feat(Mountain): Add extension metadata passthrough, IPC round-trip, and Node version checking

Three major improvements for extension handling and IPC reliability:

1. **Extension manifest passthrough (Atom TH1):** Add 14 new fields to ExtensionDescriptionStateDTO for VS Code package.json metadata: Categories, DisplayName, Description, Keywords, Repository, Bugs, Homepage, License, Icon, AiKey, ExtensionKind, Capabilities, ExtensionDependencies, ExtensionPack. Wind's Extensions sidebar filter `@builtin category:themes` now works — previously categories were absent so the filter never matched.

2. **IPC round-trip for applyEdit/showTextDocument (Atom T1):** Replace fire-and-forget event emission with request/response pattern using SendUserInterfaceRequest. Extensions awaiting workspace.applyEdit() now block until Sky actually applies the edit, fixing races with listeners expecting post-apply state. Also made SendUserInterfaceRequest pub(crate) so Track effect creators reuse the same pattern.

3. **Node version checking (Atom N1):** ResolveNodeBinary now queries `node --version` and logs the resolved version. Emits a warning when major version falls below LAND_NODE_MIN_MAJOR (default 20). Helps diagnose extension host boot failures.

4. **Compile-time PostHog config (Atom P2):** PostHogPlugin now reads API key/host/enable flag from env! baked in build.rs via PropagatePostHogSentinel(). Supports LAND_POSTHOG_DISTINCT_ID for CI correlation. Combined with debug_assertions gate for cheaper no-op path.

5. **IPC logging improvement (Atom I13):** Add paired entry/exit lines per invoke. `done: <cmd> ok=... t_ns=...` on the way out enables latency diagnosis via single grep without Jaeger hopping.

Author: NikolaRHristov

Cargo.toml

@@ -114,11 +114,11 @@ Telemetry = []
 Development = []
 Test = []
 
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+# ===========================================================================
 # Tier-gating (Plan A §Rust feature flags). Every name here is mirrored by
 # `build.rs::IsDeclaredTierFeature`. Adding a new tier requires editing
 # BOTH places so typos in `.env.Land` fail loud.
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+# ===========================================================================
 
 # Tier:RemoteProcedureCall:SharedMemory 🟣 Experimental
 TierRemoteProcedureCallSharedMemory = []

Source/ApplicationState/DTO/ExtensionDescriptionStateDTO.rs

@@ -106,6 +106,82 @@ pub struct ExtensionDescriptionStateDTO {
 	/// Extension contributions (commands, views, etc.)
 	#[serde(default, skip_serializing_if = "Option::is_none")]
 	pub Contributes:Option<Value>,
+
+	// --- Discovery metadata ---
+	/// VS Code category tags ("Themes", "Programming Languages",
+	/// "Snippets", "Language Packs", "Debuggers", "Formatters",
+	/// "Keymaps", "SCM Providers", "Testing", "Education", "Other").
+	///
+	/// Atom TH1: Wind's Extensions sidebar filters `@builtin category:themes`
+	/// against this array. Without the field the filter never matches —
+	/// user reported theme extensions absent on @builtin search despite
+	/// being on disk. Scanner-passthrough surfaces the raw package.json
+	/// value; resolved NLS placeholders survive because the serde
+	/// deserialisation happens after the NLS rewrite.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Categories:Option<Vec<String>>,
+
+	/// Human-readable display name, usually a VS Code NLS placeholder like
+	/// `%displayName%` that the scanner resolves against `package.nls.json`.
+	/// Atom TH1: sidebar row rendering falls back to `name` when this is
+	/// absent; having the real value populates tooltips and the
+	/// details editor.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub DisplayName:Option<String>,
+
+	/// Short prose description. Same NLS-placeholder rules as DisplayName.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Description:Option<String>,
+
+	/// Extension keywords array — searched by the sidebar when the query
+	/// doesn't match `name`, `displayName`, or `description`.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Keywords:Option<Vec<String>>,
+
+	/// Repository info: Either a string URL or `{ type, url }` object.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Repository:Option<Value>,
+
+	/// Bug-tracker URL or object.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Bugs:Option<Value>,
+
+	/// Homepage URL.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Homepage:Option<String>,
+
+	/// License identifier (SPDX short code) or URL.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub License:Option<String>,
+
+	/// Icon path relative to the extension root (for sidebar thumbnails).
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Icon:Option<String>,
+
+	/// Marketplace API key placeholder — still present in some upstream
+	/// built-in manifests. `@vscode/extension-telemetry` reads its
+	/// length on construction; if missing the activate throws
+	/// `Cannot read properties of undefined (reading 'length')`.
+	#[serde(default, skip_serializing_if = "Option::is_none", rename = "aiKey")]
+	pub AiKey:Option<String>,
+
+	/// Marketplace-side extension kind (`["ui"]`, `["workspace"]`,
+	/// `["web"]`). Wind uses this to decide which host to run the
+	/// extension in. Missing → VS Code falls back to heuristics.
+	#[serde(default, skip_serializing_if = "Option::is_none", rename = "extensionKind")]
+	pub ExtensionKind:Option<Value>,
+
+	/// Capabilities descriptor — `untrustedWorkspaces`, `virtualWorkspaces`.
+	#[serde(default, skip_serializing_if = "Option::is_none")]
+	pub Capabilities:Option<Value>,
+
+	/// Dependency list — other extensions this one needs activated first.
+	#[serde(default, skip_serializing_if = "Option::is_none", rename = "extensionDependencies")]
+	pub ExtensionDependencies:Option<Vec<String>>,
+
+	/// Extension-pack children — extensions this one bundles by reference.
+	#[serde(default, skip_serializing_if = "Option::is_none", rename = "extensionPack")]
+	pub ExtensionPack:Option<Vec<String>>,
 }
 
 impl ExtensionDescriptionStateDTO {
@@ -167,6 +243,20 @@ impl ExtensionDescriptionStateDTO {
 			ExtensionLocation:serde_json::json!(null),
 			ActivationEvents:None,
 			Contributes:None,
+			Categories:None,
+			DisplayName:None,
+			Description:None,
+			Keywords:None,
+			Repository:None,
+			Bugs:None,
+			Homepage:None,
+			License:None,
+			Icon:None,
+			AiKey:None,
+			ExtensionKind:None,
+			Capabilities:None,
+			ExtensionDependencies:None,
+			ExtensionPack:None,
 		};
 
 		Description.Validate()?;

Source/Binary/Build/PostHogPlugin.rs

@@ -8,27 +8,52 @@ use std::sync::OnceLock;
 
 use crate::dev_log;
 
-/// PostHog EU Cloud project token (debug builds only).
-const POSTHOG_API_KEY:&str = "phc_mCwHy7LgvbnEqh6a2DyMiLUJcaZvmmj7JNmmpQzvr7mA";
+/// PostHog project token. Source of truth: `.env.Land.PostHog` LAND_POSTHOG_KEY;
+/// `build.rs` bakes the value via `cargo:rustc-env` so `env!` at compile
+/// time always resolves, even on a clean checkout.
+const POSTHOG_API_KEY:&str = env!("LAND_POSTHOG_KEY");
 
-/// PostHog EU Cloud host.
-const POSTHOG_HOST:&str = "https://eu.i.posthog.com";
+/// PostHog region host (default EU Cloud; operators override via
+/// `.env.Land.PostHog` LAND_POSTHOG_HOST).
+const POSTHOG_HOST:&str = env!("LAND_POSTHOG_HOST");
+
+/// Per-tier enable flag baked from `.env.Land.PostHog`. Cheap early-exit in
+/// every capture path without forking the binary per env value.
+const POSTHOG_ENABLED:&str = env!("LAND_POSTHOG_MOUNTAIN_ENABLED");
+
+/// Optional pinned distinct-id seed (empty string → auto-generate per
+/// process). Useful for CI runs where correlating events across restarts
+/// matters more than per-dev isolation.
+const POSTHOG_DISTINCT_ID_SEED:&str = env!("LAND_POSTHOG_DISTINCT_ID");
 
 /// Global PostHog client instance.
 static CLIENT:OnceLock<posthog_rs::Client> = OnceLock::new();
 
-/// Machine-stable distinct ID for the dev session.
+/// Machine-stable distinct ID for the dev session. When LAND_POSTHOG_DISTINCT_ID
+/// is set, it wins - same value across every process in the same dev run.
 fn DistinctId() -> String {
+	if !POSTHOG_DISTINCT_ID_SEED.is_empty() {
+		return POSTHOG_DISTINCT_ID_SEED.to_string();
+	}
 	let User = std::env::var("USER")
 		.or_else(|_| std::env::var("USERNAME"))
 		.unwrap_or_else(|_| "unknown".to_string());
 	format!("land-dev-{}", User)
 }
 
+/// Whether the Mountain tier should capture at all. Combines compile-time
+/// debug gate with the `.env.Land.PostHog` enable switch.
+fn CaptureAllowed() -> bool {
+	if !cfg!(debug_assertions) {
+		return false;
+	}
+	!matches!(POSTHOG_ENABLED, "false" | "0" | "off")
+}
+
 /// Initialize the PostHog client. Call once during app setup.
-/// No-op in release builds.
+/// No-op in release builds or when LAND_POSTHOG_MOUNTAIN_ENABLED=false.
 pub async fn Initialize() {
-	if !cfg!(debug_assertions) {
+	if !CaptureAllowed() {
 		return;
 	}
 
@@ -40,13 +65,13 @@ pub async fn Initialize() {
 
 	let PostHogClient = posthog_rs::client(Options).await;
 	let _ = CLIENT.set(PostHogClient);
-	dev_log!("lifecycle", "[PostHog] Initialized (EU Cloud, debug mode)");
+	dev_log!("lifecycle", "[PostHog] Initialized (host={}, debug mode)", POSTHOG_HOST);
 	CaptureEvent("mountain:session:start", None);
 }
 
 /// Capture a named event with optional properties.
 pub fn CaptureEvent(EventName:&str, Properties:Option<Vec<(&str, &str)>>) {
-	if !cfg!(debug_assertions) {
+	if !CaptureAllowed() {
 		return;
 	}
 
@@ -70,7 +95,7 @@ pub fn CaptureEvent(EventName:&str, Properties:Option<Vec<(&str, &str)>>) {
 
 /// Capture an error event.
 pub fn CaptureError(Tag:&str, Message:&str) {
-	if !cfg!(debug_assertions) {
+	if !CaptureAllowed() {
 		return;
 	}
 
@@ -79,7 +104,7 @@ pub fn CaptureError(Tag:&str, Message:&str) {
 
 /// Capture an IPC command invocation.
 pub fn CaptureIPC(Method:&str) {
-	if !cfg!(debug_assertions) {
+	if !CaptureAllowed() {
 		return;
 	}
 

Source/Binary/Extension/ScanPathConfigure.rs

@@ -45,7 +45,7 @@ pub fn ScanPathConfigure(AppState:&std::sync::Arc<ApplicationState>) -> Result<V
 	// (`~/.land/extensions`) still scans so VSIX-installed extensions work.
 	//
 	// Atom U1: `.env.Land.Extensions` also exposes `LAND_DISABLE_BUILTIN_EXTENSIONS`
-	// — same effect, different name. Accept both so the skill-file env and
+	// - same effect, different name. Accept both so the skill-file env and
 	// the legacy SKIP flag don't diverge.
 	let SkipBuiltins = matches!(std::env::var("LAND_SKIP_BUILTIN_EXTENSIONS").as_deref(), Ok("1") | Ok("true"))
 		|| matches!(std::env::var("LAND_DISABLE_BUILTIN_EXTENSIONS").as_deref(), Ok("1") | Ok("true"));
@@ -189,7 +189,7 @@ pub fn ScanPathConfigure(AppState:&std::sync::Arc<ApplicationState>) -> Result<V
 		}
 	}
 
-	// Atom U1: development extensions path — the VS Code equivalent of
+	// Atom U1: development extensions path - the VS Code equivalent of
 	// `--extensionDevelopmentPath=<dir>`. Extensions here always load
 	// regardless of enablement state; kept separate from user-scope so a
 	// broken dev extension doesn't persist into the user's profile.

Source/Binary/Main/Entry.rs

@@ -213,7 +213,7 @@ pub fn Fn() {
 	//
 	// Build.sh exports `Browser`/`Mountain`/`Electron`/`Bundle`/`Compiler`/
 	// `LAND_PROFILE` into the shell that invokes cargo. `build.rs` captures
-	// those into `cargo:rustc-env=LAND_*` so they're baked into the binary —
+	// those into `cargo:rustc-env=LAND_*` so they're baked into the binary -
 	// runtime env lookups don't survive launching the binary from Finder /
 	// another shell. `option_env!` falls back to "unknown" when the build
 	// ran outside Build.sh (e.g. plain `cargo build`).

Source/Environment/UserInterfaceProvider.rs

@@ -306,7 +306,12 @@ impl UserInterfaceProvider for MountainEnvironment {
 
 /// A generic helper function to send a request to the Sky UI and wait for a
 /// response.
-async fn SendUserInterfaceRequest<TPayload:Serialize + Clone>(
+///
+/// Atom T1: made `pub(crate)` so Track effect creators
+/// (`applyEdit` / `showTextDocument` / `Task.Execute`, etc.) can reuse the
+/// same RequestIdentifier/oneshot pattern instead of emitting fire-and-
+/// forget events that resolve to synthetic success.
+pub(crate) async fn SendUserInterfaceRequest<TPayload:Serialize + Clone>(
 	Environment:&MountainEnvironment,
 
 	EventName:&str,

Source/IPC/WindServiceHandler/Extension.rs

@@ -146,10 +146,10 @@ pub async fn handle_extensions_is_active(Runtime:Arc<ApplicationRunTime>, Args:V
 ///
 /// Atom V1: honours `LAND_USER_EXTENSIONS_DIR` (from `.env.Land.Extensions`).
 /// Resolution order:
-///   1. `$LAND_USER_EXTENSIONS_DIR` — explicit per-operator override.
+///   1. `$LAND_USER_EXTENSIONS_DIR` - explicit per-operator override.
 ///      Leading `~/` expands against `$HOME`.
-///   2. `$HOME/.land/extensions` — VS Code-style user-scope default.
-///   3. `./extensions` — fallback when `$HOME` is unavailable (container,
+///   2. `$HOME/.land/extensions` - VS Code-style user-scope default.
+///   3. `./extensions` - fallback when `$HOME` is unavailable (container,
 ///      restricted environment). `fs::create_dir_all` runs on install so
 ///      this works even if the cwd is read-only at scan time.
 fn UserExtensionDirectory() -> PathBuf {

Source/IPC/WindServiceHandlers/mod.rs

@@ -320,7 +320,7 @@ pub async fn mountain_ipc_invoke(app_handle:AppHandle, command:String, args:Vec<
 				// sidebar. Pin state is Wind-owned (Cocoon never sees it); the
 				// only Mountain-side cost is an acknowledgement so the
 				// extension-enablement service doesn't retry forever. Payload
-				// is optional — VS Code sometimes passes `{ refreshPinned: true }`.
+				// is optional - VS Code sometimes passes `{ refreshPinned: true }`.
 				"extensions:resetPinnedStateForAllUserExtensions" => {
 					dev_log!("extensions", "{} (no-op, pin state is UI-local)", command);
 					Ok(Value::Null)
@@ -1616,6 +1616,25 @@ pub async fn mountain_ipc_invoke(app_handle:AppHandle, command:String, args:Vec<
 	};
 	crate::otel_span!(&SpanName, OTLPStart, &[("ipc.command", command.as_str())]);
 
+	// Atom I13: paired entry/exit line per invoke. `invoke: <cmd>` on the way
+	// in (emitted at the top of this fn); `done: <cmd> ok=… t_ns=…` on the
+	// way out. A `grep "logger:log"` before showed only the entry half;
+	// having both halves makes latency diagnosis a single pipe:
+	//     grep "logger:log" Mountain.dev.log | awk '…'
+	// without hopping across Jaeger. High-frequency commands still skip the
+	// entry line but DO emit an exit - frequencies still aggregate, but each
+	// is individually accounted for.
+	if !IsHighFrequencyCommand {
+		let ElapsedNanos = crate::IPC::DevLog::NowNano().saturating_sub(OTLPStart);
+		dev_log!(
+			"ipc",
+			"done: {} ok={} t_ns={}",
+			command,
+			!IsErr,
+			ElapsedNanos
+		);
+	}
+
 	Result
 }