dsh-plugin-workbench 0.0.17 → 0.0.20

package/CHANGELOG.md

@@ -1,5 +1,56 @@
 # Changelog
 
+## [0.0.20] - 2026-09-07
+
+### Fixed
+
+- 全链路代码审查（子代理逐变体模拟验证）后的三处收尾：
+  1. **`npm-delta` 变体缺 watch 块**（中危）：0.0.16/17 旧补丁（无 occupancy）用户经
+     delta 打完后没有 `slots/changed` 同步——运行时卸载插件列不即时收起（重启后才由
+     inject hook 兜底）。delta 表补上 watch 块注入，已用构造的旧补丁态产物实测命中。
+  2. **host 自愈 marker 是脚本的弱子集**（形式问题）：`src/index.ts` 的清单缺
+     `renderSlot("explorer.preview"` 且 explorerCol 用短前缀——受损/半回退 bundle 可能
+     过 host 检查却过不了脚本校验，自愈永不触发。host 清单已与脚本 `PATCHED_MARKERS`
+     7 项逐字同步。
+  3. **`--target` 污染共享 pristine 备份**（运维隐患）：脚本对任意 `--target` 文件也会
+     刷新仓库内的 `client.js.orig`。现在备份簿记仅在默认 profile 路径下执行，
+     `--target` 时明确跳过。
+
+## [0.0.19] - 2026-09-07
+
+### Fixed
+
+- **0.0.18 的 occupancy 门控把列永久收起了（装着插件也不显示 explorer 列）**。
+  根因是时序：布局 store 的 actions 要到 root entry **首次渲染组装**时才经
+  `inject` hook 交给 `LayoutController`（`attachPanels`），而 0.0.18 把初始
+  occupancy 同步放在了 ui-layout 的 apply 阶段——那时 `#panels` 还是 undefined，
+  同步被空实现吞掉；workbench 的注册又恰好发生在同一调用栈内（声明提交触发），
+  `slots/changed` 事件在监听器安装之前就已发完，之后再无事件 → `explorerOccupied`
+  恒为 false → 列永不出现。修复：occupancy 同步**同时**放进 root 注册的 inject
+  hook（actions 刚 bind、首帧渲染前，此时插槽查询已能拿到已注册条目），
+  `slots/changed` 监听继续负责运行时装卸；补丁脚本对应新增 `npm-delta2` /
+  `desktop-ci-delta2` 变体与 marker。
+
+## [0.0.18] - 2026-09-07
+
+### Fixed
+
+- **卸载插件后残留一条空白侧边栏（[issue #2](https://github.com/Pasumao/dsh-plugin-workbench/issues/2)）**。
+  根因：布局补丁给 `dsh-client-ui-layout` 注入的第四列（explorer）是无条件渲染的——
+  网格轨道恒为 `panels.explorer`（默认 260px，带侧栏底色与右边框），列内容来自本插件注册的
+  `explorer` 插槽；卸载本插件后插槽清空，但补丁仍留在布局 bundle 里（且插件的
+  `ensureLayoutPatch` 自愈机制还会在下次启动把补丁打回去），于是永远残留一条空列，
+  刷新/重启都无法消除。修复：布局 store 新增 `explorerOccupied` 标志，`ui-layout` 的
+  apply 现在监听 `slots/changed` 事件，实时统计 `explorer` / `explorer.preview` 插槽的
+  注册条目数——没有任何插件贡献时列宽归 0 自动收起，装回插件即刻恢复。
+  补丁脚本新增 **delta 变体**（`npm-delta` / `desktop-ci-delta`）：已带旧版补丁的 bundle
+  无需还原即可原地升级到带 occupancy 门槛的新补丁；全新 bundle 走原有完整变体。
+  `src/index.ts` 的自愈 marker 列表同步追加 `explorerOccupied`。
+  同时新增 `patch-layout.mjs --restore`（卸载恢复命令）：用首次打补丁时备份的
+  pristine 副本把 `dsh-client-ui-layout` 还原为官方原始 bundle；备份策略改为
+  「dsh 升级后首次重打时自动刷新 pristine」，并带两道防呆（目标是更新的原生 bundle、
+  或备份属于更旧 dsh 版本时拒绝回滚，`--force` 覆盖）。
+
 ## [0.0.17] - 2026-09-05
 
 ### Fixed

package/README.en.md

@@ -141,9 +141,19 @@ pnpm run typecheck
 
 ```powershell
 dsh plugin --profile web remove dsh-plugin-workbench
-# and restore the layout bundle (patches/layout.backup/client.js.orig → dsh-client-ui-layout/lib/client.js)
+# optional but recommended: restore the layout bundle to the stock dsh file
+node node_modules/dsh-plugin-workbench/scripts/patch-layout.mjs --restore
+# restart dsh web
 ```
 
+> Skipping `--restore` is fine too: since 0.0.18 the layout patch is adaptive —
+> the explorer column auto-collapses (width 0) whenever no plugin contributes to
+> the `explorer` / `explorer.preview` slots, so an uninstall leaves no empty
+> column behind. `--restore` simply returns the bundle to its pristine,
+> unpatched state. The script has two safety guards: it refuses to restore when
+> the target already looks like a newer pristine bundle (just-upgraded dsh) or
+> when the backup belongs to an older dsh version (`--force` overrides).
+
 ## Notes
 
 - The `/dsh-plugin-files` RPC channel is loopback-only; write operations are executed explicitly under
@@ -185,6 +195,7 @@ alongside it:
 | [dsh-plugin-image-tools](https://www.npmjs.com/package/dsh-plugin-image-tools) | [GitHub repo](https://github.com/Pasumao/dsh-plugin-image-tools) | Image choice cards + inline images in replies + image intake for text-only models |
 | [dsh-plugin-table-zoom](https://www.npmjs.com/package/dsh-plugin-table-zoom) | [GitHub repo](https://github.com/Pasumao/dsh-plugin-table-zoom) | Floating window for long chat tables + one-click Markdown copy |
 | [dsh-plugin-windows-guard](https://www.npmjs.com/package/dsh-plugin-windows-guard) | [GitHub repo](https://github.com/Pasumao/dsh-plugin-windows-guard) | Windows environment safeguards: guideline skills + mojibake detection / dangerous-write interception / encoding diagnosis & repair |
+| [dsh-plugin-context-trim](https://www.npmjs.com/package/dsh-plugin-context-trim) | [GitHub repo](https://github.com/Pasumao/dsh-plugin-context-trim) | Per-session injection gate: trim skills / tools / prompt sections per session |
 
 > For the remaining plugins in the series, see [Pasumao · dsh plugins](https://github.com/Pasumao); if you find them useful, a ⭐ on GitHub is always welcome.
 

package/README.md

@@ -130,9 +130,17 @@ pnpm run typecheck
 
 ```powershell
 dsh plugin --profile web remove dsh-plugin-workbench
-# 并还原布局 bundle（patches/layout.backup/client.js.orig → dsh-client-ui-layout/lib/client.js）
+# 可选：把布局 bundle 还原为官方原始版本（推荐，卸载后干净如初）
+node node_modules/dsh-plugin-workbench/scripts/patch-layout.mjs --restore
+# 重启 dsh web
 ```
 
+> 不跑 `--restore` 也没关系：0.0.18 起布局补丁会自适应——explorer 列在没有插件
+> 往 `explorer` / `explorer.preview` 插槽注册内容时自动收起（宽度归 0），
+> 卸载后不会残留空列。`--restore` 只是把它还原成完全未打补丁的原始 bundle。
+> 脚本带两道防呆：目标看起来已是未打补丁的新版 bundle（dsh 刚升级过）、或备份
+> 属于更旧的 dsh 版本时，会拒绝回滚并提示（`--force` 可强行恢复）。
+
 ## 说明
 
 - `/dsh-plugin-files` RPC 通道仅限 loopback；写操作显式以 `danger-full-access` 执行；
@@ -171,6 +179,7 @@ dsh plugin --profile web remove dsh-plugin-workbench
 | [dsh-plugin-table-zoom](https://www.npmjs.com/package/dsh-plugin-table-zoom) | [GitHub 仓库](https://github.com/Pasumao/dsh-plugin-table-zoom) | 聊天长表格浮窗查看 + 一键复制 Markdown |
 | [dsh-plugin-windows-guard](https://www.npmjs.com/package/dsh-plugin-windows-guard) | [GitHub 仓库](https://github.com/Pasumao/dsh-plugin-windows-guard) | Windows 环境防坑：守则技能 + 乱码检测 / 危险写拦截 / 编码诊断修复 |
 
+| [dsh-plugin-context-trim](https://www.npmjs.com/package/dsh-plugin-context-trim) | [GitHub 仓库](https://github.com/Pasumao/dsh-plugin-context-trim) | 会话注入门控：skill / tool / 提示词段落按会话裁剪 |
 > 本系列其余插件见 [Pasumao · dsh 插件](https://github.com/Pasumao)；觉得好用欢迎到 GitHub 点 ⭐。
 
 ## AI 生成声明

package/lib/index.js

@@ -165,10 +165,13 @@ function pathOf(payload) {
 * fine — this is the exact failure this auto-heal guards against.
 */
 const LAYOUT_PATCH_MARKERS = [
-	"\"explorerCol\": \"",
+	"\"explorerCol\": \"pI_x6G_explorerCol\"",
 	"setExplorer: (d, px) => {",
 	"renderSlot(\"explorer\"",
-	"conversationSeat"
+	"renderSlot(\"explorer.preview\"",
+	"conversationSeat",
+	"explorerOccupied",
+	"entries(\"explorer\").length + ctx.slots"
 ];
 /** Resolve the installed dsh-client-ui-layout client bundle (profile node_modules junction). */
 function layoutClientPath() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-plugin-workbench",
   "description": "VS Code-style workspace file explorer for the DeepSeek Harness web GUI — editable preview with syntax highlighting, tabs and line numbers, full right-click file operations (create / rename / delete / copy / cut / paste / reveal in file manager), inline image & markdown preview, @-mention files into chat, drag files into the composer, per-workspace state with undo. Turns the dsh web page into a lightweight code editor.",
-  "version": "0.0.17",
+  "version": "0.0.20",
   "type": "module",
   "packageManager": "pnpm@11.21.0",
   "engines": {

package/scripts/patch-layout.mjs

@@ -21,6 +21,14 @@
  *
  * Usage:
  *   node scripts/patch-layout.mjs [--target <abs path to client.js>] [--force]
+ *   node scripts/patch-layout.mjs [--target <abs path to client.js>] --restore
+ *
+ * --restore copies the pristine backup (patches/layout.backup/client.js.orig,
+ * written by the first successful patch) back over the target — the uninstall
+ * recovery path: after removing this plugin, run this once and restart dsh web
+ * to get the stock dsh-client-ui-layout bundle back. Without it a leftover
+ * patch is harmless since 0.0.18 (the explorer column auto-hides when no
+ * plugin contributes to its slots), but restoring is the clean state.
  *
  * Default target resolves the profile junction to its npx-cache copy:
  *   <DSH_HOME>/profiles/node_modules/@deepseek-ai/dsh-client-ui-layout/lib/client.js
@@ -37,6 +45,7 @@ const BACKUP_DIR = join(REPO_ROOT, 'patches', 'layout.backup')
 const args = process.argv.slice(2)
 const targetArg = args.includes('--target') ? args[args.indexOf('--target') + 1] : undefined
 const force = args.includes('--force')
+const restore = args.includes('--restore')
 
 const dshHome = process.env.DSH_HOME ?? join(homedir(), '.dsh')
 const defaultTarget = join(dshHome, 'profiles', 'node_modules', '@deepseek-ai', 'dsh-client-ui-layout', 'lib', 'client.js')
@@ -125,17 +134,32 @@ const REPLACEMENTS = [
   {
     id: 'store.init.explorer',
     anchor: '\t\t\t\t\tsidebar: 280,\n\t\t\t\t\tdetails: 0,',
-    replacement: '\t\t\t\t\tsidebar: 280,\n\t\t\t\t\texplorer: 260,\n\t\t\t\t\tdetails: 0,',
+    replacement: '\t\t\t\t\tsidebar: 280,\n\t\t\t\t\texplorer: 260,\n\t\t\t\t\texplorerOccupied: false,\n\t\t\t\t\tdetails: 0,',
   },
   {
     id: 'store.action.setExplorer',
     anchor: '\t\t\t\t\tsetDetails: (d, px) => {\n\t\t\t\t\t\td.details = clampWidth(px, 300, 520);\n\t\t\t\t\t},',
-    replacement: '\t\t\t\t\tsetDetails: (d, px) => {\n\t\t\t\t\t\td.details = clampWidth(px, 300, 520);\n\t\t\t\t\t},\n\t\t\t\t\tsetExplorer: (d, px) => {\n\t\t\t\t\t\td.explorer = clampWidth(px, 200, 420);\n\t\t\t\t\t},',
+    replacement: '\t\t\t\t\tsetDetails: (d, px) => {\n\t\t\t\t\t\td.details = clampWidth(px, 300, 520);\n\t\t\t\t\t},\n\t\t\t\t\tsetExplorer: (d, px) => {\n\t\t\t\t\t\td.explorer = clampWidth(px, 200, 420);\n\t\t\t\t\t},\n\t\t\t\t\tsetExplorerOccupied: (d, occupied) => {\n\t\t\t\t\t\td.explorerOccupied = occupied;\n\t\t\t\t\t},',
+  },
+  {
+    id: 'controller.setExplorerOccupied',
+    anchor: '\t\t\tcloseDetails() {\n\t\t\t\tthis.#require().closeDetails();\n\t\t\t}',
+    replacement: '\t\t\tcloseDetails() {\n\t\t\t\tthis.#require().closeDetails();\n\t\t\t}\n\t\t\tsetExplorerOccupied(occupied) {\n\t\t\t\tif (this.#panels !== void 0) this.#panels.setExplorerOccupied(occupied);\n\t\t\t}',
+  },
+  {
+    id: 'apply.explorerOccupancy',
+    anchor: '\t\t\t\t\tinject: (actions) => {\n\t\t\t\t\t\tlayout.attachPanels(actions);\n\t\t\t\t\t\treturn {};\n\t\t\t\t\t}',
+    replacement: '\t\t\t\t\tinject: (actions) => {\n\t\t\t\t\t\tlayout.attachPanels(actions);\n\t\t\t\t\t\tlayout.setExplorerOccupied(ctx.slots.entries("explorer").length + ctx.slots.entries("explorer.preview").length > 0);\n\t\t\t\t\t\treturn {};\n\t\t\t\t\t}',
+  },
+  {
+    id: 'apply.explorerOccupancyWatch',
+    anchor: '\t\t\t\treturn () => {\n\t\t\t\t\tdisposeRegistration();\n\t\t\t\t\tdisposeService();\n\t\t\t\t};\n\t\t\t}, "ui-layout: service + root registration");',
+    replacement: '\t\t\t\treturn () => {\n\t\t\t\t\tdisposeRegistration();\n\t\t\t\t\tdisposeService();\n\t\t\t\t};\n\t\t\t}, "ui-layout: service + root registration");\n\t\t\tctx.effect(() => {\n\t\t\t\tconst syncExplorer = () => {\n\t\t\t\t\tlayout.setExplorerOccupied(ctx.slots.entries("explorer").length > 0 || ctx.slots.entries("explorer.preview").length > 0);\n\t\t\t\t};\n\t\t\t\tsyncExplorer();\n\t\t\t\treturn ctx.on("slots/changed", syncExplorer);\n\t\t\t}, "ui-layout: explorer occupancy sync");',
   },
   {
     id: 'appframe.computeCall',
     anchor: 'const cols = computeColumns(viewport, sidebarCollapsed ? 0 : panels.sidebar === 0 ? 280 : panels.sidebar, detailsSession === void 0 ? 0 : panels.details);',
-    replacement: 'const explorerEffective = narrow ? 0 : panels.explorer;\n\t\t\tconst cols = computeColumns(viewport, sidebarCollapsed ? 0 : panels.sidebar === 0 ? 280 : panels.sidebar, explorerEffective, detailsSession === void 0 ? 0 : panels.details);',
+    replacement: 'const explorerEffective = narrow || !panels.explorerOccupied ? 0 : panels.explorer;\n\t\t\tconst cols = computeColumns(viewport, sidebarCollapsed ? 0 : panels.sidebar === 0 ? 280 : panels.sidebar, explorerEffective, detailsSession === void 0 ? 0 : panels.details);',
   },
   {
     id: 'appframe.explorerBase',
@@ -257,8 +281,55 @@ const REPLACEMENTS = [
 // desktop-ci variant: same table, with `computeColumns` swapped for the anchor
 // pair extracted mechanically from a real DSH Desktop packaged bundle.
 const DESKTOP_CI = JSON.parse(readFileSync(join(SCRIPT_DIR, 'layout-anchors.desktop-ci.json'), 'utf8'))
+
+/**
+ * Delta table for bundles already carrying the PREVIOUS revision of this patch
+ * (explorer column without occupancy gating). Anchors exist only in that
+ * intermediate state, so these variants never match a pristine bundle — the
+ * full variants above win there. Same for both npm and desktop-ci builds:
+ * none of the delta anchors touch the `computeColumns` body.
+ */
+const DELTA_REPLACEMENTS = [
+  {
+    id: 'delta.appframe.computeCall',
+    anchor: 'const explorerEffective = narrow ? 0 : panels.explorer;',
+    replacement: 'const explorerEffective = narrow || !panels.explorerOccupied ? 0 : panels.explorer;',
+  },
+  {
+    id: 'delta.store.init',
+    anchor: '\t\t\t\t\texplorer: 260,\n\t\t\t\t\tdetails: 0,',
+    replacement: '\t\t\t\t\texplorer: 260,\n\t\t\t\t\texplorerOccupied: false,\n\t\t\t\t\tdetails: 0,',
+  },
+  {
+    id: 'delta.store.action',
+    anchor: '\t\t\t\t\tsetExplorer: (d, px) => {\n\t\t\t\t\t\td.explorer = clampWidth(px, 200, 420);\n\t\t\t\t\t},',
+    replacement: '\t\t\t\t\tsetExplorer: (d, px) => {\n\t\t\t\t\t\td.explorer = clampWidth(px, 200, 420);\n\t\t\t\t\t},\n\t\t\t\t\tsetExplorerOccupied: (d, occupied) => {\n\t\t\t\t\t\td.explorerOccupied = occupied;\n\t\t\t\t\t},',
+  },
+  {
+    id: 'delta.controller',
+    anchor: '\t\t\tcloseDetails() {\n\t\t\t\tthis.#require().closeDetails();\n\t\t\t}',
+    replacement: '\t\t\tcloseDetails() {\n\t\t\t\tthis.#require().closeDetails();\n\t\t\t}\n\t\t\tsetExplorerOccupied(occupied) {\n\t\t\t\tif (this.#panels !== void 0) this.#panels.setExplorerOccupied(occupied);\n\t\t\t}',
+  },
+  {
+    id: 'delta.watch',
+    anchor: '\t\t\t\treturn () => {\n\t\t\t\t\tdisposeRegistration();\n\t\t\t\t\tdisposeService();\n\t\t\t\t};\n\t\t\t}, "ui-layout: service + root registration");',
+    replacement: '\t\t\t\treturn () => {\n\t\t\t\t\tdisposeRegistration();\n\t\t\t\t\tdisposeService();\n\t\t\t\t};\n\t\t\t}, "ui-layout: service + root registration");\n\t\t\tctx.effect(() => {\n\t\t\t\tconst syncExplorer = () => {\n\t\t\t\t\tlayout.setExplorerOccupied(ctx.slots.entries("explorer").length > 0 || ctx.slots.entries("explorer.preview").length > 0);\n\t\t\t\t};\n\t\t\t\tsyncExplorer();\n\t\t\t\treturn ctx.on("slots/changed", syncExplorer);\n\t\t\t}, "ui-layout: explorer occupancy sync");',
+  },
+  {
+    id: 'delta.apply',
+    anchor: '\t\t\t\t\tinject: (actions) => {\n\t\t\t\t\t\tlayout.attachPanels(actions);\n\t\t\t\t\t\treturn {};\n\t\t\t\t\t}',
+    replacement: '\t\t\t\t\tinject: (actions) => {\n\t\t\t\t\t\tlayout.attachPanels(actions);\n\t\t\t\t\t\tlayout.setExplorerOccupied(ctx.slots.entries("explorer").length + ctx.slots.entries("explorer.preview").length > 0);\n\t\t\t\t\t\treturn {};\n\t\t\t\t\t}',
+  },
+]
+
+/** Delta #2: bundles carrying the FIRST occupancy delta (watch effect only, no
+ * inject-hook sync). Just the inject-hook injection; the watch block already exists. */
+const DELTA2_REPLACEMENTS = DELTA_REPLACEMENTS.filter((item) => item.id === 'delta.apply')
+
 const VARIANTS = [
   { id: 'npm', replacements: REPLACEMENTS },
+  { id: 'npm-delta', replacements: DELTA_REPLACEMENTS },
+  { id: 'npm-delta2', replacements: DELTA2_REPLACEMENTS },
   {
     id: 'desktop-ci',
     replacements: REPLACEMENTS.map((item) =>
@@ -267,9 +338,11 @@ const VARIANTS = [
         : item
     ),
   },
+  { id: 'desktop-ci-delta', replacements: DELTA_REPLACEMENTS },
+  { id: 'desktop-ci-delta2', replacements: DELTA2_REPLACEMENTS },
 ]
 
-const PATCHED_MARKERS = ['"explorerCol": "pI_x6G_explorerCol"', 'setExplorer: (d, px) => {', 'renderSlot("explorer"', 'renderSlot("explorer.preview"', 'conversationSeat']
+const PATCHED_MARKERS = ['"explorerCol": "pI_x6G_explorerCol"', 'setExplorer: (d, px) => {', 'renderSlot("explorer"', 'renderSlot("explorer.preview"', 'conversationSeat', 'explorerOccupied', 'entries("explorer").length + ctx.slots']
 
 function applyReplacements(original, replacements) {
   let patched = original
@@ -300,6 +373,44 @@ function main() {
   const real = realpathSync(target)
   const original = readFileSync(real, 'utf8')
 
+  // Uninstall recovery: copy the pristine pre-patch bundle back over the
+  // target. Runs before every other check — restoring must work regardless of
+  // the current bundle's patch state.
+  if (restore) {
+    const pristine = join(BACKUP_DIR, 'client.js.orig')
+    if (!existsSync(pristine)) {
+      console.error('[patch-layout] no pristine backup found at ' + pristine)
+      console.error('[patch-layout] recover by reinstalling the package instead:')
+      console.error('  cd <dsh profile dir> && pnpm install   # (or upgrade dsh — the bundle ships with it)')
+      process.exit(1)
+    }
+    // Staleness guard 1: the target may be a NEWER pristine from a dsh upgrade
+    // (nothing to restore). Refuse unless --force.
+    const looksPatched = PATCHED_MARKERS.some((marker) => original.includes(marker))
+    // Staleness guard 2: the backup must itself be a pristine this script can
+    // still patch (an old-dsh backup is useless on a newer dsh — restoring it
+    // would be a silent downgrade). Refuse unless --force.
+    const backupText = readFileSync(pristine, 'utf8')
+    const backupPatchable = VARIANTS.filter((v) => v.id !== 'npm-delta' && v.id !== 'desktop-ci-delta')
+      .some((variant) => applyReplacements(backupText, variant.replacements).failures.length === 0)
+    if ((!looksPatched || !backupPatchable) && !force) {
+      if (!looksPatched) {
+        console.error('[patch-layout] target does not look patched — it may be a newer pristine bundle from a dsh upgrade.')
+      }
+      if (!backupPatchable) {
+        console.error('[patch-layout] the pristine backup predates the installed dsh version (its anchors no longer match).')
+        console.error('[patch-layout] recover by reinstalling the package instead:')
+        console.error('  cd <dsh profile dir> && pnpm install   # (or upgrade dsh — the bundle ships with it)')
+      }
+      console.error('[patch-layout] refusing a risky restore; pass --force to restore anyway.')
+      process.exit(1)
+    }
+    copyFileSync(pristine, real)
+    console.log(`[patch-layout] restored the pristine dsh-client-ui-layout bundle: ${real}`)
+    console.log('[patch-layout] restart dsh web to serve the restored bundle.')
+    return
+  }
+
   const alreadyPatched = PATCHED_MARKERS.every((marker) => original.includes(marker))
   if (alreadyPatched && !force) {
     console.log(`[patch-layout] already patched (${real}) — nothing to do.`)
@@ -324,9 +435,23 @@ function main() {
 
   mkdirSync(BACKUP_DIR, { recursive: true })
   const pristine = join(BACKUP_DIR, 'client.js.orig')
-  if (!existsSync(pristine)) {
+  // client.js.orig must hold the PRISTINE bundle of the CURRENT dsh version —
+  // it is what --restore hands back on uninstall. A dsh upgrade reverts the
+  // bundle to a fresh pristine, so whenever the pre-patch target itself looks
+  // unpatched, promote it (the previous orig belongs to an older dsh and would
+  // otherwise be restored over a newer install — a silent downgrade). Only a
+  // pre-patch state that already carries our markers gets the timestamped bak.
+  const targetLooksPatched = PATCHED_MARKERS.some((marker) => original.includes(marker))
+  const hadPristine = existsSync(pristine)
+  // The shared pristine backup backs --restore for the DEFAULT profile bundle.
+  // With an explicit --target (testing / another machine's bundle) never touch
+  // it — an unrelated file must not overwrite the restore source.
+  if (targetArg !== undefined) {
+    console.log('[patch-layout] --target given: skipping backup bookkeeping (the shared pristine backup is only managed for the default profile bundle).')
+  } else if (!hadPristine || !targetLooksPatched) {
     copyFileSync(real, pristine)
-    console.log(`[patch-layout] pristine backup written: ${pristine}`)
+    if (!hadPristine) console.log(`[patch-layout] pristine backup written: ${pristine}`)
+    else console.log('[patch-layout] pristine backup refreshed (dsh upgrade detected — the old orig was a different version).')
   } else {
     const stamp = new Date().toISOString().replace(/[:.]/g, '-')
     copyFileSync(real, join(BACKUP_DIR, `client.js.${stamp}.bak`))

package/src/index.ts

@@ -262,10 +262,22 @@ function pathOf(payload: unknown): string | undefined {
  * fine — this is the exact failure this auto-heal guards against.
  */
 const LAYOUT_PATCH_MARKERS = [
-  '"explorerCol": "',
+  // Keep in exact sync with PATCHED_MARKERS in scripts/patch-layout.mjs — a
+  // weaker subset here means a damaged/partially-reverted bundle could pass
+  // the host check yet fail the script's verification, and auto-heal never
+  // fires for it.
+  '"explorerCol": "pI_x6G_explorerCol"',
   'setExplorer: (d, px) => {',
   'renderSlot("explorer"',
+  'renderSlot("explorer.preview"',
   'conversationSeat',
+  // 0.0.18+: occupancy gating — the explorer column must auto-hide when no
+  // plugin contributes to the explorer / explorer.preview slots (issue #2).
+  // 0.0.19: the sync must ALSO run inside the root registration's inject hook —
+  // apply-time sync lands before attachPanels (a no-op) and after the one-shot
+  // registration emit, so without this the column stayed collapsed forever.
+  'explorerOccupied',
+  'entries("explorer").length + ctx.slots',
 ] as const
 
 /** Resolve the installed dsh-client-ui-layout client bundle (profile node_modules junction). */