@perrylink/dsh-plugin-doctor 0.2.2 → 0.2.3

package/lib/framework.mjs

@@ -1,110 +1,110 @@
-// 检测框架：零依赖，检查注册 / 运行 / 判定 / 渲染
-//
-// 不可变契约（R-fix 0B 冻结；家族 37 仓的 CI 依赖它们，任何改动都会造成硬红）：
-//   1. 结果项 res.name 保留 `^R[0-8] / ^K[1-9] / ^D\d / ^CC\d ` 前缀 —— ID 只新增字段，绝不从 name 里拆走
-//   2. 结果项仍是扁平数组（JSON 的 .results），按注册顺序稳定输出
-//   3. 渲染行的形态不变（`[STATUS] <name>`），stdout 必须仍含 "R0 " 与 "K1 "
-//   4. skip 不算 fail（verdict.ok 只看 fail/error）
-export const GROUP_IDS = {
-  '静态·包结构': 'R',
-  '静态·cordis 契约扫描': 'K',
-  '动态·沙箱冒烟': 'D',
-  '生态·集合站清单': 'CC',
-}
-
-export class Doctor {
-  constructor() {
-    this.checks = []
-  }
-
-  add(group, name, fn, opts = {}) {
-    this.checks.push({ group, name, fn, opts })
-  }
-
-  async run(ctx, { groups } = {}) {
-    const results = []
-    for (const c of this.checks) {
-      if (groups && !groups.includes(c.group)) continue
-      let res
-      try {
-        res = await c.fn(ctx)
-        if (typeof res === 'string') res = { status: 'pass', message: res }
-        if (!res || typeof res !== 'object') res = { status: 'pass', message: String(res) }
-      } catch (err) {
-        res = { status: 'error', message: err && err.stack ? err.stack : String(err), category: 'doctor-internal' }
-      }
-      res.group = c.group
-      res.name = c.name
-      res.critical = !!c.opts.critical
-      // 稳定 ID 从 name 前缀派生（只读，不改写 name）
-      const m = /^([A-Z]{1,3})(\d+)\s/.exec(c.name)
-      res.id = m ? `${m[1]}${m[2]}` : null
-      res.groupId = GROUP_IDS[c.group] ?? null
-      if (!res.category) res.category = res.status === 'skip' ? 'not-applicable' : 'plugin-defect'
-      results.push(res)
-    }
-    return results
-  }
-}
-
-/** 按组统计：total / ran（非 skip）/ skipped / 各状态计数 / 累计 filesInspected */
-export function summarizeGroups(results) {
-  const out = {}
-  for (const r of results) {
-    const g = r.groupId ?? '?'
-    const s = (out[g] ??= { total: 0, ran: 0, skipped: 0, pass: 0, warn: 0, fail: 0, error: 0, skip: 0, filesInspected: 0 })
-    s.total += 1
-    s[r.status] = (s[r.status] ?? 0) + 1
-    if (r.status === 'skip') s.skipped += 1
-    else s.ran += 1
-    if (typeof r.filesInspected === 'number') s.filesInspected += r.filesInspected
-  }
-  return out
-}
-
-/** 被请求、但一条都没真跑的组（全部 skip）→ 该次运行「降级」，不得裸报成功 */
-export function degradedGroups(groups) {
-  return Object.entries(groups).filter(([, v]) => v.total > 0 && v.ran === 0).map(([k]) => k)
-}
-
-// 最坏状态排序：error/fail > warn > skip > pass
-export function verdict(results, { degraded = [] } = {}) {
-  let worst = 'pass'
-  for (const r of results) {
-    if (r.status === 'error' && worst !== 'error') worst = 'error'
-    else if (r.status === 'fail' && worst !== 'error') worst = 'fail'
-    else if (r.status === 'warn' && worst === 'pass') worst = 'warn'
-    else if (r.status === 'skip' && worst === 'pass') worst = 'skip'
-  }
-  const criticalFail = results.some((r) => r.critical && (r.status === 'fail' || r.status === 'error'))
-  // 退出码契约：0 = 无 fail/error（可含 warn/skip）；1 = 存在 fail/error
-  return { worst, criticalFail, ok: worst !== 'fail' && worst !== 'error', degraded }
-}
-
-const ICONS = { pass: '[PASS]', warn: '[WARN]', fail: '[FAIL]', error: '[ERROR]', skip: '[SKIP]' }
-
-export function render(results) {
-  const lines = []
-  let lastGroup = null
-  for (const r of results) {
-    if (r.group !== lastGroup) {
-      lines.push('', `== ${r.group} ==`)
-      lastGroup = r.group
-    }
-    const tag = r.critical ? ' [关键]' : ''
-    lines.push(`${ICONS[r.status] ?? '[?]'} ${r.name}${tag}`)
-    const msg = String(r.message ?? '').trim()
-    if (msg) {
-      for (const line of msg.split('\n')) lines.push(`    ${line}`)
-    }
-    if (r.evidence) lines.push(`    证据: ${r.evidence}`)
-  }
-  const v = verdict(results)
-  const counts = {}
-  for (const r of results) counts[r.status] = (counts[r.status] ?? 0) + 1
-  lines.push(
-    '',
-    `=== 汇总: ${Object.entries(counts).map(([k, n]) => `${k}=${n}`).join(' ')} | 总判定: ${v.worst.toUpperCase()}${v.criticalFail ? '（含关键项失败）' : ''} ===`,
-  )
-  return lines.join('\n')
-}
+// 检测框架：零依赖，检查注册 / 运行 / 判定 / 渲染
+//
+// 不可变契约（R-fix 0B 冻结；家族 37 仓的 CI 依赖它们，任何改动都会造成硬红）：
+//   1. 结果项 res.name 保留 `^R[0-8] / ^K[1-9] / ^D\d / ^CC\d ` 前缀 —— ID 只新增字段，绝不从 name 里拆走
+//   2. 结果项仍是扁平数组（JSON 的 .results），按注册顺序稳定输出
+//   3. 渲染行的形态不变（`[STATUS] <name>`），stdout 必须仍含 "R0 " 与 "K1 "
+//   4. skip 不算 fail（verdict.ok 只看 fail/error）
+export const GROUP_IDS = {
+  '静态·包结构': 'R',
+  '静态·cordis 契约扫描': 'K',
+  '动态·沙箱冒烟': 'D',
+  '生态·集合站清单': 'CC',
+}
+
+export class Doctor {
+  constructor() {
+    this.checks = []
+  }
+
+  add(group, name, fn, opts = {}) {
+    this.checks.push({ group, name, fn, opts })
+  }
+
+  async run(ctx, { groups } = {}) {
+    const results = []
+    for (const c of this.checks) {
+      if (groups && !groups.includes(c.group)) continue
+      let res
+      try {
+        res = await c.fn(ctx)
+        if (typeof res === 'string') res = { status: 'pass', message: res }
+        if (!res || typeof res !== 'object') res = { status: 'pass', message: String(res) }
+      } catch (err) {
+        res = { status: 'error', message: err && err.stack ? err.stack : String(err), category: 'doctor-internal' }
+      }
+      res.group = c.group
+      res.name = c.name
+      res.critical = !!c.opts.critical
+      // 稳定 ID 从 name 前缀派生（只读，不改写 name）
+      const m = /^([A-Z]{1,3})(\d+)\s/.exec(c.name)
+      res.id = m ? `${m[1]}${m[2]}` : null
+      res.groupId = GROUP_IDS[c.group] ?? null
+      if (!res.category) res.category = res.status === 'skip' ? 'not-applicable' : 'plugin-defect'
+      results.push(res)
+    }
+    return results
+  }
+}
+
+/** 按组统计：total / ran（非 skip）/ skipped / 各状态计数 / 累计 filesInspected */
+export function summarizeGroups(results) {
+  const out = {}
+  for (const r of results) {
+    const g = r.groupId ?? '?'
+    const s = (out[g] ??= { total: 0, ran: 0, skipped: 0, pass: 0, warn: 0, fail: 0, error: 0, skip: 0, filesInspected: 0 })
+    s.total += 1
+    s[r.status] = (s[r.status] ?? 0) + 1
+    if (r.status === 'skip') s.skipped += 1
+    else s.ran += 1
+    if (typeof r.filesInspected === 'number') s.filesInspected += r.filesInspected
+  }
+  return out
+}
+
+/** 被请求、但一条都没真跑的组（全部 skip）→ 该次运行「降级」，不得裸报成功 */
+export function degradedGroups(groups) {
+  return Object.entries(groups).filter(([, v]) => v.total > 0 && v.ran === 0).map(([k]) => k)
+}
+
+// 最坏状态排序：error/fail > warn > skip > pass
+export function verdict(results, { degraded = [] } = {}) {
+  let worst = 'pass'
+  for (const r of results) {
+    if (r.status === 'error' && worst !== 'error') worst = 'error'
+    else if (r.status === 'fail' && worst !== 'error') worst = 'fail'
+    else if (r.status === 'warn' && worst === 'pass') worst = 'warn'
+    else if (r.status === 'skip' && worst === 'pass') worst = 'skip'
+  }
+  const criticalFail = results.some((r) => r.critical && (r.status === 'fail' || r.status === 'error'))
+  // 退出码契约：0 = 无 fail/error（可含 warn/skip）；1 = 存在 fail/error
+  return { worst, criticalFail, ok: worst !== 'fail' && worst !== 'error', degraded }
+}
+
+const ICONS = { pass: '[PASS]', warn: '[WARN]', fail: '[FAIL]', error: '[ERROR]', skip: '[SKIP]' }
+
+export function render(results) {
+  const lines = []
+  let lastGroup = null
+  for (const r of results) {
+    if (r.group !== lastGroup) {
+      lines.push('', `== ${r.group} ==`)
+      lastGroup = r.group
+    }
+    const tag = r.critical ? ' [关键]' : ''
+    lines.push(`${ICONS[r.status] ?? '[?]'} ${r.name}${tag}`)
+    const msg = String(r.message ?? '').trim()
+    if (msg) {
+      for (const line of msg.split('\n')) lines.push(`    ${line}`)
+    }
+    if (r.evidence) lines.push(`    证据: ${r.evidence}`)
+  }
+  const v = verdict(results)
+  const counts = {}
+  for (const r of results) counts[r.status] = (counts[r.status] ?? 0) + 1
+  lines.push(
+    '',
+    `=== 汇总: ${Object.entries(counts).map(([k, n]) => `${k}=${n}`).join(' ')} | 总判定: ${v.worst.toUpperCase()}${v.criticalFail ? '（含关键项失败）' : ''} ===`,
+  )
+  return lines.join('\n')
+}

package/lib/util.mjs

@@ -1,125 +1,125 @@
-// 工具：临时沙箱 + 子进程执行（输出落盘，规避管道捕获限制）
-import { spawnSync } from 'node:child_process'
-import {
-  mkdtempSync, mkdirSync, renameSync, openSync, closeSync, readFileSync, writeFileSync, existsSync, readdirSync,
-} from 'node:fs'
-import { tmpdir } from 'node:os'
-import path from 'node:path'
-
-// 沙箱目录一律建在 %TEMP%，绝不触碰真实 ~/.dsh（红线 3）。
-// 前缀用 `doctor-` 而非 `dsh-`：宿主运行目录的保护模板是 %TEMP%\dsh-*（红线 1），
-// 用 `dsh-doctor-*` 会与该模板相撞；改名后本工具的自建临时目录不再落在保护模板内。
-const SANDBOX_PREFIX = 'doctor-sbx-'
-const QUARANTINE_PREFIX = 'doctor-quarantine-'
-
-export function makeSandbox(label) {
-  const root = mkdtempSync(path.join(tmpdir(), `${SANDBOX_PREFIX}${label}-`))
-  const home = path.join(root, 'home')
-  const logs = path.join(root, 'logs')
-  mkdirSync(home, { recursive: true })
-  mkdirSync(logs, { recursive: true })
-  return { root, home, logs }
-}
-
-// 清理改为「隔离不删除」（红线 4 三段式的前两段：dry-run 打印 → rename 到隔离目录）。
-// 返回隔离后的绝对路径；调用方必须打印它，人工确认后再自行清理。
-// 本工具不再有任何 rmSync/rm -rf 路径 —— 旧的 cleanSandbox 已移除。
-export function quarantineSandbox(sb) {
-  if (!sb || !sb.root || !existsSync(sb.root)) return null
-  const dest = path.join(tmpdir(), `${QUARANTINE_PREFIX}${Date.now()}-${path.basename(sb.root)}`)
-  try {
-    renameSync(sb.root, dest)
-    return dest
-  } catch {
-    return null
-  }
-}
-
-// 把运行期绝对路径替换为占位符，使 message 可对外复用（R-fix 0C / L1）。
-// 只处理"本次运行自己注入的路径"，不做通用脱敏。
-export function redact(text, paths = []) {
-  let s = String(text ?? '')
-  const variants = []
-  for (const p of paths) {
-    if (!p || typeof p !== 'string') continue
-    variants.push(p, p.replace(/\\/g, '/'), p.replace(/\//g, '\\'))
-  }
-  const tmp = tmpdir()
-  variants.push(tmp, tmp.replace(/\\/g, '/'), tmp.replace(/\//g, '\\'))
-  for (const v of [...new Set(variants)].sort((a, b) => b.length - a.length)) {
-    if (v.length < 4) continue
-    s = s.split(v).join('<path>')
-  }
-  return s
-}
-
-// 执行命令：stdout/stderr 分别写入日志文件（不建管道），返回退出码与全文
-export function runStep(label, cmd, args, { env = {}, timeout = 120_000, cwd, logDir, shell } = {}) {
-  const dir = logDir ?? process.cwd()
-  const outPath = path.join(dir, `${label}.out.log`)
-  const errPath = path.join(dir, `${label}.err.log`)
-  const fdOut = openSync(outPath, 'w')
-  const fdErr = openSync(errPath, 'w')
-  const res = spawnSync(cmd, args, {
-    cwd,
-    env: { ...process.env, ...env },
-    stdio: ['ignore', fdOut, fdErr],
-    timeout,
-    windowsHide: true,
-    // Windows 下解析 npm.cmd/pnpm.cmd 等 shim 需要 shell；直接调用 node.exe 等真实可执行文件时禁用
-    shell: shell ?? process.platform === 'win32',
-  })
-  closeSync(fdOut)
-  closeSync(fdErr)
-  const read = (p) => { try { return readFileSync(p, 'utf8') } catch { return '' } }
-  return {
-    code: res.status,
-    signal: res.signal,
-    spawnError: res.error ? String(res.error) : null,
-    out: read(outPath),
-    err: read(errPath),
-    outPath,
-    errPath,
-    ok: res.status === 0 && !res.error,
-  }
-}
-
-export function tail(text, n = 8) {
-  if (!text) return '(无输出)'
-  const lines = text.trim().split('\n')
-  return lines.slice(-n).join('\n')
-}
-
-export const pass = (message) => ({ status: 'pass', message })
-export const fail = (message) => ({ status: 'fail', message })
-export const warn = (message) => ({ status: 'warn', message })
-export const skip = (reason) => ({ status: 'skip', message: reason })
-/** 显式不可判：与 skip 同判定，但带 category 以便上游区分「环境不适用」与「确实没跑」 */
-export const na = (reason, category = 'not-applicable') => ({ status: 'skip', message: reason, category })
-/** 环境类降级：不计 pass、不计插件缺陷，走 category=environment */
-export const envskip = (reason) => ({ status: 'skip', message: reason, category: 'environment' })
-
-export function readJson(p) {
-  return JSON.parse(readFileSync(p, 'utf8'))
-}
-
-export function exists(p) {
-  return existsSync(p)
-}
-
-export function writeJson(p, obj) {
-  writeFileSync(p, JSON.stringify(obj, null, 2) + '\n', 'utf8')
-}
-
-// 递归收集目录下匹配文件（跳过 node_modules/lib/dist 等构建产物）
-export function findFiles(dir, sub, re, out = []) {
-  const base = path.join(dir, sub)
-  if (!existsSync(base)) return out
-  for (const entry of readdirSync(base, { withFileTypes: true })) {
-    if (['node_modules', 'lib', 'dist', '.git'].includes(entry.name)) continue
-    const p = path.join(base, entry.name)
-    if (entry.isDirectory()) findFiles(dir, path.join(sub, entry.name), re, out)
-    else if (re.test(entry.name)) out.push(p)
-  }
-  return out
-}
+// 工具：临时沙箱 + 子进程执行（输出落盘，规避管道捕获限制）
+import { spawnSync } from 'node:child_process'
+import {
+  mkdtempSync, mkdirSync, renameSync, openSync, closeSync, readFileSync, writeFileSync, existsSync, readdirSync,
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+
+// 沙箱目录一律建在 %TEMP%，绝不触碰真实 ~/.dsh（红线 3）。
+// 前缀用 `doctor-` 而非 `dsh-`：宿主运行目录的保护模板是 %TEMP%\dsh-*（红线 1），
+// 用 `dsh-doctor-*` 会与该模板相撞；改名后本工具的自建临时目录不再落在保护模板内。
+const SANDBOX_PREFIX = 'doctor-sbx-'
+const QUARANTINE_PREFIX = 'doctor-quarantine-'
+
+export function makeSandbox(label) {
+  const root = mkdtempSync(path.join(tmpdir(), `${SANDBOX_PREFIX}${label}-`))
+  const home = path.join(root, 'home')
+  const logs = path.join(root, 'logs')
+  mkdirSync(home, { recursive: true })
+  mkdirSync(logs, { recursive: true })
+  return { root, home, logs }
+}
+
+// 清理改为「隔离不删除」（红线 4 三段式的前两段：dry-run 打印 → rename 到隔离目录）。
+// 返回隔离后的绝对路径；调用方必须打印它，人工确认后再自行清理。
+// 本工具不再有任何 rmSync/rm -rf 路径 —— 旧的 cleanSandbox 已移除。
+export function quarantineSandbox(sb) {
+  if (!sb || !sb.root || !existsSync(sb.root)) return null
+  const dest = path.join(tmpdir(), `${QUARANTINE_PREFIX}${Date.now()}-${path.basename(sb.root)}`)
+  try {
+    renameSync(sb.root, dest)
+    return dest
+  } catch {
+    return null
+  }
+}
+
+// 把运行期绝对路径替换为占位符，使 message 可对外复用（R-fix 0C / L1）。
+// 只处理"本次运行自己注入的路径"，不做通用脱敏。
+export function redact(text, paths = []) {
+  let s = String(text ?? '')
+  const variants = []
+  for (const p of paths) {
+    if (!p || typeof p !== 'string') continue
+    variants.push(p, p.replace(/\\/g, '/'), p.replace(/\//g, '\\'))
+  }
+  const tmp = tmpdir()
+  variants.push(tmp, tmp.replace(/\\/g, '/'), tmp.replace(/\//g, '\\'))
+  for (const v of [...new Set(variants)].sort((a, b) => b.length - a.length)) {
+    if (v.length < 4) continue
+    s = s.split(v).join('<path>')
+  }
+  return s
+}
+
+// 执行命令：stdout/stderr 分别写入日志文件（不建管道），返回退出码与全文
+export function runStep(label, cmd, args, { env = {}, timeout = 120_000, cwd, logDir, shell } = {}) {
+  const dir = logDir ?? process.cwd()
+  const outPath = path.join(dir, `${label}.out.log`)
+  const errPath = path.join(dir, `${label}.err.log`)
+  const fdOut = openSync(outPath, 'w')
+  const fdErr = openSync(errPath, 'w')
+  const res = spawnSync(cmd, args, {
+    cwd,
+    env: { ...process.env, ...env },
+    stdio: ['ignore', fdOut, fdErr],
+    timeout,
+    windowsHide: true,
+    // Windows 下解析 npm.cmd/pnpm.cmd 等 shim 需要 shell；直接调用 node.exe 等真实可执行文件时禁用
+    shell: shell ?? process.platform === 'win32',
+  })
+  closeSync(fdOut)
+  closeSync(fdErr)
+  const read = (p) => { try { return readFileSync(p, 'utf8') } catch { return '' } }
+  return {
+    code: res.status,
+    signal: res.signal,
+    spawnError: res.error ? String(res.error) : null,
+    out: read(outPath),
+    err: read(errPath),
+    outPath,
+    errPath,
+    ok: res.status === 0 && !res.error,
+  }
+}
+
+export function tail(text, n = 8) {
+  if (!text) return '(无输出)'
+  const lines = text.trim().split('\n')
+  return lines.slice(-n).join('\n')
+}
+
+export const pass = (message) => ({ status: 'pass', message })
+export const fail = (message) => ({ status: 'fail', message })
+export const warn = (message) => ({ status: 'warn', message })
+export const skip = (reason) => ({ status: 'skip', message: reason })
+/** 显式不可判：与 skip 同判定，但带 category 以便上游区分「环境不适用」与「确实没跑」 */
+export const na = (reason, category = 'not-applicable') => ({ status: 'skip', message: reason, category })
+/** 环境类降级：不计 pass、不计插件缺陷，走 category=environment */
+export const envskip = (reason) => ({ status: 'skip', message: reason, category: 'environment' })
+
+export function readJson(p) {
+  return JSON.parse(readFileSync(p, 'utf8'))
+}
+
+export function exists(p) {
+  return existsSync(p)
+}
+
+export function writeJson(p, obj) {
+  writeFileSync(p, JSON.stringify(obj, null, 2) + '\n', 'utf8')
+}
+
+// 递归收集目录下匹配文件（跳过 node_modules/lib/dist 等构建产物）
+export function findFiles(dir, sub, re, out = []) {
+  const base = path.join(dir, sub)
+  if (!existsSync(base)) return out
+  for (const entry of readdirSync(base, { withFileTypes: true })) {
+    if (['node_modules', 'lib', 'dist', '.git'].includes(entry.name)) continue
+    const p = path.join(base, entry.name)
+    if (entry.isDirectory()) findFiles(dir, path.join(sub, entry.name), re, out)
+    else if (re.test(entry.name)) out.push(p)
+  }
+  return out
+}

package/package.json

@@ -1,50 +1,61 @@
-{
-  "name": "@perrylink/dsh-plugin-doctor",
-  "version": "0.2.2",
-  "description": "Zero-dependency static + sandbox smoke detector for DeepSeek Harness (dsh) plugins: package-structure gates (R), cordis contract scans (K), keyless-headless sandbox smoke (D), and ecosystem-listing checks (CC).",
-  "type": "module",
-  "main": "doctor.mjs",
-  "bin": {
-    "dsh-plugin-doctor": "./doctor.mjs"
-  },
-  "files": [
-    "doctor.mjs",
-    "lib/",
-    "README.md",
-    "CHANGELOG.md",
-    "SURVEY.md"
-  ],
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "cordis",
-    "plugin",
-    "doctor",
-    "lint",
-    "smoke-test",
-    "verification"
-  ],
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/PerryLink/dsh-plugin-doctor.git"
-  },
-  "homepage": "https://www.npmjs.com/package/@perrylink/dsh-plugin-doctor",
-  "bugs": {
-    "url": "https://github.com/PerryLink/dsh-plugin-doctor/issues"
-  },
-  "funding": {
-    "type": "github",
-    "url": "https://github.com/sponsors/PerryLink"
-  },
-  "scripts": {
-    "test": "node --check doctor.mjs && node --check lib/framework.mjs && node --check lib/util.mjs && node --check lib/checks-package.mjs && node --check lib/checks-cordis.mjs && node --check lib/checks-smoke.mjs && node --check lib/checks-collections.mjs && node --check scripts/badge.mjs && node --check scripts/verify.mjs && node --check tests/selftest.mjs && node --check tests/contract.mjs && node tests/selftest.mjs && node tests/contract.mjs",
-    "prepublishOnly": "npm test",
-    "verify:registry": "node scripts/verify.mjs",
-    "badge": "node scripts/badge.mjs"
-  }
-}
+{
+  "name": "@perrylink/dsh-plugin-doctor",
+  "version": "0.2.3",
+  "description": "Zero-dependency static + sandbox smoke detector for DeepSeek Harness (dsh) plugins: package-structure gates (R), cordis contract scans (K), keyless-headless sandbox smoke (D), and ecosystem-listing checks (CC).",
+  "type": "module",
+  "main": "./plugin.mjs",
+  "exports": {
+    ".": "./plugin.mjs",
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "dsh-plugin-doctor": "./doctor.mjs"
+  },
+  "files": [
+    "doctor.mjs",
+    "plugin.mjs",
+    "lib/",
+    "cordis.patch.yml",
+    "README.md",
+    "CHANGELOG.md",
+    "SURVEY.md"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "cordis",
+    "plugin",
+    "doctor",
+    "lint",
+    "smoke-test",
+    "verification"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/PerryLink/dsh-plugin-doctor.git"
+  },
+  "homepage": "https://www.npmjs.com/package/@perrylink/dsh-plugin-doctor",
+  "bugs": {
+    "url": "https://github.com/PerryLink/dsh-plugin-doctor/issues"
+  },
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/sponsors/PerryLink"
+  },
+  "scripts": {
+    "test": "node --check doctor.mjs && node --check lib/framework.mjs && node --check lib/util.mjs && node --check lib/checks-package.mjs && node --check lib/checks-cordis.mjs && node --check lib/checks-smoke.mjs && node --check lib/checks-collections.mjs && node --check scripts/badge.mjs && node --check scripts/verify.mjs && node --check tests/selftest.mjs && node --check tests/contract.mjs && node tests/selftest.mjs && node tests/contract.mjs",
+    "prepublishOnly": "npm test",
+    "verify:registry": "node scripts/verify.mjs",
+    "badge": "node scripts/badge.mjs"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}