omni-dsh-plugins 1.0.2 → 1.0.3

package/README.md

@@ -22,7 +22,7 @@ never ships here.
 - Node.js 20 or newer.
 - The official `dsh` executable on `PATH` for add, update and remove operations.
 - Network access for discovery. With no `--catalog`, the CLI reads the snapshot published at
-  <https://dsh-plugins.omniroute.online/catalog.snapshot.json> and accepts the revision that
+  <https://dsh-plugins.omniskill.online/catalog.snapshot.json> and accepts the revision that
   snapshot declares, so a plugin merged today is findable today. Passing `--revision` turns the
   fetch into an exact-commit demand and rejects any snapshot declaring a different one.
 
@@ -136,7 +136,7 @@ granting `--allow-code-execution`.
 
 `--catalog` accepts a local catalog directory, a local
 `omni-dsh-catalog-snapshot-v1` JSON file, or one of two allowlisted HTTPS URLs: the stable
-site-hosted snapshot `https://dsh-plugins.omniroute.online/catalog.snapshot.json` (the
+site-hosted snapshot `https://dsh-plugins.omniskill.online/catalog.snapshot.json` (the
 operational remote source) or the raw GitHub form embedding the revision in its path.
 Remote snapshots require `--revision <40-character-commit-sha>` and the snapshot document must
 declare exactly that SHA. Redirects, alternate hosts, traversal, symlinks, oversized inputs,
@@ -144,7 +144,7 @@ and revision mismatches are rejected before catalog validation.
 
 ```bash
 npx omni-dsh-plugins search tui \
-  --catalog https://dsh-plugins.omniroute.online/catalog.snapshot.json \
+  --catalog https://dsh-plugins.omniskill.online/catalog.snapshot.json \
   --revision <published-catalog-revision>
 ```
 

package/dist/bin.js

@@ -23774,7 +23774,7 @@ function sanitizedErrorMessage(error) {
 // src/catalogSnapshot.ts
 var CATALOG_SNAPSHOT_FORMAT_V1 = "omni-dsh-catalog-snapshot-v1";
 var PUBLIC_CATALOG_RAW_ORIGIN = "https://raw.githubusercontent.com/diegosouzapw/awesome-omni-dsh-plugins";
-var PUBLIC_SNAPSHOT_SITE_URL = "https://dsh-plugins.omniroute.online/catalog.snapshot.json";
+var PUBLIC_SNAPSHOT_SITE_URL = "https://dsh-plugins.omniskill.online/catalog.snapshot.json";
 var CATALOG_SNAPSHOT_LIMITS = Object.freeze({
   snapshotBytes: 128 * 1024 * 1024,
   totalFileBytes: 128 * 1024 * 1024,
@@ -29515,15 +29515,29 @@ function addMutationOptions(command) {
     "consent to DSH/pnpm lifecycle code (native Windows disabled; use WSL)"
   );
 }
+function parseManifestVersion(raw) {
+  const manifest = JSON.parse(raw);
+  const version = manifest.version;
+  if (typeof version !== "string" || !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(version)) {
+    throw new Error("the package manifest does not declare an exact version");
+  }
+  return version;
+}
 function publishedVersion() {
-  const manifest = JSON.parse(
-    readFileSync(new URL("../package.json", import.meta.url), "utf8")
-  );
-  return manifest.version;
+  return parseManifestVersion(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
 }
 async function runCli(argv, dependencies = defaultDependencies3) {
   let result = 0;
-  const program2 = new Command().name("dsh-plugins").version(publishedVersion()).description("Unofficial catalog and safe installer for DeepSeek Harness plugins.").addHelpText(
+  let version;
+  try {
+    version = publishedVersion();
+  } catch (error) {
+    dependencies.stderr(`${sanitizedErrorMessage(error)}
+`);
+    dependencies.stderr("Command failed safely; no changes were made.\n");
+    return 1;
+  }
+  const program2 = new Command().name("dsh-plugins").version(version).description("Unofficial catalog and safe installer for DeepSeek Harness plugins.").addHelpText(
     "after",
     "\nUnofficial community project. Not affiliated with, endorsed by, or sponsored by DeepSeek.\nNative Windows add/update/remove with code execution are disabled; use WSL.\nDry-run and read-only catalog/search/info/list/doctor commands remain available.\nNative Windows recovery markers require documented manual recovery.\n"
   ).configureOutput({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-dsh-plugins",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Unofficial catalog and safe installer for DeepSeek Harness plugins",
   "type": "module",
   "license": "MIT",