dsh-plugin-shop 0.1.3 → 0.2.0

package/README.md

@@ -2,7 +2,7 @@
 
 # dsh-plugin-shop
 
-**The plugin store for [DeepSeek Harness](https://github.com/deepseek-harness)** — browse a catalog of
+**The plugin shop for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)** — browse a catalog of
 dsh plugins, install one with a single confirmation, and manage what you have, from a tab inside Settings.
 
 [![npm](https://img.shields.io/npm/v/dsh-plugin-shop?logo=npm&color=cb3837)](https://www.npmjs.com/package/dsh-plugin-shop)
@@ -16,7 +16,24 @@ English | [中文](https://github.com/LivXue/dsh-plugin-shop/blob/main/packages/
 
 ---
 
-## Install
+## 🖼️ Screenshots
+
+<div align="center">
+<img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/shelf-light.png" alt="The plugin shop shelf inside dsh Settings" width="860">
+</div>
+
+<table>
+<tr>
+<td width="50%"><img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/gate-light.png" alt="Installing an unreviewed plugin requires an explicit acknowledgement"></td>
+<td width="50%"><img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/shelf-dark.png" alt="The same shelf in the dark theme"></td>
+</tr>
+<tr>
+<td align="center"><sub>Installing an unreviewed plugin requires an explicit acknowledgement</sub></td>
+<td align="center"><sub>The same shelf in the dark theme</sub></td>
+</tr>
+</table>
+
+## 📦 Install
 
 Two tracks below. They do the same thing; pick the one that matches who is reading.
 
@@ -29,7 +46,7 @@ dsh plugin --profile web add dsh-plugin-shop
 Replace `web` with your profile if you use another one. Then restart `dsh` once — a
 newly added bundle is not applied to a running process — and open
 
-> **Settings → Plugins → Plugin store**
+> **Settings → Plugins → Plugin shop**
 
 You land on a shelf of plugin cards with a search box. The first load reads the catalog
 over the network and can take a few seconds; a shimmering skeleton stands in until the
@@ -80,7 +97,7 @@ bundle is not.
 | `no profile directory found above <path>` | the plugin could not locate its profile | Please report it — this is resolved from `ctx.baseUrl` and should not fail |
 | The tab is missing after a restart | the bundle is not in the profile's `bundles` | Re-run step 3; if it is absent, step 2 did not complete |
 
-## What it does
+## ✨ What it does
 
 | | |
 |---|---|
@@ -89,7 +106,7 @@ bundle is not.
 | **Enable / disable** | Applies to an installed plugin without a restart |
 | **Outdated installs** | Compared against the catalog's current version |
 
-## How it is put together
+## 🧩 How it is put together
 
 Two halves ship in this one package, and the split between them is the security
 boundary:
@@ -97,27 +114,27 @@ boundary:
 | Half | Entry | Can reach | Cannot reach |
 |---|---|---|---|
 | **Host** | `dsh-plugin-shop` | The network (catalog fetch and sha256 verify), the filesystem (cache), `dsh plugin add` under a per-profile mutex | — |
-| **Client** | `dsh-plugin-shop/client` | Exactly five `store/*` Remote methods | The network, the filesystem |
+| **Client** | `dsh-plugin-shop/client` | Exactly five `shop/*` Remote methods | The network, the filesystem |
 
 Compromising the browser half buys an attacker those five calls and nothing more.
 
-## Configuration
+## ⚙️ Configuration
 
 | Variable | Effect |
 |---|---|
-| `DSH_STORE_CATALOG_URL` | Point the store at your own catalog mirror instead of the public one |
+| `DSH_SHOP_CATALOG_URL` | Point the shop at your own catalog mirror instead of the public one |
 
-## The catalog
+## 📚 The catalog
 
 Built daily from the public npm registry and published as static JSON:
 
 - [`/v1/index.json`](https://LivXue.github.io/dsh-plugin-shop/v1/index.json) — the pointer, carrying `schemaVersion`, `builtAt`, and the content hash
 - `/v1/plugins.<sha256>.json` — the data, content-addressed and safe to cache indefinitely
 
-The pointer is small enough to poll. The store verifies the data file's sha256 against
+The pointer is small enough to poll. The shop verifies the data file's sha256 against
 the pointer before trusting a byte of it.
 
-## What it does not claim
+## ⚠️ What it does not claim
 
 A listing is not an endorsement.
 
@@ -127,7 +144,7 @@ list. The `verified` tier means a human read *that exact version*; a newer publi
 downgrades it to `verified-stale` and keeps the review pinned to the version it was
 actually given — so passing review once cannot buy trust for every future release.
 
-## For plugin authors
+## 🏷️ For plugin authors
 
 Add `"keywords": ["dsh-plugin"]` to `package.json` and publish. The daily build finds
 you; nothing is submitted to this project. Declare a `dsh.catalog` section to control
@@ -136,6 +153,6 @@ listing from your npm `description`.
 
 Full reference: [docs/schema.md](https://github.com/LivXue/dsh-plugin-shop/blob/main/docs/schema.md).
 
-## License
+## 📄 License
 
 [MIT](https://github.com/LivXue/dsh-plugin-shop/blob/main/LICENSE) © LivXue

package/cordis.patch.yml

@@ -1,9 +1,9 @@
-# The dsh-plugin-shop bundle patch: one row, the store Remote gateway.
+# The dsh-plugin-shop bundle patch: one row, the shop Remote gateway.
 # `dshHomePath` and `process.env` are in scope for !!js scalars, exactly as
 # the dsh-base bundle uses them.
 - insert:
-    - id: store
+    - id: shop
       name: 'dsh-plugin-shop'
       config:
-        catalogUrl: !!js process.env.DSH_STORE_CATALOG_URL ?? 'https://LivXue.github.io/dsh-plugin-shop/v1/'
-        cacheDir: !!js dshHomePath('store')
+        catalogUrl: !!js process.env.DSH_SHOP_CATALOG_URL ?? 'https://LivXue.github.io/dsh-plugin-shop/v1/'
+        cacheDir: !!js dshHomePath('shop')