[compscidr]

Closes #641.

What

• Compatibility fix (the blocker): UpdateAvailable in both installers now also requires Compatible(running, min_goblog_version). The admin page no longer offers updates that Update() would refuse.
• AutoUpdate(ctx) on the theme and plugin installers: for each installed item with a compatible update, call Update, log the result. A failure leaves that item as it was and doesn't stop the others.
• Startup hook in goblog.go: runs in a goroutine (10 min timeout), so an unreachable directory can't block or wedge startup.
• Settings (Directories tab): auto_update_themes (default on), auto_update_plugins (default off).

Decisions from the issue

1. Default: themes on, plugins opt-in, as the issue suggested. A theme can still lock an admin out after an upgrade (Restart the login when a callback carries no state at all #640), so themes are on. A plugin runs code, so it waits for an explicit opt-in.
2. When: startup only. I left out the periodic check; it's easy to add on a ticker later if long-running sites need it.
3. Failure handling: new tests cover it. A theme update whose templates don't parse leaves the installed theme untouched, and an incompatible release is neither offered nor tried. Plugin Update already rolls back.
4. Visibility: log lines (Theme auto-update: Updated X to vY, or the failure and the version kept). I left out the note on the admin page; it would need state persisted across restarts.

Test plan

• go test ./...
• New TestAutoUpdate in theme/installer and plugin/installer

🤖 Generated with Claude Code

[codecov]

Codecov Report

❌ Patch coverage is 83.33333% with 5 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
plugin/installer/installer.go	66.66%	3 Missing and 2 partials ⚠️

📢 Thoughts on this report? Let us know!

[Copilot]

🔵 Needs a closer look

It changes startup to auto-apply updates (including executing downloaded plugin code) and enables theme auto-update by default for all existing installs, a broad operational blast radius that warrants final human review.

No open issues 🎉

What changed in this PR

This PR implements auto-updating of installed directory themes and plugins at startup, closing #641 (which arose from the #640 upgrade trap where an outdated theme could lock an admin out after a goblog upgrade). It builds on the existing Update(ctx, name) machinery in both installers, adding a compatibility gate so only runnable updates are offered/attempted, a non-blocking background runner, and user-facing settings to control the behavior.

Changes:

• Makes UpdateAvailable in both the theme and plugin installers also require Compatible(running, min_goblog_version), so the admin UI no longer offers updates Update() would refuse with ErrIncompatible.
• Adds AutoUpdate(ctx) to both installers (per-item, failure-isolated, logged) and a startup hook in goblog.go that runs it in a background goroutine with a 10-minute timeout.
• Adds auto_update_themes (default on) and auto_update_plugins (default off) settings, surfaced on the Directories settings tab and documented in the README, with tests covering compatible/incompatible/parse-failure cases.

File	Description
theme/​installer/​installer.go	Adds compatibility check to UpdateAvailable; adds AutoUpdate that updates compatible themes and logs/skips failures.
theme/​installer/​installer_test.go	Adds TestAutoUpdate covering compatible apply, incompatible skip, and parse-failure rollback.
plugin/​installer/​installer.go	Adds compatibility check to UpdateAvailable; adds AutoUpdate gated on WasmEnabled with rollback-on-failure semantics.
plugin/​installer/​installer_test.go	Adds TestAutoUpdate verifying incompatible updates are not offered/applied and a compatible one updates the registry.
goblog.go	Adds background goroutine (10-min timeout) invoking theme/plugin AutoUpdate based on the new settings; adds context/time imports.
admin/​settings.go	Adds the two auto-update settings to the Directories group with help text.
admin/​settings_test.go	Updates expected seeded settings to include the two new checkbox settings.
tools/​migrate.go	Seeds auto_update_themes=true and auto_update_plugins=false default settings.
README.md	Documents the startup auto-update behavior and how to disable it.

_{Review effort: Balanced}