dsh-agent-plugins-market 0.8.1 → 0.8.2

package/lib/types/application/ports.d.ts

@@ -12,9 +12,21 @@
 import type { LspServerSpec, SourceKind } from '../model/types.js';
 export type { McpBackendInfo } from '../contracts/market.js';
 import type { DownloadRegionSetting } from '../contracts/settings.js';
-import type { McpBackend } from '../runtime/mcp-backend.js';
-import type { LspMountStatusSource } from '../runtime/lsp-status.js';
-import type { McpToolSnapshot } from '../runtime/mcp-status.js';
+import type { McpBackend } from '../contracts/mcp.js';
+import type { LspMountDiagnostic } from '../contracts/lsp.js';
+/** One MCP tool observed from the host tool registry (structural). */
+export interface McpToolSnapshot {
+    name: string;
+    description?: string;
+    /** The input schema the server advertised, when the host exposes it. */
+    parameters?: unknown;
+}
+/** The LSP mount-registry surface the aggregator consumes (structural, for tests). */
+export interface LspMountStatusSource {
+    diagnosticsSnapshot(): Map<string, LspMountDiagnostic>;
+    hasLiveMounts(): boolean;
+    disabledServers?(): Set<string>;
+}
 /** A new source: its location, optional branch, and acquisition kind. */
 export interface SourceInput {
     url: string;
@@ -60,6 +72,8 @@ export interface CatalogPorts {
     setMcpBackend(backend: McpBackend): Promise<void>;
     /** The persisted download-region setting. */
     downloadRegion(): Promise<DownloadRegionSetting>;
+    /** The host locale preference ('zh' default when unset). */
+    localePreference(): string;
 }
 /** The seams a composition root may wire; the rest fall back to the defaults. */
 export type CatalogPortsOverride = Partial<CatalogPorts>;

package/lib/types/application/project-agent-roles.d.ts

@@ -1,3 +1,3 @@
-import { type AgentRoleEntry } from '../runtime/agent-role-router.js';
+import { type AgentRoleEntry } from './agent-roles.js';
 import type { Catalog } from './catalog.js';
 export declare function projectAgentRoles(catalog: Catalog, parent: unknown): Promise<AgentRoleEntry[]>;

package/lib/types/application/queries.d.ts

@@ -1,11 +1,10 @@
 /** Narrow application interfaces consumed by the HTTP transport adapter. */
-import type { McpStatusPayload } from '../contracts/mcp-status.js';
+import type { McpStatusPayload } from './mcp/mcp-status.js';
 import type { LspLegacySeamMigration, LspStatusPayload } from '../contracts/lsp-status.js';
 import type { OverviewPayload, SkillContent, SourceProgress, SuiteDetail } from '../contracts/market.js';
 import type { SourceRef, SuiteSurfaceKey } from '../model/types.js';
-import type { McpServerOverride, McpSuiteOverrides } from '../runtime/mcp-overrides.js';
-import type { McpBackend } from '../runtime/mcp-backend.js';
-import type { McpImportResult } from '../runtime/mcp-direct-config.js';
+import type { McpServerOverride, McpSuiteOverrides } from './mcp/mcp-overrides.js';
+import type { McpBackend } from '../contracts/mcp.js';
 import type { ServerConfigPayload } from '../contracts/market.js';
 import type { LspServerTable, McpBackendInfo, SourceInput, SourcePatch } from './ports.js';
 /** Read-only market operations required by HTTP routes. */
@@ -25,8 +24,6 @@ export interface MarketQueries {
 export interface MarketMutations {
     saveServerConfig(kind: 'mcp' | 'lsp', id: string, config: unknown, policy?: unknown): Promise<void>;
     addMcpServer(name: string, server: unknown): Promise<void>;
-    /** Import several pasted services in one write; each entry reports its own outcome. */
-    importMcpServers(servers: unknown, overwrite: boolean): Promise<McpImportResult>;
     addLspServer(name: string, config: unknown): Promise<void>;
     addSource(input: SourceInput): Promise<SourceRef>;
     updateSource(sourceId: string, patch: SourcePatch): Promise<void>;

package/lib/types/{runtime → application}/regions.d.ts

@@ -11,7 +11,7 @@
  * can flip at any time; sources already cloned keep their proxied origin and
  * follow it on refresh.
  *
- * @module runtime/regions
+ * @module application/regions
  */
 import type { DownloadRegionSetting } from '../contracts/settings.js';
 /** The route downloads actually take. */

package/lib/types/{runtime → application/state}/state-store.d.ts

@@ -1,6 +1,6 @@
-import { type SuiteState } from '../model/types.js';
+import { type SuiteState } from '../../model/types.js';
 export declare const EMPTY_STATE: SuiteState;
 /** Parse persisted state; unreadable or wrong-version files yield a contained empty state. */
 export declare function loadState(statePath: string): Promise<SuiteState>;
-/** Persist state atomically through the harness's atomic-write helper. */
+/** Persist state atomically through the shared JSON document writer. */
 export declare function saveState(statePath: string, state: SuiteState): Promise<void>;

package/lib/types/catalog/source-catalog.d.ts

@@ -1,6 +1,4 @@
 import type { DiscoveredSuite, SourceRef, SuiteDimension } from '../model/types.js';
-/** Discover suites from the selected configured or project checkouts. */
-export declare function discoverSourceList(sources: SourceRef[], dimension: SuiteDimension, dimensionRoot: string): Promise<DiscoveredSuite[]>;
 /**
  * Discover suites plus per-source scan diagnostics for one dimension.
  * @param scanProjectLayouts - whether the project's own native Agent directories

package/lib/types/contracts/lsp-status.d.ts

@@ -3,6 +3,8 @@
 export type LspStatusKind = 'plugin' | 'direct';
 /** Operational state rendered for an LSP server row. */
 export type LspStatusState = 'mounted' | 'starting' | 'host-missing' | 'failed' | 'conflict' | 'disabled';
+/** Why a row reports a reason; also the key the panel localizes it by. */
+export type LspStatusCode = 'mount-failed' | 'unmount-failed' | 'seam-conflict' | 'host-missing';
 /**
  * One declared language-server row for the status surface.
  *
@@ -34,6 +36,10 @@ export interface LspStatusEntry {
     state: LspStatusState;
     /** Latest diagnostic reason, when the state is not `mounted`/`disabled`. */
     reason?: string;
+    /** Why this row carries a reason; also the key the panel localizes it by. */
+    code?: LspStatusCode;
+    /** The messages under the failure's `cause` chain, outermost first. */
+    causes?: string[];
     /** Whether a failed mount will be retried automatically. */
     retryable?: boolean;
 }

package/lib/types/contracts/lsp.d.ts

@@ -0,0 +1,16 @@
+/**
+ * LSP wire vocabulary shared by the application services and the runtime
+ * mounts: the mount-diagnostic shape the status payload carries. Contracts
+ * import nothing; these are data only.
+ * @module contracts/lsp
+ */
+import type { LspStatusCode } from './lsp-status.js';
+/** One LSP mount failure as the registry records it for the status surface. */
+export interface LspMountDiagnostic {
+    suiteId: string;
+    serverKey: string;
+    reason: string;
+    code?: LspStatusCode;
+    /** The messages under the failure's `cause` chain, outermost first. */
+    causes?: string[];
+}

package/lib/types/contracts/market.d.ts

@@ -6,7 +6,6 @@ export declare const MARKET_ROUTES: {
     readonly overview: "/api/agent-plugins/overview";
     readonly mcpStatus: "/api/agent-plugins/mcp-status";
     readonly addMcpServer: "/api/agent-plugins/mcp-servers/add";
-    readonly importMcpServers: "/api/agent-plugins/mcp-servers/import";
     readonly lspStatus: "/api/agent-plugins/lsp-status";
     readonly lspServers: "/api/agent-plugins/lsp-servers";
     readonly addLspServer: "/api/agent-plugins/lsp-servers/add";
@@ -259,8 +258,6 @@ export interface MarkdownPreview {
     description?: string;
     content: string;
 }
-/** Claude Code command preview alias retained for feature-specific readability. */
-export type CommandPreview = MarkdownPreview;
 /** Claude Code agent preview alias retained for feature-specific readability. */
 export type AgentPreview = MarkdownPreview;
 /** One LSP definition preview in a suite detail response. */
@@ -351,7 +348,7 @@ export interface UserPanelEntryWire {
     name: string;
     description: string;
     disabled: boolean;
-    /** User and managed plugin entries are editable; external source files remain read-only. */
+    /** User entries are editable; suite-owned plugin entries answer only to the enable switch. */
     origin: 'user' | 'plugin';
     id?: string;
     rawText: string;

package/lib/types/contracts/mcp-status.d.ts

@@ -10,6 +10,18 @@ export interface McpStatusTool {
 export type McpStatusKind = 'plugin' | 'direct';
 /** Operational state rendered for an MCP row. `foreign` = mounted by another MCP client (informational). */
 export type McpStatusState = 'connected' | 'degraded' | 'failed' | 'needs-credentials' | 'orphaned' | 'disabled' | 'foreign';
+/**
+ * Why a row carries a reason. The mount failures explain a failed connection;
+ * the remaining entries are the states that have something to say without
+ * being broken, and each one has its own wording in the panel.
+ */
+export type McpStatusCode = 'unsupported-transport' | 'missing-credential' | 'credential-error' | 'unmount-failed' | 'mount-failed' | 'foreign-mount' | 'duplicate-mount'
+/** Tools are still registered although the surface that declared them is gone. */
+ | 'orphaned-tools'
+/** Switched off through this plugin's own override record. */
+ | 'disabled-override'
+/** A stored override changed the configuration the suite declares. */
+ | 'modified-override';
 /** One MCP service row for the status surface. */
 export interface McpStatusEntry {
     id: string;
@@ -27,9 +39,16 @@ export interface McpStatusEntry {
     endpoint?: string;
     config?: Record<string, unknown>;
     tools: McpStatusTool[];
+    /** The one-line diagnostic this row reports, in the words of the layer that failed. */
     reason?: string;
-    /** Mount-path classification when a diagnostic produced this row. */
-    code?: 'unsupported-transport' | 'missing-credential' | 'credential-error' | 'unmount-failed' | 'mount-failed' | 'foreign-mount' | 'duplicate-mount';
+    /** Why this row carries a reason; also the key the panel localizes it by. */
+    code?: McpStatusCode;
+    /**
+     * The messages under the failure's `cause` chain, outermost first. A wrapper
+     * sentence such as `initial connection … failed` names no cause by itself, so
+     * the detail that points at the real problem travels beside it.
+     */
+    causes?: string[];
     /** Environment-variable credential references required by this server. */
     credentialRefs?: string[];
     /** Whether this server advertised zero tools at observation time. Zero-tool

package/lib/types/contracts/mcp.d.ts

@@ -0,0 +1,20 @@
+/**
+ * MCP wire vocabulary shared by the host surface, the application services and
+ * the runtime mounts: the backend selector and the diagnostic shape the status
+ * payload carries. Contracts import nothing; these are data only. The mount
+ * registries narrow `code` to their own failure-code unions at the source.
+ * @module contracts/mcp
+ */
+import type { McpStatusCode } from './mcp-status.js';
+/** The MCP mount backend the market uses for suite servers. */
+export type McpBackend = 'builtin' | 'host';
+/** One MCP mount failure as the registries record it for the status surface. */
+export interface McpMountDiagnostic {
+    suiteId: string;
+    serverKey: string;
+    reason: string;
+    code?: McpStatusCode;
+    /** The messages under the failure's `cause` chain, outermost first. */
+    causes?: string[];
+    credentialRefs?: string[];
+}

package/lib/types/model/types.d.ts

@@ -112,20 +112,6 @@ export interface SuiteSurfaceCounts {
     agents: number;
     lsp: number;
 }
-/**
- * Client-specific manifest data under the `com.deepseek.harness` extension
- * namespace (Agent Plugins §8.1), carried by `plugin.json` `extensions`.
- */
-export interface HarnessExtension {
-    /** Namespace contract version this suite was written against. */
-    schemaVersion: string;
-    /**
-     * Client policy for portable `mcp.json` servers, keyed by the server's own
-     * name in `mcp.json`; entries without a matching server are reported and
-     * ignored.
-     */
-    mcpServers?: Record<string, HarnessMcpPolicy>;
-}
 /**
  * dsh-owned per-server policy for a portable MCP server: OAuth 2.1
  * authorization for servers that answer `401` with a challenge, tool

package/lib/types/runtime/{agent-role-router.d.ts → agents/agent-role-router.d.ts}

@@ -1,32 +1,9 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { type SubagentCatalogEntry } from './subagent-catalog.js';
+import { parseAgentRole, type AgentRoleEntry, type AgentRolePolicy } from '../../application/agent-roles.js';
+export { parseAgentRole };
+export type { AgentRoleEntry, AgentRolePolicy };
 export declare const AGENT_ROLE_TOOL_NAME = "subagent_role";
-/** Panel identity is preserved so identically named cards from different suites remain addressable. */
-export interface AgentRoleEntry {
-    name: string;
-    path: string;
-    description: string;
-    disabled: boolean;
-    title?: string;
-    rawText?: string;
-    /** Suite checkout root the card's `${PLUGIN_ROOT}` variables resolve to; absent for project-native files. */
-    suiteRoot?: string;
-    /** The suite's `${PLUGIN_DATA}` directory; absent for project-native files. */
-    suiteData?: string;
-}
-/**
- * The executable part of one card. `tools` / `disallowedTools` stay in the file
- * and are preserved by the editors, but they are not applied.
- */
-export interface AgentRolePolicy {
-    content: string;
-    model?: string;
-    provider?: string;
-    reasoningEffort?: string;
-    title?: string;
-    description?: string;
-    disabled: boolean;
-}
 /** Child LLM options this plugin sends; never carries inherited parent values. */
 export interface AgentRoleOptions {
     provider?: string;
@@ -108,8 +85,6 @@ export interface AgentRoleJobs {
         run(): AgentRoleJob;
     }): string;
 }
-/** Strict YAML parsing prevents malformed routing metadata from silently inheriting wider privileges. */
-export declare function parseAgentRole(text: string): AgentRolePolicy;
 /**
  * Resolve the child LLM options for one role call.
  *

package/lib/types/runtime/{subagent-catalog.d.ts → agents/subagent-catalog.d.ts}

@@ -52,12 +52,12 @@ export declare function mountSubagentCatalog(ctx: Context, tool: {
     name: string;
 }, snapshot: (agent: CatalogAgent, signal: AbortSignal) => Promise<SubagentCatalogEntry[]>): () => void;
 /**
- * Model-facing catalog text: the role list followed by the same guidance on
- * first publication and on every update, so a replacement never arrives without
- * the rules that govern it. The guidance covers how to brief a child, how to
- * work with one while it runs, and when a role child is the wrong answer; the
- * per-channel arbitration between the host's delegation tools stays in the tool
- * descriptions the harness owns.
+ * Model-facing catalog text: the delegation triggers, then the role list, then
+ * the same guidance on first publication and on every update, so a replacement
+ * never arrives without the rules that govern it. The guidance covers when a
+ * role child is the default, how to brief one, and how to work with one while
+ * it runs; the per-channel arbitration between the host's delegation tools
+ * stays in the tool descriptions the harness owns.
  *
  * Role lines carry a name and a description only. The configured route stays in
  * the durable entries for execution and change detection; publishing it would

package/lib/types/runtime/core/context.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Tolerant reads of optional services off a cordis context.
+ * @module runtime/core/context
+ */
+/**
+ * Read one optional service off a cordis context, tolerating every access
+ * style the host shows.
+ *
+ * Cordis strict mode throws instead of returning `undefined` for an
+ * unregistered service, and contexts vary in which access style they expose —
+ * some the bare property, some only a `get()` accessor — so each read is
+ * guarded and absence always comes back as `undefined`, never a throw.
+ */
+export declare function optionalService(ctx: unknown, name: string): unknown;

package/lib/types/runtime/{reconcile-scheduler.d.ts → core/reconcile-scheduler.d.ts}

@@ -10,8 +10,8 @@
  * @module runtime/reconcile-scheduler
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Suite } from '../model/types.js';
-import type { McpMountDiagnostic } from './mcp-mounts.js';
+import type { Suite } from '../../model/types.js';
+import type { McpMountDiagnostic } from '../mcp/mcp-mounts.js';
 import type { RuntimeReconciler } from './reconciler.js';
 /** The catalog surface one reconcile pass reads from and publishes to. */
 export interface ReconcileHost {

package/lib/types/runtime/{reconciler.d.ts → core/reconciler.d.ts}

@@ -7,12 +7,12 @@
  * disposal only.
  */
 import type { Context } from '@deepseek-ai/cordis';
-import { type CommandMountDiagnostic } from './commands-mounts.js';
-import { type HooksMountDiagnostic } from './hooks-mounts.js';
-import { LspMountRegistry, type LspMountDiagnostic } from './lsp-mounts.js';
-import { type McpMountDiagnostic } from './mcp-mounts.js';
-import type { Suite } from '../model/types.js';
-import { type HostTranslate } from './host-locale.js';
+import { type CommandMountDiagnostic } from '../surfaces/commands-mounts.js';
+import { type HooksMountDiagnostic } from '../surfaces/hooks-mounts.js';
+import { LspMountRegistry, type LspMountDiagnostic } from '../lsp/lsp-mounts.js';
+import { type McpMountDiagnostic } from '../mcp/mcp-mounts.js';
+import type { Suite } from '../../model/types.js';
+import { type HostTranslate } from '../host/host-locale.js';
 /** Diagnostics returned by one runtime reconciliation pass. */
 export interface RuntimeDiagnostics {
     mcp: McpMountDiagnostic[];
@@ -35,11 +35,11 @@ export declare class RuntimeReconciler {
     /** The LSP mount registry, consumed by the LSP status surface. */
     get lsp(): LspMountRegistry;
     /** Install the per-suite MCP overrides provider used at mount time. */
-    setMcpOverridesProvider(provider: () => Promise<Map<string, import('./mcp-overrides.js').McpSuiteOverrides>>): void;
+    setMcpOverridesProvider(provider: () => Promise<Map<string, import('../../application/mcp/mcp-overrides.js').McpSuiteOverrides>>): void;
     /** Install the live tool-name provider used for foreign-namespace mount guards. */
     setMcpToolNamesProvider(provider: () => string[]): void;
     /** Install the backend provider deciding which MCP client mounts each server. */
-    setMcpBackendProvider(provider: () => Promise<import('./mcp-backend.js').McpBackend>): void;
+    setMcpBackendProvider(provider: () => Promise<import('../../application/mcp/mcp-backend.js').McpBackend>): void;
     /** Whether the current MCP snapshot uses one credential reference. */
     usesCredential(ref: string): boolean;
     /** Flag one MCP mount for an explicit rebuild on the next reconcile. */

package/lib/types/runtime/host/failure-detail.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The chain of messages below one error, outermost first, redacted and
+ * de-duplicated. A repeated link ends the walk, so a chain that points back at
+ * itself cannot loop.
+ */
+export declare function causeMessages(error: unknown): string[];

package/lib/types/runtime/host/host-locale.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Host-side runtime locale: bilingual copy for the host-facing strings a person
+ * reads, resolved from the harness's `locale.preference` setting.
+ *
+ * The model-facing subagent catalog is not here. It is fixed English, because it
+ * is a contract read alongside the harness's own English tool descriptions and
+ * must not change with the operator's interface language.
+ *
+ * The web client resolves locale through its own injected service. The host
+ * process reads the same setting off the harness settings service, which
+ * projects every active profile entry's live configuration: the `locale` entry
+ * carries `preference`. Every absence — no settings service, the entry not
+ * active, no preference written, a value that is not a string — means zh.
+ */
+/** Host runtime dictionary keys (mirrored for zh and en). */
+export type HostLocaleKey = 'commandAcknowledged' | 'userCommandSourceLabel' | 'feedbackToolCardTitle';
+export type HostTranslate = (key: HostLocaleKey, params?: Record<string, string>) => string;
+/**
+ * The settings entry the harness locale plugin owns. The web bundle patch
+ * inserts it as `- id: locale` / `name: '@deepseek-ai/dsh-client-locale'`, and
+ * that package's host half declares `Config = { preference: volatile(string) }`.
+ */
+export declare const LOCALE_SETTINGS_ENTRY = "locale";
+/**
+ * The slice of the host settings service this module reads: the projection of
+ * every active profile entry's live configuration that
+ * `@deepseek-ai/dsh-settings`'s `SettingsForms.describe()` returns. The
+ * namespace getter this read once called (`settings.get(ns)`) does not exist on
+ * the pinned host line — harness `601d6761e4` replaced it with this projection —
+ * so the shape is declared here against the published service.
+ */
+export interface LocaleSettingsSource {
+    describe(): ReadonlyArray<{
+        ns: string;
+        value: unknown;
+    }>;
+}
+/** Resolve the active host language from settings; unknown values default to zh. */
+export declare function bindHostLocale(preference: string | undefined): HostTranslate;
+/**
+ * Wire the reader the host-facing copy resolves through. The caller registers
+ * the returned disposer with its own effects, so the wiring lives exactly as
+ * long as the fiber that installed it; the disposer clears this reader only, so
+ * a reload that installs a newer reader first keeps the newer one.
+ * @param read - reads the active `locale.preference`, or `undefined`.
+ * @returns the disposer that clears this wiring.
+ */
+export declare function setHostLocaleSource(read: () => string | undefined): () => void;
+/**
+ * The persisted locale preference: what {@link setHostLocaleSource} wired, and
+ * `undefined` while the entry has not wired a reader.
+ */
+export declare function readLocalePreference(): string | undefined;
+/**
+ * Read `locale.preference` off the settings service's entry projection.
+ *
+ * `ctx.get` resolves the service from the store, and the store answers for as
+ * long as the provider is active, so the caller can read it from the entry's
+ * own context. The property read this replaces walks the reading fiber's
+ * ancestors and throws `cannot get required service "settings" in inactive
+ * context` once that fiber unloads, the state a profile reload leaves an
+ * injection callback's context in.
+ * @param settings - the host settings service, when the profile mounts one.
+ * @returns the preference string, or `undefined` for every absence.
+ */
+export declare function readHostLocalePreference(settings: LocaleSettingsSource | undefined): string | undefined;

package/lib/types/runtime/{model-catalog.d.ts → host/model-catalog.d.ts}

@@ -1,4 +1,4 @@
-import type { ModelCatalogPayload } from '../contracts/market.js';
+import type { ModelCatalogPayload } from '../../contracts/market.js';
 interface ModelCatalogHost {
     get?(name: string): unknown;
 }

package/lib/types/runtime/{settings-namespace.d.ts → host/settings-namespace.d.ts}

@@ -13,9 +13,9 @@
  * @module runtime/settings-namespace
  */
 import type { Context } from '@deepseek-ai/cordis';
-import { type DownloadRegionSetting } from '../contracts/settings.js';
+import { type DownloadRegionSetting } from '../../contracts/settings.js';
 import type { HostTranslate } from './host-locale.js';
-import type { McpBackend } from './mcp-backend.js';
+import type { McpBackend } from '../../contracts/mcp.js';
 /** The five volatile references the entry's config carries for this namespace. */
 export interface MarketSettingRefs {
     mcpEnhanced: {

package/lib/types/runtime/host/shell-path.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Probe the user's login shell for the `PATH` it exports, once per process.
+ *
+ * `-i` is required, not incidental: Homebrew's `shellenv` line lives in
+ * `.zshrc`, which a non-interactive `zsh -lc` never reads. The probe prints
+ * one marker line and then the value, so a shell that writes banners or
+ * prompts to stdout cannot be mistaken for the value. Every failure —
+ * non-darwin, no shell, timeout, malformed output — resolves to `undefined`
+ * rather than throwing, because a caller must be able to fall back silently
+ * to today's behavior.
+ *
+ * @returns the absolute directories the login shell resolves, or `undefined`
+ *   when the probe could not produce a usable `PATH`.
+ */
+export declare function loginShellPathEntries(): Promise<string[] | undefined>;
+/**
+ * Read the executable lookup path out of the environment the way the host
+ * subprocess provider does: a non-empty `PATH` entry, or the platform
+ * default when the variable is absent (as `child_process.spawn` itself
+ * resolves it).
+ */
+export declare function environmentPath(env: Readonly<Record<string, string | undefined>> | undefined): string;
+/**
+ * Append every directory the login shell has and `basePath` lacks, keeping
+ * `basePath`'s order and precedence intact.
+ *
+ * @returns the merged `PATH` and the appended directories, or `undefined`
+ *   when the probe failed or added nothing.
+ */
+export declare function augmentChildPath(basePath: string): Promise<{
+    path: string;
+    added: string[];
+} | undefined>;
+/**
+ * Read the host's executable lookup seam from a cordis context, tolerantly.
+ * The service is optional — a context without a subprocess runtime resolves
+ * nothing and the caller keeps today's behavior.
+ */
+export declare function subprocessResolver(ctx: unknown): ((command: string, env: Record<string, string>) => Promise<string>) | undefined;
+/**
+ * How one declared command resolved for a spawn.
+ *
+ * `path` is the `PATH` a child must carry, present only when the login shell
+ * added directories. `diagnostic` is the fact to report — the extension, or
+ * the searched `PATH` when resolution still failed; it is absent on the happy
+ * path where the base environment resolved the command unchanged.
+ */
+export interface DeclaredCommandResolution {
+    /** `PATH` the child must carry so `command` resolves; absent when the base `PATH` suffices. */
+    path?: string;
+    /** The resolution fact to report; absent when the base environment resolved the command. */
+    diagnostic?: string;
+}
+/**
+ * Resolve one command a suite or the user declared, against the environment a
+ * spawn would inherit, extending `PATH` from the login shell only when that
+ * environment cannot find the command.
+ *
+ * The rule the two consumers share: an explicit `env.PATH` is a declaration
+ * and is never touched, so the caller gets `undefined` and keeps it verbatim.
+ * The plugin never rewrites the command itself — the bare name stays the
+ * command, and only the child's `PATH` grows.
+ *
+ * @param ctx - the cordis context carrying the host subprocess seam.
+ * @param command - the declared command, exactly as written.
+ * @param declaredEnv - the environment the suite/user declared for the child.
+ * @returns the extension to apply and its fact, or `undefined` when there is
+ *   nothing to do (no seam, or an explicit `PATH`).
+ */
+export declare function resolveDeclaredCommand(ctx: unknown, command: string, declaredEnv: Readonly<Record<string, string>>): Promise<DeclaredCommandResolution | undefined>;

package/lib/types/runtime/{lsp-mounts.d.ts → lsp/lsp-mounts.d.ts}

@@ -28,15 +28,11 @@
  * user resolves it through per-suite surface toggles.
  */
 import type { Context } from '@deepseek-ai/cordis';
-import { type LegacyLspSeam } from './profile-seam.js';
-import { type PluginPathContext } from '../catalog/plugin-variables.js';
-import { type Suite } from '../model/types.js';
-export interface LspMountDiagnostic {
-    suiteId: string;
-    serverKey: string;
-    reason: string;
-    code?: 'mount-failed' | 'unmount-failed' | 'seam-conflict' | 'host-missing';
-}
+import { type LegacyLspSeam } from '../../application/lsp/profile-seam.js';
+import { type PluginPathContext } from '../../catalog/plugin-variables.js';
+import { type Suite } from '../../model/types.js';
+import type { LspMountDiagnostic } from '../../contracts/lsp.js';
+export type { LspMountDiagnostic };
 /** One dsh-lsp-stdio server configuration row (its Config.servers entry). */
 export interface LspStdioServerConfig {
     command: string;
@@ -101,6 +97,17 @@ export declare class LspMountRegistry {
     reconcile(enabledSuites: Suite[]): Promise<LspMountDiagnostic[]>;
     /** Mount/unmount LSP servers to match the enabled suites plus direct config exactly. */
     private reconcileNow;
+    /**
+     * Resolve one server's declared command, extending its `PATH` from the
+     * login shell only when the current environment cannot find the command.
+     *
+     * An explicit `env.PATH` is a declaration and is left verbatim; the command
+     * itself is never rewritten. A resolution fact (the extension, or the
+     * searched `PATH` when it still failed) is appended to the suite's facts so
+     * it reaches the mount diagnostic; a fact is also a PATH extension exactly
+     * when `resolution.path` is set, and rides `pathExtensions` for the trace log.
+     */
+    private resolveServerCommand;
     /**
      * Mount the capability seam this plugin delivers end to end: `ctx.lsp`, then the model-facing
      * `lsp` tool.
@@ -127,7 +134,7 @@ export declare class LspMountRegistry {
     /** Install the plugin storage root per-suite data directories resolve against. */
     setPluginDataRoot(root: string): void;
     /** Install the direct (user-configured) server provider used at reconcile time. */
-    setDirectProvider(provider: () => Promise<Record<string, import('../model/types.js').LspServerSpec>>): void;
+    setDirectProvider(provider: () => Promise<Record<string, import('../../model/types.js').LspServerSpec>>): void;
     setDisabledProvider(provider: () => Promise<Set<string>>): void;
     disabledServers(): Set<string>;
     /** The latest mount diagnostic per suite, for the LSP status surface. */
@@ -140,4 +147,3 @@ export declare class LspMountRegistry {
     /** Dispose every live mount after queued reconciliation passes settle. */
     disposeAll(): Promise<void>;
 }
-export {};

package/lib/types/runtime/{mcp-client → mcp/bridge}/bridge.d.ts

@@ -20,7 +20,7 @@
  * @module runtime/mcp-client/bridge
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Config } from './config.js';
+import type { Config } from '../../../application/mcp/mcp-bridge-config.js';
 /** Cordis plugin name used by loader diagnostics. */
 export declare const name = "market-mcp-client";
 /** Services required by this plugin. */

package/lib/types/runtime/{mcp-client → mcp/bridge}/connection.d.ts

@@ -21,18 +21,10 @@
  * @module runtime/mcp-client/connection
  */
 import type { ToolHost } from './tools.js';
-import type { Config } from './config.js';
+import type { Config } from '../../../application/mcp/mcp-bridge-config.js';
 /** Automatic reconnect policy for one MCP server connection. */
-export interface ReconnectConfig {
-    /** Reconnect automatically after a lost connection (default true). */
-    enabled?: boolean;
-    /** First reconnect delay in milliseconds; doubles per consecutive failed attempt (default 500). */
-    initialDelayMs?: number;
-    /** Backoff ceiling in milliseconds; also the uptime after which the attempt budget resets (default 30000). */
-    maxDelayMs?: number;
-    /** Consecutive failed attempts per outage before giving up for good (default 10). */
-    maxAttempts?: number;
-}
+import type { ReconnectConfig } from '../../../application/mcp/mcp-bridge-config.js';
+export type { ReconnectConfig };
 /** Defaults shared by the config and {@link resolveReconnectPolicy}. */
 export declare const RECONNECT_DEFAULTS: Required<ReconnectConfig>;
 /** Fully resolved reconnect policy captured at plugin load. */

package/lib/types/runtime/{mcp-client → mcp/bridge}/host-contract.d.ts

@@ -8,7 +8,7 @@
  * @module runtime/mcp-client/host-contract
  */
 import type { ContentBlock } from '@deepseek-ai/dsh-llm';
-import type { JsonSchemaNode } from './json-schema-subset.js';
+import type { JsonSchemaNode } from '@deepseek-ai/dsh-tools';
 /** Lossless JSON value vocabulary the bridge exchanges with the registry. */
 export type JsonValue = string | number | boolean | null | JsonValue[] | {
     [key: string]: JsonValue;