dsh-gitbash-shell 0.32.0 → 0.33.0

package/CHANGELOG.md

@@ -3,6 +3,52 @@
 > 倒序排列,新版本条目在最上面。条目格式:`## vX.Y.Z — YYYY-MM-DD` + 类型(feat / fix / docs / chore)+ 要点 + 相关链接。
 > 纪律见 AGENTS.md「变更记录纪律」:发版前先更新本文件并随版本提交;事故复盘、复现与真机验证记录也记在这里。
 
+## v0.33.0 — 2026-10-01
+
+**类型**:fix(issue #13:Scoop 安装 Git 时 `bashPath` 配置正确但每次启动仍报 could NOT be resolved 并弹引导框)+ feat(解析链新增 `git --exec-path` 与 GitForWindows 注册表两级发现)
+
+> 报告者 **ID-izlq-Github** 的定位是准确的:装配期冻结、两个读取器在 apply 时刻读空、自动链对 shim 布局盲区,三条全部成立。本条目按他的分析与建议落地(建议 1/2/3/4 全采纳)。
+
+### 修复一:显式层懒化,不再在装配期冻结(`src/index.js`)
+
+- **冻结点**(issue 引用的 `index.js:1813`):apply() 时 `effectiveConfiguredBashPath(executorConfiguredBashPath(ctx), settingsBashPath(ctx))` 算一次就定死。那一刻 `ctx.loader.resolve('gitbash-executor')` 因行未进 store 而 throw → 被吞成 `''`;settings 服务也可能尚未注入(0.1.7+ 只有 describe()/update())。两者皆空 ⇒ 误判「未配置」⇒ 跑自动链。执行器(`shell.js` 的 `get bashPath()` 懒解析)却正常 —— **同一次启动、两条路径、相反结论**,这正是 issue 的内核。
+- **修法**:冻结值换成两个读取器 `readConfiguredBashPath()` / `readBashResolution()`,**全部消费点逐次重读**:① `gitBash` capability 改 getter(bashPath/ok/source/configured/tried;ptc 侧只读静态 `active`,不受影响);② status 路由实时重读(弹窗因此不再误报 —— 行挂载完成后 `configured` 非空,解析成功,`ok:true`,弹窗根本不出现);③ pathmap 路由与 tools/execute / post-execute 的 `buildTranslateEnv`;④ 官方侧栏终端接管每次尝试重读;⑤ better-sidebar 接管改挂 settle 通知。
+- **settings 绕行退役**:`gitbash-shell` 行的 `bashPath` 直接从 apply() 的 `config` 参数读(新 `rowBashPath(config)`:volatile ref / 普通值 / 缺席三态,绝不抛)—— 这就是同一行的值,比绕 `settings.describe()` 更直接,且 volatile 意味着用户改设置下一读即生效。宿主半不再 import `settingsBashPath`(shell.js 侧保留:executor 行运行时读 describe() 实测正常)。
+- **启动日志 settle 化**:boot 打印一次;「失败且显式层为空」(行可能还在挂载)时轮询 250ms×20(仅 win32,5 秒封顶),显式层出现或解析翻转后补打 `(settled)` 段;成功或显式值被拒为最终态,不轮询。terminal 接管通过 `onBashSettled` 通知(better-sidebar 在 boot 失败→settled 成功时也能接管,无需重启)。
+
+### 修复一·续:executor 行读取在 0.2.0-rc.2 上恒断,不只是时序(`src/bash-path.js`)
+
+- **真机实测(隔离实例 + 探针插件,报告场景复现)**:dsh 0.2.0-rc.2 上 bundle-patch insert 的行(`gitbash-executor`)挂在**所属插件的 subtree** 里,`loader.resolve('gitbash-executor')` 从 root 树查找**恒 throw**(探针 apply 时刻与 12 秒后各 7 次采样全部 throw)——报告者以为的「启动时序问题」在这台宿主上实际是**永远读不到**。旧代码把 throw 吞成 `''` ⇒ 显式层整个失效:patch 写 `gitbash-executor.config.bashPath` 的用户(issue #11 起推荐、#13 报告者的实际配置方式)在 0.2.0 上 boot/status/翻译层全部看不到该值,而执行器自己读 `this.config.bashPath` 正常 —— 「命令能用但每次启动报错+弹框」的另一半根因。**并连带违反 §4h 契约**:显式值(哪怕被拒)不得被自动链顶替 —— 实测坏值 `Q:/nope/bin/bash.exe` 被自动链的 default 层「顶替成功」,boot 谎报 resolved。
+- **修法**:`executorConfiguredBashPath` 二段式 —— `resolve('gitbash-executor')` 先试(旧宿主行在 root 树,命中即返回,空串也是真实答案=自动链);throw 则 `loader.entries()` 迭代(**含 subtree**)按行自身 `options.id` 匹配(0.2.0 实测稳定可读,`bashPath` 值全程不变)。防回归用例锁死三种 loader 形状(root 命中 / subtree+entries / 行缺失)。
+- **修复后 A/B 真机读数**(隔离实例,patch 写 `gitbash-executor.config.bashPath`):
+  - 坏值 `Q:/nope/...`:boot `bashPath is set to "Q:/nope/bin/bash.exe" and that value was rejected; nothing else is substituted`(fail-loud、无轮询、default 层不再顶替);status `ok:false, configured:"Q:/nope/bin/bash.exe", tried[0]={source:'configured',code:'missing'}` —— boot/status/执行器三方一致;
+  - 好值:boot `Git Bash resolved from the configured source`;status `ok:true, source:"configured"` —— 弹窗不出现。
+
+### 修复二:解析链补 shim 布局的发现方式(`src/bash-path.js`)
+
+- **新 source `exec-path`**(位置:PATH 反推之后、注册表 PATH 之前):对 PATH 上第一个 `git.exe` 跑 `git --exec-path`(Scoop/choco 的 **shim 也能启动真身**,真身报告自己的家),从输出向上最多 5 级找「同时含 `cmd/git.exe` 与 `usr/bin/bash.exe`」的目录,产出 `<root>/bin/bash.exe`。纯函数 `execPathBashCandidates(execPath, exists)` 可测;`ucrt64`/`mingw64`/旧 flat `libexec` 三种布局全覆盖,MSYS2(`usr/libexec/git-core`,根上没有 `cmd/git.exe`)天然不产出候选。
+- **GitForWindows 注册表兜底**:`HKLM\SOFTWARE\GitForWindows`、`HKLM\SOFTWARE\WOW6432Node\GitForWindows`、`HKCU\Software\GitForWindows` 的 `InstallPath`(官方安装器写的;Scoop/便携通常没有,故排在 exec-path 之后),同样走 `exec-path` source。
+- **候选仍过全套判据**(黑名单 → 形状 → `cmd/git.exe`/`usr/bin/bash.exe` → mingw64/msys-2.0.dll → `.windows.` 版本指纹 → `uname -s` 一票否决):§4h 两条硬边界不变 —— 永不回退、只认 Git for Windows 的 bash。冒烟新增「WSL bash 经 exec-path 到达仍被拒」用例。
+- **顺带**:`defaultIo().run` 从 execFileSync 换 spawnSync(piped stdio)—— execFileSync 的同步家族在子进程失败时把 stderr 直接泄漏到宿主日志(reg 的 GBK 错误文本 = 乱码),v0.28.0 起每次失败探测都在漏;spawnSync 捕获进 result 由 catch 丢弃。本机实测乱码消除、探测结果不变(exec-path 层产出 `C:/Program Files/Git/bin/bash.exe`,mingw64 布局反推正确,全链仍 `source=default` 先命中,新层是后备)。
+
+### 冒烟与真机
+
+- 新增三组用例:①「exec-path covers Scoop layouts」(纯函数三布局 + MSYS2 不命中 + 全链 Scoop 场景 + WSL 否决);②「explicit tier is LAZY」(冻结模式防回归:断言 `const configuredBashPath = effectiveConfiguredBashPath(` 与 `const bashResolution = resolveGitBashCached(` 不得再现;懒读取器/status 实时重读/settle 通知必须存在;`rowBashPath` 三态);③「executor row lookup survives the subtree layout change」(loader 三形状:root 命中 / subtree+entries / 行缺失,空串=真实答案)。
+- **顺手修掉存量失败**(0.32.1 在 win32 上 latent):「full apply() mount on a stub ctx」的 settings stub 还停在 `settings.get(ns)` 时代,readShell 自 v0.25.1 起只认 `describe()` ⇒ stub 恒 null ⇒ 轮询 12×1500ms 后断言必挂。stub 补 `describe()`,与现役读法对齐。
+- 99 项全绿(96 存量 + 3 新增;toolchain PATH 用例的平台误判 v0.32.1 已修,本次全平台绿)。
+- **真机验证**(隔离 `DSH_HOME`(Temp 目录)+ profile 副本 `cp -rL` 解引用 + 插件目录换本仓源码 + 探针插件采 loader 形状;全程独占 3080 —— 用户实例当时未运行,验证后实例已杀、410M 副本与探针已删净,`~/.dsh` 零触碰):默认场景 boot `resolved from the default source`、status `ok:true`;坏值/好值 A/B 见上文「修复一·续」;官方侧栏终端接管懒读路径正常(`already uses this Git Bash ... (nothing written)` 幂等);ptc 联动正常(cordis-gitbash 去重、对方注册 Git Bash rows —— capability getter 无碍);spawnSync 改造后启动日志**零乱码**。**未覆盖**:settle 轮询分支的翻转真机时序(0.2.0-rc.2 上 entries() 在 apply 时刻即稳定可读,轮询多数情况下不触发;接线由源码断言锁定,行为留待真实慢宿主检验)。
+
+- 相关:issue #13(<https://github.com/KannaKuron/dsh-gitbash-shell/issues/13>)、issue #11(解析链的由来)、AGENTS.md §4h(顺序契约更新)。
+
+## v0.32.1 — 2026-09-28
+
+**类型**:chore(清掉 v0.32.0 遗留的 legacy settings 死代码)+ fix(冒烟里 mac 平台误判的 toolchain 路径用例)
+
+- **legacy settings 面整体删除**(v0.32.0 识别的死代码,当时保守留了一手):宿主 settings 服务自 0.1.7 起只有 describe()/update()(packages/settings/settings/src/index.ts 方法面核对),没有 register(SettingsScope)也没有 get(ns) ⇒ 全部探测分支不可达。删除:① host 半的 legacy settings namespace 注册块(legacySettings 探测 + ctx.inject(['settings']) 注册 schema + scope.watch 接线);② makeLiveReader 的 era 探测(legacy 恒 false,"legacy || !hasConfig" 收敛为 !hasConfig 的等价 fallback);③ 四个 settings.get(ns) 读取器(readPosixPaths / readDialectSettings / readAdoptSidebar / readSuppressPeerCordis,生产调用全在死分支里)与 SETTINGS_NAMESPACE 常量;④ sidebarScope(唯一赋值点在死代码里)及其 polling watch 挂钩;⑤ adoptSidebarShell.readShell 的 get(ns) 死分支(describe 分支保留,0.1.7 上在用);⑥ shell.js dialectSettings() 的同款 get(ns) 分支;⑦ client 半的 settingsScope 注入段与 settings.plugin.item 旧座位(设置卡只剩 plugins.bundle.config 详情页座位)。行数:src/index.js 2549 → 约 2470 行。
+- **行为不变**:所有被删分支在 >=0.1.7-rc 宿主上均不可达;每个消费点的现役路径(describe() 读取 / 行 Config volatile 读取)逐字未动。冒烟 96 项全绿,新增防复活守卫(源码不得再出现 settings.register / SETTINGS_NAMESPACE)。
+- **fix(tests):toolchain PATH 扫描用例在非 Windows 平台误判**——实现永远以 Windows 反斜杠拼接(该扫描只在 win32 跑,行为正确),期望却用 process.platform 的 sep 构造,mac/Linux 上必挂。期望改为字面量反斜杠;该用例从 v0.32.0 起的既有的平台失败就此消除。
+- 同步:AGENTS.md 条目 0(死代码段改为「已整体删除」)、4b(SERVICE READ RULE 更新为 makeLiveReader)、§4e/§4g/§4i 的双时代措辞收敛;验证清单与发布 checklist 更新(含 minimumReleaseAge 冷却提示)。
+
 ## v0.32.0 — 2026-09-28
 
 **类型**:chore(宿主下限提高到 >= 0.1.7-rc:删除 0.1.6 以前的全部兼容路径,插件瘦身六分之一)

package/README.md

@@ -126,7 +126,7 @@ dsh-ptc-cordis-preset 报告它的 `PTC 创造模式` 已经是 Git Bash 版。
     default: ptc-cordis   # 或 standard-gitbash / minimal-gitbash
 ```
 
-## bash 从哪里来:解析链与失败引导(v0.28.0,issue #11)
+## bash 从哪里来:解析链与失败引导(v0.28.0,issue #11;懒化与 exec-path 层 v0.33.0,issue #13)
 
 `bashPath` **默认留空 = 自动探测**;解析顺序就是契约:
 
@@ -136,8 +136,16 @@ dsh-ptc-cordis-preset 报告它的 `PTC 创造模式` 已经是 Git Bash 版。
    `%LOCALAPPDATA%\Programs\Git\bin\bash.exe`;
 3. **PATH**(用户 PATH + 系统 PATH,进程内已合并)逐目录找 `bash.exe`;
 4. **PATH 上的 `git.exe` 反推** `<gitdir>/../bin/bash.exe`;
-5. **注册表 `Path`**(`HKCU\Environment`、`HKLM\...\Session Manager\Environment`)——覆盖"GUI 启动时 PATH 快照过期";
-6. **全落空 ⇒ 报错 + 引导**(启动日志一份完整报告,客户端弹一次引导框)。
+5. **`git --exec-path` 反推 + GitForWindows 注册表**(v0.33.0):对 PATH 上的 `git.exe`(Scoop / choco 的
+   **shim** 也照常启动真身)跑 `--exec-path`,从输出向上找 Git 根 —— 兼容 `mingw64` / `ucrt64` 两种运行时
+   布局,补上「Scoop 安装、PATH 上只有 shims、没有 `bash.exe`」的盲区;随后兜底读注册表
+   `HKLM\SOFTWARE\GitForWindows` 的 `InstallPath`;
+6. **注册表 `Path`**(`HKCU\Environment`、`HKLM\...\Session Manager\Environment`)——覆盖"GUI 启动时 PATH 快照过期";
+7. **全落空 ⇒ 报错 + 引导**(启动日志一份完整报告,客户端弹一次引导框)。
+
+**解析结果是活的,不是启动时判一次**(v0.33.0,issue #13):启动那一刻插件行可能还没全部挂载,显式配置
+会被短暂读成空 —— 现在启动日志、状态接口、弹窗与侧栏终端接管都在**使用时实时重读**,执行器能用,
+它们就不会再说「解析失败」;启动日志也会在行挂载稳定后补一份最终结论。
 
 > **只认 Git for Windows 的 bash。** WSL(`C:\Windows\System32\bash.exe`,永远在 PATH 且排序靠前)、
 > WindowsApps 别名、MSYS2、Cygwin 的 bash **一律拒绝**;候选还要通过 Git 布局(`usr/bin` + `cmd\git.exe` +

package/README_EN.md

@@ -91,9 +91,16 @@ Executor config:
 
 ```yaml
 config:
-  bashPath: "D:/Tools/Git/bin/bash.exe"   # default C:/Program Files/Git/bin/bash.exe
+  bashPath: "D:/Tools/Git/bin/bash.exe"   # default '' (empty) = automatic chain
 ```
 
+The automatic chain (empty `bashPath`) probes, in order: explicit settings → default
+install locations → PATH → `git.exe` reverse lookup → `git --exec-path` (covers
+Scoop/choco shim layouts and the `ucrt64` runtime, v0.33.0) + the GitForWindows
+registry `InstallPath` → the registry `Path`. Resolution is re-read live per
+consumer (never frozen at boot, v0.33.0), and only Git for Windows' own bash
+counts — WSL / MSYS2 / Cygwin are refused with guidance, never substituted.
+
 ## Cooperation with dsh-ptc-cordis-preset
 
 This plugin publishes a `gitBash` host capability (`{ active, bashPath }`,

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-external/dsh-gitbash-shell",
-  "version": "0.32.0",
+  "version": "0.33.0",
   "main": "./src/index.js",
   "description": "Windows 全模式 Git Bash:用 Git for Windows bash 替换 PowerShell 执行器,声明式注册 standard/minimal/code/cordis 的 Git Bash 变体 preset(preset id 永不变)。联动:dsh-ptc-cordis-preset(两者同装时 PTC 创造模式带 Git Bash 行且可去重)+ dsh-better-sidebar(终端 UI 标签与模型 terminal_* 工具自动切到 Git Bash)。",
   "engines": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-gitbash-shell",
-  "version": "0.32.0",
+  "version": "0.33.0",
   "description": "Windows 上让 agent 的每条 shell 命令改经 Git for Windows bash 执行;物化四个内置预设的 Git Bash 变体,统一 MSYS 盘根路径方言,侧栏终端接管可开关。· Run every agent shell command through Git for Windows bash on Windows; materialize Git Bash variants of the built-in presets, unify the MSYS drive-root path dialect, and adopt the sidebar terminal behind a switch.",
   "type": "module",
   "repository": {

package/src/bash-path.js

@@ -20,7 +20,7 @@
  * arrives through `io`, so the whole chain is unit-testable off-Windows.
  */
 
-import { execFileSync } from 'node:child_process'
+import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { dirname } from 'node:path'
 
@@ -44,7 +44,7 @@ export const GIT_WINDOWS_VERSION_MARKER = '.windows.'
 export const GIT_BASH_UNAME = /^MINGW(32|64)_NT-/
 
 /** Exit codes/sources reported back to the caller. */
-export const BASH_SOURCES = ['configured', 'default', 'path', 'path-git', 'registry']
+export const BASH_SOURCES = ['configured', 'default', 'path', 'path-git', 'exec-path', 'registry']
 
 /**
  * Normalize a Windows path for comparison: forward slashes, lowercase, no
@@ -132,11 +132,46 @@ export function classifyBashCandidate(candidate, io) {
   return { ok: true, path: candidate, root, gitExe }
 }
 
+/**
+ * Walk UP from a `git --exec-path` output looking for the Git for Windows
+ * root, and return its `<root>/bin/bash.exe` candidate (issue #13).
+ *
+ * Why this tier exists: package managers that SHIM Git (Scoop, and portable
+ * installs generally) put `git.exe` on PATH in a directory (`E:/Scoop/shims`)
+ * that is neither `<root>/cmd` nor `<root>/bin`, so the PATH reverse lookup
+ * never fires and there is no `bash.exe` on PATH at all. The REAL git still
+ * knows where it lives — `git --exec-path` prints
+ * `<root>/<mingw64|ucrt64>/libexec/git-core` (or `<root>/libexec/git-core`
+ * on old layouts) even when launched through a shim — so climbing ≤5 levels
+ * and demanding BOTH `cmd/git.exe` and `usr/bin/bash.exe` finds the root on
+ * every layout. That pair is also the discriminator: MSYS2's git reports
+ * `<msys64>/usr/libexec/git-core`, whose root has `usr/bin/bash.exe` but NO
+ * `cmd/git.exe`, so it never produces a candidate here (and even if it did,
+ * classifyBashCandidate's blacklist + fingerprints would refuse it).
+ * @param {string|undefined} execPath - raw `git --exec-path` output.
+ * @param {(path: string) => boolean} exists - filesystem probe.
+ * @returns {string[]} zero or one candidate.
+ */
+export function execPathBashCandidates(execPath, exists) {
+  if (typeof execPath !== 'string' || execPath.trim() === '') return []
+  let dir = execPath.replace(/\\/g, '/').replace(/\/+$/, '')
+  for (let i = 0; i < 5; i++) {
+    const parent = dirname(dir)
+    if (parent === dir || parent === '' || parent === '.') break
+    dir = parent
+    if (exists(dir + '/cmd/git.exe') && exists(dir + '/usr/bin/bash.exe')) {
+      return [dir + '/bin/bash.exe']
+    }
+  }
+  return []
+}
+
 /**
  * The ordered candidate chain for one resolution, WITHOUT validation. Order is
  * the contract (issue #11): explicit setting → default install locations →
- * PATH → git.exe reverse lookup → registry PATH (the last one only helps when
- * the process PATH snapshot predates a user's PATH edit).
+ * PATH → git.exe reverse lookup → git --exec-path / GitForWindows registry
+ * (the last one only helps when the process PATH snapshot predates a user's
+ * PATH edit).
  * @param {object} input - resolution input.
  * @param {string} input.configured - explicit path ('' = none).
  * @param {object} io - injected facts.
@@ -152,6 +187,7 @@ export function bashCandidates({ configured }, io) {
   for (const path of io.defaults()) out.push({ path, source: 'default' })
   for (const path of io.pathBashCandidates()) out.push({ path, source: 'path' })
   for (const path of io.gitReverseCandidates()) out.push({ path, source: 'path-git' })
+  for (const path of io.execPathBashCandidates()) out.push({ path, source: 'exec-path' })
   for (const path of io.registryBashCandidates()) out.push({ path, source: 'registry' })
   return out
 }
@@ -262,23 +298,50 @@ export function effectiveConfiguredBashPath(ownRowValue, settingsValue) {
 
 /**
  * The `gitbash-executor` ROW's own `bashPath` — the highest-priority tier.
- * Read through the Loader's public `resolve(id)` (the row id is part of this
+ * Read through the Loader's public surface (the row id is part of this
  * plugin's own bundle patch), so the translation layer sees the same explicit
  * value the executor row carries instead of quietly resolving a different
  * one. Absent row / absent config / any loader shape change reads ''.
+ *
+ * TWO access paths, because hosts differ (issue #13, measured on 0.2.0-rc.2):
+ * bundle-patched rows live in the OWNING PLUGIN'S SUBTREE there, so a bare
+ * `resolve('gitbash-executor')` throws from the root tree FOREVER (not just
+ * at boot) — the explicit tier silently read '' while the executor's own lazy
+ * `this.config.bashPath` worked, i.e. the two halves of this plugin disagreed
+ * about the user's explicit answer. `entries()` iterates subtrees as well, so
+ * it finds the row on both layouts; the direct resolve stays as the first try
+ * for older hosts where the row sits in the root tree.
  * @param {object} ctx - a context exposing `loader`.
  * @returns {string} the row's configured path, '' when unset.
  */
 export function executorConfiguredBashPath(ctx) {
-  try {
-    const entry = ctx && ctx.loader && typeof ctx.loader.resolve === 'function'
-      ? ctx.loader.resolve('gitbash-executor')
-      : undefined
+  const read = (entry) => {
     const value = entry && entry.options ? entry.options.config : undefined
     return value && typeof value.bashPath === 'string' ? value.bashPath : ''
-  } catch {
-    return ''
   }
+  const loader = ctx && ctx.loader
+  if (!loader) return ''
+  // Subtree walk: finds the row wherever the host nests bundle-patched rows.
+  const walk = () => {
+    try {
+      if (typeof loader.entries !== 'function') return undefined
+      for (const entry of loader.entries()) {
+        if (entry && entry.options && entry.options.id === 'gitbash-executor') return entry
+      }
+      return undefined
+    } catch {
+      return undefined
+    }
+  }
+  try {
+    // Direct resolve first: the row sits in the ROOT tree on older hosts, and
+    // an EMPTY string it may carry is a real answer (= run the automatic
+    // chain) — only a throw (subtree row, newer hosts) falls through.
+    if (typeof loader.resolve === 'function') {
+      return read(loader.resolve('gitbash-executor'))
+    }
+  } catch { /* not in the root tree — walk the subtrees below */ }
+  return read(walk())
 }
 
 /**
@@ -289,19 +352,29 @@ export function executorConfiguredBashPath(ctx) {
  * @returns {object} the production io.
  */
 export function defaultIo() {
+  // spawnSync (not execFileSync): the sync-exec family LEAKS a failing
+  // child's stderr straight onto the host log (reg's GBK error text showed
+  // up as mojibake on every failed probe), while spawnSync with piped stdio
+  // captures it into the result where the catch below can drop it.
   const run = (file, args) => {
     try {
-      return String(execFileSync(file, args, { encoding: 'utf8', timeout: 5000, windowsHide: true })).trim()
+      const result = spawnSync(file, args, { encoding: 'utf8', timeout: 5000, windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] })
+      if (result.error !== undefined || result.status !== 0) return undefined
+      return String(result.stdout ?? '').trim()
     } catch {
       return undefined
     }
   }
+  const registryValue = (hive, key, name) => {
+    const out = run('reg', ['query', hive + '\\' + key, '/v', name])
+    if (typeof out !== 'string') return undefined
+    const match = new RegExp(name + '\\s+REG_(?:EXPAND_)?SZ\\s+(.*)', 'i').exec(out)
+    return match === null ? undefined : match[1].trim()
+  }
   const registryPath = (hive, key) => {
-    const out = run('reg', ['query', hive + '\\' + key, '/v', 'Path'])
-    if (typeof out !== 'string') return []
-    const match = /Path\s+REG_(?:EXPAND_)?SZ\s+(.*)/i.exec(out)
-    if (match === null) return []
-    return match[1].split(';').map((entry) => entry.trim()).filter((entry) => entry !== '')
+    const value = registryValue(hive, key, 'Path')
+    if (typeof value !== 'string') return []
+    return value.split(';').map((entry) => entry.trim()).filter((entry) => entry !== '')
   }
   const dirs = () => {
     const out = []
@@ -314,6 +387,23 @@ export function defaultIo() {
     return out
   }
   const pathDirs = () => String(process.env.PATH ?? '').split(process.platform === 'win32' ? ';' : ':').map((entry) => entry.trim()).filter((entry) => entry !== '')
+  const gitForWindowsInstalls = () => {
+    const roots = []
+    // The official installer writes these (machine-wide / per-user); the
+    // 32-bit-on-64-bit install lives under WOW6432Node. Scoop/portable usually
+    // has none of them, which is why this rides behind `git --exec-path`.
+    for (const [hive, key] of [
+      ['HKLM', 'SOFTWARE\\GitForWindows'],
+      ['HKLM', 'SOFTWARE\\WOW6432Node\\GitForWindows'],
+      ['HKCU', 'Software\\GitForWindows'],
+    ]) {
+      const install = registryValue(hive, key, 'InstallPath')
+      if (typeof install === 'string' && install.trim() !== '') {
+        roots.push(install.replace(/\\/g, '/').replace(/\/+$/, '') + '/bin/bash.exe')
+      }
+    }
+    return roots
+  }
   return {
     exists: (path) => {
       try { return existsSync(path) } catch { return false }
@@ -326,6 +416,19 @@ export function defaultIo() {
         const parent = dirname(dir.replace(/\\/g, '/'))
         return [parent + '/bin/bash.exe', dirname(parent) + '/bin/bash.exe']
       }),
+    // issue #13: shimmed Git layouts (Scoop, portable) have no bash.exe on PATH
+    // and a shim directory that defeats the cmd/bin reverse lookup. The REAL
+    // git reports its own home through --exec-path even when launched via a
+    // shim, and the official installer's InstallPath backs it up.
+    execPathBashCandidates: () => {
+      const gitExe = pathDirs()
+        .map((dir) => dir.replace(/\\/g, '/') + '/git.exe')
+        .find((path) => { try { return existsSync(path) } catch { return false } })
+      const execPath = gitExe === undefined ? undefined : run(gitExe, ['--exec-path'])
+      return [...execPathBashCandidates(execPath, (path) => {
+        try { return existsSync(path) } catch { return false }
+      }), ...gitForWindowsInstalls()]
+    },
     registryBashCandidates: () => [
       ...registryPath('HKCU', 'Environment'),
       ...registryPath('HKLM', 'SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment'),

package/src/client.js

@@ -2,11 +2,10 @@
  * dsh-gitbash-shell — browser half (hand-written ModuleLoader bundle).
  *
  * ONE job: the Settings → Plugins card that gates the unified POSIX path
- * dialect. The Plugins tab dispatches the intersection of Host-served
- * namespaces and registered cards, so the card appears only when the host
- * half (src/index.js) has registered the 'gitbash-shell' settings namespace.
+ * dialect. The card lives on the plugin's detail page (the
+ * plugins.bundle.config seat, keyed by the package name).
  *
- * The card flips one boolean — posixPaths — through a bound settingsScope:
+ * The card flips one boolean — posixPaths — through this plugin's row Config form:
  *   on  → the host injects the order-126 directive (every tool takes MSYS
  *         drive roots /c/...) and the tools/execute wrapper translates
  *         path-argument fields (/x/ → X:/) for the Node-backed file tools;
@@ -21,7 +20,7 @@
  *     (react and @deepseek-ai/dsh-client-ui-primitives only, smoke-enforced);
  *   - plain React.createElement, no JSX/TS; components at module level;
  *   - dsh.client.inject in package.json lists the packages that must load
- *     first so locale / settingsScope / slots exist when this applies;
+ *     first so locale / configForms / slots exist when this applies;
  *   - copy ships in three layers: zh/en inline, one LOCALES entry per third
  *     language (each preceded by a locale marker line), every dictionary
  *     key-aligned with zh (smoke-enforced) and read through a live lookup —
@@ -1872,7 +1871,7 @@ window.__ModuleLoader__.load({
 
 			// dsh 0.1.6-alpha.2: the Plugins page renders this card through the
 			// `plugins.bundle.config` slot with view="page" — the page draws the
-			// title itself, so the collapsible shell is only for the legacy seat.
+			// title itself; the collapsible shell only shows on the popup seat.
 			var pageView = props.view === "page";
 
 			var mounts = snap.value.virtualMounts !== false;
@@ -2637,32 +2636,16 @@ window.__ModuleLoader__.load({
 
 		/**
 		 * Required client services: only era-guaranteed ones are hard-injected;
-		 * the settings face is acquired OPTIONALLY (dsh 0.1.7 removed the
-		 * settingsScope service and a hard inject would leave this fiber PENDING
-		 * forever, taking the card down with it).
+		 * the settings face is acquired OPTIONALLY (a missing configForms on a
+		 * stripped-down host must not take the card down with it).
 		 */
 		exports.inject = ["locale", "slots"];
 
 		exports.apply = function (ctx) {
-			// Era-split settings face (same contract both eras: getSnapshot/set/unset).
+			// The settings face: one ConfigForm per live profile entry; the form
+			// key is the row id "gitbash-shell" (contract: getSnapshot/set/unset).
 			var scope = null;
 
-			// OLD era (dsh <= 0.1.6): bound settings scope.
-			try {
-				ctx.inject(["settingsScope"], function (sctx) {
-					try {
-						var svc = sctx && sctx.settingsScope;
-						if (svc && typeof svc.bind === "function") scope = svc.bind({ namespace: SETTINGS_NAMESPACE });
-					} catch (error) {
-						console.warn(TAG + " settingsScope acquisition failed:", error && error.message ? error.message : error);
-					}
-				});
-			} catch (error) {
-				console.warn(TAG + " settingsScope wiring failed:", error && error.message ? error.message : error);
-			}
-
-			// NEW era (dsh >= 0.1.7): one ConfigForm per live profile entry; the form
-			// key is the row id "gitbash-shell" (same string as the old namespace).
 			try {
 				ctx.inject(["configForms"], function (fctx) {
 					try {
@@ -2714,23 +2697,8 @@ window.__ModuleLoader__.load({
 					// members (top-level options fields do NOT reach the component).
 					return { scope: scope, ctx: ctx };
 				};
-				// Legacy seat (dsh <= 0.1.6-alpha.1): Settings → Plugins card.
-				slots.inject("settings.plugin.item", function () {
-					return slots.register({
-						name: "settings.plugin.item",
-						key: SETTINGS_NAMESPACE,
-						locale: NS,
-						inject: injected,
-					}, function CardWithLocale(props) {
-						/* The registration's locale field also hands out the framework's own
-						   t seat; the plugin's lookup wins (21 locale tags against the catalog's
-						   zh/en), passed last so no prop merge order can override it. */
-						return E(LocaleLive, { ctx: ctx, t: t, cardProps: props });
-					});
-				});
-				// dsh 0.1.6-alpha.2+: the Plugins page's bundle configuration seat,
-				// keyed by the PACKAGE name. Each inject waits for its own slot
-				// declaration, so exactly one seat is live on any host version.
+				// The Plugins page's bundle configuration seat, keyed by the PACKAGE
+				// name. Each inject waits for its own slot declaration.
 				/* Root-level popup seat: rendered regardless of which page is open,
 				   which is the point — the user may never open settings. */
 				slots.inject("shell.overlay", function () {
@@ -2750,7 +2718,7 @@ window.__ModuleLoader__.load({
 						locale: NS,
 						inject: injected,
 					}, function BundleConfigWithBoundary(props) {
-						/* Same LocaleLive wrap as the legacy seat: the plugin's 21-tag
+						/* Same LocaleLive wrap: the plugin's 21-tag
 						   dictionary wins over the catalog's zh/en t seat. */
 						return E(LocaleLive, { ctx: ctx, t: t, cardProps: props });
 					});

package/src/index.js

@@ -276,7 +276,7 @@ export function effectivePresetIds(configured, { suppress, peerGitBash } = {}) {
  */
 import {
   DEFAULT_GIT_BASH, GIT_BASH_DOWNLOAD_URL, bashResolutionReport,
-  effectiveConfiguredBashPath, executorConfiguredBashPath, resolveGitBashCached, settingsBashPath,
+  effectiveConfiguredBashPath, executorConfiguredBashPath, resolveGitBashCached,
 } from './bash-path.js'
 import { adoptTerminalShell, terminalAdoptReport } from './terminal-shell.js'
 import {
@@ -408,14 +408,12 @@ export function installRegisterShim(reg) {
 // ── unified path dialect: settings namespace + gate (v0.9.0) ───────────────
 //
 // The dialect (directive + translation wrapper) is OFF by default and gated
-// by the posixPaths boolean in the 'gitbash-shell' settings namespace,
-// flipped from the Settings → Plugins card (src/client.js). The directive's
-// text closure returns '' while off — empty context contributions are
-// dropped at assembly, so a disabled dialect adds zero prompt noise; the
+// by the posixPaths boolean on this plugin's row Config (volatile, read live
+// per dispatch), flipped from the plugin's settings card (src/client.js). The
+// directive's text closure returns '' while off — empty context contributions
+// are dropped at assembly, so a disabled dialect adds zero prompt noise; the
 // wrapper reads the same value per dispatch and passes calls through.
 
-const SETTINGS_NAMESPACE = 'gitbash-shell'
-
 /**
  * dsh >= 0.1.7 marks a Config field live-editable without remount; a
  * 0.1.6-era schemastery predates the method and the guard keeps this module
@@ -483,6 +481,24 @@ export function valueOf(value) {
   return value && typeof value.get === 'function' ? value.get() : value
 }
 
+/**
+ * This row's OWN live `bashPath` (issue #13): apply()'s `config` parameter IS
+ * the `gitbash-shell` row's resolved Config, so reading it here replaces the
+ * settings-service detour (`settingsBashPath`) that could read '' at apply
+ * time on hosts where the service is describe()/update()-only or not injected
+ * yet. Volatile refs mean a settings edit lands on the next read, no listener.
+ * @param {object|undefined} config - apply()'s resolved Config (may be absent).
+ * @returns {string} the row's `bashPath`, '' when unset or unreadable.
+ */
+export function rowBashPath(config) {
+  try {
+    const value = config && typeof config === 'object' ? valueOf(config.bashPath) : undefined
+    return typeof value === 'string' ? value.trim() : ''
+  } catch {
+    return ''
+  }
+}
+
 /**
  * Era-aware live settings reader for everything wired inside apply(): the
  * NEW era reads this plugin's own Config refs (no listener needed — every
@@ -493,14 +509,16 @@ export function valueOf(value) {
  * @returns {{ dialect: () => object, posix: () => boolean, adoptSidebar: () => boolean, suppressPeerCordis: () => boolean }}
  */
 function makeLiveReader(ctx, config) {
-  let legacy = false
-  try {
-    const settings = ctx.get('settings')
-    legacy = !!(settings && typeof settings.register === 'function')
-  } catch { legacy = false }
   const hasConfig = !!(config && typeof config === 'object')
   const dialect = () => {
-    if (legacy || !hasConfig) return readDialectSettings(ctx)
+    if (!hasConfig) {
+      // No row Config (schemastery unresolvable): everything off except the
+      // opt-out booleans, the exact shape the old fallback returned.
+      return {
+        posixPaths: false, virtualMounts: false, globSplit: false, errorDialect: false,
+        codePaths: false, gitAutocrlf: false, bashPath: '', subagentDialect: true, autoTerminalShell: true,
+      }
+    }
     const bash = valueOf(config.bashPath)
     return {
       posixPaths: valueOf(config.posixPaths) === true,
@@ -522,8 +540,8 @@ function makeLiveReader(ctx, config) {
     posix: () => dialect().posixPaths === true,
     adoptSidebar: () => dialect().adoptSidebar !== false,
     autoTerminalShell: () => dialect().autoTerminalShell !== false,
-    // Default OFF on both eras: only an explicit true asks for deduplication.
-    suppressPeerCordis: () => (legacy || !hasConfig ? readSuppressPeerCordis(ctx) : valueOf(config.suppressPeerCordis) === true),
+    // Default OFF: only an explicit true asks for deduplication.
+    suppressPeerCordis: () => (hasConfig ? valueOf(config.suppressPeerCordis) === true : false),
   }
 }
 
@@ -568,79 +586,6 @@ const PATH_DIALECT_DESCRIPTION = 'Path dialect for tool calls and tool results:
 // They cannot ride the shell-env registry below: that registry accepts DSH_*
 // facts only, and a non-DSH key throws the whole contribution away.
 
-/** Read the posixPaths switch from the live settings service; never throws. */
-export function readPosixPaths(ctxLike) {
-  try {
-    const settings = ctxLike && typeof ctxLike.get === 'function' ? ctxLike.get('settings') : undefined
-    const value = settings && typeof settings.get === 'function' ? settings.get(SETTINGS_NAMESPACE) : undefined
-    return !!(value && value.posixPaths === true)
-  } catch {
-    return false
-  }
-}
-
-/**
- * Read every dialect switch at once (v0.19.0): posixPaths gates the whole
- * dialect; virtualMounts gates the bash virtual mounts + ~ + $VAR expansion
- * (off = strict drive-root-only translation); globSplit gates the absolute
- * glob-pattern rewrite; errorDialect gates error-message translation and the
- * NUL guidance block; bashPath (optional) joins the Git-root probe candidates
- * first. All default ON (schema defaults); never throws.
- */
-export function readDialectSettings(ctxLike) {
-  const fallback = { posixPaths: false, virtualMounts: false, globSplit: false, errorDialect: false, codePaths: false, gitAutocrlf: false, bashPath: '', subagentDialect: true, autoTerminalShell: true }
-  try {
-    const settings = ctxLike && typeof ctxLike.get === 'function' ? ctxLike.get('settings') : undefined
-    const value = settings && typeof settings.get === 'function' ? settings.get(SETTINGS_NAMESPACE) : undefined
-    const v = value && typeof value === 'object' ? value : {}
-    return {
-      posixPaths: v.posixPaths === true,
-      virtualMounts: v.virtualMounts === true,
-      globSplit: v.globSplit === true,
-      errorDialect: v.errorDialect === true,
-      codePaths: v.codePaths === true,
-      // An old host without the key keeps the default (delegated agents covered).
-      subagentDialect: v.subagentDialect !== false,
-      // Default ON: a host without the key still gets the terminal adoption.
-      autoTerminalShell: v.autoTerminalShell !== false,
-      gitAutocrlf: v.gitAutocrlf === true,
-      bashPath: typeof v.bashPath === 'string' ? v.bashPath : '',
-    }
-  } catch {
-    return fallback
-  }
-}
-
-/**
- * Read the adoptSidebar switch (v0.15.0, default ON). Unlike posixPaths the
- * default is on, so only an explicit false disables the takeover.
- */
-export function readAdoptSidebar(ctxLike) {
-  try {
-    const settings = ctxLike && typeof ctxLike.get === 'function' ? ctxLike.get('settings') : undefined
-    const value = settings && typeof settings.get === 'function' ? settings.get(SETTINGS_NAMESPACE) : undefined
-    return !(value && value.adoptSidebar === false)
-  } catch {
-    return true
-  }
-}
-
-/**
- * Read the peer-dedupe switch (v0.25.0, default OFF) from the OLD era's
- * registered namespace — on dsh >= 0.1.7 the row Config is the surface and
- * `makeLiveReader` reads it directly. Never throws.
- */
-export function readSuppressPeerCordis(ctxLike) {
-  try {
-    const settings = ctxLike && typeof ctxLike.get === 'function' ? ctxLike.get('settings') : undefined
-    const value = settings && typeof settings.get === 'function' ? settings.get(SETTINGS_NAMESPACE) : undefined
-    return !!(value && value.suppressPeerCordis === true)
-  } catch {
-    return false
-  }
-}
-
-
 // Windows absolute path -> MSYS drive-root form, for rewriting PROSE in place
 // (v0.10.0). Quoted spaced paths ("C:\Program Files\Git") are matched whole; a bare
 // path stops at a closing punctuation and crosses a space ONLY into a token that
@@ -1470,10 +1415,6 @@ const SIDEBAR_NS = 'dsh-better-sidebar'
 const SIDEBAR_TRIES = 12
 const SIDEBAR_RETRY_MS = 1500
 
-// Owner scope of the gitbash-shell namespace once registered (shared with
-// the register callback so a late registration can reconcile + watch).
-let sidebarScope = undefined
-
 // Reconciler installed by adoptSidebarShell; a no-op until then.
 let reconcileSidebar = () => {}
 
@@ -1502,14 +1443,9 @@ function adoptSidebarShell(ctx, bashPath, readAdopt) {
     const settings = ctx.get('settings')
     if (!settings || typeof settings.update !== 'function') return null
     try {
-      // <=0.1.6: the sidebar registers a settings namespace and `get(ns)` reads
-      // it. >=0.1.7: that API is gone (the service exposes describe/update
-      // only), so the value comes from the row Config's projected form —
-      // without this branch the adoption was silently skipped on the new host.
-      if (typeof settings.get === 'function') {
-        const value = settings.get(SIDEBAR_NS)
-        return value && typeof value === 'object' && typeof value.terminalShell === 'string' ? value.terminalShell : ''
-      }
+      // The sidebar's value lives in ITS row Config, projected into the
+      // settings describe() list; the service exposes describe/update only
+      // (the old `get(ns)` reader died with dsh 0.1.6).
       if (typeof settings.describe === 'function') {
         const entry = settings.describe().find((row) => row !== null && typeof row === 'object' && row.ns === SIDEBAR_NS)
         const value = entry === undefined ? undefined : entry.value
@@ -1560,18 +1496,7 @@ function adoptSidebarShell(ctx, bashPath, readAdopt) {
   const run = () => {
     tried += 1
     const ok = reconcileSidebar(readAdopt())
-    if (ok) {
-      // The namespace scope may register after the settings service; hook
-      // the live watch once it exists (idempotent via the effect disposer).
-      if (sidebarScope && typeof sidebarScope.watch === 'function' && !run.watched) {
-        run.watched = true
-        try {
-          const off = sidebarScope.watch((next) => { reconcileSidebar(next && next.adoptSidebar !== false) })
-          ctx.effect(() => off, 'dsh-gitbash-shell: adoptSidebar watch (polling path)')
-        } catch { /* best effort */ }
-      }
-      return
-    }
+    if (ok) return
     if (tried < SIDEBAR_TRIES) {
       timer = setTimeout(run, SIDEBAR_RETRY_MS)
       return
@@ -1898,106 +1823,48 @@ export async function apply(ctx, config = {}) {
   // materialize: service present, 'active: true' on Windows, 'active: false'
   // where the bundle is installed but the platform stack stayed native.
   /* The explicit tier of the resolution chain, in its documented priority:
-     the `gitbash-executor` row's own config > the `gitbash-shell` row/settings
-     field > empty (= run the automatic chain). Both this layer and the
-     executor resolve from this same value, so an explicit answer is never
+     the `gitbash-executor` row's own config > the `gitbash-shell` row's
+     `bashPath` field > empty (= run the automatic chain). Both this layer and
+     the executor resolve from this same value, so an explicit answer is never
      substituted and never silently ignored.
-     (issue #11: the row config is where the reporter's workaround landed.) */
-  const configuredBashPath = effectiveConfiguredBashPath(executorConfiguredBashPath(ctx), settingsBashPath(ctx))
-  const bashResolution = resolveGitBashCached({ configured: configuredBashPath })
+     (issue #11: the row config is where the reporter's workaround landed.)
+     LAZY, never frozen (issue #13): at apply() time the loader store may not
+     hold the executor row yet — `loader.resolve()` throws and reads '' — and
+     the old settings-service detour could equally read '' before the service
+     was injected. A frozen '' then ran the automatic chain (which fails on
+     shimmed Git layouts) while the executor's own per-call lazy resolution
+     worked, i.e. the same boot gave OPPOSITE verdicts. Every consumer below
+     re-reads per use; the own row's value comes from apply()'s `config`
+     parameter (this row's live Config refs — volatile, so a settings edit is
+     visible on the next read without any listener). */
+  const readConfiguredBashPath = () => effectiveConfiguredBashPath(executorConfiguredBashPath(ctx), rowBashPath(config))
+  const readBashResolution = () => resolveGitBashCached({ configured: readConfiguredBashPath() })
   const gitBashCapability = {
     active: process.platform === 'win32',
     // Kept for existing consumers (peer plugins read `bashPath`): the resolved
     // interpreter. When resolution failed we report the explicit value (or the
     // historical default) so the ENOENT a consumer may hit names a real path —
-    // never a substitute shell.
-    bashPath: bashResolution.ok ? bashResolution.path : (configuredBashPath || DEFAULT_GIT_BASH),
+    // never a substitute shell. Getters keep the capability live (issue #13):
+    // a consumer reading it after the rows settle sees the settled verdict.
+    get bashPath() {
+      const resolution = readBashResolution()
+      return resolution.ok ? resolution.path : (readConfiguredBashPath() || DEFAULT_GIT_BASH)
+    },
     // Additive (v0.28.0): the full verdict, for the guided popup and peers.
-    ok: bashResolution.ok,
-    source: bashResolution.source,
-    configured: configuredBashPath,
-    tried: bashResolution.tried,
+    get ok() { return readBashResolution().ok },
+    get source() { return readBashResolution().source },
+    get configured() { return readBashResolution().configured },
+    get tried() { return readBashResolution().tried },
     downloadUrl: GIT_BASH_DOWNLOAD_URL,
   }
   const disposeGitBash = ctx.provide('gitBash', gitBashCapability)
   ctx.effect(() => disposeGitBash, 'dsh-gitbash-shell: gitBash capability')
 
-  // Era-aware live settings: NEW hosts read this plugin's own Config refs
-  // (volatile, re-read per dispatch/assembly), OLD hosts keep the registered
-  // namespace. Every consumer below already re-reads on every use, so a
-  // flipped knob lands on the next dispatch with zero wiring.
+  // Era-aware live settings: every consumer below re-reads the row Config
+  // refs on every use (volatile), so a flipped knob lands on the next
+  // dispatch with zero wiring.
   const liveSettings = makeLiveReader(ctx, config)
 
-  // ── settings namespace: the posixPaths switch (default ON, v0.1.0) — OLD
-  // hosts only; on dsh >= 0.1.7 the row Config above IS the surface.
-
-  // Served on the host so the Plugins tab pairs it with the browser card
-  // (the tab dispatches Host-served namespaces ∩ registered cards). Dynamic
-  // imports keep the zero-dependency smoke path importable; the schema MUST
-  // be a callable schemastery object (dsh-settings calls schema(merged)).
-  const legacySettings = (() => {
-    try {
-      const settings = ctx.get('settings')
-      return !!(settings && typeof settings.register === 'function')
-    } catch {
-      return false
-    }
-  })()
-  if (legacySettings) try {
-    ctx.inject(['settings'], (sctx) => {
-      Promise.resolve(import('@deepseek-ai/dsh-settings'))
-        .then((ds) => {
-          const settings = sctx && sctx.settings
-          if (!settings || typeof settings.register !== 'function') return
-          // The SAME copy the executor and the row Config were built from
-          // (issue #12): one resolution per process, so the two faces of this
-          // plugin can never disagree about the schema vocabulary.
-          if (!Schema) return
-          // Era probe: newer dsh register() takes a plain string; the older
-          // one accepted the branded helper — one call satisfies both.
-          const ns = typeof ds.settingsNamespace === 'function'
-            ? ds.settingsNamespace(SETTINGS_NAMESPACE)
-            : SETTINGS_NAMESPACE
-          const scope = settings.register(ns, Schema.object({
-            posixPaths: Schema.boolean().default(true),
-            virtualMounts: Schema.boolean().default(true),
-            globSplit: Schema.boolean().default(true),
-            errorDialect: Schema.boolean().default(true),
-            codePaths: Schema.boolean().default(true),
-            subagentDialect: Schema.boolean().default(true),
-            gitAutocrlf: Schema.boolean().default(true),
-            bashPath: Schema.string().default(''),
-            adoptSidebar: Schema.boolean().default(true),
-            // v0.29.0: official sidebar terminal adoption (default ON).
-            autoTerminalShell: Schema.boolean().default(true),
-            // v0.25.0: same switch as the row Config carries on dsh >= 0.1.7
-            // (the OLD era has no cross-namespace edits, so this namespace is
-            // the only side that can change it here).
-            suppressPeerCordis: Schema.boolean().default(false),
-          }))
-          sidebarScope = scope
-          console.log(`${TAG} settings namespace registered: ${SETTINGS_NAMESPACE} (posixPaths default on, adoptSidebar default on)`)
-          // A late register (settings service up after the adoption polling
-          // finished) still reconciles once, and the live watch flips the
-          // takeover when the user toggles the card switch.
-          try {
-            if (typeof scope?.watch === 'function') {
-              const off = scope.watch((next) => { reconcileSidebar(next && next.adoptSidebar !== false) })
-              ctx.effect(() => off, 'dsh-gitbash-shell: adoptSidebar watch')
-            }
-            reconcileSidebar(readAdoptSidebar(ctx))
-          } catch (error) {
-            console.log(`${TAG} adoptSidebar watch wiring failed: ${error?.message ?? error}`)
-          }
-        })
-        .catch((error) => {
-          console.log(`${TAG} settings namespace registration FAILED: ${error && error.stack || String(error)}`)
-        })
-    })
-  } catch (error) {
-    console.log(`${TAG} settings inject wiring failed: ${error?.message ?? error}`)
-  }
-
   // ── official shell-env fact: DSH_PATH_DIALECT (Windows only, gated; v0.11.0) ──
   // dsh-shell-env owns the model-visible $DSH_* facts (host-plane service;
   // the web composition injects it and publishes DSH_WEB_URL beside the
@@ -2143,7 +2010,7 @@ export async function apply(ctx, config = {}) {
           // untouched and the result metadata is not echoed back in MSYS form.
           if (dialect.posixPaths && dialectApplies(dialect, exec && exec.agent)) {
             echo = true
-            const env = dialect.virtualMounts ? buildTranslateEnv(configuredBashPath) : null
+            const env = dialect.virtualMounts ? buildTranslateEnv(readConfiguredBashPath()) : null
             echoEnv = env
             if (exec && exec.arguments && typeof exec.arguments === 'object') {
               const translated = translateDispatch(exec, dialect, env)
@@ -2198,7 +2065,7 @@ export async function apply(ctx, config = {}) {
           if (!dialectApplies(dialect, exec && exec.agent)) return next()
           if (dialect.posixPaths && dialect.errorDialect && exec && result && typeof result === 'object'
             && result.isError === true && Array.isArray(result.content)) {
-            const env = dialect.virtualMounts ? buildTranslateEnv(configuredBashPath) : null
+            const env = dialect.virtualMounts ? buildTranslateEnv(readConfiguredBashPath()) : null
             if (exec.name === 'run_code') {
               // paths only — the /dev/null hint is for file tools
               const content = rewriteErrorContent(result.content, { nulHint: false, env })
@@ -2272,14 +2139,59 @@ export async function apply(ctx, config = {}) {
   // Now the boot log names the value, the whole probe chain and where to fix
   // it, and the client half reads the same verdict over HTTP to raise the
   // guided popup. Nothing here substitutes another shell — by design.
-  console.log(TAG + ' bash resolution: ' + bashResolutionReport(bashResolution).split('\n').join('\n' + TAG + ' '))
+  //
+  // issue #13: the boot verdict may legitimately be wrong for a few seconds —
+  // at apply() time the loader store may not hold the executor row yet, so
+  // the explicit tier reads '' while the executor's own per-call lazy
+  // resolution succeeds. A FAILURE with an EMPTY configured value is therefore
+  // not final: poll briefly for the explicit tier to appear as the rows
+  // settle, print the settled verdict when it changes, and notify the
+  // adoptions below (official terminal / better-sidebar) through
+  // `onBashSettled`. A failure with a NON-empty configured value IS final (the
+  // user's explicit answer was rejected), and so is any success.
+  let settledBashResolution = null
+  const bashSettleWaiters = []
+  const onBashSettled = (listener) => {
+    if (settledBashResolution !== null) listener(settledBashResolution)
+    else bashSettleWaiters.push(listener)
+  }
+  const settleBashResolution = (resolution) => {
+    settledBashResolution = resolution
+    for (const listener of bashSettleWaiters.splice(0)) {
+      try { listener(resolution) } catch { /* a waiter never blocks settling */ }
+    }
+  }
+  const printBashResolution = (phase, resolution) => {
+    console.log(TAG + ' bash resolution' + (phase === '' ? '' : ' (' + phase + ')') + ': '
+      + bashResolutionReport(resolution).split('\n').join('\n' + TAG + ' '))
+  }
+  const bootBashResolution = readBashResolution()
+  printBashResolution('boot', bootBashResolution)
+  // Non-win32 hosts settle immediately: resolution failure there is the
+  // designed state (nothing consumes the capability), so no poll.
+  if (bootBashResolution.ok || bootBashResolution.configured !== '' || process.platform !== 'win32') {
+    settleBashResolution(bootBashResolution)
+  } else {
+    let ticks = 0
+    const timer = setInterval(() => {
+      ticks += 1
+      if (readConfiguredBashPath() === '' && ticks < 20) return // rows still mounting
+      clearInterval(timer)
+      const settled = readBashResolution()
+      if (settled.ok || settled.configured !== '') printBashResolution('settled', settled)
+      settleBashResolution(settled)
+    }, 250)
+    ctx.effect(() => () => clearInterval(timer), 'dsh-gitbash-shell: bash resolution settle poll')
+  }
   if (process.platform === 'win32') {
     try {
       ctx.inject(['webServer'], (wctx) => {
         try {
           const route = '/dsh-gitbash-shell/api/status'
           const read = () => {
-            const resolution = resolveGitBashCached({ configured: configuredBashPath, fresh: true })
+            // LIVE re-read (issue #13): the popup must see what the executor
+            // actually resolves NOW, not a value frozen at apply() time.
+            const resolution = resolveGitBashCached({ configured: readConfiguredBashPath(), fresh: true })
             return {
               ok: resolution.ok,
               platform: process.platform,
@@ -2342,7 +2254,7 @@ export async function apply(ctx, config = {}) {
             send(res, 403, { error: 'forbidden', reason: fence.reason })
             return
           }
-          const env = buildTranslateEnv(configuredBashPath)
+          const env = buildTranslateEnv(readConfiguredBashPath())
           // One line per read: the browser half fetches this once per page load,
           // so its presence in the log is how a user can tell the rescue is live.
           console.log(TAG + ' path map read by ' + (req.socket && req.socket.remoteAddress ? req.socket.remoteAddress : '?'))
@@ -2468,10 +2380,14 @@ export async function apply(ctx, config = {}) {
           attempts += 1
           let result
           try {
+            // LAZY re-read per attempt (issue #13): the first try may run
+            // before the loader store holds the executor row, when the
+            // resolution legitimately still reads ''.
+            const resolution = readBashResolution()
             result = await adoptTerminalShell(editorCtx.configEditor, {
               platform: process.platform,
               enabled: liveSettings.autoTerminalShell(),
-              resolved: bashResolution.ok ? bashResolution.path : '',
+              resolved: resolution.ok ? resolution.path : '',
             })
           } catch (error) {
             // adoptTerminalShell reports expected conditions itself; reaching
@@ -2496,9 +2412,20 @@ export async function apply(ctx, config = {}) {
   // The sidebar resolves its terminal shell through the settings seam per
   // open; adopt it through that seam (see adoptSidebarShell for rationale).
   // Disable with `betterSidebarShell: false` in the plugin row config.
+  // Rides the settle notification (issue #13): a boot-time failure with an
+  // empty explicit tier may still settle into a success once the loader rows
+  // mount, and the adoption then happens without a restart.
   if (config.betterSidebarShell !== false && process.platform === 'win32') {
-    if (bashResolution.ok) adoptSidebarShell(ctx, bashResolution.path, () => liveSettings.adoptSidebar())
-    else console.log(TAG + ' sidebar terminal adoption skipped: no Git Bash resolved (nothing is substituted)')
+    let sidebarAdopted = false
+    onBashSettled((resolution) => {
+      if (resolution.ok) {
+        if (sidebarAdopted) return
+        sidebarAdopted = true
+        adoptSidebarShell(ctx, resolution.path, () => liveSettings.adoptSidebar())
+        return
+      }
+      console.log(TAG + ' sidebar terminal adoption skipped: no Git Bash resolved (nothing is substituted)')
+    })
   }
 
   // ── era split: declarative registration on dsh >= 0.1.7 ──────────────────
@@ -2516,4 +2443,4 @@ export async function apply(ctx, config = {}) {
 
 }
 // Test surface: pure helpers, no Cordis context required.
-export const _internal = { PRESET_IDS, PEER_COVERED_PRESET_ID, PEER_CAPABILITY, isDelegatedAgent, dialectApplies, PEER_PYTHON_FIELD, PEER_PYTHON_BACKEND_FIELD, peerFact, peerBackend, pythonBackendActive, effectivePresetIds, readSuppressPeerCordis, translateDispatch, translateMsysPath, translatePathArguments, rewriteCodePaths, scanCodeLiterals, programPrelude, translateGlobArguments, buildTranslateEnv, rewriteErrorContent, rewriteErrorMessage, rewriteFailureMessage, msysEcho, driveToMsys, pathEcho, ERROR_CONTENT_TOOLS, readPosixPaths, readAdoptSidebar, readDialectSettings, windowsToMsys, rewriteResultPaths, adoptSidebarShell, MARKER_FILE, classify, hashTree, installRegisterShim }
+export const _internal = { PRESET_IDS, PEER_COVERED_PRESET_ID, PEER_CAPABILITY, isDelegatedAgent, dialectApplies, PEER_PYTHON_FIELD, PEER_PYTHON_BACKEND_FIELD, peerFact, peerBackend, pythonBackendActive, effectivePresetIds, translateDispatch, translateMsysPath, translatePathArguments, rewriteCodePaths, scanCodeLiterals, programPrelude, translateGlobArguments, buildTranslateEnv, rewriteErrorContent, rewriteErrorMessage, rewriteFailureMessage, msysEcho, driveToMsys, pathEcho, ERROR_CONTENT_TOOLS, windowsToMsys, rewriteResultPaths, adoptSidebarShell, MARKER_FILE, classify, hashTree, installRegisterShim }

package/src/shell.js

@@ -316,19 +316,16 @@ export class GitBashSandboxExecutor extends SandboxBashExecutor {
    * @returns {object} the request with the parity facts merged in
    */
   /**
-   * The plugin row's live dialect settings, across eras. dsh 0.1.7 replaced the
-   * settings namespace API: the service still exists but exposes only
-   * `describe()` / `update()` — `get(ns)` is gone — so the old read silently
-   * returned undefined on the new host and the Linux-parity env below never
-   * applied. The new era reads the row Config's projected values from the form
-   * descriptors (the same read dsh-agent-lang uses for the `locale` namespace).
+   * The plugin row's live dialect settings. The settings service exposes only
+   * `describe()` / `update()`, so the row Config's projected values come from
+   * the form descriptors (the same read dsh-agent-lang uses for the `locale`
+   * namespace).
    * @returns the row's settings object, or undefined when unavailable.
    */
   dialectSettings() {
     try {
       const settings = this.ctx && typeof this.ctx.get === 'function' ? this.ctx.get('settings') : undefined
       if (settings === undefined || settings === null) return undefined
-      if (typeof settings.get === 'function') return settings.get(SETTINGS_NAMESPACE)
       if (typeof settings.describe === 'function') {
         const entry = settings.describe().find((row) => row !== null && typeof row === 'object' && row.ns === SETTINGS_NAMESPACE)
         return entry === undefined ? undefined : entry.value