@sparkelf/dsh-dataops-managed 0.3.14 → 0.3.16

package/lib/index.js

@@ -692,6 +692,29 @@ function asByteCount(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : null;
 }
 /**
+* A rejection DataOps answered with, carrying its status and message.
+*
+* Without this the caller can only tell that something failed, and a value DataOps refused —
+* which the user can correct — is indistinguishable from a fault in the request path.
+*/
+var WorkspaceLimitsRejection = class extends Error {
+	status;
+	constructor(status, message) {
+		super(message);
+		this.status = status;
+		this.name = "WorkspaceLimitsRejection";
+	}
+};
+/** Read DataOps' own explanation from a failed response, falling back to the status line. */
+async function rejectionMessage(response, fallback) {
+	try {
+		const message = asRecord(await response.json())?.message;
+		if (typeof message === "string" && message.trim() !== "") return message;
+		if (Array.isArray(message) && typeof message[0] === "string") return message[0];
+	} catch {}
+	return `${fallback} with HTTP ${String(response.status)}`;
+}
+/**
 * The workspace limits an administrator sets in DataOps.
 *
 * The plugin holds the DataOps JWT, so the browser cannot read these itself; this class is the
@@ -724,7 +747,7 @@ var WorkspaceLimits = class {
 		if (token === void 0) return void 0;
 		const response = await fetch(new URL("/api/ai/attachment-settings", this.apiBase()), { headers: { authorization: `Bearer ${token}` } });
 		if (response.status === 401) return void 0;
-		if (!response.ok) throw new Error(`Workspace limits read failed with HTTP ${String(response.status)}`);
+		if (!response.ok) throw new WorkspaceLimitsRejection(response.status, await rejectionMessage(response, "Workspace limits read failed"));
 		const body = asRecord(await response.json());
 		const settings = body === null ? null : asRecord(body.settings);
 		const size = settings === null ? null : asRecord(settings.workspaceSize);
@@ -757,7 +780,7 @@ var WorkspaceLimits = class {
 			body: JSON.stringify({ workspaceSize: limits })
 		});
 		if (response.status === 401) return void 0;
-		if (!response.ok) throw new Error(`Workspace limits write failed with HTTP ${String(response.status)}`);
+		if (!response.ok) throw new WorkspaceLimitsRejection(response.status, await rejectionMessage(response, "Workspace limits write failed"));
 		return this.status();
 	}
 };
@@ -792,6 +815,11 @@ const MODEL_SYNC_PATH = "/integrations/dataops/model-sync";
 const SKILL_PLAZA_PATH = "/integrations/dataops/skill-plaza";
 /** Same-origin route the Settings panel uses to read and change this workspace's limits. */
 const WORKSPACE_LIMITS_PATH = "/integrations/dataops/workspace-limits";
+/** Same-origin route the Settings panel uses to read and change the tool-call timeout. */
+const TOOL_TIMEOUT_PATH = "/integrations/dataops/tool-timeout";
+/** The ends a tool-call timeout may take, in whole seconds. */
+const TOOL_TIMEOUT_MIN_SECONDS = 1;
+const TOOL_TIMEOUT_MAX_SECONDS = 3600;
 /** The live sync instance, so the settings routes can act on it after activation. */
 let modelSyncRef;
 /** The live plaza instance, so the skill center routes can act on it after activation. */
@@ -810,21 +838,54 @@ let settingsSyncRef;
 function currentSettingsSync() {
 	return settingsSyncRef;
 }
+/**
+* Read the value behind a possibly-volatile field.
+*
+* A volatile field always arrives as a reference, but the plain shape is accepted too so a
+* caller that validated the config without a settings service still reads its value.
+* @param field - The config field as the runtime supplied it.
+* @param fallback - Value to use when nothing is stored yet.
+* @returns The current value.
+*/
+function volatileValue(field, fallback) {
+	if (field === void 0) return fallback;
+	if (typeof field === "object" && field !== null && "get" in field && typeof field.get === "function") return field.get() ?? fallback;
+	return field;
+}
+/**
+* Per-tool-call timeout a workspace starts with.
+*
+* Named rather than inlined so the schema default and the read fallback cannot drift: the field is
+* volatile, so a workspace that never changed it reads no value at all and both places have to
+* answer the same number.
+*/
+const DEFAULT_TOOL_CALL_TIMEOUT_MS = 3e5;
+/** Default sync state before this workspace stored anything. */
+const MODEL_SYNC_DEFAULT = {
+	detached: false,
+	adoptedModelIds: [],
+	privateModelIds: []
+};
 /** Schemastery parser for managed DataOps configuration. */
 const Config = z.object({
 	baseUrl: z.string().default("http://host.docker.internal:3101"),
 	serverName: z.string().default("dataops"),
 	credentialRef: z.string().role("credential-ref").default("DATAOPS_ACCESS_TOKEN"),
-	toolCallTimeoutMs: z.number().min(1).default(3e5),
+	/**
+	* Volatile so the settings service persists it in this workspace's document: the timeout an
+	* operator needs depends on the query behind a tool, which is deployment knowledge the profile
+	* that mounts this plugin does not have.
+	*
+	* `z.any()` like the sync state above, and for the same reason: a volatile field is delivered
+	* to `apply` as a reference rather than a value, so a narrowed schema would describe a shape
+	* the runtime does not pass. The range is enforced where the value is read.
+	*/
+	toolCallTimeoutMs: z.any().default(DEFAULT_TOOL_CALL_TIMEOUT_MS).volatile(),
 	/**
 	* Volatile so the settings service persists it in this workspace's document. The shape is
 	* left open because the sync state is this plugin's own record, not user configuration.
 	*/
-	modelSync: z.any().default({
-		detached: false,
-		adoptedModelIds: [],
-		privateModelIds: []
-	}).volatile(),
+	modelSync: z.any().default(MODEL_SYNC_DEFAULT).volatile(),
 	/** Volatile for the same reason as `modelSync`: it is this plugin's own record. */
 	settingsSync: z.any().default(SECTION_SYNC_DEFAULT).volatile(),
 	/**
@@ -857,7 +918,7 @@ async function apply(ctx, config) {
 			url: `${baseUrl}/api/ai/data-query/mcp`,
 			headers: {},
 			bearerTokenRef: config.credentialRef,
-			toolCallTimeoutMs: config.toolCallTimeoutMs
+			toolCallTimeoutMs: volatileValue(config.toolCallTimeoutMs, DEFAULT_TOOL_CALL_TIMEOUT_MS)
 		});
 		mcpFiber = fiber;
 		try {
@@ -873,23 +934,47 @@ async function apply(ctx, config) {
 		mcpFiber = void 0;
 		if (fiber !== void 0 && fiber.uid !== null) await fiber.dispose();
 	}, "dataops-managed: MCP lifecycle");
-	if (await ctx.credentials.resolve(accessRef) !== void 0) await ensureMcp();
+	/**
+	* Connect the MCP client when a JWT is already stored.
+	*
+	* A connect can fail for reasons this plugin does not own — the stored JWT may have expired,
+	* or DataOps may be unreachable at this moment — and those are states the settings routes
+	* report and recover from. Awaiting it here would abort activation, leaving the plugin with
+	* no routes at all: the panel then cannot read the very state that explains the failure, and
+	* the browser reports a connection error instead. The routes below are registered first, and
+	* a failed connect is reported rather than thrown.
+	*/
+	const connectExisting = async () => {
+		if (await ctx.credentials.resolve(accessRef) === void 0) return;
+		try {
+			await ensureMcp();
+		} catch (error) {
+			ctx.logger.warn("dataops-managed: connecting the DataOps MCP server failed; the settings routes stay up so a new JWT can be connected");
+			ctx.logger.warn(error);
+		}
+	};
 	/**
 	* The sync state lives in this plugin's own Config, so the settings service persists it in
 	* the workspace document and it survives a restart.
 	*/
 	const syncStore = {
-		read: () => ({
-			detached: config.modelSync?.detached === true,
-			adoptedModelIds: Array.isArray(config.modelSync?.adoptedModelIds) ? config.modelSync.adoptedModelIds : [],
-			privateModelIds: Array.isArray(config.modelSync?.privateModelIds) ? config.modelSync.privateModelIds : []
-		}),
+		read: () => {
+			const state = volatileValue(config.modelSync, MODEL_SYNC_DEFAULT);
+			return {
+				detached: state?.detached === true,
+				adoptedModelIds: Array.isArray(state?.adoptedModelIds) ? state.adoptedModelIds : [],
+				privateModelIds: Array.isArray(state?.privateModelIds) ? state.privateModelIds : []
+			};
+		},
 		write: async (next) => {
 			await ctx.settings.update(MANAGED_PLUGIN_ID, { modelSync: next });
 		}
 	};
 	const settingsSync = new SettingsSync(ctx, {
-		read: () => ({ sections: typeof config.settingsSync?.sections === "object" && config.settingsSync.sections !== null ? config.settingsSync.sections : {} }),
+		read: () => {
+			const state = volatileValue(config.settingsSync, SECTION_SYNC_DEFAULT);
+			return { sections: typeof state?.sections === "object" && state.sections !== null ? state.sections : {} };
+		},
 		write: async (next) => {
 			await ctx.settings.update(MANAGED_PLUGIN_ID, { settingsSync: next });
 		}
@@ -1198,12 +1283,61 @@ async function apply(ctx, config) {
 				}
 				writeJson(response, 200, status);
 			} catch (error) {
+				if (error instanceof WorkspaceLimitsRejection) {
+					writeJson(response, error.status, { error: error.message });
+					return;
+				}
 				ctx.logger.warn("dataops-managed: workspace limits request failed");
 				ctx.logger.warn(error);
 				writeJson(response, 500, { error: error instanceof Error ? error.message : String(error) });
 			}
 		}
 	}), "dataops-managed: workspace limits route");
+	/**
+	* The tool-call timeout, stored in this plugin's own Config.
+	*
+	* The settings service keeps the value in this workspace's document and updates the volatile
+	* reference in place, so a change takes effect on the next connection without a restart. The
+	* profile therefore does not have to anticipate how long a deployment's queries take.
+	*/
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: TOOL_TIMEOUT_PATH,
+		handler: async (request, response) => {
+			const read = () => volatileValue(config.toolCallTimeoutMs, DEFAULT_TOOL_CALL_TIMEOUT_MS);
+			if (request.method === "GET") {
+				writeJson(response, 200, { toolCallTimeoutMs: read() });
+				return;
+			}
+			if (request.method !== "POST") {
+				response.writeHead(405, {
+					allow: "GET, POST",
+					"content-length": "0"
+				});
+				response.end();
+				return;
+			}
+			try {
+				const milliseconds = (await readJson(request))?.toolCallTimeoutMs;
+				if (typeof milliseconds !== "number" || !Number.isSafeInteger(milliseconds)) {
+					writeJson(response, 400, { error: "toolCallTimeoutMs must be a whole number of milliseconds" });
+					return;
+				}
+				const seconds = milliseconds / 1e3;
+				if (seconds < 1 || seconds > 3600) {
+					writeJson(response, 400, { error: "the timeout must be between " + String(1) + " and " + String(TOOL_TIMEOUT_MAX_SECONDS) + " seconds" });
+					return;
+				}
+				await ctx.settings.update(MANAGED_PLUGIN_ID, { toolCallTimeoutMs: milliseconds });
+				writeJson(response, 200, { toolCallTimeoutMs: milliseconds });
+			} catch (error) {
+				ctx.logger.warn("dataops-managed: tool timeout request failed");
+				ctx.logger.warn(error);
+				writeJson(response, 500, { error: error instanceof Error ? error.message : String(error) });
+			}
+		}
+	}), "dataops-managed: tool timeout route");
+	await connectExisting();
 }
 /** Read and parse a JSON request body, tolerating an absent one. */
 async function readJson(request) {
@@ -1227,4 +1361,4 @@ function writeJson(response, status, body) {
 	response.end(payload);
 }
 //#endregion
-export { Config, MANAGED_AUTH_PATH, MANAGED_PLUGIN_ID, MODEL_SYNC_PATH, SKILL_PLAZA_PATH, WORKSPACE_LIMITS_PATH, apply, currentModelSync, currentSettingsSync, currentSkillPlaza, currentWorkspaceLimits, inject, name };
+export { Config, DEFAULT_TOOL_CALL_TIMEOUT_MS, MANAGED_AUTH_PATH, MANAGED_PLUGIN_ID, MODEL_SYNC_PATH, SKILL_PLAZA_PATH, TOOL_TIMEOUT_MAX_SECONDS, TOOL_TIMEOUT_MIN_SECONDS, TOOL_TIMEOUT_PATH, WORKSPACE_LIMITS_PATH, apply, currentModelSync, currentSettingsSync, currentSkillPlaza, currentWorkspaceLimits, inject, name };

package/lib/types/client/ManagedDataOpsSection.d.ts

@@ -1,6 +1,5 @@
 import type { InjectFace } from '@deepseek-ai/dsh-client-ui-slots';
 import type { en } from './locales.ts';
-import { MODEL_SYNC_PATH } from './model-sync-client.ts';
 /** Values injected by the DSH Settings slot. */
 export interface ManagedDataOpsSectionInjected {
     /** Translate one managed DataOps Settings message key. */
@@ -9,10 +8,9 @@ export interface ManagedDataOpsSectionInjected {
 /** Props accepted by the managed DataOps Settings section. */
 export type ManagedDataOpsSectionProps = Partial<InjectFace<ManagedDataOpsSectionInjected>>;
 /**
- * Explain the DataOps-managed JWT and permission owner, and share model configuration.
+ * The DataOps settings this workspace owns: its connection state, its branding, its file ceilings,
+ * and the default configuration it publishes to other workspaces.
  * @param props - Settings slot injection values.
  * @returns The localized managed DataOps section, or nothing before injection.
  */
 export declare function ManagedDataOpsSection(props: ManagedDataOpsSectionProps): import("react").JSX.Element | null;
-/** Re-exported so the settings entry can be discovered from the section alone. */
-export { MODEL_SYNC_PATH };

package/lib/types/client/locales.d.ts

@@ -2,27 +2,26 @@
 export declare const en: {
     readonly nav: "DataOps";
     readonly title: "DataOps";
-    readonly managed: "Managed by this DataOps workspace";
-    readonly description: "DSH uses your current DataOps session JWT. DataOps applies its role and resource permissions to every tool request.";
-    readonly identityLabel: "Identity and permissions";
-    readonly identityValue: "Current DataOps JWT";
-    readonly toolsLabel: "DataOps tools";
-    readonly toolsValue: "Authorized by DataOps on every request";
-    readonly brandingTitle: "Apply Wanxiang branding";
-    readonly brandingDescription: "Use the Wanxiang Data Platform identity in navigation, the New Session welcome view, browser title, and favicon.";
-    readonly brandingToggle: "Apply Wanxiang branding";
-    readonly modelsTitle: "Model configuration";
-    readonly modelsDescription: "Share the models configured here with other users, and choose which of them they may use.";
-    readonly modelsUnavailable: "Model configuration is unavailable until this workspace is connected to DataOps.";
+    readonly managed: "Connected to DataOps";
+    readonly unavailable: "DataOps is not connected.";
+    readonly loadFailed: "Loading failed. Try again.";
+    readonly brandingTitle: "Wanxiang branding";
+    readonly brandingToggle: "Wanxiang branding";
+    readonly limitsTitle: "File size limits";
+    readonly limitsFileReadLabel: "Largest file to read (MiB)";
+    readonly limitsUploadLabel: "Largest file to upload (MiB)";
+    readonly limitsInvalid: "Enter a size in MiB.";
+    readonly limitsSave: "Save";
+    readonly limitsSaving: "Saving…";
+    readonly timeoutTitle: "Tool call timeout";
+    readonly timeoutLabel: "Longest single call (seconds)";
+    readonly timeoutInvalid: "Enter 1 to 3600 seconds.";
     readonly defaultsTitle: "Default configuration";
-    readonly defaultsDescription: "Publish the configuration this workspace holds — models, permissions, and general settings — as the values other users start from. Their workspace takes that copy once and may then change anything, and a change they make is never overwritten.";
-    readonly defaultsActionTitle: "Publish as the default";
-    readonly defaultsNotAdmin: "Only an administrator may publish the default configuration.";
-    readonly defaultsNeverPublished: "Not published yet.";
-    readonly defaultsPublishedAt: "Last published:";
-    readonly defaultsPublish: "Publish default configuration";
+    readonly defaultsPublish: "Publish";
     readonly defaultsPublishing: "Publishing…";
-    readonly loadFailed: "The model configuration could not be loaded. Try again.";
+    readonly defaultsPublishedAt: "Last published";
+    readonly defaultsNeverPublished: "Not published yet";
+    readonly defaultsNotAdmin: "Administrators only";
     readonly plazaTitle: "Skill plaza";
     readonly plazaIntro: "Skills other users shared. Install one to use it in this workspace, or share a skill of your own.";
     readonly plazaSearch: "Search skills";
@@ -39,14 +38,6 @@ export declare const en: {
     readonly plazaActionFailed: "The action could not be completed. Try again.";
     readonly plazaRetry: "Try again";
     readonly plazaRefresh: "Refresh";
-    readonly limitsTitle: "Workspace limits";
-    readonly limitsDescription: "The largest files this workspace may read and upload. Set by an administrator in DataOps.";
-    readonly limitsUnavailable: "Workspace limits are available once this workspace is connected to DataOps.";
-    readonly limitsFileReadLabel: "Largest file to read";
-    readonly limitsUploadLabel: "Largest file to upload";
-    readonly limitsUnit: "Units are MiB.";
-    readonly limitsSave: "Save limits";
-    readonly limitsSaving: "Saving…";
 };
 /** Stable key set shared by every managed DataOps locale. */
 export type ManagedDataOpsKey = keyof typeof en;

package/lib/types/client/tool-timeout-client.d.ts

@@ -0,0 +1,22 @@
+/** Same-origin tool-call timeout calls from the DataOps settings surface. */
+/** Route the plugin's Host half serves for the tool-call timeout. */
+export declare const TOOL_TIMEOUT_PATH = "/integrations/dataops/tool-timeout";
+/** The two ends a timeout may take, in seconds, matching what the Host enforces. */
+export declare const TOOL_TIMEOUT_MIN_SECONDS = 1;
+export declare const TOOL_TIMEOUT_MAX_SECONDS = 3600;
+/** The timeout as this workspace currently holds it. */
+export interface ToolTimeout {
+    /** How long one tool call may run before it is abandoned. */
+    toolCallTimeoutMs: number;
+}
+/**
+ * Read the tool-call timeout the panel shows.
+ * @returns The timeout, or null when the workspace is not connected.
+ */
+export declare function fetchToolTimeout(): Promise<ToolTimeout | null>;
+/**
+ * Store a new tool-call timeout.
+ * @param milliseconds - How long one tool call may run.
+ * @returns The stored timeout, or null when the workspace is not connected.
+ */
+export declare function saveToolTimeout(milliseconds: number): Promise<ToolTimeout | null>;

package/lib/types/client/workspace-limits-client.d.ts

@@ -14,6 +14,15 @@ export interface WorkspaceLimitsStatus {
     canWrite: boolean;
     readOnlyReason: string | null;
 }
+/**
+ * A write DataOps refused, carrying the reason it gave.
+ *
+ * The message is written for the person who set the value, so the panel shows it as-is rather
+ * than replacing it with a generic failure notice.
+ */
+export declare class WorkspaceLimitsRejection extends Error {
+    constructor(message: string);
+}
 /**
  * Read the workspace limits the panel shows.
  * @returns The status, or null when the workspace is not connected to DataOps.

package/lib/types/index.d.ts

@@ -18,6 +18,11 @@ export declare const MODEL_SYNC_PATH = "/integrations/dataops/model-sync";
 export declare const SKILL_PLAZA_PATH = "/integrations/dataops/skill-plaza";
 /** Same-origin route the Settings panel uses to read and change this workspace's limits. */
 export declare const WORKSPACE_LIMITS_PATH = "/integrations/dataops/workspace-limits";
+/** Same-origin route the Settings panel uses to read and change the tool-call timeout. */
+export declare const TOOL_TIMEOUT_PATH = "/integrations/dataops/tool-timeout";
+/** The ends a tool-call timeout may take, in whole seconds. */
+export declare const TOOL_TIMEOUT_MIN_SECONDS = 1;
+export declare const TOOL_TIMEOUT_MAX_SECONDS = 3600;
 /** The live skill plaza, once this plugin activated. */
 export declare function currentSkillPlaza(): SkillPlaza | undefined;
 /** The live model-sync instance, once this plugin activated. */
@@ -25,6 +30,18 @@ export declare function currentModelSync(): ModelSync | undefined;
 export { currentWorkspaceLimits };
 /** @returns The live instance, or undefined before this plugin activated. */
 export declare function currentSettingsSync(): SettingsSync | undefined;
+/**
+ * A volatile config reference.
+ *
+ * A field marked volatile is not stored with the plugin's own configuration: the settings
+ * service keeps it in this workspace's document and hands the plugin a reference that it
+ * updates in place, so a value written through the Settings panel is visible without a
+ * restart. Reading the field directly therefore reads the reference, not the value.
+ */
+interface VolatileRef<T> {
+    /** The current value behind the reference. */
+    get(): T;
+}
 /** Configuration for the DataOps-managed MCP connection. */
 export interface Config {
     /** DataOps browser/API origin reachable from the DSH Host. */
@@ -33,23 +50,32 @@ export interface Config {
     serverName: string;
     /** DSH credential reference that stores the current DataOps access JWT. */
     credentialRef: string;
-    /** Per-tool-call timeout forwarded to the MCP client. */
-    toolCallTimeoutMs: number;
+    /**
+     * Per-tool-call timeout forwarded to the MCP client.
+     *
+     * Volatile, so the settings service stores the platform default in this workspace's document
+     * and the panel can raise it without a profile edit. The read goes through `volatileValue`.
+     */
+    toolCallTimeoutMs: number | VolatileRef<number>;
     /**
      * Model-sync state this workspace keeps.
      *
      * Volatile, so the settings service stores it in this workspace's own document. It belongs
      * to the workspace rather than to DataOps because it records whether the user here wrote
      * their own models, which is a fact about this workspace.
+     *
+     * Volatile, so the runtime supplies a reference and the read goes through `volatileValue`.
      */
-    modelSync: ModelSyncState;
+    modelSync: ModelSyncState | VolatileRef<ModelSyncState>;
     /**
      * Settings-distribution state this workspace keeps.
      *
      * Volatile, like the model-sync state beside it, and for the same reason: it records whether
      * the user here wrote their own values, which is a fact about this workspace.
+     *
+     * Volatile, like the field above, so the read goes through `volatileValue`.
      */
-    settingsSync: SectionSyncState;
+    settingsSync: SectionSyncState | VolatileRef<SectionSyncState>;
     /**
      * Settings namespaces this deployment distributes to other workspaces.
      *
@@ -67,6 +93,14 @@ export interface ModelSyncState {
     /** Model ids the administrator keeps private; every other model is offered by default. */
     privateModelIds: string[];
 }
+/**
+ * Per-tool-call timeout a workspace starts with.
+ *
+ * Named rather than inlined so the schema default and the read fallback cannot drift: the field is
+ * volatile, so a workspace that never changed it reads no value at all and both places have to
+ * answer the same number.
+ */
+export declare const DEFAULT_TOOL_CALL_TIMEOUT_MS = 300000;
 /** Schemastery parser for managed DataOps configuration. */
 export declare const Config: z<Config>;
 /**

package/lib/types/workspace-limits.d.ts

@@ -23,6 +23,19 @@ export interface WorkspaceLimitsConfig {
     /** DSH credential reference holding the current DataOps access JWT. */
     credentialRef: string;
 }
+/**
+ * A rejection DataOps answered with, carrying its status and message.
+ *
+ * Without this the caller can only tell that something failed, and a value DataOps refused —
+ * which the user can correct — is indistinguishable from a fault in the request path.
+ */
+export declare class WorkspaceLimitsRejection extends Error {
+    /** HTTP status DataOps answered with. */
+    readonly status: number;
+    constructor(
+    /** HTTP status DataOps answered with. */
+    status: number, message: string);
+}
 /**
  * The workspace limits an administrator sets in DataOps.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sparkelf/dsh-dataops-managed",
-  "version": "0.3.14",
+  "version": "0.3.16",
   "description": "DataOps JWT intake and credential-backed MCP tools for managed DeepSeek Harness workspaces.",
   "type": "module",
   "main": "./lib/index.js",
@@ -73,7 +73,7 @@
     "@deepseek-ai/dsh-settings": ">=0.1.7-rc.2",
     "@deepseek-ai/dsh-skill": ">=0.2.0-rc.2",
     "@deepseek-ai/dsh-tools": ">=0.1.7-rc.2",
-    "@deepseek-ai/schemastery": ">=3.18.1",
+    "@deepseek-ai/schemastery": ">=3.18.4",
     "@sparkelf/dsh-plugin-mcp-credentials": ">=0.1.0-rc.14",
     "react": ">=18.2.0 <20"
   },
@@ -91,7 +91,7 @@
     "@deepseek-ai/dsh-settings": "0.1.7-rc.2",
     "@deepseek-ai/dsh-skill": "0.2.0-rc.2",
     "@deepseek-ai/dsh-tools": "0.1.7-rc.2",
-    "@deepseek-ai/schemastery": "3.18.2",
+    "@deepseek-ai/schemastery": "3.18.4",
     "@sparkelf/dsh-client-ui-skill-center": "0.2.0-rc.46",
     "@sparkelf/dsh-plugin-mcp-credentials": "0.1.0-rc.14",
     "@types/react": "~18.3.1",