dsh-agent-plugins-market 0.7.2 → 0.8.0

package/lib/types/runtime/user-store.d.ts

@@ -5,15 +5,25 @@
  * frontmatter rules the catalog uses, so user entries look exactly like suite
  * entries to the runtime mounts.
  *
- * An entry is one document. Skills also accept the cross-tool directory
- * spelling (`<name>/SKILL.md`) that other Agent tools and the harness's own
- * reader of `~/.agents/skills` author; commands and personas are flat only.
+ * An entry is one document. A flat panel reads the immediate `<name>.md`
+ * children of its directory; a nested panel (commands and agent personas)
+ * reads every `.md` document at any depth and names each by its path relative
+ * to that directory. Skills also accept the cross-tool directory spelling
+ * (`<name>/SKILL.md`) that other Agent tools and the harness's own reader of
+ * `~/.agents/skills` author, and read it from the top level only.
  * @module runtime/user-store
  */
 /** Where user panel entries persist: `<agentsRoot>/<kind>/`. */
 export declare function userEntryDir(agentsRoot: string, kind: 'skills' | 'commands' | 'agents'): string;
-/** `[a-z][a-z0-9_-]*` — the grammar every panel entry name must satisfy. */
+/** `[a-z][a-z0-9_-]*` — one segment of a panel entry name. */
 export declare const USER_ENTRY_NAME: RegExp;
+/**
+ * The path grammar a nested panel entry name satisfies: one or more
+ * {@link USER_ENTRY_NAME} segments joined by `/`. It rejects `..`, leading or
+ * trailing separators, empty segments, backslashes, and uppercase, so the name
+ * stays a path relative to the panel directory.
+ */
+export declare const USER_ENTRY_PATH: RegExp;
 /** The file name of a directory-shaped skill's document. */
 export declare const SKILL_ENTRY_FILE = "SKILL.md";
 /**
@@ -42,11 +52,18 @@ export interface EntryDocument {
 }
 /**
  * Resolve one entry name to its document, taking the first shape the path
- * exists in. Names outside the entry grammar never touch the filesystem.
+ * exists in. A nested panel accepts a path name (`git/commit`); a flat panel
+ * accepts a single segment. Names outside the panel's grammar never touch the
+ * filesystem.
+ */
+export declare function resolveEntryDocument(dir: string, name: string, shapes: readonly EntryShape[], strict?: boolean, nested?: boolean): Promise<EntryDocument | undefined>;
+/**
+ * Every entry document the served shapes expose. A flat panel reads immediate
+ * children only; a nested panel walks every subdirectory to any depth and
+ * names each entry by its path relative to `dir`. Entries are deduplicated by
+ * name at the first shape that has it.
  */
-export declare function resolveEntryDocument(dir: string, name: string, shapes: readonly EntryShape[], strict?: boolean): Promise<EntryDocument | undefined>;
-/** Every entry document the served shapes expose, deduplicated by name at the first shape that has it. */
-export declare function listEntryDocuments(dir: string, strict?: boolean, shapes?: readonly EntryShape[]): Promise<EntryDocument[]>;
+export declare function listEntryDocuments(dir: string, strict?: boolean, shapes?: readonly EntryShape[], nested?: boolean): Promise<EntryDocument[]>;
 /** Parse full YAML metadata without flattening arrays, mappings, or multiline strings. */
 export declare function parseFrontmatterRecord(text: string): Record<string, unknown>;
 /** Read one resolved entry; strict runtime snapshots throw on I/O errors other than a vanished file. */
@@ -79,7 +96,7 @@ export interface UserEntryFile {
     };
 }
 /** List entries across the served shapes; strict runtime snapshots propagate I/O errors instead of publishing partial inventories. */
-export declare function listEntryFiles(dir: string, strict?: boolean, shapes?: readonly EntryShape[]): Promise<UserEntryFile[]>;
+export declare function listEntryFiles(dir: string, strict?: boolean, shapes?: readonly EntryShape[], nested?: boolean): Promise<UserEntryFile[]>;
 /** Create one panel entry's document from its name: `<name>.md`, or `<name>/SKILL.md` in the directory shape. */
 export declare function writeEntryFile(dir: string, name: string, text: string, shape?: EntryShape): Promise<void>;
 /** Replace one resolved entry's document in place, wherever it lives. */
@@ -93,6 +110,6 @@ export declare function writeEntryDocument(document: EntryDocument, text: string
  */
 export declare function deleteEntryDocument(document: EntryDocument): Promise<void>;
 /** Whether an entry document with that name exists in any served shape. */
-export declare function entryExists(dir: string, name: string, shapes?: readonly EntryShape[]): Promise<boolean>;
+export declare function entryExists(dir: string, name: string, shapes?: readonly EntryShape[], nested?: boolean): Promise<boolean>;
 /** Serialize a frontmatter block from a shallow record (deterministic key order). */
 export declare function serializeFrontmatter(meta: Record<string, unknown>): string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-agent-plugins-market",
-  "description": "The standard way to install Claude Code / Codex / Cursor / Kimi plugin marketplace suites in DeepSeek Harness (DSH) — zero conversion, zero file copying. Skills, MCP servers, hooks and slash commands are injected into your dsh sessions at runtime.",
-  "version": "0.7.2",
+  "description": "One-stop skills, subagent, MCP and LSP manager inside DeepSeek Harness (DSH), compatible with Claude Code, Codex, Cursor, Kimi and other agent plugin layouts.",
+  "version": "0.8.0",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -75,15 +75,16 @@
   ],
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-credentials": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-mcp-client": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-skill": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-subprocess": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-timeout": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.5-rc.2"
+    "@deepseek-ai/dsh-attachment": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-hooks-claude-code": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-skill": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-subprocess": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-timeout": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-util-workspace-path": "^0.1.7-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-hooks-claude-code": {
@@ -97,11 +98,11 @@
     }
   },
   "dependencies": {
-    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-lsp": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-lsp-stdio": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-tool-lsp": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-lsp": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-lsp-stdio": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-tool-lsp": "^0.1.7-rc.1",
     "@deepseek-ai/schemastery": "^3.18.2",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "ajv": "^8.17.1",
@@ -118,18 +119,19 @@
     "@codemirror/state": "^6.7.5",
     "@codemirror/view": "^6.43.12",
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-store": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-credentials": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-hooks-claude-code": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-mcp-client": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-skill": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-timeout": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-hooks-claude-code": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-mcp-client": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-skill": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-subprocess": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-timeout": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-util-workspace-path": "0.1.7-rc.1",
     "@eslint/js": "^10.0.1",
     "@shikijs/langs": "^4.4.3",
     "@tsdown/css": "^0.22.14",
@@ -140,6 +142,7 @@
     "anser": "^2.3.5",
     "clsx": "^2.1.1",
     "dependency-cruiser": "^18.4.0",
+    "diff": "^9.0.0",
     "eslint": "^10.9.1",
     "immer": "^11.1.18",
     "jsdom": "^30.0.1",
@@ -159,6 +162,7 @@
     "react": "^18.3.1",
     "react-dom": "~18.3.1",
     "shiki": "^4.4.3",
+    "simple-icons": "^16.31.0",
     "tsdown": "^0.22.14",
     "typescript": "^5.8.3",
     "typescript-eslint": "^8.67.0",

package/schemas/com.deepseek.harness/spec.md

@@ -27,7 +27,7 @@ Namespace values are the suite's defaults rather than a ceiling the user cannot
 
 ## User-owned declarations
 
-`~/.agents/mcp.json` is local data rather than a distributable package. Keys this client does not know are stored back exactly as written, and the package-only rules — a closed server shape, bare command names, plugin-relative paths — do not apply to it. A suite's packaged `mcp.json` keeps every one of them, because a package carrying fields this client cannot honour is one it cannot promise to mount.
+`~/.agents/mcp.json` is local data rather than a distributable package. Keys this client does not know are stored back exactly as written, and the package-only rules — a closed server shape, bare command names, plugin-relative paths — do not apply to it. A suite's packaged `mcp.json` keeps every one of them, because a package carrying fields this client cannot honour is one it cannot promise to mount. `$schema` is optional here: a file another Agent tool wrote is read as this release's dialect when the key is absent, and a declared version this client does not recognize is rejected.
 
 The editor reads the same two seats a suite declares, for one server at a time: the portable definition under `mcpServers` and this client's policy under `com.deepseek.harness`. The form writes only the half it owns, so a field it has no control for — a key another client introduced, a policy entry the form does not show — survives both a form edit and a JSON edit. Only the policy entries the user changed are sent on save; an entry the document drops asks for inheritance.