magus-cli 7.11.4 → 7.11.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "magus-cli",
-  "version": "7.11.4",
+  "version": "7.11.6",
   "description": "TUI tool for managing Claude Code plugins, MCPs, and configuration",
   "type": "module",
   "main": "src/main.tsx",
@@ -65,8 +65,8 @@
     "typescript": "^5.6.3"
   },
   "optionalDependencies": {
-    "magus-cli-darwin-arm64": "7.11.4",
-    "magus-cli-darwin-x64": "7.11.4",
-    "magus-cli-linux-x64": "7.11.4"
+    "magus-cli-darwin-arm64": "7.11.6",
+    "magus-cli-darwin-x64": "7.11.6",
+    "magus-cli-linux-x64": "7.11.6"
   }
 }

package/src/__tests__/deprecated-remove-all-profiles.test.ts

@@ -0,0 +1,171 @@
+import { afterEach, beforeEach, describe, expect, spyOn, test } from "bun:test";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import fs from "fs-extra";
+import type { PluginScope } from "../services/claude-cli.js";
+import { readManifest, writeManifest } from "../services/manifest.js";
+import { reconcileActiveProfile } from "../services/profile-absorb.js";
+import { activateProfile } from "../services/profile-activate.js";
+import { removeDeprecatedPlugin } from "../services/update-engine.js";
+import type { ProfileManifest } from "../types/index.js";
+
+/**
+ * `d` on a deprecated plugin that is installed at no scope in this folder, but
+ * shows as a row because the profile render writes `"<id>": false` for it.
+ *
+ * The render writes `false` for every id in `allPluginIds`, the union of every
+ * profile in `.claude/profiles.json` (`renderProfile`), so a plugin a profile
+ * that is NOT active still lists keeps its key in the live settings.json. The
+ * Plugins screen turns that key into a row. Uninstalling touches nothing:
+ * there is no install here, and the CLI answers every scope with "nothing at
+ * this scope here", in the wording measured on Claude Code 2.1.312.
+ *
+ * CONTRACT the fix must provide, in `services/update-engine.ts`, for the
+ * Plugins screen's `d` to call when the plan carries no `remove` item:
+ *
+ *   export async function removeDeprecatedPlugin(
+ *     pluginId: string,
+ *     projectPath: string,
+ *     deps?: {
+ *       // default `uninstallPluginViaCli`
+ *       uninstall?: (id: string, scope: PluginScope, cwd: string) => Promise<void>;
+ *       // default `readInheritedRegistryRows`
+ *       inheritedRows?: (id: string, projectPath: string) => Promise<InstalledPluginEntry[]>;
+ *     },
+ *   ): Promise<{ problems: unknown[]; unlistedFrom: string[] }>
+ *
+ *   1. Uninstalls at user, project and local in `projectPath`; an error
+ *      `isNotInstalledAnswer` accepts is not a problem.
+ *   2. Uninstalls each inherited row in its own folder; errors are problems.
+ *   3. Removes the id from EVERY profile in the project's profiles.json that
+ *      lists it (`removePluginFromProfile` per profile); `unlistedFrom` names
+ *      them. Profiles that do not list it are not written.
+ *   4. Re-applies the active profile, so the live settings.json no longer
+ *      carries a key for the id.
+ *
+ * Only for a deprecated (no longer published) plugin: the caller decides that.
+ */
+
+const ID = "code-analysis@magus";
+
+/** Measured, Claude Code 2.1.312, from a folder with no row while others hold PROJECT rows. */
+const wrongScope = (scope: PluginScope) =>
+	new Error(
+		`✘ Failed to uninstall plugin "${ID}": Plugin "${ID}" is installed in project scope, not ${scope}. Use --scope project to uninstall.`,
+	);
+
+/** The magus-src shape: the active profile does not list it, two others do. */
+const manifest = (): ProfileManifest => ({
+	version: 2,
+	profiles: {
+		default: { name: "Default", plugins: { "dev@magus": "latest" } },
+		maintainer: {
+			name: "Maintainer",
+			plugins: { "dev@magus": "latest", [ID]: "latest" },
+		},
+		lean: { name: "Lean", plugins: { [ID]: "latest" } },
+		minimal: { name: "Minimal", plugins: { "setup@magus": "latest" } },
+	},
+});
+
+describe("removeDeprecatedPlugin: a deprecated plugin only other profiles list", () => {
+	let project: string;
+	let log: ReturnType<typeof spyOn>;
+	const settingsPath = () => join(project, ".claude", "settings.json");
+	const profilesPath = () => join(project, ".claude", "profiles.json");
+	const mcpPath = () => join(project, ".mcp.json");
+
+	beforeEach(async () => {
+		project = await mkdtemp(join(tmpdir(), "deprecated-all-profiles-"));
+		log = spyOn(console, "log").mockImplementation(() => {});
+		await writeManifest(manifest(), project);
+		await activateProfile(manifest(), "default", project, {
+			onDisplace: () => {},
+		});
+	});
+	afterEach(async () => {
+		log.mockRestore();
+		await rm(project, { recursive: true, force: true });
+	});
+
+	// REGRESSION: deprecated plugin `d` failed with "installed in project scope, not user" and the row came back — Fixed in /dev:fix session dev-fix-20261029-2140-uninstall
+	test("should report no failure, unlist it from every profile, and leave no settings key for it", async () => {
+		// Seeded red: the render wrote the key that makes the row.
+		expect((await fs.readJson(settingsPath())).enabledPlugins[ID]).toBe(false);
+		const before = (await fs.readJson(profilesPath())).profiles;
+
+		const calls: Array<{ scope: PluginScope; cwd: string }> = [];
+		const result = await removeDeprecatedPlugin(ID, project, {
+			uninstall: async (_id, scope, cwd) => {
+				calls.push({ scope, cwd });
+				if (scope === "project") {
+					throw new Error(`Plugin "${ID}" is not installed in project scope.`);
+				}
+				throw wrongScope(scope);
+			},
+			inheritedRows: async () => [],
+		});
+
+		expect(result.problems).toEqual([]);
+		expect([...result.unlistedFrom].sort()).toEqual(["lean", "maintainer"]);
+		expect(calls.map((c) => c.scope).sort()).toEqual([
+			"local",
+			"project",
+			"user",
+		]);
+		expect(calls.every((c) => c.cwd === project)).toBe(true);
+
+		const after = (await readManifest(project)).profiles;
+		for (const id of Object.keys(after)) {
+			expect(after[id]?.plugins?.[ID]).toBeUndefined();
+		}
+		expect(after.maintainer?.plugins).toEqual({ "dev@magus": "latest" });
+		// Profiles that never listed it are not written at all.
+		const raw = (await fs.readJson(profilesPath())).profiles;
+		expect(raw.default).toEqual(before.default);
+		expect(raw.minimal).toEqual(before.minimal);
+
+		const live = (await fs.readJson(settingsPath())).enabledPlugins;
+		expect(Object.hasOwn(live, ID)).toBe(false);
+		expect(live["dev@magus"]).toBe(true);
+
+		// The row does not come back: the next entry point's reconcile and a
+		// fresh activation leave the key out.
+		await reconcileActiveProfile(project);
+		await activateProfile(await readManifest(project), "default", project, {
+			onDisplace: () => {},
+		});
+		expect(
+			Object.hasOwn((await fs.readJson(settingsPath())).enabledPlugins, ID),
+		).toBe(false);
+	});
+
+	// REGRESSION: deprecated plugin `d` re-rendered the live files without absorbing them, losing edits Claude Code made after the TUI started — Fixed in /dev:fix session dev-fix-20261029-2140-uninstall
+	test("should keep edits made to the live files after the profile was activated", async () => {
+		// Written straight into the live files, as Claude Code does mid-session.
+		const settings = await fs.readJson(settingsPath());
+		settings.permissions = { allow: ["Bash(ls:*)"] };
+		settings.enabledPlugins["other@magus"] = true;
+		await fs.writeJson(settingsPath(), settings, { spaces: 2 });
+		const mcp = await fs.readJson(mcpPath());
+		mcp.mcpServers = { ...mcp.mcpServers, local: { command: "local-mcp" } };
+		await fs.writeJson(mcpPath(), mcp, { spaces: 2 });
+
+		const result = await removeDeprecatedPlugin(ID, project, {
+			uninstall: async (_id, scope) => {
+				throw wrongScope(scope);
+			},
+			inheritedRows: async () => [],
+		});
+
+		expect(result.problems).toEqual([]);
+		const live = await fs.readJson(settingsPath());
+		expect(live.permissions?.allow).toEqual(["Bash(ls:*)"]);
+		expect(live.enabledPlugins["other@magus"]).toBe(true);
+		expect(Object.hasOwn(live.enabledPlugins, ID)).toBe(false);
+		expect((await fs.readJson(mcpPath())).mcpServers?.local).toEqual({
+			command: "local-mcp",
+		});
+	});
+});