dsh-agent-plugins-market 0.4.6 → 0.5.0

package/lib/types/application/queries.d.ts

@@ -0,0 +1,33 @@
+/** Narrow application interfaces consumed by the HTTP transport adapter. */
+import type { McpStatusPayload } from '../contracts/mcp-status.js';
+import type { OverviewPayload, SkillContent, SourceProgress, SuiteDetail } from '../contracts/market.js';
+import type { SourceRef } from '../model/types.js';
+/** Read-only market operations required by HTTP routes. */
+export interface MarketQueries {
+    readonly sources: SourceRef[];
+    overview(): Promise<OverviewPayload>;
+    mcpStatus(): Promise<McpStatusPayload>;
+    sourceProgress(): SourceProgress;
+    suiteDetail(sourceId: string, suiteId: string): Promise<SuiteDetail>;
+    skillContent(sourceId: string, suiteId: string, skillName: string): Promise<SkillContent>;
+}
+/** Mutating market operations required by HTTP routes. */
+export interface MarketMutations {
+    addSource(input: {
+        url: string;
+        branch?: string;
+        local?: boolean;
+    }): Promise<SourceRef>;
+    updateSource(sourceId: string, patch: {
+        url?: string;
+        branch?: string;
+        local?: boolean;
+    }): Promise<void>;
+    removeSource(sourceId: string): Promise<void>;
+    refreshSource(sourceId?: string): Promise<void>;
+    install(sourceId: string, suiteId: string): Promise<void>;
+    uninstall(sourceId: string, suiteId: string): Promise<void>;
+    setEnabled(sourceId: string, suiteId: string, enabled: boolean): Promise<void>;
+}
+/** Complete application surface required by the HTTP routes. */
+export type MarketService = MarketQueries & MarketMutations;

package/lib/types/{discovery → catalog}/manifests.d.ts

@@ -1,4 +1,4 @@
-import type { SuiteManifest } from '../types.js';
+import type { SuiteManifest } from '../model/types.js';
 export type ManifestKind = 'agent-plugin-v1' | 'universal' | 'claude-code' | 'cursor' | 'kimi' | 'codex';
 /** One manifest candidate: its file path and the dialect it selects. */
 export interface ManifestCandidate {

package/lib/types/catalog/source-catalog.d.ts

@@ -0,0 +1,3 @@
+import type { SourceRef, Suite, SuiteDimension } from '../model/types.js';
+/** Discover suites from the selected configured or project checkouts. */
+export declare function discoverSourceList(sources: SourceRef[], dimension: SuiteDimension, dimensionRoot: string): Promise<Suite[]>;

package/lib/types/catalog/suite-scanner.d.ts

@@ -0,0 +1,9 @@
+import type { Suite, SuiteDimension } from '../model/types.js';
+import { repoName } from './manifests.js';
+import { discoverLspEntries, listMdFiles, type LspEntry } from './surfaces.js';
+export { repoName, listMdFiles, discoverLspEntries };
+export type { LspEntry };
+/** Discover every suite under one source checkout. */
+export declare function discoverSuitesInSource(checkoutDir: string, sourceId: string, dimension: SuiteDimension): Promise<Suite[]>;
+/** Whether a suite root path lies outside the checkout. */
+export declare function isOutside(root: string, candidate: string): boolean;

package/lib/types/{discovery → catalog}/surfaces.d.ts

@@ -1,4 +1,4 @@
-import type { McpSuiteConfig, SuiteSkill, SuiteSurfaceCounts } from '../types.js';
+import type { McpSuiteConfig, SuiteSkill, SuiteSurfaceCounts } from '../model/types.js';
 /** Discover SKILL.md files under the suite's skills directory, up to 3 levels deep. */
 export declare function discoverSkills(root: string, errors: string[], declared?: unknown): Promise<SuiteSkill[]>;
 /** Read the suite's MCP config: `mcp.json` or `.mcp.json`, else the winning manifest's inline `mcpServers`. */

package/lib/types/{validate.d.ts → catalog/validate.d.ts}

@@ -1,4 +1,4 @@
-import type { McpSuiteConfig } from './types.js';
+import type { McpSuiteConfig } from '../model/types.js';
 export declare const PLUGIN_SCHEMA_ID = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
 export declare const MCP_SCHEMA_ID = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
 /** Validate one JSON document against a vendored schema; errors joined for surfacing. */

package/lib/types/context.d.ts

@@ -8,6 +8,6 @@
  * dimension, skill names per plugin, and MCP server prefixes.
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { SuiteManager } from './manager.js';
+import type { Catalog } from './application/catalog.js';
 /** Mount the agent_plugins query tool. */
-export declare function mountSuiteContext(ctx: Context, manager: SuiteManager): () => void;
+export declare function mountSuiteContext(ctx: Context, manager: Catalog): () => void;

package/lib/types/contracts/market.d.ts

@@ -0,0 +1,153 @@
+/** Browser-safe market wire records and route constants shared by host and client. */
+/** Prefix for all Agent Plugins Market HTTP routes. */
+export declare const MARKET_API_PREFIX: "/api/agent-plugins/";
+/** Fixed Agent Plugins Market HTTP routes. */
+export declare const MARKET_ROUTES: {
+    readonly overview: "/api/agent-plugins/overview";
+    readonly mcpStatus: "/api/agent-plugins/mcp-status";
+    readonly progress: "/api/agent-plugins/progress";
+    readonly config: "/api/agent-plugins/config";
+    readonly suite: "/api/agent-plugins/suite";
+    readonly skill: "/api/agent-plugins/skill";
+    readonly addSource: "/api/agent-plugins/sources/add";
+    readonly updateSource: "/api/agent-plugins/sources/update";
+    readonly removeSource: "/api/agent-plugins/sources/remove";
+    readonly refreshSource: "/api/agent-plugins/sources/refresh";
+    readonly install: "/api/agent-plugins/install";
+    readonly uninstall: "/api/agent-plugins/uninstall";
+    readonly setEnabled: "/api/agent-plugins/set-enabled";
+};
+/** A configured source row returned to the market client. */
+export interface SourceOverview {
+    id: string;
+    url: string;
+    branch?: string;
+    local?: boolean;
+    cloned: boolean;
+    lockCommit?: string;
+    error?: string;
+    suiteIds: string[];
+}
+/** Counts of runtime surfaces displayed on a suite card. */
+export interface SuiteSurfaceCounts {
+    skills: number;
+    mcp: number;
+    hooks: number;
+    commands: number;
+    agents: number;
+    lsp: number;
+}
+/** A normalized suite card returned by the overview route. */
+export interface SuiteOverviewCard {
+    sourceId: string;
+    suiteId: string;
+    name: string;
+    version?: string;
+    description?: string;
+    keywords: string[];
+    surfaces: SuiteSurfaceCounts;
+    enabled: boolean;
+    installed: boolean;
+    dimension: string;
+    layout: string;
+    remoteUrl?: string;
+    errors: string[];
+    mcpErrors?: string[];
+}
+/** The market overview response. */
+export interface OverviewPayload {
+    sources: SourceOverview[];
+    suites: SuiteOverviewCard[];
+    totals: {
+        all: number;
+        installed: number;
+        enabled: number;
+    };
+    roots: {
+        user: string;
+        data: string;
+    };
+}
+/** Host-side progress of the source mutation currently in flight. */
+export interface SourceProgress {
+    active: boolean;
+    sourceId: string;
+    step: string;
+}
+/** One skill's metadata inside a suite detail response. */
+export interface SuiteSkillMeta {
+    name: string;
+    description: string;
+    whenToUse?: string;
+    path: string;
+}
+/** One command or agent preview in a suite detail response. */
+export interface MarkdownPreview {
+    name: string;
+    description?: string;
+    content: string;
+}
+/** Claude Code command preview alias retained for feature-specific readability. */
+export type CommandPreview = MarkdownPreview;
+/** Claude Code agent preview alias retained for feature-specific readability. */
+export type AgentPreview = MarkdownPreview;
+/** One LSP definition preview in a suite detail response. */
+export interface LspPreview {
+    name: string;
+    content: string;
+}
+/** One flattened hook entry in a suite detail response. */
+export interface HookPreview {
+    event: string;
+    matcher?: string;
+    command: string;
+}
+/** One validated MCP server detail in a suite detail response. */
+export interface McpServerDetail {
+    key: string;
+    type: string;
+    command?: string;
+    url?: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+    headers?: Record<string, string>;
+}
+/** Full suite detail response served by the detail modal. */
+export interface SuiteDetail {
+    sourceId: string;
+    suiteId: string;
+    name: string;
+    version: string | null;
+    description: string | null;
+    author: string | null;
+    keywords: string[];
+    layout: string;
+    dimension: string;
+    root: string;
+    remoteUrl: string | null;
+    installed: boolean;
+    enabled: boolean;
+    skills: SuiteSkillMeta[];
+    mcpServers: McpServerDetail[];
+    hooks: {
+        count: number;
+        entries: HookPreview[];
+    };
+    commands: MarkdownPreview[];
+    agents: MarkdownPreview[];
+    lsp: LspPreview[];
+    errors: string[];
+    mcpErrors: string[];
+}
+/** One skill's full file text served by the skill route. */
+export interface SkillContent {
+    name: string;
+    description: string;
+    content: string;
+    path: string;
+}
+/** Build a suite-detail URL without duplicating route or query encoding logic. */
+export declare function suiteRoute(sourceId: string, suiteId: string): string;
+/** Build a skill-content URL without duplicating route or query encoding logic. */
+export declare function skillRoute(sourceId: string, suiteId: string, skill: string): string;

package/lib/types/contracts/mcp-status.d.ts

@@ -0,0 +1,38 @@
+/** Browser-safe MCP status records shared by host aggregation and client rendering. */
+/** A tool observed in the host MCP tool registry. */
+export interface McpStatusTool {
+    name: string;
+    description?: string;
+}
+/** Whether an MCP row comes from a suite or direct host observation. */
+export type McpStatusKind = 'plugin' | 'direct';
+/** Operational state rendered for an MCP row. */
+export type McpStatusState = 'connected' | 'degraded' | 'failed' | 'disabled';
+/** One MCP service row for the status surface. */
+export interface McpStatusEntry {
+    id: string;
+    name: string;
+    kind: McpStatusKind;
+    state: McpStatusState;
+    source?: string;
+    suiteId?: string;
+    serverKey?: string;
+    transport: string;
+    endpoint?: string;
+    config?: Record<string, unknown>;
+    tools: McpStatusTool[];
+    reason?: string;
+}
+/** The MCP status response returned by the host. */
+export interface McpStatusPayload {
+    entries: McpStatusEntry[];
+    observedAt: string;
+    totals: {
+        all: number;
+        connected: number;
+        degraded: number;
+        failed: number;
+        disabled: number;
+    };
+    directObservationOnly: boolean;
+}

package/lib/types/index.d.ts

@@ -12,7 +12,7 @@
  * manager reports a per-server mount failure.
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { SourceRef } from './types.js';
+import type { SourceRef } from './model/types.js';
 export declare const name = "dsh-agent-plugins-market";
 export declare const inject: string[];
 /** Host configuration. */

package/lib/types/{types.d.ts → model/types.d.ts}

@@ -123,45 +123,5 @@ export interface SuiteState {
     sources: SourceRef[];
     installed: Record<string, InstalledEntry>;
 }
-/** Card-shaped view for the market UI. */
-export interface SuiteOverviewCard {
-    sourceId: string;
-    suiteId: string;
-    name: string;
-    version?: string;
-    description?: string;
-    keywords: string[];
-    surfaces: SuiteSurfaceCounts;
-    enabled: boolean;
-    installed: boolean;
-    dimension: SuiteDimension;
-    layout: SuiteLayoutKind;
-    errors: string[];
-    /** Live MCP mount failures for this suite (reason per failed server). */
-    mcpErrors: string[];
-}
-export interface SourceOverview {
-    id: string;
-    url: string;
-    branch?: string;
-    /** Local-directory source (read directly, never cloned or deleted). */
-    local?: boolean;
-    /** Whether the checkout (or local directory) is present. */
-    cloned: boolean;
-    lockCommit?: string;
-    error?: string;
-    suiteIds: string[];
-}
-export interface OverviewPayload {
-    sources: SourceOverview[];
-    suites: SuiteOverviewCard[];
-    totals: {
-        all: number;
-        installed: number;
-        enabled: number;
-    };
-    roots: {
-        user: string;
-        data: string;
-    };
-}
+/** Browser-safe market records are shared from the transport contracts. */
+export type { OverviewPayload, SourceOverview, SuiteOverviewCard } from '../contracts/market.js';

package/lib/types/routes.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
-import type { SuiteManager } from './manager.js';
+import type { MarketService } from './application/queries.js';
 export interface WebServerService {
     register(route: {
         kind: 'exact' | 'prefix';
@@ -8,4 +8,4 @@ export interface WebServerService {
     }): () => void;
 }
 /** Mount every route; returns the disposer releasing them all. */
-export declare function mountSuiteRoutes(hostCtx: unknown, manager: SuiteManager): () => void;
+export declare function mountSuiteRoutes(hostCtx: unknown, manager: MarketService): () => void;

package/lib/types/{commands-mounts.d.ts → runtime/commands-mounts.d.ts}

@@ -1,5 +1,5 @@
 import type { Context } from '@deepseek-ai/cordis';
-import type { Suite } from './types.js';
+import type { Suite } from '../model/types.js';
 export interface CommandMountDiagnostic {
     suiteId: string;
     command: string;

package/lib/types/{hooks-mounts.d.ts → runtime/hooks-mounts.d.ts}

@@ -1,5 +1,5 @@
 import type { Context } from '@deepseek-ai/cordis';
-import type { Suite } from './types.js';
+import type { Suite } from '../model/types.js';
 export interface HooksMountDiagnostic {
     suiteId: string;
     reason: string;

package/lib/types/{mcp-config.d.ts → runtime/mcp-config.d.ts}

@@ -1,5 +1,5 @@
 import type { StdioConfig, StreamableHttpConfig } from '@deepseek-ai/dsh-mcp-client';
-import type { Suite } from './types.js';
+import type { Suite } from '../model/types.js';
 export interface McpMountRequest {
     suiteId: string;
     serverKey: string;

package/lib/types/{mcp-mounts.d.ts → runtime/mcp-mounts.d.ts}

@@ -10,7 +10,7 @@
  * diagnostic list.
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Suite } from './types.js';
+import type { Suite } from '../model/types.js';
 export interface McpMountDiagnostic {
     suiteId: string;
     serverKey: string;

package/lib/types/runtime/mcp-status.d.ts

@@ -0,0 +1,13 @@
+import type { McpStatusPayload } from '../contracts/mcp-status.js';
+import { inspectToolRegistry, type McpToolSnapshot } from './tool-registry-observer.js';
+import type { Suite } from '../model/types.js';
+export type { McpStatusEntry, McpStatusPayload, McpStatusKind, McpStatusState } from '../contracts/mcp-status.js';
+export { inspectToolRegistry };
+export type { McpToolSnapshot } from './tool-registry-observer.js';
+interface McpDiagnostic {
+    suiteId: string;
+    serverKey: string;
+    reason: string;
+}
+/** Build status rows from discovered plugin MCP definitions and observed tool names. */
+export declare function buildMcpStatus(suites: Suite[], diagnostics: McpDiagnostic[], observed: readonly McpToolSnapshot[]): McpStatusPayload;

package/lib/types/runtime/reconciler.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Runtime reconciliation for enabled suites.
+ *
+ * One catalog snapshot is fanned out to the existing MCP, command, and hook
+ * mount adapters. The adapters remain separate because their host surfaces and
+ * failure semantics differ; this module owns ordering, containment, and
+ * disposal only.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { type CommandMountDiagnostic } from './commands-mounts.js';
+import { type HooksMountDiagnostic } from './hooks-mounts.js';
+import { type McpMountDiagnostic } from './mcp-mounts.js';
+import type { Suite } from '../model/types.js';
+/** Diagnostics returned by one runtime reconciliation pass. */
+export interface RuntimeDiagnostics {
+    mcp: McpMountDiagnostic[];
+    commands: CommandMountDiagnostic[];
+    hooks: HooksMountDiagnostic[];
+    errors: Array<{
+        surface: 'mcp' | 'commands' | 'hooks';
+        reason: string;
+    }>;
+}
+export declare class RuntimeReconciler {
+    private readonly mcp;
+    private readonly commands;
+    private readonly hooks;
+    constructor(ctx: Context, dataRoot: string);
+    /** Reconcile all runtime surfaces against one enabled-suite snapshot. */
+    reconcile(enabledSuites: readonly Suite[]): Promise<RuntimeDiagnostics>;
+    /** Dispose all live mounts and registrations. */
+    dispose(): Promise<void>;
+}

package/lib/types/{skills-provider.d.ts → runtime/skills-provider.d.ts}

@@ -1,15 +1,15 @@
 import type { SkillCandidate, SkillDefinition, SkillLookupOptions, SkillProvider } from '@deepseek-ai/dsh-skill';
-import type { SuiteManager } from './manager.js';
+import type { Catalog } from '../application/catalog.js';
 export declare const SUITE_PROJECT_SOURCE = "agent-plugin-project";
 export declare const SUITE_USER_SOURCE = "agent-plugin-user";
 export declare class SuiteSkillProvider implements SkillProvider {
     private readonly manager;
     readonly name = "agent-plugin";
-    constructor(manager: SuiteManager);
+    constructor(manager: Catalog);
     list(options: SkillLookupOptions): Promise<SkillCandidate[]>;
     /** Parse `agents/*.md` of one suite into agent-definition candidates. */
     private agentsOf;
-    get(candidate: SkillCandidate, options: SkillLookupOptions): Promise<SkillDefinition | undefined>;
+    get(candidate: SkillCandidate, _options: SkillLookupOptions): Promise<SkillDefinition | undefined>;
     private candidateFor;
     private locate;
     private locateProject;

package/lib/types/runtime/tool-registry-observer.d.ts

@@ -0,0 +1,14 @@
+/** Host-private adapter for observing model-facing MCP tools. */
+/** One MCP tool observed from the DSH tool registry. */
+export interface McpToolSnapshot {
+    name: string;
+    description?: string;
+}
+/**
+ * Read MCP tool names from the dsh-tools runtime when available.
+ *
+ * The registry has no public listing API in the current host release. This
+ * adapter uses the observed `layers.merge(...).tools.entries()` data shape and
+ * returns an empty observation when a host changes it.
+ */
+export declare function inspectToolRegistry(runtime: unknown): McpToolSnapshot[];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-agent-plugins-market",
   "description": "The standard way to install Claude Code / Codex / Cursor / Kimi plugin marketplace suites in DeepSeek Harness (DSH) — zero conversion, zero file copying. Skills, MCP servers, hooks and slash commands are injected into your dsh sessions at runtime.",
-  "version": "0.4.6",
+  "version": "0.5.0",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -23,13 +23,6 @@
     "README.md",
     "README.zh.md"
   ],
-  "scripts": {
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
-    "build": "tsc -p tsconfig.json && pnpm run build:client",
-    "build:client": "tsdown && node scripts/normalize-client-banner.mjs",
-    "test": "vitest run",
-    "prepack": "pnpm run build"
-  },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -45,6 +38,9 @@
       "platform": "web"
     }
   },
+  "engines": {
+    "node": ">=22"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -80,9 +76,9 @@
   ],
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.6"
+    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-mcp-client": {
@@ -98,24 +94,43 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-hooks-claude-code": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-hooks-claude-code": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
+    "@eslint/js": "^9.39.5",
     "@tsdown/css": "^0.22.14",
     "@types/node": "^22.15.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^19.2.4",
+    "@vitest/coverage-v8": "^4.1.11",
+    "dependency-cruiser": "^18.2.0",
+    "eslint": "^9.39.5",
     "jsdom": "^30.0.1",
+    "prettier": "^3.9.6",
     "react": "^18.3.1",
     "react-dom": "~18.3.1",
     "tsdown": "^0.22.14",
     "typescript": "^5.8.3",
-    "vitest": "^3.2.4"
+    "typescript-eslint": "^8.67.0",
+    "vitest": "^4.1.10"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
   },
-  "homepage": "https://www.npmjs.com/package/dsh-agent-plugins-market"
-}
+  "homepage": "https://www.npmjs.com/package/dsh-agent-plugins-market",
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
+    "build": "tsc -p tsconfig.json && pnpm run build:client",
+    "build:client": "tsdown && node scripts/normalize-client-banner.mjs",
+    "test": "vitest run",
+    "test:contract": "vitest run tests/market-contracts.test.ts tests/routes.test.ts",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src tests",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "check:architecture": "depcruise --validate .dependency-cruiser.cjs src",
+    "check:refactor": "pnpm run typecheck && pnpm run lint && pnpm run format:check && pnpm run test:contract && pnpm run check:architecture"
+  }
+}

package/schemas/README.md

@@ -6,9 +6,6 @@ These files are pinned copies of the official Agent Plugins 1.0.0 schemas:
 - spec status: version 1.0.0, working draft
 - license: the Agent Plugins specification repository's license
 
-They are bundled into the published package because the specification requires
-clients to validate plugin packages without retrieving schemas at load time
-(§7.2.1: "Clients MUST NOT retrieve a schema while loading a plugin").
+They are bundled into the published package because the specification requires clients to validate plugin packages without retrieving schemas at load time (§7.2.1: "Clients MUST NOT retrieve a schema while loading a plugin").
 
-Update procedure: replace both files from the upstream repository at the pinned
-spec version and bump the spec-version references in `src/validate.ts`.
+Update procedure: replace both files from the upstream repository at the pinned spec version and bump the spec-version references in `src/validate.ts`.