dsh-theone 0.3.15 → 0.3.16

package/README.md

@@ -57,7 +57,7 @@ Each project gets its own background session that reasons, runs tools and compac
 2. Open **Plugins → Add plugin**, paste `https://github.com/YunongDai2005/dsh-theone`, and install.
 3. Click **TheOne · Main chat** in the sidebar and start talking.
 
-From the command line: `dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`. Works with DSH `0.2.0-rc.2` and Node.js 24; the interface follows DSH's language (English / Simplified Chinese). Installing `dsh-theone` from npm also works, but DSH's package manager only accepts a version once it has been published for 24 hours, so the GitHub address gets new versions first.
+From the command line: `dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`. Works with DSH `0.2.0-rc.2` and Node.js 24; the interface follows DSH's language (English / Simplified Chinese). Installing `dsh-theone` from npm also works, but DSH's package manager only accepts a version once it has been published for 24 hours, so the GitHub address gets new versions first. When an update is newer than that, the Update button explains it and can exempt TheOne alone so it installs right away.
 
 > Unofficial community project, maintained independently. It is not affiliated with or endorsed by DeepSeek.
 

package/README.zh.md

@@ -57,7 +57,7 @@
 2. 打开 **插件 → 添加插件**，粘贴 `https://github.com/YunongDai2005/dsh-theone`，点击安装。
 3. 点击左侧 **TheOne · 主聊天**，开始说话。
 
-命令行安装：`dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`。兼容 DSH `0.2.0-rc.2` 与 Node.js 24；界面跟随 DSH 的语言（简体中文 / English）。也可以从 npm 安装 `dsh-theone`，但 DSH 的包管理器只接受发布满 24 小时的版本，所以用 GitHub 地址安装能最早拿到新版本。
+命令行安装：`dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`。兼容 DSH `0.2.0-rc.2` 与 Node.js 24；界面跟随 DSH 的语言（简体中文 / English）。也可以从 npm 安装 `dsh-theone`，但 DSH 的包管理器只接受发布满 24 小时的版本，所以用 GitHub 地址安装能最早拿到新版本。遇到这种情况，「更新」按钮会说明原因，并可以只为 TheOne 放行、立即安装。
 
 > 非官方社区项目，由社区成员独立维护，与 DeepSeek 不存在隶属或背书关系。
 

package/dist/client-locales.d.ts

@@ -17,6 +17,16 @@ export declare const zh: {
     readonly 'update.available': "更新";
     readonly 'update.installing': "更新中…";
     readonly 'update.restart': "重启生效";
+    readonly 'update.waiting': "新版本";
+    readonly 'update.waitingHint': "有新版本 {latest}，发布还不满 24 小时。点击查看如何现在安装。";
+    readonly 'age.title': "新版本发布还不满 24 小时";
+    readonly 'age.why': "DSH 用 pnpm 安装插件，它默认只安装发布满 24 小时的版本，用来防范被篡改的新包。TheOne {version} 刚发布不久，所以暂时装不上。";
+    readonly 'age.allowHow': "你可以只为 TheOne 放行：在这个 DSH 配置的 pnpm 设置（pnpm-workspace.yaml）里把 dsh-theone 加入例外，然后立即安装。其他插件仍然受 24 小时规则保护。";
+    readonly 'age.cannot': "当前无法自动修改这个 DSH 配置的 pnpm 设置。可以等它满 24 小时，或改用 GitHub 地址重新安装。";
+    readonly 'age.readyAt': "不放行的话，{time} 之后就能直接更新。";
+    readonly 'age.wait': "等满 24 小时";
+    readonly 'age.allow': "放行并更新";
+    readonly 'age.ok': "知道了";
     readonly 'update.reloading': "正在重新加载…";
     readonly 'update.reloadingHint': "TheOne 正在用新版本重新加载，DSH 不需要重启；完成后页面会自动刷新。";
     readonly 'update.busy': "有回复正在进行，等它结束后再点更新。";

package/dist/client-locales.js

@@ -17,6 +17,16 @@ export const zh = {
     'update.available': '更新',
     'update.installing': '更新中…',
     'update.restart': '重启生效',
+    'update.waiting': "新版本",
+    'update.waitingHint': "有新版本 {latest}，发布还不满 24 小时。点击查看如何现在安装。",
+    'age.title': "新版本发布还不满 24 小时",
+    'age.why': "DSH 用 pnpm 安装插件，它默认只安装发布满 24 小时的版本，用来防范被篡改的新包。TheOne {version} 刚发布不久，所以暂时装不上。",
+    'age.allowHow': "你可以只为 TheOne 放行：在这个 DSH 配置的 pnpm 设置（pnpm-workspace.yaml）里把 dsh-theone 加入例外，然后立即安装。其他插件仍然受 24 小时规则保护。",
+    'age.cannot': "当前无法自动修改这个 DSH 配置的 pnpm 设置。可以等它满 24 小时，或改用 GitHub 地址重新安装。",
+    'age.readyAt': "不放行的话，{time} 之后就能直接更新。",
+    'age.wait': "等满 24 小时",
+    'age.allow': "放行并更新",
+    'age.ok': "知道了",
     'update.reloading': '正在重新加载…',
     'update.reloadingHint': 'TheOne 正在用新版本重新加载，DSH 不需要重启；完成后页面会自动刷新。',
     'update.busy': '有回复正在进行，等它结束后再点更新。',
@@ -209,6 +219,16 @@ export const en = {
     'update.available': 'Update',
     'update.installing': 'Updating…',
     'update.restart': 'Restart to apply',
+    'update.waiting': "New version",
+    'update.waitingHint': "{latest} is out but less than 24 hours old. Click to see how to install it now.",
+    'age.title': "This version is less than 24 hours old",
+    'age.why': "DSH installs plugins with pnpm, which by default only installs versions published at least 24 hours ago, as a guard against tampered packages. TheOne {version} was published recently, so it cannot be installed yet.",
+    'age.allowHow': "You can exempt TheOne only: dsh-theone is added to the exceptions in this DSH profile's pnpm settings (pnpm-workspace.yaml) and installed now. Other plugins keep the 24-hour rule.",
+    'age.cannot': "This DSH profile's pnpm settings cannot be changed from here. Wait 24 hours, or reinstall from the GitHub address.",
+    'age.readyAt': "Without the exemption, you can update after {time}.",
+    'age.wait': "Wait 24 hours",
+    'age.allow': "Exempt and update",
+    'age.ok': "OK",
     'update.reloading': 'Reloading…',
     'update.reloadingHint': 'TheOne is reloading with the new version; DSH keeps running, and the page refreshes when it is done.',
     'update.busy': 'A reply is in progress. Update once it finishes.',

package/dist/client.js

@@ -100,6 +100,16 @@ var zh = {
   "update.available": "\u66F4\u65B0",
   "update.installing": "\u66F4\u65B0\u4E2D\u2026",
   "update.restart": "\u91CD\u542F\u751F\u6548",
+  "update.waiting": "\u65B0\u7248\u672C",
+  "update.waitingHint": "\u6709\u65B0\u7248\u672C {latest}\uFF0C\u53D1\u5E03\u8FD8\u4E0D\u6EE1 24 \u5C0F\u65F6\u3002\u70B9\u51FB\u67E5\u770B\u5982\u4F55\u73B0\u5728\u5B89\u88C5\u3002",
+  "age.title": "\u65B0\u7248\u672C\u53D1\u5E03\u8FD8\u4E0D\u6EE1 24 \u5C0F\u65F6",
+  "age.why": "DSH \u7528 pnpm \u5B89\u88C5\u63D2\u4EF6\uFF0C\u5B83\u9ED8\u8BA4\u53EA\u5B89\u88C5\u53D1\u5E03\u6EE1 24 \u5C0F\u65F6\u7684\u7248\u672C\uFF0C\u7528\u6765\u9632\u8303\u88AB\u7BE1\u6539\u7684\u65B0\u5305\u3002TheOne {version} \u521A\u53D1\u5E03\u4E0D\u4E45\uFF0C\u6240\u4EE5\u6682\u65F6\u88C5\u4E0D\u4E0A\u3002",
+  "age.allowHow": "\u4F60\u53EF\u4EE5\u53EA\u4E3A TheOne \u653E\u884C\uFF1A\u5728\u8FD9\u4E2A DSH \u914D\u7F6E\u7684 pnpm \u8BBE\u7F6E\uFF08pnpm-workspace.yaml\uFF09\u91CC\u628A dsh-theone \u52A0\u5165\u4F8B\u5916\uFF0C\u7136\u540E\u7ACB\u5373\u5B89\u88C5\u3002\u5176\u4ED6\u63D2\u4EF6\u4ECD\u7136\u53D7 24 \u5C0F\u65F6\u89C4\u5219\u4FDD\u62A4\u3002",
+  "age.cannot": "\u5F53\u524D\u65E0\u6CD5\u81EA\u52A8\u4FEE\u6539\u8FD9\u4E2A DSH \u914D\u7F6E\u7684 pnpm \u8BBE\u7F6E\u3002\u53EF\u4EE5\u7B49\u5B83\u6EE1 24 \u5C0F\u65F6\uFF0C\u6216\u6539\u7528 GitHub \u5730\u5740\u91CD\u65B0\u5B89\u88C5\u3002",
+  "age.readyAt": "\u4E0D\u653E\u884C\u7684\u8BDD\uFF0C{time} \u4E4B\u540E\u5C31\u80FD\u76F4\u63A5\u66F4\u65B0\u3002",
+  "age.wait": "\u7B49\u6EE1 24 \u5C0F\u65F6",
+  "age.allow": "\u653E\u884C\u5E76\u66F4\u65B0",
+  "age.ok": "\u77E5\u9053\u4E86",
   "update.reloading": "\u6B63\u5728\u91CD\u65B0\u52A0\u8F7D\u2026",
   "update.reloadingHint": "TheOne \u6B63\u5728\u7528\u65B0\u7248\u672C\u91CD\u65B0\u52A0\u8F7D\uFF0CDSH \u4E0D\u9700\u8981\u91CD\u542F\uFF1B\u5B8C\u6210\u540E\u9875\u9762\u4F1A\u81EA\u52A8\u5237\u65B0\u3002",
   "update.busy": "\u6709\u56DE\u590D\u6B63\u5728\u8FDB\u884C\uFF0C\u7B49\u5B83\u7ED3\u675F\u540E\u518D\u70B9\u66F4\u65B0\u3002",
@@ -292,6 +302,16 @@ var en = {
   "update.available": "Update",
   "update.installing": "Updating\u2026",
   "update.restart": "Restart to apply",
+  "update.waiting": "New version",
+  "update.waitingHint": "{latest} is out but less than 24 hours old. Click to see how to install it now.",
+  "age.title": "This version is less than 24 hours old",
+  "age.why": "DSH installs plugins with pnpm, which by default only installs versions published at least 24 hours ago, as a guard against tampered packages. TheOne {version} was published recently, so it cannot be installed yet.",
+  "age.allowHow": "You can exempt TheOne only: dsh-theone is added to the exceptions in this DSH profile's pnpm settings (pnpm-workspace.yaml) and installed now. Other plugins keep the 24-hour rule.",
+  "age.cannot": "This DSH profile's pnpm settings cannot be changed from here. Wait 24 hours, or reinstall from the GitHub address.",
+  "age.readyAt": "Without the exemption, you can update after {time}.",
+  "age.wait": "Wait 24 hours",
+  "age.allow": "Exempt and update",
+  "age.ok": "OK",
   "update.reloading": "Reloading\u2026",
   "update.reloadingHint": "TheOne is reloading with the new version; DSH keeps running, and the page refreshes when it is done.",
   "update.busy": "A reply is in progress. Update once it finishes.",
@@ -555,9 +575,14 @@ function apply(ctx) {
       updateListeners.delete(listener);
     };
   };
-  const readUpdate = async (method = "GET") => {
+  const readUpdate = async (method = "GET", body) => {
     try {
-      const response = await fetch("/api/theone/update", { method, signal: lifetime.signal, cache: "no-store" });
+      const response = await fetch("/api/theone/update", {
+        method,
+        signal: lifetime.signal,
+        cache: "no-store",
+        ...body ? { headers: { "content-type": "application/json" }, body: JSON.stringify(body) } : {}
+      });
       if (response.ok || response.status === 409) setUpdate(await response.json());
       if (update?.state === "reloading") void awaitReload(update.current);
     } catch {
@@ -584,16 +609,78 @@ function apply(ctx) {
     }, 6 * 36e5);
     return () => clearInterval(timer);
   });
+  function openReleaseAgeDialog(status) {
+    const backdrop = document.createElement("div");
+    backdrop.className = "theone-dialog-backdrop";
+    backdrop.setAttribute("translate", "no");
+    const card = document.createElement("div");
+    card.className = "theone-dialog";
+    card.setAttribute("role", "dialog");
+    card.setAttribute("aria-modal", "true");
+    const title = document.createElement("h2");
+    title.id = "theone-dialog-title";
+    title.textContent = t("age.title");
+    card.setAttribute("aria-labelledby", title.id);
+    const paragraph = (text, className) => {
+      const p = document.createElement("p");
+      p.textContent = text;
+      if (className) p.className = className;
+      return p;
+    };
+    const version = status.waiting?.version ?? status.latest ?? "";
+    card.append(title, paragraph(t("age.why", { version })), paragraph(t(status.canExempt ? "age.allowHow" : "age.cannot")));
+    if (status.waiting) card.append(paragraph(t("age.readyAt", { time: new Date(status.waiting.readyAt).toLocaleString(localeSnapshot().active, { month: "numeric", day: "numeric", hour: "2-digit", minute: "2-digit" }) }), "theone-dialog-note"));
+    const footer = document.createElement("div");
+    footer.className = "theone-dialog-actions";
+    const button = (text, primary, act) => {
+      const element = document.createElement("button");
+      element.type = "button";
+      element.textContent = text;
+      if (primary) element.className = "theone-dialog-primary";
+      element.addEventListener("click", act);
+      footer.append(element);
+      return element;
+    };
+    const close = () => {
+      backdrop.remove();
+      document.removeEventListener("keydown", keydown, true);
+    };
+    const keydown = (event) => {
+      if (event.key === "Escape") {
+        event.preventDefault();
+        close();
+      }
+    };
+    button(t(status.canExempt ? "age.wait" : "age.ok"), !status.canExempt, close);
+    const allow = status.canExempt ? button(t("age.allow"), true, () => {
+      close();
+      setUpdate({ ...status, state: "installing", error: void 0 });
+      void readUpdate("POST", { allowFresh: true });
+    }) : void 0;
+    card.append(footer);
+    backdrop.append(card);
+    backdrop.addEventListener("pointerdown", (event) => {
+      if (event.target === backdrop) close();
+    });
+    document.addEventListener("keydown", keydown, true);
+    document.body.append(backdrop);
+    (allow ?? footer.querySelector("button"))?.focus();
+  }
   function UpdateButton() {
     const t2 = useText();
     const status = (0, import_react.useSyncExternalStore)(subscribeUpdate, () => update);
-    if (!status || !status.available && !status.state) return null;
-    const label = status.state === "installing" ? t2("update.installing") : status.state === "reloading" ? t2("update.reloading") : status.state === "restart" ? t2("update.restart") : status.state === "failed" ? t2("update.failed") : t2("update.available");
-    const title = status.error === "GATEWAY_BUSY" ? t2("update.busy") : status.state === "reloading" ? t2("update.reloadingHint") : status.state === "restart" ? t2("update.restartHint") : status.state === "failed" ? status.error === "MINIMUM_RELEASE_AGE" ? t2("update.tooNew") : status.error === "NETWORK" ? t2("update.network") : t2("update.failedHint", { error: status.error ?? "" }) : status.installable ? t2("update.hint", { current: status.current, latest: status.latest ?? "" }) : t2("update.manualHint", { current: status.current, latest: status.latest ?? "" });
+    const waiting = !!status?.waiting && !status.available && !status.state;
+    if (!status || !status.available && !status.state && !waiting) return null;
+    const label = waiting ? t2("update.waiting") : status.state === "installing" ? t2("update.installing") : status.state === "reloading" ? t2("update.reloading") : status.state === "restart" ? t2("update.restart") : status.state === "failed" ? t2("update.failed") : t2("update.available");
+    const title = waiting ? t2("update.waitingHint", { latest: status.waiting.version }) : status.error === "GATEWAY_BUSY" ? t2("update.busy") : status.state === "reloading" ? t2("update.reloadingHint") : status.state === "restart" ? t2("update.restartHint") : status.state === "failed" ? status.error === "MINIMUM_RELEASE_AGE" ? t2("update.tooNew") : status.error === "NETWORK" ? t2("update.network") : t2("update.failedHint", { error: status.error ?? "" }) : status.installable ? t2("update.hint", { current: status.current, latest: status.latest ?? "" }) : t2("update.manualHint", { current: status.current, latest: status.latest ?? "" });
     const act = (event) => {
       event.preventDefault();
       event.stopPropagation();
       if (status.state === "installing" || status.state === "reloading" || status.state === "restart") return;
+      if (waiting || status.state === "failed" && status.error === "MINIMUM_RELEASE_AGE") {
+        openReleaseAgeDialog(status);
+        return;
+      }
       if (!status.installable) {
         window.open("https://github.com/YunongDai2005/dsh-theone#readme", "_blank", "noopener");
         return;
@@ -609,7 +696,7 @@ function apply(ctx) {
         tabIndex: 0,
         title,
         "aria-label": title,
-        "data-state": status.state ?? "available",
+        "data-state": waiting ? "waiting" : status.state ?? "available",
         onClick: act,
         onPointerDown: (event) => event.stopPropagation(),
         onKeyDown: (event) => {
@@ -618,7 +705,7 @@ function apply(ctx) {
       },
       status.state === "installing" || status.state === "reloading" ? (0, import_react.createElement)("span", { className: "theone-update-spin", "aria-hidden": true }) : null,
       label,
-      !status.state && status.latest ? (0, import_react.createElement)("small", null, `v${status.latest}`) : null
+      !status.state && (waiting ? status.waiting.version : status.latest) ? (0, import_react.createElement)("small", null, `v${waiting ? status.waiting.version : status.latest}`) : null
     );
   }
   const symbol = () => (0, import_react.createElement)(
@@ -1718,6 +1805,18 @@ button:has(.theone-nav[data-wide=true])>span:has(.theone-nav){flex:1;min-width:0
 .theone-update small{font-size:11px;opacity:.75}
 .theone-update[data-state=installing],.theone-update[data-state=reloading],.theone-update[data-state=restart]{cursor:default}
 .theone-update[data-state=failed]{color:#d9480f;border-color:#d9480f66;background:#d9480f14}
+.theone-update[data-state=waiting]{opacity:.8;border-style:dashed}
+.theone-dialog-backdrop{position:fixed;inset:0;z-index:10001;display:flex;align-items:center;justify-content:center;padding:16px;background:#0008}
+.theone-dialog{width:min(440px,100%);box-sizing:border-box;padding:22px 22px 18px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:16px;background:var(--dsw-specific-sidebar-fill,#232326);color:var(--dsw-alias-label-primary,#e8e8ea);box-shadow:0 16px 48px #0005;font:inherit;font-size:14px;line-height:1.65}
+.theone-dialog h2{margin:0 0 10px;font-size:17px}
+.theone-dialog p{margin:0 0 10px;color:var(--dsw-alias-label-secondary,#a0a0a6)}
+.theone-dialog .theone-dialog-note{font-size:13px}
+.theone-dialog-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:16px}
+.theone-dialog-actions button{padding:8px 14px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:9px;background:transparent;color:inherit;font:inherit;cursor:pointer}
+.theone-dialog-actions button:hover{background:var(--dsw-alias-interactive-bg-hover,#ffffff12)}
+.theone-dialog-actions .theone-dialog-primary{border-color:transparent;background:#3b6fb0;color:#fff}
+.theone-dialog-actions .theone-dialog-primary:hover{background:#4a7fc0}
+.theone-dialog-actions button:focus-visible{outline:2px solid #4a7fc0;outline-offset:2px}
 .theone-update-spin{width:10px;height:10px;border-radius:50%;border:1.5px solid currentColor;border-right-color:transparent;animation:theone-spin 800ms linear infinite}
 @keyframes theone-spin{to{transform:rotate(360deg)}}
 @media(prefers-reduced-motion:reduce){.theone-update-spin{animation:none}}

package/dist/index.js

@@ -205,9 +205,10 @@ export default class TheOne extends Service {
         }
         descriptors ??= config.contextsPath ? readDescriptors(config.contextsPath) : [];
         this.gatewayDirectory = resolve(dirname(databasePath), 'gateway');
+        const profileDir = () => ctx.profileContext?.dir;
         this.updater = new Updater(readOwnVersion(), () => {
             // The profile's package.json records how this plugin was installed (GitHub, npm or a local path).
-            const dir = ctx.profileContext?.dir;
+            const dir = profileDir();
             if (!dir)
                 return undefined;
             try {
@@ -216,7 +217,7 @@ export default class TheOne extends Service {
             catch {
                 return undefined;
             }
-        });
+        }, fetch, Date.now, () => { const dir = profileDir(); return dir ? join(dir, 'pnpm-workspace.yaml') : undefined; });
         ctx.effect(() => async () => {
             try {
                 await Promise.all([...this.workers.values()].map(handle => handle.dispose()));
@@ -628,6 +629,18 @@ export default class TheOne extends Service {
                     const manager = this.ctx.get('pluginManager');
                     // With DSH's hot reload, switching the bundle off and on loads the new version without a DSH restart.
                     const live = !!this.ctx.get('hmr') && typeof manager?.setBundleEnabled === 'function';
+                    if (request.method === 'POST') {
+                        // The user chose to let TheOne skip pnpm's one-day wait; only this package is exempted.
+                        const body = await request.json().catch(() => ({}));
+                        if (body?.allowFresh === true) {
+                            try {
+                                this.updater.allowFresh();
+                            }
+                            catch (error) {
+                                return Response.json({ ...await this.updater.status(), error: error instanceof Error && /^[A-Z_]+$/.test(error.message) ? error.message : 'EXEMPT_FAILED' }, { status: 400 });
+                            }
+                        }
+                    }
                     const status = request.method === 'POST'
                         ? await this.updater.install(manager, live ? bundle => reloadBundle(manager, bundle) : undefined)
                         : await this.updater.status(new URL(request.url).searchParams.has('force'));

package/dist/update.d.ts

@@ -19,7 +19,18 @@ export interface UpdateStatus {
         version: string;
         readyAt: number;
     };
+    /** TheOne is exempt from that rule in this DSH profile, so fresh versions install right away. */
+    exempt?: boolean;
+    /** Whether this profile's pnpm settings can be edited to grant that exemption. */
+    canExempt?: boolean;
 }
+/** The packages a pnpm-workspace.yaml exempts from the release-age rule (block or flow list). */
+export declare function releaseAgeExemptions(text: string): string[];
+/**
+ * The same pnpm-workspace.yaml with `name` added to the release-age exemptions, every other line
+ * kept as it was. Throws for a layout it does not recognise rather than guess.
+ */
+export declare function withReleaseAgeExemption(text: string, name?: string): string;
 /**
  * pnpm, which DSH installs plugins with, refuses npm versions published less than a day ago
  * (minimumReleaseAge, a supply-chain safeguard). Updates from npm wait until then.
@@ -51,11 +62,20 @@ export declare class Updater {
     private readonly spec;
     private readonly fetcher;
     private readonly now;
+    private readonly workspace;
     private checked?;
     private state?;
     private error?;
     private pending?;
-    constructor(current: string, spec: () => string | undefined, fetcher?: typeof fetch, now?: () => number);
+    /**
+     * @param workspace - this DSH profile's pnpm-workspace.yaml, where pnpm reads the release-age
+     * exemptions; undefined when the profile is unknown.
+     */
+    constructor(current: string, spec: () => string | undefined, fetcher?: typeof fetch, now?: () => number, workspace?: () => string | undefined);
+    /** Whether pnpm in this profile already lets TheOne install versions under a day old. */
+    get exempt(): boolean;
+    /** Exempt TheOne, and only TheOne, from pnpm's release-age rule in this profile. */
+    allowFresh(): void;
     get source(): UpdateSource;
     /** The latest known status; checks again at most every six hours (or now, when forced). */
     status(force?: boolean): Promise<UpdateStatus>;

package/dist/update.js

@@ -1,5 +1,48 @@
+import { readFileSync, renameSync, writeFileSync } from 'node:fs';
 export const REPOSITORY = 'YunongDai2005/dsh-theone';
 export const PACKAGE_NAME = 'dsh-theone';
+const EXCLUDE_KEY = 'minimumReleaseAgeExclude';
+const unquote = (value) => value.trim().replace(/^['"]|['"]$/g, '');
+/** The packages a pnpm-workspace.yaml exempts from the release-age rule (block or flow list). */
+export function releaseAgeExemptions(text) {
+    const lines = text.split(/\r?\n/);
+    const index = lines.findIndex(line => line.startsWith(`${EXCLUDE_KEY}:`));
+    if (index < 0)
+        return [];
+    const inline = lines[index].slice(EXCLUDE_KEY.length + 1).trim();
+    if (inline.startsWith('['))
+        return inline.replace(/^\[|\]$/g, '').split(',').map(unquote).filter(Boolean);
+    const items = [];
+    for (let line = index + 1; line < lines.length && /^\s+-/.test(lines[line]); line++)
+        items.push(unquote(lines[line].replace(/^\s+-\s*/, '')));
+    return items;
+}
+/**
+ * The same pnpm-workspace.yaml with `name` added to the release-age exemptions, every other line
+ * kept as it was. Throws for a layout it does not recognise rather than guess.
+ */
+export function withReleaseAgeExemption(text, name = PACKAGE_NAME) {
+    if (releaseAgeExemptions(text).includes(name))
+        return text;
+    const newline = text.includes('\r\n') ? '\r\n' : '\n';
+    const lines = text.split(/\r?\n/);
+    const index = lines.findIndex(line => line.startsWith(`${EXCLUDE_KEY}:`));
+    if (index < 0)
+        return `${text}${text && !/\r?\n$/.test(text) ? newline : ''}${EXCLUDE_KEY}:${newline}  - ${name}${newline}`;
+    const inline = lines[index].slice(EXCLUDE_KEY.length + 1).trim();
+    if (inline.startsWith('[') && inline.endsWith(']')) {
+        lines[index] = `${EXCLUDE_KEY}: [${[...releaseAgeExemptions(text), name].map(item => JSON.stringify(item)).join(', ')}]`;
+        return lines.join(newline);
+    }
+    if (inline)
+        throw new Error('UNRECOGNISED_WORKSPACE');
+    let end = index + 1;
+    while (end < lines.length && /^\s+-/.test(lines[end]))
+        end++;
+    const indent = end > index + 1 ? lines[index + 1].match(/^\s+/)[0] : '  ';
+    lines.splice(end, 0, `${indent}- ${name}`);
+    return lines.join(newline);
+}
 /**
  * pnpm, which DSH installs plugins with, refuses npm versions published less than a day ago
  * (minimumReleaseAge, a supply-chain safeguard). Updates from npm wait until then.
@@ -38,15 +81,56 @@ export class Updater {
     spec;
     fetcher;
     now;
+    workspace;
     checked;
     state;
     error;
     pending;
-    constructor(current, spec, fetcher = fetch, now = Date.now) {
+    /**
+     * @param workspace - this DSH profile's pnpm-workspace.yaml, where pnpm reads the release-age
+     * exemptions; undefined when the profile is unknown.
+     */
+    constructor(current, spec, fetcher = fetch, now = Date.now, workspace = () => undefined) {
         this.current = current;
         this.spec = spec;
         this.fetcher = fetcher;
         this.now = now;
+        this.workspace = workspace;
+    }
+    /** Whether pnpm in this profile already lets TheOne install versions under a day old. */
+    get exempt() {
+        const file = this.workspace();
+        if (!file)
+            return false;
+        try {
+            return releaseAgeExemptions(readFileSync(file, 'utf8')).includes(PACKAGE_NAME);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Exempt TheOne, and only TheOne, from pnpm's release-age rule in this profile. */
+    allowFresh() {
+        const file = this.workspace();
+        if (!file)
+            throw new Error('NO_PROFILE');
+        let text = '';
+        try {
+            text = readFileSync(file, 'utf8');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const next = withReleaseAgeExemption(text);
+        if (next === text)
+            return;
+        writeFileSync(`${file}.theone-tmp`, next, { mode: 0o600 });
+        renameSync(`${file}.theone-tmp`, file);
+        if (this.state === 'failed') {
+            this.state = undefined;
+            this.error = undefined;
+        }
     }
     get source() { return installSource(this.spec()); }
     /** The latest known status; checks again at most every six hours (or now, when forced). */
@@ -68,7 +152,7 @@ export class Updater {
         const status = await this.status();
         if (!status.available || !status.installable || !installer || this.state === 'installing' || this.state === 'reloading' || this.state === 'restart')
             return this.snapshot();
-        const spec = this.source === 'github' ? `github:${REPOSITORY}#${this.checked.sha}` : `${PACKAGE_NAME}@${this.checked.latest}`;
+        const spec = this.source === 'github' ? `github:${REPOSITORY}#${this.checked.sha}` : `${PACKAGE_NAME}@${status.latest}`;
         this.state = 'installing';
         this.error = undefined;
         try {
@@ -94,11 +178,15 @@ export class Updater {
         return this.snapshot();
     }
     snapshot() {
-        const latest = this.checked?.latest;
+        const exempt = this.source === 'npm' && this.exempt;
+        // Exempt from the release-age rule, the newest version is ready as soon as it is published.
+        const fresh = this.checked?.waiting && compareVersions(this.checked.waiting.version, this.current) > 0 ? this.checked.waiting : undefined;
+        const latest = exempt && fresh ? fresh.version : this.checked?.latest;
         const source = this.source;
         const available = !!latest && compareVersions(latest, this.current) > 0;
-        const waiting = this.checked?.waiting && compareVersions(this.checked.waiting.version, this.current) > 0 ? { waiting: this.checked.waiting } : {};
+        const waiting = fresh && !exempt ? { waiting: fresh } : {};
         return { current: this.current, ...(latest ? { latest } : {}), available, source, ...waiting,
+            ...(source === 'npm' ? { exempt, canExempt: !!this.workspace() } : {}),
             installable: available && (source === 'npm' || (source === 'github' && !!this.checked?.sha)),
             ...(this.state ? { state: this.state } : {}), ...(this.error ?? this.checked?.error ? { error: this.error ?? this.checked?.error } : {}) };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-theone",
-  "version": "0.3.15",
+  "version": "0.3.16",
   "private": false,
   "type": "module",
   "description": "Automatic context routing for DeepSeek Harness",