dsh-git-badge 0.19.0 → 0.20.1

package/package.json

@@ -1,12 +1,11 @@
 {
   "name": "dsh-git-badge",
-  "version": "0.19.0",
-  "description": "Git status badges for DeepSeek Harness: an input-row chip on every install, plus sidebar session-row badges (git status, PR/CI action tokens) after one manual step: `npx dsh-git-badge apply`, then restart dsh web. Event-driven freshness over SSE.",
+  "version": "0.20.1",
+  "description": "Git status badges for DeepSeek Harness: an input-row chip and a sidebar session-row action glyph, on every install — no patch and no manual step. Event-driven freshness over SSE.",
   "type": "module",
   "main": "lib/index.js",
   "bin": {
-    "dsh-git-badge": "seam/apply.js",
-    "dsh-git-badge-seam": "seam/apply.js",
+    "dsh-git-badge": "seam/cli.js",
     "dsh-git-badge-checkout": "seam/checkout.js"
   },
   "exports": {
@@ -15,8 +14,7 @@
     "./package.json": "./package.json"
   },
   "scripts": {
-    "test": "node --test",
-    "postinstall": "node seam/postinstall.js"
+    "test": "node --test"
   },
   "dsh": {
     "bundle": {
@@ -53,14 +51,10 @@
     "lib/client.js",
     "lib/index.js",
     "package.json",
-    "seam/anchors.js",
-    "seam/apply.js",
     "seam/checkout.js",
-    "seam/patch.js",
-    "seam/postinstall.js",
+    "seam/cli.js",
     "seam/skill.js",
     "seam/store.js",
-    "seam/stub-index.js",
     "skill/gh/SKILL.md"
   ],
   "dependencies": {

package/seam/checkout.js

@@ -17,7 +17,7 @@
  *           npx dsh-git-badge checkout --clear    forget this session
  *
  *   (npx can only reach the bin named after the package; the checkout verb
- *   dispatches to this file from apply.js. The legacy bin name
+ *   dispatches to this file from cli.js. The legacy bin name
  *   dsh-git-badge-checkout still works when invoked directly.)
  *
  * The path is validated as a real worktree of its repository before it is

package/seam/cli.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+/**
+ * dsh-git-badge CLI — the worktree-checkout registration command.
+ *
+ * The badge needs no patch, so this tool has ONE job: register the checkout a
+ * session is working in. That is the one fact DSH cannot supply — a session's
+ * cwd is immutable creation metadata and is always the main checkout, so a
+ * session doing its work in a linked `git worktree` is invisible without an
+ * explicit registration.
+ *
+ * The plugin ships this file as the package-name bin, because npx only auto-runs
+ * a bin whose name matches the package:
+ *
+ *     npx dsh-git-badge checkout <path>
+ *     npx dsh-git-badge checkout --clear
+ *
+ * The `dsh-git-badge-checkout` bin invokes checkout.js directly, for callers
+ * that want the verb-less form. The `/gh` skill is installed by the plugin
+ * itself at boot (see lib/index.js), not here.
+ *
+ * Usage: dsh-git-badge checkout <path|--clear>
+ */
+const verb = process.argv[2];
+if (verb === "checkout") {
+	// Strip the verb so checkout.js sees argv[2] = <path|--clear>.
+	process.argv.splice(2, 1);
+	await import("./checkout.js");
+	process.exit(0); // checkout's success path returns; every failure path exits inside
+}
+console.error("usage: dsh-git-badge checkout <path|--clear>");
+process.exit(1);

package/seam/skill.js

@@ -17,14 +17,14 @@ import { fileURLToPath } from "node:url";
 
 const HERE = dirname(fileURLToPath(import.meta.url));
 
-export const SKILL_NAME = "gh";
+const SKILL_NAME = "gh";
 
 /** The user-level skills catalog — DSH_HOME honours the harness override. */
-export function skillsDir() {
+function skillsDir() {
 	return join(process.env.DSH_HOME || join(process.env.HOME || "", ".dsh"), "skills");
 }
 
-export function skillSource() {
+function skillSource() {
 	return join(HERE, "..", "skill", "gh", "SKILL.md");
 }
 

package/seam/store.js

@@ -1,83 +1,22 @@
 /**
- * Two out-of-band stores live here, both keyed files under dataDir():
+ * The session-checkout store — one keyed file under dataDir():
  *
- *   restart-pending.json    install/applied a host patch → the UI offers a restart
  *   session-checkouts.json  which checkout a SESSION is working in — the one
  *                           fact dsh cannot supply (a session's cwd is immutable
  *                           creation metadata and always the main checkout, so a
  *                           session working in a linked worktree is invisible
  *                           without an explicit registration)
- *
- * The restart-pending marker — the bridge from install-time (node side) to the
- * running UI.
- *
- * WHY IT EXISTS: dshmarket's pending-restart banner tracks its own package
- * bookkeeping. A postinstall that patches the DSH HOST package
- * (dsh-client-ui-workspace) mutates files outside that bookkeeping, so the
- * market can complete "restart-free" while the host's composed client bundles
- * no longer match the files on disk. The marker is the out-of-band signal:
- *
- *   postinstall / apply / revert  → write the marker (seam changed on disk)
- *   plugin node half, at boot     → clear the marker (fresh boot composed the
- *                                   new bytes; the change is live)
- *   plugin client half            → while the marker is served on the status
- *                                   response, offer a Restart button calling
- *                                   dshmarket's public v1 restart endpoint
- *
- * The hot-mount path is what makes this work on a FIRST market install: the
- * freshly installed plugin's client half mounts into the running shell, reads
- * the marker through the status response, and can restart the host — even
- * though the process that installed the patch is gone.
  */
 
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-/** The stable backup store — same default apply.js uses; SEAM_DATA_DIR overrides. */
-export function dataDir() {
+/** The stable store directory — SEAM_DATA_DIR overrides. */
+function dataDir() {
 	if (process.env.SEAM_DATA_DIR) return process.env.SEAM_DATA_DIR;
 	return join(process.env.DSH_HOME || join(process.env.HOME || "", ".dsh"), "git-badge-seam");
 }
 
-function markerPath() {
-	return join(dataDir(), "restart-pending.json");
-}
-
-/**
- * Record that DSH files were changed on disk and a restart is needed to
- * compose them. `reason` is a one-word actor (postinstall | apply | revert).
- */
-export function writeRestartMarker(reason) {
-	try {
-		mkdirSync(dataDir(), { recursive: true });
-		writeFileSync(
-			markerPath(),
-			JSON.stringify({ schema: "dsh-git-badge/restart-pending/v1", by: reason, at: new Date().toISOString() }),
-			"utf8",
-		);
-	} catch {
-		// The marker is a UX nicety; never fail the operation that earned it.
-	}
-}
-
-/** The pending marker, or null. Never throws. */
-export function readRestartMarker() {
-	try {
-		if (!existsSync(markerPath())) return null;
-		return JSON.parse(readFileSync(markerPath(), "utf8"));
-	} catch {
-		return null;
-	}
-}
-
-/** The change is live — a new boot composed it. Clear the pending state. */
-export function clearRestartMarker() {
-	try {
-		rmSync(markerPath(), { force: true });
-	} catch {
-		// Absent is the goal; any error leaves the marker to be cleared later.
-	}
-}
 /** How long a session-checkout registration stays trustworthy. */
 export const SESSION_CHECKOUT_TTL_MS = 24 * 60 * 60 * 1000;
 
@@ -85,6 +24,13 @@ function sessionCheckoutsPath() {
 	return join(dataDir(), "session-checkouts.json");
 }
 
+const SCHEMA = "dsh-git-badge/session-checkout/v1";
+
+/** Write the whole store in one place — the schema lives beside this call. */
+function persist(sessions) {
+	writeFileSync(sessionCheckoutsPath(), JSON.stringify({ schema: SCHEMA, sessions }), "utf8");
+}
+
 /** Every registration, `{ sessionId: { path, at } }`. Never throws.
  *
  * `file` overrides the store path — the test seam lib/index.js uses (its
@@ -119,7 +65,7 @@ export function writeSessionCheckout(sessionId, path) {
 		mkdirSync(dataDir(), { recursive: true });
 		const sessions = readSessionCheckouts();
 		sessions[sessionId] = { path, at: new Date().toISOString() };
-		writeFileSync(file, JSON.stringify({ schema: "dsh-git-badge/session-checkout/v1", sessions }), "utf8");
+		persist(sessions);
 		return { ok: true, file };
 	} catch (error) {
 		return { ok: false, file, error: String(error?.message ?? error), code: String(error?.code ?? "") };
@@ -130,15 +76,10 @@ export function writeSessionCheckout(sessionId, path) {
 export function clearSessionCheckout(sessionId) {
 	try {
 		const sessions = readSessionCheckouts();
-		if (!(sessionId in sessions)) return true;
+		if (!(sessionId in sessions)) return;
 		delete sessions[sessionId];
-		writeFileSync(
-			sessionCheckoutsPath(),
-			JSON.stringify({ schema: "dsh-git-badge/session-checkout/v1", sessions }),
-			"utf8",
-		);
-		return true;
+		persist(sessions);
 	} catch {
-		return false;
+		// forgetting is best-effort: the registration expires on its own
 	}
 }

package/skill/gh/SKILL.md

@@ -30,16 +30,27 @@ unstaged / untracked / unmerged), plus any in-progress operation marker
   match wins: resume a paused operation (`git merge --continue`,
   `git rebase --continue`, …; a squash merge concludes with `git commit`);
   resolve unmerged files only WITH the user; `git pull --ff-only` when behind;
-  `git push -u origin <branch>` when there is no upstream; `git push` when
-  ahead; stage and commit when dirty (`git commit` if work is already staged,
+  `git push -u origin <branch>` when there is no upstream OR the upstream names
+  a different branch (a feature branch still tracking `origin/main` is the common
+  case); `git push` when ahead of a same-named upstream; stage and commit when
+  dirty (`git commit` if work is already staged,
   `git add -p && git commit` for unstaged edits, `git add -A && git commit`
   only for untracked-only changes, which `add -p` cannot see); `gh pr checks
   <n> --watch` when CI fails. Clean and synced → say so and stop.
 
-- **`/gh push`** — `git push`. If there is no upstream, `git push -u origin
-  <branch>`. If the push is rejected as non-fast-forward, STOP and ask: offer
-  `--force-with-lease` as the option, never plain `--force`, and never without
-  an explicit yes.
+  Three first-match cases have no verb of their own and belong to the row's
+  triage: a pull request whose `mergeState` is `DIRTY` (base conflict),
+  `review` `CHANGES_REQUESTED` (address the review), or `review`
+  `REVIEW_REQUIRED` (wait for the reviewer). Report which PR it is and what
+  it needs; do not invent a command for it.
+
+- **`/gh push`** — `git push` when the upstream shares the branch name. If there
+  is no upstream, OR the upstream names a different branch (a feature branch
+  tracking `origin/main` is the common case), run `git push -u origin <branch>`:
+  a bare `git push` is refused there under the default `push.default=simple`, and
+  `-u` publishes under the branch's own name and repairs the tracking. If the
+  push is rejected as non-fast-forward, STOP and ask: offer `--force-with-lease`
+  as the option, never plain `--force`, and never without an explicit yes.
 
 - **`/gh pr`** — create a pull request for the current branch: push first if
   needed, then `gh pr create` with a title from the branch's commits and a body
@@ -114,7 +125,9 @@ unstaged / untracked / unmerged), plus any in-progress operation marker
   When the request comes through the agent instead, read the current value from
   the settings document (`~/.dsh/settings.yaml`, the `git-badge:` section) and
   change that `order` list — any subset, any order; unlisted categories rank
-  after in default order. Never invent categories. The older
+  after in default order. The categories are `operation`, `unmerged`,
+  `conflict`, `review`, `sync`, `publish`, `merge`, `commit` and `checks`.
+  Never invent categories. The older
   `~/.dsh/git-badge-next.json` is only a fallback for hosts without the
   settings stack; do not edit it when the namespace is present. Typical
   invocations: "/gh order commit first", "/gh order never suggest checks

package/seam/anchors.js

@@ -1,105 +0,0 @@
-/**
- * The seam patch as anchor pairs — the single definition of the patch.
- *
- * Every entry is [name, old, new]: `old` must occur EXACTLY ONCE in the target
- * client.js, and is replaced by `new`. apply.js runs these against the INSTALLED
- * file in place; the repo's seam/make-patch.sh runs them against the pinned
- * pristine snapshot to regenerate patched-client.js for the upstream-PR diff
- * only.
- *
- * This replaces the old whole-file hash guard: a DSH update that changes
- * anything outside these blocks no longer invalidates the patch. Only a change
- * that moves one of the anchors does — and the failure names the anchor that
- * moved instead of reporting an opaque hash mismatch.
- *
- * ONE seam, not two (rev 3). Upstream 0.2.0-rc.2 threads `renderSlot` into
- * SessionNodeItem and SessionHoverContent itself and declares its own
- * `sidebar.session.row.hover` hover-card seat, so the badge's provenance line
- * rides that upstream seat and needs no patch. The seat upstream still lacks is
- * the always-visible row token after the title: these three anchors add it.
- *
- * Tabs matter: the target is a bundled, tab-indented file. The strings below
- * use \t escapes so a reader cannot mistake them for spaces. When upstream
- * moves an anchor, edit that entry's `old` (and `new`, if the insertion point
- * changed) to the new upstream text — the drift report names which one.
- */
-
-export const MARKER = "dsh-git-badge:seam-patch";
-// Bumped whenever the anchor set changes shape. An installed file carrying the
-// MARKER without this revision is OUR older artifact: apply restores its backup
-// and re-patches rather than refusing.
-export const PATCH_REV = "3";
-export const REV_COMMENT = `${MARKER} rev ${PATCH_REV}`;
-
-// The seam strings upstream would declare if the patch were merged. Present in
-// a file that is NOT ours => upstream landed; the patch is a no-op.
-export const SEAM_STRINGS = [
-	'"sidebar.workspaces.sessionRow"',
-	'"sidebar.workspaces.sessionRow.detail"',
-	'"sidebar.workspaces.row"', // the pre-session-row seam, also upstream's if landed
-];
-
-export const PATCHES = [
-	// --- 1. Session-row seam helper, inserted with the row component's props ---
-	[
-		"SessionNodeItem header + seam helpers",
-		"\t\tfunction SessionNodeItem({ node, currentId, now, onOpen, onRenameRequest, renderSlot, onReveal, drag, t }) {",
-		"\t\t/* dsh-git-badge:seam-patch rev 3 — seam/apply.sh recognises its own artifact by this\n\t\t * marker, which upstream would never carry. */\n\t\t/**\n\t\t* Seam entry boundary. The host wraps each registered ENTRY in its own error\n\t\t* boundary, but the outlet a row renders is NOT covered by it, so a throw\n\t\t* anywhere in an occupant's render path would propagate into the workspace\n\t\t* browser itself — and the shell ABDICATES that browser entry, blanking the\n\t\t* whole sidebar. A seam must not be able to do that: this keeps the blast\n\t\t* radius at \"no badge\", and logs what happened instead of swallowing it.\n\t\t*/\n\t\tclass SeamBoundary extends react.Component {\n\t\t\tconstructor(props) {\n\t\t\t\tsuper(props);\n\t\t\t\tthis.state = { failed: false };\n\t\t\t}\n\t\t\tstatic getDerivedStateFromError() {\n\t\t\t\treturn { failed: true };\n\t\t\t}\n\t\t\tcomponentDidCatch(error) {\n\t\t\t\tconsole.error(\"[dsh-git-badge] seam entry failed; badge omitted:\", error);\n\t\t\t}\n\t\t\trender() {\n\t\t\t\treturn this.state.failed ? null : this.props.children;\n\t\t\t}\n\t\t}\n\t\t/** Seam entry body, so the boundary above ENCLOSES the renderSlot call. */\n\t\tfunction SessionRowSeam({ renderSlot, sessionId, label }) {\n\t\t\treturn renderSlot(\"sidebar.workspaces.sessionRow\", { sessionId, label });\n\t\t}\n\t\t/**\n\t\t* Session-row seam (sidebar.workspaces.sessionRow): renders the additive\n\t\t* list-slot entries for one session row with the row owner share\n\t\t* ({ sessionId, label }).\n\t\t*\n\t\t* Returns null — not a fallback element — when no plugin occupies the seam,\n\t\t* so a pristine install renders exactly as upstream.\n\t\t*/\n\t\tfunction renderSessionRowSeam(renderSlot, sessionId, label) {\n\t\t\tif (renderSlot === void 0) return null;\n\t\t\treturn (0, react_jsx_runtime.jsx)(SeamBoundary, {\n\t\t\t\tchildren: (0, react_jsx_runtime.jsx)(SessionRowSeam, { renderSlot, sessionId, label })\n\t\t\t});\n\t\t}\n\t\tfunction SessionNodeItem({ node, currentId, now, onOpen, onRenameRequest, renderSlot, onReveal, drag, t }) {"
-	],
-	// --- 2. The token sits with the title, before the time cluster ---
-	[
-		"title span + badge render",
-		"\t\t\t\t\t\t(0, react_jsx_runtime.jsx)(\"span\", {\n\t\t\t\t\t\t\tref: titleRef,\n\t\t\t\t\t\t\tclassName: Rows_module_css_default.title,\n\t\t\t\t\t\t\tonDoubleClick: row.blank ? void 0 : (e) => {\n\t\t\t\t\t\t\t\te.stopPropagation();\n\t\t\t\t\t\t\t\tonRenameRequest(node.id, row.title);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tchildren: title\n\t\t\t\t\t\t}),",
-		"\t\t\t\t\t\t(0, react_jsx_runtime.jsx)(\"span\", {\n\t\t\t\t\t\t\tref: titleRef,\n\t\t\t\t\t\t\tclassName: Rows_module_css_default.title,\n\t\t\t\t\t\t\tonDoubleClick: row.blank ? void 0 : (e) => {\n\t\t\t\t\t\t\t\te.stopPropagation();\n\t\t\t\t\t\t\t\tonRenameRequest(node.id, row.title);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tchildren: title\n\t\t\t\t\t\t}),\n\t\t\t\t\t\trenderSessionRowSeam(renderSlot, node.id, title),"
-	],
-	// --- 3. Declare the one seam child on the sidebar.workspaces registration ---
-	[
-		"seam children registration",
-		"\t\t\t\t\t\"sidebar.workspaces.directoryFlow\": {\n\t\t\t\t\t\tkind: \"single\",\n\t\t\t\t\t\tscope: \"root\"\n\t\t\t\t\t},",
-		"\t\t\t\t\t\"sidebar.workspaces.directoryFlow\": {\n\t\t\t\t\t\tkind: \"single\",\n\t\t\t\t\t\tscope: \"root\"\n\t\t\t\t\t},\n\t\t\t\t\t\"sidebar.workspaces.sessionRow\": {\n\t\t\t\t\t\tkind: \"list\",\n\t\t\t\t\t\tscope: \"root\"\n\t\t\t\t\t},"
-	],
-];
-
-export function anchorCounts(text) {
-	return Object.fromEntries(PATCHES.map(([name, old]) => [name, text.split(old).length - 1]));
-}
-
-export function firstFailure(text) {
-	for (const [name, old] of PATCHES) {
-		const n = text.split(old).length - 1;
-		if (n !== 1) return { name, count: n };
-	}
-	return null;
-}
-
-export function applyPatch(text) {
-	for (const [name, old] of PATCHES) {
-		const n = text.split(old).length - 1;
-		if (n !== 1) {
-			throw new Error(
-				`anchor ${JSON.stringify(name)} found ${n} times (need exactly 1) — upstream drift; nothing was patched`
-			);
-		}
-	}
-	for (const [, old, replacement] of PATCHES) text = text.replace(old, replacement);
-	return text;
-}
-
-export function isOurs(text) {
-	return text.includes(MARKER);
-}
-
-export function isCurrentRev(text) {
-	return text.includes(REV_COMMENT);
-}
-
-export function seamPresent(text) {
-	return SEAM_STRINGS.some((s) => text.includes(s));
-}
-
-/** A patched file's applied signature (the `old` anchor forms are gone — that is the point). */
-export function appliedSignature(text) {
-	return (
-		seamPresent(text) && text.includes("function renderSessionRowSeam") && text.includes("class SeamBoundary")
-	);
-}

package/seam/apply.js

@@ -1,243 +0,0 @@
-#!/usr/bin/env node
-/**
- * dsh-git-badge-seam — apply / revert / inspect the sidebar session-row seam
- * patch on an installed DSH package.
- *
- * WHY THIS EXISTS: the sidebar session-row badges need a slot the DSH workspace
- * browser does not declare upstream yet (proposed upstream — see PR.md in the
- * plugin's repository). The patch is SEAM-ONLY; all badge logic lives in the
- * dsh-git-badge plugin itself. This tool is shipped IN the package, so a market
- * install needs no clone:
- *
- *     dsh plugin --profile web add dsh-git-badge
- *     npx dsh-git-badge apply        # then restart the dsh web process
- *
- * HOW PATCHING WORKS — anchors, not hashes. The patch is defined once in
- * anchors.js as [name, old, new] triples; the mechanics (locating the install,
- * inspecting its state, writing the patch and its backup) live once in
- * patch.js, shared with the postinstall hook. This file is the CLI: it decides
- * what to print and which exit codes to take, per the states inspect() names.
- *
- * Safety (enforced in patch.js + anchors.js, surfaced here):
- *   - anchor assertion: every anchor must match exactly once; anything else is
- *     drift and NOTHING is written
- *   - own-artifact detection: every artifact carries the dsh-git-badge:seam-patch
- *     marker (with a rev number), so our stale patch can be upgraded in place
- *     while a genuine upstream landing (seam declared, no marker) is left alone
- *   - backup of the bytes as found: revert restores exactly what was installed
- *     before WE patched, guarded against downgrading a newer upstream build
- *   - the pinned KNOWN_GOOD_HASH is ADVISORY only: status reports whether the
- *     installed build is the one the anchors were verified against, but apply
- *     proceeds on any build whose anchors resolve
- *
- * Environment (read by patch.js):
- *   DSH_INSTALL    the DSH package root. Default: `<global npm root>/@deepseek-ai/dsh`.
- *   SEAM_DATA_DIR  where revert backups are written. Default:
- *                  `$DSH_HOME/git-badge-seam` (else `~/.dsh/git-badge-seam`) —
- *                  a stable, user-level store shared by every way this tool
- *                  can run. See seam/store.js for the restart marker.
- *
- * The package also declares this file under the package's own name
- * (bin "dsh-git-badge"), because npx only auto-runs a bin whose name matches
- * the package name: `npx dsh-git-badge apply` resolves, while
- * `npx dsh-git-badge-seam` 404s (no PACKAGE carries that name). The alias
- * multiplexes the checkout bin too — npx cannot reach a second bin by name,
- * so the checkout verb dispatches here:
- *
- * Usage: npx dsh-git-badge apply | revert | status | checkout <path|--clear>
- *        (equivalently apply.js <verb>; checkout delegates to checkout.js)
- */
-import { copyFileSync, existsSync } from "node:fs";
-import { MARKER } from "./anchors.js";
-import { backupState, doPatch, doRestore, installPaths, inspect, KNOWN_GOOD_HASH, revertPlan } from "./patch.js";
-import { installSkill } from "./skill.js";
-import { writeRestartMarker } from "./store.js";
-
-const VERDICT_EXIT_1 = new Set(["drift", "unreadable", "missing", "ours-corrupt"]);
-
-const verb = process.argv[2];
-if (verb === "checkout") {
-	// alias-bin multiplex: strip the verb so checkout.js sees argv[2] = <path|--clear>
-	process.argv.splice(2, 1);
-	await import("./checkout.js");
-	process.exit(0); // checkout's success path returns; every failure path exits inside
-}
-
-const paths = installPaths();
-if (paths === null) {
-	console.error("ERROR: cannot locate the DSH package. Set DSH_INSTALL to its root");
-	console.error("(e.g. the directory containing node_modules/@deepseek-ai/dsh).");
-	process.exit(1);
-}
-const CLIENT = paths.client;
-
-if (!verb || !["apply", "revert", "status"].includes(verb)) {
-	console.error("usage: dsh-git-badge apply|revert|status   (or: dsh-git-badge checkout <path|--clear>)");
-	process.exit(1);
-}
-
-// keep the /gh skill in step with the package on every patcher run
-console.log(`[dsh-git-badge] gh skill: ${installSkill()}`);
-
-if (verb === "status") {
-	const r = inspect(paths);
-	console.log(`installed:  ${CLIENT}`);
-	console.log(`hash:       ${r.hash ?? r.error ?? "-"}`);
-	if (r.known_good_match === "yes") console.log("pinned:     KNOWN-GOOD MATCH — the build the anchors were verified against");
-	else console.log(`pinned:     ${KNOWN_GOOD_HASH} — differs (advisory only; anchors are the guard)`);
-	console.log(`anchors:    ${r.anchors ?? "-"}`);
-	if (r.anchors === "drift") console.log(`            ${r.anchor_fail}`);
-	console.log(`marker:     ${r.marker ?? "-"} (rev current: ${r.rev_current ?? "-"}, applied signature: ${r.applied_signature ?? "n/a"})`);
-	console.log(`backup:     ${r.backup ?? "-"}`);
-	console.log(`state:      ${r.state}`);
-	switch (r.state) {
-		case "ours-current":
-			console.log("verdict:    PATCHED — sidebar session-row badges come from this repo's patch.");
-			break;
-		case "ours-stale":
-			console.log("verdict:    PATCHED, OUT OF DATE — our older artifact; 'apply' upgrades in place.");
-			break;
-		case "ours-corrupt":
-			console.log("verdict:    BROKEN ARTIFACT — marker present but anchors/seam inconsistent. Inspect by hand.");
-			break;
-		case "upstream-landed":
-			console.log("verdict:    UPSTREAM LANDED — 'apply' no-ops; the patch can be retired.");
-			break;
-		case "patchable":
-			console.log("verdict:    PATCHABLE — 'apply' will patch it in place.");
-			break;
-		case "drift":
-			console.log("verdict:    DRIFT — an anchor moved; update seam/anchors.js for the new upstream.");
-			break;
-		case "missing":
-			console.log("verdict:    INSTALLED PACKAGE NOT FOUND — check DSH_INSTALL.");
-			break;
-		default:
-			console.log(`verdict:    ${r.state.toUpperCase()} — see error above.`);
-	}
-	// Whether `revert` would act or refuse, reported BEFORE anyone needs it. The
-	// refusal can be about a backup that lives in a different store than the one
-	// being inspected, so revert time is the wrong moment to learn about it.
-	const plan = revertPlan(paths);
-	const revertLine =
-		plan.action === "refuse"
-			? `would REFUSE — ${plan.reason}`
-			: plan.action === "noop"
-				? `nothing to do — ${plan.reason}`
-				: `would restore the bytes as found — ${plan.reason}`;
-	console.log(`revert:     ${revertLine}`);
-	process.exit(VERDICT_EXIT_1.has(r.state) ? 1 : 0);
-}
-
-if (verb === "apply") {
-	const r = inspect(paths);
-	for (const [k, v] of Object.entries(r)) {
-		if (k !== "state") console.log(`  ${k}=${v}`);
-	}
-	console.log(`installed:  ${CLIENT}`);
-	switch (r.state) {
-		case "ours-current":
-			console.log("verdict:    PATCHED (rev current) — nothing to do.");
-			break;
-		case "patchable":
-			doPatch(paths, "apply");
-			console.log("patched lib/client.js in place (anchors applied); host half stubbed.");
-			console.log("verdict:    PATCHED.");
-			break;
-		case "ours-stale": {
-			// Our older artifact. The re-patch target is the BACKUP (the bytes as we
-			// found them pre-patch). Validate THAT before touching the installed
-			// file: restoring a backup whose anchors no longer resolve would
-			// overwrite the installed build with an unpatchable older one.
-			if (!existsSync(paths.backupClient)) {
-				console.error("REFUSING: installed file is an older artifact of ours but no backup");
-				console.error("exists, so the original bytes are unknown. Reinstall the package or");
-				console.error("restore the backup by hand, then re-run apply.");
-				process.exit(1);
-			}
-			const bstate = backupState(paths);
-			if (bstate !== "patchable") {
-				console.error(`REFUSING: the backup (bytes as found before patching) is '${bstate}',`);
-				console.error("not patchable — the anchors no longer match the backed-up upstream.");
-				console.error("Nothing was changed. Reinstall the DSH package, then re-run apply.");
-				process.exit(1);
-			}
-			doRestore(paths);
-			doPatch(paths, "apply");
-			console.log("patched lib/client.js in place (anchors applied); host half stubbed.");
-			console.log("verdict:    UPGRADED — older artifact replaced with the current patch.");
-			break;
-		}
-		case "upstream-landed":
-			console.error("verdict:    UPSTREAM LANDED — the installed client.js declares the seam");
-			console.error("and is NOT this repo's artifact. Patch skipped (plugin only); the patch");
-			console.error("can be retired.");
-			break;
-		case "drift": {
-			const [name, count] = r.anchor_fail.split(":");
-			console.error("REFUSING: anchor drift — nothing was written.");
-			console.error(`  anchor:   ${name} (found ${count} times, need exactly 1)`);
-			console.error("Upstream changed code this patch anchors on. Update the matching entry");
-			console.error("in anchors.js, then re-run: dsh-git-badge status && dsh-git-badge apply");
-			process.exit(1);
-		}
-		case "ours-corrupt":
-			console.error("REFUSING: the installed file carries this repo's marker but is neither");
-			console.error("the current revision nor a restorable state. Inspect by hand:");
-			console.error(`  grep -n '${MARKER}' "${CLIENT}"`);
-			process.exit(1);
-			break;
-		default:
-			console.error(`REFUSING: installed client.js is '${r.state}'.`);
-			process.exit(1);
-	}
-	console.log(`now install the plugin:  dsh plugin --profile web add dsh-git-badge`);
-} else {
-	// revert — ONE decision (revertPlan), shared with the `status` report, so the
-	// refusal a user is warned about is the refusal they actually get.
-	const plan = revertPlan(paths);
-	const r = inspect(paths);
-	const ours = r.state === "ours-current" || r.state === "ours-stale" || r.state === "ours-corrupt";
-	const hasBackup = existsSync(paths.backupClient);
-
-	if (plan.action === "restore") {
-		doRestore(paths);
-		console.log("reverted client.js/index.js to the bytes as found before patching.");
-		// A revert also changes bytes the running bundles were composed from.
-		writeRestartMarker("revert");
-	} else if (plan.action === "noop") {
-		// Idempotent re-run: the installed bytes already ARE the backup.
-		console.log(`already reverted — ${plan.reason}; nothing to do.`);
-	} else if (hasBackup && ours) {
-		// The dangerous case: WE patched this build, but the backup beside it is
-		// from another upstream generation. Restoring it downgrades the package.
-		console.error("REFUSING to revert: the backup in this store is not a build this patch");
-		console.error(`targets — ${plan.reason}.`);
-		console.error("Restoring it would replace the installed build with an older upstream that the");
-		console.error("current anchors cannot re-apply. Nothing was changed.");
-		console.error("Revert from the store that patched this build instead — its `status` prints");
-		console.error("`revert:     would restore ...` — or reinstall the DSH package.");
-		process.exit(1);
-	} else if (hasBackup) {
-		// Installed file is not ours => upstream replaced it since patching.
-		console.error("REFUSING to revert: the installed client.js is not this repo's");
-		console.error(`artifact (state: ${r.state}). Restoring the backup would DOWNGRADE the`);
-		console.error("package. Nothing was changed. If the downgrade is really what you want,");
-		console.error(`restore ${paths.backupClient} by hand.`);
-		process.exit(1);
-	} else if (ours) {
-		console.error("REFUSING: the installed file is patched but no backup exists in");
-		console.error("the seam data dir, so the original bytes are unknown here. Options:");
-		console.error("  1. If you applied from a clone of the plugin's repository, run its");
-		console.error("     wrapper instead — it keeps its own backup:");
-		console.error("       <clone>/seam/apply.sh revert");
-		console.error("  2. Otherwise reinstall the package — pristine files, guaranteed:");
-		console.error("       npm i -g @deepseek-ai/dsh@latest");
-		process.exit(1);
-	} else {
-		console.log("no backup present and nothing of ours installed; client.js left untouched.");
-	}
-	// restore the no-op host half if no backup of the original exists
-	if (!existsSync(paths.backupIndex)) copyFileSync(paths.stub, paths.index);
-	console.log("remember to remove the plugin:  dsh plugin --profile web remove dsh-git-badge");
-}