@deepseek-ai/dsh-client-web 0.1.6-alpha.1 → 0.1.7-alpha.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/web/README.md
-README.md: 7bdcec9e2a964b746cbd808497f9222e2b4150fa
-README.zh.md: a7243e52a7bababebb75a0ee9f4e22a99fa83337
+README.md: 2cedd1748973e13ad1b9a3b0ef89c0101d4ffb09
+README.zh.md: 882c338339b725f82aae4d931ab85a6d14650b42

package/README.md

@@ -27,6 +27,8 @@ English | [中文](README.zh.md)
 
 Use it when you assemble the browser application: `apps/web`'s Vite entry runs `new AppWebEntry(container).run()` against the mount point, and the boot page carries the user through activation. Ordinary browser callers pass no options. A pre-injected page transport is the default ahead of the `seams` override: when `globalThis.__DSH_TRANSPORT__` carries `loadBundle`, the module stage adopts it as the bundle transport and skips the immediate-tier HTTP prefetch, while explicit `seams` still win (for example jsdom tests, where external `<script>` execution cannot reach the page context).
 
+Static application pages install `__DSH_BOOT_READY__` before the entry runs. The boot page renders immediately while `run()` waits; the page owner applies the Host rows with `applyIndexInjections` (also exported from `./injections`) and resolves the deferred after all scripts finish. A rejected deferred renders a boot failure unless the caller supplies `run(onFailure)` to present the error externally while retaining the loading page. Desktop uses this callback to request native recovery. Desktop and WebWorker share the injection interpreter; server-side `tapIndex` HTML transforms apply only to served documents.
+
 The shell base styles apply automatic CJK/Latin spacing to ordinary content in supporting browsers. Semantic code and terminal, diff, read, and search output containers retain literal source spacing and column alignment; browsers without `text-autospace` support ignore both declarations.
 
 ### What boot looks like
@@ -67,6 +69,8 @@ The kernel owns exactly three things: the module system, the Cordis Loader, and
 
 The boot page is plain DOM with local CSS whose fallback fonts and colors match the theme tokens that arrive during loading. `internal/status` events drive one spinner node and per-entry labels; hydration preserves the node and animation phase through the application commit, and `fail()` renders the thrown reason. React mounting, slot rendering, and assembly live in `ui-renderer`; `ui-layout` owns the assembled browser-title projection.
 
+The boot kernel delegates manifest entry creation to Client Modules so live graph synchronization owns the same entry identities after startup. The initial activation audit remains strict; later page-local failures appear in Settings → Plugins → Plugin list.
+
 ### Source map
 
 | File | Role |

package/README.zh.md

@@ -27,6 +27,8 @@ kind: "package-library"
 
 组装浏览器应用时使用它：`apps/web` 的 Vite 入口对挂载点运行 `new AppWebEntry(container).run()`，启动页会在激活过程中向用户展示进度。普通浏览器调用方不传任何选项。默认使用预注入的页面传输，除非提供 `seams` 覆盖：当 `globalThis.__DSH_TRANSPORT__` 携带 `loadBundle` 时，模块阶段将其采纳为 bundle 传输并跳过 `immediately` 层级的 HTTP 预取，而显式 `seams` 仍然优先（例如外部 `<script>` 执行无法到达页面上下文的 jsdom 测试）。
 
+静态应用页面在入口运行前安装 `__DSH_BOOT_READY__`。`run()` 等待期间会立即显示启动页；页面所有者通过 `applyIndexInjections`（也从 `./injections` 导出）应用 Host 注入项，并在所有脚本完成后兑现延迟对象。延迟对象拒绝时显示启动失败；若调用方提供 `run(onFailure)`，则由外部呈现错误并保留加载页。Desktop 使用该回调请求原生恢复。Desktop 与 WebWorker 共享注入解释器；服务端 `tapIndex` HTML 转换仅适用于服务端提供的文档。
+
 外壳基础样式会在支持的浏览器中为普通内容自动添加中西文间距。语义化代码以及终端、diff、读取和搜索输出容器会保留源码中的原始间距和列对齐；不支持 `text-autospace` 的浏览器会忽略这两项声明。
 
 ### 启动过程是怎样的
@@ -67,6 +69,8 @@ kind: "package-library"
 
 启动页是原生 DOM 加本地 CSS，其回退字体与颜色匹配加载期间到达的主题 token。`internal/status` 事件驱动一个 spinner 节点与逐 entry 标签；hydrate 会保留该节点与动画相位直到应用提交，`fail()` 渲染抛出的原因。React 挂载、slot 渲染与应用组装位于 `ui-renderer`；`ui-layout` 拥有组装后的浏览器标题投影。
 
+启动内核把清单条目创建交给 Client Modules，使启动后的动态图同步继续持有相同的条目身份。初始激活审计仍然严格；后续页面本地失败显示在「设置 → 插件 → 插件列表」。
+
 ### 源码地图
 
 | 文件 | 职责 |

package/lib/apply-injections.js

@@ -0,0 +1,40 @@
+//#region lib/types/apply-injections.js
+function assertNever(row) {
+	throw new Error(`web boot: unknown index injection row ${JSON.stringify(row)}`);
+}
+/**
+* Execute every row in table order.
+* @param rows - Injection table from the boot payload.
+* @param loadScript - Executes one script-src row through the page owner's asset transport.
+*/
+async function applyIndexInjections(rows, loadScript) {
+	for (const row of rows) switch (row.kind) {
+		case "global":
+			globalThis[row.name] = row.value;
+			break;
+		case "script": {
+			const el = document.createElement("script");
+			el.textContent = row.text;
+			(row.placement === "head" ? document.head : document.body).append(el);
+			break;
+		}
+		case "script-src":
+			await loadScript(row.src);
+			break;
+		case "script-preload": break;
+		case "style": {
+			const el = document.createElement("style");
+			el.textContent = row.text;
+			document.head.append(el);
+			break;
+		}
+		case "html":
+			(row.placement === "head" ? document.head : document.body).insertAdjacentHTML("beforeend", row.html);
+			break;
+		default: assertNever(row);
+	}
+}
+//#endregion
+export { applyIndexInjections };
+
+//# sourceMappingURL=apply-injections.js.map

package/lib/base.css

@@ -32,6 +32,53 @@ body {
   text-autospace: normal;
 }
 
+/* macOS desktop (the Electron preload sets data-platform): the window's
+   sidebar vibrancy shows only through a transparent page background. */
+html[data-platform='darwin'],
+html[data-platform='darwin'] body {
+  background: transparent;
+}
+
+/* The transparent window disables backdrop-filter: Chromium composites it
+   against the root surface, which vibrancy leaves transparent, so the blur in
+   --dsw-menu-backdrop-filter renders as nothing and half-opaque menu fills
+   let underlying text bleed through. Compensate with near-opaque fills on the
+   same design-platform hues (light 248 249 250 / dark 48 49 54). */
+html[data-platform='darwin'] body {
+  --dsw-specific-menu: rgba(248, 249, 250, 0.94);
+}
+
+html[data-platform='darwin'] body[data-ds-dark-theme] {
+  --dsw-specific-menu: rgba(48, 49, 54, 0.94);
+}
+
+/* macOS desktop: the app frame publishes window drag bands, and Electron
+   composes app-regions from geometry, not hit testing — a surface covering a
+   band would otherwise drag the window instead of receiving clicks. Every
+   overlay portals to document.body beside #root, so one rule subtracts them
+   all; drag surfaces all live inside #root. */
+html[data-platform='darwin'] body > :not(#root) {
+  -webkit-app-region: no-drag;
+}
+
+/* Inside #root, interactive controls and raised surfaces (dialogs, menus)
+   subtract themselves from any drag band they overlap, wherever they render.
+   Electron composes app-regions from geometry in document order, so this works
+   only because the bands are declared before all content (AppFrame's first
+   child; the sidebar rows that precede the column's overlay slots) — a drag
+   rule on a content container would override every overlay mounted earlier in
+   the DOM. One selector on the native elements, ARIA roles, and tabindexed
+   custom widgets replaces per-component no-drag opt-outs. */
+html[data-platform='darwin'] :is(
+  button, a, input, select, textarea, summary, [contenteditable='true'], [tabindex],
+  [role='dialog'], [role='alertdialog'], [role='menu'], [role='listbox'], [role='tooltip'],
+  [role='button'], [role='link'], [role='tab'], [role='menuitem'], [role='menuitemcheckbox'],
+  [role='menuitemradio'], [role='option'], [role='checkbox'], [role='radio'], [role='switch'],
+  [role='slider'], [role='combobox'], [role='textbox']
+) {
+  -webkit-app-region: no-drag;
+}
+
 code,
 pre,
 [data-diff],

package/lib/boot-page.module.css

@@ -1,7 +1,6 @@
 /* The framework-free boot page cannot depend on theme delivery succeeding. */
 
 .boot {
-  --dsh-boot-bg: #fff;
   --dsh-boot-label-primary: #0f1115;
   --dsh-boot-label-secondary: #61666b;
   --dsh-boot-label-tertiary: #81858c;
@@ -11,11 +10,10 @@
   height: 100%;
   display: grid;
   place-items: center;
-  background: var(--dsw-alias-bg-base, var(--dsh-boot-bg));
+  background: var(--dsw-alias-bg-base, var(--dsh-boot-bg, Canvas));
 }
 
 :global(body[data-ds-dark-theme]) .boot {
-  --dsh-boot-bg: #151517;
   --dsh-boot-label-primary: #f9fafb;
   --dsh-boot-label-secondary: #cfd3d6;
   --dsh-boot-label-tertiary: #adb2b8;

package/lib/index.js

@@ -56,11 +56,9 @@ async function bootClient(options) {
 		onEntryState?.(entry.options.name, STATE_LABELS[entry.fiber.state]);
 	});
 	const rows = manifest.plugins.map((row) => row.id);
-	await Promise.all(rows.map(async (name) => {
-		onEntryState?.(name, "loading");
-		const id = await loader.create({ name });
-		if (loader.resolve(id).fiber === void 0) onEntryState?.(name, "failed");
-	}));
+	for (const name of rows) onEntryState?.(name, "loading");
+	await options.modules.entries.start(loader, manifest);
+	for (const entry of loader.entries()) if (entry.fiber === void 0) onEntryState?.(entry.options.name, "failed");
 	await loader.await();
 	assertEntriesActive(ctx);
 }
@@ -247,9 +245,10 @@ var AppWebEntry = class {
 	/**
 	* Load and activate every client entry, then hand the mount point to the
 	* UI renderer. Plugin failures remain visible on the boot page.
-	* @returns Resolves after application mount or failure rendering.
+	* @param onFailure - Optional carrier-owned fatal presentation; keeps the boot page visible.
+	* @returns Resolves after application mount or failure reporting.
 	*/
-	async run() {
+	async run(onFailure) {
 		try {
 			await globalThis.__DSH_BOOT_READY__?.promise;
 			const win = globalThis;
@@ -273,13 +272,14 @@ var AppWebEntry = class {
 				modules: this.modules,
 				manifest: this.manifest,
 				onEntryState: (name, state) => {
-					this.page.setState(name, state);
+					if (onFailure === void 0 || state !== "failed") this.page.setState(name, state);
 				}
 			});
 			await mountClient(ctx, this.container);
 		} catch (reason) {
 			console.error(reason);
-			this.page.fail(reason instanceof Error ? reason.message : String(reason));
+			if (onFailure !== void 0) onFailure(reason);
+			else this.page.fail(reason instanceof Error ? reason.message : String(reason));
 		}
 	}
 	/** Dispose the client plugin tree and whichever page owns the mount point. */
@@ -316,6 +316,43 @@ const PLATFORM_MODULES = [
 /** Client-bundle specifiers whose factories the parser preloads before the shell starts. */
 const PRELOADED_CLIENT_EXTERNALS = [];
 //#endregion
-export { AppWebEntry, PLATFORM_MODULES, PRELOADED_CLIENT_EXTERNALS, getStaticModules };
+//#region lib/types/apply-injections.js
+function assertNever(row) {
+	throw new Error(`web boot: unknown index injection row ${JSON.stringify(row)}`);
+}
+/**
+* Execute every row in table order.
+* @param rows - Injection table from the boot payload.
+* @param loadScript - Executes one script-src row through the page owner's asset transport.
+*/
+async function applyIndexInjections(rows, loadScript) {
+	for (const row of rows) switch (row.kind) {
+		case "global":
+			globalThis[row.name] = row.value;
+			break;
+		case "script": {
+			const el = document.createElement("script");
+			el.textContent = row.text;
+			(row.placement === "head" ? document.head : document.body).append(el);
+			break;
+		}
+		case "script-src":
+			await loadScript(row.src);
+			break;
+		case "script-preload": break;
+		case "style": {
+			const el = document.createElement("style");
+			el.textContent = row.text;
+			document.head.append(el);
+			break;
+		}
+		case "html":
+			(row.placement === "head" ? document.head : document.body).insertAdjacentHTML("beforeend", row.html);
+			break;
+		default: assertNever(row);
+	}
+}
+//#endregion
+export { AppWebEntry, PLATFORM_MODULES, PRELOADED_CLIENT_EXTERNALS, applyIndexInjections, getStaticModules };
 
 //# sourceMappingURL=index.js.map

package/lib/types/apply-injections.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Page-side interpreter for the structured index injection table. The served
+ * form renders the same rows into index.html text; a static worker page has
+ * no served HTML, so it executes the table directly. Rows execute strictly in
+ * table order, so a global row lands before the scripts that read it.
+ */
+import type { IndexInjection } from '@deepseek-ai/dsh-host-webserver';
+/**
+ * Execute every row in table order.
+ * @param rows - Injection table from the boot payload.
+ * @param loadScript - Executes one script-src row through the page owner's asset transport.
+ */
+export declare function applyIndexInjections(rows: readonly IndexInjection[], loadScript: (src: string) => Promise<void>): Promise<void>;
+//# sourceMappingURL=apply-injections.d.ts.map

package/lib/types/boot.d.ts

@@ -19,9 +19,10 @@ export declare class AppWebEntry {
     /**
      * Load and activate every client entry, then hand the mount point to the
      * UI renderer. Plugin failures remain visible on the boot page.
-     * @returns Resolves after application mount or failure rendering.
+     * @param onFailure - Optional carrier-owned fatal presentation; keeps the boot page visible.
+     * @returns Resolves after application mount or failure reporting.
      */
-    run(): Promise<void>;
+    run(onFailure?: (reason: unknown) => void): Promise<void>;
     /** Dispose the client plugin tree and whichever page owns the mount point. */
     dispose(): Promise<void>;
     /** Prefetch stage-one bundles and their dynamic requests before concurrent plugin imports. */

package/lib/types/index.d.ts

@@ -8,4 +8,5 @@
 export { AppWebEntry, type BootSeams } from './boot.ts';
 export { getStaticModules } from './seed.ts';
 export { PLATFORM_MODULES, PRELOADED_CLIENT_EXTERNALS, type PlatformModule } from './platform.ts';
+export { applyIndexInjections } from './apply-injections.ts';
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-web",
   "description": "Web boot kernel: static module table, Cordis loader, framework-free boot page, and UI-renderer handoff",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.7-alpha.1",
   "publishConfig": {
     "access": "public"
   },
@@ -19,7 +19,11 @@
       "default": "./lib/index.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./injections": {
+      "types": "./lib/types/apply-injections.d.ts",
+      "default": "./lib/apply-injections.js"
+    }
   },
   "license": "MIT",
   "devDependencies": {
@@ -28,21 +32,23 @@
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "typescript": "^6.0.3",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-client-store": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-dockkit": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-modules": "^0.1.6-alpha.1",
-    "@deepseek-ai/cordis": "^4.0.2"
+    "@deepseek-ai/dsh-client-modules": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-dockkit": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.7-alpha.1",
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.4",
+    "@deepseek-ai/dsh-client-store": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-alpha.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2"
+    "@deepseek-ai/cordis": "^4.0.3"
   },
   "files": [
     "lib/index.js",
     "lib/**/*.css",
+    "lib/apply-injections.js",
     "lib/types/**/*.d.ts"
   ]
 }