dsh-graft-plugin 0.1.1 → 0.2.0

package/README.md

@@ -1,6 +1,6 @@
 # dsh-graft-plugin
 
-![language](https://img.shields.io/badge/language-javascript-f7dc6f) ![style](https://img.shields.io/badge/style-vanilla-gray) ![license](https://img.shields.io/badge/license-MIT-blue) ![node](https://img.shields.io/badge/node-%E2%89%A5%2022-brightgreen) ![dsh](https://img.shields.io/badge/dsh-web%20profile-orange) ![runtime](https://img.shields.io/badge/runtime-offline_%C2%B7_100%25_local-brightgreen) ![tests](https://img.shields.io/badge/tests-91_passing-brightgreen)
+![language](https://img.shields.io/badge/language-javascript-f7dc6f) ![style](https://img.shields.io/badge/style-vanilla-gray) ![license](https://img.shields.io/badge/license-MIT-blue) ![node](https://img.shields.io/badge/node-%E2%89%A5%2022-brightgreen) ![dsh](https://img.shields.io/badge/dsh-web%20profile-orange) ![runtime](https://img.shields.io/badge/runtime-offline_%C2%B7_100%25_local-brightgreen) ![tests](https://img.shields.io/badge/tests-passing-brightgreen)
 
 A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) plugin that puts [graft](https://github.com/trailhq/Graft) — a prebuilt graph of every symbol, its `file:line` span, and who calls what — in front of both you and the model.
 
@@ -9,7 +9,7 @@ It does four things:
 - **A chip in the composer** naming the graft index the current session is actually serving, whether it still matches the code, and how many tokens graft has saved in that repo.
 - **Five tools for the model** — `graft_ask`, `graft_grep`, `graft_callers`, `graft_skeleton`, `graft_map` — resolved per session, so one dsh can serve several workspaces at once.
 - **`/graft`** to build or rebuild the index, and **auto-rebuild** after the model edits files.
-- **A `graft viz` button** that opens the graph as a tab in [dsh-better-sidebar](https://github.com/omdsh-dev/DSH-better-sidebar).
+- **A `graft viz` button** that opens the graph in dsh's built-in right sidebar (0.1.5+), in [dsh-better-sidebar](https://github.com/omdsh-dev/DSH-better-sidebar) if you still run it, and in a browser tab as the last resort.
 
 ## Install
 
@@ -18,12 +18,29 @@ dsh plugin --profile web add dsh-graft-plugin
 dsh --profile web
 ```
 
-The install also puts the graft CLI (`@nanonets/graft`) on your PATH — every tool here shells out to it, so a plugin without it can do nothing. If your global npm prefix needs elevation the postinstall says so and prints the one command to run by hand:
+**pnpm 10 and later block `postinstall` scripts from unapproved packages**, and dsh skips writing the plugin's bundle row whenever the install exits non-zero — the dependency lands, the plugin stays invisible, and dsh starts up cleanly with no error to search for. If `add` ends with `ERR_PNPM_IGNORED_BUILDS`, approve and re-run it:
+
+```sh
+cd ~/.dsh/profiles/web && pnpm approve-builds      # tick dsh-graft-plugin
+dsh plugin --profile web add dsh-graft-plugin      # re-run so the bundle row gets written
+```
+
+Confirm it mounted — the plugin must appear in **both** `dependencies` and `dsh.profile.bundles` in the profile's `package.json`:
+
+```sh
+cd ~/.dsh/profiles/web && node -e "const p=require('./package.json');
+  console.log(p.dependencies['dsh-graft-plugin'],
+              p.dsh.profile.bundles.includes('dsh-graft-plugin'))"
+```
+
+Every tool here shells out to the `graft` CLI, so it needs `@nanonets/graft` on PATH:
 
 ```sh
 npm install -g @nanonets/graft
 ```
 
+A `postinstall` does this for you **when your package manager runs lifecycle scripts** — under pnpm 10+ they are blocked by default, so treat the command above as the required step there, not a fallback. If your global npm prefix needs elevation, the postinstall says so and prints the one command to run by hand.
+
 Then index a repo once:
 
 ```sh
@@ -33,13 +50,17 @@ graft build
 
 ### The sidebar tab
 
-The `graft viz` button needs `dsh-better-sidebar` **mounted**. It ships as a dependency of this plugin, so it is already downloaded — but dsh only mounts what the profile lists:
+On dsh `0.1.5` and later the button opens the graph in **dsh's own right sidebar** — a tab titled Graft, also listed on the sidebar's guide page as "The graft graph for this workspace" — and a second click focuses the tab that is already open. No install needed for that path: the registration is soft, so an older dsh without the right sidebar falls through to `dsh-better-sidebar` when it is mounted, and to a browser tab when neither is there.
+
+If your profile still runs `dsh-better-sidebar`, that path is tried **first** and behaves exactly as before. It ships as a dependency of this plugin (0.18.x), so it is already downloaded — but dsh only mounts what the profile lists:
 
 ```sh
 dsh plugin --profile web add dsh-better-sidebar
 ```
 
-Skip it if you do not want the tab. The chip, the tools, `/graft` and the auto-rebuild all work without it; the button just reports that the sidebar is unavailable.
+> **Compatibility.** `dsh-better-sidebar` 0.18.x requires `@deepseek-ai/dsh-client-ui-primitives`, which dsh removed in `0.1.5-rc.2`. On that version or later it will not mount — which is exactly the profiles where the built-in right sidebar takes over instead. Everything else in this plugin — chip, tools, `/graft`, auto-rebuild — is unaffected.
+
+The chip, the tools, `/graft` and the auto-rebuild all work without any sidebar; the button simply falls back to a browser tab when neither one is present.
 
 > This plugin does **not** insert a `dsh-better-sidebar` row itself, on purpose. That package's own bundle row carries a guard that disables it when another enabled row already mounts the same package. A second row with a different id makes that guard circular, and the losing outcome is *your existing sidebar silently disabling itself*. One explicit command is worth more than that risk.
 
@@ -63,7 +84,7 @@ The root is resolved from **the session's own workspace**, not from wherever dsh
 
 ### The visualiser
 
-The `graft viz` button opens the graph as a tab in [dsh-better-sidebar](https://github.com/omdsh-dev/DSH-better-sidebar). The context view lays out the whole graph:
+The `graft viz` button opens the graph as a tab — in dsh's built-in right sidebar on `0.1.5`+, in [dsh-better-sidebar](https://github.com/omdsh-dev/DSH-better-sidebar) if that is what you run. The context view lays out the whole graph:
 
 ![The graph in the sidebar — context view](assets/viz-context.png)
 
@@ -110,9 +131,15 @@ All optional, all on the plugin's row in your profile's `cordis.patch.yml`:
 
 ## Requirements
 
-- dsh `0.1.2-rc.1` or newer, web profile
+| dsh | status |
+|---|---|
+| `0.1.2-rc.1` – `0.1.0-rc.7` | tested, full feature set — the `graft viz` tab via `dsh-better-sidebar` |
+| `0.1.5-rc.2` / `0.1.5` | tested — chip, tools, `/graft` and auto-rebuild all work; on `0.1.5` the `graft viz` button opens the graph in the built-in right sidebar |
+
 - Node 22+
-- the `graft` CLI on PATH (installed for you; see above)
+- the `graft` CLI on PATH (`npm install -g @nanonets/graft`)
+
+The client bundle requires only `react`, which is why it survives the dsh `0.1.5-rc.2` client-package removals that broke several neighbouring plugins.
 
 ## Development
 
@@ -124,6 +151,25 @@ npm run test:live  # drives the real graft CLI against a real repo
 
 `npm test` needs no graft index and no graft install anywhere on the machine. The one suite that does build a real index skips itself, loudly, when graft is absent — a missing CLI is a setup state, not a defect.
 
+### Two identifiers, deliberately different
+
+The cordis row `id` (`graft-status`) is this plugin's own handle — it keys the storage file, the prompt section and every effect label, and is stable across renames.
+
+The client bundle's `__ModuleLoader__.load({ id })` is **not** that handle. It must be the published package name: dsh builds each client row from `entry.options.name` — the `name:` in `cordis.patch.yml` — serves the bundle at `/plugins/<name>/client.js`, then asserts that a factory registered under that same name. Using the row id there fails every boot with:
+
+```
+bundle /plugins/dsh-graft-plugin/client.js loaded without
+registering "dsh-graft-plugin" via __ModuleLoader__.load
+```
+
+`npm test` guards this both ways (the guard was added with the 0.1.1 fix).
+
+## Troubleshooting
+
+**No chip appears and dsh started without errors.** The plugin is in the profile's `package.json` `dependencies` but not in `dsh.profile.bundles` — which happens under pnpm 10+ when the `add` ends non-zero on `ERR_PNPM_IGNORED_BUILDS`; dsh skips the bundle row in that case and starts up looking healthy. Fix: `pnpm approve-builds` in the profile directory (tick `dsh-graft-plugin`), then re-run `dsh plugin --profile web add dsh-graft-plugin`. If `pnpm approve-builds` reports nothing awaiting approval, check `pnpm-workspace.yaml` for an unanswered `dsh-graft-plugin` entry (pnpm's approval placeholder) and set its value to `true` first.
+
+**`/graft` says the graft CLI is not on PATH.** The postinstall was blocked or skipped (see Install): `npm install -g @nanonets/graft`.
+
 ## Licence
 
 MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-graft-plugin",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Shows which graft index a dsh session is serving and whether it still matches the code, and gives the model graft_ask, graft_grep, graft_callers, graft_skeleton and graft_map as native tools.",
   "type": "module",
   "main": "src/index.js",
@@ -41,7 +41,6 @@
     "client": {
       "platform": "web",
       "inject": [
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-api-remotes"
       ]
     }

package/scripts/test-harness.mjs

@@ -246,7 +246,15 @@ check(
   clientSource.includes('ctx.inject(["betterSidebar"]') && /const inject = \[[^\]]*\]/.exec(clientSource)?.[0].includes('betterSidebar') === false,
   /const inject = \[[^\]]*\]/.exec(clientSource)?.[0],
 )
-check('the browser tab survives only as the fallback', clientSource.includes('no dsh-better-sidebar'))
+// The open order: better-sidebar if a profile still has it, then dsh's own
+// right sidebar (0.1.5+), and a browser tab only when neither is there.
+check('dsh right sidebar comes after better-sidebar', clientSource.indexOf('ctx.get("betterSidebar")') < clientSource.indexOf('ctx.get("sidebarRight")'))
+check('it opens by kind, which also reveals the column', clientSource.includes('right.openTab(VIZ_KIND)'))
+check('a kind nothing registered falls through, not dead', clientSource.includes('openTab throws for a kind nothing registered'))
+check('the type and its body register under the same id', clientSource.includes('sidebarRightTabs.register({') && clientSource.includes('id: TAB_TYPE,') && clientSource.includes('name: "sidebar.right.pane.tab", key: TAB_TYPE'))
+check('that dependency is soft too', clientSource.includes('ctx.inject(["sidebarRightTabs", "slots"]') && !/const inject = [[]/.test('') && clientSource.indexOf('const inject = ["slots", "remote"]') !== -1)
+check('the body reads the session from either host', clientSource.includes('props?.sessionId ?? props?.scope?.sessionId'))
+check('the browser tab survives only as the last resort', clientSource.includes('neither sidebar'))
 
 await rm(fixture, { recursive: true, force: true })
 

package/src/client.js

@@ -324,9 +324,19 @@ window.__ModuleLoader__.load({
       ].join("");
     }
 
-    /** The tab type contributed to dsh-better-sidebar. */
+    /** This viewer's identity: better-sidebar's tab type, and dsh's tab id. */
     const TAB_TYPE = "graft-status:viz";
 
+    /**
+     * The kind dsh's own right sidebar opens this page type by.
+     *
+     * dsh 0.1.5 splits a tab type in two: a static registration naming the kind
+     * (`ctx.sidebarRightTabs`), and the body under the registration's id in the
+     * keyed `sidebar.right.pane.tab` seat. `ctx.sidebarRight.openTab(kind)`
+     * then opens it AND expands a collapsed column in the same step.
+     */
+    const VIZ_KIND = "graft-viz";
+
     /**
      * The sidebar tab: `graft viz` in an iframe.
      *
@@ -370,10 +380,14 @@ window.__ModuleLoader__.load({
         const [status, setStatus] = React.useState(null);
         const [reload, setReload] = React.useState(0);
         const [busy, setBusy] = React.useState(false);
+        // Visible by default: better-sidebar passes `visible: false` for a tab
+        // that exists but is not focused (and asks live views to pause then);
+        // dsh's sidebar mounts only what it draws and passes nothing.
         const visible = props?.visible !== false;
-        // The sidebar's own scope. Its `sessionId` is what tells the host WHICH
-        // workspace to resolve — the same session whose cwd the sidebar shows.
-        const sessionId = props?.scope?.sessionId;
+        // Which workspace to resolve. Both hosts supply the session, in their
+        // own shape: dsh passes `sessionId` straight to the body, while
+        // better-sidebar wraps it in the tab's `scope`.
+        const sessionId = props?.sessionId ?? props?.scope?.sessionId;
 
         React.useEffect(() => {
           if (!visible || viz !== null) return;
@@ -630,7 +644,25 @@ window.__ModuleLoader__.load({
             return;
           }
 
-          // Fallback for a profile with no dsh-better-sidebar: a browser tab.
+          // Next: dsh's own right sidebar (0.1.5+). `openTab` names the KIND,
+          // reveals the column, and reuses the tab that is already open, so a
+          // second click focuses the graph rather than stacking another.
+          // The body starts the server itself on mount, so nothing is awaited
+          // here and no popup-blocker timing applies.
+          const right = ctx.get("sidebarRight");
+          if (right !== undefined && right !== null && typeof right.openTab === "function") {
+            try {
+              right.openTab(VIZ_KIND);
+              return;
+            } catch (error) {
+              // openTab throws for a kind nothing registered — which is the
+              // case when the tab registry was absent at load. Fall through to
+              // the browser tab rather than leaving the click dead.
+              console.warn("[graft-status] right sidebar refused the viz tab:", error);
+            }
+          }
+
+          // Last resort, for a profile with neither sidebar: a browser tab.
 
           // Opened SYNCHRONOUSLY, before any await. A tab opened from a
           // resolved promise is a popup as far as the browser is concerned and
@@ -812,6 +844,41 @@ window.__ModuleLoader__.load({
       // plugin — chip included — from activating in a profile that does not
       // have the sidebar installed. This way the tab appears when the service
       // does, and the button falls back to a browser tab when it never comes.
+      // dsh's own right sidebar (0.1.5+). Two registrations: the static type,
+      // and the body in the keyed seat under the SAME id. `ctx.inject` rather
+      // than the module-level list for the same reason as below — a profile
+      // without this sidebar must still get the chip and the button.
+      ctx.inject(["sidebarRightTabs", "slots"], (scope) => {
+        scope.effect(
+          () =>
+            scope.sidebarRightTabs.register({
+              id: TAB_TYPE,
+              kind: VIZ_KIND,
+              // A page type, opened by kind: it recognises no resource address,
+              // so it declares no patterns. "extension" is the band for a type
+              // from outside the product, and the default.
+              priority: "extension",
+              title: () => "Graft",
+              guide: [
+                {
+                  order: 60,
+                  title: () => "Graft",
+                  description: () => "The graft graph for this workspace",
+                  icon: GraphIcon,
+                },
+              ],
+            }),
+          "graft-status: right sidebar tab type",
+        );
+        scope.effect(
+          () =>
+            scope.slots.inject("sidebar.right.pane.tab", () =>
+              scope.slots.register({ name: "sidebar.right.pane.tab", key: TAB_TYPE }, makeVizTab(ctx)),
+            ),
+          "graft-status: right sidebar tab body",
+        );
+      });
+
       ctx.inject(["betterSidebar"], (scope) => {
         scope.effect(
           () =>