@goodandready/dsh-moa 0.2.16 → 0.2.18

package/lib/client.js

@@ -18,6 +18,10 @@ window.__ModuleLoader__.load({
     var exports = module.exports
     const React = require('react')
     const NS = 'dsh-moa'
+    // Plugins page row seat (DSH 0.1.6-alpha.2): key = '<package name>#<row id>'.
+    const PKG = '@goodandready/dsh-moa'
+    const ROW_ID = 'dsh-moa'
+    const ROW_CONFIG_KEY = PKG + '#' + ROW_ID
     const TITLE = 'Mixture of Agents (MoA)'
     const SUBTITLE = 'Ensemble parallel candidate generation with judge synthesis via /moa.'
 
@@ -113,6 +117,17 @@ window.__ModuleLoader__.load({
       'badge.disabled': 'MoA Disabled',
       'config.enabled_label': 'Enable MoA (slash command and turn routing)',
       'slash.desc': 'Run turn with Mixture of Agents ensemble synthesis (/moa [preset] <prompt>)',
+      'updater.title': 'Plugin Updates',
+      'updater.desc': 'Check npm registry for new versions and update with one click.',
+      'updater.btnCheck': 'Check Updates',
+      'updater.btnUpdate': 'Update to v{version}',
+      'updater.checking': 'Checking registry...',
+      'updater.updating': 'Updating plugin...',
+      'updater.current': 'Current version: v{version}',
+      'updater.available': 'Update available: v{version}',
+      'updater.upToDate': 'Up to date',
+      'updater.checkFailed': 'Registry check failed',
+      'updater.success': 'Successfully updated to v{version}. Restart DSH to apply.',
     }
 
     const zh = {
@@ -205,6 +220,17 @@ window.__ModuleLoader__.load({
       'badge.disabled': 'MoA 已禁用',
       'config.enabled_label': '启用 MoA（斜杠命令与轮次拦截路由）',
       'slash.desc': '使用智能体混合 (MoA) 协同综合运行此轮次 (/moa [预设] <提示词>)',
+      'updater.title': '插件在线更新',
+      'updater.desc': '检查 npm 镜像源上的最新版本并支持一键无感升级。',
+      'updater.btnCheck': '检查更新',
+      'updater.btnUpdate': '升级至 v{version}',
+      'updater.checking': '正在检查版本...',
+      'updater.updating': '正在执行更新...',
+      'updater.current': '当前版本：v{version}',
+      'updater.available': '发现新版本：v{version}',
+      'updater.upToDate': '已是最新版本',
+      'updater.checkFailed': '检查版本失败',
+      'updater.success': '成功更新至 v{version}，请重启 DSH 使其生效。',
     }
 
 
@@ -572,6 +598,9 @@ window.__ModuleLoader__.load({
       handleSave,
       saveStatus,
       reload,
+      updateState,
+      checkUpdates,
+      runUpdate,
     }) {
       const [selectedPresetName, setSelectedPresetName] = React.useState(defaultPreset || (presets[0] && presets[0].name) || 'default')
       const [isCreating, setIsCreating] = React.useState(false)
@@ -1381,6 +1410,84 @@ window.__ModuleLoader__.load({
           )
         ),
 
+        /* ── PLUGIN UPDATES ── */
+        React.createElement(
+          'div',
+          { className: 'moa-section-card' },
+          React.createElement(
+            'div',
+            { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 6 } },
+            React.createElement('div', { className: 'moa-sec-title' }, '✨ ' + (t('updater.title') || 'Plugin Updates')),
+            React.createElement(
+              'div',
+              { style: { display: 'flex', gap: 8 } },
+              React.createElement(
+                'button',
+                {
+                  type: 'button',
+                  className: 'moa-btn moa-btn-sub',
+                  disabled: updateState?.checking || updateState?.updating,
+                  onClick: checkUpdates,
+                },
+                updateState?.checking ? (t('updater.checking') || 'Checking...') : (t('updater.btnCheck') || 'Check Updates')
+              ),
+              updateState?.updateAvailable
+                ? React.createElement(
+                    'button',
+                    {
+                      type: 'button',
+                      className: 'moa-btn moa-btn-sub moa-btn-primary',
+                      disabled: updateState?.updating,
+                      onClick: runUpdate,
+                    },
+                    updateState?.updating
+                      ? (t('updater.updating') || 'Updating...')
+                      : (t('updater.btnUpdate') || 'Update to v{version}').replace('{version}', updateState.latestVersion || '')
+                  )
+                : null
+            )
+          ),
+          React.createElement(
+            'div',
+            { className: 'moa-sec-desc', style: { marginBottom: 8 } },
+            t('updater.desc') || 'Check npm registry for new versions and update with one click.'
+          ),
+          React.createElement(
+            'div',
+            { style: { display: 'flex', alignItems: 'center', gap: 10, fontSize: 12 } },
+            React.createElement(
+              'span',
+              { style: { color: 'var(--dsw-alias-label-secondary)' } },
+              (t('updater.current') || 'Current version: v{version}').replace('{version}', updateState?.currentVersion || '0.2.16')
+            ),
+            updateState?.checking
+              ? React.createElement('span', { style: { color: 'var(--dsw-alias-state-brand-primary, var(--dsw-alias-label-primary))' } }, t('updater.checking'))
+              : updateState?.updateAvailable
+                ? React.createElement(
+                    'span',
+                    { style: { color: 'var(--dsw-alias-state-error-primary)', fontWeight: 600 } },
+                    (t('updater.available') || 'Update available: v{version}').replace('{version}', updateState?.latestVersion || '')
+                  )
+                : updateState?.currentVersion && !updateState?.error
+                  ? React.createElement('span', { style: { color: 'var(--dsw-alias-state-success-primary)' } }, '✓ ' + (t('updater.upToDate') || 'Up to date'))
+                  : null
+          ),
+          updateState?.notice
+            ? React.createElement(
+                'div',
+                { className: 'moa-alert-ok', style: { marginTop: 8 } },
+                updateState.notice
+              )
+            : null,
+          updateState?.error
+            ? React.createElement(
+                'div',
+                { className: 'moa-alert-err', style: { marginTop: 8 } },
+                updateState.error
+              )
+            : null
+        ),
+
         /* ── ENABLED TOGGLE ── */
         React.createElement(
           'label',
@@ -1454,6 +1561,65 @@ window.__ModuleLoader__.load({
       const [defaultPreset, setDefaultPreset] = React.useState('default')
       const [availableModels, setAvailableModels] = React.useState([])
       const [saveStatus, setSaveStatus] = React.useState('')
+      const [updateState, setUpdateState] = React.useState({
+        checking: false,
+        updating: false,
+        currentVersion: '0.2.16',
+        latestVersion: undefined,
+        updateAvailable: false,
+        notice: null,
+        error: null,
+      })
+
+      const checkUpdates = async () => {
+        setUpdateState((prev) => ({ ...prev, checking: true, error: null, notice: null }))
+        try {
+          const res = await fetch('/api/dsh-moa/update', { cache: 'no-store' })
+          const data = await res.json()
+          if (data && data.currentVersion) {
+            setUpdateState((prev) => ({
+              ...prev,
+              checking: false,
+              currentVersion: data.currentVersion,
+              latestVersion: data.latestVersion,
+              updateAvailable: Boolean(data.updateAvailable),
+              error: data.latestCheckFailed ? (t('updater.checkFailed') || 'Registry check failed') : null,
+            }))
+          } else {
+            setUpdateState((prev) => ({ ...prev, checking: false, error: data.error || 'Check failed' }))
+          }
+        } catch (err) {
+          setUpdateState((prev) => ({ ...prev, checking: false, error: String(err?.message || err) }))
+        }
+      }
+
+      const runUpdate = async () => {
+        setUpdateState((prev) => ({ ...prev, updating: true, error: null, notice: null }))
+        try {
+          const res = await fetch('/api/dsh-moa/update', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', 'x-dsh-plugin-update': '1' },
+          })
+          const data = await res.json()
+          if (data && data.updated) {
+            setUpdateState((prev) => ({
+              ...prev,
+              updating: false,
+              updateAvailable: false,
+              currentVersion: data.updatedVersion || data.latestVersion,
+              notice: (t('updater.success') || 'Successfully updated to v{version}. Restart DSH to apply.').replace('{version}', data.updatedVersion || data.latestVersion),
+            }))
+          } else {
+            setUpdateState((prev) => ({
+              ...prev,
+              updating: false,
+              error: data.error || data.message || 'Update failed',
+            }))
+          }
+        } catch (err) {
+          setUpdateState((prev) => ({ ...prev, updating: false, error: String(err?.message || err) }))
+        }
+      }
       const [enabled, setEnabled] = React.useState(true)
       const [hostStatus, setHostStatus] = React.useState('connecting')
       const [stats, setStats] = React.useState({ totalRuns: null, avgCostUsd: null })
@@ -1619,6 +1785,9 @@ window.__ModuleLoader__.load({
         handleSave,
         saveStatus,
         reload,
+        updateState,
+        checkUpdates,
+        runUpdate,
       }
     }
 
@@ -1662,16 +1831,24 @@ window.__ModuleLoader__.load({
     function MoACard(props) {
       ensureStyles()
       const state = useMoASettings(props)
-      const [open, setOpen] = React.useState(false)
+      const page = !!(props && props.view === 'page')
+      const [open, setOpen] = React.useState(!!page)
+
+      // Row seat (plugins.row.config): the host page draws title/icon/crumb and the
+      // padding, so the summary is a one-liner and the page drops our card chrome.
+      if (props && props.view === 'summary') {
+        return React.createElement('div', { className: 'moa-sub' }, state.t('description') || SUBTITLE)
+      }
 
       return React.createElement(
-        'li',
-        { className: 'moa-card' },
+        page ? 'div' : 'li',
+        { className: page ? 'moa-page' : 'moa-card' },
         React.createElement(
           'button',
           {
             type: 'button',
             className: 'moa-head',
+            style: page ? { display: 'none' } : undefined,
             'aria-expanded': open,
             onClick: () => setOpen(!open),
           },
@@ -1743,12 +1920,12 @@ window.__ModuleLoader__.load({
       }
 
       if (ctx.slots) {
-        const registerCard = () => {
+        const registerCard = (slotName, key) => () => {
           try {
             ctx.slots.register(
               {
-                name: 'settings.plugin.item',
-                key: NS,
+                name: slotName,
+                key,
                 order: 35,
                 locale: NS,
                 inject: () => ({ ctx }),
@@ -1756,14 +1933,18 @@ window.__ModuleLoader__.load({
               (props) => React.createElement(MoAErrorBoundary, null, React.createElement(MoACard, props))
             )
           } catch (err) {
-            console.warn('[dsh-moa] Failed to register settings.plugin.item:', err)
+            console.warn('[dsh-moa] Failed to register ' + slotName + ':', err)
           }
         }
 
         if (typeof ctx.slots.inject === 'function') {
-          ctx.slots.inject('settings.plugin.item', registerCard)
+          // Row seat first (the seat the current core renders), legacy seat kept as a
+          // fallback for older cores.
+          ctx.slots.inject('plugins.row.config', registerCard('plugins.row.config', ROW_CONFIG_KEY))
+          ctx.slots.inject('settings.plugin.item', registerCard('settings.plugin.item', NS))
         } else {
-          registerCard()
+          registerCard('plugins.row.config', ROW_CONFIG_KEY)()
+          registerCard('settings.plugin.item', NS)()
         }
       }
 

package/lib/file-workspace.js

@@ -95,16 +95,25 @@ function sanitizePath(filePath) {
  * Formats collected project files into structured Markdown code blocks
  * suitable for inclusion in candidate system prompts.
  */
-export function formatProjectContext(projectFiles = []) {
+export function formatProjectContext(projectFiles = [], options = {}) {
   if (!Array.isArray(projectFiles) || projectFiles.length === 0) return ''
+  const { skippedFiles = 0, skippedList = [] } = options
   const fence = '```'
-  return projectFiles
+  let formatted = projectFiles
     .map((f) => `### File: ${f.relativePath}\n${fence}\n${f.content}\n${fence}`)
     .join('\n\n')
+
+  if (skippedFiles > 0) {
+    const preview = skippedList.slice(0, 5).join(', ')
+    const more = skippedList.length > 5 ? ` and ${skippedList.length - 5} more` : ''
+    const warning = `> ⚠️ **Workspace Scan Notice:** ${skippedFiles} workspace file(s) were skipped or truncated due to size/budget limits or read errors (${preview}${more}). The workspace context below is partial.`
+    formatted = `${warning}\n\n${formatted}`
+  }
+  return formatted
 }
 
 export async function collectProjectContext(baseDir, maxCharBudget = 16000) {
-  if (!baseDir) return { files: [], totalChars: 0 }
+  if (!baseDir) return { files: [], totalChars: 0, skippedFiles: 0, skippedList: [] }
 
   const ignoreDirs = new Set(['node_modules', '.git', '.moa', '.worktrees', 'dist', 'build', '.dsh', '.next', '.nuxt', '.cache', 'coverage', '.turbo', '.idea', '.vscode'])
   const codeExts = new Set([
@@ -130,7 +139,6 @@ export async function collectProjectContext(baseDir, maxCharBudget = 16000) {
     }
 
     for (const item of list) {
-      if (totalChars >= maxCharBudget) break
       // Skip all dotfiles, including .env and .env.* variants: their
       // contents must never be shipped to third-party model providers.
       if (item.name.startsWith('.')) continue
@@ -138,6 +146,14 @@ export async function collectProjectContext(baseDir, maxCharBudget = 16000) {
       const rel = relPrefix ? `${relPrefix}/${item.name}` : item.name
       const full = path.join(currentDir, item.name)
 
+      if (totalChars >= maxCharBudget) {
+        if (item.isFile() && codeExts.has(path.extname(item.name).toLowerCase())) {
+          skippedFiles++
+          skippedList.push(`${rel} (budget limit)`)
+        }
+        continue
+      }
+
       if (item.isDirectory()) {
         if (!ignoreDirs.has(item.name)) {
           await scan(full, rel)
@@ -147,7 +163,11 @@ export async function collectProjectContext(baseDir, maxCharBudget = 16000) {
         if (codeExts.has(ext)) {
           try {
             const stat = await fs.stat(full)
-            if (stat.size > 100000) continue // skip files > 100kb
+            if (stat.size > 100000) {
+              skippedFiles++
+              skippedList.push(`${rel} (>100KB)`)
+              continue
+            }
             const content = await fs.readFile(full, 'utf8')
             const budgetRemaining = maxCharBudget - totalChars
             const truncated = content.length > budgetRemaining ? content.slice(0, budgetRemaining) + '\n... [truncated]' : content

package/lib/index.js

@@ -25,6 +25,7 @@ import { createLiveCanvasClient } from './live-canvas.js'
 import { registerPluginUpdater, isSafeWriteRequest } from './updater.js'
 
 export const name = '@goodandready/dsh-moa'
+export { collectProjectContext, formatProjectContext } from './file-workspace.js'
 export const inject = ['webServer', 'llm', 'settings', 'sessions', 'tools']
 
 export const NS = 'dsh-moa'

package/lib/moa-parser.js

@@ -138,6 +138,12 @@ export function formatMoAResponse({ moaResult, presetName }) {
     parts.push('> 🔄 **Mode**: Iterative project refinement (Refinement)')
   }
 
+  if (moaResult?.skippedFiles > 0) {
+    const preview = moaResult.skippedList?.slice(0, 3)?.join(', ') || ''
+    const more = (moaResult.skippedList?.length || 0) > 3 ? ` and ${(moaResult.skippedList?.length || 0) - 3} more` : ''
+    parts.push(`> ⚠️ **Workspace Notice**: ${moaResult.skippedFiles} file(s) skipped during workspace scan (${preview}${more}). Context representation may be partial.`)
+  }
+
   const hasPromoted = moaResult?.promotedFiles && moaResult.promotedFiles.length > 0
   if (hasPromoted) {
     parts.push(`> 📦 **Files created in the project**: \`${moaResult.promotedFiles.join('`, `')}\``)

package/lib/moa-runner.js

@@ -18,8 +18,6 @@ export { slotLabel, cleanAdvisoryMessages, isBroadPromptRequiringQuestions, buil
 export { parseWinnerIndex, parseRecommendedAssembler, parseMoACommand, stripOrSummarizeCode, formatMoAResponse } from './moa-parser.js'
 export { estimateTokenCost, summarizeMoAUsage } from './pricing.js'
 
-const DEFAULT_PROMPT = 'Please propose an optimal, well-structured, production-ready solution with full code and explanations.'
-
 /**
  * Invokes LLM call with transient retry for recoverable network/rate-limit errors.
  */
@@ -78,11 +76,19 @@ export async function runMoAPipeline({
   const collectedCtx = await collectProjectContext(cwd, 16000)
   const isRefinement = Boolean(collectedCtx?.files?.length > 0 && isRefinementTask(userPrompt, collectedCtx.files))
   let projectContext = ''
+  if (collectedCtx?.skippedFiles > 0 && typeof onProgress === 'function') {
+    const preview = collectedCtx.skippedList.slice(0, 3).join(', ')
+    const more = collectedCtx.skippedList.length > 3 ? ` (+${collectedCtx.skippedList.length - 3})` : ''
+    onProgress(`⚠️ *Workspace scan note: ${collectedCtx.skippedFiles} file(s) skipped (${preview}${more})*\n`)
+  }
   if (isRefinement) {
     if (typeof onProgress === 'function') {
       onProgress('🔍 *Reading project files for refinement context...*\n')
     }
-    projectContext = formatProjectContext(collectedCtx.files)
+    projectContext = formatProjectContext(collectedCtx.files, {
+      skippedFiles: collectedCtx.skippedFiles,
+      skippedList: collectedCtx.skippedList,
+    })
   }
 
   // 3. Build prompts & evaluate broad questionnaire needs
@@ -140,6 +146,8 @@ export async function runMoAPipeline({
         candidates: referenceOutputs.map((r) => ({ label: r.label, usage: r.usage, costUsd: r.costUsd })),
         aggregator: { inputTokens: 0, outputTokens: 0, totalTokens: 0, costUsd: 0 },
       },
+      skippedFiles: collectedCtx?.skippedFiles || 0,
+      skippedList: collectedCtx?.skippedList || [],
       durationMs: Date.now() - startTime,
     }
   }
@@ -227,6 +235,8 @@ export async function runMoAPipeline({
         candidates: referenceOutputs.map((r) => ({ label: r.label, usage: r.usage, costUsd: r.costUsd })),
         aggregator: qUsage,
       },
+      skippedFiles: collectedCtx?.skippedFiles || 0,
+      skippedList: collectedCtx?.skippedList || [],
       durationMs,
     }
   }
@@ -283,6 +293,8 @@ export async function runMoAPipeline({
         candidates: referenceOutputs.map((r) => ({ label: r.label, usage: r.usage, costUsd: r.costUsd })),
         aggregator: { inputTokens: 0, outputTokens: 0, totalTokens: 0, costUsd: 0 },
       },
+      skippedFiles: collectedCtx?.skippedFiles || 0,
+      skippedList: collectedCtx?.skippedList || [],
       durationMs,
     }
   }
@@ -461,6 +473,8 @@ export async function runMoAPipeline({
     allowCandidateOverride,
     ...(livePreview ? { liveCanvas: livePreview } : {}),
     usage: usageSummary,
+    skippedFiles: collectedCtx?.skippedFiles || 0,
+    skippedList: collectedCtx?.skippedList || [],
     durationMs,
   }
 }

package/lib/routes.js

@@ -398,6 +398,10 @@ ctx.effect(() => {
             liveCanvas,
           })
 
+          if (result?.skippedFiles > 0) {
+            ctx.logger?.warn?.(`[dsh-moa] Workspace scan skipped ${result.skippedFiles} file(s): ${result.skippedList.join(', ')}`)
+          }
+
           writeJson(res, 200, { ok: true, ...result })
         } catch (err) {
           writeJson(res, 500, { ok: false, error: err?.message || String(err) })

package/lib/updater.js

@@ -186,11 +186,13 @@ export async function getUpdateStatus(options, target = runtime()) {
 async function installExact(target, packageSpec, options) {
   if (target.cliEntry === undefined) throw new Error('Automatic update is unavailable in this runtime.');
   await new Promise((resolvePromise, reject) => {
-    const child = spawn(process.execPath, [
+    // Note: Respect strict ecosystem quarantine policy without age bypass
+    const args = [
       target.cliEntry, 'plugin', '--profile', target.profileName, 'add',
-      '--config.minimumReleaseAge=0', packageSpec,
+      packageSpec,
       `--registry=${options.registry ?? 'https://registry.npmjs.org/'}`,
-    ], {
+    ];
+    const child = spawn(process.execPath, args, {
       cwd: target.profileDir,
       windowsHide: true,
       stdio: ['ignore', 'pipe', 'pipe'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-moa",
-  "version": "0.2.16",
+  "version": "0.2.18",
   "description": "Mixture of Agents (MoA) plugin for DeepSeek Harness with /moa slash command",
   "type": "module",
   "main": "lib/index.js",