@yiliang114/dsh-session-deck 0.0.0-stage → 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 yiliang114
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,153 @@
-# Temporary Holding Version
+# DSH Session Deck
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[简体中文](https://github.com/yiliang114/dsh-session-deck/blob/main/README.zh-CN.md)
+
+**Keep track of work across DSH workspaces without leaving your conversation.** Session Deck adds Activity and Favorites views to the native DeepSeek Harness sidebar, so you can spot running agents, reply to waiting sessions, and return to completed results.
+
+A community plugin with an English interface, no extra npm dependencies, and no telemetry. Licensed under [MIT](LICENSE).
+
+## Three views, one sidebar
+
+| View | What it helps you do |
+| --- | --- |
+| **Activity** | Follow running, waiting, unread, and recent sessions across all workspaces. |
+| **Favorites** | Keep important sessions close using DSH's native pinned sessions. |
+| **Workspaces** | Return to the native workspace tree, its management tools, and other plugins' menus. |
+
+Switching views keeps your current conversation open. Session rows show the title, workspace, time, and status; their menus provide favorite, rename, fork, archive, and copy-ID actions.
+
+*Screenshots captured from a local DSH installation in English; session titles and workspace names anonymized.*
+
+| Activity | Favorites | Workspaces |
+| --- | --- | --- |
+| Follow active work and unread results. | Return to native pinned sessions. | Keep the complete workspace controls. |
+| ![English Activity view](https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/docs/images/activity.png) | ![English Favorites view](https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/docs/images/favorites.png) | ![English native Workspaces view](https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/docs/images/workspaces.png) |
+
+Screenshots show the switcher above the workspace region without host patches, below global panels. The interface and anonymized session titles are English; browser menus, tabs, and the address bar are excluded.
+
+## Install locally
+
+The package name is **`@yiliang114/dsh-session-deck`**. A local checkout or tarball can be installed without npm publication; for registry installation, check version availability as described below.
+
+Requirements:
+
+- Node.js **22 or newer**.
+- DSH Web GUI **0.2.1-rc.2**. This is the exact supported host version; other versions are unverified.
+- DSH's native sidebar, session, and workspace plugins enabled.
+
+```sh
+git clone https://github.com/yiliang114/dsh-session-deck.git
+cd dsh-session-deck
+npm run verify
+dsh plugin --profile web add "link:$PWD" --offline --ignore-scripts
+```
+
+There are no dependencies to install. The repository includes the client bundle; `build` checks JavaScript syntax rather than generating it. Replace `web` if you use another profile. Keep the checkout in place while using a linked installation.
+
+You can also install through **Plugins → Add plugin → Install a third-party plugin**: enter `link:/absolute/path/to/dsh-session-deck`, choose **Install**, then **Enable now**, and refresh the page.
+
+The plugin's own labels are English. To make the rest of DSH English too, use **More → Settings → General → Language → English**. Session titles remain in the language you wrote them.
+
+Refresh your existing DSH GUI, then choose **Workspaces / Activity / Favorites** above the workspace region, below global panels. On the supported DSH 0.2.1-rc.2 layout, the plugin places the switcher there automatically without patching installed DSH files. The native workspace browser remains available in Workspaces. Refresh after client changes too; hot reload is not assumed.
+
+If you installed an earlier local version of this plugin, disable and remove it in DSH's plugin manager first to avoid two instances controlling the sidebar. You can keep its browser storage.
+
+### Install from a tarball
+
+To distribute the plugin without npm, run from the checkout:
+
+```sh
+npm run verify
+npm pack --ignore-scripts
+```
+
+Copy the generated archive to the target machine, then install using its absolute path:
+
+```sh
+dsh plugin --profile web add /absolute/path/yiliang114-dsh-session-deck-0.1.2.tgz --ignore-scripts
+```
+
+Refresh the GUI. A tarball installation does not depend on the original checkout. Both linked and tarball installations place the switcher above the workspace region automatically on the supported rc.2 layout; neither needs a host patch.
+
+### npm installation and market discovery
+
+**Confirm that version 0.1.2 exists in the official registry before installing:**
+
+```sh
+npm view @yiliang114/dsh-session-deck@0.1.2 version --registry=https://registry.npmjs.org
+dsh plugin --profile web add @yiliang114/dsh-session-deck@0.1.2 --ignore-scripts
+```
+
+The [market index](market-index.json) lists only verified npm releases. An empty `plugins: []` means there are **no released entries** to display. DSH's custom plugin market uses user-added index sources; npm publication does not automatically collect or list a plugin in an official DSH market.
+
+After a confirmed release is added to the index, its direct URL can be added through DSH's custom plugin market:
+
+```text
+https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/market-index.json
+```
+
+Maintainers: see the [release guide](https://github.com/yiliang114/dsh-session-deck/blob/main/docs/releasing.md) for npm bootstrap, OIDC configuration, and index updates.
+
+## How session status works
+
+- **Activity keeps all running, waiting, and unread sessions**, plus at most **20 ordinary recent sessions**, sorted by DSH's `updatedAt` rather than last-opened time. Favorites has no 20-session limit.
+- Favorites are **native DSH pins**, shared with the workspace tree. Archived, subagent, and empty sessions are omitted from the lists; ordinary forks remain visible.
+- Status priority is **waiting for a reply → running → unread**. A parent remains running while any known subagent descendant is running; ordinary forks do not propagate status to their source.
+- Aggregation covers only descendants known to DSH's session directory. **Independent background shell jobs are not tracked**: an idle session does not mean every process it launched has exited.
+- A session becomes unread when it and its known descendants finish while you are viewing something else. Opening it clears the marker. Persisted observations can recover completions across a refresh, but cannot reconstruct work that started and finished while every page was closed or was never observed.
+- Archiving an active session requires a **Stop and archive** confirmation. There is no permanent-delete action. Switch to Workspaces for the complete native menus, including actions from other plugins.
+
+## DSH compatibility and switcher position
+
+This plugin declares an exact `engines.dsh` match of **0.2.1-rc.2**. Automatic top placement uses a DOM compatibility adapter for that release, not an official DSH extension API.
+
+| DSH sidebar | Placement mechanism | Session Deck support |
+| --- | --- | --- |
+| Official **0.2.1-rc.2**, without patches | No official `sidebar.workspaces.before` slot; the adapter places the switcher above the workspace region by default. | Supported target, with a precise rc.2 DOM structure guard. |
+| **0.2.1-rc.2** with the legacy local patch | Reuses the existing `sidebar.workspaces.before` slot below global panels. | Compatible; the patch is no longer needed. |
+| Official **0.2.1-rc.3** | The published client and slot contract still lack the before-slot. | Not supported: full compatibility is unverified and the exact engine declaration excludes it. |
+
+On the recognized rc.2 layout, the adapter renders a React portal into its own DOM host immediately before the workspace region, below global panels such as Automation tasks. It does not write installed DSH files or replace the native workspace browser. An unknown DOM layout falls back to the footer. Disabling the plugin removes its scoped observer and DOM host.
+
+The rc.3 published files were inspected on **2026-10-23**; that inspection does not establish plugin compatibility. Supporting another host version requires validating its session, workspace, slot, and UI APIs and DOM layout before widening `engines.dsh`.
+
+## Legacy sidebar patch rollback
+
+The [sidebar patch script](scripts/patch-sidebar-before.mjs) is retained for rollback and backward compatibility. New installations do not need it. If you previously installed its local before-slot patch, the plugin can reuse that slot, or you can restore the original sidebar.
+
+Locate the `@deepseek-ai/dsh-client-ui-sidebar` package actually used by your running DSH. From this repository, replace the placeholder with that package's directory, not the DSH root or this plugin directory:
+
+```sh
+node scripts/patch-sidebar-before.mjs /path/to/dsh-client-ui-sidebar --rollback
+```
+
+Rollback requires the original adjacent `.dsa-before.backup` files and refuses to overwrite unrelated changes. Refresh the GUI after rollback: the new plugin still places the switcher above the workspace region on the supported unpatched rc.2 layout. If rolling back a DSH source checkout, rebuild the affected client artifacts as well.
+
+## Privacy and local storage
+
+Session Deck uses DSH's session and workspace APIs. It makes **no model calls, sends no telemetry, and has no external upload endpoint**.
+
+Browser `localStorage` retains the original keys for compatibility:
+
+| Key | Stored data |
+| --- | --- |
+| `dsh-session-activity.mode.v1` | Selected view. |
+| `dsh-session-activity.pending.v1` | Session IDs, observed running state, and completion/unread metadata. |
+
+No conversation bodies are stored by the plugin. Favorites remain in DSH's native pinned data. View and unread state sync between tabs on the same origin, not across devices. If storage is unavailable, state stays in memory. Clearing browser storage resets this metadata; processed records are capped at 1,000, while running and unread records are retained.
+
+Disable or remove **`@yiliang114/dsh-session-deck`** in DSH's plugin manager to stop using it. Disabling removes the adapter's observer and DOM host and restores the native workspace browser. Removal does not clear browser storage or undo a legacy host patch; use the rollback command separately if needed.
+
+## Development
+
+```sh
+npm run verify
+```
+
+This runs syntax checks, Node.js tests for session selection and state handling, and a dry-run package-content check. CI runs it on Node.js 22 and 24. There is no separate lint or TypeScript check, and automated checks do not replace testing the real DSH GUI.
+
+The client lives in [lib/client.js](lib/client.js), with a minimal [host entry](src/host.mjs) and [Cordis configuration](cordis.patch.yml). Report bugs with your DSH version, installation method, and reproduction steps in [GitHub Issues](https://github.com/yiliang114/dsh-session-deck/issues).
+
+## License
+
+[MIT](LICENSE). Independently maintained; not an official built-in DSH component.

package/README.zh-CN.md

@@ -0,0 +1,153 @@
+# DSH Session Deck
+
+[English](https://github.com/yiliang114/dsh-session-deck/blob/main/README.md)
+
+**不用离开当前对话，就能掌握所有 DSH 工作区中的会话进展。** Session Deck 在 DeepSeek Harness 原生侧栏中加入 Activity 和 Favorites 视图，让你快速找到运行中的代理、等待回复的会话，以及尚未查看的完成结果。
+
+社区维护的第三方插件，默认英文界面，无额外 npm 依赖、无遥测，采用 [MIT 许可证](LICENSE)。
+
+## 三种视图，一个侧栏
+
+| 视图 | 用途 |
+| --- | --- |
+| **Activity（活动）** | 跨工作区查看运行中、等待回复、未读和最近会话。 |
+| **Favorites（收藏）** | 汇总 DSH 原生置顶会话，随时回到重要任务。 |
+| **Workspaces（工作区）** | 使用原生工作区树、管理功能及其他插件提供的菜单。 |
+
+切换视图不会离开当前对话。会话行显示标题、工作区、时间和状态，菜单提供收藏、重命名、分叉、归档和复制 ID 等操作。
+
+*截图来自本地 DSH 安装的英文界面；会话标题和工作区名称已匿名化。*
+
+| Activity | Favorites | Workspaces |
+| --- | --- | --- |
+| 掌握运行状态和未读结果。 | 回到原生置顶的重要会话。 | 保留完整的工作区操作。 |
+| ![英文 Activity 视图](https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/docs/images/activity.png) | ![英文 Favorites 视图](https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/docs/images/favorites.png) | ![英文原生 Workspaces 视图](https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/docs/images/workspaces.png) |
+
+截图展示无需宿主补丁、自动位于全局面板下方和工作区区域上方的切换条。界面及匿名化后的会话标题使用英文；不包含浏览器顶部菜单、标签栏和地址栏。
+
+## 本地安装
+
+包名为 **`@yiliang114/dsh-session-deck`**。本地仓库和 tarball 安装不依赖 npm 发布；使用注册表安装时，请先按下文确认版本是否可用。
+
+环境要求：
+
+- Node.js **22 或以上**。
+- DSH Web GUI **0.2.1-rc.2**，这是当前精确适配的宿主版本，其他版本未经验证。
+- 已启用 DSH 原生侧栏、会话和工作区插件。
+
+```sh
+git clone https://github.com/yiliang114/dsh-session-deck.git
+cd dsh-session-deck
+npm run verify
+dsh plugin --profile web add "link:$PWD" --offline --ignore-scripts
+```
+
+项目没有需要安装的依赖，仓库已包含客户端文件；`build` 仅检查 JavaScript 语法，不生成客户端。使用其他 profile 时替换 `web`。链接安装期间请保留仓库目录。
+
+也可以通过 **Plugins → Add plugin → Install a third-party plugin** 安装：输入 `link:/absolute/path/to/dsh-session-deck`，点击 **Install**，然后 **Enable now**，最后刷新页面。
+
+插件自身文案使用英文。要让 DSH 其他界面也显示英文，在 **更多 → 设置 → 通用设置 → 语言** 中选择 **English**。会话标题仍保留用户原来使用的语言。
+
+刷新现有 DSH GUI，然后在全局面板下方、工作区区域上方选择 **Workspaces / Activity / Favorites**。在支持的 DSH 0.2.1-rc.2 布局中，插件会自动将切换条放到该位置，无需修改已安装的 DSH 文件。Workspaces 保留原生工作区浏览器。修改客户端后也需要刷新，不应假定热更新已启用。
+
+如果已安装本插件的早期本地版本，请先在 DSH 插件管理中停用并移除旧实例，避免同时接管侧栏；浏览器存储可以保留。
+
+### 使用 tarball 安装
+
+不经过 npm 注册表分发时，在仓库根目录执行：
+
+```sh
+npm run verify
+npm pack --ignore-scripts
+```
+
+将生成的归档文件复制到目标机器，再用绝对路径安装：
+
+```sh
+dsh plugin --profile web add /absolute/path/yiliang114-dsh-session-deck-0.1.2.tgz --ignore-scripts
+```
+
+安装后刷新 GUI。tarball 安装不依赖原仓库目录持续存在。链接和 tarball 两种安装方式都会在支持的 rc.2 布局中自动将切换条放到工作区区域上方，无需宿主补丁。
+
+### npm 安装与市场发现
+
+**安装前，先确认官方注册表中存在 0.1.2 版本：**
+
+```sh
+npm view @yiliang114/dsh-session-deck@0.1.2 version --registry=https://registry.npmjs.org
+dsh plugin --profile web add @yiliang114/dsh-session-deck@0.1.2 --ignore-scripts
+```
+
+[市场索引](market-index.json)只列出经 npm 验证的发布版本。若内容为 `plugins: []`，表示**没有可显示的已发布条目**。DSH 自定义插件市场读取用户添加的索引源；发布 npm 不会触发官方 DSH 市场的自动收录。
+
+确认发布且更新索引后，可以在 DSH 自定义插件市场中添加以下直接 JSON 地址：
+
+```text
+https://raw.githubusercontent.com/yiliang114/dsh-session-deck/main/market-index.json
+```
+
+维护者请参阅[发布指南（英文）](https://github.com/yiliang114/dsh-session-deck/blob/main/docs/releasing.md)，了解首次 npm 发布、OIDC 授权和索引更新。
+
+## 会话状态与边界
+
+- Activity 保留**全部运行中、等待回复和未读会话**，以及最多 **20 条普通最近会话**，按 DSH 的 `updatedAt` 排序，而非最后打开时间。Favorites 不受 20 条限制。
+- 收藏直接使用 **DSH 原生置顶数据**，与工作区树同步。归档、子代理和空白会话不单独显示；普通分叉正常显示。
+- 状态优先级为**等待回复 → 运行中 → 未读**。已知子代理后代仍在运行时，父会话保持运行状态；普通分叉不会向来源会话传播状态。
+- 仅聚合 DSH 会话目录中已知的子代理后代。**独立后台 shell 作业不在跟踪范围内**，会话空闲不代表它启动的所有进程均已退出。
+- 会话及已知后代全部停止时，如果你正在查看其他会话，它会标记为未读；打开即清除。持久化记录可恢复刷新期间发生的完成状态，但无法补全所有页面关闭期间完整开始并结束、或从未观察到的运行。
+- 归档活动会话需要确认 **Stop and archive（停止并归档）**。插件不提供永久删除；其他插件贡献的完整原生菜单请切回 Workspaces 使用。
+
+## DSH 兼容性与切换条位置
+
+插件的 `engines.dsh` 精确声明支持 **0.2.1-rc.2**。自动顶部定位使用针对该版本的 DOM 兼容适配层，并非 DSH 官方扩展 API。
+
+| DSH 侧栏 | 定位方式 | Session Deck 支持情况 |
+| --- | --- | --- |
+| 官方 **0.2.1-rc.2**，未打补丁 | 没有官方 `sidebar.workspaces.before` 槽位；适配层默认将切换条放到工作区区域上方。 | 当前支持目标，严格检查 rc.2 DOM 结构。 |
+| **0.2.1-rc.2** 加旧版本地补丁 | 复用全局面板下方已有的 `sidebar.workspaces.before` 槽位。 | 兼容，但已不再需要补丁。 |
+| 官方 **0.2.1-rc.3** | 已发布的客户端及槽位声明中仍没有 before 槽位。 | 不支持：整体兼容性未经验证，精确版本声明不包含它。 |
+
+识别到 rc.2 布局时，适配层在工作区区域紧前方、Automation tasks 等全局面板下方插入自己的 DOM 容器，通过 React portal 渲染切换条。它不会写入已安装的 DSH 文件，也不会替换原生工作区浏览器。遇到未知 DOM 布局时回退到底部。停用插件会移除其限定范围的观察器和 DOM 容器。
+
+rc.3 发布文件检查于 **2026-10-23**，该检查不能证明插件兼容。支持其他宿主版本时，需要先验证会话、工作区、槽位、UI 接口及 DOM 布局，再扩大 `engines.dsh` 的版本范围。
+
+## 旧版侧栏补丁回滚
+
+[侧栏补丁脚本](scripts/patch-sidebar-before.mjs)保留用于回滚和向后兼容，新安装无需执行。如果之前安装过本地 before 槽位补丁，插件可以继续复用该槽位，也可以恢复原侧栏。
+
+找到当前运行的 DSH 实际加载的 `@deepseek-ai/dsh-client-ui-sidebar` 包目录，在本仓库中执行以下命令。占位路径应替换为该侧栏包目录，而非 DSH 根目录或本插件目录：
+
+```sh
+node scripts/patch-sidebar-before.mjs /path/to/dsh-client-ui-sidebar --rollback
+```
+
+恢复依赖原始的相邻 `.dsa-before.backup` 备份，并会拒绝覆盖无关改动。回滚后刷新 GUI：在支持的未打补丁 rc.2 布局中，新插件仍会将切换条放到工作区区域上方。如果回滚的是 DSH 源码仓库，还需重新构建相关客户端产物。
+
+## 隐私与本地存储
+
+插件使用 DSH 的会话和工作区 API，**不发起模型调用、不发送遥测、没有外部上传端点**。
+
+为兼容早期版本，浏览器 `localStorage` 沿用以下键：
+
+| 键 | 内容 |
+| --- | --- |
+| `dsh-session-activity.mode.v1` | 当前视图。 |
+| `dsh-session-activity.pending.v1` | 会话 ID、观察到的运行状态和完成未读元数据。 |
+
+插件不在其中保存会话正文。收藏仍使用 DSH 原生置顶数据。视图和未读状态在同源标签页间同步，不跨设备同步；存储不可用时仅保留在内存中。清除浏览器存储会重置这些元数据。已处理记录最多保留 1,000 条，运行中和未读记录不受此清理上限影响。
+
+停用时，在 DSH 插件管理中禁用或移除 **`@yiliang114/dsh-session-deck`**。停用会移除适配层的观察器和 DOM 容器，并恢复原生工作区浏览器。移除不会清除浏览器存储，也不会撤销旧版宿主补丁；如需撤销，请单独执行恢复命令。
+
+## 开发
+
+```sh
+npm run verify
+```
+
+该命令依次执行语法检查、会话筛选与状态逻辑的 Node.js 测试，以及打包清单 dry-run 检查。CI 使用 Node.js 22 和 24。没有独立 lint 或 TypeScript 检查；自动检查不能替代真实 DSH GUI 验证。
+
+客户端位于 [lib/client.js](lib/client.js)，另有最小[宿主入口](src/host.mjs)和 [Cordis 配置](cordis.patch.yml)。反馈问题时，请在 [GitHub Issues](https://github.com/yiliang114/dsh-session-deck/issues) 中提供 DSH 版本、安装方式和复现步骤。
+
+## 许可证
+
+[MIT](LICENSE)。本项目独立维护，不属于 DSH 官方内置组件。

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: yiliang114-session-deck
+      name: '@yiliang114/dsh-session-deck'

package/lib/client.js

@@ -0,0 +1,372 @@
+// Hand-written lazy ModuleLoader bundle: no dependency installation or build.
+window.__ModuleLoader__.load({
+  id: '@yiliang114/dsh-session-deck',
+  factory: (require) => {
+    const { createElement: h, Fragment, useEffect, useLayoutEffect, useState, useSyncExternalStore } = require('react')
+    const { createPortal } = require('react-dom')
+    const { Menu, MenuItemButton, Modal, Button, writeClipboard, IconEllipsisOutlineRegular, IconArchiveOutlineRegular } = require('@deepseek-ai/dsh-client-ui-primitives')
+    const KEY = 'dsh-session-activity.mode.v1'
+    const PENDING_KEY = 'dsh-session-activity.pending.v1'
+    const MAX_RECORDS = 1000
+    const identity = x => x
+    // Client SessionSummary exposes parentId; only subagent edges represent work.
+    // byId also includes retained children absent from the Host-list ids.
+    function aggregateRunning(list, statuses) {
+      const running = new Map(), queue = []
+      for (const s of Object.values(list.byId)) {
+        const value = statuses.get(s.id)?.running ?? s.running
+        running.set(s.id, value)
+        if (value === true) queue.push(s.id)
+      }
+      for (let i = 0; i < queue.length; i++) {
+        const s = list.byId[queue[i]]
+        if (s.origin !== 'subagent' || !running.has(s.parentId) || running.get(s.parentId) === true) continue
+        running.set(s.parentId, true)
+        queue.push(s.parentId)
+      }
+      return running
+    }
+    // Only observed runs or native unread signals create metadata, never idle history.
+    function createPendingStore(storage) {
+      const read = () => {
+        try {
+          const value = JSON.parse(storage?.getItem(PENDING_KEY) || '{}')
+          return Object.fromEntries(Object.entries(value).filter(([id, r]) => id && r &&
+            typeof r.running === 'boolean' && typeof r.pending === 'boolean' &&
+            typeof r.seeded === 'boolean' && Number.isFinite(r.revision)))
+        } catch { return {} }
+      }
+      let records = read()
+      const listeners = new Set(), observed = new Map()
+      const trim = value => {
+        let handled = 0
+        return Object.fromEntries(Object.entries(value).sort((a, b) => b[1].revision - a[1].revision)
+          .filter(([, r]) => r.pending || r.running || handled++ < MAX_RECORDS))
+      }
+      records = trim(records)
+      const merge = () => {
+        const next = { ...records }
+        for (const [id, r] of Object.entries(read())) if (!next[id] || r.revision > next[id].revision) next[id] = r
+        return next
+      }
+      function publish(next, persist) {
+        next = trim(next)
+        if (JSON.stringify(next) === JSON.stringify(records)) return
+        records = next
+        if (persist) { try { storage?.setItem(PENDING_KEY, JSON.stringify(records)) } catch {} }
+        for (const fn of listeners) fn()
+      }
+      function update(next, id, patch) {
+        const old = next[id]
+        next[id] = { running: false, pending: false, seeded: false, ...old, ...patch,
+          revision: Math.max(Date.now(), (old?.revision || 0) + 1) }
+      }
+      return {
+        getSnapshot: () => records,
+        subscribe: fn => { listeners.add(fn); return () => listeners.delete(fn) },
+        sync: () => publish(merge(), false),
+        observe(list, statuses) {
+          // Hydration placeholders must not turn a persisted running baseline into a completion.
+          if (list.phase !== 'ready') return
+          const next = merge(), runningById = aggregateRunning(list, statuses)
+          for (const id of list.ids ?? []) {
+            const s = list.byId[id]
+            if (!s || s.origin === 'subagent' || s.blank) continue
+            const status = statuses.get(id), running = runningById.get(id)
+            if (typeof running !== 'boolean') continue
+            const old = next[id]
+            const previous = observed.has(id) ? observed.get(id) : old?.running
+            const finished = previous === true && !running && old?.running !== false
+            const seed = !running && !!status?.completionUnread && !old?.seeded
+            const read = (s.retainedBy?.mainView ?? 0) > 0
+            // A remote acknowledgement wins over an unchanged local snapshot.
+            if (finished || seed || (running && previous !== true) || (old && previous !== running)) {
+              update(next, id, { running, pending: !read && (!!old?.pending || finished || seed),
+                seeded: !!old?.seeded || seed })
+            } else if (read && next[id]?.pending) {
+              // Codex-style: viewing the session marks its finished output as read.
+              update(next, id, { pending: false })
+            }
+            observed.set(id, running)
+          }
+          publish(next, true)
+        },
+        acknowledge(id) {
+          const next = merge()
+          if (next[id]?.pending) update(next, id, { pending: false, seeded: true })
+          publish(next, true)
+        },
+      }
+    }
+    function selectActivity(list, statuses, workspaces, limit = 20, pending = {}) {
+      const runningById = aggregateRunning(list, statuses)
+      const archived = new Set(workspaces.archivedSessionIds ?? [])
+      const pins = new Set(workspaces.pinnedSessionIds ?? [])
+      const membership = new Map()
+      for (const w of workspaces.items ?? []) for (const id of w.sessionIds) membership.set(id, w)
+      const rows = (list.ids ?? []).map(id => list.byId[id]).filter(s => s && s.origin !== 'subagent' && !archived.has(s.id) && !s.blank).map(s => {
+        const state = statuses.get(s.id)
+        const kind = state?.pendingInteraction ? 'waiting' : runningById.get(s.id) ? 'running' : pending[s.id]?.pending ? 'pending' : 'recent'
+        const workspace = membership.get(s.id)
+        return { ...s, kind, pinned: pins.has(s.id), workspace: workspace?.title || s.cwd?.split(/[\\/]/).filter(Boolean).pop() || 'Ungrouped', time: Number.isFinite(s.updatedAt) ? s.updatedAt : 0 }
+      }).sort((a, b) => b.time - a.time || a.id.localeCompare(b.id))
+      const recent = rows.filter(s => s.kind === 'recent').slice(0, limit)
+      const visible = new Set(recent.map(s => s.id))
+      return { active: rows.filter(s => s.kind !== 'recent'), recent, activity: rows.filter(s => s.kind !== 'recent' || visible.has(s.id)), favorites: rows.filter(s => s.pinned) }
+    }
+    function createModeStore(storage) {
+      let mode = 'workspace'
+      try { const saved = storage?.getItem(KEY); if (saved === 'activity' || saved === 'favorites') mode = saved } catch {}
+      const listeners = new Set()
+      return {
+        getSnapshot: () => mode,
+        subscribe: fn => { listeners.add(fn); return () => listeners.delete(fn) },
+        set(next, persist = true) {
+          next = next === 'activity' || next === 'favorites' ? next : 'workspace'
+          if (mode === next) return
+          mode = next
+          if (persist) { try { storage?.setItem(KEY, mode) } catch {} }
+          for (const fn of listeners) fn()
+        },
+      }
+    }
+    function ago(time, now) {
+      if (!time) return ''
+      const minutes = Math.max(0, Math.floor((now - time) / 60000))
+      if (minutes < 1) return 'Just now'
+      if (minutes < 60) return `${minutes}m ago`
+      if (minutes < 1440) return `${Math.floor(minutes / 60)}h ago`
+      return `${Math.floor(minutes / 1440)}d ago`
+    }
+    // Compatibility adapter for DSH 0.2.1-rc.2, NOT an official public slot.
+    // Only our container is inserted/removed; native and React-owned nodes stay put.
+    // Capture the anchor's own sidebar, never a document-wide first match.
+    function mountNavigationHost(anchor, onHost) {
+      const root = anchor?.closest('.hHd-Xa_root')
+      const shape = () => {
+        if (!root || anchor.closest('.hHd-Xa_root') !== root) return null
+        const children = [...root.children]
+        const regions = children.filter(node => node.classList.contains('hHd-Xa_regionArea'))
+        const footers = children.filter(node => node.classList.contains('hHd-Xa_footArea'))
+        return regions.length === 1 && footers.length === 1 && footers[0].contains(anchor) &&
+          children.indexOf(regions[0]) < children.indexOf(footers[0]) ? regions[0] : null
+      }
+      const Observer = anchor?.ownerDocument.defaultView?.MutationObserver
+      if (!shape() || !Observer) { onHost(null); return () => {} }
+      const host = anchor.ownerDocument.createElement('div')
+      host.className = 'dsa-navigation-host'
+      let active = true, published
+      const sync = () => {
+        if (!active) return
+        const region = shape()
+        if (region) {
+          if (host.parentNode !== root || host.nextSibling !== region) root.insertBefore(host, region)
+        } else host.remove()
+        const next = region ? host : null
+        if (published !== next) { published = next; onHost(next) }
+      }
+      // No subtree/body observation: portal rendering cannot trigger this observer.
+      // The adjacency guard makes our own insertion notification a no-op.
+      const observer = new Observer(sync)
+      observer.observe(root, { childList: true })
+      sync()
+      return () => { active = false; observer.disconnect(); host.remove() }
+    }
+    const labels = { running: 'Running', waiting: 'Waiting for reply', pending: 'Unread', recent: 'Recent sessions' }
+    const css = `
+.dsa-root{display:flex;flex-direction:column;flex:1;min-height:0;overflow:hidden;color:var(--dsw-alias-label-primary,inherit)}
+.dsa-header{display:flex;align-items:baseline;justify-content:space-between;padding:18px 18px 10px;gap:8px}
+.dsa-heading{margin:0;font:inherit;font-size:12px;font-weight:600;letter-spacing:.02em}
+.dsa-caption{font-size:10px;color:var(--dsw-alias-label-tertiary,#888)}
+.dsa-scroll{overflow-y:auto;min-height:0;padding:0 8px 16px;scrollbar-width:thin}
+.dsa-item{position:relative;margin:2px 0;border-radius:8px;isolation:isolate}
+.dsa-item:hover,.dsa-item:focus-within,.dsa-item[data-current=true]{background:var(--dsw-alias-interactive-bg-hover,#8882)}
+.dsa-row{display:block;box-sizing:border-box;width:100%;padding:9px 10px;border:0;border-radius:8px;background:transparent;color:inherit;font:inherit;text-align:left;cursor:pointer}
+.dsa-line1{display:flex;align-items:center;gap:10px;min-width:0}
+.dsa-title-text{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:13px;line-height:19px;font-weight:450}
+.dsa-trail{display:flex;align-items:center;gap:6px;flex:none;color:var(--dsw-alias-label-tertiary,#888);transition:opacity .12s ease}
+.dsa-trail time{font-size:10px;font-variant-numeric:tabular-nums}
+.dsa-pin-mark{font-size:11px;line-height:1;color:var(--dsw-alias-label-tertiary,#999)}
+.dsa-dot{width:6px;height:6px;flex:none;border-radius:50%}
+.dsa-dot[data-kind=waiting]{background:#d6a45c}
+.dsa-dot[data-kind=pending]{background:#8fa9cf}
+.dsa-spin{width:11px;height:11px;flex:none;color:var(--dsw-alias-label-secondary,#aaa);animation:dsa-rotate .9s linear infinite}
+.dsa-spin-track{stroke:currentColor;opacity:.22}
+.dsa-spin-arc{stroke:currentColor}
+@keyframes dsa-rotate{to{transform:rotate(360deg)}}
+.dsa-meta{margin:2px 0 0;font-size:11px;line-height:15px;color:var(--dsw-alias-label-tertiary,#888);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dsa-actions{position:absolute;right:6px;top:6px;display:flex;gap:1px;align-items:center;height:24px;opacity:0;transition:opacity .12s ease}
+.dsa-item:hover .dsa-actions,.dsa-item:focus-within .dsa-actions,.dsa-item[data-menu-open=true] .dsa-actions{opacity:1}
+.dsa-item:hover .dsa-trail,.dsa-item:focus-within .dsa-trail,.dsa-item[data-menu-open=true] .dsa-trail{opacity:0}
+.dsa-menu-trigger{display:flex;align-items:center;justify-content:center;width:24px;height:24px;padding:0;border:0;border-radius:5px;background:transparent;color:var(--dsw-alias-label-secondary,#aaa);cursor:pointer}
+.dsa-menu-trigger:hover{background:var(--dsw-alias-interactive-bg-hover,#8883);color:var(--dsw-alias-label-primary,inherit)}
+.dsa-menu-trigger:disabled{cursor:wait}
+.dsa-row:focus-visible,.dsa-menu-trigger:focus-visible,.dsa-switch button:focus-visible{outline:2px solid var(--dsw-alias-label-secondary,#aaa);outline-offset:-2px}
+.dsa-navigation-host{flex-shrink:0;padding:8px 0}
+.dsa-switch{display:flex;gap:2px;padding:3px;border-radius:8px;background:var(--dsw-alias-interactive-bg-hover,#8881);flex-shrink:0;min-width:0}
+.dsa-switch button{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;border:0;border-radius:5px;padding:6px 6px;background:transparent;color:var(--dsw-alias-label-tertiary,#888);font:inherit;font-size:11px;cursor:pointer;white-space:nowrap}
+.dsa-switch[data-compact=true]{flex-direction:column}
+.dsa-switch[data-compact=true] button{padding:6px 0}
+.dsa-switch button[aria-pressed=true]{background:var(--dsw-alias-interactive-bg-hover,#8882);color:var(--dsw-alias-label-primary,inherit);font-weight:600}
+.dsa-empty{margin:22px 12px;font-size:12px;line-height:1.8;color:var(--dsw-alias-label-tertiary,#888)}
+.dsa-rename{box-sizing:border-box;width:100%;font:inherit;padding:8px;border-radius:6px;border:1px solid var(--dsw-alias-label-tertiary,#777);background:transparent;color:inherit}
+@media(hover:none){.dsa-actions{opacity:1}.dsa-trail{opacity:0}}
+@media(prefers-reduced-motion:reduce){.dsa-actions,.dsa-trail{transition:none}.dsa-spin{animation:none}}
+`
+
+    function apply(ctx) {
+      let storage
+      try { storage = window.localStorage } catch {}
+      const mode = createModeStore(storage)
+      const pending = createPendingStore(storage)
+      const style = document.createElement('style')
+      style.id = 'yiliang114-dsh-session-deck-style'
+      style.textContent = css
+      const onStorage = event => { if (event.key === PENDING_KEY) pending.sync(); if (event.key === KEY || event.key === null) { let value; try { value = storage?.getItem(KEY) } catch {} mode.set(value, false) } }
+      ctx.effect(() => {
+        document.getElementById(style.id)?.remove()
+        document.head.appendChild(style)
+        window.addEventListener('storage', onStorage)
+        return () => { style.remove(); window.removeEventListener('storage', onStorage) }
+      })
+      function Switch({ wide, useSessions, useSessionStatus }) {
+        const list = useSessions(identity), statuses = useSessionStatus(identity)
+        useEffect(() => pending.observe(list, statuses), [list, statuses])
+        const selected = useSyncExternalStore(mode.subscribe, mode.getSnapshot)
+        return h('div', { className: 'dsa-switch', role: 'group', 'aria-label': 'Session navigation view', 'data-compact': !wide },
+          ...[['workspace', 'Workspaces', 'W'], ['activity', 'Activity', 'A'], ['favorites', 'Favorites', '★']].map(([value, label, compact]) => h('button', { key: value, type: 'button', title: label, 'aria-label': label, 'aria-pressed': selected === value, onClick: () => mode.set(value) }, wide ? label : compact)))
+      }
+      function FooterNavigation(props) {
+        const [anchor, setAnchor] = useState(null)
+        const [host, setHost] = useState(null)
+        useLayoutEffect(() => mountNavigationHost(anchor, setHost), [anchor])
+        // The hidden callback ref stays in the registered footer's React tree.
+        // A portal retains slot/React context and all injected props. Unknown DOM
+        // shapes render inline in that footer instead of guessing a destination.
+        return h(Fragment, null, h('span', { hidden: true, ref: setAnchor }),
+          host ? createPortal(h(Switch, props), host) : h(Switch, props))
+      }
+      function Activity({ wide, expandSidebar, useSessions, useSessionStatus, useWorkspaces }) {
+        const list = useSessions(identity)
+        const statuses = useSessionStatus(identity)
+        const workspaces = useWorkspaces(identity)
+        const [now, setNow] = useState(Date.now)
+        useEffect(() => { const timer = setInterval(() => setNow(Date.now()), 60000); return () => clearInterval(timer) }, [])
+        const selectedMode = useSyncExternalStore(mode.subscribe, mode.getSnapshot)
+        const queue = useSyncExternalStore(pending.subscribe, pending.getSnapshot)
+        const groups = selectActivity(list, statuses, workspaces, 20, queue)
+        if (!wide) return h('button', { type: 'button', className: 'dsa-row', title: 'Expand session activity', 'aria-label': 'Expand session activity', onClick: expandSidebar }, '◷')
+        const favorites = selectedMode === 'favorites'
+        const rows = favorites ? groups.favorites : groups.activity
+        return h('section', { className: 'dsa-root', 'aria-label': favorites ? 'Favorite sessions' : 'Session activity' },
+          h('header', { className: 'dsa-header' }, h('h2', { className: 'dsa-heading' }, favorites ? 'Favorites' : 'Activity'), h('span', { className: 'dsa-caption' }, 'All workspaces')),
+          h('div', { className: 'dsa-scroll' }, ...rows.map(s => h(SessionRow, { key: s.id, s, now, showPin: !favorites })),
+            !rows.length && h('p', { className: 'dsa-empty' }, list.phase !== 'ready' ? 'Loading sessions…' : favorites ? 'Favorite sessions to keep them close at hand.' : 'Recent sessions will appear here.')))
+      }
+
+      // Native child slots (`sidebar.workspaces.session.menu.item` and
+      // `sidebar.workspaces.session.row.action`) are declared by the shipped
+      // WorkspaceBrowser entry. A replacing entry cannot declare them again, so
+      // the activity rows carry their own menu built from public uiWorkspace
+      // actions instead of rendering those slots.
+      function SessionRow({ s, now, showPin }) {
+        const [menuOpen, setMenuOpen] = useState(false)
+        const [dialog, setDialog] = useState(null)
+        const [draft, setDraft] = useState('')
+        const [busy, setBusy] = useState(false)
+        const [error, setError] = useState('')
+        const title = s.displayTitle || s.title || s.id
+        const run = async operation => {
+          if (busy) return
+          setMenuOpen(false); setBusy(true); setError('')
+          try { await operation(); setDialog(null) }
+          catch (reason) { setError(reason?.message || String(reason)); setDialog('error') }
+          finally { setBusy(false) }
+        }
+        const archive = async (stopActivity = false) => {
+          if (busy) return
+          setMenuOpen(false); setBusy(true); setError('')
+          try {
+            await ctx.uiWorkspace.archiveSession(s.id, stopActivity ? { stopActivity: true } : undefined)
+            setDialog(null)
+          } catch (reason) {
+            if (!stopActivity && reason?.name === 'WorkspaceArchiveError' && reason?.rpcError?.code === 'workspace/session-active') setDialog('archive')
+            else { setError(reason?.message || String(reason)); setDialog('error') }
+          } finally { setBusy(false) }
+        }
+        const close = () => { if (!busy) { setDialog(null); setError('') } }
+        const rename = () => run(async () => {
+          const result = await ctx.sessions.using(s.id, { source: 'workspaceOperation' }, reference => reference.binding.session.rename(draft.trim()))
+          if (!result.ok) throw new Error(result.error.message)
+        })
+        const item = (label, onClick) => h(MenuItemButton, { key: label, disabled: busy, onSelect: onClick }, label)
+        const current = (s.retainedBy?.mainView ?? 0) > 0
+        const mark = s.kind === 'running' ? h('svg', { className: 'dsa-spin', viewBox: '0 0 16 16', role: 'img', 'aria-label': 'Running' },
+            h('circle', { className: 'dsa-spin-track', cx: 8, cy: 8, r: 6.5, fill: 'none', strokeWidth: 2 }),
+            h('circle', { className: 'dsa-spin-arc', cx: 8, cy: 8, r: 6.5, fill: 'none', strokeWidth: 2, strokeLinecap: 'round', strokeDasharray: '70 30', pathLength: 100 }))
+          : s.kind === 'waiting' ? h('span', { className: 'dsa-dot', 'data-kind': 'waiting', role: 'img', 'aria-label': 'Waiting for reply' })
+          : s.kind === 'pending' ? h('span', { className: 'dsa-dot', 'data-kind': 'pending', role: 'img', 'aria-label': 'Unread' }) : null
+        return h('div', { className: 'dsa-item', 'data-session-id': s.id, 'data-current': current, 'data-menu-open': menuOpen },
+          h('button', { type: 'button', className: 'dsa-row', 'aria-current': current ? 'true' : undefined,
+            title: `${title} · ${labels[s.kind]}\n${s.cwd || s.workspace}`, onClick: () => ctx.uiWorkspace.openSession(s.id) },
+            h('span', { className: 'dsa-line1' },
+              h('span', { className: 'dsa-title-text' }, title),
+              h('span', { className: 'dsa-trail' },
+                showPin && s.pinned && h('span', { className: 'dsa-pin-mark', role: 'img', 'aria-label': 'Favorited' }, '★'),
+                h('time', { dateTime: s.time ? new Date(s.time).toISOString() : undefined }, ago(s.time, now)),
+                mark)),
+            h('span', { className: 'dsa-meta' }, s.workspace)),
+          h('span', { className: 'dsa-actions' },
+            h('button', { type: 'button', className: 'dsa-menu-trigger dsa-archive-btn', disabled: busy,
+              'aria-label': `Archive session: ${title}`, title: 'Archive session', onClick: () => archive() },
+              h(IconArchiveOutlineRegular, { size: 14 })),
+            h(Menu, { open: menuOpen, onClose: () => setMenuOpen(false), portal: true,
+              anchor: h('button', { type: 'button', disabled: busy, className: 'dsa-menu-trigger', 'aria-label': `Session actions: ${title}`, 'aria-haspopup': 'menu', 'aria-expanded': menuOpen,
+                onClick: () => setMenuOpen(v => !v) }, h(IconEllipsisOutlineRegular, { size: 16 })) },
+              item(s.pinned ? 'Remove from favorites (unpin)' : 'Add to favorites (pin)', () => run(() => s.pinned ? ctx.uiWorkspace.unpinSession(s.id) : ctx.uiWorkspace.pinSession(s.id))),
+              item('Rename', () => { setMenuOpen(false); setDraft(title); setDialog('rename') }),
+              item('Fork session', () => run(() => ctx.uiWorkspace.forkSession(s.id, undefined, { allowMigration: false }))),
+              item('Archive session', () => archive()),
+              item('Copy session ID', () => run(async () => { if (!await writeClipboard(s.id)) throw new Error('Copy failed. Check clipboard permissions.') })),
+              item('Open in workspace for all actions', () => { setMenuOpen(false); mode.set('workspace'); ctx.uiWorkspace.openSession(s.id) }))),
+          dialog && h(Modal, { open: true, onClose: close, closeLabel: 'Close', title: dialog === 'rename' ? 'Rename session' : dialog === 'archive' ? 'Stop and archive session?' : 'Action failed',
+            footer: h('div', { style: { display: 'flex', gap: 8 } },
+              h(Button, { variant: 'outline', disabled: busy, onClick: close }, dialog === 'error' ? 'Close' : 'Cancel'),
+              dialog === 'rename' && h(Button, { variant: 'primary', disabled: busy || !draft.trim(), onClick: rename }, 'Save'),
+              dialog === 'archive' && h(Button, { variant: 'primary', disabled: busy, onClick: () => archive(true) }, 'Stop and archive')) },
+            dialog === 'rename' && h('input', { className: 'dsa-rename', value: draft, disabled: busy, 'aria-label': 'Session name', 'data-modal-autofocus': true,
+              onChange: e => setDraft(e.target.value), onKeyDown: e => { if (e.key === 'Enter' && !e.nativeEvent.isComposing && draft.trim()) rename() } }),
+            dialog === 'archive' && h('p', null, `“${title}” still has running tasks. Continuing will stop those tasks and archive the session.`),
+            error && h('p', { role: 'alert' }, error)))
+      }
+
+      ctx.slots.inject('sidebar.footer.action', () => {
+        let unregister, current
+        const sync = () => {
+          const name = ctx.slots.spec('sidebar.workspaces.before') ? 'sidebar.workspaces.before' : 'sidebar.footer.action'
+          if (name === current) return
+          unregister?.()
+          current = name
+          unregister = ctx.slots.register({ name, id: '@yiliang114/dsh-session-deck.switch', order: 0, label: 'Session view' },
+            name === 'sidebar.workspaces.before' ? function NavigationSwitch(props) {
+              return h('div', { style: { flexShrink: 0, padding: props.wide ? '8px 12px' : '8px 4px' } }, h(Switch, props))
+            } : FooterNavigation)
+        }
+        sync()
+        const unsubscribe = ctx.slots.subscribe('sidebar.workspaces.before', sync)
+        return () => { unsubscribe(); unregister?.() }
+      })
+      ctx.slots.inject('sidebar.workspaces', () => {
+        let unregister
+        const sync = () => {
+          if (mode.getSnapshot() !== 'workspace' && !unregister) unregister = ctx.slots.register({ name: 'sidebar.workspaces', priority: -100 }, Activity)
+          if (mode.getSnapshot() === 'workspace' && unregister) { unregister(); unregister = undefined }
+        }
+        sync()
+        const unsubscribe = mode.subscribe(sync)
+        return () => { unsubscribe(); unregister?.() }
+      })
+    }
+    return { inject: ['slots', 'uiWorkspace', 'sessions'], apply, __test__: { mountNavigationHost, selectActivity, createModeStore, createPendingStore, ago, KEY, PENDING_KEY, MAX_RECORDS } }
+  },
+})

package/package.json

@@ -1,6 +1,50 @@
 {
   "name": "@yiliang114/dsh-session-deck",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.2",
+  "license": "MIT",
+  "author": "yiliang114",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": ["dsh-plugin", "deepseek-harness", "sidebar", "sessions", "session-management", "favorites", "ai-agents"],
+  "type": "module",
+  "description": "Activity and Favorites views for DeepSeek Harness: track running, waiting, and unread sessions across workspaces.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yiliang114/dsh-session-deck.git"
+  },
+  "homepage": "https://github.com/yiliang114/dsh-session-deck#readme",
+  "bugs": {
+    "url": "https://github.com/yiliang114/dsh-session-deck/issues"
+  },
+  "engines": {
+    "node": ">=22",
+    "dsh": "0.2.1-rc.2"
+  },
+  "exports": {
+    ".": "./src/host.mjs",
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": ["src", "lib", "scripts/patch-sidebar-before.mjs", "cordis.patch.yml", "README.md"],
+  "scripts": {
+    "build": "node --check src/host.mjs && node --check lib/client.js && node --check scripts/patch-sidebar-before.mjs && node --check scripts/check-package.mjs && node --check scripts/update-market-index.mjs && node --check scripts/verify-published.mjs",
+    "market:update": "node scripts/update-market-index.mjs",
+    "test": "node --test test/*.test.mjs",
+    "check:package": "node scripts/check-package.mjs",
+    "verify": "npm run build && npm test && npm run check:package"
+  },
+  "dsh": {
+    "bundle": {"patch": "./cordis.patch.yml"},
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-ui-session",
+        "@deepseek-ai/dsh-client-ui-workspace"
+      ]
+    }
+  }
+}

package/scripts/patch-sidebar-before.mjs

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+// Local, reversible compatibility extension for the published sidebar bundle.
+import { readFileSync, writeFileSync, existsSync, unlinkSync } from 'node:fs'
+import { resolve, join } from 'node:path'
+
+const args = process.argv.slice(2)
+const rollback = args.includes('--rollback')
+const target = args.find(arg => !arg.startsWith('--'))
+if (!target) throw new Error('Usage: node scripts/patch-sidebar-before.mjs <sidebar-package-directory> [--rollback]')
+const root = resolve(target)
+const version = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).version
+if (version !== '0.2.1-rc.2') throw new Error(`Unsupported sidebar version ${version}; review the extension against the new public contract first`)
+const changes = [
+  ['lib/client.js', [
+    ['\t\t\t\t\t(0, react_jsx_runtime.jsx)("div", {\n\t\t\t\t\t\tclassName: SidebarRoot_module_css_default.regionArea,', '\t\t\t\t\trenderSlot("sidebar.workspaces.before", { wide }),\n\t\t\t\t\t(0, react_jsx_runtime.jsx)("div", {\n\t\t\t\t\t\tclassName: SidebarRoot_module_css_default.regionArea,'],
+    ['\t\t\t\t\t"sidebar.workspaces": {', '\t\t\t\t\t"sidebar.workspaces.before": {\n\t\t\t\t\t\tkind: "list",\n\t\t\t\t\t\tscope: "root"\n\t\t\t\t\t},\n\t\t\t\t\t"sidebar.workspaces": {'],
+  ]],
+  ['lib/types/client/contract/slots.d.ts', [
+    ["        'sidebar.workspaces': {", "        /** Additive controls after all global panel rows, before the browsing region. */\n        'sidebar.workspaces.before': {\n            kind: 'list';\n            scope: 'root';\n            owner: SidebarFooterActionOwnerProps;\n        };\n        'sidebar.workspaces': {"],
+    ["'sidebar.panellist' | 'sidebar.workspaces'", "'sidebar.panellist' | 'sidebar.workspaces.before' | 'sidebar.workspaces'"],
+  ]],
+]
+const plans = changes.map(([relative, replacements]) => {
+  const path = join(root, relative), backup = `${path}.dsa-before.backup`
+  const current = readFileSync(path, 'utf8')
+  const original = existsSync(backup) ? readFileSync(backup, 'utf8') : current
+  let patched = original
+  for (const [before, after] of replacements) {
+    if (patched.split(before).length !== 2 || patched.includes(after)) throw new Error(`Unknown or already modified anchor: ${relative}`)
+    patched = patched.replace(before, after)
+  }
+  if (current !== original && current !== patched) throw new Error(`Concurrent modification: ${relative}; refusing to overwrite`)
+  if (rollback && !existsSync(backup)) throw new Error(`No backup: ${relative}`)
+  return { path, backup, original, patched }
+})
+// Validate every target before changing either file. Backups preserve exact original bytes.
+for (const { path, backup, original, patched } of plans) {
+  if (rollback) {
+    writeFileSync(path, original)
+    // backup is the checked absolute sibling of the target above.
+    unlinkSync(backup)
+  } else {
+    if (!existsSync(backup)) writeFileSync(backup, original, { flag: 'wx' })
+    writeFileSync(path, patched)
+  }
+  console.log(`${rollback ? 'Restored' : 'Patched'} ${path}`)
+}

package/src/host.mjs

@@ -0,0 +1,3 @@
+// Client-only feature; host entry keeps the plugin bundle discoverable.
+export const name = '@yiliang114/dsh-session-deck'
+export function apply() {}