dsh-plugin-shop 0.4.14 → 0.5.0

package/lib/typert.host.js

@@ -20,12 +20,13 @@ const dsh_plugin_shop_shop_catalog_result$schema = z.object({
   'review': z.union([z.undefined(), z.object({
   'reviewedVersion': z.union([z.undefined(), z.string()]).optional(),
   'reviewedCommit': z.union([z.undefined(), z.string()]).optional(),
+  'reviewedSha256': z.union([z.undefined(), z.string()]).optional(),
   'reviewer': z.string(),
   'reviewCommit': z.string(),
   'notes': z.string(),
 })]).optional(),
   'catalog': z.union([z.undefined(), z.object({
-  'category': z.union([z.literal("tool"), z.literal("provider"), z.literal("ui"), z.literal("workflow"), z.literal("integration"), z.literal("other")]),
+  'category': z.union([z.literal("tool"), z.literal("provider"), z.literal("ui"), z.literal("workflow"), z.literal("integration"), z.literal("theme"), z.literal("other")]),
   'summary': z.object({
   'en': z.string(),
   'zh': z.union([z.undefined(), z.string()]).optional(),
@@ -35,10 +36,16 @@ const dsh_plugin_shop_shop_catalog_result$schema = z.object({
   'source': z.union([z.literal("npm"), z.literal("github")]),
   'repo': z.union([z.undefined(), z.string()]).optional(),
   'subdir': z.union([z.undefined(), z.string()]).optional(),
+  'tarball': z.union([z.undefined(), z.object({
+  'url': z.string(),
+  'sha256': z.string(),
+})]).optional(),
+  'added': z.string(),
 })),
   'denied': z.array(z.object({
   'name': z.string(),
   'detail': z.string(),
+  'replacement': z.union([z.undefined(), z.string()]).optional(),
 })),
   'stars': z.record(z.string(), z.number()),
 })
@@ -59,7 +66,7 @@ const dsh_plugin_shop_shop_installStart_result$schema = z.union([z.object({
   'installId': z.string(),
 }), z.object({
   'ok': z.literal(false),
-  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("git-missing")]),
+  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("git-missing"), z.literal("tarball-integrity")]),
   'detail': z.string(),
 })])
 const dsh_plugin_shop_shop_installStatus_parameter_0$schema = z.object({
@@ -70,6 +77,7 @@ const dsh_plugin_shop_shop_installStatus_result$schema = z.object({
   'state': z.union([z.literal("running"), z.literal("done"), z.literal("failed")]),
   'log': z.array(z.string()),
   'needsRestart': z.union([z.undefined(), z.literal(false), z.literal(true)]).optional(),
+  'restartReason': z.union([z.undefined(), z.string()]).optional(),
   'detail': z.union([z.undefined(), z.string()]).optional(),
 })
 const dsh_plugin_shop_shop_restart_result$schema = z.union([z.object({
@@ -110,6 +118,7 @@ const dsh_plugin_shop_shop_version_result$schema = z.object({
   'installed': z.string(),
   'latest': z.union([z.literal(null), z.string()]),
   'outdated': z.boolean(),
+  'restartSupported': z.boolean(),
 })
 
 export const TYPERT = {
@@ -142,7 +151,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":275,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":447,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -157,7 +166,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop#shop/installed:result',
         schema: dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":380,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":597,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -183,7 +192,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":301,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":473,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -208,7 +217,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":369,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":586,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -223,7 +232,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
         schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":491,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":721,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -248,7 +257,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopSetEnabledResult',
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":241,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":400,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/uninstallStart',
@@ -274,7 +283,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":451,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":668,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/updateStart',
@@ -299,7 +308,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUpdateResult',
         schema: dsh_plugin_shop_shop_updateStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":540,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":781,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/version',
@@ -314,7 +323,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopVersionResult',
         schema: dsh_plugin_shop_shop_version_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":525,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":765,"column":9},
     },
   ],
   model: {
@@ -352,7 +361,7 @@ export const TYPERT = {
             "name": "install",
             "signature": "@Remote('installStart') async install(args: InstallArgs): Promise<ShopInstallResult>",
             "summary": "Install one cataloged version into the profile (§7.2).",
-            "jsDoc": "/**\n * Install one cataloged version into the profile (§7.2). The four rejection\n * paths run against this Host's snapshot before anything is spawned; only a\n * passing request reaches the executor.\n */"
+            "jsDoc": "/**\n * Install one cataloged version into the profile (§7.2). The rejection\n * paths run against this Host's snapshot before anything is spawned; only a\n * passing request reaches the executor.\n */"
           },
           {
             "kind": "method",
@@ -400,11 +409,11 @@ export const TYPERT = {
         "types": [
           {
             "name": "CatalogEntry",
-            "declaration": "export interface CatalogEntry {\n    name: string;\n    version: string;\n    integrity: string | null;\n    publishedAt: string | null;\n    repository: string | null;\n    license: string | null;\n    tier: 'verified' | 'verified-stale' | 'community';\n    metadata: 'declared' | 'derived';\n    review?: { reviewedVersion?: string; reviewedCommit?: string; reviewer: string; reviewCommit: string; notes: string; };\n    catalog?: CatalogSection;\n    source: 'npm' | 'github';\n    repo?: string;\n    subdir?: string;\n}"
+            "declaration": "export interface CatalogEntry {\n    name: string;\n    version: string;\n    integrity: string | null;\n    publishedAt: string | null;\n    repository: string | null;\n    license: string | null;\n    tier: 'verified' | 'verified-stale' | 'community';\n    metadata: 'declared' | 'derived';\n    review?: { reviewedVersion?: string; reviewedCommit?: string; reviewedSha256?: string; reviewer: string; reviewCommit: string; notes: string; };\n    catalog?: CatalogSection;\n    source: 'npm' | 'github';\n    repo?: string;\n    subdir?: string;\n    tarball?: { url: string; sha256: string; };\n    added: string;\n}"
           },
           {
             "name": "CatalogSection",
-            "declaration": "export interface CatalogSection {\n    category: 'tool' | 'provider' | 'ui' | 'workflow' | 'integration' | 'other';\n    summary: CatalogSummary;\n    capabilities: string[];\n}"
+            "declaration": "export interface CatalogSection {\n    category: 'tool' | 'provider' | 'ui' | 'workflow' | 'integration' | 'theme' | 'other';\n    summary: CatalogSummary;\n    capabilities: string[];\n}"
           },
           {
             "name": "CatalogSummary",
@@ -412,7 +421,7 @@ export const TYPERT = {
           },
           {
             "name": "DeniedEntry",
-            "declaration": "export interface DeniedEntry {\n    name: string;\n    detail: string;\n}"
+            "declaration": "export interface DeniedEntry {\n    name: string;\n    detail: string;\n    replacement?: string;\n}"
           },
           {
             "name": "InstallArgs",
@@ -420,7 +429,7 @@ export const TYPERT = {
           },
           {
             "name": "InstallRejectionCode",
-            "declaration": "export type InstallRejectionCode = 'not-in-catalog' | 'denied' | 'version-mismatch' | 'needs-acknowledgement' | 'git-missing';"
+            "declaration": "export type InstallRejectionCode = 'not-in-catalog' | 'denied' | 'version-mismatch' | 'needs-acknowledgement' | 'git-missing' | 'tarball-integrity';"
           },
           {
             "name": "InstallState",
@@ -428,7 +437,7 @@ export const TYPERT = {
           },
           {
             "name": "InstallStatus",
-            "declaration": "export interface InstallStatus {\n    state: InstallState;\n    log: string[];\n    needsRestart?: boolean;\n    detail?: string;\n}"
+            "declaration": "export interface InstallStatus {\n    state: InstallState;\n    log: string[];\n    needsRestart?: boolean;\n    restartReason?: string;\n    detail?: string;\n}"
           },
           {
             "name": "RestartOutcome",
@@ -468,7 +477,7 @@ export const TYPERT = {
           },
           {
             "name": "ShopVersionResult",
-            "declaration": "export interface ShopVersionResult {\n    installed: string;\n    latest: string | null;\n    outdated: boolean;\n}"
+            "declaration": "export interface ShopVersionResult {\n    installed: string;\n    latest: string | null;\n    outdated: boolean;\n    restartSupported: boolean;\n}"
           }
         ]
       }

package/lib/typert.remote-client.js

@@ -20,12 +20,13 @@ const dsh_plugin_shop_shop_catalog_result$schema = z.object({
   'review': z.union([z.undefined(), z.object({
   'reviewedVersion': z.union([z.undefined(), z.string()]).optional(),
   'reviewedCommit': z.union([z.undefined(), z.string()]).optional(),
+  'reviewedSha256': z.union([z.undefined(), z.string()]).optional(),
   'reviewer': z.string(),
   'reviewCommit': z.string(),
   'notes': z.string(),
 })]).optional(),
   'catalog': z.union([z.undefined(), z.object({
-  'category': z.union([z.literal("tool"), z.literal("provider"), z.literal("ui"), z.literal("workflow"), z.literal("integration"), z.literal("other")]),
+  'category': z.union([z.literal("tool"), z.literal("provider"), z.literal("ui"), z.literal("workflow"), z.literal("integration"), z.literal("theme"), z.literal("other")]),
   'summary': z.object({
   'en': z.string(),
   'zh': z.union([z.undefined(), z.string()]).optional(),
@@ -35,10 +36,16 @@ const dsh_plugin_shop_shop_catalog_result$schema = z.object({
   'source': z.union([z.literal("npm"), z.literal("github")]),
   'repo': z.union([z.undefined(), z.string()]).optional(),
   'subdir': z.union([z.undefined(), z.string()]).optional(),
+  'tarball': z.union([z.undefined(), z.object({
+  'url': z.string(),
+  'sha256': z.string(),
+})]).optional(),
+  'added': z.string(),
 })),
   'denied': z.array(z.object({
   'name': z.string(),
   'detail': z.string(),
+  'replacement': z.union([z.undefined(), z.string()]).optional(),
 })),
   'stars': z.record(z.string(), z.number()),
 })
@@ -59,7 +66,7 @@ const dsh_plugin_shop_shop_installStart_result$schema = z.union([z.object({
   'installId': z.string(),
 }), z.object({
   'ok': z.literal(false),
-  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("git-missing")]),
+  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("git-missing"), z.literal("tarball-integrity")]),
   'detail': z.string(),
 })])
 const dsh_plugin_shop_shop_installStatus_parameter_0$schema = z.object({
@@ -70,6 +77,7 @@ const dsh_plugin_shop_shop_installStatus_result$schema = z.object({
   'state': z.union([z.literal("running"), z.literal("done"), z.literal("failed")]),
   'log': z.array(z.string()),
   'needsRestart': z.union([z.undefined(), z.literal(false), z.literal(true)]).optional(),
+  'restartReason': z.union([z.undefined(), z.string()]).optional(),
   'detail': z.union([z.undefined(), z.string()]).optional(),
 })
 const dsh_plugin_shop_shop_restart_result$schema = z.union([z.object({
@@ -110,6 +118,7 @@ const dsh_plugin_shop_shop_version_result$schema = z.object({
   'installed': z.string(),
   'latest': z.union([z.literal(null), z.string()]),
   'outdated': z.boolean(),
+  'restartSupported': z.boolean(),
 })
 
 export const TYPERT_REMOTE = {
@@ -139,7 +148,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":275,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":447,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -154,7 +163,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop#shop/installed:result',
         schema: dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":380,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":597,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -180,7 +189,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":301,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":473,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -205,7 +214,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":369,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":586,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -220,7 +229,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
         schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":491,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":721,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -245,7 +254,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopSetEnabledResult',
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":241,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":400,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/uninstallStart',
@@ -271,7 +280,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":451,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":668,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/updateStart',
@@ -296,7 +305,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUpdateResult',
         schema: dsh_plugin_shop_shop_updateStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":540,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":781,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/version',
@@ -311,7 +320,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopVersionResult',
         schema: dsh_plugin_shop_shop_version_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":525,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":765,"column":9},
     },
   ],
 }

package/lib/types/client/locales.d.ts

@@ -15,6 +15,7 @@ export declare const zh: {
     categoryUi: string;
     categoryWorkflow: string;
     categoryIntegration: string;
+    categoryTheme: string;
     categoryOther: string;
     empty: string;
     emptySearch: string;
@@ -39,11 +40,13 @@ export declare const zh: {
     license: string;
     customLicense: string;
     reviewedVersionLine: string;
+    reviewedPinLine: string;
     deniedCode: string;
     notInCatalogCode: string;
     versionMismatchCode: string;
     needsAcknowledgementCode: string;
     gitMissingCode: string;
+    tarballIntegrityCode: string;
     githubSource: string;
     installedSection: string;
     installedVersion: string;
@@ -54,6 +57,7 @@ export declare const zh: {
     uninstalling: string;
     uninstallFailed: string;
     uninstallTransportFailed: string;
+    uninstalledLiveNotice: string;
     uninstalledRestartNotice: string;
     restart: string;
     restartTitle: string;
@@ -62,6 +66,7 @@ export declare const zh: {
     restarting: string;
     restartFailedNotice: string;
     restartTransportFailed: string;
+    restartDisabledNotice: string;
     updateFailed: string;
     updateTransportFailed: string;
     checkUpdate: string;
@@ -89,6 +94,7 @@ export declare const en: {
     categoryUi: string;
     categoryWorkflow: string;
     categoryIntegration: string;
+    categoryTheme: string;
     categoryOther: string;
     empty: string;
     emptySearch: string;
@@ -113,11 +119,13 @@ export declare const en: {
     license: string;
     customLicense: string;
     reviewedVersionLine: string;
+    reviewedPinLine: string;
     deniedCode: string;
     notInCatalogCode: string;
     versionMismatchCode: string;
     needsAcknowledgementCode: string;
     gitMissingCode: string;
+    tarballIntegrityCode: string;
     githubSource: string;
     installedSection: string;
     installedVersion: string;
@@ -128,6 +136,7 @@ export declare const en: {
     uninstalling: string;
     uninstallFailed: string;
     uninstallTransportFailed: string;
+    uninstalledLiveNotice: string;
     uninstalledRestartNotice: string;
     restart: string;
     restartTitle: string;
@@ -136,6 +145,7 @@ export declare const en: {
     restarting: string;
     restartFailedNotice: string;
     restartTransportFailed: string;
+    restartDisabledNotice: string;
     updateFailed: string;
     updateTransportFailed: string;
     checkUpdate: string;

package/lib/types/client/present.d.ts

@@ -18,6 +18,12 @@ export declare function displayVersion(entry: {
     source: 'npm' | 'github';
     version: string;
 }): string;
+/** The hash pin a stale line names for a repo or release-rescued entry — the
+ * reviewed commit, or the reviewed release tarball sha256 (market borrowings
+ * §3.1). Shortened to 7 chars like the card's own version; '' only for a
+ * hand-built fixture carrying no pin. The npm form is a version and keeps the
+ * version line's `v` prefix instead. */
+export declare function reviewHashPin(review: NonNullable<CatalogEntry['review']>): string;
 /**
  * Whether the license value is the npm idiom `SEE LICENSE IN <file>` — a
  * valid SPDX form meaning "custom license, text ships in that file". The
@@ -31,6 +37,7 @@ export interface InstallStatusShape {
     state: 'running' | 'done' | 'failed';
     log: string[];
     needsRestart?: boolean;
+    restartReason?: string;
     detail?: string;
 }
 /** The install view state machine (§7.2). */
@@ -47,6 +54,7 @@ export type InstallView = {
 } | {
     kind: 'done';
     needsRestart: boolean;
+    restartReason?: string;
 } | {
     kind: 'failed';
     detail: string;
@@ -105,15 +113,16 @@ declare const CATEGORY_KEYS: {
     readonly ui: "categoryUi";
     readonly workflow: "categoryWorkflow";
     readonly integration: "categoryIntegration";
+    readonly theme: "categoryTheme";
     readonly other: "categoryOther";
 };
 /** The locale key for one entry's category — derived entries read as `other`
  * (§6.1: a derived listing has no declared category). */
 export declare function categoryKey(entry: CatalogEntry): ShopLocaleKey;
 /** The category vocabulary as a type, derived from the map above so the
- * client never repeats the six literals. */
+ * client never repeats the seven literals. */
 export type Category = keyof typeof CATEGORY_KEYS;
-/** The six categories in display order (map insertion order). */
+/** The seven categories in display order (map insertion order). */
 export declare const CATEGORY_ORDER: Category[];
 /** The locale key for one bare category value (the filter buttons). */
 export declare function categoryLocaleKey(category: Category): ShopLocaleKey;

package/lib/types/host/catalog.d.ts

@@ -2,8 +2,10 @@
 import type { CatalogEntry, DeniedEntry } from './types.ts';
 /** Highest schemaVersion this build understands; a higher one is refused (§10).
  * 3 adds `source` and repo entries (github install channel); 4 adds `subdir`
- * for monorepo-subpackage entries (2026-08-31 hub-borrowings A). */
-export declare const SUPPORTED_SCHEMA_VERSION = 4;
+ * for monorepo-subpackage entries (2026-08-31 hub-borrowings A); 5 adds
+ * `added`, `tarball` (release rescue), the `theme` category, and
+ * `denied[].replacement` (2026-08-31 market borrowings). */
+export declare const SUPPORTED_SCHEMA_VERSION = 5;
 export interface CatalogSnapshot {
     schemaVersion: number;
     builtAt: string;

package/lib/types/host/executor.d.ts

@@ -7,6 +7,7 @@ export interface InstallStatus {
     state: InstallState;
     log: string[];
     needsRestart?: boolean;
+    restartReason?: string;
     detail?: string;
 }
 interface RunningInstall {
@@ -17,7 +18,8 @@ interface RunningInstall {
 /**
  * Run one `dsh plugin --profile <profile> add <spec>` and track it.
  * When `expectedName` is given, a zero exit is confirmed against the profile
- * manifest (§7.2 step 6) before the install reports `done`.
+ * manifest (§7.2 step 6) before the install reports `done`. When `afterDone`
+ * is given, the terminal `done` waits for it to settle (§D hot mount).
  */
 export declare function startInstall(options: {
     profile: string;
@@ -25,13 +27,18 @@ export declare function startInstall(options: {
     dshBin?: string;
     env?: NodeJS.ProcessEnv;
     expectedName?: string;
+    afterDone?: (home: string | undefined) => Promise<{
+        needsRestart: boolean;
+        restartReason?: string;
+    } | void>;
     onStatus?: (status: InstallStatus) => void;
 }): RunningInstall;
 /**
  * Run one `dsh plugin --profile <profile> remove <name>` and track it.
  * When `expectedName` is given, a zero exit is confirmed against the profile
  * manifest — the bundle must actually have LEFT `dsh.profile.bundles` — before
- * the uninstall reports `done`.
+ * the uninstall reports `done`. When `afterDone` is given, the terminal `done`
+ * waits for it to settle (§D hot mount).
  */
 export declare function startUninstall(options: {
     profile: string;
@@ -39,6 +46,10 @@ export declare function startUninstall(options: {
     dshBin?: string;
     env?: NodeJS.ProcessEnv;
     expectedName?: string;
+    afterDone?: (home: string | undefined) => Promise<{
+        needsRestart: boolean;
+        restartReason?: string;
+    } | void>;
     onStatus?: (status: InstallStatus) => void;
 }): RunningInstall;
 export {};

package/lib/types/host/hot.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Restart-free installs: mount a freshly installed plugin into the running
+ * composition through a shop-owned Include subtree (design 2026-08-31
+ * market-borrowings §4, mechanism ported from dsh-market's hot.ts).
+ *
+ * Durable state stays with the profile's `dsh.profile.bundles`, so the next
+ * boot loads the plugin through the normal bundle layer. The subtree exists
+ * only for this process: its input files live under `<profile>/.dsh-shop/`
+ * and are wiped on every boot, so a crash can never leave a file that
+ * collides with the bundle layer (inserting an id the bundle layer also
+ * inserts is a hard boot failure). Rows are prefixed `mkt-` for the same
+ * reason: within this session the hot entry must never share an id with a
+ * boot-layer entry, including a disabled one left behind by an update swap.
+ *
+ * The Include subclass suppresses `write()` — the loader otherwise persists
+ * tree changes back to the file it read (dsh-market hot.ts; the in-tree
+ * precedent is dsh's agent-presets PresetTree).
+ *
+ * Deliberate non-port: dsh-market's client-only shim (`mountClientOnlyDeps`
+ * and `shimNames`, which hot-mounted a package with no server-side entry by
+ * inserting a shim loader entry) is omitted. Our catalog never lists a
+ * package without `dsh.bundle`, so the shim branch is unreachable here
+ * (YAGNI). `hotMount` still distinguishes "no patch file / not
+ * hot-mountable" from "restart will fix it" through the bilingual `reason`.
+ */
+/** One hot-mountable insert row: a plain `- id:` / `name:` pair. */
+export interface HotRow {
+    id: string;
+    name: string;
+}
+/** The loader-side surface hot mounts consume: a cordis plugin registration
+ * and (optionally) a logger. The real ctx satisfies this structurally. */
+export interface HotContext {
+    plugin(plugin: unknown, config: unknown): PluginHandle;
+    logger?: {
+        info(message: string): void;
+        warn(message: string): void;
+    };
+}
+/** A cordis Fiber handle: `await()` settles when activation finishes (or
+ * fails); `dispose()` tears the fiber down. */
+export interface PluginHandle {
+    await(): Promise<unknown>;
+    dispose(): Promise<unknown> | void;
+}
+export interface HotMountResult {
+    ok: boolean;
+    /** Bilingual, distinguishing "restart will fix it" (a transient mount
+     * failure) from "this package can never hot-mount" (no patch file, or a
+     * patch the hot tree cannot replicate). null exactly when ok. */
+    reason: string | null;
+}
+/** Test injection for the host shell (filesystem + ctx + clock). Production
+ * defaults: the real include import, node:fs, `join(profileDir, '.dsh-shop')`
+ * and `DSH_SHOP_HOT_MOUNT_TIMEOUT_MS || 10000`. */
+export interface HotDeps {
+    /** The tree class to mount; production loads the Include class via the
+     * optional peer. An explicit null means "the include is unavailable" and
+     * short-circuits the load (the old-harness fallback). */
+    hotTreeClass?: unknown;
+    fs?: HotFs;
+    dir?: string;
+    timeoutMs?: number;
+    now?: () => number;
+}
+/** The node:fs surface hot.ts uses; injectable so tests never touch disk. */
+export interface HotFs {
+    read: (path: string) => string;
+    write: (path: string, data: string) => void;
+    list: (path: string) => string[];
+}
+/**
+ * Parse a bundle patch into the plain insert rows a hot tree can replicate.
+ * Only `- id:` / `name:` pairs parse — a row with config, an expression
+ * name, or a dangling id returns null, and the caller falls back to restart
+ * activation. CRLF-aware: a patch authored with Windows line endings must
+ * not read as "contains config rows" (the Windows-patch regression their
+ * hot.ts documents). Pure: string in, rows out.
+ */
+export declare function parseSimplePatch(patchText: string): HotRow[] | null;
+/**
+ * Mount one installed package into the running composition through an
+ * Include subtree: read its bundle patch, replicate the simple rows under
+ * `mkt-` ids into `<profile>/.dsh-shop/hot-<n>.yml`, register the tree, and
+ * race its activation against `timeoutMs`. Success returns `ok: true` with
+ * no reason; any fallback returns `ok: false` with a bilingual reason
+ * distinguishing "restart will fix it" (timeout, activation failure,
+ * unavailable include) from "this package can never hot-mount" (no patch
+ * file, or rows the hot tree cannot replicate). The plugin is installed in
+ * the bundle layer either way, so a restart always activates it.
+ */
+export declare function hotMount(ctx: HotContext, profileDir: string, packageName: string, deps?: HotDeps): Promise<HotMountResult>;
+/**
+ * Dispose a package's hot mount. Returns false (without touching anything)
+ * when the name is not mounted; the handle leaves the map before the
+ * dispose so a mount can never be disposed twice, and a throwing dispose
+ * propagates — the plugin may still be live in this session.
+ */
+export declare function hotUnmount(packageName: string): Promise<boolean>;
+/** The package names hot-mounted this session, in mount order. */
+export declare function listHotMounts(): string[];
+/** Wipe the session's mount inputs at host start: `hot-<n>.yml` files under
+ * `<profile>/.dsh-shop/` only — anything else in the namespace directory is
+ * left alone, and a missing directory is a no-op. */
+export declare function cleanHotDir(profileDir: string): void;