docs(notes): propose plugin market index format

.agents/notes/proposed/feature/2026-10-02-plugin-market-index-format.i18n.yaml

@@ -0,0 +1,40 @@
+# Bilingual-pair consistency record for 2026-10-02-plugin-market-index-format.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write .agents/notes/proposed/feature/2026-10-02-plugin-market-index-format.md
+/agent-note-plugin-market-index-format:
+  en: 8da20a8601d7cb29
+  zh: 74368eed4d4b8e7c
+/agent-note-plugin-market-index-format/problem:
+  en: 655b61fab8d7dbb2
+  zh: 56c0840347ac159f
+/agent-note-plugin-market-index-format/proposal:
+  en: 4639cf45ff00b873
+  zh: 1b51054085e2d57e
+/agent-note-plugin-market-index-format/proposal/example:
+  en: cf54551add808913
+  zh: 55180dda6db75d53
+/agent-note-plugin-market-index-format/proposal/root-fields:
+  en: 85fe18cf507b0ca1
+  zh: 2b117e7acc907099
+/agent-note-plugin-market-index-format/proposal/entry-fields:
+  en: 3d9bb67ea136a8d4
+  zh: 0ae1aa6c119f7dd2
+/agent-note-plugin-market-index-format/proposal/install-arguments:
+  en: 7e1f197c5607a732
+  zh: 7acb7da2785e27aa
+/agent-note-plugin-market-index-format/proposal/generator-obligations:
+  en: 2c1ad238db970c8c
+  zh: f929bcbd48bc1fa5
+/agent-note-plugin-market-index-format/proposal/reader-rules:
+  en: e2d5a290fb7bffa8
+  zh: 933d628859c8bea8
+/agent-note-plugin-market-index-format/alternatives-considered:
+  en: d76bfb409881a925
+  zh: b0f3bdbca166e096
+/agent-note-plugin-market-index-format/acceptance-criteria:
+  en: 013457664b0b4f21
+  zh: c87086fab3ae788e
+/agent-note-plugin-market-index-format/risks:
+  en: be9d4e489b431090
+  zh: e31fe68ecfde91d1

.agents/notes/proposed/feature/2026-10-02-plugin-market-index-format.md

@@ -0,0 +1,172 @@
+# Agent Note: Plugin market index format
+
+Status: proposed
+
+English | [中文](2026-10-02-plugin-market-index-format.zh.md)
+
+## Problem
+
+DSH installs third-party bundles only from a spec the user already knows: an npm name, a Git URL, a tarball, or a local path. Nothing lets a user browse installable bundles. No official market exists, and one may be added later, so a market mechanism must work with indexes that third parties publish.
+
+The smallest possible index is a list of npm names or Git repository URLs, one per line. It identifies every plugin, but a client rendering it must fetch each package's manifest, locale files, and icon before it can show a list. A list page that issues one or more requests per row is slow, fails partially, and puts metadata resolution in every client.
+
+An index must therefore carry everything a list page displays: localized title and description, icon, version, compatibility, and publish time. Markets also want to publish their own data, such as categories, tags, downloads, and ratings, without DSH knowing what those values mean.
+
+## Proposal
+
+Separate the **index** from the **index generator**. DSH defines and reads one JSON index format. How an index is produced, and from which source list, belongs to the generator. DSH's reader, its Discover page, and a reference generator are separate changes that consume this format.
+
+### Example
+
+```json
+{
+  "format": 1,
+  "title": { "en": "Example Market", "zh": "示例市场" },
+  "description": { "en": "Community DSH bundles", "zh": "社区 DSH bundle" },
+  "metadata": {
+    "categories": {
+      "productivity": { "title": { "en": "Productivity", "zh": "效率" } }
+    },
+    "labels": {
+      "official": { "title": { "en": "Official", "zh": "官方" } }
+    },
+    "sortKeys": {
+      "downloads": { "title": { "en": "Downloads", "zh": "下载量" }, "order": "desc" },
+      "rating": { "title": { "en": "Rating", "zh": "评分" }, "order": "desc" }
+    }
+  },
+  "plugins": [
+    {
+      "name": "@deepseek-ai/dsh-experimental-auto-review",
+      "version": "0.2.0-rc.2",
+      "publishTimestamp": 1790476800,
+      "source": { "type": "npm" },
+      "peerDependencies": { "@deepseek-ai/dsh-agent": "0.2.0-rc.2" },
+      "title": { "en": "Auto Review", "zh": "自动审查" },
+      "description": { "en": "Per-tool LLM authorization review", "zh": "逐工具 LLM 授权审查" },
+      "icon": "icons/auto-review.svg",
+      "metadata": {
+        "category": "productivity",
+        "labels": ["official"],
+        "sortKeys": { "downloads": 12034, "rating": 4.6 }
+      }
+    },
+    {
+      "name": "dsh-plugin-foo",
+      "version": "1.0.0",
+      "publishTimestamp": 1788000000,
+      "source": {
+        "type": "git",
+        "url": "https://github.com/author/dsh-plugins",
+        "commit": "3f9c2e1d8a4b6c0e7f1a2b3c4d5e6f708192a3b4",
+        "path": "packages/foo"
+      },
+      "title": "Foo",
+      "icon": "https://example.com/foo.png"
+    }
+  ]
+}
+```
+
+`LocalizedText` below is the `LocalizedText` type of [`dsh-package-manifest`](../../../../packages/util/package-manifest/src/types.ts): either a string, or an object whose keys are lowercase language ids matching `^[a-z]{2,8}(-[a-z0-9]{1,8})*$`, whose members are strings, and which contains `en`. Every string contains at least one non-whitespace character.
+
+### Root fields
+
+| Field | Required | Rule |
+|---|---|---|
+| `format` | yes | Integer `1`. |
+| `title` | yes | `LocalizedText` naming the market. |
+| `description` | no | `LocalizedText`. |
+| `metadata` | no | Object holding the three declaration maps below. |
+| `metadata.categories` | no | Object mapping category id → `{ title: LocalizedText }`. |
+| `metadata.labels` | no | Object mapping label id → `{ title: LocalizedText }`. |
+| `metadata.sortKeys` | no | Object mapping sort-key id → `{ title: LocalizedText, order: "asc" \| "desc" }`; `order` is the initial sort direction. |
+| `plugins` | yes | Array of entries, possibly empty; its order is the index's default ordering. |
+
+Category, label, and sort-key ids are non-empty strings. Readers look ids up as own properties, so ids such as `constructor` have no special meaning.
+
+### Entry fields
+
+| Field | Required | Rule |
+|---|---|---|
+| `name` | yes | Package name matching `^(@[a-z0-9][a-z0-9._~-]*/)?[a-z0-9][a-z0-9._~-]*$`, at most 214 characters, unique within the index. |
+| `version` | yes | Exact version in the SemVer 2.0.0 grammar, with optional prerelease and build metadata and without a `v` prefix or whitespace. |
+| `publishTimestamp` | yes | Integer Unix timestamp in seconds, in `[0, 10^11)`. |
+| `source` | yes | Where `version` is installed from; see below. |
+| `peerDependencies` | no | Object mapping a package name that is `@deepseek-ai/dsh` or starts with `@deepseek-ai/dsh-` to a non-empty range string that does not start with `workspace:`. |
+| `title` | no | `LocalizedText`; a reader displays `name` when absent. |
+| `description` | no | `LocalizedText`. |
+| `icon` | no | Either `data:<type>;base64,<payload>`, where `<type>` is `image/svg+xml`, `image/png`, `image/jpeg`, or `image/webp`, `<payload>` is canonically padded base64, and the decoded payload is at most 256 KiB; or a URL reference whose resolution against the index URL is an `https:` URL or has the index URL's origin. |
+| `metadata` | no | Object holding the three values below. |
+| `metadata.category` | no | One declared category id. |
+| `metadata.labels` | no | Array of distinct declared label ids. |
+| `metadata.sortKeys` | no | Object mapping a declared sort-key id → finite number. |
+
+`source` takes one of two forms, and readers reject any other `type`:
+
+- `{ "type": "npm", "registry"?: string }`. `registry` is an `http:` or `https:` URL without credentials, query, or fragment.
+- `{ "type": "git", "url": string, "commit": string, "path"?: string }`. `url` is a canonical `https:` URL (equal to its WHATWG URL serialization) with at least two non-empty path segments, without credentials, query, or fragment, and not ending in `.tgz` or `.tar.gz`. `commit` is a lowercase 40-hex-digit SHA. `path` is a `/`-separated relative directory whose segments contain only ASCII letters, digits, and `._@+-`, and are neither `.` nor `..`; absent means the repository root.
+
+### Install arguments
+
+A client installs an entry with exactly these pnpm arguments:
+
+- npm: the spec `<name>@<version>`, asking `registry` first when present and the client's configured registry otherwise. A client may fall back to its other configured registries; any of them installs the same exact version.
+- git: the spec `git+<url>.git#<commit>`, without doubling a trailing `.git`, followed by `&path:/<path>` when `path` is present. The `git+` prefix makes pnpm treat URLs with more than two path segments, such as GitLab subgroups, as Git repositories.
+
+### Generator obligations
+
+A reader cannot verify these rules; a generator that violates them publishes a misleading index.
+
+- `name` and `version` equal the package manifest of the installed source.
+- `publishTimestamp` is the registry publish time of `version` for npm sources and the committer time of `commit` for Git sources.
+- `peerDependencies` copies the manifest's DSH peer ranges after publication rewriting. A Git source whose manifest keeps a `workspace:` range omits that member, because installation treats such a range as the running DSH version.
+- The package declares `dsh.bundle`. Installation independently refuses a package without a bundle patch.
+- `title`, `description`, and `icon` come from the package's locale `meta` fields, manifest fields, and icon, using the rules for installed plugin display metadata.
+
+### Reader rules
+
+A reader rejects the whole index when the document violates any rule in Root fields, Entry fields, or the `source` forms, including an undeclared category, label, or sort-key reference, a duplicate `name`, or a `format` other than `1`. Each such defect is a generator bug, and dropping entries silently would hide it. Readers may bound the document size.
+
+A reader ignores members that this note does not define, at every level except `source.type`. Format 1 can then gain optional members without breaking existing readers; a change that existing readers would misinterpret uses a new `format` value.
+
+Categories, labels, and sort keys are opaque: a reader filters and sorts by them, displays their `title`, and never interprets an id. Readers display declarations in the order of their localized `title`. When sorting entries, an entry without a value for the selected sort key follows all entries with a value in either direction, and equal values keep the index order.
+
+A reader evaluates compatibility from `peerDependencies` with the same rule as DSH's installation check, so an invalid range makes the entry incompatible.
+
+## Alternatives considered
+
+**A plain list of npm names or repository URLs.** It identifies every plugin but forces one or more requests per row before a list renders, which is the cost this format removes.
+
+**One opaque install spec string per entry.** A reader cannot verify that a free-form spec is pinned. A structured `source` with an exact `version`, or a `commit`, lets the reader verify pinning and lets the client build the spec it installs.
+
+**Installing the latest version instead of a pinned one.** The installed build could then differ from the metadata the list displayed, and a package release would change what an unchanged index installs.
+
+**Inline icons only.** A list without extra requests needs inline icons, but 256 KiB of raw bytes is about 341 KiB as base64, so a 100-entry index could reach about 35 MB. URL icons trade extra requests, and disclosure of the user's IP address to the image host, for a small index.
+
+**`engines.dsh` as the compatibility field.** DSH's installation check reads DSH `peerDependencies`, not `engines.dsh`. A separate field could mark an entry compatible that installation refuses, or the reverse.
+
+**Opaque sort values for time, including ISO date strings.** Publish time has fixed semantics that clients format and sort, so it is a typed field. Without time, sort values can be numbers only, which needs no per-key value-type rule.
+
+**Root-level `labels` and `sortKeys`, and an entry field named `sort`.** Grouping market-defined declarations and values under `metadata` at both levels, with matching member names, separates them from fields that clients interpret.
+
+**Declaration order as display order.** JavaScript reorders integer-like object keys, so declaration order would need either an id pattern or array declarations. Clients sort declarations by their localized title instead.
+
+**Allowing `workspace:` peer ranges.** Installation maps them to the running DSH version, so every runtime would appear compatible; omitting them states the same result explicitly.
+
+**Rejecting unknown members.** Every optional addition would then require a new `format` value and break every deployed reader.
+
+## Acceptance criteria
+
+- A validator accepts the example above and rejects one violation of each rule in Root fields, Entry fields, and the `source` forms, with a diagnostic naming the JSON path.
+- Install arguments built from both example entries are accepted by DSH's install-spec parser and by pnpm.
+- A validator ignores unknown members at every level.
+- Compatibility computed from `peerDependencies` matches DSH's installation check for the same manifest.
+
+## Risks
+
+- An index is unsigned. A market can use a misleading `title`, such as one claiming to be official; clients must show the index URL and each entry's `source`.
+- A Git entry's `name`, `version`, and `peerDependencies` are claims about the repository. A repository can claim any name, including an `@deepseek-ai/dsh-` name, and the installed manifest decides what is actually installed.
+- URL icons disclose the user's IP address to image hosts.
+- Pinned versions stay stale until the index is regenerated.
+- Market text reaches users, and models through any client tool that lists entries, without review by DSH.

.agents/notes/proposed/feature/2026-10-02-plugin-market-index-format.zh.md

@@ -0,0 +1,172 @@
+# Agent Note: 插件市场索引格式
+
+Status: proposed
+
+[English](2026-10-02-plugin-market-index-format.md) | 中文
+
+## 问题
+
+DSH 只能从用户已知的 spec 安装第三方组合包（bundle）：npm 包名、Git URL、tarball 或本地路径。用户无法浏览可安装的组合包。目前没有官方市场，以后可能会增加官方市场，因此市场机制必须支持第三方发布的索引。
+
+最小的索引是一份 npm 包名或 Git 仓库 URL 列表，每行一项。它能标识每个插件，但客户端渲染列表前必须为每个包获取 manifest（元数据清单）、语言文件和图标。列表页面每行发出一个或多个请求时，加载慢、可能部分失败，并且每个客户端都要实现元数据解析。
+
+因此，索引必须包含列表页面显示的全部内容：本地化标题和描述、图标、版本、兼容性和发布时间。市场还需要发布自己的数据，例如分类、标签、下载量和评分，而 DSH 不需要理解这些值的含义。
+
+## 提案
+
+将**索引**与**索引生成器**分开。DSH 定义并读取一种 JSON 索引格式。索引如何生成、基于哪份源列表生成，由生成器负责。DSH 的读取器、Discover 页面和参考生成器是使用此格式的独立变更。
+
+### 示例
+
+```json
+{
+  "format": 1,
+  "title": { "en": "Example Market", "zh": "示例市场" },
+  "description": { "en": "Community DSH bundles", "zh": "社区 DSH bundle" },
+  "metadata": {
+    "categories": {
+      "productivity": { "title": { "en": "Productivity", "zh": "效率" } }
+    },
+    "labels": {
+      "official": { "title": { "en": "Official", "zh": "官方" } }
+    },
+    "sortKeys": {
+      "downloads": { "title": { "en": "Downloads", "zh": "下载量" }, "order": "desc" },
+      "rating": { "title": { "en": "Rating", "zh": "评分" }, "order": "desc" }
+    }
+  },
+  "plugins": [
+    {
+      "name": "@deepseek-ai/dsh-experimental-auto-review",
+      "version": "0.2.0-rc.2",
+      "publishTimestamp": 1790476800,
+      "source": { "type": "npm" },
+      "peerDependencies": { "@deepseek-ai/dsh-agent": "0.2.0-rc.2" },
+      "title": { "en": "Auto Review", "zh": "自动审查" },
+      "description": { "en": "Per-tool LLM authorization review", "zh": "逐工具 LLM 授权审查" },
+      "icon": "icons/auto-review.svg",
+      "metadata": {
+        "category": "productivity",
+        "labels": ["official"],
+        "sortKeys": { "downloads": 12034, "rating": 4.6 }
+      }
+    },
+    {
+      "name": "dsh-plugin-foo",
+      "version": "1.0.0",
+      "publishTimestamp": 1788000000,
+      "source": {
+        "type": "git",
+        "url": "https://github.com/author/dsh-plugins",
+        "commit": "3f9c2e1d8a4b6c0e7f1a2b3c4d5e6f708192a3b4",
+        "path": "packages/foo"
+      },
+      "title": "Foo",
+      "icon": "https://example.com/foo.png"
+    }
+  ]
+}
+```
+
+下文中的 `LocalizedText` 即 [`dsh-package-manifest`](../../../../packages/util/package-manifest/src/types.ts) 中的 `LocalizedText` 类型：字符串，或者是满足以下条件的对象：键为匹配 `^[a-z]{2,8}(-[a-z0-9]{1,8})*$` 的小写语言 id，成员均为字符串，并且包含 `en`。每个字符串至少包含一个非空白字符。
+
+### 根字段
+
+| 字段 | 必填 | 规则 |
+|---|---|---|
+| `format` | 是 | 整数 `1`。 |
+| `title` | 是 | 市场名称，类型为 `LocalizedText`。 |
+| `description` | 否 | `LocalizedText`。 |
+| `metadata` | 否 | 包含下列三个声明映射的对象。 |
+| `metadata.categories` | 否 | 对象，将分类 id 映射为 `{ title: LocalizedText }`。 |
+| `metadata.labels` | 否 | 对象，将标签 id 映射为 `{ title: LocalizedText }`。 |
+| `metadata.sortKeys` | 否 | 对象，将排序键 id 映射为 `{ title: LocalizedText, order: "asc" \| "desc" }`；`order` 是初始排序方向。 |
+| `plugins` | 是 | 条目数组，可以为空；数组顺序即索引的默认排序。 |
+
+分类、标签和排序键的 id 均为非空字符串。读取器按自有属性查找 id，因此 `constructor` 等 id 没有特殊含义。
+
+### 条目字段
+
+| 字段 | 必填 | 规则 |
+|---|---|---|
+| `name` | 是 | 匹配 `^(@[a-z0-9][a-z0-9._~-]*/)?[a-z0-9][a-z0-9._~-]*$` 的包名，长度不超过 214 个字符，在索引内唯一。 |
+| `version` | 是 | 符合 SemVer 2.0.0 语法的精确版本，可带先行版本号和版本编译信息，不带 `v` 前缀，不含空白字符。 |
+| `publishTimestamp` | 是 | 以秒为单位的整数 Unix 时间戳，取值范围为 `[0, 10^11)`。 |
+| `source` | 是 | `version` 的安装来源；见下文。 |
+| `peerDependencies` | 否 | 对象，将名为 `@deepseek-ai/dsh` 或以 `@deepseek-ai/dsh-` 开头的包名映射为不以 `workspace:` 开头的非空范围字符串。 |
+| `title` | 否 | `LocalizedText`；缺省时读取器显示 `name`。 |
+| `description` | 否 | `LocalizedText`。 |
+| `icon` | 否 | 以下两种形式之一：`data:<type>;base64,<payload>`，其中 `<type>` 为 `image/svg+xml`、`image/png`、`image/jpeg` 或 `image/webp`，`<payload>` 是按规范填充的 base64，解码后的载荷不超过 256 KiB；或者 URL 引用，它相对于索引 URL 解析的结果是 `https:` URL，或与索引 URL 同源。 |
+| `metadata` | 否 | 包含下列三个值的对象。 |
+| `metadata.category` | 否 | 一个已声明的分类 id。 |
+| `metadata.labels` | 否 | 由互不相同的已声明标签 id 组成的数组。 |
+| `metadata.sortKeys` | 否 | 对象，将已声明的排序键 id 映射为有限数值。 |
+
+`source` 采用以下两种形式之一，读取器拒绝其他任何 `type`：
+
+- `{ "type": "npm", "registry"?: string }`。`registry` 是不含凭据、查询或片段的 `http:` 或 `https:` URL。
+- `{ "type": "git", "url": string, "commit": string, "path"?: string }`。`url` 是规范的 `https:` URL（等于其 WHATWG URL 序列化结果），至少包含两个非空路径段，不含凭据、查询或片段，且不以 `.tgz` 或 `.tar.gz` 结尾。`commit` 是 40 位小写十六进制 SHA。`path` 是以 `/` 分隔的相对目录，各段只包含 ASCII 字母、数字和 `._@+-`，且不是 `.` 或 `..`；缺省表示仓库根目录。
+
+### 安装参数
+
+客户端安装条目时恰好使用以下 pnpm 参数：
+
+- npm：spec 为 `<name>@<version>`；存在 `registry` 时先询问该 registry，否则先询问客户端所配置的 registry。客户端可以回退到它配置的其他 registry；其中任何一个安装的都是同一个精确版本。
+- git：spec 为 `git+<url>.git#<commit>`，`url` 已以 `.git` 结尾时不重复添加；存在 `path` 时在其后追加 `&path:/<path>`。`git+` 前缀使 pnpm 将路径段多于两个的 URL（例如 GitLab 子组）视为 Git 仓库。
+
+### 生成器义务
+
+读取器无法验证以下规则；违反这些规则的生成器会发布误导性的索引。
+
+- `name` 和 `version` 与所安装来源中的包 manifest 一致。
+- 对于 npm 来源，`publishTimestamp` 是 `version` 在 registry 中的发布时间；对于 Git 来源，它是 `commit` 的提交者时间。
+- `peerDependencies` 复制 manifest 中经发布改写后的 DSH peer 范围。Git 来源的 manifest 保留 `workspace:` 范围时，生成器省略该成员，因为安装时会将此类范围视为当前运行的 DSH 版本。
+- 包声明了 `dsh.bundle`。安装时也会独立拒绝没有组合包 patch 的包。
+- `title`、`description` 和 `icon` 来自包语言文件中的 `meta` 字段、manifest 字段和图标，并采用已安装插件显示元数据的规则。
+
+### 读取器规则
+
+文档违反根字段、条目字段或 `source` 形式中的任何规则时，读取器拒绝整个索引，包括引用了未声明的分类、标签或排序键，`name` 重复，以及 `format` 不是 `1`。每个此类缺陷都是生成器 bug，静默丢弃条目会掩盖它。读取器可以限制文档大小。
+
+读取器在除 `source.type` 之外的每一层都忽略本 Agent Note 未定义的成员。这样格式 1 可以增加可选成员而不破坏现有读取器；现有读取器会误解的变更使用新的 `format` 值。
+
+分类、标签和排序键对读取器不透明：读取器按它们筛选和排序，显示其 `title`，从不解释 id 的含义。读取器按本地化 `title` 对声明排序后显示。对条目排序时，无论排序方向如何，没有所选排序键值的条目都排在所有有值的条目之后，值相同的条目保持索引顺序。
+
+读取器按照与 DSH 安装检查相同的规则，根据 `peerDependencies` 评估兼容性，因此无效范围会使条目不兼容。
+
+## 考虑过的替代方案
+
+**纯 npm 包名或仓库 URL 列表。** 它能标识每个插件，但列表渲染前每行需要一个或多个请求，而此格式正是为消除这一开销而设计。
+
+**每个条目使用一个不透明的安装 spec 字符串。** 读取器无法验证自由格式的 spec 是否固定了版本。结构化的 `source` 配合精确的 `version` 或 `commit`，读取器可以验证版本固定，客户端可以构建要安装的 spec。
+
+**安装最新版本而不是固定版本。** 这样安装的构建可能与列表显示的元数据不一致，并且包发布新版本会改变未修改的索引所安装的内容。
+
+**只允许内联图标。** 不发额外请求的列表需要内联图标，但 256 KiB 原始字节编码为 base64 后约为 341 KiB，因此 100 个条目的索引可能达到约 35 MB。URL 图标以额外请求和向图片主机暴露用户 IP 地址为代价，换取较小的索引。
+
+**使用 `engines.dsh` 作为兼容性字段。** DSH 安装检查读取的是 DSH `peerDependencies`，而不是 `engines.dsh`。单独的字段可能把安装会拒绝的条目标记为兼容，反之亦然。
+
+**用不透明排序值表示时间，包括 ISO 日期字符串。** 发布时间具有固定语义，客户端会对其格式化和排序，因此它是一个有类型的字段。排除时间后，排序值可以只用数值，无需为每个键规定值类型。
+
+**根级 `labels` 和 `sortKeys`，以及名为 `sort` 的条目字段。** 在两个层级都把市场定义的声明和值归入 `metadata`，并使用对应的成员名，可以将它们与客户端解释的字段区分开。
+
+**以声明顺序作为显示顺序。** JavaScript 会重排类整数的对象键，因此要保留声明顺序，就需要限定 id 格式或改用数组声明。客户端改为按本地化标题对声明排序。
+
+**允许 `workspace:` peer 范围。** 安装时会将此类范围映射为当前运行的 DSH 版本，因此所有运行时都会显示为兼容；省略这些范围会明确表达同一结果。
+
+**拒绝未知成员。** 这样每次增加可选成员都需要新的 `format` 值，并会破坏所有已部署的读取器。
+
+## 验收标准
+
+- 校验器接受上面的示例，并对根字段、条目字段和 `source` 形式中的每条规则各拒绝一个违例，诊断信息给出对应的 JSON 路径。
+- 根据两个示例条目构建的安装参数可被 DSH 的安装 spec 解析器和 pnpm 接受。
+- 校验器在每一层都忽略未知成员。
+- 根据 `peerDependencies` 计算的兼容性与 DSH 对同一 manifest 的安装检查结果一致。
+
+## 风险
+
+- 索引没有签名。市场可能使用误导性的 `title`，例如声称自己是官方市场；客户端必须显示索引 URL 以及每个条目的 `source`。
+- Git 条目的 `name`、`version` 和 `peerDependencies` 是关于仓库的声明。仓库可以声明任意名称，包括 `@deepseek-ai/dsh-` 名称，实际安装的内容由已安装的 manifest 决定。
+- URL 图标会向图片主机暴露用户的 IP 地址。
+- 固定版本在索引重新生成之前一直保持陈旧。
+- 市场文本未经 DSH 审核即到达用户，并通过任何列出条目的客户端工具到达模型。