@240xu/dsh-plugin-hub 0.0.0-stage → 0.3.0

package/cordis.patch.yml

@@ -0,0 +1,54 @@
+# @240xu/dsh-plugin-hub bundle layer：一条裸锚行（本包根，提供 browser client
+# graph entry）+ 四条 family 行（x240-*，经本包 shell 子路径）+ 一条 web 接线行。
+# 挂载（会签方案 aggregation-weball.md §7 MVA：行 name → @240xu/dsh-plugin-hub/<family>
+# （永不失败的隔离壳），真实包名放 config.plugin，由 shell 动态 import——
+# 任一子包 import/start 失败只降级该行，不拖垮 bundle 事务组、不 abort dsh web。
+# 裸锚行的 host apply 只持有 /degraded + /rows 路由；它的 client bundle 折入
+# message-ops/websearch 的 UI，并按 /rows 的 active 行 gate 挂载。
+# id 统一 x240- 前缀：与各子包 standalone patch 的 id（dsh-websearch 等）不冲突，
+# suite 与 standalone 可共存（浏览器半 standalone 优先；宿主工具可能有一行
+# already registered 警告，见 README）。
+# 若验证期需要绕过 shell 直接挂子包，把 name 换成子包名并删掉 config 即可
+# （对照行保留在文件尾注释）。
+- insert:
+    - id: x240-suite
+      name: '@240xu/dsh-plugin-hub'
+- insert:
+    - id: x240-websearch
+      name: '@240xu/dsh-plugin-hub/websearch'
+      config:
+        plugin: '@240xu/dsh-websearch'
+- insert:
+    - id: x240-message-ops
+      name: '@240xu/dsh-plugin-hub/message-ops'
+      config:
+        plugin: '@240xu/dsh-message-ops'
+- insert:
+    - id: x240-session-lazy-view
+      name: '@240xu/dsh-plugin-hub/session-lazy-view'
+      config:
+        plugin: '@240xu/dsh-session-lazy-view'
+    - id: x240-session-search
+      name: '@240xu/dsh-plugin-hub/session-search'
+      config:
+        plugin: '@240xu/dsh-session-search'
+
+# 对照（不启用）：无 shell 直挂形态，即任务书 2) 的字面读法——
+# - insert:
+#     - id: x240-websearch
+#       name: '@240xu/dsh-websearch'
+- id: web
+  name: '@deepseek-ai/dsh-web'
+  config:
+    searchProvider: unified
+
+# Optional official Inspector bundle: mounted from the aggregate package so one
+# `dsh plugin add @240xu/dsh-plugin-hub` also installs log/session/DevTools tools.
+- insert:
+    - id: experimental-inspector
+      name: '@deepseek-ai/dsh-experimental-inspector'
+      disabled: false
+      config:
+        captureFetch: true
+    - id: session-inspector
+      name: '@deepseek-ai/dsh-experimental-session-inspector'

package/package.json

@@ -1,6 +1,65 @@
 {
   "name": "@240xu/dsh-plugin-hub",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.0",
+  "description": "One-line DSH plugin bundle: aggregates websearch, message-ops, session-lazy-view and session-search with per-row failure isolation. 一键安装的 DSH 插件聚合包。",
+  "type": "module",
+  "license": "MIT",
+  "author": "240xu",
+  "keywords": [
+    "dsh-plugin"
+  ],
+  "main": "src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./client": "./client/index.js",
+    "./shell": "./src/shell.js",
+    "./websearch": "./src/shell.js",
+    "./message-ops": "./src/shell.js",
+    "./session-lazy-view": "./src/shell.js",
+    "./devkit": "./src/shell.js",
+    "./session-search": "./src/shell.js",
+    "./degraded": "./src/shell.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "client",
+    "scripts",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [],
+      "platform": "web"
+    }
+  },
+  "dependencies": {
+    "@240xu/dsh-websearch": "^2.8.3",
+    "@240xu/dsh-message-ops": "^0.11.0",
+    "@240xu/dsh-session-lazy-view": "^0.3.5",
+    "@240xu/dsh-session-search": "^0.1.10",
+    "@deepseek-ai/dsh-experimental-inspector-profile": "0.2.1-rc.2"
+  },
+  "scripts": {
+    "build:client": "node scripts/build-client.mjs",
+    "check:client": "node scripts/build-client.mjs --check",
+    "prepack": "node scripts/build-client.mjs --check",
+    "test": "node --test test/*.test.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/240xu/dsh-plugin-hub.git"
+  },
+  "homepage": "https://github.com/240xu/dsh-plugin-hub#readme",
+  "bugs": {
+    "url": "https://github.com/240xu/dsh-plugin-hub/issues"
+  }
+}

package/scripts/build-client.mjs

@@ -0,0 +1,124 @@
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ROOT = dirname(dirname(fileURLToPath(import.meta.url)));
+const OUT = join(ROOT, "client", "index.js");
+const TEMPLATE = join(ROOT, "scripts", "client-runtime.template.js");
+
+// Keep this list explicit: it is the published browser surface of the suite.
+// Each entry's client half is inlined into the suite's single graph entry so a
+// subpath shell row can never be mistaken for a client graph row.
+const CHILDREN = [
+  {
+    name: "@240xu/dsh-message-ops",
+    moduleId: "@240xu/dsh-plugin-hub/client/message-ops",
+  },
+  {
+    name: "@240xu/dsh-websearch",
+    moduleId: "@240xu/dsh-plugin-hub/client/websearch",
+  },
+];
+
+const requireFromRoot = createRequire(join(ROOT, "package.json"));
+
+function resolveChild(child) {
+  const pkgPath = requireFromRoot.resolve(`${child.name}/package.json`);
+  const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+  const exported = pkg.exports?.["./client"];
+  const clientRelative = typeof exported === "string" ? exported : exported?.default;
+  if (typeof clientRelative !== "string" || clientRelative === "") {
+    throw new Error(`${child.name} does not export a ./client bundle`);
+  }
+  const sourcePath = join(dirname(pkgPath), clientRelative);
+  if (!existsSync(sourcePath)) throw new Error(`${child.name} ./client points at a missing file: ${sourcePath}`);
+  const source = readFileSync(sourcePath, "utf8")
+    .replace(/^\s*\/\/[#@]\s*sourceMappingURL=.*$/gm, "")
+    .replace(/^\s*\/\/[#@]\s*sourceURL=.*$/gm, "")
+    .replace(/\r\n/g, "\n");
+  if (!source.includes("window.__ModuleLoader__.load")) {
+    throw new Error(`${child.name} ${clientRelative} is not a __ModuleLoader__ bundle`);
+  }
+  const digest = createHash("sha256").update(source).digest("hex");
+  return {
+    ...child,
+    version: pkg.version,
+    relative: clientRelative,
+    source,
+    digest,
+  };
+}
+
+function renderChild(child) {
+  const missing = `[dsh-plugin-hub] ${child.name} client bundle did not register a factory`;
+  return `      {
+        name: ${JSON.stringify(child.name)},
+        moduleId: ${JSON.stringify(child.moduleId)},
+        capture() {
+          let factory;
+          const loader = window.__ModuleLoader__;
+          const original = loader.load;
+          loader.load = (registration) => { factory = registration.factory; };
+          try {
+${child.source}
+          } finally {
+            loader.load = original;
+          }
+          if (typeof factory !== "function") throw new Error(${JSON.stringify(missing)});
+          return factory;
+        },
+        create(require) {
+          const factory = this.capture();
+          return factory(require);
+        },
+      }`;
+}
+
+function render(children) {
+  const template = readFileSync(TEMPLATE, "utf8");
+  if (!template.includes("__CHILDREN__")) throw new Error("client runtime template is missing __CHILDREN__");
+  const header = `/* @240xu/dsh-plugin-hub — generated browser bundle. DO NOT EDIT.
+ * Regenerate: node scripts/build-client.mjs
+ * Inputs:
+${children.map((child) => ` *   ${child.name}@${child.version} ${child.relative} sha256:${child.digest}`).join("\n")}
+ */`;
+  const entries = children.map(renderChild).join(",\n");
+  return `${header}\n${template.replace("__CHILDREN__", `[\n${entries},\n    ]`)}`;
+}
+
+const children = CHILDREN.map(resolveChild);
+const output = render(children);
+const check = process.argv.includes("--check");
+const unknown = process.argv.slice(2).filter((arg) => arg !== "--check");
+if (unknown.length > 0) {
+  console.error(`build-client: unknown argument(s): ${unknown.join(" ")}`);
+  process.exit(2);
+}
+
+if (check) {
+  if (!existsSync(OUT)) {
+    console.error("client bundle stale: client/index.js is missing; run: node scripts/build-client.mjs");
+    process.exit(1);
+  }
+  const current = readFileSync(OUT, "utf8");
+  if (current === output) {
+    console.log(`client bundle up to date (${Buffer.byteLength(output)} bytes, ${children.length} folded children)`);
+    process.exit(0);
+  }
+  const currentLines = current.split("\n");
+  const outputLines = output.split("\n");
+  let line = 0;
+  while (line < currentLines.length && line < outputLines.length && currentLines[line] === outputLines[line]) line += 1;
+  console.error(
+    `client bundle stale: client/index.js (${Buffer.byteLength(current)} bytes) != expected (${Buffer.byteLength(output)} bytes); first difference at line ${line + 1}\nrun: node scripts/build-client.mjs`,
+  );
+  process.exit(1);
+}
+
+mkdirSync(dirname(OUT), { recursive: true });
+const temporary = `${OUT}.tmp-${process.pid}`;
+writeFileSync(temporary, output, { mode: 0o644 });
+renameSync(temporary, OUT);
+console.log(`wrote client/index.js (${Buffer.byteLength(output)} bytes, ${children.length} folded children)`);

package/scripts/client-runtime.template.js

@@ -0,0 +1,121 @@
+window.__ModuleLoader__.load({
+  id: "@240xu/dsh-plugin-hub",
+  factory: (require) => {
+    const CHILDREN = __CHILDREN__;
+    const ROWS_PATH = "api/dsh-plugin-hub/rows";
+    const FETCH_TIMEOUT_MS = 1500;
+    const MOUNTED = Symbol.for("dsh-plugin-hub.mounted-client-plugins");
+
+    function mountedRegistry() {
+      const root = globalThis;
+      return (root[MOUNTED] ??= new Set());
+    }
+
+    function ownClientEntryIds() {
+      const entries = globalThis.__DSH_BOOT__?.entries;
+      const ids = new Set();
+      if (!Array.isArray(entries)) return ids;
+      for (const entry of entries) {
+        if (typeof entry === "string") ids.add(entry);
+        else if (entry && typeof entry.id === "string") ids.add(entry.id);
+      }
+      return ids;
+    }
+
+    async function fetchActiveRows() {
+      if (typeof fetch !== "function") return undefined;
+      let timer;
+      try {
+        const controller = new AbortController();
+        timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+        const response = await fetch(ROWS_PATH, {
+          credentials: "same-origin",
+          headers: { accept: "application/json" },
+          signal: controller.signal,
+        });
+        if (!response.ok) return undefined;
+        const payload = await response.json();
+        if (!payload || payload.ok !== true || !Array.isArray(payload.children)) return undefined;
+        return new Set(payload.children.filter((name) => typeof name === "string"));
+      } catch {
+        return undefined;
+      } finally {
+        if (timer !== undefined) clearTimeout(timer);
+      }
+    }
+
+    function pluginShape(module) {
+      const face = module && module.default !== undefined ? module.default : module;
+      if (typeof face === "function") return { apply: face, inject: undefined };
+      if (face && typeof face.apply === "function") {
+        return { apply: face.apply, inject: face.inject };
+      }
+      return undefined;
+    }
+
+    async function mountChildren(ctx, options = {}) {
+      const active = await fetchActiveRows();
+      if (options.isDisposed?.()) return;
+      const own = ownClientEntryIds();
+      const registry = mountedRegistry();
+      const claimed = options.claimed ?? new Set();
+      const create = options.create ?? ((child) => child.create(require));
+      for (const child of CHILDREN) {
+        if (options.isDisposed?.()) return;
+        if (active !== undefined && !active.has(child.name)) continue;
+        if (own.has(child.name)) continue;
+        if (registry.has(child.name)) continue;
+        registry.add(child.name);
+        claimed.add(child.name);
+        try {
+          const shape = pluginShape(create(child));
+          if (shape === undefined) {
+            registry.delete(child.name);
+            claimed.delete(child.name);
+            console.error(`[dsh-plugin-hub] folded client ${child.name} has no usable plugin shape`);
+            continue;
+          }
+          const definition = {
+            name: child.name,
+            inject: Array.isArray(shape.inject) ? [...shape.inject] : [],
+            apply: shape.apply,
+          };
+          const fiber = ctx.plugin(definition);
+          Promise.resolve(fiber).then(undefined, (error) => {
+            registry.delete(child.name);
+            claimed.delete(child.name);
+            console.error(`[dsh-plugin-hub] folded client ${child.name} failed to start:`, error);
+          });
+        } catch (error) {
+          registry.delete(child.name);
+          claimed.delete(child.name);
+          console.error(`[dsh-plugin-hub] folded client ${child.name} failed to mount:`, error);
+        }
+      }
+    }
+
+    function apply(ctx, options = {}) {
+      const claimed = new Set();
+      let disposed = false;
+      try {
+        ctx.effect(() => () => {
+          disposed = true;
+          const registry = mountedRegistry();
+          for (const name of claimed) registry.delete(name);
+          claimed.clear();
+        }, "dsh-plugin-hub: client mount claims");
+      } catch (error) {
+        console.warn("[dsh-plugin-hub] failed to register client mount cleanup:", error);
+      }
+      void mountChildren(ctx, { ...options, claimed, isDisposed: () => disposed }).catch((error) => {
+        console.error("[dsh-plugin-hub] folded client bridge failed:", error);
+      });
+    }
+
+    return {
+      apply,
+      inject: [],
+      __test: { CHILDREN, mountChildren, fetchActiveRows, ownClientEntryIds, mountedRegistry },
+    };
+  },
+});

package/src/index.js

@@ -0,0 +1,7 @@
+import shell, { apply, inject, listActiveRows, listDegraded } from "./shell.js";
+
+export { apply, inject, listActiveRows, listDegraded };
+
+export const name = "@240xu/dsh-plugin-hub";
+
+export default { ...shell, name, inject, apply };

package/src/shell.js

@@ -0,0 +1,215 @@
+// @240xu/dsh-plugin-hub — 故障隔离壳（web-all shell 模式的最小移植）。
+//
+// 模式来源：@linxin666/dsh-web-all（证据 aggregation-weball.md §5，
+// lib/index.js:166-221 apply$1 / :4-12 globalThis 状态 / :52-76 degraded 路由）。
+// 每个 family patch 行的 name 指向本文件（经 package.json exports 的各子路径，
+// 全部重导出同一 apply/inject），真实插件包名在 config.plugin；本壳动态 import
+// 它，import/start 失败只记录降级、绝不 rethrow——官方 loader 把一个 bundle 的
+// 全部 patch 行当一个事务组挂载，裸挂时坏插件会 abort dsh web，壳把失败面
+// 收窄到单行。
+//
+// 浏览器半（0.2.0）：子包 client bundle 由 build-client.mjs 折进 suite 的单个
+// graph entry（exports["./client"]），不再依赖“子路径行被 client graph 扫描”
+// ——dsh-client-modules 只解析裸包名，子路径行永远拿不到 dsh.client。
+// activeRows 账本 + /api/dsh-plugin-hub/rows 路由给折叠挂载做 gate：被 disable 的行
+// 没有 shell apply，UI 不挂；import/start 降级的行仍算 active（UI 保留，降级
+// 状态让用户看得见）。degraded 路由仍 loopback+Host 双围栏。
+// 两条健康路由都走嵌套 inject(["webServer"]) fiber——壳比宿主 webServer 先激活，
+// 直接读会 miss（web-all 同款时序处理）。
+
+const KEY = Symbol.for("dsh-plugin-hub.shell-state");
+
+/** 进程级共享壳状态：bundler 分裂多份模块副本时也只有一份（web-all 同款）。 */
+function shellState() {
+  const state = (globalThis[KEY] ??= {});
+  state.degraded ??= new Map();
+  // plugin -> refcount：同一真实包可能被多行/standalone 同时挂载，计数归零才删。
+  state.activeRows ??= new Map();
+  state.healthRoutes ??= { count: 0 };
+  return state;
+}
+
+/** 安全 JSON：circular/BigInt/toJSON 抛出时降级为占位串（0.1.4 P2 护栏）。 */
+function safeStringify(value) {
+  try { return JSON.stringify(value ?? null); } catch { return '"<unserializable>"'; }
+}
+
+/** 记录（或刷新）一行降级。错误在此打一次日志。
+ *  0.1.4（P2）：整体自护栏——本函数若自己抛（stack getter/toString 抛），
+ *  会逃出 applyShell 让壳行事务回滚整 bundle，恰是壳要防的失败面。 */
+function recordDegraded(plugin, stage, error) {
+  try {
+    const message = error instanceof Error ? (error.stack ?? error.message) : String(error);
+    console.error(`[dsh-plugin-hub] plugin degraded (${stage}): ${plugin}\n${message}`);
+    shellState().degraded.set(plugin, { plugin, stage, message, at: new Date().toISOString() });
+  } catch (e) {
+    try {
+      shellState().degraded.set(plugin, { plugin, stage, message: '<degrade ledger write failed>', at: new Date().toISOString() });
+    } catch { /* 最后防线：静默——观测功能绝不反噬主流程 */ }
+  }
+}
+
+export function listDegraded() {
+  return [...shellState().degraded.values()];
+}
+
+/** 一行 shell entry 已 apply（即使真实插件随后 import/start 降级）。 */
+function recordActiveRow(plugin) {
+  const rows = shellState().activeRows;
+  rows.set(plugin, (rows.get(plugin) ?? 0) + 1);
+}
+
+/** 一行 shell entry 已 dispose；同包仍有别的行挂载时保留。 */
+function removeActiveRow(plugin) {
+  const rows = shellState().activeRows;
+  const next = (rows.get(plugin) ?? 0) - 1;
+  if (next > 0) rows.set(plugin, next);
+  else rows.delete(plugin);
+}
+
+/** active 行快照（真实插件包名，插入顺序）。browser 半据此 gate 折叠挂载。 */
+export function listActiveRows() {
+  return [...shellState().activeRows.keys()];
+}
+
+/** 测试专用：清空降级/active 账本与健康路由计数。 */
+export function _resetDegraded() {
+  shellState().degraded.clear();
+  shellState().activeRows.clear();
+  shellState().healthRoutes.count = 0;
+}
+
+/** loopback-only 降级观测路由（每 shell 上下文注册一次）。 */
+function makeDegradedRoute() {
+  return {
+    kind: "exact",
+    path: "/api/dsh-plugin-hub/degraded",
+    handler: async (req, res) => {
+      let remote = req.socket?.remoteAddress ?? "";
+      if (remote.startsWith("::ffff:")) remote = remote.slice(7);
+      // 0.1.4（P2）：remoteAddress 之外必须校验 Host——evil.com TTL 重绑定到
+      // 127.0.0.1 后 remoteAddress 仍是回环，仅靠它放行会泄露降级清单
+      // （插件名 + error.stack 绝对路径）。Host 必须是本机名（对齐三兄弟的
+      // Host 围栏为 arch-review 上线硬门槛）。
+      const host = String(req.headers?.host ?? "").toLowerCase();
+      const hostOk = /^(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/.test(host);
+      if (remote !== "127.0.0.1" && remote !== "::1" || !hostOk) {
+        res.writeHead(403, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: false, error: "forbidden: loopback-only" }));
+        return;
+      }
+      res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+      res.end(JSON.stringify({ ok: true, degraded: listDegraded() }));
+    },
+  };
+}
+
+/** active-row 路由：不设 loopback 围栏（远端浏览器同源读取；载荷只是包名）。 */
+function makeRowsRoute() {
+  return {
+    kind: "exact",
+    path: "/api/dsh-plugin-hub/rows",
+    handler: async (_req, res) => {
+      res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+      res.end(JSON.stringify({ ok: true, children: listActiveRows() }));
+    },
+  };
+}
+
+/** 健康路由注册（webServer 迟到安全）：嵌套 inject fiber，随本行 dispose。
+ *  degraded + rows 作为一个原子组注册/注销：任一失败回滚另一条。 */
+function holdHealthRoute(ctx) {
+  ctx.inject?.(["webServer"], (scoped) => {
+    const webServer = scoped.webServer;
+    if (webServer === undefined || typeof webServer.register !== "function") return;
+    const routes = shellState().healthRoutes;
+    if (routes.count === 0) {
+      let unregisterDegraded;
+      let unregisterRows;
+      try {
+        unregisterDegraded = webServer.register(makeDegradedRoute());
+        try {
+          unregisterRows = webServer.register(makeRowsRoute());
+        } catch (error) {
+          try { unregisterDegraded?.(); } catch { /* already gone */ }
+          throw error;
+        }
+        routes.unregister = () => {
+          try { unregisterRows?.(); } finally { unregisterDegraded?.(); }
+        };
+      } catch (error) {
+        console.warn("[dsh-plugin-hub] failed to register health routes:", error);
+        return;
+      }
+    }
+    routes.count += 1;
+    ctx.effect?.(() => () => {
+      routes.count -= 1;
+      if (routes.count <= 0) {
+        routes.count = 0;
+        try { routes.unregister?.(); } catch { /* already gone */ }
+        routes.unregister = undefined;
+      }
+    }, "dsh-plugin-hub: health routes");
+  });
+}
+
+/** 已知退役/占位子包：老 profile 残留行挂成静默 no-op（web-all RETIRED_PLUGINS 同款）。 */
+const RETIRED_PLUGINS = new Set();
+
+/**
+ * 挂载一行：config.plugin 指向的真实插件被包进本壳。
+ * 失败语义：import 失败 / 模块无插件形状 / start 抛错或 reject →
+ * recordDegraded 后 return，本行降级、其余行照常。
+ */
+async function applyShell(ctx, config) {
+  holdHealthRoute(ctx);
+  const spec = config?.plugin;
+  if (typeof spec !== "string" || spec === "") {
+    if (config === undefined || (typeof config === "object" && config !== null && Object.keys(config).length === 0)) return;
+    recordDegraded("(no plugin)", "shape", new Error(`shell row config is missing the "plugin" package name (config: ${safeStringify(config)})`));
+    return;
+  }
+  if (RETIRED_PLUGINS.has(spec)) return;
+  // 先记账再 import：disabled 行没有 shell apply，故不会进账本；import/start
+  // 降级的行仍在账本里，browser 半保留其 UI（降级状态可见，web-all 同语义）。
+  recordActiveRow(spec);
+  try {
+    ctx.effect?.(() => () => {
+      removeActiveRow(spec);
+    }, "dsh-plugin-hub: active row ledger");
+  } catch (error) {
+    console.warn("[dsh-plugin-hub] failed to register active-row cleanup:", error);
+  }
+  let mod;
+  try {
+    mod = await import(/* @vite-ignore */ spec);
+  } catch (error) {
+    recordDegraded(spec, "import", error);
+    return;
+  }
+  const plugin = mod?.default ?? mod;
+  const usable =
+    typeof plugin === "function" ||
+    (typeof plugin === "object" && plugin !== null && typeof plugin.apply === "function");
+  if (!usable) {
+    recordDegraded(spec, "shape", new Error("module has no usable plugin shape (expected a function or { apply })"));
+    return;
+  }
+  try {
+    const fiber = ctx.plugin(plugin, config?.config);
+    Promise.resolve(fiber).then(undefined, (error) => { try { recordDegraded(spec, "start", error); } catch { /* 观测不反噬 */ } });
+  } catch (error) {
+    recordDegraded(spec, "start", error);
+  }
+}
+
+/** 壳必须先于一切激活：不依赖任何服务。 */
+export const inject = [];
+
+/** Host 侧插件体。 */
+export function apply(ctx, config) {
+  return applyShell(ctx, config);
+}
+
+export default { name: "dsh-plugin-hub-shell", inject, apply };