKey = keyof typeof zh;
 //#endregion
@@ -7372,6 +7379,13 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
         children?: never;
       };
     };
+    'sidebar.footer.action': {
+      kind: 'list';
+      scope: 'root';
+      owner: {
+        wide: boolean;
+      };
+    };
   }
 }
 declare const inject: string[];

package/lib/client.js

@@ -4,7 +4,7 @@ window.__ModuleLoader__.load({
 		var module = { exports: {} };
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-(function(){var id="dsh-rez-suite-css";if(typeof document==="undefined"||document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent=".LOjPTW_shell {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_card {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-3);\n  border-radius: 12px;\n  list-style: none;\n  transition: border-color .16s, background .16s;\n}\n\n.LOjPTW_card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_cardOpen {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_header {\n  appearance: none;\n  width: 100%;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  background: none;\n  border: 0;\n  border-radius: 12px;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  display: flex;\n}\n\n.LOjPTW_header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_headText {\n  flex-direction: column;\n  flex: 1;\n  gap: 4px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_name {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n}\n\n.LOjPTW_description {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 13px;\n  line-height: 1.5;\n}\n\n.LOjPTW_chevron {\n  color: var(--dsw-alias-label-tertiary);\n  flex: none;\n  transition: transform .16s;\n}\n\n.LOjPTW_chevronOpen {\n  transform: rotate(180deg);\n}\n\n.LOjPTW_body {\n  border-top: 1px solid var(--dsw-alias-border-l2);\n  margin: 0 16px 12px;\n  padding-top: 8px;\n}\n\n.LOjPTW_tabBar {\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  flex: none;\n  gap: 2px;\n  display: flex;\n}\n\n.LOjPTW_tab {\n  color: var(--dsw-alias-label-secondary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-bottom: 2px solid #0000;\n  border-radius: 6px 6px 0 0;\n  padding: 7px 14px;\n  font-size: 13px;\n}\n\n.LOjPTW_tab:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_tab[data-active] {\n  color: var(--dsw-alias-label-primary);\n  border-bottom-color: var(--dsw-alias-state-business-primary);\n  font-weight: 600;\n}\n\n.LOjPTW_tabBody {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  padding: 12px 0 4px;\n  display: flex;\n}\n\n.LOjPTW_section {\n  border: 1px solid var(--dsw-alias-border-l1);\n  background: var(--dsw-alias-bg-layer-1, var(--dsw-alias-bg-base));\n  border-radius: 10px;\n  flex-direction: column;\n  gap: 8px;\n  padding: 12px;\n  display: flex;\n}\n\n.LOjPTW_sectionTitle {\n  color: var(--dsw-alias-label-primary);\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n}\n\n.LOjPTW_field {\n  flex-direction: column;\n  align-items: stretch;\n  gap: 4px;\n  display: flex;\n}\n\n.LOjPTW_label {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n}\n\n.LOjPTW_input, .LOjPTW_select {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  outline: none;\n  padding: 6px 8px;\n  font-size: 13px;\n}\n\n.LOjPTW_checkbox {\n  justify-self: start;\n  width: 15px;\n  height: 15px;\n}\n\n.LOjPTW_toolbar {\n  flex-wrap: wrap;\n  flex: none;\n  align-items: center;\n  gap: 8px;\n  display: flex;\n}\n\n.LOjPTW_button {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  border-radius: 8px;\n  padding: 7px 12px;\n  font-size: 13px;\n}\n\n.LOjPTW_button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_button:disabled {\n  opacity: .4;\n  cursor: default;\n}\n\n.LOjPTW_primaryButton {\n  background: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n\n.LOjPTW_dangerButton {\n  background: var(--dsw-alias-state-danger, #c62828);\n  border-color: var(--dsw-alias-state-danger, #c62828);\n  color: #fff;\n}\n\n.LOjPTW_qr {\n  background: #fff;\n  border-radius: 8px;\n  width: 200px;\n  height: 200px;\n  margin: 8px 0;\n  display: block;\n}\n\n.LOjPTW_message {\n  color: var(--dsw-alias-label-secondary);\n  margin: 0;\n  font-size: 12.5px;\n  line-height: 1.5;\n}\n\n.LOjPTW_error {\n  color: var(--dsw-alias-state-danger, #c62828);\n}\n\n.LOjPTW_tableWrap {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  overflow: auto;\n}\n\n.LOjPTW_table {\n  border-collapse: collapse;\n  width: 100%;\n  font-size: 12.5px;\n}\n\n.LOjPTW_table th {\n  z-index: 1;\n  text-align: left;\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  padding: 8px 10px;\n  position: sticky;\n  top: 0;\n}\n\n.LOjPTW_table td {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  vertical-align: top;\n  padding: 8px 10px;\n}\n\n.LOjPTW_badge {\n  border-radius: 999px;\n  padding: 2px 8px;\n  font-size: 11px;\n  display: inline-block;\n}\n\n.LOjPTW_badgeOk {\n  color: #229a55;\n  background: #229a5524;\n}\n\n.LOjPTW_badgeFail {\n  color: #c62828;\n  background: #c6282824;\n}\n\n.LOjPTW_cards {\n  grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_stat {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  padding: 10px;\n}\n\n.LOjPTW_cardLabel {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 11px;\n}\n\n.LOjPTW_cardValue {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n}\n";document.head.appendChild(s);})();
+(function(){var id="dsh-rez-suite-css";if(typeof document==="undefined"||document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent=".LOjPTW_shell {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_card {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-3);\n  border-radius: 12px;\n  list-style: none;\n  transition: border-color .16s, background .16s;\n}\n\n.LOjPTW_card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_cardOpen {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_header {\n  appearance: none;\n  width: 100%;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  background: none;\n  border: 0;\n  border-radius: 12px;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  display: flex;\n}\n\n.LOjPTW_header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_headText {\n  flex-direction: column;\n  flex: 1;\n  gap: 4px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_name {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n}\n\n.LOjPTW_description {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 13px;\n  line-height: 1.5;\n}\n\n.LOjPTW_chevron {\n  color: var(--dsw-alias-label-tertiary);\n  flex: none;\n  transition: transform .16s;\n}\n\n.LOjPTW_chevronOpen {\n  transform: rotate(180deg);\n}\n\n.LOjPTW_body {\n  border-top: 1px solid var(--dsw-alias-border-l2);\n  margin: 0 16px 12px;\n  padding-top: 8px;\n}\n\n.LOjPTW_tabBar {\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  flex: none;\n  gap: 2px;\n  display: flex;\n}\n\n.LOjPTW_tab {\n  color: var(--dsw-alias-label-secondary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-bottom: 2px solid #0000;\n  border-radius: 6px 6px 0 0;\n  padding: 7px 14px;\n  font-size: 13px;\n}\n\n.LOjPTW_tab:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_tab[data-active] {\n  color: var(--dsw-alias-label-primary);\n  border-bottom-color: var(--dsw-alias-state-business-primary);\n  font-weight: 600;\n}\n\n.LOjPTW_tabBody {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  padding: 12px 0 4px;\n  display: flex;\n}\n\n.LOjPTW_section {\n  border: 1px solid var(--dsw-alias-border-l1);\n  background: var(--dsw-alias-bg-layer-1, var(--dsw-alias-bg-base));\n  border-radius: 10px;\n  flex-direction: column;\n  gap: 8px;\n  padding: 12px;\n  display: flex;\n}\n\n.LOjPTW_sectionTitle {\n  color: var(--dsw-alias-label-primary);\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n}\n\n.LOjPTW_field {\n  flex-direction: column;\n  align-items: stretch;\n  gap: 4px;\n  display: flex;\n}\n\n.LOjPTW_label {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n}\n\n.LOjPTW_input, .LOjPTW_select {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  outline: none;\n  padding: 6px 8px;\n  font-size: 13px;\n}\n\n.LOjPTW_checkbox {\n  justify-self: start;\n  width: 15px;\n  height: 15px;\n}\n\n.LOjPTW_toolbar {\n  flex-wrap: wrap;\n  flex: none;\n  align-items: center;\n  gap: 8px;\n  display: flex;\n}\n\n.LOjPTW_button {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  border-radius: 8px;\n  padding: 7px 12px;\n  font-size: 13px;\n}\n\n.LOjPTW_button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_button:disabled {\n  opacity: .4;\n  cursor: default;\n}\n\n.LOjPTW_primaryButton {\n  background: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n\n.LOjPTW_dangerButton {\n  background: var(--dsw-alias-state-danger, #c62828);\n  border-color: var(--dsw-alias-state-danger, #c62828);\n  color: #fff;\n}\n\n.LOjPTW_qr {\n  background: #fff;\n  border-radius: 8px;\n  width: 200px;\n  height: 200px;\n  margin: 8px 0;\n  display: block;\n}\n\n.LOjPTW_message {\n  color: var(--dsw-alias-label-secondary);\n  margin: 0;\n  font-size: 12.5px;\n  line-height: 1.5;\n}\n\n.LOjPTW_error {\n  color: var(--dsw-alias-state-danger, #c62828);\n}\n\n.LOjPTW_tableWrap {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  overflow: auto;\n}\n\n.LOjPTW_table {\n  border-collapse: collapse;\n  width: 100%;\n  font-size: 12.5px;\n}\n\n.LOjPTW_table th {\n  z-index: 1;\n  text-align: left;\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  padding: 8px 10px;\n  position: sticky;\n  top: 0;\n}\n\n.LOjPTW_table td {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  vertical-align: top;\n  padding: 8px 10px;\n}\n\n.LOjPTW_badge {\n  border-radius: 999px;\n  padding: 2px 8px;\n  font-size: 11px;\n  display: inline-block;\n}\n\n.LOjPTW_badgeOk {\n  color: #229a55;\n  background: #229a5524;\n}\n\n.LOjPTW_badgeFail {\n  color: #c62828;\n  background: #c6282824;\n}\n\n.LOjPTW_cards {\n  grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_stat {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  padding: 10px;\n}\n\n.LOjPTW_cardLabel {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 11px;\n}\n\n.LOjPTW_cardValue {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n}\n\n.LOjPTW_upgradeLayer {\n  flex: none;\n  align-items: center;\n  width: 100%;\n  height: 42px;\n  margin: 8px 0 0;\n  display: flex;\n  position: relative;\n}\n\n.LOjPTW_upgradeLayerRail {\n  width: 36px;\n  height: 36px;\n  margin: 0;\n}\n\n.LOjPTW_upgradeButton {\n  width: calc(100% + 4px);\n  height: 42px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-radius: 12px;\n  align-items: center;\n  gap: 8px;\n  margin: 0 -2px;\n  padding: 0 10px 0 8px;\n  font-family: inherit;\n  font-size: 14px;\n  display: inline-flex;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeButton:hover, .LOjPTW_upgradeButton[data-outdated] {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_upgradeButton:disabled {\n  cursor: progress;\n  opacity: .72;\n}\n\n.LOjPTW_upgradeButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_upgradeLayerRail .LOjPTW_upgradeButton {\n  border-radius: 50%;\n  justify-content: center;\n  gap: 0;\n  width: 36px;\n  height: 36px;\n  padding: 0;\n}\n\n.LOjPTW_upgradeLabel {\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  min-width: 0;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeMeta {\n  color: var(--dsw-alias-label-tertiary);\n  font-variant-numeric: tabular-nums;\n  flex: none;\n  margin-left: auto;\n  font-size: 12px;\n  line-height: 16px;\n}\n\n.LOjPTW_upgradeDot {\n  background: var(--dsw-alias-brand-primary);\n  border-radius: 50%;\n  flex: none;\n  width: 7px;\n  height: 7px;\n}\n";document.head.appendChild(s);})();
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let react = require("react");
 let react_jsx_runtime = require("react/jsx-runtime");
@@ -109,7 +109,14 @@ const zh = {
 	"weixin.qrAlt": "微信登录二维码",
 	"weixin.listening": "通道在听：微信 → 网页「微信」会话（同一条，不另开窗口）→ 回微信。",
 	"weixin.loggedIn": "已登录，通道未在听。点「重新连接」即可拉起，不必再扫码。",
-	"weixin.loggedOut": "尚未登录。"
+	"weixin.loggedOut": "尚未登录。",
+	"upgrade.label": "升级",
+	"upgrade.current": "已最新",
+	"upgrade.aria": "升级 ReZ-TI 插件",
+	"upgrade.running": "升级中…",
+	"upgrade.reloading": "正在重载",
+	"upgrade.already": "已是 {version}",
+	"upgrade.reloadTimeout": "升级完成，但网页还没重新连上。请刷新这一页。"
 };
 const en = {
 	"entry.label": "Rez",
@@ -208,7 +215,14 @@ const en = {
 	"weixin.qrAlt": "WeChat login QR",
 	"weixin.listening": "Channel is live: WeChat → the WeChat folder session on the left → WeChat.",
 	"weixin.loggedIn": "Logged in, listener idle. Click Reconnect — no need to scan again.",
-	"weixin.loggedOut": "Not logged in."
+	"weixin.loggedOut": "Not logged in.",
+	"upgrade.label": "Upgrade",
+	"upgrade.current": "Up to date",
+	"upgrade.aria": "Upgrade the ReZ-TI plugin",
+	"upgrade.running": "Updating…",
+	"upgrade.reloading": "Reloading",
+	"upgrade.already": "Already {version}",
+	"upgrade.reloadTimeout": "Update finished, but the page did not reconnect. Refresh this tab."
 };
 /** Minimal {name} interpolator shared by the panel helpers. */
 function t(dict, key, values) {
@@ -225,7 +239,8 @@ const REZ_API = {
 	audit: "/api/dsh-rez-suite/audit",
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
-	weixinVerify: "/api/dsh-rez-suite/weixin/verify"
+	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
 //#region src/client/api.ts
@@ -287,6 +302,12 @@ var RezApi = class {
 	async weixinLogout() {
 		return readJson(await fetch(REZ_API.weixin, { method: "DELETE" }));
 	}
+	async updateStatus() {
+		return readJson(await fetch(REZ_API.update));
+	}
+	async applyUpdate() {
+		return readJson(await fetch(REZ_API.update, { method: "POST" }));
+	}
 };
 //#endregion
 //#region src/client/panel/helpers.ts
@@ -341,7 +362,13 @@ var panel_module_default = {
 	"tabBody": "LOjPTW_tabBody",
 	"table": "LOjPTW_table",
 	"tableWrap": "LOjPTW_tableWrap",
-	"toolbar": "LOjPTW_toolbar"
+	"toolbar": "LOjPTW_toolbar",
+	"upgradeButton": "LOjPTW_upgradeButton",
+	"upgradeDot": "LOjPTW_upgradeDot",
+	"upgradeLabel": "LOjPTW_upgradeLabel",
+	"upgradeLayer": "LOjPTW_upgradeLayer",
+	"upgradeLayerRail": "LOjPTW_upgradeLayerRail",
+	"upgradeMeta": "LOjPTW_upgradeMeta"
 };
 //#endregion
 //#region src/client/panel/AuditTab.tsx
@@ -1249,6 +1276,109 @@ function RezPluginCard() {
 	});
 }
 //#endregion
+//#region src/client/upgrade-button.tsx
+/**
+* Sidebar footer action: upgrade @rezti/dsh-rez-suite without a terminal.
+* Host code still needs a process respawn; the button does that after pnpm add.
+*/
+function UpgradeIcon() {
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
+		width: "16",
+		height: "16",
+		viewBox: "0 0 16 16",
+		"aria-hidden": "true",
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", {
+			d: "M8 12.5V4.8M8 4.8 4.8 8M8 4.8 11.2 8M3 13.2h10",
+			fill: "none",
+			stroke: "currentColor",
+			strokeWidth: "1.4",
+			strokeLinecap: "round",
+			strokeLinejoin: "round"
+		})
+	});
+}
+async function waitUntilHostBack(api, timeoutMs = 6e4) {
+	const deadline = Date.now() + timeoutMs;
+	await new Promise((resolve) => setTimeout(resolve, 800));
+	while (Date.now() < deadline) try {
+		await api.updateStatus();
+		return;
+	} catch {
+		await new Promise((resolve) => setTimeout(resolve, 700));
+	}
+	throw new Error(tt("upgrade.reloadTimeout"));
+}
+function UpgradeButton({ wide }) {
+	const api = (0, react.useMemo)(() => new RezApi(), []);
+	const [info, setInfo] = (0, react.useState)();
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [note, setNote] = (0, react.useState)("");
+	(0, react.useEffect)(() => {
+		let cancelled = false;
+		api.updateStatus().then((value) => {
+			if (!cancelled) setInfo(value);
+		}).catch((error) => {
+			if (!cancelled) setNote(error instanceof Error ? error.message : String(error));
+		});
+		return () => {
+			cancelled = true;
+		};
+	}, [api]);
+	const label = busy ? tt("upgrade.running") : info?.outdated === true ? tt("upgrade.label") : tt("upgrade.current");
+	const meta = note !== "" ? note : info === void 0 ? "" : info.outdated ? info.latest : info.installed;
+	async function onClick() {
+		if (busy) return;
+		setBusy(true);
+		setNote("");
+		try {
+			const snapshot = info ?? await api.updateStatus();
+			setInfo(snapshot);
+			if (!snapshot.outdated) {
+				setNote(tt("upgrade.already", { version: snapshot.installed }));
+				return;
+			}
+			const result = await api.applyUpdate();
+			setInfo(result);
+			if (result.restarting) {
+				setNote(tt("upgrade.reloading"));
+				await waitUntilHostBack(api);
+				window.location.reload();
+				return;
+			}
+			setNote(tt("upgrade.already", { version: result.installed }));
+		} catch (error) {
+			setNote(error instanceof Error ? error.message : String(error));
+		} finally {
+			setBusy(false);
+		}
+	}
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className: wide ? panel_module_default.upgradeLayer : `${panel_module_default.upgradeLayer} ${panel_module_default.upgradeLayerRail}`,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+			type: "button",
+			className: panel_module_default.upgradeButton,
+			"data-outdated": info?.outdated === true ? "" : void 0,
+			"aria-label": tt("upgrade.aria"),
+			disabled: busy,
+			onClick: () => {
+				onClick();
+			},
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UpgradeIcon, {}),
+				wide && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: panel_module_default.upgradeLabel,
+					children: label
+				}),
+				wide && meta !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: panel_module_default.upgradeMeta,
+					children: meta
+				}),
+				!wide && info?.outdated === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: panel_module_default.upgradeDot })
+			]
+		})
+	});
+}
+//#endregion
 //#region src/client/index.ts
 const NS = "dsh-rez-suite";
 const inject = ["slots", "locale"];
@@ -1270,6 +1400,13 @@ function apply(ctx) {
 		label: () => t("settings.title"),
 		locale: NS
 	}, RezSettingsPage));
+	ctx.slots.inject("sidebar.footer.action", () => ctx.slots.register({
+		name: "sidebar.footer.action",
+		id: "rez-upgrade",
+		order: 10,
+		label: () => t("upgrade.label"),
+		locale: NS
+	}, UpgradeButton));
 }
 //#endregion
 exports.apply = apply;

package/lib/index.js

@@ -5,6 +5,7 @@ import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStart
 import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { DatabaseSync } from "node:sqlite";
 import { fileURLToPath } from "node:url";
+import { spawn } from "node:child_process";
 //#region ../../node_modules/.pnpm/@deepseek-ai+cosmokit@1.8.2/node_modules/@deepseek-ai/cosmokit/lib/index.js
 /** Return true when a value is `null` or `undefined`. */
 function isNullable(value) {
@@ -2955,7 +2956,8 @@ const REZ_API = {
 	audit: "/api/dsh-rez-suite/audit",
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
-	weixinVerify: "/api/dsh-rez-suite/weixin/verify"
+	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
 //#region src/store.ts
@@ -3205,7 +3207,7 @@ function applyPublicPatch(current, patch) {
 }
 /** Build every /api/dsh-rez-suite route (exact paths). */
 function makeRoutes(deps) {
-	const { getConfig, updateConfig, host, tokens, onCredentialWritten } = deps;
+	const { getConfig, updateConfig, host, tokens, onCredentialWritten, selfUpdate } = deps;
 	const guard = (req, res, method) => {
 		if (!isLoopbackRequest(req)) {
 			writeJson(res, 403, { error: "forbidden: loopback-only" });
@@ -3277,6 +3279,31 @@ function makeRoutes(deps) {
 				tokens.reset();
 				writeJson(res, 200, { ok: true });
 			}
+		},
+		{
+			kind: "exact",
+			path: REZ_API.update,
+			handler: async (req, res) => {
+				const method = req.method === "POST" ? "POST" : "GET";
+				if (!guard(req, res, method)) return;
+				if (selfUpdate === void 0) {
+					writeJson(res, 501, { error: "self-update is not available" });
+					return;
+				}
+				try {
+					if (method === "GET") {
+						writeJson(res, 200, await selfUpdate.status());
+						return;
+					}
+					const result = await selfUpdate.apply();
+					writeJson(res, 200, result);
+					if (result.restarting) setTimeout(() => {
+						selfUpdate.relaunch();
+					}, 400);
+				} catch (error) {
+					writeJson(res, 502, { error: error instanceof Error ? error.message : String(error) });
+				}
+			}
 		}
 	];
 }
@@ -7832,6 +7859,153 @@ function mountBossDesk(ctx, getRole) {
 	return run;
 }
 //#endregion
+//#region src/self-update.ts
+/**
+* In-place upgrade of @rezti/dsh-rez-suite inside the running dsh profile.
+* pnpm add writes the new bits; Node cannot replace an already-imported host
+* module, so we respawn the same argv after the HTTP response flushes.
+*/
+const SUITE_PACKAGE = "@rezti/dsh-rez-suite";
+const NPM_LATEST = "https://registry.npmjs.org/@rezti/dsh-rez-suite/latest";
+const PNPM_TIMEOUT_MS = 18e4;
+function compareVersions(left, right) {
+	const a = left.split(".").map((part) => Number.parseInt(part, 10) || 0);
+	const b = right.split(".").map((part) => Number.parseInt(part, 10) || 0);
+	const n = Math.max(a.length, b.length);
+	for (let i = 0; i < n; i += 1) {
+		const av = a[i] ?? 0;
+		const bv = b[i] ?? 0;
+		if (av > bv) return 1;
+		if (av < bv) return -1;
+	}
+	return 0;
+}
+function readInstalledVersion(packageDir) {
+	const raw = JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8"));
+	if (typeof raw.version !== "string" || raw.version === "") throw new Error("suite package.json missing version");
+	return raw.version;
+}
+function findProfileDir(startDir) {
+	let dir = startDir;
+	for (let i = 0; i < 12; i += 1) {
+		const manifest = join(dir, "package.json");
+		if (existsSync(manifest)) try {
+			const raw = JSON.parse(readFileSync(manifest, "utf8"));
+			if (Array.isArray(raw.dsh?.profile?.bundles)) return dir;
+		} catch {}
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	throw new Error("cannot find dsh profile directory (no package.json with dsh.profile.bundles)");
+}
+function shellQuote(value) {
+	return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+function relaunchScript(argv, parentPid) {
+	return `while kill -0 ${parentPid} 2>/dev/null; do sleep 0.15; done; sleep 0.25; exec ${argv.map(shellQuote).join(" ")}`;
+}
+async function fetchLatestVersion(fetchImpl = fetch) {
+	const response = await fetchImpl(NPM_LATEST, { headers: { accept: "application/json" } });
+	if (!response.ok) throw new Error(`npm registry HTTP ${response.status}`);
+	const body = await response.json();
+	if (typeof body.version !== "string" || body.version === "") throw new Error("npm registry missing version");
+	return body.version;
+}
+function runPnpmAdd(cwd, spec, env = process.env) {
+	return new Promise((resolve, reject) => {
+		const child = spawn("pnpm", ["add", spec], {
+			cwd,
+			env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stderr = "";
+		child.stderr.on("data", (chunk) => {
+			stderr += chunk.toString();
+		});
+		const timer = setTimeout(() => {
+			child.kill("SIGTERM");
+			reject(/* @__PURE__ */ new Error("pnpm add timed out after 3 minutes"));
+		}, PNPM_TIMEOUT_MS);
+		child.on("error", (error) => {
+			clearTimeout(timer);
+			reject(error);
+		});
+		child.on("close", (code) => {
+			clearTimeout(timer);
+			if (code === 0) resolve();
+			else reject(new Error(stderr.trim() || `pnpm add exited ${String(code)}`));
+		});
+	});
+}
+function spawnRelaunch(argv, parentPid, cwd, env = process.env) {
+	spawn("/bin/bash", ["-c", relaunchScript(argv, parentPid)], {
+		cwd,
+		env,
+		detached: true,
+		stdio: "ignore"
+	}).unref();
+}
+let inflight;
+function createSelfUpdate(io) {
+	const status = async () => {
+		const installed = readInstalledVersion(io.packageDir);
+		const latest = await io.fetchLatest();
+		return {
+			package: SUITE_PACKAGE,
+			installed,
+			latest,
+			outdated: compareVersions(latest, installed) > 0
+		};
+	};
+	const apply = async () => {
+		if (inflight !== void 0) throw new Error("upgrade already running");
+		const work = (async () => {
+			const snapshot = await status();
+			if (!snapshot.outdated) return {
+				...snapshot,
+				restarting: false
+			};
+			const profileDir = findProfileDir(io.packageDir);
+			await io.install(profileDir, `${SUITE_PACKAGE}@${snapshot.latest}`);
+			return {
+				...snapshot,
+				installed: snapshot.latest,
+				outdated: false,
+				restarting: true
+			};
+		})();
+		inflight = work;
+		try {
+			return await work;
+		} finally {
+			inflight = void 0;
+		}
+	};
+	return {
+		status,
+		apply,
+		relaunch: io.relaunch
+	};
+}
+function liveSelfUpdate() {
+	return createSelfUpdate({
+		packageDir: dirname(fileURLToPath(new URL(".", import.meta.url))),
+		fetchLatest: () => fetchLatestVersion(),
+		install: (profileDir, spec) => runPnpmAdd(profileDir, spec),
+		relaunch: () => {
+			spawnRelaunch(process.argv, process.pid, process.cwd());
+			setTimeout(() => {
+				process.exit(0);
+			}, 50);
+		}
+	});
+}
+//#endregion
 //#region src/index.ts
 const name = "rez-suite";
 const inject = [
@@ -7947,7 +8121,8 @@ function apply(ctx, config) {
 		onCredentialWritten: (ref) => {
 			const emit = ctx.emit;
 			emit("credentials/updated", ref);
-		}
+		},
+		selfUpdate: liveSelfUpdate()
 	});
 	let disposeRoutes;
 	let disposeTools;

package/lib/style.css

@@ -287,3 +287,84 @@
   font-size: 15px;
   font-weight: 600;
 }
+
+.LOjPTW_upgradeLayer {
+  flex: none;
+  align-items: center;
+  width: 100%;
+  height: 42px;
+  margin: 8px 0 0;
+  display: flex;
+  position: relative;
+}
+
+.LOjPTW_upgradeLayerRail {
+  width: 36px;
+  height: 36px;
+  margin: 0;
+}
+
+.LOjPTW_upgradeButton {
+  width: calc(100% + 4px);
+  height: 42px;
+  color: var(--dsw-alias-label-primary);
+  cursor: pointer;
+  background: none;
+  border: none;
+  border-radius: 12px;
+  align-items: center;
+  gap: 8px;
+  margin: 0 -2px;
+  padding: 0 10px 0 8px;
+  font-family: inherit;
+  font-size: 14px;
+  display: inline-flex;
+  overflow: hidden;
+}
+
+.LOjPTW_upgradeButton:hover, .LOjPTW_upgradeButton[data-outdated] {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.LOjPTW_upgradeButton:disabled {
+  cursor: progress;
+  opacity: .72;
+}
+
+.LOjPTW_upgradeButton:focus-visible {
+  outline: 2px solid var(--dsw-alias-brand-primary);
+  outline-offset: -2px;
+}
+
+.LOjPTW_upgradeLayerRail .LOjPTW_upgradeButton {
+  border-radius: 50%;
+  justify-content: center;
+  gap: 0;
+  width: 36px;
+  height: 36px;
+  padding: 0;
+}
+
+.LOjPTW_upgradeLabel {
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  min-width: 0;
+  overflow: hidden;
+}
+
+.LOjPTW_upgradeMeta {
+  color: var(--dsw-alias-label-tertiary);
+  font-variant-numeric: tabular-nums;
+  flex: none;
+  margin-left: auto;
+  font-size: 12px;
+  line-height: 16px;
+}
+
+.LOjPTW_upgradeDot {
+  background: var(--dsw-alias-brand-primary);
+  border-radius: 50%;
+  flex: none;
+  width: 7px;
+  height: 7px;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-suite",
   "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web update @rezti/dsh-rez-suite",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -30,7 +30,8 @@
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-settings-plugins"
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-sidebar"
       ],
       "platform": "web"
     }
@@ -38,13 +39,13 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3",
-    "@rezti/dsh-rez-ha-bridge": "0.1.7",
-    "@rezti/dsh-rez-odoo": "0.1.7",
-    "@rezti/dsh-rez-intent": "0.1.4",
-    "@rezti/dsh-rez-nextcloud": "0.1.7",
+    "@rezti/dsh-rez-token-manager": "0.1.4",
     "@rezti/dsh-rez-sso": "0.1.7",
+    "@rezti/dsh-rez-intent": "0.1.4",
     "@rezti/dsh-rez-wechat": "0.1.11",
-    "@rezti/dsh-rez-token-manager": "0.1.4"
+    "@rezti/dsh-rez-ha-bridge": "0.1.7",
+    "@rezti/dsh-rez-nextcloud": "0.1.7",
+    "@rezti/dsh-rez-odoo": "0.1.7"
   },
   "peerDependencies": {
     "react": "^18.2.0",

package/src/client/api.ts

@@ -9,6 +9,8 @@ import {
   type RezServerStatus,
   type RezStatusResponse,
   type RezTestResult,
+  type RezUpdateApplyResult,
+  type RezUpdateStatus,
   type RezWeixinStatus,
 } from '../protocol.ts'
 
@@ -97,4 +99,14 @@ export class RezApi {
     const response = await fetch(REZ_API.weixin, { method: 'DELETE' })
     return readJson<RezWeixinStatus>(response)
   }
+
+  async updateStatus(): Promise<RezUpdateStatus> {
+    const response = await fetch(REZ_API.update)
+    return readJson<RezUpdateStatus>(response)
+  }
+
+  async applyUpdate(): Promise<RezUpdateApplyResult> {
+    const response = await fetch(REZ_API.update, { method: 'POST' })
+    return readJson<RezUpdateApplyResult>(response)
+  }
 }

package/src/client/index.ts

@@ -11,6 +11,7 @@ import type {} from '@deepseek-ai/dsh-client-ui-settings/client'
 import type {} from '@deepseek-ai/dsh-client-ui-slots'
 import { en, zh, type RezKey } from './locales.ts'
 import { RezPluginCard, RezSettingsPage } from './settings-card.tsx'
+import { UpgradeButton } from './upgrade-button.tsx'
 
 const NS = 'dsh-rez-suite'
 
@@ -29,6 +30,11 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
       scope: 'root'
       owner: { children?: never }
     }
+    'sidebar.footer.action': {
+      kind: 'list'
+      scope: 'root'
+      owner: { wide: boolean }
+    }
   }
 }
 
@@ -53,4 +59,12 @@ export function apply(ctx: ClientContext): void {
     label: () => t('settings.title'),
     locale: NS,
   }, RezSettingsPage))
+
+  ctx.slots.inject('sidebar.footer.action', () => ctx.slots.register({
+    name: 'sidebar.footer.action',
+    id: 'rez-upgrade',
+    order: 10,
+    label: () => t('upgrade.label'),
+    locale: NS,
+  }, UpgradeButton))
 }

package/src/client/locales.ts

@@ -104,6 +104,13 @@ export const zh = {
   'weixin.listening': '通道在听：微信 → 网页「微信」会话（同一条，不另开窗口）→ 回微信。',
   'weixin.loggedIn': '已登录，通道未在听。点「重新连接」即可拉起，不必再扫码。',
   'weixin.loggedOut': '尚未登录。',
+  'upgrade.label': '升级',
+  'upgrade.current': '已最新',
+  'upgrade.aria': '升级 ReZ-TI 插件',
+  'upgrade.running': '升级中…',
+  'upgrade.reloading': '正在重载',
+  'upgrade.already': '已是 {version}',
+  'upgrade.reloadTimeout': '升级完成，但网页还没重新连上。请刷新这一页。',
 } as const
 
 export type RezKey = keyof typeof zh
@@ -206,6 +213,13 @@ export const en: Record<RezKey, string> = {
   'weixin.listening': 'Channel is live: WeChat → the WeChat folder session on the left → WeChat.',
   'weixin.loggedIn': 'Logged in, listener idle. Click Reconnect — no need to scan again.',
   'weixin.loggedOut': 'Not logged in.',
+  'upgrade.label': 'Upgrade',
+  'upgrade.current': 'Up to date',
+  'upgrade.aria': 'Upgrade the ReZ-TI plugin',
+  'upgrade.running': 'Updating…',
+  'upgrade.reloading': 'Reloading',
+  'upgrade.already': 'Already {version}',
+  'upgrade.reloadTimeout': 'Update finished, but the page did not reconnect. Refresh this tab.',
 }
 
 /** Minimal {name} interpolator shared by the panel helpers. */

package/src/client/panel/panel.module.css

@@ -294,3 +294,85 @@
   font-weight: 600;
   color: var(--dsw-alias-label-primary);
 }
+
+.upgradeLayer {
+  flex: none;
+  align-items: center;
+  width: 100%;
+  height: 42px;
+  margin: 8px 0 0;
+  display: flex;
+  position: relative;
+}
+
+.upgradeLayerRail {
+  width: 36px;
+  height: 36px;
+  margin: 0;
+}
+
+.upgradeButton {
+  width: calc(100% + 4px);
+  height: 42px;
+  color: var(--dsw-alias-label-primary);
+  cursor: pointer;
+  background: transparent;
+  border: none;
+  border-radius: 12px;
+  align-items: center;
+  gap: 8px;
+  margin: 0 -2px;
+  padding: 0 10px 0 8px;
+  font-family: inherit;
+  font-size: 14px;
+  display: inline-flex;
+  overflow: hidden;
+}
+
+.upgradeButton:hover,
+.upgradeButton[data-outdated] {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.upgradeButton:disabled {
+  cursor: progress;
+  opacity: 0.72;
+}
+
+.upgradeButton:focus-visible {
+  outline: 2px solid var(--dsw-alias-brand-primary);
+  outline-offset: -2px;
+}
+
+.upgradeLayerRail .upgradeButton {
+  border-radius: 50%;
+  justify-content: center;
+  gap: 0;
+  width: 36px;
+  height: 36px;
+  padding: 0;
+}
+
+.upgradeLabel {
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  min-width: 0;
+  overflow: hidden;
+}
+
+.upgradeMeta {
+  color: var(--dsw-alias-label-tertiary);
+  font-variant-numeric: tabular-nums;
+  flex: none;
+  margin-left: auto;
+  font-size: 12px;
+  line-height: 16px;
+}
+
+.upgradeDot {
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  background: var(--dsw-alias-brand-primary);
+  flex: none;
+}

package/src/client/upgrade-button.tsx

@@ -0,0 +1,115 @@
+/**
+ * Sidebar footer action: upgrade @rezti/dsh-rez-suite without a terminal.
+ * Host code still needs a process respawn; the button does that after pnpm add.
+ */
+
+import { useEffect, useMemo, useState } from 'react'
+import { RezApi } from './api.ts'
+import { tt } from './panel/helpers.ts'
+import css from './panel/panel.module.css'
+import type { RezUpdateStatus } from '../protocol.ts'
+
+function UpgradeIcon() {
+  return (
+    <svg width="16" height="16" viewBox="0 0 16 16" aria-hidden="true">
+      <path
+        d="M8 12.5V4.8M8 4.8 4.8 8M8 4.8 11.2 8M3 13.2h10"
+        fill="none"
+        stroke="currentColor"
+        strokeWidth="1.4"
+        strokeLinecap="round"
+        strokeLinejoin="round"
+      />
+    </svg>
+  )
+}
+
+async function waitUntilHostBack(api: RezApi, timeoutMs = 60_000): Promise<void> {
+  const deadline = Date.now() + timeoutMs
+  await new Promise((resolve) => setTimeout(resolve, 800))
+  while (Date.now() < deadline) {
+    try {
+      await api.updateStatus()
+      return
+    } catch {
+      await new Promise((resolve) => setTimeout(resolve, 700))
+    }
+  }
+  throw new Error(tt('upgrade.reloadTimeout'))
+}
+
+export function UpgradeButton({ wide }: { wide: boolean }) {
+  const api = useMemo(() => new RezApi(), [])
+  const [info, setInfo] = useState<RezUpdateStatus>()
+  const [busy, setBusy] = useState(false)
+  const [note, setNote] = useState('')
+
+  useEffect(() => {
+    let cancelled = false
+    void api.updateStatus().then((value) => {
+      if (!cancelled) setInfo(value)
+    }).catch((error: unknown) => {
+      if (!cancelled) setNote(error instanceof Error ? error.message : String(error))
+    })
+    return () => { cancelled = true }
+  }, [api])
+
+  const label = busy
+    ? tt('upgrade.running')
+    : info?.outdated === true
+      ? tt('upgrade.label')
+      : tt('upgrade.current')
+
+  const meta = note !== ''
+    ? note
+    : info === undefined
+      ? ''
+      : info.outdated
+        ? info.latest
+        : info.installed
+
+  async function onClick(): Promise<void> {
+    if (busy) return
+    setBusy(true)
+    setNote('')
+    try {
+      const snapshot = info ?? await api.updateStatus()
+      setInfo(snapshot)
+      if (!snapshot.outdated) {
+        setNote(tt('upgrade.already', { version: snapshot.installed }))
+        return
+      }
+      const result = await api.applyUpdate()
+      setInfo(result)
+      if (result.restarting) {
+        setNote(tt('upgrade.reloading'))
+        await waitUntilHostBack(api)
+        window.location.reload()
+        return
+      }
+      setNote(tt('upgrade.already', { version: result.installed }))
+    } catch (error) {
+      setNote(error instanceof Error ? error.message : String(error))
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  return (
+    <div className={wide ? css.upgradeLayer : `${css.upgradeLayer} ${css.upgradeLayerRail}`}>
+      <button
+        type="button"
+        className={css.upgradeButton}
+        data-outdated={info?.outdated === true ? '' : undefined}
+        aria-label={tt('upgrade.aria')}
+        disabled={busy}
+        onClick={() => { void onClick() }}
+      >
+        <UpgradeIcon />
+        {wide && <span className={css.upgradeLabel}>{label}</span>}
+        {wide && meta !== '' && <span className={css.upgradeMeta}>{meta}</span>}
+        {!wide && info?.outdated === true && <span className={css.upgradeDot} />}
+      </button>
+    </div>
+  )
+}

package/src/index.ts

@@ -28,6 +28,7 @@ import { TokenManager } from './token-manager.ts'
 import { rezConfigTool, rezStatusTool } from './tools.ts'
 import type { RezConfig } from './protocol.ts'
 import { bossGuidanceFor, mountBossDesk } from './boss/mount.ts'
+import { liveSelfUpdate } from './self-update.ts'
 
 export const name = 'rez-suite'
 
@@ -146,6 +147,7 @@ export function apply(ctx: Context, config?: RezConfig): void {
       const emit = ctx.emit as unknown as (event: string, value: string) => void
       emit('credentials/updated', ref)
     },
+    selfUpdate: liveSelfUpdate(),
   })
 
   let disposeRoutes: (() => void) | undefined

package/src/protocol.ts

@@ -161,6 +161,18 @@ export interface ApiErrorBody {
   error: string
 }
 
+/** Installed vs npm latest for the suite package. */
+export interface RezUpdateStatus {
+  package: string
+  installed: string
+  latest: string
+  outdated: boolean
+}
+
+export interface RezUpdateApplyResult extends RezUpdateStatus {
+  restarting: boolean
+}
+
 /** Route paths the client calls (shared literals). */
 export const REZ_API_BASE = '/api/dsh-rez-suite' as const
 
@@ -172,4 +184,5 @@ export const REZ_API = {
   auditReset: REZ_API_BASE + '/audit/reset',
   weixin: REZ_API_BASE + '/weixin',
   weixinVerify: REZ_API_BASE + '/weixin/verify',
+  update: REZ_API_BASE + '/update',
 } as const

package/src/routes.ts

@@ -13,7 +13,7 @@ import {
   writeManagedCredential,
   type RezSystem,
 } from '@rezti/dsh-rez-sso'
-import type { RezConfig, RezMcpServerSpec } from './protocol.ts'
+import type { RezConfig, RezMcpServerSpec, RezUpdateApplyResult, RezUpdateStatus } from './protocol.ts'
 import { isRezRoleId, REZ_API } from './protocol.ts'
 import type { McpHost } from './mcp-host.ts'
 import type { TokenManager } from './token-manager.ts'
@@ -135,11 +135,16 @@ export interface RezRoutesDeps {
   host: McpHost
   tokens: TokenManager
   onCredentialWritten?: (ref: string) => void
+  selfUpdate?: {
+    status: () => Promise<RezUpdateStatus>
+    apply: () => Promise<RezUpdateApplyResult>
+    relaunch: () => void
+  }
 }
 
 /** Build every /api/dsh-rez-suite route (exact paths). */
 export function makeRoutes(deps: RezRoutesDeps): WebRoute[] {
-  const { getConfig, updateConfig, host, tokens, onCredentialWritten } = deps
+  const { getConfig, updateConfig, host, tokens, onCredentialWritten, selfUpdate } = deps
 
   const guard = (req: IncomingMessage, res: ServerResponse, method: string): boolean => {
     if (!isLoopbackRequest(req)) {
@@ -215,5 +220,28 @@ export function makeRoutes(deps: RezRoutesDeps): WebRoute[] {
         writeJson(res, 200, { ok: true })
       },
     },
+    {
+      kind: 'exact',
+      path: REZ_API.update,
+      handler: async (req, res) => {
+        const method = req.method === 'POST' ? 'POST' : 'GET'
+        if (!guard(req, res, method)) return
+        if (selfUpdate === undefined) {
+          writeJson(res, 501, { error: 'self-update is not available' })
+          return
+        }
+        try {
+          if (method === 'GET') {
+            writeJson(res, 200, await selfUpdate.status())
+            return
+          }
+          const result = await selfUpdate.apply()
+          writeJson(res, 200, result)
+          if (result.restarting) setTimeout(() => { selfUpdate.relaunch() }, 400)
+        } catch (error) {
+          writeJson(res, 502, { error: error instanceof Error ? error.message : String(error) })
+        }
+      },
+    },
   ]
 }

package/src/self-update.ts

@@ -0,0 +1,155 @@
+/**
+ * In-place upgrade of @rezti/dsh-rez-suite inside the running dsh profile.
+ * pnpm add writes the new bits; Node cannot replace an already-imported host
+ * module, so we respawn the same argv after the HTTP response flushes.
+ */
+import { spawn } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import type { RezUpdateApplyResult, RezUpdateStatus } from './protocol.ts'
+
+export const SUITE_PACKAGE = '@rezti/dsh-rez-suite'
+const NPM_LATEST = 'https://registry.npmjs.org/@rezti/dsh-rez-suite/latest'
+const PNPM_TIMEOUT_MS = 180_000
+
+export function compareVersions(left: string, right: string): number {
+  const a = left.split('.').map((part) => Number.parseInt(part, 10) || 0)
+  const b = right.split('.').map((part) => Number.parseInt(part, 10) || 0)
+  const n = Math.max(a.length, b.length)
+  for (let i = 0; i < n; i += 1) {
+    const av = a[i] ?? 0
+    const bv = b[i] ?? 0
+    if (av > bv) return 1
+    if (av < bv) return -1
+  }
+  return 0
+}
+
+export function readInstalledVersion(packageDir: string): string {
+  const raw = JSON.parse(readFileSync(join(packageDir, 'package.json'), 'utf8')) as { version?: unknown }
+  if (typeof raw.version !== 'string' || raw.version === '') throw new Error('suite package.json missing version')
+  return raw.version
+}
+
+export function findProfileDir(startDir: string): string {
+  let dir = startDir
+  for (let i = 0; i < 12; i += 1) {
+    const manifest = join(dir, 'package.json')
+    if (existsSync(manifest)) {
+      try {
+        const raw = JSON.parse(readFileSync(manifest, 'utf8')) as { dsh?: { profile?: { bundles?: unknown } } }
+        if (Array.isArray(raw.dsh?.profile?.bundles)) return dir
+      } catch {
+        // keep walking
+      }
+    }
+    const parent = dirname(dir)
+    if (parent === dir) break
+    dir = parent
+  }
+  throw new Error('cannot find dsh profile directory (no package.json with dsh.profile.bundles)')
+}
+
+export function shellQuote(value: string): string {
+  return `'${value.replaceAll("'", `'\\''`)}'`
+}
+
+export function relaunchScript(argv: string[], parentPid: number): string {
+  return `while kill -0 ${parentPid} 2>/dev/null; do sleep 0.15; done; sleep 0.25; exec ${argv.map(shellQuote).join(' ')}`
+}
+
+export async function fetchLatestVersion(fetchImpl: typeof fetch = fetch): Promise<string> {
+  const response = await fetchImpl(NPM_LATEST, { headers: { accept: 'application/json' } })
+  if (!response.ok) throw new Error(`npm registry HTTP ${response.status}`)
+  const body = await response.json() as { version?: unknown }
+  if (typeof body.version !== 'string' || body.version === '') throw new Error('npm registry missing version')
+  return body.version
+}
+
+export function runPnpmAdd(cwd: string, spec: string, env: NodeJS.ProcessEnv = process.env): Promise<void> {
+  return new Promise((resolve, reject) => {
+    const child = spawn('pnpm', ['add', spec], { cwd, env, stdio: ['ignore', 'pipe', 'pipe'] })
+    let stderr = ''
+    child.stderr.on('data', (chunk: Buffer) => { stderr += chunk.toString() })
+    const timer = setTimeout(() => {
+      child.kill('SIGTERM')
+      reject(new Error('pnpm add timed out after 3 minutes'))
+    }, PNPM_TIMEOUT_MS)
+    child.on('error', (error) => {
+      clearTimeout(timer)
+      reject(error)
+    })
+    child.on('close', (code) => {
+      clearTimeout(timer)
+      if (code === 0) resolve()
+      else reject(new Error(stderr.trim() || `pnpm add exited ${String(code)}`))
+    })
+  })
+}
+
+export function spawnRelaunch(argv: string[], parentPid: number, cwd: string, env: NodeJS.ProcessEnv = process.env): void {
+  const child = spawn('/bin/bash', ['-c', relaunchScript(argv, parentPid)], {
+    cwd,
+    env,
+    detached: true,
+    stdio: 'ignore',
+  })
+  child.unref()
+}
+
+export interface SelfUpdateIo {
+  packageDir: string
+  fetchLatest: () => Promise<string>
+  install: (profileDir: string, spec: string) => Promise<void>
+  relaunch: () => void
+}
+
+let inflight: Promise<unknown> | undefined
+
+export function createSelfUpdate(io: SelfUpdateIo) {
+  const status = async (): Promise<RezUpdateStatus> => {
+    const installed = readInstalledVersion(io.packageDir)
+    const latest = await io.fetchLatest()
+    return {
+      package: SUITE_PACKAGE,
+      installed,
+      latest,
+      outdated: compareVersions(latest, installed) > 0,
+    }
+  }
+
+  const apply = async (): Promise<RezUpdateApplyResult> => {
+    if (inflight !== undefined) throw new Error('upgrade already running')
+    const work = (async () => {
+      const snapshot = await status()
+      if (!snapshot.outdated) {
+        return { ...snapshot, restarting: false }
+      }
+      const profileDir = findProfileDir(io.packageDir)
+      await io.install(profileDir, `${SUITE_PACKAGE}@${snapshot.latest}`)
+      return { ...snapshot, installed: snapshot.latest, outdated: false, restarting: true }
+    })()
+    inflight = work
+    try {
+      return await work
+    } finally {
+      inflight = undefined
+    }
+  }
+
+  return { status, apply, relaunch: io.relaunch }
+}
+
+export function liveSelfUpdate(): ReturnType<typeof createSelfUpdate> {
+  const packageDir = dirname(fileURLToPath(new URL('.', import.meta.url)))
+  return createSelfUpdate({
+    packageDir,
+    fetchLatest: () => fetchLatestVersion(),
+    install: (profileDir, spec) => runPnpmAdd(profileDir, spec),
+    relaunch: () => {
+      spawnRelaunch(process.argv, process.pid, process.cwd())
+      setTimeout(() => { process.exit(0) }, 50)
+    },
+  })
+}