dsh-rewind-plugin 0.10.0-alpha.1 → 0.11.0-alpha.1

package/README.en.md

@@ -1,7 +1,7 @@
 # dsh-rewind
 
 > [!WARNING]
-> **Planning to use DSH `0.1.3`? Install a `v0.9.x` release as soon as possible and run `/dsh-rewind-fix` to update old rewind markers** ([update guide](docs/rewind-fix.md)).
+> **Install a `v0.9.x` release on DSH `0.1.2-rc.1` as early as possible, and run `/dsh-rewind-fix` to update old sessions' rewind markers** ([update guide](docs/rewind-fix.md)).
 
 Conversation rewind for DeepSeek Harness: **rewind the conversation to any earlier user message in one click, in the same window** — no new branch, no window switch, with optional workspace-file restore (full Claude Code `/rewind` semantics).
 
@@ -96,8 +96,8 @@ The whole design rests on two principles, simple but deliberate: **the conversat
 
 `append-only` is a hard rule: the session log only grows and is never rewritten — the foundation of auditability and privacy. A rewind never touches history; it makes a single move: append **one content-empty marker message** to the end of the log and use it to "mask + replace" everything after the target message, so the model and the UI see only the part before it.
 
-- The marker is **canonical** — the plugin **replicates** `/compact`'s "hide + replace": `/compact` compresses a span of history into a summary, while `/rewind` swaps in an empty user message. Because it's canonical, the harness's own log replay, `/compact` compaction, and resume preflight all recognize it and never mistake it for a real message.
-- The replacement is **empty** — the model fully ignores the empty message, with no effect (verified theoretically and empirically). Together with the plugin's UI handling, what you and the model see is exactly how the conversation looked at the target — truly "in place".
+- The marker is **canonical** — the plugin **replicates** `/compact`'s "hide + replace": `/compact` compresses a span of history into a summary, while `/rewind` swaps in an empty marker message. Because it's canonical, the harness's own log replay, `/compact` compaction, and resume preflight all recognize it and never mistake it for a real message.
+- The replacement is **imperceptible** — the model ignores the empty marker, with no effect (verified empirically). Together with the plugin's UI handling, what you and the model see is exactly how the conversation looked at the target — truly "in place".
 - Because this is **masking, not deleting**, every withdrawn event stays in the log — auditable, traceable, viewable, and in principle manually recoverable.
 
 > **Design highlight**: the entire conversation rewind is **a single append**. It's deterministic, auditable, and — because the log was never broken — a "clean" time-travel. Minimal action, complete semantics. The compatibility subtleties with the harness (replicating `/compact`, the empty-message mask) are where this plugin is genuinely professional — each is pinned by a dedicated probe test.

package/README.md

@@ -1,7 +1,7 @@
 # dsh-rewind
 
 > [!WARNING]
-> **计划使用 DSH `0.1.3` 的用户：请尽早安装 `v0.9.x` 版本，并运行 `/dsh-rewind-fix` 更新旧回退标记**（[更新指南](docs/rewind-fix.zh.md)）。
+> **请尽早在 DSH `0.1.2-rc.1` 安装 `v0.9.x` 版本，运行 `/dsh-rewind-fix` 更新旧会话的回退标记**（[更新指南](docs/rewind-fix.zh.md)）。
 
 DeepSeek Harness 插件：**一键就地回退对话到任意更早的用户消息**——同窗口内完成，不新建分支、不换窗口，可一并还原工作区文件（完整 Claude Code `/rewind` 语义）。
 
@@ -86,8 +86,8 @@ dsh plugin --profile web add dsh-rewind-plugin
 
 `append-only` 是铁律：会话日志只追加、从不改写——这是可审计与信息安全的地基。回退从不动历史，它只做一步：往日志末尾追加一条**内容为空的标记消息**，把目标消息之后的全部内容「遮蔽 + 替换」掉，让模型和界面都只看得到目标之前的部分。
 
-- **标记是规范的**——插件复刻 `/compact` 标准的「隐藏 + 替换」：`/compact` 把一段历史压缩成摘要，`/rewind` 则换成一条空用户消息。由于其规范性，harness 的日志重放、`/compact` 压缩、续接检查都能正确识别它，绝不会把它误认为真实对话；
-- **替换内容是空的**——模型对空消息完全忽略、无感（理论 + 实测验证）。配合插件对界面显示的处理，模型和你看到的对话就是目标消息当时的样子，真正的「就地」；
+- **标记是规范的**——插件复刻 `/compact` 标准的「隐藏 + 替换」：`/compact` 把一段历史压缩成摘要，`/rewind` 则换成一条空标记消息。由于其规范性，harness 的日志重放、`/compact` 压缩、续接检查都能正确识别它，绝不会把它误认为真实对话；
+- **替换内容无感**——模型对空标记忽略、无感（实测验证）。配合插件对界面显示的处理，模型和你看到的对话就是目标消息当时的样子，真正的「就地」；
 - 因为是「遮蔽」而非「删除」，**被撤回的每一条事件都完整留在日志里**，可审计、可追溯、可查看，原则上也随时能手动恢复。
 
 > **设计点睛**：整个对话回退就是**一条**追加。它确定、可审计，且因为日志从未被破坏，回溯是「干净的」——用最小的动作，实现最完整的语义。那些与 harness 内部的兼容细节（对 `/compact` 的复刻、空消息的遮蔽）正是插件的专业所在，每一条都由专门的探针测试固化。

package/SECURITY.md

@@ -59,13 +59,16 @@ than hidden.
 A failed gate fails closed: an invalid target, a missing store, an absent
 backup, or a cancelled invocation aborts the rewind with an error.
 
-**Automatic store deletion (opt-in)**: unrelated to restores, an enabled
-`snapshot-auto-cleanup` background sweep deletes whole session directories of
-**long-inactive** sessions (default off — the store is otherwise only mutated by
-an explicit rewind apply). It is confined to the store root, uses `lstat` (so it
-never follows a symlink out of the root), skips the active session, and never
-touches the conversation log. When disabled (the default), no automatic deletion
-runs.
+**Automatic store deletion**: two things delete session snapshots. The opt-in
+`snapshot-auto-cleanup` sweep (default off) removes the whole directories of
+**long-inactive** sessions, unrelated to restores. Separately, a session's
+snapshots are cleared automatically when the conversation log's session format
+has changed (a DSH upgrade), because those backups are anchored to message
+positions that no longer line up. Both stay confined to the store root, use
+`lstat` (so they never follow a symlink out of the root), the sweep never targets
+the active session, and neither touches the conversation log. When auto-cleanup
+is disabled (the default), only the format-change clear runs, and only for an
+affected session.
 
 ## Conversation integrity
 

package/docs/architecture.md

@@ -55,8 +55,8 @@ machine channels (see [Compatibility strategy](#compatibility-strategy)).
     user/message currently on the surface)
   → agent.cancel({ keepInbox: true }) if running; waitForAgentIdle
   → dropPendingSteering (next-step inbox only; queued messages untouched)
-  → append the rewind marker = an empty user/message with surfaceOp
-    { op: 'replace', start, end } over every surface node after the
+  → append the rewind marker = a user/message with surfaceOp
+    { op: 'replace', startSeq, endSeq } over every surface node after the
     target (+ sourceEventSeqs = shadowed seqs)          [a single event]
   → if mode 'both': store.restoreAfter(targetSeq) + syncRestoreObservations
   → result text carries machine tokens (impact=<n>, restore:/delete: lines)
@@ -68,11 +68,14 @@ Key invariants:
 
 - **The log is append-only.** The marker is the *only* mutation: it cuts the
   model-visible surface, never the raw history (search/export still see it).
-- **The marker is empty** (`content: []`) and carries the dsh-rewind plugin
-  source. It is a `user/message`, the only surface type that can cite the
-  shadowed seqs (`sourceEventSeqs`) — `assistant/message` can no longer carry
-  them (v2). It derives to itself, so it stays as a present-but-empty user
-  turn at the surface tail rather than entering model context as content.
+- **The marker content is a constant `(empty message)` placeholder.** It carries
+  the dsh-rewind plugin source and is a `user/message`, the only surface type
+  that can cite the shadowed seqs (`sourceEventSeqs`) — `assistant/message` can
+  no longer carry them (v2). It derives to itself, so it stays as a present
+  user turn at the surface tail. The content is provider-independent and never
+  empty: the session log is immutable but the model serving a session may
+  change later, and a strict OpenAI-compatible gateway rejects an empty user
+  message (HTTP 400, Issue #21).
 - **No ghost step frame is needed**: the token-meter step machine ignores
   `user/message`, and the session invariant imposes no open-turn requirement
   on it, so the marker is appended while idle, outside any turn, as one event.
@@ -82,8 +85,9 @@ Key invariants:
 
 ### Marker format history
 
-The rewind marker is written as form C (an empty `user/message` with a
-`surfaceOp.replace` over the shadowed range and `sourceEventSeqs`). Earlier
+The rewind marker is written as form C (a `user/message` with a
+`surfaceOp.replace` over the shadowed range, `sourceEventSeqs`, and the
+constant `(empty message)` content). Earlier
 plugin versions wrote shapes a newer harness no longer accepts:
 
 - **form A** — a bare `assistant/message(turn=N, step=0)` with no frame.

package/docs/compat/audit.md

@@ -50,7 +50,7 @@ legacy branch).
 
 ## Verified-compatible surfaces (probes pass)
 
-- **token-meter replay** (the empty `user/message` marker + multiple rewinds + interleaved real turns + compact stacking).
+- **token-meter replay** (the `user/message` marker + multiple rewinds + interleaved real turns + compact stacking).
 - **compaction transactions**: `toolPairingBalancedBefore/After` stays balanced after a marker cut; the real `/compact` command (`command-compact` + `compaction-basic`, stub summarizer) can land `compaction/start…end` on top of a rewind marker and stay replayable; `/compact` is a legal no-op on a small surface.
 - **resume replay**: `Session.create(id, events)` replays a rewind/compact-bearing log.
 - **session-stats**: the `user/message` marker adds no step (the step count stays at the real turns' steps), no phantom turn.
@@ -63,8 +63,10 @@ legacy branch).
 
 ## Known behavior boundaries (deterministic differences, non-crash, documented)
 
-- **session-stats / session-telemetry fold the full log**: post-rewind stats do **not** rewind — `turns`/`steps`/`llmMs` still include withdrawn content; the empty `user/message` marker is folded as a present-but-empty user turn (it adds no step). This is the intended "fold the full log" semantics, pinned by probe.
-- **token-meter usage anchor stays stable** (G3): the empty `user/message` marker carries no usage, but because it is not an `assistant/message`, the baseline anchor does not drop to a heuristic estimate — it stays `usage` across a rewind. Pinned by `compat-gaps` G3.
+- **session-stats / session-telemetry fold the full log**: post-rewind stats do **not** rewind — `turns`/`steps`/`llmMs` still include withdrawn content; the `user/message` marker is folded as a present user turn (it adds no step). This is the intended "fold the full log" semantics, pinned by probe.
+- **token-meter usage anchor stays stable** (G3): the `user/message` marker carries no usage, but because it is not an `assistant/message`, the baseline anchor does not drop to a heuristic estimate — it stays `usage` across a rewind. Pinned by `compat-gaps` G3.
+- **marker content is the constant `(empty message)` placeholder**: never empty, because the session log is immutable but the model serving a session may change later — a strict OpenAI-compatible gateway rejects an empty user message (HTTP 400, Issue #21). The marker is a small visible user turn in derived history. Pin: `verify-host` (`marker is a user/message with the dsh-rewind plugin source and the (empty message) placeholder`).
+- **marker shape (v3)**: the replace `surfaceOp` is `{ op: 'replace', startSeq, endSeq }` (renamed from `start`/`end` in session-format v3), and the dsh-rewind source now carries `targetSeq`; the `user/message` + `sourceEventSeqs` shape and the `(empty message)` content are unchanged.
 - **Withdrawn content stays searchable/exportable**: session-query full-text and `/export` read the raw log; a rewind cuts only the surface, so withdrawn messages remain (declared in the README).
 - **Session title auto-regeneration**: the title derives from the surface, so an automatically-derived title may change after a rewind.
 - **Files written but uncommitted in a cancelled turn**: a `both` rewind cannot restore them (tool side-effect timing; same as Claude Code).
@@ -100,6 +102,14 @@ The plugin treats these as harness-side defects it does not compensate for. Each
   are English for **every** host command — system plugins also pass raw English `description`
   strings, e.g. `/goal` — so this behavior is consistent with the ecosystem, not a plugin
   deviation.)
+- **Client-side command-description i18n is first-party-only**: DSH also localizes host command
+  descriptions through the client `locale` binding (`ui-commands`), but the description keys come
+  from a **closed allowlist** (`HOST_DESCRIPTION_KEYS`: compact, export, feedback, goal,
+  permission, plan). A command outside that set — every third-party plugin — is passed through
+  verbatim, never translated (`hostDescription` only rewrites a description that equals the
+  first-party English copy). So the plugin's own `/rewind` command description can never ride this
+  channel either; it is authored in the host's tongue (English by default), same as the host
+  runtime copy above.
 
 ### R-OPENSTEP (rewind part resolved): an unclosed `step` in the log breaks token-meter replay; the rewind no longer compounds it
 

package/docs/release/release.md

@@ -91,6 +91,13 @@ appended) when DSH releases a new tuple.
 - **After DSH goes final**: final releases are not bound by the prerelease
   tuple rule, so the peers can converge to a single stable range (e.g.
   `^0.1.x`); this section can then be deleted.
+- **Declared minimum (`dsh.engines.dsh`)**: alongside the peer tuple, each
+  release declares the DSH runtime floor under `dsh.engines.dsh` (e.g.
+  `>=0.1.2-rc.1`), consumed by the plugin-manager update guard. Bump it in
+  the same release that raises the peer tuple; never leave code raised while
+  the declared floor stays behind. Only the `>=X.Y.Z[-pre]` form is
+  supported (`^`/`~`/multi-range are treated as "cannot verify" and
+  fail closed).
 
 ## Versioned-line release model
 

package/docs/release/release.zh.md

@@ -79,6 +79,11 @@ DSH 仍在 rc 阶段，npm 的 prerelease 匹配规则要求 peer 范围与宿
   → devDependencies 同步升到最新 → `npm install` → `npm run check` → 发版。
 - **正式版后收敛**：DSH 发布 final 版本后，正式版不受 prerelease 元组规则
   限制，peer 可收敛为稳定的 `^0.1.x` 单范围，此节即可删除。
+- **声明的最低运行时（`dsh.engines.dsh`）**：与 peer 元组一起，每个发布在
+  `dsh.engines.dsh` 声明 DSH 运行时下限（如 `>=0.1.2-rc.1`），供插件管理器
+  更新守卫读取。**与 peer 元组持平的同一发布里一并 bump**；不可只升代码、
+  声明下限停留在旧值。仅支持 `>=X.Y.Z[-pre]` 形式（`^`/`~`/多范围会被视为
+  「无法校验」而 fail-closed）。
 
 ## 发布版本线模型
 

package/docs/rewind-fix.md

@@ -4,18 +4,19 @@
 
 ## Applies to
 
-- **DSH**: `0.1.2-rc.1`
-- **dsh-rewind**: `0.9.0-alpha.1`, `0.9.0-alpha.2`, `0.9.0`
+- **DSH version**: `0.1.2-rc.1`.
+- **Plugin version**: `v0.9.0-alpha.1`, `v0.9.0-alpha.2`, `v0.9.0`, `v0.9.1` (recommended).
+- **Audience**: users planning to use a future DSH version who used an early plugin (≤ 0.8.0).
 
 ## Background
 
-`dsh-rewind` rewinds **within the same session** — it never forks a branch. It also follows the conservative policy of **deleting no history** (the session log is an append-only audit trail): it only **appends a marker**, telling DSH "the model-visible conversation continues from this message; everything after it is rolled back". Older plugin versions wrote that **rewind marker** as a "ghost step frame", which worked reliably on DSH v0.1.2-rc.1 and earlier.
+`dsh-rewind` rewinds **within the same session** — it never forks a branch, and the session log stays the single source. The plugin follows a conservative policy: it deletes no history, and only **appends a rewind marker** telling DSH "the model-visible conversation continues from this message; everything after it is rolled back". Older plugin versions wrote that **rewind marker** as a "ghost step frame", which worked reliably on DSH `v0.1.2-rc.1` and earlier.
 
-But DSH v0.1.3 (alpha) introduces a stricter **session-format validation**. We discovered ahead of time that the **rewind markers** written by older plugin versions **cannot be validated** under those stricter checks, so **a session rewound with `/rewind` may fail to open** when that line ships.
+But starting with DSH `v0.1.3-alpha.1`, a stricter **session-format validation** is introduced. We discovered ahead of time that the **rewind markers** written by older plugin versions **cannot be validated** under those stricter checks, so **a session that was rewound may fail to open**.
 
 The plugin is prepared in two parts, both shipped in the new version:
 
-1. **New rewind markers use the new shape** (forward) — this is a **correct, low-risk**, long-term change (see the [README](../README.en.md), the "How it works" section), and the new shape is fully compatible with **both old and new** DSH.
+1. **New rewind markers use the new shape** (forward) — this is a **correct, low-risk**, long-term change aligned with the official `/compact` design (see the [README](../README.en.md), the "How it works" section), and the new shape is fully compatible with **both old and new** DSH.
 
 2. **The `/dsh-rewind-fix` command** (backward) — for **already-existing** old sessions, the plugin ships a convenient update command that translates those old markers into the new shape so the sessions are usable again.
 
@@ -54,7 +55,7 @@ Then run the command **in this new session**, and it will update the old session
 
 ### Step 4 · Preview the update scope
 
-Type `/dsh-rewind-fix` in the composer and send it. It only scans, doesn't write. The editor locks while it runs, which is normal. **Don't switch session windows midway.** When it finishes, it reports how many sessions were scanned, how many will be updated, how many skipped, and how many failed. Confirm those are what you expect before moving on.
+Type `/dsh-rewind-fix` in the composer and send it. It only scans, doesn't write. The editor locks while it runs, which is normal. **Don't switch session windows midway**. When it finishes, it reports how many sessions were scanned, how many will be updated, how many skipped, and how many failed. Confirm those are what you expect before moving on.
 ```
 /dsh-rewind-fix
 ```
@@ -73,7 +74,7 @@ After the run, restart DSH, then **preview once more**:
 ```
 /dsh-rewind-fix
 ```
-If it says there are no more sessions to update, the markers are all current and the old sessions will open normally.
+If it says there are no more sessions to update, the markers are all current and the old sessions will open normally. If there are still sessions to update, they may have been loaded during the run — restart in a temporary session window and retry.
 
 ### Step 7 · Delete the backup after confirming (optional)
 
@@ -84,5 +85,5 @@ rm -rf ~/.dsh/sessions.backup ~/.dsh/rewind-snapshots.backup
 
 ## Notes
 
-- The session logs are still v0 format; when DSH's later `v0 → v1 → v2` migration (in `v0.1.3`) arrives, if you've completed the `rewind` marker update, the markers themselves won't block it.
+- The session logs are still v0 format; when DSH's later `v0 → v1 → v2 → v3` migration arrives, if you've completed the `rewind` marker update, the markers themselves won't block it.
 - Some sessions may still be blocked by an **unclosed turn** (a turn that was interrupted/cancelled and never wrote `turn/end`). Per the empirical analysis these are widespread and **unrelated to rewind** — they're a DSH-side issue and this tool doesn't handle them. **So updating the markers doesn't guarantee you can upgrade to the next DSH line.**

package/docs/rewind-fix.zh.md

@@ -4,18 +4,19 @@
 
 ## 适配
 
-- **DSH**: `0.1.2-rc.1`
-- **dsh-rewind**: `0.9.0-alpha.1`, `0.9.0-alpha.2`, `0.9.0`
+- **DSH 版本**：`v0.1.2-rc.1`。
+- **插件版本**：`v0.9.0-alpha.1`，`v0.9.0-alpha.2`，`v0.9.0`，`v0.9.1`（推荐）。
+- **适用人群**：计划使用未来版本 DSH，且使用过早期版本插件（≤ 0.8.0）的用户。
 
 ## 背景
 
-`dsh-rewind` 的回退是**同一会话**的消息回退。它从不新建分支，同时遵循保守策略：**不删除任何历史**（会话日志是 append-only 审计轨迹），只在日志里**追加一条标记**，表示“模型可见的对话从这条消息继续，其后内容回卷”。旧版插件的 **rewind 标记**用的是「幽灵步骤框架」写法，在 DSH v0.1.2-rc.1 及之前版本长期验证有效。
+`dsh-rewind` 的回退是**同一会话**的消息回退。它从不新建分支，会话日志保持同一份。插件遵循保守策略：不删除任何历史，只在会话日志里**追加一条 rewind 标记**，表示“模型可见的对话从这条消息继续，其后内容回卷”。旧版插件的 **rewind 标记**用的是「幽灵步骤框架」写法，在 DSH `v0.1.2-rc.1` 及之前的版本长期验证有效。
 
-但 DSH v0.1.3（alpha）引入了更严格的**会话格式校验**。我们提前发现：旧版本往会话日志里写入的 **rewind 标记**，在这种严格校验下**无法自证合法**，届时会导致**碰过 `/rewind` 的旧会话打不开**。
+但从 `v0.1.3-alpha.1` 开始，DSH 引入了更严格的**会话格式校验**。我们提前发现：旧版本往会话日志里写入的 **rewind 标记**，在这种严格校验下**无法自证合法**，届时会导致**回退过的旧会话打不开**。
 
 插件做了两阶段准备，已在新版本中包含：
 
-1. **新产生的 rewind 标记换成新格式**（向前）——这一步是**正确、低风险**的长期改动（见 [README](../README.md) 的「原理」一节），新格式对**新旧版本** DSH 均完全兼容。
+1. **新产生的 rewind 标记换成新格式**（向前）——这一步是**正确、低风险**的长期改动（对标官方 `/compact` 设计，见 [README](../README.md)「原理」一节），新格式对**新旧版本** DSH 均完全兼容。
 
 2. **提供 `/dsh-rewind-fix` 命令**（向后）——对于**已经存在**的旧会话，本插件提供便捷更新命令，把旧标记「翻译」成新格式，让会话重新可用。
 
@@ -54,7 +55,7 @@ cp -r ~/.dsh/rewind-snapshots  ~/.dsh/rewind-snapshots.backup
 
 ### 第四步 · 预览更新范围
 
-在编辑区域输入 `/dsh-rewind-fix` 并发送。它只扫描、不写盘。执行时编辑区会正常锁定。**不要中途切换会话窗口。**完成后会告诉你：扫描了几个会话、其中几个将被更新、几个跳过、几个失败。确认是你预期的那几项，再进下一步。
+在编辑区域输入 `/dsh-rewind-fix` 并发送。它只扫描、不写盘。执行时编辑区会正常锁定。**不要中途切换会话窗口**。完成后会告诉你：扫描了几个会话、其中几个将被更新、几个跳过、几个失败。确认是你预期的那几项，再进下一步。
 ```
 /dsh-rewind-fix
 ```
@@ -73,7 +74,7 @@ cp -r ~/.dsh/rewind-snapshots  ~/.dsh/rewind-snapshots.backup
 ```
 /dsh-rewind-fix
 ```
-如果提示已经没有待更新的会话，说明标记已全部更新到位，旧会话就能正常打开了。
+如果提示已经没有待更新的会话，说明标记已全部更新到位，旧会话就能正常打开了。如果还有未更新的会话，可能是执行时被加载过，在临时会话窗口重启并重试即可。
 
 ### 第七步 · 确认正常后删除备份（可选）
 
@@ -84,5 +85,5 @@ rm -rf ~/.dsh/sessions.backup ~/.dsh/rewind-snapshots.backup
 
 ## 补充说明
 
-- 当前会话日志仍为 v0 格式；DSH 后续（`v0.1.3`）的 `v0 → v1 → v2` 迁移到来时，如果你完成了 `rewind` 标记更新，标记本身就不会阻断它。
+- 当前会话日志仍为 v0 格式；DSH 后续的 `v0 → v1 → v2 → v3` 迁移到来时，如果你完成了 `rewind` 标记更新，标记本身就不会阻断它。
 - 个别会话还可能因**未闭合的 turn**（某次回合被打断/取消、没写 `turn/end`）等问题而卡住迁移——根据实测分析，这些问题普遍存在，**与 rewind 无关**，属 DSH 侧自身问题，本工具不处理。**所以更新完标记并不保证一定能升到下一 DSH 线。**

package/lib/client.js

@@ -399,7 +399,7 @@ var STYLE = `
 .dsh-rewind-cleanup-body {
   border-top: 0.5px solid var(--dsw-alias-border-l2);
   margin: 0 16px;
-  padding: 4px 0 8px;
+  padding: 0 0 8px;
 }
 .dsh-rewind-cleanup-readonly {
   margin: 12px 0 0;
@@ -421,6 +421,12 @@ var STYLE = `
 .dsh-rewind-cleanup-field + .dsh-rewind-cleanup-field {
   border-top: 0.5px solid var(--dsw-alias-border-l2);
 }
+/* Auto-cleanup (permission) block and the max-age field are consecutive control
+ * sections of the open card \u2014 give them the same 0.5px divider the harness gives
+ * every pair of config fields (fields.module.css field + field). */
+.dsh-rewind-cleanup-permission + .dsh-rewind-cleanup-field {
+  border-top: 0.5px solid var(--dsw-alias-border-l2);
+}
 .dsh-rewind-cleanup-head {
   display: flex;
   align-items: center;
@@ -505,7 +511,7 @@ var STYLE = `
   box-sizing: border-box;
   height: 34px;
   padding: 0 12px;
-  border: 1px solid var(--dsw-alias-border-l2);
+  border: 0.5px solid var(--dsw-alias-border-l4);
   border-radius: 8px;
   background: var(--dsw-alias-bg-layer-3);
   font: inherit;
@@ -530,7 +536,7 @@ var STYLE = `
   justify-content: flex-end;
   gap: 8px;
   padding: 12px 0 4px;
-  border-top: 1px solid var(--dsw-alias-border-l2);
+  border-top: 0.5px solid var(--dsw-alias-border-l2);
 }
 .dsh-rewind-cleanup-failed {
   flex: 1;
@@ -1339,8 +1345,8 @@ function createRewindBridge(deps) {
 }
 
 // src/client/build-info.ts
-var PLUGIN_VERSION = true ? "0.10.0-alpha.1" : "dev";
-var BUILD_HASH = true ? "7022eaa4" : "dev";
+var PLUGIN_VERSION = true ? "0.11.0-alpha.1" : "dev";
+var BUILD_HASH = true ? "d770983e" : "dev";
 
 // src/client/locales.ts
 var zh = {

package/lib/index.js

@@ -119,6 +119,10 @@ var RewindError = class extends Error {
   }
   code;
 };
+var REWIND_MARKER_BRAND = Object.freeze({ kind: "plugin", plugin: "dsh-rewind" });
+function rewindMarkerSource(targetSeq) {
+  return Object.freeze({ ...REWIND_MARKER_BRAND, targetSeq });
+}
 var CANDIDATE_PREVIEW_CHARS = 80;
 var DEFAULT_CANDIDATE_LIMIT = 100;
 function isUserMessageEvent(event) {
@@ -356,6 +360,13 @@ var SnapshotStore = class _SnapshotStore {
   lastEntry = /* @__PURE__ */ new Map();
   /** Sessions whose dedup state has been seeded from disk this process. */
   seededSessions = /* @__PURE__ */ new Set();
+  /**
+   * Session-format version snapshots are anchored under, stamped into each
+   * session's `format` marker when an entry is recorded. `null` until the host
+   * sets it (from `agent/session-start`), so a session that never records is
+   * never materialized and a marker is only written where snapshots exist.
+   */
+  formatVersion = null;
   constructor(root, opts) {
     this.dedup = opts?.dedup ?? true;
     this.root = root ?? process.env[SNAPSHOT_ROOT_ENV] ?? join(resolveDshHome(opts?.dshHome), SNAPSHOT_DIR_NAME);
@@ -435,6 +446,9 @@ var SnapshotStore = class _SnapshotStore {
       await writeJsonAtomic(file, committed, () => opts?.crash?.("after-temp-write"));
       this.lastEntry.set(key, { content: entry.before, ref: selfRef });
     }
+    if (this.formatVersion !== null) {
+      await this.markFormatVersion(sessionId, this.formatVersion);
+    }
     const now = Date.now();
     if (now - this.lastPruneAt >= _SnapshotStore.PRUNE_INTERVAL_MS) {
       this.lastPruneAt = now;
@@ -631,6 +645,8 @@ var SnapshotStore = class _SnapshotStore {
   }
   /** Prefix of one restore-op journal file inside the session dir. */
   static JOURNAL_PREFIX = "restore-journal-";
+  /** Session-format-version marker file inside the session dir. Non-`.json`, so it never counts as a checkpoint entry. */
+  static FORMAT_FILE = "format";
   /** Absolute path of one restore-op journal file. */
   journalPath(sessionId, opId) {
     return join(this.sessionDir(sessionId), `${_SnapshotStore.JOURNAL_PREFIX}${safeFileId(opId)}.json`);
@@ -1275,6 +1291,75 @@ var SnapshotStore = class _SnapshotStore {
     }
     return { sessionId, ...stats, dryRun };
   }
+  /**
+   * Read the session-format version marker recorded for a session, or `null`
+   * when there is no marker — a pre-marker, legacy snapshot dir, or a session
+   * that never materialized a dir.
+   */
+  async readFormatVersion(sessionId) {
+    try {
+      const raw = await readFile(join(this.sessionDir(sessionId), _SnapshotStore.FORMAT_FILE), "utf8");
+      const parsed = Number(raw.trim());
+      return Number.isFinite(parsed) ? parsed : null;
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Record the session-format version a session's snapshots are anchored under
+   * (`session.header.version`: 2 for the v2 format, 3 for the v3 format). The
+   * marker is a tiny non-`.json` file, so it never counts as a checkpoint
+   * entry in `sessionStats`/`clearSession`. Written atomically (temp + rename)
+   * like every other persisted marker, so a crash mid-write can only leave an
+   * inert `format.tmp` — never a partial marker that a later reconcile could
+   * misread as a version mismatch and wrongly clear.
+   */
+  async markFormatVersion(sessionId, sessionVersion) {
+    const dir = this.sessionDir(sessionId);
+    await mkdir(dir, { recursive: true });
+    const file = join(dir, _SnapshotStore.FORMAT_FILE);
+    const tmp = `${file}.tmp`;
+    await writeFile(tmp, `${sessionVersion}`, "utf8");
+    await rename(tmp, file);
+  }
+  /**
+   * Set the session-format version the store stamps onto every snapshot it
+   * records. The host sets this once per process from `agent/session-start`
+   * (`agent.session.header.version`), so a marker is only materialized for a
+   * session that actually records a snapshot.
+   */
+  setFormatVersion(sessionVersion) {
+    this.formatVersion = sessionVersion;
+  }
+  /**
+   * Session-format-version guard: clear a session's snapshot dir when the
+   * format its snapshots were anchored under differs from the current session
+   * format, so seq-anchored references can never survive a format migration
+   * mis-mapped. Runs at `agent/session-start` — after DSH has migrated/loaded
+   * the session, so `sessionVersion` is the post-migration value.
+   *
+   * Conservative rule (per the "delete stale snapshots" policy): a session
+   * with no recorded marker but with snapshot content is treated as legacy and
+   * cleared; a session whose marker differs from `sessionVersion` is cleared.
+   * A matching version — or an untouched session with nothing to protect — is
+   * left alone. The marker is re-stamped to the current version afterward so a
+   * FUTURE format change is detected on the next start.
+   *
+   * @returns whether a session snapshot dir was cleared.
+   */
+  async reconcileFormatVersion(sessionId, sessionVersion) {
+    const stored = await this.readFormatVersion(sessionId);
+    if (stored === sessionVersion) return { cleared: false };
+    const stats = await this.sessionStats(sessionId);
+    const hasContent = stats.anchorGroups > 0 || stats.journals > 0;
+    if (hasContent) {
+      await this.clearSession(sessionId);
+    }
+    if (hasContent || stored !== null) {
+      await this.markFormatVersion(sessionId, sessionVersion);
+    }
+    return { cleared: hasContent };
+  }
 };
 function hashPath(path) {
   return createHash("sha256").update(path).digest("hex").slice(0, 8);
@@ -1511,12 +1596,11 @@ async function commitEntry(store, pending, anchorCache, trackedBySession, exec,
   }
   tracked.add(capture.path);
 }
-var REWIND_MARKER_SOURCE = { kind: "plugin", plugin: "dsh-rewind" };
-var REWIND_MARKER_CONTENT = [];
-function buildMarker() {
+var REWIND_MARKER_CONTENT = [{ type: "text", text: "(empty message)" }];
+function buildMarker(targetSeq) {
   return createUserMessage({
     content: REWIND_MARKER_CONTENT,
-    source: REWIND_MARKER_SOURCE
+    source: rewindMarkerSource(targetSeq)
   });
 }
 function describeTarget(target) {
@@ -1628,11 +1712,11 @@ async function executeRewind(ctx, store, fs, invocation, rawTarget, mode, inflig
     } catch (error) {
       return rewindErrorResult(error);
     }
-    const marker = buildMarker();
+    const marker = buildMarker(plan.targetSeq);
     let event;
     try {
       event = agent.session.append("user/message", marker, {
-        surfaceOp: { op: "replace", start: plan.surfaceStart, end: plan.surfaceEnd },
+        surfaceOp: { op: "replace", startSeq: plan.surfaceStart, endSeq: plan.surfaceEnd },
         sourceEventSeqs: [...plan.shadowedSeqs]
       });
     } catch (error) {
@@ -1874,6 +1958,21 @@ function apply(ctx, config) {
       handler: (invocation) => handleSnapshotCleanup(store, invocation, dshHome, trackedBySession)
     });
   }, "dsh-rewind command");
+  ctx.on("agent/session-start", ({ agent }) => {
+    const session = agent.session;
+    if (session.header.origin === "subagent" || (session.header.delegationDepth ?? 0) > 0) return;
+    void (async () => {
+      try {
+        store.setFormatVersion(session.header.version);
+        const result = await store.reconcileFormatVersion(session.id, session.header.version);
+        if (result.cleared) {
+          ctx.logger.warn(`[dsh-rewind] cleared snapshots for ${session.id}: session format changed (v${session.header.version})`);
+        }
+      } catch (error) {
+        ctx.logger.warn(`[dsh-rewind] session-format reconcile failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    })();
+  }, { global: true });
   ctx.on("session/event", (session, event) => {
     if (event.type !== "user/message") return;
     const header = session.header;

package/lib/types/client/hidden.d.ts

@@ -104,7 +104,7 @@ export declare function isCandidateCommand(command: CommandNode): boolean;
  * (pending, succeeded, or errored — it only exists to feed the popover) and
  * every SUCCESSFUL executed `/rewind` command row, plus every message
  * withdrawn by a rewind — the target message itself, everything after it, and
- * the (empty, unrendered) marker.
+ * the (unrendered) marker.
  *
  * Each executed rewind cuts ONE span `[target, marker]`: the target message
  * and everything after it, up to the marker appended at rewind time. Spans are

package/lib/types/client/portals.d.ts

@@ -20,6 +20,20 @@
  * typed structurally (see `SlotsLike`) so the plugin never imports the
  * conversation UI package's types and survives its version drift.
  *
+ * COUPLING NOTE — HIGH. There is no harness interface for a per-user-message
+ * action (see docs/compat/audit.md): `MessageIconActions.extraActions` and the
+ * `conversation.chat.assistant-actions` slot are wired for assistant messages
+ * only, and no per-user-message action slot exists. So this portal targets
+ * undocumented internal structure — the `data-chat-flow-kind`,
+ * `data-chat-anchor-key`, `data-composer-input`, `data-composer-card`,
+ * `data-pending-steering` and `data-time-hover-root` attributes plus the
+ * `anchorSeq` field read in `client/hidden.ts`. Those are harness-internal and
+ * may change with the UI; this module (and `hidden.ts`) must be re-adapted to
+ * follow, and is the migration target when a first-class user-action slot or
+ * an official renderer hook surface appears. The coupling is accepted
+ * deliberately because a standards-conformant alternative does not exist
+ * today; it is not a defect to be removed while the DOM-portal approach stands.
+ *
  * @module dsh-rewind/client/portals
  */
 import { type ReactNode } from 'react';

package/lib/types/client/styles.d.ts

@@ -23,4 +23,4 @@ export declare const CLASS: {
 /** The ↶ glyph, drawn inline so the bundle stays dependency-free. */
 export declare const REWIND_ICON_SVG: string;
 /** One injected stylesheet (scoped under `.dsh-rewind-*`). */
-export declare const STYLE = "\n.dsh-rewind-btn {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: 28px;\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary);\n  cursor: pointer;\n}\n.dsh-rewind-btn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.dsh-rewind-popover {\n  position: fixed;\n  z-index: 1000;\n  width: 288px;\n  padding: 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 14px;\n  line-height: 20px;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-popover-title {\n  font-size: 14px;\n  font-weight: 600;\n  line-height: 20px;\n}\n.dsh-rewind-popover-target {\n  margin: 4px 0 10px;\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-all;\n}\n.dsh-rewind-popover-option {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  width: 100%;\n  margin: 0 0 6px;\n  padding: 8px 10px;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n.dsh-rewind-popover-option:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n.dsh-rewind-popover-option:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-option-label {\n  font-weight: 500;\n}\n.dsh-rewind-popover-option-hint {\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-popover-impact {\n  margin: 4px 0 10px;\n  padding: 8px 10px;\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-secondary);\n  white-space: pre-wrap;\n  max-height: 160px;\n  overflow: auto;\n}\n.dsh-rewind-popover-actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: 8px;\n}\n.dsh-rewind-popover-primary,\n.dsh-rewind-popover-ghost {\n  padding: 5px 12px;\n  border: none;\n  border-radius: 8px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 18px;\n  cursor: pointer;\n}\n.dsh-rewind-popover-primary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n.dsh-rewind-popover-primary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n.dsh-rewind-popover-primary:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-ghost {\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-popover-ghost:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.dsh-rewind-guard-hint {\n  position: fixed;\n  z-index: 1000;\n  max-width: min(440px, calc(100vw - 24px));\n  padding: 8px 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 13px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-primary);\n  pointer-events: none;\n}\n\n/* ---- Snapshot-cleanup settings card (mirrors the harness PluginCard look) ---- */\n/* Standardized on the 0.1.2 harness card look (border-radius 16px + 0.5px\n   border-l4, 0.5px internal separators). */\n.dsh-rewind-cleanup-card {\n  list-style: none;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 16px;\n  background: var(--dsw-alias-bg-layer-3);\n  transition: border-color .16s, background .16s;\n}\n.dsh-rewind-cleanup-card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-card-open {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-header {\n  width: 100%;\n  appearance: none;\n  border: 0;\n  background: none;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  border-radius: 12px;\n}\n.dsh-rewind-cleanup-header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n.dsh-rewind-cleanup-head-text {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n.dsh-rewind-cleanup-name {\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-desc {\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-chevron {\n  flex: none;\n  color: var(--dsw-alias-label-tertiary);\n  transition: transform .16s;\n}\n.dsh-rewind-cleanup-chevron-open {\n  transform: rotate(180deg);\n}\n.dsh-rewind-cleanup-pending {\n  flex: none;\n  border-radius: 999px;\n  padding: 1px 8px;\n  font-size: 11px;\n  line-height: 17px;\n  font-weight: 500;\n  white-space: nowrap;\n  background: var(--dsw-alias-bg-module-platform);\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-body {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n  margin: 0 16px;\n  padding: 4px 0 8px;\n}\n.dsh-rewind-cleanup-readonly {\n  margin: 12px 0 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-permission {\n  display: grid;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field + .dsh-rewind-cleanup-field {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-head {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n.dsh-rewind-cleanup-label {\n  flex: 1;\n  min-width: 0;\n  font-size: 13px;\n  font-weight: 500;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-hint {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n/* Switch row: label left, role=switch button right, hint below (Subagent module).\n * The track mirrors the harness ui-primitives Switch (0.1.3-alpha.2 line): the\n * on/off appearance keys off aria-checked rather than a parallel class, so the\n * visual state cannot disagree with the state assistive technology reads, and\n * corner-shape: round opts the capsule track out of the global superellipse\n * (which would square the capsule ends off against the round thumb inside). */\n.dsh-rewind-cleanup-toggle-row {\n  display: flex;\n  align-items: flex-start;\n  justify-content: space-between;\n  gap: 16px;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-toggle-label {\n  flex: 1;\n  min-width: 0;\n}\n.dsh-rewind-cleanup-switch {\n  box-sizing: border-box;\n  position: relative;\n  flex: 0 0 auto;\n  width: 36px;\n  height: 20px;\n  padding: 2px;\n  border: 0;\n  border-radius: 10px;\n  corner-shape: round;\n  background: var(--dsw-alias-border-l3);\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] {\n  background: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-switch:disabled {\n  cursor: default;\n  opacity: 0.5;\n}\n.dsh-rewind-cleanup-switch:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 2px;\n}\n.dsh-rewind-cleanup-thumb {\n  display: block;\n  width: 16px;\n  height: 16px;\n  border-radius: 50%;\n  corner-shape: round;\n  background: var(--dsw-alias-label-primary-foreground);\n  transition: transform 120ms ease;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] .dsh-rewind-cleanup-thumb {\n  transform: translateX(16px);\n}\n.dsh-rewind-cleanup-input {\n  box-sizing: border-box;\n  height: 34px;\n  padding: 0 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-3);\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-input:focus-visible {\n  outline: none;\n  border-color: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-input:disabled {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n.dsh-rewind-cleanup-input-invalid {\n  border-color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-footer {\n  display: flex;\n  align-items: center;\n  justify-content: flex-end;\n  gap: 8px;\n  padding: 12px 0 4px;\n  border-top: 1px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-failed {\n  flex: 1;\n  min-width: 0;\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-discard,\n.dsh-rewind-cleanup-save {\n  appearance: none;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  padding: 5px 14px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-discard {\n  border-color: var(--dsw-alias-border-l2);\n  background: none;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-discard:hover:not(:disabled) {\n  color: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-save {\n  background: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n.dsh-rewind-cleanup-discard:disabled,\n.dsh-rewind-cleanup-save:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n.dsh-rewind-cleanup-discard:focus-visible,\n.dsh-rewind-cleanup-save:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n";
+export declare const STYLE = "\n.dsh-rewind-btn {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: 28px;\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary);\n  cursor: pointer;\n}\n.dsh-rewind-btn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.dsh-rewind-popover {\n  position: fixed;\n  z-index: 1000;\n  width: 288px;\n  padding: 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 14px;\n  line-height: 20px;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-popover-title {\n  font-size: 14px;\n  font-weight: 600;\n  line-height: 20px;\n}\n.dsh-rewind-popover-target {\n  margin: 4px 0 10px;\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-all;\n}\n.dsh-rewind-popover-option {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  width: 100%;\n  margin: 0 0 6px;\n  padding: 8px 10px;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n.dsh-rewind-popover-option:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n.dsh-rewind-popover-option:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-option-label {\n  font-weight: 500;\n}\n.dsh-rewind-popover-option-hint {\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-popover-impact {\n  margin: 4px 0 10px;\n  padding: 8px 10px;\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-secondary);\n  white-space: pre-wrap;\n  max-height: 160px;\n  overflow: auto;\n}\n.dsh-rewind-popover-actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: 8px;\n}\n.dsh-rewind-popover-primary,\n.dsh-rewind-popover-ghost {\n  padding: 5px 12px;\n  border: none;\n  border-radius: 8px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 18px;\n  cursor: pointer;\n}\n.dsh-rewind-popover-primary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n.dsh-rewind-popover-primary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n.dsh-rewind-popover-primary:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-ghost {\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-popover-ghost:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.dsh-rewind-guard-hint {\n  position: fixed;\n  z-index: 1000;\n  max-width: min(440px, calc(100vw - 24px));\n  padding: 8px 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 13px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-primary);\n  pointer-events: none;\n}\n\n/* ---- Snapshot-cleanup settings card (mirrors the harness PluginCard look) ---- */\n/* Standardized on the 0.1.2 harness card look (border-radius 16px + 0.5px\n   border-l4, 0.5px internal separators). */\n.dsh-rewind-cleanup-card {\n  list-style: none;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 16px;\n  background: var(--dsw-alias-bg-layer-3);\n  transition: border-color .16s, background .16s;\n}\n.dsh-rewind-cleanup-card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-card-open {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-header {\n  width: 100%;\n  appearance: none;\n  border: 0;\n  background: none;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  border-radius: 12px;\n}\n.dsh-rewind-cleanup-header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n.dsh-rewind-cleanup-head-text {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n.dsh-rewind-cleanup-name {\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-desc {\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-chevron {\n  flex: none;\n  color: var(--dsw-alias-label-tertiary);\n  transition: transform .16s;\n}\n.dsh-rewind-cleanup-chevron-open {\n  transform: rotate(180deg);\n}\n.dsh-rewind-cleanup-pending {\n  flex: none;\n  border-radius: 999px;\n  padding: 1px 8px;\n  font-size: 11px;\n  line-height: 17px;\n  font-weight: 500;\n  white-space: nowrap;\n  background: var(--dsw-alias-bg-module-platform);\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-body {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n  margin: 0 16px;\n  padding: 0 0 8px;\n}\n.dsh-rewind-cleanup-readonly {\n  margin: 12px 0 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-permission {\n  display: grid;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field + .dsh-rewind-cleanup-field {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n/* Auto-cleanup (permission) block and the max-age field are consecutive control\n * sections of the open card \u2014 give them the same 0.5px divider the harness gives\n * every pair of config fields (fields.module.css field + field). */\n.dsh-rewind-cleanup-permission + .dsh-rewind-cleanup-field {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-head {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n.dsh-rewind-cleanup-label {\n  flex: 1;\n  min-width: 0;\n  font-size: 13px;\n  font-weight: 500;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-hint {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n/* Switch row: label left, role=switch button right, hint below (Subagent module).\n * The track mirrors the harness ui-primitives Switch (0.1.3-alpha.2 line): the\n * on/off appearance keys off aria-checked rather than a parallel class, so the\n * visual state cannot disagree with the state assistive technology reads, and\n * corner-shape: round opts the capsule track out of the global superellipse\n * (which would square the capsule ends off against the round thumb inside). */\n.dsh-rewind-cleanup-toggle-row {\n  display: flex;\n  align-items: flex-start;\n  justify-content: space-between;\n  gap: 16px;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-toggle-label {\n  flex: 1;\n  min-width: 0;\n}\n.dsh-rewind-cleanup-switch {\n  box-sizing: border-box;\n  position: relative;\n  flex: 0 0 auto;\n  width: 36px;\n  height: 20px;\n  padding: 2px;\n  border: 0;\n  border-radius: 10px;\n  corner-shape: round;\n  background: var(--dsw-alias-border-l3);\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] {\n  background: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-switch:disabled {\n  cursor: default;\n  opacity: 0.5;\n}\n.dsh-rewind-cleanup-switch:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 2px;\n}\n.dsh-rewind-cleanup-thumb {\n  display: block;\n  width: 16px;\n  height: 16px;\n  border-radius: 50%;\n  corner-shape: round;\n  background: var(--dsw-alias-label-primary-foreground);\n  transition: transform 120ms ease;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] .dsh-rewind-cleanup-thumb {\n  transform: translateX(16px);\n}\n.dsh-rewind-cleanup-input {\n  box-sizing: border-box;\n  height: 34px;\n  padding: 0 12px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-3);\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-input:focus-visible {\n  outline: none;\n  border-color: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-input:disabled {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n.dsh-rewind-cleanup-input-invalid {\n  border-color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-footer {\n  display: flex;\n  align-items: center;\n  justify-content: flex-end;\n  gap: 8px;\n  padding: 12px 0 4px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-failed {\n  flex: 1;\n  min-width: 0;\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-discard,\n.dsh-rewind-cleanup-save {\n  appearance: none;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  padding: 5px 14px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-discard {\n  border-color: var(--dsw-alias-border-l2);\n  background: none;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-discard:hover:not(:disabled) {\n  color: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-save {\n  background: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n.dsh-rewind-cleanup-discard:disabled,\n.dsh-rewind-cleanup-save:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n.dsh-rewind-cleanup-discard:focus-visible,\n.dsh-rewind-cleanup-save:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n";

package/lib/types/index.d.ts

@@ -8,12 +8,12 @@
  * surface node after the target message with the marker. The append-only log
  * (and the rendered transcript) is untouched — only the model-visible surface
  * is cut, so the next request derives its context from the target onward.
- * The marker is an EMPTY `user/message`: v2 reserves surface `replace` to a
- * node that cites every shadowed seq (`sourceEventSeqs`), and
- * `assistant/message` can no longer carry those — so the replacement node is
- * a `user/message`, exactly as /compact's checkpoint is. An empty
- * `user/message` derives to itself (a present-but-empty user turn), so the
- * marker stays as the surface-tail cut point rather than vanishing.
+ * The marker is a `user/message` carrying the shadowed-seq citations
+ * (`sourceEventSeqs`): v2 reserves surface `replace` to a node that cites
+ * every shadowed seq, and `assistant/message` can no longer carry those — so
+ * the replacement node is a `user/message`, exactly as /compact's checkpoint
+ * is. It derives to itself (a present user turn), so the marker stays as the
+ * surface-tail cut point rather than vanishing.
  *
  *
  * File restore (mode `both`) follows Claude Code's checkpointing: the plugin

package/lib/types/locales.d.ts

@@ -15,6 +15,11 @@
  * renders through machine tokens (`impact=<n>`, `args` @seq), never by parsing
  * host prose.
  *
+ * DSH localizes only its OWN command descriptions via the client locale — a
+ * closed `HOST_DESCRIPTION_KEYS` allowlist; third-party plugin descriptions are
+ * not in that channel (see docs/compat/audit.md, RU-I18N), so this plugin's host
+ * command copy stays in the host's tongue (English by default).
+ *
  * English is the key-set source of truth; zh is checked complete against it.
  *
  * @module dsh-rewind/locales

package/lib/types/rewind.d.ts

@@ -9,10 +9,10 @@
  * transcript) is untouched; only the model-visible surface is cut, so the
  * next request derives its context from the target message onward.
  *
- * Marker shape (v0.1.3/v2): the marker is an EMPTY `user/message` carrying a
- * replace `surfaceOp` — a single event:
+ * Marker shape (v0.1.5/v3): the marker is a `user/message` carrying a replace
+ * `surfaceOp` — a single event:
  *
- *   user/message (marker, empty content) → { surfaceOp {replace, start, end} }
+ *   user/message (marker content) → { surfaceOp {replace, startSeq, endSeq} }
  *
  * v2 reserves surface `replace` to a node that cites every shadowed seq via
  * `sourceEventSeqs`, and `assistant/message` can no longer carry
@@ -21,13 +21,12 @@
  * is. No ghost `step/start`…`step/end` frame is needed: the token-meter's
  * step state machine ignores `user/message`, and the session invariant
  * (`invariant.ts`) imposes no open-turn requirement on it, so the marker is
- * appended while idle, outside any turn. The empty content means the marker
- * carries no language; it sits at the surface tail as the model-visible
- * "cut point" (an empty `user/message` derives to itself, so it remains a
- * present-but-empty user turn in derived history).
+ * appended while idle, outside any turn. It sits at the surface tail as the
+ * model-visible "cut point" — a present user turn in derived history.
  *
  * @module dsh-rewind/rewind
  */
+import type { MessageSource } from '@deepseek-ai/dsh-llm/message';
 import type { SessionEvent, UserMessage } from '@deepseek-ai/dsh-session';
 /** Which of the two rewind modes a rewind executes. */
 export type RewindMode = 'chat' | 'both';
@@ -75,6 +74,22 @@ export interface RewindPlan {
     /** Last surface node — the replace range end (inclusive). */
     readonly surfaceEnd: number;
 }
+/**
+ * Create rewind-marker provenance correlated with one rewind target.
+ * @param targetSeq - absolute log seq of the user message rewound to.
+ * @returns immutable rewind-marker source.
+ */
+export declare function rewindMarkerSource(targetSeq: number): Readonly<{
+    kind: 'plugin';
+    plugin: 'dsh-rewind';
+    targetSeq: number;
+}>;
+/**
+ * Test whether a persisted message source identifies a rewind marker.
+ * @param source - source restored from a surface user message.
+ * @returns whether the source carries the backend-independent rewind brand.
+ */
+export declare function isRewindMarker(source: MessageSource): boolean;
 /** Preview length cap for candidate listings. */
 export declare const CANDIDATE_PREVIEW_CHARS = 80;
 /**

package/lib/types/snapshot.d.ts

@@ -317,6 +317,13 @@ export declare class SnapshotStore {
     private readonly lastEntry;
     /** Sessions whose dedup state has been seeded from disk this process. */
     private readonly seededSessions;
+    /**
+     * Session-format version snapshots are anchored under, stamped into each
+     * session's `format` marker when an entry is recorded. `null` until the host
+     * sets it (from `agent/session-start`), so a session that never records is
+     * never materialized and a marker is only written where snapshots exist.
+     */
+    private formatVersion;
     constructor(root?: string, opts?: {
         readonly dedup?: boolean;
         readonly dshHome?: string;
@@ -423,6 +430,8 @@ export declare class SnapshotStore {
     restoreAfter(sessionId: string, targetSeq: number, deleteFile: DeleteFile, probe?: DiskProbe, opts?: RestoreRunOptions): Promise<RestoreOutcome>;
     /** Prefix of one restore-op journal file inside the session dir. */
     private static readonly JOURNAL_PREFIX;
+    /** Session-format-version marker file inside the session dir. Non-`.json`, so it never counts as a checkpoint entry. */
+    private static readonly FORMAT_FILE;
     /** Absolute path of one restore-op journal file. */
     private journalPath;
     /**
@@ -622,6 +631,48 @@ export declare class SnapshotStore {
     clearSession(sessionId: string, opts?: {
         readonly dryRun?: boolean;
     }): Promise<ClearSessionReport>;
+    /**
+     * Read the session-format version marker recorded for a session, or `null`
+     * when there is no marker — a pre-marker, legacy snapshot dir, or a session
+     * that never materialized a dir.
+     */
+    private readFormatVersion;
+    /**
+     * Record the session-format version a session's snapshots are anchored under
+     * (`session.header.version`: 2 for the v2 format, 3 for the v3 format). The
+     * marker is a tiny non-`.json` file, so it never counts as a checkpoint
+     * entry in `sessionStats`/`clearSession`. Written atomically (temp + rename)
+     * like every other persisted marker, so a crash mid-write can only leave an
+     * inert `format.tmp` — never a partial marker that a later reconcile could
+     * misread as a version mismatch and wrongly clear.
+     */
+    markFormatVersion(sessionId: string, sessionVersion: number): Promise<void>;
+    /**
+     * Set the session-format version the store stamps onto every snapshot it
+     * records. The host sets this once per process from `agent/session-start`
+     * (`agent.session.header.version`), so a marker is only materialized for a
+     * session that actually records a snapshot.
+     */
+    setFormatVersion(sessionVersion: number): void;
+    /**
+     * Session-format-version guard: clear a session's snapshot dir when the
+     * format its snapshots were anchored under differs from the current session
+     * format, so seq-anchored references can never survive a format migration
+     * mis-mapped. Runs at `agent/session-start` — after DSH has migrated/loaded
+     * the session, so `sessionVersion` is the post-migration value.
+     *
+     * Conservative rule (per the "delete stale snapshots" policy): a session
+     * with no recorded marker but with snapshot content is treated as legacy and
+     * cleared; a session whose marker differs from `sessionVersion` is cleared.
+     * A matching version — or an untouched session with nothing to protect — is
+     * left alone. The marker is re-stamped to the current version afterward so a
+     * FUTURE format change is detected on the next start.
+     *
+     * @returns whether a session snapshot dir was cleared.
+     */
+    reconcileFormatVersion(sessionId: string, sessionVersion: number): Promise<{
+        cleared: boolean;
+    }>;
 }
 /**
  * Re-check every tracked file at a user-message boundary and record the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-rewind-plugin",
-  "version": "0.10.0-alpha.1",
+  "version": "0.11.0-alpha.1",
   "description": "DSH 插件：真正便捷无感的同窗口内对话回退，从不新建分支；自带轻量工作区备份，可一并还原文件（完整 Claude Code /rewind 语义）。 · DSH plugin: genuinely effortless in-window conversation rewind — never forking a new session; ships a lightweight workspace backup that restores files together with the rewind (full Claude Code /rewind semantics).",
   "keywords": [
     "deepseek-harness",
@@ -49,6 +49,9 @@
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
+    "engines": {
+      "dsh": ">=0.1.5-alpha.1"
+    },
     "client": {
       "inject": [
         "@deepseek-ai/dsh-client-locale",
@@ -73,18 +76,18 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-fs": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2"
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-commands": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-fs": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-sandbox": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.5-alpha.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -133,37 +136,37 @@
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-store": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-scope": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-user-questions": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-command-compact": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-compaction": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-compaction-basic": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-fs": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-goal": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session-stats": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session-title": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-agent": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-store": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-scope": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-user-questions": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-command-compact": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-commands": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-compaction": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-compaction-basic": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-fs": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-goal": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-sandbox": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session-projection": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session-stats": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-session-title": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-token-meter": "^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.5-alpha.1",
     "@types/node": "^24.0.0",
     "@types/react": "^18.3.31",
     "@types/react-dom": "^18.3.7",