dsh-deepseek-balance-widget 2.2.0 → 2.2.1

package/lib/index.js

@@ -12,7 +12,7 @@ const name = "deepseek-balance-widget";
 const inject = ["webServer", "credentials"];
 
 /** NPM registry endpoint for this package (public access, no auth). */
-const NPM_REGISTRY_URL = "https://registry.npmjs.org/dsh-deepseek-balance-widget/latest";
+const NPM_REGISTRY_URL = "https://registry.npmjs.org/dsh-deepseek-balance-widget";
 
 /** Absolute path to this plugin's package root (where package.json lives). */
 const PLUGIN_ROOT = (() => {
@@ -480,7 +480,25 @@ const PLATFORM_HEADERS = {
 };
 
 /**
- * Query the NPM registry for the latest published version of this package.
+ * Simple semver comparison for x.y.z style versions.
+ * @returns {number} 1 if a > b, -1 if a < b, 0 if equal.
+ */
+function compareSemver(a, b) {
+  const toParts = (v) => String(v).split(".").map((p) => Number.parseInt(p, 10) || 0);
+  const ap = toParts(a);
+  const bp = toParts(b);
+  for (let i = 0; i < Math.max(ap.length, bp.length); i++) {
+    const av = ap[i] ?? 0;
+    const bv = bp[i] ?? 0;
+    if (av > bv) return 1;
+    if (av < bv) return -1;
+  }
+  return 0;
+}
+
+/**
+ * Query the NPM registry for the highest published version of this package.
+ * The popover "update" button will install this version regardless of the "latest" dist-tag.
  * @returns {Promise<{ok:boolean, local:string, latest?:string, updateAvailable?:boolean, error?:string}>}
  */
 async function queryNpmVersion() {
@@ -500,21 +518,15 @@ async function queryNpmVersion() {
     const text = await response.text();
     return { ok: false, local: LOCAL_VERSION, error: `bad json (HTTP ${response.status})` };
   }
-  const latest = data?.version;
-  if (typeof latest !== "string") {
-    return { ok: false, local: LOCAL_VERSION, error: "version field missing" };
+  const versions = data && typeof data.versions === "object" ? Object.keys(data.versions) : [];
+  if (!versions.length) {
+    return { ok: false, local: LOCAL_VERSION, error: "version list missing" };
   }
-  // Simple semantic-ish comparison: split by dot and compare numeric parts.
-  const toParts = (v) => String(v).split(".").map((p) => Number.parseInt(p, 10) || 0);
-  const localParts = toParts(LOCAL_VERSION);
-  const latestParts = toParts(latest);
-  let updateAvailable = false;
-  for (let i = 0; i < Math.max(localParts.length, latestParts.length); i++) {
-    const a = localParts[i] ?? 0;
-    const b = latestParts[i] ?? 0;
-    if (b > a) { updateAvailable = true; break; }
-    if (b < a) { break; }
+  const latest = versions.reduce((max, v) => (compareSemver(v, max) > 0 ? v : max), versions[0]);
+  if (typeof latest !== "string") {
+    return { ok: false, local: LOCAL_VERSION, error: "could not determine highest version" };
   }
+  const updateAvailable = compareSemver(latest, LOCAL_VERSION) > 0;
   return { ok: true, local: LOCAL_VERSION, latest, updateAvailable };
 }
 
@@ -545,12 +557,20 @@ async function detectPackageManager() {
  * @returns {Promise<{ok:boolean, output:string, error?:string}>}
  */
 async function runPackageUpdate() {
+  const versionInfo = await queryNpmVersion();
+  if (!versionInfo.ok) {
+    return { ok: false, error: versionInfo.error || "failed to query npm version" };
+  }
+  if (!versionInfo.updateAvailable) {
+    return { ok: true, output: "already up to date", noOp: true };
+  }
+  const target = versionInfo.latest;
   const pm = await detectPackageManager();
   const isWin = process.platform === "win32";
   const cmd = isWin ? (pm === "pnpm" ? "pnpm.cmd" : "npm.cmd") : pm;
   const args = pm === "pnpm"
-    ? ["add", "dsh-deepseek-balance-widget@latest"]
-    : ["install", "dsh-deepseek-balance-widget@latest"];
+    ? ["add", `dsh-deepseek-balance-widget@${target}`]
+    : ["install", `dsh-deepseek-balance-widget@${target}`];
   return new Promise((resolve) => {
     const child = spawn(cmd, args, {
       cwd: UPDATE_CWD,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-deepseek-balance-widget",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "type": "module",
   "description": "Multi-provider AI balance widget for the dsh web sidebar: a live, auto-refreshing balance pill plus a detail popover listing DeepSeek and any added providers (MiMo etc.). Keys are stored per-machine in ~/.dsh/ai-balances.json and resolved from the local credential seam, never hardcoded.",
   "keywords": [