@michengai/dsh-skills-manager 0.1.35 → 0.1.37

package/CHANGELOG.md

@@ -6,6 +6,19 @@ The five most recent published versions are listed below.
 
 ## Unreleased
 
+## 0.1.37 - 2026-09-03
+
+- Updated the direct DSH development dependencies from `0.1.2-alpha.5` to `0.1.2-rc.1` without changing the published peer-dependency contract.
+- Rebased the dependency-version regression assertion on RC.1 and verified the complete package gate.
+- Verified plugin registration, the Skill provider, SessionStore access, and the HTTP state endpoint against the real RC.1 Cordis host services.
+
+## 0.1.36 - 2026-09-03
+
+- Separated maintained runtime source under `src` from generated `lib` package artifacts, with a reproducible Host and AMD-client build.
+- Made artifact publication atomic: failed builds preserve the previous `lib` output, and release verification rejects stale or untracked generated files.
+- Removed source maps from generated and published artifacts to avoid duplicating complete source files in the npm package.
+- Added a pull-request and main-branch verification workflow that runs the complete release gate before merge.
+
 ## 0.1.35 - 2026-09-03
 
 - Aligned Settings header actions with the archive plugin: a GitHub project link and an Issues feedback link, with matching icons, accessible labels, responsive layout, and localized copy.

package/CHANGELOG.zh-CN.md

@@ -6,6 +6,19 @@
 
 ## 未发布
 
+## 0.1.37 - 2026-09-03
+
+- 将直接 DSH 开发依赖从 `0.1.2-alpha.5` 升级至 `0.1.2-rc.1`，不改动已发布的 peer 依赖兼容范围。
+- 将依赖版本回归断言同步到 RC.1，并完成完整发布门禁验证。
+- 使用真实 RC.1 Cordis 宿主服务验证插件注册、Skill Provider、SessionStore 访问和 HTTP 状态接口。
+
+## 0.1.36 - 2026-09-03
+
+- 将可维护运行源码统一迁移到 `src`，`lib` 改为可复现生成的 Host 与 AMD 客户端发布产物。
+- 构建产物改为原子发布：构建失败时保留旧 `lib`，发布校验拒绝过期或未跟踪的生成文件。
+- 不再生成或发布 source map，避免 npm 包重复携带完整源码。
+- 新增 PR 与主分支验证工作流，在合入前执行完整发布门禁。
+
 ## 0.1.35 - 2026-09-03
 
 - 设置页标题操作与归档插件统一：新增 GitHub 项目链接和 Issues 问题反馈链接，图标、无障碍标签、响应式布局及中英文文案保持一致。

package/README.md

@@ -173,10 +173,12 @@ Escape closes only the frontmost upload or confirmation dialog and leaves Settin
 
 ## Secondary development
 
-This repository has no `src` directory. `lib` is directly maintained runtime source, which is its current layout rather than the recommended layout for new plugins. New plugins should prefer `src` built to `lib`.
+Runtime source is maintained under `src`; `lib` is generated by `npm run build` and published with the npm package. Change `src`, never `lib` directly.
 
-- [lib\index.js](lib/index.js): host service and local skill file operations.
-- [lib\client.js](lib/client.js): Settings page, upload, and confirmation interactions.
+- [src\core.js](src/core.js): file-operation, permission, and import boundary core.
+- [src\index.js](src/index.js): host service and local skill file operations.
+- [src\client.js](src/client.js): Settings page, upload, and confirmation interactions.
+- [scripts\build.mjs](scripts/build.mjs): produces Host and browser `lib` artifacts.
 - `test\core-test.mjs`: file-operation, permission, and import boundary tests.
 - `test\locale-test.mjs`: UI locale tests.
 
@@ -186,7 +188,7 @@ After changing the runtime source, test, inspect package contents, and install f
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
 $OutputEncoding = [System.Text.Encoding]::UTF8
 npm test
-npm run pack:check
+npm run verify
 dsh plugin --profile web add .
 ```
 
@@ -198,10 +200,10 @@ Preserve path validation, temporary-copy replacement, and shared-skill read-only
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
 $OutputEncoding = [System.Text.Encoding]::UTF8
 npm test
-npm run pack:check
+npm run verify
 ```
 
-`prepublishOnly` runs the core tests before publishing.
+`prepublishOnly` runs the complete `verify` gate before publishing: build, tests, package inspection, and generated-artifact synchronization.
 
 ## Documentation and license
 

package/README.zh-CN.md

@@ -173,10 +173,12 @@ dsh --profile web --dump-config
 
 ## 二次开发
 
-当前仓库未提供 `src` 源目录，`lib` 是直接维护的运行源码；这是当前仓库的实现方式，不是新插件的推荐布局。新插件建议使用 `src` 开发并构建到 `lib`：
+运行源码维护在 `src`，`lib` 是由 `npm run build` 生成并随 npm 包发布的产物。请修改 `src`，不要直接修改 `lib`：
 
-- [lib\index.js](lib/index.js)：Host 服务与本地技能文件操作入口。
-- [lib\client.js](lib/client.js)：设置页、上传和确认交互。
+- [src\core.js](src/core.js)：文件操作、权限和导入边界核心。
+- [src\index.js](src/index.js)：Host 服务与本地技能文件操作入口。
+- [src\client.js](src/client.js)：设置页、上传和确认交互。
+- [scripts\build.mjs](scripts/build.mjs)：生成 Host 与浏览器端 `lib` 产物。
 - `test\core-test.mjs`：文件操作、权限和导入边界测试。
 - `test\locale-test.mjs`：界面词条测试。
 
@@ -186,7 +188,7 @@ dsh --profile web --dump-config
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
 $OutputEncoding = [System.Text.Encoding]::UTF8
 npm test
-npm run pack:check
+npm run verify
 dsh plugin --profile web add .
 ```
 
@@ -198,10 +200,10 @@ dsh plugin --profile web add .
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
 $OutputEncoding = [System.Text.Encoding]::UTF8
 npm test
-npm run pack:check
+npm run verify
 ```
 
-`prepublishOnly` 会在发布前自动执行核心测试。
+`prepublishOnly` 会在发布前自动执行完整 `verify` 门禁：构建、测试、发布包检查和生成产物同步检查。
 
 ## 项目文档与许可证