@aiwayds/dsh-mcp-adapter 0.8.0 → 0.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwayds/dsh-mcp-adapter",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "dsh plugin: token-efficient prompt-side shim for the official MCP client — folds mcp__* tool schemas out of every assembled prompt and exposes two constant meta-tools (mcp_list / mcp_call) instead",
   "keywords": [
     "dsh",
@@ -29,7 +29,7 @@
   ],
   "scripts": {
     "link-closure": "node scripts/link-dsh-closure.mjs",
-    "postinstall": "node scripts/link-dsh-closure.mjs",
+    "prepare": "node scripts/link-dsh-closure.mjs",
     "build": "tsc -p tsconfig.json",
     "check": "tsc --noEmit -p tsconfig.json",
     "precheck": "node scripts/link-dsh-closure.mjs",
@@ -78,12 +78,12 @@
     "typescript": "~5.9.0",
     "@deepseek-ai/cordis": "4.1.0",
     "@deepseek-ai/schemastery": "3.19.0",
-    "@deepseek-ai/dsh-commands": "0.2.2-rc.1",
-    "@deepseek-ai/dsh-llm": "0.2.2-rc.1",
-    "@deepseek-ai/dsh-scope": "0.2.2-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.2.2-rc.1",
-    "@deepseek-ai/dsh-tools": "0.2.2-rc.1",
-    "@deepseek-ai/dsh-util-values": "0.2.2-rc.1"
+    "@deepseek-ai/dsh-commands": "0.2.2-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.2-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.2-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.2-rc.2",
+    "@deepseek-ai/dsh-util-values": "0.2.2-rc.2"
   },
   "dsh": {
     "bundle": {

package/scripts/link-dsh-closure.mjs

@@ -1,5 +1,5 @@
 /**
- * Postinstall linker: point every `node_modules/@deepseek-ai/*` entry at the
+ * Install-hook linker: point every `node_modules/@deepseek-ai/*` entry at the
  * global dsh closure.
  *
  * Why this exists: dsh-tui-pi is a plugin that runs *inside* the installed
@@ -17,7 +17,11 @@
  * (`Property 'settings' does not exist on type 'Context'`), so they must stay
  * *undeclared*. pnpm then treats the closure links as extraneous — and, as
  * it prunes entries it once managed, the links can still disappear after an
- * install. This script re-creates them on every `pnpm install` (postinstall).
+ * install. This script re-creates them on every root install (the `prepare`
+ * hook). It is deliberately NOT `postinstall`: pnpm 11 treats any dependency
+ * install hook as an unapproved build (strictDepBuilds) and fails the
+ * consumer's install, while `prepare` never runs for registry dependencies —
+ * so the published package carries no install hook at all.
  *
  * It is a no-op (exit 0) when no global dsh install is found — a dev machine
  * without dsh simply cannot typecheck against dsh types.
@@ -29,15 +33,26 @@ import { dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const repoRoot = dirname(dirname(fileURLToPath(import.meta.url)))
-// Guard: this postinstall is a dev-machine convenience for THIS repo. A
-// published tarball carries scripts/ but no src/, and must never touch a
-// consumer's node_modules (it would delete their @deepseek-ai packages and
-// replace them with symlinks into their global dsh closure). pnpm ≥10 blocks
-// dependency lifecycle scripts by default, but npm would run this — exit
-// silently outside the repo.
+// Guard: this hook is a dev-machine convenience for THIS repo. A published
+// tarball carries scripts/ but no src/, and must never touch a consumer's
+// node_modules (it would delete their @deepseek-ai packages and replace them
+// with symlinks into their global dsh closure) — exit silently outside the
+// repo.
 if (!existsSync(join(repoRoot, 'src'))) {
   process.exit(0)
 }
+// Second guard: npm runs `prepare` inside a throwaway clone when installing a
+// git dependency, and a root project install in a subdirectory walks up to
+// this package with INIT_CWD elsewhere. Only a direct root install (INIT_CWD
+// = repoRoot, or unset for `node scripts/...`) may link.
+const initCwd = process.env.INIT_CWD
+if (initCwd !== undefined && initCwd !== '') {
+  try {
+    if (realpathSync(initCwd) !== realpathSync(repoRoot)) process.exit(0)
+  } catch {
+    process.exit(0)
+  }
+}
 const scopeDir = join(repoRoot, 'node_modules', '@deepseek-ai')
 
 /** The global dsh package's own `node_modules/@deepseek-ai` closure dir. */

package/scripts/smoke-boot.mjs

@@ -46,7 +46,9 @@ function fail(message, output = '') {
   process.exit(1)
 }
 
-const pack = spawnSync('npm', ['pack', '--pack-destination', work], { cwd: repoRoot, encoding: 'utf8' })
+// --ignore-scripts keeps the root `prepare` hook from writing to stdout and
+// corrupting the filename parsed below (the build gate already produced lib/).
+const pack = spawnSync('npm', ['pack', '--pack-destination', work, '--ignore-scripts'], { cwd: repoRoot, encoding: 'utf8' })
 if (pack.status !== 0 || pack.error) fail('npm pack failed', `${pack.stdout}\n${pack.stderr}`)
 const tarball = path.join(work, pack.stdout.trim().split('\n').at(-1))