dsh-update-status 0.1.0 → 0.1.3

package/lib/index.js

@@ -8,12 +8,20 @@ import { dirname, join, normalize, sep } from "node:path";
 *
 * The static package uses the authenticated Connection RPC channel because
 * `harness.handle` / `host.call` are dynamic-Cordis-only closure APIs in DSH
-* 0.1.2-rc.1. The endpoint vocabulary remains deliberately small and private
+* 0.1.5-rc.1. The endpoint vocabulary remains deliberately small and private
 * to this plugin channel.
 */
 const PLUGIN_ID = "dsh-update-status";
 const PACKAGE_NAME = "@deepseek-ai/dsh";
-const UPDATE_STATUS_CHANNEL = "/dsh-update-status";
+/** Shared Connection RPC channel. Custom prefixes 405 on the SPA fallback. */
+const UPDATE_STATUS_CHANNEL = "/api";
+/**
+* DSH releases this bundle has actually been verified against. The same list is
+* declared in package.json's `dsh.compatibility.dshReleases`, and every other
+* release the registry reports stays `unverified` — the plugin never claims a
+* compatibility nobody checked.
+*/
+const VERIFIED_DSH_VERSIONS = ["0.1.5-rc.1", "0.1.6-alpha.1"];
 const RELEASE_CHANNELS = [
 	"latest",
 	"next",
@@ -23,8 +31,8 @@ function isCacheTtlMinutes(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 30 && value <= 1440;
 }
 const UPDATE_ENDPOINTS = {
-	getStatus: "get-status",
-	checkUpdate: "check-update"
+	getStatus: "dsh-update-status.get-status",
+	checkUpdate: "dsh-update-status.check-update"
 };
 function isReleaseChannel(value) {
 	return value === "latest" || value === "next" || value === "alpha";
@@ -176,6 +184,32 @@ function requestOf(value) {
 		...record.cacheTtlMinutes === void 0 ? {} : { cacheTtlMinutes: record.cacheTtlMinutes }
 	};
 }
+function jsonResponse(rpcId, result) {
+	return Response.json({
+		type: "server-response",
+		rpcId,
+		result
+	});
+}
+/** Envelope-compatible Fetch adapter for one namespaced `/api` endpoint. */
+async function dispatchUpdateStatusFetch(endpoint, handler, request) {
+	if (request.method !== "POST") return new Response("not found", { status: 404 });
+	if (request.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() !== "application/json") return new Response("content type must be application/json", { status: 415 });
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return new Response("body is not JSON", { status: 400 });
+	}
+	const record = body !== null && typeof body === "object" && !Array.isArray(body) ? body : {};
+	const rpcId = typeof record.rpcId === "string" ? record.rpcId : "invalid-request";
+	if (record.type !== "client-request" || record.method !== endpoint) return jsonResponse(rpcId, failure("gateway/bad-request", "invalid client-request message"));
+	try {
+		return jsonResponse(rpcId, await handler(endpoint, record.payload, request.signal));
+	} catch (error) {
+		return new Response(`handler failure: ${String(error)}`, { status: 500 });
+	}
+}
 /** Endpoint dispatcher, exported to allow exact JSON-shape tests without a Host. */
 function createUpdateStatusRpcHandler(service) {
 	return async (endpoint, payload) => {
@@ -204,21 +238,27 @@ function createUpdateStatusRpcHandler(service) {
 }
 /**
 * Static packages do not receive dynamic Cordis's `harness.handle` closure.
-* This registration uses DSH's existing authenticated Connection RPC transport
-* and is removed with the plugin fiber.
+* DSH 0.1.5 serves browser unary RPC only on the shared `/api` channel; a
+* private prefix such as `/dsh-update-status` is answered by the SPA fallback
+* with HTTP 405. Exact Fetch routes on `/api/<endpoint>` are dispatched by
+* Connection before the Typert interceptor and do not need a new HTTP prefix.
 */
 function installUpdateStatusRpc(ctx, service) {
 	const handler = createUpdateStatusRpcHandler(service);
-	ctx.inject(["connection"], (connectionCtx) => {
-		const connection = connectionCtx.get("connection");
-		const handle = typeof connection?.rpc?.handle === "function" ? connection.rpc.handle.bind(connection.rpc) : void 0;
-		if (handle === void 0) return;
-		connectionCtx.effect(() => {
-			const unregister = handle(UPDATE_STATUS_CHANNEL, handler);
-			return () => {
-				Promise.resolve(unregister()).catch(() => {});
-			};
-		}, "dsh-update-status: authenticated RPC channel");
+	ctx.inject(["connection"], (owned) => {
+		const connection = owned.connection;
+		const register = typeof connection.fetch?.register === "function" ? connection.fetch.register.bind(connection.fetch) : void 0;
+		if (register === void 0) return;
+		try {
+			for (const endpoint of Object.values(UPDATE_ENDPOINTS)) register({
+				path: `${UPDATE_STATUS_CHANNEL}/${endpoint}`,
+				methods: ["POST"],
+				requestBody: "buffered",
+				fetch: (request) => dispatchUpdateStatusFetch(endpoint, handler, request)
+			});
+		} catch (error) {
+			console.error("[dsh-update-status] authenticated RPC route registration failed:", error);
+		}
 	});
 }
 //#endregion
@@ -321,7 +361,7 @@ function dateOrNull(value) {
 	return Number.isFinite(time) ? new Date(time).toISOString() : null;
 }
 function compatibilityOf(version) {
-	return version === "0.1.2-rc.1" ? "verified" : "unverified";
+	return version !== null && VERIFIED_DSH_VERSIONS.includes(version) ? "verified" : "unverified";
 }
 function registryReleaseOf(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("npm registry returned an invalid document");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-update-status",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Read-only DeepSeek Harness Web plugin that shows the running DSH version, discovers latest/next/alpha releases, warns about compatibility, and generates copy-only upgrade commands.",
   "type": "module",
   "main": "lib/index.js",
@@ -29,15 +29,6 @@
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "build": "tsdown",
-    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.tests.json",
-    "test": "pnpm run typecheck && vitest run",
-    "test:unit": "vitest run",
-    "clean": "rm -rf lib coverage",
-    "prepack": "pnpm run build",
-    "verify": "pnpm run test && pnpm run build && pnpm pack --dry-run"
-  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/idoall/dsh-update-status.git"
@@ -59,14 +50,14 @@
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-ui-layout",
         "@deepseek-ai/dsh-client-ui-sidebar",
-        "@deepseek-ai/dsh-client-ui-slots",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-settings-general"
       ]
     },
     "compatibility": {
       "dshReleases": {
-        "0.1.2-rc.1": "compatible"
+        "0.1.5-rc.1": "compatible",
+        "0.1.6-alpha.1": "compatible"
       }
     }
   },
@@ -84,11 +75,11 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-settings": "0.1.2-rc.1"
+    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.1"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.1",
     "@deepseek-ai/schemastery": "^3.18.2",
     "@types/node": "^26.2.0",
     "@types/react": "^18.3.31",
@@ -97,5 +88,12 @@
     "typescript": "^7.0.2",
     "vitest": "^4.1.11"
   },
-  "packageManager": "pnpm@10.33.1"
-}
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.tests.json",
+    "test": "pnpm run typecheck && vitest run",
+    "test:unit": "vitest run",
+    "clean": "rm -rf lib coverage",
+    "verify": "pnpm run test && pnpm run build && pnpm pack --dry-run"
+  }
+}