dsh-theone 0.3.14 → 0.3.16

package/README.md

@@ -45,7 +45,7 @@ Each project gets its own background session that reasons, runs tools and compac
 
 - **Feels native.** Thinking streams in its usual place from the first token, and tool cards, approvals, questions, todo lists, retries and mid-reply steering all work as usual.
 - **Related work connects; unrelated work stays out.** Related topics share progress automatically and TheOne learns which ones belong together from how you use them. A topic's constraints (say, "budget figures stay out of the paper") are attached verbatim every time, so compaction never drops them.
-- **Gets better with use.** Say "wrong topic" or click **Move to…** in the directory, and similar messages go to the right place from then on.
+- **Gets better with use.** Say "wrong topic" or click **Move to…** in the directory, and TheOne learns which terms tie that kind of message to the right topic (one small model call), so similar messages go there from then on. The directory shows how often routing was kept as is.
 - **Your old sessions become a topic directory.** After install it reads your existing sessions in the background, turns them into topics grouped into workspaces, and you pick up where you left off.
 - **Nothing extra to configure.** No separate API key: routing and the background sessions use the model you chose in DSH. When TheOne is the selected model, a **Background** button beside the model menu shows which model does the routing and the work, and switches it.
 
@@ -57,7 +57,7 @@ Each project gets its own background session that reasons, runs tools and compac
 2. Open **Plugins → Add plugin**, paste `https://github.com/YunongDai2005/dsh-theone`, and install.
 3. Click **TheOne · Main chat** in the sidebar and start talking.
 
-From the command line: `dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`. Works with DSH `0.2.0-rc.2` and Node.js 24; the interface follows DSH's language (English / Simplified Chinese).
+From the command line: `dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`. Works with DSH `0.2.0-rc.2` and Node.js 24; the interface follows DSH's language (English / Simplified Chinese). Installing `dsh-theone` from npm also works, but DSH's package manager only accepts a version once it has been published for 24 hours, so the GitHub address gets new versions first. When an update is newer than that, the Update button explains it and can exempt TheOne alone so it installs right away.
 
 > Unofficial community project, maintained independently. It is not affiliated with or endorsed by DeepSeek.
 

package/README.zh.md

@@ -45,7 +45,7 @@
 
 - **和原生会话一模一样**：思考从第一个字起就在原位置，工具卡片、授权、提问、待办、重试、回答中途插话，全都照常。
 - **相关的事会互通，无关的事互不打扰**：相关话题自动共享进展，并从你的使用中学习哪些话题有关联；话题的约束（比如「预算数字不能写进论文」）每次都原样带上，压缩不会把它丢掉。
-- **越用越准**：说「分错了」或在目录里点「改到…」，TheOne 会记住，类似的消息以后直接分对。
+- **越用越准**：说「分错了」或在目录里点「改到…」，TheOne 会学到哪些词把这类消息和正确话题联系起来（只需一次很小的模型调用），类似的消息以后直接分对；话题目录里能看到分配的准确率。
 - **旧会话自动变成话题目录**：装上后它会在后台读取你已有的会话，整理成话题并按工作区分组，直接接着聊。
 - **零额外配置**：不用另填 API Key，路由和后台都用你在 DSH 里选好的模型。选中 TheOne 时，模型按钮旁边会出现 **后台** 按钮，显示并切换分配话题和干活用的模型。
 
@@ -57,7 +57,7 @@
 2. 打开 **插件 → 添加插件**，粘贴 `https://github.com/YunongDai2005/dsh-theone`，点击安装。
 3. 点击左侧 **TheOne · 主聊天**，开始说话。
 
-命令行安装：`dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`。兼容 DSH `0.2.0-rc.2` 与 Node.js 24；界面跟随 DSH 的语言（简体中文 / English）。
+命令行安装：`dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`。兼容 DSH `0.2.0-rc.2` 与 Node.js 24；界面跟随 DSH 的语言（简体中文 / English）。也可以从 npm 安装 `dsh-theone`，但 DSH 的包管理器只接受发布满 24 小时的版本，所以用 GitHub 地址安装能最早拿到新版本。遇到这种情况，「更新」按钮会说明原因，并可以只为 TheOne 放行、立即安装。
 
 > 非官方社区项目，由社区成员独立维护，与 DeepSeek 不存在隶属或背书关系。
 

package/dist/client-locales.d.ts

@@ -17,9 +17,21 @@ export declare const zh: {
     readonly 'update.available': "更新";
     readonly 'update.installing': "更新中…";
     readonly 'update.restart': "重启生效";
+    readonly 'update.waiting': "新版本";
+    readonly 'update.waitingHint': "有新版本 {latest}，发布还不满 24 小时。点击查看如何现在安装。";
+    readonly 'age.title': "新版本发布还不满 24 小时";
+    readonly 'age.why': "DSH 用 pnpm 安装插件，它默认只安装发布满 24 小时的版本，用来防范被篡改的新包。TheOne {version} 刚发布不久，所以暂时装不上。";
+    readonly 'age.allowHow': "你可以只为 TheOne 放行：在这个 DSH 配置的 pnpm 设置（pnpm-workspace.yaml）里把 dsh-theone 加入例外，然后立即安装。其他插件仍然受 24 小时规则保护。";
+    readonly 'age.cannot': "当前无法自动修改这个 DSH 配置的 pnpm 设置。可以等它满 24 小时，或改用 GitHub 地址重新安装。";
+    readonly 'age.readyAt': "不放行的话，{time} 之后就能直接更新。";
+    readonly 'age.wait': "等满 24 小时";
+    readonly 'age.allow': "放行并更新";
+    readonly 'age.ok': "知道了";
     readonly 'update.reloading': "正在重新加载…";
     readonly 'update.reloadingHint': "TheOne 正在用新版本重新加载，DSH 不需要重启；完成后页面会自动刷新。";
     readonly 'update.busy': "有回复正在进行，等它结束后再点更新。";
+    readonly 'update.tooNew': "DSH 的安全策略只允许安装发布满 24 小时的版本，这一版还太新。过一阵再点一次即可。";
+    readonly 'update.network': "连不上下载源，请检查网络后点击重试。";
     readonly 'update.failed': "更新失败";
     readonly 'update.hint': "当前 {current}，可更新到 {latest}。点击一键更新，不用重启 DSH。";
     readonly 'update.manualHint': "当前 {current}，最新 {latest}。这份插件不是从 GitHub 或 npm 安装的，请在「插件」页面重新安装。";

package/dist/client-locales.js

@@ -17,9 +17,21 @@ export const zh = {
     'update.available': '更新',
     'update.installing': '更新中…',
     'update.restart': '重启生效',
+    'update.waiting': "新版本",
+    'update.waitingHint': "有新版本 {latest}，发布还不满 24 小时。点击查看如何现在安装。",
+    'age.title': "新版本发布还不满 24 小时",
+    'age.why': "DSH 用 pnpm 安装插件，它默认只安装发布满 24 小时的版本，用来防范被篡改的新包。TheOne {version} 刚发布不久，所以暂时装不上。",
+    'age.allowHow': "你可以只为 TheOne 放行：在这个 DSH 配置的 pnpm 设置（pnpm-workspace.yaml）里把 dsh-theone 加入例外，然后立即安装。其他插件仍然受 24 小时规则保护。",
+    'age.cannot': "当前无法自动修改这个 DSH 配置的 pnpm 设置。可以等它满 24 小时，或改用 GitHub 地址重新安装。",
+    'age.readyAt': "不放行的话，{time} 之后就能直接更新。",
+    'age.wait': "等满 24 小时",
+    'age.allow': "放行并更新",
+    'age.ok': "知道了",
     'update.reloading': '正在重新加载…',
     'update.reloadingHint': 'TheOne 正在用新版本重新加载，DSH 不需要重启；完成后页面会自动刷新。',
     'update.busy': '有回复正在进行，等它结束后再点更新。',
+    'update.tooNew': 'DSH 的安全策略只允许安装发布满 24 小时的版本，这一版还太新。过一阵再点一次即可。',
+    'update.network': '连不上下载源，请检查网络后点击重试。',
     'update.failed': '更新失败',
     'update.hint': '当前 {current}，可更新到 {latest}。点击一键更新，不用重启 DSH。',
     'update.manualHint': '当前 {current}，最新 {latest}。这份插件不是从 GitHub 或 npm 安装的，请在「插件」页面重新安装。',
@@ -207,9 +219,21 @@ export const en = {
     'update.available': 'Update',
     'update.installing': 'Updating…',
     'update.restart': 'Restart to apply',
+    'update.waiting': "New version",
+    'update.waitingHint': "{latest} is out but less than 24 hours old. Click to see how to install it now.",
+    'age.title': "This version is less than 24 hours old",
+    'age.why': "DSH installs plugins with pnpm, which by default only installs versions published at least 24 hours ago, as a guard against tampered packages. TheOne {version} was published recently, so it cannot be installed yet.",
+    'age.allowHow': "You can exempt TheOne only: dsh-theone is added to the exceptions in this DSH profile's pnpm settings (pnpm-workspace.yaml) and installed now. Other plugins keep the 24-hour rule.",
+    'age.cannot': "This DSH profile's pnpm settings cannot be changed from here. Wait 24 hours, or reinstall from the GitHub address.",
+    'age.readyAt': "Without the exemption, you can update after {time}.",
+    'age.wait': "Wait 24 hours",
+    'age.allow': "Exempt and update",
+    'age.ok': "OK",
     'update.reloading': 'Reloading…',
     'update.reloadingHint': 'TheOne is reloading with the new version; DSH keeps running, and the page refreshes when it is done.',
     'update.busy': 'A reply is in progress. Update once it finishes.',
+    'update.tooNew': 'DSH only installs versions published at least 24 hours ago, as a safety policy, and this one is newer. Try again later.',
+    'update.network': 'Could not reach the download source. Check the network and click to retry.',
     'update.failed': 'Update failed',
     'update.hint': 'You have {current}; {latest} is available. Click to update without restarting DSH.',
     'update.manualHint': 'You have {current}; {latest} is available. This copy was not installed from GitHub or npm, so reinstall it from the Plugins page.',

package/dist/client.js

@@ -100,9 +100,21 @@ var zh = {
   "update.available": "\u66F4\u65B0",
   "update.installing": "\u66F4\u65B0\u4E2D\u2026",
   "update.restart": "\u91CD\u542F\u751F\u6548",
+  "update.waiting": "\u65B0\u7248\u672C",
+  "update.waitingHint": "\u6709\u65B0\u7248\u672C {latest}\uFF0C\u53D1\u5E03\u8FD8\u4E0D\u6EE1 24 \u5C0F\u65F6\u3002\u70B9\u51FB\u67E5\u770B\u5982\u4F55\u73B0\u5728\u5B89\u88C5\u3002",
+  "age.title": "\u65B0\u7248\u672C\u53D1\u5E03\u8FD8\u4E0D\u6EE1 24 \u5C0F\u65F6",
+  "age.why": "DSH \u7528 pnpm \u5B89\u88C5\u63D2\u4EF6\uFF0C\u5B83\u9ED8\u8BA4\u53EA\u5B89\u88C5\u53D1\u5E03\u6EE1 24 \u5C0F\u65F6\u7684\u7248\u672C\uFF0C\u7528\u6765\u9632\u8303\u88AB\u7BE1\u6539\u7684\u65B0\u5305\u3002TheOne {version} \u521A\u53D1\u5E03\u4E0D\u4E45\uFF0C\u6240\u4EE5\u6682\u65F6\u88C5\u4E0D\u4E0A\u3002",
+  "age.allowHow": "\u4F60\u53EF\u4EE5\u53EA\u4E3A TheOne \u653E\u884C\uFF1A\u5728\u8FD9\u4E2A DSH \u914D\u7F6E\u7684 pnpm \u8BBE\u7F6E\uFF08pnpm-workspace.yaml\uFF09\u91CC\u628A dsh-theone \u52A0\u5165\u4F8B\u5916\uFF0C\u7136\u540E\u7ACB\u5373\u5B89\u88C5\u3002\u5176\u4ED6\u63D2\u4EF6\u4ECD\u7136\u53D7 24 \u5C0F\u65F6\u89C4\u5219\u4FDD\u62A4\u3002",
+  "age.cannot": "\u5F53\u524D\u65E0\u6CD5\u81EA\u52A8\u4FEE\u6539\u8FD9\u4E2A DSH \u914D\u7F6E\u7684 pnpm \u8BBE\u7F6E\u3002\u53EF\u4EE5\u7B49\u5B83\u6EE1 24 \u5C0F\u65F6\uFF0C\u6216\u6539\u7528 GitHub \u5730\u5740\u91CD\u65B0\u5B89\u88C5\u3002",
+  "age.readyAt": "\u4E0D\u653E\u884C\u7684\u8BDD\uFF0C{time} \u4E4B\u540E\u5C31\u80FD\u76F4\u63A5\u66F4\u65B0\u3002",
+  "age.wait": "\u7B49\u6EE1 24 \u5C0F\u65F6",
+  "age.allow": "\u653E\u884C\u5E76\u66F4\u65B0",
+  "age.ok": "\u77E5\u9053\u4E86",
   "update.reloading": "\u6B63\u5728\u91CD\u65B0\u52A0\u8F7D\u2026",
   "update.reloadingHint": "TheOne \u6B63\u5728\u7528\u65B0\u7248\u672C\u91CD\u65B0\u52A0\u8F7D\uFF0CDSH \u4E0D\u9700\u8981\u91CD\u542F\uFF1B\u5B8C\u6210\u540E\u9875\u9762\u4F1A\u81EA\u52A8\u5237\u65B0\u3002",
   "update.busy": "\u6709\u56DE\u590D\u6B63\u5728\u8FDB\u884C\uFF0C\u7B49\u5B83\u7ED3\u675F\u540E\u518D\u70B9\u66F4\u65B0\u3002",
+  "update.tooNew": "DSH \u7684\u5B89\u5168\u7B56\u7565\u53EA\u5141\u8BB8\u5B89\u88C5\u53D1\u5E03\u6EE1 24 \u5C0F\u65F6\u7684\u7248\u672C\uFF0C\u8FD9\u4E00\u7248\u8FD8\u592A\u65B0\u3002\u8FC7\u4E00\u9635\u518D\u70B9\u4E00\u6B21\u5373\u53EF\u3002",
+  "update.network": "\u8FDE\u4E0D\u4E0A\u4E0B\u8F7D\u6E90\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u540E\u70B9\u51FB\u91CD\u8BD5\u3002",
   "update.failed": "\u66F4\u65B0\u5931\u8D25",
   "update.hint": "\u5F53\u524D {current}\uFF0C\u53EF\u66F4\u65B0\u5230 {latest}\u3002\u70B9\u51FB\u4E00\u952E\u66F4\u65B0\uFF0C\u4E0D\u7528\u91CD\u542F DSH\u3002",
   "update.manualHint": "\u5F53\u524D {current}\uFF0C\u6700\u65B0 {latest}\u3002\u8FD9\u4EFD\u63D2\u4EF6\u4E0D\u662F\u4ECE GitHub \u6216 npm \u5B89\u88C5\u7684\uFF0C\u8BF7\u5728\u300C\u63D2\u4EF6\u300D\u9875\u9762\u91CD\u65B0\u5B89\u88C5\u3002",
@@ -290,9 +302,21 @@ var en = {
   "update.available": "Update",
   "update.installing": "Updating\u2026",
   "update.restart": "Restart to apply",
+  "update.waiting": "New version",
+  "update.waitingHint": "{latest} is out but less than 24 hours old. Click to see how to install it now.",
+  "age.title": "This version is less than 24 hours old",
+  "age.why": "DSH installs plugins with pnpm, which by default only installs versions published at least 24 hours ago, as a guard against tampered packages. TheOne {version} was published recently, so it cannot be installed yet.",
+  "age.allowHow": "You can exempt TheOne only: dsh-theone is added to the exceptions in this DSH profile's pnpm settings (pnpm-workspace.yaml) and installed now. Other plugins keep the 24-hour rule.",
+  "age.cannot": "This DSH profile's pnpm settings cannot be changed from here. Wait 24 hours, or reinstall from the GitHub address.",
+  "age.readyAt": "Without the exemption, you can update after {time}.",
+  "age.wait": "Wait 24 hours",
+  "age.allow": "Exempt and update",
+  "age.ok": "OK",
   "update.reloading": "Reloading\u2026",
   "update.reloadingHint": "TheOne is reloading with the new version; DSH keeps running, and the page refreshes when it is done.",
   "update.busy": "A reply is in progress. Update once it finishes.",
+  "update.tooNew": "DSH only installs versions published at least 24 hours ago, as a safety policy, and this one is newer. Try again later.",
+  "update.network": "Could not reach the download source. Check the network and click to retry.",
   "update.failed": "Update failed",
   "update.hint": "You have {current}; {latest} is available. Click to update without restarting DSH.",
   "update.manualHint": "You have {current}; {latest} is available. This copy was not installed from GitHub or npm, so reinstall it from the Plugins page.",
@@ -551,9 +575,14 @@ function apply(ctx) {
       updateListeners.delete(listener);
     };
   };
-  const readUpdate = async (method = "GET") => {
+  const readUpdate = async (method = "GET", body) => {
     try {
-      const response = await fetch("/api/theone/update", { method, signal: lifetime.signal, cache: "no-store" });
+      const response = await fetch("/api/theone/update", {
+        method,
+        signal: lifetime.signal,
+        cache: "no-store",
+        ...body ? { headers: { "content-type": "application/json" }, body: JSON.stringify(body) } : {}
+      });
       if (response.ok || response.status === 409) setUpdate(await response.json());
       if (update?.state === "reloading") void awaitReload(update.current);
     } catch {
@@ -580,16 +609,78 @@ function apply(ctx) {
     }, 6 * 36e5);
     return () => clearInterval(timer);
   });
+  function openReleaseAgeDialog(status) {
+    const backdrop = document.createElement("div");
+    backdrop.className = "theone-dialog-backdrop";
+    backdrop.setAttribute("translate", "no");
+    const card = document.createElement("div");
+    card.className = "theone-dialog";
+    card.setAttribute("role", "dialog");
+    card.setAttribute("aria-modal", "true");
+    const title = document.createElement("h2");
+    title.id = "theone-dialog-title";
+    title.textContent = t("age.title");
+    card.setAttribute("aria-labelledby", title.id);
+    const paragraph = (text, className) => {
+      const p = document.createElement("p");
+      p.textContent = text;
+      if (className) p.className = className;
+      return p;
+    };
+    const version = status.waiting?.version ?? status.latest ?? "";
+    card.append(title, paragraph(t("age.why", { version })), paragraph(t(status.canExempt ? "age.allowHow" : "age.cannot")));
+    if (status.waiting) card.append(paragraph(t("age.readyAt", { time: new Date(status.waiting.readyAt).toLocaleString(localeSnapshot().active, { month: "numeric", day: "numeric", hour: "2-digit", minute: "2-digit" }) }), "theone-dialog-note"));
+    const footer = document.createElement("div");
+    footer.className = "theone-dialog-actions";
+    const button = (text, primary, act) => {
+      const element = document.createElement("button");
+      element.type = "button";
+      element.textContent = text;
+      if (primary) element.className = "theone-dialog-primary";
+      element.addEventListener("click", act);
+      footer.append(element);
+      return element;
+    };
+    const close = () => {
+      backdrop.remove();
+      document.removeEventListener("keydown", keydown, true);
+    };
+    const keydown = (event) => {
+      if (event.key === "Escape") {
+        event.preventDefault();
+        close();
+      }
+    };
+    button(t(status.canExempt ? "age.wait" : "age.ok"), !status.canExempt, close);
+    const allow = status.canExempt ? button(t("age.allow"), true, () => {
+      close();
+      setUpdate({ ...status, state: "installing", error: void 0 });
+      void readUpdate("POST", { allowFresh: true });
+    }) : void 0;
+    card.append(footer);
+    backdrop.append(card);
+    backdrop.addEventListener("pointerdown", (event) => {
+      if (event.target === backdrop) close();
+    });
+    document.addEventListener("keydown", keydown, true);
+    document.body.append(backdrop);
+    (allow ?? footer.querySelector("button"))?.focus();
+  }
   function UpdateButton() {
     const t2 = useText();
     const status = (0, import_react.useSyncExternalStore)(subscribeUpdate, () => update);
-    if (!status || !status.available && !status.state) return null;
-    const label = status.state === "installing" ? t2("update.installing") : status.state === "reloading" ? t2("update.reloading") : status.state === "restart" ? t2("update.restart") : status.state === "failed" ? t2("update.failed") : t2("update.available");
-    const title = status.error === "GATEWAY_BUSY" ? t2("update.busy") : status.state === "reloading" ? t2("update.reloadingHint") : status.state === "restart" ? t2("update.restartHint") : status.state === "failed" ? t2("update.failedHint", { error: status.error ?? "" }) : status.installable ? t2("update.hint", { current: status.current, latest: status.latest ?? "" }) : t2("update.manualHint", { current: status.current, latest: status.latest ?? "" });
+    const waiting = !!status?.waiting && !status.available && !status.state;
+    if (!status || !status.available && !status.state && !waiting) return null;
+    const label = waiting ? t2("update.waiting") : status.state === "installing" ? t2("update.installing") : status.state === "reloading" ? t2("update.reloading") : status.state === "restart" ? t2("update.restart") : status.state === "failed" ? t2("update.failed") : t2("update.available");
+    const title = waiting ? t2("update.waitingHint", { latest: status.waiting.version }) : status.error === "GATEWAY_BUSY" ? t2("update.busy") : status.state === "reloading" ? t2("update.reloadingHint") : status.state === "restart" ? t2("update.restartHint") : status.state === "failed" ? status.error === "MINIMUM_RELEASE_AGE" ? t2("update.tooNew") : status.error === "NETWORK" ? t2("update.network") : t2("update.failedHint", { error: status.error ?? "" }) : status.installable ? t2("update.hint", { current: status.current, latest: status.latest ?? "" }) : t2("update.manualHint", { current: status.current, latest: status.latest ?? "" });
     const act = (event) => {
       event.preventDefault();
       event.stopPropagation();
       if (status.state === "installing" || status.state === "reloading" || status.state === "restart") return;
+      if (waiting || status.state === "failed" && status.error === "MINIMUM_RELEASE_AGE") {
+        openReleaseAgeDialog(status);
+        return;
+      }
       if (!status.installable) {
         window.open("https://github.com/YunongDai2005/dsh-theone#readme", "_blank", "noopener");
         return;
@@ -605,7 +696,7 @@ function apply(ctx) {
         tabIndex: 0,
         title,
         "aria-label": title,
-        "data-state": status.state ?? "available",
+        "data-state": waiting ? "waiting" : status.state ?? "available",
         onClick: act,
         onPointerDown: (event) => event.stopPropagation(),
         onKeyDown: (event) => {
@@ -614,7 +705,7 @@ function apply(ctx) {
       },
       status.state === "installing" || status.state === "reloading" ? (0, import_react.createElement)("span", { className: "theone-update-spin", "aria-hidden": true }) : null,
       label,
-      !status.state && status.latest ? (0, import_react.createElement)("small", null, `v${status.latest}`) : null
+      !status.state && (waiting ? status.waiting.version : status.latest) ? (0, import_react.createElement)("small", null, `v${waiting ? status.waiting.version : status.latest}`) : null
     );
   }
   const symbol = () => (0, import_react.createElement)(
@@ -1714,6 +1805,18 @@ button:has(.theone-nav[data-wide=true])>span:has(.theone-nav){flex:1;min-width:0
 .theone-update small{font-size:11px;opacity:.75}
 .theone-update[data-state=installing],.theone-update[data-state=reloading],.theone-update[data-state=restart]{cursor:default}
 .theone-update[data-state=failed]{color:#d9480f;border-color:#d9480f66;background:#d9480f14}
+.theone-update[data-state=waiting]{opacity:.8;border-style:dashed}
+.theone-dialog-backdrop{position:fixed;inset:0;z-index:10001;display:flex;align-items:center;justify-content:center;padding:16px;background:#0008}
+.theone-dialog{width:min(440px,100%);box-sizing:border-box;padding:22px 22px 18px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:16px;background:var(--dsw-specific-sidebar-fill,#232326);color:var(--dsw-alias-label-primary,#e8e8ea);box-shadow:0 16px 48px #0005;font:inherit;font-size:14px;line-height:1.65}
+.theone-dialog h2{margin:0 0 10px;font-size:17px}
+.theone-dialog p{margin:0 0 10px;color:var(--dsw-alias-label-secondary,#a0a0a6)}
+.theone-dialog .theone-dialog-note{font-size:13px}
+.theone-dialog-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:16px}
+.theone-dialog-actions button{padding:8px 14px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:9px;background:transparent;color:inherit;font:inherit;cursor:pointer}
+.theone-dialog-actions button:hover{background:var(--dsw-alias-interactive-bg-hover,#ffffff12)}
+.theone-dialog-actions .theone-dialog-primary{border-color:transparent;background:#3b6fb0;color:#fff}
+.theone-dialog-actions .theone-dialog-primary:hover{background:#4a7fc0}
+.theone-dialog-actions button:focus-visible{outline:2px solid #4a7fc0;outline-offset:2px}
 .theone-update-spin{width:10px;height:10px;border-radius:50%;border:1.5px solid currentColor;border-right-color:transparent;animation:theone-spin 800ms linear infinite}
 @keyframes theone-spin{to{transform:rotate(360deg)}}
 @media(prefers-reduced-motion:reduce){.theone-update-spin{animation:none}}

package/dist/index.js

@@ -205,9 +205,10 @@ export default class TheOne extends Service {
         }
         descriptors ??= config.contextsPath ? readDescriptors(config.contextsPath) : [];
         this.gatewayDirectory = resolve(dirname(databasePath), 'gateway');
+        const profileDir = () => ctx.profileContext?.dir;
         this.updater = new Updater(readOwnVersion(), () => {
             // The profile's package.json records how this plugin was installed (GitHub, npm or a local path).
-            const dir = ctx.profileContext?.dir;
+            const dir = profileDir();
             if (!dir)
                 return undefined;
             try {
@@ -216,7 +217,7 @@ export default class TheOne extends Service {
             catch {
                 return undefined;
             }
-        });
+        }, fetch, Date.now, () => { const dir = profileDir(); return dir ? join(dir, 'pnpm-workspace.yaml') : undefined; });
         ctx.effect(() => async () => {
             try {
                 await Promise.all([...this.workers.values()].map(handle => handle.dispose()));
@@ -628,6 +629,18 @@ export default class TheOne extends Service {
                     const manager = this.ctx.get('pluginManager');
                     // With DSH's hot reload, switching the bundle off and on loads the new version without a DSH restart.
                     const live = !!this.ctx.get('hmr') && typeof manager?.setBundleEnabled === 'function';
+                    if (request.method === 'POST') {
+                        // The user chose to let TheOne skip pnpm's one-day wait; only this package is exempted.
+                        const body = await request.json().catch(() => ({}));
+                        if (body?.allowFresh === true) {
+                            try {
+                                this.updater.allowFresh();
+                            }
+                            catch (error) {
+                                return Response.json({ ...await this.updater.status(), error: error instanceof Error && /^[A-Z_]+$/.test(error.message) ? error.message : 'EXEMPT_FAILED' }, { status: 400 });
+                            }
+                        }
+                    }
                     const status = request.method === 'POST'
                         ? await this.updater.install(manager, live ? bundle => reloadBundle(manager, bundle) : undefined)
                         : await this.updater.status(new URL(request.url).searchParams.has('force'));

package/dist/update.d.ts

@@ -12,8 +12,30 @@ export interface UpdateStatus {
     source: UpdateSource;
     /** installing → reloading (TheOne restarts itself; DSH keeps running), restart (applies after DSH restarts) or failed. */
     state?: 'installing' | 'reloading' | 'restart' | 'failed';
+    /** Why it failed: MINIMUM_RELEASE_AGE, NETWORK, or the plugin manager's own code. */
     error?: string;
+    /** A newer npm version that pnpm will accept only once it is a day old, and when that is. */
+    waiting?: {
+        version: string;
+        readyAt: number;
+    };
+    /** TheOne is exempt from that rule in this DSH profile, so fresh versions install right away. */
+    exempt?: boolean;
+    /** Whether this profile's pnpm settings can be edited to grant that exemption. */
+    canExempt?: boolean;
 }
+/** The packages a pnpm-workspace.yaml exempts from the release-age rule (block or flow list). */
+export declare function releaseAgeExemptions(text: string): string[];
+/**
+ * The same pnpm-workspace.yaml with `name` added to the release-age exemptions, every other line
+ * kept as it was. Throws for a layout it does not recognise rather than guess.
+ */
+export declare function withReleaseAgeExemption(text: string, name?: string): string;
+/**
+ * pnpm, which DSH installs plugins with, refuses npm versions published less than a day ago
+ * (minimumReleaseAge, a supply-chain safeguard). Updates from npm wait until then.
+ */
+export declare const RELEASE_AGE_MS: number;
 /** The DSH plugin manager's install call, as TheOne uses it. */
 export interface PluginInstaller {
     installBundle(spec: string, options?: {
@@ -25,6 +47,9 @@ export interface PluginInstaller {
             code?: string;
             message?: string;
         } | unknown;
+        packageResult?: {
+            output?: string;
+        };
     }>;
 }
 /** Compare dotted versions numerically; a pre-release sorts before its release. */
@@ -37,11 +62,20 @@ export declare class Updater {
     private readonly spec;
     private readonly fetcher;
     private readonly now;
+    private readonly workspace;
     private checked?;
     private state?;
     private error?;
     private pending?;
-    constructor(current: string, spec: () => string | undefined, fetcher?: typeof fetch, now?: () => number);
+    /**
+     * @param workspace - this DSH profile's pnpm-workspace.yaml, where pnpm reads the release-age
+     * exemptions; undefined when the profile is unknown.
+     */
+    constructor(current: string, spec: () => string | undefined, fetcher?: typeof fetch, now?: () => number, workspace?: () => string | undefined);
+    /** Whether pnpm in this profile already lets TheOne install versions under a day old. */
+    get exempt(): boolean;
+    /** Exempt TheOne, and only TheOne, from pnpm's release-age rule in this profile. */
+    allowFresh(): void;
     get source(): UpdateSource;
     /** The latest known status; checks again at most every six hours (or now, when forced). */
     status(force?: boolean): Promise<UpdateStatus>;

package/dist/update.js

@@ -1,5 +1,53 @@
+import { readFileSync, renameSync, writeFileSync } from 'node:fs';
 export const REPOSITORY = 'YunongDai2005/dsh-theone';
 export const PACKAGE_NAME = 'dsh-theone';
+const EXCLUDE_KEY = 'minimumReleaseAgeExclude';
+const unquote = (value) => value.trim().replace(/^['"]|['"]$/g, '');
+/** The packages a pnpm-workspace.yaml exempts from the release-age rule (block or flow list). */
+export function releaseAgeExemptions(text) {
+    const lines = text.split(/\r?\n/);
+    const index = lines.findIndex(line => line.startsWith(`${EXCLUDE_KEY}:`));
+    if (index < 0)
+        return [];
+    const inline = lines[index].slice(EXCLUDE_KEY.length + 1).trim();
+    if (inline.startsWith('['))
+        return inline.replace(/^\[|\]$/g, '').split(',').map(unquote).filter(Boolean);
+    const items = [];
+    for (let line = index + 1; line < lines.length && /^\s+-/.test(lines[line]); line++)
+        items.push(unquote(lines[line].replace(/^\s+-\s*/, '')));
+    return items;
+}
+/**
+ * The same pnpm-workspace.yaml with `name` added to the release-age exemptions, every other line
+ * kept as it was. Throws for a layout it does not recognise rather than guess.
+ */
+export function withReleaseAgeExemption(text, name = PACKAGE_NAME) {
+    if (releaseAgeExemptions(text).includes(name))
+        return text;
+    const newline = text.includes('\r\n') ? '\r\n' : '\n';
+    const lines = text.split(/\r?\n/);
+    const index = lines.findIndex(line => line.startsWith(`${EXCLUDE_KEY}:`));
+    if (index < 0)
+        return `${text}${text && !/\r?\n$/.test(text) ? newline : ''}${EXCLUDE_KEY}:${newline}  - ${name}${newline}`;
+    const inline = lines[index].slice(EXCLUDE_KEY.length + 1).trim();
+    if (inline.startsWith('[') && inline.endsWith(']')) {
+        lines[index] = `${EXCLUDE_KEY}: [${[...releaseAgeExemptions(text), name].map(item => JSON.stringify(item)).join(', ')}]`;
+        return lines.join(newline);
+    }
+    if (inline)
+        throw new Error('UNRECOGNISED_WORKSPACE');
+    let end = index + 1;
+    while (end < lines.length && /^\s+-/.test(lines[end]))
+        end++;
+    const indent = end > index + 1 ? lines[index + 1].match(/^\s+/)[0] : '  ';
+    lines.splice(end, 0, `${indent}- ${name}`);
+    return lines.join(newline);
+}
+/**
+ * pnpm, which DSH installs plugins with, refuses npm versions published less than a day ago
+ * (minimumReleaseAge, a supply-chain safeguard). Updates from npm wait until then.
+ */
+export const RELEASE_AGE_MS = 24 * 3600000;
 /** Compare dotted versions numerically; a pre-release sorts before its release. */
 export function compareVersions(a, b) {
     const parse = (value) => {
@@ -33,21 +81,64 @@ export class Updater {
     spec;
     fetcher;
     now;
+    workspace;
     checked;
     state;
     error;
     pending;
-    constructor(current, spec, fetcher = fetch, now = Date.now) {
+    /**
+     * @param workspace - this DSH profile's pnpm-workspace.yaml, where pnpm reads the release-age
+     * exemptions; undefined when the profile is unknown.
+     */
+    constructor(current, spec, fetcher = fetch, now = Date.now, workspace = () => undefined) {
         this.current = current;
         this.spec = spec;
         this.fetcher = fetcher;
         this.now = now;
+        this.workspace = workspace;
+    }
+    /** Whether pnpm in this profile already lets TheOne install versions under a day old. */
+    get exempt() {
+        const file = this.workspace();
+        if (!file)
+            return false;
+        try {
+            return releaseAgeExemptions(readFileSync(file, 'utf8')).includes(PACKAGE_NAME);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Exempt TheOne, and only TheOne, from pnpm's release-age rule in this profile. */
+    allowFresh() {
+        const file = this.workspace();
+        if (!file)
+            throw new Error('NO_PROFILE');
+        let text = '';
+        try {
+            text = readFileSync(file, 'utf8');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const next = withReleaseAgeExemption(text);
+        if (next === text)
+            return;
+        writeFileSync(`${file}.theone-tmp`, next, { mode: 0o600 });
+        renameSync(`${file}.theone-tmp`, file);
+        if (this.state === 'failed') {
+            this.state = undefined;
+            this.error = undefined;
+        }
     }
     get source() { return installSource(this.spec()); }
     /** The latest known status; checks again at most every six hours (or now, when forced). */
     async status(force = false) {
         const age = this.checked ? this.now() - this.checked.at : Infinity;
-        if (this.state !== 'installing' && (force || age > (this.checked?.error ? HOUR / 2 : 6 * HOUR))) {
+        // A version waiting out pnpm's release age is looked at again as soon as it qualifies.
+        const due = !!this.checked?.waiting && this.now() >= this.checked.waiting.readyAt;
+        if (this.state !== 'installing' && (force || due || age > (this.checked?.error ? HOUR / 2 : 6 * HOUR))) {
             this.pending ??= this.check().finally(() => { this.pending = undefined; });
             await this.pending;
         }
@@ -61,7 +152,7 @@ export class Updater {
         const status = await this.status();
         if (!status.available || !status.installable || !installer || this.state === 'installing' || this.state === 'reloading' || this.state === 'restart')
             return this.snapshot();
-        const spec = this.source === 'github' ? `github:${REPOSITORY}#${this.checked.sha}` : `${PACKAGE_NAME}@${this.checked.latest}`;
+        const spec = this.source === 'github' ? `github:${REPOSITORY}#${this.checked.sha}` : `${PACKAGE_NAME}@${status.latest}`;
         this.state = 'installing';
         this.error = undefined;
         try {
@@ -73,7 +164,11 @@ export class Updater {
             else {
                 this.state = 'failed';
                 const error = result.error;
-                this.error = String(error?.code ?? error?.message ?? result.application).slice(0, 120);
+                // pnpm's own reasons are clearer than the plugin manager's generic failure.
+                const output = `${result.packageResult?.output ?? ''}\n${error?.message ?? ''}`;
+                this.error = /MINIMUM_RELEASE_AGE/.test(output) ? 'MINIMUM_RELEASE_AGE'
+                    : /UND_ERR|ECONNRESET|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|ERR_PNPM_META_FETCH_FAIL|network/i.test(output) ? 'NETWORK'
+                        : String(error?.code ?? error?.message ?? result.application).slice(0, 120);
             }
         }
         catch (error) {
@@ -83,10 +178,15 @@ export class Updater {
         return this.snapshot();
     }
     snapshot() {
-        const latest = this.checked?.latest;
+        const exempt = this.source === 'npm' && this.exempt;
+        // Exempt from the release-age rule, the newest version is ready as soon as it is published.
+        const fresh = this.checked?.waiting && compareVersions(this.checked.waiting.version, this.current) > 0 ? this.checked.waiting : undefined;
+        const latest = exempt && fresh ? fresh.version : this.checked?.latest;
         const source = this.source;
         const available = !!latest && compareVersions(latest, this.current) > 0;
-        return { current: this.current, ...(latest ? { latest } : {}), available, source,
+        const waiting = fresh && !exempt ? { waiting: fresh } : {};
+        return { current: this.current, ...(latest ? { latest } : {}), available, source, ...waiting,
+            ...(source === 'npm' ? { exempt, canExempt: !!this.workspace() } : {}),
             installable: available && (source === 'npm' || (source === 'github' && !!this.checked?.sha)),
             ...(this.state ? { state: this.state } : {}), ...(this.error ?? this.checked?.error ? { error: this.error ?? this.checked?.error } : {}) };
     }
@@ -94,10 +194,19 @@ export class Updater {
         const signal = AbortSignal.timeout(10000);
         try {
             if (this.source === 'npm') {
-                const response = await this.fetcher(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, { signal });
+                const response = await this.fetcher(`https://registry.npmjs.org/${PACKAGE_NAME}`, { signal });
                 if (!response.ok)
                     throw new Error(`npm ${response.status}`);
-                this.checked = { at: this.now(), latest: String((await response.json()).version ?? '') || undefined };
+                const packument = await response.json();
+                // Offer the newest release pnpm will accept now; a newer one waits until it is a day old.
+                const now = this.now();
+                const releases = Object.keys(packument.versions ?? {}).filter(version => /^\d+\.\d+\.\d+$/.test(version))
+                    .map(version => ({ version, at: Date.parse(packument.time?.[version] ?? '') }))
+                    .filter(release => Number.isFinite(release.at)).sort((a, b) => compareVersions(b.version, a.version));
+                const ready = releases.find(release => now - release.at >= RELEASE_AGE_MS);
+                const newest = releases[0];
+                this.checked = { at: now, ...(ready ? { latest: ready.version } : {}),
+                    ...(newest && newest !== ready ? { waiting: { version: newest.version, readyAt: newest.at + RELEASE_AGE_MS } } : {}) };
                 return;
             }
             // A GitHub install updates to the exact commit whose version was read.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-theone",
-  "version": "0.3.14",
+  "version": "0.3.16",
   "private": false,
   "type": "module",
   "description": "Automatic context routing for DeepSeek Harness",