dsh-agent-plugins-market 0.4.5 → 0.5.0

package/README.md

@@ -30,7 +30,7 @@ dsh plugin --profile <name> add dsh-agent-plugins-market
 pnpm add dsh-agent-plugins-market
 ```
 
-Restart dsh, open **Settings → Agent Plugins Market**, add a marketplace repo as a source (e.g. `https://github.com/anthropics/claude-plugins-official`), and install suites with one click. Skills appear in the `/` slash menu; MCP tools appear as `mcp__<suite>__<server>__<tool>`; slash commands and `/agent-*` subagents register automatically.
+Restart dsh, open **Settings → Agent Plugins Market**, add a marketplace repo as a source (e.g. `https://github.com/anthropics/claude-plugins-official`), and install suites with one click. On legacy Web shells without the `settings.section` slot, the same UI falls back to a top-level Agent Plugins Market page entry. Skills appear in the `/` slash menu; MCP tools appear as `mcp__<suite>__<server>__<tool>`; slash commands and `/agent-*` subagents register automatically.
 
 <details>
 <summary><strong>More install options</strong></summary>
@@ -48,38 +48,38 @@ dsh plugin --profile <name> add github:Sivan757/dsh-agent-plugins-market
 ```jsonc
 // ~/.dsh/profiles/<profile>/package.json
 {
-  "dependencies": { "dsh-agent-plugins-market": "^0.4.4" },
+  "dependencies": { "dsh-agent-plugins-market": "^0.4.6" },
   "dsh": { "profile": { "bundles": ["@deepseek-ai/dsh-base", "@deepseek-ai/dsh-web-app", "dsh-agent-plugins-market"] } }
 }
 ```
 
-The built entry point (`lib/`, `client/`) is committed to the repository, so GitHub installs work without a `prepare` step.
+Build artifacts (`lib/`, `client/`) are not committed; npm publishes them via `prepack`, and GitHub installs build them automatically through the `prepare` script (requires Node + pnpm toolchain on the installing machine).
 
 </details>
 
 ## Features
 
 - **Plugin / suite management** — configure git repository sources (markets), browse every discoverable plugin, install / uninstall / enable / disable / refresh per source or per plugin. Source ids are derived automatically from the repository manifest JSON — no manual input.
-- **Market page in the Web GUI** — source pills + search/actions, status tabs, a two-column card grid, and a plugin detail modal with previews for skills / MCP / hooks / commands / LSP.
+- **Market page in the Web GUI** — source pills + search/actions, status tabs, a two-column card grid, and a plugin detail modal with previews for skills / MCP / hooks / commands / LSP. New shells render it as a localized Settings page; legacy shells without `settings.section` receive a guarded top-level page-mode fallback instead of a duplicate surface.
 - **Runtime injection**
   - **Skills** — a `ctx.skills` SkillProvider (project rank 250 / user rank 450); `${CLAUDE_PLUGIN_ROOT}` is substituted so Claude Code-authored skills work verbatim, and appear in the `/` slash menu.
   - **MCP servers** — every valid `mcp.json` server of an enabled plugin mounts a live `dsh-mcp-client` child; tools appear as `mcp__<plugin>__<server>__<tool>`.
   - **Hooks** — a plugin's `hooks/hooks.json` mounts the `dsh-hooks-claude-code` bridge on the harness interception points (SessionStart, UserPromptSubmit, PreToolUse, PostToolUse, Stop, SubagentStart, SubagentStop).
   - **Commands / subagents** — `commands/*.md` register as dsh slash commands; `agents/*.md` register as `agent-<name>` skills.
   - **Context** — the enabled-plugin catalog (user + project sections) is injected at session start; the `agent_plugins` tool queries it.
-- **Runtime discovery** — installed plugins are discovered from `~/.dsh/agent-plugins/.sources/<sourceId>/` (user dimension) and `<project>/.dsh/agent-plugins/.sources/<sourceId>/` (project dimension). Local sources read the working tree directly, including uncommitted changes.
+- **Runtime discovery** — installed plugins are discovered from configured source ids under `~/.dsh/agent-plugins/.sources/<sourceId>/` (user dimension) and `<project>/.dsh/agent-plugins/.sources/<sourceId>/` (project dimension). Stale unmanaged user checkouts are ignored, while project checkouts remain state-authorized. Local sources read the working tree directly, including uncommitted changes.
 
 ## Supported plugin layouts
 
-| Layout | Manifest | Notes |
-| --- | --- | --- |
-| agent-plugins.org v1 | `plugin.json` | vendored 1.0.0 JSON Schema validation + spec §4 path rules |
-| Claude Code market | `.claude-plugin/marketplace.json` + `.claude-plugin/plugin.json` | marketplace `plugins[].source` relative paths |
-| Universal | `.plugin/plugin.json` | multi-client repos (e.g. vercel-plugin) |
-| Cursor | `.cursor-plugin/plugin.json` | declared skills paths |
-| Kimi | `.kimi-plugin/plugin.json` | inline mcpServers |
-| Codex | `.codex-plugin/plugin.json` | — |
-| Skill collection (manifest-less) | none (synthetic) | flat `SKILL.md` directory collections |
+| Layout                           | Manifest                                                         | Notes                                                      |
+| -------------------------------- | ---------------------------------------------------------------- | ---------------------------------------------------------- |
+| agent-plugins.org v1             | `plugin.json`                                                    | vendored 1.0.0 JSON Schema validation + spec §4 path rules |
+| Claude Code market               | `.claude-plugin/marketplace.json` + `.claude-plugin/plugin.json` | marketplace `plugins[].source` relative paths              |
+| Universal                        | `.plugin/plugin.json`                                            | multi-client repos (e.g. vercel-plugin)                    |
+| Cursor                           | `.cursor-plugin/plugin.json`                                     | declared skills paths                                      |
+| Kimi                             | `.kimi-plugin/plugin.json`                                       | inline mcpServers                                          |
+| Codex                            | `.codex-plugin/plugin.json`                                      | —                                                          |
+| Skill collection (manifest-less) | none (synthetic)                                                 | flat `SKILL.md` directory collections                      |
 
 One repo may carry several dialects at once (vercel/vercel-plugin ships all of them); the suite identity comes from the highest-precedence manifest while surfaces are scanned from the directories. `mcp.json` is validated strictly against the agent-plugins.org schema; `.mcp.json` is parsed leniently — top-level server-map shorthand, `type: http` / `local` / omitted `type` (stdio by `command`) normalization, `${CLAUDE_PLUGIN_ROOT}` / `${CLAUDE_PLUGIN_DATA}` / `${NAME:-default}` placeholders, and unknown transports are tolerated per server. The marketplace manifest is authoritative for the suite set; manifest-less marketplace entries that carry skills and manifest-bearing container dirs not listed there are supplemented. Remote URL entries show as "remote reference" cards (metadata + source URL, not directly installable; add the repo as a source to install).
 
@@ -180,10 +180,16 @@ Yes — MIT licensed, published on [npm](https://www.npmjs.com/package/dsh-agent
 pnpm install
 pnpm run test        # vitest over fixture suites + multi-dialect parsing
 pnpm run typecheck
+pnpm run lint        # ESLint over the refactored source and tests
+pnpm run format:check
+pnpm run check:architecture
+pnpm run check:refactor
 pnpm run build       # tsc host + tsdown client + module-loader banner
 pnpm pack
 ```
 
+The internal modularization decision and staged migration are documented in [`docs/design/engineering-refactor-plan.md`](docs/design/engineering-refactor-plan.md) and [`docs/adr/0001-catalog-centered-modular-refactor.md`](docs/adr/0001-catalog-centered-modular-refactor.md).
+
 The docs website lives in [`docs-site/`](docs-site/) (Astro, deployed to GitHub Pages).
 
 ## Vendored assets

package/README.zh.md

@@ -30,7 +30,7 @@ dsh plugin --profile <名字> add dsh-agent-plugins-market
 pnpm add dsh-agent-plugins-market
 ```
 
-重启 dsh，打开 **设置 → Agent Plugins 市场**，把市场仓库添加为源（例如 `https://github.com/anthropics/claude-plugins-official`），一键安装套件。技能出现在「/」斜杠菜单；MCP 工具以 `mcp__<套件>__<server>__<工具>` 出现；斜杠命令与 `/agent-*` 子代理自动注册。
+重启 dsh，打开 **设置 → Agent Plugins 市场**，把市场仓库添加为源（例如 `https://github.com/anthropics/claude-plugins-official`），一键安装套件。对于没有 `settings.section` slot 的旧版 Web 外壳，同一套界面会自动回退为顶层 Agent Plugins 市场页。技能出现在「/」斜杠菜单；MCP 工具以 `mcp__<套件>__<server>__<工具>` 出现；斜杠命令与 `/agent-*` 子代理自动注册。
 
 <details>
 <summary><strong>更多安装方式</strong></summary>
@@ -48,38 +48,38 @@ dsh plugin --profile <名字> add github:Sivan757/dsh-agent-plugins-market
 ```jsonc
 // ~/.dsh/profiles/<profile>/package.json
 {
-  "dependencies": { "dsh-agent-plugins-market": "^0.4.4" },
+  "dependencies": { "dsh-agent-plugins-market": "^0.4.6" },
   "dsh": { "profile": { "bundles": ["@deepseek-ai/dsh-base", "@deepseek-ai/dsh-web-app", "dsh-agent-plugins-market"] } }
 }
 ```
 
-构建产物（`lib/`、`client/`）已提交到仓库，GitHub 安装无需 `prepare` 步骤。
+构建产物（`lib/`、`client/`）不再提交进仓库；npm 通过 `prepack` 发布，GitHub 安装时由 `prepare` 脚本自动构建（安装机需具备 Node + pnpm 工具链）。
 
 </details>
 
 ## 功能特性
 
 - **套件管理**——配置 git 仓库源（市场），浏览每个源的套件，支持安装、卸载、启用、禁用、刷新；源 ID 自动从仓库清单 JSON 解析，无需手填。
-- **Web 市场页**——设置面板内的市场页：顶部源胶囊 + 搜索/操作、状态标签、两列卡片网格、套件详情弹窗（技能/MCP/hooks/命令/LSP 全部可预览）。
+- **Web 市场页**——顶部源胶囊 + 搜索/操作、状态标签、两列卡片网格、套件详情弹窗（技能/MCP/hooks/命令/LSP 全部可预览）。新版外壳使用带中文/英文切换的设置页；没有 `settings.section` slot 的旧版外壳才启用受保护的顶层页面回退，不会重复渲染两份市场页。
 - **运行时注入**
   - **技能**：注册 `ctx.skills` SkillProvider（项目 rank 250 / 用户 rank 450），`${CLAUDE_PLUGIN_ROOT}` 自动替换，Claude Code 生态技能原样可用，出现在「/」斜杠菜单；
   - **MCP 服务器**：启用套件的 `mcp.json` 每个合法 server 动态挂载 `dsh-mcp-client` 子插件，工具名 `mcp__<套件>__<server>__<工具>`；
   - **Hooks**：套件 `hooks/hooks.json` 挂载 `dsh-hooks-claude-code` 桥，映射到宿主拦截点（SessionStart、UserPromptSubmit、PreToolUse、PostToolUse、Stop、SubagentStart、SubagentStop）；
   - **命令 / 子代理**：`commands/*.md` 注册为 dsh 斜杠命令；`agents/*.md` 注册为 `agent-<name>` 技能；
   - **上下文**：会话启动注入启用套件清单（用户级 + 项目级），`agent_plugins` 工具可查询。
-- **运行时发现**——已安装套件从 `~/.dsh/agent-plugins/.sources/<源id>/`（用户维度）与 `<项目>/.dsh/agent-plugins/.sources/<源id>/`（项目维度）发现；本地源直接读取工作树（含未提交改动）。
+- **运行时发现**——已安装套件只从已配置的源 ID 对应目录发现：`~/.dsh/agent-plugins/.sources/<源id>/`（用户维度）与 `<项目>/.dsh/agent-plugins/.sources/<源id>/`（项目维度）。用户维度的过期未登记 checkout 会被忽略，项目维度仍按 state 中的安装记录授权；本地源直接读取工作树（含未提交改动）。
 
 ## 兼容的套件布局
 
-| 布局 | 清单文件 | 说明 |
-| --- | --- | --- |
-| agent-plugins.org v1 | `plugin.json` | 内置 1.0.0 JSON Schema 校验 + 规范 §4 路径约束 |
-| Claude Code 市场 | `.claude-plugin/marketplace.json` + 套件 `.claude-plugin/plugin.json` | marketplace `plugins[].source` 相对路径 |
-| 通用（universal） | `.plugin/plugin.json` | 多客户端共存仓库（如 vercel-plugin） |
-| Cursor | `.cursor-plugin/plugin.json` | 声明式 skills 路径 |
-| Kimi | `.kimi-plugin/plugin.json` | 内联 mcpServers |
-| Codex | `.codex-plugin/plugin.json` | — |
-| 技能集合（无清单） | 无（合成） | 扁平 `SKILL.md` 目录集合 |
+| 布局                 | 清单文件                                                              | 说明                                           |
+| -------------------- | --------------------------------------------------------------------- | ---------------------------------------------- |
+| agent-plugins.org v1 | `plugin.json`                                                         | 内置 1.0.0 JSON Schema 校验 + 规范 §4 路径约束 |
+| Claude Code 市场     | `.claude-plugin/marketplace.json` + 套件 `.claude-plugin/plugin.json` | marketplace `plugins[].source` 相对路径        |
+| 通用（universal）    | `.plugin/plugin.json`                                                 | 多客户端共存仓库（如 vercel-plugin）           |
+| Cursor               | `.cursor-plugin/plugin.json`                                          | 声明式 skills 路径                             |
+| Kimi                 | `.kimi-plugin/plugin.json`                                            | 内联 mcpServers                                |
+| Codex                | `.codex-plugin/plugin.json`                                           | —                                              |
+| 技能集合（无清单）   | 无（合成）                                                            | 扁平 `SKILL.md` 目录集合                       |
 
 一个仓库可同时携带多种清单（如 vercel/vercel-plugin 全部都有）；套件身份取优先级最高的清单，内容面（skills/commands/agents/hooks/mcp）按目录扫描。`mcp.json` 严格按 agent-plugins.org schema 校验；`.mcp.json` 宽容解析——支持顶层 server map 简写、`type: http`/`local`/省略 type（按 command 判 stdio）归一化、`${CLAUDE_PLUGIN_ROOT}` / `${CLAUDE_PLUGIN_DATA}` / `${NAME:-default}` 占位符，未知 transport 逐 server 容错。marketplace 清单权威决定套件集合；无清单但含技能的市场条目与容器内未列出的清单插件也会被补全。远程 URL 引用条目以「远程引用」卡片展示（元信息 + 源 URL，不可直接安装，可添加对应仓库为源后安装）。
 
@@ -180,10 +180,16 @@ dsh plugin --profile <名字> add dsh-agent-plugins-market
 pnpm install
 pnpm run test        # vitest（fixture 套件 + 多范式解析）
 pnpm run typecheck
+pnpm run lint        # 对重构源码与测试执行 ESLint
+pnpm run format:check
+pnpm run check:architecture
+pnpm run check:refactor
 pnpm run build       # tsc 宿主 + tsdown 客户端 + 模块加载器包装
 pnpm pack            # 构建并打 tgz
 ```
 
+内部模块化决策与分阶段迁移计划见 [`docs/design/engineering-refactor-plan.md`](docs/design/engineering-refactor-plan.md) 和 [`docs/adr/0001-catalog-centered-modular-refactor.md`](docs/adr/0001-catalog-centered-modular-refactor.md)。
+
 文档站位于 [`docs-site/`](docs-site/)（Astro，部署到 GitHub Pages）。
 
 ## Vendored 资产