dsh-update-status 0.1.4 → 0.1.6

package/lib/index.d.ts

@@ -4,6 +4,23 @@ import { Context } from "@deepseek-ai/cordis";
 declare const RELEASE_CHANNELS: readonly ['latest', 'next', 'alpha'];
 type ReleaseChannel = (typeof RELEASE_CHANNELS)[number];
 type ReleaseCompatibility = 'verified' | 'unverified' | 'incompatible';
+/**
+ * Severity of `warning`, so a surface can tell "the plugin could not determine
+ * the update state" from "here is something worth knowing".
+ *
+ * - `failure`: no usable answer — a failed registry read, a channel the registry
+ *   does not publish, or a version SemVer cannot compare. This is what justifies
+ *   repainting the sidebar chip.
+ * - `notice`: the answer is complete and usable; the text is advisory, e.g. a
+ *   preview channel whose release this bundle has not been verified against.
+ *   The chip must NOT repaint for this — an operator upgrading DSH ahead of the
+ *   plugin would otherwise see the chip turn red for a plugin-side bookkeeping
+ *   fact.
+ *
+ * Optional on purpose: a Host older than this field leaves it `undefined`, and
+ * the client then falls back to treating any warning as a failure.
+ */
+type UpdateWarningKind = 'failure' | 'notice';
 type InstallKind = 'npm-global' | 'pnpm-global' | 'source-checkout' | 'unknown';
 interface ChannelRelease {
   channel: ReleaseChannel;
@@ -23,6 +40,8 @@ interface UpdateStatus {
   cached: boolean;
   checkedAt: string | null;
   warning: string | null;
+  /** Severity of `warning`; absent from a Host older than the field. */
+  warningKind?: UpdateWarningKind | null;
   installKind: InstallKind;
   upgradeCommand: string;
   releaseUrl: string;
@@ -37,6 +56,32 @@ interface UpdateStatus {
   canApplyInPlace: false;
 }
 //#endregion
+//#region src/host/settings.d.ts
+/** Deployment config (ordinary) plus the volatile user preferences the form edits. */
+interface UpdateStatusConfig {
+  /** Deployment: on-demand registry cache duration, in hours. */
+  cacheTtlHours?: number;
+  /** Deployment: registry request timeout, in milliseconds. */
+  timeoutMs?: number;
+  /** Deployment: run one metadata check when the process mounts the plugin. */
+  autoCheckOnMount?: boolean;
+  /** Preference: show the sidebar version chip and its update panel. */
+  sidebarEnabled?: boolean;
+  /** Preference: release channel followed for comparison and commands. */
+  channel?: ReleaseChannel;
+  /** Preference: on-demand registry cache duration, in minutes. */
+  cacheTtlMinutes?: number;
+}
+/**
+ * The plugin's Config schema; its volatile fields ARE the settings form.
+ *
+ * The explicit two-argument annotation is load-bearing: a `.volatile()` field's
+ * output is a stable reference (`Volatile<T>`) rather than the bare value the
+ * input side takes, so the inferred schema type cannot be named by the emitted
+ * `.d.ts` (TS2883) without stating the input side here.
+ */
+declare const Config: z<UpdateStatusConfig, Record<string, unknown>>;
+//#endregion
 //#region src/host/installation.d.ts
 interface InstallationInfo {
   currentVersion: string;
@@ -74,6 +119,7 @@ declare class UpdateStatusService {
   private refreshRelease;
   private statusAfterFailure;
   private statusFromCache;
+  /** No remote data at all: the registry read itself failed, never a notice. */
   private statusWithoutRemoteRelease;
 }
 //#endregion
@@ -81,13 +127,7 @@ declare class UpdateStatusService {
 declare const name = "dsh-update-status";
 /** Connection supplies the authenticated transport; settings remains optional. */
 declare const inject: string[];
-interface Config {
-  cacheTtlHours?: number;
-  timeoutMs?: number;
-  autoCheckOnMount?: boolean;
-}
-/** Deployment config only controls metadata-check timing; it never authorizes upgrades. */
-declare const Config: z<Config>;
+type Config = UpdateStatusConfig;
 declare function apply(ctx: Context, config?: Config): void;
 //#endregion
 export { Config, type InstallKind, type UpdateStatus, UpdateStatusService, apply, inject, name };

package/lib/index.js

@@ -1,17 +1,8 @@
 import { createRequire } from "node:module";
-import z from "@deepseek-ai/schemastery";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { dirname, join, normalize, sep } from "node:path";
+import z from "@deepseek-ai/schemastery";
 //#region src/shared/types.ts
-/**
-* JSON-only contract shared by the Host and Web halves.
-*
-* The static package uses the authenticated Connection RPC channel because
-* `harness.handle` / `host.call` are dynamic-Cordis-only closure APIs in DSH
-* 0.1.5-rc.1. The endpoint vocabulary remains deliberately small and private
-* to this plugin channel.
-*/
-const PLUGIN_ID = "dsh-update-status";
 const PACKAGE_NAME = "@deepseek-ai/dsh";
 /** Shared Connection RPC channel. Custom prefixes 405 on the SPA fallback. */
 const UPDATE_STATUS_CHANNEL = "/api";
@@ -21,7 +12,7 @@ const UPDATE_STATUS_CHANNEL = "/api";
 * release the registry reports stays `unverified` — the plugin never claims a
 * compatibility nobody checked.
 */
-const VERIFIED_DSH_VERSIONS = ["0.1.5-rc.1", "0.1.6-alpha.1"];
+const VERIFIED_DSH_VERSIONS = ["0.1.7-alpha.2", "0.1.7-rc.1"];
 const RELEASE_CHANNELS = [
 	"latest",
 	"next",
@@ -262,34 +253,6 @@ function installUpdateStatusRpc(ctx, service) {
 	});
 }
 //#endregion
-//#region src/host/settings.ts
-const SettingsSchema = z.object({
-	sidebarEnabled: z.boolean().default(true),
-	channel: z.union([
-		"latest",
-		"next",
-		"alpha"
-	]).default("latest").loose(),
-	cacheTtlMinutes: z.number().min(30).max(1440).default(360)
-});
-/** Settings are optional composition; absent providers leave the Web default on. */
-function installSettings(ctx) {
-	ctx.inject(["settings"], (settingsCtx) => {
-		try {
-			settingsCtx.settings.register(PLUGIN_ID, SettingsSchema, {
-				base: {
-					sidebarEnabled: true,
-					channel: "latest",
-					cacheTtlMinutes: 360
-				},
-				applies: "live"
-			});
-		} catch (error) {
-			console.error("[dsh-update-status] settings namespace registration failed:", error);
-		}
-	});
-}
-//#endregion
 //#region src/shared/semver.ts
 const SEMVER = /^(?:v)?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 const NUMERIC_IDENTIFIER = /^(0|[1-9]\d*)$/;
@@ -477,13 +440,16 @@ var UpdateStatusService = class {
 		const missingWarning = selected.version === null ? `npm registry 未发布 ${channel} 通道。` : null;
 		const comparisonWarning = selected.version !== null && comparison === void 0 ? `无法按 SemVer 比较当前版本 ${this.installation.currentVersion} 与 ${channel} 通道版本 ${selected.version}。` : null;
 		const previewWarning = channel !== "latest" && selected.version !== null && selected.compatibility !== "verified" ? `${channel} 是预览通道，版本 ${selected.version} 尚未验证与本插件兼容。` : null;
+		const failureWarning = warningWith(warningWith(initialWarning, missingWarning), comparisonWarning);
+		const warning = warningWith(failureWarning, previewWarning);
 		return {
 			currentVersion: this.installation.currentVersion,
 			latestVersion: selected.version,
 			hasUpdate: comparison !== void 0 && comparison < 0,
 			cached,
 			checkedAt: new Date(cache.checkedAtMs).toISOString(),
-			warning: warningWith(warningWith(initialWarning, missingWarning), warningWith(comparisonWarning, previewWarning)),
+			warning,
+			warningKind: warning === null ? null : failureWarning === null ? "notice" : "failure",
 			installKind: this.installation.installKind,
 			upgradeCommand: upgradeCommandFor(this.installation.installKind, this.installation.packageName || "@deepseek-ai/dsh", channel),
 			releaseUrl: this.releaseUrl,
@@ -495,6 +461,7 @@ var UpdateStatusService = class {
 			canApplyInPlace: false
 		};
 	}
+	/** No remote data at all: the registry read itself failed, never a notice. */
 	statusWithoutRemoteRelease(channel, warning) {
 		return {
 			currentVersion: this.installation.currentVersion,
@@ -503,6 +470,7 @@ var UpdateStatusService = class {
 			cached: false,
 			checkedAt: null,
 			warning,
+			warningKind: "failure",
 			installKind: this.installation.installKind,
 			upgradeCommand: upgradeCommandFor(this.installation.installKind, this.installation.packageName || "@deepseek-ai/dsh", channel),
 			releaseUrl: this.releaseUrl,
@@ -521,16 +489,57 @@ var UpdateStatusService = class {
 	}
 };
 //#endregion
-//#region src/index.ts
-const name = "dsh-update-status";
-/** Connection supplies the authenticated transport; settings remains optional. */
-const inject = ["connection"];
-/** Deployment config only controls metadata-check timing; it never authorizes upgrades. */
+//#region src/host/settings.ts
+/**
+* The plugin's Config schema; its volatile fields ARE the settings form.
+*
+* The explicit two-argument annotation is load-bearing: a `.volatile()` field's
+* output is a stable reference (`Volatile<T>`) rather than the bare value the
+* input side takes, so the inferred schema type cannot be named by the emitted
+* `.d.ts` (TS2883) without stating the input side here.
+*/
 const Config = z.object({
 	cacheTtlHours: z.number().step(1).min(1).max(24).default(6),
 	timeoutMs: z.number().step(1).min(1e3).max(3e4).default(DEFAULT_TIMEOUT_MS),
-	autoCheckOnMount: z.boolean().default(true)
+	autoCheckOnMount: z.boolean().default(true),
+	sidebarEnabled: z.boolean().default(true).volatile(),
+	channel: z.union([
+		"latest",
+		"next",
+		"alpha"
+	]).default("latest").loose().volatile(),
+	cacheTtlMinutes: z.number().min(30).max(1440).default(360).volatile()
 });
+/**
+* Suppress the auto-generated settings page for this entry.
+*
+* `autoGenerate` defaults to true, which would put a second, generic form beside
+* the plugin's own `settings.section` page. Registering the policy is the
+* documented move for a plugin that owns its preference UI (`ui-theme`,
+* `ui-chat`, `ui-conversation` all do exactly this), and the entry's row stays
+* in `settings.describe()` either way — the browser half still reads and writes
+* it through `ctx.configForms`.
+*
+* Guarded twice: a deployment without the settings service never runs the inject
+* callback (the plugin keeps working from its defaults), and a refused policy
+* registration is contained instead of taking the plugin down.
+*
+* @param ctx - Host plugin context owning the entry's page policy.
+*/
+function installSettings(ctx) {
+	try {
+		ctx.inject(["settings"], (child) => {
+			child.effect(() => child.settings.configure({ auto: false }, ctx.fiber));
+		});
+	} catch (error) {
+		console.error("[dsh-update-status] settings page policy registration failed:", error);
+	}
+}
+//#endregion
+//#region src/index.ts
+const name = "dsh-update-status";
+/** Connection supplies the authenticated transport; settings remains optional. */
+const inject = ["connection"];
 function boundedNumber(value, fallback, min, max) {
 	if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
 	return Math.min(max, Math.max(min, Math.floor(value)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-update-status",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Read-only DeepSeek Harness Web plugin that shows the running DSH version, discovers latest/next/alpha releases, warns about compatibility, and generates copy-only upgrade commands.",
   "type": "module",
   "main": "lib/index.js",
@@ -24,6 +24,7 @@
     "CHANGELOG.md",
     "LICENSE",
     "assets/update-panel.png",
+    "assets/sidebar-chip.png",
     "docs/RELEASING.md"
   ],
   "engines": {
@@ -41,12 +42,17 @@
     "access": "public"
   },
   "dsh": {
+    "manifestVersion": 1,
+    "engines": {
+      "dsh": ">=0.1.7-alpha.2 <0.2.0"
+    },
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
     "client": {
       "platform": "web",
       "inject": [
+        "@deepseek-ai/dsh-api-remotes",
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-ui-layout",
         "@deepseek-ai/dsh-client-ui-sidebar",
@@ -56,8 +62,8 @@
     },
     "compatibility": {
       "dshReleases": {
-        "0.1.5-rc.1": "compatible",
-        "0.1.6-alpha.1": "compatible"
+        "0.1.7-alpha.2": "compatible",
+        "0.1.7-rc.1": "compatible"
       }
     }
   },
@@ -70,17 +76,15 @@
     "version"
   ],
   "license": "MIT",
-  "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.2"
-  },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.1"
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/dsh-settings": ">=0.1.7-alpha.2 <0.2.0",
+    "@deepseek-ai/schemastery": "^3.18.4"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-settings": "0.1.5-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/dsh-settings": "0.1.7-alpha.2",
+    "@deepseek-ai/schemastery": "^3.18.4",
     "@types/node": "^26.2.0",
     "@types/react": "^18.3.31",
     "react": "^18.3.1",