dsh-update-status 0.1.11 → 0.2.0

package/lib/index.d.ts

@@ -1,21 +1,42 @@
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
+//#region src/host/settings.d.ts
+/** Deployment config (ordinary) plus the volatile user preferences the form edits. */
+interface UpdateStatusConfig {
+  /** Deployment: on-demand registry cache duration, in hours. */
+  cacheTtlHours?: number;
+  /** Deployment: registry request timeout, in milliseconds. */
+  timeoutMs?: number;
+  /** Deployment: run one metadata check when the process mounts the plugin. */
+  autoCheckOnMount?: boolean;
+  /** Preference: show the sidebar version chip and its update panel. */
+  sidebarEnabled?: boolean;
+  /** Preference: on-demand registry cache duration, in minutes. */
+  cacheTtlMinutes?: number;
+}
+/**
+ * The plugin's Config schema; its volatile fields ARE the settings form.
+ *
+ * The explicit two-argument annotation is load-bearing: a `.volatile()` field's
+ * output is a stable reference (`Volatile<T>`) rather than the bare value the
+ * input side takes, so the inferred schema type cannot be named by the emitted
+ * `.d.ts` (TS2883) without stating the input side here. The builder preserves
+ * that contract even on the degraded path, where no field is volatile.
+ */
+export declare const Config: z<UpdateStatusConfig, Record<string, unknown>>;
+//#endregion
 //#region src/shared/types.d.ts
-declare const RELEASE_CHANNELS: readonly ['latest', 'next', 'alpha'];
-type ReleaseChannel = (typeof RELEASE_CHANNELS)[number];
 type ReleaseCompatibility = 'verified' | 'unverified' | 'incompatible';
 /**
  * Severity of `warning`, so a surface can tell "the plugin could not determine
  * the update state" from "here is something worth knowing".
  *
- * - `failure`: no usable answer — a failed registry read, a channel the registry
- *   does not publish, or a version SemVer cannot compare. This is what justifies
- *   repainting the sidebar chip.
+ * - `failure`: no usable answer — a failed registry read, or a version SemVer
+ *   cannot compare. This is what justifies repainting the sidebar chip.
  * - `notice`: the answer is complete and usable; the text is advisory, e.g. a
- *   preview channel whose release this bundle has not been verified against.
- *   The chip must NOT repaint for this — an operator upgrading DSH ahead of the
- *   plugin would otherwise see the chip turn red for a plugin-side bookkeeping
- *   fact.
+ *   newer release this bundle has not been verified against. The chip must NOT
+ *   repaint for this — an operator upgrading DSH ahead of the plugin would
+ *   otherwise see the chip turn red for a plugin-side bookkeeping fact.
  *
  * Optional on purpose: a Host older than this field leaves it `undefined`, and
  * the client then falls back to treating any warning as a failure.
@@ -26,17 +47,14 @@ type InstallKind = 'npm-global' | 'pnpm-global' | 'source-checkout' | 'unknown';
 type UpdateWarning = {
   code: 'registry-unavailable';
   detail: string;
-} | {
-  code: 'channel-unavailable';
-  channel: ReleaseChannel;
 } | {
   code: 'version-incomparable';
   currentVersion: string;
-  channel: ReleaseChannel;
-  selectedVersion: string;
-} | {
-  code: 'preview-unverified';
-  channel: ReleaseChannel;
+  latestVersion: string;
+} |
+/** A newer release exists, but this bundle has not been tested against it. */
+{
+  code: 'version-unverified';
   version: string;
 } |
 /**
@@ -51,12 +69,6 @@ type UpdateWarning = {
   path: string;
   nodeModulesDir: string | null;
 };
-interface ChannelRelease {
-  channel: ReleaseChannel;
-  version: string | null;
-  publishedAt: string | null;
-  compatibility: ReleaseCompatibility;
-}
 /**
  * A lossless, JSON-serializable snapshot used by both browser surfaces.
  * Nulls are intentional: a failed first check must still render a truthful
@@ -64,8 +76,11 @@ interface ChannelRelease {
  */
 interface UpdateStatus {
   currentVersion: string;
+  /** Newest version the registry publishes under any dist-tag; null when unknown. */
   latestVersion: string | null;
   hasUpdate: boolean;
+  /** Whether this bundle was verified against `latestVersion`. */
+  compatibility: ReleaseCompatibility;
   cached: boolean;
   checkedAt: string | null;
   /** English fallback for older clients; current clients localize `warnings`. */
@@ -80,54 +95,27 @@ interface UpdateStatus {
   changelogUrl: string;
   publishedAt: string | null;
   packageName: string;
-  /** Selected npm dist-tag used for comparison and command generation. */
-  channel: ReleaseChannel;
-  /** All supported dist-tags returned by the same cached registry request. */
-  channels: ChannelRelease[];
   /** Phase 1 is informational only; the GUI must never apply an update. */
   canApplyInPlace: false;
 }
 //#endregion
-//#region src/host/settings.d.ts
-/** Deployment config (ordinary) plus the volatile user preferences the form edits. */
-interface UpdateStatusConfig {
-  /** Deployment: on-demand registry cache duration, in hours. */
-  cacheTtlHours?: number;
-  /** Deployment: registry request timeout, in milliseconds. */
-  timeoutMs?: number;
-  /** Deployment: run one metadata check when the process mounts the plugin. */
-  autoCheckOnMount?: boolean;
-  /** Preference: show the sidebar version chip and its update panel. */
-  sidebarEnabled?: boolean;
-  /** Preference: release channel followed for comparison and commands. */
-  channel?: ReleaseChannel;
-  /** Preference: on-demand registry cache duration, in minutes. */
-  cacheTtlMinutes?: number;
-}
-/**
- * The plugin's Config schema; its volatile fields ARE the settings form.
- *
- * The explicit two-argument annotation is load-bearing: a `.volatile()` field's
- * output is a stable reference (`Volatile<T>`) rather than the bare value the
- * input side takes, so the inferred schema type cannot be named by the emitted
- * `.d.ts` (TS2883) without stating the input side here. The builder preserves
- * that contract even on the degraded path, where no field is volatile.
- */
-export declare const Config: z<UpdateStatusConfig, Record<string, unknown>>;
-//#endregion
 //#region src/host/installation.d.ts
 interface InstallationInfo {
   currentVersion: string;
   packageName: string;
-  channel: string;
   installKind: InstallKind;
   packageRoot?: string;
-  upgradeCommand: string;
 }
 //#endregion
 //#region src/host/update-status.d.ts
+/** The newest release the registry publishes, with everything the UI shows. */
+interface RegistryLatest {
+  version: string;
+  publishedAt: string | null;
+  compatibility: ReleaseCompatibility;
+}
 interface RegistryRelease {
-  channels: ChannelRelease[];
+  latest: RegistryLatest | null;
 }
 type RegistryFetcher = () => Promise<RegistryRelease>;
 interface UpdateStatusServiceOptions {
@@ -152,9 +140,9 @@ export declare class UpdateStatusService {
   private cache;
   private inFlight;
   constructor(options: UpdateStatusServiceOptions);
-  getStatus(channel?: ReleaseChannel, cacheTtlMinutes?: number): Promise<UpdateStatus>;
+  getStatus(cacheTtlMinutes?: number): Promise<UpdateStatus>;
   /** `force` bypasses TTL but still joins any registry check already in flight. */
-  check(force?: boolean, channel?: ReleaseChannel, cacheTtlMinutes?: number): Promise<UpdateStatus>;
+  check(force?: boolean, cacheTtlMinutes?: number): Promise<UpdateStatus>;
   private refreshRelease;
   private statusAfterFailure;
   private statusFromCache;

package/lib/index.js

@@ -17,12 +17,9 @@ const VERIFIED_DSH_VERSIONS = [
 	"0.1.7-alpha.2",
 	"0.1.7-rc.1",
 	"0.1.7-rc.2",
-	"0.2.0-rc.1"
-];
-const RELEASE_CHANNELS = [
-	"latest",
-	"next",
-	"alpha"
+	"0.2.0-rc.1",
+	"0.2.0-rc.2",
+	"0.2.1-alpha.1"
 ];
 function isCacheTtlMinutes(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 30 && value <= 1440;
@@ -31,9 +28,6 @@ const UPDATE_ENDPOINTS = {
 	getStatus: "dsh-update-status.get-status",
 	checkUpdate: "dsh-update-status.check-update"
 };
-function isReleaseChannel(value) {
-	return value === "latest" || value === "next" || value === "alpha";
-}
 //#endregion
 //#region src/host/installation.ts
 /**
@@ -124,9 +118,15 @@ function classifyInstallRoot(packageRoot, nodePrefix = process.execPath) {
 	if (/\/lib\/node_modules\/@deepseek-ai\/dsh$/.test(root)) return "npm-global";
 	return "unknown";
 }
-/** Generate guidance only; this package never invokes the string it returns. */
-function upgradeCommandFor(installKind, packageName = PACKAGE_NAME, channel = "latest") {
-	const specifier = `${packageName}@${channel}`;
+/**
+* Generate guidance only; this package never invokes the string it returns.
+*
+* The target is the exact version the check found, not a dist-tag: with a single
+* release line there is no followed tag left to name, and `@0.2.1-alpha.1` cannot
+* be re-pointed between the check and the terminal.
+*/
+function upgradeCommandFor(installKind, packageName = PACKAGE_NAME, version = null) {
+	const specifier = version === null ? packageName : `${packageName}@${version}`;
 	switch (installKind) {
 		case "npm-global": return `npm install -g ${specifier}`;
 		case "pnpm-global": return `pnpm add -g ${specifier}`;
@@ -146,14 +146,11 @@ function detectInstallation(ctx, selfUrl = import.meta.url) {
 	const local = own === void 0 ? void 0 : manifestFromResolver(own);
 	const found = argvEntry ?? home ?? local;
 	const installKind = classifyInstallRoot(found?.root);
-	const channel = "latest";
 	return {
 		currentVersion: found?.version ?? "unknown",
 		packageName: PACKAGE_NAME,
-		channel,
 		installKind,
-		...found?.root === void 0 ? {} : { packageRoot: found.root },
-		upgradeCommand: upgradeCommandFor(installKind, PACKAGE_NAME, channel)
+		...found?.root === void 0 ? {} : { packageRoot: found.root }
 	};
 }
 //#endregion
@@ -173,11 +170,9 @@ function requestOf(value) {
 	if (typeof value !== "object" || Array.isArray(value)) return void 0;
 	const record = value;
 	if (record.force !== void 0 && typeof record.force !== "boolean") return void 0;
-	if (record.channel !== void 0 && !isReleaseChannel(record.channel)) return void 0;
 	if (record.cacheTtlMinutes !== void 0 && !isCacheTtlMinutes(record.cacheTtlMinutes)) return void 0;
 	return {
 		...record.force === void 0 ? {} : { force: record.force },
-		...record.channel === void 0 ? {} : { channel: record.channel },
 		...record.cacheTtlMinutes === void 0 ? {} : { cacheTtlMinutes: record.cacheTtlMinutes }
 	};
 }
@@ -213,18 +208,18 @@ function createUpdateStatusRpcHandler(service) {
 		try {
 			if (endpoint === UPDATE_ENDPOINTS.getStatus) {
 				const request = requestOf(payload);
-				if (request === void 0) return failure("dsh-update-status/bad-request", "`force` must be boolean, `channel` must be latest, next, or alpha, and `cacheTtlMinutes` must be an integer from 30 to 1440");
+				if (request === void 0) return failure("dsh-update-status/bad-request", "`force` must be boolean and `cacheTtlMinutes` must be an integer from 30 to 1440");
 				return {
 					ok: true,
-					value: await service.getStatus(request.channel, request.cacheTtlMinutes)
+					value: await service.getStatus(request.cacheTtlMinutes)
 				};
 			}
 			if (endpoint === UPDATE_ENDPOINTS.checkUpdate) {
 				const request = requestOf(payload);
-				if (request === void 0) return failure("dsh-update-status/bad-request", "`force` must be boolean, `channel` must be latest, next, or alpha, and `cacheTtlMinutes` must be an integer from 30 to 1440");
+				if (request === void 0) return failure("dsh-update-status/bad-request", "`force` must be boolean and `cacheTtlMinutes` must be an integer from 30 to 1440");
 				return {
 					ok: true,
-					value: await service.check(request.force === true, request.channel, request.cacheTtlMinutes)
+					value: await service.check(request.force === true, request.cacheTtlMinutes)
 				};
 			}
 			return failure("dsh-update-status/unknown-endpoint", `unknown endpoint: ${endpoint}`);
@@ -582,6 +577,21 @@ function compareSemver(leftValue, rightValue) {
 	}
 	return 0;
 }
+/**
+* Highest version in a list, preserving the spelling of the winner.
+*
+* Unparsable entries are skipped rather than failing the whole list: a registry
+* that adds one odd tag must not hide the release line behind it. Returns
+* undefined when nothing in the list is valid SemVer.
+*/
+function newestSemver(versions) {
+	let winner;
+	for (const candidate of versions) {
+		if (parseSemver(candidate) === void 0) continue;
+		if (winner === void 0 || compareSemver(candidate, winner) > 0) winner = candidate;
+	}
+	return winner;
+}
 //#endregion
 //#region src/host/update-status.ts
 const REGISTRY_URL = "https://registry.npmjs.org/@deepseek-ai%2Fdsh";
@@ -595,9 +605,8 @@ function boundedMessage(error) {
 function describeWarning(warning) {
 	switch (warning.code) {
 		case "registry-unavailable": return `Unable to check the npm registry: ${warning.detail}`;
-		case "channel-unavailable": return `The npm registry does not publish a ${warning.channel} channel.`;
-		case "version-incomparable": return `Unable to compare the current version ${warning.currentVersion} with ${warning.channel} channel version ${warning.selectedVersion} using SemVer.`;
-		case "preview-unverified": return `${warning.channel} is a preview channel; version ${warning.version} has not been verified as compatible with this plugin.`;
+		case "version-incomparable": return `Unable to compare the current version ${warning.currentVersion} with the published version ${warning.latestVersion} using SemVer.`;
+		case "version-unverified": return `Version ${warning.version} is newer than this plugin has been verified against.`;
 		case "stale-schemastery": {
 			const version = warning.version === null ? "" : ` ${warning.version}`;
 			const remedy = warning.nodeModulesDir === null ? `Remove the stale ${SCHEMASTERY_NAME} directory there and restart DSH.` : `Remove the stale copy and restart DSH: rm -rf ${warning.nodeModulesDir}`;
@@ -615,7 +624,7 @@ function warningFallback(warnings) {
 * and only the settings form is degraded, so repainting the brand row would
 * misreport a plugin-runtime fact as a failed update check.
 */
-const ADVISORY_CODES = ["preview-unverified", "stale-schemastery"];
+const ADVISORY_CODES = ["version-unverified", "stale-schemastery"];
 function warningKindOf(warnings) {
 	if (warnings.length === 0) return null;
 	return warnings.every((warning) => ADVISORY_CODES.includes(warning.code)) ? "notice" : "failure";
@@ -626,28 +635,28 @@ function dateOrNull(value) {
 	return Number.isFinite(time) ? new Date(time).toISOString() : null;
 }
 function compatibilityOf(version) {
-	return version !== null && VERIFIED_DSH_VERSIONS.includes(version) ? "verified" : "unverified";
+	return VERIFIED_DSH_VERSIONS.includes(version) ? "verified" : "unverified";
 }
+/**
+* Reduce one registry document to the single newest release.
+*
+* Every dist-tag contributes, not a fixed `latest`/`next`/`alpha` triple: npm
+* tags are the registry's own vocabulary, and a version published under a tag
+* this plugin has never heard of is still a version users can install.
+*/
 function registryReleaseOf(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("npm registry returned an invalid document");
 	const record = value;
 	const tags = record["dist-tags"];
 	if (tags === null || typeof tags !== "object" || Array.isArray(tags)) throw new Error("npm registry response has no dist-tags");
-	const tagRecord = tags;
+	const version = newestSemver(Object.values(tags).filter((version) => typeof version === "string" && version.trim() !== "").map((version) => version.trim()));
+	if (version === void 0) throw new Error("npm registry response has no comparable dist-tags");
 	const time = record.time;
-	const timeRecord = time !== null && typeof time === "object" && !Array.isArray(time) ? time : {};
-	const channels = RELEASE_CHANNELS.map((channel) => {
-		const raw = tagRecord[channel];
-		const version = typeof raw === "string" && raw.trim() !== "" ? raw.trim() : null;
-		return {
-			channel,
-			version,
-			publishedAt: version === null ? null : dateOrNull(timeRecord[version]),
-			compatibility: compatibilityOf(version)
-		};
-	});
-	if (channels.every((release) => release.version === null)) throw new Error("npm registry response has no supported dist-tags");
-	return { channels };
+	return { latest: {
+		version,
+		publishedAt: dateOrNull((time !== null && typeof time === "object" && !Array.isArray(time) ? time : {})[version]),
+		compatibility: compatibilityOf(version)
+	} };
 }
 /** Only the explicitly approved HTTPS npm Registry authority may be contacted. */
 function assertApprovedRegistryUrl(raw) {
@@ -698,25 +707,25 @@ var UpdateStatusService = class {
 		this.releaseUrl = options.releaseUrl ?? "https://github.com/deepseek-ai/deepseek-harness/releases";
 		this.runtimeWarnings = options.runtimeWarnings ?? [];
 	}
-	getStatus(channel = "latest", cacheTtlMinutes) {
-		return this.check(false, channel, cacheTtlMinutes);
+	getStatus(cacheTtlMinutes) {
+		return this.check(false, cacheTtlMinutes);
 	}
 	/** `force` bypasses TTL but still joins any registry check already in flight. */
-	async check(force = false, channel = "latest", cacheTtlMinutes) {
+	async check(force = false, cacheTtlMinutes) {
 		const ttlMs = isCacheTtlMinutes(cacheTtlMinutes) ? cacheTtlMinutes * 60 * 1e3 : this.ttlMs;
 		const cached = this.cache;
-		if (!force && cached !== void 0 && this.now() - cached.checkedAtMs < ttlMs) return this.statusFromCache(cached, channel, true, []);
+		if (!force && cached !== void 0 && this.now() - cached.checkedAtMs < ttlMs) return this.statusFromCache(cached, true, []);
 		if (this.inFlight !== void 0) try {
-			return this.statusFromCache(await this.inFlight, channel, false, []);
+			return this.statusFromCache(await this.inFlight, false, []);
 		} catch (error) {
-			return this.statusAfterFailure(channel, error);
+			return this.statusAfterFailure(error);
 		}
 		const run = this.refreshRelease();
 		this.inFlight = run;
 		try {
-			return this.statusFromCache(await run, channel, false, []);
+			return this.statusFromCache(await run, false, []);
 		} catch (error) {
-			return this.statusAfterFailure(channel, error);
+			return this.statusAfterFailure(error);
 		} finally {
 			if (this.inFlight === run) this.inFlight = void 0;
 		}
@@ -729,82 +738,65 @@ var UpdateStatusService = class {
 		this.cache = cache;
 		return cache;
 	}
-	statusAfterFailure(channel, error) {
+	statusAfterFailure(error) {
 		const warnings = [{
 			code: "registry-unavailable",
 			detail: boundedMessage(error)
 		}];
-		return this.cache === void 0 ? this.statusWithoutRemoteRelease(channel, warnings) : this.statusFromCache(this.cache, channel, true, warnings);
+		return this.cache === void 0 ? this.statusWithoutRemoteRelease(warnings) : this.statusFromCache(this.cache, true, warnings);
 	}
-	statusFromCache(cache, channel, cached, initialWarnings) {
-		const selected = cache.release.channels.find((release) => release.channel === channel) ?? {
-			channel,
-			version: null,
-			publishedAt: null,
-			compatibility: "unverified"
-		};
-		const comparison = selected.version === null ? void 0 : compareSemver(this.installation.currentVersion, selected.version);
+	statusFromCache(cache, cached, initialWarnings) {
+		const selected = cache.release.latest;
+		const comparison = selected === null ? void 0 : compareSemver(this.installation.currentVersion, selected.version);
+		const hasUpdate = comparison !== void 0 && comparison < 0;
 		const warnings = [...initialWarnings];
-		if (selected.version === null) warnings.push({
-			code: "channel-unavailable",
-			channel
-		});
-		if (selected.version !== null && comparison === void 0) warnings.push({
+		if (selected !== null && comparison === void 0) warnings.push({
 			code: "version-incomparable",
 			currentVersion: this.installation.currentVersion,
-			channel,
-			selectedVersion: selected.version
+			latestVersion: selected.version
 		});
-		if (channel !== "latest" && selected.version !== null && selected.compatibility !== "verified") warnings.push({
-			code: "preview-unverified",
-			channel,
+		if (hasUpdate && selected !== null && selected.compatibility !== "verified") warnings.push({
+			code: "version-unverified",
 			version: selected.version
 		});
 		warnings.push(...this.runtimeWarnings);
 		return {
 			currentVersion: this.installation.currentVersion,
-			latestVersion: selected.version,
-			hasUpdate: comparison !== void 0 && comparison < 0,
+			latestVersion: selected?.version ?? null,
+			hasUpdate,
+			compatibility: selected?.compatibility ?? "unverified",
 			cached,
 			checkedAt: new Date(cache.checkedAtMs).toISOString(),
 			warning: warningFallback(warnings),
 			warningKind: warningKindOf(warnings),
 			warnings,
 			installKind: this.installation.installKind,
-			upgradeCommand: upgradeCommandFor(this.installation.installKind, this.installation.packageName || "@deepseek-ai/dsh", channel),
+			upgradeCommand: upgradeCommandFor(this.installation.installKind, this.installation.packageName || "@deepseek-ai/dsh", selected?.version ?? null),
 			releaseUrl: this.releaseUrl,
 			changelogUrl: this.releaseUrl,
-			publishedAt: selected.publishedAt,
+			publishedAt: selected?.publishedAt ?? null,
 			packageName: this.installation.packageName || "@deepseek-ai/dsh",
-			channel,
-			channels: cache.release.channels,
 			canApplyInPlace: false
 		};
 	}
-	statusWithoutRemoteRelease(channel, warnings) {
+	statusWithoutRemoteRelease(warnings) {
 		const combined = [...warnings, ...this.runtimeWarnings];
 		return {
 			currentVersion: this.installation.currentVersion,
 			latestVersion: null,
 			hasUpdate: false,
+			compatibility: "unverified",
 			cached: false,
 			checkedAt: null,
 			warning: warningFallback(combined),
 			warningKind: warningKindOf(combined),
 			warnings: combined,
 			installKind: this.installation.installKind,
-			upgradeCommand: upgradeCommandFor(this.installation.installKind, this.installation.packageName || "@deepseek-ai/dsh", channel),
+			upgradeCommand: upgradeCommandFor(this.installation.installKind, this.installation.packageName || "@deepseek-ai/dsh", null),
 			releaseUrl: this.releaseUrl,
 			changelogUrl: this.releaseUrl,
 			publishedAt: null,
 			packageName: this.installation.packageName || "@deepseek-ai/dsh",
-			channel,
-			channels: RELEASE_CHANNELS.map((item) => ({
-				channel: item,
-				version: null,
-				publishedAt: null,
-				compatibility: "unverified"
-			})),
 			canApplyInPlace: false
 		};
 	}
@@ -833,11 +825,6 @@ function buildConfigSchema(factory, volatileAvailable) {
 		timeoutMs: factory.number().step(1).min(1e3).max(3e4).default(DEFAULT_TIMEOUT_MS),
 		autoCheckOnMount: factory.boolean().default(true),
 		sidebarEnabled: volatile(factory.boolean().default(true)),
-		channel: volatile(factory.union([
-			"latest",
-			"next",
-			"alpha"
-		]).default("latest").loose()),
 		cacheTtlMinutes: volatile(factory.number().min(30).max(1440).default(360))
 	});
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-update-status",
-  "version": "0.1.11",
+  "version": "0.2.0",
   "description": "Read-only DeepSeek Harness Web plugin that shows the running DSH version, discovers latest/next/alpha releases, warns about compatibility, and generates copy-only upgrade commands.",
   "type": "module",
   "main": "lib/index.js",
@@ -65,7 +65,9 @@
         "0.1.7-alpha.2": "compatible",
         "0.1.7-rc.1": "compatible",
         "0.1.7-rc.2": "compatible",
-        "0.2.0-rc.1": "compatible"
+        "0.2.0-rc.1": "compatible",
+        "0.2.0-rc.2": "compatible",
+        "0.2.1-alpha.1": "compatible"
       }
     }
   },