@vestra-player/sdk 1.5.16 → 1.5.18

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.5.18
+
+Fixes for Windows and for a vendored SDK, and built-ins that can no longer be disabled. `apiVersion` stays `vestra/1`; plugins that do not manage other plugins need no change.
+
+- **`TestHost` streams on Windows**: `openStream`'s default transport listened on a socket file in the temp folder, which Windows refuses (`listen EACCES`), so stream tests failed there. It now listens on a named pipe (`\\.\pipe\vestra-test-host-…-producer-<id>`) on Windows and on a Unix socket elsewhere. `producerTransport = "tcp"` still gives the player's own Windows transport (loopback TCP with a token).
+- **The CLI runs from an SDK outside any `node_modules`** (a copy with TypeScript on `NODE_PATH`, as the player's AI workshop vendors it): `dist/i18n-tools.js` resolved TypeScript with a bare ES module import, which ignores `NODE_PATH`, so `vestra-plugin` stopped at start with `ERR_MODULE_NOT_FOUND`. It now resolves TypeScript as the rest of the CLI does.
+- **Built-in plugins cannot be disabled** (user ruling, 2026-10-26: users manage third-party plugins only). The player and `TestHost` answer `packages.setEnabled(builtin, false)` with `unsupported`; a built-in an older player let the user disable runs again after the upgrade. `PluginInfo.builtin`, `Packages.setEnabled` and *Migrating off package rollback* say so; a plugin manager offers no action for a built-in.
+
+## 1.5.17
+
+**Package rollback is removed**, as announced in 1.5.16: the player keeps no previous plugin version. `apiVersion` stays `vestra/1` (a patch release, as when 1.5.8 removed `PackageCandidate.trial()`); plugins that do not manage other plugins need no change. A plugin manager that still calls `rollback` or reads `previousVersion` no longer compiles. Migration: [Migrating off package rollback](docs/how-to/rollback-migration.md).
+
+- **Removed: `Packages.rollback`** and the wire method `packages.rollback`. The player already answers the method with `unsupported` ("unknown package method"). To go back to an older version of a third-party plugin, the user uninstalls it and installs that version's `.vxp`.
+- **Removed: `PluginInfo.previousVersion`** and the wire field `PackageInfo.previousVersion`; `packages.list` and `packages.changed` no longer carry it.
+- **Removed from `CAPABILITY_INFO["plugins.manage"].apis`**: `"Packages.rollback"`; the capability is unchanged otherwise.
+- **`TestHost`**: `host.packages` entries have no `previousVersion` field (delete it from test data), and there is no `packages.rollback` handler.
+- Unchanged: `revisionConflict`, and the `restoring` and `failedDegraded` statuses of `PackageChange`, which belong to recovery from a failed install.
+- Docs: the Capabilities reference loses the deprecation note; *Migrating off package rollback* says what 1.5.17 removed; `llms.txt` and `llms-full.txt` regenerated.
+
 ## 1.5.16
 
 **Package rollback is deprecated: the player keeps no previous plugin version.** `apiVersion` stays `vestra/1`; code still compiles, and plugins that do not manage other plugins need no change. 1.5.17 removes the deprecated symbols, as 1.5.8 removed `PackageCandidate.trial()` at patch level. Migration: [Migrating off package rollback](docs/how-to/rollback-migration.md).

package/dist/capabilities.js

@@ -130,7 +130,6 @@ export const CAPABILITY_INFO = Object.freeze({
         apis: [
             "Packages.validate",
             "Packages.validateArchive",
-            "Packages.rollback",
             "Packages.setEnabled",
             "Packages.uninstall",
         ],

package/dist/i18n-tools.d.ts

@@ -1,4 +1,4 @@
-import ts from "typescript";
+import type TS from "typescript";
 /** A translatable text found in the sources. */
 export interface Message {
     context?: string;
@@ -27,7 +27,7 @@ export interface ExtractOptions {
     /** The plugin's production `.ts` / `.mts` files, relative to `directory`. */
     typescript: readonly string[];
     /** Compiler options for a program over those files (as `check` uses). */
-    compilerOptions?: ts.CompilerOptions;
+    compilerOptions?: TS.CompilerOptions;
 }
 export declare const pluralForms: (language: string) => "nplurals=1; plural=0;" | "nplurals=2; plural=(n != 1);";
 /** Find every translatable text of a plugin, in reference order. */

package/dist/i18n-tools.js

@@ -1,3 +1,11 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
 /**
  * `vestra-plugin i18n extract` and `vestra-plugin i18n check`, and the
  * catalog step of `vestra-plugin build` (docs/how-to/i18n.md): find the
@@ -16,9 +24,19 @@
  * @module
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { createRequire } from "node:module";
 import { join, relative, sep } from "node:path";
-import ts from "typescript";
+import { pathToFileURL } from "node:url";
 import { compileCatalog, keyOf, LOCALES, parsePo, placeholders, scanSlint, writePo, } from "./i18n.js";
+/**
+ * The SDK's TypeScript dependency, resolved the way the CLI resolves it
+ * (`compiler()` in bin/vestra-plugin.mjs): through `require` resolution from
+ * this package, which also searches `NODE_PATH`. A bare `import` of
+ * "typescript" would search only ancestor `node_modules` directories, so an
+ * SDK copied outside any (the player's AI workshop vendors one, and supplies
+ * TypeScript on `NODE_PATH`) could not start the CLI.
+ */
+const ts = (await import(__rewriteRelativeImportExtension(pathToFileURL(createRequire(import.meta.url).resolve("typescript")).href))).default;
 /** Locales whose plural has one form (`n == 1` and other are the same). */
 const ONE_FORM = new Set(["zh-Hans", "ja", "ko"]);
 export const pluralForms = (language) => ONE_FORM.has(language)

package/dist/plugin/local.d.ts

@@ -4,4 +4,11 @@ import type { LocalServices } from "../wire.ts";
  * `ffmpeg` with each `PATHEXT` extension (`ffmpeg.exe` first by default).
  */
 export declare function executableNames(tool: string, platform?: NodeJS.Platform, pathext?: string | undefined): string[];
+/**
+ * Where a local stream listens: a Unix socket file `<name>.sock` in
+ * `directory` on macOS and Linux; on Windows a named pipe
+ * (`\\.\pipe\<directory's name>-<name>`), which Node's `net` listens on and
+ * connects to by that path (a socket file there fails with `EACCES`).
+ */
+export declare function localSocketPath(directory: string, name: string, platform?: NodeJS.Platform): string;
 export declare const systemServices: LocalServices;

package/dist/plugin/local.js

@@ -31,6 +31,18 @@ export function executableNames(tool, platform = process.platform, pathext = pro
         .filter((extension) => extension.startsWith("."));
     return [...new Set(extensions)].map((extension) => tool + extension);
 }
+/**
+ * Where a local stream listens: a Unix socket file `<name>.sock` in
+ * `directory` on macOS and Linux; on Windows a named pipe
+ * (`\\.\pipe\<directory's name>-<name>`), which Node's `net` listens on and
+ * connects to by that path (a socket file there fails with `EACCES`).
+ */
+export function localSocketPath(directory, name, platform = process.platform) {
+    if (platform !== "win32")
+        return join(directory, `${name}.sock`);
+    const scope = directory.split(/[\\/]/).filter(Boolean).at(-1) ?? "vestra";
+    return `\\\\.\\pipe\\${scope}-${name}`;
+}
 async function executable(path) {
     try {
         await access(path, constants.X_OK);

package/dist/plugin/packages.js

@@ -126,9 +126,6 @@ export const packages = (scope) => ({
         const checked = await scope.runtime.host.packages.validateArchive(path);
         return candidate(scope, path, checked);
     },
-    // Deprecated (removed in 1.5.17): still forwarded, so the player's
-    // `unsupported` ("unknown package method") reaches the caller.
-    rollback: (id) => change(scope, (requestId, revision) => scope.runtime.host.packages.rollback(id, revision, requestId), id),
     list: async () => (await scope.runtime.host.packages.list()).map(info),
     onChange(listener) {
         const watch = scope.runtime.on("packages.changed", (data) => scope.run(listener, data.map(info)), null);
@@ -154,7 +151,6 @@ const info = (plugin) => Object.freeze({
     error: plugin.error,
     capabilities: [...plugin.capabilities],
     directory: plugin.directory,
-    previousVersion: plugin.previousVersion ?? null,
     builtin: plugin.builtin === true,
     source: plugin.source ? Object.freeze({ ...plugin.source }) : null,
     dataDirectory: plugin.dataDirectory ?? null,

package/dist/plugin/testing.d.ts

@@ -917,8 +917,9 @@ export declare class TestHost implements Transport {
      */
     readonly jobs: Map<number, MediaJob>;
     /**
-     * `openStream`'s transport: a Unix socket (macOS, Linux) or, with `"tcp"`,
-     * loopback TCP where the plugin must send the token first (Windows).
+     * `openStream`'s transport: a local stream (a Unix socket on macOS and
+     * Linux, a named pipe on Windows) or, with `"tcp"`, loopback TCP where the
+     * plugin must send the token first, as the player on Windows answers.
      * Set it before the plugin calls `openStream`.
      */
     producerTransport: "unix" | "tcp";
@@ -1311,9 +1312,7 @@ export declare class TestHost implements Transport {
     /**
      * What `packages.list` reports; `setEnabled`, `uninstall` and `install`
      * update it. `builtin`, `source` and `dataDirectory` are optional here
-     * (default `false`, `null`, `null`). Like the player, the host lists every
-     * plugin with `previousVersion: null` and answers `packages.rollback` with
-     * `unsupported` (since 1.5.16).
+     * (default `false`, `null`, `null`).
      */
     packages: {
         /** The plugin's manifest id. */
@@ -1330,13 +1329,6 @@ export declare class TestHost implements Transport {
         capabilities: string[];
         /** The package directory. */
         directory: string;
-        /**
-         * Ignored: `packages.list` always reports `null`. Still required in
-         * 1.5.16 so that test data shaped like a `PluginInfo` keeps compiling.
-         *
-         * @deprecated Removed in 1.5.17 with `PluginInfo.previousVersion`.
-         */
-        previousVersion: string | null;
         /** Shipped with the player: `uninstall` and `install` are `unsupported`. */
         builtin?: boolean;
         /** Where it was installed from. */

package/dist/plugin/testing.js

@@ -65,6 +65,7 @@ import { tmpdir } from "node:os";
 import { extname, isAbsolute, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { HostError } from "../wire.js";
+import { localSocketPath } from "./local.js";
 import { BUILTIN_COMMANDS, BUILTIN_SUBMENUS, COMMAND_LIMITS, MENU_IDS, } from "../commands.js";
 import { CAPABILITY_INFO, MESSAGE_LIMIT } from "../capabilities.js";
 import { OSD_LIMITS } from "./osd.js";
@@ -1013,8 +1014,9 @@ export class TestHost {
      */
     jobs = new Map();
     /**
-     * `openStream`'s transport: a Unix socket (macOS, Linux) or, with `"tcp"`,
-     * loopback TCP where the plugin must send the token first (Windows).
+     * `openStream`'s transport: a local stream (a Unix socket on macOS and
+     * Linux, a named pipe on Windows) or, with `"tcp"`, loopback TCP where the
+     * plugin must send the token first, as the player on Windows answers.
      * Set it before the plugin calls `openStream`.
      */
     producerTransport = "unix";
@@ -1862,9 +1864,7 @@ export class TestHost {
     /**
      * What `packages.list` reports; `setEnabled`, `uninstall` and `install`
      * update it. `builtin`, `source` and `dataDirectory` are optional here
-     * (default `false`, `null`, `null`). Like the player, the host lists every
-     * plugin with `previousVersion: null` and answers `packages.rollback` with
-     * `unsupported` (since 1.5.16).
+     * (default `false`, `null`, `null`).
      */
     packages = [];
     /** Every `packages.setEnabled` / `uninstall` / `install`, newest last. */
@@ -1921,14 +1921,7 @@ export class TestHost {
      */
     setPackages(list) {
         this.packages = list;
-        this.emit("packages.changed", this.#listed());
-    }
-    /** `packages.list` as the player sends it: no previous version is kept. */
-    #listed() {
-        return this.packages.map((entry) => ({
-            ...structuredClone(entry),
-            previousVersion: null,
-        }));
+        this.emit("packages.changed", structuredClone(this.packages));
     }
     #split(key) {
         const at = key.indexOf("/");
@@ -3162,7 +3155,7 @@ export class TestHost {
                 this.bindings.overlay.delete(`${p.plugin}/${p.command}`);
             this.emit("bindings.changed", null);
         },
-        "packages.list": () => this.#listed(),
+        "packages.list": () => structuredClone(this.packages),
         "packages.setEnabled": (p) => {
             const id = String(p.id);
             if (id === this.manifestId && p.enabled === false)
@@ -3170,6 +3163,9 @@ export class TestHost {
             const entry = this.packages.find((each) => each.id === id);
             if (!entry)
                 throw new HostError("missing", `no plugin ${id}`);
+            // As the player (with SDK 1.5.18 on): users manage third-party plugins only.
+            if (entry.builtin && p.enabled === false)
+                throw new HostError("unsupported", `${id} is a built-in plugin: built-in plugins cannot be disabled`);
             this.packageCalls.push({
                 method: "setEnabled",
                 id,
@@ -3214,7 +3210,6 @@ export class TestHost {
                 error: null,
                 capabilities: [...manifest.capabilities],
                 directory: `/test-host/packages/${manifest.id}`,
-                previousVersion: null,
                 builtin: false,
                 source,
                 dataDirectory: entry?.dataDirectory ?? null,
@@ -3231,7 +3226,7 @@ export class TestHost {
             if (!entry)
                 throw new HostError("missing", `no plugin ${id}`);
             if (entry.builtin)
-                throw new HostError("unsupported", "built-in plugins can be disabled but not uninstalled");
+                throw new HostError("unsupported", "built-in plugins cannot be uninstalled");
             if (entry.origin !== "installed")
                 throw new HostError("unsupported", "only installed plugins can be uninstalled");
             this.packageCalls.push({
@@ -3242,11 +3237,6 @@ export class TestHost {
             this.setPackages(this.packages.filter((each) => each.id !== id));
             return { operationId: String(p.requestId), status: "committed" };
         },
-        // The player no longer keeps a previous version (SDK 1.5.16): the method
-        // is gone and fails like any unknown package method.
-        "packages.rollback": () => {
-            throw new HostError("unsupported", "unknown package method");
-        },
         "ui.markdownScan": (p) => {
             const text = String(p.text);
             const images = [
@@ -3451,7 +3441,8 @@ export class TestHost {
             const id = ++this.#next.producer;
             const tcp = this.producerTransport === "tcp";
             const token = tcp ? randomBytes(32) : null;
-            const path = join(this.#scratch, `producer-${id}.sock`);
+            // A Unix socket, or a named pipe on Windows (`localSocketPath`).
+            const path = localSocketPath(this.#scratch, `producer-${id}`);
             const producer = {
                 id,
                 receivedFrames: 0,

package/dist/plugin/types.d.ts

@@ -4733,17 +4733,9 @@ export interface PluginInfo {
      */
     directory: string;
     /**
-     * Always `null`: the player no longer keeps a previous version, and an
-     * upgrade replaces the package.
-     *
-     * @deprecated Removed in 1.5.17. The player no longer keeps a previous
-     * version, so this is always `null`. See
-     * [Migrating off package rollback](../../docs/how-to/rollback-migration.md).
-     */
-    previousVersion: string | null;
-    /**
-     * Shipped with the player: it can be disabled, not uninstalled or
-     * replaced. `false` from players before 0.2.0.
+     * Shipped with the player: it always runs; it cannot be disabled,
+     * uninstalled or replaced (older players, before SDK 1.5.18, let it be disabled).
+     * `false` from players before 0.2.0.
      */
     builtin: boolean;
     /** Where an installed plugin came from; `null` for development loads. */
@@ -4839,16 +4831,6 @@ export interface Packages {
      * fails with `reserved`, as in {@link Packages.validate}.
      */
     validateArchive(file: string): Promise<PackageCandidate>;
-    /**
-     * Formerly restored a plugin's previous version (`plugins.manage`).
-     *
-     * @deprecated Removed in 1.5.17. The player no longer keeps a previous
-     * version, so this always fails with `unsupported`. To go back to an older
-     * version of a third-party plugin, the user uninstalls it and installs that
-     * version's `.vxp`. See
-     * [Migrating off package rollback](../../docs/how-to/rollback-migration.md).
-     */
-    rollback(id: string): Promise<PackageChange>;
     /** Every plugin: running, installed, and this run's development loads. No capability. */
     list(): Promise<PluginInfo[]>;
     /** The new list after any start, stop, failure, install or uninstall. No capability. */
@@ -4857,7 +4839,9 @@ export interface Packages {
      * Stop or start a plugin (`plugins.manage`). An installed plugin stays
      * disabled across launches; a development load only for this run.
      * `invalid` to disable oneself, `missing` unknown.
-     * `busy` while it is being installed.
+     * `busy` while it is being installed. `unsupported` to disable a built-in
+     * ({@link PluginInfo.builtin}): users manage third-party plugins only
+     * (players released with SDK 1.5.18 on; older ones disabled built-ins too).
      */
     setEnabled(id: string, enabled: boolean): Promise<void>;
     /**

package/dist/wire.d.ts

@@ -102,12 +102,6 @@ export interface PackageInfo {
     error: string | null;
     capabilities: string[];
     directory: string;
-    /**
-     * Always `null` from players that ship with SDK 1.5.16 or later.
-     *
-     * @deprecated Removed in 1.5.17: the player keeps no previous version.
-     */
-    previousVersion: string | null;
     /** Player 0.2.0; absent from older players. */
     builtin?: boolean;
     source?: WireSource | null;
@@ -572,11 +566,6 @@ export declare function createWire(transport: Transport): {
             source?: WireSource;
             replace?: boolean;
         }) => Promise<PackageOperation>;
-        /**
-         * @deprecated Removed in 1.5.17. The player no longer has this method and
-         * rejects it with `unsupported` ("unknown package method").
-         */
-        rollback: (id: string, expectedRevision: number, requestId: string) => Promise<PackageOperation>;
         operation: (operationId: string) => Promise<PackageOperation>;
         cancel: (operationId: string) => Promise<PackageOperation>;
         list: () => Promise<PackageInfo[]>;
@@ -602,7 +591,7 @@ export declare function createWire(transport: Transport): {
             sampleTime?: number;
         } | {
             kind: "rawJpeg" | "processedJpeg";
-            sampleTime? /** The path's keys (player 0.4.3). */: number;
+            sampleTime?: number;
             quality?: number;
         } | {
             kind: "rawMp4" | "processedMp4";

package/dist/wire.js

@@ -278,15 +278,6 @@ export function createWire(transport) {
                 ...(options.source === undefined ? {} : { source: options.source }),
                 ...(options.replace ? { replace: true } : {}),
             }),
-            /**
-             * @deprecated Removed in 1.5.17. The player no longer has this method and
-             * rejects it with `unsupported` ("unknown package method").
-             */
-            rollback: (id, expectedRevision, requestId) => transport.request("packages.rollback", {
-                id,
-                expectedRevision,
-                requestId,
-            }),
             operation: (operationId) => transport.request("packages.operation", {
                 operationId,
             }),

package/llms-full.txt

@@ -1,4 +1,4 @@
-# @vestra-player/sdk 1.5.16: full reference
+# @vestra-player/sdk 1.5.18: full reference
 
 > Everything needed to write a Vestra Player plugin (plugin API `vestra/1`): the guides, every public declaration of `@vestra-player/sdk` and `@vestra-player/sdk/testing` with its documentation, and the complete source of the example plugins. Generated from the SDK's sources by scripts/llms.mjs; the short index is llms.txt.
 
@@ -1840,36 +1840,37 @@ The store shows the newest version's manifest fields, so what you write there is
 - **Before installing**, the user confirms a dialog that lists the capabilities; an update that adds capabilities lists the new ones. A plugin whose every version needs a newer player shows "needs Vestra Player x.y.z or later" instead of an install button.
 - **The README** is rendered as Markdown; relative links and images resolve against the README's own address, and remote images are shown for the official repository.
 
-## How-to: Migrating off package rollback (1.5.16)
+## How-to: Migrating off package rollback (1.5.16, removed in 1.5.17)
 
-For plugins that manage other plugins (`plugins.manage`): stores, plugin managers, anything that calls packages.rollback or reads PluginInfo.previousVersion. A plugin that only uses its own API needs no change.
+For plugins that manage other plugins (`plugins.manage`): stores, plugin managers, anything that called `packages.rollback` or read `PluginInfo.previousVersion`. Both were deprecated in 1.5.16 and **removed in 1.5.17**: with 1.5.17 a remaining use is a TypeScript compile error. A plugin that only uses its own API needs no change.
 
 #### What changed
 
 The player no longer keeps a previous version of a plugin. An upgrade replaces the package, so there is nothing to roll back to:
 
-- `packages.rollback(id)` always fails with `unsupported` (the player answers "unknown package method").
-- Every entry of `packages.list()` and `packages.onChange` has `previousVersion: null`.
-- Built-in plugins (`builtin: true`) run in place from the player installation. They can be disabled and enabled, never uninstalled or replaced; `uninstall` fails with `unsupported`. A built-in's `directory` is inside the installation (`<install resources>/plugins/<id>`) and read-only.
+- There is no `packages.rollback`: the player answers the wire method with `unsupported` ("unknown package method"), and SDK 1.5.17 no longer has it.
+- `packages.list()` and `packages.onChange` entries have no `previousVersion` (always `null` with SDK 1.5.16, removed in 1.5.17).
+- Built-in plugins (`builtin: true`) run in place from the player installation. Users manage only third-party plugins: a built-in can be neither uninstalled, replaced nor (from SDK 1.5.18 and the players released with it) disabled; `uninstall` and `setEnabled(id, false)` fail with `unsupported`, and a built-in an older player let the user disable runs again after the upgrade. A built-in's `directory` is inside the installation (`<install resources>/plugins/<id>`) and read-only.
 - Third-party plugins can still be uninstalled.
 
 Why: built-ins now run from the read-only installation instead of a copy, and an upgrade replaces the package instead of keeping the old one beside it. Going back to an older version becomes an ordinary uninstall and install that the user starts.
 
-`TestHost` behaves the same way since 1.5.16, so tests show it too.
+`TestHost` behaves the same way, so tests show it too.
 
 #### 1. Remove rollback calls and `previousVersion` checks
 
 Before:
 
 ```ts nocheck
-if (info.previousVersion !== null) showButton("Roll back", () => plugin.packages.rollback(info.id));
+if (info.previousVersion !== null)
+  showButton("Roll back", () => plugin.packages.rollback(info.id));
 ```
 
-After: delete both. There is no replacement call; nothing on the player can restore an earlier package. Remove the button, menu item or command, and any state, text or test that depends on `previousVersion`.
+After: delete both. There is no replacement call; nothing on the player can restore an earlier package. Remove the button, menu item or command, and any state, text or test that depends on `previousVersion`. With SDK 1.5.17 the compiler finds every remaining use.
 
 #### 2. Going back to an older version
 
-Managing plugins has exactly three operations: **install**, **uninstall** and **disable/enable**. There is no rollback, no "install older version" and no "Undo install".
+Managing third-party plugins has exactly three operations: **install**, **uninstall** and **disable/enable**. Built-ins have none of them. There is no rollback, no "install older version" and no "Undo install".
 
 To go back to an older version, the user uninstalls the plugin and installs the older version's `.vxp` file themselves, as two ordinary operations. Do not offer an action that does both, an older-version install from a store, or an "Undo" after an install (the official store and the AI window drop theirs). Uninstalling without `removeData` keeps the plugin's data, and a reinstall from the same source reconnects to it; a `.vxp` file is a different source from a repository, so a plugin first installed from the store gets a new, empty data directory.
 
@@ -1884,35 +1885,36 @@ Check `builtin` before offering actions:
 ```ts
 for (const info of await plugin.packages.list()) {
   const actions = info.builtin
-    ? [info.state === "disabled" ? "Enable" : "Disable"]
-    : ["Disable", "Uninstall"];
+    ? []
+    : [info.state === "disabled" ? "Enable" : "Disable", "Uninstall"];
   console.log(info.id, actions);
 }
 ```
 
-- Offer only disable and enable for a built-in (`packages.setEnabled`); never uninstall or install over it.
+- Offer no action for a built-in: never disable, uninstall or install over it (the player answers `unsupported`). Built-ins that an older player listed as `disabled` come back as running.
 - Never write into a built-in's `directory`, or into any plugin's `directory`: read `manifest.json` from it if you need to. A plugin writes only under its own plugin.dataDirectory.
 
 #### 5. Tests
 
-`TestHost` lists every plugin with `previousVersion: null`, whatever a test puts in `host.packages`, and rejects `packages.rollback` with `unsupported`. The `previousVersion` field of `host.packages` entries is deprecated and ignored; it stays required in 1.5.16 so that test data shaped like a `PluginInfo` keeps compiling, and goes in 1.5.17. A test that expected a rollback to succeed should now assert the rejection or be removed.
+With SDK 1.5.17, `host.packages` entries have no `previousVersion` field: delete `previousVersion: null` (or any value) from test data, or the test no longer compiles. `TestHost` has no `packages.rollback`. Remove tests that exercised a rollback; there is nothing left to assert. (With 1.5.16 the field was still required but ignored, and `TestHost` answered rollback with `unsupported`.)
 
 #### Timeline
 
-| SDK | Player | What happens |
-| --- | --- | --- |
-| 1.5.16 | ships with it | `Packages.rollback` and `PluginInfo.previousVersion` (and the wire field) are `@deprecated`. The player and `TestHost` answer rollback with `unsupported` and list `previousVersion: null`. Code still compiles. |
-| 1.5.17 | — | Both symbols are removed. Remaining uses are TypeScript compile errors. |
+| SDK    | Player        | What happens                                                                                                                                                                                                                                                                                                                  |
+| ------ | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 1.5.16 | ships with it | `Packages.rollback` and `PluginInfo.previousVersion` (and the wire field) are `@deprecated`. The player and `TestHost` answer rollback with `unsupported` and list `previousVersion: null`. Code still compiles.                                                                                                              |
+| 1.5.17 | ships with it | **Removed:** `Packages.rollback`, `PluginInfo.previousVersion`, the wire method `packages.rollback` and the wire field `previousVersion`, `TestHost`'s `previousVersion` field and its `packages.rollback` handler, and `Packages.rollback` in the `plugins.manage` capability. Remaining uses are TypeScript compile errors. |
+| 1.5.18 | ships with it | Built-ins can no longer be disabled: the player and `TestHost` answer `setEnabled(builtin, false)` with `unsupported` (user ruling 2026-10-26).                                                                                                                                                                               |
 
 `apiVersion` stays `vestra/1` in both releases, as when 1.5.8 removed `PackageCandidate.trial()`.
 
 #### Before you hand it in
 
 - [ ] No call to `packages.rollback`; no UI or logic gated on `previousVersion`.
-- [ ] Built-ins offer only disable and enable.
+- [ ] Built-ins offer no Disable, Enable or Uninstall.
 - [ ] Nothing writes into a plugin's `directory`.
 - [ ] No Undo after an install, no older-version install; older versions go through uninstall and a user-chosen `.vxp`.
-- [ ] Tests pass with SDK 1.5.16; the only deprecated name left in them is the `previousVersion: null` of `host.packages` test data.
+- [ ] Tests compile and pass with SDK 1.5.17; no `previousVersion` is left in `host.packages` test data.
 
 ## Guideline: Interface guidelines
 
@@ -2176,7 +2178,7 @@ A plugin lists what it may do in the manifest's `capabilities` (Manifest). A cal
 | `ui.window` | Windows.create | — | Open tool windows |  |
 | `ui.mount` | Panels.mount, Panels.bottom, Panels.sidebar, Panels.backdrop, PanelSlot.onChange, Panel.onChange, BackdropSlot.onChange | — | Show panels in the bottom bar, the sidebar or behind the video |  |
 | `ui.dialog` | Dialogs.confirm, Dialogs.openFile, Dialogs.openFiles, Dialogs.openDirectory, Dialogs.saveFile | — | Show file pickers and confirmations |  |
-| `plugins.manage` | Packages.validate, Packages.validateArchive, Packages.rollback, Packages.setEnabled, Packages.uninstall | — | Install, uninstall and disable other plugins | yes |
+| `plugins.manage` | Packages.validate, Packages.validateArchive, Packages.setEnabled, Packages.uninstall | — | Install, uninstall and disable other plugins | yes |
 | `processing.video` | Plugin.video.filter, Plugin.video.view, Plugin.video.render | `playback.read` | Process the picture (filters, shaders) |  |
 | `processing.audio` | Plugin.audio.filter | `playback.read`, `events` | Process the sound |  |
 | `subtitles.read` | Subtitles.state, Subtitles.onChange, Subtitles.refresh | — | Read subtitles |  |
@@ -2200,8 +2202,6 @@ A plugin lists what it may do in the manifest's `capabilities` (Manifest). A cal
 - A file resolver (Resolvers.add with file types) also needs `producer.av`.
 - Without `events`, Player.state is read at start and after the plugin's own operations, and `onChange` listeners do not fire for changes made elsewhere.
 
-**Deprecated:** Packages.rollback in the `plugins.manage` row (since 1.5.16; removed in 1.5.17). The player keeps no previous version, so it always fails with `unsupported`; see Migrating off package rollback.
-
 #### Without a capability
 
 A member not in the table needs no capability: `plugin.tools`, `plugin.storage`, `plugin.system`, `plugin.app`, `plugin.ui` (images and Markdown), `plugin.i18n`, reading window.state, appearance.theme and packages.list. The table is `CAPABILITY_INFO`, which tests can import from `@vestra-player/sdk/testing` to check a manifest (CAPABILITY_INFO).
@@ -6010,11 +6010,8 @@ interface PluginInfo {
    */
   directory: string;
   /**
-   * Always `null`: the player no longer keeps a previous version, and an upgrade replaces the package.
-   * @deprecated Removed in 1.5.17. The player no longer keeps a previous version, so this is always `null`. See Migrating off package rollback.
+   * Shipped with the player: it always runs; it cannot be disabled, uninstalled or replaced (older players, before SDK 1.5.18, let it be disabled). `false` from players before 0.2.0.
    */
-  previousVersion: string | null;
-  /** Shipped with the player: it can be disabled, not uninstalled or replaced. `false` from players before 0.2.0. */
   builtin: boolean;
   /** Where an installed plugin came from; `null` for development loads. */
   source: PackageSource | null;
@@ -6087,17 +6084,12 @@ interface Packages {
    * Validate a `.vxp` package file (`plugins.manage`, player 0.2.0): the same checks as Packages.validate after unpacking. Check the file's sha256 yourself before calling when you know it. A reserved id fails with `reserved`, as in Packages.validate.
    */
   validateArchive(file: string): Promise<PackageCandidate>;
-  /**
-   * Formerly restored a plugin's previous version (`plugins.manage`).
-   * @deprecated Removed in 1.5.17. The player no longer keeps a previous version, so this always fails with `unsupported`. To go back to an older version of a third-party plugin, the user uninstalls it and installs that version's `.vxp`. See Migrating off package rollback.
-   */
-  rollback(id: string): Promise<PackageChange>;
   /** Every plugin: running, installed, and this run's development loads. No capability. */
   list(): Promise<PluginInfo[]>;
   /** The new list after any start, stop, failure, install or uninstall. No capability. */
   onChange(listener: (plugins: PluginInfo[]) => void): Disposable;
   /**
-   * Stop or start a plugin (`plugins.manage`). An installed plugin stays disabled across launches; a development load only for this run. `invalid` to disable oneself, `missing` unknown. `busy` while it is being installed.
+   * Stop or start a plugin (`plugins.manage`). An installed plugin stays disabled across launches; a development load only for this run. `invalid` to disable oneself, `missing` unknown. `busy` while it is being installed. `unsupported` to disable a built-in (PluginInfo.builtin): users manage third-party plugins only (players released with SDK 1.5.18 on; older ones disabled built-ins too).
    */
   setEnabled(id: string, enabled: boolean): Promise<void>;
   /**
@@ -7193,7 +7185,7 @@ class TestHost implements Transport {
   /** Export jobs by job id. Each state query advances a job one step (`queued` → `running` → `completed`; `cancelling` → `cancelled`). Wire-level. */
   readonly jobs: Map<number, MediaJob>;
   /**
-   * `openStream`'s transport: a Unix socket (macOS, Linux) or, with `"tcp"`, loopback TCP where the plugin must send the token first (Windows). Set it before the plugin calls `openStream`.
+   * `openStream`'s transport: a local stream (a Unix socket on macOS and Linux, a named pipe on Windows) or, with `"tcp"`, loopback TCP where the plugin must send the token first, as the player on Windows answers. Set it before the plugin calls `openStream`.
    */
   producerTransport: "unix" | "tcp";
   /** Generated streams (`player.openStream`) by producer id: the fake player end of each frame connection. Wire-level beyond the FakeProducer fields. */
@@ -7411,7 +7403,7 @@ class TestHost implements Transport {
     overlay: Map<string, string[]>;
   };
   /**
-   * What `packages.list` reports; `setEnabled`, `uninstall` and `install` update it. `builtin`, `source` and `dataDirectory` are optional here (default `false`, `null`, `null`). Like the player, the host lists every plugin with `previousVersion: null` and answers `packages.rollback` with `unsupported` (since 1.5.16).
+   * What `packages.list` reports; `setEnabled`, `uninstall` and `install` update it. `builtin`, `source` and `dataDirectory` are optional here (default `false`, `null`, `null`).
    */
   packages: {
     /** The plugin's manifest id. */
@@ -7428,11 +7420,6 @@ class TestHost implements Transport {
     capabilities: string[];
     /** The package directory. */
     directory: string;
-    /**
-     * Ignored: `packages.list` always reports `null`. Still required in 1.5.16 so that test data shaped like a `PluginInfo` keeps compiling.
-     * @deprecated Removed in 1.5.17 with `PluginInfo.previousVersion`.
-     */
-    previousVersion: string | null;
     /** Shipped with the player: `uninstall` and `install` are `unsupported`. */
     builtin?: boolean;
     /** Where it was installed from. */

package/llms.txt

@@ -1,6 +1,6 @@
 # Vestra Player SDK
 
-> @vestra-player/sdk 1.5.16: write plugins for Vestra Player in TypeScript (plugin API `vestra/1`). A plugin is a folder with `manifest.json` and an entry module whose default export `activate(plugin)` the player calls; it runs in its own Node.js process. Everything a plugin creates (commands, windows, panels, filters, listeners…) is a handle that is released automatically when the plugin stops. L<n> are line numbers in llms-full.txt, next to this file: every page, declaration and example.
+> @vestra-player/sdk 1.5.18: write plugins for Vestra Player in TypeScript (plugin API `vestra/1`). A plugin is a folder with `manifest.json` and an entry module whose default export `activate(plugin)` the player calls; it runs in its own Node.js process. Everything a plugin creates (commands, windows, panels, filters, listeners…) is a handle that is released automatically when the plugin stops. L<n> are line numbers in llms-full.txt, next to this file: every page, declaration and example.
 
 **Rules**
 
@@ -33,7 +33,7 @@ my-plugin/
 }
 ```
 
-Fields: `id`, `version`, `apiVersion`, `entry`, `capabilities`, `name`, `author`, `punchline`, `description`, `tags`, `icon`, `readme`, `changelog`, `sourceUrl`, `license`, `minPlayerVersion`; unknown fields and capabilities are rejected. Rules and limits: L2100–2163.
+Fields: `id`, `version`, `apiVersion`, `entry`, `capabilities`, `name`, `author`, `punchline`, `description`, `tags`, `icon`, `readme`, `changelog`, `sourceUrl`, `license`, `minPlayerVersion`; unknown fields and capabilities are rejected. Rules and limits: L2102–2165.
 
 **main.ts**
 
@@ -60,7 +60,7 @@ export default async function activate(plugin: Plugin) {
 - `ui.window`: Windows.create
 - `ui.mount`: Panels.mount/bottom/sidebar/backdrop, PanelSlot/Panel/BackdropSlot.onChange
 - `ui.dialog`: Dialogs.confirm/openFile/openFiles/openDirectory/saveFile
-- `plugins.manage`: Packages.validate/validateArchive/rollback/setEnabled/uninstall
+- `plugins.manage`: Packages.validate/validateArchive/setEnabled/uninstall
 - `processing.video`: Plugin.video.filter/video.view/video.render (also `playback.read`)
 - `processing.audio`: Plugin.audio.filter (also `playback.read`, `events`)
 - `subtitles.read`: Subtitles.state/onChange/refresh
@@ -76,9 +76,9 @@ export default async function activate(plugin: Plugin) {
 - `ui.settings`: Settings.page/show
 - `ui.theme`: Appearance.set/setLanguage
 - `secrets`: Secrets.get/set/delete
-- No capability: `tools`, `storage`, `system`, `app`, `ui` (images and Markdown), `i18n`, reading window.state, appearance.theme and packages.list. Details: L2164–2208.
+- No capability: `tools`, `storage`, `system`, `app`, `ui` (images and Markdown), `i18n`, reading window.state, appearance.theme and packages.list. Details: L2166–2208.
 
-**Test**: `tests/*.test.ts` with `node:test`, run by `vestra-plugin test`. `startPlugin(activate, { directory: new URL("..", import.meta.url) })` from `@vestra-player/sdk/testing` returns `{ host, stop }`; `host` is a TestHost (an in-memory player): `host.setSource(…)`, `host.command(id).run()`, `host.press(key)`, `await host.settle()`, then assert on `host.osd`, `host.window(id).props`… Guide: L1588–1753; TestHost: L6759.
+**Test**: `tests/*.test.ts` with `node:test`, run by `vestra-plugin test`. `startPlugin(activate, { directory: new URL("..", import.meta.url) })` from `@vestra-player/sdk/testing` returns `{ host, stop }`; `host` is a TestHost (an in-memory player): `host.setSource(…)`, `host.command(id).run()`, `host.press(key)`, `await host.settle()`, then assert on `host.osd`, `host.window(id).props`… Guide: L1588–1753; TestHost: L6751.
 
 **Command line**
 
@@ -113,32 +113,32 @@ export default async function activate(plugin: Plugin) {
 - [llms-full.txt](https://vestrasys.github.io/vestra-player-sdk/llms-full.txt), also node_modules/@vestra-player/sdk/llms-full.txt; the pages are on the [site](https://vestrasys.github.io/vestra-player-sdk/).
 - Tutorials: Getting started L9–214
 - Concepts: How a plugin runs L215–364; Commands, menus and key bindings L365–462; Playback state, controls and sources L463–585; Video and audio processing L586–663; Windows, panels, settings pages, dialogs and the OSD L664–950
-- How-to: Keep a slider responsive while dragging L951–1125; Remember a window's state between runs L1126–1255; Translate a plugin L1256–1439; Migrate a plugin to English source text L1440–1587; Test a plugin L1588–1753; Publish a plugin L1754–1842; Migrating off package rollback (1.5.16) L1843–1916
-- Guidelines: Interface guidelines L1917–2001; Menu guidelines L2002–2099
-- Reference: Manifest L2100–2163; Capabilities L2164–2208; Limits L2209–2303; Commands, menus and bindings L2304–2772; Platforms L2773–2801; Theme L2802–3006; Command line L3007–3062
-- [API: @vestra-player/sdk](https://vestrasys.github.io/vestra-player-sdk/modules/_vestra-player_sdk.html): L3063–6594
-- [API: @vestra-player/sdk/testing](https://vestrasys.github.io/vestra-player-sdk/modules/_vestra-player_sdk_testing.html): L6595–7922
+- How-to: Keep a slider responsive while dragging L951–1125; Remember a window's state between runs L1126–1255; Translate a plugin L1256–1439; Migrate a plugin to English source text L1440–1587; Test a plugin L1588–1753; Publish a plugin L1754–1842; Migrating off package rollback (1.5.16, removed in 1.5.17) L1843–1918
+- Guidelines: Interface guidelines L1919–2003; Menu guidelines L2004–2101
+- Reference: Manifest L2102–2165; Capabilities L2166–2208; Limits L2209–2303; Commands, menus and bindings L2304–2772; Platforms L2773–2801; Theme L2802–3006; Command line L3007–3062
+- [API: @vestra-player/sdk](https://vestrasys.github.io/vestra-player-sdk/modules/_vestra-player_sdk.html): L3063–6586
+- [API: @vestra-player/sdk/testing](https://vestrasys.github.io/vestra-player-sdk/modules/_vestra-player_sdk_testing.html): L6587–7909
 
 ## API
 
 Where each module of `plugin` (`plugin.<module>`) is declared:
 
 - Plugin L3297, Scope L3166, PluginError L3105, Disposable L3078
-- Commands L3509; Windows L3714; Panels L4357; Dialogs L4643; Player L5091; video: VideoFilter L5356, VideoView L5419, RenderOptions L5461; audio: AudioFilter L5380; Subtitles L5559; media: MediaCapture L5719; Resolvers L5824; Packages L6069; Osd L5292; Host L5240; Clipboard L6189; Power L6209; Tools L6242; Storage L6285; System L6308; Secrets L6326; window: MainWindow L4480; App L4561; Bindings L6159; Ui L3601; Timeline L4437; Drops L4013; Appearance L4042; I18n L4184; Settings L4290.
+- Commands L3509; Windows L3714; Panels L4357; Dialogs L4643; Player L5091; video: VideoFilter L5356, VideoView L5419, RenderOptions L5461; audio: AudioFilter L5380; Subtitles L5559; media: MediaCapture L5719; Resolvers L5824; Packages L6066; Osd L5292; Host L5240; Clipboard L6181; Power L6201; Tools L6234; Storage L6277; System L6300; Secrets L6318; window: MainWindow L4480; App L4561; Bindings L6151; Ui L3601; Timeline L4437; Drops L4013; Appearance L4042; I18n L4184; Settings L4290.
 
 ## Examples
 
 Tested plugins in [examples/](https://github.com/vestrasys/vestra-player-sdk/tree/main/examples):
 
-- hello: The README Quick start: one menu command and an on-screen message. L8346–8435
-- blur: A tool window with one slider that blurs the playing video. L8436–8697
-- signal-generator: Generates its own video and audio: colour bars and a 1 kHz tone. L8698–9030
-- bookmark: A tool window bound to the playback state: remember the position and jump back to it. L9031–9215
-- panel-menu: A sidebar panel with its own right-click menu. L9216–9421
-- menus: Radio menu items, separator groups and a menu item whose title changes. L9422–9581
-- theme-widgets: A tool window drawn with the player's theme and widgets. L9582–9745
-- markdown: A window that shows a Markdown document. L9746–9940
-- i18n: A plugin in the player's language: English source text, a Chinese translation. L9941–10108
+- hello: The README Quick start: one menu command and an on-screen message. L8333–8422
+- blur: A tool window with one slider that blurs the playing video. L8423–8684
+- signal-generator: Generates its own video and audio: colour bars and a 1 kHz tone. L8685–9017
+- bookmark: A tool window bound to the playback state: remember the position and jump back to it. L9018–9202
+- panel-menu: A sidebar panel with its own right-click menu. L9203–9408
+- menus: Radio menu items, separator groups and a menu item whose title changes. L9409–9568
+- theme-widgets: A tool window drawn with the player's theme and widgets. L9569–9732
+- markdown: A window that shows a Markdown document. L9733–9927
+- i18n: A plugin in the player's language: English source text, a Chinese translation. L9928–10095
 
 ## Optional
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vestra-player/sdk",
-  "version": "1.5.16",
+  "version": "1.5.18",
   "description": "Plugin API types, test host and plugin CLI for Vestra Player (apiVersion vestra/1)",
   "license": "Apache-2.0",
   "repository": {