dsh-plugin-shop 0.4.4 → 0.4.6

package/README.md

@@ -46,10 +46,13 @@ install them once with `npm install -g @deepseek-ai/dsh pnpm` and verify with
 `dsh --version` and `pnpm --version`.
 
 ```sh
-# dsh on PATH (global install):
-dsh plugin --profile web add dsh-plugin-shop
+# dsh on PATH (global install). The explicit version pin matters: pnpm 11
+# holds back very recent releases, so a bare `add dsh-plugin-shop` can hand
+# you an older version for a while. Pin the current release — refresh it
+# with `npm view dsh-plugin-shop version`.
+dsh plugin --profile web add dsh-plugin-shop@0.4.6
 # or straight through npx, nothing installed:
-npx -y @deepseek-ai/dsh plugin --profile web add dsh-plugin-shop
+npx -y @deepseek-ai/dsh plugin --profile web add dsh-plugin-shop@0.4.6
 ```
 
 Replace `web` with your profile if you use another one. Then restart `dsh` once — a
@@ -75,10 +78,11 @@ profile.
 ls -1 "${DSH_HOME:-$HOME/.dsh}/profiles" | grep -v '^node_modules$'
 ```
 
-**2. Install.**
+**2. Install.** Pin the version — the explicit pin bypasses pnpm's release
+cooldown, and deterministic installs are the point of the agent path.
 
 ```sh
-dsh plugin --profile <profile> add dsh-plugin-shop
+dsh plugin --profile <profile> add dsh-plugin-shop@0.4.6
 ```
 
 **3. Verify — do not skip this.** A zero exit from step 2 means pnpm resolved the
@@ -101,7 +105,7 @@ bundle is not.
 | What you see | What it means | What to do |
 |---|---|---|
 | `error: required option '--profile <name>' not specified` | `--profile` was omitted | Pass it; there is no default |
-| A version older than npm's `latest` gets installed | pnpm 11 holds back very recently published versions | Expected, not an error; the newest lands once its cooldown passes |
+| A version older than npm's `latest` gets installed | pnpm 11 holds back very recently published versions | Pin the version explicitly: `dsh plugin --profile <p> add dsh-plugin-shop@<version>` |
 | `client bundles not found ... lib/client.js` | the copy on disk was built without its browser half | Install from npm rather than from a source checkout, or run `pnpm build` in that checkout |
 | `dsh: pnpm not found on PATH — install pnpm to manage profile plugins` | `dsh plugin` forwards to pnpm, and pnpm is missing | `npm install -g pnpm` |
 | `no profile directory found above <path>` | the plugin could not locate its profile | Please report it — this is resolved from `ctx.baseUrl` and should not fail |
@@ -116,6 +120,7 @@ bundle is not.
 | **Enable / disable** | Applies to an installed plugin without a restart |
 | **Installed state** | An installed plugin shows an Installed label on its card — or an Update button when the catalog has a newer version — plus an Uninstall button; the Installed filter in the category bar shows only installed plugins |
 | **Restart** | After an install, update, or uninstall, the shop offers to restart dsh — stating the cost first: the page disconnects and in-flight work is interrupted |
+| **Self-update** | The shop shows its own version next to the search box, checks npm for a newer release, and updates itself with the pinned version — then the usual restart |
 
 ## 🧩 How it is put together
 
@@ -125,9 +130,9 @@ boundary:
 | Half | Entry | Can reach | Cannot reach |
 |---|---|---|---|
 | **Host** | `dsh-plugin-shop` | The network (catalog fetch and sha256 verify), the filesystem (cache), `dsh plugin add` under a per-profile mutex | — |
-| **Client** | `dsh-plugin-shop/client` | Exactly seven `shop/*` Remote methods | The network, the filesystem |
+| **Client** | `dsh-plugin-shop/client` | Exactly nine `shop/*` Remote methods | The network, the filesystem |
 
-Compromising the browser half buys an attacker those seven calls and nothing more.
+Compromising the browser half buys an attacker those nine calls and nothing more.
 
 ## ⚙️ Configuration
 

package/lib/client.js

@@ -4370,6 +4370,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"ok": literal(false),
 			"detail": string()
 		})]);
+		const dsh_plugin_shop_shop_updateStart_parameter_0$schema = object({ "version": string() });
+		const dsh_plugin_shop_shop_updateStart_result$schema = union([object({
+			"ok": literal(true),
+			"installId": string()
+		}), object({
+			"ok": literal(false),
+			"detail": string()
+		})]);
+		const dsh_plugin_shop_shop_version_result$schema = object({
+			"installed": string(),
+			"latest": union([literal(null), string()]),
+			"outdated": boolean()
+		});
 		const TYPERT_REMOTE = {
 			package: "dsh-plugin-shop",
 			descriptors: [
@@ -4397,7 +4410,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 225,
+						"line": 244,
 						"column": 9
 					}
 				},
@@ -4415,7 +4428,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 300,
+						"line": 319,
 						"column": 9
 					}
 				},
@@ -4443,7 +4456,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 251,
+						"line": 270,
 						"column": 9
 					}
 				},
@@ -4470,7 +4483,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 289,
+						"line": 308,
 						"column": 3
 					}
 				},
@@ -4488,7 +4501,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 373,
+						"line": 392,
 						"column": 9
 					}
 				},
@@ -4515,7 +4528,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 194,
+						"line": 213,
 						"column": 3
 					}
 				},
@@ -4543,7 +4556,52 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-plugin-shop/src/host/index.ts",
-						"line": 340,
+						"line": 359,
+						"column": 9
+					}
+				},
+				{
+					id: "dsh-plugin-shop#shop/updateStart",
+					service: "shop",
+					namespace: "shop",
+					method: "updateStart",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "args",
+						wire: "args",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "dsh-plugin-shop#shop/updateStart:args",
+							schema: dsh_plugin_shop_shop_updateStart_parameter_0$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "dsh-plugin-shop/types#ShopUpdateResult",
+						schema: dsh_plugin_shop_shop_updateStart_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-plugin-shop/src/host/index.ts",
+						"line": 441,
+						"column": 9
+					}
+				},
+				{
+					id: "dsh-plugin-shop#shop/version",
+					service: "shop",
+					namespace: "shop",
+					method: "version",
+					invocation: { kind: "direct" },
+					parameters: [],
+					result: {
+						mode: "strict",
+						typeSymbol: "dsh-plugin-shop/types#ShopVersionResult",
+						schema: dsh_plugin_shop_shop_version_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-plugin-shop/src/host/index.ts",
+						"line": 426,
 						"column": 9
 					}
 				}
@@ -4769,6 +4827,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			restarting: "正在重启，服务器就绪后页面会自动刷新…",
 			restartFailedNotice: "重启后服务器没有回来。请手动启动：dsh web（新进程的日志在商店缓存目录的 restart.log）",
 			restartTransportFailed: "重启请求未能送达。请稍后重试。",
+			updateFailed: "更新失败",
+			updateTransportFailed: "更新请求未能送达。请稍后重试。",
+			checkUpdate: "检查更新",
 			enabledSwitch: "启用",
 			toggleFailed: "设置失败，请重试。",
 			hotApplyNote: "无需重启，立即生效"
@@ -4835,6 +4896,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			restarting: "Restarting; the page will refresh once the server is back…",
 			restartFailedNotice: "The server did not come back after the restart. Start it manually: dsh web (see restart.log in the shop cache directory)",
 			restartTransportFailed: "The restart request could not be delivered. Please retry.",
+			updateFailed: "Update failed",
+			updateTransportFailed: "The update request could not be delivered. Please retry.",
+			checkUpdate: "Check for updates",
 			enabledSwitch: "Enable",
 			toggleFailed: "Failed to update. Please retry.",
 			hotApplyNote: "takes effect without a restart"
@@ -4946,8 +5010,50 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			};
 		}
 		//#endregion
+		//#region src/client/useUpdateSelf.ts
+		/** Self-update driving hook for the shop itself: start, poll to terminal.
+		* Shares the install view machine and poll loop; the start mapping is the
+		* uninstall one — a business refusal (a non-semver version) lands in the
+		* `failed` view with the host's detail, never in the install `rejected`
+		* codes. */
+		/** Drive one self-update: the host's business union, the shared polling
+		* loop, and terminal states. The `rejected` install state never occurs. */
+		function useUpdateSelf(updateStart, installStatus) {
+			const [view, setView] = (0, react.useState)({ kind: "idle" });
+			const start = (0, react.useCallback)(async (args) => {
+				setView({ kind: "idle" });
+				try {
+					const result = await updateStart(args);
+					if (!result.ok) {
+						setView({
+							kind: "failed",
+							detail: result.detail,
+							log: []
+						});
+						return;
+					}
+					setView({
+						kind: "running",
+						installId: result.installId,
+						log: []
+					});
+				} catch {
+					setView({
+						kind: "failed",
+						detail: "",
+						log: []
+					});
+				}
+			}, [updateStart]);
+			usePollStatus(view, setView, installStatus);
+			return {
+				view,
+				start
+			};
+		}
+		//#endregion
 		//#region \0dsh-plugin-shop-css:e3675a89
-		const css = "/* Shop tab styles — a market shelf inside the settings surface. The visual\n * language is the dsh theme's alias tokens ONLY (the four tokens the previous\n * styles referenced that do not exist — bg-layer-3, interactive-bg-hover,\n * state-error, state-success — are corrected to bg-layer-2 and the\n * state-*-primary set). The signature is the category spine: one HUE per\n * category (six fixed hues, not the brand token — the brand resolves to\n * near-black in the light theme, so six brand opacities read as six shades\n * of gray), with the category name as the cover label in the same hue. Class names are mapped to content-derived names at bundle time\n * (tsdown.s8583e3_client.s942a79_config.s5f67aa_ts) and stubbed in tests; only the keys are relied\n * on.\n *\n * One token rule the theme forces: the background LAYERS do not carry\n * contrast. In the light theme bg-base, bg-layer-1, bg-layer-2 and\n * bg-layer-3 all resolve to the same white; only the dark theme spreads them\n * (950/875/850/800). So a layer-2 fill on a layer-1 ground is invisible for\n * half of all users, and anything whose fill is its ONLY affordance — the\n * loading skeleton, the borderless capability chips — derives its fill from\n * label-primary instead, which inverts with the theme by construction.\n * Elements that also carry a border or text may keep a layer fill.\n * `css-tokens.s8583e3_client.sfd9d8a_spec.s5f67aa_ts` pins this. */\n\n.s255e5a_panel {\n  display: flex;\n  flex-direction: column;\n  gap: 14px;\n}\n\n.s44a3ec_stateLine {\n  margin: 0;\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n}\n\n/* Visually hidden but screen-reader readable (the loading copy while the\n * skeleton stands in visually). */\n.s3a0ece_srOnly {\n  position: absolute;\n  width: 1px;\n  height: 1px;\n  margin: -1px;\n  padding: 0;\n  border: 0;\n  clip: rect(0 0 0 0);\n  clip-path: inset(50%);\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n/* The loading shelf: ghost cards with the same geometry as the real grid, so\n * the swap to content is a same-shape handoff instead of a jump. */\n.se0c3b4_skeletonGrid {\n  display: grid;\n  grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));\n  gap: 12px;\n}\n\n.s520416_skeletonCard {\n  position: relative;\n  display: flex;\n  flex-direction: column;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n  overflow: hidden;\n}\n\n/* The shimmer sweep: one gradient band travels across each ghost card while\n * the bars breathe, so the loading state reads as \"the shelf is scanning\". */\n.s520416_skeletonCard::after {\n  content: '';\n  position: absolute;\n  inset: 0;\n  background: linear-gradient(\n    100deg,\n    transparent 25%,\n    color-mix(in srgb, var(--dsw-alias-label-primary) 14%, transparent) 50%,\n    transparent 75%\n  );\n  transform: translateX(-100%);\n  animation: dshShopSkeletonSweep 1.4s ease-in-out infinite;\n  pointer-events: none;\n}\n\n@keyframes dshShopSkeletonSweep {\n  to { transform: translateX(100%); }\n}\n\n.s30e662_skeletonCover {\n  display: block;\n  height: 26px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 10%, transparent);\n}\n\n.s8c7d6f_skeletonName {\n  width: 55%;\n  height: 14px;\n  margin: 12px 12px 0;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 8%, transparent);\n}\n\n.sf5179e_skeletonSummary {\n  width: 92%;\n  height: 12px;\n  margin: 10px 12px 0;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 8%, transparent);\n}\n\n.sbb0d25_skeletonSummaryShort {\n  width: 68%;\n  height: 12px;\n  margin: 6px 12px 14px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 8%, transparent);\n}\n\n.s520416_skeletonCard span {\n  animation: dshShopSkeletonPulse 1.6s ease-in-out infinite;\n}\n\n@keyframes dshShopSkeletonPulse {\n  0%, 100% { opacity: 0.5; }\n  50% { opacity: 1; }\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .s520416_skeletonCard span { animation: none; opacity: 0.75; }\n  .s520416_skeletonCard::after { content: none; }\n}\n\n.s73242a_actionButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.s73242a_actionButton:hover {\n  border-color: color-mix(in srgb, var(--dsw-alias-brand-primary) 45%, var(--dsw-alias-border-l2));\n  color: var(--dsw-alias-brand-primary);\n}\n\n.s73242a_actionButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.s646509_toolbar {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n  flex-wrap: wrap;\n}\n\n.s232ec4_searchInput {\n  width: min(280px, 100%);\n  padding: 6px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n}\n\n.s232ec4_searchInput:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.s1555aa_staleBlock {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.s3946f1_staleBadge {\n  padding: 2px 8px;\n  border-radius: 999px;\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 14%, transparent);\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary) 40%, transparent);\n  color: var(--dsw-alias-state-warn-primary);\n  font-size: 12px;\n}\n\n.sb2c859_categoryBar {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  margin-top: 6px;\n}\n\n.s26d58e_categoryButton {\n  padding: 3px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.s26d58e_categoryButton:hover {\n  border-color: color-mix(in srgb, var(--dsw-alias-brand-primary) 45%, var(--dsw-alias-border-l2));\n  color: var(--dsw-alias-brand-primary);\n}\n\n.s5f68c4_categoryButtonOn {\n  border-color: var(--dsw-alias-brand-primary);\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 12%, transparent);\n  color: var(--dsw-alias-brand-primary);\n  font-weight: 600;\n}\n\n.s26d58e_categoryButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.s668774_catalogHeading {\n  margin: 2px 0 0;\n  font-size: 16px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-primary);\n}\n\n.sccc4d1_catalogStats {\n  margin: 6px 0 0;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 12px;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s6de1ab_emptyLine {\n  margin: 0;\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n}\n\n/* The shelf: a responsive grid of cards. */\n.sf657f5_cards {\n  display: grid;\n  grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));\n  gap: 12px;\n  list-style: none;\n  margin: 0;\n  padding: 0;\n  animation: dshShopCardsIn 220ms ease;\n}\n\n@keyframes dshShopCardsIn {\n  from { opacity: 0; transform: translateY(3px); }\n  to { opacity: 1; transform: none; }\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .sf657f5_cards { animation: none; }\n}\n\n.s65f383_card {\n  position: relative;\n  display: flex;\n  flex-direction: column;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n  overflow: hidden;\n  transition: border-color 120ms ease, transform 120ms ease, box-shadow 120ms ease;\n  /* Off-screen cards skip layout and paint; the placeholder keeps scrollbar\n   * estimation sane before the browser has measured the real height. */\n  content-visibility: auto;\n  contain-intrinsic-size: auto 240px;\n}\n\n/* The sentinel that triggers the next shelf batch: zero visual footprint. */\n.sd7ee01_cardsSentry {\n  height: 1px;\n  margin: 0;\n  padding: 0;\n}\n\n.s705cc6_showingLine {\n  margin: 0;\n  font-size: 12px;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s65f383_card:hover {\n  border-color: color-mix(in srgb, var(--dsw-alias-brand-primary) 45%, var(--dsw-alias-border-l1));\n  transform: translateY(-1px);\n  box-shadow: 0 2px 8px color-mix(in srgb, var(--dsw-alias-brand-primary) 12%, transparent);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .s65f383_card { transition: none; }\n  .s65f383_card:hover { transform: none; }\n}\n\n/* The signature: a spine and cover in the category's own hue. The hues are\n * fixed mid-bright colors that read on both themes; `other` deliberately\n * stays a neutral gray so the fallback category does not compete. */\n.s4ce25d_cardSpine {\n  position: absolute;\n  top: 0;\n  bottom: 0;\n  left: 0;\n  width: 3px;\n  background: var(--spine-hue, #8B8E96);\n}\n\n.s65f383_card[data-category='tool'] { --spine-hue: #4C8DFF; }\n.s65f383_card[data-category='provider'] { --spine-hue: #A78BFA; }\n.s65f383_card[data-category='ui'] { --spine-hue: #2DD4BF; }\n.s65f383_card[data-category='workflow'] { --spine-hue: #F59E0B; }\n.s65f383_card[data-category='integration'] { --spine-hue: #34D399; }\n.s65f383_card[data-category='other'] { --spine-hue: #8B8E96; }\n\n.s9e2bec_cardCover {\n  display: block;\n  padding: 5px 12px 5px 12px;\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  background: color-mix(in srgb, var(--spine-hue, #8B8E96) 12%, transparent);\n}\n\n.s1a7c5b_coverLabel {\n  display: block;\n  font-size: 11px;\n  font-weight: 600;\n  letter-spacing: 0.08em;\n  text-transform: uppercase;\n  color: var(--spine-hue, #8B8E96);\n}\n\n.sa97234_entryHeader {\n  display: flex;\n  flex-direction: column;\n  align-items: stretch;\n  gap: 8px;\n  padding: 10px 12px 6px;\n  border: none;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n\n.sa97234_entryHeader:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n/* The name owns the full header width; badges sit on their own line below. */\n.sc3f149_name {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 13px;\n  font-weight: 600;\n  overflow-wrap: anywhere;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s513026_badges {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: 6px;\n}\n\n.s5e82cb_tierBadge {\n  padding: 1px 7px;\n  border-radius: 999px;\n  font-size: 11px;\n  line-height: 1.6;\n}\n\n.s5e82cb_tierBadge[data-tier='verified'] {\n  color: var(--dsw-alias-state-success-primary);\n  background: color-mix(in srgb, var(--dsw-alias-state-success-primary) 14%, transparent);\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-success-primary) 40%, transparent);\n}\n\n.s5e82cb_tierBadge[data-tier='verified-stale'] {\n  color: var(--dsw-alias-state-warn-primary);\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 14%, transparent);\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary) 40%, transparent);\n}\n\n.s5e82cb_tierBadge[data-tier='community'] {\n  color: var(--dsw-alias-label-secondary);\n  background: var(--dsw-alias-bg-layer-2);\n  border: 1px solid var(--dsw-alias-border-l2);\n}\n\n.s23e3e1_unclaimedBadge {\n  padding: 1px 7px;\n  border-radius: 999px;\n  border: 1px dashed var(--dsw-alias-border-l2);\n  font-size: 11px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sff43b4_starsBadge {\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s73f7fb_chevron, .s61393c_chevronOpen {\n  color: var(--dsw-alias-label-secondary);\n  transition: transform 120ms ease;\n}\n\n.s61393c_chevronOpen { transform: rotate(180deg); }\n\n@media (prefers-reduced-motion: reduce) {\n  .s73f7fb_chevron, .s61393c_chevronOpen { transition: none; }\n}\n\n.s820ebf_body {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  padding: 0 12px 12px;\n}\n\n.sb8fbc8_summary {\n  margin: 0;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n  display: -webkit-box;\n  -webkit-line-clamp: 2;\n  -webkit-box-orient: vertical;\n  overflow: hidden;\n}\n\n.se507db_summaryZh {\n  margin: -4px 0 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-secondary);\n  display: -webkit-box;\n  -webkit-line-clamp: 1;\n  -webkit-box-orient: vertical;\n  overflow: hidden;\n}\n\n/* Expanded cards show the full summary: the clamp is lifted, never raised —\n * a higher number would still truncate the author's text, just later. */\n.s10baf0_summaryExpanded {\n  -webkit-line-clamp: unset;\n  display: block;\n}\n\n.sb9dba9_summaryZhExpanded {\n  -webkit-line-clamp: unset;\n  display: block;\n}\n\n.s9d2029_capabilitiesBlock {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n.s3bdbd5_capabilitiesNote {\n  margin: 0;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s441702_capabilities {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 4px;\n  list-style: none;\n  margin: 0;\n  padding: 0;\n}\n\n.s441702_capabilities li {\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 6%, transparent);\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sde3f0c_detail {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  padding-top: 8px;\n}\n\n.se98179_detailRows {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  margin: 0;\n}\n\n.sfb4d2f_detailRow {\n  display: flex;\n  justify-content: space-between;\n  gap: 12px;\n  font-size: 12px;\n}\n\n.sfb4d2f_detailRow dt {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sfb4d2f_detailRow dd {\n  margin: 0;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  overflow-wrap: anywhere;\n  text-align: right;\n  color: var(--dsw-alias-label-primary);\n}\n\n.sfb4d2f_detailRow a {\n  color: var(--dsw-alias-brand-primary);\n  text-decoration: none;\n}\n\n.sfb4d2f_detailRow a:hover {\n  text-decoration: underline;\n}\n\n.sfb4d2f_detailRow a:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.sd58c6d_reviewedLine {\n  margin: 8px 0 0;\n  padding: 6px 8px;\n  border-radius: 6px;\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 12%, transparent);\n  font-size: 12px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n/* Install flow. */\n.s4d374c_installPanel {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  margin-top: 2px;\n}\n\n.se7aaed_installButton, .sb43a49_confirmButton, .s6e45d1_cancelButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border-radius: 6px;\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.se7aaed_installButton {\n  border: 1px solid var(--dsw-alias-brand-primary);\n  background: var(--dsw-alias-brand-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.se7aaed_installButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 88%, var(--dsw-alias-label-primary));\n}\n\n.sb43a49_confirmButton {\n  border: 1px solid var(--dsw-alias-brand-primary);\n  background: var(--dsw-alias-brand-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.sb43a49_confirmButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 88%, var(--dsw-alias-label-primary));\n}\n\n.s6e45d1_cancelButton {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-primary);\n}\n\n.s6e45d1_cancelButton:hover {\n  border-color: var(--dsw-alias-label-secondary);\n}\n\n.se7aaed_installButton:focus-visible, .sb43a49_confirmButton:focus-visible, .s6e45d1_cancelButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n/* The shelf card of a plugin that is installed and current carries this\n * non-interactive label instead of an install button. Border + text do the\n * work in the light theme, where every bg-layer token resolves to white. */\n.sb6fc74_installedLabel {\n  align-self: flex-start;\n  margin: 0;\n  padding: 5px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  font-size: 13px;\n  color: var(--dsw-alias-label-secondary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* An installed card's controls: the installed label or the update button,\n * plus the uninstall button. The install panel's running/failed states are\n * column layouts and sit as one item of this row. */\n.sf53ca0_installedActions {\n  display: flex;\n  align-items: flex-start;\n  flex-wrap: wrap;\n  gap: 8px;\n}\n\n/* Uninstall revokes privilege; the quiet outline keeps it from competing\n * with the primary action, and the error tint says \"removes\". */\n.s96967f_uninstallButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-error-primary) 55%, transparent);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-state-error-primary);\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.s96967f_uninstallButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-state-error-primary) 10%, transparent);\n}\n\n.s96967f_uninstallButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-state-error-primary);\n  outline-offset: 1px;\n}\n\n/* The restart dsh button on a done install: quiet outline, same rank as\n * the other secondary actions. */\n.s6ac237_restartButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.s6ac237_restartButton:hover {\n  border-color: var(--dsw-alias-label-secondary);\n}\n\n.s6ac237_restartButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.sc4f2ac_gate {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  padding: 10px;\n  border: 1px solid var(--dsw-alias-state-warn-primary);\n  border-radius: 8px;\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 8%, transparent);\n}\n\n.s559c38_gateTitle {\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.s3c0ace_gateBody {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s4b2373_gateActions {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n}\n\n.s52b5a5_installing {\n  margin: 0;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s64ab71_log {\n  max-height: 160px;\n  overflow: auto;\n  margin: 0;\n  padding: 8px;\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-base);\n  border: 1px solid var(--dsw-alias-border-l1);\n  list-style: none;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  line-height: 1.5;\n}\n\n.s1531a8_logLine {\n  white-space: pre-wrap;\n  word-break: break-all;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sf20dda_notice {\n  margin: 0;\n  font-size: 12px;\n  color: var(--dsw-alias-state-success-primary);\n}\n\n.seb9b08_failedHeading {\n  margin: 0;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.sfd3021_failedDetail {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s50ba35_rejectedCode {\n  margin: 0;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.se75489_rejectedDetail {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* Installed section. */\n.sa276cf_outdatedSection {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  margin-top: 6px;\n}\n\n.sceae6e_outdatedList {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  list-style: none;\n  margin: 0;\n  padding: 0;\n}\n\n.s8d2072_outdatedRow {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n  flex-wrap: wrap;\n  padding: 10px 12px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.s5c2545_outdatedInfo {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n.s5c2545_outdatedInfo strong {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 13px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s877c68_outdatedVersions {\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sa1f556_outdatedActions {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n}\n\n/* The enable/disable switch. */\n.s11c019_switch {\n  position: relative;\n  width: 32px;\n  height: 18px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-2);\n  cursor: pointer;\n  transition: background 120ms ease, border-color 120ms ease;\n}\n\n.s7580e8_switchOn {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: color-mix(in srgb, var(--dsw-alias-state-success-primary) 55%, transparent);\n}\n\n.saab2b3_switchKnob {\n  position: absolute;\n  top: 2px;\n  left: 2px;\n  width: 12px;\n  height: 12px;\n  border-radius: 999px;\n  background: var(--dsw-alias-label-primary);\n  transition: transform 120ms ease, background 120ms ease;\n}\n\n.s7580e8_switchOn .saab2b3_switchKnob {\n  transform: translateX(14px);\n  background: var(--dsw-alias-bg-base);\n}\n\n.s11c019_switch:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .s11c019_switch, .saab2b3_switchKnob { transition: none; }\n}\n";
+		const css = "/* Shop tab styles — a market shelf inside the settings surface. The visual\n * language is the dsh theme's alias tokens ONLY (the four tokens the previous\n * styles referenced that do not exist — bg-layer-3, interactive-bg-hover,\n * state-error, state-success — are corrected to bg-layer-2 and the\n * state-*-primary set). The signature is the category spine: one HUE per\n * category (six fixed hues, not the brand token — the brand resolves to\n * near-black in the light theme, so six brand opacities read as six shades\n * of gray), with the category name as the cover label in the same hue. Class names are mapped to content-derived names at bundle time\n * (tsdown.s8583e3_client.s942a79_config.s5f67aa_ts) and stubbed in tests; only the keys are relied\n * on.\n *\n * One token rule the theme forces: the background LAYERS do not carry\n * contrast. In the light theme bg-base, bg-layer-1, bg-layer-2 and\n * bg-layer-3 all resolve to the same white; only the dark theme spreads them\n * (950/875/850/800). So a layer-2 fill on a layer-1 ground is invisible for\n * half of all users, and anything whose fill is its ONLY affordance — the\n * loading skeleton, the borderless capability chips — derives its fill from\n * label-primary instead, which inverts with the theme by construction.\n * Elements that also carry a border or text may keep a layer fill.\n * `css-tokens.s8583e3_client.sfd9d8a_spec.s5f67aa_ts` pins this. */\n\n.s255e5a_panel {\n  display: flex;\n  flex-direction: column;\n  gap: 14px;\n}\n\n.s44a3ec_stateLine {\n  margin: 0;\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n}\n\n/* Visually hidden but screen-reader readable (the loading copy while the\n * skeleton stands in visually). */\n.s3a0ece_srOnly {\n  position: absolute;\n  width: 1px;\n  height: 1px;\n  margin: -1px;\n  padding: 0;\n  border: 0;\n  clip: rect(0 0 0 0);\n  clip-path: inset(50%);\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n/* The loading shelf: ghost cards with the same geometry as the real grid, so\n * the swap to content is a same-shape handoff instead of a jump. */\n.se0c3b4_skeletonGrid {\n  display: grid;\n  grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));\n  gap: 12px;\n}\n\n.s520416_skeletonCard {\n  position: relative;\n  display: flex;\n  flex-direction: column;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n  overflow: hidden;\n}\n\n/* The shimmer sweep: one gradient band travels across each ghost card while\n * the bars breathe, so the loading state reads as \"the shelf is scanning\". */\n.s520416_skeletonCard::after {\n  content: '';\n  position: absolute;\n  inset: 0;\n  background: linear-gradient(\n    100deg,\n    transparent 25%,\n    color-mix(in srgb, var(--dsw-alias-label-primary) 14%, transparent) 50%,\n    transparent 75%\n  );\n  transform: translateX(-100%);\n  animation: dshShopSkeletonSweep 1.4s ease-in-out infinite;\n  pointer-events: none;\n}\n\n@keyframes dshShopSkeletonSweep {\n  to { transform: translateX(100%); }\n}\n\n.s30e662_skeletonCover {\n  display: block;\n  height: 26px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 10%, transparent);\n}\n\n.s8c7d6f_skeletonName {\n  width: 55%;\n  height: 14px;\n  margin: 12px 12px 0;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 8%, transparent);\n}\n\n.sf5179e_skeletonSummary {\n  width: 92%;\n  height: 12px;\n  margin: 10px 12px 0;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 8%, transparent);\n}\n\n.sbb0d25_skeletonSummaryShort {\n  width: 68%;\n  height: 12px;\n  margin: 6px 12px 14px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 8%, transparent);\n}\n\n.s520416_skeletonCard span {\n  animation: dshShopSkeletonPulse 1.6s ease-in-out infinite;\n}\n\n@keyframes dshShopSkeletonPulse {\n  0%, 100% { opacity: 0.5; }\n  50% { opacity: 1; }\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .s520416_skeletonCard span { animation: none; opacity: 0.75; }\n  .s520416_skeletonCard::after { content: none; }\n}\n\n.s73242a_actionButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.s73242a_actionButton:hover {\n  border-color: color-mix(in srgb, var(--dsw-alias-brand-primary) 45%, var(--dsw-alias-border-l2));\n  color: var(--dsw-alias-brand-primary);\n}\n\n.s73242a_actionButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.s646509_toolbar {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n  flex-wrap: wrap;\n}\n\n.s745e3c_toolbarRight {\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  flex-wrap: wrap;\n}\n\n/* The shop's own version, right of the search box: `v0.4.4`, plus the\n * update button when the version check found a newer release. */\n.s4fe61f_versionBlock {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.sb9b924_versionText {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 12px;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sa04455_updateSelfButton {\n  padding: 2px 10px;\n  border: 1px solid var(--dsw-alias-brand-primary);\n  border-radius: 999px;\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 12%, transparent);\n  color: var(--dsw-alias-brand-primary);\n  font-size: 12px;\n  font-weight: 600;\n  cursor: pointer;\n}\n\n.sa04455_updateSelfButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 20%, transparent);\n}\n\n.sa04455_updateSelfButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n/* The on-demand re-check next to the version number: a quiet pill; the\n * border and text carry it in the light theme where bg layers are white. */\n.s614a38_checkUpdateButton {\n  padding: 2px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.s614a38_checkUpdateButton:hover {\n  border-color: var(--dsw-alias-label-secondary);\n  color: var(--dsw-alias-label-primary);\n}\n\n.s614a38_checkUpdateButton:disabled {\n  opacity: 0.6;\n  cursor: default;\n}\n\n.s614a38_checkUpdateButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n/* The self-update's expanded states (running log / done + restart /\n * failure detail) sit under the toolbar, above the category bar. */\n.sb81ba5_selfUpdatePanel {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  margin-top: 8px;\n}\n\n.s232ec4_searchInput {\n  width: min(280px, 100%);\n  padding: 6px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n}\n\n.s232ec4_searchInput:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.s1555aa_staleBlock {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n\n.s3946f1_staleBadge {\n  padding: 2px 8px;\n  border-radius: 999px;\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 14%, transparent);\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary) 40%, transparent);\n  color: var(--dsw-alias-state-warn-primary);\n  font-size: 12px;\n}\n\n.sb2c859_categoryBar {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 6px;\n  margin-top: 6px;\n}\n\n.s26d58e_categoryButton {\n  padding: 3px 10px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  cursor: pointer;\n}\n\n.s26d58e_categoryButton:hover {\n  border-color: color-mix(in srgb, var(--dsw-alias-brand-primary) 45%, var(--dsw-alias-border-l2));\n  color: var(--dsw-alias-brand-primary);\n}\n\n.s5f68c4_categoryButtonOn {\n  border-color: var(--dsw-alias-brand-primary);\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 12%, transparent);\n  color: var(--dsw-alias-brand-primary);\n  font-weight: 600;\n}\n\n.s26d58e_categoryButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.s668774_catalogHeading {\n  margin: 2px 0 0;\n  font-size: 16px;\n  font-weight: 600;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-primary);\n}\n\n.sccc4d1_catalogStats {\n  margin: 6px 0 0;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 12px;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s6de1ab_emptyLine {\n  margin: 0;\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n}\n\n/* The shelf: a responsive grid of cards. */\n.sf657f5_cards {\n  display: grid;\n  grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));\n  gap: 12px;\n  list-style: none;\n  margin: 0;\n  padding: 0;\n  animation: dshShopCardsIn 220ms ease;\n}\n\n@keyframes dshShopCardsIn {\n  from { opacity: 0; transform: translateY(3px); }\n  to { opacity: 1; transform: none; }\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .sf657f5_cards { animation: none; }\n}\n\n.s65f383_card {\n  position: relative;\n  display: flex;\n  flex-direction: column;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  background: var(--dsw-alias-bg-layer-1);\n  overflow: hidden;\n  transition: border-color 120ms ease, transform 120ms ease, box-shadow 120ms ease;\n  /* Off-screen cards skip layout and paint; the placeholder keeps scrollbar\n   * estimation sane before the browser has measured the real height. */\n  content-visibility: auto;\n  contain-intrinsic-size: auto 240px;\n}\n\n/* The sentinel that triggers the next shelf batch: zero visual footprint. */\n.sd7ee01_cardsSentry {\n  height: 1px;\n  margin: 0;\n  padding: 0;\n}\n\n.s705cc6_showingLine {\n  margin: 0;\n  font-size: 12px;\n  letter-spacing: 0.02em;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s65f383_card:hover {\n  border-color: color-mix(in srgb, var(--dsw-alias-brand-primary) 45%, var(--dsw-alias-border-l1));\n  transform: translateY(-1px);\n  box-shadow: 0 2px 8px color-mix(in srgb, var(--dsw-alias-brand-primary) 12%, transparent);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .s65f383_card { transition: none; }\n  .s65f383_card:hover { transform: none; }\n}\n\n/* The signature: a spine and cover in the category's own hue. The hues are\n * fixed mid-bright colors that read on both themes; `other` deliberately\n * stays a neutral gray so the fallback category does not compete. */\n.s4ce25d_cardSpine {\n  position: absolute;\n  top: 0;\n  bottom: 0;\n  left: 0;\n  width: 3px;\n  background: var(--spine-hue, #8B8E96);\n}\n\n.s65f383_card[data-category='tool'] { --spine-hue: #4C8DFF; }\n.s65f383_card[data-category='provider'] { --spine-hue: #A78BFA; }\n.s65f383_card[data-category='ui'] { --spine-hue: #2DD4BF; }\n.s65f383_card[data-category='workflow'] { --spine-hue: #F59E0B; }\n.s65f383_card[data-category='integration'] { --spine-hue: #34D399; }\n.s65f383_card[data-category='other'] { --spine-hue: #8B8E96; }\n\n.s9e2bec_cardCover {\n  display: block;\n  padding: 5px 12px 5px 12px;\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  background: color-mix(in srgb, var(--spine-hue, #8B8E96) 12%, transparent);\n}\n\n.s1a7c5b_coverLabel {\n  display: block;\n  font-size: 11px;\n  font-weight: 600;\n  letter-spacing: 0.08em;\n  text-transform: uppercase;\n  color: var(--spine-hue, #8B8E96);\n}\n\n.sa97234_entryHeader {\n  display: flex;\n  flex-direction: column;\n  align-items: stretch;\n  gap: 8px;\n  padding: 10px 12px 6px;\n  border: none;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n\n.sa97234_entryHeader:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n/* The name owns the full header width; badges sit on their own line below. */\n.sc3f149_name {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 13px;\n  font-weight: 600;\n  overflow-wrap: anywhere;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s513026_badges {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: 6px;\n}\n\n.s5e82cb_tierBadge {\n  padding: 1px 7px;\n  border-radius: 999px;\n  font-size: 11px;\n  line-height: 1.6;\n}\n\n.s5e82cb_tierBadge[data-tier='verified'] {\n  color: var(--dsw-alias-state-success-primary);\n  background: color-mix(in srgb, var(--dsw-alias-state-success-primary) 14%, transparent);\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-success-primary) 40%, transparent);\n}\n\n.s5e82cb_tierBadge[data-tier='verified-stale'] {\n  color: var(--dsw-alias-state-warn-primary);\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 14%, transparent);\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary) 40%, transparent);\n}\n\n.s5e82cb_tierBadge[data-tier='community'] {\n  color: var(--dsw-alias-label-secondary);\n  background: var(--dsw-alias-bg-layer-2);\n  border: 1px solid var(--dsw-alias-border-l2);\n}\n\n.s23e3e1_unclaimedBadge {\n  padding: 1px 7px;\n  border-radius: 999px;\n  border: 1px dashed var(--dsw-alias-border-l2);\n  font-size: 11px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sff43b4_starsBadge {\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s73f7fb_chevron, .s61393c_chevronOpen {\n  color: var(--dsw-alias-label-secondary);\n  transition: transform 120ms ease;\n}\n\n.s61393c_chevronOpen { transform: rotate(180deg); }\n\n@media (prefers-reduced-motion: reduce) {\n  .s73f7fb_chevron, .s61393c_chevronOpen { transition: none; }\n}\n\n.s820ebf_body {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  padding: 0 12px 12px;\n}\n\n.sb8fbc8_summary {\n  margin: 0;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n  display: -webkit-box;\n  -webkit-line-clamp: 2;\n  -webkit-box-orient: vertical;\n  overflow: hidden;\n}\n\n.se507db_summaryZh {\n  margin: -4px 0 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-secondary);\n  display: -webkit-box;\n  -webkit-line-clamp: 1;\n  -webkit-box-orient: vertical;\n  overflow: hidden;\n}\n\n/* Expanded cards show the full summary: the clamp is lifted, never raised —\n * a higher number would still truncate the author's text, just later. */\n.s10baf0_summaryExpanded {\n  -webkit-line-clamp: unset;\n  display: block;\n}\n\n.sb9dba9_summaryZhExpanded {\n  -webkit-line-clamp: unset;\n  display: block;\n}\n\n.s9d2029_capabilitiesBlock {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n\n.s3bdbd5_capabilitiesNote {\n  margin: 0;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s441702_capabilities {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 4px;\n  list-style: none;\n  margin: 0;\n  padding: 0;\n}\n\n.s441702_capabilities li {\n  padding: 1px 6px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--dsw-alias-label-primary) 6%, transparent);\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sde3f0c_detail {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  padding-top: 8px;\n}\n\n.se98179_detailRows {\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n  margin: 0;\n}\n\n.sfb4d2f_detailRow {\n  display: flex;\n  justify-content: space-between;\n  gap: 12px;\n  font-size: 12px;\n}\n\n.sfb4d2f_detailRow dt {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sfb4d2f_detailRow dd {\n  margin: 0;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  overflow-wrap: anywhere;\n  text-align: right;\n  color: var(--dsw-alias-label-primary);\n}\n\n.sfb4d2f_detailRow a {\n  color: var(--dsw-alias-brand-primary);\n  text-decoration: none;\n}\n\n.sfb4d2f_detailRow a:hover {\n  text-decoration: underline;\n}\n\n.sfb4d2f_detailRow a:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.sd58c6d_reviewedLine {\n  margin: 8px 0 0;\n  padding: 6px 8px;\n  border-radius: 6px;\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 12%, transparent);\n  font-size: 12px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n/* Install flow. */\n.s4d374c_installPanel {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  margin-top: 2px;\n}\n\n.se7aaed_installButton, .sb43a49_confirmButton, .s6e45d1_cancelButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border-radius: 6px;\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.se7aaed_installButton {\n  border: 1px solid var(--dsw-alias-brand-primary);\n  background: var(--dsw-alias-brand-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.se7aaed_installButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 88%, var(--dsw-alias-label-primary));\n}\n\n.sb43a49_confirmButton {\n  border: 1px solid var(--dsw-alias-brand-primary);\n  background: var(--dsw-alias-brand-primary);\n  color: var(--dsw-alias-bg-base);\n}\n\n.sb43a49_confirmButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-brand-primary) 88%, var(--dsw-alias-label-primary));\n}\n\n.s6e45d1_cancelButton {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-primary);\n}\n\n.s6e45d1_cancelButton:hover {\n  border-color: var(--dsw-alias-label-secondary);\n}\n\n.se7aaed_installButton:focus-visible, .sb43a49_confirmButton:focus-visible, .s6e45d1_cancelButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n/* The shelf card of a plugin that is installed and current carries this\n * non-interactive label instead of an install button. Border + text do the\n * work in the light theme, where every bg-layer token resolves to white. */\n.sb6fc74_installedLabel {\n  align-self: flex-start;\n  margin: 0;\n  padding: 5px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  font-size: 13px;\n  color: var(--dsw-alias-label-secondary);\n  background: var(--dsw-alias-bg-layer-2);\n}\n\n/* An installed card's controls: the installed label or the update button,\n * plus the uninstall button. The install panel's running/failed states are\n * column layouts and sit as one item of this row. */\n.sf53ca0_installedActions {\n  display: flex;\n  align-items: flex-start;\n  flex-wrap: wrap;\n  gap: 8px;\n}\n\n/* Uninstall revokes privilege; the quiet outline keeps it from competing\n * with the primary action, and the error tint says \"removes\". */\n.s96967f_uninstallButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border: 1px solid color-mix(in srgb, var(--dsw-alias-state-error-primary) 55%, transparent);\n  border-radius: 6px;\n  background: transparent;\n  color: var(--dsw-alias-state-error-primary);\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.s96967f_uninstallButton:hover {\n  background: color-mix(in srgb, var(--dsw-alias-state-error-primary) 10%, transparent);\n}\n\n.s96967f_uninstallButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-state-error-primary);\n  outline-offset: 1px;\n}\n\n/* The restart dsh button on a done install: quiet outline, same rank as\n * the other secondary actions. */\n.s6ac237_restartButton {\n  align-self: flex-start;\n  padding: 5px 14px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-layer-2);\n  color: var(--dsw-alias-label-primary);\n  font-size: 13px;\n  cursor: pointer;\n}\n\n.s6ac237_restartButton:hover {\n  border-color: var(--dsw-alias-label-secondary);\n}\n\n.s6ac237_restartButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n.sc4f2ac_gate {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  padding: 10px;\n  border: 1px solid var(--dsw-alias-state-warn-primary);\n  border-radius: 8px;\n  background: color-mix(in srgb, var(--dsw-alias-state-warn-primary) 8%, transparent);\n}\n\n.s559c38_gateTitle {\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.s3c0ace_gateBody {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s4b2373_gateActions {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n}\n\n.s52b5a5_installing {\n  margin: 0;\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.s64ab71_log {\n  max-height: 160px;\n  overflow: auto;\n  margin: 0;\n  padding: 8px;\n  border-radius: 6px;\n  background: var(--dsw-alias-bg-base);\n  border: 1px solid var(--dsw-alias-border-l1);\n  list-style: none;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 11px;\n  line-height: 1.5;\n}\n\n.s1531a8_logLine {\n  white-space: pre-wrap;\n  word-break: break-all;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sf20dda_notice {\n  margin: 0;\n  font-size: 12px;\n  color: var(--dsw-alias-state-success-primary);\n}\n\n.seb9b08_failedHeading {\n  margin: 0;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.sfd3021_failedDetail {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s50ba35_rejectedCode {\n  margin: 0;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.se75489_rejectedDetail {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.6;\n  color: var(--dsw-alias-label-primary);\n}\n\n/* Installed section. */\n.sa276cf_outdatedSection {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  margin-top: 6px;\n}\n\n.sceae6e_outdatedList {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  list-style: none;\n  margin: 0;\n  padding: 0;\n}\n\n.s8d2072_outdatedRow {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 12px;\n  flex-wrap: wrap;\n  padding: 10px 12px;\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n}\n\n.s5c2545_outdatedInfo {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n.s5c2545_outdatedInfo strong {\n  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n  font-size: 13px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-primary);\n}\n\n.s877c68_outdatedVersions {\n  font-size: 12px;\n  color: var(--dsw-alias-label-secondary);\n}\n\n.sa1f556_outdatedActions {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n}\n\n/* The enable/disable switch. */\n.s11c019_switch {\n  position: relative;\n  width: 32px;\n  height: 18px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-2);\n  cursor: pointer;\n  transition: background 120ms ease, border-color 120ms ease;\n}\n\n.s7580e8_switchOn {\n  border-color: var(--dsw-alias-state-success-primary);\n  background: color-mix(in srgb, var(--dsw-alias-state-success-primary) 55%, transparent);\n}\n\n.saab2b3_switchKnob {\n  position: absolute;\n  top: 2px;\n  left: 2px;\n  width: 12px;\n  height: 12px;\n  border-radius: 999px;\n  background: var(--dsw-alias-label-primary);\n  transition: transform 120ms ease, background 120ms ease;\n}\n\n.s7580e8_switchOn .saab2b3_switchKnob {\n  transform: translateX(14px);\n  background: var(--dsw-alias-bg-base);\n}\n\n.s11c019_switch:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .s11c019_switch, .saab2b3_switchKnob { transition: none; }\n}\n";
 		if (typeof document !== "undefined" && !document.querySelector("style[data-plugin-css=\"e3675a89\"]")) {
 			const tag = document.createElement("style");
 			tag.dataset.pluginCss = "e3675a89";
@@ -4970,6 +5076,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"skeletonSummaryShort": "sbb0d25_skeletonSummaryShort",
 			"actionButton": "s73242a_actionButton",
 			"toolbar": "s646509_toolbar",
+			"toolbarRight": "s745e3c_toolbarRight",
+			"versionBlock": "s4fe61f_versionBlock",
+			"versionText": "sb9b924_versionText",
+			"updateSelfButton": "sa04455_updateSelfButton",
+			"checkUpdateButton": "s614a38_checkUpdateButton",
+			"selfUpdatePanel": "sb81ba5_selfUpdatePanel",
 			"searchInput": "s232ec4_searchInput",
 			"staleBlock": "s1555aa_staleBlock",
 			"staleBadge": "s3946f1_staleBadge",
@@ -5601,9 +5713,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		/** The shop tab root: browse, search, refresh, and render one card per
 		* entry. Data attributes on the e2e-relevant nodes follow the Task 3 list. */
 		function ShopTab(props) {
-			const { t, catalog, install, installStatus, setEnabled, installed, uninstall, restart } = props;
+			const { t, catalog, install, installStatus, setEnabled, installed, uninstall, restart, version, updateStart } = props;
 			const [catalogState, setCatalogState] = (0, react.useState)({ kind: "loading" });
 			const [installedState, setInstalledState] = (0, react.useState)({ kind: "loading" });
+			const [selfVersion, setSelfVersion] = (0, react.useState)(null);
+			const selfUpdate = useUpdateSelf(updateStart, installStatus);
 			const [request, setRequest] = (0, react.useState)({ kind: "initial" });
 			const [query, setQuery] = (0, react.useState)("");
 			const [category, setCategory] = (0, react.useState)(null);
@@ -5630,6 +5744,28 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					cancelled = true;
 				};
 			}, [catalog, request]);
+			(0, react.useEffect)(() => {
+				let cancelled = false;
+				const load = async () => {
+					try {
+						const result = await version();
+						if (!cancelled) setSelfVersion(result);
+					} catch {}
+				};
+				load();
+				return () => {
+					cancelled = true;
+				};
+			}, [version, request]);
+			const [checkingVersion, setCheckingVersion] = (0, react.useState)(false);
+			const checkVersion = async () => {
+				setCheckingVersion(true);
+				try {
+					setSelfVersion(await version());
+				} catch {} finally {
+					setCheckingVersion(false);
+				}
+			};
 			(0, react.useEffect)(() => {
 				let cancelled = false;
 				const load = async () => {
@@ -5761,19 +5897,97 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								setQuery(event.target.value);
 								setVisibleCount(48);
 							}
-						}), result.stale && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: _dsh_plugin_shop_css_e3675a89_default.staleBlock,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: _dsh_plugin_shop_css_e3675a89_default.staleBadge,
-								children: t("staleLabel", { date: result.builtAt.slice(0, 10) })
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: _dsh_plugin_shop_css_e3675a89_default.actionButton,
-								onClick: () => setRequest({ kind: "refresh" }),
-								children: t("refresh")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: _dsh_plugin_shop_css_e3675a89_default.toolbarRight,
+							children: [result.stale && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: _dsh_plugin_shop_css_e3675a89_default.staleBlock,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: _dsh_plugin_shop_css_e3675a89_default.staleBadge,
+									children: t("staleLabel", { date: result.builtAt.slice(0, 10) })
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: _dsh_plugin_shop_css_e3675a89_default.actionButton,
+									onClick: () => setRequest({ kind: "refresh" }),
+									children: t("refresh")
+								})]
+							}), selfVersion !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: _dsh_plugin_shop_css_e3675a89_default.versionBlock,
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+										className: _dsh_plugin_shop_css_e3675a89_default.versionText,
+										"data-shop-version": true,
+										children: ["v", selfVersion.installed]
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: _dsh_plugin_shop_css_e3675a89_default.checkUpdateButton,
+										"data-shop-check-update": true,
+										disabled: checkingVersion,
+										onClick: () => void checkVersion(),
+										children: t("checkUpdate")
+									}),
+									selfVersion.outdated && selfVersion.latest !== null && selfUpdate.view.kind === "idle" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: _dsh_plugin_shop_css_e3675a89_default.updateSelfButton,
+										"data-shop-update-self": true,
+										onClick: () => {
+											if (selfVersion.latest !== null) selfUpdate.start({ version: selfVersion.latest });
+										},
+										children: t("update")
+									})
+								]
 							})]
 						})]
 					}),
+					selfUpdate.view.kind === "running" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: _dsh_plugin_shop_css_e3675a89_default.selfUpdatePanel,
+						"data-shop-self-updating": true,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: _dsh_plugin_shop_css_e3675a89_default.installing,
+							children: t("installing")
+						}), selfUpdate.view.log.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: _dsh_plugin_shop_css_e3675a89_default.log,
+							children: selfUpdate.view.log.map((line, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: _dsh_plugin_shop_css_e3675a89_default.logLine,
+								children: line
+							}, index))
+						})]
+					}),
+					selfUpdate.view.kind === "done" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: _dsh_plugin_shop_css_e3675a89_default.selfUpdatePanel,
+						"data-shop-self-update-done": true,
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: _dsh_plugin_shop_css_e3675a89_default.installedActions,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: _dsh_plugin_shop_css_e3675a89_default.notice,
+								children: t("installedRestartNotice")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RestartPanel, {
+								t,
+								restart
+							})]
+						})
+					}),
+					selfUpdate.view.kind === "failed" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: _dsh_plugin_shop_css_e3675a89_default.selfUpdatePanel,
+						"data-shop-self-update-failed": true,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: _dsh_plugin_shop_css_e3675a89_default.failedHeading,
+								children: t("updateFailed")
+							}),
+							selfUpdate.view.log.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: _dsh_plugin_shop_css_e3675a89_default.log,
+								children: selfUpdate.view.log.map((line, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: _dsh_plugin_shop_css_e3675a89_default.logLine,
+									children: line
+								}, index))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: _dsh_plugin_shop_css_e3675a89_default.failedDetail,
+								children: selfUpdate.view.detail === "" ? t("updateTransportFailed") : selfUpdate.view.detail
+							})
+						]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: _dsh_plugin_shop_css_e3675a89_default.categoryBar,
 						role: "group",
@@ -5913,7 +6127,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				setEnabled: async (args) => unwrap(await ns.setEnabled(args)),
 				installed: async () => unwrap(await ns.installed()),
 				uninstall: async (args) => unwrap(await ns.uninstallStart(args)),
-				restart: async () => unwrap(await ns.restart())
+				restart: async () => unwrap(await ns.restart()),
+				version: async () => unwrap(await ns.version()),
+				updateStart: async (args) => unwrap(await ns.updateStart(args))
 			});
 			ctx.slots.inject("settings.plugins.tab", () => ctx.slots.register({
 				name: "settings.plugins.tab",

package/lib/index.js

@@ -1,13 +1,23 @@
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { loadOptionalPatches, readProfileManifest, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
-import { lt, minVersion } from "semver";
+import { lt, minVersion, valid } from "semver";
 import { fileURLToPath } from "node:url";
 import { basename, dirname, join } from "node:path";
-import { createHash, randomUUID } from "node:crypto";
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, writeFileSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { spawn } from "node:child_process";
 import { dump } from "js-yaml";
+//#region src/own-version.ts
+/** The shop's own published version, read from the package.json that ships
+* next to this package — the RUNNING version, not the manifest's range
+* spec. This lives at the package root (not under src/host) on purpose:
+* both the source tree (tests) and the bundled `lib/index.js` sit exactly
+* one level below the package root, so the same relative URL resolves in
+* both. */
+function ownVersion() {
+	return JSON.parse(readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8")).version;
+}
 /** A cached catalog younger than this is served without touching the network. */
 const FRESH_MS = 3e5;
 /** Records when the loader itself wrote the cache; the pointer's `builtAt` is
@@ -465,6 +475,28 @@ function startRestart(options) {
 	}
 }
 //#endregion
+//#region src/host/self-update.ts
+/** Self-update version check: the shop's latest published version, from the
+* npm packument. Advisory by design — like the stars sidecar, a failed
+* check degrades to `null` and never throws, never blocks a publish. The
+* catalog cannot serve here: the shop is bootstrap-installed and is not
+* harvested into its own catalog. */
+/** The npm package the shop itself is published as. */
+const SHOP_PACKAGE = "dsh-plugin-shop";
+/** Fetch the shop's `latest` dist-tag, or `null` when the registry cannot
+* answer (network failure, unexpected payload — anything). The caller
+* renders `null` as "no update check", never as a failure. */
+async function fetchLatestVersion(fetchFn = fetch) {
+	try {
+		const response = await fetchFn(`https://registry.npmjs.org/${SHOP_PACKAGE}`);
+		if (!response.ok) return null;
+		const latest = (await response.json())["dist-tags"]?.latest;
+		return typeof latest === "string" ? latest : null;
+	} catch {
+		return null;
+	}
+}
+//#endregion
 //#region src/host/profile.ts
 /** Profile directory discovery and user-layer writes (§8: hot enable/disable). */
 /**
@@ -591,6 +623,8 @@ let ShopGateway = (() => {
 	let _installed_decorators;
 	let _uninstall_decorators;
 	let _restart_decorators;
+	let _version_decorators;
+	let _updateStart_decorators;
 	return class ShopGateway extends _classSuper {
 		static {
 			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
@@ -601,6 +635,8 @@ let ShopGateway = (() => {
 			_installed_decorators = [Remote("installed")];
 			_uninstall_decorators = [Remote("uninstallStart")];
 			_restart_decorators = [Remote("restart")];
+			_version_decorators = [Remote("version")];
+			_updateStart_decorators = [Remote("updateStart")];
 			__esDecorate(this, null, _setEnabled_decorators, {
 				kind: "method",
 				name: "setEnabled",
@@ -678,6 +714,28 @@ let ShopGateway = (() => {
 				},
 				metadata: _metadata
 			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _version_decorators, {
+				kind: "method",
+				name: "version",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "version" in obj,
+					get: (obj) => obj.version
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _updateStart_decorators, {
+				kind: "method",
+				name: "updateStart",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "updateStart" in obj,
+					get: (obj) => obj.updateStart
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
 			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
 				enumerable: true,
 				configurable: true,
@@ -700,6 +758,7 @@ let ShopGateway = (() => {
 		exit;
 		restartExitDelayMs;
 		restartParentPid;
+		latestVersion;
 		/** The install gate runs against the last loaded snapshot, never a fresh
 		* fetch per request (§7.2: the Host's cached snapshot is the truth). */
 		/** Finished install records retained, so a poll sees the true terminal
@@ -726,6 +785,7 @@ let ShopGateway = (() => {
 			this.exit = options.exit ?? ((code) => process.exit(code));
 			this.restartExitDelayMs = options.restartExitDelayMs ?? ShopGateway.RESTART_EXIT_DELAY_MS;
 			this.restartParentPid = options.restartParentPid ?? process.pid;
+			this.latestVersion = options.fetchLatestVersion ?? (() => fetchLatestVersion());
 		}
 		/** The boot's Loader root directory (the active profile's `cordis.yml`
 		* directory, carried on `ctx.baseUrl`), when present. A `link:` install
@@ -969,6 +1029,42 @@ let ShopGateway = (() => {
 			setTimeout(() => this.exit(0), this.restartExitDelayMs);
 			return { ok: true };
 		}
+		/** The shop's own version and whether npm has a newer one (§7.3). The
+		* check is advisory: a registry that cannot answer leaves `latest` null
+		* and the client shows the version alone. `installed` is the RUNNING
+		* version (own-version.ts), not the manifest's range spec. */
+		async version() {
+			const installed = ownVersion();
+			const latest = await this.latestVersion();
+			return {
+				installed,
+				latest,
+				outdated: latest !== null && lt(installed, latest)
+			};
+		}
+		/** Update the shop itself to a published version (§7.3): the explicit pin
+		* is the only install form that bypasses pnpm's release cooldown. The
+		* version is re-validated as plain semver at the boundary — the spec
+		* `dsh-plugin-shop@<version>` is built here, never from the wire. */
+		async updateStart(args) {
+			if (valid(args.version) === null) return {
+				ok: false,
+				detail: `dsh-plugin-shop: ${args.version} is not a valid version`
+			};
+			const running = startInstall({
+				profile: this.profile,
+				spec: `dsh-plugin-shop@${args.version}`,
+				dshBin: this.dshBin,
+				expectedName: "dsh-plugin-shop"
+			});
+			this.installs.set(running.installId, running);
+			this.installOrder.push(running.installId);
+			this.evictFinishedInstalls();
+			return {
+				ok: true,
+				installId: running.installId
+			};
+		}
 	};
 })();
 //#endregion

package/lib/typert.host.js

@@ -91,6 +91,21 @@ const dsh_plugin_shop_shop_uninstallStart_result$schema = z.union([z.object({
   'ok': z.literal(false),
   'detail': z.string(),
 })])
+const dsh_plugin_shop_shop_updateStart_parameter_0$schema = z.object({
+  'version': z.string(),
+})
+const dsh_plugin_shop_shop_updateStart_result$schema = z.union([z.object({
+  'ok': z.literal(true),
+  'installId': z.string(),
+}), z.object({
+  'ok': z.literal(false),
+  'detail': z.string(),
+})])
+const dsh_plugin_shop_shop_version_result$schema = z.object({
+  'installed': z.string(),
+  'latest': z.union([z.literal(null), z.string()]),
+  'outdated': z.boolean(),
+})
 
 export const TYPERT = {
   package: 'dsh-plugin-shop',
@@ -122,7 +137,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":225,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":244,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -137,7 +152,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop#shop/installed:result',
         schema: dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":300,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":319,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -163,7 +178,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":251,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":270,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -188,7 +203,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":289,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":308,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -203,7 +218,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
         schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":373,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":392,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -228,7 +243,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopSetEnabledResult',
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":194,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":213,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/uninstallStart',
@@ -254,7 +269,47 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":340,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":359,"column":9},
+    },
+    {
+      id: 'dsh-plugin-shop#shop/updateStart',
+      service: 'shop',
+      namespace: 'shop',
+      method: 'updateStart',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'args',
+          wire: 'args',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-plugin-shop#shop/updateStart:args',
+            schema: dsh_plugin_shop_shop_updateStart_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-plugin-shop/types#ShopUpdateResult',
+        schema: dsh_plugin_shop_shop_updateStart_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":441,"column":9},
+    },
+    {
+      id: 'dsh-plugin-shop#shop/version',
+      service: 'shop',
+      namespace: 'shop',
+      method: 'version',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-plugin-shop/types#ShopVersionResult',
+        schema: dsh_plugin_shop_shop_version_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":426,"column":9},
     },
   ],
   model: {
@@ -321,6 +376,20 @@ export const TYPERT = {
             "signature": "@Remote('restart') async restart(): Promise<ShopRestartResult>",
             "summary": "Restart the dsh process the shop runs in (§8 amendment, 2026-08-27): commit a two-phase handoff — a detached helper waits for this pid to exit, then re-runs this process's own command line — and exit once the response is out.",
             "jsDoc": "/** Restart the dsh process the shop runs in (§8 amendment, 2026-08-27):\n * commit a two-phase handoff — a detached helper waits for this pid to\n * exit, then re-runs this process's own command line — and exit once the\n * response is out. The browser monitors the origin and refreshes when the\n * new server answers. Refusals are issued before anything is torn down. */"
+          },
+          {
+            "kind": "method",
+            "name": "version",
+            "signature": "@Remote('version') async version(): Promise<ShopVersionResult>",
+            "summary": "The shop's own version and whether npm has a newer one (§7.3).",
+            "jsDoc": "/** The shop's own version and whether npm has a newer one (§7.3). The\n * check is advisory: a registry that cannot answer leaves `latest` null\n * and the client shows the version alone. `installed` is the RUNNING\n * version (own-version.ts), not the manifest's range spec. */"
+          },
+          {
+            "kind": "method",
+            "name": "updateStart",
+            "signature": "@Remote('updateStart') async updateStart(args: { version: string }): Promise<ShopUpdateResult>",
+            "summary": "Update the shop itself to a published version (§7.3): the explicit pin is the only install form that bypasses pnpm's release cooldown.",
+            "jsDoc": "/** Update the shop itself to a published version (§7.3): the explicit pin\n * is the only install form that bypasses pnpm's release cooldown. The\n * version is re-validated as plain semver at the boundary — the spec\n * `dsh-plugin-shop@<version>` is built here, never from the wire. */"
           }
         ],
         "types": [
@@ -387,6 +456,14 @@ export const TYPERT = {
           {
             "name": "ShopUninstallResult",
             "declaration": "export type ShopUninstallResult = { ok: true; installId: string; } | { ok: false; detail: string; };"
+          },
+          {
+            "name": "ShopUpdateResult",
+            "declaration": "export type ShopUpdateResult = { ok: true; installId: string; } | { ok: false; detail: string; };"
+          },
+          {
+            "name": "ShopVersionResult",
+            "declaration": "export interface ShopVersionResult {\n    installed: string;\n    latest: string | null;\n    outdated: boolean;\n}"
           }
         ]
       }

package/lib/typert.remote-client.d.ts

@@ -3,7 +3,7 @@ import type {
   RemoteResult,
   TypertRemoteContribution,
 } from '@deepseek-ai/dsh-typert-protocol'
-import type { InstallArgs, ShopCatalogResult, ShopInstalledEntry, ShopInstallResult, ShopInstallStatusResult, ShopRestartResult, ShopSetEnabledResult, ShopUninstallResult } from 'dsh-plugin-shop/types'
+import type { InstallArgs, ShopCatalogResult, ShopInstalledEntry, ShopInstallResult, ShopInstallStatusResult, ShopRestartResult, ShopSetEnabledResult, ShopUninstallResult, ShopUpdateResult, ShopVersionResult } from 'dsh-plugin-shop/types'
 
 declare module '@deepseek-ai/dsh-typert-protocol' {
   interface TypertRemoteNamespace$73686f70 {
@@ -14,6 +14,8 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
     restart: () => Promise<RemoteResult<ShopRestartResult>>
     setEnabled: (args: { name: string; enabled: boolean; }) => Promise<RemoteResult<ShopSetEnabledResult>>
     uninstallStart: (args: { name: string; }) => Promise<RemoteResult<ShopUninstallResult>>
+    updateStart: (args: { version: string; }) => Promise<RemoteResult<ShopUpdateResult>>
+    version: () => Promise<RemoteResult<ShopVersionResult>>
   }
   interface TypertRemoteMap {
     'shop/catalog': (args?: { refresh?: boolean; }) => Promise<RemoteResult<ShopCatalogResult>>
@@ -23,6 +25,8 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
     'shop/restart': () => Promise<RemoteResult<ShopRestartResult>>
     'shop/setEnabled': (args: { name: string; enabled: boolean; }) => Promise<RemoteResult<ShopSetEnabledResult>>
     'shop/uninstallStart': (args: { name: string; }) => Promise<RemoteResult<ShopUninstallResult>>
+    'shop/updateStart': (args: { version: string; }) => Promise<RemoteResult<ShopUpdateResult>>
+    'shop/version': () => Promise<RemoteResult<ShopVersionResult>>
   }
   interface TypertRemoteNamespaceMap {
     'shop': TypertRemoteNamespace$73686f70

package/lib/typert.remote-client.js

@@ -91,6 +91,21 @@ const dsh_plugin_shop_shop_uninstallStart_result$schema = z.union([z.object({
   'ok': z.literal(false),
   'detail': z.string(),
 })])
+const dsh_plugin_shop_shop_updateStart_parameter_0$schema = z.object({
+  'version': z.string(),
+})
+const dsh_plugin_shop_shop_updateStart_result$schema = z.union([z.object({
+  'ok': z.literal(true),
+  'installId': z.string(),
+}), z.object({
+  'ok': z.literal(false),
+  'detail': z.string(),
+})])
+const dsh_plugin_shop_shop_version_result$schema = z.object({
+  'installed': z.string(),
+  'latest': z.union([z.literal(null), z.string()]),
+  'outdated': z.boolean(),
+})
 
 export const TYPERT_REMOTE = {
   package: 'dsh-plugin-shop',
@@ -119,7 +134,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":225,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":244,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -134,7 +149,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop#shop/installed:result',
         schema: dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":300,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":319,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -160,7 +175,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":251,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":270,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -185,7 +200,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":289,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":308,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -200,7 +215,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
         schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":373,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":392,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -225,7 +240,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopSetEnabledResult',
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":194,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":213,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/uninstallStart',
@@ -251,7 +266,47 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":340,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":359,"column":9},
+    },
+    {
+      id: 'dsh-plugin-shop#shop/updateStart',
+      service: 'shop',
+      namespace: 'shop',
+      method: 'updateStart',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'args',
+          wire: 'args',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-plugin-shop#shop/updateStart:args',
+            schema: dsh_plugin_shop_shop_updateStart_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-plugin-shop/types#ShopUpdateResult',
+        schema: dsh_plugin_shop_shop_updateStart_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":441,"column":9},
+    },
+    {
+      id: 'dsh-plugin-shop#shop/version',
+      service: 'shop',
+      namespace: 'shop',
+      method: 'version',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-plugin-shop/types#ShopVersionResult',
+        schema: dsh_plugin_shop_shop_version_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":426,"column":9},
     },
   ],
 }

package/lib/types/client/ShopTab.d.ts

@@ -5,7 +5,7 @@
  * §11.3.4): no render path here may ever use dangerouslySetInnerHTML. */
 import { type ReactNode } from 'react';
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
-import type { InstallArgs, ShopCatalogResult, ShopInstalledEntry, ShopInstallResult, ShopInstallStatusResult, ShopRestartResult, ShopSetEnabledResult, ShopUninstallResult } from '../host/index.ts';
+import type { InstallArgs, ShopCatalogResult, ShopInstalledEntry, ShopInstallResult, ShopInstallStatusResult, ShopRestartResult, ShopSetEnabledResult, ShopUninstallResult, ShopUpdateResult, ShopVersionResult } from '../host/index.ts';
 /** The tab's Remote face: the Host result types, already unwrapped from the
  * wire envelope by `index.ts`; `catalog` throws on a wire error so the tab's
  * error state renders. */
@@ -26,6 +26,10 @@ export interface ShopTabInjected {
         name: string;
     }) => Promise<ShopUninstallResult>;
     restart: () => Promise<ShopRestartResult>;
+    version: () => Promise<ShopVersionResult>;
+    updateStart: (args: {
+        version: string;
+    }) => Promise<ShopUpdateResult>;
 }
 /** Full component props assembled by the Settings slot renderer. */
 export type ShopTabProps = PropsRuntime<'settings.plugins.tab'> & PropsLocale<'settings.shop'> & InjectFace<ShopTabInjected>;

package/lib/types/client/locales.d.ts

@@ -61,6 +61,9 @@ export declare const zh: {
     restarting: string;
     restartFailedNotice: string;
     restartTransportFailed: string;
+    updateFailed: string;
+    updateTransportFailed: string;
+    checkUpdate: string;
     enabledSwitch: string;
     toggleFailed: string;
     hotApplyNote: string;
@@ -129,6 +132,9 @@ export declare const en: {
     restarting: string;
     restartFailedNotice: string;
     restartTransportFailed: string;
+    updateFailed: string;
+    updateTransportFailed: string;
+    checkUpdate: string;
     enabledSwitch: string;
     toggleFailed: string;
     hotApplyNote: string;

package/lib/types/client/useUpdateSelf.d.ts

@@ -0,0 +1,20 @@
+/** Self-update driving hook for the shop itself: start, poll to terminal.
+ * Shares the install view machine and poll loop; the start mapping is the
+ * uninstall one — a business refusal (a non-semver version) lands in the
+ * `failed` view with the host's detail, never in the install `rejected`
+ * codes. */
+import type { ShopInstallStatusResult, ShopUpdateResult } from '../host/index.ts';
+import type { InstallView } from './present.ts';
+export interface UseUpdateSelfResult {
+    view: InstallView;
+    start: (args: {
+        version: string;
+    }) => Promise<void>;
+}
+/** Drive one self-update: the host's business union, the shared polling
+ * loop, and terminal states. The `rejected` install state never occurs. */
+export declare function useUpdateSelf(updateStart: (args: {
+    version: string;
+}) => Promise<ShopUpdateResult>, installStatus: (args: {
+    installId: string;
+}) => Promise<ShopInstallStatusResult>): UseUpdateSelfResult;

package/lib/types/host/index.d.ts

@@ -40,6 +40,9 @@ export interface ShopGatewayOptions {
      * defaults to this process. Tests point it at a dead pid so the fixture
      * runs immediately instead of waiting for the vitest worker to exit. */
     restartParentPid?: number;
+    /** Test-only injection: the shop's latest-version lookup; production
+     * fetches the npm packument. */
+    fetchLatestVersion?: () => Promise<string | null>;
     /** How long the gateway waits after a successful restart response before
      * exiting the old process; test-only shortening, production uses 2s. */
     restartExitDelayMs?: number;
@@ -76,6 +79,24 @@ export type ShopUninstallResult = {
 /** `shop/restart` result (§7.3): the restarted server's URL, or a typed
  * failure — on failure the old process is still serving. */
 export type ShopRestartResult = RestartOutcome;
+/** `shop/version` result (§7.3): the RUNNING shop version (from the shipped
+ * package.json, not the manifest's range), the npm latest when the check
+ * could answer (`null` = no answer — advisory, never an error), and the
+ * comparison verdict. */
+export interface ShopVersionResult {
+    installed: string;
+    latest: string | null;
+    outdated: boolean;
+}
+/** `shop/updateStart` result (§7.3): the self-update spawn, or a typed
+ * refusal (a version that is not plain semver). */
+export type ShopUpdateResult = {
+    ok: true;
+    installId: string;
+} | {
+    ok: false;
+    detail: string;
+};
 /** `shop/installed` entry (§7.3): one installed catalog plugin. `installed`
  * is the profile manifest's dependency spec verbatim (a range, a tag, or
  * `workspace:*`); `outdated` is the Host's verdict that the installed version
@@ -116,6 +137,7 @@ export declare class ShopGateway extends TypertRemoteService {
     private readonly exit;
     private readonly restartExitDelayMs;
     private readonly restartParentPid;
+    private readonly latestVersion;
     /** The install gate runs against the last loaded snapshot, never a fresh
      * fetch per request (§7.2: the Host's cached snapshot is the truth). */
     /** Finished install records retained, so a poll sees the true terminal
@@ -194,5 +216,17 @@ export declare class ShopGateway extends TypertRemoteService {
      * response is out. The browser monitors the origin and refreshes when the
      * new server answers. Refusals are issued before anything is torn down. */
     restart(): Promise<ShopRestartResult>;
+    /** The shop's own version and whether npm has a newer one (§7.3). The
+     * check is advisory: a registry that cannot answer leaves `latest` null
+     * and the client shows the version alone. `installed` is the RUNNING
+     * version (own-version.ts), not the manifest's range spec. */
+    version(): Promise<ShopVersionResult>;
+    /** Update the shop itself to a published version (§7.3): the explicit pin
+     * is the only install form that bypasses pnpm's release cooldown. The
+     * version is re-validated as plain semver at the boundary — the spec
+     * `dsh-plugin-shop@<version>` is built here, never from the wire. */
+    updateStart(args: {
+        version: string;
+    }): Promise<ShopUpdateResult>;
 }
 export default ShopGateway;

package/lib/types/host/self-update.d.ts

@@ -0,0 +1,9 @@
+/** Self-update version check: the shop's latest published version, from the
+ * npm packument. Advisory by design — like the stars sidecar, a failed
+ * check degrades to `null` and never throws, never blocks a publish. The
+ * catalog cannot serve here: the shop is bootstrap-installed and is not
+ * harvested into its own catalog. */
+/** Fetch the shop's `latest` dist-tag, or `null` when the registry cannot
+ * answer (network failure, unexpected payload — anything). The caller
+ * renders `null` as "no update check", never as a failure. */
+export declare function fetchLatestVersion(fetchFn?: typeof fetch): Promise<string | null>;

package/lib/types/own-version.d.ts

@@ -0,0 +1,7 @@
+/** The shop's own published version, read from the package.json that ships
+ * next to this package — the RUNNING version, not the manifest's range
+ * spec. This lives at the package root (not under src/host) on purpose:
+ * both the source tree (tests) and the bundled `lib/index.js` sit exactly
+ * one level below the package root, so the same relative URL resolves in
+ * both. */
+export declare function ownVersion(): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-shop",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "The DeepSeek Harness plugin shop: browse, install, enable, and update dsh plugins from a git-auditable catalog.",
   "repository": {
     "type": "git",