dsh-click 0.3.11 → 0.3.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,15 @@ All notable changes to this project are documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [0.3.12] - 2026-09-19
9
+
10
+ ### Added
11
+
12
+ - `pnpm run check:lockfile` (`scripts/check-lockfile-drift.mjs`) fails fast when `package.json` and `pnpm-lock.yaml` disagree; the probe is read-only and the documented checks chain runs it alongside the other gates.
13
+
14
+ ### Changed
15
+
16
+ - The release workflow now publishes through **npm trusted publishing** (OIDC) instead of the long-lived `NPM_TOKEN` secret: `setup-node` no longer sets `registry-url` (its empty `_authToken` line made the registry answer 404 on PUT), npm is upgraded to >= 11.5.1 before publishing, and the "NPM_TOKEN is not set -> skip" guard is gone so a missing publisher cannot turn a release into a silent no-op.
8
17
  ## [0.3.11] - 2026-09-18
9
18
 
10
19
  ### Fixed
package/lib/index.js CHANGED
@@ -586,7 +586,7 @@ var ObservationStore = class {
586
586
  * @module dsh-click/version
587
587
  */
588
588
  /** Plugin version advertised in the helper-protocol handshake. */
589
- const VERSION = "0.3.11";
589
+ const VERSION = "0.3.12";
590
590
  /** The helper protocol revision; bump only on incompatible wire changes. */
591
591
  const HELPER_PROTOCOL_VERSION = 1;
592
592
  //#endregion
@@ -7,7 +7,7 @@
7
7
  * @module dsh-click/version
8
8
  */
9
9
  /** Plugin version advertised in the helper-protocol handshake. */
10
- export declare const VERSION = "0.3.11";
10
+ export declare const VERSION = "0.3.12";
11
11
  /** The helper protocol revision; bump only on incompatible wire changes. */
12
12
  export declare const HELPER_PROTOCOL_VERSION = 1;
13
13
  //# sourceMappingURL=version.d.ts.map
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dsh-click",
3
- "version": "0.3.11",
3
+ "version": "0.3.12",
4
4
  "description": "Cross-platform native desktop control tools for DeepSeek Harness (Windows first): screen_shot, screen_read (accessibility tree + pixel description for text-only models), click/type/scroll/key, and app_list/app_launch — every mutating action gated by approval, never stealing foreground focus, with stale-observation rejection and process-identity checks",
5
5
  "repository": {
6
6
  "type": "git",
@@ -147,6 +147,7 @@
147
147
  "lint": "oxlint",
148
148
  "check:readmes": "node scripts/check-readme-sync.mjs",
149
149
  "verify:self-contained": "node scripts/verify-self-contained.mjs",
150
+ "check:lockfile": "node scripts/check-lockfile-drift.mjs",
150
151
  "verify:artifacts": "node scripts/verify-artifacts.mjs"
151
152
  },
152
153
  "license": "Apache-2.0",