dsh-plugin-toolkit 0.7.2 → 0.7.3

package/CHANGELOG.md

@@ -1,3 +1,16 @@
+## 0.7.3
+
+The scaffold was two minor versions behind the tool that wrote it.
+
+- `init` pins the toolkit it was generated by (`^<its own version>`) instead of
+  a number typed once, so `npm install` in a fresh scaffold gets the version
+  whose README you just read.
+- The generated workflow uses the composite action with `verify` instead of
+  `npx dsh-plugin-toolkit@0.5.0 doctor .` — `doctor` reads the working copy and
+  cannot see that `files` left the client bundle out.
+- `test/init.test.mjs` guards both: the pinned range must equal the running
+  version, and the workflow must not fall back to `doctor`.
+
 ## 0.7.2
 
 `verify` runs from npx's cache, so it has to find jsdom and React where the

package/README.md

@@ -169,7 +169,7 @@ AIignore No workspace yet Could not read the report …
 
 ## Start from the example
 
-[`dsh-plugin-example`](https://github.com/WJDdidi-1/dsh-plugin-example) is a ~70-line plugin: one sidebar tab, two languages, one behaviour test, CI that runs `doctor` through the composite action. It is the shape this toolkit expects, so it is also the fastest way to see whether the toolkit fits your plugin.
+[`dsh-plugin-example`](https://github.com/WJDdidi-1/dsh-plugin-example) is a ~70-line plugin: one sidebar tab, two languages, one behaviour test, CI that runs `verify` through the composite action. It is the shape this toolkit expects, so it is also the fastest way to see whether the toolkit fits your plugin. It is a GitHub template too: **Use this template** starts you on a plugin whose first publish already passes.
 
 ```sh
 dsh plugin add dsh-plugin-example

package/lib/init.mjs

@@ -6,7 +6,14 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
+import { fileURLToPath } from 'node:url';
 
+// The scaffold pins the toolkit it was generated by, not a number typed once:
+// a scaffold that installs two minor versions behind is the first thing a new
+// author sees and the last thing anyone updates.
+const VERSION = JSON.parse(
+  fs.readFileSync(path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'package.json'), 'utf8'),
+).version;
 const NPM_NAME = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
 
 export function checkName(name) {
@@ -29,7 +36,7 @@ function manifest({ name, title, version }) {
       files: ['index.js', 'client.js', 'cordis.patch.yml', 'README.md'],
       scripts: { test: 'node --test', doctor: 'dsh-plugin doctor .' },
       devDependencies: {
-        'dsh-plugin-toolkit': '^0.5.0',
+        'dsh-plugin-toolkit': `^${VERSION}`,
         jsdom: '^26.1.0',
         react: '^18.3.1',
         'react-dom': '^18.3.1',
@@ -136,7 +143,7 @@ export function files({ name, title = 'My panel', version = '0.1.0' }) {
     'test/panel.test.mjs': test({ name, title }),
     'README.md': `# ${slug}\n\n${title} — a panel for DeepSeek Harness.\n\n## Requirements\n\n| What | Version | Why |\n| --- | --- | --- |\n| DeepSeek Harness | >= 0.2.0 | provides \`sidebarRightTabs\` |\n| Node | >= 18 | the host half |\n\n## Develop\n\n\`\`\`sh\nnpm install\nnpm test            # mounts client.js in Node\nnpm run doctor      # checks the manifest before you publish\n\`\`\`\n\n## Install\n\n\`\`\`sh\ndsh plugin add ${name}\n\`\`\`\n`,
     '.gitignore': 'node_modules/\n',
-    '.github/workflows/ci.yml': `name: ci\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\njobs:\n  test:\n    runs-on: ubuntu-latest\n    strategy:\n      matrix:\n        node: [18, 20, 22]\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: \${{ matrix.node }}\n      - run: npm install\n      - run: npm test\n      - run: npx --yes dsh-plugin-toolkit@0.5.0 doctor .\n`,
+    '.github/workflows/ci.yml': `name: ci\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\njobs:\n  test:\n    runs-on: ubuntu-latest\n    strategy:\n      matrix:\n        node: [18, 20, 22]\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: \${{ matrix.node }}\n      - run: npm install\n      - run: npm test\n      # verify, not doctor: doctor reads the working copy, so a \`files\` list\n      # that forgets client.js passes it and the installed plugin has no panel.\n      - uses: WJDdidi-1/dsh-plugin-toolkit@v1\n        with:\n          dir: .\n          version: ${VERSION}\n`,
   };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-toolkit",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "description": "Preflight, release and test DeepSeek Harness plugins: checks what the host needs, waits for npm to actually serve the version, and keeps the market index honest.",
   "type": "module",
   "bin": {