@deepseek-ai/dsh-experimental-webworker-packer 0.2.1-alpha.3 → 0.2.1-alpha.4

package/README.i18n.yaml

@@ -9,14 +9,14 @@
   en: 7ecd0d6282f6ccf1
   zh: 782c000a57a5e3d8
 /deepseek-ai-dsh-experimental-webworker-packer/summary:
-  en: 2cafd7568fd7ba2d
-  zh: 8879b809950a6034
+  en: 511b69c241632e21
+  zh: a59afd79170fcae7
 /deepseek-ai-dsh-experimental-webworker-packer/table-of-contents:
   en: 4e53164159b5ce41
   zh: 89582dc0294d0776
 /deepseek-ai-dsh-experimental-webworker-packer/use-this-package:
-  en: c0795340638d1eb3
-  zh: 5e6ece80b713eb79
+  en: 4b6067a6ffd4a33f
+  zh: 8790e1a070a7a0f3
 /deepseek-ai-dsh-experimental-webworker-packer/model-experience:
   en: e16b355530dadc1c
   zh: 8488e03b253b7b33

package/README.md

@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-The VFS image packer: turns one composed profile into the gzip-compressed base tar the browser worker mounts as its filesystem, and opaque data trees into ordered overlay tars ([experimental group](../README.md)). Nothing is compiled from source — the base image carries the repository's real build products, so a preview deployment debugs exactly what the served deployment ships. Read this page when packaging a preview image or diagnosing its contents.
+The VFS image packer: turns one shipped profile's bundles and the installation's optional bundles into the gzip-compressed base tar the browser worker mounts as its filesystem, one archive per lazily loaded page chunk, and opaque data trees into ordered overlay tars ([experimental group](../README.md)). Nothing is compiled from source — the base image carries the repository's real build products, so a preview deployment debugs exactly what the served deployment ships. Read this page when packaging a preview image or diagnosing its contents.
 
 ## Table of Contents
 
@@ -23,17 +23,18 @@ The VFS image packer: turns one composed profile into the gzip-compressed base t
 <a id="use-this-package"></a>
 ## Use this package
 
-The public npm package exposes `packVfsImage` and `packVfsOverlay` through its library entry. Callers supply the composition, package directories, and resolution root; no profile layer is installed. The runtime's library entry supplies the module-proxy and replacement tables used during packing.
+The public npm package exposes `packVfsImage` and `packVfsOverlay` through its library entry. Callers supply the profile name, the package roster, the installation manifest, package directories, and the resolution root; no profile layer is installed and no composed configuration is packed — the worker composes the bundle layers at boot. An optional `homePatch` is written to `home/cordis.patch.yml`, the home layer the image's app-boot reads. The runtime's library entry supplies the module-proxy and replacement tables used during packing.
 
 The packer owns the internal `dsh.configTrees` declaration, its validation, and source directory resolution in [`src/repository.ts`](src/repository.ts). This field is not part of the public plugin manifest API.
 
 The pack is a three-layer standard stack:
 
-1. **Roster** — the composed profile's plugin rows (standard YAML parse under Include's dialect, `!!js` intact), plus the rows of every config tree the CLI declares in its `package.json` `dsh.configTrees` (agent presets), materialized as a Node-style dependency closure. External peer edges never bind the worker; workspace peers stay on the chain.
+1. **Roster** — the shipped profile template's bundles and every bundle in app-boot's `OPTIONAL_BUNDLES`, each resolved from the CLI manifest as the launcher resolves it, plus every package their patch files name (insert lists and grouped rows included), plus the rows of every config tree the CLI declares in its `package.json` `dsh.configTrees`, materialized as a Node-style dependency closure. External peer edges never bind the worker; workspace peers stay on the chain. The CLI manifest itself enters the image alone at `node_modules/@deepseek-ai/dsh/package.json`, as the worker's bundle resolution anchor; the manifest records its name and the profile.
 2. **Publish view** — each workspace or vendored package contributes its built npm slice (`files` through picomatch) without source or workspace `dist/`. External packages retain published JavaScript under both `src/` and `dist/` because their `main` or `exports` may point there; only generic test, map, declaration, and archive exclusions apply.
 3. **Reachability sweep** — the runtime loader's own resolution walks from every non-wildcard workspace runtime export plus the worker assembly's seeds (`IMAGE_ENTRY_SEEDS`), lowering each reached module to the wrapper contract at pack time. Declaration-only condition trees do not seed the sweep; runtime requests for those exports still fail. The transform reports statically named imports, re-exports, and dynamic imports; calls through `require`; and module-scope direct calls of the form `createRequire(import.meta.url)('pkg')` through a named import from `node:module` or `module`, including an import alias. Page assets (`lib/client.js` behind `./client` exports) ship verbatim; an unresolvable request from our own code fails the pack, third-party ones are tolerated to fail loud at require time.
+4. **Lazy chunks** — every page chunk a page asset requests as a literal `require.async("./client.<name>.js")`, the only form the dynamic Client build emits, leaves the base image unless a `./client` export names it. Each becomes its own deterministic archive named `lazy/<sha256 of the archive>.tar.gz` beside the base image, and the manifest registers its path, size, and archive for the worker's lazy filesystem. A request for a chunk the package does not publish fails the pack.
 
-`repository.ts` owns the repo-shaped inputs (workspace scan of `vendor/`, `packages/`, `native/system/packages/`, and `apps/`; profile composition through the real CLI dump path); `pack.ts` owns none of them, so the same library packs a different tree by being called differently. The native scan makes the Landlock entry package an ordinary published-view dependency while its executable remains a Worker platform implementation. The CLI is `dsh-pack-vfs-image --out <file> [--profile web]`; `apps/web`'s `build:preview` runs it after the preview shell build.
+`repository.ts` owns the repo-shaped inputs (workspace scan of `vendor/`, `packages/`, `native/system/packages/`, and `apps/`; the profile roster through app-boot's shipped templates, optional-bundle list, and bundle patch readers; the CLI manifest as the installation; the home patch, which sets the runtime's `PLATFORM_ENTRY_CONFIG` fields over each named row's config composed from the template's bundle layers); `pack.ts` owns none of them, so the same library packs a different tree by being called differently. The native scan makes the Landlock entry package an ordinary published-view dependency while its executable remains a Worker platform implementation. The CLI is `dsh-pack-vfs-image --out <file> [--profile web]`; it writes the lazy archives beside the base image, and `apps/web`'s `build:preview` runs it after the preview shell build.
 
 The repository adapter also declares the preview-only fixture trees under `webworker-runtime/tests/fixtures/`. The CLI packs each named fixture into a separate deterministic overlay archive plus a browser-readable manifest. Overlay files bypass npm publish-view and module-reachability exclusions, so dot directories and example source files remain intact; their mounts are limited to `home/` and `workspace/`. `packVfsOverlay` treats all files as opaque bytes.
 

package/README.zh.md

@@ -9,7 +9,7 @@ kind: "package-library"
 
 ## 概述
 
-VFS 镜像打包器：把一份合成 profile 变成浏览器 worker 挂载为文件系统的 gzip 压缩基础 tar，并把不透明数据目录变成按序应用的 overlay tar（[实验组](../README.zh.md)）。不做任何源码编译——基础镜像携带仓库真实构建产物，预览部署调试的正是 served 部署交付的字节。打包预览镜像或排查镜像内容时，请阅读本页。
+VFS 镜像打包器：把一份随附 profile 的 bundle 和安装提供的 optional bundle 打成浏览器 worker 挂载为文件系统的 gzip 压缩基础 tar，把每个懒加载的页面 chunk 各打成一个归档，并把不透明数据目录变成按序应用的 overlay tar（[实验组](../README.zh.md)）。不做任何源码编译——基础镜像携带仓库真实构建产物，预览部署调试的正是 served 部署交付的字节。打包预览镜像或排查镜像内容时，请阅读本页。
 
 ## 目录
 
@@ -23,17 +23,18 @@ VFS 镜像打包器：把一份合成 profile 变成浏览器 worker 挂载为
 <a id="use-this-package"></a>
 ## 使用本包
 
-公开 npm 包通过库入口导出 `packVfsImage` 和 `packVfsOverlay`。调用方提供合成配置、包目录和解析根目录；本包不安装 profile 层。运行时的库入口提供打包所用的模块代理表与替换表。
+公开 npm 包通过库入口导出 `packVfsImage` 和 `packVfsOverlay`。调用方提供 profile 名称、包 roster、安装 manifest、包目录和解析根目录；本包不安装 profile 层，也不打包合成配置——worker 在启动时合成各 bundle 层。可选的 `homePatch` 写入 `home/cordis.patch.yml`，即镜像中 app-boot 读取的 home 层。运行时的库入口提供打包所用的模块代理表与替换表。
 
 打包器在 [`src/repository.ts`](src/repository.ts) 中拥有内部 `dsh.configTrees` 声明、校验和源目录解析。该字段不属于公共插件 manifest API。
 
 打包是三层标准栈：
 
-1. **Roster**——合成 profile 的插件行（标准 YAML 解析、Include 方言、`!!js` 原样保留），加上 CLI（命令行界面）在 `package.json` `dsh.configTrees` 里声明的每棵配置树（agent（智能体） presets）的行，按 Node 式依赖闭包物化。外部 peer 边绝不会绑定到 worker，workspace peer 保留在链上。
+1. **Roster**——随附 profile 模板的 bundle 和 app-boot `OPTIONAL_BUNDLES` 中的每个 bundle（各自按启动器的方式从 CLI manifest 解析），加上它们 patch 文件点名的每个包（含 insert 列表与分组行），再加上 CLI（命令行界面）在 `package.json` `dsh.configTrees` 里声明的每棵配置树的行，按 Node 式依赖闭包物化。外部 peer 边绝不会绑定到 worker，workspace peer 保留在链上。CLI manifest 本身单独进入镜像，位于 `node_modules/@deepseek-ai/dsh/package.json`，作为 worker 解析 bundle 的锚点；manifest 记录它的名称和 profile。
 2. **发布视图**——每个 workspace 或 vendored 包贡献其构建后的 npm 切片（`files` 走 picomatch），不带源码和 workspace `dist/`。外部包的 `main` 或 `exports` 可能指向 `src/` 或 `dist/`，因此两处发布 JavaScript 都会保留，只应用通用的测试、map、声明与归档排除规则。
 3. **可达性 sweep**——用运行时加载器自己的解析, 从全部不含通配符的 workspace 运行时导出加 worker 装配种子 (`IMAGE_ENTRY_SEEDS`) 出发, 打包时把每个可达模块转换为符合包装层约定的形式. 仅含类型声明的条件树不作为扫描入口; 运行时代码请求这些导出仍会失败. 该转换会报告名称可静态确定的 import、re-export 与动态 import、经 `require` 发起的调用, 以及通过 `node:module` 或 `module` 具名导入 (含导入别名) 在模块作用域直接发起的 `createRequire(import.meta.url)('pkg')` 调用. 页面资产 (`./client` 导出背后的 `lib/client.js`) 原样直发; 自家代码的不可解析请求会让打包失败, 第三方不可解析请求则允许延后到 require 时明确失败.
+4. **懒加载 chunk**——页面资产以字面量 `require.async("./client.<name>.js")`（动态 Client 构建产出的唯一形式）请求的每个页面 chunk，除非被 `./client` 导出点名，否则移出基础镜像。每个 chunk 成为基础镜像旁的一个独立确定性归档，命名为 `lazy/<归档的 sha256>.tar.gz`；manifest 为 worker 的懒加载文件系统登记其路径、大小和归档。请求包未发布的 chunk 会让打包失败。
 
-`repository.ts` 拥有仓库形态输入（`vendor/`、`packages/`、`native/system/packages/` 与 `apps/` 的 workspace 扫描；经真 CLI dump 路径合成 profile）；`pack.ts` 一概不拥有，同一库换参即可打另一棵树。Native 扫描使 Landlock 入口包成为普通发布视图依赖，其可执行文件仍由 Worker 平台实现。CLI 为 `dsh-pack-vfs-image --out <file> [--profile web]`；`apps/web` 的 `build:preview` 在预览壳构建后运行它。
+`repository.ts` 拥有仓库形态输入（`vendor/`、`packages/`、`native/system/packages/` 与 `apps/` 的 workspace 扫描；经 app-boot 的随附模板、optional bundle 列表和 bundle patch 读取器得出 profile roster；以 CLI manifest 作为安装清单；home patch 在模板各 bundle 层合成出的行配置之上设置运行时 `PLATFORM_ENTRY_CONFIG` 字段）；`pack.ts` 一概不拥有，同一库换参即可打另一棵树。Native 扫描使 Landlock 入口包成为普通发布视图依赖，其可执行文件仍由 Worker 平台实现。CLI 为 `dsh-pack-vfs-image --out <file> [--profile web]`；它把懒加载归档写在基础镜像旁，`apps/web` 的 `build:preview` 在预览壳构建后运行它。
 
 仓库适配器还声明 `webworker-runtime/tests/fixtures/` 下仅用于 preview 的 fixture（测试前置数据） tree。CLI 会把每套具名 fixture 打成一份独立的确定性 overlay 归档，并写出浏览器可读的 manifest（元数据清单）。Overlay 文件绕过 npm 发布视图和模块可达性排除规则，因此点目录与示例源码会完整保留；其挂载位置仅限 `home/` 与 `workspace/`。`packVfsOverlay` 将所有文件视为不透明字节。
 

package/lib/bin.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
-import { a as previewFixtures, i as indexWorkspacePackages, n as configTrees, o as packPreviewFixture, r as describePack, t as composeProfile, u as packVfsImage } from "./repository-Bszxcf0w.js";
+import { a as packRepositoryImage, c as packPreviewFixture, n as describePack, o as previewFixtures } from "./repository-DhiU_Xz2.js";
 import { PREVIEW_FIXTURE_MANIFEST_FILE, PREVIEW_FIXTURE_MANIFEST_VERSION } from "@deepseek-ai/dsh-experimental-webworker-runtime";
 import { mkdirSync, writeFileSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 //#region lib/types/bin.js
 /**
-* Pack a Preview deployment from this repository: compose and lower the base
-* image, then write each named fixture overlay and their manifest.
+* Pack a Preview deployment from this repository: materialize and lower the
+* base image for one shipped profile, write its lazy chunk archives beside it,
+* then write each named fixture overlay and their manifest.
 *
 * Usage: dsh-pack-vfs-image --out <file> [--profile web] [--root /dsh]
 *        node --import tsx/esm src/bin.ts --out ../../apps/web/dist/preview/vfs-image.tar.gz
@@ -35,17 +36,15 @@ const repoRoot = fileURLToPath(new URL("../../../../", import.meta.url));
 const profile = flag("profile", "web");
 const out = flag("out");
 const outputFile = isAbsolute(out) ? out : resolve(process.cwd(), out);
-const result = packVfsImage({
-	config: composeProfile(repoRoot, profile),
-	profile,
-	root: flag("root", "/dsh"),
-	workspaces: indexWorkspacePackages(repoRoot),
-	resolveFrom: repoRoot,
-	configTrees: configTrees(repoRoot)
-});
+const result = packRepositoryImage(repoRoot, profile, flag("root", "/dsh"));
 if (result.missing.length > 0) throw new Error(`vfs image: ${String(result.missing.length)} dependencies did not resolve; the image would be incomplete`);
 mkdirSync(dirname(outputFile), { recursive: true });
 writeFileSync(outputFile, result.image);
+for (const archive of result.lazyArchives) {
+	const path = join(dirname(outputFile), archive.name);
+	mkdirSync(dirname(path), { recursive: true });
+	writeFileSync(path, archive.image);
+}
 const fixtureDefinitions = previewFixtures(repoRoot);
 mkdirSync(join(dirname(outputFile), "fixtures"), { recursive: true });
 const fixtureLines = [];

package/lib/index.js

@@ -1,2 +1,2 @@
-import { a as previewFixtures, c as DEFAULT_ROOT, d as packVfsOverlay, f as WRAPPER_CONTRACT, i as indexWorkspacePackages, l as MANIFEST_PATH, n as configTrees, o as packPreviewFixture, r as describePack, s as CONFIG_PATH, t as composeProfile, u as packVfsImage } from "./repository-Bszxcf0w.js";
-export { CONFIG_PATH, DEFAULT_ROOT, MANIFEST_PATH, WRAPPER_CONTRACT, composeProfile, configTrees, describePack, indexWorkspacePackages, packPreviewFixture, packVfsImage, packVfsOverlay, previewFixtures };
+import { a as packRepositoryImage, c as packPreviewFixture, d as collectModuleNames, f as packVfsImage, i as installationManifest, l as DEFAULT_ROOT, m as WRAPPER_CONTRACT, n as describePack, o as previewFixtures, p as packVfsOverlay, r as indexWorkspacePackages, s as profileRoster, t as configTrees, u as MANIFEST_PATH } from "./repository-DhiU_Xz2.js";
+export { DEFAULT_ROOT, MANIFEST_PATH, WRAPPER_CONTRACT, collectModuleNames, configTrees, describePack, indexWorkspacePackages, installationManifest, packPreviewFixture, packRepositoryImage, packVfsImage, packVfsOverlay, previewFixtures, profileRoster };

package/lib/{repository-Bszxcf0w.js → repository-DhiU_Xz2.js}

@@ -1,13 +1,13 @@
-import { DEFAULT_ROOT, DEFAULT_ROOT as DEFAULT_ROOT$1, IMAGE_CONFIG_PATH, IMAGE_EMPTY_DIRECTORIES, IMAGE_MANIFEST_PATH, IMAGE_OVERLAY_DIRECTORIES, LOWERING_VERSION, MODULE_PROXIES, MODULE_PROXY_PREFIXES, MemoryVfs, REPLACED_EXTERNAL_PACKAGES, WorkerModuleLoader, lowerModuleSource, packTar } from "@deepseek-ai/dsh-experimental-webworker-runtime";
+import { DEFAULT_ROOT, DEFAULT_ROOT as DEFAULT_ROOT$1, IMAGE_EMPTY_DIRECTORIES, IMAGE_HOME_DIRECTORY, IMAGE_LAZY_DIRECTORY, IMAGE_MANIFEST_PATH, IMAGE_OVERLAY_DIRECTORIES, LOWERING_VERSION, MODULE_PROXIES, MODULE_PROXY_PREFIXES, MemoryVfs, PLATFORM_ENTRY_CONFIG, REPLACED_EXTERNAL_PACKAGES, WorkerModuleLoader, lowerModuleSource, packTar } from "@deepseek-ai/dsh-experimental-webworker-runtime";
+import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, posix, relative } from "node:path";
 import { gzipSync } from "node:zlib";
 import picomatch from "picomatch";
 import yaml from "js-yaml";
 import { entryListSchema } from "@deepseek-ai/cordis-plugin-include";
-import { execFileSync } from "node:child_process";
+import { OPTIONAL_BUNDLES, PROFILE_PATCH_FILENAME, PROFILE_TEMPLATES, bundlePatchPaths, composeEntries, loadOverlayPatches, resolveBundleDir } from "@deepseek-ai/dsh-app-boot";
 import { tmpdir } from "node:os";
-import { DSH_HOME_ENV } from "@deepseek-ai/dsh-home-paths";
 import { isSessionFormatJsonObject, parseSessionFormatLogFilename, sessionFormatLogFilename } from "@deepseek-ai/dsh-session-format";
 import { createSessionFormatCatalogWithChildren, historicalSessionFormatCatalog, sessionFormatCatalog } from "@deepseek-ai/dsh-session-format-catalog";
 import { historicalChildCatalogSource } from "@deepseek-ai/dsh-session-format-v3-to-v4";
@@ -80,7 +80,7 @@ const PAGE_ASSETS = [
 	"node_modules/@*/*/lib/client.*.js"
 ];
 /**
-* Image specifiers the worker assembly requires directly, beyond the composed
+* Image specifiers the worker assembly requires directly, beyond the
 * roster: they are requested by worker-bundle code, so no image file
 * references them and the reachability sweep must seed them as roots. Keep in
 * step with the literal `require`/`resolve` calls in the runtime's
@@ -89,36 +89,32 @@ const PAGE_ASSETS = [
 const IMAGE_ENTRY_SEEDS = [
 	"@deepseek-ai/dsh-app-boot",
 	"@deepseek-ai/dsh-cmdline",
-	"@deepseek-ai/cordis",
-	"@deepseek-ai/cordis-plugin-include",
-	"js-yaml"
+	"@deepseek-ai/dsh-launch-environment",
+	"@deepseek-ai/cordis"
 ];
 //#endregion
 //#region lib/types/pack.js
 /**
-* VFS image packer: turns one composed profile plus a package index into the single
-* gzip-compressed tar the browser runtime inflates and mounts as its filesystem.
+* VFS image packer: turns a package roster plus a package index into the single
+* gzip-compressed tar the browser runtime inflates and mounts as its filesystem,
+* and the lazy archives beside it.
 *
 * Nothing is compiled here. The image carries the repository's real build products,
 * so a preview deployment debugs exactly what the served deployment ships. What the
 * pass does add is the pack-time module transform and the manifest that records the
-* wrapper contract it was transformed against.
+* wrapper contract it was transformed against. No composed configuration is packed:
+* the worker host composes the profile's bundle layers from the packages the roster
+* materializes, as the served launcher does.
 *
-* This module holds no repository knowledge: paths, globs, and the composition come
-* in as parameters, so the same library packs a different tree by being called
+* This module holds no repository knowledge: paths, globs, and the roster come in as
+* parameters, so the same library packs a different tree by being called
 * differently. Locating those inputs is the CLI's job.
 * @module @deepseek-ai/dsh-experimental-webworker-packer/src/pack
 */
 /** Image path of the manifest; the layout contract's name, re-exported for callers. */
 const MANIFEST_PATH = IMAGE_MANIFEST_PATH;
-/** Image path of the composed profile; the layout contract's name, re-exported for callers. */
-const CONFIG_PATH = IMAGE_CONFIG_PATH;
-/**
-* Manifest field the runtime judges the image by: the wrapper contract every packed
-* body was emitted against. The runtime refuses an image whose value is not its own
-* contract, because those bodies assume different wrapper semantics.
-*/
-const CONTRACT_FIELD = "lowered";
+/** Image path of the home patch: `$DSH_HOME/cordis.patch.yml` under the Worker home. */
+const HOME_PATCH_PATH = `${IMAGE_HOME_DIRECTORY}/${PROFILE_PATCH_FILENAME}`;
 /** Exclude matcher over tree-root-relative paths ({@link EXCLUDE}). */
 const excluded = picomatch([...EXCLUDE], { dot: true });
 /** Workspace exclude matcher: {@link EXCLUDE} plus {@link EXCLUDE_WORKSPACE}. */
@@ -136,33 +132,25 @@ function packageNameOf(specifier) {
 	return first.startsWith("@") ? `${first}/${second}` : first;
 }
 /**
-* Collect module-specifier `name` fields from parsed entry rows, recursively
-* through nested `config` row lists (groups). Builtin rows (`cordis:group`)
-* and preset metadata documents carry names that are not module specifiers;
-* only names with a scope or a path separator count.
-* @param rows - Parsed YAML value; anything but an entry array is ignored.
+* Collect package names from entry rows and patch lists, recursively through
+* `insert` lists and nested `config` row lists (groups). Builtin rows
+* (`cordis:group`), preset metadata documents, and file-relative entries carry
+* names that are not package specifiers; only scoped names and bare names
+* with a subpath count.
+* @param rows - Parsed YAML value; anything but a row array is ignored.
 * @param names - Package names collected so far.
 */
-function moduleNamesOf(rows, names) {
+function collectModuleNames(rows, names) {
 	if (!Array.isArray(rows)) return;
 	for (const row of rows) {
 		if (typeof row !== "object" || row === null) continue;
-		const { name, config } = row;
-		if (typeof name === "string" && (name.startsWith("@") || name.includes("/"))) names.add(packageNameOf(name));
-		moduleNamesOf(config, names);
+		const { name, config, insert } = row;
+		if (typeof name === "string" && !name.startsWith(".") && (name.startsWith("@") || name.includes("/"))) names.add(packageNameOf(name));
+		collectModuleNames(config, names);
+		collectModuleNames(insert, names);
 	}
 }
 /**
-* Package names the composition names.
-* @param config - Composed profile; `!!js` scalars parse under Include's dialect.
-* @returns Package names, deduplicated.
-*/
-function rosterOf(config) {
-	const names = /* @__PURE__ */ new Set();
-	moduleNamesOf(yaml.load(config, { schema: entryListSchema }), names);
-	return [...names];
-}
-/**
 * Package names the compositions under one config tree name.
 * @param root - Directory to walk.
 * @returns Package names, deduplicated.
@@ -177,7 +165,7 @@ function treeRosterOf(root) {
 				continue;
 			}
 			if (!entry.name.endsWith(".yml") && !entry.name.endsWith(".yaml")) continue;
-			moduleNamesOf(yaml.load(readFileSync(absolute, "utf8"), { schema: entryListSchema }), names);
+			collectModuleNames(yaml.load(readFileSync(absolute, "utf8"), { schema: entryListSchema }), names);
 		}
 	};
 	walk(root);
@@ -499,6 +487,54 @@ function materialize(roster, options) {
 		missing
 	};
 }
+/**
+* Request form the dynamic Client build emits for a package-local chunk: a
+* literal `require.async("./client.<name>.js")`, served by the Host on demand.
+*/
+const CHUNK_REQUEST = /\brequire\.async\(\s*(["'])(\.\/client\.[A-Za-z0-9][A-Za-z0-9._-]*\.js)\1\s*\)/g;
+/**
+* Image paths every materialized package's `./client` export names, under any
+* condition: those load eagerly, so a chunk request never makes them lazy.
+* @param files - Image entries.
+* @param packages - Materialized package names.
+* @returns Eager Client entry paths.
+*/
+function clientEntriesOf(files, packages) {
+	const decoder = new TextDecoder();
+	const entries = /* @__PURE__ */ new Set();
+	const collect = (name, target) => {
+		if (typeof target === "string") entries.add(`node_modules/${name}/${target.replace(/^\.\//, "")}`);
+		else if (typeof target === "object" && target !== null) for (const value of Object.values(target)) collect(name, value);
+	};
+	for (const name of packages) {
+		const bytes = files[`node_modules/${name}/package.json`];
+		if (bytes === void 0) continue;
+		collect(name, JSON.parse(decoder.decode(bytes)).exports?.["./client"]);
+	}
+	return entries;
+}
+/**
+* Page chunks requested only through `require.async`, in path order.
+* @param files - Image entries after the sweep.
+* @param eager - Eager Client entry paths, never lazy.
+* @returns Image paths to move into lazy archives.
+* @throws When a page asset requests a chunk its package does not publish.
+*/
+function lazyChunksOf(files, eager) {
+	const decoder = new TextDecoder();
+	const lazy = /* @__PURE__ */ new Set();
+	for (const [name, bytes] of Object.entries(files)) {
+		if (!pageAsset(name)) continue;
+		const directory = name.slice(0, name.lastIndexOf("/"));
+		for (const match of decoder.decode(bytes).matchAll(CHUNK_REQUEST)) {
+			const request = match[2];
+			const target = `${directory}/${request.slice(2)}`;
+			if (files[target] === void 0) throw new Error(`vfs image: ${name} requests chunk "${request}", which the package does not publish`);
+			if (!eager.has(target)) lazy.add(target);
+		}
+	}
+	return [...lazy].sort();
+}
 /** Gzip header byte that records the packing platform; RFC 1952 §2.3.1 spells 255 "unknown". */
 const GZIP_OS_UNKNOWN = 255;
 /** Offset of that byte in the gzip member header. */
@@ -527,42 +563,77 @@ function compressImage(archive) {
 * The manifest's claim is all-or-nothing: it names the one contract every packed body
 * was emitted against. A module the transform cannot express therefore fails the pack
 * rather than downgrading the image, because a mostly-transformed image boots into
-* errors far from their cause.
-* @param options - Composition, package index, and paths.
-* @returns The compressed image plus what went into it.
+* errors far from their cause. Page chunks requested through `require.async` leave
+* the base image for deterministic archives named by their content digest, which the manifest registers.
+* @param options - Roster, installation, package index, and paths.
+* @returns The compressed image, its lazy archives, and what went into them.
 * @throws When a config tree or workspace directory named in the options is missing,
-* because a silently thinner image fails much later and much less clearly.
+* because a silently thinner image fails much later and much less clearly; when the
+* installation is also a materialized package; or when a page asset requests a chunk
+* its package does not publish.
 */
 function packVfsImage(options) {
 	const root = options.root ?? DEFAULT_ROOT;
 	const encoder = new TextEncoder();
 	const configTrees = options.configTrees ?? [];
 	for (const tree of configTrees) if (!existsSync(tree.directory)) throw new Error(`vfs image: config tree ${tree.mount} is missing at ${tree.directory}`);
-	const roster = [...new Set([...rosterOf(options.config), ...configTrees.filter((tree) => tree.scanRoster === true).flatMap((tree) => treeRosterOf(tree.directory))])];
+	const roster = [...new Set([...options.roster, ...configTrees.filter((tree) => tree.scanRoster === true).flatMap((tree) => treeRosterOf(tree.directory))])];
 	const { files, packages, missing } = materialize(roster, options);
-	files[CONFIG_PATH] = encoder.encode(options.config);
+	const installation = options.installation;
+	if (installation !== void 0) {
+		if (packages.has(installation.name)) throw new Error(`vfs image: installation ${installation.name} is also materialized; its manifest must enter the image alone`);
+		files[`node_modules/${installation.name}/package.json`] = readFileSync(installation.manifest);
+	}
+	if (options.homePatch !== void 0 && options.homePatch.length > 0) files[HOME_PATCH_PATH] = encoder.encode(yaml.dump(options.homePatch, {
+		schema: entryListSchema,
+		noRefs: true
+	}));
 	for (const tree of configTrees) collectTree(tree.directory, files, tree.mount, (relativePath) => !excluded(relativePath));
 	const executables = dropExecutables(files);
 	const { swept, transform, javascriptEntries, droppedJavascriptEntries, unresolvedExternalRequests } = sweepImage(files, options, [...packages.keys()].filter((name) => options.workspaces.has(name)), root);
-	swept[MANIFEST_PATH] = encoder.encode(`${JSON.stringify({
+	const lazyArchives = [];
+	const lazy = [];
+	for (const path of lazyChunksOf(swept, clientEntriesOf(swept, packages.keys()))) {
+		const bytes = swept[path];
+		delete swept[path];
+		const image = compressImage(packTar({ [path]: bytes }));
+		const name = `${IMAGE_LAZY_DIRECTORY}/${createHash("sha256").update(image).digest("hex")}.tar.gz`;
+		lazyArchives.push({
+			name,
+			image,
+			files: [path]
+		});
+		lazy.push({
+			archive: name,
+			files: [{
+				path,
+				size: bytes.byteLength
+			}]
+		});
+	}
+	const manifest = {
 		root,
 		profile: options.profile,
-		[CONTRACT_FIELD]: WRAPPER_CONTRACT,
-		javascriptEntries,
+		...installation === void 0 ? {} : { installation: installation.name },
+		lowered: WRAPPER_CONTRACT,
+		javascriptEntries: javascriptEntries - lazy.length,
 		visitedEntries: transform.visited,
-		rewrittenEntries: transform.rewritten
-	}, null, 2)}\n`);
+		rewrittenEntries: transform.rewritten,
+		lazy
+	};
+	swept[MANIFEST_PATH] = encoder.encode(`${JSON.stringify(manifest, null, 2)}\n`);
 	for (const directory of options.emptyDirectories ?? IMAGE_EMPTY_DIRECTORIES) swept[directory] = new Uint8Array(0);
 	return {
 		image: compressImage(packTar(swept)),
 		files: swept,
+		lazyArchives,
 		packages,
 		workspacePackages: [...packages.keys()].filter((name) => options.workspaces.has(name)).length,
 		roster,
 		missing,
 		executables,
 		pageBundles: Object.keys(swept).filter((name) => pageAsset(name)),
-		javascriptEntries,
+		javascriptEntries: manifest.javascriptEntries,
 		droppedJavascriptEntries,
 		unresolvedExternalRequests,
 		transform,
@@ -687,8 +758,8 @@ function selectedSessions(files) {
 //#endregion
 //#region lib/types/repository.js
 /**
-* Repository knowledge for the packer: where this tree's workspaces, profile
-* composition, and config trees are, and how to report a pack.
+* Repository knowledge for the packer: where this tree's workspaces, installation
+* manifest, profile bundles, and config trees are, and how to report a pack.
 *
 * The library half takes all of this as parameters. Keeping the lookup here is what
 * lets the same library pack a different tree, and what keeps `pack.ts` free of
@@ -707,10 +778,10 @@ const WORKSPACE_SCAN_ROOTS = [
 	"native/system/packages",
 	"apps"
 ];
-/** Composition entry point package: the `dsh` CLI, run from source. */
+/** The `dsh` installation package: its manifest anchors bundle resolution, as the launcher's does. */
 const CLI_PACKAGE = "apps/cli";
-/** Composition entry point: the `dsh` CLI, run from source. */
-const CLI_ENTRY = `${CLI_PACKAGE}/src/bin.ts`;
+/** Diagnostic prefix for the app-boot readers this module calls. */
+const BIN_NAME = "dsh-pack-vfs-image";
 /** Repository-owned deterministic filesystem content offered by the preview. */
 const PREVIEW_EXAMPLE_ROOT = "packages/experimental/webworker-runtime/tests/fixtures/vfs-example";
 /**
@@ -740,42 +811,102 @@ function indexWorkspacePackages(repoRoot) {
 	return index;
 }
 /**
-* Compose one profile through the real CLI dump path, leaving `!!js`
-* unevaluated. The dump runs against a throwaway Harness home, so the
-* profile's own layer is the freshly initialized empty patch file and the
-* machine's `$DSH_HOME` — its profile manifest with locally installed
-* bundles, and its patch files — would otherwise leak this machine's plugins
-* into the image and break the same-tree-same-bytes guarantee.
+* Read what one shipped profile offers from the installation the launcher boots:
+* the template's bundles and every optional bundle, each resolved from the CLI
+* manifest as the launcher resolves them, and the packages their patch files name.
+* Machine state never contributes, so the same tree always packs the same roster.
 * @param repoRoot - Absolute repository root.
-* @param profile - Profile name to compose.
-* @returns The composed YAML.
+* @param profile - Shipped profile template name.
+* @returns Bundle names and the roster to materialize.
+* @throws When the profile has no shipped template, or a bundle does not resolve or declares no patch.
 */
-function composeProfile(repoRoot, profile) {
-	const home = mkdtempSync(join(tmpdir(), "dsh-pack-home-"));
-	try {
-		return execFileSync(process.execPath, [
-			"--import",
-			"tsx/esm",
-			join(repoRoot, CLI_ENTRY),
-			"--profile",
-			profile,
-			"--dump-config"
-		], {
-			cwd: repoRoot,
-			encoding: "utf8",
-			maxBuffer: 64 * 1024 * 1024,
-			env: {
-				...process.env,
-				[DSH_HOME_ENV]: home
+function profileRoster(repoRoot, profile) {
+	const template = shippedTemplate(profile);
+	const bundles = [...new Set([...template.bundles, ...OPTIONAL_BUNDLES])];
+	const names = new Set(bundles);
+	for (const bundle of bundles) collectModuleNames(bundlePatches(repoRoot, bundle), names);
+	return {
+		bundles,
+		roster: [...names]
+	};
+}
+/**
+* The home patch one shipped profile's image carries: every row `PLATFORM_ENTRY_CONFIG` names, with the config the
+* template's bundle layers compose for it and the Worker's required fields over that config. A patch replaces a row's
+* whole config, so the composed fields stay; the image carries the same bundle files read here.
+* @param repoRoot - Absolute repository root.
+* @param profile - Shipped profile template name.
+* @returns Home patch rows; a row the composition lacks contributes none.
+* @throws When the profile has no shipped template, or a bundle does not resolve or declares no patch.
+*/
+function platformHomePatch(repoRoot, profile) {
+	const composed = composeEntries([shippedTemplate(profile).bundles.flatMap((bundle) => bundlePatches(repoRoot, bundle))]);
+	return Object.entries(PLATFORM_ENTRY_CONFIG).flatMap(([id, fields]) => {
+		const row = findRow(composed, id);
+		if (row === void 0) return [];
+		return [{
+			id,
+			config: {
+				...typeof row.config === "object" && row.config !== null && !Array.isArray(row.config) ? row.config : {},
+				...fields
 			}
-		});
-	} finally {
-		rmSync(home, {
-			recursive: true,
-			force: true
-		});
+		}];
+	});
+}
+/** Find one Loader row by id, inside group configs too. */
+function findRow(rows, id) {
+	if (!Array.isArray(rows)) return void 0;
+	for (const row of rows) {
+		if (row.id === id) return row;
+		const nested = findRow(row.config, id);
+		if (nested !== void 0) return nested;
 	}
 }
+/** The shipped template of one profile, or a refusal naming it. */
+function shippedTemplate(profile) {
+	const template = Object.hasOwn(PROFILE_TEMPLATES, profile) ? PROFILE_TEMPLATES[profile] : void 0;
+	if (template === void 0) throw new Error(`vfs image: no shipped profile template named ${JSON.stringify(profile)}`);
+	return template;
+}
+/** One bundle's patch rows, resolved from the CLI manifest as the launcher resolves them. */
+function bundlePatches(repoRoot, bundle) {
+	const directory = resolveBundleDir(BIN_NAME, bundle, installationManifest(repoRoot).manifest, join(repoRoot, CLI_PACKAGE));
+	const declaration = JSON.parse(readFileSync(join(directory, "package.json"), "utf8")).dsh?.bundle;
+	if (declaration === void 0) throw new Error(`vfs image: bundle ${bundle} declares no dsh.bundle`);
+	return bundlePatchPaths(directory, declaration).flatMap((file) => loadOverlayPatches(BIN_NAME, file));
+}
+/**
+* The installation manifest the image anchors bundle resolution at.
+* @param repoRoot - Absolute repository root.
+* @returns The CLI package name and its manifest path.
+*/
+function installationManifest(repoRoot) {
+	const manifest = join(repoRoot, CLI_PACKAGE, "package.json");
+	const { name } = JSON.parse(readFileSync(manifest, "utf8"));
+	return {
+		name,
+		manifest
+	};
+}
+/**
+* Pack this repository's base image for one shipped profile.
+* @param repoRoot - Absolute repository root.
+* @param profile - Shipped profile template name.
+* @param root - Virtual root; the runtime default when omitted.
+* @returns The packed image and its lazy archives.
+*/
+function packRepositoryImage(repoRoot, profile, root) {
+	return packVfsImage({
+		profile,
+		roster: profileRoster(repoRoot, profile).roster,
+		installation: installationManifest(repoRoot),
+		...root === void 0 ? {} : { root },
+		workspaces: indexWorkspacePackages(repoRoot),
+		resolveFrom: repoRoot,
+		configTrees: configTrees(repoRoot),
+		homePatch: platformHomePatch(repoRoot, profile)
+	});
+}
 /**
 * Config trees the CLI package declares for deployment images
 * (`dsh.configTrees` in its package.json): `path` is relative to the CLI
@@ -851,6 +982,8 @@ function describePack(result, repoRoot, outputFile) {
 		`  raw                 ${megabytes(Object.values(result.files).reduce((sum, bytes) => sum + bytes.byteLength, 0))}`,
 		`  compressed          ${megabytes(result.image.byteLength)}`,
 		`  config + presets    ${megabytes(sizeOf("config/"))}`,
+		`  lazy archives       ${String(result.lazyArchives.length)} (${megabytes(result.lazyArchives.reduce((sum, archive) => sum + archive.image.byteLength, 0))} compressed)`,
+		...result.lazyArchives.map((archive) => `    ${megabytes(archive.image.byteLength).padStart(9)}  ${archive.name}  ${archive.files.join(", ")}`),
 		`  javascript entries  ${String(result.javascriptEntries)} (dropped ${String(result.executables.length)} executable scripts, ${String(result.pageBundles.length)} page bundles verbatim)`,
 		`  wrapper contract    ${result.contract}`,
 		`  transform           ${String(result.transform.rewritten)} of ${String(result.transform.visited)} reached entries rewritten, ${String(result.droppedJavascriptEntries)} unreachable dropped`,
@@ -862,4 +995,4 @@ function describePack(result, repoRoot, outputFile) {
 	];
 }
 //#endregion
-export { previewFixtures as a, DEFAULT_ROOT$1 as c, packVfsOverlay as d, WRAPPER_CONTRACT as f, indexWorkspacePackages as i, MANIFEST_PATH as l, configTrees as n, packPreviewFixture as o, describePack as r, CONFIG_PATH as s, composeProfile as t, packVfsImage as u };
+export { packRepositoryImage as a, packPreviewFixture as c, collectModuleNames as d, packVfsImage as f, installationManifest as i, DEFAULT_ROOT$1 as l, WRAPPER_CONTRACT as m, describePack as n, previewFixtures as o, packVfsOverlay as p, indexWorkspacePackages as r, profileRoster as s, configTrees as t, MANIFEST_PATH as u };

package/lib/types/bin.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 /**
- * Pack a Preview deployment from this repository: compose and lower the base
- * image, then write each named fixture overlay and their manifest.
+ * Pack a Preview deployment from this repository: materialize and lower the
+ * base image for one shipped profile, write its lazy chunk archives beside it,
+ * then write each named fixture overlay and their manifest.
  *
  * Usage: dsh-pack-vfs-image --out <file> [--profile web] [--root /dsh]
  *        node --import tsx/esm src/bin.ts --out ../../apps/web/dist/preview/vfs-image.tar.gz
@@ -11,8 +12,7 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { PREVIEW_FIXTURE_MANIFEST_FILE, PREVIEW_FIXTURE_MANIFEST_VERSION, } from '@deepseek-ai/dsh-experimental-webworker-runtime';
-import { packVfsImage } from "./pack.js";
-import { composeProfile, configTrees, describePack, indexWorkspacePackages, packPreviewFixture, previewFixtures, } from "./repository.js";
+import { describePack, packPreviewFixture, packRepositoryImage, previewFixtures, } from "./repository.js";
 /**
  * Read one `--flag value` pair.
  * @param name - Flag name without dashes.
@@ -38,19 +38,18 @@ const repoRoot = fileURLToPath(new URL('../../../../', import.meta.url));
 const profile = flag('profile', 'web');
 const out = flag('out');
 const outputFile = isAbsolute(out) ? out : resolve(process.cwd(), out);
-const result = packVfsImage({
-    config: composeProfile(repoRoot, profile),
-    profile,
-    root: flag('root', '/dsh'),
-    workspaces: indexWorkspacePackages(repoRoot),
-    resolveFrom: repoRoot,
-    configTrees: configTrees(repoRoot),
-});
+const result = packRepositoryImage(repoRoot, profile, flag('root', '/dsh'));
 if (result.missing.length > 0) {
     throw new Error(`vfs image: ${String(result.missing.length)} dependencies did not resolve; the image would be incomplete`);
 }
 mkdirSync(dirname(outputFile), { recursive: true });
 writeFileSync(outputFile, result.image);
+// Lazy archive names are relative to the base image, which the Worker resolves them against.
+for (const archive of result.lazyArchives) {
+    const path = join(dirname(outputFile), archive.name);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, archive.image);
+}
 const fixtureDefinitions = previewFixtures(repoRoot);
 const fixtureDirectory = join(dirname(outputFile), 'fixtures');
 mkdirSync(fixtureDirectory, { recursive: true });

package/lib/types/index.d.ts

@@ -3,6 +3,6 @@
  * @module @deepseek-ai/dsh-experimental-webworker-packer
  */
 export { WRAPPER_CONTRACT, type ImageFiles, type TransformOutcome, } from './transform-image.ts';
-export { CONFIG_PATH, DEFAULT_ROOT, MANIFEST_PATH, packVfsImage, packVfsOverlay, type ConfigTree, type ImageTree, type PackOptions, type PackOverlayResult, type PackResult, } from './pack.ts';
-export { composeProfile, configTrees, describePack, indexWorkspacePackages, packPreviewFixture, previewFixtures, type PreviewFixture, } from './repository.ts';
+export { collectModuleNames, DEFAULT_ROOT, MANIFEST_PATH, packVfsImage, packVfsOverlay, type ConfigTree, type ImageInstallation, type ImageTree, type PackedLazyArchive, type PackOptions, type PackOverlayResult, type PackResult, } from './pack.ts';
+export { configTrees, describePack, indexWorkspacePackages, installationManifest, packPreviewFixture, packRepositoryImage, previewFixtures, profileRoster, type PreviewFixture, type ProfileRoster, } from './repository.ts';
 //# sourceMappingURL=index.d.ts.map

package/lib/types/pack.d.ts

@@ -1,9 +1,10 @@
+import { type PatchOptions } from '@deepseek-ai/cordis-plugin-include';
 import { type ImageFiles, type TransformOutcome } from './transform-image.ts';
 export { DEFAULT_ROOT } from '@deepseek-ai/dsh-experimental-webworker-runtime';
 /** Image path of the manifest; the layout contract's name, re-exported for callers. */
 export declare const MANIFEST_PATH: string;
-/** Image path of the composed profile; the layout contract's name, re-exported for callers. */
-export declare const CONFIG_PATH: string;
+/** Image path of the home patch: `$DSH_HOME/cordis.patch.yml` under the Worker home. */
+export declare const HOME_PATCH_PATH = "home/cordis.patch.yml";
 /** One directory tree to copy into the image at a caller-selected mount. */
 export interface ImageTree {
     /** Image path to mount it at, relative to the virtual root. */
@@ -20,12 +21,24 @@ export interface ConfigTree extends ImageTree {
      */
     readonly scanRoster?: boolean;
 }
+/** The installation whose manifest alone anchors bundle resolution inside the image. */
+export interface ImageInstallation {
+    /** Package name the manifest is mounted under, `node_modules/<name>/package.json`. */
+    readonly name: string;
+    /** Absolute path of the manifest to copy. */
+    readonly manifest: string;
+}
 /** Everything the packer needs that it cannot know by itself. */
 export interface PackOptions {
-    /** Composed profile, `!!js` intact, as the CLI's `--dump-default-config` produced it. */
-    readonly config: string;
-    /** Profile name, recorded in the manifest. */
+    /** Shipped profile template the worker host boots, recorded in the manifest. */
     readonly profile: string;
+    /**
+     * Package names whose dependency closures the image materializes: the bundles the
+     * image offers and every package their patch rows name.
+     */
+    readonly roster: readonly string[];
+    /** Installation manifest copied alone, without its package or dependency closure. */
+    readonly installation?: ImageInstallation;
     /** Virtual root the image mounts under; defaults to {@link DEFAULT_ROOT}. */
     readonly root?: string;
     /** Package name to absolute directory, for workspace and vendored packages. */
@@ -36,18 +49,31 @@ export interface PackOptions {
     readonly configTrees?: readonly ConfigTree[];
     /** Empty directories to create; defaults to `home/`, `workspace/`, `tmp/`. */
     readonly emptyDirectories?: readonly string[];
+    /** Patch rows written to {@link HOME_PATCH_PATH}, which the image's app-boot reads as the home layer. */
+    readonly homePatch?: readonly PatchOptions[];
     /**
      * Extra sweep roots: image specifiers requested by code outside the image.
      * Defaults to the worker assembly's own entries.
      */
     readonly entries?: readonly string[];
 }
+/** One lazy chunk archive to write beside the base image. */
+export interface PackedLazyArchive {
+    /** Path relative to the base image, `lazy/<sha256 of image>.tar.gz`; the digest names the archive, and the Worker does not verify it. */
+    readonly name: string;
+    /** The gzip-compressed tar archive. */
+    readonly image: Uint8Array;
+    /** Image paths the archive carries. */
+    readonly files: readonly string[];
+}
 /** What one pack produced, for the caller to report or assert on. */
 export interface PackResult {
     /** The gzip-compressed tar archive to write; the runtime inflates it at mount. */
     readonly image: Uint8Array;
-    /** Every entry, before zipping; the manifest is already among them. */
+    /** Every base-image entry, before zipping; the manifest is already among them. */
     readonly files: ImageFiles;
+    /** Page chunks moved out of the base image, one archive each, in path order. */
+    readonly lazyArchives: readonly PackedLazyArchive[];
     /** Package name to how many files it contributed, in materialization order. */
     readonly packages: ReadonlyMap<string, number>;
     /** How many of them came from the workspace rather than from `node_modules`. */
@@ -78,17 +104,30 @@ export interface PackOverlayResult {
     /** Every path in the overlay before compression. */
     readonly files: ImageFiles;
 }
+/**
+ * Collect package names from entry rows and patch lists, recursively through
+ * `insert` lists and nested `config` row lists (groups). Builtin rows
+ * (`cordis:group`), preset metadata documents, and file-relative entries carry
+ * names that are not package specifiers; only scoped names and bare names
+ * with a subpath count.
+ * @param rows - Parsed YAML value; anything but a row array is ignored.
+ * @param names - Package names collected so far.
+ */
+export declare function collectModuleNames(rows: unknown, names: Set<string>): void;
 /**
  * Pack one VFS image.
  *
  * The manifest's claim is all-or-nothing: it names the one contract every packed body
  * was emitted against. A module the transform cannot express therefore fails the pack
  * rather than downgrading the image, because a mostly-transformed image boots into
- * errors far from their cause.
- * @param options - Composition, package index, and paths.
- * @returns The compressed image plus what went into it.
+ * errors far from their cause. Page chunks requested through `require.async` leave
+ * the base image for deterministic archives named by their content digest, which the manifest registers.
+ * @param options - Roster, installation, package index, and paths.
+ * @returns The compressed image, its lazy archives, and what went into them.
  * @throws When a config tree or workspace directory named in the options is missing,
- * because a silently thinner image fails much later and much less clearly.
+ * because a silently thinner image fails much later and much less clearly; when the
+ * installation is also a materialized package; or when a page asset requests a chunk
+ * its package does not publish.
  */
 export declare function packVfsImage(options: PackOptions): PackResult;
 /**

package/lib/types/repository.d.ts

@@ -1,4 +1,5 @@
-import type { ConfigTree, ImageTree, PackResult } from './pack.ts';
+import type { PatchOptions } from '@deepseek-ai/cordis-plugin-include';
+import { type ConfigTree, type ImageInstallation, type ImageTree, type PackResult } from './pack.ts';
 export { packPreviewFixture } from './preview.ts';
 /** One built-in Preview source and the trees packed into its overlay. */
 export interface PreviewFixture {
@@ -17,18 +18,48 @@ export interface PreviewFixture {
  * @returns Package name to absolute directory.
  */
 export declare function indexWorkspacePackages(repoRoot: string): Map<string, string>;
+/** The bundles one image offers and the packages it must materialize for them. */
+export interface ProfileRoster {
+    /** The profile template's bundles, then the installation's optional bundles. */
+    readonly bundles: readonly string[];
+    /** Those bundle packages plus every package their patch rows name, deduplicated. */
+    readonly roster: readonly string[];
+}
+/**
+ * Read what one shipped profile offers from the installation the launcher boots:
+ * the template's bundles and every optional bundle, each resolved from the CLI
+ * manifest as the launcher resolves them, and the packages their patch files name.
+ * Machine state never contributes, so the same tree always packs the same roster.
+ * @param repoRoot - Absolute repository root.
+ * @param profile - Shipped profile template name.
+ * @returns Bundle names and the roster to materialize.
+ * @throws When the profile has no shipped template, or a bundle does not resolve or declares no patch.
+ */
+export declare function profileRoster(repoRoot: string, profile: string): ProfileRoster;
+/**
+ * The home patch one shipped profile's image carries: every row `PLATFORM_ENTRY_CONFIG` names, with the config the
+ * template's bundle layers compose for it and the Worker's required fields over that config. A patch replaces a row's
+ * whole config, so the composed fields stay; the image carries the same bundle files read here.
+ * @param repoRoot - Absolute repository root.
+ * @param profile - Shipped profile template name.
+ * @returns Home patch rows; a row the composition lacks contributes none.
+ * @throws When the profile has no shipped template, or a bundle does not resolve or declares no patch.
+ */
+export declare function platformHomePatch(repoRoot: string, profile: string): PatchOptions[];
+/**
+ * The installation manifest the image anchors bundle resolution at.
+ * @param repoRoot - Absolute repository root.
+ * @returns The CLI package name and its manifest path.
+ */
+export declare function installationManifest(repoRoot: string): ImageInstallation;
 /**
- * Compose one profile through the real CLI dump path, leaving `!!js`
- * unevaluated. The dump runs against a throwaway Harness home, so the
- * profile's own layer is the freshly initialized empty patch file and the
- * machine's `$DSH_HOME` — its profile manifest with locally installed
- * bundles, and its patch files — would otherwise leak this machine's plugins
- * into the image and break the same-tree-same-bytes guarantee.
+ * Pack this repository's base image for one shipped profile.
  * @param repoRoot - Absolute repository root.
- * @param profile - Profile name to compose.
- * @returns The composed YAML.
+ * @param profile - Shipped profile template name.
+ * @param root - Virtual root; the runtime default when omitted.
+ * @returns The packed image and its lazy archives.
  */
-export declare function composeProfile(repoRoot: string, profile: string): string;
+export declare function packRepositoryImage(repoRoot: string, profile: string, root?: string): PackResult;
 /**
  * Config trees the CLI package declares for deployment images
  * (`dsh.configTrees` in its package.json): `path` is relative to the CLI

package/lib/types/rules.d.ts

@@ -33,7 +33,7 @@ export declare const EXCLUDE_WORKSPACE: readonly string[];
  */
 export declare const PAGE_ASSETS: readonly string[];
 /**
- * Image specifiers the worker assembly requires directly, beyond the composed
+ * Image specifiers the worker assembly requires directly, beyond the
  * roster: they are requested by worker-bundle code, so no image file
  * references them and the reachability sweep must seed them as roots. Keep in
  * step with the literal `require`/`resolve` calls in the runtime's

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-experimental-webworker-packer",
   "description": "Build-time packer for the browser runtime's base VFS image and ordered data-overlay archives",
-  "version": "0.2.1-alpha.3",
+  "version": "0.2.1-alpha.4",
   "publishConfig": {
     "access": "public"
   },
@@ -34,11 +34,11 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/cordis-plugin-include": "~1.0.10-alpha.2",
-    "@deepseek-ai/dsh-experimental-webworker-runtime": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-home-paths": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-format": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-format-catalog": "0.2.1-alpha.3",
-    "@deepseek-ai/dsh-session-format-v3-to-v4": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-app-boot": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-experimental-webworker-runtime": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-format": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-format-catalog": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session-format-v3-to-v4": "0.2.1-alpha.4",
     "js-yaml": "^4.3.2",
     "picomatch": "^4.0.7"
   },