dsh-plugin-shop 0.7.4 → 0.8.0-beta.0

package/lib/types/host/repo-pins.d.ts

@@ -14,7 +14,7 @@ export interface RepoPinFs {
     read: (path: string) => string;
     write: (path: string, data: string) => void;
 }
-/** Bundle name to the pinned commit. */
+/** Install identity to the pinned commit or release tag. */
 export type RepoPins = Record<string, string>;
 /** Read the pins file; any irregularity degrades to an empty record. */
 export declare function readRepoPins(fs: RepoPinFs, path: string): RepoPins;

package/lib/types/host/restart.d.ts

@@ -35,9 +35,29 @@ export type RestartOutcome = {
  * function has already returned and the caller has committed — so the gateway
  * refuses on Windows before reaching here rather than exiting into nothing
  * (index.ts `restartPlatformSupported`). */
-export declare function startRestart(options: {
+/**
+ * Resolve the command line that re-runs this process.
+ *
+ * A bare `dsh` from PATH is not necessarily the process serving the current
+ * port: a dsh launched through `node`, `npx`, or `pnpm dlx` carries its own
+ * script and `execArgv`. Reconstructing that exact node invocation preserves
+ * the entry point and runtime flags. An explicitly named binary remains an
+ * explicit choice and is passed through unchanged.
+ */
+export declare function restartCommand(options: {
     dshBin: string;
-    argv: string[];
+    argv: readonly string[];
+    execPath: string;
+    execArgv: readonly string[];
+    script: string | undefined;
+}): {
+    command: string;
+    args: string[];
+};
+export declare function startRestart(options: {
+    /** The already-resolved command — see `restartCommand`. */
+    command: string;
+    args: readonly string[];
     parentPid: number;
     logFile: string;
     env?: NodeJS.ProcessEnv;

package/lib/types/host/self-update.d.ts

@@ -3,7 +3,15 @@
  * check degrades to `null` and never throws, never blocks a publish. The
  * catalog cannot serve here: the shop is bootstrap-installed and is not
  * harvested into its own catalog. */
-/** Fetch the shop's `latest` dist-tag, or `null` when the registry cannot
- * answer (network failure, unexpected payload — anything). The caller
- * renders `null` as "no update check", never as a failure. */
-export declare function fetchLatestVersion(fetchFn?: typeof fetch): Promise<string | null>;
+/** How long one registry gets to answer. `shop/version` is warmed at every
+ * web boot, so a silent socket must not hold the boot indefinitely. */
+export declare const VERSION_CHECK_TIMEOUT_MS = 5000;
+/**
+ * Fetch the shop's `latest` dist-tag, or `null` when no registry can answer.
+ * The user's own registry is tried first when known; npmjs is always the
+ * fallback so a mirror that lags cannot hide a release.
+ */
+export declare function fetchLatestVersion(fetchFn?: typeof fetch, options?: {
+    registry?: string | null;
+    timeoutMs?: number;
+}): Promise<string | null>;

package/lib/types/own-version.d.ts

@@ -5,3 +5,13 @@
  * one level below the package root, so the same relative URL resolves in
  * both. */
 export declare function ownVersion(): string;
+/**
+ * The peer ranges this build declares — the input to the load-time harness
+ * self-check. Read from the same shipped manifest as `ownVersion`, so the
+ * ranges checked are the ones this build was actually published with, never
+ * a second copy that can drift from them.
+ *
+ * A non-string range is dropped rather than repaired: only what we can
+ * compare against is worth a verdict.
+ */
+export declare function ownPeerRanges(): Record<string, string>;

package/lib/types/shared/identity.d.ts

@@ -0,0 +1,27 @@
+/**
+ * One entry's install identity, defined once for both halves of the package.
+ *
+ * `name` is not an identity. The registry's uniqueness rule is `npm:<name>`
+ * for an npm entry and `github:<repo>#<subdir>` for a repository entry, so
+ * two repositories publishing the same package name remain distinct.
+ */
+/** The fields that decide which catalog row a request is about. */
+export interface EntryIdentity {
+    source: 'npm' | 'github';
+    name: string;
+    repo?: string;
+    subdir?: string;
+}
+/** The registry's uniqueness rule, shared with the presentation layer. */
+export declare function identityKey(identity: EntryIdentity): string;
+/** A GitHub commit pin. */
+export declare const COMMIT_SHA: RegExp;
+/** A GitHub release tag accepted as the version/pin of a rescued entry. */
+export declare const RELEASE_TAG: RegExp;
+/**
+ * Read the repository out of a profile dependency spec, or return null for
+ * an npm range/spec that does not identify a GitHub repository.
+ */
+export declare function parseRepoSpec(spec: string): string | null;
+/** Whether an installed dependency spec names this catalog entry. */
+export declare function installedSpecMatches(entry: EntryIdentity, spec: string): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-shop",
-  "version": "0.7.4",
+  "version": "0.8.0-beta.0",
   "description": "The DeepSeek Harness plugin shop: browse, install, enable, and update dsh plugins from a git-auditable catalog.",
   "keywords": [
     "dsh-plugin",
@@ -72,12 +72,6 @@
       "platform": "web"
     }
   },
-  "scripts": {
-    "prepublishOnly": "pnpm build",
-    "build": "node -e \"require('node:fs').rmSync('lib',{recursive:true,force:true})\" && tsdown && tsc && tsdown -c tsdown.client.config.ts",
-    "test": "tsdown && tsdown -c tsdown.client.config.ts && vitest run",
-    "typecheck": "tsdown && tsc --noEmit && tsc -p tsconfig.test.json"
-  },
   "dependencies": {
     "js-yaml": "^4.2.0",
     "semver": "^7.6.3",
@@ -118,7 +112,7 @@
     "@deepseek-ai/dsh-client-ui-slots": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-home-paths": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-typert-generator": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "workspace:^0.1.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.1-rc.2",
     "@testing-library/react": "^16.1.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.9.0",
@@ -132,5 +126,11 @@
     "tsdown": "^0.22.2",
     "typescript": "^5.6.3",
     "vitest": "^2.1.4"
+  },
+  "scripts": {
+    "build": "node -e \"require('node:fs').rmSync('lib',{recursive:true,force:true})\" && tsdown && tsc && tsdown -c tsdown.client.config.ts",
+    "test": "tsdown && tsdown -c tsdown.client.config.ts && vitest run",
+    "typecheck": "tsdown && tsc --noEmit && tsc -p tsconfig.test.json",
+    "shoot:screenshots": "node --experimental-strip-types scripts/shoot-readme-screenshots.ts"
   }
-}
+}