dsh-plugin-shop 0.8.4-beta.0 → 0.8.4

package/lib/typert.host.js

@@ -195,7 +195,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_catalog_result$schema,
         create: () => dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1134,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1253,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -211,7 +211,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_installed_result$schema,
         create: () => dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1494,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1720,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installedSpecs',
@@ -227,7 +227,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_installedSpecs_result$schema,
         create: () => dsh_plugin_shop_shop_installedSpecs_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1485,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1711,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -255,7 +255,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_installStart_result$schema,
         create: () => dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1260,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1379,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -282,7 +282,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
         create: () => dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1461,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1687,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -298,7 +298,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_restart_result$schema,
         create: () => dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1680,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1916,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -325,7 +325,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
         create: () => dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":887,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":924,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/uninstallStart',
@@ -353,7 +353,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
         create: () => dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1601,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1827,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/updateStart',
@@ -380,7 +380,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_updateStart_result$schema,
         create: () => dsh_plugin_shop_shop_updateStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1777,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":2020,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/version',
@@ -396,7 +396,7 @@ export const TYPERT = {
         schema: dsh_plugin_shop_shop_version_result$schema,
         create: () => dsh_plugin_shop_shop_version_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1735,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1978,"column":9},
     },
   ],
   model: {

package/lib/typert.remote-client.js

@@ -192,7 +192,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_catalog_result$schema,
         create: () => dsh_plugin_shop_shop_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1134,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1253,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installed',
@@ -208,7 +208,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_installed_result$schema,
         create: () => dsh_plugin_shop_shop_installed_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1494,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1720,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installedSpecs',
@@ -224,7 +224,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_installedSpecs_result$schema,
         create: () => dsh_plugin_shop_shop_installedSpecs_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1485,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1711,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStart',
@@ -252,7 +252,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_installStart_result$schema,
         create: () => dsh_plugin_shop_shop_installStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1260,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1379,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/installStatus',
@@ -279,7 +279,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_installStatus_result$schema,
         create: () => dsh_plugin_shop_shop_installStatus_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1461,"column":3},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1687,"column":3},
     },
     {
       id: 'dsh-plugin-shop#shop/restart',
@@ -295,7 +295,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_restart_result$schema,
         create: () => dsh_plugin_shop_shop_restart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1680,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1916,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/setEnabled',
@@ -322,7 +322,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_setEnabled_result$schema,
         create: () => dsh_plugin_shop_shop_setEnabled_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":887,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":924,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/uninstallStart',
@@ -350,7 +350,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_uninstallStart_result$schema,
         create: () => dsh_plugin_shop_shop_uninstallStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1601,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1827,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/updateStart',
@@ -377,7 +377,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_updateStart_result$schema,
         create: () => dsh_plugin_shop_shop_updateStart_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1777,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":2020,"column":9},
     },
     {
       id: 'dsh-plugin-shop#shop/version',
@@ -393,7 +393,7 @@ export const TYPERT_REMOTE = {
         schema: dsh_plugin_shop_shop_version_result$schema,
         create: () => dsh_plugin_shop_shop_version_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1735,"column":9},
+      sourceLocation: {"file":"packages/dsh-plugin-shop/src/host/index.ts","line":1978,"column":9},
     },
   ],
 }

package/lib/types/client/locales.d.ts

@@ -146,6 +146,7 @@ export declare const zh: {
     enabledSwitch: string;
     toggleFailed: string;
     hotApplyNote: string;
+    toggleRestartNote: string;
 };
 /** Shop locale key union. */
 export type ShopLocaleKey = keyof typeof zh;
@@ -264,4 +265,5 @@ export declare const en: {
     enabledSwitch: string;
     toggleFailed: string;
     hotApplyNote: string;
+    toggleRestartNote: string;
 };

package/lib/types/client/present.d.ts

@@ -222,6 +222,7 @@ export type InstallView = {
     activation: Activation;
     log: string[];
     restartReason?: HotRestartReason;
+    detail?: string;
 } | {
     kind: 'failed';
     detail: string;

package/lib/types/client/restart-monitor.d.ts

@@ -17,17 +17,45 @@
  * swapped-in module instance shares with the one it replaced — and the probe
  * loop is plain timers owned by no fiber. Any tab reads the state, so the
  * replacement renders the restart under way instead of offering another.
+ *
+ * The REQUEST is the page's too, since later the same day. On dsh
+ * 0.1.5-rc.3 and 0.1.7-rc.2 alike a unary Remote call is an HTTP POST whose
+ * fetch rides the calling mount's abort signal, and an answer that arrives after the mount went inactive is
+ * rewritten to "no longer mounted" (dsh-api-gateway's client). A swap landing
+ * inside the restart's round trip therefore left the tab that pressed with no
+ * answer, whether or not the host had committed: measured with the request
+ * held, the host never restarted; with the response held, it did, and the page
+ * stayed on the old process showing the old version. So every module instance
+ * registers its own path to the host here (the client half's apply), a confirm
+ * records the request before anything is awaited, and a request whose path is
+ * withdrawn mid-call is asked again through a live one. The host answers a
+ * repeat with the restart it already committed.
  */
-/** A restart this page committed: still waiting for the new server, or
- * given up on it. `logFile` is where the host said the new process writes;
- * a host older than that field sends none. */
+import type { ShopRestartResult } from '../host/index.ts';
+/** What this page is doing about a restart: waiting for the host to answer
+ * the confirm, waiting for the new server once it committed, or given up on
+ * that server. `logFile` is where the host said the new process writes; a
+ * host older than that field sends none. */
 export type RestartMonitorState = {
+    kind: 'requesting';
+} | {
     kind: 'restarting';
     logFile?: string;
 } | {
     kind: 'failed';
     logFile?: string;
 };
+/** How one press ended, for the panel that made it: the page follows the
+ * restart from here, the host refused it, or it never reached a host that
+ * could answer. */
+export type RestartRequestOutcome = {
+    kind: 'started';
+} | {
+    kind: 'refused';
+    detail: string;
+} | {
+    kind: 'unreachable';
+};
 /** The page's restart, or null when it has committed none. The same object
  * until the state changes, as `useSyncExternalStore` requires. */
 export declare function readRestartMonitor(): RestartMonitorState | null;
@@ -52,7 +80,35 @@ export declare function startRestartMonitor(options: {
     reload: () => void;
     logFile?: string;
 }): void;
-/** Stop the probe loop and forget the page's restart. Nothing in the page
- * calls this — a committed restart ends in a reload or a failure — so its
- * caller is a test isolating one case from the next. */
+/**
+ * Register one module instance's path to the host; the client half's apply
+ * does, with the `restart` it hands the tab. The returned function withdraws
+ * it, and has to run BEFORE the mount it rides is disposed: a request still in
+ * flight on it is then asked again through the newest live path — at once if
+ * one is registered, or as soon as one is — rather than waiting on a call the
+ * dispose is about to abort.
+ */
+export declare function registerRestartCarrier(restart: () => Promise<ShopRestartResult>): () => void;
+/**
+ * Ask the host to restart, for the page (design §8). The request is the
+ * page's from the confirm on, not from the answer: every offer renders it as
+ * under way, and a second press joins it rather than asking twice. It rides
+ * the newest path a module instance registered, or — where no client half
+ * registered one — the pressing tab's own `restart`.
+ *
+ * Resolves, never rejects, with what the press should show. A commit starts
+ * the monitor and is `started`. A refusal and an unreachable host leave
+ * nothing under way. A path withdrawn mid-call decides nothing but a commit;
+ * the ask on the path that replaced it decides the rest, and that ask
+ * finding no host is followed as a restart, since the first ask may have
+ * committed and taken its host down with it.
+ */
+export declare function requestRestart(options: {
+    reload: () => void;
+    restart: () => Promise<ShopRestartResult>;
+}): Promise<RestartRequestOutcome>;
+/** Stop the probe loop and forget the page's restart, its request and every
+ * registered path. Nothing in the page calls this — a committed restart ends
+ * in a reload or a failure — so its caller is a test isolating one case from
+ * the next. */
 export declare function resetRestartMonitor(): void;

package/lib/types/host/executor.d.ts

@@ -4,7 +4,7 @@
  * post-exit manifest confirmation. */
 import type { HotRestartReason } from './hot.ts';
 import type { Activation } from './activation.ts';
-import type { Prefetcher } from './prefetch.ts';
+import type { Prefetcher, PrefetchRequest } from './prefetch.ts';
 import { type InstallState } from '../shared/install-state.ts';
 export type { InstallState } from '../shared/install-state.ts';
 export interface InstallStatus {
@@ -17,11 +17,28 @@ export interface InstallStatus {
     restartReason?: HotRestartReason;
     detail?: string;
 }
-interface RunningInstall {
+/** Bound one dsh command so a stalled install cannot hold the profile queue
+ * forever. Tests can pass a shorter value; production stays generous. */
+export declare const INSTALL_TIMEOUT_MS: number;
+export interface RunningInstall {
     installId: string;
     status: () => InstallStatus;
     finished: Promise<InstallStatus>;
 }
+/** Run `task` in `profile`'s queue, after every command already in it: the
+ * queue `spawnPluginCli` uses, shared with the plugin manager's runner so the
+ * two paths are never concurrent in one profile. `ahead` is how many commands
+ * were queued or running when the slot was taken. */
+export declare function inProfileQueue<T>(profile: string, task: () => Promise<T>): {
+    ahead: number;
+    finished: Promise<T>;
+};
+/** An install record's log: the newest lines within MAX_LOG_LINES and
+ * MAX_LOG_BYTES, never dropping the newest one. */
+export declare function createBoundedLog(): {
+    push(line: string): void;
+    lines(): string[];
+};
 /**
  * Why a zero-exit install left `dsh.profile.bundles` without the entry.
  *
@@ -71,6 +88,11 @@ export declare function activationFailureDetail(args: {
     before: Readonly<Record<string, string>> | null;
     after: Readonly<Record<string, string>>;
 }): string;
+/** The line dsh 0.1.7 opens a refused install with (dsh-plugin-manager's
+ * `rejected`), and the exemption command its CLI prints after it, one per
+ * refused package (`runPlugin`). The opener is exported for the plugin
+ * manager's answer, whose output carries the same block. */
+export declare const REFUSAL_OPENER = "dsh: installation rejected: ";
 /**
  * The one log line worth putting in front of the user, plus the recovery hint.
  *
@@ -85,7 +107,7 @@ export declare function activationFailureDetail(args: {
  * Scanning from the end: a pnpm error code first, then any thrown error, then
  * the last line that is not noise.
  */
-export declare function installFailureDetail(profile: string, log: readonly string[]): string;
+export declare function installFailureDetail(profile: string, log: readonly string[], hint?: string): string;
 /**
  * Why a spawn of the dsh CLI never started.
  *
@@ -121,6 +143,19 @@ export interface LineSink {
     flush: () => void;
 }
 export declare function lineSink(emit: (line: string) => void): LineSink;
+/**
+ * The operand gate, one function for every caller: it refuses, by throwing,
+ * an operand the dsh CLI would parse as a flag, and one carrying the shell
+ * punctuation `UNSAFE_TARGET` names. A legitimate operand (a catalog name for
+ * a removal; a `name@version`, `github:` or tarball spec for an install)
+ * never begins with `-`, so the first refusal cannot reject a real install or
+ * uninstall, and failing loudly beats letting the CLI reinterpret an operand
+ * as an option. `spawnPluginCli` runs it before it spawns anything or takes a
+ * queue slot; the gateway's plugin manager path runs it before a spec reaches
+ * `installBundle` or the download phase, whose pump relies on it (see
+ * `requestDownloadPhase`). Returns the operand, known to be present.
+ */
+export declare function gateOperand(target: string | undefined): string;
 /**
  * The operand as the downstream dsh must receive it for pnpm to see it whole.
  *
@@ -156,6 +191,18 @@ export declare function lineSink(emit: (line: string) => void): LineSink;
  *    deepseek-ai/deepseek-harness discussion #5815.
  */
 export declare function shellSafeTarget(target: string, platform: NodeJS.Platform): string;
+/**
+ * Ask the pump to warm `spec` while an operation waits its turn, and say in
+ * that operation's log why there is no download phase when there is none.
+ * Shared by the CLI executor and the plugin manager runner.
+ */
+export declare function requestDownloadPhase(options: {
+    prefetcher: Prefetcher;
+    profile: string;
+    spec: string;
+    env?: NodeJS.ProcessEnv;
+    log: (line: string) => void;
+}): PrefetchRequest | null;
 /**
  * Run one `dsh plugin --profile <profile> add <spec>` and track it.
  * When `expectedName` is given, a zero exit is confirmed against the profile

package/lib/types/host/index.d.ts

@@ -39,21 +39,6 @@ export interface LoaderEntryLike {
         disabled: boolean | null;
     }, create?: boolean, force?: boolean): Promise<void>;
 }
-/** The slice of dsh 0.1.7's `pluginManager` service this gateway calls,
- * structurally: the build compiles against the 0.1.1-rc.2 harness floor,
- * where the package does not exist. `setBundleEnabled` is what dsh's own
- * Plugins page calls for its bundle switch, and it answers with the saved
- * change and how it applied (design 2026-09-26-plugin-manager-delegation,
- * section 2). */
-export interface BundleSelector {
-    setBundleEnabled(name: string, enabled: boolean): Promise<{
-        application?: unknown;
-        error?: {
-            code?: unknown;
-            diagnostic?: unknown;
-        };
-    }>;
-}
 /** Test-only injection points; production callers pass nothing. */
 export interface ShopGatewayOptions {
     catalogUrl?: string;
@@ -362,6 +347,11 @@ export declare class ShopGateway extends TypertRemoteService {
     private readonly exit;
     private readonly restartExitDelayMs;
     private readonly restartParentPid;
+    /** The restart this process committed, once it has: every later
+     * `shop/restart` answers with it. A page that lost the first answer to an
+     * HMR swap asks again (client/restart-monitor.ts), and inside the exit
+     * delay that ask reaches this same process. */
+    private committedRestart;
     private readonly latestVersion;
     private readonly pinFs;
     private readonly allowRestart?;
@@ -380,6 +370,9 @@ export declare class ShopGateway extends TypertRemoteService {
     private readonly prefetcher;
     /** What this process may already have imported (see `importedThisProcess`). */
     private readonly imported;
+    /** Routes the output dsh's `pluginManager` streams to the record whose
+     * request id it carries (see the constructor). */
+    private readonly managerLogs;
     /** The install gate runs against the last loaded snapshot, never a fresh
      * fetch per request (§7.2: the Host's cached snapshot is the truth). */
     /** Finished install records retained, so a poll sees the true terminal
@@ -404,7 +397,8 @@ export declare class ShopGateway extends TypertRemoteService {
      * promise, so concurrent first calls share one read; `readRunningHarness`
      * never rejects, so there is no failure to retry. */
     private harnessRead;
-    /** Install records, running and finished; a poll finds one here or reports not found. */
+    /** Install records, running and finished, from the CLI and from dsh's
+     * `pluginManager` alike; a poll finds one here or reports not found. */
     private readonly installs;
     /** Every install id in insertion order, oldest first; finished-record eviction walks this from the front. */
     private readonly installOrder;
@@ -443,11 +437,13 @@ export declare class ShopGateway extends TypertRemoteService {
      * walk of the profile's disk can see (design
      * 2026-09-01-harness-compatibility §11). */
     private harnessPackages;
-    /** dsh's `pluginManager` service, when the running harness provides one
-     * (0.1.7 and later), else null. Read on each use, like `pluginPackages`.
-     * It is the only way back for a bundle its Plugins page deselected: the
-     * 0.1.7 CLI does not select an installed package again on `add`, while
-     * 0.1.5's does (both measured 2026-09-27). */
+    /** dsh's `pluginManager` service, when the running harness provides all of
+     * it (0.1.7 and later), else null. Never cached across calls, like
+     * `pluginPackages`, but read once per RPC, at its start, and passed down:
+     * read again after an await, a service disposed in between would let a
+     * desktop mutation past the desktop gate and onto the CLI path, which dsh
+     * refuses for that profile. Design 2026-09-26-plugin-manager-delegation,
+     * section 3.1. */
     private pluginManager;
     /** "Does this installation provide `spec`?", asked from `anchor`: the
      * harness's own resolution in front of the walk where the harness has one,
@@ -505,6 +501,11 @@ export declare class ShopGateway extends TypertRemoteService {
      * refuse a hot mount to a package this process never imported.
      */
     private installedSpecOf;
+    /** Add every dependency the profile manifest holds to the `imported`
+     * record (see `importedThisProcess`): each is a package dsh's loader may
+     * have loaded in this process, at boot or by an install since. An
+     * unreadable manifest adds nothing. */
+    private recordDependenciesImported;
     private ownedEntryIdsOrNone;
     /** Whether an installed package declares `dsh.client`. Reads through the
      * `hotFs` option — `HotFs` is `hot.ts`'s type, but this gateway forwards
@@ -554,6 +555,26 @@ export declare class ShopGateway extends TypertRemoteService {
      * float a registry package to `latest`.
      */
     private setDeselectedEnabled;
+    /**
+     * dsh's answer to a switch or a bundle selection, read the one way both
+     * callers need it (R32): the change, scrubbed for a desktop reader, and the
+     * detail that fails the request, or null when dsh applied it. `act` is what
+     * was asked, as "switch <name>", `request` names the request itself, as
+     * "the switch for <name>", and `stays` is the state the plugin keeps when
+     * the request does not take effect. An application this shop does not know
+     * fails rather than reading as applied: a later harness may answer
+     * something new.
+     *
+     * `overridden` fails too (R39). dsh answers it when, after it wrote the row
+     * and reloaded, the live entry still differs from the request
+     * (dsh-plugin-manager 0.1.7-rc.2, setPluginEnabled), and its README names
+     * what outranks the profile's own patch: home and invocation patches keep
+     * their higher priority. The change is saved and the plugin runs as it
+     * did, so a success would flip the client's switch over a plugin that did
+     * not change, and that switch never re-reads the live state.
+     * setBundleEnabled never answers it; a selection reads it the same way.
+     */
+    private readManagerAnswer;
     private rowConfig;
     /** The user's own registry, read once. The self-update check and catalog
      * race share this preference so neither path repeatedly touches ~/.npmrc. */
@@ -628,6 +649,46 @@ export declare class ShopGateway extends TypertRemoteService {
      * passing request reaches the executor.
      */
     install(args: InstallArgs): Promise<ShopInstallResult>;
+    /**
+     * What would stop the profile from starting now that `name`'s files are on
+     * disk, or null: an entry id another installed package already declares,
+     * or a bundle patch declaration this dsh cannot read. Neither is knowable
+     * before the files land. The package stays on disk either way, so each
+     * detail ends with `undo`, the sentence that says how to take the install
+     * back on the path that made it.
+     */
+    private postInstallHazard;
+    /** Remember a github entry's pinned commit: the manifest records only
+     * `github:owner/slug`, so the pins file is how `installed()` reports
+     * outdated honestly. A failed install leaves a pin behind, but the
+     * manifest presence gate keeps it invisible. */
+    private recordGithubPin;
+    /** Forget an uninstalled package's pins: its own, and its identity pin when
+     * a catalog row matched the installed spec. Both uninstall paths call this
+     * once their operation has started, so a stale pin never outlives the
+     * uninstall in the shop's cache either way. The plugin manager path tracks
+     * its record first, so a write here that throws cannot hide an operation
+     * already queued. */
+    private forgetPins;
+    /** What `managerOutcome` reads dsh's answer against. The gateway's own
+     * facts are set here once, for every operation through the service: the
+     * profile, whether it is the desktop one, and the deadline a timeout
+     * detail names. */
+    private outcomeContext;
+    /**
+     * One install-shaped operation through dsh's `pluginManager` (design
+     * 2026-09-26-plugin-manager-delegation, section 6): `installBundle(spec)`
+     * under the record's own id as its request id, so the output dsh streams
+     * for it reaches this record, in the profile's queue with the download
+     * phase the CLI path has. At the shop's deadline dsh is asked to cancel it;
+     * a service that offers no `cancelInstall` gets no deadline, and its record
+     * settles when dsh answers. `install` and `updateStart` differ only in the
+     * mechanism line and in how they read the answer.
+     */
+    private startManagerInstall;
+    /** Keep a started record where `installStatus`, the restart gate and
+     * eviction find it, then bound the finished ones. */
+    private track;
     /** Bound retained finished records at MAX_FINISHED_INSTALLS, evicting the
      * oldest finished ones (insertion order, oldest first). Live records —
      * running AND queued — are never evicted; an id absent from the map reports

package/lib/types/host/manager-runner.d.ts

@@ -0,0 +1,51 @@
+/**
+ * One package operation through dsh's `pluginManager` service, tracked as the
+ * same `RunningInstall` the CLI executor produces: design
+ * 2026-09-26-plugin-manager-delegation, section 6. It runs in the same
+ * per-profile queue as CLI commands, so the two paths are never concurrent in
+ * one profile.
+ */
+import { type RunningInstall } from './executor.ts';
+import { type ManagerOutcome } from './plugin-manager.ts';
+import type { Prefetcher } from './prefetch.ts';
+/** The first line of every record this runner writes. The shop's log panel
+ * shows it and the 0.1.7 e2e asserts it, so a silent fall back to the CLI
+ * fails a case instead of passing it. */
+export declare const MECHANISM_PREFIX = "via dsh's plugin manager:";
+/** Routes the service's `plugin-manager/install-log` chunks to the record
+ * whose request id they carry. A chunk for any other id is dropped. dsh
+ * tags each chunk with the stream it came from; a non-string stream reads
+ * as `stdout`, matching a harness that predates the tag. */
+export declare class ManagerLogs {
+    private readonly sinks;
+    open(requestId: string, sink: (text: string, stream: string) => void): () => void;
+    chunk(requestId: unknown, text: unknown, stream?: unknown): void;
+}
+export interface ManagerOperationOptions {
+    profile: string;
+    /** The record's id, handed to the service as its request id. */
+    requestId: string;
+    /** What the mechanism line says after the prefix, e.g. `install dsh-a@1.0.0`. */
+    mechanism: string;
+    logs: ManagerLogs;
+    run: (requestId: string) => Promise<unknown>;
+    cancel?: (requestId: string) => Promise<unknown>;
+    outcome: (raw: unknown) => ManagerOutcome;
+    alsoConfirm?: () => string | null;
+    /** The download phase, as on the CLI path: `spec` is what it warms. */
+    prefetcher?: Prefetcher;
+    spec?: string;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+    /** The desktop profile, whose readers can run no `dsh plugin` command: a
+     * message the service call throws is scrubbed as dsh's answer is. */
+    desktop?: boolean;
+}
+/** What a thrown value says about itself, and total: describing an error is
+ * never itself the reason a settle fails. An `Error` gives its `message`,
+ * anything else `String(value)`. A message that is not a string, or a
+ * description that throws anywhere, reads as one fixed string: a Proxy whose
+ * getPrototypeOf trap throws defeats `instanceof` itself, a `message` getter
+ * can throw, and a null-prototype object has no conversion to a string. */
+export declare const messageOf: (error: unknown) => string;
+export declare function startManagerOperation(options: ManagerOperationOptions): RunningInstall;