dsh-rewind-plugin 0.10.0-alpha.2 → 0.11.0-beta.1

package/README.en.md

@@ -1,7 +1,7 @@
 # dsh-rewind
 
 > [!WARNING]
-> **Planning to use DSH `0.1.3`? Install a `v0.9.x` release as soon as possible and run `/dsh-rewind-fix` to update old rewind markers** ([update guide](docs/rewind-fix.md)).
+> **Install a `v0.9.x` release on DSH `0.1.2-rc.1` as early as possible, and run `/dsh-rewind-fix` to update old sessions' rewind markers** ([update guide](docs/rewind-fix.md)).
 
 Conversation rewind for DeepSeek Harness: **rewind the conversation to any earlier user message in one click, in the same window** — no new branch, no window switch, with optional workspace-file restore (full Claude Code `/rewind` semantics).
 

package/README.md

@@ -1,7 +1,7 @@
 # dsh-rewind
 
 > [!WARNING]
-> **计划使用 DSH `0.1.3` 的用户：请尽早安装 `v0.9.x` 版本，并运行 `/dsh-rewind-fix` 更新旧回退标记**（[更新指南](docs/rewind-fix.zh.md)）。
+> **请尽早在 DSH `0.1.2-rc.1` 安装 `v0.9.x` 版本，运行 `/dsh-rewind-fix` 更新旧会话的回退标记**（[更新指南](docs/rewind-fix.zh.md)）。
 
 DeepSeek Harness 插件：**一键就地回退对话到任意更早的用户消息**——同窗口内完成，不新建分支、不换窗口，可一并还原工作区文件（完整 Claude Code `/rewind` 语义）。
 

package/SECURITY.md

@@ -59,13 +59,16 @@ than hidden.
 A failed gate fails closed: an invalid target, a missing store, an absent
 backup, or a cancelled invocation aborts the rewind with an error.
 
-**Automatic store deletion (opt-in)**: unrelated to restores, an enabled
-`snapshot-auto-cleanup` background sweep deletes whole session directories of
-**long-inactive** sessions (default off — the store is otherwise only mutated by
-an explicit rewind apply). It is confined to the store root, uses `lstat` (so it
-never follows a symlink out of the root), skips the active session, and never
-touches the conversation log. When disabled (the default), no automatic deletion
-runs.
+**Automatic store deletion**: two things delete session snapshots. The opt-in
+`snapshot-auto-cleanup` sweep (default off) removes the whole directories of
+**long-inactive** sessions, unrelated to restores. Separately, a session's
+snapshots are cleared automatically when the conversation log's session format
+has changed (a DSH upgrade), because those backups are anchored to message
+positions that no longer line up. Both stay confined to the store root, use
+`lstat` (so they never follow a symlink out of the root), the sweep never targets
+the active session, and neither touches the conversation log. When auto-cleanup
+is disabled (the default), only the format-change clear runs, and only for an
+affected session.
 
 ## Conversation integrity
 

package/docs/architecture.md

@@ -56,7 +56,7 @@ machine channels (see [Compatibility strategy](#compatibility-strategy)).
   → agent.cancel({ keepInbox: true }) if running; waitForAgentIdle
   → dropPendingSteering (next-step inbox only; queued messages untouched)
   → append the rewind marker = a user/message with surfaceOp
-    { op: 'replace', start, end } over every surface node after the
+    { op: 'replace', startSeq, endSeq } over every surface node after the
     target (+ sourceEventSeqs = shadowed seqs)          [a single event]
   → if mode 'both': store.restoreAfter(targetSeq) + syncRestoreObservations
   → result text carries machine tokens (impact=<n>, restore:/delete: lines)

package/docs/compat/audit.md

@@ -7,27 +7,28 @@
 > compatibility invariants. A probe failure is a finding; it enters the
 > fix/pin/record loop.
 >
-> Targeted version: npm `@deepseek-ai/*@0.1.2-rc.1` (matches `package-lock.json`).
+> Targeted version: npm `@deepseek-ai/*@0.1.5-rc.1` (the range the peers and `dsh.engines.dsh` declare).
 > Source reference: the upstream [github.com/deepseek-ai/deepseek-harness](https://github.com/deepseek-ai/deepseek-harness).
 >
 > Version alignment: `peerDependencies` use one tuple per DSH line
 > (e.g. `^0.1.2-rc.1`). npm's prerelease matching rules require a candidate to
 > share the range comparator's `[major, minor, patch]` tuple, so a new DSH tuple
-> replaces the peer tuple (single-line model); any prerelease within the SAME
-> tuple is a no-op. Signal: `npm view @deepseek-ai/dsh version`;
+> replaces the peer tuple (single-line model). The range is conservative — it
+> declares only what was verified, so a release already inside it changes
+> nothing. Signal: `npm view @deepseek-ai/dsh dist-tags`;
 > flow: `scripts/check-dsh-version.mjs` (it reads the `latest` dist-tag only; a
 > prerelease published under another tag is a manual pre-release check).
 >
-> The plugin targets a single DSH version line (`0.1.2-rc.1`); compatibility
-> with earlier lines is not kept.
+> The plugin targets a single DSH version line; compatibility with earlier
+> lines is not kept.
 
-### Single channel (`0.1.2-rc.1`)
+### Single channel
 
-The plugin targets one DSH channel. Each seam below reads the 0.1.2-rc.1 shape
-only (no `Session.events` / `[data-time-hover-root]` / `<textarea>` / face-`chat`
-legacy branch).
+The plugin targets one DSH channel. Each seam below reads the targeted
+version's shape only (no `Session.events` / `[data-time-hover-root]` /
+`<textarea>` / face-`chat` legacy branch).
 
-| Seam | 0.1.2-rc.1 implementation |
+| Seam | Implementation at the targeted version |
 | --- | --- |
 | Host session log | `session.snapshotEvents()` |
 | Client chat snapshot | `uiConversation` `chat` view (`chatSnapshotOf`) |
@@ -66,6 +67,7 @@ legacy branch).
 - **session-stats / session-telemetry fold the full log**: post-rewind stats do **not** rewind — `turns`/`steps`/`llmMs` still include withdrawn content; the `user/message` marker is folded as a present user turn (it adds no step). This is the intended "fold the full log" semantics, pinned by probe.
 - **token-meter usage anchor stays stable** (G3): the `user/message` marker carries no usage, but because it is not an `assistant/message`, the baseline anchor does not drop to a heuristic estimate — it stays `usage` across a rewind. Pinned by `compat-gaps` G3.
 - **marker content is the constant `(empty message)` placeholder**: never empty, because the session log is immutable but the model serving a session may change later — a strict OpenAI-compatible gateway rejects an empty user message (HTTP 400, Issue #21). The marker is a small visible user turn in derived history. Pin: `verify-host` (`marker is a user/message with the dsh-rewind plugin source and the (empty message) placeholder`).
+- **marker shape (v3)**: the replace `surfaceOp` is `{ op: 'replace', startSeq, endSeq }` (renamed from `start`/`end` in session-format v3); the dsh-rewind source is the plain CLOSED third-party plugin shape `{ kind: 'plugin', plugin: 'dsh-rewind' }` (no private field — the released-format source validator rejects any member outside `kind`/`plugin` + the context-injection `form`/`sections`/`summary`, and a plugin extends the source map by adding a `kind`, not fields); the `user/message` + `sourceEventSeqs` shape and the `(empty message)` content are unchanged.
 - **Withdrawn content stays searchable/exportable**: session-query full-text and `/export` read the raw log; a rewind cuts only the surface, so withdrawn messages remain (declared in the README).
 - **Session title auto-regeneration**: the title derives from the surface, so an automatically-derived title may change after a rewind.
 - **Files written but uncommitted in a cancelled turn**: a `both` rewind cannot restore them (tool side-effect timing; same as Claude Code).
@@ -101,6 +103,14 @@ The plugin treats these as harness-side defects it does not compensate for. Each
   are English for **every** host command — system plugins also pass raw English `description`
   strings, e.g. `/goal` — so this behavior is consistent with the ecosystem, not a plugin
   deviation.)
+- **Client-side command-description i18n is first-party-only**: DSH also localizes host command
+  descriptions through the client `locale` binding (`ui-commands`), but the description keys come
+  from a **closed allowlist** (`HOST_DESCRIPTION_KEYS`: compact, export, feedback, goal,
+  permission, plan). A command outside that set — every third-party plugin — is passed through
+  verbatim, never translated (`hostDescription` only rewrites a description that equals the
+  first-party English copy). So the plugin's own `/rewind` command description can never ride this
+  channel either; it is authored in the host's tongue (English by default), same as the host
+  runtime copy above.
 
 ### R-OPENSTEP (rewind part resolved): an unclosed `step` in the log breaks token-meter replay; the rewind no longer compounds it
 

package/docs/release/release.md

@@ -73,28 +73,28 @@ Each release is `git push <branch>` followed by `git push <branch> --tags`.
 
 DSH is still in rc; npm's prerelease matching rules require a peer range to
 share the host version's `[major, minor, patch]` tuple. So `peerDependencies`
-uses one peer tuple per DSH line (e.g. `^0.1.2-rc.1`), replaced (never
-appended) when DSH releases a new tuple.
-
-- **When to update**: only when DSH releases a new tuple (`0.1.2 → 0.1.3 →
-  0.2.x`); rc rolling within a tuple (`0.1.2-rc.1 → rc.2`) needs nothing. All
-  `@deepseek-ai/*` packages release together; `npm view @deepseek-ai/dsh version`
-  is the authoritative signal.
+uses one peer tuple per DSH line (e.g. `^0.1.2-rc.1`). The range is
+conservative: it declares only what was verified, and guarantees nothing
+outside it.
+
+- **When to update**: when the verified range changes — a new DSH tuple, or a
+  deliberate narrowing (e.g. dropping the internal `alpha` series); a release
+  already inside the range changes nothing. All `@deepseek-ai/*` packages
+  release together; `npm view @deepseek-ai/dsh dist-tags` is the signal.
 - **Published-tuple check (optional)**: `node scripts/check-dsh-version.mjs`
   compares the `latest` dist-tag version against the tuple the peers cover
   (exit 0 = nothing to do, exit 1 = update). It reads the `latest` tag only; a
   pre-release published under another tag or bundled without
   going to npm is a manual pre-release check — see the "Before bumping" step above.
-- **Update steps**: replace every `@deepseek-ai/dsh-*` peer's tuple with
-  `^<latest>` → bump devDependencies to the latest → `npm install` →
-  `npm run check` → release.
+- **Update steps**: point every `@deepseek-ai/dsh-*` peer and devDependency at
+  the verified range → `npm install` → `npm run check` → release.
 - **After DSH goes final**: final releases are not bound by the prerelease
   tuple rule, so the peers can converge to a single stable range (e.g.
   `^0.1.x`); this section can then be deleted.
 - **Declared minimum (`dsh.engines.dsh`)**: alongside the peer tuple, each
   release declares the DSH runtime floor under `dsh.engines.dsh` (e.g.
   `>=0.1.2-rc.1`), consumed by the plugin-manager update guard. Bump it in
-  the same release that raises the peer tuple; never leave code raised while
+  the same release that changes the peer range; never leave code raised while
   the declared floor stays behind. Only the `>=X.Y.Z[-pre]` form is
   supported (`^`/`~`/multi-range are treated as "cannot verify" and
   fail closed).

package/docs/release/release.zh.md

@@ -66,22 +66,22 @@ npm publish --access public
 
 DSH 仍在 rc 阶段，npm 的 prerelease 匹配规则要求 peer 范围与宿主版本
 **同 `[major, minor, patch]` 元组**才能匹配。因此 peerDependencies 采用
-**每一条 DSH 线一个 peer 元组**（如 `^0.1.2-rc.1`），DSH 发新元组时**替换**而非追加。
+**每一条 DSH 线一个 peer 元组**（如 `^0.1.2-rc.1`）；范围是保守的，只声明实际验证过的内容。
 
-- **何时需要更新**：仅当 DSH 发布新元组（`0.1.2 → 0.1.3 → 0.2.x`）时；
-  同元组内 rc 滚动（`0.1.2-rc.1 → rc.2`）无需动作。DSH 所有包同版本发布，
-  `npm view @deepseek-ai/dsh version` 即权威信号。
+- **何时需要更新**：**已验证范围**变化时——DSH 发新元组，或主动收窄（例如不再
+  声明内测的 DSH `alpha` 系列）；落在已声明范围内的发布不改变任何东西。DSH 所有包
+  同版本发布；信号是 `npm view @deepseek-ai/dsh dist-tags`。
 - **已发布元组检查（可选）**：`node scripts/check-dsh-version.mjs` 用 npm `latest`
   dist-tag 版本对比 peer 覆盖的元组（exit 0 无需动作，exit 1 需要）。它**只读
   `latest` tag**；发布在其它 tag 的 pre-release 走**手动发布前检查**
   ——见上文"升版前手动确认"。
-- **更新步骤**：把每个 `@deepseek-ai/dsh-*` peer 的元组**替换**为 `^<最新版>`
-  → devDependencies 同步升到最新 → `npm install` → `npm run check` → 发版。
+- **更新步骤**：把每个 `@deepseek-ai/dsh-*` peer 与 devDependency 指向已验证
+  范围 → `npm install` → `npm run check` → 发版。
 - **正式版后收敛**：DSH 发布 final 版本后，正式版不受 prerelease 元组规则
   限制，peer 可收敛为稳定的 `^0.1.x` 单范围，此节即可删除。
 - **声明的最低运行时（`dsh.engines.dsh`）**：与 peer 元组一起，每个发布在
   `dsh.engines.dsh` 声明 DSH 运行时下限（如 `>=0.1.2-rc.1`），供插件管理器
-  更新守卫读取。**与 peer 元组持平的同一发布里一并 bump**；不可只升代码、
+  更新守卫读取。**与 peer 范围持平的同一发布里一并 bump**；不可只升代码、
   声明下限停留在旧值。仅支持 `>=X.Y.Z[-pre]` 形式（`^`/`~`/多范围会被视为
   「无法校验」而 fail-closed）。
 

package/docs/rewind-fix.md

@@ -4,18 +4,19 @@
 
 ## Applies to
 
-- **DSH**: `0.1.2-rc.1`
-- **dsh-rewind**: `0.9.0-alpha.1`, `0.9.0-alpha.2`, `0.9.0`, `0.9.1`
+- **DSH version**: `0.1.2-rc.1`.
+- **Plugin version**: `v0.9.0-alpha.1`, `v0.9.0-alpha.2`, `v0.9.0`, `v0.9.1` (recommended).
+- **Audience**: users planning to use a future DSH version who used an early plugin (≤ 0.8.0).
 
 ## Background
 
-`dsh-rewind` rewinds **within the same session** — it never forks a branch. It also follows the conservative policy of **deleting no history** (the session log is an append-only audit trail): it only **appends a marker**, telling DSH "the model-visible conversation continues from this message; everything after it is rolled back". Older plugin versions wrote that **rewind marker** as a "ghost step frame", which worked reliably on DSH v0.1.2-rc.1 and earlier.
+`dsh-rewind` rewinds **within the same session** — it never forks a branch, and the session log stays the single source. The plugin follows a conservative policy: it deletes no history, and only **appends a rewind marker** telling DSH "the model-visible conversation continues from this message; everything after it is rolled back". Older plugin versions wrote that **rewind marker** as a "ghost step frame", which worked reliably on DSH `v0.1.2-rc.1` and earlier.
 
-But DSH v0.1.3 (alpha) introduces a stricter **session-format validation**. We discovered ahead of time that the **rewind markers** written by older plugin versions **cannot be validated** under those stricter checks, so **a session rewound with `/rewind` may fail to open** when that line ships.
+But starting with DSH `v0.1.3-alpha.1`, a stricter **session-format validation** is introduced. We discovered ahead of time that the **rewind markers** written by older plugin versions **cannot be validated** under those stricter checks, so **a session that was rewound may fail to open**.
 
 The plugin is prepared in two parts, both shipped in the new version:
 
-1. **New rewind markers use the new shape** (forward) — this is a **correct, low-risk**, long-term change (see the [README](../README.en.md), the "How it works" section), and the new shape is fully compatible with **both old and new** DSH.
+1. **New rewind markers use the new shape** (forward) — this is a **correct, low-risk**, long-term change aligned with the official `/compact` design (see the [README](../README.en.md), the "How it works" section), and the new shape is fully compatible with **both old and new** DSH.
 
 2. **The `/dsh-rewind-fix` command** (backward) — for **already-existing** old sessions, the plugin ships a convenient update command that translates those old markers into the new shape so the sessions are usable again.
 
@@ -54,7 +55,7 @@ Then run the command **in this new session**, and it will update the old session
 
 ### Step 4 · Preview the update scope
 
-Type `/dsh-rewind-fix` in the composer and send it. It only scans, doesn't write. The editor locks while it runs, which is normal. **Don't switch session windows midway.** When it finishes, it reports how many sessions were scanned, how many will be updated, how many skipped, and how many failed. Confirm those are what you expect before moving on.
+Type `/dsh-rewind-fix` in the composer and send it. It only scans, doesn't write. The editor locks while it runs, which is normal. **Don't switch session windows midway**. When it finishes, it reports how many sessions were scanned, how many will be updated, how many skipped, and how many failed. Confirm those are what you expect before moving on.
 ```
 /dsh-rewind-fix
 ```
@@ -73,7 +74,7 @@ After the run, restart DSH, then **preview once more**:
 ```
 /dsh-rewind-fix
 ```
-If it says there are no more sessions to update, the markers are all current and the old sessions will open normally.
+If it says there are no more sessions to update, the markers are all current and the old sessions will open normally. If there are still sessions to update, they may have been loaded during the run — restart in a temporary session window and retry.
 
 ### Step 7 · Delete the backup after confirming (optional)
 
@@ -84,5 +85,5 @@ rm -rf ~/.dsh/sessions.backup ~/.dsh/rewind-snapshots.backup
 
 ## Notes
 
-- The session logs are still v0 format; when DSH's later `v0 → v1 → v2` migration (in `v0.1.3`) arrives, if you've completed the `rewind` marker update, the markers themselves won't block it.
+- The session logs are still v0 format; when DSH's later `v0 → v1 → v2 → v3` migration arrives, if you've completed the `rewind` marker update, the markers themselves won't block it.
 - Some sessions may still be blocked by an **unclosed turn** (a turn that was interrupted/cancelled and never wrote `turn/end`). Per the empirical analysis these are widespread and **unrelated to rewind** — they're a DSH-side issue and this tool doesn't handle them. **So updating the markers doesn't guarantee you can upgrade to the next DSH line.**

package/docs/rewind-fix.zh.md

@@ -4,18 +4,19 @@
 
 ## 适配
 
-- **DSH**: `0.1.2-rc.1`
-- **dsh-rewind**: `0.9.0-alpha.1`, `0.9.0-alpha.2`, `0.9.0`, `0.9.1`
+- **DSH 版本**：`v0.1.2-rc.1`。
+- **插件版本**：`v0.9.0-alpha.1`，`v0.9.0-alpha.2`，`v0.9.0`，`v0.9.1`（推荐）。
+- **适用人群**：计划使用未来版本 DSH，且使用过早期版本插件（≤ 0.8.0）的用户。
 
 ## 背景
 
-`dsh-rewind` 的回退是**同一会话**的消息回退。它从不新建分支，同时遵循保守策略：**不删除任何历史**（会话日志是 append-only 审计轨迹），只在日志里**追加一条标记**，表示“模型可见的对话从这条消息继续，其后内容回卷”。旧版插件的 **rewind 标记**用的是「幽灵步骤框架」写法，在 DSH v0.1.2-rc.1 及之前版本长期验证有效。
+`dsh-rewind` 的回退是**同一会话**的消息回退。它从不新建分支，会话日志保持同一份。插件遵循保守策略：不删除任何历史，只在会话日志里**追加一条 rewind 标记**，表示“模型可见的对话从这条消息继续，其后内容回卷”。旧版插件的 **rewind 标记**用的是「幽灵步骤框架」写法，在 DSH `v0.1.2-rc.1` 及之前的版本长期验证有效。
 
-但 DSH v0.1.3（alpha）引入了更严格的**会话格式校验**。我们提前发现：旧版本往会话日志里写入的 **rewind 标记**，在这种严格校验下**无法自证合法**，届时会导致**碰过 `/rewind` 的旧会话打不开**。
+但从 `v0.1.3-alpha.1` 开始，DSH 引入了更严格的**会话格式校验**。我们提前发现：旧版本往会话日志里写入的 **rewind 标记**，在这种严格校验下**无法自证合法**，届时会导致**回退过的旧会话打不开**。
 
 插件做了两阶段准备，已在新版本中包含：
 
-1. **新产生的 rewind 标记换成新格式**（向前）——这一步是**正确、低风险**的长期改动（见 [README](../README.md) 的「原理」一节），新格式对**新旧版本** DSH 均完全兼容。
+1. **新产生的 rewind 标记换成新格式**（向前）——这一步是**正确、低风险**的长期改动（对标官方 `/compact` 设计，见 [README](../README.md)「原理」一节），新格式对**新旧版本** DSH 均完全兼容。
 
 2. **提供 `/dsh-rewind-fix` 命令**（向后）——对于**已经存在**的旧会话，本插件提供便捷更新命令，把旧标记「翻译」成新格式，让会话重新可用。
 
@@ -54,7 +55,7 @@ cp -r ~/.dsh/rewind-snapshots  ~/.dsh/rewind-snapshots.backup
 
 ### 第四步 · 预览更新范围
 
-在编辑区域输入 `/dsh-rewind-fix` 并发送。它只扫描、不写盘。执行时编辑区会正常锁定。**不要中途切换会话窗口。**完成后会告诉你：扫描了几个会话、其中几个将被更新、几个跳过、几个失败。确认是你预期的那几项，再进下一步。
+在编辑区域输入 `/dsh-rewind-fix` 并发送。它只扫描、不写盘。执行时编辑区会正常锁定。**不要中途切换会话窗口**。完成后会告诉你：扫描了几个会话、其中几个将被更新、几个跳过、几个失败。确认是你预期的那几项，再进下一步。
 ```
 /dsh-rewind-fix
 ```
@@ -73,7 +74,7 @@ cp -r ~/.dsh/rewind-snapshots  ~/.dsh/rewind-snapshots.backup
 ```
 /dsh-rewind-fix
 ```
-如果提示已经没有待更新的会话，说明标记已全部更新到位，旧会话就能正常打开了。
+如果提示已经没有待更新的会话，说明标记已全部更新到位，旧会话就能正常打开了。如果还有未更新的会话，可能是执行时被加载过，在临时会话窗口重启并重试即可。
 
 ### 第七步 · 确认正常后删除备份（可选）
 
@@ -84,5 +85,5 @@ rm -rf ~/.dsh/sessions.backup ~/.dsh/rewind-snapshots.backup
 
 ## 补充说明
 
-- 当前会话日志仍为 v0 格式；DSH 后续（`v0.1.3`）的 `v0 → v1 → v2` 迁移到来时，如果你完成了 `rewind` 标记更新，标记本身就不会阻断它。
+- 当前会话日志仍为 v0 格式；DSH 后续的 `v0 → v1 → v2 → v3` 迁移到来时，如果你完成了 `rewind` 标记更新，标记本身就不会阻断它。
 - 个别会话还可能因**未闭合的 turn**（某次回合被打断/取消、没写 `turn/end`）等问题而卡住迁移——根据实测分析，这些问题普遍存在，**与 rewind 无关**，属 DSH 侧自身问题，本工具不处理。**所以更新完标记并不保证一定能升到下一 DSH 线。**

package/lib/client.js

@@ -399,7 +399,7 @@ var STYLE = `
 .dsh-rewind-cleanup-body {
   border-top: 0.5px solid var(--dsw-alias-border-l2);
   margin: 0 16px;
-  padding: 4px 0 8px;
+  padding: 0 0 8px;
 }
 .dsh-rewind-cleanup-readonly {
   margin: 12px 0 0;
@@ -421,6 +421,12 @@ var STYLE = `
 .dsh-rewind-cleanup-field + .dsh-rewind-cleanup-field {
   border-top: 0.5px solid var(--dsw-alias-border-l2);
 }
+/* Auto-cleanup (permission) block and the max-age field are consecutive control
+ * sections of the open card \u2014 give them the same 0.5px divider the harness gives
+ * every pair of config fields (fields.module.css field + field). */
+.dsh-rewind-cleanup-permission + .dsh-rewind-cleanup-field {
+  border-top: 0.5px solid var(--dsw-alias-border-l2);
+}
 .dsh-rewind-cleanup-head {
   display: flex;
   align-items: center;
@@ -505,7 +511,7 @@ var STYLE = `
   box-sizing: border-box;
   height: 34px;
   padding: 0 12px;
-  border: 1px solid var(--dsw-alias-border-l2);
+  border: 0.5px solid var(--dsw-alias-border-l4);
   border-radius: 8px;
   background: var(--dsw-alias-bg-layer-3);
   font: inherit;
@@ -530,7 +536,7 @@ var STYLE = `
   justify-content: flex-end;
   gap: 8px;
   padding: 12px 0 4px;
-  border-top: 1px solid var(--dsw-alias-border-l2);
+  border-top: 0.5px solid var(--dsw-alias-border-l2);
 }
 .dsh-rewind-cleanup-failed {
   flex: 1;
@@ -1339,8 +1345,8 @@ function createRewindBridge(deps) {
 }
 
 // src/client/build-info.ts
-var PLUGIN_VERSION = true ? "0.10.0-alpha.2" : "dev";
-var BUILD_HASH = true ? "cc039b5d" : "dev";
+var PLUGIN_VERSION = true ? "0.11.0-beta.1" : "dev";
+var BUILD_HASH = true ? "d770983e" : "dev";
 
 // src/client/locales.ts
 var zh = {

package/lib/index.js

@@ -119,6 +119,7 @@ var RewindError = class extends Error {
   }
   code;
 };
+var REWIND_MARKER_SOURCE = Object.freeze({ kind: "plugin", plugin: "dsh-rewind" });
 var CANDIDATE_PREVIEW_CHARS = 80;
 var DEFAULT_CANDIDATE_LIMIT = 100;
 function isUserMessageEvent(event) {
@@ -356,6 +357,13 @@ var SnapshotStore = class _SnapshotStore {
   lastEntry = /* @__PURE__ */ new Map();
   /** Sessions whose dedup state has been seeded from disk this process. */
   seededSessions = /* @__PURE__ */ new Set();
+  /**
+   * Session-format version snapshots are anchored under, stamped into each
+   * session's `format` marker when an entry is recorded. `null` until the host
+   * sets it (from `agent/session-start`), so a session that never records is
+   * never materialized and a marker is only written where snapshots exist.
+   */
+  formatVersion = null;
   constructor(root, opts) {
     this.dedup = opts?.dedup ?? true;
     this.root = root ?? process.env[SNAPSHOT_ROOT_ENV] ?? join(resolveDshHome(opts?.dshHome), SNAPSHOT_DIR_NAME);
@@ -435,6 +443,9 @@ var SnapshotStore = class _SnapshotStore {
       await writeJsonAtomic(file, committed, () => opts?.crash?.("after-temp-write"));
       this.lastEntry.set(key, { content: entry.before, ref: selfRef });
     }
+    if (this.formatVersion !== null) {
+      await this.markFormatVersion(sessionId, this.formatVersion);
+    }
     const now = Date.now();
     if (now - this.lastPruneAt >= _SnapshotStore.PRUNE_INTERVAL_MS) {
       this.lastPruneAt = now;
@@ -631,6 +642,8 @@ var SnapshotStore = class _SnapshotStore {
   }
   /** Prefix of one restore-op journal file inside the session dir. */
   static JOURNAL_PREFIX = "restore-journal-";
+  /** Session-format-version marker file inside the session dir. Non-`.json`, so it never counts as a checkpoint entry. */
+  static FORMAT_FILE = "format";
   /** Absolute path of one restore-op journal file. */
   journalPath(sessionId, opId) {
     return join(this.sessionDir(sessionId), `${_SnapshotStore.JOURNAL_PREFIX}${safeFileId(opId)}.json`);
@@ -1275,6 +1288,75 @@ var SnapshotStore = class _SnapshotStore {
     }
     return { sessionId, ...stats, dryRun };
   }
+  /**
+   * Read the session-format version marker recorded for a session, or `null`
+   * when there is no marker — a pre-marker, legacy snapshot dir, or a session
+   * that never materialized a dir.
+   */
+  async readFormatVersion(sessionId) {
+    try {
+      const raw = await readFile(join(this.sessionDir(sessionId), _SnapshotStore.FORMAT_FILE), "utf8");
+      const parsed = Number(raw.trim());
+      return Number.isFinite(parsed) ? parsed : null;
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Record the session-format version a session's snapshots are anchored under
+   * (`session.header.version`: 2 for the v2 format, 3 for the v3 format). The
+   * marker is a tiny non-`.json` file, so it never counts as a checkpoint
+   * entry in `sessionStats`/`clearSession`. Written atomically (temp + rename)
+   * like every other persisted marker, so a crash mid-write can only leave an
+   * inert `format.tmp` — never a partial marker that a later reconcile could
+   * misread as a version mismatch and wrongly clear.
+   */
+  async markFormatVersion(sessionId, sessionVersion) {
+    const dir = this.sessionDir(sessionId);
+    await mkdir(dir, { recursive: true });
+    const file = join(dir, _SnapshotStore.FORMAT_FILE);
+    const tmp = `${file}.tmp`;
+    await writeFile(tmp, `${sessionVersion}`, "utf8");
+    await rename(tmp, file);
+  }
+  /**
+   * Set the session-format version the store stamps onto every snapshot it
+   * records. The host sets this once per process from `agent/session-start`
+   * (`agent.session.header.version`), so a marker is only materialized for a
+   * session that actually records a snapshot.
+   */
+  setFormatVersion(sessionVersion) {
+    this.formatVersion = sessionVersion;
+  }
+  /**
+   * Session-format-version guard: clear a session's snapshot dir when the
+   * format its snapshots were anchored under differs from the current session
+   * format, so seq-anchored references can never survive a format migration
+   * mis-mapped. Runs at `agent/session-start` — after DSH has migrated/loaded
+   * the session, so `sessionVersion` is the post-migration value.
+   *
+   * Conservative rule (per the "delete stale snapshots" policy): a session
+   * with no recorded marker but with snapshot content is treated as legacy and
+   * cleared; a session whose marker differs from `sessionVersion` is cleared.
+   * A matching version — or an untouched session with nothing to protect — is
+   * left alone. The marker is re-stamped to the current version afterward so a
+   * FUTURE format change is detected on the next start.
+   *
+   * @returns whether a session snapshot dir was cleared.
+   */
+  async reconcileFormatVersion(sessionId, sessionVersion) {
+    const stored = await this.readFormatVersion(sessionId);
+    if (stored === sessionVersion) return { cleared: false };
+    const stats = await this.sessionStats(sessionId);
+    const hasContent = stats.anchorGroups > 0 || stats.journals > 0;
+    if (hasContent) {
+      await this.clearSession(sessionId);
+    }
+    if (hasContent || stored !== null) {
+      await this.markFormatVersion(sessionId, sessionVersion);
+    }
+    return { cleared: hasContent };
+  }
 };
 function hashPath(path) {
   return createHash("sha256").update(path).digest("hex").slice(0, 8);
@@ -1511,7 +1593,6 @@ async function commitEntry(store, pending, anchorCache, trackedBySession, exec,
   }
   tracked.add(capture.path);
 }
-var REWIND_MARKER_SOURCE = { kind: "plugin", plugin: "dsh-rewind" };
 var REWIND_MARKER_CONTENT = [{ type: "text", text: "(empty message)" }];
 function buildMarker() {
   return createUserMessage({
@@ -1632,7 +1713,7 @@ async function executeRewind(ctx, store, fs, invocation, rawTarget, mode, inflig
     let event;
     try {
       event = agent.session.append("user/message", marker, {
-        surfaceOp: { op: "replace", start: plan.surfaceStart, end: plan.surfaceEnd },
+        surfaceOp: { op: "replace", startSeq: plan.surfaceStart, endSeq: plan.surfaceEnd },
         sourceEventSeqs: [...plan.shadowedSeqs]
       });
     } catch (error) {
@@ -1874,6 +1955,21 @@ function apply(ctx, config) {
       handler: (invocation) => handleSnapshotCleanup(store, invocation, dshHome, trackedBySession)
     });
   }, "dsh-rewind command");
+  ctx.on("agent/session-start", ({ agent }) => {
+    const session = agent.session;
+    if (session.header.origin === "subagent" || (session.header.delegationDepth ?? 0) > 0) return;
+    void (async () => {
+      try {
+        store.setFormatVersion(session.header.version);
+        const result = await store.reconcileFormatVersion(session.id, session.header.version);
+        if (result.cleared) {
+          ctx.logger.warn(`[dsh-rewind] cleared snapshots for ${session.id}: session format changed (v${session.header.version})`);
+        }
+      } catch (error) {
+        ctx.logger.warn(`[dsh-rewind] session-format reconcile failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    })();
+  }, { global: true });
   ctx.on("session/event", (session, event) => {
     if (event.type !== "user/message") return;
     const header = session.header;

package/lib/types/client/portals.d.ts

@@ -20,6 +20,20 @@
  * typed structurally (see `SlotsLike`) so the plugin never imports the
  * conversation UI package's types and survives its version drift.
  *
+ * COUPLING NOTE — HIGH. There is no harness interface for a per-user-message
+ * action (see docs/compat/audit.md): `MessageIconActions.extraActions` and the
+ * `conversation.chat.assistant-actions` slot are wired for assistant messages
+ * only, and no per-user-message action slot exists. So this portal targets
+ * undocumented internal structure — the `data-chat-flow-kind`,
+ * `data-chat-anchor-key`, `data-composer-input`, `data-composer-card`,
+ * `data-pending-steering` and `data-time-hover-root` attributes plus the
+ * `anchorSeq` field read in `client/hidden.ts`. Those are harness-internal and
+ * may change with the UI; this module (and `hidden.ts`) must be re-adapted to
+ * follow, and is the migration target when a first-class user-action slot or
+ * an official renderer hook surface appears. The coupling is accepted
+ * deliberately because a standards-conformant alternative does not exist
+ * today; it is not a defect to be removed while the DOM-portal approach stands.
+ *
  * @module dsh-rewind/client/portals
  */
 import { type ReactNode } from 'react';

package/lib/types/client/styles.d.ts

@@ -23,4 +23,4 @@ export declare const CLASS: {
 /** The ↶ glyph, drawn inline so the bundle stays dependency-free. */
 export declare const REWIND_ICON_SVG: string;
 /** One injected stylesheet (scoped under `.dsh-rewind-*`). */
-export declare const STYLE = "\n.dsh-rewind-btn {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: 28px;\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary);\n  cursor: pointer;\n}\n.dsh-rewind-btn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.dsh-rewind-popover {\n  position: fixed;\n  z-index: 1000;\n  width: 288px;\n  padding: 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 14px;\n  line-height: 20px;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-popover-title {\n  font-size: 14px;\n  font-weight: 600;\n  line-height: 20px;\n}\n.dsh-rewind-popover-target {\n  margin: 4px 0 10px;\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-all;\n}\n.dsh-rewind-popover-option {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  width: 100%;\n  margin: 0 0 6px;\n  padding: 8px 10px;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n.dsh-rewind-popover-option:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n.dsh-rewind-popover-option:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-option-label {\n  font-weight: 500;\n}\n.dsh-rewind-popover-option-hint {\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-popover-impact {\n  margin: 4px 0 10px;\n  padding: 8px 10px;\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-secondary);\n  white-space: pre-wrap;\n  max-height: 160px;\n  overflow: auto;\n}\n.dsh-rewind-popover-actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: 8px;\n}\n.dsh-rewind-popover-primary,\n.dsh-rewind-popover-ghost {\n  padding: 5px 12px;\n  border: none;\n  border-radius: 8px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 18px;\n  cursor: pointer;\n}\n.dsh-rewind-popover-primary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n.dsh-rewind-popover-primary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n.dsh-rewind-popover-primary:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-ghost {\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-popover-ghost:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.dsh-rewind-guard-hint {\n  position: fixed;\n  z-index: 1000;\n  max-width: min(440px, calc(100vw - 24px));\n  padding: 8px 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 13px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-primary);\n  pointer-events: none;\n}\n\n/* ---- Snapshot-cleanup settings card (mirrors the harness PluginCard look) ---- */\n/* Standardized on the 0.1.2 harness card look (border-radius 16px + 0.5px\n   border-l4, 0.5px internal separators). */\n.dsh-rewind-cleanup-card {\n  list-style: none;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 16px;\n  background: var(--dsw-alias-bg-layer-3);\n  transition: border-color .16s, background .16s;\n}\n.dsh-rewind-cleanup-card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-card-open {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-header {\n  width: 100%;\n  appearance: none;\n  border: 0;\n  background: none;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  border-radius: 12px;\n}\n.dsh-rewind-cleanup-header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n.dsh-rewind-cleanup-head-text {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n.dsh-rewind-cleanup-name {\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-desc {\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-chevron {\n  flex: none;\n  color: var(--dsw-alias-label-tertiary);\n  transition: transform .16s;\n}\n.dsh-rewind-cleanup-chevron-open {\n  transform: rotate(180deg);\n}\n.dsh-rewind-cleanup-pending {\n  flex: none;\n  border-radius: 999px;\n  padding: 1px 8px;\n  font-size: 11px;\n  line-height: 17px;\n  font-weight: 500;\n  white-space: nowrap;\n  background: var(--dsw-alias-bg-module-platform);\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-body {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n  margin: 0 16px;\n  padding: 4px 0 8px;\n}\n.dsh-rewind-cleanup-readonly {\n  margin: 12px 0 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-permission {\n  display: grid;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field + .dsh-rewind-cleanup-field {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-head {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n.dsh-rewind-cleanup-label {\n  flex: 1;\n  min-width: 0;\n  font-size: 13px;\n  font-weight: 500;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-hint {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n/* Switch row: label left, role=switch button right, hint below (Subagent module).\n * The track mirrors the harness ui-primitives Switch (0.1.3-alpha.2 line): the\n * on/off appearance keys off aria-checked rather than a parallel class, so the\n * visual state cannot disagree with the state assistive technology reads, and\n * corner-shape: round opts the capsule track out of the global superellipse\n * (which would square the capsule ends off against the round thumb inside). */\n.dsh-rewind-cleanup-toggle-row {\n  display: flex;\n  align-items: flex-start;\n  justify-content: space-between;\n  gap: 16px;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-toggle-label {\n  flex: 1;\n  min-width: 0;\n}\n.dsh-rewind-cleanup-switch {\n  box-sizing: border-box;\n  position: relative;\n  flex: 0 0 auto;\n  width: 36px;\n  height: 20px;\n  padding: 2px;\n  border: 0;\n  border-radius: 10px;\n  corner-shape: round;\n  background: var(--dsw-alias-border-l3);\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] {\n  background: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-switch:disabled {\n  cursor: default;\n  opacity: 0.5;\n}\n.dsh-rewind-cleanup-switch:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 2px;\n}\n.dsh-rewind-cleanup-thumb {\n  display: block;\n  width: 16px;\n  height: 16px;\n  border-radius: 50%;\n  corner-shape: round;\n  background: var(--dsw-alias-label-primary-foreground);\n  transition: transform 120ms ease;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] .dsh-rewind-cleanup-thumb {\n  transform: translateX(16px);\n}\n.dsh-rewind-cleanup-input {\n  box-sizing: border-box;\n  height: 34px;\n  padding: 0 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-3);\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-input:focus-visible {\n  outline: none;\n  border-color: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-input:disabled {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n.dsh-rewind-cleanup-input-invalid {\n  border-color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-footer {\n  display: flex;\n  align-items: center;\n  justify-content: flex-end;\n  gap: 8px;\n  padding: 12px 0 4px;\n  border-top: 1px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-failed {\n  flex: 1;\n  min-width: 0;\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-discard,\n.dsh-rewind-cleanup-save {\n  appearance: none;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  padding: 5px 14px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-discard {\n  border-color: var(--dsw-alias-border-l2);\n  background: none;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-discard:hover:not(:disabled) {\n  color: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-save {\n  background: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n.dsh-rewind-cleanup-discard:disabled,\n.dsh-rewind-cleanup-save:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n.dsh-rewind-cleanup-discard:focus-visible,\n.dsh-rewind-cleanup-save:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n";
+export declare const STYLE = "\n.dsh-rewind-btn {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: 28px;\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary);\n  cursor: pointer;\n}\n.dsh-rewind-btn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.dsh-rewind-popover {\n  position: fixed;\n  z-index: 1000;\n  width: 288px;\n  padding: 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 14px;\n  line-height: 20px;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-popover-title {\n  font-size: 14px;\n  font-weight: 600;\n  line-height: 20px;\n}\n.dsh-rewind-popover-target {\n  margin: 4px 0 10px;\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-all;\n}\n.dsh-rewind-popover-option {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  width: 100%;\n  margin: 0 0 6px;\n  padding: 8px 10px;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n.dsh-rewind-popover-option:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n.dsh-rewind-popover-option:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-option-label {\n  font-weight: 500;\n}\n.dsh-rewind-popover-option-hint {\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-popover-impact {\n  margin: 4px 0 10px;\n  padding: 8px 10px;\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-secondary);\n  white-space: pre-wrap;\n  max-height: 160px;\n  overflow: auto;\n}\n.dsh-rewind-popover-actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: 8px;\n}\n.dsh-rewind-popover-primary,\n.dsh-rewind-popover-ghost {\n  padding: 5px 12px;\n  border: none;\n  border-radius: 8px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 18px;\n  cursor: pointer;\n}\n.dsh-rewind-popover-primary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n.dsh-rewind-popover-primary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n.dsh-rewind-popover-primary:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-ghost {\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-popover-ghost:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.dsh-rewind-guard-hint {\n  position: fixed;\n  z-index: 1000;\n  max-width: min(440px, calc(100vw - 24px));\n  padding: 8px 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 13px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-primary);\n  pointer-events: none;\n}\n\n/* ---- Snapshot-cleanup settings card (mirrors the harness PluginCard look) ---- */\n/* Standardized on the 0.1.2 harness card look (border-radius 16px + 0.5px\n   border-l4, 0.5px internal separators). */\n.dsh-rewind-cleanup-card {\n  list-style: none;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 16px;\n  background: var(--dsw-alias-bg-layer-3);\n  transition: border-color .16s, background .16s;\n}\n.dsh-rewind-cleanup-card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-card-open {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-header {\n  width: 100%;\n  appearance: none;\n  border: 0;\n  background: none;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  border-radius: 12px;\n}\n.dsh-rewind-cleanup-header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n.dsh-rewind-cleanup-head-text {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: 4px;\n}\n.dsh-rewind-cleanup-name {\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-desc {\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-chevron {\n  flex: none;\n  color: var(--dsw-alias-label-tertiary);\n  transition: transform .16s;\n}\n.dsh-rewind-cleanup-chevron-open {\n  transform: rotate(180deg);\n}\n.dsh-rewind-cleanup-pending {\n  flex: none;\n  border-radius: 999px;\n  padding: 1px 8px;\n  font-size: 11px;\n  line-height: 17px;\n  font-weight: 500;\n  white-space: nowrap;\n  background: var(--dsw-alias-bg-module-platform);\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-body {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n  margin: 0 16px;\n  padding: 0 0 8px;\n}\n.dsh-rewind-cleanup-readonly {\n  margin: 12px 0 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-permission {\n  display: grid;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field {\n  display: flex;\n  flex-direction: column;\n  gap: 6px;\n  padding: 12px 0;\n}\n.dsh-rewind-cleanup-field + .dsh-rewind-cleanup-field {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n/* Auto-cleanup (permission) block and the max-age field are consecutive control\n * sections of the open card \u2014 give them the same 0.5px divider the harness gives\n * every pair of config fields (fields.module.css field + field). */\n.dsh-rewind-cleanup-permission + .dsh-rewind-cleanup-field {\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-head {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n.dsh-rewind-cleanup-label {\n  flex: 1;\n  min-width: 0;\n  font-size: 13px;\n  font-weight: 500;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-hint {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-cleanup-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n/* Switch row: label left, role=switch button right, hint below (Subagent module).\n * The track mirrors the harness ui-primitives Switch (0.1.3-alpha.2 line): the\n * on/off appearance keys off aria-checked rather than a parallel class, so the\n * visual state cannot disagree with the state assistive technology reads, and\n * corner-shape: round opts the capsule track out of the global superellipse\n * (which would square the capsule ends off against the round thumb inside). */\n.dsh-rewind-cleanup-toggle-row {\n  display: flex;\n  align-items: flex-start;\n  justify-content: space-between;\n  gap: 16px;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-toggle-label {\n  flex: 1;\n  min-width: 0;\n}\n.dsh-rewind-cleanup-switch {\n  box-sizing: border-box;\n  position: relative;\n  flex: 0 0 auto;\n  width: 36px;\n  height: 20px;\n  padding: 2px;\n  border: 0;\n  border-radius: 10px;\n  corner-shape: round;\n  background: var(--dsw-alias-border-l3);\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] {\n  background: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-switch:disabled {\n  cursor: default;\n  opacity: 0.5;\n}\n.dsh-rewind-cleanup-switch:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 2px;\n}\n.dsh-rewind-cleanup-thumb {\n  display: block;\n  width: 16px;\n  height: 16px;\n  border-radius: 50%;\n  corner-shape: round;\n  background: var(--dsw-alias-label-primary-foreground);\n  transition: transform 120ms ease;\n}\n.dsh-rewind-cleanup-switch[aria-checked='true'] .dsh-rewind-cleanup-thumb {\n  transform: translateX(16px);\n}\n.dsh-rewind-cleanup-input {\n  box-sizing: border-box;\n  height: 34px;\n  padding: 0 12px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-3);\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-cleanup-input:focus-visible {\n  outline: none;\n  border-color: var(--dsw-alias-brand-primary);\n}\n.dsh-rewind-cleanup-input:disabled {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n.dsh-rewind-cleanup-input-invalid {\n  border-color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-footer {\n  display: flex;\n  align-items: center;\n  justify-content: flex-end;\n  gap: 8px;\n  padding: 12px 0 4px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n.dsh-rewind-cleanup-failed {\n  flex: 1;\n  min-width: 0;\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-error);\n}\n.dsh-rewind-cleanup-discard,\n.dsh-rewind-cleanup-save {\n  appearance: none;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  padding: 5px 14px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  cursor: pointer;\n}\n.dsh-rewind-cleanup-discard {\n  border-color: var(--dsw-alias-border-l2);\n  background: none;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-cleanup-discard:hover:not(:disabled) {\n  color: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n.dsh-rewind-cleanup-save {\n  background: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n.dsh-rewind-cleanup-discard:disabled,\n.dsh-rewind-cleanup-save:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n.dsh-rewind-cleanup-discard:focus-visible,\n.dsh-rewind-cleanup-save:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: 1px;\n}\n";

package/lib/types/locales.d.ts

@@ -15,6 +15,11 @@
  * renders through machine tokens (`impact=<n>`, `args` @seq), never by parsing
  * host prose.
  *
+ * DSH localizes only its OWN command descriptions via the client locale — a
+ * closed `HOST_DESCRIPTION_KEYS` allowlist; third-party plugin descriptions are
+ * not in that channel (see docs/compat/audit.md, RU-I18N), so this plugin's host
+ * command copy stays in the host's tongue (English by default).
+ *
  * English is the key-set source of truth; zh is checked complete against it.
  *
  * @module dsh-rewind/locales

package/lib/types/rewind.d.ts

@@ -9,10 +9,10 @@
  * transcript) is untouched; only the model-visible surface is cut, so the
  * next request derives its context from the target message onward.
  *
- * Marker shape (v0.1.3/v2): the marker is a `user/message` carrying a replace
+ * Marker shape (v0.1.5/v3): the marker is a `user/message` carrying a replace
  * `surfaceOp` — a single event:
  *
- *   user/message (marker content) → { surfaceOp {replace, start, end} }
+ *   user/message (marker content) → { surfaceOp {replace, startSeq, endSeq} }
  *
  * v2 reserves surface `replace` to a node that cites every shadowed seq via
  * `sourceEventSeqs`, and `assistant/message` can no longer carry
@@ -26,6 +26,7 @@
  *
  * @module dsh-rewind/rewind
  */
+import type { MessageSource } from '@deepseek-ai/dsh-llm/message';
 import type { SessionEvent, UserMessage } from '@deepseek-ai/dsh-session';
 /** Which of the two rewind modes a rewind executes. */
 export type RewindMode = 'chat' | 'both';
@@ -73,6 +74,25 @@ export interface RewindPlan {
     /** Last surface node — the replace range end (inclusive). */
     readonly surfaceEnd: number;
 }
+/**
+ * The rewind-marker source: the backend-independent identity carried by every
+ * marker the plugin appends. It is the plain third-party plugin source shape
+ * `{ kind: 'plugin', plugin: 'dsh-rewind' }` — no extra fields, because a
+ * plugin source is a CLOSED shape in the harness (only `kind`/`plugin`, plus
+ * the context-injection `form`/`sections`/`summary`; see `MessageSourceMap` and
+ * the released-format source validator). A plugin extends the source map by
+ * adding a new `kind`, never by hanging private fields off `plugin`.
+ */
+export declare const REWIND_MARKER_SOURCE: Readonly<{
+    readonly kind: 'plugin';
+    readonly plugin: 'dsh-rewind';
+}>;
+/**
+ * Test whether a persisted message source identifies a rewind marker.
+ * @param source - source restored from a surface user message.
+ * @returns whether the source carries the backend-independent rewind brand.
+ */
+export declare function isRewindMarker(source: MessageSource): boolean;
 /** Preview length cap for candidate listings. */
 export declare const CANDIDATE_PREVIEW_CHARS = 80;
 /**

package/lib/types/snapshot.d.ts

@@ -317,6 +317,13 @@ export declare class SnapshotStore {
     private readonly lastEntry;
     /** Sessions whose dedup state has been seeded from disk this process. */
     private readonly seededSessions;
+    /**
+     * Session-format version snapshots are anchored under, stamped into each
+     * session's `format` marker when an entry is recorded. `null` until the host
+     * sets it (from `agent/session-start`), so a session that never records is
+     * never materialized and a marker is only written where snapshots exist.
+     */
+    private formatVersion;
     constructor(root?: string, opts?: {
         readonly dedup?: boolean;
         readonly dshHome?: string;
@@ -423,6 +430,8 @@ export declare class SnapshotStore {
     restoreAfter(sessionId: string, targetSeq: number, deleteFile: DeleteFile, probe?: DiskProbe, opts?: RestoreRunOptions): Promise<RestoreOutcome>;
     /** Prefix of one restore-op journal file inside the session dir. */
     private static readonly JOURNAL_PREFIX;
+    /** Session-format-version marker file inside the session dir. Non-`.json`, so it never counts as a checkpoint entry. */
+    private static readonly FORMAT_FILE;
     /** Absolute path of one restore-op journal file. */
     private journalPath;
     /**
@@ -622,6 +631,48 @@ export declare class SnapshotStore {
     clearSession(sessionId: string, opts?: {
         readonly dryRun?: boolean;
     }): Promise<ClearSessionReport>;
+    /**
+     * Read the session-format version marker recorded for a session, or `null`
+     * when there is no marker — a pre-marker, legacy snapshot dir, or a session
+     * that never materialized a dir.
+     */
+    private readFormatVersion;
+    /**
+     * Record the session-format version a session's snapshots are anchored under
+     * (`session.header.version`: 2 for the v2 format, 3 for the v3 format). The
+     * marker is a tiny non-`.json` file, so it never counts as a checkpoint
+     * entry in `sessionStats`/`clearSession`. Written atomically (temp + rename)
+     * like every other persisted marker, so a crash mid-write can only leave an
+     * inert `format.tmp` — never a partial marker that a later reconcile could
+     * misread as a version mismatch and wrongly clear.
+     */
+    markFormatVersion(sessionId: string, sessionVersion: number): Promise<void>;
+    /**
+     * Set the session-format version the store stamps onto every snapshot it
+     * records. The host sets this once per process from `agent/session-start`
+     * (`agent.session.header.version`), so a marker is only materialized for a
+     * session that actually records a snapshot.
+     */
+    setFormatVersion(sessionVersion: number): void;
+    /**
+     * Session-format-version guard: clear a session's snapshot dir when the
+     * format its snapshots were anchored under differs from the current session
+     * format, so seq-anchored references can never survive a format migration
+     * mis-mapped. Runs at `agent/session-start` — after DSH has migrated/loaded
+     * the session, so `sessionVersion` is the post-migration value.
+     *
+     * Conservative rule (per the "delete stale snapshots" policy): a session
+     * with no recorded marker but with snapshot content is treated as legacy and
+     * cleared; a session whose marker differs from `sessionVersion` is cleared.
+     * A matching version — or an untouched session with nothing to protect — is
+     * left alone. The marker is re-stamped to the current version afterward so a
+     * FUTURE format change is detected on the next start.
+     *
+     * @returns whether a session snapshot dir was cleared.
+     */
+    reconcileFormatVersion(sessionId: string, sessionVersion: number): Promise<{
+        cleared: boolean;
+    }>;
 }
 /**
  * Re-check every tracked file at a user-message boundary and record the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-rewind-plugin",
-  "version": "0.10.0-alpha.2",
+  "version": "0.11.0-beta.1",
   "description": "DSH 插件：真正便捷无感的同窗口内对话回退，从不新建分支；自带轻量工作区备份，可一并还原文件（完整 Claude Code /rewind 语义）。 · DSH plugin: genuinely effortless in-window conversation rewind — never forking a new session; ships a lightweight workspace backup that restores files together with the rewind (full Claude Code /rewind semantics).",
   "keywords": [
     "deepseek-harness",
@@ -50,7 +50,7 @@
       "patch": "./cordis.patch.yml"
     },
     "engines": {
-      "dsh": ">=0.1.3-alpha.2"
+      "dsh": ">=0.1.5-rc.1"
     },
     "client": {
       "inject": [
@@ -76,18 +76,18 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-fs": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2"
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-fs": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-sandbox": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.5-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -136,37 +136,37 @@
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-store": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-scope": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-typert-protocol": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-user-questions": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-command-compact": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-commands": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-compaction": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-compaction-basic": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-fs": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-goal": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session-stats": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-session-title": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "^0.1.3-alpha.2",
-    "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-agent": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-store": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-scope": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-user-questions": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-command-compact": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-compaction": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-compaction-basic": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-fs": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-goal": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-sandbox": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-session-projection": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-session-stats": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-session-title": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-token-meter": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.5-rc.1",
     "@types/node": "^24.0.0",
     "@types/react": "^18.3.31",
     "@types/react-dom": "^18.3.7",