dsh-llm-verifier 0.9.3 → 0.9.4

package/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+## Unreleased
+
+## 0.9.4 - 2026-10-10
+
+- **[构建 / 发布] `lib/` 转为构建产物，不再入库**
+  - `lib/` 加入 `.gitignore` 并解除跟踪；发布时由 `prepublishOnly`（`verify:release`）重建，再经 `files` 字段打进 tarball
+  - `files` 新增 `CHANGELOG.md`，并固定 `publishConfig.access` 为 `public`
+- **[自动化] 接入 GitHub Actions 自动发版工作流与发版技能**
+  - `v*` tag 触发：typecheck → build → test → 从 CHANGELOG 提取 release notes → `pnpm pack` 打包 → 发布 npm 与 GitHub Release
+  - 附带 CI 工作流，在 Ubuntu 与 Windows 双平台验证
+- **[修复] 发版工作流的三处失败点**
+  - 锁定 pnpm 11：pnpm 9 无法解析 `pnpm-workspace.yaml` 的 `minimumReleaseAgeExclude`，会把每条命令都误报成 `packages field missing or empty`
+  - 移除会在任何测试运行前就失败的 pnpm 缓存步骤
+  - `pnpm pack` 的完整清单曾被整体写入 `$GITHUB_OUTPUT`，导致 Release 收到多行 blob；现只取 `.tgz` 那一行，并在 `NPM_TOKEN` 缺失时直接给出补救提示，而非只抛裸 `ENEEDAUTH`
+- **[测试] 两处断言改为平台无关表达**：缓存路径断言与 topic-storage fixture 改用平台辅助函数构造，不再依赖 POSIX 形式路径
+- **[杂项] 清理失效的 `.claude/skills` 指针与临时截图**，`AGENTS.md` 硬性规矩 1 同步更正为「`lib/` 不入库」
+
+## 0.9.3 - 2026-10-05
+
+- **[UI / Client] 新增 LLM Verifier Web 界面组件与源码映射**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-llm-verifier",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "description": "Configurable DSH-native LLM verifier with a Web settings page",
   "repository": {
     "type": "git",
@@ -105,15 +105,19 @@
     "src",
     "scripts",
     "cordis.patch.yml",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "node -e \"require('node:fs').rmSync('lib',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && tsdown && node scripts/sync-installed-profiles.mjs",
     "typecheck": "tsc --noEmit -p tsconfig.build.json",
     "typecheck:local": "node scripts/check-harness-types.mjs && tsc --noEmit -p tsconfig.local.json",
     "test": "vitest run",
     "verify:release": "pnpm run typecheck && pnpm test && pnpm run build",
-    "prepublishOnly": "pnpm run verify:release"
-  },
-  "license": "MIT"
-}
+    "release": "node .dsh/skills/release-plugin/scripts/release.mjs"
+  }
+}

package/src/cache.test.ts

@@ -144,7 +144,19 @@ describe('ScoreCache', () => {
   })
 
   it('resolves cache file path correctly', () => {
-    expect(resolveCacheFile('C:\\foo\\bar')).toBe('C:\\foo\\bar\\scores-v1.json')
+    // Build the input with the host separator and assert with host
+    // functions. A literal 'C:\\foo\\bar' made this test pass on Windows
+    // only by coincidence: on POSIX, isAbsolute and join both use '/', so
+    // the Windows path was treated as RELATIVE and resolved against cwd,
+    // yielding cwd + 'C:\\foo\\bar/scores-v1.json'. The assertion then
+    // failed on ubuntu while the code under test was correct. The point of
+    // the test is the join and the relative/absolute branch, both of which
+    // are platform-independent when expressed in platform terms.
+    const base = join(tmpdir(), 'cache-root')
+    expect(resolveCacheFile(base)).toBe(join(base, 'scores-v1.json'))
+
+    // A relative dir resolves against cwd rather than being taken as-is.
+    expect(resolveCacheFile('relative-dir')).toBe(join(process.cwd(), 'relative-dir', 'scores-v1.json'))
   })
 
   it('computes stableHash deterministically', () => {

package/src/topic-storage.test.ts

@@ -1,21 +1,31 @@
-import { dirname, join } from 'node:path'
+import { dirname, join, resolve } from 'node:path'
 import { describe, expect, it } from 'vitest'
 import type { SessionHeader } from '@deepseek-ai/dsh-session'
 import { resolveTopicDataDir } from './topic-storage.ts'
 
-const header = { id: 'session-test', cwd: 'C:\\workspace', createdAt: 1 } as unknown as SessionHeader
+// Fixture roots are built with resolve() so they are ABSOLUTE on every
+// platform. A literal 'C:\\Users\\...' is relative on POSIX, where dirname
+// then operates on cwd + that string and the assertion against the
+// implementation fails while the implementation is correct.
+const header = { id: 'session-test', cwd: resolve('workspace'), createdAt: 1 } as unknown as SessionHeader
+const SESSIONS_ROOT = resolve('sessions-root')
+const DATA_ROOT = resolve('data-root')
 
 describe('resolveTopicDataDir', () => {
   it('places verifier files beside the session artifact', () => {
-    const artifact = join('C:\\Users\\eddy\\.dsh\\sessions', 'project', 'session-test', 'session.jsonl.zstd')
+    const artifact = join(SESSIONS_ROOT, 'project', 'session-test', 'session.jsonl.zstd')
     const result = resolveTopicDataDir({ locate: () => ({ path: artifact }) }, header, 'verifier')
     expect(result).toBe(join(dirname(artifact), 'verifier'))
   })
 
   it('rejects paths that escape the topic directory', () => {
-    const locator = { locate: () => ({ path: join('C:\\data', 'session-test', 'session.jsonl') }) }
-    expect(() => resolveTopicDataDir(locator, header, '..\\shared')).toThrow(/inside the topic directory/u)
-    expect(() => resolveTopicDataDir(locator, header, 'C:\\shared')).toThrow(/relative/u)
+    const locator = { locate: () => ({ path: join(DATA_ROOT, 'session-test', 'session.jsonl') }) }
+    // Build the escaping path with join() so it is '../shared' on POSIX and
+    // '..\shared' on Windows. A literal '..\shared' is one ordinary segment
+    // on POSIX (backslash is not a separator), so it never escapes and the
+    // assertion failed there while the implementation was correct.
+    expect(() => resolveTopicDataDir(locator, header, join('..', 'shared'))).toThrow(/inside the topic directory/u)
+    expect(() => resolveTopicDataDir(locator, header, SESSIONS_ROOT)).toThrow(/relative/u)
   })
 
   it('fails closed when the backend cannot locate a topic artifact', () => {
@@ -24,8 +34,8 @@ describe('resolveTopicDataDir', () => {
   })
 
   it('falls back to root-based path when locate is missing', () => {
-    const result = resolveTopicDataDir({ root: 'C:\\data\\sessions' }, header, 'verifier')
-    expect(result).toBe(join('C:\\data\\sessions', 'session-test', 'verifier'))
+    const result = resolveTopicDataDir({ root: DATA_ROOT }, header, 'verifier')
+    expect(result).toBe(join(DATA_ROOT, 'session-test', 'verifier'))
   })
 })