dsh-multi-chat 1.0.1 → 1.0.3

package/README.md

@@ -97,8 +97,8 @@ dsh web --port 3084
 Or manual:
 
 ```bash
-npm pack                                                  # produce a tarball (dsh-multi-chat-1.0.1.tgz)
-dsh plugin --profile web add dsh-multi-chat-1.0.1.tgz     # DSH adds the package to the bundle layer stack automatically
+npm pack                                                  # produce a tarball (dsh-multi-chat-1.0.3.tgz)
+dsh plugin --profile web add dsh-multi-chat-1.0.3.tgz     # DSH adds the package to the bundle layer stack automatically
 ```
 
 Uninstall (one command, nothing manual to clean up — restart `dsh web` to unload it):
@@ -143,7 +143,7 @@ Open that URL on your phone and enter the token to reach the full DSH UI. The ga
 | **One-command (registry)** | `dsh plugin --profile web add dsh-multi-chat` | `dsh plugin --profile web remove dsh-multi-chat` |
 | **npx (no download)** | `npx dsh-multi-chat install` | `dsh plugin --profile web remove dsh-multi-chat` |
 | **Global CLI (npm)** | `npm i -g dsh-multi-chat` then `dsh-multi-chat install` | `dsh plugin --profile web remove dsh-multi-chat` then `npm rm -g dsh-multi-chat` |
-| **Tarball (offline)** | `npm pack` → `dsh plugin --profile web add ./dsh-multi-chat-1.0.1.tgz` | `dsh plugin --profile web remove dsh-multi-chat` |
+| **Tarball (offline)** | `npm pack` → `dsh plugin --profile web add ./dsh-multi-chat-1.0.3.tgz` | `dsh plugin --profile web remove dsh-multi-chat` |
 | **Git clone** | `node bin/dsh-multi-chat.mjs install` | `dsh plugin --profile web remove dsh-multi-chat` |
 
 > `dsh plugin --profile web remove dsh-multi-chat` is the **single uninstall
@@ -152,6 +152,14 @@ Open that URL on your phone and enter the token to reach the full DSH UI. The ga
 > (reconciled from the installed dependency set — see `dsh plugin --help`).
 > Restart `dsh web` afterwards to unload the wall.
 
+> **pnpm ≥ 11 gotcha**: pnpm 11's `minimumReleaseAge` supply-chain guard skips
+> freshly published versions (default cutoff: 1 day) and silently installs the
+> newest "aged" release instead. If `dsh plugin --profile web add
+> dsh-multi-chat` reports an older version than the latest, add
+> `minimumReleaseAge: 0` to the profile's
+> `~/.dsh/profiles/web/pnpm-workspace.yaml` and re-run the add. The bundled CLI
+> (`npx dsh-multi-chat install`) writes that setting for you automatically.
+
 The repo also bundles a cross-platform CLI, `dsh-multi-chat` (`bin/dsh-multi-chat.mjs`). Its `install` command probes `$DSH_HOME` (default `~/.dsh`), packs the package into the profile's `plugins/` folder, and runs `dsh plugin --profile web add <tarball>` (same behavior as `install-plugin.ps1`).
 
 ### Channel 1: npm / npx (recommended, easiest)

package/README.zh.md

@@ -97,8 +97,8 @@ dsh web --port 3084
 或手动：
 
 ```bash
-npm pack                                                  # 得到 tarball (dsh-multi-chat-1.0.1.tgz)
-dsh plugin --profile web add dsh-multi-chat-1.0.1.tgz     # DSH 自动把包加入 bundle 层栈
+npm pack                                                  # 得到 tarball (dsh-multi-chat-1.0.3.tgz)
+dsh plugin --profile web add dsh-multi-chat-1.0.3.tgz     # DSH 自动把包加入 bundle 层栈
 ```
 
 卸载（一条命令，无需手动清理任何文件 —— 重启 `dsh web` 后生效）：
@@ -143,13 +143,19 @@ dsh plugin --profile web remove dsh-multi-chat
 | **一条命令（npm 官方源）** | `dsh plugin --profile web add dsh-multi-chat` | `dsh plugin --profile web remove dsh-multi-chat` |
 | **npx（免下载）** | `npx dsh-multi-chat install` | `dsh plugin --profile web remove dsh-multi-chat` |
 | **全局 CLI（npm）** | `npm i -g dsh-multi-chat` 然后 `dsh-multi-chat install` | `dsh plugin --profile web remove dsh-multi-chat` 然后 `npm rm -g dsh-multi-chat` |
-| **Tarball（离线）** | `npm pack` → `dsh plugin --profile web add ./dsh-multi-chat-1.0.1.tgz` | `dsh plugin --profile web remove dsh-multi-chat` |
+| **Tarball（离线）** | `npm pack` → `dsh plugin --profile web add ./dsh-multi-chat-1.0.3.tgz` | `dsh plugin --profile web remove dsh-multi-chat` |
 | **Git clone** | `node bin/dsh-multi-chat.mjs install` | `dsh plugin --profile web remove dsh-multi-chat` |
 
 > `dsh plugin --profile web remove dsh-multi-chat` 是**所有渠道统一的卸载命令**：
 > 它从 profile 移除依赖，DSH 会自动把它从 `dsh.profile.bundles` 层栈里剔除
 > （层栈按已安装依赖实时调和，详见 `dsh plugin --help`）。之后重启 `dsh web` 卸载生效。
 
+> **pnpm ≥ 11 注意**：pnpm 11 的 `minimumReleaseAge` 供应链保护会跳过刚发布的版本
+> （默认阈值 1 天），静默回退到最新的「已过成熟期」版本。如果
+> `dsh plugin --profile web add dsh-multi-chat` 装到的版本比最新版旧，请在
+> `~/.dsh/profiles/web/pnpm-workspace.yaml` 里加上 `minimumReleaseAge: 0` 后重试。
+> 自带 CLI（`npx dsh-multi-chat install`）会在安装时自动写入该设置。
+
 仓库还内置了一个跨平台 CLI `dsh-multi-chat`（`bin/dsh-multi-chat.mjs`）。它的 `install` 命令会探测 `$DSH_HOME`（缺省 `~/.dsh`），把包打包进 profile 的 `plugins/` 目录，再执行 `dsh plugin --profile web add <tarball>`（与 `install-plugin.ps1` 行为一致）。
 
 ### 渠道一：npm / npx（推荐，最省事）

package/bin/dsh-multi-chat.mjs

@@ -126,9 +126,34 @@ Packs the dsh-multi-chat package and installs the tarball into the profile
 with \`dsh plugin --profile <p> add\`. The package declares \`dsh.bundle.patch\`
 (pointing at its own cordis.patch.yml), so DSH mounts it automatically as a
 bundle layer — no manual profile patch is needed. Restart dsh web afterwards.
+
+The install also writes \`minimumReleaseAge: 0\` into the profile's
+pnpm-workspace.yaml (only if no explicit value is set): pnpm ≥ 11 filters
+freshly published versions by default (1 day), which would otherwise make
+\`dsh plugin --profile web add dsh-multi-chat\` silently fall back to an older
+release. With the gate disabled, every registry install resolves the newest.
+
 Uninstall with: dsh plugin --profile <p> remove dsh-multi-chat
 `
 
+/**
+ * Ensure the profile's pnpm-workspace.yaml disables pnpm ≥ 11's
+ * minimumReleaseAge gate (default 1 day), so registry installs like
+ * `dsh plugin --profile web add dsh-multi-chat` always resolve the newest
+ * release instead of silently falling back to an older one. Respects an
+ * explicit user-set value; only writes when the key is absent.
+ */
+function ensureFreshReleasePolicy(profileDir) {
+  const wsFile = join(profileDir, 'pnpm-workspace.yaml')
+  const existing = existsSync(wsFile) ? readFileSync(wsFile, 'utf8') : null
+  if (existing !== null && /^\s*minimumReleaseAge\s*:/m.test(existing)) {
+    return false
+  }
+  const anchor = '\n# dsh-multi-chat: disable pnpm minimumReleaseAge so `dsh plugin add` always resolves the newest release\nminimumReleaseAge: 0\n'
+  writeFileSync(wsFile, `${existing ?? 'packages:\n  - .\n'}${anchor}`, 'utf8')
+  return true
+}
+
 async function cmdInstall(args) {
   let profile = 'web'
   for (let i = 0; i < args.length; i++) {
@@ -155,6 +180,14 @@ async function cmdInstall(args) {
   process.stdout.write(`installing ${tarballName} into profile '${profile}'…\n`)
   run('dsh', ['plugin', '--profile', profile, 'add', tarball])
 
+  // 3) disable pnpm's release-age gate for this profile so the registry
+  // one-liner (`dsh plugin --profile web add dsh-multi-chat`) — and every
+  // later add/update — resolves the newest version, not a stale fallback.
+  const profileDir = join(dshHome(), 'profiles', profile)
+  if (ensureFreshReleasePolicy(profileDir)) {
+    process.stdout.write(`disabled pnpm minimumReleaseAge in ${join(profileDir, 'pnpm-workspace.yaml')} — future registry installs resolve the newest version\n`)
+  }
+
   process.stdout.write('\nDone. Restart dsh web to load the wall:\n')
   process.stdout.write('  dsh web --port <n>\n')
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-multi-chat",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "DSH 多窗口墙：在官方 DeepSeek Harness Web 界面里以多窗口网格并排运行、监控多个对话实例，一屏盯住所有 Agent 的实时进度；内置带口令认证的局域网网关，手机/平板也能看。",
   "license": "MIT",
   "type": "module",