dsh-reference-anything 0.4.0-alpha.1 → 0.4.0

package/README.md

@@ -14,7 +14,8 @@ One `@` for them all.
 
 <!-- SHIELD GROUP -->
 
-[![][github-version-shield]][github-version-link]
+[![][stable-version-shield]][stable-version-link]
+[![][alpha-version-shield]][alpha-version-link]
 [![][typescript-shield]][typescript-link]
 [![][dsh-plugin-shield]][repository-link]
 <br/>
@@ -70,15 +71,17 @@ Type `@`, search across enabled sources, and insert the selected reference into
 **The External conversations group** — and only that group — uses OpenCLI to reach AI chat sessions you are already logged into. By default it stores conversation titles locally and the agent fetches remote content on demand; an optional offline-mirror mode stores the latest complete bodies locally instead. **Local agent conversations need none of that**: those transcripts are already files on your own disk, so that group reads them directly, with no browser, no OpenCLI, and nothing mirrored.
 
 > [!IMPORTANT]
-> This version targets DSH `0.1.0-rc.8` or newer. It uses the native `@` trigger menu, official file/session Remotes, and the native Composer reference renderer.
-> The `0.3.x` line remains on the current stable DSH SDK (`0.1.0-rc.8 ~ 0.1.1-rc.2`). Due to breaking changes, starting with version `v0.4.0-alpha.1`, development releases will target DSH `v0.1.2-alpha.1` or newer, use the npm `alpha` tag, and no longer support older DSH releases.
+> v0.4.0 targets DSH `>=0.1.2-rc.1` and uses the RC1 Skills Remote, Session snapshot API, native `@` trigger menu, official file/session Remotes, and native Composer reference rendering. It is incompatible with DSH versions older than `0.1.2-rc.1`.
+> The `0.3.x` line remains on the current stable DSH SDK (`0.1.0-rc.8 ~ 0.1.1-rc.2`). Due to breaking changes, starting with version `v0.4.0`, development releases will target DSH `v0.1.2-rc.1` or newer, use the npm `alpha` tag, and no longer support older DSH releases.
 
 > [!NOTE]
 > DSH is currently in Beta, so its underlying capabilities and interfaces may change as it evolves. This plugin will adapt alongside those changes. Because of some current DSH limitations, parts of the implementation may not yet be ideal; we will continue to follow DSH updates and improve the plugin over time. See the relevant sections below for specific limitations and usage notes.
 
 ## 📰 News
 
-- **2026-08-28 · v0.3.3** — Improved dark-theme backgrounds for the reference menu and settings panels, added project screenshot metadata, and refreshed the documentation. This is the final release line targeting the current stable DeepSeek Harness SDK; the next development release, `v0.4.0-alpha.1`, will migrate to DeepSeek Harness `v0.1.2-alpha.1` under the npm `alpha` tag and will not support older DSH releases.
+- **2026-09-03 · v0.4.0** — **Compatibility: DSH `>=0.1.2-rc.1`.** Migrated Skills discovery to the DSH RC1 Skills Remote, restored historical reference grants through the RC1 Session snapshot API, and verified the plugin against DSH `0.1.2-rc.1`.
+
+- **2026-08-28 · v0.3.3** — Improved dark-theme backgrounds for the reference menu and settings panels, added project screenshot metadata, and refreshed the documentation. This is the final release line targeting the current stable DeepSeek Harness SDK; the next development release, `v0.4.0`, will migrate to DeepSeek Harness `v0.1.2-rc.1` under the npm `alpha` tag and will not support older DSH releases.
 - **2026-08-25 · v0.3.2** — Added local-agent conversation references, with detected session counts and custom-folder support. Web AI sync can be age-limited; cloud drives now support folder browsing and quick download-folder access. Settings include update notes, and local-agent tool details stay concise unless expanded.
 - **2026-08-20 · v0.3.0** — Completed the native DSH `@` integration: five independently configurable sources, official file/session Remotes, native Composer references with source logos, in-place expand/collapse and sync actions, and a one-click switch between Reference Anything and the official DSH `@` list. The legacy `dsh-file:` protocol and custom Composer interaction layer were removed.
 
@@ -107,7 +110,7 @@ Install the stable `0.3.x` line for the current stable DSH SDK:
 dsh plugin --profile web add dsh-reference-anything@latest
 ```
 
-Starting with `v0.4.0-alpha.1`, users on DSH `v0.1.2-alpha.1` can install the development line separately:
+Install `v0.4.0` on DSH `>=0.1.2-rc.1`:
 
 ```powershell
 dsh plugin --profile web add dsh-reference-anything@alpha
@@ -115,12 +118,21 @@ dsh plugin --profile web add dsh-reference-anything@alpha
 
 After the DSH alpha API stabilizes and the migration is verified, the `alpha` line will be promoted to `latest` and become the default installation.
 
-For development, install the published DSH rc.8 SDK dependencies, run the verification gate, then install the repository from a local path:
+To install the stable source locally with DSH `v0.1.0-rc.8 ~ v0.1.1-rc.2`:
+
+```powershell
+git switch main
+pnpm install
+npm run check
+dsh plugin --profile web add .
+```
+
+To install the alpha source locally with DSH `v0.1.2-rc.1` or newer:
 
 ```powershell
-# Run from the repository root
+git switch alpha
 pnpm install
-pnpm run check
+npm run check
 dsh plugin --profile web add .
 ```
 
@@ -334,8 +346,10 @@ This project is licensed under the [MIT License](./LICENSE). Third-party copyrig
 [typescript-link]: https://www.typescriptlang.org/
 [typescript-shield]: https://img.shields.io/badge/TypeScript-3178C6?labelColor=black&logo=typescript&logoColor=white&style=flat-square
 [dsh-plugin-shield]: https://img.shields.io/badge/DSH-plugin-ffffff?labelColor=black&style=flat-square
-[github-version-shield]: https://img.shields.io/github/package-json/v/Chael-Chael/dsh-reference-anything/main?color=369eff&label=version&labelColor=black&style=flat-square
-[github-version-link]: https://github.com/Chael-Chael/dsh-reference-anything/blob/main/package.json
+[stable-version-shield]: https://img.shields.io/github/package-json/v/Chael-Chael/dsh-reference-anything/main?color=369eff&label=stable&labelColor=black&style=flat-square
+[stable-version-link]: https://github.com/Chael-Chael/dsh-reference-anything/tree/main
+[alpha-version-shield]: https://img.shields.io/github/package-json/v/Chael-Chael/dsh-reference-anything/alpha?color=f59e0b&label=alpha&labelColor=black&style=flat-square
+[alpha-version-link]: https://github.com/Chael-Chael/dsh-reference-anything/tree/alpha
 [npm-downloads-shield]: https://img.shields.io/npm/dt/dsh-reference-anything?color=cb3837&label=downloads&labelColor=black&style=flat-square
 [npm-package-link]: https://www.npmjs.com/package/dsh-reference-anything
 [github-stars-link]: https://github.com/Chael-Chael/dsh-reference-anything/stargazers

package/lib/client.js

@@ -15236,7 +15236,7 @@ var REFERENCE_ANYTHING_REMOTE = {
   descriptors: REFERENCE_ANYTHING_INVOCATIONS
 };
 
-// C:/Users/27923/AppData/Local/Temp/deepseek-harness-e31103e4de9c4ca398a9185a0bcb651d/packages/context/file-reference/lib/types/grammar.js
+// node_modules/.pnpm/@deepseek-ai+dsh-file-refer_daf56328ce92b9c97bd2707e03352fe0/node_modules/@deepseek-ai/dsh-file-reference/lib/types/grammar.js
 function formatFileMention(candidate, preserveQuote) {
   const path = candidate.kind === "directory" ? `${candidate.path}/` : candidate.path;
   if (/[\u0000-\u001f\u007f-\u009f"]/u.test(path))
@@ -30343,10 +30343,10 @@ var inject = [
   "inputTriggers",
   "remote",
   "remote.commands",
+  "remote.skills",
   "remote.fileReferences",
   "remote.sessionReferenceResolver",
   "slots",
-  "connection",
   "locale",
   "sessions",
   "uiWorkspace"
@@ -30570,7 +30570,6 @@ function apply(ctx) {
   const sessions = ctx.sessions;
   const updateMenu = createPickerMenuUpdater(inputTriggers, sessions);
   const guardMenuActions = createPickerMenuActionGuard(inputTriggers, sessions);
-  const connection = ctx.get("connection");
   let sourceDisposers = [];
   let appliedPicker;
   const registerSources = (picker) => {
@@ -30611,7 +30610,7 @@ function apply(ctx) {
       return unwrap(await ctx.remote.commands.list(sessionId));
     }, t, optionsFor("commands"))));
     if (picker.skills.enabled) disposers.push(inputTriggers.registerSource(createSkillSource(async (sessionId, signal) => {
-      const { result } = await connection.api.skills.list({ sessionId }, signal);
+      const result = await ctx.remote.skills.list({ sessionId }, signal);
       if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
       return result.value.skills;
     }, t, optionsFor("skills"))));

package/lib/index.js

@@ -111,7 +111,7 @@ export default class ReferenceRuntime extends Service {
     assertSessionGranted(session, ref) {
         const key = ReferenceRuntime.grantKey(ref);
         if (session && !this.grants.get(String(session.id))?.has(key)) {
-            const mentioned = session.events.some(event => {
+            const mentioned = session.snapshotEvents().some(event => {
                 if (event.type === 'user/message')
                     return ReferenceRuntime.contentMentions(event.data.content, key);
                 if (event.type === 'tool/result')

package/lib/update.d.ts

@@ -17,7 +17,7 @@ export interface PackageUpdateResult {
 interface UpdateManagerOptions {
     packageRoot?: string;
     dshHome?: string;
-    fetchLatest?: (signal?: AbortSignal) => Promise<string>;
+    fetchLatest?: (signal?: AbortSignal, tag?: string) => Promise<string>;
     fetchReleaseNotes?: (version: string, signal?: AbortSignal) => Promise<Pick<PackageUpdateStatus, 'releaseNotes' | 'releaseUrl'>>;
     install?: (profileDir: string, version: string, signal?: AbortSignal) => Promise<void>;
     afterInstall?: (profileDir: string, version: string, signal?: AbortSignal) => Promise<void>;
@@ -41,7 +41,7 @@ export declare class PackageUpdateManager {
     update(signal?: AbortSignal): Promise<PackageUpdateResult>;
     private runCheck;
 }
-export declare function fetchLatestVersion(signal?: AbortSignal): Promise<string>;
+export declare function fetchLatestVersion(signal?: AbortSignal, tag?: string): Promise<string>;
 export declare function fetchGitHubReleaseNotes(version: string, signal?: AbortSignal): Promise<Pick<PackageUpdateStatus, 'releaseNotes' | 'releaseUrl'>>;
 export declare function readPackageVersion(packageRoot?: string): Promise<string>;
 /** Find the profile that owns this exact installed package, including pnpm links. */

package/lib/update.js

@@ -73,7 +73,8 @@ export class PackageUpdateManager {
         let currentVersion = '0.0.0';
         try {
             currentVersion = await readPackageVersion(this.packageRoot);
-            const latestVersion = await this.fetchLatest(signal);
+            const tag = currentVersion.split('-')[1]?.split('.')[0] ?? 'latest';
+            const latestVersion = await this.fetchLatest(signal, tag);
             const updateAvailable = compareVersions(latestVersion, currentVersion) > 0;
             let release = {};
             try {
@@ -103,9 +104,11 @@ export class PackageUpdateManager {
         }
     }
 }
-export async function fetchLatestVersion(signal) {
+export async function fetchLatestVersion(signal, tag = 'latest') {
+    if (!/^[0-9A-Za-z][0-9A-Za-z._-]*$/.test(tag))
+        throw new Error('refusing to request an invalid npm tag');
     const timeout = AbortSignal.timeout(CHECK_TIMEOUT_MS);
-    const response = await fetch(NPM_LATEST_URL, {
+    const response = await fetch(NPM_LATEST_URL.replace(/latest$/, tag), {
         // The registry's package metadata endpoint accepts the install-v1 media
         // type, but its `/latest` dist-tag endpoint responds 406 to that same
         // header. Request ordinary JSON because this endpoint returns one manifest.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-reference-anything",
-  "version": "0.4.0-alpha.1",
+  "version": "0.4.0",
   "description": "Reference commands, skills, workspace files, DSH sessions, local agent transcripts, cloud-drive files, and mirrored web-chat conversations from one DeepSeek Harness @ menu",
   "license": "MIT",
   "publishConfig": {
@@ -99,29 +99,29 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-api-remotes": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-attachment": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-api-session-controller": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-store": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-workspace": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-file-reference": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-llm": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-output-retention": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-session": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-session-reference": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-settings": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-storage-domain": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-tools": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-typert-registry": ">=0.1.2-alpha.1",
+    "@deepseek-ai/dsh-agent": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-remotes": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-store": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-workspace": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-file-reference": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-output-retention": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-reference": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-storage-domain": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-registry": ">=0.1.2-rc.1",
     "react": "^18.2.0"
   },
   "peerDependenciesMeta": {
@@ -179,31 +179,31 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-api-session-controller": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-store": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-file-reference": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-output-retention": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-session": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-session-reference": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-storage": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-storage-domain": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-typert-registry": "^0.1.2-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-file-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-output-retention": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-storage": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-storage-domain": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-registry": "0.1.2-rc.1",
     "@jackwener/opencli": "1.8.6",
     "@types/node": "^22.20.1",
     "@types/react": "^18.2.0",