dsh-plugin-upgrader 1.0.1 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,129 @@
 # Changelog
 
+## 1.1.0 — 2026-10-27
+
+The first published release since 1.0.2: the `1.0.3` entries below shipped in
+this version, together with everything listed here.
+
+- **Upgrading a theme plugin no longer leaves the page unstyled.** Replacing an
+  appearance plugin (`dsh-dream-skin`, `*-skin-*`, `dsh-client-ui-theme`) unloads
+  the code that injected its stylesheet, so the page snaps back to the host's
+  default look. The settings are NOT lost — `dsh-dream-skin` keeps them in
+  `$DSH_HOME/dream-skin.json`, outside the profile and written atomically, which
+  is why that file survives an upgrade untouched — but the injected CSS and the
+  `data-*` attributes on `<html>` lived only in the page, and the restarted
+  plugin has no way to put them back without being asked. A batch that actually
+  replaced such a plugin now says so and reloads the page once, after the plugin
+  has restarted, so the look comes back from that file. The reload is skipped for
+  failed steps, for steps that changed nothing, and for every ordinary plugin — a
+  failed upgrade must not also throw the page away.
+- **The upgrader's own row explains itself, and can update itself.** Both halves
+  of "这个插件没法管理自己" were real, and they are different problems:
+  - *The row was blank.* Installing as `link:`/`file:` made the overview skip the
+    registry lookup entirely, so the row showed a version, an arrow with nothing
+    after it, and no history. A path install now still reads the published list
+    (the directory keeps its own version, which is what is actually loaded) and
+    says so, instead of looking like a package that was never published. It stays
+    non-upgradable: replacing a `link:` with a registry tarball is a different
+    install, not an upgrade.
+  - *It could not update itself.* A version change through the batch job starts
+    with `removeBundle`, and removing this bundle unloads the very code that
+    would run the install that follows — the batch dies with the plugin that was
+    driving it, leaving the profile without it. The row now offers the page's own
+    installer instead (`plugins.tab` owner prop `install`), which is owned by the
+    plugin manager and therefore survives the unload. The batch and "Select all"
+    skip this row for the same reason, so one click can no longer strand the
+    profile.
+- **The version list no longer silently disappears.** Several plugins drew no
+  history button and no explanation, which looked like "this package has no
+  published versions" — it was a failed registry lookup being swallowed. Three
+  separate causes, all measured against `registry.npmmirror.com`:
+  - **The tab asked for every package at once.** Eleven concurrent connections
+    timed out at the 10 s deadline while the same eleven asked one at a time
+    answered in under 1.2 s. Lookups now go through a four-at-a-time cap.
+  - **The documents are large.** `billion-context` is a 26 MB packument and
+    10 MB even abbreviated, so a healthy request could lose a 10 s race on its
+    own. Lookups now ask for npm's abbreviated form
+    (`application/vnd.npm.install-v1+json`, which keeps `time`, `engines` and
+    `deprecated`), the deadline moved to 20 s, and a transport failure is
+    retried once — a `UND_ERR_CONNECT_TIMEOUT` is socket contention, not a
+    verdict about the package.
+  - **The failure was invisible.** A row whose lookup failed is now drawn with
+    the reason (`版本列表读取失败，点「检查更新」可重试`) instead of looking
+    like a package with no history. A failed lookup is also cached for a shorter
+    window than a successful one, so one bad render does not make the next
+    mount slow too.
+- **A mirror's stale `latest` tag no longer turns an upgrade into a downgrade.**
+  npmmirror serves `@deepseek-ai/dsh-subagent-codex` with `latest: 0.0.1-rc.1`
+  while the profile runs `0.2.1-rc.3`, so the row claimed the installed build
+  was newer than latest and offered a downgrade as an upgrade. A tag that sorts
+  below the installed version is now treated as broken and recovered from the
+  published list, preferring a stable release over a prerelease. A prerelease
+  that merely sorts above a healthy tag still does not steal `latest`.
+- **An upgrade no longer dies on `bundle-in-use`.** Replacing a version means
+  remove + install, and `removeBundle` only unloads a bundle it reads as enabled.
+  A plugin that is disabled but still holds a live loader fiber therefore went
+  straight to the "in use" check and was refused, which made every upgrade of a
+  disabled plugin fail. The removal now clears that fiber and retries once.
+- **The unload asks the right question.** 1.0.3's follow-up assumed
+  `setBundleEnabled(name, false)` reloads unconditionally, so it would dispose the
+  fiber. It does not: `selectBundle` returns early when the bundle is already
+  deselected, so the manifest does not change, so `reconcileProfile` has no
+  dropped row to dispose and the fiber survives — the retry then failed for
+  exactly the same reason. The removal now reads `enabled` first and, for a
+  bundle the manager already reads as disabled, re-selects it and deselects it
+  again, which is the only form of the toggle that produces a change a live
+  process can act on.
+- **A refusal the host cannot fix says so.** A second `bundle-in-use` now comes
+  back with the manager's code *and* a bilingual diagnostic ("the loader still
+  holds its plugin row; restart DSH and upgrade again"), and the tab shows the
+  diagnostic instead of the bare code. Retrying in the same process cannot clear
+  it, so the panel has to name the one action that does. The re-select is also
+  undone on the way out, so a failed upgrade never leaves the plugin enabled.
+- **The primary button follows the theme.** Its label colour comes from
+  `--dsw-alias-label-primary-inverted` instead of a hard-coded white, so it stays
+  readable when the host theme uses a light primary fill.
+- **Tests**: `test/install.test.ts` covers the replacement path (the remove +
+  install fallback and its fresh request id, the unload retry, the
+  already-disabled re-select including a refused one, the enabled-state restore,
+  and the restart diagnostic on both refusal spellings); `test/registry.test.ts`
+  covers the abbreviated request, the single retry, the shorter failure cache and
+  the 404-is-not-contention rule; `test/overview.test.ts` fails if a page load
+  stops respecting the cap; `test/shape-packument.test.ts` pins the stale-tag
+  rule. `scripts/verify-overview-live.mjs` runs the built host half against the
+  real mirror.
+
+## 1.0.3 — unreleased as its own version
+
+These changes were staged for 1.0.3, which was never published on its own; they
+first shipped in 1.1.0.
+
+- **Upgrades report what pnpm is doing.** The host subscribes to
+  `plugin-manager/install-log` and `plugin-manager/install-state`, so pnpm's own
+  output ("Verifying lockfile against supply-chain policies", `ETIMEDOUT` retries,
+  registry fallbacks) now streams into the job log while the step runs, instead of
+  only surfacing after it ends. An upgrade that sits for five minutes on the mirror
+  retry ladder finally looks like what it is.
+- **The progress bar is honest about long steps.** While a step is in flight the
+  panel shows a live elapsed clock, the phase (`installing` / `applying` /
+  `cancelling`), the registry attempt when a fallback is in progress, and an
+  indeterminate bar. `done/total` only moves when a step really finishes, which
+  previously left it pinned at 0% for minutes.
+- **Cancel works at every stage.** The second install of a remove + install used to
+  pass `requestId: undefined`, so that whole stretch was uncancellable; each install
+  now mints its own id and the job reports it back. Cancelling also explains what
+  happened: settled already, past the point of no return, or stopping now.
+- **The heartbeat is a timer (2 s) instead of a per-step write.** A single step over
+  the 15-minute stale window was declared abandoned mid-work, which both killed a
+  healthy job and let a second batch start against the same profile.
+- **A failed install no longer tries to restore the enabled state** of a package it
+  never added, which used to report a second `operation-error` on top of the real
+  failure.
+- **The panel no longer sticks after a batch settles.** `submitJob` resolves only
+  after the whole batch finished, and the tab wrote a fresh `queued` snapshot over
+  the result, leaving the spinner and the disabled buttons behind until the tab was
+  remounted.
+
 ## 1.0.1 — 2026-10-23
 
 - **Rewritten in TypeScript.** The whole project is now typed; `pnpm run typecheck`

package/README.en.md

@@ -18,6 +18,9 @@ English · [中文](./README.md)
 
 - **One-click upgrade** — bump every upgradable plugin to its newest version, with
   progress, per-plugin results and failure reasons.
+- **Progress you can actually see** — the raw pnpm output (registry retries, lockfile
+  verification), a live elapsed clock per step, an indeterminate bar while a step
+  runs, and a cancel button that works.
 - **Multi-select upgrade** — tick any subset of plugins and upgrade only those.
 - **Version history / rollback** — expand any plugin to see every published version
   (with publish date and engine requirement) and switch to it in one click.
@@ -75,8 +78,8 @@ host half:
 | --- | --- |
 | `GET /api/plugin-upgrader/overview` | installed plugins plus their published versions (registry packument, 5-minute cache, 10-second timeout) |
 | `POST /api/plugin-upgrader/job` | queue a batch of upgrade / switch steps, return a job id immediately |
-| `GET /api/plugin-upgrader/job?id=…` | poll progress and per-plugin results |
-| `POST /api/plugin-upgrader/cancel` | abort the step in flight |
+| `GET /api/plugin-upgrader/job?id=…` | poll progress, current phase, elapsed time, per-plugin results and the live log |
+| `POST /api/plugin-upgrader/cancel` | abort the step in flight, including the second install of a remove + install |
 
 Every route is loopback-only: a batch installs packages, so a paired remote device
 or a cross-site page must never reach it.
@@ -94,6 +97,29 @@ Removing a plugin drops its enabled / disabled state, so each step re-applies
 `setBundleEnabled` with the state it had before the upgrade. A disabled plugin stays
 disabled after being upgraded.
 
+### Why an upgrade sometimes takes minutes
+
+Not this plugin: pnpm. Before installing, pnpm 11 re-checks every lockfile entry
+against the registry (`Verifying lockfile against supply-chain policies`), and a
+mirror such as `registry.npmmirror.com` answers `ETIMEDOUT` for plenty of packages,
+which starts a 10-second → 1-minute retry ladder. Upgrading an already-installed
+package additionally costs two pnpm runs (remove, then install).
+
+The old build showed nothing during that time and moved the bar once per completed
+step, so it read as a hang. The host now subscribes to
+`plugin-manager/install-log` and `plugin-manager/install-state` and streams pnpm's
+own output, the phase and the retry count into the job log, while the panel shows an
+elapsed clock and an indeterminate bar — a slow install looks like a retrying one
+instead of a frozen 0%.
+
+Two related bugs fixed with it:
+
+- The heartbeat is a timer (2 s), no longer a write per completed step. A single step
+  lasting over 15 minutes used to be declared abandoned, cancelling a healthy job and
+  letting a second batch start on the same profile.
+- The second install of a remove + install passed `requestId: undefined`, making that
+  stretch uncancellable. Every install now has its own id, so cancel works throughout.
+
 ### One batch at a time
 
 The host runs one job at a time. A second submission gets `409 busy` with the id of
@@ -104,7 +130,7 @@ error:
   the running batch
 - `overview` carries an `active` field, so a freshly mounted tab reconnects to work
   in progress
-- a job writes a heartbeat every few seconds; a job left behind by a host restart is
+- a job re-stamps a heartbeat every 2 seconds; a job left behind by a host restart is
   declared abandoned once the heartbeat goes stale, so it cannot block every later
   upgrade with a permanent `busy`
 

package/README.md

@@ -15,6 +15,8 @@ DSH 自带的插件页能装、能卸、能看已安装列表，但缺两件事
 ## 功能
 
 - **一键升级** —— 一次把全部可升级插件升到最新版，带进度、逐项结果和失败原因。
+- **看得见的进度** —— 升级时直接显示 pnpm 的原始输出（含换源重试、lockfile 校验），
+  每步都有已用时计时和不确定态进度条，卡住时可以一键取消。
 - **多选升级** —— 勾选任意几个插件，只升级选中的这些。
 - **版本历史 / 回滚** —— 展开任意插件即可看到已发布的全部版本（含发布时间与引擎要求），点一下切到那个版本。
 - **一键跳 GitHub** —— 每行的 `GH` 按钮打开插件仓库主页；点版本号直接进该版本的 GitHub 发布页。
@@ -67,8 +69,8 @@ dsh plugin --profile web add "$PWD"
 | --- | --- |
 | `GET /api/plugin-upgrader/overview` | 已安装插件 + 各插件已发布版本（registry packument，5 分钟缓存，10 秒超时） |
 | `POST /api/plugin-upgrader/job` | 提交一批升级 / 切换步骤，立即返回 job id |
-| `GET /api/plugin-upgrader/job?id=…` | 轮询进度与逐项结果 |
-| `POST /api/plugin-upgrader/cancel` | 中断当前步骤 |
+| `GET /api/plugin-upgrader/job?id=…` | 轮询进度、当前阶段、已用时、逐项结果与实时日志 |
+| `POST /api/plugin-upgrader/cancel` | 中断当前步骤（含「先卸载再安装」的第二次安装） |
 
 所有路由仅限本机回环访问：批量操作会安装软件包，配对设备或跨站页面一律拒绝。
 
@@ -83,6 +85,25 @@ dsh plugin --profile web add "$PWD"
 卸载会丢掉插件原有的启用 / 禁用状态，因此每一步在安装完成后会按操作前的状态
 重新 `setBundleEnabled`，禁用中的插件升级后仍然是禁用状态。
 
+### 为什么升级有时候要好几分钟
+
+不是这个插件慢，是 pnpm 慢。pnpm 11 在 `install` 前会拿锁文件里的每个条目去 registry
+重新核对一次（`Verifying lockfile against supply-chain policies`），国内镜像
+（`registry.npmmirror.com`）对不少包会 `ETIMEDOUT`，于是走 10 秒 → 1 分钟的重试阶梯。
+一次「升级」如果目标是已安装的包，还是 remove + install 两条 pnpm 命令，两段各等一次。
+
+旧版本在这里什么都不显示，进度条只在「整步完成」时动一格，所以看起来就是死住了。
+现在宿主端订阅了 `plugin-manager/install-log` 和 `plugin-manager/install-state`，
+把 pnpm 的原始输出、当前阶段、重试次数实时转进 job 日志，界面同时显示已用时和
+不确定态进度条：慢的时候你能看见它在重试，而不是盯着一个不动的 0%。
+
+顺带修掉的两个坑：
+
+- 心跳改成定时器（2 秒），不再按「完成一步」写。单步超过 15 分钟以前会被误判成
+  「job 已放弃」，于是一个健康的任务被作废，还能再并进来一批。
+- 「先卸载再安装」的第二次安装以前用 `requestId: undefined`，导致那一段无法取消；
+  现在每次安装都有自己的 id，取消在任何阶段都有效。
+
 ### 同一时刻只跑一批
 
 宿主端一次只允许一个 job。重复提交会拿到 `409 busy`（带正在跑的那个 job id），
@@ -90,7 +111,7 @@ dsh plugin --profile web add "$PWD"
 
 - 新开一个插件页标签、或在进度跑着时再点「一键升级」，都会看到正在进行的那一批
 - `overview` 里带 `active` 字段，标签页一挂载就能接上正在跑的任务
-- job 每隔几秒写一次心跳时间戳，宿主重启后遗留的「僵尸 job」会按心跳超时自动作废，
+- job 每 2 秒刷一次心跳时间戳，宿主重启后遗留的「僵尸 job」会按心跳超时自动作废，
   不会永久占着位置让之后所有升级都撞 `busy`
 
 主进程重启会让正在跑的 job 中断，界面会把这种情况显示为失败而不是永远转圈。

package/lib/client.js

@@ -61,6 +61,9 @@ window.__ModuleLoader__.load({
       upToDate: "\u5168\u90E8\u5DF2\u662F\u6700\u65B0",
       upgrade: "\u5347\u7EA7",
       upgrading: "\u5347\u7EA7\u4E2D\u2026",
+      selfUpdate: "\u7528\u9875\u9762\u5B89\u88C5\u5668\u5347\u7EA7",
+      selfUpdateHint: "\u63D2\u4EF6\u4E0D\u80FD\u5378\u8F7D\u81EA\u5DF1\u518D\u88C5\u56DE\u81EA\u5DF1\uFF0C\u6240\u4EE5\u8FD9\u4E00\u6B65\u4EA4\u7ED9\u63D2\u4EF6\u9875\u81EA\u5DF1\u7684\u5B89\u88C5\u6D41\u7A0B",
+      selfUpdateUnavailable: "\u8FD9\u4E00\u9875\u6CA1\u6709\u63D0\u4F9B\u5B89\u88C5\u5165\u53E3\uFF0C\u8BF7\u5728\u300C\u5DF2\u5B89\u88C5\u300D\u91CC\u7528\u5B98\u65B9\u5B89\u88C5\u5BF9\u8BDD\u6846\u5347\u7EA7\u672C\u63D2\u4EF6\u3002",
       history: "\u5386\u53F2\u7248\u672C",
       hideHistory: "\u6536\u8D77\u5386\u53F2",
       github: "GitHub \u4E3B\u9875",
@@ -82,19 +85,32 @@ window.__ModuleLoader__.load({
       openPage: "\u5728\u5DF2\u5B89\u88C5\u4E2D\u67E5\u770B",
       noHistory: "\u6CA1\u6709\u53EF\u7528\u7684\u7248\u672C\u8BB0\u5F55",
       noHistoryWhy: "\u8FD9\u4E2A\u5305\u4E0D\u662F\u4ECE npm \u6CE8\u518C\u8868\u5B89\u88C5\u7684\uFF0C\u6CA1\u6709\u53D1\u5E03\u5386\u53F2\u3002",
+      historyFailed: "\u7248\u672C\u5217\u8868\u8BFB\u53D6\u5931\u8D25\uFF0C\u70B9\u300C\u68C0\u67E5\u66F4\u65B0\u300D\u53EF\u91CD\u8BD5",
       versions: (n) => `${n} \u4E2A\u7248\u672C`,
       showingNewest: (n) => `\u5217\u51FA\u6700\u65B0 ${n} \u4E2A`,
       progress: (done, total) => `\u6B63\u5728\u5904\u7406 ${done}/${total}`,
+      elapsed: (text) => `\u5DF2\u7528\u65F6 ${text}`,
+      phaseInstalling: "\u6B63\u5728\u4E0B\u8F7D\u5E76\u5B89\u88C5",
+      phaseApplying: "\u6B63\u5728\u5199\u5165\u914D\u7F6E",
+      phaseCancelling: "\u6B63\u5728\u53D6\u6D88",
+      phaseWaiting: "\u51C6\u5907\u4E2D",
+      registryAttempt: (index, total) => `\u6CE8\u518C\u8868 ${index}/${total}\uFF0C\u4E0A\u4E00\u4E2A\u8D85\u65F6\u4F1A\u81EA\u52A8\u6362\u6E90`,
+      slowHint: "\u9996\u6B21\u5B89\u88C5\u6216\u9700\u8981\u6821\u9A8C\u4F9D\u8D56\u65F6\u4F1A\u6BD4\u8F83\u6162\uFF0C\u65E5\u5FD7\u91CC\u80FD\u770B\u5230\u771F\u5B9E\u8FDB\u5EA6\u3002",
+      cancelRequested: "\u5DF2\u8BF7\u6C42\u53D6\u6D88",
+      stalled: "\u8FD9\u4E00\u6B65\u5DF2\u7ECF\u5F88\u4E45\u6CA1\u6709\u8F93\u51FA\u4E86\uFF0C\u53EF\u4EE5\u53D6\u6D88\u540E\u91CD\u8BD5\u3002",
+      staleSnapshot: "\u72B6\u6001\u5DF2\u505C\u6B62\u66F4\u65B0\uFF0C\u8BF7\u68C0\u67E5\u66F4\u65B0",
       cancel: "\u53D6\u6D88",
       cancelling: "\u6B63\u5728\u53D6\u6D88\u2026",
       restart: "\u9700\u8981\u91CD\u542F DSH \u624D\u4F1A\u751F\u6548\u3002",
       restartHint: "\u5DF2\u4FDD\u5B58\u7684\u6539\u52A8\u5728\u4E0B\u6B21\u542F\u52A8\u65F6\u751F\u6548\u3002",
+      reloadForAppearance: "\u4E3B\u9898\u63D2\u4EF6\u5DF2\u66F4\u65B0\uFF0C\u6B63\u5728\u91CD\u65B0\u52A0\u8F7D\u9875\u9762\u4EE5\u6062\u590D\u4E3B\u9898\u5916\u89C2\uFF08\u4E3B\u9898\u914D\u7F6E\u4FDD\u5B58\u5728\u78C1\u76D8\u4E0A\uFF0C\u4E0D\u4F1A\u4E22\u5931\uFF09\u3002",
       done: "\u5B8C\u6210",
       failed: "\u5931\u8D25",
       failedSome: (n) => `${n} \u4E2A\u5931\u8D25`,
       jobDone: "\u6279\u91CF\u5347\u7EA7\u5B8C\u6210",
       jobCancelled: "\u5DF2\u53D6\u6D88",
       busyAdopted: "\u5DF2\u6709\u4E00\u6279\u5347\u7EA7\u6B63\u5728\u8FDB\u884C\uFF0C\u5DF2\u63A5\u7740\u663E\u793A\u5B83\u7684\u8FDB\u5EA6\u3002",
+      lostJob: "\u5347\u7EA7\u8FDB\u5EA6\u5DF2\u5931\u53BB\u8054\u7CFB\uFF08\u5BBF\u4E3B\u53EF\u80FD\u91CD\u542F\u8FC7\uFF09\u3002\u8BF7\u68C0\u67E5\u66F4\u65B0\uFF0C\u786E\u8BA4\u63D2\u4EF6\u5F53\u524D\u7248\u672C\u3002",
       log: "\u8FD0\u884C\u65E5\u5FD7",
       showLog: "\u67E5\u770B\u65E5\u5FD7",
       hideLog: "\u6536\u8D77\u65E5\u5FD7",
@@ -126,6 +142,9 @@ window.__ModuleLoader__.load({
       upToDate: "Everything is up to date",
       upgrade: "Upgrade",
       upgrading: "Upgrading\u2026",
+      selfUpdate: "Upgrade via the page",
+      selfUpdateHint: "A plugin cannot uninstall and reinstall itself, so this runs the plugin page own installer",
+      selfUpdateUnavailable: "This page offers no install entry; upgrade this plugin from the Installed tab instead.",
       history: "Version history",
       hideHistory: "Hide history",
       github: "GitHub page",
@@ -147,19 +166,32 @@ window.__ModuleLoader__.load({
       openPage: "Open in Installed",
       noHistory: "No published versions found",
       noHistoryWhy: "This package was not installed from an npm registry, so it has no published history.",
+      historyFailed: 'Could not read the version list; "Check for updates" retries it',
       versions: (n) => `${n} versions`,
       showingNewest: (n) => `showing newest ${n}`,
       progress: (done, total) => `Working on ${done}/${total}`,
+      elapsed: (text) => `${text} elapsed`,
+      phaseInstalling: "Downloading and installing",
+      phaseApplying: "Writing the profile",
+      phaseCancelling: "Cancelling",
+      phaseWaiting: "Preparing",
+      registryAttempt: (index, total) => `Registry ${index}/${total}; a timeout falls back to the next`,
+      slowHint: "A first install, or one that must verify dependencies, takes a while \u2014 the log shows what is happening.",
+      cancelRequested: "Cancellation requested",
+      stalled: "This step has produced no output for a long time; cancel it and retry.",
+      staleSnapshot: "status stopped updating \u2014 check for updates",
       cancel: "Cancel",
       cancelling: "Cancelling\u2026",
       restart: "Restart DSH to finish.",
       restartHint: "Saved changes take effect on the next start.",
+      reloadForAppearance: "The theme plugin was updated; reloading the page to restore its look (its settings are on disk and are not lost).",
       done: "done",
       failed: "failed",
       failedSome: (n) => `${n} failed`,
       jobDone: "Batch upgrade finished",
       jobCancelled: "Cancelled",
       busyAdopted: "A batch is already running; showing its progress instead.",
+      lostJob: "Lost contact with the upgrade (the host may have restarted). Check for updates to confirm the installed version.",
       log: "Run log",
       showLog: "Show log",
       hideLog: "Hide log",
@@ -205,6 +237,16 @@ window.__ModuleLoader__.load({
         window.open(url, "_blank", "noopener,noreferrer");
       }
     }
+    function formatElapsed(ms) {
+      if (!Number.isFinite(ms) || ms < 0) return "0s";
+      const total = Math.floor(ms / 1e3);
+      if (total < 60) return `${total}s`;
+      const minutes = Math.floor(total / 60);
+      const seconds = total % 60;
+      if (minutes < 60) return `${minutes}m ${String(seconds).padStart(2, "0")}s`;
+      const hours = Math.floor(minutes / 60);
+      return `${hours}h ${String(minutes % 60).padStart(2, "0")}m`;
+    }
     function resolveVersionLink(row, version) {
       const raw = typeof version.href === "string" ? version.href : typeof version.url === "string" && typeof row.repoUrl === "string" && version.url.startsWith("/") ? `${row.repoUrl}${version.url}` : version.url;
       return typeof raw === "string" && /^https?:\/\//i.test(raw) ? raw : void 0;
@@ -335,6 +377,16 @@ window.__ModuleLoader__.load({
       );
       return alive;
     }
+    var APPEARANCE_PATTERN = /(^|[/@-])(skin|theme|dream-skin|wallpaper|appearance)([/@.-]|$)/i;
+    function isAppearancePackage(name2) {
+      return APPEARANCE_PATTERN.test(name2);
+    }
+    function replacedAppearance(results) {
+      if (!Array.isArray(results)) return false;
+      return results.some(
+        (result) => result.ok === true && result.changed !== false && typeof result.name === "string" && isAppearancePackage(result.name)
+      );
+    }
 
     // src/client/styles.ts
     var STYLE_ID = "dsh-plugin-upgrader-style";
@@ -352,7 +404,7 @@ window.__ModuleLoader__.load({
     .dsh-pu-btn { display: inline-flex; align-items: center; gap: 6px; height: 30px; padding: 0 12px; border-radius: 8px; font-size: 12px; font-weight: 500; cursor: pointer; border: 1px solid var(--dsw-alias-border-l1); background: var(--dsw-alias-bg-layer-1); color: var(--dsw-alias-label-primary); transition: background .15s ease, border-color .15s ease, opacity .15s ease; font-family: inherit; }
     .dsh-pu-btn:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); border-color: var(--dsw-alias-border-l2); }
     .dsh-pu-btn:disabled { opacity: .5; cursor: default; }
-    .dsh-pu-btn.is-primary { background: var(--dsw-alias-button-primary-fill); border-color: transparent; color: #fff; }
+    .dsh-pu-btn.is-primary { background: var(--dsw-alias-button-primary-fill); border-color: transparent; color: var(--dsw-alias-label-primary-inverted, #fff); }
     .dsh-pu-btn.is-primary:hover:not(:disabled) { background: var(--dsw-alias-button-primary-hover); }
     .dsh-pu-btn.is-ghost { background: transparent; border-color: transparent; color: var(--dsw-alias-label-secondary); padding: 0 8px; }
     .dsh-pu-btn.is-ghost:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); color: var(--dsw-alias-label-primary); }
@@ -384,6 +436,8 @@ window.__ModuleLoader__.load({
     .dsh-pu-name { font-size: 13px; font-weight: 600; display: flex; align-items: center; gap: 8px; min-width: 0; }
     .dsh-pu-name span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
     .dsh-pu-desc { font-size: 11px; color: var(--dsw-alias-label-tertiary); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+    .dsh-pu-note { font-size: 11px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+    .dsh-pu-note.is-err { color: var(--dsw-alias-state-error-primary); }
     .dsh-pu-mono { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 11px; color: var(--dsw-alias-label-secondary); }
     .dsh-pu-tag { font-size: 10px; line-height: 1; padding: 3px 6px; border-radius: 999px; border: 1px solid var(--dsw-alias-border-l1); color: var(--dsw-alias-label-secondary); font-weight: 500; white-space: nowrap; }
     .dsh-pu-tag.is-new { border-color: var(--dsw-alias-brand-primary); color: var(--dsw-alias-brand-primary); background: color-mix(in srgb, var(--dsw-alias-brand-primary) 14%, transparent); }
@@ -412,7 +466,10 @@ window.__ModuleLoader__.load({
     .dsh-pu-job-head { display: flex; align-items: center; gap: 10px; font-size: 12px; }
     .dsh-pu-job-head .dsh-pu-grow { flex: 1; min-width: 0; }
     .dsh-pu-bar { height: 4px; border-radius: 999px; background: var(--dsw-alias-bg-layer-3); overflow: hidden; }
-    .dsh-pu-bar div { height: 100%; border-radius: 999px; background: var(--dsw-alias-brand-primary); transition: width .25s ease; }
+    .dsh-pu-bar-inner { height: 100%; border-radius: 999px; background: var(--dsw-alias-brand-primary); transition: width .25s ease; }
+    .dsh-pu-bar-inner.is-busy { width: 40%; transition: none; animation: dsh-pu-indeterminate 1.4s ease-in-out infinite; }
+    @keyframes dsh-pu-indeterminate { 0% { transform: translateX(-100%); } 100% { transform: translateX(250%); } }
+    .dsh-pu-hint { font-size: 11px; color: var(--dsw-alias-label-tertiary); }
     .dsh-pu-log { max-height: 160px; overflow: auto; font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 10.5px; line-height: 1.55; color: var(--dsw-alias-label-secondary); white-space: pre-wrap; word-break: break-word; border-top: 1px dashed var(--dsw-alias-border-l1); padding-top: 8px; margin: 0; }
     .dsh-pu-banner { display: flex; align-items: center; gap: 8px; font-size: 11.5px; padding: 7px 10px; border-radius: 8px; border: 1px solid var(--dsw-alias-border-l1); background: var(--dsw-alias-bg-layer-2); color: var(--dsw-alias-label-secondary); }
     .dsh-pu-banner.is-warn { border-color: var(--dsw-alias-state-warn-primary); color: var(--dsw-alias-state-warn-primary); }
@@ -420,10 +477,23 @@ window.__ModuleLoader__.load({
     .dsh-pu-foot { display: flex; align-items: center; gap: 10px; font-size: 11px; color: var(--dsw-alias-label-tertiary); flex-wrap: wrap; }
     .dsh-pu-spin { width: 12px; height: 12px; border-radius: 50%; border: 2px solid var(--dsw-alias-border-l2); border-top-color: var(--dsw-alias-brand-primary); animation: dsh-pu-spin .8s linear infinite; flex: none; }
     @keyframes dsh-pu-spin { to { transform: rotate(360deg); } }
-    @media (prefers-reduced-motion: reduce) { .dsh-pu-spin { animation-duration: 2.4s; } }
+    @media (prefers-reduced-motion: reduce) { .dsh-pu-spin { animation-duration: 2.4s; } .dsh-pu-bar-inner.is-busy { animation-duration: 3s; } }
     `;
 
     // src/client/components/JobPanel.ts
+    var CLOCK_MS = 1e3;
+    var STALE_SNAPSHOT_MS = 20 * 1e3;
+    function useNow(running, from) {
+      const React = getReact();
+      const [now, setNow] = React.useState(() => Date.now());
+      React.useEffect(() => {
+        if (!running || from === void 0) return void 0;
+        setNow(Date.now());
+        const timer = setInterval(() => setNow(Date.now()), CLOCK_MS);
+        return () => clearInterval(timer);
+      }, [running, from]);
+      return now;
+    }
     function JobPanel(props) {
       const h = getH();
       const React = getReact();
@@ -434,6 +504,16 @@ window.__ModuleLoader__.load({
       const percent = total === 0 ? 0 : Math.round(done / total * 100);
       const running = job.status === "running" || job.status === "queued";
       const failed = job.failed ?? 0;
+      const inStep = running && job.current !== void 0;
+      const now = useNow(inStep, job.stepStartedAt);
+      const stamp = `${job.id}|${job.stepStartedAt ?? ""}|${job.done ?? 0}|${job.status}`;
+      const lastChange = React.useRef({ stamp, at: Date.now() });
+      if (lastChange.current.stamp !== stamp) lastChange.current = { stamp, at: Date.now() };
+      const stale = inStep && Date.now() - lastChange.current.at > STALE_SNAPSHOT_MS;
+      const stepMs = job.stepStartedAt === void 0 ? 0 : Math.max(0, now - job.stepStartedAt);
+      const phaseKey = job.phase === "installing" ? "phaseInstalling" : job.phase === "applying" ? "phaseApplying" : job.phase === "cancelling" ? "phaseCancelling" : "phaseWaiting";
+      const phaseText = job.attempt !== void 0 && job.attempt.total > 1 ? t("registryAttempt", job.attempt.index, job.attempt.total) : t(phaseKey);
+      const headline = running ? t("progress", done, total) : job.status === "cancelled" ? t("jobCancelled") : t("jobDone");
       return h(
         "div",
         { className: "dsh-pu-job" },
@@ -444,8 +524,17 @@ window.__ModuleLoader__.load({
           h(
             "span",
             { className: "dsh-pu-grow" },
-            running ? t("progress", done, total) : job.status === "cancelled" ? t("jobCancelled") : t("jobDone"),
-            job.current === void 0 ? null : h("span", { className: "dsh-pu-mono" }, ` ${job.current}`)
+            headline,
+            job.current === void 0 ? null : h("span", { className: "dsh-pu-mono" }, ` ${job.current}`),
+            inStep ? h(
+              "span",
+              { className: "dsh-pu-dim" },
+              ` \xB7 ${phaseText} \xB7 ${t("elapsed", formatElapsed(stepMs))}`
+            ) : null,
+            // Once the snapshot stops moving the clock is reporting a number nobody
+            // is updating, so say so instead of letting it climb.
+            stale ? h("span", { className: "dsh-pu-dim" }, ` \xB7 ${t("staleSnapshot")}`) : null,
+            job.abandoned === true ? h("span", { className: "dsh-pu-dim" }, ` \xB7 ${t("stalled")}`) : null
           ),
           failed > 0 ? h("span", { className: "dsh-pu-tag is-err" }, t("failedSome", failed)) : null,
           running ? h(
@@ -459,7 +548,12 @@ window.__ModuleLoader__.load({
             showLog ? t("hideLog") : t("showLog")
           )
         ),
-        h("div", { className: "dsh-pu-bar" }, h("div", { style: { width: `${percent}%` } })),
+        h(
+          "div",
+          { className: "dsh-pu-bar" },
+          inStep ? h("div", { className: "dsh-pu-bar-inner is-busy" }) : h("div", { className: "dsh-pu-bar-inner", style: { width: `${percent}%` } })
+        ),
+        inStep ? h("div", { className: "dsh-pu-hint" }, t("slowHint")) : null,
         showLog && Array.isArray(job.log) ? h("pre", { className: "dsh-pu-log" }, job.log.join("\n")) : null
       );
     }
@@ -518,12 +612,17 @@ window.__ModuleLoader__.load({
       const h = getH();
       const React = getReact();
       const { row, t, busy, picked, onToggle, onUpgrade, onSwitch, onApprove, onOpenPage } = props;
+      const { self, onInstallSelf } = props;
+      const { onRetryHistory } = props;
       const [open, setOpen] = React.useState(false);
       const versions = Array.isArray(row.versions) ? row.versions : [];
       const hasHistory = versions.length > 0;
-      const selectable = row.upgradable === true;
+      const selfUpdate = self === true && row.latest !== void 0 && row.latest !== row.version;
+      const selectable = row.upgradable === true && self !== true;
       const status = row.error !== void 0 && row.error !== null ? "err" : row.upgradable ? "new" : "idle";
-      const versionNote = row.versionError !== void 0 ? row.versionError === "not a profile-managed package" ? t("sourcePath") : row.versionError : void 0;
+      const failure = row.versionError !== void 0 && row.versionError !== "" ? row.versionError : void 0;
+      const retriable = failure !== void 0 && /unreachable|timeout|registry \d|github/i.test(failure);
+      const versionNote = failure === void 0 ? void 0 : failure === "not a profile-managed package" ? t("sourcePath") : failure;
       const pendingBuilds = Array.isArray(row.pendingBuilds) ? row.pendingBuilds : [];
       return h(
         "div",
@@ -566,7 +665,22 @@ window.__ModuleLoader__.load({
               "div",
               { className: "dsh-pu-desc" },
               row.description !== void 0 && row.description !== "" ? row.description : versionNote ?? row.name
-            )
+            ),
+            failure !== void 0 && retriable ? h(
+              "div",
+              { className: "dsh-pu-note is-err", title: failure },
+              `${t("historyFailed")}: ${failure}`,
+              typeof onRetryHistory === "function" ? h(
+                "button",
+                {
+                  type: "button",
+                  className: "dsh-pu-btn is-ghost is-tiny",
+                  disabled: busy,
+                  onClick: onRetryHistory
+                },
+                t("retry")
+              ) : null
+            ) : null
           ),
           h(
             "div",
@@ -587,6 +701,16 @@ window.__ModuleLoader__.load({
                 onClick: () => onUpgrade(row)
               },
               t("upgrade")
+            ) : selfUpdate && typeof onInstallSelf === "function" ? h(
+              "button",
+              {
+                type: "button",
+                className: "dsh-pu-btn is-primary is-tiny",
+                disabled: busy,
+                title: `${t("selfUpdateHint")} \u2192${row.latest}`,
+                onClick: () => onInstallSelf(row, row.latest)
+              },
+              t("selfUpdate")
             ) : null,
             typeof row.repoUrl === "string" ? h(
               "button",
@@ -654,6 +778,8 @@ window.__ModuleLoader__.load({
     }
 
     // src/client/components/Tab.ts
+    var SELF_NAME = "dsh-plugin-upgrader";
+    var APPEARANCE_RELOAD_DELAY_MS = 1200;
     function Tab(props) {
       const h = getH();
       const React = getReact();
@@ -675,14 +801,27 @@ window.__ModuleLoader__.load({
           setBusyName(void 0);
           setCancelling(false);
           reload(false);
+          if (settled === void 0) {
+            setJob(void 0);
+            setBanner({ tone: "warn", text: t("lostJob") });
+            return settled;
+          }
           const failures = Array.isArray(settled?.results) ? settled.results.filter((result) => result.ok !== true) : [];
           if (failures.length > 0) {
             setBanner({
               tone: "err",
-              text: failures.map((failure) => `${failure.name}: ${failure.message ?? failure.detail ?? "error"}`).join(" \xB7 ")
+              text: failures.map((failure) => {
+                const code = failure.message ?? "error";
+                return failure.detail === void 0 ? `${failure.name}: ${code}` : `${failure.name}: ${failure.detail} (${code})`;
+              }).join(" \xB7 ")
             });
           } else if (settled?.results?.some((result) => result.application === "restart-required") === true) {
             setBanner({ tone: "warn", text: t("restart") });
+          } else if (replacedAppearance(settled?.results)) {
+            setBanner({ tone: "info", text: t("reloadForAppearance") });
+            window.setTimeout(() => {
+              window.location.reload();
+            }, APPEARANCE_RELOAD_DELAY_MS);
           }
           return settled;
         },
@@ -703,31 +842,23 @@ window.__ModuleLoader__.load({
           if (steps.length === 0) return;
           setBanner(void 0);
           setBusyName(label);
+          setJob({ id: "", status: "queued", total: steps.length, done: 0, failed: 0, log: [] });
           const outcome = await submitJob(steps, watch);
           if (!alive.current) return;
-          if (outcome.kind === "started") {
-            setJob({
-              id: outcome.id,
-              status: "queued",
-              total: steps.length,
-              done: 0,
-              failed: 0,
-              log: []
-            });
-            return;
-          }
-          if (outcome.kind === "adopted") {
-            setBanner({ tone: "warn", text: t("busyAdopted") });
+          if (outcome.kind === "started" || outcome.kind === "adopted") {
+            if (outcome.kind === "adopted") setBanner({ tone: "warn", text: t("busyAdopted") });
             return;
           }
           setBusyName(void 0);
+          setJob(void 0);
           const failure = outcome.error;
           setBanner({ tone: "err", text: failure instanceof Error ? failure.message : String(failure) });
         },
         [alive, t, watch]
       );
       const rows = Array.isArray(data?.bundles) ? data.bundles : [];
-      const upgradable = rows.filter((row) => row.upgradable === true);
+      const batchable = (row) => row.upgradable === true && row.name !== SELF_NAME;
+      const upgradable = rows.filter(batchable);
       const needle = query.trim().toLowerCase();
       const filtered = needle === "" ? rows : rows.filter(
         (row) => row.name.toLowerCase().includes(needle) || String(row.title ?? "").toLowerCase().includes(needle)
@@ -751,6 +882,18 @@ window.__ModuleLoader__.load({
         const pendingBuilds = Array.isArray(row.pendingBuilds) ? row.pendingBuilds : [];
         void run([stepOf(row, row.latest ?? row.version ?? "", "upgrade", pendingBuilds)], row.name);
       };
+      const installSelf = React.useCallback(
+        (row, version) => {
+          const install = props.install;
+          if (typeof install !== "function") {
+            setBanner({ tone: "warn", text: t("selfUpdateUnavailable") });
+            return;
+          }
+          setBanner(void 0);
+          install({ spec: `${row.name}@${version}`, title: row.title, version });
+        },
+        [props.install, t]
+      );
       const upgradeAll = () => {
         void run(
           upgradable.map((row) => stepOf(row, row.latest ?? row.version ?? "", "upgrade")),
@@ -908,7 +1051,10 @@ window.__ModuleLoader__.load({
               onUpgrade: upgradeOne,
               onSwitch: switchOne,
               onApprove: approveAndRetry,
-              onOpenPage: typeof props.openPackage === "function" ? props.openPackage : void 0
+              onOpenPage: typeof props.openPackage === "function" ? props.openPackage : void 0,
+              self: row.name === SELF_NAME,
+              onInstallSelf: installSelf,
+              onRetryHistory: () => reload(true)
             })
           )
         ),