@deepseek-ai/dsh-plugin-manager 0.1.7-alpha.2 → 0.1.7-rc.2

package/lib/typert.remote-client.js

@@ -25,7 +25,7 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_inspect_result$schema = () =
   'host': z.string().readonly().optional(),
 }), z.object({
   'status': z.literal("refused").readonly(),
-  'problem': z.union([z.literal("network"), z.literal("unknown"), z.literal("invalid-spec"), z.literal("already-installed"), z.literal("not-found"), z.literal("not-a-package"), z.literal("not-a-bundle")]).readonly(),
+  'problem': z.union([z.literal("network"), z.literal("unknown"), z.literal("invalid-spec"), z.literal("not-found"), z.literal("already-installed"), z.literal("not-a-package"), z.literal("not-a-bundle")]).readonly(),
   'reason': z.string().readonly(),
   'registries': z.array(z.union([z.literal(null), z.string()])).readonly().optional(),
 })]))
@@ -46,8 +46,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_installBundle_result$schema
   'target': z.string(),
   'enabled': z.boolean().optional(),
   'error': z.object({
-  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("operation-error")]),
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
   'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'warnings': z.array(z.string()).optional(),
   'packageResult': z.object({
@@ -55,7 +61,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_installBundle_result$schema
   'output': z.string(),
   'truncated': z.boolean(),
   'logPath': z.string(),
-  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("not-found"), z.literal("pnpm-missing"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("pnpm-missing"), z.literal("not-found"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'timedOut': z.boolean().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'bundle': z.string().optional(),
   'pendingBuilds': z.array(z.string()).optional(),
@@ -84,8 +97,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_listBundles_result$schema =
   'removable': z.boolean(),
   'readOnlyReason': z.union([z.literal("management-required"), z.literal("unaddressable")]).optional(),
   'error': z.object({
-  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("operation-error")]),
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
   'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'rows': z.array(z.object({
   'rowId': z.string(),
@@ -142,6 +161,11 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_listPlugins_result$schema =
   'patchId': z.never().optional(),
   'readOnlyReason': z.union([z.literal("management-required"), z.literal("unaddressable")]),
 }))])))
+let _deepseek_ai_dsh_plugin_manager_pluginManager_listVersionExemptions_result$schema$value
+const _deepseek_ai_dsh_plugin_manager_pluginManager_listVersionExemptions_result$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_listVersionExemptions_result$schema$value ??= z.object({
+  'exemptions': z.record(z.string(), z.array(z.string())),
+  'warnings': z.array(z.string()),
+}))
 let _deepseek_ai_dsh_plugin_manager_pluginManager_registries_result$schema$value
 const _deepseek_ai_dsh_plugin_manager_pluginManager_registries_result$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_registries_result$schema$value ??= z.object({
   'registry': z.union([z.literal(null), z.string()]).readonly(),
@@ -158,8 +182,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_removeBundle_result$schema =
   'target': z.string(),
   'enabled': z.boolean().optional(),
   'error': z.object({
-  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("operation-error")]),
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
   'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'warnings': z.array(z.string()).optional(),
   'packageResult': z.object({
@@ -167,7 +197,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_removeBundle_result$schema =
   'output': z.string(),
   'truncated': z.boolean(),
   'logPath': z.string(),
-  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("not-found"), z.literal("pnpm-missing"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("pnpm-missing"), z.literal("not-found"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'timedOut': z.boolean().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'bundle': z.string().optional(),
   'pendingBuilds': z.array(z.string()).optional(),
@@ -187,8 +224,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_setBundleEnabled_result$sche
   'target': z.string(),
   'enabled': z.boolean().optional(),
   'error': z.object({
-  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("operation-error")]),
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
   'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'warnings': z.array(z.string()).optional(),
   'packageResult': z.object({
@@ -196,7 +239,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_setBundleEnabled_result$sche
   'output': z.string(),
   'truncated': z.boolean(),
   'logPath': z.string(),
-  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("not-found"), z.literal("pnpm-missing"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("pnpm-missing"), z.literal("not-found"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'timedOut': z.boolean().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'bundle': z.string().optional(),
   'pendingBuilds': z.array(z.string()).optional(),
@@ -216,8 +266,60 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_setPluginEnabled_result$sche
   'target': z.string(),
   'enabled': z.boolean().optional(),
   'error': z.object({
-  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("operation-error")]),
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
+  'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
+}).optional(),
+  'warnings': z.array(z.string()).optional(),
+  'packageResult': z.object({
+  'exitCode': z.number(),
+  'output': z.string(),
+  'truncated': z.boolean(),
+  'logPath': z.string(),
+  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("pnpm-missing"), z.literal("not-found"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'timedOut': z.boolean().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
+}).optional(),
+  'bundle': z.string().optional(),
+  'pendingBuilds': z.array(z.string()).optional(),
+  'approvedBuilds': z.array(z.string()).optional(),
+  'registries': z.array(z.union([z.literal(null), z.string()])).optional(),
+  'failedAt': z.union([z.literal("registry"), z.literal("spec-host")]).optional(),
+}))
+let _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_0$schema$value
+const _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_0$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_0$schema$value ??= z.string())
+let _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_1$schema$value
+const _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_1$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_1$schema$value ??= z.string())
+let _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_2$schema$value
+const _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_2$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_2$schema$value ??= z.boolean())
+let _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_3$schema$value
+const _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_3$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_3$schema$value ??= z.union([z.undefined(), z.literal(false), z.literal(true)]))
+let _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_result$schema$value
+const _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_result$schema = () => (_deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_result$schema$value ??= z.object({
+  'changed': z.boolean(),
+  'application': z.union([z.literal("cancelled"), z.literal("failed"), z.literal("applied"), z.literal("restart-required"), z.literal("overridden")]),
+  'stage': z.union([z.literal("remove"), z.literal("install"), z.literal("enable")]),
+  'target': z.string(),
+  'enabled': z.boolean().optional(),
+  'error': z.object({
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
   'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'warnings': z.array(z.string()).optional(),
   'packageResult': z.object({
@@ -225,7 +327,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_setPluginEnabled_result$sche
   'output': z.string(),
   'truncated': z.boolean(),
   'logPath': z.string(),
-  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("not-found"), z.literal("pnpm-missing"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("pnpm-missing"), z.literal("not-found"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'timedOut': z.boolean().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'bundle': z.string().optional(),
   'pendingBuilds': z.array(z.string()).optional(),
@@ -243,8 +352,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_waitForInstall_result$schema
   'target': z.string(),
   'enabled': z.boolean().optional(),
   'error': z.object({
-  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("operation-error")]),
+  'code': z.union([z.literal("management-required"), z.literal("unaddressable"), z.literal("unknown-plugin"), z.literal("invalid-spec"), z.literal("ambiguous-install"), z.literal("not-bundle"), z.literal("not-removable"), z.literal("stop-profile"), z.literal("bundle-in-use"), z.literal("stale-approval"), z.literal("incompatible-version"), z.literal("operation-error")]),
   'diagnostic': z.string().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'warnings': z.array(z.string()).optional(),
   'packageResult': z.object({
@@ -252,7 +367,14 @@ const _deepseek_ai_dsh_plugin_manager_pluginManager_waitForInstall_result$schema
   'output': z.string(),
   'truncated': z.boolean(),
   'logPath': z.string(),
-  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("not-found"), z.literal("pnpm-missing"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'kind': z.union([z.literal("network"), z.literal("unknown"), z.literal("timeout"), z.literal("integrity"), z.literal("pnpm-missing"), z.literal("not-found"), z.literal("no-matching-version"), z.literal("disk-full"), z.literal("permission"), z.literal("build-blocked")]).optional(),
+  'timedOut': z.boolean().optional(),
+  'incompatible': z.array(z.object({
+  'name': z.string(),
+  'version': z.string(),
+  'runtimeVersion': z.string(),
+  'peers': z.record(z.string(), z.string()),
+})).optional(),
 }).optional(),
   'bundle': z.string().optional(),
   'pendingBuilds': z.array(z.string()).optional(),
@@ -287,7 +409,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#PluginInstallCancellation',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_cancelInstall_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":516,"column":9},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":585,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/inspect',
@@ -324,7 +446,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#PluginSpecInspection',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_inspect_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":299,"column":9},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":341,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/installBundle',
@@ -360,7 +482,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#ChangeResult',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_installBundle_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":418,"column":3},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":462,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/listBundles',
@@ -375,7 +497,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/listBundles:result',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_listBundles_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":241,"column":3},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":280,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/listPlugins',
@@ -390,7 +512,22 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/listPlugins:result',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_listPlugins_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":217,"column":9},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":256,"column":9},
+    },
+    {
+      id: '@deepseek-ai/dsh-plugin-manager#pluginManager/listVersionExemptions',
+      service: 'pluginManager',
+      namespace: 'pluginManager',
+      method: 'listVersionExemptions',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/listVersionExemptions:result',
+        create: _deepseek_ai_dsh_plugin_manager_pluginManager_listVersionExemptions_result$schema,
+      },
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":232,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/registries',
@@ -405,7 +542,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#PluginRegistries',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_registries_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":283,"column":9},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":325,"column":9},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/removeBundle',
@@ -430,7 +567,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#ChangeResult',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_removeBundle_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":532,"column":3},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":601,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/setBundleEnabled',
@@ -465,7 +602,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#ChangeResult',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_setBundleEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":401,"column":3},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":443,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/setPluginEnabled',
@@ -500,7 +637,63 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#ChangeResult',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_setPluginEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":383,"column":3},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":425,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-plugin-manager#pluginManager/setVersionExemption',
+      service: 'pluginManager',
+      namespace: 'pluginManager',
+      method: 'setVersionExemption',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'packageVersion',
+          wire: 'packageVersion',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/setVersionExemption:packageVersion',
+            create: _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_0$schema,
+          },
+        },
+        {
+          name: 'runtimeVersion',
+          wire: 'runtimeVersion',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/setVersionExemption:runtimeVersion',
+            create: _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_1$schema,
+          },
+        },
+        {
+          name: 'enabled',
+          wire: 'enabled',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/setVersionExemption:enabled',
+            create: _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_2$schema,
+          },
+        },
+        {
+          name: 'acceptRisk',
+          wire: 'acceptRisk',
+          source: 'json',
+          acceptsUndefined: true,
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/setVersionExemption:acceptRisk',
+            create: _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_parameter_3$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-plugin-manager/types#ChangeResult',
+        create: _deepseek_ai_dsh_plugin_manager_pluginManager_setVersionExemption_result$schema,
+      },
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":245,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-plugin-manager#pluginManager/waitForInstall',
@@ -525,7 +718,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-plugin-manager#pluginManager/waitForInstall:result',
         create: _deepseek_ai_dsh_plugin_manager_pluginManager_waitForInstall_result$schema,
       },
-      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":506,"column":9},
+      sourceLocation: {"file":"packages/boot/plugin-manager/src/index.ts","line":575,"column":9},
     },
   ],
 }

package/lib/types/failure.d.ts

@@ -1,10 +1,22 @@
 /** Localizable rejections shared by profile management operations. */
-import type { ManagementError } from './types.ts';
+import type { PluginCompatibility } from '@deepseek-ai/dsh-app-boot';
+import type { IncompatiblePlugin, ManagementError } from './types.ts';
 /** Expected management rejection; presentation belongs to the caller's locale. */
 export declare class ManagementFailure extends Error {
     /** Code rendered by the caller's locale dictionary. */
     readonly code: ManagementError['code'];
-    /** @param code Localizable management rejection. */
-    constructor(code: ManagementError['code']);
+    /** The packages an `incompatible-version` rejection names. */
+    readonly incompatible: IncompatiblePlugin[] | undefined;
+    /**
+     * @param code Localizable management rejection.
+     * @param incompatible Packages the running DSH version rejects, for `incompatible-version`.
+     */
+    constructor(code: ManagementError['code'], incompatible?: IncompatiblePlugin[]);
 }
+/**
+ * Drop the exemption status from an unexempted compatibility result.
+ * @param issue Result whose exemption is not active.
+ * @returns The package, runtime, and rejected peer ranges.
+ */
+export declare function incompatiblePlugin(issue: PluginCompatibility): IncompatiblePlugin;
 //# sourceMappingURL=failure.d.ts.map

package/lib/types/failure.js

@@ -2,7 +2,24 @@
 export class ManagementFailure extends Error {
     /** Code rendered by the caller's locale dictionary. */
     code;
-    /** @param code Localizable management rejection. */
-    constructor(code) { super(code); this.code = code; }
+    /** The packages an `incompatible-version` rejection names. */
+    incompatible;
+    /**
+     * @param code Localizable management rejection.
+     * @param incompatible Packages the running DSH version rejects, for `incompatible-version`.
+     */
+    constructor(code, incompatible) {
+        super(code);
+        this.code = code;
+        this.incompatible = incompatible;
+    }
+}
+/**
+ * Drop the exemption status from an unexempted compatibility result.
+ * @param issue Result whose exemption is not active.
+ * @returns The package, runtime, and rejected peer ranges.
+ */
+export function incompatiblePlugin(issue) {
+    return { name: issue.name, version: issue.version, runtimeVersion: issue.runtimeVersion, peers: issue.peers };
 }
 //# sourceMappingURL=failure.js.map

package/lib/types/github-connection.d.ts

@@ -0,0 +1,21 @@
+import type { ParsedInstallSpec } from './install-spec.ts';
+import type { PackageResult } from './types.ts';
+/** Deadline, diagnostics and cancellation for one read-only GitHub check. */
+export interface GithubConnectionOptions {
+    timeoutMs: number;
+    outputBytes: number;
+    signal: AbortSignal;
+    /** The application-owned package manager's environment, also used by its Git children. */
+    env?: Readonly<Record<string, string>>;
+}
+/**
+ * Check a GitHub repository before pnpm starts, without downloading or building its package.
+ * Git reads the profile's Git and proxy configuration without invoking credential helpers or prompting.
+ * Timeout and cancellation terminate its descendants too; pnpm owns authentication and transport fallback.
+ * @param spec The parsed installation address; npm packages, local paths and other hosts are not checked.
+ * @param dir The profile directory where installation runs.
+ * @param options The connection deadline, output bound and operation cancellation.
+ * @returns A failed check with bounded output and a complete log at logPath, or undefined for a reachable repository or an unhandled spec.
+ */
+export declare function checkGithubConnection(spec: ParsedInstallSpec, dir: string, options: GithubConnectionOptions): Promise<PackageResult | undefined>;
+//# sourceMappingURL=github-connection.d.ts.map

package/lib/types/github-connection.js

@@ -0,0 +1,61 @@
+/** Bounded GitHub repository checks using the installer's Git configuration and environment. */
+import { mkdir, mkdtemp, open } from 'node:fs/promises';
+import { join } from 'node:path';
+import { execa } from 'execa';
+import { scrubbedParentEnv } from '@deepseek-ai/dsh-subprocess';
+import { classifyInstallFailure } from "./install-failure.js";
+/**
+ * Check a GitHub repository before pnpm starts, without downloading or building its package.
+ * Git reads the profile's Git and proxy configuration without invoking credential helpers or prompting.
+ * Timeout and cancellation terminate its descendants too; pnpm owns authentication and transport fallback.
+ * @param spec The parsed installation address; npm packages, local paths and other hosts are not checked.
+ * @param dir The profile directory where installation runs.
+ * @param options The connection deadline, output bound and operation cancellation.
+ * @returns A failed check with bounded output and a complete log at logPath, or undefined for a reachable repository or an unhandled spec.
+ */
+export async function checkGithubConnection(spec, dir, options) {
+    if (spec.kind !== 'git')
+        return undefined;
+    const host = spec.host.toLowerCase().replace(/:.*$/, '');
+    if (host !== 'github.com' && !host.endsWith('.github.com'))
+        return undefined;
+    const repository = spec.spec.replace(/#.*$/s, '')
+        .replace(/^github:/i, 'https://github.com/')
+        .replace(/^gist:/i, 'https://gist.github.com/')
+        .replace(/^git\+/i, '');
+    const logRoot = join(dir, '.plugin-manager', 'logs');
+    await mkdir(logRoot, { recursive: true, mode: 0o700 });
+    const logDir = await mkdtemp(join(logRoot, 'github-connection-'));
+    const logPath = join(logDir, 'git.log');
+    const log = await open(logPath, 'ax+', 0o600);
+    try {
+        const result = await execa('git', ['-c', 'credential.helper=', 'ls-remote', '--', repository, 'HEAD'], {
+            cwd: dir,
+            env: {
+                ...scrubbedParentEnv(), ...options.env, LC_ALL: 'C', GIT_TERMINAL_PROMPT: '0',
+                GIT_ASKPASS: '', SSH_ASKPASS: '', SSH_ASKPASS_REQUIRE: 'never',
+            },
+            extendEnv: false,
+            stdin: 'ignore', stdout: 'ignore', stderr: { file: logPath, append: true }, buffer: false, reject: false,
+            timeout: options.timeoutMs, cancelSignal: options.signal, killDescendants: true, killSignal: 'SIGKILL',
+        });
+        if (!result.failed)
+            return undefined;
+        if (result.timedOut)
+            await log.write(`dsh: connection to ${spec.host} timed out after ${String(options.timeoutMs)}ms\n`);
+        if ((await log.stat()).size === 0)
+            await log.write(result.shortMessage ?? 'GitHub connection check failed');
+        const { size } = await log.stat();
+        const bytes = Buffer.alloc(Math.min(size, options.outputBytes));
+        await log.read(bytes, 0, bytes.length, size - bytes.length);
+        const output = bytes.toString('utf8');
+        return {
+            exitCode: result.exitCode ?? (result.code === 'ENOENT' ? 127 : 1), output, truncated: size > options.outputBytes, logPath,
+            kind: classifyInstallFailure({ log: output, timedOut: result.timedOut }),
+        };
+    }
+    finally {
+        await log.close();
+    }
+}
+//# sourceMappingURL=github-connection.js.map

package/lib/types/index.d.ts

@@ -5,16 +5,20 @@ import type { BundleInfo, ChangeResult, InspectOptions, InstallBundleOptions, Pl
 export type * from './types.ts';
 export { classifyInstallFailure, type InstallFailureFacts } from './install-failure.ts';
 export { InvalidInstallSpecError, parseInstallSpec, type ParsedInstallSpec } from './install-spec.ts';
-/** The pnpm executable, the registries asked, and the limits for package diagnostics and registry lookups. */
+/** The pnpm executable, registries, and limits for diagnostics, lookups and connection checks. */
 export interface Config {
     /** The pnpm executable name or path; resolved through `PATH` like the `dsh plugin` command. */
     pnpmCommand?: string;
-    /** Maximum retained pnpm diagnostic bytes per operation. */
+    /** Maximum retained package-operation diagnostic bytes. */
     outputBytes?: number;
     /** Maximum time to wait for another process's profile package operation. */
     lockWaitMs?: number;
     /** Bound on one registry lookup an inspection runs, in milliseconds. */
     inspectTimeoutMs?: number;
+    /** Maximum duration of the GitHub repository connection check before installation, in milliseconds. */
+    githubConnectionTimeoutMs?: number;
+    /** Maximum time one captured package run may print nothing before the manager terminates it, in milliseconds. */
+    idleTimeoutMs?: number;
     /** The registry lookups and installations ask first, as an http(s) URL; absent, the one pnpm's own configuration names. */
     registry?: string;
     /**
@@ -42,6 +46,8 @@ export declare class PluginManager extends TypertRemoteService {
     private readonly outputBytes;
     private readonly lockWaitMs;
     private readonly inspectTimeoutMs;
+    private readonly githubConnectionTimeoutMs;
+    private readonly idleTimeoutMs;
     private readonly pnpmCommand;
     private readonly configuredRegistries;
     private readonly ownerContext;
@@ -49,6 +55,22 @@ export declare class PluginManager extends TypertRemoteService {
     /** Installations by request id, from their call until it settles. */
     private readonly installs;
     constructor(ctx: Context, config: Config);
+    /** Read exact plugin-version exemptions saved in this profile.
+     * @returns Accepted package-name@version keys with the runtime versions they may run on, and any
+     * record or file problem the reader rejected, which the caller reports instead of failing.
+     */
+    listVersionExemptions(): {
+        exemptions: Record<string, string[]>;
+        warnings: string[];
+    };
+    /** Grant or revoke one exact plugin/runtime exemption and reevaluate live plugins.
+     * @param packageVersion Exact manifest package name followed by @ and its version; never an installation spec or alias.
+     * @param runtimeVersion Exact current DSH version for grants; revocation may name a previous runtime.
+     * @param enabled Whether to grant rather than revoke the exemption.
+     * @param acceptRisk Required true for grants after the user accepts possible crashes and data loss.
+     * @returns Saved and runtime outcomes. Startup-only profiles require restart.
+     */
+    setVersionExemption(packageVersion: string, runtimeVersion: string, enabled: boolean, acceptRisk?: boolean): Promise<ChangeResult>;
     /** Read current plugins, including why a row cannot be changed through the profile patch.
      * @returns Current runtime entries with persistent patch targets.
      */
@@ -83,7 +105,9 @@ export declare class PluginManager extends TypertRemoteService {
      */
     setBundleEnabled(name: string, enabled: boolean): Promise<ChangeResult>;
     /**
-     * Install a package using the same pnpm implementation as dsh plugin. A run
+     * Install a package using the same pnpm implementation as dsh plugin. GitHub
+     * repositories get a connection check bounded by githubConnectionTimeoutMs before pnpm starts;
+     * only network failures or timeouts stop installation, while pnpm owns authentication and transport fallback. A run
      * that fails, is cancelled, or adds a package without a bundle patch restores
      * `package.json` and `pnpm-lock.yaml` as they were; downloaded files can stay.
      * @param spec One package spec, including local paths relative to the invocation directory.
@@ -100,7 +124,7 @@ export declare class PluginManager extends TypertRemoteService {
     waitForInstall(requestId: PluginInstallRequestId): Promise<ChangeResult | null>;
     /** Stop an installation this manager owns and wait until its files are back.
      * @param requestId The id the installation was started with.
-     * @returns `cancelled` once pnpm exited and the files are restored, `too-late` once the bundle is being
+     * @returns `cancelled` once the Git check or pnpm exited and the files are restored, `too-late` once the bundle is being
      * applied, `not-running` for any other id.
      */
     cancelInstall(requestId: PluginInstallRequestId): Promise<PluginInstallCancellation>;