dsh-composition-doctor 0.2.0 → 0.2.2

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.2.2
+
+- Fixed the packaged `dsh-doctor` CLI entrypoint when pnpm's Windows shim supplies a non-canonical path.
+- Added a built-entrypoint regression test covering `--version` and `--help`.
+
+## 0.2.1
+
+- Fixed clean-checkout CI coverage by tracking the report schema and committed fixture packages that were previously hidden by broad ignore rules.
+- Fixed cross-platform Snapshot v2 path normalization for Windows-style paths on Linux CI.
+- Added the dsh-plugin.org listing badge to the bilingual README files.
+
 ## 0.2.0
 
 - Release the verified 0.2.0 package without changing the established diagnostic architecture or evidence boundaries.

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 DSH Composition Doctor contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 DSH Composition Doctor contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -2,12 +2,13 @@
 
 [![npm version](https://img.shields.io/npm/v/dsh-composition-doctor)](https://www.npmjs.com/package/dsh-composition-doctor)
 [![CI](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml/badge.svg)](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml)
+[![Listed on dsh-plugin.org](https://dsh-plugin.org/badges/listed.svg)](https://dsh-plugin.org/plugins/lemonxiny55/dsh-composition-doctor)
 
 English | [中文](README.zh.md)
 
 Composition and upgrade preflight doctor for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (`dsh`). It reads an explicitly selected profile and explains observable Cordis/plugin composition risks with concrete evidence. It never edits a real profile or silently changes permissions.
 
-Current package release: `0.2.0`.
+Current package release: `0.2.2`.
 
 ## What the model gets
 

package/README.zh.md

@@ -2,12 +2,13 @@
 
 [![npm version](https://img.shields.io/npm/v/dsh-composition-doctor)](https://www.npmjs.com/package/dsh-composition-doctor)
 [![CI](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml/badge.svg)](https://github.com/lemonxiny55/dsh-composition-doctor/actions/workflows/ci.yml)
+[![Listed on dsh-plugin.org](https://dsh-plugin.org/badges/listed.svg)](https://dsh-plugin.org/plugins/lemonxiny55/dsh-composition-doctor)
 
 [English](README.md) | 中文
 
 面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的组合与升级预检工具。它读取明确指定的 profile，用可追溯证据说明可观察到的 Cordis/plugin 组合风险；不会编辑真实 profile，也不会静默扩大权限。
 
-当前 package release：`0.2.0`。
+当前 package release：`0.2.2`。
 
 ## 模型可用能力
 

package/cordis.patch.yml

@@ -1,3 +1,3 @@
-- insert:
-    - id: dsh-composition-doctor
-      name: dsh-composition-doctor
+- insert:
+    - id: dsh-composition-doctor
+      name: dsh-composition-doctor

package/dist/cli/main.js

@@ -1,5 +1,5 @@
 import { fileURLToPath } from 'node:url';
-import { readFileSync } from 'node:fs';
+import { readFileSync, realpathSync } from 'node:fs';
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
 import { resolveComposition } from '../core/composition-adapter.js';
@@ -174,7 +174,25 @@ export async function runCli(argv, io = { write: (line) => console.log(line) })
         return 1;
     }
 }
-if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+function canonicalPath(value) {
+    try {
+        return realpathSync(value);
+    }
+    catch {
+        return resolve(value);
+    }
+}
+function isMainModule() {
+    const entrypoint = process.argv[1];
+    if (entrypoint === undefined)
+        return false;
+    const modulePath = canonicalPath(fileURLToPath(import.meta.url));
+    const entrypointPath = canonicalPath(entrypoint);
+    return process.platform === 'win32'
+        ? modulePath.toLowerCase() === entrypointPath.toLowerCase()
+        : modulePath === entrypointPath;
+}
+if (isMainModule()) {
     runCli(process.argv.slice(2)).then((exitCode) => {
         process.exitCode = exitCode;
     });

package/dist/core/snapshot.js

@@ -1,12 +1,18 @@
-import { basename, isAbsolute, relative } from 'node:path';
+import { basename, isAbsolute } from 'node:path';
 import { analyseComposition } from './rules.js';
 import { resolveComposition } from './composition-adapter.js';
 function isRecord(value) { return value !== null && typeof value === 'object' && !Array.isArray(value); }
+function slashPath(value) { return value.replaceAll('\\', '/'); }
+function isWindowsAbsolute(value) { return /^[A-Za-z]:\//.test(value); }
 function normalizedSource(source, profileDir) {
-    if (!isAbsolute(source))
-        return source.replaceAll('\\', '/');
-    const value = relative(profileDir, source).replaceAll('\\', '/');
-    return value.startsWith('../') || value === '..' ? `<EXTERNAL>/${basename(source)}` : `<PROFILE>/${value}`;
+    const normalized = slashPath(source);
+    const root = slashPath(profileDir).replace(/\/+$/, '');
+    if (!isAbsolute(source) && !isWindowsAbsolute(normalized))
+        return normalized;
+    if (normalized === root)
+        return '<PROFILE>';
+    const prefix = `${root}/`;
+    return normalized.startsWith(prefix) ? `<PROFILE>/${normalized.slice(prefix.length)}` : `<EXTERNAL>/${basename(normalized)}`;
 }
 function sortJson(values) { return [...values].sort((left, right) => JSON.stringify(left).localeCompare(JSON.stringify(right))); }
 function packageSnapshot(fact) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-composition-doctor",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "private": false,
   "description": "Read-only DSH and Cordis composition diagnostics, snapshots, diffs, and isolated preflight.",
   "license": "MIT",