@deepseek-ai/dsh-client-web 0.1.5-rc.2 → 0.1.6-alpha.2

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/web/README.md
-README.md: e99c83af3a0226ff4091509c300bd8e7d085a25a
-README.zh.md: 9a15ca0df65ac7fffe78f5fed49dd08281260b2b
+README.md: 2cedd1748973e13ad1b9a3b0ef89c0101d4ffb09
+README.zh.md: 882c338339b725f82aae4d931ab85a6d14650b42

package/README.md

@@ -27,6 +27,8 @@ English | [中文](README.zh.md)
 
 Use it when you assemble the browser application: `apps/web`'s Vite entry runs `new AppWebEntry(container).run()` against the mount point, and the boot page carries the user through activation. Ordinary browser callers pass no options. A pre-injected page transport is the default ahead of the `seams` override: when `globalThis.__DSH_TRANSPORT__` carries `loadBundle`, the module stage adopts it as the bundle transport and skips the immediate-tier HTTP prefetch, while explicit `seams` still win (for example jsdom tests, where external `<script>` execution cannot reach the page context).
 
+Static application pages install `__DSH_BOOT_READY__` before the entry runs. The boot page renders immediately while `run()` waits; the page owner applies the Host rows with `applyIndexInjections` (also exported from `./injections`) and resolves the deferred after all scripts finish. A rejected deferred renders a boot failure unless the caller supplies `run(onFailure)` to present the error externally while retaining the loading page. Desktop uses this callback to request native recovery. Desktop and WebWorker share the injection interpreter; server-side `tapIndex` HTML transforms apply only to served documents.
+
 The shell base styles apply automatic CJK/Latin spacing to ordinary content in supporting browsers. Semantic code and terminal, diff, read, and search output containers retain literal source spacing and column alignment; browsers without `text-autospace` support ignore both declarations.
 
 ### What boot looks like
@@ -35,7 +37,7 @@ Boot runs in two stages: the module stage adopts the parser-loaded bootstrap bat
 
 ### The boot page
 
-The boot page uses plain DOM and local CSS, so bundle and plugin-activation failures remain visible: it shows one spinner node whose CSS arc grows as entries activate, and reports per-entry status. The spinner and its animation phase persist until the full UI replaces the boot page. A plugin that fails import or activation is reported by name with the reason (missing service, import error, or state) instead of a blank page.
+The boot page uses plain DOM and local CSS, so bundle and plugin-activation failures remain visible: it shows one spinner node whose CSS arc grows as entries activate, and reports per-entry status. The spinner and its animation phase persist until the full UI replaces the boot page. A plugin that fails import or activation is reported by name with the reason (missing service, import failure, or state) instead of a blank page. The console contains the original import error.
 
 ### The shared module table
 
@@ -67,12 +69,16 @@ The kernel owns exactly three things: the module system, the Cordis Loader, and
 
 The boot page is plain DOM with local CSS whose fallback fonts and colors match the theme tokens that arrive during loading. `internal/status` events drive one spinner node and per-entry labels; hydration preserves the node and animation phase through the application commit, and `fail()` renders the thrown reason. React mounting, slot rendering, and assembly live in `ui-renderer`; `ui-layout` owns the assembled browser-title projection.
 
+The boot kernel delegates manifest entry creation to Client Modules so live graph synchronization owns the same entry identities after startup. The initial activation audit remains strict; later page-local failures appear in Settings → Plugins → Plugin list.
+
 ### Source map
 
 | File | Role |
 |---|---|
 | [`src/index.ts`](src/index.ts) | Library entry: `AppWebEntry`, `getStaticModules`, platform tables |
-| [`src/boot.ts`](src/boot.ts) | `AppWebEntry`: two-stage boot, activation audit, renderer handoff |
+| [`src/boot.ts`](src/boot.ts) | `AppWebEntry`: module stage, boot page, immediate-tier prefetch, then `bootClient` + `mountClient` |
+| [`src/boot-client.ts`](src/boot-client.ts) | `bootClient` / `assertEntriesActive`: Loader mount, one entry per manifest row, activation audit |
+| [`src/mount.ts`](src/mount.ts) | `mountClient`: renderer handoff through a `uiRenderer` dependency fiber |
 | [`src/boot-page.ts`](src/boot-page.ts) | Framework-free boot page: spinner, per-entry status, failure rendering |
 | [`src/platform.ts`](src/platform.ts) | `PLATFORM_MODULES` / `PRELOADED_CLIENT_EXTERNALS`: the implicit external baseline |
 | [`src/seed.ts`](src/seed.ts) | Static module table handed to the loader at boot |
@@ -122,4 +128,4 @@ None.
 
 </details>
 
-**Runtime invariant:** No companion is published. The vite entry shell — boot glue and module-table seeding with no cordis events and no cross-plugin mutable state; the boot chain (loading page → settled → one-flip UI) is asserted by the web smoke e2e against the real carrier.
+**Runtime invariant:** No companion is published. The Vite entry shell provides boot glue and module-table seeding, emits no Cordis events, and holds no cross-plugin mutable state; the boot chain (loading page → settled → one-flip UI) is verified by the web smoke e2e against the real carrier.

package/README.zh.md

@@ -25,7 +25,9 @@ kind: "package-library"
 <a id="use-this-package"></a>
 ## 使用本包
 
-组装浏览器应用时使用它：`apps/web` 的 Vite 入口对挂载点运行 `new AppWebEntry(container).run()`，启动页承载用户度过激活过程。普通浏览器调用方不传任何选项。预注入的页面传输是 `seams` 覆盖之前的默认：当 `globalThis.__DSH_TRANSPORT__` 携带 `loadBundle` 时，模块阶段将其采纳为 bundle 传输并跳过 `immediately` 层级的 HTTP 预取，而显式 `seams` 仍然优先（例如外部 `<script>` 执行无法到达页面上下文的 jsdom 测试）。
+组装浏览器应用时使用它：`apps/web` 的 Vite 入口对挂载点运行 `new AppWebEntry(container).run()`，启动页会在激活过程中向用户展示进度。普通浏览器调用方不传任何选项。默认使用预注入的页面传输，除非提供 `seams` 覆盖：当 `globalThis.__DSH_TRANSPORT__` 携带 `loadBundle` 时，模块阶段将其采纳为 bundle 传输并跳过 `immediately` 层级的 HTTP 预取，而显式 `seams` 仍然优先（例如外部 `<script>` 执行无法到达页面上下文的 jsdom 测试）。
+
+静态应用页面在入口运行前安装 `__DSH_BOOT_READY__`。`run()` 等待期间会立即显示启动页；页面所有者通过 `applyIndexInjections`（也从 `./injections` 导出）应用 Host 注入项，并在所有脚本完成后兑现延迟对象。延迟对象拒绝时显示启动失败；若调用方提供 `run(onFailure)`，则由外部呈现错误并保留加载页。Desktop 使用该回调请求原生恢复。Desktop 与 WebWorker 共享注入解释器；服务端 `tapIndex` HTML 转换仅适用于服务端提供的文档。
 
 外壳基础样式会在支持的浏览器中为普通内容自动添加中西文间距。语义化代码以及终端、diff、读取和搜索输出容器会保留源码中的原始间距和列对齐；不支持 `text-autospace` 的浏览器会忽略这两项声明。
 
@@ -35,11 +37,11 @@ kind: "package-library"
 
 ### 启动页
 
-启动页只使用原生 DOM 与本地 CSS，因此 bundle 与插件激活失败保持可见：它显示一个 spinner 节点，其 CSS 圆弧随 entry 激活而增长，并逐 entry 报告状态。spinner 及其动画相位会一直保留，直到完整 UI 替换启动页。导入或激活失败的插件会按名称报告并给出原因（缺失服务、导入错误或状态），而不是白屏。
+启动页只使用原生 DOM 与本地 CSS，因此 bundle 与插件激活失败保持可见：它显示一个 spinner 节点，其 CSS 圆弧随 entry 激活而增长，并逐 entry 报告状态。spinner 及其动画相位会一直保留，直到完整 UI 替换启动页。导入或激活失败的插件会按名称报告并给出原因（缺失服务、导入失败或状态），而不是白屏。控制台包含原始导入错误。
 
 ### 共享模块表
 
-`PLATFORM_MODULES`（位于 `src/platform.ts`）列出外壳播种的共享模块——React、Cordis 与静态 UI 库——并与 `PRELOADED_CLIENT_EXTERNALS`（parser 预载的 runtime 行）一起定义每个动态 bundle 解析所依据的隐式 external 基座。`dsh.client.external` 只添加基座之外的精确请求；参见[共享模块与模块图](../AGENTS.md#shared-modules-and-the-module-graph)。
+`PLATFORM_MODULES`（位于 `src/platform.ts`）列出外壳预置的共享模块——React、Cordis 与静态 UI 库——并与 `PRELOADED_CLIENT_EXTERNALS`（parser 预载的运行时行）一起定义每个动态 bundle 解析所依据的隐式 external 基座。`dsh.client.external` 只添加基座之外的精确请求；参见[共享模块与模块图](../AGENTS.md#shared-modules-and-the-module-graph)。
 
 ### 配置
 
@@ -57,22 +59,26 @@ kind: "package-library"
 
 ### 设计理念
 
-内核恰好拥有三样东西：模块系统、Cordis Loader 与启动页。Graph、批次 preload 与 loader facade 归 Host 所有，因此 `AppWebEntry` 永不感知 bootstrap package id，也不解析协议格式。动态 UI 渲染器只在每个客户端 entry 激活后收到挂载点。
+内核恰好拥有三样东西：模块系统、Cordis Loader 与启动页。Graph、批次 preload 与 loader facade 归 Host 所有，因此 `AppWebEntry` 永不感知 bootstrap 包 id，也不解析协议格式（wire format）。动态 UI 渲染器只在每个客户端 entry 激活后收到挂载点。
 
 ### 两阶段启动
 
-`run()` 调用 Host 安装的 `window.__ModuleLoader__.create({ boot, staticModules, ...seams })`；facade 接纳 parser 已加载的 bootstrap 批次后返回构造好的模块系统与已解析 manifest。模块阶段通过一个共享的 application 批次 URL 预取 `immediately` 层级。插件阶段挂载 Loader、把 `loader.internal` 赋为 `modules`、统一创建全部图 entry、等待完全停稳，然后审计激活：任何导入失败、因缺失服务而 pending，或落入其他非 active 状态的 entry，都会抛出一个聚合错误，点名每个失败 entry。
+`run()` 调用 Host 安装的 `window.__ModuleLoader__.create({ boot, staticModules, ...seams })`；facade 接纳 parser 已加载的 bootstrap 批次后返回构造好的模块系统与已解析 manifest（元数据清单）。模块阶段通过一个共享的 application 批次 URL 预取 `immediately` 层级。插件阶段挂载 Loader、把 `loader.internal` 赋为 `modules`、统一创建全部图 entry、等待完全停稳，然后审计激活：任何导入失败、因缺失服务而 pending，或落入其他非 active 状态的 entry，都会抛出一个聚合错误，点名每个失败 entry。
 
 ### 启动页机制
 
 启动页是原生 DOM 加本地 CSS，其回退字体与颜色匹配加载期间到达的主题 token。`internal/status` 事件驱动一个 spinner 节点与逐 entry 标签；hydrate 会保留该节点与动画相位直到应用提交，`fail()` 渲染抛出的原因。React 挂载、slot 渲染与应用组装位于 `ui-renderer`；`ui-layout` 拥有组装后的浏览器标题投影。
 
+启动内核把清单条目创建交给 Client Modules，使启动后的动态图同步继续持有相同的条目身份。初始激活审计仍然严格；后续页面本地失败显示在「设置 → 插件 → 插件列表」。
+
 ### 源码地图
 
 | 文件 | 职责 |
 |---|---|
 | [`src/index.ts`](src/index.ts) | 库入口：`AppWebEntry`、`getStaticModules`、平台表 |
-| [`src/boot.ts`](src/boot.ts) | `AppWebEntry`：两阶段启动、激活审计、渲染器交接 |
+| [`src/boot.ts`](src/boot.ts) | `AppWebEntry`：模块阶段、启动页、immediately 层级预取，随后调用 `bootClient` + `mountClient` |
+| [`src/boot-client.ts`](src/boot-client.ts) | `bootClient` / `assertEntriesActive`：挂载 Loader、每个 manifest 行一个 entry、激活审计 |
+| [`src/mount.ts`](src/mount.ts) | `mountClient`：经 `uiRenderer` 依赖 fiber 完成渲染器交接 |
 | [`src/boot-page.ts`](src/boot-page.ts) | 无框架启动页：spinner、逐 entry 状态、失败渲染 |
 | [`src/platform.ts`](src/platform.ts) | `PLATFORM_MODULES` / `PRELOADED_CLIENT_EXTERNALS`：隐式 external 基座 |
 | [`src/seed.ts`](src/seed.ts) | 启动时交给 loader 的静态模块表 |
@@ -110,7 +116,7 @@ kind: "package-library"
 
 这些限制说明启动内核不支持什么。它们是当前包约束，不是任务积压。
 
-- **应用会等待完整名册**——只要一个 entry 失败，无框架启动页就会保留并逐项报告；不支持部分 UI 可用。
+- **应用会等待全部 entry 就绪**——只要一个 entry 失败，无框架启动页就会保留并逐项报告；不支持部分 UI 可用。
 
 <a id="dev-note"></a>
 ### 开发备注
@@ -122,4 +128,4 @@ kind: "package-library"
 
 </details>
 
-**运行时不变式：** 不发布伴生入口。这是 Vite entry shell，只负责 boot glue 与 module-table seeding，不发出 Cordis 事件或持有跨插件可变状态；boot chain 由真实 carrier 的 web smoke e2e 覆盖。
+**运行时不变式：** 不发布伴生入口。这是 Vite entry shell，只负责 boot glue 与 module-table seeding，不发出 Cordis 事件或持有跨插件可变状态；boot chain（加载页 → 启动就绪 → 一次切换至 UI）由真实 carrier 上的 web e2e 冒烟测试验证。

package/lib/apply-injections.js

@@ -0,0 +1,40 @@
+//#region lib/types/apply-injections.js
+function assertNever(row) {
+	throw new Error(`web boot: unknown index injection row ${JSON.stringify(row)}`);
+}
+/**
+* Execute every row in table order.
+* @param rows - Injection table from the boot payload.
+* @param loadScript - Executes one script-src row through the page owner's asset transport.
+*/
+async function applyIndexInjections(rows, loadScript) {
+	for (const row of rows) switch (row.kind) {
+		case "global":
+			globalThis[row.name] = row.value;
+			break;
+		case "script": {
+			const el = document.createElement("script");
+			el.textContent = row.text;
+			(row.placement === "head" ? document.head : document.body).append(el);
+			break;
+		}
+		case "script-src":
+			await loadScript(row.src);
+			break;
+		case "script-preload": break;
+		case "style": {
+			const el = document.createElement("style");
+			el.textContent = row.text;
+			document.head.append(el);
+			break;
+		}
+		case "html":
+			(row.placement === "head" ? document.head : document.body).insertAdjacentHTML("beforeend", row.html);
+			break;
+		default: assertNever(row);
+	}
+}
+//#endregion
+export { applyIndexInjections };
+
+//# sourceMappingURL=apply-injections.js.map

package/lib/base.css

@@ -32,6 +32,13 @@ body {
   text-autospace: normal;
 }
 
+/* macOS desktop (the Electron preload sets data-platform): the window's
+   sidebar vibrancy shows only through a transparent page background. */
+html[data-platform='darwin'],
+html[data-platform='darwin'] body {
+  background: transparent;
+}
+
 code,
 pre,
 [data-diff],

package/lib/boot-page.module.css

@@ -1,7 +1,6 @@
 /* The framework-free boot page cannot depend on theme delivery succeeding. */
 
 .boot {
-  --dsh-boot-bg: #fff;
   --dsh-boot-label-primary: #0f1115;
   --dsh-boot-label-secondary: #61666b;
   --dsh-boot-label-tertiary: #81858c;
@@ -11,11 +10,10 @@
   height: 100%;
   display: grid;
   place-items: center;
-  background: var(--dsw-alias-bg-base, var(--dsh-boot-bg));
+  background: var(--dsw-alias-bg-base, var(--dsh-boot-bg, Canvas));
 }
 
 :global(body[data-ds-dark-theme]) .boot {
-  --dsh-boot-bg: #151517;
   --dsh-boot-label-primary: #f9fafb;
   --dsh-boot-label-secondary: #cfd3d6;
   --dsh-boot-label-tertiary: #adb2b8;

package/lib/index.js

@@ -11,6 +11,80 @@ import * as UiSlots from "@deepseek-ai/dsh-client-ui-slots";
 import * as UiPrimitives from "@deepseek-ai/dsh-client-ui-primitives";
 import * as UiDockkit from "@deepseek-ai/dsh-client-ui-dockkit";
 import "./base.css";
+//#region lib/types/loader-status.js
+/**
+* Value mirror of cordis's `FiberState` const enum: a const enum has no
+* runtime object to import (and esbuild-based pipelines cannot inline it
+* across modules), so these values mirror the pinned vendored definition
+* while retaining its type (same rationale as dsh-tool-cordis's mirror).
+*/
+const FIBER_STATE = {
+	PENDING: 0,
+	LOADING: 1,
+	ACTIVE: 2,
+	FAILED: 3,
+	DISPOSED: 4,
+	UNLOADING: 5
+};
+/** Label for each fiber state, keyed by member (inlining-safe — no reverse mapping). */
+const STATE_LABELS = {
+	[FIBER_STATE.PENDING]: "pending",
+	[FIBER_STATE.LOADING]: "loading",
+	[FIBER_STATE.ACTIVE]: "active",
+	[FIBER_STATE.FAILED]: "failed",
+	[FIBER_STATE.DISPOSED]: "disposed",
+	[FIBER_STATE.UNLOADING]: "unloading"
+};
+//#endregion
+//#region lib/types/boot-client.js
+/**
+* Compose the client: `ctx.plugin(Loader)`, `loader.internal = modules`, one
+* `loader.create({ name })` per manifest row, `loader.await()`, then
+* {@link assertEntriesActive}. A row whose module cannot be imported is marked
+* failed; the Loader logs its import error and the audit rejects startup.
+* @param options - context, module system, manifest, optional progress sink.
+* @returns resolves after every entry is active; rejects with the audit report otherwise.
+*/
+async function bootClient(options) {
+	const { ctx, manifest, onEntryState } = options;
+	await ctx.plugin(Loader);
+	const loader = ctx.loader;
+	loader.internal = options.modules;
+	ctx.on("internal/status", (fiber) => {
+		const entry = fiber.entry;
+		if (entry === void 0 || entry.fiber === void 0) return;
+		onEntryState?.(entry.options.name, STATE_LABELS[entry.fiber.state]);
+	});
+	const rows = manifest.plugins.map((row) => row.id);
+	for (const name of rows) onEntryState?.(name, "loading");
+	await options.modules.entries.start(loader, manifest);
+	for (const entry of loader.entries()) if (entry.fiber === void 0) onEntryState?.(entry.options.name, "failed");
+	await loader.await();
+	assertEntriesActive(ctx);
+}
+/**
+* Reject entries that failed import/apply or still wait on missing services.
+* @param ctx - root Context carrying the Loader.
+* @throws {Error} listing every non-active entry with its reason.
+*/
+function assertEntriesActive(ctx) {
+	const failures = [];
+	for (const entry of ctx.loader.entries()) {
+		const name = entry.options.name;
+		if (entry.fiber === void 0) {
+			failures.push(`${name}: import failed (see console for the import error)`);
+			continue;
+		}
+		const state = STATE_LABELS[entry.fiber.state];
+		if (state === "active") continue;
+		if (state === "pending") {
+			const missing = Object.keys(entry.fiber.inject).filter((service) => ctx.get(service) === void 0);
+			failures.push(`${name}: pending (waiting for service${missing.length === 1 ? "" : "s"}: ${missing.join(", ") || "unknown"})`);
+		} else failures.push(`${name}: ${state}`);
+	}
+	if (failures.length > 0) throw new Error(`web boot: ${String(failures.length)} entr${failures.length === 1 ? "y" : "ies"} did not activate\n${failures.join("\n")}`);
+}
+//#endregion
 //#region lib/types/boot-page.js
 /** Create a div with one module class and optional text. */
 function div(className, text) {
@@ -98,6 +172,23 @@ var BootPage = class {
 	}
 };
 //#endregion
+//#region lib/types/mount.js
+/**
+* Mount the UI renderer into `container` through a dependency fiber on
+* `uiRenderer`: the mount effect installs when the service is provided and
+* reinstalls when it is replaced.
+* @param ctx - booted root Context.
+* @param container - application mount point.
+* @returns resolves once the dependency fiber exists; with `uiRenderer`
+* already provided (as after `bootClient`) the mount effect is installed by
+* then, otherwise it installs when the service arrives.
+*/
+async function mountClient(ctx, container) {
+	await ctx.inject(["uiRenderer"], (scope) => {
+		scope.effect(() => scope.uiRenderer.mount(container), "web boot: application mount");
+	});
+}
+//#endregion
 //#region lib/types/seed.js
 /**
 * Platform-singleton module-table. These are the ONLY entities the shell
@@ -125,35 +216,11 @@ function getStaticModules() {
 	};
 }
 //#endregion
-//#region lib/types/loader-status.js
-/**
-* Value mirror of cordis's `FiberState` const enum: a const enum has no
-* runtime object to import (and esbuild-based pipelines cannot inline it
-* across modules), so these values mirror the pinned vendored definition
-* while retaining its type (same rationale as dsh-tool-cordis's mirror).
-*/
-const FIBER_STATE = {
-	PENDING: 0,
-	LOADING: 1,
-	ACTIVE: 2,
-	FAILED: 3,
-	DISPOSED: 4,
-	UNLOADING: 5
-};
-/** Label for each fiber state, keyed by member (inlining-safe — no reverse mapping). */
-const STATE_LABELS = {
-	[FIBER_STATE.PENDING]: "pending",
-	[FIBER_STATE.LOADING]: "loading",
-	[FIBER_STATE.ACTIVE]: "active",
-	[FIBER_STATE.FAILED]: "failed",
-	[FIBER_STATE.DISPOSED]: "disposed",
-	[FIBER_STATE.UNLOADING]: "unloading"
-};
-//#endregion
 //#region lib/types/boot.js
 /**
 * Web boot kernel. It owns only the module system, Cordis loader, and a
-* framework-free boot page. The dynamic UI renderer receives the mount
+* framework-free boot page; plugin composition and the renderer handoff are
+* `bootClient` and `mountClient`. The dynamic UI renderer receives the mount
 * point after every client entry activates.
 * @module @deepseek-ai/dsh-client-web/src/boot
 */
@@ -178,9 +245,10 @@ var AppWebEntry = class {
 	/**
 	* Load and activate every client entry, then hand the mount point to the
 	* UI renderer. Plugin failures remain visible on the boot page.
-	* @returns Resolves after application mount or failure rendering.
+	* @param onFailure - Optional carrier-owned fatal presentation; keeps the boot page visible.
+	* @returns Resolves after application mount or failure reporting.
 	*/
-	async run() {
+	async run(onFailure) {
 		try {
 			await globalThis.__DSH_BOOT_READY__?.promise;
 			const win = globalThis;
@@ -197,11 +265,21 @@ var AppWebEntry = class {
 			const prefetching = this.prefetchImmediateTier();
 			const ctx = new Context();
 			this.ctx = ctx;
-			await this.runPluginBoot(ctx, prefetching);
-			await this.mountApp(ctx);
+			this.page.setTotal(this.manifest.plugins.length);
+			await prefetching;
+			await bootClient({
+				ctx,
+				modules: this.modules,
+				manifest: this.manifest,
+				onEntryState: (name, state) => {
+					if (onFailure === void 0 || state !== "failed") this.page.setState(name, state);
+				}
+			});
+			await mountClient(ctx, this.container);
 		} catch (reason) {
 			console.error(reason);
-			this.page.fail(reason instanceof Error ? reason.message : String(reason));
+			if (onFailure !== void 0) onFailure(reason);
+			else this.page.fail(reason instanceof Error ? reason.message : String(reason));
 		}
 	}
 	/** Dispose the client plugin tree and whichever page owns the mount point. */
@@ -211,55 +289,10 @@ var AppWebEntry = class {
 		if (ctx !== void 0) await ctx.fiber.dispose();
 		this.page.dispose();
 	}
-	/** Mount through a dependency fiber so replacing uiRenderer remounts the application. */
-	async mountApp(ctx) {
-		await ctx.inject(["uiRenderer"], (scope) => {
-			scope.effect(() => scope.uiRenderer.mount(this.container), "web boot: application mount");
-		});
-	}
 	/** Prefetch stage-one bundles and their dynamic requests before concurrent plugin imports. */
 	async prefetchImmediateTier() {
 		await Promise.all(this.manifest.plugins.filter((row) => row.immediately).map((row) => this.modules.prefetch(row.id).catch((_prefetchError) => {})));
 	}
-	/** Mount the Loader, create all graph entries, await quiescence, and audit activation. */
-	async runPluginBoot(ctx, prefetching) {
-		await ctx.plugin(Loader);
-		const loader = ctx.loader;
-		loader.internal = this.modules;
-		ctx.on("internal/status", (fiber) => {
-			const entry = fiber.entry;
-			if (entry === void 0 || entry.fiber === void 0) return;
-			this.page.setState(entry.options.name, STATE_LABELS[entry.fiber.state]);
-		});
-		const rows = this.manifest.plugins.map((row) => row.id);
-		this.page.setTotal(rows.length);
-		await prefetching;
-		await Promise.all(rows.map(async (name) => {
-			this.page.setState(name, "loading");
-			const id = await loader.create({ name });
-			if (loader.resolve(id).fiber === void 0) this.page.setState(name, "failed");
-		}));
-		await loader.await();
-		this.assertEntriesActive(ctx);
-	}
-	/** Reject entries that failed import/apply or still wait on missing services. */
-	assertEntriesActive(ctx) {
-		const failures = [];
-		for (const entry of ctx.loader.entries()) {
-			const name = entry.options.name;
-			if (entry.fiber === void 0) {
-				failures.push(`${name}: import failed (see console for the import error)`);
-				continue;
-			}
-			const state = STATE_LABELS[entry.fiber.state];
-			if (state === "active") continue;
-			if (state === "pending") {
-				const missing = Object.keys(entry.fiber.inject).filter((service) => ctx.get(service) === void 0);
-				failures.push(`${name}: pending (waiting for service${missing.length === 1 ? "" : "s"}: ${missing.join(", ") || "unknown"})`);
-			} else failures.push(`${name}: ${state}`);
-		}
-		if (failures.length > 0) throw new Error(`web boot: ${String(failures.length)} entr${failures.length === 1 ? "y" : "ies"} did not activate\n${failures.join("\n")}`);
-	}
 };
 //#endregion
 //#region lib/types/platform.js
@@ -283,6 +316,43 @@ const PLATFORM_MODULES = [
 /** Client-bundle specifiers whose factories the parser preloads before the shell starts. */
 const PRELOADED_CLIENT_EXTERNALS = [];
 //#endregion
-export { AppWebEntry, PLATFORM_MODULES, PRELOADED_CLIENT_EXTERNALS, getStaticModules };
+//#region lib/types/apply-injections.js
+function assertNever(row) {
+	throw new Error(`web boot: unknown index injection row ${JSON.stringify(row)}`);
+}
+/**
+* Execute every row in table order.
+* @param rows - Injection table from the boot payload.
+* @param loadScript - Executes one script-src row through the page owner's asset transport.
+*/
+async function applyIndexInjections(rows, loadScript) {
+	for (const row of rows) switch (row.kind) {
+		case "global":
+			globalThis[row.name] = row.value;
+			break;
+		case "script": {
+			const el = document.createElement("script");
+			el.textContent = row.text;
+			(row.placement === "head" ? document.head : document.body).append(el);
+			break;
+		}
+		case "script-src":
+			await loadScript(row.src);
+			break;
+		case "script-preload": break;
+		case "style": {
+			const el = document.createElement("style");
+			el.textContent = row.text;
+			document.head.append(el);
+			break;
+		}
+		case "html":
+			(row.placement === "head" ? document.head : document.body).insertAdjacentHTML("beforeend", row.html);
+			break;
+		default: assertNever(row);
+	}
+}
+//#endregion
+export { AppWebEntry, PLATFORM_MODULES, PRELOADED_CLIENT_EXTERNALS, applyIndexInjections, getStaticModules };
 
 //# sourceMappingURL=index.js.map

package/lib/types/apply-injections.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Page-side interpreter for the structured index injection table. The served
+ * form renders the same rows into index.html text; a static worker page has
+ * no served HTML, so it executes the table directly. Rows execute strictly in
+ * table order, so a global row lands before the scripts that read it.
+ */
+import type { IndexInjection } from '@deepseek-ai/dsh-host-webserver';
+/**
+ * Execute every row in table order.
+ * @param rows - Injection table from the boot payload.
+ * @param loadScript - Executes one script-src row through the page owner's asset transport.
+ */
+export declare function applyIndexInjections(rows: readonly IndexInjection[], loadScript: (src: string) => Promise<void>): Promise<void>;
+//# sourceMappingURL=apply-injections.d.ts.map

package/lib/types/boot-client.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Production client composition without the page: mount the Loader over a
+ * module system, create every manifest row, wait for quiescence, and audit
+ * activation. `AppWebEntry` and the whole-client test carrier both call it.
+ * @module @deepseek-ai/dsh-client-web/src/boot-client
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { BootManifest, ClientModuleLoader } from '@deepseek-ai/dsh-client-modules/client';
+import { STATE_LABELS } from './loader-status.ts';
+/** Entry state label as the boot page renders it. */
+export type EntryStateLabel = (typeof STATE_LABELS)[keyof typeof STATE_LABELS] | 'loading' | 'failed';
+/** Inputs of {@link bootClient}. */
+export interface ClientBootOptions {
+    /** Fresh root Context that will own the plugin tree. */
+    readonly ctx: Context;
+    /** Module system installed as `loader.internal`. */
+    readonly modules: ClientModuleLoader;
+    /** Parsed manifest whose `plugins` rows become Loader entries (entry name = row id). */
+    readonly manifest: BootManifest;
+    /** Per-entry state reporting (the boot page); omitted when no one renders progress. */
+    readonly onEntryState?: (name: string, state: EntryStateLabel) => void;
+}
+/**
+ * Compose the client: `ctx.plugin(Loader)`, `loader.internal = modules`, one
+ * `loader.create({ name })` per manifest row, `loader.await()`, then
+ * {@link assertEntriesActive}. A row whose module cannot be imported is marked
+ * failed; the Loader logs its import error and the audit rejects startup.
+ * @param options - context, module system, manifest, optional progress sink.
+ * @returns resolves after every entry is active; rejects with the audit report otherwise.
+ */
+export declare function bootClient(options: ClientBootOptions): Promise<void>;
+/**
+ * Reject entries that failed import/apply or still wait on missing services.
+ * @param ctx - root Context carrying the Loader.
+ * @throws {Error} listing every non-active entry with its reason.
+ */
+export declare function assertEntriesActive(ctx: Context): void;
+//# sourceMappingURL=boot-client.d.ts.map

package/lib/types/boot.d.ts

@@ -19,18 +19,13 @@ export declare class AppWebEntry {
     /**
      * Load and activate every client entry, then hand the mount point to the
      * UI renderer. Plugin failures remain visible on the boot page.
-     * @returns Resolves after application mount or failure rendering.
+     * @param onFailure - Optional carrier-owned fatal presentation; keeps the boot page visible.
+     * @returns Resolves after application mount or failure reporting.
      */
-    run(): Promise<void>;
+    run(onFailure?: (reason: unknown) => void): Promise<void>;
     /** Dispose the client plugin tree and whichever page owns the mount point. */
     dispose(): Promise<void>;
-    /** Mount through a dependency fiber so replacing uiRenderer remounts the application. */
-    private mountApp;
     /** Prefetch stage-one bundles and their dynamic requests before concurrent plugin imports. */
     private prefetchImmediateTier;
-    /** Mount the Loader, create all graph entries, await quiescence, and audit activation. */
-    private runPluginBoot;
-    /** Reject entries that failed import/apply or still wait on missing services. */
-    private assertEntriesActive;
 }
 //# sourceMappingURL=boot.d.ts.map

package/lib/types/index.d.ts

@@ -8,4 +8,5 @@
 export { AppWebEntry, type BootSeams } from './boot.ts';
 export { getStaticModules } from './seed.ts';
 export { PLATFORM_MODULES, PRELOADED_CLIENT_EXTERNALS, type PlatformModule } from './platform.ts';
+export { applyIndexInjections } from './apply-injections.ts';
 //# sourceMappingURL=index.d.ts.map

package/lib/types/mount.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Application mount through a dependency fiber, so replacing `uiRenderer`
+ * remounts the application. Shared by `AppWebEntry` and the test carrier.
+ * @module @deepseek-ai/dsh-client-web/src/mount
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/**
+ * Mount the UI renderer into `container` through a dependency fiber on
+ * `uiRenderer`: the mount effect installs when the service is provided and
+ * reinstalls when it is replaced.
+ * @param ctx - booted root Context.
+ * @param container - application mount point.
+ * @returns resolves once the dependency fiber exists; with `uiRenderer`
+ * already provided (as after `bootClient`) the mount effect is installed by
+ * then, otherwise it installs when the service arrives.
+ */
+export declare function mountClient(ctx: Context, container: HTMLElement): Promise<void>;
+//# sourceMappingURL=mount.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-web",
   "description": "Web boot kernel: static module table, Cordis loader, framework-free boot page, and UI-renderer handoff",
-  "version": "0.1.5-rc.2",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -19,7 +19,11 @@
       "default": "./lib/index.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./injections": {
+      "types": "./lib/types/apply-injections.d.ts",
+      "default": "./lib/apply-injections.js"
+    }
   },
   "license": "MIT",
   "devDependencies": {
@@ -29,13 +33,14 @@
     "react-dom": "^18.2.0",
     "typescript": "^6.0.3",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-client-store": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-dockkit": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-modules": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.2",
-    "@deepseek-ai/cordis": "^4.0.2"
+    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-store": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-dockkit": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.6-alpha.2",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.6-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2"
@@ -43,6 +48,7 @@
   "files": [
     "lib/index.js",
     "lib/**/*.css",
+    "lib/apply-injections.js",
     "lib/types/**/*.d.ts"
   ]
 }