dsh-loci 2.0.1 → 2.0.3

package/CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); the project follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html) from 1.0.0.
 
+## [2.0.3] — 2026-11-14
+
+### Fixed
+
+- `dsh-loci --version` (and `-v`, and the bare `version` word) prints the version.
+  It fell through to the help text before, because the version was only read for
+  the store's metadata and never wired to an argument. `test/unit/cli-version.test.mjs`
+  keeps it from regressing, including the "flag before command" position.
+
+## [2.0.2] — 2026-11-14
+
+### Fixed
+
+- The manifest gate now checks the `bin` entry: bare relative path, target exists,
+  shebang present, covered by `files`. No user-visible behaviour changed — measured
+  on the published builds, `bin` was already correct in both 2.0.0 and 2.0.1
+  (`node_modules/.bin/dsh-loci` is created and `npx dsh-loci help` works).
+
+  The reason for the guard: npm rewrites a bin path that starts with `./` and prints
+  `script name … was invalid and removed`, which reads like the binary was dropped.
+  It was not. The value is now canonical so that warning cannot hide a real problem
+  next time.
+
 ## [2.0.1] — 2026-11-14
 
 ### Changed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-loci",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "description": "Layered long-term memory for DeepSeek Harness: the prompt sees only a stable index, full text is one lookup away. Bi-temporal facts, strict scope isolation, verified-only injection.",
   "type": "module",
   "license": "MIT",
@@ -33,7 +33,7 @@
     "./package.json": "./package.json"
   },
   "bin": {
-    "dsh-loci": "./scripts/cli.mjs"
+    "dsh-loci": "scripts/cli.mjs"
   },
   "files": [
     "index.js",

package/scripts/cli.mjs

@@ -67,6 +67,14 @@ const COMMANDS = new Set([
 const command = rawArgv.find((token) => COMMANDS.has(token)) ?? 'help';
 // Keep the original token order for the flag readers below.
 const argv = [command, ...rawArgv.filter((token) => token !== command)];
+
+// `dsh-loci --version` is the first thing anyone types. It used to fall through
+// to the help text, which looks like the version flag is unsupported rather than
+// like the value was never wired up.
+if (rawArgv.some((token) => token === '--version' || token === '-v' || token === 'version')) {
+  console.log(PLUGIN_VERSION);
+  process.exit(0);
+}
 const flag = (name) => {
   const index = argv.indexOf(`--${name}`);
   if (index < 0) return undefined;

package/src/host/index.js

@@ -22,7 +22,7 @@ import { registerCommands } from './commands.js';
 import { runDoctor } from './doctor.js';
 
 /** Version stamped into the database and diagnostics. */
-export const VERSION = '2.0.1';
+export const VERSION = '2.0.3';
 
 /** Optional collaborators; without them the plugin still serves tools. */
 export const inject = ['systemPrompt', 'tools'];

package/src/mcp/store-facade.js

@@ -36,7 +36,7 @@ export function openFacadeStore(options = {}) {
     memoryRoot: root,
     paths,
     config,
-    pluginVersion: '2.0.1',
+    pluginVersion: '2.0.3',
     readOnly: options.readOnly === true,
   });
   return { store, paths };