dsh-plugin-shop 0.7.0 → 0.7.1-beta.1

package/lib/index.js

@@ -4,12 +4,12 @@ import { loadOptionalPatches, readProfileManifest, resolveProfileDir } from "@de
 import { lt, minVersion, valid } from "semver";
 import { createHash, randomUUID } from "node:crypto";
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { spawn, spawnSync } from "node:child_process";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { basename, delimiter, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { homedir } from "node:os";
 import { z } from "zod";
 import { gunzipSync } from "node:zlib";
+import { spawn } from "node:child_process";
 import { JSON_SCHEMA, Type, dump, load } from "js-yaml";
 //#region src/own-version.ts
 /** The shop's own published version, read from the package.json that ships
@@ -167,7 +167,7 @@ function verifyIntegrity(bytes, integrity, registryUrl) {
 	const algorithm = dash === -1 ? "" : first.slice(0, dash);
 	const expected = dash === -1 ? "" : first.slice(dash + 1);
 	if (algorithm !== "sha512" && algorithm !== "sha256") throw new TransportError(`npm origin ${registryUrl}: unsupported dist.integrity algorithm ${JSON.stringify(algorithm)}`);
-	if (createHash(algorithm).update(bytes).digest("base64") !== expected) throw new Error(`npm origin ${registryUrl}: tarball failed dist.integrity check (${algorithm})`);
+	if (createHash(algorithm).update(bytes).digest("base64") !== expected) throw new TransportError(`npm origin ${registryUrl}: tarball failed dist.integrity check (${algorithm})`);
 }
 /** Normalise to a trailing slash so relative `URL` resolution against a
 * registry that carries a path — every corporate registry, e.g.
@@ -440,7 +440,7 @@ const pointerSchema = z.object({
 		sha256: z.string()
 	}).optional()
 });
-const nodeFs$1 = {
+const nodeFs$2 = {
 	exists: (path) => existsSync(path),
 	read: (path) => readFileSync(path, "utf8"),
 	write: (path, data) => {
@@ -472,7 +472,7 @@ function parseStarsText(text) {
 * included, degrades to no stars (spec §5).
 */
 async function loadCatalog(options) {
-	const { cacheDir, refresh = false, fetchImpl = fetch, now = () => /* @__PURE__ */ new Date(), fsImpl = nodeFs$1 } = options;
+	const { cacheDir, refresh = false, fetchImpl = fetch, now = () => /* @__PURE__ */ new Date(), fsImpl = nodeFs$2 } = options;
 	if (options.baseUrl === void 0 === (options.origins === void 0)) throw new Error("loadCatalog: exactly one of baseUrl or origins is required");
 	const originList = options.origins ?? [httpOrigin(options.baseUrl, fetchImpl)];
 	if (originList.length === 0) throw new Error("loadCatalog: no origins");
@@ -695,6 +695,113 @@ function validateInstall(snapshot, args) {
 	return { ok: true };
 }
 //#endregion
+//#region src/host/dsh-cli.ts
+/**
+* How to start the dsh CLI as a child process.
+*
+* On POSIX this is `spawn('dsh', …)` and there is nothing to decide. On
+* Windows there is no form of that call which can work: npm installs a CLI as
+* `dsh`, `dsh.cmd` and `dsh.ps1` shims with no `.exe`, libuv resolves a bare
+* name against `.com` and `.exe` only, and node has refused to spawn a `.cmd`
+* without a shell since the 2024 batfile argument-injection fix. Measured on
+* Windows 11 with dsh 0.1.1-rc.2 (2026-09-02): the bare name gives ENOENT,
+* the resolved `.cmd` shim throws EINVAL *synchronously* out of `spawn()`.
+*
+* `shell: true` — what the shim exists for, and what dsh's own pnpm spawn
+* uses — is not available to us. node hands cmd.exe a joined, UNQUOTED
+* command string, and our argv carries catalog data: a `github:` entry's spec
+* is `github:owner/slug#<sha>&path:<subdir>`, `&` is a cmd command separator,
+* and `subdir` comes from npm. That is a command-injection surface on
+* untrusted input, so the shop resolves the CLI's JS entry and runs it through
+* node instead — no shell, and node escapes the argv itself.
+*
+* Pure core, impure shell: `dshCommand` decides, `resolveDshScript` takes the
+* process snapshot and a filesystem seam as parameters (the same shape as
+* `detectSupervisor(env, proc)` and `RepoPinFs`).
+*/
+/** The npm package the dsh CLI is published as. */
+const DSH_PACKAGE = "@deepseek-ai/dsh";
+/** The bin name that package declares (`bin: { dsh: 'lib/bin.js' }`), which is
+* also the unscoped name its plain-string `bin` form would take. */
+const DSH_BIN_NAME = "dsh";
+/**
+* The command that starts the dsh CLI with `args`.
+*
+* The node route replaces exactly one thing: looking the bare name `dsh` up
+* on PATH, which on Windows can never succeed. A `dshBin` naming a specific
+* file is the caller's explicit choice and is spawned as given — honoring it
+* and reporting the real failure beats silently running something else.
+*/
+function dshCommand(options) {
+	const { dshBin, args, platform, execPath, script } = options;
+	if (platform === "win32" && script !== null && dshBin === DSH_BIN_NAME) return {
+		command: execPath,
+		args: [script, ...args]
+	};
+	return {
+		command: dshBin,
+		args: [...args]
+	};
+}
+/** The dsh entry a package manifest declares, or null when this manifest is
+* not the dsh CLI. Everything read here is outside our control, so a manifest
+* that will not parse is simply not a match. */
+function declaredEntry(fs, manifestPath) {
+	let parsed;
+	try {
+		parsed = JSON.parse(fs.read(manifestPath));
+	} catch {
+		return null;
+	}
+	const { name, bin } = parsed;
+	if (name !== "@deepseek-ai/dsh") return null;
+	const declared = typeof bin === "string" ? bin : bin?.[DSH_BIN_NAME];
+	if (typeof declared !== "string") return null;
+	const entry = join(dirname(manifestPath), declared);
+	return fs.exists(entry) ? entry : null;
+}
+/** The dsh entry declared by the package that OWNS `script` — the nearest
+* `package.json` at or above it, and only that one. A script whose owner is
+* some other package is not dsh's, so the search stops rather than walking up
+* into an unrelated workspace root. */
+function owningEntry(fs, script) {
+	let dir = dirname(resolve(script));
+	for (;;) {
+		const manifestPath = join(dir, "package.json");
+		if (fs.exists(manifestPath)) return declaredEntry(fs, manifestPath);
+		const parent = dirname(dir);
+		if (parent === dir) return null;
+		dir = parent;
+	}
+}
+/**
+* Locate the dsh CLI's JS entry, or null when it cannot be found.
+*
+* `argv1` first: the shop is loaded BY dsh, so the running script is dsh's own
+* entry, and reusing it guarantees the child is the same dsh that is serving
+* the shop rather than whichever one PATH happens to name. The owner check is
+* what makes this safe to try — under a test runner `argv1` belongs to the
+* runner, and accepting it would spawn the wrong program.
+*
+* Then the shims on PATH: npm installs the package into `node_modules` beside
+* them, so the manifest is one join away. This is the branch a test harness
+* takes, which is why the real-installation test exercises it.
+*/
+function resolveDshScript(fs, options) {
+	if (options.argv1 !== void 0) {
+		const owned = owningEntry(fs, options.argv1);
+		if (owned !== null) return owned;
+	}
+	for (const dir of (options.path ?? "").split(delimiter)) {
+		if (dir === "") continue;
+		const manifestPath = join(dir, "node_modules", ...DSH_PACKAGE.split("/"), "package.json");
+		if (!fs.exists(manifestPath)) continue;
+		const entry = declaredEntry(fs, manifestPath);
+		if (entry !== null) return entry;
+	}
+	return null;
+}
+//#endregion
 //#region src/host/executor.ts
 /** Plugin-command executor: spawn the dsh CLI, stream its output, serialize
 * per profile. One implementation drives both `dsh plugin add` (install) and
@@ -739,6 +846,78 @@ function confirmBundleRemoval(profile, home, expectedName) {
 		return `removed but the profile manifest could not be read (${join(profileDir, "package.json")}) — re-run the uninstall`;
 	}
 }
+/** Lines a failed install's log tends to END on, none of which tell the user
+* anything they can act on: dsh's own wrapper around the pnpm exit, node's
+* version footer, pnpm's progress and update banner, and the frames and
+* carets of a stack trace. */
+const FAILURE_LOG_NOISE = [
+	/^dsh: pnpm failed in profile directory/,
+	/^Node\.js v/,
+	/^(?:Progress|Packages):/,
+	/^\++$/,
+	/^[╭│╰]/,
+	/^\^+$/,
+	/^\s*$/,
+	/^\s+at /,
+	/^<anonymous(?:_script)?>/
+];
+/**
+* The one log line worth putting in front of the user, plus the recovery hint.
+*
+* The last line is the wrong choice, which is what this replaces. Measured on
+* two real failures against the live catalog (dsh 0.1.1-rc.2, 2026-09-02),
+* the last line was `dsh: pnpm failed in profile directory <a path the user
+* did not choose>` and `Node.js v26.6.0` — while the line that explained the
+* failure sat a few lines above, in the log the client already receives. A
+* user seeing either of those cannot tell a blocked build script from a
+* crash, which is exactly the report this fixes.
+*
+* Scanning from the end: a pnpm error code first, then any thrown error, then
+* the last line that is not noise.
+*/
+function installFailureDetail(profile, log) {
+	const hint = `pnpm failed in the profile. Run: dsh plugin --profile ${profile} install`;
+	const usable = log.filter((line) => !FAILURE_LOG_NOISE.some((rx) => rx.test(line)));
+	const reversed = [...usable].reverse();
+	const pick = reversed.find((line) => /ERR_[A-Z][A-Z_]*/.test(line)) ?? reversed.find((line) => /(?:^|\s)\w*Error:/.test(line)) ?? usable[usable.length - 1];
+	if (pick === void 0) return `${hint}.`;
+	return `${hint} — ${pick}${/ERR_PNPM_IGNORED_BUILDS/.test(pick) ? " A dependency wants to run a build script, which pnpm blocks by default: run `pnpm approve-builds` in the profile directory to allow it, then retry." : ""}`;
+}
+/**
+* Why a spawn of the dsh CLI never started.
+*
+* On Windows a bare name and a shim path fail differently and neither means
+* what the POSIX advice says. npm installs the CLI as `dsh`, `dsh.cmd` and
+* `dsh.ps1` with no `.exe`; libuv resolves a bare name against `.com` and
+* `.exe` only (ENOENT), and node has refused to spawn a `.cmd` without a
+* shell since the 2024 batfile argument-injection fix (EINVAL). `dsh-cli.ts`
+* gets past that by running the CLI's own JS entry through node, so reaching
+* here on Windows means that entry could not be located — telling the user to
+* install a dsh they already have would still be wrong. Reported from Windows
+* 2026-09-02 as "Update failed / dsh not found on PATH" on a working install.
+*/
+function spawnFailureDetail(code, message, dshBin, platform) {
+	if (platform === "win32" && (code === "ENOENT" || code === "EINVAL")) return `the shop could not locate the dsh CLI to run (${dshBin}): on Windows npm installs it as a .cmd shim, which cannot be spawned directly, so the shop runs the ${DSH_PACKAGE} package's own entry through node instead — and that entry was not found. Check that \`dsh --version\` works in a terminal, then reinstall the CLI if it does not.`;
+	if (code === "ENOENT") return "dsh not found on PATH — install the dsh CLI to manage profile plugins";
+	return `dsh spawn failed: ${message}`;
+}
+/** Read-only filesystem seam for the CLI lookup; the same shape as `pinFs`. */
+const nodeFs$1 = {
+	exists: (path) => existsSync(path),
+	read: (path) => readFileSync(path, "utf8")
+};
+let cachedScript;
+/** The dsh CLI's JS entry, resolved once per process and only where it is
+* needed. On POSIX `spawn('dsh')` works and the lookup is skipped entirely,
+* so no platform but Windows pays for it. */
+function dshScript() {
+	if (process.platform !== "win32") return null;
+	if (cachedScript === void 0) cachedScript = resolveDshScript(nodeFs$1, {
+		argv1: process.argv[1],
+		path: process.env.PATH
+	});
+	return cachedScript;
+}
 /** Run one `dsh plugin --profile <profile> <verb> <target>` and track it.
 * Never rolls back; a failure surfaces stderr verbatim plus the recovery hint
 * (§10). The shop never passes build-script flags: `allowBuilds` stays the
@@ -782,23 +961,42 @@ function spawnPluginCli(options) {
 		}
 		onStatus?.(status());
 	};
+	const failToStart = (error) => {
+		state = "failed";
+		detail = spawnFailureDetail(error.code, error.message, dshBin, process.platform);
+		onStatus?.(status());
+		return status();
+	};
 	return {
 		installId,
 		status,
 		finished: chain(profile, () => new Promise((resolve) => {
-			const child = spawn(dshBin, [
-				"plugin",
-				"--profile",
-				profile,
-				...argv
-			], {
-				stdio: [
-					"ignore",
-					"pipe",
-					"pipe"
+			const { command, args } = dshCommand({
+				dshBin,
+				args: [
+					"plugin",
+					"--profile",
+					profile,
+					...argv
 				],
-				env: env ?? process.env
+				platform: process.platform,
+				execPath: process.execPath,
+				script: dshScript()
 			});
+			let child;
+			try {
+				child = spawn(command, args, {
+					stdio: [
+						"ignore",
+						"pipe",
+						"pipe"
+					],
+					env: env ?? process.env
+				});
+			} catch (error) {
+				resolve(failToStart(error));
+				return;
+			}
 			child.stdout.on("data", (chunk) => {
 				for (const line of chunk.toString().split("\n")) if (line !== "") append(line);
 			});
@@ -806,11 +1004,7 @@ function spawnPluginCli(options) {
 				for (const line of chunk.toString().split("\n")) if (line !== "") append(line);
 			});
 			child.on("error", (error) => {
-				const code = error.code;
-				state = "failed";
-				detail = code === "ENOENT" ? "dsh not found on PATH — install the dsh CLI to manage profile plugins" : `dsh spawn failed: ${error.message}`;
-				onStatus?.(status());
-				resolve(status());
+				resolve(failToStart(error));
 			});
 			child.on("close", async (exitCode) => {
 				if (state !== "running") return;
@@ -832,8 +1026,7 @@ function spawnPluginCli(options) {
 					} else state = "done";
 				} else {
 					state = "failed";
-					const lastLogLine = log[log.length - 1] ?? "";
-					detail = `pnpm failed in the profile. Run: dsh plugin --profile ${profile} install — ${lastLogLine}`;
+					detail = installFailureDetail(profile, log);
 				}
 				onStatus?.(status());
 				resolve(status());
@@ -1174,7 +1367,13 @@ function cleanHotDir(profileDir) {
 *
 * The pid-poll has the usual tiny reuse race — if the parent's pid is
 * recycled within the 0.2s polling gap the helper waits for the unrelated
-* process too. Harmless: it only delays the boot. */
+* process too. Harmless: it only delays the boot.
+*
+* POSIX only: `sh`, `kill -0` and `sleep` are all Unix, and `exec "$@"` has
+* no Windows equivalent. The spawn would fail ASYNCHRONOUSLY, after this
+* function has already returned and the caller has committed — so the gateway
+* refuses on Windows before reaching here rather than exiting into nothing
+* (index.ts `restartPlatformSupported`). */
 function startRestart(options) {
 	const { dshBin, argv, parentPid, logFile, env } = options;
 	const logFd = openSync(logFile, "a");
@@ -1704,10 +1903,12 @@ let ShopGateway = (() => {
 		restartExitDelayMs;
 		restartParentPid;
 		latestVersion;
-		hasGit;
 		pinFs;
 		allowRestart;
 		env;
+		/** The platform the restart gate reads; production defaults to
+		* process.platform. The two-phase handoff is POSIX-only (restart.ts). */
+		platform;
 		/** The parent pid `detectSupervisor` inspects; production defaults to
 		* process.ppid (a systemd unit's main process has ppid 1). */
 		ppid;
@@ -1756,7 +1957,6 @@ let ShopGateway = (() => {
 			this.restartExitDelayMs = options.restartExitDelayMs ?? ShopGateway.RESTART_EXIT_DELAY_MS;
 			this.restartParentPid = options.restartParentPid ?? process.pid;
 			this.latestVersion = options.fetchLatestVersion ?? (() => fetchLatestVersion());
-			this.hasGit = options.hasGit ?? (() => spawnSync("git", ["--version"], { stdio: "ignore" }).status === 0);
 			this.pinFs = options.pinFs ?? {
 				exists: (path) => existsSync(path),
 				read: (path) => readFileSync(path, "utf8"),
@@ -1767,6 +1967,7 @@ let ShopGateway = (() => {
 			};
 			this.allowRestart = options.allowRestart;
 			this.env = options.env ?? process.env;
+			this.platform = options.platform ?? process.platform;
 			this.ppid = options.ppid ?? process.ppid;
 			this.fetchTarball = options.fetchTarball ?? ((url) => fetch(url));
 			try {
@@ -1936,6 +2137,11 @@ let ShopGateway = (() => {
 		/** The explicit restart override. Only the row's `config:` sub-object is
 		* passed to a plugin — a top-level `allowRestart:` beside `name:` would be
 		* silently ignored by the loader (dsh-market README, #227). */
+		/** Whether the two-phase handoff can run at all here. `restart.ts` drives
+		* it through `sh`, `kill -0` and `sleep`, none of which Windows has. */
+		restartPlatformSupported() {
+			return this.platform !== "win32";
+		}
 		allowRestartConfigured() {
 			if (this.allowRestart !== void 0) return this.allowRestart;
 			return ((this.ctx.loader?.entries().find((entry) => entry.options.name === "dsh-plugin-shop"))?.options.config)?.allowRestart === true;
@@ -2014,11 +2220,6 @@ let ShopGateway = (() => {
 					code: "version-mismatch",
 					detail: `dsh-plugin-shop: ${args.name} has no installable commit`
 				};
-				if (!this.hasGit()) return {
-					ok: false,
-					code: "git-missing",
-					detail: "dsh-plugin-shop: git is not on PATH, which github installs require; install git and retry"
-				};
 				spec = `github:${entry.repo}#${args.version}${entry.subdir !== void 0 ? `&path:${entry.subdir}` : ""}`;
 			} else spec = `${args.name}@${args.version}`;
 			const isUpdate = (readProfileManifest("dsh-plugin-shop", this.profileDirResolved()).dependencies ?? {})[args.name] !== void 0;
@@ -2214,6 +2415,10 @@ let ShopGateway = (() => {
 		* response is out. The browser monitors the origin and refreshes when the
 		* new server answers. Refusals are issued before anything is torn down. */
 		async restart() {
+			if (!this.restartPlatformSupported()) return {
+				ok: false,
+				detail: "dsh-plugin-shop: restart is not supported on Windows yet; restart dsh manually to apply the change"
+			};
 			if (detectSupervisor(this.env, { ppid: this.ppid }) === "systemd" && !this.allowRestartConfigured()) return {
 				ok: false,
 				detail: "dsh-plugin-shop: restart is disabled because this process is a systemd service — a restart would kill the takeover helper along with the unit, and the service would not come back. Set allowRestart: true in the shop row config to override."
@@ -2252,7 +2457,7 @@ let ShopGateway = (() => {
 				installed,
 				latest,
 				outdated: latest !== null && lt(installed, latest),
-				restartSupported: detectSupervisor(this.env, { ppid: this.ppid }) === null || this.allowRestartConfigured()
+				restartSupported: this.restartPlatformSupported() && (detectSupervisor(this.env, { ppid: this.ppid }) === null || this.allowRestartConfigured())
 			};
 		}
 		/** Update the shop itself to a published version (§7.3): the explicit pin

package/lib/typert.host.js

@@ -69,7 +69,7 @@ const dsh_plugin_shop_shop_installStart_result$schema = z.union([z.object({
   'installId': z.string(),
 }), z.object({
   'ok': z.literal(false),
-  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("git-missing"), z.literal("tarball-integrity")]),
+  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("tarball-integrity")]),
   'detail': z.string(),
 })])
 const dsh_plugin_shop_shop_installStatus_parameter_0$schema = z.object({
@@ -154,7 +154,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":568,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":574,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -169,7 +169,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop#shop/installed:result',
         schema: dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":748,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":759,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -195,7 +195,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":618,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":624,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -220,7 +220,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":737,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":748,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -235,7 +235,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
         schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":898,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":909,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -286,7 +286,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":840,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":851,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/updateStart',
@@ -311,7 +311,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUpdateResult',
         schema: dsh_plugin_shop_shop_updateStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":958,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":977,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/version',
@@ -326,7 +326,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-plugin-shop/types#ShopVersionResult',
         schema: dsh_plugin_shop_shop_version_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":942,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":960,"column":9},
     },
   ],
   model: {
@@ -436,7 +436,7 @@ export const TYPERT = {
           },
           {
             "name": "InstallRejectionCode",
-            "declaration": "export type InstallRejectionCode = 'not-in-catalog' | 'denied' | 'version-mismatch' | 'needs-acknowledgement' | 'git-missing' | 'tarball-integrity';"
+            "declaration": "export type InstallRejectionCode = 'not-in-catalog' | 'denied' | 'version-mismatch' | 'needs-acknowledgement' | 'tarball-integrity';"
           },
           {
             "name": "InstallState",

package/lib/typert.remote-client.js

@@ -69,7 +69,7 @@ const dsh_plugin_shop_shop_installStart_result$schema = z.union([z.object({
   'installId': z.string(),
 }), z.object({
   'ok': z.literal(false),
-  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("git-missing"), z.literal("tarball-integrity")]),
+  'code': z.union([z.literal("not-in-catalog"), z.literal("denied"), z.literal("version-mismatch"), z.literal("needs-acknowledgement"), z.literal("tarball-integrity")]),
   'detail': z.string(),
 })])
 const dsh_plugin_shop_shop_installStatus_parameter_0$schema = z.object({
@@ -151,7 +151,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopCatalogResult',
         schema: dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":568,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":574,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -166,7 +166,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop#shop/installed:result',
         schema: dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":748,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":759,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -192,7 +192,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallResult',
         schema: dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":618,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":624,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -217,7 +217,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopInstallStatusResult',
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":737,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":748,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -232,7 +232,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopRestartResult',
         schema: dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":898,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":909,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -283,7 +283,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUninstallResult',
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":840,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":851,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/updateStart',
@@ -308,7 +308,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopUpdateResult',
         schema: dsh_plugin_shop_shop_updateStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":958,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":977,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/version',
@@ -323,7 +323,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: 'dsh-plugin-shop/types#ShopVersionResult',
         schema: dsh_plugin_shop_shop_version_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":942,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":960,"column":9},
     },
   ],
 }

package/lib/types/client/locales.d.ts

@@ -56,7 +56,6 @@ export declare const zh: {
     notInCatalogCode: string;
     versionMismatchCode: string;
     needsAcknowledgementCode: string;
-    gitMissingCode: string;
     tarballIntegrityCode: string;
     npmSource: string;
     githubSource: string;
@@ -147,7 +146,6 @@ export declare const en: {
     notInCatalogCode: string;
     versionMismatchCode: string;
     needsAcknowledgementCode: string;
-    gitMissingCode: string;
     tarballIntegrityCode: string;
     npmSource: string;
     githubSource: string;

package/lib/types/host/dsh-cli.d.ts

@@ -0,0 +1,66 @@
+/**
+ * How to start the dsh CLI as a child process.
+ *
+ * On POSIX this is `spawn('dsh', …)` and there is nothing to decide. On
+ * Windows there is no form of that call which can work: npm installs a CLI as
+ * `dsh`, `dsh.cmd` and `dsh.ps1` shims with no `.exe`, libuv resolves a bare
+ * name against `.com` and `.exe` only, and node has refused to spawn a `.cmd`
+ * without a shell since the 2024 batfile argument-injection fix. Measured on
+ * Windows 11 with dsh 0.1.1-rc.2 (2026-09-02): the bare name gives ENOENT,
+ * the resolved `.cmd` shim throws EINVAL *synchronously* out of `spawn()`.
+ *
+ * `shell: true` — what the shim exists for, and what dsh's own pnpm spawn
+ * uses — is not available to us. node hands cmd.exe a joined, UNQUOTED
+ * command string, and our argv carries catalog data: a `github:` entry's spec
+ * is `github:owner/slug#<sha>&path:<subdir>`, `&` is a cmd command separator,
+ * and `subdir` comes from npm. That is a command-injection surface on
+ * untrusted input, so the shop resolves the CLI's JS entry and runs it through
+ * node instead — no shell, and node escapes the argv itself.
+ *
+ * Pure core, impure shell: `dshCommand` decides, `resolveDshScript` takes the
+ * process snapshot and a filesystem seam as parameters (the same shape as
+ * `detectSupervisor(env, proc)` and `RepoPinFs`).
+ */
+/** The npm package the dsh CLI is published as. */
+export declare const DSH_PACKAGE = "@deepseek-ai/dsh";
+export interface DshCliFs {
+    exists: (path: string) => boolean;
+    read: (path: string) => string;
+}
+/** A spawnable command: `spawn(command, args)` with no shell. */
+export interface DshCommand {
+    command: string;
+    args: string[];
+}
+/**
+ * The command that starts the dsh CLI with `args`.
+ *
+ * The node route replaces exactly one thing: looking the bare name `dsh` up
+ * on PATH, which on Windows can never succeed. A `dshBin` naming a specific
+ * file is the caller's explicit choice and is spawned as given — honoring it
+ * and reporting the real failure beats silently running something else.
+ */
+export declare function dshCommand(options: {
+    dshBin: string;
+    args: readonly string[];
+    platform: NodeJS.Platform;
+    execPath: string;
+    script: string | null;
+}): DshCommand;
+/**
+ * Locate the dsh CLI's JS entry, or null when it cannot be found.
+ *
+ * `argv1` first: the shop is loaded BY dsh, so the running script is dsh's own
+ * entry, and reusing it guarantees the child is the same dsh that is serving
+ * the shop rather than whichever one PATH happens to name. The owner check is
+ * what makes this safe to try — under a test runner `argv1` belongs to the
+ * runner, and accepting it would spawn the wrong program.
+ *
+ * Then the shims on PATH: npm installs the package into `node_modules` beside
+ * them, so the manifest is one join away. This is the branch a test harness
+ * takes, which is why the real-installation test exercises it.
+ */
+export declare function resolveDshScript(fs: DshCliFs, options: {
+    argv1: string | undefined;
+    path: string | undefined;
+}): string | null;