@bushizhanghan/dsh-publish-gate 0.3.4 → 0.5.0

package/README.md

@@ -66,6 +66,7 @@ dsh plugin --profile desktop add @bushizhanghan/dsh-publish-gate
 | `require-in-esm` | ESM 里 `require()` → `ERR_AMBIGUOUS_MODULE_SYNTAX`，报错不带行号 |
 | `no-license` | 缺 LICENSE |
 | `version-taken` | 这个版本已经在 registry 上，再发是 403 |
+| `version-behind-latest` | 本地版本比 registry 上的 `latest` **旧**。npm 会照收，但 `latest` 继续指向新版本——包上传了，按名字装的人永远拿不到，且没有任何报错 |
 | `registry-unreachable` | registry 回了 500/429 —— 版本检查**没跑**，所以别把它当干净 |
 
 ### 值得在发布前知道的（warn / info）
@@ -137,6 +138,18 @@ dsh plugin --profile desktop add @bushizhanghan/dsh-publish-gate
 
 `lib-debugger`（error）、`lib-console-log`、`lib-hardcoded-path`（`C:\Users\...` 硬编码）、`lib-url-pathname`（`new URL(...).pathname` 在中文路径上会百分号编码，得用 `fileURLToPath`）、`node-too-old`（`engines.node` 写着 `>=18`，`lib/` 里却用了 `Object.groupBy`（21）或 `Promise.withResolvers`（22）。npm 对 `engines` 只是警告，照样装上，然后在 import 那一刻抛——用户看到的是「插件坏了」，不是版本不匹配）。字符串和注释里的同名文字不算。
 
+### 依赖真实性：`lib/` 里 import 的东西，消费者那边真的会装上吗
+
+`npm install` 装一个包时只装它的 `dependencies`，**永远不装 `devDependencies`**。所以在你自己仓库里 `import 'x'` 能跑（依赖树是完整的），到了用户那边 `ERR_MODULE_NOT_FOUND`——插件装上了，然后加载失败，用户看到的是「这个插件坏了」。
+
+| 规则 | 抓什么 |
+|---|---|
+| `undeclared-import` | `lib/` 里 import 了某个包，`package.json` 三个依赖字段里都没有。它在你机器上能解析，只是因为别的包把它提升（hoist）到了 `node_modules` |
+| `dep-in-dev-only` | 只在 `devDependencies` 里声明。这是最常见的一种：写代码时 `npm i -D` 装上了，测试也全绿 |
+| `unused-dependency` | `dependencies` 里声明了，`lib/` 里从没 import。每个装你的人都白下一份（info，因为有些包是运行时动态加载的） |
+
+内置模块（`node:fs`、`fs/promises`）、相对路径、以及浏览器半边从宿主 `require` 拿到的 `react` 都不算。工具描述里那句 `require("react")` 是散文，也不是依赖——这条规则最早就是被它自己误报出来的。
+
 ### 构建产物：`src/` 和 `lib/` 谁更新
 
 有 `src/` 的插件（TypeScript 源码 + 构建出来的 `lib/`）最容易在这件事上翻车，而且两种翻车的表现一模一样——**发出去的字节没人跑过**：
@@ -148,6 +161,20 @@ dsh plugin --profile desktop add @bushizhanghan/dsh-publish-gate
 
 两条都只是 warn：有可能你就是要发手改的产物（我干过）。但发之前你得知道自己在发什么。
 
+### 可追溯性：一周后你还能指出线上那包是哪份代码吗
+
+发布是字节唯一一次离开你机器的时刻。如果这些字节既不在任何 commit 里、也没有 tag，那么一周后——包括你自己在内——没人说得清 registry 上那包是从哪份源码来的。
+
+这不是假想：我发过一版 `1.2.7` 到 npm，仓库的 GitHub release 还停在 `1.2.6`，市场条目指向旧 tarball，维护者直接打回。
+
+| 规则 | 抓什么 |
+|---|---|
+| `git-uncommitted` | 会进 tarball 的文件有未提交改动。发出去的字节不在任何 commit 里，以后复现不出来、也没法 bisect |
+| `git-tag-missing` | HEAD 上没有 `v<version>` tag。发完之后这些字节的唯一记录就是 registry，GitHub release、changelog、市场条目都没法指向一个从没打过 tag 的 commit |
+| `git-tag-elsewhere` | tag 存在但不在 HEAD 上：tag 和 tarball 是两份不同的字节，从那个 tag 构建出来的东西不是你刚发的东西 |
+
+都是 warn：本地试发、私有包、发完再补 tag 都合理。但「发完之后指不出是哪份代码」这件事，事后补不回来。
+
 ## 一个真实的例子
 
 对一个刚从别人那儿接手、准备发布的插件跑 `publish_gate`：
@@ -183,7 +210,7 @@ dsh plugin --profile desktop add @bushizhanghan/dsh-publish-gate
 ## 开发
 
 ```sh
-node --test                      # 67 个引擎单测
+node --test                      # 80 个引擎单测
 node test/integration.test.mjs   # 26 条集成断言（9 个真实插件作 fixture）
 ```
 

package/lib/engine.js

@@ -8,6 +8,7 @@
 // you a publish, so they are all checkable before you spend it.
 import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'
 import { join, relative } from 'node:path'
+import { builtinModules } from 'node:module'
 import { execFile } from 'node:child_process'
 import { promisify } from 'node:util'
 
@@ -555,30 +556,36 @@ export function checkNpmState(dir) {
   return out
 }
 
-/** Version-collision check: the same version already on the registry. */
-export async function checkVersionTaken(name, version, { registry = 'https://registry.npmjs.org', timeoutMs = 8000 } = {}) {
+/**
+ * Version-collision check: the same version already on the registry.
+ * `doc` injects a registry document so the rule is testable without the network.
+ */
+export async function checkVersionTaken(name, version, { registry = 'https://registry.npmjs.org', timeoutMs = 8000, doc } = {}) {
   const out = []
   try {
-    const res = await fetch(`${registry.replace(/\/$/, '')}/${name.replace('/', '%2f')}`, {
-      headers: { accept: 'application/vnd.npm.install-v1+json' },
-      signal: AbortSignal.timeout(timeoutMs),
-    })
-    if (res.status === 404) return out // never published: fine
-    if (!res.ok) {
-      // A 500 or a rate limit is not proof the version is free. Saying nothing
-      // here made the gate report "clean" for a check that never ran.
-      out.push(
-        F(
-          'registry-unreachable',
-          'warn',
-          `could not read ${name} from the registry (HTTP ${res.status})`,
-          'The version-taken check did not run, so this is NOT a clean version check. npm itself will still refuse a duplicate on publish.',
-          'Re-run the gate later, or check https://www.npmjs.com/package/' + name + '?activeTab=versions by hand.',
-        ),
-      )
-      return out
+    let json = doc ?? null
+    if (!json) {
+      const res = await fetch(`${registry.replace(/\/$/, '')}/${name.replace('/', '%2f')}`, {
+        headers: { accept: 'application/vnd.npm.install-v1+json' },
+        signal: AbortSignal.timeout(timeoutMs),
+      })
+      if (res.status === 404) return out // never published: fine
+      if (!res.ok) {
+        // A 500 or a rate limit is not proof the version is free. Saying nothing
+        // here made the gate report "clean" for a check that never ran.
+        out.push(
+          F(
+            'registry-unreachable',
+            'warn',
+            `could not read ${name} from the registry (HTTP ${res.status})`,
+            'The version-taken check did not run, so this is NOT a clean version check. npm itself will still refuse a duplicate on publish.',
+            'Re-run the gate later, or check https://www.npmjs.com/package/' + name + '?activeTab=versions by hand.',
+          ),
+        )
+        return out
+      }
+      json = await res.json()
     }
-    const json = await res.json()
     if (json?.versions?.[version]) {
       out.push(
         F(
@@ -590,6 +597,23 @@ export async function checkVersionTaken(name, version, { registry = 'https://reg
         ),
       )
     }
+
+    // npm accepts a publish of an OLDER version without a word. It lands in
+    // `versions`, but `dist-tags.latest` keeps pointing at the newer one, so
+    // anyone installing by name never receives it. The tarball is uploaded and
+    // invisible — which reads exactly like "my update did not reach anyone".
+    const latest = json?.['dist-tags']?.latest
+    if (latest && compareVersions(version, latest) < 0) {
+      out.push(
+        F(
+          'version-behind-latest',
+          'error',
+          `${name}@${version} is older than the published latest ${latest}`,
+          'npm will accept this publish and leave `latest` on the newer version, so install-by-name keeps resolving to the old code. Nothing errors; the release simply never reaches anyone.',
+          `Publish ${bumpPatch(latest)} or higher instead.`,
+        ),
+      )
+    }
   } catch {}
   return out
 }
@@ -1654,14 +1678,212 @@ export async function runArtifactChecks(dir, opts = {}) {
   const toolResult = opts.skipTools ? { findings: [], tools: null } : await checkToolRegistrations(dir, opts)
   const clientResult = opts.skipClient ? { findings: [], client: null } : await checkClientRuntime(dir, opts)
   const names = toolResult.tools ? toolResult.tools.map((t) => t.name).filter(Boolean) : null
+  const trace = await checkTraceability(dir, {
+    packFiles: packResult.pack?.files?.map((f) => f.path) || [],
+    ...opts,
+  })
   return {
-    findings: [...packResult.findings, ...toolResult.findings, ...clientResult.findings, ...checkReadmeTruth(dir, names)],
+    findings: [...packResult.findings, ...toolResult.findings, ...clientResult.findings, ...checkReadmeTruth(dir, names), ...trace],
     pack: packResult.pack,
     tools: toolResult.tools,
     client: clientResult.client,
   }
 }
 
+// =====================================================================
+// Dependency truth
+// =====================================================================
+
+// A package specifier never contains whitespace, so the capture is whitespace-
+// excluding on purpose: a greedy [^'"]+ matched across a whole template block
+// and reported the runner's own source as a dependency name.
+const SPECIFIER_RE =
+  /\b(?:import|export)\s[^'"]*?from\s*['"]([^'"\s]+)['"]|\bimport\s*\(\s*['"]([^'"\s]+)['"]\s*\)|\bimport\s*['"]([^'"\s]+)['"]|\brequire\s*\(\s*['"]([^'"\s]+)['"]\s*\)/g
+
+const BUILTINS = new Set(builtinModules)
+
+// The client half runs inside the host's module loader, which resolves these
+// itself (CLIENT_RUNNER's fakeRequire mirrors it). They are provided, not
+// installed by the plugin, so importing them is not a missing dependency.
+const HOST_PROVIDED = new Set(['react', 'react-dom'])
+
+/** '@scope/pkg/sub' -> '@scope/pkg', 'pkg/sub' -> 'pkg', relative/builtin -> null. */
+export const packageOf = (spec) => {
+  if (!spec || spec.startsWith('.') || spec.startsWith('/') || spec.startsWith('node:')) return null
+  const parts = spec.split('/')
+  const name = spec.startsWith('@') ? (parts.length >= 2 ? `${parts[0]}/${parts[1]}` : null) : parts[0]
+  return name && !BUILTINS.has(name) ? name : null
+}
+
+// A tool description that says `require("react")` is prose, not an import — this
+// rule fired on this plugin's own description until it was dropped. Only quoted
+// strings that CONTAIN a call are removed, so a real specifier survives.
+const dropProse = (code) =>
+  code
+    .replace(/'(?:[^'\\\n]|\\.)*'/g, (s) => (/\b(?:require|import)\s*\(/.test(s) ? "''" : s))
+    .replace(/"(?:[^"\\\n]|\\.)*"/g, (s) => (/\b(?:require|import)\s*\(/.test(s) ? '""' : s))
+
+/**
+ * Every bare specifier lib/ imports, checked against what package.json declares.
+ *
+ * A published package installs its own `dependencies` — devDependencies are never
+ * fetched by whoever installs the tarball. So an import that only devDependencies
+ * satisfies works in your repo (where everything is installed) and throws
+ * ERR_MODULE_NOT_FOUND in theirs, after they have already installed you.
+ */
+export function checkDependencies(dir) {
+  const out = []
+  const json = readPkgJson(dir)
+  if (!json) return out
+  const deps = new Set(Object.keys(json.dependencies || {}))
+  const dev = new Set(Object.keys(json.devDependencies || {}))
+  const provided = new Set([
+    ...Object.keys(json.peerDependencies || {}),
+    ...Object.keys(json.optionalDependencies || {}),
+  ])
+
+  const used = new Map() // package name -> the first lib/ file that imports it
+  const clientRel = clientTarget(json)
+  const isClientFile = (file) =>
+    Boolean(clientRel) && relative(dir, file).replace(/\\/g, '/') === String(clientRel).replace(/^\.\//, '')
+  for (const file of walkFiles(join(dir, 'lib'), /\.(?:js|mjs|cjs)$/)) {
+    const text = safeText(file)
+    if (text === null) continue
+    // Backtick strings go first: a runner template literal embeds code that
+    // contains the word `import`, and a greedy specifier match used to swallow
+    // a whole block of it. A real specifier is always a plain quoted string.
+    const code = dropProse(text.split('\n').map(stripComment).join('\n').replace(/`(?:[^`\\]|\\.)*`/g, '``'))
+    for (const m of code.matchAll(SPECIFIER_RE)) {
+      const name = packageOf(m[1] ?? m[2] ?? m[3] ?? m[4])
+      if (!name) continue
+      if (isClientFile(file) && HOST_PROVIDED.has(name)) continue
+      if (!used.has(name)) used.set(name, relative(dir, file))
+    }
+  }
+
+  for (const [name, file] of used) {
+    if (deps.has(name) || provided.has(name)) continue
+    if (dev.has(name)) {
+      out.push(
+        F(
+          'dep-in-dev-only',
+          'error',
+          `${file} imports "${name}", which is only in devDependencies`,
+          'npm installs a package\'s dependencies for the consumer, never its devDependencies. The import resolves on your machine and fails with ERR_MODULE_NOT_FOUND on theirs — the plugin installs fine and then does not load.',
+          `Move "${name}" into dependencies.`,
+        ),
+      )
+      continue
+    }
+    out.push(
+      F(
+        'undeclared-import',
+        'error',
+        `${file} imports "${name}", which package.json does not declare`,
+        'It resolves locally only because some other package happens to hoist it into node_modules. The consumer has no such package, so the import fails at load time.',
+        `Add "${name}" to dependencies (or drop the import).`,
+      ),
+    )
+  }
+
+  for (const name of deps) {
+    if (used.has(name)) continue
+    out.push(
+      F(
+        'unused-dependency',
+        'info',
+        `dependencies lists "${name}" but lib/ never imports it`,
+        'Every consumer downloads and installs it for nothing. Sometimes that is deliberate (a peer you only load dynamically), which is why this is a note rather than a defect.',
+        `Remove "${name}", or ignore this line if it is loaded at runtime only.`,
+      ),
+    )
+  }
+  return out
+}
+
+// =====================================================================
+// Traceability: can you point at the exact bytes you are publishing?
+// =====================================================================
+
+const gitOut = async (dir, args) => {
+  try {
+    const { stdout } = await runFile('git', ['-C', dir, ...args], { timeout: 8000, windowsHide: true })
+    return String(stdout).trim()
+  } catch {
+    return null
+  }
+}
+
+/**
+ * Publishing is the one moment where the bytes leave your machine. If they are
+ * not in a commit and not under a tag, then a week later nobody — including you —
+ * can say which source produced the live tarball. This really happened: a 1.2.7
+ * went to npm while the repo's release still said 1.2.6, and the marketplace
+ * entry pointed at the old tarball.
+ *
+ * `status` / `atHead` / `tagExists` inject the git answers so the rules are
+ * testable without a repository.
+ */
+export async function checkTraceability(dir, opts = {}) {
+  const out = []
+  const json = readPkgJson(dir)
+  const version = typeof opts.version === 'string' ? opts.version : json?.version
+  if (!version) return out
+
+  const inside = opts.inside ?? (opts.status === undefined ? await gitOut(dir, ['rev-parse', '--is-inside-work-tree']) : 'true')
+  if (inside !== 'true') return out // checkGitState already reported no-git
+
+  // 1. Dirty tree: the tarball carries bytes that exist in no commit.
+  const status = opts.status === undefined ? await gitOut(dir, ['status', '--porcelain']) : opts.status
+  if (typeof status === 'string') {
+    const packed = new Set((opts.packFiles || []).map((p) => String(p).replace(/\\/g, '/')))
+    const dirty = status
+      .split('\n')
+      .map((line) => line.slice(3).trim())
+      .map((p) => (p.includes(' -> ') ? p.split(' -> ').pop().trim() : p))
+      .filter(Boolean)
+    // Without a tarball listing, lib/ is the honest proxy: that is the code.
+    const relevant = packed.size ? dirty.filter((p) => packed.has(p)) : dirty.filter((p) => p.startsWith('lib/'))
+    if (relevant.length) {
+      out.push(
+        F(
+          'git-uncommitted',
+          'warn',
+          `${relevant.length} file(s) going into the tarball are not committed`,
+          `The published bytes exist in no commit, so they can never be reproduced or bisected later. First: ${relevant.slice(0, 3).join(', ')}.`,
+          'Commit (or stash) them before publishing.',
+        ),
+      )
+    }
+  }
+
+  // 2. No tag on HEAD: nothing points at these bytes afterwards.
+  const atHead = opts.atHead === undefined ? await gitOut(dir, ['tag', '--points-at', 'HEAD']) : opts.atHead
+  const tags = typeof atHead === 'string' ? atHead.split('\n').map((t) => t.trim()).filter(Boolean) : []
+  const wanted = [`v${version}`, version]
+  if (typeof atHead === 'string' && !wanted.some((t) => tags.includes(t))) {
+    const exists = opts.tagExists === undefined ? await gitOut(dir, ['rev-parse', '--verify', '--quiet', `refs/tags/v${version}`]) : opts.tagExists ? 'sha' : null
+    out.push(
+      exists
+        ? F(
+            'git-tag-elsewhere',
+            'warn',
+            `tag v${version} exists but does not point at HEAD`,
+            'The tag and the tarball are different bytes. A release built from that tag would not be what you just published.',
+            `Move it: git tag -f v${version} && git push -f origin v${version}`,
+          )
+        : F(
+            'git-tag-missing',
+            'warn',
+            `no git tag v${version} on HEAD`,
+            'After publishing, the only record of these bytes is the registry. A GitHub release, a changelog entry or a market listing cannot point at a commit that was never tagged.',
+            `git tag v${version} && git push origin v${version}`,
+          ),
+    )
+  }
+  return out
+}
+
 // =====================================================================
 // Orchestration
 // =====================================================================
@@ -1675,6 +1897,7 @@ export function runStaticChecks(dir) {
     ...checkLibHygiene(dir),
     ...checkNodeVersion(dir),
     ...checkBuildFreshness(dir),
+    ...checkDependencies(dir),
     ...checkDocs(dir),
     ...checkTests(dir),
     ...checkNpmState(dir),
@@ -1697,12 +1920,14 @@ const RULE_ORDER = [
   'tool-missing-name', 'tool-duplicate-name', 'tool-missing-execute', 'tool-present-call-throws',
   'tool-bad-card-kind', 'tool-missing-output-schema', 'tool-none-registered', 'tool-bad-parameter-type', 'tool-call-throws', 'tool-call-slow',
   'lib-debugger', 'lib-console-log', 'lib-hardcoded-path', 'lib-url-pathname', 'node-too-old', 'stale-build', 'hand-edited-build',
+  'undeclared-import', 'dep-in-dev-only', 'unused-dependency',
   'pack-omits-lib', 'pack-omits-patch', 'pack-omits-client', 'pack-oversize', 'pack-omits-readme', 'pack-omits-license', 'pack-ships-secret',
   'pack-unexpected-dir', 'pack-script-build', 'pack-unavailable',
-  'no-license', 'license-mismatch', 'version-taken', 'registry-unreachable', 'publish-not-served',
+  'no-license', 'license-mismatch', 'version-taken', 'version-behind-latest', 'registry-unreachable', 'publish-not-served',
   'publish-served-mismatch', 'publish-served', 'market-empty', 'market-no-url', 'market-url-not-github',
   'market-no-name', 'market-name-shape', 'market-no-category', 'market-bad-category', 'market-no-desc', 'market-no-en', 'market-no-zh', 'unscoped-name', 'no-git', 'no-readme', 'readme-no-install', 'readme-no-profile',
   'market-no-repo', 'market-unavailable', 'market-duplicate-entry', 'market-npm-name-collision', 'market-repo-too-new',
+  'git-uncommitted', 'git-tag-missing', 'git-tag-elsewhere',
   'readme-tool-undocumented', 'readme-test-count',
   'no-tests', 'no-test-files', 'no-test-script', 'no-engines', 'bad-repo-url', 'no-gitignore',
 ]

package/lib/index.js

@@ -91,7 +91,7 @@ export function apply(ctx, config = {}) {
     {
       name: 'publish_gate',
       description:
-        'Run the full pre-publish gate over a DSH plugin directory. Three layers. (1) Manifest: missing exports["."], files omitting lib/, no "type": "module", UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, an entry path that points at no file, a cordis.patch.yml the manifest never declares (inert), missing LICENSE or README install line, missing tests, unscoped npm names (the 403 you cannot diagnose). (2) Artifact: runs `npm pack --dry-run` and reads what npm will actually ship — lib/ missing from the tarball, a dsh.bundle.patch that never gets packed, oversize tarballs (test fixtures are the usual cause), dev directories shipping, and a prepack hook that means the dry run did not build. (3) Runtime: imports the entry in an isolated child process, calls apply(ctx) with a fake ctx, and reports a throwing import, a throwing apply, tools with no execute, duplicate tool names, a presentCall that throws, and card kinds the host does not render; then, if the package declares exports["./client"], loads the browser bundle against a fake window.__ModuleLoader__ and reports a bundle that never loads, never returns apply, throws, or registers nothing. Deterministic: every rule is a file, subprocess or API check, no LLM. Returns {ok, report, findings:[{rule,severity,title,detail,fix}], counts}.',
+        'Run the full pre-publish gate over a DSH plugin directory. Four layers. (1) Manifest: missing exports["."], files omitting lib/, no "type": "module", UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, an entry path that points at no file, a cordis.patch.yml the manifest never declares (inert), missing LICENSE or README install line, missing tests, unscoped npm names (the 403 you cannot diagnose). (2) Dependencies: every bare import in lib/ resolved against package.json — an import nothing declares, an import only devDependencies satisfy (npm never installs those for whoever installs you), an unused dependency. (3) Artifact: runs `npm pack --dry-run` and reads what npm will actually ship — lib/ missing from the tarball, a dsh.bundle.patch that never gets packed, oversize tarballs (test fixtures are the usual cause), dev directories shipping, and a prepack hook that means the dry run did not build. (4) Runtime: imports the entry in an isolated child process, calls apply(ctx) with a fake ctx, and reports a throwing import, a throwing apply, tools with no execute, duplicate tool names, a presentCall that throws, and card kinds the host does not render; then, if the package declares exports["./client"], loads the browser bundle against a fake window.__ModuleLoader__ and reports a bundle that never loads, never returns apply, throws, or registers nothing. Deterministic: every rule is a file, subprocess or API check, no LLM. Returns {ok, report, findings:[{rule,severity,title,detail,fix}], counts}.',
       parameters: {
         type: 'object',
         properties: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bushizhanghan/dsh-publish-gate",
-  "version": "0.3.4",
-  "description": "Helps DSH plugin AUTHORS publish their plugins: a gate that turns every silent failure in the publish path into a deterministic check. Manifest layer — package.json completeness, BOM, YAML/JSON parseability, entry paths that point at no file, a patch the manifest never declares, patch insert correctness, a build whose lib/ is older than src/, inject services that are missing or misspelled, npm scope permissions, GitHub repo and token state, market entry format, LICENSE/README, tests. Artifact layer — runs `npm pack --dry-run` and reads what npm will really ship: code missing from the tarball, an unpacked patch, oversize packages, dev directories. Runtime layer — imports the entry in an isolated child process, calls apply(ctx), and reports tools that never register, missing execute, duplicate names, throwing presentCall and card kinds the host does not render. Browser half — loads the client bundle against a fake window.__ModuleLoader__ and reports a bundle that never loads, returns no apply, throws, registers nothing, or uses a service its own inject array omits, because a panel that never appears looks like a UI bug, not a packaging one. Then GitHub + npm + market, and a post-publish shasum check that proves the registry holds these exact bytes. 帮助插件作者一键发布：写完插件后跑一遍门禁（清单 / 产物 / 运行时 / 浏览器半边），把发布链路上的每个静默坑变成确定性检查，然后 GitHub + npm + 市场一键三连。",
+  "version": "0.5.0",
+  "description": "Pre-publish gate for DSH plugins in five layers: manifest, dependencies, artifact, runtime, browser half — plus traceability (can you point at the bytes you shipped?). 发布前门禁：清单、依赖、产物、运行时、浏览器半边，外加可追溯性。",
   "type": "module",
   "main": "lib/index.js",
   "exports": {