dsh-plugin-shop 0.4.1 → 0.4.3

package/lib/typert.remote-client.js

@@ -38,6 +38,12 @@ const dsh_plugin_shop_shop_catalog_result$schema = z.object({
 })),
   'stars': z.record(z.string(), z.number()),
 })
+const dsh_plugin_shop_shop_installed_result$schema = z.array(z.object({
+  'name': z.string(),
+  'installed': z.string(),
+  'latest': z.string(),
+  'outdated': z.boolean(),
+}))
 const dsh_plugin_shop_shop_installStart_parameter_0$schema = z.object({
   'name': z.string(),
   'version': z.string(),
@@ -61,11 +67,13 @@ const dsh_plugin_shop_shop_installStatus_result$schema = z.object({
   'needsRestart': z.union([z.undefined(), z.literal(false), z.literal(true)]).optional(),
   'detail': z.union([z.undefined(), z.string()]).optional(),
 })
-const dsh_plugin_shop_shop_outdated_result$schema = z.array(z.object({
-  'name': z.string(),
-  'installed': z.string(),
-  'latest': z.string(),
-}))
+const dsh_plugin_shop_shop_restart_result$schema = z.union([z.object({
+  'ok': z.literal(true),
+  'url': z.string(),
+}), z.object({
+  'ok': z.literal(false),
+  'detail': z.string(),
+})])
 const dsh_plugin_shop_shop_setEnabled_parameter_0$schema = z.object({
   'name': z.string(),
   'enabled': z.boolean(),
@@ -74,6 +82,16 @@ const dsh_plugin_shop_shop_setEnabled_result$schema = z.object({
   'ok': z.boolean(),
   'detail': z.union([z.undefined(), z.string()]).optional(),
 })
+const dsh_plugin_shop_shop_uninstallStart_parameter_0$schema = z.object({
+  'name': z.string(),
+})
+const dsh_plugin_shop_shop_uninstallStart_result$schema = z.union([z.object({
+  'ok': z.literal(true),
+  'installId': z.string(),
+}), z.object({
+  'ok': z.literal(false),
+  'detail': z.string(),
+})])
 
 export const TYPERT_REMOTE = {
   package: 'dsh-plugin-shop',
@@ -102,7 +120,22 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":180,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":218,"column":9},
+    },
+    {
+      id: 'dsh-plugin-shop#shop/installed',
+      service: 'shop',
+      namespace: 'shop',
+      method: 'installed',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-plugin-shop#shop/installed:result',
+        schema: dsh_plugin_shop_shop_installed_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":293,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -128,7 +161,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":206,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":244,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -153,22 +186,22 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":244,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":282,"column":3},
     },
     {
-      id: 'dsh-plugin-shop#shop/outdated',
+      id: 'dsh-plugin-shop#shop/restart',
       service: 'shop',
       namespace: 'shop',
-      method: 'outdated',
+      method: 'restart',
       invocation: { kind: 'direct' },
       parameters: [
       ],
       result: {
         mode: 'strict',
-        typeSymbol: 'dsh-plugin-shop#shop/outdated:result',
-        schema: dsh_plugin_shop_shop_outdated_result$schema,
+        typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
+        schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":252,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":367,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -193,7 +226,33 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopSetEnabledResult',
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":149,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":187,"column":3},
+    },
+    {
+      id: 'dsh-plugin-shop#shop/uninstallStart',
+      service: 'shop',
+      namespace: 'shop',
+      method: 'uninstallStart',
+      implementation: 'uninstall',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'args',
+          wire: 'args',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-plugin-shop#shop/uninstallStart:args',
+            schema: dsh_plugin_shop_shop_uninstallStart_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
+        schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":333,"column":9},
     },
   ],
 }

package/lib/types/client/ShopTab.d.ts

@@ -5,7 +5,7 @@
  * §11.3.4): no render path here may ever use dangerouslySetInnerHTML. */
 import { type ReactNode } from 'react';
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
-import type { InstallArgs, ShopCatalogResult, ShopInstallResult, ShopInstallStatusResult, ShopOutdatedEntry, ShopSetEnabledResult } from '../host/index.ts';
+import type { InstallArgs, ShopCatalogResult, ShopInstalledEntry, ShopInstallResult, ShopInstallStatusResult, ShopRestartResult, ShopSetEnabledResult, ShopUninstallResult } from '../host/index.ts';
 /** The tab's Remote face: the Host result types, already unwrapped from the
  * wire envelope by `index.ts`; `catalog` throws on a wire error so the tab's
  * error state renders. */
@@ -21,7 +21,11 @@ export interface ShopTabInjected {
         name: string;
         enabled: boolean;
     }) => Promise<ShopSetEnabledResult>;
-    outdated: () => Promise<ShopOutdatedEntry[]>;
+    installed: () => Promise<ShopInstalledEntry[]>;
+    uninstall: (args: {
+        name: string;
+    }) => Promise<ShopUninstallResult>;
+    restart: () => Promise<ShopRestartResult>;
 }
 /** Full component props assembled by the Settings slot renderer. */
 export type ShopTabProps = PropsRuntime<'settings.plugins.tab'> & PropsLocale<'settings.shop'> & InjectFace<ShopTabInjected>;

package/lib/types/client/index.d.ts

@@ -1,9 +1,9 @@
 /**
  * Shop settings surface, browser half — one tab in `settings.plugins.tab`
  * that browses the catalog, installs with acknowledgement, toggles
- * enablement, and lists outdated installs. Mounts the shop Remote itself
- * (the assembly does not know this package) and holds no privilege beyond
- * the five `shop/*` methods (§5.3).
+ * enablement, lists installed plugins, and restarts dsh after installs.
+ * Mounts the shop Remote itself (the assembly does not know this package)
+ * and holds no privilege beyond the seven `shop/*` methods (§5.3).
  */
 import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
 import type { ShopLocaleKey } from './locales.ts';

package/lib/types/client/locales.d.ts

@@ -48,6 +48,18 @@ export declare const zh: {
     installedVersion: string;
     latestVersion: string;
     update: string;
+    installed: string;
+    uninstall: string;
+    uninstalling: string;
+    uninstallFailed: string;
+    uninstallTransportFailed: string;
+    uninstalledRestartNotice: string;
+    restart: string;
+    restartTitle: string;
+    restartBody: string;
+    restartConfirm: string;
+    restarting: string;
+    restartTransportFailed: string;
     enabledSwitch: string;
     toggleFailed: string;
     hotApplyNote: string;
@@ -103,6 +115,18 @@ export declare const en: {
     installedVersion: string;
     latestVersion: string;
     update: string;
+    installed: string;
+    uninstall: string;
+    uninstalling: string;
+    uninstallFailed: string;
+    uninstallTransportFailed: string;
+    uninstalledRestartNotice: string;
+    restart: string;
+    restartTitle: string;
+    restartBody: string;
+    restartConfirm: string;
+    restarting: string;
+    restartTransportFailed: string;
     enabledSwitch: string;
     toggleFailed: string;
     hotApplyNote: string;

package/lib/types/client/useInstall.d.ts

@@ -1,4 +1,5 @@
 /** Install driving hook for one entry: start, poll to terminal, reset. */
+import { type Dispatch, type SetStateAction } from 'react';
 import { type InstallView } from './present.ts';
 import type { InstallArgs, ShopInstallResult, ShopInstallStatusResult } from '../host/index.ts';
 export interface UseInstallResult {
@@ -6,6 +7,14 @@ export interface UseInstallResult {
     start: (args: InstallArgs) => Promise<void>;
     reset: () => void;
 }
+/** The poll loop shared by the install and uninstall drivers: while the view
+ * is `running`, poll once per second and fold each status through the
+ * reducer. A poll failure is transient — the host retains the record, so the
+ * next tick finds it. The rejection handler must be present: an unhandled
+ * rejection here would escape the poll loop. */
+export declare function usePollStatus(view: InstallView, setView: Dispatch<SetStateAction<InstallView>>, installStatus: (args: {
+    installId: string;
+}) => Promise<ShopInstallStatusResult>): void;
 /** Drive one install: rejections, the polling loop at INSTALL_POLL_MS, and
  * terminal states. The interval is cleared on unmount and whenever the view
  * leaves `running`, so a done/failed/rejected install never polls again. */

package/lib/types/client/useUninstall.d.ts

@@ -0,0 +1,21 @@
+/** Uninstall driving hook for one entry: start, poll to terminal. Shares the
+ * install view machine and poll loop; the only difference is the start
+ * mapping — an uninstall business failure (not in the catalog / not
+ * installed) lands in the `failed` view with the host's published detail,
+ * never in the install `rejected` codes, which belong to the install gate
+ * (§7.2). */
+import type { ShopInstallStatusResult, ShopUninstallResult } from '../host/index.ts';
+import type { InstallView } from './present.ts';
+export interface UseUninstallResult {
+    view: InstallView;
+    start: (args: {
+        name: string;
+    }) => Promise<void>;
+}
+/** Drive one uninstall: the host's business union, the shared polling loop,
+ * and terminal states. The `rejected` install state never occurs here. */
+export declare function useUninstall(uninstall: (args: {
+    name: string;
+}) => Promise<ShopUninstallResult>, installStatus: (args: {
+    installId: string;
+}) => Promise<ShopInstallStatusResult>): UseUninstallResult;

package/lib/types/host/executor.d.ts

@@ -1,4 +1,7 @@
-/** Install executor: spawn the dsh CLI, stream its output, serialize per profile. */
+/** Plugin-command executor: spawn the dsh CLI, stream its output, serialize
+ * per profile. One implementation drives both `dsh plugin add` (install) and
+ * `dsh plugin remove` (uninstall); the only differences are the verb and the
+ * post-exit manifest confirmation. */
 export type InstallState = 'running' | 'done' | 'failed';
 export interface InstallStatus {
     state: InstallState;
@@ -13,11 +16,6 @@ interface RunningInstall {
 }
 /**
  * Run one `dsh plugin --profile <profile> add <spec>` and track it.
- * Never rolls back; a failure surfaces stderr verbatim plus the recovery hint
- * (§10). The shop never passes build-script flags: `allowBuilds` stays the
- * user's explicit decision in the CLI (§7.2).
- * The child inherits the current environment unless `env` is given — the
- * real-install test pins DSH_HOME to a temporary directory this way.
  * When `expectedName` is given, a zero exit is confirmed against the profile
  * manifest (§7.2 step 6) before the install reports `done`.
  */
@@ -29,4 +27,18 @@ export declare function startInstall(options: {
     expectedName?: string;
     onStatus?: (status: InstallStatus) => void;
 }): RunningInstall;
+/**
+ * Run one `dsh plugin --profile <profile> remove <name>` and track it.
+ * When `expectedName` is given, a zero exit is confirmed against the profile
+ * manifest — the bundle must actually have LEFT `dsh.profile.bundles` — before
+ * the uninstall reports `done`.
+ */
+export declare function startUninstall(options: {
+    profile: string;
+    name: string;
+    dshBin?: string;
+    env?: NodeJS.ProcessEnv;
+    expectedName?: string;
+    onStatus?: (status: InstallStatus) => void;
+}): RunningInstall;
 export {};

package/lib/types/host/index.d.ts

@@ -5,6 +5,7 @@ import { loadCatalog, type LoadCatalogOptions } from './catalog.ts';
 import type { CatalogEntry, DeniedEntry } from './types.ts';
 import { type InstallArgs, type InstallRejectionCode } from './install.ts';
 import { type InstallStatus } from './executor.ts';
+import { type RestartOutcome } from './restart.ts';
 export type { InstallArgs, InstallRejectionCode } from './install.ts';
 export type { CatalogEntry } from './types.ts';
 /** One Loader inventory entry, structurally — the shop never depends on
@@ -29,6 +30,15 @@ export interface ShopGatewayOptions {
         list(): InventoryEntry[];
     };
     dshBin?: string;
+    /** The dsh argv this process was launched with, for `shop/restart`;
+     * defaults to the real `process.argv` minus node and the script path. */
+    restartArgv?: string[];
+    /** Test-only injection: the exit the restart calls after the response is
+     * delivered. Production uses `process.exit`. */
+    exit?: (code?: number) => void;
+    /** How long the gateway waits after a successful restart response before
+     * exiting the old process; test-only shortening, production uses 2s. */
+    restartExitDelayMs?: number;
 }
 /** `shop/installStart` result (§7.3): rejections are typed wire values with an
  * author-readable `detail`, not thrown RPC errors. */
@@ -49,11 +59,28 @@ export interface ShopSetEnabledResult {
     ok: boolean;
     detail?: string;
 }
-/** `shop/outdated` entry (§7.3): one installed plugin behind the catalog. */
-export interface ShopOutdatedEntry {
+/** `shop/uninstallStart` result (§7.3): a name outside the catalog or not
+ * installed is a typed wire value with an author-readable `detail`, not a
+ * thrown RPC error. */
+export type ShopUninstallResult = {
+    ok: true;
+    installId: string;
+} | {
+    ok: false;
+    detail: string;
+};
+/** `shop/restart` result (§7.3): the restarted server's URL, or a typed
+ * failure — on failure the old process is still serving. */
+export type ShopRestartResult = RestartOutcome;
+/** `shop/installed` entry (§7.3): one installed catalog plugin. `installed`
+ * is the profile manifest's dependency spec verbatim (a range, a tag, or
+ * `workspace:*`); `outdated` is the Host's verdict that the installed version
+ * sits behind the catalog's — the client never does version math. */
+export interface ShopInstalledEntry {
     name: string;
     installed: string;
     latest: string;
+    outdated: boolean;
 }
 /** `shop/catalog` result (§7.3), plus the denied list for the install gate's UI. */
 export interface ShopCatalogResult {
@@ -77,11 +104,21 @@ export declare class ShopGateway extends TypertRemoteService {
     private readonly profileDir?;
     private readonly inventory?;
     private readonly dshBin;
+    /** The argv `shop/restart` re-spawns: the real process argv minus node and
+     * the CLI script path, or a test-provided substitute. */
+    private readonly restartArgv;
+    /** The exit the restart calls once the response is out; `process.exit` in
+     * production, a spy in tests. */
+    private readonly exit;
+    private readonly restartExitDelayMs;
     /** The install gate runs against the last loaded snapshot, never a fresh
      * fetch per request (§7.2: the Host's cached snapshot is the truth). */
     /** Finished install records retained, so a poll sees the true terminal
      * state (§8: done / needsRestart / failure detail). Oldest evicted on add. */
     private static readonly MAX_FINISHED_INSTALLS;
+    /** How long the gateway waits after a successful restart response before
+     * exiting the old process — the browser must receive the URL first. */
+    private static readonly RESTART_EXIT_DELAY_MS;
     /** The install gate runs against the last loaded snapshot, never a fresh
      * fetch per request (§7.2: the Host's cached snapshot is the truth). */
     private lastSnapshot;
@@ -127,7 +164,31 @@ export declare class ShopGateway extends TypertRemoteService {
     installStatus(args: {
         installId: string;
     }): ShopInstallStatusResult;
-    /** Installed plugins whose installed version is older than the catalog's (§7.3). */
-    outdated(): Promise<ShopOutdatedEntry[]>;
+    /** Installed catalog plugins (§7.3): every entry of the snapshot the profile
+     * manifest declares as a dependency, with the Host's `outdated` verdict
+     * attached. The tab's shelf cards and its installed section both derive
+     * from this one list. */
+    installed(): Promise<ShopInstalledEntry[]>;
+    /** Whether an installed dependency spec sits behind the catalog's version.
+     * A spec identical to the catalog version is current by definition; a
+     * pnpm-written non-semver spec like `workspace:*` is not reportable and
+     * reads as current rather than killing the RPC. */
+    private isBehind;
+    /** Uninstall one installed catalog plugin from the profile (§7.3 follow-up
+     * amendment). Removing revokes privilege rather than granting it, so there
+     * is no acknowledgement gate. The name must be a catalog entry the profile
+     * manifest declares as a dependency — the RPC cannot remove profile
+     * dependencies the shop does not manage (the base bundle, the shop
+     * itself). The same install records/polling serve the client. */
+    uninstall(args: {
+        name: string;
+    }): Promise<ShopUninstallResult>;
+    /** Restart the dsh process the shop runs in (§8 amendment, 2026-08-27):
+     * re-spawn this process's own command line, return the new server's URL
+     * once it announces itself, and only then exit. A failed restart returns a
+     * typed failure and the old process keeps serving — the restart is
+     * all-or-nothing. The response must reach the browser before the exit, so
+     * the exit is delayed past the RPC round-trip. */
+    restart(): Promise<ShopRestartResult>;
 }
 export default ShopGateway;

package/lib/types/host/restart.d.ts

@@ -0,0 +1,35 @@
+/** Restart executor: re-spawn the Host's own command line and hand the
+ * browser the new server's URL. The child is detached (its own process
+ * group), so it survives both the parent's exit and the launching
+ * terminal's. The parent exits only AFTER the child printed its
+ * `dsh web: <url>` line — a restart that fails to come up leaves the old
+ * process running untouched. */
+/** `shop/restart` outcome: the new server's URL, or a typed failure with an
+ * author-readable detail. A failure means the OLD process is still serving —
+ * the restart is all-or-nothing. */
+export type RestartOutcome = {
+    ok: true;
+    url: string;
+} | {
+    ok: false;
+    detail: string;
+};
+/** Spawn the restarted server and wait for it to announce its URL.
+ *
+ * The child runs the same `dsh` with the same argv the current process was
+ * launched with (`process.argv.slice(2)` — node and the CLI script path
+ * stripped), so the profile, port and flags reproduce the user's launch
+ * verbatim. `--port 0` therefore yields a NEW port, and the returned URL is
+ * how the browser finds it.
+ *
+ * On success the caller exits the old process — but only after delivering
+ * the RPC response carrying `url`, which is the caller's sequencing duty,
+ * not this module's. On failure (child exits before announcing, spawn
+ * error, or the timeout) the child is killed if still running and the old
+ * process is untouched. */
+export declare function startRestart(options: {
+    dshBin: string;
+    argv: string[];
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}): Promise<RestartOutcome>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-shop",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "The DeepSeek Harness plugin shop: browse, install, enable, and update dsh plugins from a git-auditable catalog.",
   "repository": {
     "type": "git",