dsh-plugin-toolkit 0.13.2 → 0.13.3

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 0.13.3
+
+- **`verify` no longer fails a correct plugin.** The check that calls a client
+  module's `apply()` before its services exist handed it `{}`, so
+  `ctx.inject(...)` — the cordis API every plugin uses — threw
+  `ctx.inject is not a function` and the plugin was reported as broken. The
+  probe now models a real context: `inject`, `on`, `effect`, `logger`, `get`,
+  `set` and `provide` exist; only the services are absent.
+- Found by this repository's own example plugin, whose CI went red on the
+  previous release. That is the whole point of the example.
+
 ## 0.13.2
 
 - **A table of the four ways a plugin installs and still does nothing** — red

package/lib/verify.mjs

@@ -39,8 +39,37 @@ function packTarball(dir, destination) {
  * What cordis hands a plugin that declares no `inject`: every undeclared
  * property read throws. A plain `{}` hides the bug this is looking for.
  */
+// cordis itself is present on every context — `ctx.inject`, `ctx.on`,
+// `ctx.effect` and the logger. What can be absent is the *services*.
+function cordisApi() {
+  const noop = () => () => {};
+  const base = {
+    inject: (list, callback) => {
+      // A declared service may still be absent when apply runs: record nothing,
+      // call nothing. That is exactly what the host does before a service mounts.
+      void list;
+      void callback;
+      return () => {};
+    },
+    on: noop,
+    effect: noop,
+    logger: () => {},
+    get: () => undefined,
+    set: () => {},
+    provide: noop,
+    reflect: { get: () => undefined, set: () => {}, provide: noop },
+  };
+  return base;
+}
+
+/** A context whose services have not mounted yet; reading one gives undefined. */
+function absentContext() {
+  return cordisApi();
+}
+
+/** A context that also enforces cordis's rule: an undeclared read throws. */
 function undeclaredContext() {
-  const base = { inject: undefined };
+  const base = cordisApi();
   return new Proxy(base, {
     get(target, key) {
       if (key in target) return target[key];
@@ -212,7 +241,7 @@ export async function verify({ dir, mount = true }) {
         faceProblems.push('the client module declares no inject list, so the loader calls apply() before its services exist');
       }
       try {
-        face.apply({});
+        face.apply(absentContext());
       } catch (error) {
         faceProblems.push(`apply() throws when the services are absent, which fails the web boot: ${error.message}`);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-toolkit",
-  "version": "0.13.2",
+  "version": "0.13.3",
   "description": "Preflight, release and test DeepSeek Harness plugins: check a folder or any GitHub repository, wait for npm to actually serve the version, and keep the market index honest.",
   "type": "module",
   "bin": {