dsh-plugin-notify-sounds 1.8.4 → 1.8.6

package/lib/client.js

@@ -185,6 +185,7 @@ window.__ModuleLoader__.load({
 			"custom.remove": "移除",
 			"custom.tooLarge": "文件超过 512KB，请压缩后重试",
 			"custom.undecodable": "无法解码该音频：文件可能损坏，或当前环境不支持解码",
+			"custom.unreadable": "无法读取该文件：它可能已被移动，或读取权限被撤销，请重新选择",
 			"systemNotify.title": "系统通知",
 			"systemNotify.description": "页面处于后台时弹出系统通知，点击可回到窗口",
 			"systemNotify.granted": "已授权系统通知",
@@ -201,7 +202,7 @@ window.__ModuleLoader__.load({
 			"renotify.interval": "重复间隔",
 			"renotify.minutes": "{n} 分钟",
 			"quiet.title": "静音时段",
-			"quiet.description": "每天此时间段内不发出任何提醒（可跨午夜，如 22:00 至次日 08:00）",
+			"quiet.description": "每天此时间段内不发出任何提醒（可跨午夜，如 22:00 至次日 08:00；起止时间相同视为未设置静音）",
 			"quiet.start": "开始时间",
 			"quiet.end": "结束时间",
 			"preview": "试听",
@@ -222,32 +223,23 @@ window.__ModuleLoader__.load({
 			"notify.completion.title": "任务完成",
 			"notify.completion.body": "智能体已完成当前任务",
 			"update.title": "更新",
-			"update.description": "从 npm 检查本插件的新版本，发现新版可一键安装",
+			"update.description": "从 npm 检查本插件的新版本；安装请用插件管理器（本插件不再自己安装更新）",
 			"update.auto": "自动检查更新",
 			"update.auto.description": "每天最多静默检查一次，发现新版只在下方标记，不弹通知",
 			"update.check": "检查更新",
 			"update.current": "当前版本",
+			"update.currentUnknown": "无法读取当前版本",
 			"update.idle": "尚未检查",
 			"update.checking": "检查中…",
 			"update.uptodate": "已是最新",
 			"update.available": "有新版",
-			"update.failed": "检查失败（网络不可用）",
-			"update.apply": "立即更新",
-			"update.desktopGuidance": "升级请走包管理器：设置 → 插件 → 卸载本插件，再重新添加 dsh-plugin-notify-sounds。安装由包管理器完成，升级才能留在新版（本插件不再自己替换文件）",
+			"update.failed": "检查失败",
+			"update.failedDetail": "两个源都没有给出可用的答复：可能是网络、代理或镜像源临时不可用，稍后重试即可",
+			"update.desktopGuidance": "升级走包管理器：左侧栏「插件」→ 在「已安装插件」里卸载本插件 → 点「添加插件」→ 粘贴 dsh-plugin-notify-sounds@{version} → 安装 → 重启 DSH",
+			"update.versionPinned": "务必带版本号：发布不满 24 小时的版本会被 pnpm 的 minimumReleaseAge 策略挡掉，只写包名会装回上一个版本",
 			"update.webGuidance": "在终端执行 dsh plugin --profile {profile} add dsh-plugin-notify-sounds@{version}",
-			"update.unregistered": "这个安装没有被包管理器登记（记录仍为 {recorded}），下次安装其他插件时可能被退回。请按上面的方式重新安装一次。",
-			"update.updating": "更新中…",
-			"update.doneDetail": "更新完成：{from} → {to}，重启 DSH 后生效",
-			"update.applyFailed": "更新失败（{stage}），已恢复原状",
-			"update.stage.check": "检查",
-			"update.stage.download": "下载",
-			"update.stage.verify": "校验",
-			"update.stage.unpack": "解包",
-			"update.stage.manifest": "核对包信息",
-			"update.stage.replace": "替换文件",
-			"update.stage.unknown": "未知阶段",
-			"update.retry": "通常是网络或代理的临时问题，稍后重试即可；若反复失败，可到 {url} 手动安装",
-			"update.reinstall": "可在 DSH 的 设置 → 插件 里先卸载本插件，再添加 dsh-plugin-notify-sounds 重新安装；仓库：{url}",
+			"update.webGuidancePlain": "在终端执行 dsh plugin add dsh-plugin-notify-sounds@{version}",
+			"update.unregistered": "这个安装没有被包管理器登记（记录仍为 {recorded}），下次安装其他插件时可能被退回。请按下面的步骤重新安装一次。",
 		};
 
 		/** English dictionary, checked complete against the zh key set. */
@@ -275,6 +267,7 @@ window.__ModuleLoader__.load({
 			"custom.remove": "Remove",
 			"custom.tooLarge": "File exceeds 512KB; please compress it and retry",
 			"custom.undecodable": "Could not decode this audio: the file may be damaged, or this environment cannot decode audio",
+			"custom.unreadable": "Could not read this file: it may have been moved, or read permission was revoked — choose it again",
 			"systemNotify.title": "System notifications",
 			"systemNotify.description": "Show an OS notification while the page is hidden; click it to focus the window",
 			"systemNotify.granted": "Notification permission granted",
@@ -293,7 +286,7 @@ window.__ModuleLoader__.load({
 			"quiet.title": "Quiet hours",
 			"goalFinalOnly.title": "Only alert on the final goal round",
 			"goalFinalOnly.description": "A goal runs several automatic rounds; with this on, intermediate rounds stay silent and one chime marks the end of the goal (or a pause or block). Ordinary sessions are unaffected",
-			"quiet.description": "No alerts during this daily time range (may wrap past midnight, e.g. 22:00 to 08:00)",
+			"quiet.description": "No alerts during this daily time range (may wrap past midnight, e.g. 22:00 to 08:00; identical start and end means no quiet range)",
 			"quiet.start": "Start time",
 			"quiet.end": "End time",
 			"preview": "Preview",
@@ -314,32 +307,23 @@ window.__ModuleLoader__.load({
 			"notify.completion.title": "Task finished",
 			"notify.completion.body": "The agent has finished the current task",
 			"update.title": "Updates",
-			"update.description": "Check npm for a newer version of this plugin and install it in one click",
+			"update.description": "Check npm for a newer version; install it through the plugin manager (this plugin no longer installs updates itself)",
 			"update.auto": "Check for updates automatically",
 			"update.auto.description": "At most one quiet check a day; a newer version is only marked below, never announced",
 			"update.check": "Check now",
 			"update.current": "This version",
+			"update.currentUnknown": "This version could not be read",
 			"update.idle": "Not checked yet",
 			"update.checking": "Checking…",
 			"update.uptodate": "Up to date",
 			"update.available": "New version available",
-			"update.failed": "Check failed (no network)",
-			"update.apply": "Update now",
-			"update.desktopGuidance": "Update through the package manager: Settings → Plugins → remove this plugin, then add dsh-plugin-notify-sounds again. The installer keeps the upgrade (this plugin no longer replaces its own files)",
+			"update.failed": "Check failed",
+			"update.failedDetail": "Neither source returned a usable answer — the network, a proxy or a mirror may be temporarily unavailable. Try again later.",
+			"update.desktopGuidance": "Update through the package manager: sidebar Plugins → uninstall this plugin under Installed plugins → Add plugin → paste dsh-plugin-notify-sounds@{version} → Install → restart DSH",
+			"update.versionPinned": "Keep the version: pnpm's minimumReleaseAge policy blocks a release for its first 24 hours, so the bare name resolves to the previous version",
 			"update.webGuidance": "Run dsh plugin --profile {profile} add dsh-plugin-notify-sounds@{version} in a terminal",
-			"update.unregistered": "This install is not registered with the package manager (it still records {recorded}), so a later plugin install may roll it back. Reinstall it with the step above.",
-			"update.updating": "Updating…",
-			"update.doneDetail": "Updated: {from} → {to} — restart DSH to load it",
-			"update.applyFailed": "Update failed ({stage}) — the previous version is intact",
-			"update.stage.check": "check",
-			"update.stage.download": "download",
-			"update.stage.verify": "checksum",
-			"update.stage.unpack": "unpack",
-			"update.stage.manifest": "package check",
-			"update.stage.replace": "file replacement",
-			"update.stage.unknown": "unknown step",
-			"update.retry": "This is usually a temporary network or proxy problem — try again later. If it keeps failing, install manually from {url}",
-			"update.reinstall": "Remove this plugin under Settings → Plugins, then add dsh-plugin-notify-sounds again. Repository: {url}",
+			"update.webGuidancePlain": "Run dsh plugin add dsh-plugin-notify-sounds@{version} in a terminal",
+			"update.unregistered": "This install is not registered with the package manager (it still records {recorded}), so a later plugin install may roll it back. Reinstall it once with the steps below.",
 		};
 		//#endregion
 
@@ -801,15 +785,23 @@ window.__ModuleLoader__.load({
 		/** Active title observer, while a title alert is wanted. */
 		let titleObserver;
 
-		/** Parse "HH:MM" into minutes past midnight; `NaN` when malformed. */
+		/**
+		 * Parse "HH:MM" into minutes past midnight; `NaN` when malformed.
+		 *
+		 * Deliberately as strict as the Host's `TIME_OF_DAY` pattern: two-digit
+		 * hours, two-digit minutes. A hand-edited `9:05` is refused by the
+		 * Config schema, so accepting it here would mean the row claims a value
+		 * is fine while the plugin itself declines to load — one field, two
+		 * verdicts.
+		 *
+		 * @param text - the stored value.
+		 * @returns minutes past midnight, or NaN.
+		 */
 		function timeOfDayToMinutes(text) {
 			if (typeof text !== "string") return NaN;
-			const match = /^(\d{1,2}):(\d{2})$/.exec(text);
+			const match = /^([01]\d|2[0-3]):([0-5]\d)$/.exec(text);
 			if (match === null) return NaN;
-			const hours = Number(match[1]);
-			const minutes = Number(match[2]);
-			if (hours > 23 || minutes > 59) return NaN;
-			return hours * 60 + minutes;
+			return Number(match[1]) * 60 + Number(match[2]);
 		}
 
 		/**
@@ -874,64 +866,47 @@ window.__ModuleLoader__.load({
 		/** Route the Host half answers the update check on; must match the Host half's UPDATE_CHECK_PATH. */
 		const UPDATE_CHECK_PATH = "/notify-sounds/update/check";
 
-
-		/**
-		 * Where a user goes when the one-click update cannot finish.
-		 *
-		 * Shown as plain selectable text rather than a link: the Desktop shell
-		 * is a `dsh-app://` page and the Settings primitives expose no external
-		 * link component, so a URL the user can copy is the honest form — a
-		 * button that silently did nothing here would be worse than no button.
-		 */
-		const REPOSITORY_URL = "https://github.com/BillCx330/dsh-plugin-notify-sounds";
-
-		/**
-		 * Every stage the Host can report, and whether a fresh install is the remedy.
-		 *
-		 * Keyed off the stage rather than off the message: telling someone whose
-		 * download timed out to uninstall the plugin would be actively bad
-		 * advice, and telling someone whose archive was rejected to "try again
-		 * later" leaves them with no way forward at all. `true` means the
-		 * payload itself could not be applied, which retrying will not change.
-		 */
-		const UPDATE_STAGES = { check: false, download: false, verify: false, unpack: true, manifest: true, replace: true };
-
-		/** The localized word for a Host-side update stage. */
-		const stageWord = (t, stage) => t(`update.stage.${typeof stage === "string" && Object.hasOwn(UPDATE_STAGES, stage) ? stage : "unknown"}`);
+		/** Route the Host half answers a session's goal phase on; must match the Host half's GOAL_PHASE_PATH. */
+		const GOAL_PHASE_PATH = "/notify-sounds/goal";
 
 		/** `v1.2.3` for display, `?` when the Host reported no version. */
 		const formatVersion = (text) => (typeof text === "string" && text !== "" ? `v${text}` : "?");
 
 		/**
-		 * The line reporting an installation that landed.
+		 * The version as a package specifier segment: `1.2.3`, never `v1.2.3`.
 		 *
-		 * Composed here rather than in JSX so the notice above the section and
-		 * the row inside it say exactly the same thing, and so the whole
-		 * sentence — punctuation included — lives in the dictionaries instead
-		 * of being assembled from fragments at the call site (which is how the
-		 * English UI ended up with full-width stops).
+		 * The display form and the installable form are deliberately different.
+		 * Every install instruction this package prints is pasted into a package
+		 * manager, and `pkg@v1.2.3` only works because semver tolerates the
+		 * prefix — not because anything promises it. A command that fails to
+		 * parse is worse than a slightly plainer one.
 		 */
-		const updateAppliedText = (t, applied) => t("update.doneDetail", { from: formatVersion(applied?.from), to: formatVersion(applied?.to) });
+		const packageVersion = (text) => (typeof text === "string" && text !== "" ? text : "");
 
 		/**
-		 * The two lines a failed update shows: what happened, and what to do.
+		 * The version an install instruction should name, or undefined when
+		 * there is nothing to install.
+		 *
+		 * Only these two states need an instruction, and both have to name a
+		 * version or the command runs into `minimumReleaseAge` and quietly
+		 * installs the previous release:
 		 *
-		 * The remedy is chosen from the stage the Host reported, never from the
-		 * message: a download that timed out must not be answered with "uninstall
-		 * and reinstall", and an archive that was refused must not be answered
-		 * with "try again later".
+		 *   - a newer version exists → install that one;
+		 *   - the install is not recorded by the profile's lockfile → install
+		 *     the version already on disk, so the record catches up.
+		 *
+		 * When both hold, the newer version is the target: reinstalling it
+		 * fixes the record at the same time. A plain "up to date" install
+		 * yields undefined, so the row stays quiet.
+		 *
+		 * @param payload - the Host's answer, or undefined before one arrives.
+		 * @param currentKnown - whether `payload.current` is a usable version.
+		 * @returns the version string, as a package specifier segment.
 		 */
-		const updateFailureText = (t, failed, current) => {
-			// Name both versions whenever the target is known: "the update
-			// failed" on its own cannot be acted on afterwards, and this is the
-			// line a user copies into a bug report.
-			const named = typeof failed?.to === "string" ? `${formatVersion(current)} → ${formatVersion(failed.to)} · ` : "";
-			return {
-				detail: `${named}${t("update.applyFailed", { stage: stageWord(t, failed?.stage) })}`,
-				advice: UPDATE_STAGES[failed?.stage] === true
-					? t("update.reinstall", { url: REPOSITORY_URL })
-					: t("update.retry", { url: REPOSITORY_URL }),
-			};
+		const installTargetVersion = (payload, currentKnown) => {
+			if (payload?.updateAvailable === true && typeof payload.latest === "string" && payload.latest !== "") return payload.latest;
+			if (payload?.unregistered === true && currentKnown && typeof payload.current === "string" && payload.current !== "") return payload.current;
+			return undefined;
 		};
 
 		/** Channel name and claim key shared by every page of this origin. */
@@ -1073,7 +1048,9 @@ window.__ModuleLoader__.load({
 				// to collapse repeats means the platform closes the toast that
 				// is being superseded — and a click that arrives for that older
 				// toast can be dropped with it, which is one whole class of
-				// "clicked the notification and nothing happened".
+				// "clicked the notification and nothing happened". The tag is
+				// only our own key for closing the previous generation, which
+				// is why it is not passed to the constructor below either.
 				const previous = liveNotifications.get(tag);
 				if (previous !== undefined) {
 					liveNotifications.delete(tag);
@@ -1081,13 +1058,12 @@ window.__ModuleLoader__.load({
 						previous.close();
 					} catch {}
 				}
-				// `tag` is deliberately NOT passed to the platform. Collapsing
-				// repeats by tag means the platform supersedes the previous
-				// toast — and a click aimed at the superseded toast can be
-				// dropped with it, which is the whole "clicked the
-				// notification and nothing happened" class of failure. The tag
-				// is only our own key for closing the previous generation.
 				const notification = new Notification(title, { body, silent: true });
+				// The constructor worked, so this environment can build a toast
+				// after all. Clearing the flag matters: it is what disables the
+				// row (see SystemNotifyRow), and one transient refusal must not
+				// leave the switch dead for the life of the page.
+				notificationConstructionFailed = false;
 				liveNotifications.set(tag, notification);
 				// Held here — and deliberately NOT released on click or close.
 				// Releasing it was what left a replaced (or twice-clicked) toast
@@ -1175,50 +1151,13 @@ window.__ModuleLoader__.load({
 
 		//#region settings rows
 		/**
-		 * The transient write-failure marker shared by the rows: `null` when the
-		 * last write settled, otherwise the field whose write was refused.
+		 * The Settings section: the row list, the write helper every row shares,
+		 * and the "this field was refused" marker they render.
 		 *
 		 * @param props - the form snapshot hook, the field writer, the preview
 		 *   player, and the locale seat.
 		 * @returns the Settings section element tree.
 		 */
-		/**
-		 * The one-line notice directly under the section intro: what the last
-		 * update did, shown where the page lands.
-		 *
-		 * An update swaps the plugin's own client file, so DSH reloads this
-		 * half and the section is rebuilt from the top — anything anchored at
-		 * the bottom of the row list is somewhere the user then has to scroll
-		 * to find, and the scroll itself makes the page look like it jumped.
-		 * The outcome therefore lives on the Host (it survives the reload) and
-		 * this notice repeats it at the top, without moving anything, until
-		 * DSH restarts — which is exactly as long as "restart to load it" is
-		 * true. Nothing is shown otherwise, so the section is unchanged for
-		 * everyone who did not just update.
-		 *
-		 * @param props - copy.
-		 * @returns the notice element, or null when there is nothing to say.
-		 */
-		function UpdateNotice({ t, autoCheck }) {
-			const [applied, setApplied] = useState(undefined);
-			// Explicit `=== true`, not `!== false`: during the first frame
-			// `useConfig` may still be loading, and `undefined` must NOT be
-			// treated as "allowed" — that is the one case where a request
-			// could slip past a user who has the switch off. The dep array is
-			// `[autoCheck]` rather than `[]` so the effect picks up the real
-			// value when it arrives, instead of only ever reading the first
-			// render's prop.
-			useEffect(() => {
-				if (autoCheck !== true) return;
-				fetch(UPDATE_CHECK_PATH, { method: "GET" })
-					.then((response) => response.json())
-					.then((payload) => setApplied(payload?.applied))
-					.catch(() => {});
-			}, [autoCheck]);
-			if (applied === undefined || typeof applied.to !== "string") return null;
-			return h("div", { className: css.hint, key: "text" }, updateAppliedText(t, applied));
-		}
-
 		function NotifySoundsSection({ useConfig, setField, preview, t }) {
 			const state = useConfig((snapshot) => snapshot);
 			const value = state.status === "ready" ? state.value : undefined;
@@ -1252,22 +1191,16 @@ window.__ModuleLoader__.load({
 			const pickerIds = hasCustom ? SOUND_IDS : SOUND_IDS.filter((id) => id !== "custom");
 			/** Accept a stored preset the menu actually offers, else fall back. */
 			const soundValue = (raw, fallback) => (typeof raw === "string" && pickerIds.includes(raw) ? raw : fallback);
-			// Snap to an interval the control actually offers: a hand-edited
-			// value such as 7 would otherwise leave the segmented control with
-			// no selection at all (its index would be -1).
-			const renotifyMinutes = RENOTIFY_INTERVALS.includes(value?.renotifyMinutes)
-				? value.renotifyMinutes
-				: RENOTIFY_INTERVALS.reduce((best, option) => (
-					Math.abs(option - (Number.isFinite(value?.renotifyMinutes) ? value.renotifyMinutes : 5))
-						< Math.abs(best - (Number.isFinite(value?.renotifyMinutes) ? value.renotifyMinutes : 5)) ? option : best
-				), RENOTIFY_INTERVALS[0]);
+			// The interval in force, snapped to a value the control offers — the
+			// same call the reminder timer makes, so the row cannot promise a
+			// cadence the timer does not keep.
+			const renotifyMinutes = renotifyInterval(value?.renotifyMinutes);
 			const quietStart = Number.isNaN(timeOfDayToMinutes(value?.quietStart)) ? "22:00" : value.quietStart;
 			const quietEnd = Number.isNaN(timeOfDayToMinutes(value?.quietEnd)) ? "08:00" : value.quietEnd;
 
 			return h("div", { className: css.section }, [
 				h("h2", { className: css.title, key: "title" }, t("title")),
 				h("p", { className: css.intro, key: "intro" }, t("intro")),
-				h(UpdateNotice, { key: "update-notice", t, autoCheck: value === undefined ? undefined : value.updateAutoCheck !== false }),
 				h("div", { className: css.rows, key: "rows" }, [
 					h(SwitchRow, {
 						key: "enabled",
@@ -1698,18 +1631,29 @@ window.__ModuleLoader__.load({
 				setError(null);
 				setBusy(true);
 				try {
-					const bytes = await file.arrayBuffer();
+					// The read and the decode are separate failures with separate
+					// causes, so they get separate sentences: a file that was
+					// moved or whose permission was revoked never reached the
+					// decoder at all, and telling the user it "could not be
+					// decoded" sends them to compress a file that is not there.
+					let bytes;
+					try {
+						bytes = await file.arrayBuffer();
+					} catch {
+						setError("custom.unreadable");
+						return;
+					}
 					const decoded = await validateCustomSoundBytes(bytes);
 					if (decoded === undefined) {
 						setError("custom.undecodable");
 						return;
 					}
-					await onUpload(bytesToBase64(bytes), file.name);
-				} catch {
-					// A read can fail (the file was moved or its permission
-					// revoked between the picker and the read). Say so rather
-					// than leaving an unhandled rejection and no feedback.
-					setError("custom.undecodable");
+					// A refused write is reported by the row's own `failed`
+					// marker; swallowing a rejection here only keeps it from
+					// surfacing as an unhandled promise.
+					try {
+						await onUpload(bytesToBase64(bytes), file.name);
+					} catch {}
 				} finally {
 					setBusy(false);
 				}
@@ -1825,6 +1769,27 @@ window.__ModuleLoader__.load({
 		/** Re-ping interval choices, in minutes. */
 		const RENOTIFY_INTERVALS = [1, 5, 15, 30];
 
+		/**
+		 * The interval actually in force, snapped to a value the control offers.
+		 *
+		 * The schema accepts any whole minute from 1 to 60, while the control
+		 * offers four; a hand-edited `7` therefore has to be reconciled
+		 * somewhere. It is reconciled HERE, once, and both the row and the
+		 * reminder use this function — snapping only for display made the
+		 * control say "5 min" while reminders fired every seven, which is the
+		 * one outcome a settings row must never produce.
+		 *
+		 * @param value - the stored preference, possibly absent or out of range.
+		 * @returns one of `RENOTIFY_INTERVALS`.
+		 */
+		const renotifyInterval = (value) => {
+			const raw = Number.isFinite(value) ? value : 5;
+			if (RENOTIFY_INTERVALS.includes(raw)) return raw;
+			return RENOTIFY_INTERVALS.reduce((best, option) => (
+				Math.abs(option - raw) < Math.abs(best - raw) ? option : best
+			), RENOTIFY_INTERVALS[0]);
+		};
+
 		/**
 		 * The repeat-reminder row: its toggle and, beside it, the interval
 		 * SegmentedControl (disabled until the toggle is on).
@@ -1929,15 +1894,14 @@ window.__ModuleLoader__.load({
 		}
 
 		/**
-		 * The update row: what this installation runs, what npm has, and the
-		 * buttons to ask and to install.
+		 * The update row: what this installation runs, what npm has, and one
+		 * button to ask.
 		 *
-		 * The check is a read-only question; the update is one POST to the
-		 * Host, which does the downloading, verifying and swapping itself —
-		 * the page never touches the package. Both routes are fixed to this
-		 * plugin's own package, so there is no input here to aim anywhere
-		 * else, and the Host answers recent questions from its own cache, so
-		 * opening the section costs no network at all.
+		 * The check is a read-only question to this plugin's own Host route.
+		 * Installing is the package manager's job (since 1.8.0), so the row
+		 * reports and points rather than acting; the route takes no input from
+		 * here, and the Host answers from a cache, so opening the section
+		 * costs no network at all.
 		 *
 		 * @param props - copy.
 		 * @returns the row element tree.
@@ -1955,37 +1919,80 @@ window.__ModuleLoader__.load({
 				}
 			};
 			// A cached answer makes this free; only a cold Host reaches out.
-			// Same guard as the notice: `=== true` (not `!== false`), because
-			// during the loading frame `undefined` must not be treated as
-			// permission to reach out.
+			// `=== true` (not `!== false`), because during the loading frame
+			// `undefined` must not be treated as permission to reach out.
 			useEffect(() => {
 				if (autoCheck !== true) return;
 				check(false)();
 			}, [autoCheck]);
 			const payload = state.payload;
 			const latest = payload?.latest === undefined ? undefined : formatVersion(payload.latest);
-			let status = payload === undefined
-				? t("update.idle")
-				: payload.updateAvailable === true
-					? `${t("update.available")} ${latest}`
-					: t("update.uptodate");
+			// A payload without a readable current version is NOT "up to date":
+			// that would turn "I could not read it" into a claim, and hide the
+			// one state where reinstalling is the actual fix.
+			const currentKnown = payload !== undefined && typeof payload.current === "string" && payload.current !== "";
+			// Only an answer that actually came back can report a failure. A
+			// forced re-check must not keep showing the previous failure while
+			// the new request is in the air.
+			const failed = state.phase === "failed" || (state.phase === "done" && payload?.ok === false);
+			let status;
 			if (state.phase === "checking") status = t("update.checking");
-			if (state.phase === "failed") status = t("update.failed");
-			const detail = payload === undefined ? status : `${t("update.current")} ${formatVersion(payload.current)} · ${status}`;
-			// The install belongs to the package manager now: this plugin only
-			// checks, and every route below installs THROUGH pnpm so the
-			// profile's lockfile moves with the files. The two shells reach it
-			// differently, so the row spells out the one that applies here.
+			else if (failed) status = t("update.failed");
+			else if (payload === undefined) status = t("update.idle");
+			else if (!currentKnown) status = t("update.currentUnknown");
+			else if (payload.updateAvailable === true) status = `${t("update.available")} ${latest}`;
+			else status = t("update.uptodate");
+			const detail = currentKnown && !failed
+				? `${t("update.current")} ${formatVersion(payload.current)} · ${status}`
+				: status;
+			// The install belongs to the package manager now: each line below
+			// spells out the one route that applies here, and every one of them
+			// pins the version. A release younger than pnpm's
+			// `minimumReleaseAge` window is otherwise resolved back to the
+			// previous one — which is exactly what "I upgraded but the version
+			// did not move" looks like from the outside.
+			// Two different reasons to send someone to the package manager, and
+			// both need the steps spelled out:
+			//
+			//   - a newer version exists (`updateAvailable`);
+			//   - the install is not registered (`unregistered`) — the state a
+			//     self-updated tree is in: the files say 1.8.6, the lockfile
+			//     still records 1.7.0, and the next plugin operation would roll
+			//     it back. This is the one prompt that makes an in-app update
+			//     permanent, so it must not point at steps that are not shown.
+			const installTarget = installTargetVersion(payload, currentKnown);
 			const lines = [];
+			if (failed) {
+				// The Host's own `error` is one fixed English sentence; this
+				// line says what it means, without claiming a cause it cannot
+				// know (an offline machine and a mirror returning HTML look
+				// identical from here).
+				lines.push(h("div", { className: css.hint, key: "why" }, t("update.failedDetail")));
+			}
 			if (payload?.unregistered === true) {
 				lines.push(h("div", { className: css.hint, key: "unregistered" }, t("update.unregistered", {
 					recorded: formatVersion(payload.recorded),
 				})));
 			}
-			if (payload?.updateAvailable === true && latest !== undefined) {
-				lines.push(h("div", { className: css.hint, key: "howto" }, isDesktopShell()
-					? t("update.desktopGuidance")
-					: t("update.webGuidance", { profile: payload.profile ?? "web", version: latest })));
+			if (installTarget !== undefined && installTarget !== "") {
+				const version = packageVersion(installTarget);
+				let guidance;
+				if (isDesktopShell()) {
+					guidance = t("update.desktopGuidance", { version });
+				} else if (typeof payload.profile === "string" && payload.profile !== "") {
+					guidance = t("update.webGuidance", { profile: payload.profile, version });
+				} else {
+					// No profile name is known, so the command must not invent
+					// one: `--profile web` pointed at a profile that does not
+					// exist and failed for a reason that had nothing to do with
+					// the install.
+					guidance = t("update.webGuidancePlain", { version });
+				}
+				lines.push(h("div", { className: css.hint, key: "howto" }, guidance));
+				// Its own line: the steps above are what to do, this is why the
+				// version cannot be dropped — and a parcel of text this long
+				// reads as one dense block when it is glued onto the steps.
+				lines.push(h("div", { className: css.hint, key: "pinned" }, t("update.versionPinned")));
 			}
 			return h("div", { className: css.row }, [
 				h("div", { key: "text" }, [
@@ -2415,23 +2422,27 @@ window.__ModuleLoader__.load({
 					}
 					return false;
 				};
-								/** Route the Host answers a session's goal phase on. */
-				const GOAL_PHASE_PATH = "/notify-sounds/goal";
 				/** How often an active goal's phase is re-read while waiting for its end. */
 				const GOAL_POLL_MS = 2000;
 				/** Longest a goal may stay `active` before its watcher gives up. */
 				const GOAL_SETTLE_TIMEOUT_MS = 30 * 60 * 1000;
+				/** A single phase read gives up rather than parking the watcher for good. */
+				const GOAL_FETCH_TIMEOUT_MS = 5000;
 				/**
 				 * One goal phase from the Host, or undefined when it cannot be read.
 				 *
 				 * The Host owns the durable projection; this page's own store only
 				 * carries sessions it has opened, and a completion edge can belong to a
 				 * session this page never opened. Undefined keeps the old behaviour
-				 * (alert) for any runtime that does not answer the route.
+				 * (alert) for any runtime that does not answer the route — and for a
+				 * read that timed out, which is the same "cannot know, so speak" case.
 				 */
 				const readGoalPhase = async (sessionId) => {
 					try {
-						const response = await fetch(GOAL_PHASE_PATH + "?session=" + encodeURIComponent(sessionId), { method: "GET" });
+						const signal = typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function"
+							? AbortSignal.timeout(GOAL_FETCH_TIMEOUT_MS)
+							: undefined;
+						const response = await fetch(GOAL_PHASE_PATH + "?session=" + encodeURIComponent(sessionId), { method: "GET", signal });
 						if (!response.ok) return undefined;
 						const payload = await response.json();
 						return typeof payload?.phase === "string" ? payload.phase : undefined;
@@ -2471,7 +2482,13 @@ window.__ModuleLoader__.load({
 						goalWatchers.delete(sessionId);
 						clearTimeout(pollTimer);
 						clearTimeout(deadline);
-						if (chime) alertCompletion(sessionId);
+						// The decision to wait was taken at the edge, but the wait
+						// can last half an hour — long enough for the user to turn
+						// the switch OFF precisely because they did not want this
+						// chime. Re-read it here: a preference that was honoured
+						// when it arrived must not be ignored when it leaves.
+						const stillWanted = form.getSnapshot().value?.goalFinalOnly === true;
+						if (chime && stillWanted) alertCompletion(sessionId);
 					};
 					goalWatchers.set(sessionId, () => finish(false));
 					const poll = async () => {
@@ -2622,7 +2639,7 @@ window.__ModuleLoader__.load({
 					refreshFlash();
 					const value = form.getSnapshot().value;
 					if (value?.renotify !== true || pending.size === 0) return;
-					const minutes = Number.isFinite(value?.renotifyMinutes) ? Math.max(1, value.renotifyMinutes) : 5;
+					const minutes = renotifyInterval(value?.renotifyMinutes);
 					const intervalMs = minutes * 60000;
 					const now = Date.now();
 					const watching = pageIsWatched();
@@ -2753,21 +2770,12 @@ window.__ModuleLoader__.load({
 		exports.inject = inject;
 		// Shared contracts with the Host half, exported so the tests can
 		// cross-check the two spellings against each other (test/host.mjs):
-		// the preset id list behind the Config union, the focus route the
-		// notification click posts to, and the time parser every quiet-hours
-		// value must survive.
+		// the preset id list behind the Config union, the three routes this
+		// half calls, and the time parser every quiet-hours value must survive.
 		exports.SOUND_IDS = SOUND_IDS;
 		exports.FOCUS_PATH = FOCUS_PATH;
 		exports.UPDATE_CHECK_PATH = UPDATE_CHECK_PATH;
-		// Which update stages a retry can fix and which need a fresh install:
-		// the Host names a stage in every failure it reports, so this map is the
-		// one place the advice comes from, and the tests cross-check it against
-		// the stage words the dictionaries carry.
-		exports.UPDATE_STAGES = UPDATE_STAGES;
-		// The two composed messages, so the tests can assert the sentences a
-		// user actually reads rather than only the dictionary keys behind them.
-		exports.updateAppliedText = updateAppliedText;
-		exports.updateFailureText = updateFailureText;
+		exports.GOAL_PHASE_PATH = GOAL_PHASE_PATH;
 		// The alert election, so the tests can drive two pages against a stubbed
 		// storage and channel instead of hoping two real tabs cooperate.
 		exports.createAlertLeader = createAlertLeader;
@@ -2775,6 +2783,12 @@ window.__ModuleLoader__.load({
 		// scan apart from a strided one.
 		exports.normalizedGain = normalizedGain;
 		exports.timeOfDayToMinutes = timeOfDayToMinutes;
+		// The interval the row shows and the timer keeps, so a test can prove
+		// the two agree instead of reading the same number twice.
+		exports.renotifyInterval = renotifyInterval;
+		// Which version an install instruction names, so the "make this update
+		// permanent" case cannot silently become a dead end again.
+		exports.installTargetVersion = installTargetVersion;
 		return module.exports;
 	},
 });