dsh-agent-plugins-market 0.9.0 → 0.9.2

package/lib/types/packages/market-translation/src/runtime/host/translation-providers.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The host's translation chain: the two keyless endpoints, then the user's model.
+ *
+ * The order is the market's quality order — a public endpoint answers in under
+ * a second and costs the operator nothing, while a model call spends the user's
+ * own quota, so it is asked last. The chain itself decides what a failure means;
+ * this module only supplies the hops.
+ *
+ * Masking is applied here rather than inside the endpoint adapters, so every
+ * hop in the returned array carries the same guarantee: what goes out is
+ * placeholders, and an answer that lost one is rejected instead of rendered.
+ * @module runtime/host/translation-providers
+ */
+import type { TranslationProvider } from '../../application/translation/chain.js';
+/** Everything the chain needs to assemble its hops. */
+export interface TranslationProviderOptions {
+    /** Host context; read structurally so tests can pass a stub. */
+    host: {
+        get?(name: string): unknown;
+    };
+    /** The LLM-backed provider, already built by the caller (may be undefined). */
+    llm?: TranslationProvider | undefined;
+}
+/**
+ * Build the ordered chain: google -> microsoft -> llm.
+ *
+ * The two public endpoints report themselves available unconditionally: they
+ * need no key, no registration and no configuration, which is what makes
+ * translation work out of the box on a fresh deployment. Whether one of them
+ * actually answers is settled by calling it, and the chain's circuit breaker is
+ * what stops a blocked network from costing a timeout per batch.
+ *
+ * The model hop is absent when the caller has none, so a deployment without a
+ * configured route gets a two-hop chain rather than a hop that always fails.
+ *
+ * The host context is accepted but unread: neither keyless endpoint needs a
+ * seam, and the field is part of the composition root's frozen call shape so a
+ * keyed provider can join the chain without changing that call.
+ * @param options - the host context and the already-built model provider.
+ * @returns the chain, best hop first.
+ */
+export declare function createTranslationProviders(options: TranslationProviderOptions): TranslationProvider[];

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Agent Plugins",
+    "description": "Manage skills, shortcuts, experts, connectors, and language engines to extend your agent."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Agent 扩展",
+    "description": "管理技能、快捷指令、专家、连接器与语言引擎，扩展 Agent 的能力。"
+  }
+}

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "dsh-agent-plugins-market",
+  "icon": "./assets/dsh-agent-plugins.png",
   "description": "One-stop skills, subagent, MCP and LSP manager inside DeepSeek Harness (DSH), compatible with Claude Code, Codex, Cursor, Kimi and other agent plugin layouts.",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -12,12 +13,15 @@
     },
     "./client": "./client/client.js",
     "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "files": [
     "lib",
     "client",
     "schemas",
+    "locale",
+    "assets/dsh-agent-plugins.png",
     "cordis.patch.yml",
     "LICENSE",
     "README.md",
@@ -75,25 +79,41 @@
   ],
   "peerDependencies": {
     "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-attachment": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-credentials": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-experimental-agent-team": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-hook-protocol": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-hooks-claude-code": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-mcp-client": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-query": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-skill": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-subprocess": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-timeout": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-tools": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-util-code-language": "^0.2.0-rc.2",
     "@deepseek-ai/dsh-util-workspace-path": "^0.2.0-rc.2"
   },
   "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-experimental-agent-team": {
+      "optional": true
+    },
     "@deepseek-ai/dsh-hooks-claude-code": {
       "optional": true
     },
     "@deepseek-ai/dsh-mcp-client": {
       "optional": true
     },
+    "@deepseek-ai/dsh-session-query": {
+      "optional": true
+    },
     "@deepseek-ai/dsh-tools": {
       "optional": true
     }
@@ -108,6 +128,12 @@
     "@modelcontextprotocol/sdk": "^1.30.0",
     "ajv": "^8.17.1",
     "fflate": "^0.8.3",
+    "mdast-util-from-markdown": "^2.0.3",
+    "mdast-util-gfm": "^3.1.0",
+    "mdast-util-math": "^3.0.0",
+    "mdast-util-to-markdown": "^2.1.3",
+    "micromark-extension-gfm": "^3.0.0",
+    "micromark-extension-math": "^3.1.0",
     "smol-toml": "^1.9.0",
     "yaml": "^2.7.0",
     "zod": "^4.6.5"
@@ -121,6 +147,9 @@
     "@codemirror/view": "^6.43.12",
     "@deepseek-ai/cordis": "~4.0.4",
     "@deepseek-ai/cosmokit": "^1.8.5",
+    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.0-rc.2",
     "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-ui-plugin-manager": "0.2.0-rc.2",
@@ -128,11 +157,23 @@
     "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
     "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
     "@deepseek-ai/dsh-credentials": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-experimental-agent-team": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-experimental-tool-agent-team": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-hook-protocol": "0.2.0-rc.2",
     "@deepseek-ai/dsh-hooks-claude-code": "0.2.0-rc.2",
     "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
     "@deepseek-ai/dsh-mcp-client": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-session-query": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.0-rc.2",
     "@deepseek-ai/dsh-skill": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.2.0-rc.2",
     "@deepseek-ai/dsh-subprocess": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
     "@deepseek-ai/dsh-timeout": "0.2.0-rc.2",
     "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
     "@deepseek-ai/dsh-util-code-language": "0.2.0-rc.2",
@@ -140,6 +181,7 @@
     "@eslint/js": "^10.0.1",
     "@shikijs/langs": "^4.4.3",
     "@tsdown/css": "^0.22.14",
+    "@types/mdast": "^4.0.4",
     "@types/node": "^22.15.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "~18.3.0",
@@ -150,14 +192,9 @@
     "diff": "^9.0.0",
     "eslint": "^10.11.0",
     "immer": "^11.1.18",
-    "jsdom": "^30.0.1",
+    "jsdom": "^30.1.2",
     "katex": "^0.16.47",
-    "mdast-util-from-markdown": "^2.0.3",
-    "mdast-util-gfm": "^3.1.0",
-    "mdast-util-math": "^3.0.0",
     "micromark-core-commonmark": "^2.0.3",
-    "micromark-extension-gfm": "^3.0.0",
-    "micromark-extension-math": "^3.1.0",
     "micromark-factory-space": "^2.0.1",
     "micromark-util-character": "^2.1.1",
     "micromark-util-classify-character": "^2.0.1",
@@ -188,10 +225,10 @@
     "test": "vitest run",
     "test:contract": "vitest run tests/market-contracts.test.ts tests/routes.test.ts",
     "test:coverage": "vitest run --coverage",
-    "lint": "eslint src tests",
+    "lint": "eslint index.ts packages tests",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "check:architecture": "depcruise --validate .dependency-cruiser.cjs src",
+    "check:architecture": "depcruise --validate .dependency-cruiser.cjs index.ts packages",
     "check:host-alignment": "node scripts/check-host-alignment.mjs",
     "fix:host-alignment": "node scripts/check-host-alignment.mjs --fix",
     "check:quick": "pnpm run typecheck && pnpm run lint",

package/schemas/README.md

@@ -2,7 +2,7 @@
 
 This directory is the specification library for the plugin layouts this manager reads. It holds three kinds of files:
 
-1. **Vendored upstream schemas** in [`1.0.0/`](1.0.0/) and [`1.1.0/`](1.1.0/) — pinned copies of the official agent-plugins.org schemas (1.0.0 published, 1.1.0 the working draft this manager explicitly recognizes as compatible; the two releases' schemas differ only in the version string). These are bundled into the published package and loaded at runtime by [`src/catalog/validate.ts`](../src/catalog/validate.ts), because the specification requires clients to validate plugin packages without retrieving schemas at load time (§7.2.1: "Clients MUST NOT retrieve a schema while loading a plugin").
+1. **Vendored upstream schemas** in [`1.0.0/`](1.0.0/) and [`1.1.0/`](1.1.0/) — pinned copies of the official agent-plugins.org schemas (1.0.0 published, 1.1.0 the working draft this manager explicitly recognizes as compatible; the two releases' schemas differ only in the version string). These are bundled into the published package and loaded at runtime by [`packages/market-catalog/src/scanning/validate.ts`](../packages/market-catalog/src/scanning/validate.ts), because the specification requires clients to validate plugin packages without retrieving schemas at load time (§7.2.1: "Clients MUST NOT retrieve a schema while loading a plugin").
 2. **Reference contracts** in `<dialect>/` — an authored JSON Schema pair plus a `spec.md` for each layout the manager recognizes. **These are documentation, not runtime validators**: the scanner still applies the strategy-chain rules in `src/catalog/`. They exist so a dialect's field set, file locations, and evidence are pinned in one place.
 3. **The client extension namespace contract** in [`com.deepseek.harness/`](com.deepseek.harness/) — the authored schema and rules for this manager's own §8 namespace: manifest data under `extensions["com.deepseek.harness"]` and the top-level `com.deepseek.harness/` extension directory.
 
@@ -29,7 +29,7 @@ schemas/
 
 ## Dialect index
 
-This table records **upstream client conventions**, including their own fallback orders; it does not define this plugin's discovery priority. DSH uses one shared layout order for suite manifests and Marketplace catalogs, shown in the [README priority table](../README.md#layout-detection-precedence) ([中文](../README.zh.md#布局识别优先级)). Catalogs without a dedicated layout use root `marketplace.json` as the final fallback.
+This table records **upstream client conventions**, including their own fallback orders; it does not define this plugin's discovery priority. DSH uses one shared layout order for suite manifests and Marketplace catalogs, shown on the [compatible plugins page](https://sivan757.github.io/dsh-agent-plugins-market/compatible-plugins/#shared-layout-precedence). Catalogs without a dedicated layout use root `marketplace.json` as the final fallback.
 
 | Dialect | Upstream plugin manifest conventions | Upstream marketplace conventions | Upstream schema |
 | --- | --- | --- | --- |
@@ -69,11 +69,11 @@ All ten active layouts are covered by [offline README repository tests](../tests
 
 ## Provenance and update policy
 
-- `1.0.0/*.schema.json` and `1.1.0/*.schema.json` are vendored. Replace the files from [`agentplugins/agent-plugins-spec`](https://github.com/agentplugins/agent-plugins-spec) at the pinned spec versions and bump the spec-version references in `src/catalog/validate.ts`. Never edit them by hand.
+- `1.0.0/*.schema.json` and `1.1.0/*.schema.json` are vendored. Replace the files from [`agentplugins/agent-plugins-spec`](https://github.com/agentplugins/agent-plugins-spec) at the pinned spec versions and bump the spec-version references in `packages/market-catalog/src/scanning/validate.ts`. Never edit them by hand.
 - `<dialect>/*.schema.json` and `spec.md` are authored here. They are **not** upstream copies and carry no upstream compatibility guarantee. When a cited source changes, re-verify and update the schema, the `spec.md`, and the `$comment` provenance line together.
 - `agent-plugins/spec.md` documents the published standard but deliberately keeps its schemas in `1.0.0/` and `1.1.0/` so there is exactly one copy of each release in the tree.
 - `com.deepseek.harness/` is authored here and owned here: it defines this manager's own §8 namespace, so its evolution is governed by the namespace `schemaVersion`, not by upstream releases.
 
 ## Validation
 
-`tests/schemas.test.ts` compiles every schema with Ajv 2020-12, asserts `$id` uniqueness, pins the vendored ids to the runtime constants in `src/catalog/validate.ts`, and requires each dialect to keep a `spec.md` and a paired marketplace schema (the vendored release directories and the namespace contract keep their own documented shape instead). Run `pnpm run test` after touching this directory; run `pnpm run format:check` for formatting.
+`tests/schemas.test.ts` compiles every schema with Ajv 2020-12, asserts `$id` uniqueness, pins the vendored ids to the runtime constants in `packages/market-catalog/src/scanning/validate.ts`, and requires each dialect to keep a `spec.md` and a paired marketplace schema (the vendored release directories and the namespace contract keep their own documented shape instead). Run `pnpm run test` after touching this directory; run `pnpm run format:check` for formatting.

package/schemas/agent-plugins/spec.md

@@ -6,7 +6,7 @@ The only published cross-vendor plugin format in this directory. Unlike the othe
 - **Specification:** https://agent-plugins.org/specification
 - **Repository:** [`agentplugins/agent-plugins-spec`](https://github.com/agentplugins/agent-plugins-spec) (`spec/1.0.0.md`, `spec/1.1.0.md`, `schemas/1.0.0/`, `schemas/1.1.0/`)
 - **Status:** 1.0.0 published; 1.1.0 is a working draft whose schemas differ from 1.0.0 only in the version string (verified 2026-09-17 at upstream `ff8ab5e`); the spec text additionally renames two phrasings ("claiming conformance to Agent Plugins v1" → "claiming conformance", "Agent Plugins v1 defines no OAuth" → "This specification defines no OAuth"). This manager explicitly recognizes 1.1.0 as compatible (§5.2) and validates each version against its own vendored schemas.
-- **Runtime use:** `src/catalog/validate.ts` loads all four vendored schemas through Ajv and selects the validator by the manifest's declared `$schema`; `src/catalog/manifests.ts` selects this dialect only when a root `plugin.json` declares a recognized `$schema`. Client-specific behavior beyond the portable core lives in the [`com.deepseek.harness` namespace](../com.deepseek.harness/spec.md).
+- **Runtime use:** `packages/market-catalog/src/scanning/validate.ts` loads all four vendored schemas through Ajv and selects the validator by the manifest's declared `$schema`; `packages/market-catalog/src/scanning/manifests.ts` selects this dialect only when a root `plugin.json` declares a recognized `$schema`. Client-specific behavior beyond the portable core lives in the [`com.deepseek.harness` namespace](../com.deepseek.harness/spec.md).
 
 ## Manifest location
 
@@ -59,4 +59,4 @@ The technical steering committee is Amazon, Cursor, Microsoft, OpenAI, and Verce
 
 ## Update procedure
 
-Replace the vendored files from the upstream repository at the pinned spec versions and bump the spec-version references in `src/catalog/validate.ts`. Do not edit the vendored files by hand.
+Replace the vendored files from the upstream repository at the pinned spec versions and bump the spec-version references in `packages/market-catalog/src/scanning/validate.ts`. Do not edit the vendored files by hand.

package/schemas/com.deepseek.harness/spec.md

@@ -47,6 +47,6 @@ Values inside the namespace seats expand `${PLUGIN_ROOT}`, `${PLUGIN_DATA}`, and
 
 ## Provenance
 
-- Sources: [Agent Plugins specification](https://agent-plugins.org/specification) §8 (client extensions), §9.2 (placeholder expansion), and the runtime behavior of `src/catalog/manifests.ts` (manifest seat) and `src/catalog/scan-resolvers.ts` (directory seat).
+- Sources: [Agent Plugins specification](https://agent-plugins.org/specification) §8 (client extensions), §9.2 (placeholder expansion), and the runtime behavior of `packages/market-catalog/src/scanning/manifests.ts` (manifest seat) and `packages/market-catalog/src/scanning/scan-resolvers.ts` (directory seat).
 - Verified: 2026-09-17 against `agentplugins/agent-plugins-spec` `ff8ab5e` (1.0.0 published, 1.1.0 working draft).
 - Unresolved: none. The specification assigns no semantics to namespace contents, so every rule above is this client's own contract and can evolve by bumping `schemaVersion`.

package/schemas/skill-collection/spec.md

@@ -2,9 +2,9 @@
 
 Reference contract for repositories that ship skills without any plugin manifest.
 
-- **Schema:** none, because there is no manifest to validate. The unit of validation is the `SKILL.md` frontmatter, which is parsed by `src/catalog/skills-parse.ts`.
+- **Schema:** none, because there is no manifest to validate. The unit of validation is the `SKILL.md` frontmatter, which is parsed by `packages/market-catalog/src/scanning/skills-parse.ts`.
 - **Status:** this is a discovery convention of this plugin and of the Agent Skills ecosystem, not a vendor-published plugin format.
-- **Evidence:** the shared scanning rules in `src/catalog/scan-resolvers.ts`; upstream Agent Skills documentation at https://code.claude.com/docs/en/skills and https://developers.openai.com/codex/skills.
+- **Evidence:** the shared scanning rules in `packages/market-catalog/src/scanning/scan-resolvers.ts`; upstream Agent Skills documentation at https://code.claude.com/docs/en/skills and https://developers.openai.com/codex/skills.
 
 ## Qualification
 
@@ -20,6 +20,14 @@ A source directory qualifies as a manifest-less skill collection only after skil
 
 `SKILL.md` frontmatter carries `name` and `description`; user-invocable skills surface as `/` entries in chat, and skills may restrict manual invocation.
 
+## Source grouping
+
+Without productive marketplace entries, discovered skill-only roots form one suite at the source checkout root. This includes `<root>/<name>/SKILL.md` and nested collections. Explicit plugin manifests and roots with other runtime surfaces keep their existing identities and relative paths. A source that already resolves at its checkout root keeps that suite identity.
+
+The aggregate uses the reserved ID `@skills`, qualified by the source ID, and the checkout basename as its display name. Individual skill IDs cannot grant installation permission to the aggregate. Install the aggregate separately to enable its skills. Existing install records remain unchanged.
+
+Skill names, documents, and resource directories remain attached to their original files. Duplicate names keep the first discovered skill. Invalid skills produce diagnostics and stay excluded. An entirely invalid collection produces no suite.
+
 ## Surfaces
 
 Because there is no manifest, component locations are the shared scanning conventions only: files directly under `agents/*.md` and `commands/*.md`, `hooks/hooks.json` or root `hooks.json` (Claude Code command-hook subset), and MCP files (`mcp.json`, `.mcp.json`, or inline manifest `mcpServers`, which does not exist here). LSP is preview-only because there is no manifest `lspServers` to validate.

package/lib/application/panel-resources.js

@@ -1,161 +0,0 @@
-/** Installed suite and user resources share one inventory; paths never come from HTTP callers. */
-import { realpath, stat } from 'node:fs/promises';
-import { isDeepStrictEqual as deepEqual } from 'node:util';
-import { writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
-import { defaultMarkdownResources, resourceText } from '../catalog/component-files.js';
-import { pluginRootOf } from '../catalog/plugin-variables.js';
-import { isWithin, suiteDataDir } from '../catalog/paths.js';
-import { stripFrontmatter } from '../catalog/skills-parse.js';
-import { parseFrontmatterRecord } from './panels/user-store.js';
-/**
- * Id of one panel entry backed by a file inside an installed suite's checkout.
- * The leading `[` is what distinguishes a plugin entry from a user-authored
- * one; `update`/`remove` use {@link isPluginResourceId} to tell them apart.
- */
-export function pluginResourceId(sourceId, suiteId, kind, name) {
-    return JSON.stringify([sourceId, suiteId, kind, name]);
-}
-/** Whether a panel entry id addresses a file inside an installed suite. */
-export function isPluginResourceId(id) {
-    return id.startsWith('[');
-}
-/**
- * Frontmatter keys beyond the enable switch that a panel control may diff on a
- * plugin document, per kind: the harness invocation pair on skills, and the
- * model-routing keys the persona form edits on agents.
- */
-const FLIPPABLE_KEYS = {
-    skills: ['disable-model-invocation', 'user-invocable'],
-    commands: [],
-    agents: ['model', 'provider', 'reasoning_effort', 'reasoningEffort']
-};
-export function createPanelResources(catalog, users) {
-    return {
-        skills: new PanelResources(catalog, users.skills, 'skills'),
-        commands: new PanelResources(catalog, users.commands, 'commands'),
-        agents: new PanelResources(catalog, users.agents, 'agents')
-    };
-}
-class PanelResources {
-    catalog;
-    users;
-    kind;
-    constructor(catalog, users, kind) {
-        this.catalog = catalog;
-        this.users = users;
-        this.kind = kind;
-    }
-    async list(strict = false) {
-        const entries = await this.users.list(strict);
-        const snapshot = await this.catalog.readUserCatalog();
-        for (const suite of snapshot.suites) {
-            if (!this.catalog.isInstalled(suite.sourceId, suite.id) || suite.remote !== undefined)
-                continue;
-            const files = this.kind === 'skills'
-                ? suite.skills.map(skill => ({ name: skill.name, file: skill.file }))
-                : (suite.resources?.[this.kind] ?? (await defaultMarkdownResources(suite.root, this.kind)));
-            for (const resource of files) {
-                const { name, file } = resource;
-                const rawText = await resourceText(resource).catch(error => {
-                    if (strict && error.code !== 'ENOENT')
-                        throw error;
-                    return undefined;
-                });
-                if (rawText === undefined)
-                    continue;
-                let metadata;
-                try {
-                    metadata = parseFrontmatterRecord(rawText);
-                }
-                catch (error) {
-                    metadata = { disabled: true, validationError: String(error) };
-                }
-                entries.push({
-                    id: pluginResourceId(suite.sourceId, suite.id, this.kind, name),
-                    name,
-                    origin: 'plugin',
-                    suiteName: suite.manifest.name,
-                    disabled: !suite.enabled || suite.activeSurfaces[this.kind] === false || metadata.disabled === true,
-                    metadata,
-                    rawText,
-                    content: stripFrontmatter(rawText),
-                    path: file,
-                    description: typeof metadata.description === 'string' ? metadata.description : '',
-                    ...(pluginRootOf(suite) === undefined ? {} : { suiteRoot: suite.root, suiteData: suiteDataDir(this.catalog.dataRoot, suite.sourceId, suite.id) })
-                });
-            }
-        }
-        // One pass stamps each entry's own last modification: the panel reads every
-        // file's text anyway, and both origins get the same treatment here.
-        return await Promise.all(entries.map(async (entry) => {
-            try {
-                const stats = await stat(entry.path);
-                return { ...entry, updatedAt: new Date(stats.mtimeMs).toISOString() };
-            }
-            catch {
-                return entry;
-            }
-        }));
-    }
-    async get(id) {
-        return (await this.list()).find(entry => (entry.id ?? entry.name) === id);
-    }
-    create(name, text) {
-        return this.users.create(name, text);
-    }
-    /**
-     * A plugin resource is writable only when it sits inside the user dimension
-     * root; suite checkouts elsewhere on disk stay read-only. The user-panel
-     * store lives in the shared Agent layout root instead, so containment is
-     * measured against the catalog's root, not the panel directory. Callers pass
-     * the entry they already fetched: a full inventory scan per call would read
-     * every suite document twice per write.
-     */
-    async pluginPath(entry) {
-        if (entry.origin !== 'plugin')
-            throw new Error('Unknown installed plugin resource');
-        if (entry.path.endsWith('.json'))
-            throw new Error('Inline manifest resources are read-only; edit their source manifest');
-        const root = await realpath(this.catalog.userRoot);
-        const path = await realpath(entry.path);
-        if (!isWithin(root, path))
-            throw new Error('External source files are read-only; create a user resource to customize them');
-        return path;
-    }
-    async update(id, text) {
-        if (!isPluginResourceId(id))
-            return this.users.update(id, text);
-        const previous = await this.get(id);
-        if (previous === undefined)
-            throw new Error('Unknown installed plugin resource');
-        this.assertStateFlipOnly(previous.rawText, text);
-        await writeFileAtomic(await this.pluginPath(previous), text, { mode: 0o644 });
-    }
-    /**
-     * A suite owns its files' content: the panel may only flip state frontmatter.
-     * The document body must stay byte-identical, and the frontmatter diff is
-     * confined to `disabled` everywhere, plus {@link FLIPPABLE_KEYS}'s per-kind
-     * control keys — the harness invocation pair on skills, model routing on
-     * agents.
-     */
-    assertStateFlipOnly(previousText, text) {
-        if (stripFrontmatter(previousText) !== stripFrontmatter(text))
-            throw new Error('plugin resources are read-only; the suite owns their content');
-        const before = parseFrontmatterRecord(previousText);
-        const after = parseFrontmatterRecord(text);
-        const flippable = new Set(['disabled', ...FLIPPABLE_KEYS[this.kind]]);
-        for (const key of new Set([...Object.keys(before), ...Object.keys(after)])) {
-            if (flippable.has(key))
-                continue;
-            if (!deepEqual(before[key], after[key])) {
-                throw new Error('plugin resources are read-only; only the enable state can be changed');
-            }
-        }
-    }
-    async remove(id) {
-        // Plugin files belong to their suite checkout; install/uninstall manages them.
-        if (isPluginResourceId(id))
-            throw new Error('plugin resources are managed by their suite; uninstall the suite instead');
-        return this.users.remove(id);
-    }
-}

package/lib/application/server-config.js

@@ -1,109 +0,0 @@
-import { join } from 'node:path';
-import { readJsonFile, writeJsonDocument } from './json-file.js';
-import { MCP_SCHEMA_ID, validateAgainstSchema, validateMcpJson } from '../catalog/validate.js';
-import { parseLspServers } from '../catalog/lsp-spec.js';
-import { qualifiedSuiteId } from '../catalog/paths.js';
-import { redactMcpConfig } from './mcp/mcp-redaction.js';
-import { REDACTED_VALUE } from '../contracts/mcp.js';
-/**
- * The errors the closed-set package shape produces. A user-owned service does
- * not obey that shape, and the per-transport checks still require what it needs.
- */
-const PACKAGE_SHAPE_KEYWORDS = new Set(['additionalProperties', 'oneOf', 'required', 'const']);
-/**
- * A rejected MCP configuration. The message keeps the flat form the API has
- * always returned, and `fields` carries the same reasons keyed by field so the
- * editor can put each one beside its input.
- */
-export class McpConfigError extends Error {
-    fields;
-    constructor(fields) {
-        super(`invalid MCP configuration: ${fields.map(entry => (entry.field === '' ? entry.message : `${entry.field} ${entry.message}`)).join('; ')}`);
-        this.fields = fields;
-        this.name = 'McpConfigError';
-    }
-}
-/** Restore only unchanged redacted leaves, rejecting invented masked values. */
-export function restoreRedactedConfig(input, original, redacted = redactMcpConfig(original)) {
-    if (typeof input === 'string' && input.includes(REDACTED_VALUE)) {
-        if (input !== redacted)
-            throw new Error('masked values must remain unchanged or be replaced');
-        return original;
-    }
-    if (Array.isArray(input))
-        return input.map((value, index) => restoreRedactedConfig(value, Array.isArray(original) ? original[index] : undefined, Array.isArray(redacted) ? redacted[index] : undefined));
-    if (typeof input === 'object' && input !== null) {
-        const source = typeof original === 'object' && original !== null ? original : {};
-        const safe = typeof redacted === 'object' && redacted !== null ? redacted : {};
-        return Object.fromEntries(Object.entries(input).map(([key, value]) => [key, restoreRedactedConfig(value, source[key], safe[key])]));
-    }
-    return input;
-}
-/**
- * Validate one service definition before it is stored.
- *
- * A service the user declared themselves is local data rather than a
- * distributable package: keys this client does not know are kept as written
- * instead of being rejected by the closed-set package schema, and the
- * package-only rules (bare command names, plugin-relative paths) stay off.
- */
-export async function validateServerMcp(root, key, config, options) {
-    const userOwned = options?.userOwned === true;
-    const document = { $schema: MCP_SCHEMA_ID, mcpServers: { [key]: config } };
-    // A JSON pointer needs its own escapes so a server key containing `/` or `~`
-    // still yields the right prefix for the field paths below.
-    const pointer = `/mcpServers/${key.replaceAll('~', '~0').replaceAll('/', '~1')}`;
-    const structural = (await validateAgainstSchema(MCP_SCHEMA_ID, document))
-        .filter(error => error.instancePath === pointer || error.instancePath.startsWith(`${pointer}/`))
-        // The closed-set package shape reports `additionalProperties` plus the
-        // `oneOf`/`required` pair its failure produces; user-owned data does not
-        // obey it, and the per-transport checks below still require what it needs.
-        .filter(error => !(userOwned && PACKAGE_SHAPE_KEYWORDS.has(error.keyword)))
-        .map(error => ({
-        field: error.instancePath.slice(pointer.length).replace(/^\//, '').replaceAll('/', '.'),
-        message: error.message
-    }));
-    if (structural.length > 0)
-        throw new McpConfigError(structural);
-    const result = await validateMcpJson(root, document, userOwned ? { packageRules: false } : undefined);
-    if (result.config === undefined || result.errors.length > 0)
-        throw new McpConfigError(result.errors.map(message => ({ field: '', message })));
-    const server = result.config.servers[key];
-    if (server === undefined)
-        throw new McpConfigError([{ field: '', message: `server "${key}" was rejected` }]);
-    return server;
-}
-export function validateServerLsp(key, config) {
-    const errors = [];
-    const server = parseLspServers({ [key]: config }, errors)[key];
-    if (server === undefined || errors.length > 0)
-        throw new Error(`invalid LSP configuration: ${errors.join('; ')}`);
-    return server;
-}
-/** Public configuration excludes the parser's derived identity. */
-export function lspConfig(spec) {
-    return Object.fromEntries(Object.entries(spec).filter(([key]) => key !== 'key'));
-}
-export async function loadLspOverrides(root) {
-    const raw = await readJsonFile(join(root, 'lsp-overrides.json'));
-    if (typeof raw !== 'object' || raw === null)
-        return {};
-    return Object.fromEntries(Object.entries(raw).map(([id, config]) => [id, validateServerLsp(id.slice(id.lastIndexOf('/') + 1), config)]));
-}
-export async function saveLspOverride(root, id, config) {
-    const overrides = await loadLspOverrides(root);
-    overrides[id] = config;
-    await writeJsonDocument(join(root, 'lsp-overrides.json'), Object.fromEntries(Object.entries(overrides).map(([key, value]) => [key, lspConfig(value)])));
-}
-export async function applyLspOverrides(root, suites) {
-    const overrides = await loadLspOverrides(root);
-    return suites.map(suite => suite.lsp === undefined
-        ? suite
-        : {
-            ...suite,
-            lsp: {
-                ...suite.lsp,
-                servers: Object.fromEntries(Object.entries(suite.lsp.servers).map(([key, spec]) => [key, overrides[`${qualifiedSuiteId(suite.sourceId, suite.id)}/${key}`] ?? spec]))
-            }
-        });
-}

package/lib/contracts/settings.js

@@ -1,63 +0,0 @@
-/**
- * Browser-safe settings contract of the market's host settings namespace: the
- * namespace key, the fields with their defaults, and the one reader that turns
- * a stored section into resolved values.
- *
- * The defaults live here and nowhere else. The namespace schema declares them
- * to the host, the node half reads them back through {@link resolveMarketSettings},
- * and the browser half — which cannot import `src/runtime` — reads the same
- * resolved values off the settings snapshot it is handed. Changing a default is
- * therefore a one-line edit in this module.
- *
- * @module contracts/settings
- */
-/** Settings namespace this plugin registers; the key the plugin-config tab pairs our card by. */
-export const MARKET_SETTINGS_NAMESPACE = 'dsh-agent-plugins-market';
-/**
- * The default of every market setting — the single place one is written.
- *
- * These are user-visible behavior: a flip here is a behavior change that ships
- * with its documentation, not a private implementation detail.
- */
-export const MARKET_SETTINGS_DEFAULTS = {
-    mcpEnhanced: true,
-    scanProjectLayouts: false,
-    downloadRegion: 'auto',
-    feedbackEnabled: true,
-    autoUpdateSources: false
-};
-/**
- * Narrow an untrusted stored region to a setting; anything else reads as the
- * declared default.
- * @param value - the stored `downloadRegion` value.
- * @param fallback - the value an unrecognized input reads as.
- */
-export function narrowDownloadRegion(value, fallback = MARKET_SETTINGS_DEFAULTS.downloadRegion) {
-    return value === 'auto' || value === 'global' || value === 'china' ? value : fallback;
-}
-/** One boolean field: a stored boolean, else the field's default. */
-function narrowBoolean(value, fallback) {
-    return typeof value === 'boolean' ? value : fallback;
-}
-/**
- * Resolve a stored settings section the way the host resolves it: each field
- * takes its stored value when it is one this field accepts, and its declared
- * default otherwise.
- *
- * The host hands the resolved section back on its own, but not every caller has
- * one — the plugin's own halves read a section they may not have received yet,
- * and a test hands in a bare literal. Funnelling all of them through this
- * function is what keeps a second reading of "what does missing mean" from
- * growing somewhere else.
- * @param section - the stored (or absent) namespace section, untrusted.
- */
-export function resolveMarketSettings(section) {
-    const stored = (typeof section === 'object' && section !== null ? section : {});
-    return {
-        mcpEnhanced: narrowBoolean(stored['mcpEnhanced'], MARKET_SETTINGS_DEFAULTS.mcpEnhanced),
-        scanProjectLayouts: narrowBoolean(stored['scanProjectLayouts'], MARKET_SETTINGS_DEFAULTS.scanProjectLayouts),
-        downloadRegion: narrowDownloadRegion(stored['downloadRegion']),
-        feedbackEnabled: narrowBoolean(stored['feedbackEnabled'], MARKET_SETTINGS_DEFAULTS.feedbackEnabled),
-        autoUpdateSources: narrowBoolean(stored['autoUpdateSources'], MARKET_SETTINGS_DEFAULTS.autoUpdateSources)
-    };
-}