dsh-git-badge 0.8.0 → 0.9.1

package/seam/anchors.js

@@ -0,0 +1,138 @@
+/**
+ * The seam patch as anchor pairs — the single definition of the patch.
+ *
+ * Every entry is [name, old, new]: `old` must occur EXACTLY ONCE in the target
+ * client.js, and is replaced by `new`. apply.js runs these against the INSTALLED
+ * file in place; the repo's seam/make-patch.sh runs them against the pinned
+ * pristine snapshot to regenerate patched-client.js for the upstream-PR diff
+ * only.
+ *
+ * This replaces the old whole-file hash guard: a DSH update that changes
+ * anything outside these blocks no longer invalidates the patch. Only a change
+ * that moves one of the anchors does — and the failure names the anchor that
+ * moved instead of reporting an opaque hash mismatch.
+ *
+ * Tabs matter: the target is a bundled, tab-indented file. The strings below
+ * use \t escapes so a reader cannot mistake them for spaces. When upstream
+ * moves an anchor, edit that entry's `old` (and `new`, if the insertion point
+ * changed) to the new upstream text — the drift report names which one.
+ */
+
+export const MARKER = "dsh-git-badge:seam-patch";
+// Bumped whenever the anchor set changes shape. An installed file carrying the
+// MARKER without this revision is OUR older artifact: apply restores its backup
+// and re-patches rather than refusing.
+export const PATCH_REV = "2";
+export const REV_COMMENT = `${MARKER} rev ${PATCH_REV}`;
+
+// The seam strings upstream would declare if the patch were merged. Present in
+// a file that is NOT ours => upstream landed; the patch is a no-op.
+export const SEAM_STRINGS = [
+	'"sidebar.workspaces.sessionRow"',
+	'"sidebar.workspaces.sessionRow.detail"',
+	'"sidebar.workspaces.row"', // the pre-session-row seam, also upstream's if landed
+];
+
+export const PATCHES = [
+	// --- 1. Session-row seam helper, inserted with the row component's props ---
+	[
+		"SessionNodeItem header + seam helpers",
+		"\t\tfunction SessionNodeItem({ node, currentId, now, onOpen, onRename, onFork, onArchive, onReveal, drag, flat = false, t }) {",
+		"\t\t/* dsh-git-badge:seam-patch rev 2 — seam/apply.sh recognises its own artifact by this\n\t\t * marker, which upstream would never carry. */\n\t\t/**\n\t\t* Seam entry boundary. The host wraps each registered ENTRY in its own error\n\t\t* boundary, but the outlet a row renders is NOT covered by it, so a throw\n\t\t* anywhere in an occupant's render path would propagate into the workspace\n\t\t* browser itself — and the shell ABDICATES that browser entry, blanking the\n\t\t* whole sidebar. A seam must not be able to do that: this keeps the blast\n\t\t* radius at \"no badge\", and logs what happened instead of swallowing it.\n\t\t*/\n\t\tclass SeamBoundary extends react.Component {\n\t\t\tconstructor(props) {\n\t\t\t\tsuper(props);\n\t\t\t\tthis.state = { failed: false };\n\t\t\t}\n\t\t\tstatic getDerivedStateFromError() {\n\t\t\t\treturn { failed: true };\n\t\t\t}\n\t\t\tcomponentDidCatch(error) {\n\t\t\t\tconsole.error(\"[dsh-git-badge] seam entry failed; badge omitted:\", error);\n\t\t\t}\n\t\t\trender() {\n\t\t\t\treturn this.state.failed ? null : this.props.children;\n\t\t\t}\n\t\t}\n\t\t/** Seam entry bodies, so the boundary above ENCLOSES the renderSlot call. */\n\t\tfunction SessionRowSeam({ renderSlot, sessionId, workspaceId, label }) {\n\t\t\treturn renderSlot(\"sidebar.workspaces.sessionRow\", { sessionId, workspaceId, label });\n\t\t}\n\t\tfunction SessionRowDetailSeam({ renderSlot, sessionId, workspaceId, label }) {\n\t\t\treturn renderSlot(\"sidebar.workspaces.sessionRow.detail\", { sessionId, workspaceId, label });\n\t\t}\n\t\t/**\n\t\t* Session-row seam (sidebar.workspaces.sessionRow): renders the additive\n\t\t* list-slot entries for one session row with the row owner share\n\t\t* ({ sessionId, workspaceId, label }).\n\t\t*\n\t\t* Returns null — not a fallback element — when no plugin occupies the seam,\n\t\t* so a pristine install renders exactly as upstream. `workspaceId` is only\n\t\t* ever passed from the TREE call site: the flat \"all sessions\" list and the\n\t\t* search-result list render this component without it, which is what keeps\n\t\t* badges off those lists without either of them needing a guard.\n\t\t*/\n\t\tfunction renderSessionRowSeam(renderSlot, sessionId, workspaceId, label) {\n\t\t\tif (renderSlot === void 0 || workspaceId === void 0) return null;\n\t\t\treturn (0, react_jsx_runtime.jsx)(SeamBoundary, {\n\t\t\t\tchildren: (0, react_jsx_runtime.jsx)(SessionRowSeam, { renderSlot, sessionId, workspaceId, label })\n\t\t\t});\n\t\t}\n\t\tfunction SessionNodeItem({ node, currentId, now, onOpen, onRename, onFork, onArchive, onReveal, drag, flat = false, t, renderSlot, workspaceId }) {",
+	],
+	// --- 2. The badge sits with the title, before the schedule/time cluster ---
+	[
+		"title span + badge render",
+		'\t\t\t\t\t\t(0, react_jsx_runtime.jsx)("span", {\n\t\t\t\t\t\t\tclassName: Rows_module_css_default.title,\n\t\t\t\t\t\t\tchildren: title\n\t\t\t\t\t\t}),',
+		'\t\t\t\t\t\t(0, react_jsx_runtime.jsx)("span", {\n\t\t\t\t\t\t\tclassName: Rows_module_css_default.title,\n\t\t\t\t\t\t\tchildren: title\n\t\t\t\t\t\t}),\n\t\t\t\t\t\trenderSessionRowSeam(renderSlot, node.id, workspaceId, title),',
+	],
+	// --- 3. The hover card gains the detail seam ---
+	[
+		"SessionHoverContent call-site props",
+		'\t\t\t\tcontent: (0, react_jsx_runtime.jsx)(SessionHoverContent, {\n\t\t\t\t\tnode,\n\t\t\t\t\tnow,\n\t\t\t\t\tt\n\t\t\t\t}),',
+		'\t\t\t\tcontent: (0, react_jsx_runtime.jsx)(SessionHoverContent, {\n\t\t\t\t\tnode,\n\t\t\t\t\tnow,\n\t\t\t\t\tt,\n\t\t\t\t\trenderSlot,\n\t\t\t\t\tworkspaceId\n\t\t\t\t}),',
+	],
+	[
+		"SessionHoverContent header",
+		"\t\tfunction SessionHoverContent({ node, now, t }) {",
+		"\t\tfunction SessionHoverContent({ node, now, t, renderSlot, workspaceId }) {",
+	],
+	[
+		"hover card detail row",
+		"\t\t\t\t\t}, status.label))\n\t\t\t\t]\n\t\t\t});\n\t\t}",
+		'\t\t\t\t\t}, status.label)),\n\t\t\t\t\trenderSlot !== void 0 && workspaceId !== void 0 ? (0, react_jsx_runtime.jsx)("div", {\n\t\t\t\t\t\tclassName: Rows_module_css_default.hoverStatus,\n\t\t\t\t\t\tchildren: (0, react_jsx_runtime.jsx)(SeamBoundary, {\n\t\t\t\t\t\t\tchildren: (0, react_jsx_runtime.jsx)(SessionRowDetailSeam, { renderSlot, sessionId: node.id, workspaceId, label: displayTitle(node, t) })\n\t\t\t\t\t\t})\n\t\t\t\t\t}) : null\n\t\t\t\t]\n\t\t\t});\n\t\t}',
+	],
+	// --- 4. Thread renderSlot: WorkspaceBrowser -> SessionTree ---
+	// A bare `renderSlot` at the SessionNodeItem call site resolves in THIS scope.
+	// The first cut of this patch threaded it into SessionNodeItem but not into
+	// SessionTree, so the row render threw `ReferenceError: renderSlot is not
+	// defined` the moment sessions appeared — and the shell abdicated the whole
+	// sidebar with it. Any prop a patched call site reads by shorthand must arrive
+	// through every intermediate scope.
+	[
+		"SessionTree header",
+		"\t\tfunction SessionTree({ useSessions, useSessionPendingInteraction, startSession, open, forkSession, workspaces, archivedSessionIds, workspaceReady, usePanelInfo, onRenameRequest, onDeleteRequest, onSessionRename, onSessionArchive, insertWorkspaceBefore, insertSessionBefore, orderBy, groupExpansion, setGroupExpanded, sessionOrderByAccount, sessionUpdatedAtByAccount, syncSessionOrderAccount, setSessionOrder, home, t, revealSessionId, onSessionRevealed }) {",
+		"\t\tfunction SessionTree({ useSessions, useSessionPendingInteraction, startSession, open, forkSession, workspaces, archivedSessionIds, workspaceReady, usePanelInfo, onRenameRequest, onDeleteRequest, onSessionRename, onSessionArchive, insertWorkspaceBefore, insertSessionBefore, orderBy, groupExpansion, setGroupExpanded, sessionOrderByAccount, sessionUpdatedAtByAccount, syncSessionOrderAccount, setSessionOrder, home, t, renderSlot, revealSessionId, onSessionRevealed }) {",
+	],
+	[
+		"SessionTree call site",
+		"(0, react_jsx_runtime.jsx)(SessionTree, {\n\t\t\t\t\t\t\tusePanelInfo,",
+		"(0, react_jsx_runtime.jsx)(SessionTree, {\n\t\t\t\t\t\t\trenderSlot,\n\t\t\t\t\t\t\tusePanelInfo,",
+	],
+	// --- 5. Thread renderSlot + the owning workspace id from the TREE call site only ---
+	[
+		"SessionNodeItem call site",
+		"\t\t\t\t\t\t\t\t\t\treturn (0, react_jsx_runtime.jsx)(SessionNodeItem, {\n\t\t\t\t\t\t\t\t\t\t\tnode,\n\t\t\t\t\t\t\t\t\t\t\tcurrentId: current,",
+		"\t\t\t\t\t\t\t\t\t\treturn (0, react_jsx_runtime.jsx)(SessionNodeItem, {\n\t\t\t\t\t\t\t\t\t\t\tnode,\n\t\t\t\t\t\t\t\t\t\t\tcurrentId: current,\n\t\t\t\t\t\t\t\t\t\t\trenderSlot,\n\t\t\t\t\t\t\t\t\t\t\t// only the tree knows which workspace a row belongs to; the\n\t\t\t\t\t\t\t\t\t\t\t// flat and search lists pass neither prop, so they stay bare\n\t\t\t\t\t\t\t\t\t\t\tworkspaceId: group.workspaceId,",
+	],
+	// --- 6. Declare the two seam children on the sidebar.workspaces registration ---
+	[
+		"seam children registration",
+		'\t\t\t\tchildren: { "sidebar.workspaces.directoryFlow": {\n\t\t\t\t\tkind: "single",\n\t\t\t\t\tscope: "root"\n\t\t\t\t} },',
+		'\t\t\t\tchildren: { "sidebar.workspaces.directoryFlow": {\n\t\t\t\t\tkind: "single",\n\t\t\t\t\tscope: "root"\n\t\t\t\t}, "sidebar.workspaces.sessionRow": {\n\t\t\t\t\tkind: "list",\n\t\t\t\t\tscope: "root"\n\t\t\t\t}, "sidebar.workspaces.sessionRow.detail": {\n\t\t\t\t\tkind: "list",\n\t\t\t\t\tscope: "root"\n\t\t\t\t} },',
+	],
+];
+
+export function anchorCounts(text) {
+	return Object.fromEntries(PATCHES.map(([name, old]) => [name, text.split(old).length - 1]));
+}
+
+export function firstFailure(text) {
+	for (const [name, old] of PATCHES) {
+		const n = text.split(old).length - 1;
+		if (n !== 1) return { name, count: n };
+	}
+	return null;
+}
+
+export function applyPatch(text) {
+	for (const [name, old] of PATCHES) {
+		const n = text.split(old).length - 1;
+		if (n !== 1) {
+			throw new Error(
+				`anchor ${JSON.stringify(name)} found ${n} times (need exactly 1) — upstream drift; nothing was patched`
+			);
+		}
+	}
+	for (const [, old, replacement] of PATCHES) text = text.replace(old, replacement);
+	return text;
+}
+
+export function isOurs(text) {
+	return text.includes(MARKER);
+}
+
+export function isCurrentRev(text) {
+	return text.includes(REV_COMMENT);
+}
+
+export function seamPresent(text) {
+	return SEAM_STRINGS.some((s) => text.includes(s));
+}
+
+/** A patched file's applied signature (the `old` anchor forms are gone — that is the point). */
+export function appliedSignature(text) {
+	return (
+		seamPresent(text) && text.includes("function renderSessionRowSeam") && text.includes("class SeamBoundary")
+	);
+}

package/seam/apply.js

@@ -0,0 +1,304 @@
+#!/usr/bin/env node
+/**
+ * dsh-git-badge-seam — apply / revert / inspect the sidebar session-row seam
+ * patch on an installed DSH package.
+ *
+ * WHY THIS EXISTS: the sidebar session-row badges need a slot the DSH workspace
+ * browser does not declare upstream yet (proposed upstream — see PR.md in the
+ * plugin's repository). The patch is SEAM-ONLY; all badge logic lives in the
+ * dsh-git-badge plugin itself. This tool is shipped IN the package, so a market
+ * install needs no clone:
+ *
+ *     dsh plugin --profile web add dsh-git-badge
+ *     npx dsh-git-badge apply        # then restart the dsh web process
+ *
+ * HOW PATCHING WORKS — anchors, not hashes. The patch is defined once in
+ * anchors.js as [name, old, new] triples. `apply` locates each `old` block in
+ * the INSTALLED client.js (each must occur exactly once) and replaces it in
+ * place. A DSH update that changes anything else in the file no longer matters;
+ * only a change that moves one of the anchors does, and the failure names the
+ * anchor that moved instead of reporting an opaque hash mismatch.
+ *
+ * Safety:
+ *   - anchor assertion: every anchor must match exactly once; anything else is
+ *     drift and NOTHING is written
+ *   - own-artifact detection: every artifact carries the dsh-git-badge:seam-patch
+ *     marker (with a rev number), so our stale patch can be upgraded in place
+ *     while a genuine upstream landing (seam declared, no marker) is left alone
+ *   - backup of the bytes as found: revert restores exactly what was installed
+ *     before WE patched, guarded against downgrading a newer upstream build
+ *   - the pinned KNOWN_GOOD_HASH is ADVISORY only: status reports whether the
+ *     installed build is the one the anchors were verified against, but apply
+ *     proceeds on any build whose anchors resolve
+ *
+ * Environment:
+ *   DSH_INSTALL    the DSH package root. Default: `<global npm root>/@deepseek-ai/dsh`.
+ *   SEAM_DATA_DIR  where revert backups are written. Default: this script's
+ *                  directory (inside the installed package).
+ *
+ * Usage: apply.js apply | apply.js revert | apply.js status
+ */
+import { execSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import {
+	MARKER,
+	applyPatch,
+	appliedSignature,
+	firstFailure,
+	isCurrentRev,
+	isOurs,
+	seamPresent,
+} from "./anchors.js";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const DATA_DIR = process.env.SEAM_DATA_DIR || HERE;
+
+// sha256 of the upstream build the anchors were last verified against. ADVISORY:
+// status prints it for orientation; apply does NOT require it.
+const KNOWN_GOOD_HASH = "383b9ef779366c13d818500b6488896328b189f156addbaa480c835e902edd5f";
+
+/** Locate the installed DSH package root; null when it cannot be found. */
+function dshRoot() {
+	if (process.env.DSH_INSTALL) return process.env.DSH_INSTALL;
+	try {
+		return join(execSync("npm root -g", { encoding: "utf8" }).trim(), "@deepseek-ai", "dsh");
+	} catch {
+		return null;
+	}
+}
+
+const DSH = dshRoot();
+if (!DSH) {
+	console.error("ERROR: cannot locate the DSH package. Set DSH_INSTALL to its root");
+	console.error("(e.g. the directory containing node_modules/@deepseek-ai/dsh).");
+	process.exit(1);
+}
+const PKG = join(DSH, "node_modules", "@deepseek-ai", "dsh-client-ui-workspace");
+const CLIENT = join(PKG, "lib", "client.js");
+const INDEX = join(PKG, "lib", "index.js");
+const STUB_INDEX = join(HERE, "stub-index.js"); // no-op host half; copied over index.js on apply
+const BACKUP_CLIENT = join(DATA_DIR, "backup-client.js");
+const BACKUP_INDEX = join(DATA_DIR, "backup-index.js");
+
+const sha256 = (text) => createHash("sha256").update(text, "utf8").digest("hex");
+
+/** Inspect the installed client.js. Returns the same key:value report apply.sh printed. */
+function inspect() {
+	const report = {};
+	let text;
+	try {
+		text = readClient();
+	} catch (error) {
+		if (error.code === "ENOENT") {
+			report.state = "missing";
+			return report;
+		}
+		report.state = "unreadable";
+		report.error = String(error.message ?? error);
+		return report;
+	}
+	report.hash = sha256(text);
+	report.known_good_match = report.hash === KNOWN_GOOD_HASH ? "yes" : "no";
+	report.backup = existsSync(BACKUP_CLIENT) ? "yes" : "no";
+	report.marker = isOurs(text) ? "yes" : "no";
+	report.rev_current = isCurrentRev(text) ? "yes" : "no";
+	report.seam_strings = seamPresent(text) ? "yes" : "no";
+
+	const fail = firstFailure(text);
+	if (fail === null) report.anchors = "all-resolve";
+	else {
+		report.anchors = "drift";
+		report.anchor_fail = `${fail.name}:${fail.count}`;
+	}
+
+	if (isOurs(text)) {
+		// A PATCHED file no longer contains the `old` anchor forms — that is the
+		// point — so it is verified by its applied signature instead.
+		report.applied_signature = appliedSignature(text) ? "yes" : "no";
+		if (!isCurrentRev(text)) report.state = "ours-stale";
+		else if (appliedSignature(text)) report.state = "ours-current";
+		else report.state = "ours-corrupt";
+	} else if (seamPresent(text)) report.state = "upstream-landed";
+	else if (fail === null) report.state = "patchable";
+	else report.state = "drift";
+	return report;
+}
+
+function readClient() {
+	return readText(CLIENT);
+}
+
+function readText(path) {
+	return readFileSync(path, "utf8");
+}
+
+/** Backup the bytes AS FOUND, patch client.js in place, install the no-op host half. */
+function doPatch() {
+	mkdirSync(DATA_DIR, { recursive: true });
+	copyFileSync(CLIENT, BACKUP_CLIENT);
+	copyFileSync(INDEX, BACKUP_INDEX);
+	const patched = applyPatch(readClient());
+	writeText(CLIENT, patched);
+	copyFileSync(STUB_INDEX, INDEX);
+	console.log("patched lib/client.js in place (anchors applied); host half stubbed.");
+}
+
+function writeText(path, text) {
+	writeFileSync(path, text, "utf8");
+}
+
+const VERDICT_EXIT_1 = new Set(["drift", "unreadable", "missing", "ours-corrupt"]);
+
+const verb = process.argv[2];
+if (!verb || !["apply", "revert", "status"].includes(verb)) {
+	console.error("usage: apply.js apply|revert|status");
+	process.exit(1);
+}
+
+if (verb === "status") {
+	const r = inspect();
+	console.log(`installed:  ${CLIENT}`);
+	console.log(`hash:       ${r.hash ?? r.error ?? "-"}`);
+	if (r.known_good_match === "yes") console.log("pinned:     KNOWN-GOOD MATCH — the build the anchors were verified against");
+	else console.log(`pinned:     ${KNOWN_GOOD_HASH} — differs (advisory only; anchors are the guard)`);
+	console.log(`anchors:    ${r.anchors ?? "-"}`);
+	if (r.anchors === "drift") console.log(`            ${r.anchor_fail}`);
+	console.log(`marker:     ${r.marker ?? "-"} (rev current: ${r.rev_current ?? "-"}, applied signature: ${r.applied_signature ?? "n/a"})`);
+	console.log(`backup:     ${r.backup ?? "-"}`);
+	console.log(`state:      ${r.state}`);
+	switch (r.state) {
+		case "ours-current":
+			console.log("verdict:    PATCHED — sidebar session-row badges come from this repo's patch.");
+			break;
+		case "ours-stale":
+			console.log("verdict:    PATCHED, OUT OF DATE — our older artifact; 'apply' upgrades in place.");
+			break;
+		case "ours-corrupt":
+			console.log("verdict:    BROKEN ARTIFACT — marker present but anchors/seam inconsistent. Inspect by hand.");
+			break;
+		case "upstream-landed":
+			console.log("verdict:    UPSTREAM LANDED — 'apply' no-ops; the patch can be retired.");
+			break;
+		case "patchable":
+			console.log("verdict:    PATCHABLE — 'apply' will patch it in place.");
+			break;
+		case "drift":
+			console.log("verdict:    DRIFT — an anchor moved; update seam/anchors.js for the new upstream.");
+			break;
+		case "missing":
+			console.log("verdict:    INSTALLED PACKAGE NOT FOUND — check DSH_INSTALL.");
+			break;
+		default:
+			console.log(`verdict:    ${r.state.toUpperCase()} — see error above.`);
+	}
+	process.exit(VERDICT_EXIT_1.has(r.state) ? 1 : 0);
+}
+
+if (verb === "apply") {
+	const r = inspect();
+	for (const [k, v] of Object.entries(r)) {
+		if (k !== "state") console.log(`  ${k}=${v}`);
+	}
+	console.log(`installed:  ${CLIENT}`);
+	switch (r.state) {
+		case "ours-current":
+			console.log("verdict:    PATCHED (rev current) — nothing to do.");
+			break;
+		case "patchable":
+			doPatch();
+			console.log("verdict:    PATCHED.");
+			break;
+		case "ours-stale": {
+			// Our older artifact. The re-patch target is the BACKUP (the bytes as we
+			// found them pre-patch). Validate THAT before touching the installed
+			// file: restoring a backup whose anchors no longer resolve would
+			// overwrite the installed build with an unpatchable older one.
+			if (!existsSync(BACKUP_CLIENT)) {
+				console.error("REFUSING: installed file is an older artifact of ours but no backup");
+				console.error("exists, so the original bytes are unknown. Reinstall the package or");
+				console.error("restore the backup by hand, then re-run apply.");
+				process.exit(1);
+			}
+			const backupText = readText(BACKUP_CLIENT);
+			const bstate = isOurs(backupText)
+				? "ours"
+				: seamPresent(backupText)
+					? "upstream-landed"
+					: firstFailure(backupText) === null
+						? "patchable"
+						: "drift";
+			if (bstate !== "patchable") {
+				console.error(`REFUSING: the backup (bytes as found before patching) is '${bstate}',`);
+				console.error("not patchable — the anchors no longer match the backed-up upstream.");
+				console.error("Nothing was changed. Reinstall the DSH package, then re-run apply.");
+				process.exit(1);
+			}
+			writeText(CLIENT, backupText);
+			copyFileSync(BACKUP_INDEX, INDEX);
+			doPatch();
+			console.log("verdict:    UPGRADED — older artifact replaced with the current patch.");
+			break;
+		}
+		case "upstream-landed":
+			console.error("verdict:    UPSTREAM LANDED — the installed client.js declares the seam");
+			console.error("and is NOT this repo's artifact. Patch skipped (plugin only); the patch");
+			console.error("can be retired.");
+			break;
+		case "drift": {
+			const [name, count] = r.anchor_fail.split(":");
+			console.error("REFUSING: anchor drift — nothing was written.");
+			console.error(`  anchor:   ${name} (found ${count} times, need exactly 1)`);
+			console.error("Upstream changed code this patch anchors on. Update the matching entry");
+			console.error("in anchors.js, then re-run: dsh-git-badge-seam status && dsh-git-badge-seam apply");
+			process.exit(1);
+		}
+		case "ours-corrupt":
+			console.error("REFUSING: the installed file carries this repo's marker but is neither");
+			console.error("the current revision nor a restorable state. Inspect by hand:");
+			console.error(`  grep -n '${MARKER}' "${CLIENT}"`);
+			process.exit(1);
+			break;
+		default:
+			console.error(`REFUSING: installed client.js is '${r.state}'.`);
+			process.exit(1);
+	}
+	console.log(`now install the plugin:  dsh plugin --profile web add dsh-git-badge`);
+} else {
+	// revert
+	if (existsSync(BACKUP_CLIENT)) {
+		const r = inspect();
+		const installedHash = r.hash;
+		const backupHash = sha256(readText(BACKUP_CLIENT));
+		if (installedHash === backupHash) {
+			// Idempotent re-run: the installed bytes already ARE the backup.
+			console.log("already reverted — installed client.js matches the backup; nothing to do.");
+		} else if (r.state === "ours-current" || r.state === "ours-stale" || r.state === "ours-corrupt") {
+			writeText(CLIENT, readText(BACKUP_CLIENT));
+			copyFileSync(BACKUP_INDEX, INDEX);
+			console.log("reverted client.js/index.js to the bytes as found before patching.");
+		} else {
+			// Installed file is not ours => upstream replaced it since patching.
+			console.error("REFUSING to revert: the installed client.js is not this repo's");
+			console.error(`artifact (state: ${r.state}), so upstream replaced it since the patch was`);
+			console.error("applied. Restoring the backup would DOWNGRADE the package.");
+			console.error("Nothing was changed. If the downgrade is really what you want, restore");
+			console.error(`${BACKUP_CLIENT} by hand.`);
+			process.exit(1);
+		}
+	} else {
+		const r = inspect();
+		if (r.state === "ours-current" || r.state === "ours-stale" || r.state === "ours-corrupt") {
+			console.error("REFUSING: the installed file is patched but no backup exists, so the");
+			console.error("original bytes are unknown. Reinstall the package to clear the patch:");
+			console.error("  npm rebuild -g @deepseek-ai/dsh   # or your package manager's equivalent");
+			process.exit(1);
+		}
+		console.log("no backup present and nothing of ours installed; client.js left untouched.");
+	}
+	// restore the no-op host half if no backup of the original exists
+	if (!existsSync(BACKUP_INDEX)) copyFileSync(STUB_INDEX, INDEX);
+	console.log("remember to remove the plugin:  dsh plugin --profile web remove dsh-git-badge");
+}

package/seam/stub-index.js

@@ -0,0 +1,11 @@
+//#region lib/types/index.js
+/**
+* Workspace picker plugin, node half. Pure UI plugin: the empty apply exists
+* so the plugin appears in the host cordis.yml / Loader (load and lifecycle
+* follow the host; the browser half ships via exports["./client"], discovered
+* through the package.json dsh.client declaration).
+*/
+/** Host plugin body — no host-side behavior for the workspace picker plugin. */
+function apply() {}
+//#endregion
+export { apply };