dsh-agent-plugins-market 0.6.2 → 0.7.0

package/lib/types/runtime/settings-namespace.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The host settings namespace this plugin registers.
+ *
+ * The registration is also what makes the host's plugin-config tab serve this
+ * plugin's card, and it carries the MCP mount backend, the download region,
+ * the project-layout switch, the experience-feedback tool switch, and the
+ * background source-update switch. `settings.register`
+ * throws on a duplicate namespace, so there is exactly one inject block and one
+ * registration.
+ *
+ * The whole callback is failure-contained on purpose: a throw inside it is
+ * INVISIBLE in the UI (the inject resolves asynchronously and cordis only logs
+ * it) and silently removes the namespace from `settings.describe`, which is
+ * what hides the plugin-config card. Every failure mode lands in the logger
+ * with a loud prefix instead.
+ *
+ * @module runtime/settings-namespace
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { HostTranslate } from './host-locale.js';
+import { type McpBackend } from './mcp-backend.js';
+import { type DownloadRegionSetting } from './regions.js';
+/** Settings values this plugin reads; anything else reads as its default. */
+export interface MarketSettings {
+    mcpEnhanced?: boolean;
+    scanProjectLayouts?: boolean;
+    downloadRegion?: unknown;
+    feedbackEnabled?: boolean;
+    autoUpdateSources?: boolean;
+}
+/** Runtime reactions the namespace drives. */
+export interface SettingsNamespaceHost {
+    /** Apply the project-layout discovery switch; rejection is logged and contained. */
+    setScanProjectLayouts(enabled: boolean): Promise<void>;
+    /** Remount every MCP server after the backend switch flips. */
+    refreshMcpMounts(): void;
+    /** Arm or disarm the background source updater. */
+    setAutoUpdateSources(enabled: boolean): void;
+}
+export declare class MarketSettingsNamespace {
+    private readonly ctx;
+    private readonly dataRoot;
+    private readonly locale;
+    private readonly host;
+    private scope;
+    private readonly watchers;
+    private feedbackDisposer;
+    /**
+     * The feedback tool's last reported mount state. A settings change that does
+     * not move it (region, backend, project layouts) must not re-log the same
+     * line, and every other state is exactly one line: mounted, skipped by the
+     * switch, or skipped because the host has no tools registry to register on.
+     */
+    private feedbackMountState;
+    constructor(ctx: Context, dataRoot: string, locale: {
+        t: HostTranslate;
+    }, host: SettingsNamespaceHost);
+    /** Register the namespace; the host resolves it whenever the settings service mounts. */
+    mount(): void;
+    /** The persisted MCP backend choice; the built-in client until registration lands. */
+    backend(): Promise<McpBackend>;
+    /**
+     * Persist a backend choice.
+     * @throws when the settings service is not mounted.
+     */
+    setBackend(backend: McpBackend): Promise<void>;
+    /** The persisted download-region setting. */
+    downloadRegion(): Promise<DownloadRegionSetting>;
+    /** Release every watcher and unmount the feedback tool. */
+    dispose(): void;
+    private register;
+    /** Apply the background source-update switch; OFF is the default. */
+    private syncAutoUpdateSources;
+    private syncProjectLayouts;
+    private syncFeedbackTool;
+}

package/lib/types/runtime/source-auto-update.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Optional background refresh of every configured market source.
+ *
+ * The `autoUpdateSources` setting (default off) turns this on from the
+ * plugin-config card. While enabled the updater runs one refresh pass every
+ * {@link AUTO_UPDATE_INTERVAL_MS} and then waits again; the first pass runs a
+ * full interval after the switch flips, so enabling the feature never starts
+ * network traffic as a surprise. A pass that is still running when the next
+ * tick arrives is skipped rather than queued, and the timer is unref'd so it
+ * never keeps the DSH process alive on its own.
+ * @module runtime/source-auto-update
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** How often the background updater refreshes every source. */
+export declare const AUTO_UPDATE_INTERVAL_MS: number;
+/** Refresh callback shape: one pass over every configured source. */
+export type SourceRefresh = () => Promise<void>;
+export declare class SourceAutoUpdater {
+    private readonly ctx;
+    private readonly refresh;
+    private readonly intervalMs;
+    private timer;
+    private inFlight;
+    constructor(ctx: Context, refresh: SourceRefresh, intervalMs?: number);
+    /** Whether a refresh timer is currently armed. */
+    get enabled(): boolean;
+    /** Arm or disarm the interval; repeated calls with the same state do nothing. */
+    setEnabled(enabled: boolean): void;
+    /** Disarm the interval; an in-flight pass finishes on its own. */
+    dispose(): void;
+    private clearTimer;
+    private run;
+}

package/lib/types/{model/state.d.ts → runtime/state-store.d.ts}

@@ -1,6 +1,6 @@
-import { type SuiteState } from './types.js';
+import { type SuiteState } from '../model/types.js';
 export declare const EMPTY_STATE: SuiteState;
 /** Parse persisted state; unreadable or wrong-version files yield a contained empty state. */
 export declare function loadState(statePath: string): Promise<SuiteState>;
-/** Persist state atomically through a sibling-temp rename. */
+/** Persist state atomically through the harness's atomic-write helper. */
 export declare function saveState(statePath: string, state: SuiteState): Promise<void>;

package/lib/types/runtime/storage-migration.d.ts

@@ -5,9 +5,11 @@ export interface StorageMigrationResult {
 /** Move only successfully copied entries; never traverse links or overwrite a destination. */
 export declare function mergeStorageTree(from: string, to: string, result: StorageMigrationResult): Promise<void>;
 /**
- * Migrate former root overrides and data/user panels into the canonical root.
- * Unknown files in override directories remain untouched. Conflicts remain at
- * the old path and are returned to block activation; reruns are safe.
+ * Migrate former root overrides, data-root panels, and hand-authored
+ * resources into their canonical homes: plugin state under the user/data
+ * roots, and user content under the shared Agent layout root. Unknown files in
+ * override directories remain untouched. Conflicts remain at the old path and
+ * are returned to block activation; reruns are safe.
  */
 export declare function migratePluginStorage(config?: {
     userRoot?: string;

package/lib/types/runtime/subagent-catalog.d.ts

@@ -4,6 +4,8 @@ import type { HostTranslate } from './host-locale.js';
 export interface SubagentCatalogEntry {
     /** Exact execution identity, independent of the human-readable title. */
     name: string;
+    /** Durable identity for change detection; never rendered in the model-facing catalog. */
+    roleId?: string;
     title: string;
     description: string;
     provider?: string;

package/lib/types/runtime/user-panels.d.ts

@@ -1,8 +1,9 @@
 /**
  * User panel storage: the persistence layer behind the skills / commands /
  * agent-personas panels. Each surface owns one directory of Markdown files
- * under `<userRoot>/user/<kind>/`, so user-authored entries survive restarts,
- * are trivially hand-editable, and stay outside suite checkouts.
+ * under the shared Agent layout root (`~/.agents/<kind>/`), so user-authored
+ * entries survive restarts, are trivially hand-editable, and stay outside
+ * suite checkouts.
  *
  * Skills entries follow the SKILL.md frontmatter grammar (`name`,
  * `description`, optional `whenToUse`, invocation controls) plus a
@@ -13,7 +14,6 @@
  * @module runtime/user-panels
  */
 import type { SkillCandidate, SkillDefinition, SkillLookupOptions, SkillProvider } from '@deepseek-ai/dsh-skill';
-import type { HostTranslate } from './host-locale.js';
 /** The skill-source label user-panel entries carry into the skill registry. */
 export declare const USER_PANEL_SKILL_SOURCE = "user-panel";
 /** A user panel entry as the HTTP layer serializes it. */
@@ -34,17 +34,15 @@ export interface UserPanelEntry {
 }
 /** Throwing CRUD over one panel directory, shared by the three panels. */
 export declare class UserPanelStore {
-    private readonly dataRoot;
+    private readonly agentsRoot;
     private readonly kind;
     /** Extra name grammar for this panel (runs after USER_ENTRY_NAME). */
     private readonly extraNameCheck;
-    constructor(dataRoot: string, kind: 'skills' | 'commands' | 'agents', 
+    constructor(agentsRoot: string, kind: 'skills' | 'commands' | 'agents', 
     /** Extra name grammar for this panel (runs after USER_ENTRY_NAME). */
     extraNameCheck?: (name: string) => boolean);
-    /** The panel's directory under the data root. */
+    /** The panel's directory under the Agent layout root. */
     dirPath(): string;
-    /** The plugin data root the panel lives under. */
-    root(): string;
     private get dir();
     /** Every entry, sorted by name; strict snapshots propagate temporary I/O failures. */
     list(strict?: boolean): Promise<UserPanelEntry[]>;
@@ -64,7 +62,7 @@ export declare class UserPanelStore {
     remove(name: string): Promise<void>;
 }
 /** Locate the three stores; constructed once per plugin activation. */
-export declare function createUserPanelStores(dataRoot: string): {
+export declare function createUserPanelStores(agentsRoot: string): {
     skills: UserPanelStore;
     commands: UserPanelStore;
     agents: UserPanelStore;
@@ -83,9 +81,8 @@ export declare function isUserSkillEntryName(name: string): boolean;
  */
 export declare class UserPanelSkillProvider implements SkillProvider {
     private readonly skills;
-    private readonly t;
     readonly name = "user-panel";
-    constructor(skills: UserPanelStore, t: HostTranslate);
+    constructor(skills: UserPanelStore);
     list(_options: SkillLookupOptions): Promise<SkillCandidate[]>;
     get(candidate: SkillCandidate, _options: SkillLookupOptions): Promise<SkillDefinition | undefined>;
 }

package/lib/types/runtime/user-store.d.ts

@@ -6,12 +6,10 @@
  * the runtime mounts.
  * @module runtime/user-store
  */
-/** Where user panel entries persist: `<userRoot>/user/<kind>/`. */
-export declare function userEntryDir(dataRoot: string, kind: 'skills' | 'commands' | 'agents'): string;
+/** Where user panel entries persist: `<agentsRoot>/<kind>/`. */
+export declare function userEntryDir(agentsRoot: string, kind: 'skills' | 'commands' | 'agents'): string;
 /** `[a-z][a-z0-9_-]*` — the grammar every panel entry name must satisfy. */
 export declare const USER_ENTRY_NAME: RegExp;
-/** The enablement frontmatter key shared by skills and commands. */
-export declare const DISABLED_KEY = "disabled";
 /** Parse full YAML metadata without flattening arrays, mappings, or multiline strings. */
 export declare function parseFrontmatterRecord(text: string): Record<string, unknown>;
 /** Read one entry; strict runtime snapshots throw on I/O errors other than a vanished file. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-agent-plugins-market",
   "description": "The standard way to install Claude Code / Codex / Cursor / Kimi plugin marketplace suites in DeepSeek Harness (DSH) — zero conversion, zero file copying. Skills, MCP servers, hooks and slash commands are injected into your dsh sessions at runtime.",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -75,18 +75,18 @@
     "ai-agents"
   ],
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-skill": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.1.2-rc.1"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-skill": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.1.5-rc.2"
   },
   "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-mcp-client": {
+    "@deepseek-ai/dsh-hooks-claude-code": {
       "optional": true
     },
-    "@deepseek-ai/dsh-hooks-claude-code": {
+    "@deepseek-ai/dsh-mcp-client": {
       "optional": true
     },
     "@deepseek-ai/dsh-tools": {
@@ -94,7 +94,12 @@
     }
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-lsp": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-lsp-stdio": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-tool-lsp": "^0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.2",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "ajv": "^8.17.1",
     "fflate": "^0.8.3",
@@ -103,25 +108,41 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-hooks-claude-code": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-mcp-client": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-skill": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-hooks-claude-code": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-mcp-client": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-skill": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
     "@eslint/js": "^9.39.5",
+    "@shikijs/langs": "^4.4.3",
     "@tsdown/css": "^0.22.14",
     "@types/node": "^22.15.0",
     "@types/react": "~18.3.1",
-    "@types/react-dom": "^19.2.4",
+    "@types/react-dom": "~18.3.0",
     "@vitest/coverage-v8": "^4.1.11",
+    "anser": "^2.3.5",
+    "clsx": "^2.1.1",
     "dependency-cruiser": "^18.2.0",
     "eslint": "^10.9.1",
     "jsdom": "^30.0.1",
+    "katex": "^0.16.47",
+    "mdast-util-from-markdown": "^2.0.3",
+    "mdast-util-gfm": "^3.1.0",
+    "mdast-util-math": "^3.0.0",
+    "micromark-core-commonmark": "^2.0.3",
+    "micromark-extension-gfm": "^3.0.0",
+    "micromark-extension-math": "^3.1.0",
+    "micromark-factory-space": "^2.0.1",
+    "micromark-util-character": "^2.1.1",
+    "micromark-util-classify-character": "^2.0.1",
+    "micromark-util-sanitize-uri": "^2.0.1",
+    "micromark-util-symbol": "^2.0.1",
     "prettier": "^3.9.6",
     "react": "^18.3.1",
     "react-dom": "~18.3.1",
+    "shiki": "^4.4.3",
     "tsdown": "^0.22.14",
     "typescript": "^5.8.3",
     "typescript-eslint": "^8.67.0",
@@ -132,9 +153,12 @@
   },
   "homepage": "https://www.npmjs.com/package/dsh-agent-plugins-market",
   "scripts": {
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
-    "build": "tsc -p tsconfig.json && pnpm run build:client",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit && tsc -p tsconfig.test.json --noEmit && tsc -p tsconfig.test.client.json --noEmit",
+    "clean": "node -e \"require('node:fs').rmSync('lib',{recursive:true,force:true})\"",
+    "prebuild": "pnpm run typecheck",
+    "build": "pnpm run clean && tsc -p tsconfig.json && pnpm run build:client",
     "build:client": "tsdown && node scripts/normalize-client-banner.mjs",
+    "pretest": "pnpm run check:quick",
     "test": "vitest run",
     "test:contract": "vitest run tests/market-contracts.test.ts tests/routes.test.ts",
     "test:coverage": "vitest run --coverage",
@@ -142,6 +166,9 @@
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "check:architecture": "depcruise --validate .dependency-cruiser.cjs src",
-    "check:refactor": "pnpm run typecheck && pnpm run lint && pnpm run format:check && pnpm run test:contract && pnpm run check:architecture"
+    "check:host-alignment": "node scripts/check-host-alignment.mjs",
+    "fix:host-alignment": "node scripts/check-host-alignment.mjs --fix",
+    "check:quick": "pnpm run typecheck && pnpm run lint",
+    "check:refactor": "pnpm run check:quick && pnpm run format:check && pnpm run test:contract && pnpm run check:architecture"
   }
 }

package/schemas/README.md

@@ -60,7 +60,7 @@ Claude Code and Copilot (including the Universal convention) define usable LSP d
 
 ## Executable coverage
 
-All ten active layouts are covered by [offline README repository tests](../tests/real-layouts.test.ts). Fixtures retain original Git blobs, commit IDs, hashes and licenses. Competing manifests are removed at every suite root in isolated cases, and the scanner reports the productive marketplace rather than inferring it from file presence. [Component contract tests](../tests/component-declarations.test.ts) cover path/array/inline forms and validation failures. See the [coverage audit](../docs/layout-coverage.md) for the exact boundary between layout compatibility and vendor-native runtime behavior.
+All ten active layouts are covered by [offline README repository tests](../tests/real-layouts.test.ts). Fixtures retain original Git blobs, commit IDs, hashes and licenses. Competing manifests are removed at every suite root in isolated cases, and the scanner reports the productive marketplace rather than inferring it from file presence. [Component contract tests](../tests/component-declarations.test.ts) cover path/array/inline forms and validation failures. See the [coverage audit](../docs/user/layout-coverage.md) for the exact boundary between layout compatibility and vendor-native runtime behavior.
 
 ## Provenance and update policy