@shellraining/dsh-plugin-updates 0.1.1 → 0.2.0

package/README.md

@@ -21,19 +21,33 @@ dsh plugin --profile web add @shellraining/dsh-plugin-updates
 
 插件不改 profile 文件，所有改动都调用宿主插件管理器的接口：先卸载旧版本，再安装 `包名@版本`，用精确版本号保存，并保留原来的启用状态。版本兼容检查、构建脚本审批和锁文件回滚都由宿主处理。
 
-卸载后安装失败时，插件会保持未安装状态，提示里会显示 pnpm 的输出，并提供「恢复」按钮，按原来的版本重新安装。发布不足 24 小时的版本会标为「新发布」，pnpm 开启 `minimumReleaseAge` 时，这类版本可能装不上。
+操作前会重新读取安装状态，已经是目标版本时跳过；精确版本声明与实际安装版本不一致时，会停止更新，提示先修复安装。卸载失败后不会继续安装，也不会断言安装状态完全没变。
 
-本插件不能在页面里更新自己，因为卸载自己时界面也会一起卸载。有新版本时，它的详情页会给出对应的 `dsh plugin` 命令，退出 DSH 后在终端运行即可。
+卸载后安装失败时，已安装列表下方会保留完整错误、日志路径和「恢复」按钮，按原来的版本重新安装；恢复失败后可以再次重试。只有确认卸载成功后才提供恢复，不会覆盖随后通过其他入口安装的版本。错误摘要优先显示错误行，不会把 pnpm 开头的成功检查信息当成失败原因。
+
+发布不足 24 小时的版本会标为「新发布」，pnpm 开启 `minimumReleaseAge` 时，这类版本可能装不上。如果出现 `ERR_PNPM_RESOLUTION_POLICY_VIOLATIONS_UNHANDLED`，说明 pnpm 的策略处理发生内部错误，不代表供应链校验通过就能继续安装；插件会停止操作并保留日志，不会关闭安全策略。
 
 官方列表没有给卡片开放扩展点，列表上的按钮靠 `data-plugin-group="bundles"`、`data-plugin-package` 和开关的 `role="switch"` 这几个语义属性定位，见 `src/client/anchors.ts`。DSH 改了这部分结构时，列表上的按钮会消失，详情页不受影响。
 
+## 更新本插件自己
+
+在页面里卸载本插件时，负责后续安装的浏览器代码也会被卸掉，所以本插件的更新交给它的宿主半侧执行。详情页有新版本时会出现「更新到 x.y.z」，确认后浏览器只发一个请求，宿主在后台依次完成：
+
+1. 卸载当前版本，再按精确版本安装新版本，保持启用。
+2. 新版本装不上时，装回原来的版本，并保留新版本的错误和日志路径。
+3. 卸载这一步失败时，把被取消选中的插件重新启用。
+
+宿主保存的是插件管理器服务本身，本插件的上下文在卸载时释放，不影响后续步骤。进度写在 profile 的 `.dsh-plugin-updates/self-update.json`，新版本加载后读取这个文件，提示一次结果。更新期间插件页上本插件的按钮会暂时消失，装好后自动回来。
+
+接口挂在宿主 Connection 的 `/api/dsh-plugin-updates.self-update` 上，沿用宿主的登录 cookie 和同源检查，只接受精确版本号，包名在代码里固定为本插件。确认对话框里也列出了 `dsh plugin` 命令，原版本也装不回时，可以退出 DSH 后在终端手动安装。
+
 ## 开发
 
 ```sh
 pnpm --filter @shellraining/dsh-plugin-updates build
 ```
 
-只有浏览器半侧，源码在 `src/client/`。semver 打包进 `lib/client.js`，React、React DOM 和 `@deepseek-ai/dsh-client-ui-primitives` 由宿主提供。
+宿主半侧在 `src/host/`，只负责自更新；浏览器半侧在 `src/client/`，两边共用的接口约定在 `src/shared/`。semver 打包进 `lib/client.js`，React、React DOM 和 `@deepseek-ai/dsh-client-ui-primitives` 由宿主提供。
 
 ## 许可
 

package/cordis.patch.yml

@@ -1,4 +1,4 @@
-# 插件页的「更新」标签与插件详情页的版本区块，只有浏览器半侧。
+# 宿主半侧提供自更新接口；插件页的更新按钮与详情页的版本区块在浏览器半侧。
 - insert:
     - id: plugin-updates
       name: '@shellraining/dsh-plugin-updates'

package/lib/client.js

@@ -4,7 +4,6 @@ window.__ModuleLoader__.load({
   factory: (require) => {
     var module = { exports: {} };
     var exports = module.exports;
-"use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -1285,17 +1284,29 @@ var ZH = {
   "tag.fresh": "\u65B0\u53D1\u5E03",
   "hint.fresh": "\u53D1\u5E03\u4E0D\u8DB3 24 \u5C0F\u65F6\uFF1Apnpm \u9ED8\u8BA4\u4E0D\u5B89\u88C5\u8FD9\u4E48\u65B0\u7684\u7248\u672C\uFF0C\u5B89\u88C5\u53EF\u80FD\u5931\u8D25",
   "hint.incompatible": "\u4E0E\u5F53\u524D DSH \u7248\u672C\u4E0D\u517C\u5BB9\uFF0C\u5B89\u88C5\u4F1A\u88AB\u62D2\u7EDD",
-  "self.title": "\u672C\u63D2\u4EF6\u4E0D\u80FD\u5728\u9875\u9762\u91CC\u66F4\u65B0\u81EA\u5DF1",
-  "self.body": "\u5728\u9875\u9762\u91CC\u5378\u8F7D\u81EA\u5DF1\u4F1A\u8BA9\u8FD9\u4E2A\u754C\u9762\u4E00\u8D77\u6D88\u5931\u3002\u8BF7\u5148\u5B8C\u5168\u9000\u51FA DSH\uFF0C\u5728\u7EC8\u7AEF\u8FD0\u884C\u4E0B\u9762\u7684\u547D\u4EE4\uFF0C\u518D\u91CD\u65B0\u6253\u5F00\uFF1A",
+  "self.body": "\u53EF\u4EE5\u66F4\u65B0\u5230 {version}\u3002\u66F4\u65B0\u5728\u5BBF\u4E3B\u540E\u53F0\u8FDB\u884C\uFF0C\u671F\u95F4\u672C\u63D2\u4EF6\u7684\u754C\u9762\u4F1A\u6682\u65F6\u6D88\u5931",
+  "self.confirmTitle": "\u628A\u672C\u63D2\u4EF6\u66F4\u65B0\u5230 {version}\uFF1F",
+  "self.confirmBody": "\u5BBF\u4E3B\u4F1A\u5148\u5378\u8F7D\u5F53\u524D\u7248\u672C\uFF0C\u518D\u5B89\u88C5\u65B0\u7248\u672C\u3002\u671F\u95F4\u63D2\u4EF6\u9875\u4E0A\u7684\u66F4\u65B0\u6309\u94AE\u4F1A\u6682\u65F6\u6D88\u5931\uFF0C\u88C5\u597D\u540E\u81EA\u52A8\u56DE\u6765\uFF1B\u65B0\u7248\u672C\u88C5\u4E0D\u4E0A\u65F6\u4F1A\u88C5\u56DE\u5F53\u524D\u7248\u672C\u3002\u5982\u679C\u8FDE\u5F53\u524D\u7248\u672C\u4E5F\u88C5\u4E0D\u56DE\uFF0C\u53EF\u4EE5\u9000\u51FA DSH \u540E\u5728\u7EC8\u7AEF\u8FD0\u884C\u4E0B\u9762\u7684\u547D\u4EE4\u624B\u52A8\u5B89\u88C5\uFF1A",
+  "self.cancel": "\u53D6\u6D88",
   "self.copy": "\u590D\u5236\u547D\u4EE4",
   "self.copied": "\u5DF2\u590D\u5236",
+  "error.policy": "pnpm \u5904\u7406 minimumReleaseAge \u65F6\u53D1\u751F\u5185\u90E8\u9519\u8BEF\u3002\u8BF7\u5347\u7EA7\u5BBF\u4E3B\u9644\u5E26\u7684 pnpm\uFF0C\u6216\u7B49\u53D1\u5E03\u7B49\u5F85\u671F\u7ED3\u675F\u540E\u91CD\u8BD5\uFF1B\u5B8C\u6574\u9519\u8BEF\u89C1\u4E0B\u65B9\u65E5\u5FD7",
+  "error.inconsistent": "\u5B89\u88C5\u58F0\u660E\u4E0E\u5B9E\u9645\u7248\u672C\u4E0D\u4E00\u81F4\uFF0C\u8BF7\u5148\u7528\u5BBF\u4E3B\u63D2\u4EF6\u7BA1\u7406\u5668\u6216 CLI \u4FEE\u590D\u5B89\u88C5\uFF0C\u518D\u91CD\u8BD5\u66F4\u65B0",
+  "error.stateChanged": "\u63D2\u4EF6\u5B89\u88C5\u72B6\u6001\u5DF2\u53D8\u5316\uFF0C\u8BF7\u5237\u65B0\u63D2\u4EF6\u5217\u8868\u540E\u91CD\u8BD5",
+  "error.interrupted": "\u5BBF\u4E3B\u5728\u66F4\u65B0\u5B8C\u6210\u524D\u9000\u51FA\u4E86\uFF0C\u8BF7\u68C0\u67E5\u63D2\u4EF6\u5217\u8868\u91CC\u7684\u7248\u672C",
+  "error.selfBusy": "\u5DF2\u6709\u4E00\u4E2A\u81EA\u66F4\u65B0\u5728\u8FDB\u884C",
+  "op.checking": "\u6B63\u5728\u6838\u5BF9 {name} \u7684\u5B89\u88C5\u72B6\u6001\u2026",
+  "op.checkFailed": "\u65E0\u6CD5\u786E\u8BA4 {name} \u7684\u5B89\u88C5\u72B6\u6001\uFF0C\u5DF2\u505C\u6B62\u64CD\u4F5C\uFF1A{reason}",
+  "op.current": "{name} \u5DF2\u662F {to}\uFF0C\u65E0\u9700\u91CD\u590D\u5B89\u88C5",
   "op.removing": "\u6B63\u5728\u5378\u8F7D {name} {from}\u2026",
   "op.installing": "\u6B63\u5728\u5B89\u88C5 {name} {to}\u2026",
   "op.restoring": "\u6B63\u5728\u6062\u590D {name} {to}\u2026",
   "op.done": "{name} \u5DF2\u5207\u6362\u5230 {to}",
   "op.restart": "{name} \u5DF2\u5207\u6362\u5230 {to}\uFF0C\u91CD\u542F DSH \u540E\u751F\u6548",
   "op.failed": "{name} \u5B89\u88C5 {to} \u5931\u8D25\uFF1A{reason}",
-  "op.removeFailed": "{name} \u5378\u8F7D\u5931\u8D25\uFF0C\u6CA1\u6709\u505A\u4EFB\u4F55\u6539\u52A8\uFF1A{reason}",
+  "op.restored": "{name} \u5B89\u88C5 {to} \u5931\u8D25\uFF0C\u5DF2\u88C5\u56DE {from}\uFF1A{reason}",
+  "op.selfFailed": "{name} \u66F4\u65B0\u5230 {to} \u5931\u8D25\uFF1A{reason}",
+  "op.removeFailed": "{name} \u5378\u8F7D\u672A\u5B8C\u6210\uFF0C\u5DF2\u505C\u6B62\u540E\u7EED\u5B89\u88C5\uFF1A{reason}",
   "op.restore": "\u6062\u590D {from}",
   "op.dismiss": "\u5173\u95ED",
   "op.log": "\u65E5\u5FD7\uFF1A{path}"
@@ -1321,17 +1332,29 @@ var EN = {
   "tag.fresh": "New",
   "hint.fresh": "Published less than 24 hours ago: pnpm does not install versions this new by default, so installing may fail",
   "hint.incompatible": "Not compatible with this DSH version; the installation would be refused",
-  "self.title": "This plugin cannot update itself from the page",
-  "self.body": "Uninstalling it from the page would unload this page too. Quit DSH completely, run this command in a terminal, then start DSH again:",
+  "self.body": "Version {version} is available. The host updates this plugin in the background, and its controls disappear meanwhile",
+  "self.confirmTitle": "Update this plugin to {version}?",
+  "self.confirmBody": "The host uninstalls the current version, then installs the new one. The update controls on the Plugins page disappear meanwhile and come back once it is installed; if the new version cannot be installed, the current one is put back. If even that fails, quit DSH and run this command in a terminal to install it by hand:",
+  "self.cancel": "Cancel",
   "self.copy": "Copy command",
   "self.copied": "Copied",
+  "error.policy": "pnpm hit an internal error while handling minimumReleaseAge. Upgrade the pnpm bundled with the host, or retry after the release-age waiting period; see the full error below",
+  "error.inconsistent": "The declared and installed versions differ. Repair the installation with the host plugin manager or CLI before retrying",
+  "error.stateChanged": "The installed state has changed. Refresh the plugin list and retry",
+  "error.interrupted": "The host stopped before the update finished; check the version in the plugin list",
+  "error.selfBusy": "A self-update is already running",
+  "op.checking": "Checking the installed version of {name}\u2026",
+  "op.checkFailed": "Could not confirm the installed state of {name}; stopped: {reason}",
+  "op.current": "{name} is already at {to}; no reinstall needed",
   "op.removing": "Uninstalling {name} {from}\u2026",
   "op.installing": "Installing {name} {to}\u2026",
   "op.restoring": "Restoring {name} {to}\u2026",
   "op.done": "{name} is now at {to}",
   "op.restart": "{name} is now at {to}; restart DSH to apply it",
   "op.failed": "Could not install {name} {to}: {reason}",
-  "op.removeFailed": "Could not uninstall {name}; nothing changed: {reason}",
+  "op.restored": "Could not install {name} {to}; {from} was put back: {reason}",
+  "op.selfFailed": "Could not update {name} to {to}: {reason}",
+  "op.removeFailed": "Uninstalling {name} did not finish; installation was not started: {reason}",
   "op.restore": "Restore {from}",
   "op.dismiss": "Dismiss",
   "op.log": "Log: {path}"
@@ -1344,17 +1367,30 @@ var import_rcompare = __toESM(require_rcompare(), 1);
 var import_satisfies = __toESM(require_satisfies(), 1);
 var import_valid = __toESM(require_valid(), 1);
 var import_valid2 = __toESM(require_valid2(), 1);
+
+// src/shared/protocol.ts
 var SELF = "@shellraining/dsh-plugin-updates";
+var SELF_UPDATE_PATH = "/api/dsh-plugin-updates.self-update";
+function isRunning(status) {
+  return status?.phase === "removing" || status?.phase === "installing" || status?.phase === "restoring";
+}
+function errorLine(text) {
+  return text.split("\n").map((line) => line.trim()).filter(Boolean).find((line) => /\bERR[_!\s]|\berror\b|\bfatal\b/i.test(line));
+}
+
+// src/client/model.ts
 var DEFAULT_REGISTRY = "https://registry.npmjs.org/";
 var CACHE_MS = 10 * 6e4;
 var FRESH_MS = 24 * 60 * 6e4;
+var POLL_MS = 1e3;
+var SEEN_KEY = `${SELF}:self-update-seen`;
 function updateTarget(candidate, lookup) {
   if (lookup?.status !== "ready") return void 0;
   const best = lookup.versions.find((info) => info.compatible && !info.prerelease && !info.deprecated);
   return best !== void 0 && (0, import_gt.default)(best.version, candidate.version) ? best.version : void 0;
 }
 function isBusy(operation) {
-  return operation?.phase === "removing" || operation?.phase === "installing";
+  return operation?.phase === "checking" || operation?.phase === "removing" || operation?.phase === "installing";
 }
 function record(value) {
   return typeof value === "object" && value !== null ? value : {};
@@ -1362,6 +1398,53 @@ function record(value) {
 function errorText(error) {
   return error instanceof Error ? error.message : String(error);
 }
+function failureReason(result) {
+  if (!result.ok) return result.error.message;
+  const { error, packageResult, application } = result.value;
+  const diagnostic = error?.diagnostic?.trim();
+  const lines = diagnostic || packageResult?.output || "";
+  return errorLine(lines) ?? error?.code ?? diagnostic ?? application;
+}
+async function selfRequest(init) {
+  const response = await fetch(SELF_UPDATE_PATH.slice(1), { credentials: "same-origin", cache: "no-store", ...init });
+  if (!response.ok) throw new Error(`HTTP ${response.status}`);
+  const body = record(await response.json());
+  if (body["ok"] === true) {
+    const status = record(body["status"]);
+    const valid2 = typeof status["id"] === "string" && typeof status["from"] === "string" && typeof status["to"] === "string" && typeof status["phase"] === "string";
+    return { ok: true, status: valid2 ? status : null };
+  }
+  const code = body["code"];
+  return { ok: false, code: code === "invalid-version" || code === "busy" || code === "not-npm" || code === "current" ? code : "internal", ...typeof body["message"] === "string" ? { message: body["message"] } : {} };
+}
+function selfOperation(status, toast) {
+  const phase = status.phase === "restoring" ? "installing" : status.phase;
+  return {
+    name: SELF,
+    from: status.from,
+    to: status.phase === "restoring" ? status.from : status.to,
+    enabled: true,
+    phase,
+    restoring: status.phase === "restoring",
+    ...status.reason === void 0 ? {} : { reason: status.reason },
+    ...status.output === void 0 ? {} : { output: status.output },
+    ...status.logPath === void 0 ? {} : { logPath: status.logPath },
+    ...toast ? { toast: Date.now() } : {}
+  };
+}
+function seen(id) {
+  try {
+    return localStorage.getItem(SEEN_KEY) === id;
+  } catch {
+    return false;
+  }
+}
+function markSeen(id) {
+  try {
+    localStorage.setItem(SEEN_KEY, id);
+  } catch {
+  }
+}
 function npmInstalled(bundle) {
   const prefix = `${bundle.name}@`;
   return bundle.installed && !bundle.official && bundle.availability === "profile" && bundle.removable && bundle.readOnlyReason === void 0 && (0, import_valid.default)(bundle.version ?? "") !== null && bundle.source?.startsWith(prefix) === true && (0, import_valid2.default)(bundle.source.slice(prefix.length)) !== null;
@@ -1392,6 +1475,7 @@ var UpdatesStore = class {
   disposed = false;
   registries;
   exemptions = {};
+  pollTimer;
   getSnapshot = () => this.state;
   subscribe = (listener) => {
     this.listeners.add(listener);
@@ -1401,8 +1485,59 @@ var UpdatesStore = class {
   };
   dispose() {
     this.disposed = true;
+    if (this.pollTimer !== void 0) clearTimeout(this.pollTimer);
     this.listeners.clear();
   }
+  /** Read the last self-update once per load: report a result this page has not shown, follow one still running. */
+  watchSelf = async () => {
+    let response;
+    try {
+      response = await selfRequest();
+    } catch {
+      if (!this.disposed && this.state.operation?.name === SELF && isBusy(this.state.operation)) {
+        this.pollTimer = setTimeout(() => {
+          void this.watchSelf();
+        }, POLL_MS);
+      }
+      return;
+    }
+    if (this.disposed || !response.ok || response.status === null) return;
+    const status = response.status;
+    if (isRunning(status)) {
+      this.patch({ operation: selfOperation(status, false) });
+      this.pollTimer = setTimeout(() => {
+        void this.watchSelf();
+      }, POLL_MS);
+      return;
+    }
+    if (seen(status.id)) return;
+    markSeen(status.id);
+    this.patch({ operation: selfOperation(status, true) });
+  };
+  /** Ask the host half to update this plugin; the page loses this plugin while it runs. */
+  updateSelf = async (version) => {
+    if (this.disposed || isBusy(this.state.operation) || (0, import_valid.default)(version) === null) return false;
+    const from = this.state.candidates.find((item) => item.name === SELF)?.version ?? "";
+    const base = { name: SELF, from, to: version, enabled: true, restoring: false };
+    this.patch({ operation: { ...base, phase: "checking" } });
+    let response;
+    try {
+      response = await selfRequest({ method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ version }) });
+    } catch (error) {
+      response = { ok: false, code: "internal", message: errorText(error) };
+    }
+    if (this.disposed) return false;
+    if (!response.ok) {
+      const phase = response.code === "current" ? "current" : "check-failed";
+      this.patch({ operation: { ...base, phase, reason: response.message ?? `self-${response.code}`, toast: Date.now() } });
+      return false;
+    }
+    if (response.status !== null) this.patch({ operation: selfOperation(response.status, false) });
+    this.pollTimer = setTimeout(() => {
+      void this.watchSelf();
+    }, POLL_MS);
+    return true;
+  };
   patch(next) {
     if (this.disposed) return;
     this.state = { ...this.state, ...next };
@@ -1422,6 +1557,13 @@ var UpdatesStore = class {
     if (this.state.status !== "idle") void this.load();
   };
   async load() {
+    try {
+      await this.loadBundles();
+    } catch {
+      if (!this.disposed) this.patch({ status: "error" });
+    }
+  }
+  async loadBundles() {
     const generation = ++this.generation;
     this.patch({ status: this.state.status === "ready" ? "ready" : "loading" });
     const pm = this.ctx.remote.pluginManager;
@@ -1495,14 +1637,14 @@ var UpdatesStore = class {
   /** Switch one plugin to `version`: uninstall it, then install that exact version with its enabled state. */
   install = async (name2, version) => {
     const candidate = this.state.candidates.find((item) => item.name === name2);
-    if (candidate === void 0 || name2 === SELF || isBusy(this.state.operation)) return false;
+    if (this.disposed || candidate === void 0 || name2 === SELF || isBusy(this.state.operation) || (0, import_valid.default)(version) === null) return false;
     return this.run({ name: name2, from: candidate.version, to: version, enabled: candidate.enabled, restoring: false }, true);
   };
   /** Put back the version a failed switch removed; the plugin is no longer installed, so only install. */
   restore = async () => {
     const failed = this.state.operation;
-    if (failed?.phase !== "failed" || failed.restoring) return;
-    await this.run({ name: failed.name, from: failed.to, to: failed.from, enabled: failed.enabled, restoring: true }, false);
+    if (this.disposed || failed?.phase !== "failed" || !failed.recoverable) return;
+    await this.run({ name: failed.name, from: failed.from, to: failed.from, enabled: failed.enabled, restoring: true }, false);
   };
   /** The outcome toast finished; the banner in the tab keeps the result. */
   toastDone = () => {
@@ -1525,34 +1667,75 @@ var UpdatesStore = class {
   };
   async run(base, remove) {
     const pm = this.ctx.remote.pluginManager;
-    const fail = (phase, result) => {
+    let failurePhase = "check-failed";
+    let recoverable = false;
+    const fail = (result) => {
       const value = result.ok ? result.value : void 0;
-      const output = value?.packageResult?.output.trim();
+      const output = value?.packageResult?.output.trim() || value?.error?.diagnostic;
       const logPath = value?.packageResult?.logPath;
-      const reason = result.ok ? value?.error?.diagnostic?.split("\n")[0] ?? value?.error?.code ?? value?.application ?? "" : result.error.message;
-      this.patch({ operation: { ...base, phase, reason, toast: Date.now(), ...output ? { output } : {}, ...logPath ? { logPath } : {} } });
+      this.patch({ operation: {
+        ...base,
+        phase: failurePhase,
+        recoverable,
+        reason: failureReason(result),
+        toast: Date.now(),
+        ...output ? { output } : {},
+        ...logPath ? { logPath } : {}
+      } });
       return false;
     };
-    if (remove) {
-      this.patch({ operation: { ...base, phase: "removing" } });
-      const removed = await pm.removeBundle(base.name);
-      const stopProfile = removed.ok && removed.value.error?.code === "stop-profile";
-      if (!stopProfile && (!removed.ok || removed.value.application === "failed" || removed.value.application === "cancelled")) {
-        return fail("remove-failed", removed);
+    this.patch({ operation: { ...base, phase: "checking" } });
+    try {
+      const listed = await pm.listBundles();
+      if (this.disposed) return false;
+      if (!listed.ok) return fail(listed);
+      const current = listed.value.find((bundle) => bundle.name === base.name && bundle.installed);
+      if (current !== void 0 && (0, import_valid.default)(current.version ?? "") === (0, import_valid.default)(base.to)) {
+        this.patch({ operation: { ...base, phase: "current", toast: Date.now() } });
+        return true;
       }
+      if (remove) {
+        if (current === void 0 || !npmInstalled(current)) {
+          return fail({ ok: true, value: { application: "failed", error: { code: "plugin-state-changed" } } });
+        }
+        const declared = (0, import_valid.default)(current.source?.slice(`${base.name}@`.length) ?? "");
+        if (declared !== null && declared !== (0, import_valid.default)(current.version ?? "")) {
+          return fail({ ok: true, value: { application: "failed", error: { code: "installation-inconsistent" } } });
+        }
+        base = { ...base, from: current.version ?? base.from, enabled: current.enabled };
+        failurePhase = "remove-failed";
+        this.patch({ operation: { ...base, phase: "removing" } });
+        const removed = await pm.removeBundle(base.name);
+        const stopProfile = removed.ok && removed.value.error?.code === "stop-profile";
+        if (!stopProfile && (!removed.ok || removed.value.application === "failed" || removed.value.application === "cancelled")) {
+          return fail(removed);
+        }
+        recoverable = !stopProfile;
+      } else {
+        if (current !== void 0) {
+          return fail({ ok: true, value: { application: "failed", error: { code: "plugin-state-changed" } } });
+        }
+        recoverable = true;
+      }
+      if (this.disposed) return false;
+      failurePhase = "failed";
+      this.patch({ operation: { ...base, phase: "installing" } });
+      const installed = await pm.installBundle(`${base.name}@${base.to}`, {
+        enabled: base.enabled,
+        saveExact: true,
+        requestId: `${SELF}:${Date.now()}`
+      });
+      if (!installed.ok || installed.value.application === "failed" || installed.value.application === "cancelled") {
+        return fail(installed);
+      }
+      const to = installed.value.version ?? base.to;
+      this.patch({ operation: { ...base, to, toast: Date.now(), phase: installed.value.application === "restart-required" ? "restart" : "done" } });
+      return true;
+    } catch (error) {
+      return fail({ ok: false, error: { message: errorText(error) } });
+    } finally {
+      if (!this.disposed) await this.load();
     }
-    this.patch({ operation: { ...base, phase: "installing" } });
-    const installed = await pm.installBundle(`${base.name}@${base.to}`, {
-      enabled: base.enabled,
-      saveExact: true,
-      requestId: `${SELF}:${Date.now()}`
-    });
-    if (!installed.ok || installed.value.application === "failed" || installed.value.application === "cancelled") {
-      return fail("failed", installed);
-    }
-    const to = installed.value.version ?? base.to;
-    this.patch({ operation: { ...base, to, toast: Date.now(), phase: installed.value.application === "restart-required" ? "restart" : "done" } });
-    return true;
   }
 };
 
@@ -1618,10 +1801,11 @@ function scan(document2) {
     const end = card.querySelector('[role="switch"]')?.parentElement;
     if (name2 && end) cards.set(name2, mountIn(end, "card", true));
   }
-  return { ...head === void 0 ? {} : { head }, cards };
+  const status = mountIn(group, "status", false);
+  return { ...head === void 0 ? {} : { head }, status, cards };
 }
 function same(a, b) {
-  if (a.head !== b.head || a.cards.size !== b.cards.size) return false;
+  if (a.head !== b.head || a.status !== b.status || a.cards.size !== b.cards.size) return false;
   for (const [name2, node] of a.cards) if (b.cards.get(name2) !== node) return false;
   return true;
 }
@@ -1660,23 +1844,56 @@ function selfCommand(version) {
 function dateText(stamp) {
   return stamp === void 0 ? "" : new Date(stamp).toLocaleDateString();
 }
-function SelfNotice({ t, version }) {
+function SelfNotice({ t, version, busy, onUpdate }) {
+  const [open, setOpen] = (0, import_react.useState)(false);
   const [copied, setCopied] = (0, import_react.useState)(false);
   const command = selfCommand(version);
+  const close = () => {
+    setOpen(false);
+  };
   return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dpu-banner", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("self.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: t("self.body") }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dpu-banner-row", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", { className: "dpu-pre dpu-command", children: command }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "outline", onClick: () => {
-        void (0, import_dsh_client_ui_primitives.writeClipboard)(command).then(setCopied);
-      }, children: copied ? t("self.copied") : t("self.copy") })
-    ] })
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: t("self.body", { version }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "primary", disabled: busy, onClick: () => {
+        setOpen(true);
+      }, children: t("updateTo", { version }) })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+      import_dsh_client_ui_primitives.Modal,
+      {
+        open,
+        onClose: close,
+        title: t("self.confirmTitle", { version }),
+        description: t("self.confirmBody"),
+        closeLabel: t("op.dismiss"),
+        footer: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "ghost", onClick: close, children: t("self.cancel") }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "primary", "data-modal-autofocus": "", onClick: () => {
+            close();
+            onUpdate();
+          }, children: t("updateTo", { version }) })
+        ] }),
+        children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dpu-banner-row", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", { className: "dpu-pre dpu-command", children: command }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "outline", onClick: () => {
+            void (0, import_dsh_client_ui_primitives.writeClipboard)(command).then(setCopied);
+          }, children: copied ? t("self.copied") : t("self.copy") })
+        ] })
+      }
+    )
   ] });
 }
 function operationText(t, operation) {
-  const params = { name: operation.name, from: operation.from, to: operation.to, reason: operation.reason ?? "" };
+  const raw = operation.reason ?? "";
+  const reason = raw.includes("ERR_PNPM_RESOLUTION_POLICY_VIOLATIONS_UNHANDLED") ? t("error.policy") : raw === "installation-inconsistent" ? t("error.inconsistent") : raw === "plugin-state-changed" ? t("error.stateChanged") : raw === "interrupted" ? t("error.interrupted") : raw === "self-busy" ? t("error.selfBusy") : raw === "self-not-npm" ? t("error.stateChanged") : raw;
+  const params = { name: operation.name, from: operation.from, to: operation.to, reason };
   switch (operation.phase) {
+    case "checking":
+      return t("op.checking", params);
+    case "check-failed":
+      return t("op.checkFailed", params);
+    case "current":
+      return t("op.current", params);
     case "removing":
       return t("op.removing", params);
     case "installing":
@@ -1685,17 +1902,22 @@ function operationText(t, operation) {
       return t("op.done", params);
     case "restart":
       return t("op.restart", params);
+    case "restored":
+      return t("op.restored", params);
     case "failed":
-      return t("op.failed", params);
+      return t(operation.name === SELF ? "op.selfFailed" : "op.failed", params);
     case "remove-failed":
       return t("op.removeFailed", params);
   }
 }
+function isFailure(operation) {
+  return operation.phase === "failed" || operation.phase === "remove-failed" || operation.phase === "check-failed" || operation.phase === "restored";
+}
 function OperationToast({ t, useUpdates, actions }) {
   const operation = useUpdates((state) => state.operation);
   if (operation?.toast === void 0) return null;
-  const failed = operation.phase === "failed" || operation.phase === "remove-failed";
-  const restorable = operation.phase === "failed" && !operation.restoring;
+  const failed = isFailure(operation);
+  const restorable = operation.phase === "failed" && operation.recoverable;
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
     import_dsh_client_ui_primitives.Toast,
     {
@@ -1713,12 +1935,12 @@ function OperationToast({ t, useUpdates, actions }) {
 function OperationBanner({ t, operation, actions }) {
   const params = { from: operation.from };
   const busy = isBusy(operation);
-  const failed = operation.phase === "failed" || operation.phase === "remove-failed";
+  const failed = isFailure(operation);
   const text = operationText(t, operation);
   return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dpu-banner", role: failed ? "alert" : "status", ...failed ? { "data-tone": "error" } : {}, children: [
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dpu-banner-row", children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: text }),
-      operation.phase === "failed" && !operation.restoring ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "outline", onClick: () => {
+      operation.phase === "failed" && operation.recoverable ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "outline", onClick: () => {
         void actions.restore();
       }, children: t("op.restore", params) }) : null,
       busy ? null : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "ghost", onClick: actions.dismiss, children: t("op.dismiss") })
@@ -1805,7 +2027,9 @@ function DetailSection(props) {
       ] })
     ] }),
     operation?.name === candidate.name ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OperationBanner, { t, operation, actions }) : null,
-    self && target !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SelfNotice, { t, version: target }) : null,
+    self && target !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SelfNotice, { t, version: target, busy: isBusy(operation), onUpdate: () => {
+      void actions.updateSelf(target);
+    } }) : null,
     body
   ] });
 }
@@ -1826,6 +2050,13 @@ function ListControls({ t, useUpdates, actions }) {
     if (target !== void 0 && candidate.name !== SELF) targets.set(candidate.name, target);
   }
   const portals = [];
+  if (anchors.status !== void 0 && operation !== void 0) {
+    portals.push((0, import_react_dom.createPortal)(
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OperationBanner, { t, operation, actions }),
+      anchors.status,
+      "operation"
+    ));
+  }
   if (anchors.head !== void 0 && targets.size > 0) {
     portals.push((0, import_react_dom.createPortal)(
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { size: "sm", variant: "outline", icon: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives2.IconDownloadOutlineRegular, { size: 13 }), disabled: busy, onClick: () => {
@@ -1864,12 +2095,14 @@ function apply(ctx) {
       for (const off of offs) off();
     };
   }, `${name}: host invalidations`);
+  void store.watchSelf();
   const t = ctx.locale.bind(LOCALE_NS);
   const face = {
     hooks: { updates: store },
     actions: {
       ensure: store.ensure,
       install: store.install,
+      updateSelf: store.updateSelf,
       updateAll: store.updateAll,
       restore: store.restore,
       dismiss: store.dismiss,

package/lib/index.js

@@ -1,10 +1,161 @@
 // Generated by `pnpm run build`; edit src/, not this file.
 
-// src/index.ts
-var name = "@shellraining/dsh-plugin-updates";
-function apply() {
+// src/shared/protocol.ts
+var SELF = "@shellraining/dsh-plugin-updates";
+var SELF_UPDATE_PATH = "/api/dsh-plugin-updates.self-update";
+function isRunning(status) {
+  return status?.phase === "removing" || status?.phase === "installing" || status?.phase === "restoring";
+}
+function errorLine(text2) {
+  return text2.split("\n").map((line) => line.trim()).filter(Boolean).find((line) => /\bERR[_!\s]|\berror\b|\bfatal\b/i.test(line));
+}
+
+// src/host/self-update.ts
+import { randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+var STALE_MS = 15 * 6e4;
+var VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+function record(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function text(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function failed(result) {
+  return result.application === "failed" || result.application === "cancelled";
+}
+function reasonOf(result) {
+  const output = result.error?.diagnostic ?? result.packageResult?.output ?? "";
+  return errorLine(output) ?? result.error?.code ?? (output.trim() || result.application);
+}
+function details(result) {
+  const output = (result.packageResult?.output.trim() || result.error?.diagnostic)?.slice(-8e3);
+  const logPath = result.packageResult?.logPath;
+  return { ...output ? { output } : {}, ...logPath ? { logPath } : {} };
+}
+function npmVersion(bundle) {
+  if (bundle === void 0 || !bundle.installed || !bundle.removable) return void 0;
+  if (bundle.source?.startsWith(`${SELF}@`) !== true || bundle.version === void 0) return void 0;
+  return VERSION.test(bundle.version) ? bundle.version : void 0;
+}
+var SelfUpdater = class {
+  constructor(profileDir, manager, logger) {
+    this.manager = manager;
+    this.logger = logger;
+    this.file = join(profileDir, ".dsh-plugin-updates", "self-update.json");
+  }
+  manager;
+  logger;
+  file;
+  running = false;
+  async status() {
+    let stored;
+    try {
+      stored = record(JSON.parse(await readFile(this.file, "utf8")));
+    } catch {
+      return null;
+    }
+    const { id, from, to, phase, startedAt } = stored;
+    if (typeof id !== "string" || typeof from !== "string" || typeof to !== "string" || typeof phase !== "string") return null;
+    const status = stored;
+    if (isRunning(status) && !this.running && typeof startedAt === "number" && Date.now() - startedAt > STALE_MS) {
+      return { ...status, phase: "failed", reason: "interrupted" };
+    }
+    return status;
+  }
+  async start(version) {
+    if (typeof version !== "string" || !VERSION.test(version)) return { ok: false, code: "invalid-version" };
+    if (this.running || isRunning(await this.status())) return { ok: false, code: "busy" };
+    const from = npmVersion((await this.manager.listBundles()).find((bundle) => bundle.name === SELF));
+    if (from === void 0) return { ok: false, code: "not-npm" };
+    if (from === version) return { ok: false, code: "current" };
+    const id = randomUUID();
+    const startedAt = Date.now();
+    const base = { id, from, to: version, startedAt };
+    this.running = true;
+    await this.save({ ...base, phase: "removing" });
+    void this.run(base).finally(() => {
+      this.running = false;
+    });
+    return { ok: true, status: { id, from, to: version, phase: "removing" } };
+  }
+  async run(base) {
+    const step = (phase, extra = {}) => this.save({ ...base, ...extra, phase, ...isRunning({ ...base, phase }) ? {} : { finishedAt: Date.now() } });
+    try {
+      const removed = await this.manager.removeBundle(SELF);
+      if (failed(removed)) {
+        await this.reselect();
+        await step("failed", { reason: reasonOf(removed), ...details(removed) });
+        return;
+      }
+      await step("installing");
+      const installed = await this.manager.installBundle(`${SELF}@${base.to}`, { enabled: true, saveExact: true });
+      if (!failed(installed)) {
+        await step(installed.application === "restart-required" ? "restart" : "done", { to: installed.version ?? base.to });
+        return;
+      }
+      const failure = { reason: reasonOf(installed), ...details(installed) };
+      await step("restoring", failure);
+      const restored = await this.manager.installBundle(`${SELF}@${base.from}`, { enabled: true, saveExact: true });
+      if (failed(restored)) {
+        this.logger.warn("[plugin-updates] could not restore %s@%s: %s", SELF, base.from, reasonOf(restored));
+        await step("failed", { ...failure, reason: `${failure.reason}
+${reasonOf(restored)}` });
+        return;
+      }
+      await step("restored", failure);
+    } catch (error) {
+      this.logger.warn("[plugin-updates] self-update stopped: %s", text(error));
+      await step("failed", { reason: text(error) }).catch(() => void 0);
+    }
+  }
+  async reselect() {
+    const bundle = (await this.manager.listBundles()).find((item) => item.name === SELF);
+    if (bundle?.installed === true && !bundle.enabled) await this.manager.setBundleEnabled(SELF, true);
+  }
+  async save(status) {
+    const dir = join(this.file, "..");
+    await mkdir(dir, { recursive: true, mode: 448 });
+    const temp = `${this.file}.${process.pid}.tmp`;
+    await writeFile(temp, `${JSON.stringify(status, null, 2)}
+`, { mode: 384 });
+    await rename(temp, this.file);
+  }
+};
+
+// src/host/index.ts
+var name = SELF;
+var inject = ["connection", "pluginManager", "profileContext"];
+var ORIGINAL = /* @__PURE__ */ Symbol.for("cordis.original");
+function unwrap(service) {
+  const original = Reflect.get(service, ORIGINAL);
+  return typeof original === "object" && original !== null ? original : service;
+}
+function json(body) {
+  return new Response(JSON.stringify(body), { headers: { "content-type": "application/json", "cache-control": "no-store" } });
+}
+function apply(ctx) {
+  const updater = new SelfUpdater(ctx.profileContext.dir, unwrap(ctx.pluginManager), ctx.logger);
+  ctx.connection.fetch.register({
+    path: SELF_UPDATE_PATH,
+    methods: ["GET", "POST"],
+    requestBody: "buffered",
+    fetch: async (request) => {
+      try {
+        if (request.method === "GET") return json({ ok: true, status: await updater.status() });
+        const body = await request.json().catch(() => null);
+        const version = typeof body === "object" && body !== null ? Reflect.get(body, "version") : void 0;
+        return json(await updater.start(version));
+      } catch (error) {
+        ctx.logger.warn("[plugin-updates] self-update route failed: %s", error instanceof Error ? error.message : String(error));
+        return json({ ok: false, code: "internal", message: error instanceof Error ? error.message : String(error) });
+      }
+    }
+  });
 }
 export {
   apply,
+  inject,
   name
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shellraining/dsh-plugin-updates",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "type": "module",
   "description": "在插件页检查 npm 来源插件的新版本，一键更新或安装指定版本",
   "main": "./lib/index.js",
@@ -19,6 +19,7 @@
   },
   "devDependencies": {
     "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-rc.3",
+    "@types/node": "24.19.2",
     "@types/react": "18.3.31",
     "@types/react-dom": "18.3.7",
     "@types/semver": "7.8.0",
@@ -57,7 +58,7 @@
     "access": "public"
   },
   "scripts": {
-    "typecheck": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.host.json && tsc -p tsconfig.client.json",
     "build": "pnpm run typecheck && node build.mjs"
   }
 }