dsh-plugin-toolkit 0.13.4 → 0.13.5

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 0.13.5
+
+- **A wildcard export no longer fails the pack check.** `exports` can name a
+  pattern (`"./locale/*.json"`), while `npm pack` lists the files it shipped
+  (`locale/en.json`). Comparing them as strings reported a correctly packed
+  plugin as broken; the check now matches patterns by prefix and suffix.
+- Found by running `verify` against the neighbour project's plugin, which ships
+  exactly that export.
+
 ## 0.13.4
 
 - **`docs/why-it-exists.md`**: the five failures that shaped these checks, each

package/lib/verify.mjs

@@ -79,6 +79,22 @@ function undeclaredContext() {
   });
 }
 
+/**
+ * A declared path can be a pattern: `exports["./locale/*.json"]` names a folder
+ * of files, and `npm pack` lists the files it actually shipped. Exact set
+ * membership would report a correctly packed plugin as broken — which it did,
+ * on this repository's own neighbour.
+ */
+function shipsPath(shipped, target) {
+  if (target.includes('*') === false) return shipped.has(target);
+  const [head, tail] = target.split('*');
+  const suffix = tail ?? '';
+  for (const file of shipped) {
+    if (file.startsWith(head) === true && file.endsWith(suffix) === true) return true;
+  }
+  return false;
+}
+
 export async function verify({ dir, mount = true }) {
   const failures = [];
   const report = doctor(dir);
@@ -101,7 +117,7 @@ export async function verify({ dir, mount = true }) {
   // installed plugin is missing its own code.
   const shipped = new Set(packed.files);
   for (const target of declaredPaths(report.manifest)) {
-    if (shipped.has(target) === false) {
+    if (shipsPath(shipped, target) === false) {
       failures.push({
         check: 'pack',
         message: `the tarball does not contain ${target}, so the installed plugin would be missing it`,
@@ -113,7 +129,7 @@ export async function verify({ dir, mount = true }) {
   const repoEntry = resolveEntry(dir, report.manifest);
   if (repoEntry !== null) {
     const relative = path.relative(dir, repoEntry).split(path.sep).join('/');
-    if (shipped.has(relative) === false) {
+    if (shipsPath(shipped, relative) === false) {
       failures.push({
         check: 'pack',
         message: `the tarball does not contain ${relative}, so the installed plugin has no panel`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-toolkit",
-  "version": "0.13.4",
+  "version": "0.13.5",
   "description": "Preflight, release and test DeepSeek Harness plugins: check a folder or any GitHub repository, wait for npm to actually serve the version, and keep the market index honest.",
   "type": "module",
   "bin": {