dsh-theone 0.3.15 → 0.3.17

package/README.md

@@ -57,7 +57,7 @@ Each project gets its own background session that reasons, runs tools and compac
 2. Open **Plugins → Add plugin**, paste `https://github.com/YunongDai2005/dsh-theone`, and install.
 3. Click **TheOne · Main chat** in the sidebar and start talking.
 
-From the command line: `dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`. Works with DSH `0.2.0-rc.2` and Node.js 24; the interface follows DSH's language (English / Simplified Chinese). Installing `dsh-theone` from npm also works, but DSH's package manager only accepts a version once it has been published for 24 hours, so the GitHub address gets new versions first.
+From the command line: `dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`. Works with DSH `0.2.0-rc.2` and Node.js 24; the interface follows DSH's language (English / Simplified Chinese). Installing `dsh-theone` from npm also works, but DSH's package manager only accepts a version once it has been published for 24 hours, so the GitHub address gets new versions first. When an update is newer than that, the Update button explains it and can exempt TheOne alone so it installs right away.
 
 > Unofficial community project, maintained independently. It is not affiliated with or endorsed by DeepSeek.
 
@@ -104,6 +104,7 @@ The database location and entry identifier switch TheOne to different data, so t
 - DSH keeps the original conversations and tool results; TheOne keeps only its catalog, summaries, links and routing records in its own SQLite database (`$DSH_HOME/theone/contexts.db`, `~/.dsh/theone/` by default).
 - Text sent to the router or written into briefings has API keys, passwords and similar secrets removed.
 - A topic marked **Do not share** never appears in other topics' briefings, recent-chat excerpts or lookups.
+- Notices from the author are read from `https://yulid.org/theone/notice.json` with a plain request that sends none of your data; turn them off in Settings.
 - When main chat grows long, DSH compacts it through TheOne: frequently used topics keep longer summaries and their latest turns, rarely used ones keep a short status. This makes no model call.
 - When a new version is out, an **Update** button appears on the right of the TheOne entry in the sidebar: one click installs it through DSH's plugin manager and reloads TheOne in place, without restarting DSH (a DSH without plugin hot reload applies it at the next restart). Your topics stay in the database.
 </details>

package/README.zh.md

@@ -57,7 +57,7 @@
 2. 打开 **插件 → 添加插件**，粘贴 `https://github.com/YunongDai2005/dsh-theone`，点击安装。
 3. 点击左侧 **TheOne · 主聊天**，开始说话。
 
-命令行安装：`dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`。兼容 DSH `0.2.0-rc.2` 与 Node.js 24；界面跟随 DSH 的语言（简体中文 / English）。也可以从 npm 安装 `dsh-theone`，但 DSH 的包管理器只接受发布满 24 小时的版本，所以用 GitHub 地址安装能最早拿到新版本。
+命令行安装：`dsh plugin --profile web add github:YunongDai2005/dsh-theone --ignore-scripts`。兼容 DSH `0.2.0-rc.2` 与 Node.js 24；界面跟随 DSH 的语言（简体中文 / English）。也可以从 npm 安装 `dsh-theone`，但 DSH 的包管理器只接受发布满 24 小时的版本，所以用 GitHub 地址安装能最早拿到新版本。遇到这种情况，「更新」按钮会说明原因，并可以只为 TheOne 放行、立即安装。
 
 > 非官方社区项目，由社区成员独立维护，与 DeepSeek 不存在隶属或背书关系。
 
@@ -104,6 +104,7 @@
 - 原始对话和工具结果由 DSH 保存；TheOne 只在自己的 SQLite 数据库（`$DSH_HOME/theone/contexts.db`，默认 `~/.dsh/theone/`）里保存目录、摘要、关联和路由记录。
 - 发给路由和写进参考简报的内容会去掉 API Key、密码等敏感信息。
 - 标记为「不共享」的话题，不会出现在其他话题的简报、最近对话和查阅结果里。
+- 作者发布的公告从 `https://yulid.org/theone/notice.json` 读取，只是一次普通的下载，不发送你的任何数据；可以在设置里关闭。
 - 主聊天变长时，DSH 通过 TheOne 压缩它：常用话题保留较长摘要和最近几轮，不常用的只保留简短状态，不额外调用模型。
 - 有新版本时，左侧 TheOne 入口右边会出现 **更新** 按钮，点一下由 DSH 的插件管理器安装，并就地重新加载 TheOne，不用重启 DSH（不支持插件热加载的 DSH 会在下次启动时生效）；话题都保存在数据库里，不受影响。
 </details>

package/dist/client-locales.d.ts

@@ -5,6 +5,13 @@ export declare const zh: {
     readonly 'gateway.opening': "正在打开 TheOne 主聊天…";
     readonly 'gateway.error': "主聊天暂时无法打开，请检查 DSH 连接和 TheOne 插件状态。";
     readonly retry: "重试";
+    readonly 'settings.other': "其他";
+    readonly 'settings.notices': "显示公告";
+    readonly 'settings.help.notices': "显示 TheOne 作者发布的公告（新版本、重要提醒等）。只从 yulid.org 读取一个公告文件，不发送任何你的数据。";
+    readonly 'notice.label': "公告";
+    readonly 'notice.more': "查看详情";
+    readonly 'notice.ok': "知道了";
+    readonly 'notice.close': "关闭这条公告";
     readonly 'bg.label': "后台";
     readonly 'bg.follow': "默认";
     readonly 'bg.title': "后台模型：分配话题和干活都用它";
@@ -17,6 +24,16 @@ export declare const zh: {
     readonly 'update.available': "更新";
     readonly 'update.installing': "更新中…";
     readonly 'update.restart': "重启生效";
+    readonly 'update.waiting': "新版本";
+    readonly 'update.waitingHint': "有新版本 {latest}，发布还不满 24 小时。点击查看如何现在安装。";
+    readonly 'age.title': "新版本发布还不满 24 小时";
+    readonly 'age.why': "DSH 用 pnpm 安装插件，它默认只安装发布满 24 小时的版本，用来防范被篡改的新包。TheOne {version} 刚发布不久，所以暂时装不上。";
+    readonly 'age.allowHow': "你可以只为 TheOne 放行：在这个 DSH 配置的 pnpm 设置（pnpm-workspace.yaml）里把 dsh-theone 加入例外，然后立即安装。其他插件仍然受 24 小时规则保护。";
+    readonly 'age.cannot': "当前无法自动修改这个 DSH 配置的 pnpm 设置。可以等它满 24 小时，或改用 GitHub 地址重新安装。";
+    readonly 'age.readyAt': "不放行的话，{time} 之后就能直接更新。";
+    readonly 'age.wait': "等满 24 小时";
+    readonly 'age.allow': "放行并更新";
+    readonly 'age.ok': "知道了";
     readonly 'update.reloading': "正在重新加载…";
     readonly 'update.reloadingHint': "TheOne 正在用新版本重新加载，DSH 不需要重启；完成后页面会自动刷新。";
     readonly 'update.busy': "有回复正在进行，等它结束后再点更新。";

package/dist/client-locales.js

@@ -5,6 +5,13 @@ export const zh = {
     'gateway.opening': '正在打开 TheOne 主聊天…',
     'gateway.error': '主聊天暂时无法打开，请检查 DSH 连接和 TheOne 插件状态。',
     'retry': '重试',
+    'settings.other': "其他",
+    'settings.notices': "显示公告",
+    'settings.help.notices': "显示 TheOne 作者发布的公告（新版本、重要提醒等）。只从 yulid.org 读取一个公告文件，不发送任何你的数据。",
+    'notice.label': "公告",
+    'notice.more': "查看详情",
+    'notice.ok': "知道了",
+    'notice.close': "关闭这条公告",
     'bg.label': '后台',
     'bg.follow': '默认',
     'bg.title': '后台模型：分配话题和干活都用它',
@@ -17,6 +24,16 @@ export const zh = {
     'update.available': '更新',
     'update.installing': '更新中…',
     'update.restart': '重启生效',
+    'update.waiting': "新版本",
+    'update.waitingHint': "有新版本 {latest}，发布还不满 24 小时。点击查看如何现在安装。",
+    'age.title': "新版本发布还不满 24 小时",
+    'age.why': "DSH 用 pnpm 安装插件，它默认只安装发布满 24 小时的版本，用来防范被篡改的新包。TheOne {version} 刚发布不久，所以暂时装不上。",
+    'age.allowHow': "你可以只为 TheOne 放行：在这个 DSH 配置的 pnpm 设置（pnpm-workspace.yaml）里把 dsh-theone 加入例外，然后立即安装。其他插件仍然受 24 小时规则保护。",
+    'age.cannot': "当前无法自动修改这个 DSH 配置的 pnpm 设置。可以等它满 24 小时，或改用 GitHub 地址重新安装。",
+    'age.readyAt': "不放行的话，{time} 之后就能直接更新。",
+    'age.wait': "等满 24 小时",
+    'age.allow': "放行并更新",
+    'age.ok': "知道了",
     'update.reloading': '正在重新加载…',
     'update.reloadingHint': 'TheOne 正在用新版本重新加载，DSH 不需要重启；完成后页面会自动刷新。',
     'update.busy': '有回复正在进行，等它结束后再点更新。',
@@ -197,6 +214,13 @@ export const en = {
     'gateway.opening': 'Opening TheOne main chat…',
     'gateway.error': 'Main chat could not open. Check your DSH connection and TheOne plugin status.',
     'retry': 'Retry',
+    'settings.other': "Other",
+    'settings.notices': "Show notices",
+    'settings.help.notices': "Show notices from TheOne's author (new versions, important reminders). TheOne only reads one notice file from yulid.org and sends none of your data.",
+    'notice.label': "Notice",
+    'notice.more': "Read more",
+    'notice.ok': "Got it",
+    'notice.close': "Close this notice",
     'bg.label': 'Background',
     'bg.follow': 'Default',
     'bg.title': 'Background model: routes and does the work',
@@ -209,6 +233,16 @@ export const en = {
     'update.available': 'Update',
     'update.installing': 'Updating…',
     'update.restart': 'Restart to apply',
+    'update.waiting': "New version",
+    'update.waitingHint': "{latest} is out but less than 24 hours old. Click to see how to install it now.",
+    'age.title': "This version is less than 24 hours old",
+    'age.why': "DSH installs plugins with pnpm, which by default only installs versions published at least 24 hours ago, as a guard against tampered packages. TheOne {version} was published recently, so it cannot be installed yet.",
+    'age.allowHow': "You can exempt TheOne only: dsh-theone is added to the exceptions in this DSH profile's pnpm settings (pnpm-workspace.yaml) and installed now. Other plugins keep the 24-hour rule.",
+    'age.cannot': "This DSH profile's pnpm settings cannot be changed from here. Wait 24 hours, or reinstall from the GitHub address.",
+    'age.readyAt': "Without the exemption, you can update after {time}.",
+    'age.wait': "Wait 24 hours",
+    'age.allow': "Exempt and update",
+    'age.ok': "OK",
     'update.reloading': 'Reloading…',
     'update.reloadingHint': 'TheOne is reloading with the new version; DSH keeps running, and the page refreshes when it is done.',
     'update.busy': 'A reply is in progress. Update once it finishes.',

package/dist/client.js

@@ -38,7 +38,8 @@ var EDITABLE_SETTINGS_KEYS = [
   "maxResponseChars",
   "linkScope",
   "routeNotice",
-  "contextsPath"
+  "contextsPath",
+  "notices"
 ];
 
 // src/client-navigation.ts
@@ -88,6 +89,13 @@ var zh = {
   "gateway.opening": "\u6B63\u5728\u6253\u5F00 TheOne \u4E3B\u804A\u5929\u2026",
   "gateway.error": "\u4E3B\u804A\u5929\u6682\u65F6\u65E0\u6CD5\u6253\u5F00\uFF0C\u8BF7\u68C0\u67E5 DSH \u8FDE\u63A5\u548C TheOne \u63D2\u4EF6\u72B6\u6001\u3002",
   "retry": "\u91CD\u8BD5",
+  "settings.other": "\u5176\u4ED6",
+  "settings.notices": "\u663E\u793A\u516C\u544A",
+  "settings.help.notices": "\u663E\u793A TheOne \u4F5C\u8005\u53D1\u5E03\u7684\u516C\u544A\uFF08\u65B0\u7248\u672C\u3001\u91CD\u8981\u63D0\u9192\u7B49\uFF09\u3002\u53EA\u4ECE yulid.org \u8BFB\u53D6\u4E00\u4E2A\u516C\u544A\u6587\u4EF6\uFF0C\u4E0D\u53D1\u9001\u4EFB\u4F55\u4F60\u7684\u6570\u636E\u3002",
+  "notice.label": "\u516C\u544A",
+  "notice.more": "\u67E5\u770B\u8BE6\u60C5",
+  "notice.ok": "\u77E5\u9053\u4E86",
+  "notice.close": "\u5173\u95ED\u8FD9\u6761\u516C\u544A",
   "bg.label": "\u540E\u53F0",
   "bg.follow": "\u9ED8\u8BA4",
   "bg.title": "\u540E\u53F0\u6A21\u578B\uFF1A\u5206\u914D\u8BDD\u9898\u548C\u5E72\u6D3B\u90FD\u7528\u5B83",
@@ -100,6 +108,16 @@ var zh = {
   "update.available": "\u66F4\u65B0",
   "update.installing": "\u66F4\u65B0\u4E2D\u2026",
   "update.restart": "\u91CD\u542F\u751F\u6548",
+  "update.waiting": "\u65B0\u7248\u672C",
+  "update.waitingHint": "\u6709\u65B0\u7248\u672C {latest}\uFF0C\u53D1\u5E03\u8FD8\u4E0D\u6EE1 24 \u5C0F\u65F6\u3002\u70B9\u51FB\u67E5\u770B\u5982\u4F55\u73B0\u5728\u5B89\u88C5\u3002",
+  "age.title": "\u65B0\u7248\u672C\u53D1\u5E03\u8FD8\u4E0D\u6EE1 24 \u5C0F\u65F6",
+  "age.why": "DSH \u7528 pnpm \u5B89\u88C5\u63D2\u4EF6\uFF0C\u5B83\u9ED8\u8BA4\u53EA\u5B89\u88C5\u53D1\u5E03\u6EE1 24 \u5C0F\u65F6\u7684\u7248\u672C\uFF0C\u7528\u6765\u9632\u8303\u88AB\u7BE1\u6539\u7684\u65B0\u5305\u3002TheOne {version} \u521A\u53D1\u5E03\u4E0D\u4E45\uFF0C\u6240\u4EE5\u6682\u65F6\u88C5\u4E0D\u4E0A\u3002",
+  "age.allowHow": "\u4F60\u53EF\u4EE5\u53EA\u4E3A TheOne \u653E\u884C\uFF1A\u5728\u8FD9\u4E2A DSH \u914D\u7F6E\u7684 pnpm \u8BBE\u7F6E\uFF08pnpm-workspace.yaml\uFF09\u91CC\u628A dsh-theone \u52A0\u5165\u4F8B\u5916\uFF0C\u7136\u540E\u7ACB\u5373\u5B89\u88C5\u3002\u5176\u4ED6\u63D2\u4EF6\u4ECD\u7136\u53D7 24 \u5C0F\u65F6\u89C4\u5219\u4FDD\u62A4\u3002",
+  "age.cannot": "\u5F53\u524D\u65E0\u6CD5\u81EA\u52A8\u4FEE\u6539\u8FD9\u4E2A DSH \u914D\u7F6E\u7684 pnpm \u8BBE\u7F6E\u3002\u53EF\u4EE5\u7B49\u5B83\u6EE1 24 \u5C0F\u65F6\uFF0C\u6216\u6539\u7528 GitHub \u5730\u5740\u91CD\u65B0\u5B89\u88C5\u3002",
+  "age.readyAt": "\u4E0D\u653E\u884C\u7684\u8BDD\uFF0C{time} \u4E4B\u540E\u5C31\u80FD\u76F4\u63A5\u66F4\u65B0\u3002",
+  "age.wait": "\u7B49\u6EE1 24 \u5C0F\u65F6",
+  "age.allow": "\u653E\u884C\u5E76\u66F4\u65B0",
+  "age.ok": "\u77E5\u9053\u4E86",
   "update.reloading": "\u6B63\u5728\u91CD\u65B0\u52A0\u8F7D\u2026",
   "update.reloadingHint": "TheOne \u6B63\u5728\u7528\u65B0\u7248\u672C\u91CD\u65B0\u52A0\u8F7D\uFF0CDSH \u4E0D\u9700\u8981\u91CD\u542F\uFF1B\u5B8C\u6210\u540E\u9875\u9762\u4F1A\u81EA\u52A8\u5237\u65B0\u3002",
   "update.busy": "\u6709\u56DE\u590D\u6B63\u5728\u8FDB\u884C\uFF0C\u7B49\u5B83\u7ED3\u675F\u540E\u518D\u70B9\u66F4\u65B0\u3002",
@@ -280,6 +298,13 @@ var en = {
   "gateway.opening": "Opening TheOne main chat\u2026",
   "gateway.error": "Main chat could not open. Check your DSH connection and TheOne plugin status.",
   "retry": "Retry",
+  "settings.other": "Other",
+  "settings.notices": "Show notices",
+  "settings.help.notices": "Show notices from TheOne's author (new versions, important reminders). TheOne only reads one notice file from yulid.org and sends none of your data.",
+  "notice.label": "Notice",
+  "notice.more": "Read more",
+  "notice.ok": "Got it",
+  "notice.close": "Close this notice",
   "bg.label": "Background",
   "bg.follow": "Default",
   "bg.title": "Background model: routes and does the work",
@@ -292,6 +317,16 @@ var en = {
   "update.available": "Update",
   "update.installing": "Updating\u2026",
   "update.restart": "Restart to apply",
+  "update.waiting": "New version",
+  "update.waitingHint": "{latest} is out but less than 24 hours old. Click to see how to install it now.",
+  "age.title": "This version is less than 24 hours old",
+  "age.why": "DSH installs plugins with pnpm, which by default only installs versions published at least 24 hours ago, as a guard against tampered packages. TheOne {version} was published recently, so it cannot be installed yet.",
+  "age.allowHow": "You can exempt TheOne only: dsh-theone is added to the exceptions in this DSH profile's pnpm settings (pnpm-workspace.yaml) and installed now. Other plugins keep the 24-hour rule.",
+  "age.cannot": "This DSH profile's pnpm settings cannot be changed from here. Wait 24 hours, or reinstall from the GitHub address.",
+  "age.readyAt": "Without the exemption, you can update after {time}.",
+  "age.wait": "Wait 24 hours",
+  "age.allow": "Exempt and update",
+  "age.ok": "OK",
   "update.reloading": "Reloading\u2026",
   "update.reloadingHint": "TheOne is reloading with the new version; DSH keeps running, and the page refreshes when it is done.",
   "update.busy": "A reply is in progress. Update once it finishes.",
@@ -555,9 +590,14 @@ function apply(ctx) {
       updateListeners.delete(listener);
     };
   };
-  const readUpdate = async (method = "GET") => {
+  const readUpdate = async (method = "GET", body) => {
     try {
-      const response = await fetch("/api/theone/update", { method, signal: lifetime.signal, cache: "no-store" });
+      const response = await fetch("/api/theone/update", {
+        method,
+        signal: lifetime.signal,
+        cache: "no-store",
+        ...body ? { headers: { "content-type": "application/json" }, body: JSON.stringify(body) } : {}
+      });
       if (response.ok || response.status === 409) setUpdate(await response.json());
       if (update?.state === "reloading") void awaitReload(update.current);
     } catch {
@@ -584,16 +624,78 @@ function apply(ctx) {
     }, 6 * 36e5);
     return () => clearInterval(timer);
   });
+  function openReleaseAgeDialog(status) {
+    const backdrop = document.createElement("div");
+    backdrop.className = "theone-dialog-backdrop";
+    backdrop.setAttribute("translate", "no");
+    const card = document.createElement("div");
+    card.className = "theone-dialog";
+    card.setAttribute("role", "dialog");
+    card.setAttribute("aria-modal", "true");
+    const title = document.createElement("h2");
+    title.id = "theone-dialog-title";
+    title.textContent = t("age.title");
+    card.setAttribute("aria-labelledby", title.id);
+    const paragraph = (text, className) => {
+      const p = document.createElement("p");
+      p.textContent = text;
+      if (className) p.className = className;
+      return p;
+    };
+    const version = status.waiting?.version ?? status.latest ?? "";
+    card.append(title, paragraph(t("age.why", { version })), paragraph(t(status.canExempt ? "age.allowHow" : "age.cannot")));
+    if (status.waiting) card.append(paragraph(t("age.readyAt", { time: new Date(status.waiting.readyAt).toLocaleString(localeSnapshot().active, { month: "numeric", day: "numeric", hour: "2-digit", minute: "2-digit" }) }), "theone-dialog-note"));
+    const footer = document.createElement("div");
+    footer.className = "theone-dialog-actions";
+    const button = (text, primary, act) => {
+      const element = document.createElement("button");
+      element.type = "button";
+      element.textContent = text;
+      if (primary) element.className = "theone-dialog-primary";
+      element.addEventListener("click", act);
+      footer.append(element);
+      return element;
+    };
+    const close = () => {
+      backdrop.remove();
+      document.removeEventListener("keydown", keydown, true);
+    };
+    const keydown = (event) => {
+      if (event.key === "Escape") {
+        event.preventDefault();
+        close();
+      }
+    };
+    button(t(status.canExempt ? "age.wait" : "age.ok"), !status.canExempt, close);
+    const allow = status.canExempt ? button(t("age.allow"), true, () => {
+      close();
+      setUpdate({ ...status, state: "installing", error: void 0 });
+      void readUpdate("POST", { allowFresh: true });
+    }) : void 0;
+    card.append(footer);
+    backdrop.append(card);
+    backdrop.addEventListener("pointerdown", (event) => {
+      if (event.target === backdrop) close();
+    });
+    document.addEventListener("keydown", keydown, true);
+    document.body.append(backdrop);
+    (allow ?? footer.querySelector("button"))?.focus();
+  }
   function UpdateButton() {
     const t2 = useText();
     const status = (0, import_react.useSyncExternalStore)(subscribeUpdate, () => update);
-    if (!status || !status.available && !status.state) return null;
-    const label = status.state === "installing" ? t2("update.installing") : status.state === "reloading" ? t2("update.reloading") : status.state === "restart" ? t2("update.restart") : status.state === "failed" ? t2("update.failed") : t2("update.available");
-    const title = status.error === "GATEWAY_BUSY" ? t2("update.busy") : status.state === "reloading" ? t2("update.reloadingHint") : status.state === "restart" ? t2("update.restartHint") : status.state === "failed" ? status.error === "MINIMUM_RELEASE_AGE" ? t2("update.tooNew") : status.error === "NETWORK" ? t2("update.network") : t2("update.failedHint", { error: status.error ?? "" }) : status.installable ? t2("update.hint", { current: status.current, latest: status.latest ?? "" }) : t2("update.manualHint", { current: status.current, latest: status.latest ?? "" });
+    const waiting = !!status?.waiting && !status.available && !status.state;
+    if (!status || !status.available && !status.state && !waiting) return null;
+    const label = waiting ? t2("update.waiting") : status.state === "installing" ? t2("update.installing") : status.state === "reloading" ? t2("update.reloading") : status.state === "restart" ? t2("update.restart") : status.state === "failed" ? t2("update.failed") : t2("update.available");
+    const title = waiting ? t2("update.waitingHint", { latest: status.waiting.version }) : status.error === "GATEWAY_BUSY" ? t2("update.busy") : status.state === "reloading" ? t2("update.reloadingHint") : status.state === "restart" ? t2("update.restartHint") : status.state === "failed" ? status.error === "MINIMUM_RELEASE_AGE" ? t2("update.tooNew") : status.error === "NETWORK" ? t2("update.network") : t2("update.failedHint", { error: status.error ?? "" }) : status.installable ? t2("update.hint", { current: status.current, latest: status.latest ?? "" }) : t2("update.manualHint", { current: status.current, latest: status.latest ?? "" });
     const act = (event) => {
       event.preventDefault();
       event.stopPropagation();
       if (status.state === "installing" || status.state === "reloading" || status.state === "restart") return;
+      if (waiting || status.state === "failed" && status.error === "MINIMUM_RELEASE_AGE") {
+        openReleaseAgeDialog(status);
+        return;
+      }
       if (!status.installable) {
         window.open("https://github.com/YunongDai2005/dsh-theone#readme", "_blank", "noopener");
         return;
@@ -609,7 +711,7 @@ function apply(ctx) {
         tabIndex: 0,
         title,
         "aria-label": title,
-        "data-state": status.state ?? "available",
+        "data-state": waiting ? "waiting" : status.state ?? "available",
         onClick: act,
         onPointerDown: (event) => event.stopPropagation(),
         onKeyDown: (event) => {
@@ -618,7 +720,7 @@ function apply(ctx) {
       },
       status.state === "installing" || status.state === "reloading" ? (0, import_react.createElement)("span", { className: "theone-update-spin", "aria-hidden": true }) : null,
       label,
-      !status.state && status.latest ? (0, import_react.createElement)("small", null, `v${status.latest}`) : null
+      !status.state && (waiting ? status.waiting.version : status.latest) ? (0, import_react.createElement)("small", null, `v${waiting ? status.waiting.version : status.latest}`) : null
     );
   }
   const symbol = () => (0, import_react.createElement)(
@@ -952,6 +1054,118 @@ function apply(ctx) {
       (0, import_react.createElement)("span", { className: "theone-bg-chevron", "aria-hidden": true }, saving ? "\u2026" : "\u2303")
     );
   }
+  let notices = [];
+  const noticeListeners = /* @__PURE__ */ new Set();
+  const setNotices = (value) => {
+    notices = value;
+    for (const listener of noticeListeners) listener();
+  };
+  const subscribeNotices = (listener) => {
+    noticeListeners.add(listener);
+    return () => {
+      noticeListeners.delete(listener);
+    };
+  };
+  const localized = (value) => localeSnapshot().active.startsWith("zh") ? value.zh ?? value.en ?? "" : value.en ?? value.zh ?? "";
+  const shownDialogs = /* @__PURE__ */ new Set();
+  const dismissNotice = (id) => {
+    setNotices(notices.filter((notice) => notice.id !== id));
+    void fetch("/api/theone/notices", {
+      method: "POST",
+      signal: lifetime.signal,
+      cache: "no-store",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ dismiss: id })
+    }).catch(() => {
+    });
+  };
+  function openNoticeDialog(notice) {
+    shownDialogs.add(notice.id);
+    const backdrop = document.createElement("div");
+    backdrop.className = "theone-dialog-backdrop";
+    backdrop.setAttribute("translate", "no");
+    const card = document.createElement("div");
+    card.className = "theone-dialog";
+    card.setAttribute("role", "dialog");
+    card.setAttribute("aria-modal", "true");
+    const title = document.createElement("h2");
+    title.id = "theone-notice-title";
+    title.textContent = localized(notice.title);
+    card.setAttribute("aria-labelledby", title.id);
+    const body = document.createElement("p");
+    body.className = "theone-dialog-body";
+    body.textContent = localized(notice.body);
+    const footer = document.createElement("div");
+    footer.className = "theone-dialog-actions";
+    const close = () => {
+      backdrop.remove();
+      document.removeEventListener("keydown", keydown, true);
+      dismissNotice(notice.id);
+    };
+    const keydown = (event) => {
+      if (event.key === "Escape") {
+        event.preventDefault();
+        close();
+      }
+    };
+    if (notice.link) {
+      const more = document.createElement("button");
+      more.type = "button";
+      more.textContent = t("notice.more");
+      more.addEventListener("click", () => {
+        window.open(notice.link, "_blank", "noopener");
+        close();
+      });
+      footer.append(more);
+    }
+    const ok = document.createElement("button");
+    ok.type = "button";
+    ok.className = "theone-dialog-primary";
+    ok.textContent = t("notice.ok");
+    ok.addEventListener("click", close);
+    footer.append(ok);
+    card.append(title, body, footer);
+    backdrop.append(card);
+    document.addEventListener("keydown", keydown, true);
+    document.body.append(backdrop);
+    ok.focus();
+  }
+  const readNotices = async () => {
+    try {
+      const response = await fetch("/api/theone/notices", { signal: lifetime.signal, cache: "no-store" });
+      if (!response.ok) return;
+      setNotices((await response.json()).notices);
+      const important = notices.find((notice) => notice.level === "important" && !shownDialogs.has(notice.id));
+      if (important && !document.querySelector(".theone-dialog-backdrop")) openNoticeDialog(important);
+    } catch {
+    }
+  };
+  ctx.effect(() => {
+    void readNotices();
+    const timer = setInterval(() => {
+      void readNotices();
+    }, 3 * 36e5);
+    return () => clearInterval(timer);
+  });
+  function NoticeStrip({ directory }) {
+    const t2 = useText();
+    const state = (0, import_react.useSyncExternalStore)((listener) => directory.subscribe(listener), () => directory.getSnapshot());
+    const list = (0, import_react.useSyncExternalStore)(subscribeNotices, () => notices);
+    const notice = list.find((item) => item.level === "info");
+    if ((state.pending ?? state.current)?.provider !== "theone" || !notice) return null;
+    const title = localized(notice.title), body = localized(notice.body);
+    return (0, import_react.createElement)(
+      "div",
+      { className: "theone-notice", role: "status", translate: "no" },
+      (0, import_react.createElement)("span", { className: "theone-notice-tag" }, t2("notice.label")),
+      (0, import_react.createElement)("span", { className: "theone-notice-text", title: `${title}
+${body}` }, (0, import_react.createElement)("strong", null, title), " ", body),
+      notice.link ? (0, import_react.createElement)("button", { type: "button", className: "theone-notice-link", onClick: () => {
+        window.open(notice.link, "_blank", "noopener");
+      } }, t2("notice.more")) : null,
+      (0, import_react.createElement)("button", { type: "button", className: "theone-notice-close", "aria-label": t2("notice.close"), title: t2("notice.close"), onClick: () => dismissNotice(notice.id) }, "\xD7")
+    );
+  }
   ctx.inject(["slots", "modelDirectories"], (scope) => {
     const slots = scope.slots;
     slots.inject("conversation.input.right", () => slots.register({
@@ -960,6 +1174,12 @@ function apply(ctx) {
       order: 100,
       inject: (sessionId) => ({ directory: scope.modelDirectories.directoryFor(sessionId).store })
     }, BackgroundModel));
+    slots.inject("conversation.composer.dock", () => slots.register({
+      name: "conversation.composer.dock",
+      id: "theone.notice",
+      order: 100,
+      inject: (sessionId) => ({ directory: scope.modelDirectories.directoryFor(sessionId).store })
+    }, NoticeStrip));
   });
   function GatewayPanel() {
     const t2 = useText();
@@ -1020,7 +1240,8 @@ function apply(ctx) {
       ["history", ["historyCatalog", "catalogIntervalMs"]],
       ["linkage", ["linkScope", "routeNotice"]],
       ["limits", ["maxDescriptorChars", "maxResponseChars"]],
-      ["storage", ["contextsPath", "databasePath", "gatewayKey"]]
+      ["storage", ["contextsPath", "databasePath", "gatewayKey"]],
+      ["other", ["notices"]]
     ];
     const display = (key) => {
       const value = snapshot.values[key];
@@ -1077,7 +1298,7 @@ function apply(ctx) {
         { ...props, value, required: field === "workerModel" && !!draft.workerProvider, onChange: (event) => selectValue(event.target.value) },
         ...choices.map((choice) => (0, import_react.createElement)("option", { key: choice.value, value: choice.value }, choice.label))
       );
-      if (field === "historyCatalog") return select(String(draft.historyCatalog), [{ value: "true", label: t2("settings.on") }, { value: "false", label: t2("settings.off") }], (v) => change(field, v === "true"));
+      if (field === "historyCatalog" || field === "notices") return select(String(draft[field]), [{ value: "true", label: t2("settings.on") }, { value: "false", label: t2("settings.off") }], (v) => change(field, v === "true"));
       if (field === "linkScope" || field === "routeNotice") {
         const values = field === "linkScope" ? ["auto", "workspace", "off"] : ["switch", "hidden", "all"];
         return select(draft[field], values.map((value) => ({ value, label: t2(`settings.${field === "linkScope" ? "scope" : "notice"}.${value}`) })), (v) => change(field, v));
@@ -1718,6 +1939,27 @@ button:has(.theone-nav[data-wide=true])>span:has(.theone-nav){flex:1;min-width:0
 .theone-update small{font-size:11px;opacity:.75}
 .theone-update[data-state=installing],.theone-update[data-state=reloading],.theone-update[data-state=restart]{cursor:default}
 .theone-update[data-state=failed]{color:#d9480f;border-color:#d9480f66;background:#d9480f14}
+.theone-update[data-state=waiting]{opacity:.8;border-style:dashed}
+.theone-dialog-backdrop{position:fixed;inset:0;z-index:10001;display:flex;align-items:center;justify-content:center;padding:16px;background:#0008}
+.theone-dialog{width:min(440px,100%);box-sizing:border-box;padding:22px 22px 18px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:16px;background:var(--dsw-specific-sidebar-fill,#232326);color:var(--dsw-alias-label-primary,#e8e8ea);box-shadow:0 16px 48px #0005;font:inherit;font-size:14px;line-height:1.65}
+.theone-dialog h2{margin:0 0 10px;font-size:17px}
+.theone-dialog p{margin:0 0 10px;color:var(--dsw-alias-label-secondary,#a0a0a6)}
+.theone-dialog .theone-dialog-note{font-size:13px}
+.theone-dialog-actions{display:flex;justify-content:flex-end;gap:10px;margin-top:16px}
+.theone-dialog-actions button{padding:8px 14px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:9px;background:transparent;color:inherit;font:inherit;cursor:pointer}
+.theone-dialog-actions button:hover{background:var(--dsw-alias-interactive-bg-hover,#ffffff12)}
+.theone-dialog-actions .theone-dialog-primary{border-color:transparent;background:#3b6fb0;color:#fff}
+.theone-dialog-actions .theone-dialog-primary:hover{background:#4a7fc0}
+.theone-dialog-actions button:focus-visible{outline:2px solid #4a7fc0;outline-offset:2px}
+.theone-dialog .theone-dialog-body{white-space:pre-wrap;color:var(--dsw-alias-label-primary,#e8e8ea)}
+.theone-notice{display:flex;align-items:center;gap:8px;margin:6px 4px 0;padding:6px 8px 6px 10px;border:1px solid var(--dsw-alias-border-l2,#ffffff1f);border-radius:10px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#a0a0a6);min-width:0}
+.theone-notice-tag{flex:none;padding:0 6px;border-radius:6px;background:#3b6fb033;color:#7fa9dd}
+.theone-notice-text{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.theone-notice-text strong{color:var(--dsw-alias-label-primary,#e8e8ea);font-weight:500}
+.theone-notice button{flex:none;border:0;background:transparent;color:inherit;font:inherit;cursor:pointer;padding:2px 6px;border-radius:6px}
+.theone-notice button:hover{background:var(--dsw-alias-interactive-bg-hover,#ffffff12)}
+.theone-notice-link{color:#7fa9dd!important}
+.theone-notice-close{font-size:15px;line-height:1}
 .theone-update-spin{width:10px;height:10px;border-radius:50%;border:1.5px solid currentColor;border-right-color:transparent;animation:theone-spin 800ms linear infinite}
 @keyframes theone-spin{to{transform:rotate(360deg)}}
 @media(prefers-reduced-motion:reduce){.theone-update-spin{animation:none}}

package/dist/index.d.ts

@@ -10,6 +10,7 @@ import type { LinkageSnapshot } from './catalog-types.ts';
 import { type SettingsSnapshot } from './settings-types.ts';
 import { type LinkScope } from './linkage.ts';
 import { Updater } from './update.ts';
+import { NoticeBoard } from './notices.ts';
 export interface Config {
     databasePath?: string;
     contextsPath?: string;
@@ -28,6 +29,10 @@ export interface Config {
     routerApiKeyEnv?: string;
     linkScope?: LinkScope;
     routeNotice?: 'hidden' | 'switch' | 'all';
+    /** Show notices the maintainer publishes (read from a static file; nothing is sent). */
+    notices?: boolean;
+    /** Where notices are read from; for testing. */
+    noticeUrl?: string;
 }
 declare module '@deepseek-ai/cordis' {
     interface Context {
@@ -79,6 +84,7 @@ export default class TheOne extends Service {
     private adapter?;
     /** Update checks and one-click install through DSH's plugin manager. */
     readonly updater: Updater;
+    readonly noticeBoard: NoticeBoard;
     /** Sessions whose current step answers through TheOne; only these refuse to run tools themselves. */
     private readonly throughTheOne;
     constructor(ctx: Context, config: Config);

package/dist/index.js

@@ -21,6 +21,7 @@ import { validateSettings } from "./settings.js";
 import { RESTART_CODE, WorkerRun } from "./run.js";
 import { buildBriefing, LINK_SIGNAL, relatedTopics } from "./linkage.js";
 import { PACKAGE_NAME, Updater } from "./update.js";
+import { NOTICE_URL, NoticeBoard } from "./notices.js";
 function redactDescriptor(text) {
     return text.replace(/\bsk-[a-zA-Z0-9_-]{16,}|\bBearer\s+\S+/gi, '[REDACTED]')
         .replace(/((?:api[_ -]?key|password|密码|密钥)\s*[:=：]\s*)\S+/gi, '$1[REDACTED]');
@@ -155,6 +156,8 @@ export default class TheOne extends Service {
         routerBaseUrl: z.string(), routerModel: z.string(), routerApiKeyEnv: z.string(),
         linkScope: z.union([z.const('off'), z.const('workspace'), z.const('auto')]).default('auto'),
         routeNotice: z.union([z.const('hidden'), z.const('switch'), z.const('all')]).default('switch'),
+        notices: z.boolean().default(true),
+        noticeUrl: z.string(),
     });
     store;
     catalog;
@@ -173,6 +176,7 @@ export default class TheOne extends Service {
     adapter;
     /** Update checks and one-click install through DSH's plugin manager. */
     updater;
+    noticeBoard;
     /** Sessions whose current step answers through TheOne; only these refuse to run tools themselves. */
     throughTheOne = new WeakMap();
     constructor(ctx, config) {
@@ -205,9 +209,10 @@ export default class TheOne extends Service {
         }
         descriptors ??= config.contextsPath ? readDescriptors(config.contextsPath) : [];
         this.gatewayDirectory = resolve(dirname(databasePath), 'gateway');
+        const profileDir = () => ctx.profileContext?.dir;
         this.updater = new Updater(readOwnVersion(), () => {
             // The profile's package.json records how this plugin was installed (GitHub, npm or a local path).
-            const dir = ctx.profileContext?.dir;
+            const dir = profileDir();
             if (!dir)
                 return undefined;
             try {
@@ -216,7 +221,8 @@ export default class TheOne extends Service {
             catch {
                 return undefined;
             }
-        });
+        }, fetch, Date.now, () => { const dir = profileDir(); return dir ? join(dir, 'pnpm-workspace.yaml') : undefined; });
+        this.noticeBoard = new NoticeBoard(this.updater.current, config.noticeUrl || NOTICE_URL);
         ctx.effect(() => async () => {
             try {
                 await Promise.all([...this.workers.values()].map(handle => handle.dispose()));
@@ -628,11 +634,36 @@ export default class TheOne extends Service {
                     const manager = this.ctx.get('pluginManager');
                     // With DSH's hot reload, switching the bundle off and on loads the new version without a DSH restart.
                     const live = !!this.ctx.get('hmr') && typeof manager?.setBundleEnabled === 'function';
+                    if (request.method === 'POST') {
+                        // The user chose to let TheOne skip pnpm's one-day wait; only this package is exempted.
+                        const body = await request.json().catch(() => ({}));
+                        if (body?.allowFresh === true) {
+                            try {
+                                this.updater.allowFresh();
+                            }
+                            catch (error) {
+                                return Response.json({ ...await this.updater.status(), error: error instanceof Error && /^[A-Z_]+$/.test(error.message) ? error.message : 'EXEMPT_FAILED' }, { status: 400 });
+                            }
+                        }
+                    }
                     const status = request.method === 'POST'
                         ? await this.updater.install(manager, live ? bundle => reloadBundle(manager, bundle) : undefined)
                         : await this.updater.status(new URL(request.url).searchParams.has('force'));
                     return Response.json(status, { headers: { 'cache-control': 'no-store' } });
                 } }));
+            // Notices from TheOne's maintainer; the user can close each one, or turn them all off in Settings.
+            child.effect(() => connection.fetch.register({ path: '/api/theone/notices', methods: ['GET', 'POST'], requestBody: 'buffered', fetch: async (request) => {
+                    if (request.method === 'POST') {
+                        const body = await request.json().catch(() => ({}));
+                        if (typeof body?.dismiss !== 'string' || !/^[\w.-]{1,64}$/.test(body.dismiss))
+                            return Response.json({ error: 'INVALID_INPUT' }, { status: 400 });
+                        this.store.dismissNotice(body.dismiss);
+                    }
+                    if (this.config.notices === false)
+                        return Response.json({ notices: [] }, { headers: { 'cache-control': 'no-store' } });
+                    const dismissed = this.store.dismissedNotices();
+                    return Response.json({ notices: (await this.noticeBoard.notices()).filter(notice => !dismissed.has(notice.id)) }, { headers: { 'cache-control': 'no-store' } });
+                } }));
             child.effect(() => connection.fetch.register({ path: '/api/theone/sessions', methods: ['GET'], requestBody: 'buffered', fetch: async () => Response.json({ sessions: await this.attachableSessions() }, { headers: { 'cache-control': 'no-store' } }) }));
             // The user's corrections to topic linking always take precedence over what was learned.
             child.effect(() => connection.fetch.register({ path: '/api/theone/links', methods: ['POST'], requestBody: 'buffered', fetch: async (request) => {
@@ -792,7 +823,7 @@ export default class TheOne extends Service {
             workerProvider: c.workerProvider ? redactDescriptor(c.workerProvider) : null, workerModel: c.workerModel ? redactDescriptor(c.workerModel) : null,
             maxDescriptorChars: c.maxDescriptorChars, maxResponseChars: c.maxResponseChars,
             routerMode: c.routerMode ?? 'llm',
-            linkScope: c.linkScope ?? 'auto', routeNotice: c.routeNotice ?? 'switch',
+            linkScope: c.linkScope ?? 'auto', routeNotice: c.routeNotice ?? 'switch', notices: c.notices ?? true,
         };
         const activeEditable = Object.fromEntries(EDITABLE_SETTINGS_KEYS.map(key => [key, key === 'contextsPath' ? c.contextsPath ?? null : values[key]]));
         let savedValues = activeEditable;

package/dist/notices.d.ts

@@ -0,0 +1,39 @@
+/** Where TheOne's maintainer publishes notices: a static JSON file, read with a plain GET. */
+export declare const NOTICE_URL = "https://yulid.org/theone/notice.json";
+/** Text in each interface language; the reader's language is chosen in the client. */
+export interface LocalizedText {
+    zh?: string;
+    en?: string;
+}
+/** One notice as the client shows it. */
+export interface Notice {
+    id: string;
+    /** `important` opens a dialog once; `info` shows a strip under the main chat input. */
+    level: 'info' | 'important';
+    title: LocalizedText;
+    body: LocalizedText;
+    /** An https page to read more; opened only when the reader clicks it. */
+    link?: string;
+}
+/**
+ * Whether `version` falls within a range such as "<0.3.16", ">=0.3.10", "0.3.12", "*", or several
+ * of these separated by spaces (all must hold). An unreadable range matches nothing.
+ */
+export declare function versionMatches(range: unknown, version: string): boolean;
+/**
+ * The notices in a published file that apply to this version now, at most five. Anything that does
+ * not fit the format is skipped rather than shown; text is plain, links must be https.
+ */
+export declare function applicableNotices(file: unknown, version: string, now?: number): Notice[];
+/** Reads the notice file at most every three hours; a failure simply means no notices. */
+export declare class NoticeBoard {
+    private readonly version;
+    private readonly url;
+    private readonly fetcher;
+    private readonly now;
+    private cache?;
+    private pending?;
+    constructor(version: string, url?: string, fetcher?: typeof fetch, now?: () => number);
+    notices(): Promise<Notice[]>;
+    private read;
+}

package/dist/notices.js

@@ -0,0 +1,105 @@
+import { compareVersions } from "./update.js";
+/** Where TheOne's maintainer publishes notices: a static JSON file, read with a plain GET. */
+export const NOTICE_URL = 'https://yulid.org/theone/notice.json';
+const HOUR = 3600000;
+const text = (value, max) => {
+    if (typeof value === 'string')
+        return value.trim() ? { zh: value.trim().slice(0, max), en: value.trim().slice(0, max) } : undefined;
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const row = value;
+    const pick = (key) => typeof row[key] === 'string' && row[key].trim() ? { [key]: row[key].trim().slice(0, max) } : {};
+    const result = { ...pick('zh'), ...pick('en') };
+    return Object.keys(result).length ? result : undefined;
+};
+/**
+ * Whether `version` falls within a range such as "<0.3.16", ">=0.3.10", "0.3.12", "*", or several
+ * of these separated by spaces (all must hold). An unreadable range matches nothing.
+ */
+export function versionMatches(range, version) {
+    if (range === undefined || range === null || range === '*' || range === '')
+        return true;
+    if (typeof range !== 'string')
+        return false;
+    return range.trim().split(/\s+/).every(part => {
+        const match = /^(<=|>=|<|>|=)?v?(\d+\.\d+\.\d+)$/.exec(part);
+        if (!match)
+            return false;
+        const order = compareVersions(version, match[2]);
+        return { '<': order < 0, '<=': order <= 0, '>': order > 0, '>=': order >= 0, '=': order === 0 }[match[1] ?? '='];
+    });
+}
+/**
+ * The notices in a published file that apply to this version now, at most five. Anything that does
+ * not fit the format is skipped rather than shown; text is plain, links must be https.
+ */
+export function applicableNotices(file, version, now = Date.now()) {
+    const list = file && typeof file === 'object' && Array.isArray(file.notices) ? file.notices : [];
+    const result = [];
+    for (const item of list.slice(0, 20)) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const row = item;
+        if (typeof row.id !== 'string' || !/^[\w.-]{1,64}$/.test(row.id) || result.some(notice => notice.id === row.id))
+            continue;
+        const title = text(row.title, 80), body = text(row.body, 600);
+        if (!title || !body || !versionMatches(row.versions, version))
+            continue;
+        const time = (value) => typeof value === 'string' ? Date.parse(value) : NaN;
+        if (Number.isFinite(time(row.from)) && now < time(row.from))
+            continue;
+        if (Number.isFinite(time(row.until)) && now > time(row.until))
+            continue;
+        let link;
+        if (typeof row.link === 'string') {
+            try {
+                const url = new URL(row.link);
+                if (url.protocol === 'https:' && row.link.length <= 300)
+                    link = url.href;
+            }
+            catch { /* Not a link. */ }
+        }
+        result.push({ id: row.id, level: row.level === 'important' ? 'important' : 'info', title, body, ...(link ? { link } : {}) });
+        if (result.length === 5)
+            break;
+    }
+    return result;
+}
+/** Reads the notice file at most every three hours; a failure simply means no notices. */
+export class NoticeBoard {
+    version;
+    url;
+    fetcher;
+    now;
+    cache;
+    pending;
+    constructor(version, url = NOTICE_URL, fetcher = fetch, now = Date.now) {
+        this.version = version;
+        this.url = url;
+        this.fetcher = fetcher;
+        this.now = now;
+    }
+    async notices() {
+        if (!this.cache || this.now() - this.cache.at > 3 * HOUR) {
+            this.pending ??= this.read().finally(() => { this.pending = undefined; });
+            await this.pending;
+        }
+        return applicableNotices(this.cache?.file, this.version, this.now());
+    }
+    async read() {
+        try {
+            // A plain GET: nothing about the reader or their conversations is sent.
+            const response = await this.fetcher(this.url, { signal: AbortSignal.timeout(8000), headers: { accept: 'application/json' } });
+            if (!response.ok)
+                throw new Error(`HTTP ${response.status}`);
+            const body = await response.text();
+            if (body.length > 64000)
+                throw new Error('Notice file too large');
+            this.cache = { at: this.now(), file: JSON.parse(body) };
+        }
+        catch {
+            // Try again in half an hour, keeping what was read before.
+            this.cache = { at: this.now() - 2.5 * HOUR, file: this.cache?.file };
+        }
+    }
+}

package/dist/settings-types.d.ts

@@ -13,6 +13,7 @@ export interface SettingsSnapshot {
         routerMode: 'rules' | 'llm';
         linkScope: 'off' | 'workspace' | 'auto';
         routeNotice: 'hidden' | 'switch' | 'all';
+        notices: boolean;
     };
     model: {
         provider: string;
@@ -32,7 +33,7 @@ export interface SettingsSnapshot {
     /** Saved settings that apply only after DSH restarts; everything else applies when saved. */
     restartRequired: boolean;
 }
-export declare const EDITABLE_SETTINGS_KEYS: readonly ["workerProvider", "workerModel", "routerMode", "historyCatalog", "catalogIntervalMs", "maxDescriptorChars", "maxResponseChars", "linkScope", "routeNotice", "contextsPath"];
+export declare const EDITABLE_SETTINGS_KEYS: readonly ["workerProvider", "workerModel", "routerMode", "historyCatalog", "catalogIntervalMs", "maxDescriptorChars", "maxResponseChars", "linkScope", "routeNotice", "contextsPath", "notices"];
 /** The background catalog is started once; these take effect after DSH restarts. */
 export declare const RESTART_SETTINGS_KEYS: readonly ["historyCatalog", "catalogIntervalMs"];
 /** Settings of the removed direct router; forms saved by older versions may still carry them. */
@@ -41,5 +42,6 @@ export declare const RETIRED_SETTINGS_KEYS: readonly ["routerTransport", "router
 export declare const SETTINGS_DEFAULTS: {
     readonly linkScope: "auto";
     readonly routeNotice: "switch";
+    readonly notices: true;
 };
 export type EditableSettings = Pick<SettingsSnapshot['values'], typeof EDITABLE_SETTINGS_KEYS[number]>;

package/dist/settings-types.js

@@ -1,8 +1,8 @@
 export const EDITABLE_SETTINGS_KEYS = ['workerProvider', 'workerModel', 'routerMode', 'historyCatalog',
-    'catalogIntervalMs', 'maxDescriptorChars', 'maxResponseChars', 'linkScope', 'routeNotice', 'contextsPath'];
+    'catalogIntervalMs', 'maxDescriptorChars', 'maxResponseChars', 'linkScope', 'routeNotice', 'contextsPath', 'notices'];
 /** The background catalog is started once; these take effect after DSH restarts. */
 export const RESTART_SETTINGS_KEYS = ['historyCatalog', 'catalogIntervalMs'];
 /** Settings of the removed direct router; forms saved by older versions may still carry them. */
 export const RETIRED_SETTINGS_KEYS = ['routerTransport', 'routerBaseUrl', 'routerModel', 'routerApiKeyEnv'];
 /** Added after the first release; settings saved before them take their defaults. */
-export const SETTINGS_DEFAULTS = { linkScope: 'auto', routeNotice: 'switch' };
+export const SETTINGS_DEFAULTS = { linkScope: 'auto', routeNotice: 'switch', notices: true };

package/dist/settings.js

@@ -33,8 +33,10 @@ export function validateSettings(value, fallback = {}) {
     if ((workerProvider === null) !== (workerModel === null) || workerProvider === 'theone')
         return fail();
     const contextsPath = row.contextsPath === null ? null : text('contextsPath', 4096);
+    if (typeof row.notices !== 'boolean')
+        return fail();
     return { workerProvider, workerModel, routerMode: row.routerMode, historyCatalog: row.historyCatalog,
         catalogIntervalMs: number('catalogIntervalMs', 10000, 86400000), maxDescriptorChars: number('maxDescriptorChars', 128, 1000000),
         maxResponseChars: number('maxResponseChars', 128, 10000000),
-        linkScope: row.linkScope, routeNotice: row.routeNotice, contextsPath };
+        linkScope: row.linkScope, routeNotice: row.routeNotice, contextsPath, notices: row.notices };
 }

package/dist/store.d.ts

@@ -157,5 +157,8 @@ export declare class ContextStore {
     /** Remove a topic and everything TheOne kept about it. DSH keeps the conversations themselves. */
     deleteTopic(contextId: string): void;
     private purge;
+    /** Notices the user closed; they are not shown again on any browser. */
+    dismissNotice(id: string, now?: number): void;
+    dismissedNotices(): Set<string>;
     close(): void;
 }

package/dist/store.js

@@ -93,6 +93,7 @@ export class ContextStore {
       CREATE TABLE IF NOT EXISTS learned_terms (
         context_id TEXT NOT NULL, term TEXT NOT NULL, weight REAL NOT NULL, updated_at INTEGER NOT NULL, PRIMARY KEY(context_id, term)
       );
+      CREATE TABLE IF NOT EXISTS dismissed_notices (id TEXT PRIMARY KEY, dismissed_at INTEGER NOT NULL);
       CREATE TABLE IF NOT EXISTS route_details (
         message_id TEXT PRIMARY KEY, excerpt TEXT NOT NULL, receipt TEXT, corrected_to TEXT, corrected_at INTEGER
       );
@@ -684,5 +685,12 @@ export class ContextStore {
         this.db.prepare('UPDATE route_details SET corrected_to = NULL, corrected_at = NULL WHERE corrected_to = ?').run(contextId);
         this.db.prepare('DELETE FROM contexts WHERE id = ?').run(contextId);
     }
+    /** Notices the user closed; they are not shown again on any browser. */
+    dismissNotice(id, now = Date.now()) {
+        this.db.prepare('INSERT OR IGNORE INTO dismissed_notices VALUES (?, ?)').run(id, now);
+    }
+    dismissedNotices() {
+        return new Set(this.db.prepare('SELECT id FROM dismissed_notices').all().map(row => String(row.id)));
+    }
     close() { this.db.close(); }
 }

package/dist/update.d.ts

@@ -19,7 +19,18 @@ export interface UpdateStatus {
         version: string;
         readyAt: number;
     };
+    /** TheOne is exempt from that rule in this DSH profile, so fresh versions install right away. */
+    exempt?: boolean;
+    /** Whether this profile's pnpm settings can be edited to grant that exemption. */
+    canExempt?: boolean;
 }
+/** The packages a pnpm-workspace.yaml exempts from the release-age rule (block or flow list). */
+export declare function releaseAgeExemptions(text: string): string[];
+/**
+ * The same pnpm-workspace.yaml with `name` added to the release-age exemptions, every other line
+ * kept as it was. Throws for a layout it does not recognise rather than guess.
+ */
+export declare function withReleaseAgeExemption(text: string, name?: string): string;
 /**
  * pnpm, which DSH installs plugins with, refuses npm versions published less than a day ago
  * (minimumReleaseAge, a supply-chain safeguard). Updates from npm wait until then.
@@ -51,11 +62,20 @@ export declare class Updater {
     private readonly spec;
     private readonly fetcher;
     private readonly now;
+    private readonly workspace;
     private checked?;
     private state?;
     private error?;
     private pending?;
-    constructor(current: string, spec: () => string | undefined, fetcher?: typeof fetch, now?: () => number);
+    /**
+     * @param workspace - this DSH profile's pnpm-workspace.yaml, where pnpm reads the release-age
+     * exemptions; undefined when the profile is unknown.
+     */
+    constructor(current: string, spec: () => string | undefined, fetcher?: typeof fetch, now?: () => number, workspace?: () => string | undefined);
+    /** Whether pnpm in this profile already lets TheOne install versions under a day old. */
+    get exempt(): boolean;
+    /** Exempt TheOne, and only TheOne, from pnpm's release-age rule in this profile. */
+    allowFresh(): void;
     get source(): UpdateSource;
     /** The latest known status; checks again at most every six hours (or now, when forced). */
     status(force?: boolean): Promise<UpdateStatus>;

package/dist/update.js

@@ -1,5 +1,48 @@
+import { readFileSync, renameSync, writeFileSync } from 'node:fs';
 export const REPOSITORY = 'YunongDai2005/dsh-theone';
 export const PACKAGE_NAME = 'dsh-theone';
+const EXCLUDE_KEY = 'minimumReleaseAgeExclude';
+const unquote = (value) => value.trim().replace(/^['"]|['"]$/g, '');
+/** The packages a pnpm-workspace.yaml exempts from the release-age rule (block or flow list). */
+export function releaseAgeExemptions(text) {
+    const lines = text.split(/\r?\n/);
+    const index = lines.findIndex(line => line.startsWith(`${EXCLUDE_KEY}:`));
+    if (index < 0)
+        return [];
+    const inline = lines[index].slice(EXCLUDE_KEY.length + 1).trim();
+    if (inline.startsWith('['))
+        return inline.replace(/^\[|\]$/g, '').split(',').map(unquote).filter(Boolean);
+    const items = [];
+    for (let line = index + 1; line < lines.length && /^\s+-/.test(lines[line]); line++)
+        items.push(unquote(lines[line].replace(/^\s+-\s*/, '')));
+    return items;
+}
+/**
+ * The same pnpm-workspace.yaml with `name` added to the release-age exemptions, every other line
+ * kept as it was. Throws for a layout it does not recognise rather than guess.
+ */
+export function withReleaseAgeExemption(text, name = PACKAGE_NAME) {
+    if (releaseAgeExemptions(text).includes(name))
+        return text;
+    const newline = text.includes('\r\n') ? '\r\n' : '\n';
+    const lines = text.split(/\r?\n/);
+    const index = lines.findIndex(line => line.startsWith(`${EXCLUDE_KEY}:`));
+    if (index < 0)
+        return `${text}${text && !/\r?\n$/.test(text) ? newline : ''}${EXCLUDE_KEY}:${newline}  - ${name}${newline}`;
+    const inline = lines[index].slice(EXCLUDE_KEY.length + 1).trim();
+    if (inline.startsWith('[') && inline.endsWith(']')) {
+        lines[index] = `${EXCLUDE_KEY}: [${[...releaseAgeExemptions(text), name].map(item => JSON.stringify(item)).join(', ')}]`;
+        return lines.join(newline);
+    }
+    if (inline)
+        throw new Error('UNRECOGNISED_WORKSPACE');
+    let end = index + 1;
+    while (end < lines.length && /^\s+-/.test(lines[end]))
+        end++;
+    const indent = end > index + 1 ? lines[index + 1].match(/^\s+/)[0] : '  ';
+    lines.splice(end, 0, `${indent}- ${name}`);
+    return lines.join(newline);
+}
 /**
  * pnpm, which DSH installs plugins with, refuses npm versions published less than a day ago
  * (minimumReleaseAge, a supply-chain safeguard). Updates from npm wait until then.
@@ -38,15 +81,56 @@ export class Updater {
     spec;
     fetcher;
     now;
+    workspace;
     checked;
     state;
     error;
     pending;
-    constructor(current, spec, fetcher = fetch, now = Date.now) {
+    /**
+     * @param workspace - this DSH profile's pnpm-workspace.yaml, where pnpm reads the release-age
+     * exemptions; undefined when the profile is unknown.
+     */
+    constructor(current, spec, fetcher = fetch, now = Date.now, workspace = () => undefined) {
         this.current = current;
         this.spec = spec;
         this.fetcher = fetcher;
         this.now = now;
+        this.workspace = workspace;
+    }
+    /** Whether pnpm in this profile already lets TheOne install versions under a day old. */
+    get exempt() {
+        const file = this.workspace();
+        if (!file)
+            return false;
+        try {
+            return releaseAgeExemptions(readFileSync(file, 'utf8')).includes(PACKAGE_NAME);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Exempt TheOne, and only TheOne, from pnpm's release-age rule in this profile. */
+    allowFresh() {
+        const file = this.workspace();
+        if (!file)
+            throw new Error('NO_PROFILE');
+        let text = '';
+        try {
+            text = readFileSync(file, 'utf8');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const next = withReleaseAgeExemption(text);
+        if (next === text)
+            return;
+        writeFileSync(`${file}.theone-tmp`, next, { mode: 0o600 });
+        renameSync(`${file}.theone-tmp`, file);
+        if (this.state === 'failed') {
+            this.state = undefined;
+            this.error = undefined;
+        }
     }
     get source() { return installSource(this.spec()); }
     /** The latest known status; checks again at most every six hours (or now, when forced). */
@@ -68,7 +152,7 @@ export class Updater {
         const status = await this.status();
         if (!status.available || !status.installable || !installer || this.state === 'installing' || this.state === 'reloading' || this.state === 'restart')
             return this.snapshot();
-        const spec = this.source === 'github' ? `github:${REPOSITORY}#${this.checked.sha}` : `${PACKAGE_NAME}@${this.checked.latest}`;
+        const spec = this.source === 'github' ? `github:${REPOSITORY}#${this.checked.sha}` : `${PACKAGE_NAME}@${status.latest}`;
         this.state = 'installing';
         this.error = undefined;
         try {
@@ -94,11 +178,15 @@ export class Updater {
         return this.snapshot();
     }
     snapshot() {
-        const latest = this.checked?.latest;
+        const exempt = this.source === 'npm' && this.exempt;
+        // Exempt from the release-age rule, the newest version is ready as soon as it is published.
+        const fresh = this.checked?.waiting && compareVersions(this.checked.waiting.version, this.current) > 0 ? this.checked.waiting : undefined;
+        const latest = exempt && fresh ? fresh.version : this.checked?.latest;
         const source = this.source;
         const available = !!latest && compareVersions(latest, this.current) > 0;
-        const waiting = this.checked?.waiting && compareVersions(this.checked.waiting.version, this.current) > 0 ? { waiting: this.checked.waiting } : {};
+        const waiting = fresh && !exempt ? { waiting: fresh } : {};
         return { current: this.current, ...(latest ? { latest } : {}), available, source, ...waiting,
+            ...(source === 'npm' ? { exempt, canExempt: !!this.workspace() } : {}),
             installable: available && (source === 'npm' || (source === 'github' && !!this.checked?.sha)),
             ...(this.state ? { state: this.state } : {}), ...(this.error ?? this.checked?.error ? { error: this.error ?? this.checked?.error } : {}) };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-theone",
-  "version": "0.3.15",
+  "version": "0.3.17",
   "private": false,
   "type": "module",
   "description": "Automatic context routing for DeepSeek Harness",