From c042519bc9f77770dd4ce97fdd3ea3e75e90aa1c Mon Sep 17 00:00:00 2001
From: nntrivi2001 <vinnt@smartgift.vn>
Date: Wed, 21 Oct 2026 16:10:30 +0700
Subject: [PATCH] feat(artifacts): storefront layout and Uninstall for
 installed skills/plugins
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Artifacts page laid out like an app store: hero search, category chips,
  shelves by kind, app-icon cards with one primary pill and a detail sheet
- POST /api/artifacts/:id/uninstall: a skill's copies in ~/.claude/skills and
  ~/.agents/skills are moved to ~/.claude/agenthub-replaced-skills/
  (-uninstalled-<time>), never deleted; a plugin runs
  `claude plugin uninstall --scope user --keep-data` as the caller;
  ENOTINSTALLED when nothing is there; allowed while installs are off
- Uninstall on the card, the ⋯ menu and the detail sheet, after a confirm
---
 CLAUDE.md                                     |    4 +-
 client/src/i18n/locales/en/artifacts.json     |   35 +-
 client/src/i18n/locales/vi/artifacts.json     |   35 +-
 client/src/lib/api.ts                         |    5 +
 client/src/pages/Artifacts.tsx                | 1003 +++++++++++++----
 client/src/pages/__tests__/Artifacts.test.tsx |   52 +-
 docs/API.md                                   |    4 +-
 docs/LANES.md                                 |    2 +-
 server/__tests__/artifacts.test.js            |   20 +-
 server/lib/artifacts.js                       |  132 ++-
 server/routes/artifacts.js                    |    9 +-
 11 files changed, 1066 insertions(+), 235 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 56e5938e..4b5ae194 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -1,6 +1,6 @@
 # Claude Code Working Guide
 
-_Last synced: v2.8.13 (2026-10-21) — realtime chat (bridge, `/ws-chat`) removed; the terminal chat covers omp/Cursor/agy (agy's step log as a transcript), permission prompts as cards, Stop from the pane's busy line, Codex `/model`·`/permissions` pickers, `transcript_changed` push; artifacts kept._ A change that makes any statement in this file, `AGENTS.md`, or a README wrong — a moved path, a new or changed extension point, a retired rule — updates that file in the same change-set and bumps this marker. **Bump = replace the version/date and a ≤ 1-line summary; never append a changelog here** — details belong in the commit message and `docs/`, because this whole file is loaded into every session.
+_Last synced: v2.8.14 (2026-10-21) — Artifacts: Uninstall for an installed skill (moved aside, never deleted) or plugin (`claude plugin uninstall --keep-data`) beside Reinstall._ A change that makes any statement in this file, `AGENTS.md`, or a README wrong — a moved path, a new or changed extension point, a retired rule — updates that file in the same change-set and bumps this marker. **Bump = replace the version/date and a ≤ 1-line summary; never append a changelog here** — details belong in the commit message and `docs/`, because this whole file is loaded into every session.
 
 ## Project mission
 - Maintain a reliable local-first dashboard for Claude Code session monitoring.
@@ -59,7 +59,7 @@ A **workspace** — called a **lane** in the API, CLI, database and code, which
 - **The File Explorer (`server/lib/file-explorer.js`, `/api/lanes/:id/fs/*`) reuses the read path's guards and never replaces silently.** Every path is `lanePath` + the PARENT `resolveInLane`-confined with the last segment kept as a name (so a symlink is moved/deleted as a link, never followed); never in or under `.git`, never a secret, never the workspace folder itself. Writes run as the folder's account — a member's only through `write-as` (`move`/`copy` modes; `writeAsAsync` streams an upload to its stdin; a batch upload of many small files is ONE `extract` of a tar the server writes itself — folders and regular files only, names it checked, `tar -k`) — and a move/copy never crosses accounts (`sameOwner`, `EFOREIGN`). A taken name is settled by `conflict` (`fail` → 409 with `names`, `skip`, `keep`, `replace` = the old one to the trash first). Delete is a move into the account's trash (member: `~/.local/share/agenthub/trash/`, host: `<data dir>/trash/<user id>/`), restorable 7 days. `write-as` is root-installed: a change to it needs `agenthub server install-system` again (`EUPGRADE` until then). A user's HOME is browsed through the same module inside `inHome` (`/api/homes/:who/fs/*`, `server/lib/homes.js` picks the folder): every dot entry at the TOP of a home stays hidden and refused — through a symlink, a download, a zip or as a copy source too — and another user's home is an admin's READ-ONLY, audited view (`EREADONLY`) — except its TRASH, whose restore/purge an admin may run (`TRASH_W` in `server/routes/homes.js`, the owner's trash via `trashKey`, audited with the item id); keep that exception to the trash routes only. A home's Trash is its USER's one recycle bin (`listUserTrash`: home-account store + host store `<data dir>/trash/<user id>/`, items tagged `store`). Do not add a delete that skips the trash, an overwrite without `conflict`, or a request path that is not run through `locate`/`folder`.
 - **The whole-file editor and the Files tab's upload are the two non-git writes on the lane file surface, and both live outside `git-ops.js` on purpose.** `git-ops.js` only touches paths `git status` reports as changed; `lane-file-write.js` may save any existing text file, so it must reuse the READ path's guards (`lanePath`, `resolveInLane`, `isSecretOnDisk`) and never be weaker than them, and it saves only over the `baseSha` it was opened at — do not let it create files or touch a binary. `lane-file-transfer.js`'s upload (`POST /api/lanes/:id/git/upload`, issue #78) is the opposite and only that: it CREATES one file (any bytes, ≤ 25 MB) under the same guards, into an existing folder, refuses a taken name (`EEXISTS`, a symlink included) and anything into or named `.git` (a hook there runs on the dashboard's next git call), and writes as the folder's member through `write-as` under S3 — do not let it overwrite, make folders or take a path from anything but `dir` + one plain name. Its `GET …/git/download` twin streams any file through `openSafe` as a `sandbox`ed attachment. The tree, expand-all and quick-open read the disk (`walkFolder`) for a folder that is not a repo.
 - **Server tests never touch the user's tmux.** Run them through `npm run test:server` (`scripts/test-server.js`), never a bare `node --test server/__tests__/*.test.js` from inside a lane pane — the suites create and kill real `agenthub-lane-<id>` sessions.
-- **An artifact is shared as a SNAPSHOT and installed only into the viewer's own account.** `server/lib/artifacts.js` (`/api/artifacts`): a pinned file or a skill is copied once into `<data dir>/artifacts/<random>/` and every viewer reads only that copy (an owner's edit of a skill writes a NEW snapshot and drops the old one — never a write into the one being read) — `raw` serves only a file the snapshot recorded, under a `sandbox` CSP + `nosniff`; a `page` is a `https://claude.ai/…` link only. A developer sees their own rows plus shared ones; only the owner or an admin changes one. Install writes a skill into BOTH `~/.claude/skills/` and the cross-tool `~/.agents/skills/` of every account the CALLER's sessions run as (`installAccounts`: their S3 member home, plus the host's for an admin, whose host-folder workspaces run as the host; S3: as them through `write-as`), never over an existing one without `replace` (the old one is moved to `~/.claude/agenthub-replaced-skills/`, never deleted), and runs a plugin's `claude plugin marketplace add`/`install --scope user` as the caller, never with `-y`; an admin's switch (Settings → AI tools, `ArtifactsHubSettings`) turns installs off. An uploaded or written skill is snapshotted under the same checks (paths relative, no `..`, no secret names, zip sizes read before inflating). `POST /api/artifacts/plugin/inspect` clones a user-named https link only to read `marketplace.json`, with every credential helper OFF — never send a login with it. Do not add a route that serves a live file of another user, installs into someone else's account, or takes a plugin command from the request.
+- **An artifact is shared as a SNAPSHOT and installed only into the viewer's own account.** `server/lib/artifacts.js` (`/api/artifacts`): a pinned file or a skill is copied once into `<data dir>/artifacts/<random>/` and every viewer reads only that copy (an owner's edit of a skill writes a NEW snapshot and drops the old one — never a write into the one being read) — `raw` serves only a file the snapshot recorded, under a `sandbox` CSP + `nosniff`; a `page` is a `https://claude.ai/…` link only. A developer sees their own rows plus shared ones; only the owner or an admin changes one. Install writes a skill into BOTH `~/.claude/skills/` and the cross-tool `~/.agents/skills/` of every account the CALLER's sessions run as (`installAccounts`: their S3 member home, plus the host's for an admin, whose host-folder workspaces run as the host; S3: as them through `write-as`), never over an existing one without `replace` (the old one is moved to `~/.claude/agenthub-replaced-skills/`, never deleted), and runs a plugin's `claude plugin marketplace add`/`install --scope user` as the caller, never with `-y`; Uninstall (`POST /api/artifacts/:id/uninstall`) takes it out of the same accounts — a skill MOVED to `agenthub-replaced-skills/`, never deleted, a plugin `claude plugin uninstall --scope user --keep-data`; an admin's switch (Settings → AI tools, `ArtifactsHubSettings`) turns installs off. An uploaded or written skill is snapshotted under the same checks (paths relative, no `..`, no secret names, zip sizes read before inflating). `POST /api/artifacts/plugin/inspect` clones a user-named https link only to read `marketplace.json`, with every credential helper OFF — never send a login with it. Do not add a route that serves a live file of another user, installs into someone else's account, or takes a plugin command from the request.
 - **A workspace's instructions, extra folders and context files are lane facts, and a pane reads them only from the lane's rows.** The one addition is the workspace OWNER's own agent instructions (`user_prefs.instructions`, `PUT /api/me/instructions`, Settings → AI tools), which `launchExtras` puts first — keyed by `lanes.owner_id` (`local` in local mode), never by whoever clicked Start. `lanes.instructions` and `lane_sources` (`server/lib/lane-sources.js`) reach a pane through `launchExtras(laneId, tool)`, which `spawnRun` calls ITSELF — so neither spawn path can take them from a request — and every write is same-origin (`server/routes/lane-sources.js`). A folder must be absolute, exist, be a directory, not be or contain the OS home (`validateHomeDir`) and not be the workspace's own folder; it is the user's, and AgentHub never deletes it. An uploaded file is stored under `<data dir>/workspace-context/<lane id>/` under a name AgentHub derives (never a path from the request), and those copies are the only thing here AgentHub deletes (`ownsFile`): with their row, and with the workspace in `deleteLane`. Claude's `--add-dir` is VARIADIC, so it goes first in the argv where `--permission-mode` ends it, and the text (instructions + context file list + extra folders) is written at every spawn as the ONLY file `CLAUDE.md` of `<data dir>/workspace-prompts/<lane id>/` (a member's: `prompt-<lane id>/` in their handoff dir, via `write-as`), which goes in as one more `--add-dir` with `CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1` in the pane env — never `--append-system-prompt-file`: a custom system prompt is a launch flag Claude cannot carry over a restart, so it refused `/tui` in every pane with instructions (side effect: a CLAUDE.md in an extra folder is now read too); Codex gets one `--add-dir` per directory and `-c developer_instructions=<JSON string>` — the text itself up to 6 KB, else a line pointing at that file. Only `claude`/`codex` take them. Never write them into the user's repo (CLAUDE.md/AGENTS.md).
 - **A workspace's sessions are the ones it OWNS, never the ones that ran in its folder.** `sessions.lane_id` is stamped by `bindRunSession` (`server/routes/hooks.js`) for the session a dashboard pane holds — first writer wins, a nested `claude -p` excluded — and no route sets it. A Codex/Antigravity session (their hooks are opt-in, so a pane may never learn its session) is also stamped by `claimToolSessions` (`server/lib/dashboard-runs.js`, called by both pollers and once at start): the lane of the newest same-tool dashboard run in the session's folder that was live when the session started, never a Claude session. A new Claude pane is started with `--session-id <uuid>` (`spawnRun`), so its `dashboard_runs.session_id` is known before any hook and a hook that carries no `run_id` (a hook handler older than `AGENTHUB_RUN_ID` forwarding) is still stamped from that run (`laneForSession`). Every workspace session list reads `GET /api/sessions?lane=<id>` — which also counts a still-unstamped session one of the lane's `dashboard_runs` holds, because hooks reach only the lowest-port dashboard on a shared DB and that one may be an older build that never stamps — and shows nothing else (no "other sessions in this folder"). Do not go back to listing a workspace by `cwd`, and do not guess ownership for old history.
 - **A session's worktree is `claude --worktree`'s, resolved from the session row — and removing it never forces.** A Worktree start passes `--worktree=<server-made name>` (the `=` form: `-w [name]` eats the prompt otherwise) and Claude Code makes, populates and cleans up `<repo>/.claude/worktrees/<name>`; AgentHub only excludes `/.claude/worktrees/` at the repo root. A git route, a resume or a removal may work in a session's worktree only through `sessionWorktree` (`server/lib/session-worktree.js`: the session owned by the lane, its cwd not the lane's folder, registered by `git worktree list`) — `?session=` on the git routes answers `ENOWORKTREE` rather than falling back to the main folder. `POST /api/lanes/:id/session-worktree/remove` (same-origin, `confirm: true`, refused while a live pane holds the session) is the ONE dashboard path that deletes a worktree: `git worktree remove` with no `--force`, `git branch -d` never `-D`, a live-pid lock refused. Do not add a force, and do not let it touch a lane's own folder.
diff --git a/client/src/i18n/locales/en/artifacts.json b/client/src/i18n/locales/en/artifacts.json
index 0952c21e..10072fc5 100644
--- a/client/src/i18n/locales/en/artifacts.json
+++ b/client/src/i18n/locales/en/artifacts.json
@@ -70,7 +70,8 @@
   "form.save": "Add",
   "form.cancel": "Cancel",
   "added": "Added",
-  "files": "{{count}} files",
+  "files_one": "{{count}} file",
+  "files_other": "{{count}} files",
   "close": "Close",
   "fromSession": "From a session",
   "form.saveEdit": "Save",
@@ -129,6 +130,12 @@
   "reinstallHint": "Write this version over your installed copy",
   "reinstallTitle": "Reinstall “{{title}}”?",
   "reinstallBody": "Your installed ~/.claude/skills/{{name}}/ and ~/.agents/skills/{{name}}/ are replaced with this version. The current copy is moved to ~/.claude/agenthub-replaced-skills/, not deleted.",
+  "uninstall": "Uninstall",
+  "uninstallHint": "Remove it from your account",
+  "uninstallTitle": "Uninstall “{{title}}”?",
+  "uninstallSkillBody": "~/.claude/skills/{{name}}/ and ~/.agents/skills/{{name}}/ are moved to ~/.claude/agenthub-replaced-skills/, not deleted. Sessions already open keep it until they reload.",
+  "uninstallPluginBody": "Runs claude plugin uninstall {{name}} for your account; the plugin's data folder is kept. Open sessions keep it until /reload-plugins.",
+  "uninstalled": "Uninstalled {{name}}",
   "deleteBodyShared": "It is shared, so it also disappears from the Hub for everyone. To keep it but stop sharing, use Unshare instead. Anything already installed from it stays installed.",
   "deleteBodyKeep": "It leaves your library but stays in the Hub, because it is shared. To take it off the Hub too, use Remove from Hub afterwards (or Unshare first).",
   "deleteKept": "Removed from your library — still in the Hub",
@@ -143,5 +150,29 @@
   "preview.frontmatter": "Frontmatter (SKILL.md header)",
   "preview.whenUsed": "When Claude uses it",
   "preview.noDescription": "No description",
-  "preview.installsAs": "Installs as ~/.claude/skills/{{slug}}/ and ~/.agents/skills/{{slug}}/"
+  "preview.installsAs": "Installs as ~/.claude/skills/{{slug}}/ and ~/.agents/skills/{{slug}}/",
+  "blurb.skill": "Reusable instructions Claude follows",
+  "blurb.plugin": "Bundles of skills, commands and hooks",
+  "blurb.page": "Pages your sessions published on claude.ai",
+  "blurb.file": "Documents and outputs worth keeping",
+  "clearSearch": "Clear search",
+  "categories": "Categories",
+  "seeAll": "See all",
+  "results_one": "{{count}} result",
+  "results_other": "{{count}} results",
+  "empty.title": "Your library is empty",
+  "empty.hubTitle": "The Hub is quiet",
+  "empty.searchTitle": "No matches",
+  "empty.search": "Nothing matches this search or category — try other words, or pick All.",
+  "details": "Details",
+  "more": "More actions",
+  "about": "About",
+  "stat.kind": "Type",
+  "stat.installs": "Installs",
+  "stat.files": "Files",
+  "stat.size": "Size",
+  "stat.updated": "Updated",
+  "detail.runAs": "Run it as",
+  "detail.market": "Marketplace",
+  "detail.added": "Added {{date}}"
 }
diff --git a/client/src/i18n/locales/vi/artifacts.json b/client/src/i18n/locales/vi/artifacts.json
index 6a765841..6183cc45 100644
--- a/client/src/i18n/locales/vi/artifacts.json
+++ b/client/src/i18n/locales/vi/artifacts.json
@@ -70,7 +70,8 @@
   "form.save": "Thêm",
   "form.cancel": "Huỷ",
   "added": "Đã thêm",
-  "files": "{{count}} file",
+  "files_one": "{{count}} file",
+  "files_other": "{{count}} file",
   "close": "Đóng",
   "fromSession": "Từ một phiên",
   "form.saveEdit": "Lưu",
@@ -129,6 +130,12 @@
   "reinstallHint": "Ghi bản này đè lên bản bạn đã cài",
   "reinstallTitle": "Cài lại “{{title}}”?",
   "reinstallBody": "Bản đã cài ở ~/.claude/skills/{{name}}/ và ~/.agents/skills/{{name}}/ sẽ được thay bằng bản này. Bản hiện tại được chuyển vào ~/.claude/agenthub-replaced-skills/, không bị xoá.",
+  "uninstall": "Gỡ cài đặt",
+  "uninstallHint": "Gỡ khỏi tài khoản của bạn",
+  "uninstallTitle": "Gỡ cài đặt “{{title}}”?",
+  "uninstallSkillBody": "~/.claude/skills/{{name}}/ và ~/.agents/skills/{{name}}/ sẽ được chuyển vào ~/.claude/agenthub-replaced-skills/, không bị xoá. Các phiên đang mở vẫn giữ nó cho tới khi tải lại.",
+  "uninstallPluginBody": "Chạy claude plugin uninstall {{name}} cho tài khoản của bạn; thư mục dữ liệu của plugin được giữ lại. Các phiên đang mở vẫn giữ nó cho tới khi /reload-plugins.",
+  "uninstalled": "Đã gỡ {{name}}",
   "deleteBodyShared": "Mục này đang được chia sẻ nên cũng sẽ biến mất khỏi Hub với mọi người. Muốn giữ lại nhưng thôi chia sẻ thì dùng Bỏ chia sẻ. Những gì đã cài từ nó vẫn được giữ.",
   "deleteBodyKeep": "Mục này rời khỏi thư viện của bạn nhưng vẫn ở trên Hub vì đang được chia sẻ. Muốn gỡ khỏi Hub luôn thì sau đó bấm Gỡ khỏi Hub (hoặc Bỏ chia sẻ trước).",
   "deleteKept": "Đã xoá khỏi thư viện — vẫn còn trên Hub",
@@ -143,5 +150,29 @@
   "preview.frontmatter": "Frontmatter (phần đầu SKILL.md)",
   "preview.whenUsed": "Khi nào Claude dùng",
   "preview.noDescription": "Chưa có mô tả",
-  "preview.installsAs": "Cài vào ~/.claude/skills/{{slug}}/ và ~/.agents/skills/{{slug}}/"
+  "preview.installsAs": "Cài vào ~/.claude/skills/{{slug}}/ và ~/.agents/skills/{{slug}}/",
+  "blurb.skill": "Bộ hướng dẫn tái sử dụng cho Claude",
+  "blurb.plugin": "Gói skill, lệnh và hook",
+  "blurb.page": "Trang mà phiên đã publish lên claude.ai",
+  "blurb.file": "Tài liệu và kết quả đáng giữ lại",
+  "clearSearch": "Xoá tìm kiếm",
+  "categories": "Danh mục",
+  "seeAll": "Xem tất cả",
+  "results_one": "{{count}} kết quả",
+  "results_other": "{{count}} kết quả",
+  "empty.title": "Thư viện đang trống",
+  "empty.hubTitle": "Hub chưa có gì",
+  "empty.searchTitle": "Không tìm thấy",
+  "empty.search": "Không có mục nào khớp tìm kiếm hoặc danh mục này — thử từ khác, hoặc chọn Tất cả.",
+  "details": "Chi tiết",
+  "more": "Thao tác khác",
+  "about": "Giới thiệu",
+  "stat.kind": "Loại",
+  "stat.installs": "Lượt cài",
+  "stat.files": "File",
+  "stat.size": "Dung lượng",
+  "stat.updated": "Cập nhật",
+  "detail.runAs": "Gọi bằng",
+  "detail.market": "Marketplace",
+  "detail.added": "Thêm lúc {{date}}"
 }
diff --git a/client/src/lib/api.ts b/client/src/lib/api.ts
index fd2a7ea9..257679b7 100644
--- a/client/src/lib/api.ts
+++ b/client/src/lib/api.ts
@@ -3007,6 +3007,11 @@ export const api = {
         method: "POST",
         body: JSON.stringify({ replace }),
       }),
+    /** POST /api/artifacts/:id/uninstall — a skill moved aside, a plugin `claude plugin uninstall`. */
+    uninstall: (id: number) =>
+      request<{ uninstalled: string; paths: string[] }>(`/artifacts/${id}/uninstall`, {
+        method: "POST",
+      }),
     /** GET /api/artifacts/:id/installs — who installed it, when, and where. */
     installs: (id: number) => request<ArtifactInstalls>(`/artifacts/${id}/installs`),
     /** One of the snapshot's own files, served sandboxed. */
diff --git a/client/src/pages/Artifacts.tsx b/client/src/pages/Artifacts.tsx
index bd93e67c..afe2d07a 100644
--- a/client/src/pages/Artifacts.tsx
+++ b/client/src/pages/Artifacts.tsx
@@ -1,7 +1,11 @@
 /**
  * @file Artifacts.tsx
  * @description `/artifacts` — the Artifacts hub (`/api/artifacts`,
- * server/lib/artifacts.js): claude.ai pages sessions published, pinned
+ * server/lib/artifacts.js), laid out like an app store: a hero with the
+ * search, category chips, the unfiltered front page shelved by kind (Skills,
+ * Plugins, Pages, Files — "See all" picks the category), each artifact an
+ * app-icon card with one primary pill (Install / Installed / Open / Preview /
+ * Download) and a detail sheet a click on the card opens. It holds claude.ai pages sessions published, pinned
  * workspace files (or one uploaded from the computer), skills (picked,
  * uploaded as a file/folder/zip, or written — `ArtifactAddPanels.tsx`) and
  * plugins (read from a marketplace link, or typed). One list holds the
@@ -9,7 +13,9 @@
  * **All · My library · Hub** filter narrows it. A shared skill or plugin is
  * installed into the viewer's own account (after a confirmation that lists
  * what will be written or run); one already installed there shows
- * **Installed** instead of the Install button (a skill keeps **Reinstall**,
+ * **Installed** instead of the Install button, with **Uninstall** beside it
+ * (a skill's copies moved aside, a plugin `claude plugin uninstall`; a skill
+ * also keeps **Reinstall**,
  * which replaces the user's copy after a confirmation). Editing a skill
  * edits its SKILL.md (name, description, instructions — a new snapshot);
  * its preview opens with what it installs as and when Claude uses it. Deleting a shared
@@ -32,15 +38,20 @@ import { useCallback, useEffect, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
 import {
   Check,
+  ChevronRight,
+  Copy,
   Download,
   ExternalLink,
   Eye,
   FileText,
   Globe,
+  MoreHorizontal,
   Package,
+  PackageMinus,
   Pencil,
   Plus,
   RotateCcw,
+  Search,
   Share2,
   Sparkles,
   Trash2,
@@ -72,7 +83,16 @@ import {
 import { MarkdownPreview, isMarkdown } from "../components/MarkdownPreview";
 
 const KIND_ICON = { page: Globe, file: FileText, skill: Sparkles, plugin: Package } as const;
-const KINDS: ArtifactKind[] = ["page", "file", "skill", "plugin"];
+// The storefront's shelf order: what installs first, what is read after.
+const SHELVES: ArtifactKind[] = ["skill", "plugin", "page", "file"];
+// Each kind's app-icon tile. White glyphs sit on a fixed gradient, so they
+// read the same in every theme.
+const KIND_TILE: Record<ArtifactKind, string> = {
+  skill: "from-violet-500 to-fuchsia-600",
+  plugin: "from-emerald-500 to-teal-600",
+  page: "from-sky-500 to-blue-600",
+  file: "from-amber-500 to-orange-600",
+};
 
 function fmtBytes(n: number | null): string {
   if (!n) return "";
@@ -81,11 +101,55 @@ function fmtBytes(n: number | null): string {
   return `${(n / 1024 / 1024).toFixed(1)} MB`;
 }
 
+const fmtDate = (iso: string) =>
+  new Date(iso).toLocaleDateString(undefined, { year: "numeric", month: "short", day: "numeric" });
+
 const IMAGE = /\.(png|jpe?g|gif|webp|svg)$/i;
 // What the sandboxed preview can show: the server's typed list minus PDF.
 const PREVIEWABLE =
   /\.(html?|md|markdown|txt|log|csv|tsv|json|ya?ml|sh|py|js|ts|png|jpe?g|gif|webp|svg|mp4|webm|mp3|wav)$/i;
 
+/** What a row can do, worked out once for its card, menu and detail sheet. */
+function capabilities(a: Artifact) {
+  const previewPath = a.kind === "skill" ? "SKILL.md" : (a.files[0]?.path ?? "");
+  return {
+    previewPath,
+    canPreview:
+      a.files.length > 0 &&
+      (a.kind === "skill" || (a.kind === "file" && PREVIEWABLE.test(previewPath))),
+    canDownload: a.kind === "file" && a.files.length > 0,
+    installable: a.kind === "skill" || a.kind === "plugin",
+    // Its owner removed it from their library; it lives on in the Hub only.
+    hubOnly: a.mine && a.shared && !a.inLibrary,
+  };
+}
+
+/** The rounded "app icon" every artifact wears: its kind's glyph on its colour. */
+function AppIcon({ kind, size = "md" }: { kind: ArtifactKind; size?: "sm" | "md" | "lg" }) {
+  const Icon = KIND_ICON[kind];
+  const box = {
+    sm: "h-6 w-6 rounded-lg",
+    md: "h-12 w-12 rounded-2xl",
+    lg: "h-20 w-20 rounded-[1.6rem]",
+  }[size];
+  const glyph = { sm: "h-3.5 w-3.5", md: "h-6 w-6", lg: "h-10 w-10" }[size];
+  return (
+    <span
+      aria-hidden
+      className={`flex shrink-0 items-center justify-center bg-gradient-to-br text-white shadow-sm ring-1 ring-black/5 ${KIND_TILE[kind]} ${box}`}
+    >
+      <Icon className={glyph} strokeWidth={2.2} />
+    </span>
+  );
+}
+
+const pill =
+  "inline-flex shrink-0 items-center gap-1 rounded-full px-3.5 py-1 text-xs font-semibold transition-colors disabled:cursor-not-allowed disabled:opacity-50";
+const pillPrimary = `${pill} bg-accent-solid text-white hover:bg-accent-solid-hover`;
+const pillSoft = `${pill} bg-surface-3 text-fg-primary hover:bg-surface-4`;
+const iconBtn =
+  "flex h-7 w-7 items-center justify-center rounded-full text-fg-muted transition-colors hover:bg-surface-3 hover:text-fg-primary";
+
 export function Artifacts() {
   const { t } = useTranslation("artifacts");
   const [settings, setSettings] = useState<ArtifactSettings | null>(null);
@@ -97,6 +161,8 @@ export function Artifacts() {
   const [addMenu, setAddMenu] = useState(false);
   const addMenuRef = useRef<HTMLDivElement>(null);
   const [preview, setPreview] = useState<{ item: Artifact; path: string } | null>(null);
+  // By id, so the open sheet shows the row as the latest list has it.
+  const [detailId, setDetailId] = useState<number | null>(null);
 
   useEffect(() => {
     api.artifacts
@@ -183,6 +249,7 @@ export function Artifacts() {
     try {
       const r = await api.artifacts.remove(a.id);
       if (r.kept) toast.success(t("deleteKept"));
+      setDetailId((id) => (id === a.id ? null : id));
       load();
     } catch (err) {
       toast.error(err);
@@ -252,18 +319,97 @@ export function Artifacts() {
     load();
   };
 
+  // Taken out of the user's own accounts again; a skill's copies are moved to
+  // ~/.claude/agenthub-replaced-skills/, never deleted.
+  const uninstall = async (a: Artifact) => {
+    if (
+      !(await confirmDialog({
+        title: t("uninstallTitle", { title: a.title }),
+        message: t(a.kind === "skill" ? "uninstallSkillBody" : "uninstallPluginBody", {
+          name: a.source,
+        }),
+        confirmLabel: t("uninstall"),
+      }))
+    )
+      return;
+    try {
+      const r = await api.artifacts.uninstall(a.id);
+      toast.success(t("uninstalled", { name: r.uninstalled }));
+    } catch (err) {
+      toast.error(err);
+    }
+    load();
+  };
+
+  const actionsFor = (a: Artifact): CardActions => ({
+    onOpen: () => setDetailId(a.id),
+    onShare: () => void share(a),
+    onRename: () => {
+      setDetailId(null);
+      setRenaming(a);
+    },
+    onDelete: () => void remove(a),
+    onInstall: () => void install(a),
+    onReinstall: () => void reinstall(a),
+    onUninstall: () => void uninstall(a),
+    onPreview: (path) => {
+      setDetailId(null);
+      setPreview({ item: a, path });
+    },
+  });
+
+  const card = (a: Artifact) => (
+    <ArtifactCard
+      key={a.id}
+      item={a}
+      server={server}
+      canInstall={!!settings?.installsEnabled}
+      {...actionsFor(a)}
+    />
+  );
+
+  // The storefront's front page — everything, unsearched — is shelved by
+  // kind; a category or a search is one flat grid of results.
+  const shelves =
+    items && !kind && !q.trim()
+      ? SHELVES.map((k) => ({ kind: k, rows: items.filter((a) => a.kind === k) })).filter(
+          (s) => s.rows.length > 0
+        )
+      : null;
+  const detail = detailId === null ? null : (items?.find((a) => a.id === detailId) ?? null);
+
   return (
-    <div className="space-y-4" data-testid="artifacts-page">
-      <header className="flex flex-wrap items-start justify-between gap-3">
-        <div>
-          <h1 className="text-lg font-semibold text-fg-primary">{t("title")}</h1>
-          <p className="text-sm text-fg-muted">{t(server ? "subtitleServer" : "subtitle")}</p>
-        </div>
-        <div className="flex items-center gap-3">
+    <div className="space-y-5" data-testid="artifacts-page">
+      <header className="relative overflow-hidden rounded-3xl border border-border bg-gradient-to-br from-accent-muted via-surface-1 to-surface-1 px-5 py-6 sm:px-7">
+        <div
+          aria-hidden
+          className="pointer-events-none absolute -right-16 -top-20 h-56 w-56 rounded-full bg-fuchsia-500/10 blur-3xl"
+        />
+        <div
+          aria-hidden
+          className="pointer-events-none absolute -bottom-24 right-40 h-48 w-48 rounded-full bg-sky-500/10 blur-3xl"
+        />
+        <div className="relative flex flex-wrap items-start justify-between gap-4">
+          <div className="flex min-w-0 items-center gap-4">
+            <span
+              aria-hidden
+              className="hidden h-14 w-14 shrink-0 grid-cols-2 gap-1 rounded-2xl bg-surface-1/80 p-2 shadow-sm ring-1 ring-border sm:grid"
+            >
+              {SHELVES.map((k) => (
+                <span key={k} className={`rounded-md bg-gradient-to-br ${KIND_TILE[k]}`} />
+              ))}
+            </span>
+            <div className="min-w-0">
+              <h1 className="text-2xl font-bold tracking-tight text-fg-primary">{t("title")}</h1>
+              <p className="mt-0.5 max-w-2xl text-sm text-fg-secondary">
+                {t(server ? "subtitleServer" : "subtitle")}
+              </p>
+            </div>
+          </div>
           <div className="relative" ref={addMenuRef}>
             <button
               type="button"
-              className="btn-primary flex items-center gap-1.5 text-sm"
+              className="btn-primary flex items-center gap-1.5 rounded-full px-4 text-sm shadow-sm"
               data-testid="artifacts-add"
               aria-haspopup="menu"
               aria-expanded={addMenu}
@@ -273,34 +419,85 @@ export function Artifacts() {
               {t("add")}
             </button>
             {addMenu && (
-              <div className="absolute right-0 z-20 mt-1 w-56 rounded-lg border border-border bg-surface-1 p-1 shadow-xl">
-                {KINDS.map((k) => {
-                  const Icon = KIND_ICON[k];
-                  return (
-                    <button
-                      key={k}
-                      type="button"
-                      onClick={() => {
-                        setAdding(k);
-                        setAddMenu(false);
-                      }}
-                      className="flex w-full items-center gap-2 rounded px-2 py-1.5 text-left text-sm text-fg-secondary hover:bg-surface-3 hover:text-fg-primary"
-                    >
-                      <Icon className="h-4 w-4" />
-                      {t(`add.${k}`)}
-                    </button>
-                  );
-                })}
+              <div className="absolute right-0 z-20 mt-2 w-72 rounded-2xl border border-border bg-surface-1 p-1.5 shadow-2xl">
+                {SHELVES.map((k) => (
+                  <button
+                    key={k}
+                    type="button"
+                    aria-label={t(`add.${k}`)}
+                    onClick={() => {
+                      setAdding(k);
+                      setAddMenu(false);
+                    }}
+                    className="flex w-full items-center gap-3 rounded-xl px-2 py-2 text-left hover:bg-surface-3"
+                  >
+                    <AppIcon kind={k} size="sm" />
+                    <span className="min-w-0">
+                      <span className="block text-sm font-medium text-fg-primary">
+                        {t(`add.${k}`)}
+                      </span>
+                      <span className="block truncate text-[11px] text-fg-muted">
+                        {t(`blurb.${k}`)}
+                      </span>
+                    </span>
+                  </button>
+                ))}
               </div>
             )}
           </div>
         </div>
+        <label className="relative mt-5 flex max-w-xl items-center">
+          <Search className="pointer-events-none absolute left-3.5 h-4 w-4 text-fg-muted" />
+          <input
+            value={q}
+            onChange={(e) => setQ(e.target.value)}
+            placeholder={t("search")}
+            aria-label={t("search")}
+            className="w-full rounded-full border border-border bg-surface-1 py-2 pl-10 pr-9 text-sm text-fg-primary shadow-sm outline-none transition focus:border-accent focus:ring-2 focus:ring-accent/30"
+          />
+          {q && (
+            <button
+              type="button"
+              aria-label={t("clearSearch")}
+              onClick={() => setQ("")}
+              className="absolute right-2 flex h-6 w-6 items-center justify-center rounded-full text-fg-muted hover:bg-surface-3 hover:text-fg-primary"
+            >
+              <X className="h-3.5 w-3.5" />
+            </button>
+          )}
+        </label>
       </header>
 
       <div className="flex flex-wrap items-center gap-2">
+        <div
+          className="flex flex-wrap items-center gap-1.5"
+          role="group"
+          aria-label={t("categories")}
+        >
+          {(["", ...SHELVES] as const).map((k) => {
+            const on = kind === k;
+            const Icon = k ? KIND_ICON[k] : null;
+            return (
+              <button
+                key={k || "all"}
+                type="button"
+                aria-pressed={on}
+                onClick={() => setKind(k)}
+                className={`flex items-center gap-1.5 rounded-full border px-3 py-1.5 text-xs font-medium transition-colors ${
+                  on
+                    ? "border-transparent bg-accent-solid text-white shadow-sm"
+                    : "border-border bg-surface-1 text-fg-secondary hover:bg-surface-3 hover:text-fg-primary"
+                }`}
+              >
+                {Icon && <Icon className="h-3.5 w-3.5" />}
+                {t(k ? `kind.${k}` : "kind.all")}
+              </button>
+            );
+          })}
+        </div>
         {server && (
           <div
-            className="flex items-center rounded border border-border bg-surface-2 p-0.5"
+            className="ml-auto flex items-center rounded-full border border-border bg-surface-2 p-0.5"
             data-testid="artifacts-scope"
           >
             {(["all", "mine", "hub"] as const).map((v) => (
@@ -309,10 +506,10 @@ export function Artifacts() {
                 type="button"
                 aria-pressed={tab === v}
                 onClick={() => setTab(v)}
-                className={`rounded px-2.5 py-1 text-xs ${
+                className={`rounded-full px-3 py-1 text-xs font-medium transition-colors ${
                   tab === v
-                    ? "bg-surface-4 text-fg-primary"
-                    : "text-fg-secondary hover:bg-surface-3 hover:text-fg-primary"
+                    ? "bg-surface-1 text-fg-primary shadow-sm"
+                    : "text-fg-secondary hover:text-fg-primary"
                 }`}
               >
                 {t(`tab.${v}`)}
@@ -320,57 +517,62 @@ export function Artifacts() {
             ))}
           </div>
         )}
-        <div className="flex items-center rounded border border-border bg-surface-2 p-0.5">
-          {(["", ...KINDS] as const).map((k) => (
-            <button
-              key={k || "all"}
-              type="button"
-              aria-pressed={kind === k}
-              onClick={() => setKind(k)}
-              className={`rounded px-2.5 py-1 text-xs ${
-                kind === k
-                  ? "bg-surface-4 text-fg-primary"
-                  : "text-fg-secondary hover:bg-surface-3 hover:text-fg-primary"
-              }`}
-            >
-              {t(k ? `kind.${k}` : "kind.all")}
-            </button>
-          ))}
-        </div>
-        <input
-          value={q}
-          onChange={(e) => setQ(e.target.value)}
-          placeholder={t("search")}
-          aria-label={t("search")}
-          className="ml-auto w-56 rounded border border-border bg-surface-1 px-2 py-1 text-sm text-fg-primary"
-        />
       </div>
 
       {items === null ? (
-        <p className="text-sm text-fg-muted">{t("loading")}</p>
+        <SkeletonGrid label={t("loading")} />
       ) : items.length === 0 ? (
-        <p className="rounded-lg border border-dashed border-border px-4 py-10 text-center text-sm text-fg-muted">
-          {t(tab === "hub" ? "empty.hub" : "empty.mine")}
-        </p>
-      ) : (
-        <ul className="grid gap-3 sm:grid-cols-2 xl:grid-cols-3" data-testid="artifacts-list">
-          {items.map((a) => (
-            <ArtifactCard
-              key={a.id}
-              item={a}
-              server={server}
-              canInstall={!!settings?.installsEnabled}
-              onShare={() => void share(a)}
-              onRename={() => setRenaming(a)}
-              onDelete={() => void remove(a)}
-              onInstall={() => void install(a)}
-              onReinstall={() => void reinstall(a)}
-              onPreview={(path) => setPreview({ item: a, path })}
-            />
+        <EmptyState
+          hub={tab === "hub"}
+          searching={!!q.trim() || !!kind}
+          onAdd={(k) => setAdding(k)}
+        />
+      ) : shelves ? (
+        <div className="space-y-7" data-testid="artifacts-list">
+          {shelves.map((s) => (
+            <section key={s.kind} aria-labelledby={`shelf-${s.kind}`}>
+              <div className="mb-3 flex items-end justify-between gap-3 border-b border-border-light pb-2">
+                <div className="min-w-0">
+                  <h2
+                    id={`shelf-${s.kind}`}
+                    className="flex items-center gap-2 text-base font-semibold text-fg-primary"
+                  >
+                    {t(`kind.${s.kind}`)}
+                    <span className="rounded-full bg-surface-3 px-2 py-0.5 text-[11px] font-medium text-fg-secondary">
+                      {s.rows.length}
+                    </span>
+                  </h2>
+                  <p className="truncate text-xs text-fg-muted">{t(`blurb.${s.kind}`)}</p>
+                </div>
+                <button
+                  type="button"
+                  onClick={() => setKind(s.kind)}
+                  className="flex shrink-0 items-center gap-0.5 text-xs font-medium text-accent hover:text-accent-hover"
+                >
+                  {t("seeAll")}
+                  <ChevronRight className="h-3.5 w-3.5" />
+                </button>
+              </div>
+              <ul className="grid gap-3 sm:grid-cols-2 xl:grid-cols-3">{s.rows.map(card)}</ul>
+            </section>
           ))}
-        </ul>
+        </div>
+      ) : (
+        <div data-testid="artifacts-list">
+          <p className="mb-2 text-xs text-fg-muted">{t("results", { count: items.length })}</p>
+          <ul className="grid gap-3 sm:grid-cols-2 xl:grid-cols-3">{items.map(card)}</ul>
+        </div>
       )}
 
+      {detail && (
+        <DetailDialog
+          item={detail}
+          server={server}
+          canInstall={!!settings?.installsEnabled}
+          onClose={() => setDetailId(null)}
+          {...actionsFor(detail)}
+        />
+      )}
       {adding && <AddDialog kind={adding} onClose={() => setAdding(null)} onAdded={load} />}
       {preview && <PreviewDialog {...preview} onClose={() => setPreview(null)} />}
       {renaming && (
@@ -387,155 +589,343 @@ export function Artifacts() {
   );
 }
 
-function ArtifactCard({
-  item: a,
-  server,
-  canInstall,
-  onShare,
-  onRename,
-  onDelete,
-  onInstall,
-  onReinstall,
-  onPreview,
+function SkeletonGrid({ label }: { label: string }) {
+  return (
+    <div role="status" aria-label={label}>
+      <span className="sr-only">{label}</span>
+      <ul className="grid gap-3 sm:grid-cols-2 xl:grid-cols-3" aria-hidden>
+        {Array.from({ length: 6 }, (_, i) => (
+          <li
+            key={i}
+            className="flex animate-pulse flex-col gap-3 rounded-2xl border border-border bg-surface-1 p-4"
+          >
+            <div className="flex items-center gap-3">
+              <span className="h-12 w-12 rounded-2xl bg-surface-3" />
+              <span className="flex-1 space-y-2">
+                <span className="block h-3 w-2/3 rounded bg-surface-3" />
+                <span className="block h-2.5 w-1/3 rounded bg-surface-2" />
+              </span>
+            </div>
+            <span className="block h-2.5 w-full rounded bg-surface-2" />
+            <span className="block h-2.5 w-4/5 rounded bg-surface-2" />
+          </li>
+        ))}
+      </ul>
+    </div>
+  );
+}
+
+function EmptyState({
+  hub,
+  searching,
+  onAdd,
 }: {
-  item: Artifact;
-  server: boolean;
-  canInstall: boolean;
+  hub: boolean;
+  searching: boolean;
+  onAdd: (k: ArtifactKind) => void;
+}) {
+  const { t } = useTranslation("artifacts");
+  return (
+    <div className="flex flex-col items-center rounded-3xl border border-dashed border-border px-6 py-12 text-center">
+      <span className="flex h-16 w-16 items-center justify-center rounded-3xl bg-surface-3 text-fg-muted">
+        {searching ? <Search className="h-7 w-7" /> : <Sparkles className="h-7 w-7" />}
+      </span>
+      <p className="mt-4 text-base font-semibold text-fg-primary">
+        {t(searching ? "empty.searchTitle" : hub ? "empty.hubTitle" : "empty.title")}
+      </p>
+      <p className="mt-1 max-w-md text-sm text-fg-muted">
+        {searching ? t("empty.search") : t(hub ? "empty.hub" : "empty.mine")}
+      </p>
+      {!hub && !searching && (
+        <div className="mt-6 grid w-full max-w-2xl gap-2 sm:grid-cols-2">
+          {SHELVES.map((k) => (
+            <button
+              key={k}
+              type="button"
+              onClick={() => onAdd(k)}
+              className="flex items-center gap-3 rounded-2xl border border-border bg-surface-1 p-3 text-left transition hover:-translate-y-0.5 hover:shadow-md"
+            >
+              <AppIcon kind={k} />
+              <span className="min-w-0">
+                <span className="block text-sm font-medium text-fg-primary">{t(`add.${k}`)}</span>
+                <span className="block text-xs text-fg-muted">{t(`blurb.${k}`)}</span>
+              </span>
+            </button>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+type CardActions = {
+  onOpen: () => void;
   onShare: () => void;
   onRename: () => void;
   onDelete: () => void;
   onInstall: () => void;
   onReinstall: () => void;
+  onUninstall: () => void;
+  onPreview: (path: string) => void;
+};
+
+/** The one primary pill on a card / detail sheet, App Store "Get" style. */
+function PrimaryAction({
+  item: a,
+  canInstall,
+  onInstall,
+  onPreview,
+}: {
+  item: Artifact;
+  canInstall: boolean;
+  onInstall: () => void;
   onPreview: (path: string) => void;
 }) {
   const { t } = useTranslation("artifacts");
-  const Icon = KIND_ICON[a.kind];
+  const c = capabilities(a);
+  if (a.installed)
+    return (
+      <span
+        className="inline-flex shrink-0 items-center gap-1 rounded-full bg-status-success/15 px-3 py-1 text-xs font-semibold text-status-success"
+        data-testid="artifact-installed"
+      >
+        <Check className="h-3.5 w-3.5" />
+        {t("installedBadge")}
+      </span>
+    );
+  if (c.installable)
+    return (
+      <button
+        type="button"
+        className={pillPrimary}
+        disabled={!canInstall}
+        title={canInstall ? undefined : t("installsOff")}
+        onClick={onInstall}
+      >
+        {t("install")}
+      </button>
+    );
+  if (a.kind === "page" && a.url)
+    return (
+      <a href={a.url} target="_blank" rel="noopener noreferrer" className={pillPrimary}>
+        {t("open")}
+        <ExternalLink className="h-3 w-3" />
+      </a>
+    );
+  if (c.canPreview)
+    return (
+      <button type="button" className={pillSoft} onClick={() => onPreview(c.previewPath)}>
+        {t("preview")}
+      </button>
+    );
+  if (c.canDownload)
+    return (
+      <a href={api.artifacts.rawUrl(a.id, a.files[0]?.path, true)} className={pillSoft}>
+        {t("download")}
+      </a>
+    );
+  return null;
+}
+
+function ArtifactCard({
+  item: a,
+  server,
+  canInstall,
+  onOpen,
+  onShare,
+  onRename,
+  onDelete,
+  onInstall,
+  onReinstall,
+  onUninstall,
+  onPreview,
+}: CardActions & {
+  item: Artifact;
+  server: boolean;
+  canInstall: boolean;
+}) {
+  const { t } = useTranslation("artifacts");
   const menu = useContextMenu<null>();
   const pick = (fn: () => void) => () => {
     menu.close();
     fn();
   };
-  // Its owner removed it from their library; it lives on in the Hub only.
-  const hubOnly = a.mine && a.shared && !a.inLibrary;
-  const previewPath = a.kind === "skill" ? "SKILL.md" : (a.files[0]?.path ?? "");
-  const canPreview =
-    a.files.length > 0 &&
-    (a.kind === "skill" || (a.kind === "file" && PREVIEWABLE.test(previewPath)));
-  const btn =
-    "flex items-center gap-1 rounded px-1.5 py-0.5 text-[11px] text-fg-secondary hover:bg-surface-3 hover:text-fg-primary";
+  const { previewPath, canPreview, canDownload, installable, hubOnly } = capabilities(a);
+  // The primary pill already offers Preview/Download for a plain file.
+  const primaryIsPreview = !installable && a.kind !== "page" && canPreview;
   return (
     <li
-      className="flex flex-col gap-2 rounded-lg border border-border bg-surface-1 p-3"
+      className="group flex flex-col gap-3 rounded-2xl border border-border bg-surface-1 p-4 shadow-sm transition hover:-translate-y-0.5 hover:border-accent/40 hover:shadow-lg"
       data-testid={`artifact-${a.id}`}
       onContextMenu={(e) => menu.open(e, null)}
     >
-      <div className="flex items-start gap-2">
-        <Icon className="mt-0.5 h-4 w-4 shrink-0 text-fg-muted" />
-        <div className="min-w-0 flex-1">
-          <p className="truncate text-sm font-medium text-fg-primary" title={a.title}>
-            {a.title}
-          </p>
-          <p className="truncate text-[11px] text-fg-muted" title={a.source || a.url || ""}>
-            {t(`kindOne.${a.kind}`)}
-            {a.source ? ` · ${a.source}` : ""}
-            {a.size ? ` · ${fmtBytes(a.size)}` : ""}
-          </p>
-        </div>
-        {a.shared && (
-          <span
-            className="shrink-0 rounded bg-surface-3 px-1.5 py-0.5 text-[10px] text-fg-secondary"
-            title={hubOnly ? t("hubOnlyHint") : undefined}
-          >
-            {t(hubOnly ? "hubOnly" : "shared")}
+      <div className="flex items-start gap-3">
+        <button
+          type="button"
+          onClick={onOpen}
+          title={t("details")}
+          className="flex min-w-0 flex-1 items-start gap-3 rounded-xl text-left focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/50"
+        >
+          <AppIcon kind={a.kind} />
+          <span className="min-w-0 flex-1 pt-0.5">
+            <span className="flex items-center gap-1.5">
+              <span
+                className="truncate text-sm font-semibold text-fg-primary group-hover:text-accent"
+                title={a.title}
+              >
+                {a.title}
+              </span>
+            </span>
+            <span
+              className="block truncate text-[11px] text-fg-muted"
+              title={a.source || a.url || ""}
+            >
+              {t(`kindOne.${a.kind}`)}
+              {a.source ? ` · ${a.source}` : ""}
+              {a.size ? ` · ${fmtBytes(a.size)}` : ""}
+            </span>
           </span>
-        )}
+        </button>
+        <PrimaryAction
+          item={a}
+          canInstall={canInstall}
+          onInstall={onInstall}
+          onPreview={onPreview}
+        />
       </div>
-      {a.description && <p className="line-clamp-2 text-xs text-fg-secondary">{a.description}</p>}
-      <p className="text-[11px] text-fg-muted">
-        {server && a.owner && !a.mine ? `${t("by", { name: a.owner })} · ` : ""}
-        {new Date(a.createdAt).toLocaleString()}
-        {a.installs > 0 && (
-          <>
-            {" · "}
-            <InstallsButton item={a} />
-          </>
-        )}
-      </p>
-      <div className="mt-auto flex flex-wrap items-center gap-1 border-t border-border-light pt-2">
-        {a.kind === "page" && a.url && (
-          <a href={a.url} target="_blank" rel="noopener noreferrer" className={btn}>
-            <ExternalLink className="h-3 w-3" />
-            {t("open")}
-          </a>
-        )}
-        {canPreview && (
-          <button type="button" className={btn} onClick={() => onPreview(previewPath)}>
-            <Eye className="h-3 w-3" />
-            {t("preview")}
-          </button>
-        )}
-        {a.kind === "file" && a.files.length > 0 && (
-          <a href={api.artifacts.rawUrl(a.id, a.files[0]?.path, true)} className={btn}>
-            <Download className="h-3 w-3" />
-            {t("download")}
-          </a>
-        )}
-        {a.installed && (
-          <span
-            className="flex items-center gap-1 px-1.5 py-0.5 text-[11px] text-status-success"
-            data-testid="artifact-installed"
-          >
-            <Check className="h-3 w-3" />
-            {t("installedBadge")}
+      {(a.description || a.shared) && (
+        <div className="space-y-1.5">
+          {a.shared && (
+            <span
+              className="inline-flex items-center gap-1 rounded-full bg-accent-muted px-2 py-0.5 text-[10px] font-medium text-accent"
+              title={hubOnly ? t("hubOnlyHint") : undefined}
+            >
+              <Share2 className="h-2.5 w-2.5" />
+              {t(hubOnly ? "hubOnly" : "shared")}
+            </span>
+          )}
+          {a.description && (
+            <p className="line-clamp-2 text-xs leading-relaxed text-fg-secondary">
+              {a.description}
+            </p>
+          )}
+        </div>
+      )}
+      <div className="mt-auto flex items-center gap-2 border-t border-border-light pt-2.5 text-[11px] text-fg-muted">
+        <span className="flex min-w-0 flex-1 items-center gap-1.5">
+          {server && a.owner && !a.mine && (
+            <>
+              <span
+                aria-hidden
+                className="flex h-4 w-4 shrink-0 items-center justify-center rounded-full bg-surface-4 text-[9px] font-semibold uppercase text-fg-secondary"
+              >
+                {a.owner.slice(0, 1)}
+              </span>
+              <span className="truncate">{t("by", { name: a.owner })} ·</span>
+            </>
+          )}
+          <span className="shrink-0" title={new Date(a.createdAt).toLocaleString()}>
+            {fmtDate(a.createdAt)}
           </span>
-        )}
-        {a.installed && a.kind === "skill" && (
-          <button
-            type="button"
-            className={btn}
-            disabled={!canInstall}
-            title={canInstall ? t("reinstallHint") : t("installsOff")}
-            onClick={onReinstall}
-          >
-            <RotateCcw className="h-3 w-3" />
-            {t("reinstall")}
-          </button>
-        )}
-        {(a.kind === "skill" || a.kind === "plugin") && !a.installed && (
-          <button
-            type="button"
-            className={btn}
-            disabled={!canInstall}
-            title={canInstall ? undefined : t("installsOff")}
-            onClick={onInstall}
-          >
-            <Download className="h-3 w-3" />
-            {t("install")}
-          </button>
-        )}
-        <span className="ml-auto flex items-center gap-1">
+          {a.installs > 0 && (
+            <>
+              <span>·</span>
+              <InstallsButton item={a} />
+            </>
+          )}
+        </span>
+        <span className="flex shrink-0 items-center gap-0.5">
+          {canPreview && !primaryIsPreview && (
+            <button
+              type="button"
+              className={iconBtn}
+              aria-label={t("preview")}
+              title={t("preview")}
+              onClick={() => onPreview(previewPath)}
+            >
+              <Eye className="h-3.5 w-3.5" />
+            </button>
+          )}
+          {canDownload && primaryIsPreview && (
+            <a
+              href={api.artifacts.rawUrl(a.id, a.files[0]?.path, true)}
+              className={iconBtn}
+              aria-label={t("download")}
+              title={t("download")}
+            >
+              <Download className="h-3.5 w-3.5" />
+            </a>
+          )}
+          {a.installed && a.kind === "skill" && (
+            <button
+              type="button"
+              className={iconBtn}
+              aria-label={t("reinstall")}
+              disabled={!canInstall}
+              title={canInstall ? t("reinstallHint") : t("installsOff")}
+              onClick={onReinstall}
+            >
+              <RotateCcw className="h-3.5 w-3.5" />
+            </button>
+          )}
+          {a.installed && (
+            <button
+              type="button"
+              className={iconBtn}
+              aria-label={t("uninstall")}
+              title={t("uninstallHint")}
+              onClick={onUninstall}
+            >
+              <PackageMinus className="h-3.5 w-3.5" />
+            </button>
+          )}
           {server && a.canChange && (
-            <button type="button" className={btn} onClick={onShare}>
-              <Share2 className="h-3 w-3" />
+            <button
+              type="button"
+              className="rounded-full px-2 py-1 text-[11px] font-medium text-fg-secondary hover:bg-surface-3 hover:text-fg-primary"
+              onClick={onShare}
+            >
               {t(hubOnly ? "hubRemove" : a.shared ? "unshare" : "share")}
             </button>
           )}
           {a.canChange && (
             <>
-              <button type="button" className={btn} aria-label={t("rename")} onClick={onRename}>
-                <Pencil className="h-3 w-3" />
+              <button
+                type="button"
+                className={iconBtn}
+                aria-label={t("rename")}
+                title={t("rename")}
+                onClick={onRename}
+              >
+                <Pencil className="h-3.5 w-3.5" />
               </button>
               {!hubOnly && (
-                <button type="button" className={btn} aria-label={t("delete")} onClick={onDelete}>
-                  <Trash2 className="h-3 w-3" />
+                <button
+                  type="button"
+                  className={iconBtn}
+                  aria-label={t("delete")}
+                  title={t("delete")}
+                  onClick={onDelete}
+                >
+                  <Trash2 className="h-3.5 w-3.5" />
                 </button>
               )}
             </>
           )}
+          <button
+            type="button"
+            className={iconBtn}
+            aria-label={t("more")}
+            aria-haspopup="menu"
+            onClick={(e) => menu.open(e, null)}
+          >
+            <MoreHorizontal className="h-3.5 w-3.5" />
+          </button>
         </span>
       </div>
       {menu.menu && (
         <ContextMenu x={menu.menu.x} y={menu.menu.y} onClose={menu.close} testId="artifact-menu">
+          <MenuItem onSelect={pick(onOpen)}>{t("details")}</MenuItem>
           {a.kind === "page" && a.url && (
             <>
               <MenuItem onSelect={pick(() => window.open(a.url!, "_blank", "noopener,noreferrer"))}>
@@ -547,7 +937,7 @@ function ArtifactCard({
           {canPreview && (
             <MenuItem onSelect={pick(() => onPreview(previewPath))}>{t("preview")}</MenuItem>
           )}
-          {a.kind === "file" && a.files.length > 0 && (
+          {canDownload && (
             <MenuItem
               onSelect={pick(() => {
                 window.location.href = api.artifacts.rawUrl(a.id, a.files[0]?.path, true);
@@ -556,7 +946,7 @@ function ArtifactCard({
               {t("download")}
             </MenuItem>
           )}
-          {(a.kind === "skill" || a.kind === "plugin") && !a.installed && (
+          {installable && !a.installed && (
             <MenuItem disabled={!canInstall} onSelect={pick(onInstall)}>
               {t("install")}
             </MenuItem>
@@ -566,6 +956,11 @@ function ArtifactCard({
               {t("reinstall")}
             </MenuItem>
           )}
+          {a.installed && (
+            <MenuItem danger onSelect={pick(onUninstall)}>
+              {t("uninstall")}
+            </MenuItem>
+          )}
           {a.canChange && (
             <>
               <MenuSeparator />
@@ -588,6 +983,229 @@ function ArtifactCard({
   );
 }
 
+/** An artifact's own page, App Store style: icon and Get button up top, a
+ *  strip of facts, what it is, how it installs, and what it carries. */
+function DetailDialog({
+  item: a,
+  server,
+  canInstall,
+  onClose,
+  onShare,
+  onRename,
+  onDelete,
+  onInstall,
+  onReinstall,
+  onUninstall,
+  onPreview,
+}: CardActions & {
+  item: Artifact;
+  server: boolean;
+  canInstall: boolean;
+  onClose: () => void;
+}) {
+  const { t } = useTranslation("artifacts");
+  const { canPreview, canDownload, hubOnly } = capabilities(a);
+  const secondary =
+    "inline-flex items-center gap-1.5 rounded-full border border-border px-3 py-1 text-xs font-medium text-fg-secondary hover:bg-surface-3 hover:text-fg-primary disabled:opacity-50";
+  const stats: { label: string; value: React.ReactNode }[] = [
+    { label: t("stat.kind"), value: t(`kindOne.${a.kind}`) },
+    ...(a.kind === "skill" || a.kind === "plugin"
+      ? [{ label: t("stat.installs"), value: a.installs > 0 ? <InstallsButton item={a} /> : "0" }]
+      : []),
+    ...(a.files.length ? [{ label: t("stat.files"), value: String(a.files.length) }] : []),
+    ...(a.size ? [{ label: t("stat.size"), value: fmtBytes(a.size) }] : []),
+    { label: t("stat.updated"), value: fmtDate(a.updatedAt) },
+  ];
+  return (
+    <Modal title={a.title} onClose={onClose} size="md">
+      <div className="space-y-5" data-testid="artifact-detail">
+        <div className="flex items-start gap-4">
+          <AppIcon kind={a.kind} size="lg" />
+          <div className="min-w-0 flex-1">
+            <p className="text-xl font-bold leading-tight text-fg-primary">{a.title}</p>
+            <p className="mt-0.5 truncate text-sm text-fg-muted">
+              {server && a.owner && !a.mine ? t("by", { name: a.owner }) : t(`kindOne.${a.kind}`)}
+              {a.source ? ` · ${a.source}` : ""}
+            </p>
+            {a.shared && (
+              <span className="mt-1.5 inline-flex items-center gap-1 rounded-full bg-accent-muted px-2 py-0.5 text-[10px] font-medium text-accent">
+                <Share2 className="h-2.5 w-2.5" />
+                {t(hubOnly ? "hubOnly" : "shared")}
+              </span>
+            )}
+            <div className="mt-3 flex flex-wrap items-center gap-2">
+              <PrimaryAction
+                item={a}
+                canInstall={canInstall}
+                onInstall={onInstall}
+                onPreview={onPreview}
+              />
+              {a.installed && a.kind === "skill" && (
+                <button
+                  type="button"
+                  className={secondary}
+                  disabled={!canInstall}
+                  onClick={onReinstall}
+                >
+                  <RotateCcw className="h-3 w-3" />
+                  {t("reinstall")}
+                </button>
+              )}
+              {a.installed && (
+                <button
+                  type="button"
+                  className={secondary}
+                  title={t("uninstallHint")}
+                  onClick={onUninstall}
+                >
+                  <PackageMinus className="h-3 w-3" />
+                  {t("uninstall")}
+                </button>
+              )}
+              {canPreview && a.kind !== "file" && (
+                <button
+                  type="button"
+                  className={secondary}
+                  onClick={() => onPreview(capabilities(a).previewPath)}
+                >
+                  <Eye className="h-3 w-3" />
+                  {t("preview")}
+                </button>
+              )}
+              {canDownload && canPreview && (
+                <a href={api.artifacts.rawUrl(a.id, a.files[0]?.path, true)} className={secondary}>
+                  <Download className="h-3 w-3" />
+                  {t("download")}
+                </a>
+              )}
+              {a.kind === "page" && a.url && (
+                <button type="button" className={secondary} onClick={() => void copyText(a.url!)}>
+                  <Copy className="h-3 w-3" />
+                  {t("copyLink")}
+                </button>
+              )}
+            </div>
+          </div>
+        </div>
+
+        <dl className="grid grid-cols-2 divide-border-light rounded-2xl border border-border bg-surface-2/50 sm:flex sm:divide-x">
+          {stats.map((s) => (
+            <div key={s.label} className="flex-1 px-3 py-2.5 text-center">
+              <dt className="text-[10px] font-medium uppercase tracking-wide text-fg-muted">
+                {s.label}
+              </dt>
+              <dd className="mt-0.5 text-sm font-semibold text-fg-primary">{s.value}</dd>
+            </div>
+          ))}
+        </dl>
+
+        <section>
+          <h3 className="mb-1 text-sm font-semibold text-fg-primary">
+            {t(a.kind === "skill" ? "preview.whenUsed" : "about")}
+          </h3>
+          <p className="whitespace-pre-wrap text-sm leading-relaxed text-fg-secondary">
+            {a.description || <span className="text-fg-muted">{t("preview.noDescription")}</span>}
+          </p>
+        </section>
+
+        {a.kind === "skill" && a.source && (
+          <section className="rounded-2xl border border-border p-3">
+            <p className="flex items-center gap-2 text-xs text-fg-secondary">
+              {t("detail.runAs")}
+              <code className="rounded-md bg-surface-3 px-1.5 py-0.5 font-mono text-xs text-fg-primary">
+                /{a.source}
+              </code>
+            </p>
+            <p className="mt-1 font-mono text-[11px] text-fg-muted">
+              {t("preview.installsAs", { slug: a.source })}
+            </p>
+          </section>
+        )}
+        {a.kind === "plugin" && (
+          <section className="space-y-1 rounded-2xl border border-border p-3 text-xs">
+            <p className="text-fg-secondary">
+              {t("form.pluginKey")}: <code className="font-mono text-fg-primary">{a.source}</code>
+            </p>
+            {a.market && (
+              <p className="truncate text-fg-secondary" title={a.market}>
+                {t("detail.market")}: <code className="font-mono text-fg-primary">{a.market}</code>
+              </p>
+            )}
+          </section>
+        )}
+
+        {a.files.length > 0 && a.kind !== "page" && (
+          <section>
+            <h3 className="mb-1.5 text-sm font-semibold text-fg-primary">
+              {t("files", { count: a.files.length })}
+            </h3>
+            <ul className="max-h-48 divide-y divide-border-light overflow-auto rounded-2xl border border-border">
+              {a.files.map((f) => (
+                <li key={f.path} className="flex items-center gap-2 px-3 py-1.5 text-xs">
+                  <FileText className="h-3.5 w-3.5 shrink-0 text-fg-muted" />
+                  <span
+                    className="min-w-0 flex-1 truncate font-mono text-fg-secondary"
+                    title={f.path}
+                  >
+                    {f.path}
+                  </span>
+                  <span className="shrink-0 text-[11px] text-fg-muted">{fmtBytes(f.size)}</span>
+                  {PREVIEWABLE.test(f.path) && (
+                    <button
+                      type="button"
+                      className={iconBtn}
+                      aria-label={`${t("preview")} ${f.path}`}
+                      onClick={() => onPreview(f.path)}
+                    >
+                      <Eye className="h-3.5 w-3.5" />
+                    </button>
+                  )}
+                  <a
+                    href={api.artifacts.rawUrl(a.id, f.path, true)}
+                    className={iconBtn}
+                    aria-label={`${t("download")} ${f.path}`}
+                  >
+                    <Download className="h-3.5 w-3.5" />
+                  </a>
+                </li>
+              ))}
+            </ul>
+          </section>
+        )}
+
+        <p className="text-[11px] text-fg-muted">
+          {t("detail.added", { date: new Date(a.createdAt).toLocaleString() })}
+        </p>
+
+        {a.canChange && (
+          <div className="flex flex-wrap items-center gap-2 border-t border-border-light pt-4">
+            {server && (
+              <button type="button" className={secondary} onClick={onShare}>
+                <Share2 className="h-3 w-3" />
+                {t(hubOnly ? "hubRemove" : a.shared ? "unshare" : "share")}
+              </button>
+            )}
+            <button type="button" className={secondary} onClick={onRename}>
+              <Pencil className="h-3 w-3" />
+              {t("rename")}
+            </button>
+            {!hubOnly && (
+              <button
+                type="button"
+                className={`${secondary} ml-auto hover:!text-status-danger`}
+                onClick={onDelete}
+              >
+                <Trash2 className="h-3 w-3" />
+                {t("delete")}
+              </button>
+            )}
+          </div>
+        )}
+      </div>
+    </Modal>
+  );
+}
+
 /** "N installs" on a card; a click lists who installed it, when, and where. */
 function InstallsButton({ item }: { item: Artifact }) {
   const { t } = useTranslation("artifacts");
@@ -698,12 +1316,15 @@ function Modal({
   onClose,
   children,
   wide = false,
+  size,
   flush = false,
 }: {
   title: string;
   onClose: () => void;
   children: React.ReactNode;
   wide?: boolean;
+  /** A detail sheet: wider than a form, narrower than a preview. */
+  size?: "md";
   /** The body draws its own padding (a preview fills the panel edge to edge). */
   flush?: boolean;
 }) {
@@ -722,7 +1343,7 @@ function Modal({
         aria-modal="true"
         aria-label={title}
         onClick={(e) => e.stopPropagation()}
-        className={`flex max-h-[90vh] w-full ${wide ? "max-w-6xl" : "max-w-lg"} flex-col overflow-hidden rounded-xl border border-border bg-surface-1 shadow-2xl shadow-black/50`}
+        className={`flex max-h-[90vh] w-full ${wide ? "max-w-6xl" : size === "md" ? "max-w-2xl" : "max-w-lg"} flex-col overflow-hidden rounded-2xl border border-border bg-surface-1 shadow-2xl shadow-black/50`}
       >
         <div className="flex shrink-0 items-center justify-between gap-2 border-b border-border px-4 py-3">
           <h2 className="truncate text-sm font-semibold text-fg-primary">{title}</h2>
diff --git a/client/src/pages/__tests__/Artifacts.test.tsx b/client/src/pages/__tests__/Artifacts.test.tsx
index 8469f346..aff2a1f2 100644
--- a/client/src/pages/__tests__/Artifacts.test.tsx
+++ b/client/src/pages/__tests__/Artifacts.test.tsx
@@ -10,8 +10,9 @@
  * server cannot read opens the by-hand form), a skill is uploaded from one
  * Markdown file under the name the user types, or written in the dialog.
  * A card's right-click menu runs the same actions (Preview, Delete). A file
- * the sandbox cannot show (Office, zip, PDF) offers Download only, and the
- * Add menu closes on Escape or a click outside it.
+ * the sandbox cannot show (Office, zip, PDF) offers Download only, the
+ * Add menu closes on Escape or a click outside it, the front page is shelved
+ * by kind until a category is picked, and a card opens its detail sheet.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
 import { describe, it, expect, vi, beforeEach } from "vitest";
@@ -32,6 +33,7 @@ vi.mock("../../lib/api", () => ({
       update: vi.fn(),
       remove: vi.fn(),
       install: vi.fn(),
+      uninstall: vi.fn(),
       installs: vi.fn(),
       setInstallsEnabled: vi.fn(),
       skills: vi.fn(),
@@ -294,6 +296,30 @@ describe("Artifacts", () => {
     await waitFor(() => expect(api.artifacts.install).toHaveBeenLastCalledWith(2, true));
   });
 
+  it("uninstalls an installed plugin only after a confirmation", async () => {
+    vi.mocked(api.artifacts.list).mockResolvedValue({
+      items: [
+        item({ id: 4, kind: "plugin", title: "tool", source: "tool@market", installed: true }),
+      ],
+    });
+    vi.mocked(api.artifacts.uninstall).mockReset();
+    open();
+    const card = await screen.findByTestId("artifact-4");
+    const user = userEvent.setup();
+    vi.mocked(confirmDialog).mockResolvedValueOnce(false);
+    await user.click(within(card).getByRole("button", { name: "Uninstall" }));
+    await waitFor(() => expect(confirmDialog).toHaveBeenCalled());
+    expect(api.artifacts.uninstall).not.toHaveBeenCalled();
+
+    vi.mocked(confirmDialog).mockResolvedValueOnce(true);
+    vi.mocked(api.artifacts.uninstall).mockResolvedValueOnce({
+      uninstalled: "tool@market",
+      paths: [],
+    });
+    await user.click(within(card).getByRole("button", { name: "Uninstall" }));
+    await waitFor(() => expect(api.artifacts.uninstall).toHaveBeenCalledWith(4));
+  });
+
   it("installs a skill only after a confirmation, and asks before replacing", async () => {
     const user = userEvent.setup();
     open();
@@ -315,8 +341,8 @@ describe("Artifacts", () => {
   it("previews a file in a sandboxed iframe that may run nothing", async () => {
     const user = userEvent.setup();
     open();
-    await screen.findByText("report.html");
-    await user.click(screen.getAllByRole("button", { name: "Preview" })[0]!);
+    const card = await screen.findByTestId("artifact-1");
+    await user.click(within(card).getByRole("button", { name: "Preview" }));
     const frame = await screen.findByTestId("artifact-preview");
     expect(frame.getAttribute("sandbox")).toBe("");
     expect(frame.getAttribute("src")).toBe("/api/artifacts/1/raw?path=report.html");
@@ -425,4 +451,22 @@ describe("Artifacts", () => {
     await user.click(screen.getByText("report.html"));
     expect(screen.queryByRole("button", { name: "Skill" })).toBeNull();
   });
+
+  it("shelves the front page by kind, and a card opens its detail sheet", async () => {
+    const user = userEvent.setup();
+    open();
+    await screen.findByText("deploy");
+    const shelves = screen.getAllByRole("heading", { level: 2 }).map((h) => h.textContent);
+    expect(shelves).toEqual(["Skills1", "Files1"]);
+    await user.click(screen.getAllByRole("button", { name: "See all" })[0]!);
+    await waitFor(() =>
+      expect(api.artifacts.list).toHaveBeenLastCalledWith(
+        expect.objectContaining({ kind: "skill" })
+      )
+    );
+    await user.click(screen.getByText("deploy"));
+    const sheet = await screen.findByTestId("artifact-detail");
+    expect(within(sheet).getByText("/deploy")).toBeInTheDocument();
+    expect(within(sheet).getByRole("button", { name: "Install" })).toBeInTheDocument();
+  });
 });
diff --git a/docs/API.md b/docs/API.md
index cf25c28d..dd512b4d 100644
--- a/docs/API.md
+++ b/docs/API.md
@@ -3050,6 +3050,7 @@ PATCH  /api/artifacts/:id                      {title?, description?, shared?, s
 DELETE /api/artifacts/:id                      {ok, kept} — kept: a shared row of yours left your library but stays in the Hub
 GET    /api/artifacts/:id/raw?path=&download=1 one snapshot file (sandbox CSP, nosniff)
 POST   /api/artifacts/:id/install              {replace?} → {installed, replaced?}
+POST   /api/artifacts/:id/uninstall            → {uninstalled, paths}
 GET    /api/artifacts/:id/installs             {items: [{user, mine, at, replaced, paths?}], unrecorded}
 ```
 
@@ -3063,7 +3064,8 @@ What agents produced, per OWNER (`server/lib/artifacts.js`, plan: `docs/plans/ar
 - **plugin** — only the spec and its marketplace source (`EBADPLUGIN`, `EBADMARKET`: `owner/repo`, a `validateRemoteUrl` URL, or an https link to a `marketplace.json`); no files. A GitHub web link becomes `owner/repo`, and a forge's `…/src/…`, `…/tree/…`, `…/blob/…` suffix or trailing slash is trimmed. The same `key` added again by its owner updates that row. **inspect** reads the marketplace's `.claude-plugin/marketplace.json` to list its plugins: a git link is cloned shallow, blob-less and without checkout into a temp dir that is removed after, with every credential helper switched off and no prompt (a repository that needs a login is `502 ENEEDLOGIN`; type the key by hand — installing then uses each user's own git login), https only (an ssh link is `400 ESSHMARKET`); a repo with only a `plugin.json` is `400 ENOTMARKET`; unreachable `502 EMARKETFETCH`. It reaches any https host a signed-in user names, like `publish` does — no login is ever sent with it.
 - **Visibility** — local mode: every row, no sharing (`400 ELOCALMODE`). Server mode: a developer sees their own rows and shared ones, admin/analyst every row; only the owner or an admin changes or deletes one (`403 EFORBIDDEN`). `shared` puts a row in every user's **Hub**. The page shows one list (`scope=all`: own rows plus shared ones) with an **All · My library · Hub** filter. Deleting a SHARED row of your own only takes it out of your library (`in_library = 0`, `inLibrary: false`, `{kept: true}`; it leaves `scope=mine` and shows as **Hub only**); unsharing such a row then deletes it (`PATCH` answers `{item, removed: true}`). Deleting an unshared row, or an admin deleting someone else's, deletes it outright.
 - **raw** — only a file the snapshot recorded (`404 ENOFILE` otherwise), never a request path; served with `Content-Security-Policy: …; sandbox` and `nosniff`, unknown types as an attachment.
-- **install** — a skill or plugin (`EBADKIND`), into the CALLER's own account: a skill is written to `~/.claude/skills/<name>/` AND `~/.agents/skills/<name>/` (the folder Codex, Gemini/Antigravity, OpenCode and Cursor read) of every account the caller's sessions run as — under S3 their member home (as them through `write-as`), plus the host's home for an admin, whose host-folder workspaces run as the host. The answer is `{installed, paths, replaced}` (`installed` = the paths joined). A name taken in any of them is `409 EEXISTS` unless `replace: true`, which moves each old one to `~/.claude/agenthub-replaced-skills/<name>[-agents]-<time>/`. A plugin runs `claude plugin marketplace add <market>` then `claude plugin install --scope user <key>` as the caller, never with `-y`. `403 EINSTALLSOFF` while an admin has turned installs off. A list row's `installed` is true when that skill (`~/.claude/skills/<name>`) or plugin (a key of `~/.claude/plugins/installed_plugins.json`) is already in EVERY one of those accounts — the page then shows **Installed** instead of Install; it is a pure read, and an account that cannot be resolved or read counts as not installed. Every install is also a row of `artifact_installs` (who, when, the folders written, whether it replaced); `GET …/installs` lists them newest first — the owner, staff and local mode see every install, anyone else only their own, and `paths` goes only to the installer and an admin (a plugin has none: it is `claude plugin install --scope user`). `unrecorded` is what `installs` counted before that table existed. The card's "N installs" opens this list. Share, unshare, a shared row's delete and every install by someone else are written to `audit_log`.
+- **install** — a skill or plugin (`EBADKIND`), into the CALLER's own account: a skill is written to `~/.claude/skills/<name>/` AND `~/.agents/skills/<name>/` (the folder Codex, Gemini/Antigravity, OpenCode and Cursor read) of every account the caller's sessions run as — under S3 their member home (as them through `write-as`), plus the host's home for an admin, whose host-folder workspaces run as the host. The answer is `{installed, paths, replaced}` (`installed` = the paths joined). A name taken in any of them is `409 EEXISTS` unless `replace: true`, which moves each old one to `~/.claude/agenthub-replaced-skills/<name>[-agents]-<time>/`. A plugin runs `claude plugin marketplace add <market>` then `claude plugin install --scope user <key>` as the caller, never with `-y`. `403 EINSTALLSOFF` while an admin has turned installs off. A list row's `installed` is true when that skill (`~/.claude/skills/<name>`) or plugin (a key of `~/.claude/plugins/installed_plugins.json`) is already in EVERY one of those accounts — the page then shows **Installed** instead of Install; it is a pure read, and an account that cannot be resolved or read counts as not installed. Every install is also a row of `artifact_installs` (who, when, the folders written, whether it replaced); `GET …/installs` lists them newest first — the owner, staff and local mode see every install, anyone else only their own, and `paths` goes only to the installer and an admin (a plugin has none: it is `claude plugin install --scope user`). `unrecorded` is what `installs` counted before that table existed. The card's "N installs" opens this list. Share, unshare, a shared row's delete and every install or uninstall by someone else are written to `audit_log`.
+- **uninstall** — takes an installed skill or plugin out of the same accounts again (`EBADKIND` otherwise; allowed while installs are off). A skill's folders that exist (both skills folders of each account) are MOVED to `~/.claude/agenthub-replaced-skills/<name>[-agents]-uninstalled-<time>/`, never deleted; a plugin runs `claude plugin uninstall --scope user --keep-data <key>` as the caller (its data dir stays). Nothing of it there is `409 ENOTINSTALLED`. The answer is `{uninstalled, paths}` (`paths` = the skill folders moved; empty for a plugin). The `installs` count and `artifact_installs` history are left as they were. The page shows **Uninstall** (card icon, ⋯ menu, detail sheet) beside **Installed**.
 - Every write is same-origin. The `artifact_changed` broadcast (`{id, ownerId, shared}`) reaches everyone for a shared row, else its owner and staff.
 
 ### Query Explorer
diff --git a/docs/LANES.md b/docs/LANES.md
index 6d62e2c7..5f1f0b64 100644
--- a/docs/LANES.md
+++ b/docs/LANES.md
@@ -395,7 +395,7 @@ The dashboard web UI merges workspaces and runs into a single **Workspace** page
 - **A workspace's sessions** — the chevron expands the row to the sessions the workspace OWNS and has not archived (`WorkspaceSessionList.tsx`: `GET /api/sessions?lane=<id>&archived=0&pinned_first=1`, the newest 20 — pinned sessions on top in pin order, then the ones with a live pane, then the ended ones — re-read when the workspace's status or session moves; which rows are expanded is kept in `agenthub.sidebar.projects` → `expanded`). A live AI tab whose session has no row yet — a tab opened bare from `+`, before its first prompt — is listed at the top as **New session** straight from the run (its session id is known from the start), so a new tab shows in its workspace at once; the row becomes the real session when its first hook lands. The sidebar's live panes follow the Workspace page's own run-list poll (`LIVE_RUNS_EVENT`), since a session in slots 1–9 moves no workspace column. A workspace owns a session its pane held — `bindRunSession` stamps `sessions.lane_id` from the pane's run, first writer wins, a nested `claude -p` excluded — and lists nothing else: a `claude` typed into a terminal in the same folder, or history from before the workspace existed, belongs to no workspace and is found on the Sessions page. Sessions older than this ownership column are not guessed: only those `dashboard_runs` still named were backfilled. A session started by a tool with no hooks (Codex without its hooks, any catalog tool) is never stamped. A row's dot is the session's state (`sessionDot`: amber waiting for you, red failed, green a live pane, hollow at rest); double-click renames it (`PATCH {name}`), its hover buttons **pin** it to the top of the list (`PATCH {pinned: true}` — `sessions.pinned_at`, order only; a pinned row shows a pin icon, and the same button, or **Pin**/**Unpin** in the row's right-click menu, takes it back) and **archive** it (`PATCH {archived: true}` — hidden from the workspace, nothing deleted; the home lists the archived ones folded with **Unarchive**). A filled dot marks a session that still has a live pane (a `GET /api/run` handle carrying its session id — every pane the dashboard starts carries `AGENTHUB_RUN_ID=<its tmux name>`, the hook handler forwards it as `run_id`, and `bindRunSession` in `server/routes/hooks.js` records the hook's session on that run: the first session always, afterwards — for a Claude pane — only a `SessionStart` that is not a fresh `startup` (`/clear`, `/resume`), so a `claude -p` the agent runs inside the pane never takes it over; the rule is Claude-only, and a Codex or Antigravity pane follows every new session): clicking it opens `/workspace?lane=<id>&run=<runId>`, which ATTACHES to that tmux session (`attachRequest` on `LaneConsolePane`) — it starts nothing and resumes nothing. The session opens on its own tab (the tab of its tmux slot): in the pane already showing it (focused), else in the focused pane; **Ctrl/Cmd+click** opens it in a split in the tab on screen (see **Split panes** below). Any other session opens in its workspace the way Claude Desktop opens an old one: `/workspace?lane=<id>&session=<id>` shows its conversation, read-only (`SessionReplay.tsx`, the console hidden — never unmounted — behind it), with a prompt box under it. Opening it resumes nothing; **sending** a message resumes it (`POST /api/lanes/:id/start {slot, resumeSessionId, prompt}` in the first free pane slot, on the tool the session ran on) and opens that pane — a resume re-reads the whole transcript into context, so it waits for that explicit send. The session's analysis page (`/sessions/<id>`: agents, events, cost, transcript) is the **Analyst** button in the session view's right panel, beside Files and Changes (disabled while the pane's run has reported no session yet).
 - **Row menu** — right-click a row, or its `⋯` button: Rename, the Model (AI Proxy) select, New workspace here…, Copy path, Reset worktree… (managed only) and Delete workspace…, each the call the rest of the UI already makes. Delete is record-only exactly as before (see "Removing a workspace").
 - **Stop archives, Sleep keeps** — every UI path that ends a live pane goes through `endRuns` (`client/src/lib/stopSession.ts`). **Stop** — a tab's **×**, a pane header's **×**, **Close tab** in a right-click menu — kills the pane AND archives the session it held (`DELETE /api/run/:id?archive=1`, which sets `sessions.archived_at` server-side and broadcasts `session_updated`), so a session the user closed leaves the workspace's list (the home's archived fold brings it back with **Unarchive**). It only hides: a session worktree is NOT removed here, unlike the row's own Archive button. **Sleep** — the moon left of each × (AI panes only), and **Sleep** in the tab, pane and session right-click menus — kills the pane but keeps the session listed, so it can be opened and resumed later by sending it a message. Both ask first for an AI pane (it may be mid-turn); a shell closes at once. A pane that dies on its own (exit, crash, reboot) is not archived, and the CLI's `DELETE` without `archive` keeps its old behaviour.
-- **Right-click menus** — every item that has actions opens them on a right-click too, in one shell (`client/src/components/ContextMenu.tsx`: placed at the pointer, kept inside the viewport, closed by Escape, a click outside or an item). The buttons stay; the menu repeats what they do and nothing more. A session row — in the sidebar, the home's Recents and the archived fold (`lanes/SessionMenu.tsx`) — offers Open, Open in split (live), Rename and Archive (sidebar), Unarchive (archived), Session details, Copy session ID, Sleep and Close tab (live); the sidebar's **New session** row Open, Open in split, Sleep and Close tab. A console tab offers Open, Open in split, Session details, Copy session ID, Sleep and Close tab; a pane header (split view) Show <session> here, Split right/down with a new terminal, Close pane, Sleep and Stop session. Sleep is offered only for an AI pane (a shell holds no session). In the Changes panel a changed file (overview row or review header) offers Open, Stage/Unstage, Discard — two clicks, as on its trash button — or the conflict's Keep mine / Take theirs / Mark resolved, and Copy relative path; a Files tree entry Open and Copy relative path; a History commit View commit, Copy commit SHA and Copy commit message. The home's title opens the row menu, and a Context file or extra folder offers Copy path and Remove. Outside the workspace the same shell serves the Sessions table, the Dashboard's agent cards and recent events, the Activity feed and Workflow runs (`components/SessionRowMenu.tsx`: Open session details, Open in its workspace when it has one, Copy session ID, Copy folder path), an attached prompt image (View / Remove), the managed workspace card (Reset), every Settings list (Git credentials, AI Proxy, Pricing, alert rules, webhooks, remote sources, AI tools) and every Claude Code / Codex config list (skills, agents, commands, output styles and memory files via `FileItemMenu` in `components/config/MdItemList.tsx`; plugins, MCP servers, marketplaces, auth profiles), an Artifacts card (its buttons' actions, plus Copy link for a page) and a Users row (Edit and Open home in Files for an admin, Copy username / email). In the File Explorer (`FileExplorer.tsx`), besides an item and the empty area: a sidebar workspace (Open, Copy path) or home (Open, Open Trash), a path-bar crumb (Open, Download as zip, Paste into this folder, Copy path), a Trash row (Restore, Copy path, Delete forever), the Trash's empty area (Refresh, Empty Trash) and an admin's per-user Trash folder (Open, Empty Trash — asked first, off for an empty one). A delete or remove there takes the button's own confirm — a modal, or two clicks. Text areas (the terminal, a conversation, a diff) keep the browser's own menu. The shell stops the menu's clicks from reaching the card it was opened from.
+- **Right-click menus** — every item that has actions opens them on a right-click too, in one shell (`client/src/components/ContextMenu.tsx`: placed at the pointer, kept inside the viewport, closed by Escape, a click outside or an item). The buttons stay; the menu repeats what they do and nothing more. A session row — in the sidebar, the home's Recents and the archived fold (`lanes/SessionMenu.tsx`) — offers Open, Open in split (live), Rename and Archive (sidebar), Unarchive (archived), Session details, Copy session ID, Sleep and Close tab (live); the sidebar's **New session** row Open, Open in split, Sleep and Close tab. A console tab offers Open, Open in split, Session details, Copy session ID, Sleep and Close tab; a pane header (split view) Show <session> here, Split right/down with a new terminal, Close pane, Sleep and Stop session. Sleep is offered only for an AI pane (a shell holds no session). In the Changes panel a changed file (overview row or review header) offers Open, Stage/Unstage, Discard — two clicks, as on its trash button — or the conflict's Keep mine / Take theirs / Mark resolved, and Copy relative path; a Files tree entry Open and Copy relative path; a History commit View commit, Copy commit SHA and Copy commit message. The home's title opens the row menu, and a Context file or extra folder offers Copy path and Remove. Outside the workspace the same shell serves the Sessions table, the Dashboard's agent cards and recent events, the Activity feed and Workflow runs (`components/SessionRowMenu.tsx`: Open session details, Open in its workspace when it has one, Copy session ID, Copy folder path), an attached prompt image (View / Remove), the managed workspace card (Reset), every Settings list (Git credentials, AI Proxy, Pricing, alert rules, webhooks, remote sources, AI tools) and every Claude Code / Codex config list (skills, agents, commands, output styles and memory files via `FileItemMenu` in `components/config/MdItemList.tsx`; plugins, MCP servers, marketplaces, auth profiles), an Artifacts card (Details, its buttons' actions, plus Copy link for a page — also on its `⋯` button) and a Users row (Edit and Open home in Files for an admin, Copy username / email). In the File Explorer (`FileExplorer.tsx`), besides an item and the empty area: a sidebar workspace (Open, Copy path) or home (Open, Open Trash), a path-bar crumb (Open, Download as zip, Paste into this folder, Copy path), a Trash row (Restore, Copy path, Delete forever), the Trash's empty area (Refresh, Empty Trash) and an admin's per-user Trash folder (Open, Empty Trash — asked first, off for an empty one). A delete or remove there takes the button's own confirm — a modal, or two clicks. Text areas (the terminal, a conversation, a diff) keep the browser's own menu. The shell stops the menu's clicks from reaching the card it was opened from.
 - **Chat view of a live pane** — each SESSION of a Claude, Codex, omp, Cursor or Antigravity pane (`CHAT_TOOLS` in `client/src/lib/chatUi.ts`; the last three learn their session id from their pollers' `claimToolSessions`, and the transcript route reads omp's journal, Cursor's agent transcript and agy's `transcript_full.jsonl` step log) shows either a chat or its terminal, its own choice: the chat/terminal button left of the pane's split buttons (`ChatToggle` in `client/src/components/run/PaneGrid.tsx`) switches it, and the choice is kept in this browser's localStorage by session id (`agenthub.chatUi.sessions`, the newest 200; `useSessionChat` in `client/src/lib/chatUi.ts`). **Settings → Appearance → Chat UI** (`ChatUiSettings.tsx`, saved per ACCOUNT on the server: `GET/PUT /api/me/prefs`, key `agenthub.chatUi`) is only the default — written onto a session the first time it is shown, so changing it later leaves every session already seen as it is. The chat needs the session id, so a pane shows it only once its session is known (`client/src/components/run/LaneConsolePane.tsx`). Chat (`client/src/components/run/PaneChat.tsx`) shows the session's conversation the way Claude Desktop does — the shared `ConversationView` in its `fill` layout: one centred column, your messages as bubbles, the reply as plain prose, every run of tool calls folded into one line named by what it did, in Claude Desktop's fixed order ("Ran 3 commands, edited a file, used a tool ›", `workLabel`) — a thinking block that carries text is the model's narration (Claude Code ≥ 2.1.280 stores real thinking empty) and reads as prose between those lines, as Claude Desktop shows it — that opens onto a framed list of its steps — each titled by its own description, the call in a capped scroll box, its output one click further — an Agent/Task step shows instead one muted line — its status as an icon, then type · model · time · tokens · tool calls — and its report as prose, with **View conversation ›**, which puts that subagent's own conversation in the report's place as a thread hung under the step by a line on the left (a nested `ConversationView` in its `compact` layout: its task as the prompt bubble, every step, its reply; as tall as it is up to 24rem, then it scrolls) (`client/src/components/conversation/AgentDetails.tsx`; the agent is found by the result's `agent` facts, the `agentId:` it names or the `tool_use_id` of `GET /api/sessions/:id/transcripts`, and a background one is closed by its `<task-notification>`), as does a click on a line of the background-agents card, under that line — and a round ↓ back to the end — above a prompt box that grows with its text up to 40% of the screen, then scrolls. The conversation stays at its end while you are there: a new line, the running step, an image loading or the pane shown again after being hidden keeps the newest in sight (a `ResizeObserver` in `ConversationView`), until you scroll up; sending a message takes it back to the end. It lies OVER the terminal, which stays mounted and attached (the console never unmounts a terminal); a message is sent through that terminal as a bracketed paste and Enter (`submitToRun` in `client/src/lib/panePaste.ts`), exactly as if typed, so no new route or server write exists for it. On a Windows dashboard (psmux) the attach (`server/lib/pty-attach.js`) holds any input that follows a paste until 700 ms after it (`PASTE_HOLD_MS`): psmux delays a paste ~350 ms and wrote an Enter sent meanwhile INSIDE it (psmux#766), so the prompt sat in Claude's composer as `[Pasted text #1]` instead of being sent. While the session's main agent is `working` (its `UserPromptSubmit` hook seen, no `Stop` yet — `GET /api/agents?session_id=&status=working`, re-read on `agent_updated`) — or while the terminal itself shows the turn at work (its own busy line, `BUSY_LINE`/`readRunBusy` in `client/src/lib/panePaste.ts`: Claude's and Codex's `esc to interrupt`, agy's `Thinking… (… esc to cancel)`; for omp and Cursor, whose line is unknown, output drawn in the last 2 s), read every 700 ms while the pane is on screen, so a tool that sends no hooks gets it too —, an empty box shows **Stop** in Send's place, like Claude Desktop: it presses Esc in the pane (`interruptRun` in the same file), the key `claude` and `codex` stop a turn with; typing a message brings Send back (Claude Code queues it). Stop also ends the conversation's live line (`stopped` on `ConversationView`/`MessageList`) until the transcript gains a newer line: an Esc before the model wrote anything puts the prompt back in Claude Code's input box and writes no `[Request interrupted by user]` line, so the transcript still ends on the prompt and would read as **Thinking…** for 15 minutes (issue #74). An Esc pressed in the terminal itself is not seen by the chat. An image attached in the box reaches the transcript as its saved path — in a Claude pane as an `@` mention (`claudeMention` in `client/src/lib/promptAttach.ts`, which Claude reads at submit, an image as an image; a trailing space keeps its `@` suggester from taking the Enter), as is a file dropped or pasted on a Claude terminal and every file a new or resumed Claude session is started with: a bare pasted path became `[Image #n]` only when the TUI caught the paste in time, and stayed a plain `C:\…\drops\…png` on a Windows dashboard (psmux), while a path in the command-line prompt is never an image; the user's turn shows the image itself (`GET /api/run/drop/:name`) — any other attached file as a chip (name · EXT) that opens its preview like an output — and opens it full size over the whole page (`ImageLightbox`, rendered into `document.body`, so nothing stacked over a pane covers it). The box carries Claude Desktop's controls: a `+` menu (`ChatAddMenu.tsx`, also in the workspace home's prompt box) — Upload or add files; what already exists, attached like an upload (a chip, its path sent with the prompt): **Project files** (a search of the box's folder, folders too — `GET /api/run/files?dirs=1` — sent as `@path`), **Context files** (the workspace's own, `GET /api/lanes/:id/sources`, sent as `@<stored path>`) and **Recent uploads** (files uploaded through a prompt box in the last day, kept in this browser's localStorage `agenthub.prompt.recentUploads` — the server prunes an upload after a day); a file or folder dragged onto anywhere in a prompt box (not only its text area) attaches the same way — from the Changes panel's Files tree, its search, a Changes-list row, or a workspace's Context files and Folder list; a row from an extra folder's section (`data-drag-root`) and a context file or folder carry their absolute path, since they lie outside the pane's folder (`client/src/lib/promptAttach.ts`); Skills (yours and the project's), Plugins → a plugin → the skills and commands it ships, each put at the front of the message as `/<name>` / `/<plugin>:<name>`, and Manage links to the Claude config page — and, for a Claude pane, the Model/Effort chip, a change typed into the pane as `/model <id>` / `/effort <level>`, and the permission mode beside `+` in the box; a Codex pane has **Permission mode** and **Model** buttons that type `/permissions` and `/model` — Codex's own numbered pickers (the model, then its reasoning level), answered on the menu card below, each row's description column read as its hint. A menu opened in a split pane (a `Select`, the Model chip) flips up or down by the room inside ITS pane (`data-menu-bounds` on the pane, `menuRoom` in `client/src/components/Select.tsx`), never the window's — a menu running past the pane's edge is painted over by the pane below. A running session changes mode only by Shift+Tab, so the server steps it and reads each step back off the pane (`POST /api/run/:id/permission-mode`, `server/lib/pane-mode.js`): it lands on exactly the mode picked, presses nothing while a menu hides the mode line, and returns to where it began when the mode is not in that session's cycle (Bypass only when the session was started with it). The mode belongs to that session only. A menu the CLI asks with — AskUserQuestion (one question or several, multiSelect too), a permission or trust prompt, Codex's approval, a first-start login menu — is answered from the chat: it is read off the terminal underneath every 700 ms while the pane is on screen (`parsePaneMenu`/`readRunMenu` in `client/src/lib/panePaste.ts`: two numbered rows or more from 1, the `❯`/`›` cursor on one of them, no `─` rule right above the first — a reply's numbered list has no cursor, a list typed into Claude's input box sits under its rule) and shown in the prompt box's place as a card of buttons (`PaneMenuCard` in `PaneChat.tsx`, with each option's description and a multiSelect box's state; the box is hidden with CSS, never unmounted, so its draft survives the question); a permission prompt — a menu with a **Yes…** and a **No…** row: Claude's tool approval, Codex's command approval, the folder-trust question — is laid out as its own card (`PermissionMenuCard`): the tool and its command (Claude draws them over a dashed `╌` rule above the question, read as the menu's `detail`), the CLI's own answers as buttons, and **Deny with a note**, which picks the "No, and tell … differently" row and then sends the note as the next message once the CLI is back at its prompt; a pick presses its digit in the pane (which picks it, or ticks its box), Claude's unnumbered **Submit** row — **Next** while more questions follow — is reached with the arrows and Enter; an AskUserQuestion that asks several questions shows its question tabs above the card, each ticked once answered, with ‹ › buttons that press ←/→ in the pane (`stepRunMenu`), **Cancel (Esc)** presses Esc, and the **Type something** row opens a field inside the card whose text, on Enter, is typed there as the answer (`answerRunMenu`: the arrows to that row, Ctrl+U over any text already in it, the text as a bracketed paste, Enter — none in a multiSelect, where Submit is still to pick). That row presses no key: a second press of its digit would type the digit into the CLI's own field. Once text is typed in that row its label is the text, so it is found as the last numbered row above **Chat about this**. Like Send, it only presses keys in the pane, so no new route exists for it. A menu with no numbers (the first-start theme picker) still needs the terminal. A live pane's chat ends, until its turn is over, with what the model is doing now and — like the terminal's status line — how long the turn has run since your prompt and the output tokens it has made so far, e.g. `Thinking… (2m 8s · ↑ 3.5K tokens)` (`workingOn` and `turnStats` in `MessageList.tsx`; Claude Code repeats a call's usage on each of its lines, so consecutive lines with the same prompt size count once), the words lit by a shimmer that sweeps a few times and rests (`.text-shimmer`, stopped under reduced motion) and the token count rolling up rather than jumping. It names every call of the turn still waiting for its result — the oldest first and **+N more** for the rest, a click listing them all, since Claude Code writes parallel calls on separate lines and their results arrive in any order — by its description (Claude Code's Bash `description`) or tool and target, with that call's own time once it has run 30 s; else **Thinking…**. A line with no new transcript line for 3 minutes turns amber (the step may be stuck). While the CLI asks you something — the main agent awaiting input on a `Notification` hook (a permission prompt; `awaiting_reason = 'notification'`, read with the Stop button's agent poll) — it reads **Waiting for your approval: <step>** in amber with an **Open terminal** button (`showTerminal` in `PaneGrid.tsx`, the chat/terminal toggle's own switch: the unsent prompt goes into the CLI's input box); the menu card above answers it from the chat. AskUserQuestion fires no `Notification`, so a menu read off the pane counts as waiting too — for this line and the hidden tab's **● Waiting**. Before the session has started — no session row yet, because Claude Code runs no hook until its folder is trusted — the chat says so instead of the empty-transcript text, with the same **Open terminal** button (`notStarted` in `ConversationView.tsx`), and Send and every control typed into the pane (`/model`, `/effort`) ask first (`confirmDialog`, **Send anyway**): an Enter there would answer the trust prompt, whose preselected choice is **No, exit** (issue #73). It asks rather than refuses because the row appears only with the session's first hook, and a hard lock would strand the chat if none came right after the answer. A turn that ended (`end_turn`) closes with **✓ Done in 2m 8s · ↑ 3.5K tokens** — no cost: pricing one turn would need a second cost formula. A subagent launched in the background returns at once (its result is "Async agent launched…"), so the turn ends while it still works: until a `<task-notification>` names its call, a live chat lists it under the conversation — its type, its description, how long it has run and, once its own transcript was read, the step it is on and its context size (↓, its newest prompt), like the terminal's footer (`backgroundAgents`/`BackgroundAgents`/`agentProgress` in `MessageList.tsx`; the tail is re-read every 4 s through the existing `GET /api/sessions/:id/transcript?agent_id=<agentId from the launch result>`, only the lines after those already read, and only while the card is on screen) — and the last turn reads **Replied in … · N agents still running** with a spinner instead of Done (issue #81). A launch older than 6 hours with no notification is taken as ended (a CLI that quit, a resumed old session). The prompt box shows how full the context is (`ContextMeter` in `PaneChat.tsx`): the newest reply's prompt size (input + cache) against the model's window — 200K for Claude's 4.5 line and older, 1M for every model since (`contextWindow`, from LiteLLM's list; none for another vendor) — amber from 75 %, red from 90 %, the numbers on hover. While the browser tab is hidden its title is marked **● Waiting** while a chat pane's session waits on you and **✓ Done** once a turn ended (`client/src/lib/tabBadge.ts`); showing the tab drops the Done mark. Thinking is shown (after your prompt, after a tool result, or after narration whose `stop_reason` is `tool_use`). The transcript route passes each assistant line's `stop_reason`; `end_turn` ends the turn, so does an interrupt, and a turn with no new line for 15 minutes and no call running is treated as dead. The chat re-reads the transcript every 3 s while the page is visible and the pane is on screen (`useOnScreen` in `client/src/hooks/useOnScreen.ts`: a pane of another workspace or tab stays mounted but `display:none`, and polls nothing until it is shown again, then catches up once), and on a `new_event` of its session at most every 1.5 s (`EVENT_FETCH_MS`), and within 300 ms of a `transcript_changed` of its session (`PUSH_FETCH_MS`: the server's projects-tree watcher saw that Claude transcript grow, `pushTranscript` in `server/index.js`, at most every 250 ms per session), and at most once a second while the terminal underneath draws (`notePaneOutput`/`onPaneOutput` in `client/src/lib/panePaste.ts`, fed by `TerminalView` — any tool, hooks or not) — so a reply appears as soon as Claude writes it, not at the next poll. The TUI draws no reply as it streams (it shows the spinner and a token count until the block is done), so the chat has no streaming text. The tail read (`?after=`) skips the lines the chat already has before parsing them. While the chat covers the terminal, the terminal is moved out of the viewport with a transform (`covered` on `TerminalView`), which stops xterm drawing without changing its size — the menu reading below still works. Each message's hover line shows ↓ the whole prompt it was answered from (input + cache read + cache write; the split on hover) and ↑ its output. An AskUserQuestion is not folded into the collapsed work line: it is its own card (`AskCard`) showing each question with the option the user picked or what they typed — the `answers` the transcript route reads off Claude Code's `toolUseResult` —, "declined" when they refused it. Each assistant turn that changed files ends, like Claude Desktop's, with an **Edited N files** card (`EditedFiles` in `client/src/components/conversation/MessageList.tsx`): one row per file with the lines it added and removed over the turn — the `diff` the transcript route reads off Claude Code's `structuredPatch` — and, in a live pane's chat, a click on a row opens that file in the workspace's Changes panel when it lies in the pane's folder, else its preview (beside the chat, or over it when the pane is narrow). It has no Undo: reverting a file is a write the dashboard does not take from a click. The conversation column and the prompt box are `max(48rem, 70%)` of the pane wide — never narrower than Claude's fixed 48rem, wider on a large screen. Every chat pane, split or not, has Claude Desktop's activity panel (`client/src/components/run/ChatOutline.tsx`, `GET /api/sessions/:id/outline`, re-read every 5 s while the tab is visible and the pane is on screen; the server keeps the last answer per session until its events change). It starts open in a pane that spans the grid's full width or height (`spanning` in `ConsoleArea`, `client/src/pages/Workspace.tsx`, from `layoutRects`) once the session has an output, and otherwise — no output yet, or a quarter-sized pane (e.g. four panes at once) — collapsed into a file button with the number of outputs at the chat's top right. The user's own open or close is kept per session for the browser tab (`sessionStorage` `agenthub.chat.panel.<sessionId>`), so switching the pane to its terminal and back keeps it; a split or a close that changes the pane's shape drops it and brings the default back. Whether it sits beside the conversation or floats over it is decided by the PANE's width, not the window's (a CSS container query on `PaneChat`'s root, 40rem): beside it, a splitter on its left edge (`Divider` from `PaneGrid.tsx`, arrow keys too) drags the panel — and a file preview in its place — between 20% and 70% of the pane, remembered per browser (`localStorage` `agenthub.chat.panelWidth`, one fraction for every pane). Open, it shows **Progress** — the session's `TaskCreate`/`TaskUpdate` (or `TodoWrite`) plan, only when there is one (Claude Code offers those tools to its newer models only with `CLAUDE_CODE_ENABLE_TODO_TOOLS=1`, so `spawnRun` puts it in every Claude pane's env; a user's `settings.json` `env` can still set `"0"`): how many steps are done of how many (`3/7`) over a bar, done items struck through and the step in progress highlighted; **Outputs** — files it wrote or edited (`Write`/`Edit`/`MultiEdit`/`NotebookEdit`), newest first, each with its extension tag (a file made by a Bash command is not listed); and **Used in this session** — **Uploads** (files attached through the box), **Files read**, **Memory** (Claude Code memory files), **Skills** and **Connectors** (MCP servers). A file path in a reply or your message is a link — absolute, or relative with a folder and an extension (`server/lib/x.js`, resolved against the pane's folder by `resolveIn` in `client/src/lib/resolvePath.ts`), a `:line` suffix included, bare, in inline code or as a markdown link's target (`[x](src/x.ts#L12)`; `MarkdownContent.tsx`) — and opens like an Edited-files row: in the Changes panel when it lies in the workspace's folder, else in the preview. A click on an output opens its preview in the panel's place (`FilePreview` in `client/src/components/run/ChatFilePreview.tsx`: name · EXT, Copy path, Close back to the panel); Uploads, Files read and Memory open their list with a preview beside it (`FileListModal`), and Skills opens the same dialog over the session's skills, each previewed from its SKILL.md (`SkillListModal`: a plugin's `plugin:name` from `GET /api/cc-config/plugins`, else the user's or the project's skill; a built-in skill has no file and shows by name); Connectors opens the Claude config page. Every row but Connectors also drags onto the prompt box (`dragAttachments`/`dragSkill` in `client/src/lib/promptAttach.ts`): an output, or a whole Uploads/Files read/Memory group, attaches its files like the `+` menu does (an upload by its bare path, anything else as `@<absolute path>`); a skill becomes the message's leading `/<name>` — the Skills row only when the session used one skill (a prompt takes one command), else drag it from its list. A row dragged out of one of those list dialogs closes the dialog, so the box is reachable. A preview reads only through routes that already guard it — a file under the pane's folder through `GET /api/lanes/:id/git/file` (an image through `/git/raw`), a memory file under `~/.claude` through `GET /api/cc-config/file`, an attached image or text file (`.txt`, `.md`, `.csv`, `.log`, `.json`… — a long paste is one) through `GET /api/run/drop/:name` — and shows just the path for anything else (an attached spreadsheet, a file outside the workspace, one since deleted). A Windows path (`C:\…\.claude\…`) is matched like a POSIX one. The ended-session replay and the Analyst page's conversation use the same layout. The chat's unsent prompt and its attachments are kept per session in this browser (`agenthub.chat.draft.<sessionId>`, `client/src/lib/chatDraft.ts`), so switching the pane to its terminal and back, or reloading the page, leaves them as typed — an attached image keeps its path, not its preview; a send clears it. Switching carries the unsent prompt across: to the terminal, the draft (its files as paths) is pasted into the CLI's input box without Enter and the draft is cleared; to the chat, the text in the CLI's input box is read off the screen (`parsePromptInput` in `client/src/lib/panePaste.ts`: Claude's `❯` box between its `─` rules, Codex's last `›` row up to its footer; a soft-wrapped row is joined back) into the draft and deleted there with Delete/Backspace — never Ctrl+C or Esc, which would stop a working turn. A box holding `[Pasted text #N]` or `[Image #N]` is left as it is, since the screen does not show what it stands for. A row of a turn's **Edited N files** card drags into the prompt box as an `@path` attachment (its header drags every file in the card); dropped elsewhere it is the plain path.
 - **Artifacts in the chat** — like Claude Desktop, a page, document, diagram, table or React component the model wrote (`isArtifact` in `client/src/lib/artifactView.ts`: `.html/.htm`, `.svg`, `.md/.markdown/.mdx`, `.mmd/.mermaid`, `.csv/.tsv`, and a `.jsx/.tsx` written whole by a Write — one it merely edited is project code) gets an **artifact card** in the conversation (`ArtifactCard` in `MessageList.tsx`: an icon by kind, its name, "Web page / Document / Diagram / React component / Table · Click to open"), shown as soon as the file is made, even mid-turn; the turn's **Edited N files** card lists the other files. A click opens it in the chat's own side panel (`onOpenArtifact` → `PaneChat`, not the workspace's Changes panel), which the Outputs list opens too: `FilePreview` in `client/src/components/run/ChatFilePreview.tsx` with **Preview | Code** (Code is the file highlighted with line numbers, `CodeBlock`), its **versions** (‹ Version n of m ›, rebuilt from the conversation's Write/Edit/MultiEdit inputs by `artifactVersions` — the transcript keeps those inputs up to 256 KB, `server/lib/transcript-message.js`; an edit to text the conversation never showed is a version of unknown content, the file on disk standing in for the newest), **Copy** (the text), **Download**, **Save to Artifacts** (a workspace file through `POST /api/artifacts/file` by its path, anything else — an older version, a file outside the workspace — through `POST /api/artifacts/file/upload`; shared to others from the Artifacts page), **Full screen** (over the whole page) and Close; clicking the name copies its path. Preview renders Markdown, a CSV as a table, an image, and runs HTML, Mermaid (pinned `mermaid@11.4.1`) and React (`react@18.3.1` + `@babel/standalone@7.26.4` + Tailwind's play CDN, a default-exported component, `react`/`react-dom` the only imports) in an `<iframe srcdoc>` sandboxed with scripts but WITHOUT `allow-same-origin` — an opaque origin that can reach neither the dashboard's cookies nor its API — and an SVG with no scripts at all (`artifactDocument`/`frameSandbox`). The libraries come from jsDelivr, as Claude's own artifacts load theirs; offline, those kinds show their error inside the frame and Code still works.
 - **The workspace home** — `/workspace?lane=<id>` opens on the workspace's home (`client/src/components/lanes/WorkspaceHome.tsx`), shaped like a Claude Desktop project page: the name (rename from its `⋯` menu, which is the sidebar row menu) with the repository it belongs to under it (root, the main worktree's branch, the worktree count, from `GET /api/projects` — the facts Settings → Projects used to show), a prompt box — the one place a session starts WITH a prompt (a pane has no run form; the session view's tab bar `+` only starts a bare CLI or a shell) — whose fields run in order **AI** (the session's own tool: every installed, enabled one, the workspace's by default), **AI Proxy** (Native or a saved profile; Native alone, disabled, for a tool that cannot use one), **Model** (the tool's own list, or on a router that router's models), **Permission** (Claude's permission mode; Codex's sandbox and approval; a catalog tool's per-session bypass switch) and **Effort** (Claude and Codex), whose half-typed text is kept per workspace in `agenthub.workspace.draft.<lane id>` (localStorage, so it survives leaving the page or switching workspace; cleared once sent — attached images are not kept), and whose **Start** opens a NEW session in the first slot with no live run (0–9, `POST /api/lanes/:id/start {slot}`; all ten busy is refused) and then shows it in a tab of its own, and **Recents** — the workspace's own sessions (`?lane=<id>`) with their cost and time, a live one opening its pane and any other its conversation (`&session=`), exactly like the sidebar. The transcript page (`/sessions/<id>`) of a Claude session started in a workspace's own folder carries an explicit **Resume** (`client/src/components/lanes/SessionResumeButton.tsx`, the one place that resumes) and beside it **Fork**, which resumes the history into a NEW session id (`{forkSession: true}` → `--fork-session`, the original untouched, offered even while the original has a live pane): it warns that a resume re-reads the whole transcript into context, re-reads the live panes, then starts it in the workspace's first free pane (`POST /api/lanes/:id/start {slot, resumeSessionId}`) and opens it. A session from a SUBFOLDER gets no Resume — the pane starts in the workspace's folder and Claude finds a session by the folder it ran in — and a session that still has a live pane shows **Open pane** instead. On the right sit the workspace's own context: **Instructions** (appended to every new session's system prompt, after the workspace owner's own **My agent instructions** from Settings → AI tools — one markdown text per account (typed, or read from a local `.md`/`.txt` with **Choose file**, saved only on Save), shared by every workspace they own), **Memory** (read-only: the folder's CLAUDE.md / AGENTS.md family and Claude's auto memory), **Context** (uploaded files, ≤ 10 MB each, stored by AgentHub) and **Folder** (the workspace's own folder plus extra ones, with the repo's untracked worktrees suggested). Only Claude and Codex panes can take them (`--add-dir` plus the instructions as a `CLAUDE.md` in an `--add-dir` folder of their own / `-c developer_instructions=`); for any other tool the page says so and its panes start without them. See `docs/API.md` → Workspace context. Each extra folder is also its own repo in the **Changes** panel, stacked under the workspace folder's like VS Code's Source Control: once the workspace has one, every repo is a section with a foldable header, each a whole panel — Changes, Files, Review, History, commit and push — on its own folder (every git route with `?source=<id>`, resolved from the `lane_sources` row; `ENOSOURCE` otherwise, never the workspace folder); the open sections share the height, and a folded one stays mounted. A chat's request to open a file unfolds the workspace folder's section. Right-clicking a section header offers **Close repository** (extra folders only — the workspace folder never closes) and **Close other repositories**; closing REMOVES the folder from the workspace (`DELETE /api/lanes/:id/sources/:sourceId`, the folder stays on disk), asking first only if that section holds an unsaved edit. The panel's bottom fold, **Workspace context** (folded by default, kept in `agenthub.workspace.contextOpen`), is the home's context column made compact (`client/src/components/lanes/WorkspaceContext.tsx`, the same component): Instructions, Memory, Context files and Folders are edited from the session view without going back to the home, and a folder added or removed there joins or leaves the stack above at once. A plain-text paste over 5,000 characters into any prompt box (the home, a chat, a finished session's reply) is attached as `pasted-text.txt` like a pasted file (`PASTE_AS_FILE_CHARS` in `client/src/components/run/RunSetup.tsx`): the prompt carries its path, never the text (#68). The home HIDES the session view with CSS — the console never unmounts behind it.
diff --git a/server/__tests__/artifacts.test.js b/server/__tests__/artifacts.test.js
index 0379fe90..fc265f67 100644
--- a/server/__tests__/artifacts.test.js
+++ b/server/__tests__/artifacts.test.js
@@ -3,7 +3,7 @@
  * claude.ai pages (link allowlist, hook capture, one row per URL), workspace
  * file candidates and pins (a snapshot, served sandboxed), skills (snapshot,
  * symlink/secret refusal, install into the caller's ~/.claude and ~/.agents skills with
- * replace moving the old one aside), plugins (marketplace allowlist, install
+ * replace and uninstall moving the old one aside), plugins (marketplace allowlist, install
  * argv; a marketplace link read into its plugin list, the same plugin added
  * twice kept as one row, key/market edited), skills uploaded (one Markdown
  * file, a folder, a zip, several skills at once — name and frontmatter set,
@@ -200,6 +200,18 @@ describe("skills", () => {
     const old = fs.readdirSync(aside).find((n) => !n.includes("-agents-"));
     assert.equal(fs.readFileSync(path.join(aside, old, "mine.txt"), "utf8"), "keep me");
     assert.ok(fs.readdirSync(aside).some((n) => n.startsWith("deploy-agents-")));
+
+    // Uninstall moves both copies aside too, never deletes them.
+    const gone = await request("POST", `/api/artifacts/${id}/uninstall`, {});
+    assert.equal(gone.status, 200, gone.text);
+    assert.deepEqual(gone.body.paths, [target, shared]);
+    assert.ok(!fs.existsSync(target) && !fs.existsSync(shared));
+    assert.equal((await listed()).installed, false);
+    const kept = fs.readdirSync(aside).filter((n) => n.includes("-uninstalled-"));
+    assert.equal(kept.length, 2);
+    const none = await request("POST", `/api/artifacts/${id}/uninstall`, {});
+    assert.equal(none.status, 409);
+    assert.equal(none.body.error.code, "ENOTINSTALLED");
   });
 
   it("edits a skill's name, description and instructions into a new snapshot", async () => {
@@ -271,6 +283,12 @@ describe("plugins", () => {
       ["claude", "plugin", "marketplace", "add", "o/r"],
       ["claude", "plugin", "install", "--scope", "user", "tool@market"],
     ]);
+    calls.length = 0;
+    const un = await request("POST", `/api/artifacts/${r.body.item.id}/uninstall`, {});
+    assert.equal(un.status, 200, un.text);
+    assert.deepEqual(calls, [
+      ["claude", "plugin", "uninstall", "--scope", "user", "--keep-data", "tool@market"],
+    ]);
   });
 });
 
diff --git a/server/lib/artifacts.js b/server/lib/artifacts.js
index d7db4349..609a4465 100644
--- a/server/lib/artifacts.js
+++ b/server/lib/artifacts.js
@@ -33,8 +33,10 @@
  *   `~/.claude/agenthub-replaced-skills/`, never deleted. A plugin is
  *   installed without `-y`, so one whose marketplace declares an install
  *   command fails rather than runs unseen. An admin can turn installs off
- *   for everyone (`setInstallsEnabled`). Share, unshare and install are
- *   written to `audit_log`.
+ *   for everyone (`setInstallsEnabled`). Uninstall (`uninstall`) takes it out
+ *   of the same accounts again — a skill moved aside the same way, a plugin
+ *   `claude plugin uninstall --keep-data` — and is allowed with installs off.
+ *   Share, unshare, install and uninstall are written to `audit_log`.
  * - Editing a skill's name, description or instructions (`editSkill`) writes
  *   a NEW snapshot and swaps the row to it; the old snapshot is dropped, and
  *   copies already installed stay as they were (Reinstall picks it up).
@@ -1409,6 +1411,31 @@ function installedCheck(req) {
   };
 }
 
+/**
+ * Move installed skill folders (`{acct, claudeHome, target}`) aside to
+ * `~/.claude/agenthub-replaced-skills/<name>[-agents][-uninstalled]-<stamp>`,
+ * as their account — a replace or an uninstall never deletes a user's copy.
+ */
+async function moveAside(taken, row, label = "") {
+  const runAs = require("./run-as");
+  const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+  for (const t of taken) {
+    const tag = t.target.startsWith(t.claudeHome + path.sep) ? "" : "-agents";
+    const aside = path.join(
+      t.claudeHome,
+      "agenthub-replaced-skills",
+      `${row.source}${tag}${label}-${stamp}`
+    );
+    if (t.acct) {
+      runAs.mkdirAs(t.acct, path.dirname(aside));
+      await runAs.writeAsAsync(t.acct, t.target, ["move", aside]);
+    } else {
+      fs.mkdirSync(path.dirname(aside), { recursive: true });
+      fs.renameSync(t.target, aside);
+    }
+  }
+}
+
 /**
  * Install a skill snapshot as `<name>` into every skills folder of every
  * account the viewer's sessions run as (`installAccounts` × `skillDirsOf`).
@@ -1428,22 +1455,7 @@ async function installSkill(req, row, { replace = false } = {}) {
       "replacing needs the updated helper: run `agenthub server install-system` once"
     );
   }
-  const stamp = new Date().toISOString().replace(/[:.]/g, "-");
-  for (const t of taken) {
-    const tag = t.target.startsWith(t.claudeHome + path.sep) ? "" : "-agents";
-    const aside = path.join(
-      t.claudeHome,
-      "agenthub-replaced-skills",
-      `${row.source}${tag}-${stamp}`
-    );
-    if (t.acct) {
-      runAs.mkdirAs(t.acct, path.dirname(aside));
-      await runAs.writeAsAsync(t.acct, t.target, ["move", aside]);
-    } else {
-      fs.mkdirSync(path.dirname(aside), { recursive: true });
-      fs.renameSync(t.target, aside);
-    }
-  }
+  await moveAside(taken, row);
   const files = row.files ? JSON.parse(row.files) : [];
   const contents = files.map((f) => ({
     rel: f.path.split("/"),
@@ -1470,14 +1482,9 @@ function __setExecImpl(fn) {
   execImpl = fn;
 }
 
-/** `claude plugin marketplace add` + `claude plugin install --scope user`, as the viewer. */
-async function installPlugin(req, row) {
+/** `args => Promise`: runs `claude <args>` as the viewer's own account. */
+function claudeAsViewer(req) {
   const { acct } = ownAccount(req);
-  const steps = [
-    ["plugin", "marketplace", "add", validMarket(row.market)],
-    ["plugin", "install", "--scope", "user", row.source],
-  ];
-  if (!PLUGIN_RE.test(row.source)) throw fail("EBADPLUGIN", "plugin: name@marketplace");
   let run;
   if (acct) {
     const runAs = require("./run-as");
@@ -1493,11 +1500,23 @@ async function installPlugin(req, row) {
     if (process.env.CLAUDE_HOME) env.CLAUDE_CONFIG_DIR = getClaudeHome();
     run = (args) => execImpl("claude", args, { timeout: 300_000, encoding: "utf8", env });
   }
-  const lastLine = (e) =>
-    String(e?.stderr || e?.stdout || e?.message || "")
-      .trim()
-      .split("\n")
-      .pop();
+  return run;
+}
+
+const lastLine = (e) =>
+  String(e?.stderr || e?.stdout || e?.message || "")
+    .trim()
+    .split("\n")
+    .pop();
+
+/** `claude plugin marketplace add` + `claude plugin install --scope user`, as the viewer. */
+async function installPlugin(req, row) {
+  const steps = [
+    ["plugin", "marketplace", "add", validMarket(row.market)],
+    ["plugin", "install", "--scope", "user", row.source],
+  ];
+  if (!PLUGIN_RE.test(row.source)) throw fail("EBADPLUGIN", "plugin: name@marketplace");
+  const run = claudeAsViewer(req);
   try {
     await run(steps[0]);
   } catch (e) {
@@ -1527,6 +1546,58 @@ async function install(req, id, opts = {}) {
   return result;
 }
 
+/**
+ * Take an installed skill or plugin out of the viewer's own accounts again
+ * (`installAccounts`). A skill's folders are moved aside like a replace
+ * (`moveAside`, `-uninstalled`), never deleted; a plugin is `claude plugin
+ * uninstall --scope user --keep-data`, as the viewer, so its data dir stays.
+ * Allowed while installs are off — it only removes. `ENOTINSTALLED` when
+ * there is nothing of it to remove.
+ */
+async function uninstall(req, id) {
+  const row = load(req, id);
+  if (row.kind !== "skill" && row.kind !== "plugin") {
+    throw fail("EBADKIND", "only a skill or a plugin is uninstalled");
+  }
+  let result;
+  if (row.kind === "skill") {
+    const runAs = require("./run-as");
+    const taken = installAccounts(req)
+      .flatMap((a) => skillDirsOf(a).map((dir) => ({ ...a, target: path.join(dir, row.source) })))
+      .filter((t) => exists(t.target));
+    if (!taken.length) throw fail("ENOTINSTALLED", `${row.source} is not installed`);
+    if (taken.some((t) => t.acct) && !runAs.writeAsCanMove()) {
+      throw fail(
+        "EUPGRADE",
+        "uninstalling needs the updated helper: run `agenthub server install-system` once"
+      );
+    }
+    await moveAside(taken, row, "-uninstalled");
+    result = { uninstalled: row.source, paths: taken.map((t) => t.target) };
+  } else {
+    if (!PLUGIN_RE.test(row.source)) throw fail("EBADPLUGIN", "plugin: name@marketplace");
+    try {
+      await claudeAsViewer(req)([
+        "plugin",
+        "uninstall",
+        "--scope",
+        "user",
+        "--keep-data",
+        row.source,
+      ]);
+    } catch (e) {
+      const msg = lastLine(e);
+      if (/not (found|installed)/i.test(msg)) {
+        throw fail("ENOTINSTALLED", `${row.source} is not installed`);
+      }
+      throw fail("EPLUGIN", `uninstall: ${msg}`);
+    }
+    result = { uninstalled: row.source, paths: [] };
+  }
+  if (req?.user && row.owner_id !== req.user.id) audit(req, row, "uninstalled");
+  return result;
+}
+
 /**
  * Who installed artifact `id`, newest first: `{items: [{user, mine, at,
  * replaced, paths?}], unrecorded}`. The owner, staff and local mode see every
@@ -1593,6 +1664,7 @@ module.exports = {
   remove,
   snapshotFile,
   install,
+  uninstall,
   installsEnabled,
   setInstallsEnabled,
   __setExecImpl,
diff --git a/server/routes/artifacts.js b/server/routes/artifacts.js
index 1546cc68..2d661959 100644
--- a/server/routes/artifacts.js
+++ b/server/routes/artifacts.js
@@ -7,7 +7,7 @@
  * rename/share/unshare, delete, read a snapshot file (preview/download, under
  * a `sandbox` CSP with `nosniff`, so nothing shared runs on the dashboard's
  * origin), and install a shared skill or plugin into the caller's own
- * account. Every write is same-origin. A path in a request only ever names a
+ * account (or uninstall it from there again). Every write is same-origin. A path in a request only ever names a
  * file inside a workspace (pin, under the read path's guards) or one of a
  * snapshot's own recorded files.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
@@ -30,6 +30,7 @@ const STATUS = {
   EFOREIGN: 403,
   EINSTALLSOFF: 403,
   EEXISTS: 409,
+  ENOTINSTALLED: 409,
   ENOACCOUNT: 409,
   EUPGRADE: 409,
   ENOTSHARED: 409,
@@ -361,4 +362,10 @@ router.post(
   })
 );
 
+router.post(
+  "/:id/uninstall",
+  sameOriginGuard,
+  wrap(async (req, res) => res.json(await artifacts.uninstall(req, req.params.id)))
+);
+
 module.exports = router;