@twinsearth/w2m-dsh-plugin 1.1.18 → 1.1.20

package/lib/client.js

@@ -1,640 +1,850 @@
-/**
- * DSH Web client half of `@twinsearth/w2m-dsh-plugin`: the composer's target-machine control.
- *
- * # What this file is
- *
- * This is the *shipped* client bundle, not compiled output: the package has no build step and no
- * dependencies, so the half the browser loads is written here in the exact module format the DSH
- * web shell's loader consumes (`window.__ModuleLoader__.load({ id, factory })`, a lazy CJS table
- * whose factory runs at materialization). `package.json` declares it with
- * `dsh.client: { platform: 'web' }` and `exports['./client'] = './lib/client.js'`, which is what the
- * host scans for. There is no second copy to keep in sync: this file **is** the source, and
- * `test/client-bundle.test.mjs` is where its entry shape is read.
- *
- * # A failed client entry is fatal, and silence is not a neutral failure
- *
- * Measured twice in production: when this entry's `apply` throws, the page does not degrade — the
- * shell audits every entry after activation and refuses to boot with
- * `web boot: 1 entry did not activate / @twinsearth/w2m-dsh-plugin: failed`, which in the desktop
- * app is forwarded to the main process and written as a `web-boot` crash: **the app does not start**.
- * The audit prints the entry's *name* and its fiber state and nothing else, so the cause has to be
- * carried by the failing code itself; {@link apply} therefore reports its own error to
- * `console.error`, which is the error-level renderer console the crash log already captures.
- *
- * The failure that cost those two outages was a single property read. Cordis resolves `ctx.<name>`
- * through the fiber's `inject` list: a service the fiber never declared **throws**
- * (`cannot get property "locale" without inject`) whether or not some plugin provides it, and every
- * name that *is* declared becomes a required dependency the entry waits for. Both halves of that rule
- * are load-bearing here — see {@link inject} for what this bundle declares, and how the optional
- * locale carrier is read instead.
- *
- * Two consequences, both deliberate:
- *
- *   * **No JSX and no bundler.** `React.createElement` keeps the file plain JavaScript a reviewer
- *     can read, and the module system's platform seed table already holds React (`react`,
- *     `react/jsx-runtime`, `react-dom`, Cordis and the shell's static UI libraries are frozen seeds
- *     for every dynamic bundle), so `require('react')` resolves without this package shipping or
- *     declaring anything.
- *   * **Only React is required.** `@deepseek-ai/dsh-client-ui-primitives` is *available* to a
- *     dynamic bundle — the shipped permission control next to this one uses its `Menu` — but a
- *     package that must stay dependency-free should not take a rendering dependency for one
- *     dropdown. The control is styled with the shell's own theme tokens instead, which is what
- *     makes it correct in both themes rather than "similar in one".
- *
- * # Where it sits
- *
- * `conversation.input.left` — `kind: list`, `scope: session`, `replaceRisk: none`. The shipped
- * permission control owns `conversation.input.permission` (`single`, `replaceRisk:
- * shadows-shipped-ui`) and is **not** touched: this entry is appended to the composer's left group,
- * so it renders to the right of the permission control and never competes with it for a seat.
- *
- * # What it shows
- *
- * The machine this session's work will be dispatched to, and — on click — the fleet the relay
- * currently holds. Liveness comes from the host plugin, never from this file: a machine is
- * selectable because the relay lists it as online, and one that is not listed that way is rendered
- * with its state and cannot be chosen. A selection is written to the host process, so it survives a
- * reload and is visible to `w2m_run`, which is where it actually means something.
- */
-
-window.__ModuleLoader__.load({
-  id: '@twinsearth/w2m-dsh-plugin',
-  factory: (require) => {
-    var module = { exports: {} };
-    var exports = module.exports;
-    Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-
-    const React = require('react');
-
-    // -------------------------------------------------------------------------------------------
-    // Wire
-    // -------------------------------------------------------------------------------------------
-    //
-    // Mirrors TARGET_ROUTE_PATH in src/plugin/fleet-target.mjs, `/api` prefix included: the host's
-    // Connection service mounts its exact-fetch-route registry under that channel and refuses any
-    // path that does not start with `/api/`. Plain same-origin `fetch` rather than a Remote method:
-    // the route is mounted inside the host's authentication fence, so the page's own cookie is the
-    // credential and there is no descriptor to keep in sync.
-    const ROUTE = '/api/w2m/target';
-
-    /**
-     * The locale namespace and its two dictionaries.
-     *
-     * Registered through `ctx.locale` when the composition provides it, exactly as the shipped
-     * permission control beside this one does; the Chinese dictionary is the fallback when it does
-     * not, because a missing localisation service is not a reason for an operator to lose the
-     * control. Only the *visible* strings are here. A refusal from the host is reported in the
-     * host's own words — it is a diagnostic naming a machine, a relay or an HTTP status, and
-     * translating it would put a second, drifting copy of that vocabulary in the browser.
-     */
-    const NS = 'w2m.target';
-    const DICT = {
-      zh: {
-        all: '全部机器',
-        machine: '机器',
-        local: '本机',
-        online: '在线',
-        noRoster: '无列表',
-        empty: '机器列表里没有机器',
-        costAll: '本次会话的派发会送到所有在线机器',
-        costOne: '本次会话的派发会送到 {name}',
-        unconfirmed: '（未确认在线）',
-        targetLabel: '目标机器：{name}',
-        unreachable: '无法连接插件',
-        routeMissing: '这个 Harness 没有提供插件目标路由',
-        fleetUnreadable: '机器列表读取失败',
-      },
-      en: {
-        all: 'All machines',
-        machine: 'Machine',
-        local: 'This machine',
-        online: 'online',
-        noRoster: 'no roster',
-        empty: 'the fleet lists no machines',
-        costAll: 'Work from this session goes to every online machine',
-        costOne: 'Work from this session goes to {name}',
-        unconfirmed: ' (not confirmed online)',
-        targetLabel: 'target machine: {name}',
-        unreachable: 'the plugin could not be reached',
-        routeMissing: 'this host does not serve the W2M target route',
-        fleetUnreadable: 'the fleet could not be read',
-      },
-    };
-
-    /**
-     * A translator over {@link DICT}, preferring the shell's locale service.
-     *
-     * `{name}` substitution is deliberately the only templating: these strings have one variable
-     * each, and a message format would be a dependency this package does not have.
-     *
-     * @param localeOf - the shell's locale service, or a function returning it (read at lookup time).
-     *   Passed in rather than read from `ctx` here: the service is optional, and reading an optional
-     *   service off the context is the one operation in this file that can kill the page (see
-     *   {@link readOptionalService}). A function is accepted because the service may arrive *after*
-     *   this entry activates — the shell's `bind()` is live, so a deferred read still localises.
-     * @returns {(key: string, values?: object) => string}
-     */
-    function makeTranslator(localeOf) {
-      const resolveLocale = () => (typeof localeOf === 'function' ? localeOf() : localeOf);
-      return (key, values) => {
-        const locale = resolveLocale();
-        const bound = typeof locale?.bind === 'function' ? locale.bind(NS) : null;
-        const template = bound === null
-          ? (DICT.zh[key] ?? DICT.en[key] ?? key)
-          : bound(key, values);
-        const text = typeof template === 'string' && template !== '' ? template : (DICT.en[key] ?? key);
-        if (values === undefined) return text;
-        return text.replace(/\{(\w+)\}/g, (match, name) => (values[name] === undefined ? match : String(values[name])));
-      };
-    }
-
-    /**
-     * Read a service the composition may or may not provide, without the inject requirement.
-     *
-     * `ctx.get(name)` is Cordis's inject-free lookup, and it is the only correct way to read an
-     * *optional* service from a plugin: `ctx[name]` throws for anything the fiber did not declare as
-     * a dependency, and declaring it would make the service *required* — an entry whose declared
-     * dependency never arrives never activates either, which is fatal in exactly the same way. So a
-     * carrier that must not be able to block the control (`locale`) is read here, and a service the
-     * control cannot work without (`slots`) is declared in {@link inject}.
-     *
-     * @param ctx - the client plugin context.
-     * @param name - the service name.
-     * @returns the service, or undefined when the composition has none (or this is not a Cordis
-     *   context at all, which is how `test/client-bundle.test.mjs` applies this bundle).
-     */
-    function readOptionalService(ctx, name) {
-      return typeof ctx?.get === 'function' ? ctx.get(name) : undefined;
-    }
-
-    /**
-     * Register {@link DICT} with the shell's locale service whenever that service exists.
-     *
-     * Two paths, one outcome. When the service is already up, the registration is an effect of this
-     * entry and goes away with it. When it is not up yet, the registration rides a **child fiber**
-     * (`ctx.inject`) that waits for `locale` without holding this entry back: declaring `locale` in
-     * {@link inject} instead would make it required, and a composition without a locale service
-     * would then report this entry as `pending` — which the shell's audit treats exactly like
-     * `failed`, i.e. the page does not boot. A missing localisation service must never cost an
-     * operator the control, and must never cost them the app.
-     *
-     * @param ctx - the client plugin context.
-     * @param locale - the shell's locale service, or undefined when the composition has none.
-     */
-    function registerDictionaries(ctx, locale) {
-      if (typeof locale?.register === 'function') {
-        ctx.effect(() => locale.register(NS, DICT), 'w2m: composer target control dictionaries');
-        return;
-      }
-      if (typeof ctx?.inject !== 'function') return;
-      ctx.inject(['locale'], (localeCtx) => {
-        localeCtx.effect(() => localeCtx.locale.register(NS, DICT), 'w2m: composer target control dictionaries');
-      });
-    }
-
-    /** One JSON call to the host half, folded into a value: a refusal is never an exception here. */
-    async function callHost(options) {
-      let response;
-      try {
-        response = await fetch(options.url, options.init);
-      } catch (error) {
-        return { ok: false, error: `the plugin could not be reached: ${error instanceof Error ? error.message : String(error)}`, status: 0 };
-      }
-      if (response.status === 404) {
-        return { ok: false, status: 404, error: 'this host does not serve the W2M target route' };
-      }
-      let body = null;
-      try {
-        body = await response.json();
-      } catch {
-        return { ok: false, status: response.status, error: `the plugin answered HTTP ${response.status} with a body that is not JSON` };
-      }
-      if (response.ok !== true) {
-        return { ok: false, status: response.status, error: typeof body?.error === 'string' ? body.error : `HTTP ${response.status}` };
-      }
-      return { ok: true, status: response.status, state: body };
-    }
-
-    const readState = (sessionId, signal) => callHost({
-      url: `${ROUTE}?session_id=${encodeURIComponent(sessionId)}`,
-      init: { method: 'GET', credentials: 'same-origin', headers: { accept: 'application/json' }, signal },
-    });
-
-    const writeSelection = (sessionId, machineId, machineName) => callHost({
-      url: ROUTE,
-      init: {
-        method: 'POST',
-        credentials: 'same-origin',
-        headers: { 'content-type': 'application/json', accept: 'application/json' },
-        body: JSON.stringify({ session_id: sessionId, machine_id: machineId, machine_name: machineName }),
-      },
-    });
-
-    const labelOf = (state, t) => state?.selected?.machine_id != null
-      ? (state.selected.name ?? state.selected.machine_id)
-      : t('all');
-
-    /** The one-line reason the list cannot be trusted, or null when it can. */
-    function fleetProblem(state, t) {
-      if (state === null || state === undefined) return null;
-      if (state.host?.detail_unavailable === true) return t('routeMissing');
-      if (state.fleet?.ok === true) return null;
-      return state.fleet?.error ?? t('fleetUnreadable');
-    }
-
-    // -------------------------------------------------------------------------------------------
-    // Styles
-    // -------------------------------------------------------------------------------------------
-    //
-    // Token colours only: `--dsw-*` is the shell's own theme surface, so the control follows the
-    // light/dark switch instead of inventing a palette that is wrong in one of them. The geometry
-    // (28px height, `--dsw-radius-sm`, 13px/500 label, 4px gap, 8px leading pad) is copied from the
-    // shipped permission trigger in the same row, and the status dot uses the theme's state colours:
-    // business blue for this machine, success green for a reachable peer, warn/error for the two
-    // states that are not "ready".
-    const TAG_ID = '@twinsearth/w2m-dsh-plugin/TargetSelect.css';
-    const CSS = [
-      '.w2mTarget_trigger{display:inline-flex;align-items:center;gap:4px;height:28px;max-width:220px;min-width:0;',
-      'padding:0 4px 0 8px;border:none;border-radius:var(--dsw-radius-sm);background:transparent;',
-      'color:var(--dsw-alias-label-secondary);font-size:13px;font-weight:500;line-height:20px;cursor:pointer;outline:none}',
-      '.w2mTarget_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
-      '.w2mTarget_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary))}',
-      '.w2mTarget_trigger:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}',
-      '.w2mTarget_dot{flex:none;width:8px;height:8px;border-radius:999px;background:var(--dsw-alias-state-idle-primary);',
-      'box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2)}',
-      '.w2mTarget_dot[data-state="local"]{background:var(--dsw-alias-state-business-primary)}',
-      '.w2mTarget_dot[data-state="online"]{background:var(--dsw-alias-state-success-primary)}',
-      '.w2mTarget_dot[data-state="stale"]{background:transparent;border:1px solid var(--dsw-alias-state-warn-primary)}',
-      '.w2mTarget_dot[data-state="none"]{background:transparent;border:1px solid var(--dsw-alias-label-caption)}',
-      '.w2mTarget_label{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
-      '.w2mTarget_chevron{flex:none;display:inline-flex;color:var(--dsw-alias-label-caption);transition:transform .12s}',
-      '.w2mTarget_chevron[data-open="true"]{transform:rotate(180deg)}',
-      '.w2mTarget_menu{position:fixed;z-index:60;box-sizing:border-box;min-width:200px;max-width:300px;',
-      'padding:4px;border-radius:var(--dsw-radius-lg);border:.5px solid var(--dsw-alias-border-l2);',
-      'background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);',
-      'font-size:13px;line-height:20px;color:var(--dsw-alias-label-primary)}',
-      '.w2mTarget_note{padding:6px 8px;color:var(--dsw-alias-label-tertiary);font-weight:400}',
-      '.w2mTarget_option{display:block;width:100%;box-sizing:border-box;padding:6px 8px;border:none;border-radius:var(--dsw-radius-sm);',
-      'background:transparent;color:inherit;font:inherit;text-align:left;cursor:pointer}',
-      '.w2mTarget_option:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
-      '.w2mTarget_option:disabled{cursor:default;color:var(--dsw-alias-label-dimmed)}',
-      '.w2mTarget_option[data-active="true"]{color:var(--dsw-alias-state-business-primary)}',
-      '.w2mTarget_row{display:flex;align-items:center;gap:8px}',
-      '.w2mTarget_name{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
-      '.w2mTarget_detail{margin-left:auto;flex:none;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:400}',
-      '.w2mTarget_option:disabled .w2mTarget_detail{color:var(--dsw-alias-label-caption)}',
-    ].join('');
-
-    /**
-     * Install the stylesheet once per document, and hand back a disposer for the plugin's lifetime.
-     *
-     * Idempotent by the tag id, not by a module flag: two plugin instances in one page (a reload
-     * that did not evict the old one, two compositions) must not produce two stylesheets, and an
-     * unload must take exactly the one this call created. When a tag is already present this is a
-     * no-op that returns nothing, because removing a tag this call did not add would be a
-     * disposer that breaks whichever instance owns it.
-     *
-     * @returns {(() => void)|null} Disposer, or null when the stylesheet was already installed.
-     */
-    function injectStyle(hostDocument) {
-      if (hostDocument === undefined || hostDocument === null) return null;
-      if (hostDocument.querySelector(`style[data-plugin-css="${TAG_ID}"]`) !== null) return null;
-      const tag = hostDocument.createElement('style');
-      tag.dataset.plugin = '@twinsearth/w2m-dsh-plugin';
-      tag.dataset.pluginCss = TAG_ID;
-      tag.textContent = CSS;
-      hostDocument.head.appendChild(tag);
-      return () => {
-        tag.remove();
-      };
-    }
-
-    const cls = (name) => `w2mTarget_${name}`;
-    const h = React.createElement;
-
-    /** The status dot: the colour is the machine's state, and the title says it in words. */
-    function StatusDot({ kind, title }) {
-      return h('span', { className: cls('dot'), 'data-state': kind, title, 'aria-hidden': 'true' });
-    }
-
-    /**
-     * This machine is `local` — the one whose composer this is — and the blue dot marks it; a
-     * reachable peer is green; anything else is drawn as an outline in the state's own colour so an
-     * offline row can never be mistaken for a live one.
-     */
-    function dotKind(machine) {
-      if (machine.online !== true) return machine.state === 'expired' ? 'none' : 'stale';
-      return machine.local === true ? 'local' : 'online';
-    }
-
-    /** The label the trigger shows before the host has answered: the configured fleet name. */
-    const provisionalLabel = (state) => state?.host?.local_machine_name ?? null;
-
-    /**
-     * `locked` is accepted for parity with the seat's other occupants and deliberately unused: the
-     * target is a choice about the *next* dispatch, which is legitimate to change while a turn runs.
-     * `t` arrives through the entry's inject face (see {@link apply}).
-     */
-    function TargetSelect({ sessionId, locked: _locked, t }) {
-      const [open, setOpen] = React.useState(false);
-      const [reloadSeq, setReloadSeq] = React.useState(0);
-      const [state, setState] = React.useState(null);
-      const [error, setError] = React.useState(null);
-      const [busy, setBusy] = React.useState(false);
-      const anchorRef = React.useRef(null);
-      const menuRef = React.useRef(null);
-      const [placement, setPlacement] = React.useState(null);
-
-      // The host half is the source of truth, so every read replaces the mirror rather than merging
-      // into it: a stale "online" must not outlive the answer that disproved it.
-      React.useEffect(() => {
-        if (typeof sessionId !== 'string' || sessionId === '') return undefined;
-        const controller = new AbortController();
-        readState(sessionId, controller.signal).then((result) => {
-          if (controller.signal.aborted) return;
-          if (result.ok) {
-            setState(result.state);
-            setError(null);
-          } else {
-            setError(result.error);
-          }
-        });
-        return () => controller.abort();
-      }, [sessionId, reloadSeq]);
-
-      // Opening the menu is a read: the roster and the selection are re-asked for every time, so a
-      // machine that went away while the menu was closed cannot be clicked as if it were live. The
-      // host caches its own relay read for a few seconds, so this is not a request storm.
-      React.useEffect(() => {
-        if (open) setReloadSeq((seq) => seq + 1);
-      }, [open]);
-
-      React.useEffect(() => {
-        if (!open) return undefined;
-        const reposition = () => {
-          const anchor = anchorRef.current;
-          if (anchor === null) return;
-          const rect = anchor.getBoundingClientRect();
-          const width = Math.min(300, Math.max(200, Math.round(rect.width) + 96));
-          const left = Math.max(8, Math.min(rect.left, window.innerWidth - width - 8));
-          // Above the composer by default — it is at the bottom of the window — and below it only
-          // when the space above is genuinely unusable.
-          const roomAbove = rect.top;
-          const maxHeight = Math.max(160, Math.min(320, roomAbove > 240 ? roomAbove - 16 : window.innerHeight - rect.bottom - 24));
-          setPlacement(roomAbove > 240
-            ? { left, width, maxHeight, bottom: window.innerHeight - rect.top + 6, top: 'auto' }
-            : { left, width, maxHeight, top: rect.bottom + 6, bottom: 'auto' });
-        };
-        const onKeyDown = (event) => {
-          if (event.key === 'Escape') {
-            setOpen(false);
-            anchorRef.current?.focus?.();
-          }
-        };
-        const onPointerDown = (event) => {
-          const target = event.target;
-          if (anchorRef.current?.contains(target) === true) return;
-          if (menuRef.current?.contains(target) === true) return;
-          setOpen(false);
-        };
-        reposition();
-        // `capture` matters: the composer's own editor listens on the document too, and Escape has
-        // to close this menu before anything else reads it.
-        document.addEventListener('keydown', onKeyDown, true);
-        document.addEventListener('pointerdown', onPointerDown, true);
-        window.addEventListener('resize', reposition);
-        window.addEventListener('scroll', reposition, true);
-        return () => {
-          document.removeEventListener('keydown', onKeyDown, true);
-          document.removeEventListener('pointerdown', onPointerDown, true);
-          window.removeEventListener('resize', reposition);
-          window.removeEventListener('scroll', reposition, true);
-        };
-      }, [open]);
-
-      const chosen = state?.selected?.machine_id ?? null;
-      const machines = Array.isArray(state?.machines) ? state.machines : [];
-      const problem = error ?? fleetProblem(state, t);
-      const disabled = typeof sessionId !== 'string' || sessionId === '';
-      const label = state === null ? (provisionalLabel(state) ?? t('machine')) : labelOf(state, t);
-      const selectedMachine = machines.find((machine) => machine.machine_id === chosen) ?? null;
-      const selectedOnline = state === null
-        ? null
-        : (selectedMachine !== null ? selectedMachine.online === true : (chosen === null ? null : state?.selected?.online ?? null));
-      const dot = chosen === null
-        ? 'none'
-        : (selectedOnline === true ? (selectedMachine?.local === true ? 'local' : 'online') : 'stale');
-      const title = problem ?? (chosen === null
-        ? t('costAll')
-        : `${t('costOne', { name: label })}${selectedOnline === true ? '' : t('unconfirmed')}`);
-
-      const choose = (machineId, machineName) => {
-        setOpen(false);
-        if (machineId === chosen) return;
-        setBusy(true);
-        writeSelection(sessionId, machineId, machineName).then((result) => {
-          setBusy(false);
-          if (result.ok) {
-            setState(result.state);
-            setError(null);
-            return;
-          }
-          // The write is refused for a reason the operator can act on (the machine went away, the
-          // fleet could not be read), so it is shown where they are looking rather than swallowed.
-          setError(result.error);
-          setReloadSeq((seq) => seq + 1);
-        });
-      };
-
-      const menu = open && placement !== null
-        ? h('div', {
-            className: cls('menu'),
-            role: 'listbox',
-            'aria-label': t('targetLabel', { name: label }),
-            ref: menuRef,
-            style: {
-              left: `${placement.left}px`,
-              top: placement.top === 'auto' ? 'auto' : `${placement.top}px`,
-              bottom: placement.bottom === undefined || placement.bottom === 'auto' ? 'auto' : `${placement.bottom}px`,
-              width: `${placement.width}px`,
-              maxHeight: `${placement.maxHeight}px`,
-              overflowY: 'auto',
-            },
-          }, [
-            h('button', {
-              key: '__all__',
-              type: 'button',
-              role: 'option',
-              className: cls('option'),
-              'data-active': chosen === null ? 'true' : 'false',
-              'aria-selected': chosen === null,
-              onClick: () => choose(null, null),
-              title: t('costAll'),
-            }, h('span', { className: cls('row') }, [
-              h(StatusDot, { key: 'dot', kind: 'none', title: t('all') }),
-              h('span', { key: 'name', className: cls('name') }, t('all')),
-              h('span', { key: 'detail', className: cls('detail') }, state?.fleet?.ok === true ? `${state.fleet.online} ${t('online')}` : '—'),
-            ])),
-            problem === null ? null : h('div', { key: '__problem__', className: cls('note'), role: 'status' }, problem),
-            machines.length === 0
-              ? h('div', { key: '__empty__', className: cls('note') }, problem === null ? t('empty') : t('noRoster'))
-              : machines.map((machine) => h('button', {
-                  key: machine.machine_id ?? machine.name ?? Math.random().toString(36).slice(2),
-                  type: 'button',
-                  role: 'option',
-                  className: cls('option'),
-                  'data-active': machine.machine_id !== null && machine.machine_id === chosen ? 'true' : 'false',
-                  'aria-selected': machine.machine_id !== null && machine.machine_id === chosen,
-                  disabled: machine.online !== true,
-                  title: machine.online === true
-                    ? `${machine.name ?? machine.machine_id} — ${machine.local === true ? t('local') : t('online')}`
-                    : `${machine.name ?? machine.machine_id} — ${machine.state}`,
-                  onClick: () => choose(machine.machine_id, machine.name),
-                }, h('span', { className: cls('row') }, [
-                  h(StatusDot, { key: 'dot', kind: dotKind(machine), title: machine.state }),
-                  h('span', { key: 'name', className: cls('name') }, machine.name ?? machine.machine_id ?? 'unnamed'),
-                  h('span', { key: 'detail', className: cls('detail') }, machine.local === true
-                    ? t('local')
-                    : (machine.online === true ? (machine.os ?? t('online')) : machine.state)),
-                ]))),
-          ])
-        : null;
-
-      return h(React.Fragment, null, [
-        h('button', {
-          key: 'trigger',
-          type: 'button',
-          ref: anchorRef,
-          className: cls('trigger'),
-          'aria-label': t('targetLabel', { name: label }),
-          'aria-haspopup': 'listbox',
-          'aria-expanded': open,
-          'aria-busy': busy,
-          title,
-          disabled,
-          onClick: () => setOpen((wasOpen) => !wasOpen),
-        }, [
-          h(StatusDot, { key: 'dot', kind: dot, title: title ?? '' }),
-          h('span', { key: 'label', className: cls('label') }, label),
-          h('span', { key: 'chevron', className: cls('chevron'), 'data-open': open ? 'true' : 'false', 'aria-hidden': 'true' },
-            h('svg', { width: 12, height: 12, viewBox: '0 0 12 12', fill: 'none' },
-              h('path', {
-                d: 'M3 4.5L6 7.5L9 4.5',
-                stroke: 'currentColor',
-                strokeWidth: 1.5,
-                strokeLinecap: 'round',
-                strokeLinejoin: 'round',
-              }))),
-        ]),
-        menu,
-      ]);
-    }
-
-    /**
-     * Client plugin body: install the stylesheet, register the dictionaries, take the seat.
-     *
-     * @param ctx - the client root context.
-     */
-    function apply(ctx) {
-      try {
-        mount(ctx);
-      } catch (error) {
-        // The audit that decides whether the app boots reports the entry's name and the word
-        // "failed" and nothing else, so this is where the cause has to be said out loud. The
-        // renderer console at error level is the channel the desktop crash log already carries
-        // (`--- renderer console (error level, oldest first) ---`), which makes this the one place a
-        // browser half can put its own diagnosis next to the failure it caused.
-        console.error(
-          '@twinsearth/w2m-dsh-plugin: the client entry failed to activate, so this page will not boot: ' +
-            `${error instanceof Error ? error.message : String(error)}`,
-          error,
-        );
-        // Deliberately rethrown. A swallowed failure would boot a page that looks healthy with no
-        // target control in it — the silent-half-arrival failure this package has already shipped
-        // once (v0.5.4) and refuses to ship again.
-        throw error;
-      }
-    }
-
-    /**
-     * The body of {@link apply}, wrapped so no failure can escape without a diagnostic.
-     *
-     * `slots.inject` (not a bare `register`) is what the slot's declaration requires of an entry
-     * from a package that does not own the seat: the parent declared `conversation.input.left`, and
-     * an entry may only register into a key it has announced. The returned `inject` factory is
-     * called per render position with that session's id, and its keys become this component's props
-     * — which is how the control knows which session's selection it is showing.
-     *
-     * The stylesheet is installed here rather than at module scope, so its lifetime is the plugin's:
-     * `ctx.effect` disposes it on unload, and nothing a bundle factory does at materialization can
-     * outlive the entry that materialized it.
-     *
-     * @param ctx - the client root context.
-     */
-    function mount(ctx) {
-      // `ctx.slots` is legal to read because {@link inject} declares it — and declaring it is also
-      // what makes this entry wait for the seat instead of racing it. The shape check is for callers
-      // that are not a Cordis fiber at all (`test/client-bundle.test.mjs`): a missing or foreign
-      // registry is a control that cannot be mounted, and a control that cannot be mounted must not
-      // be allowed to take the whole page down with it.
-      const slots = ctx?.slots;
-      if (typeof slots?.inject !== 'function' || typeof slots?.register !== 'function') {
-        console.error(
-          '@twinsearth/w2m-dsh-plugin: the client half found no slot registry on this context, so the ' +
-            'dispatch-target control is not mounted; the rest of the page is unaffected',
-        );
-        return;
-      }
-      const styleDisposer = injectStyle(typeof document === 'undefined' ? null : document);
-      if (styleDisposer !== null && typeof ctx.effect === 'function') {
-        ctx.effect(() => styleDisposer, 'w2m: composer target control styles');
-      }
-      // Dictionaries as early as the composition allows: a namespace registered after the UI has
-      // mounted is still picked up, and the service is optional, so nothing here may block.
-      const locale = readOptionalService(ctx, 'locale');
-      registerDictionaries(ctx, locale);
-      const t = makeTranslator(() => readOptionalService(ctx, 'locale'));
-      slots.inject('conversation.input.left', () => slots.register({
-        name: 'conversation.input.left',
-        id: 'w2m-target',
-        // After the shipped permission control and the plan control, which sit earlier in the
-        // composer row: the target is a per-session choice like them, and the row reads left to
-        // right as "attach, permissions, plan, where it runs".
-        order: 40,
-        label: 'dispatch target',
-        inject: (sessionId) => ({
-          sessionId,
-          t,
-        }),
-      }, TargetSelect));
-    }
-
-    /**
-     * Cordis services this entry depends on, read by the fiber that mounts this bundle.
-     *
-     * `slots` is the seat: the control is registered into `conversation.input.left` through the
-     * slot registry, and a fiber that cannot see `slots` has nowhere to register. Declaring it is
-     * not bookkeeping. Cordis resolves `ctx.<name>` against this list, so reading an undeclared
-     * service **throws** (`cannot get property "slots" without inject`) even when the service is
-     * provided — measured in production: this bundle shipped with `inject = []` while reading
-     * `ctx.locale` and `ctx.slots`, the first read threw, and the app refused to boot.
-     *
-     * `locale` is deliberately absent, and that is the other half of the same rule: **every**
-     * declared name is a required dependency, so an entry that declares a service the composition
-     * does not provide never reaches `active` either — the audit then reports it as
-     * `pending (waiting for service: locale)`, which is just as fatal. Optional carriers are read
-     * with {@link readOptionalService} instead, and waited for by a child fiber when waiting is
-     * useful ({@link registerDictionaries}). Keep those two decisions in step with the reads in
-     * {@link mount}: `test/client-bundle.test.mjs` mounts this bundle behind a context that throws
-     * on any undeclared service read, exactly as Cordis does.
-     */
-    const inject = ['slots'];
-
-    exports.apply = apply;
-    exports.inject = inject;
-    exports.TargetSelect = TargetSelect;
-    exports.injectStyle = injectStyle;
-    exports.makeTranslator = makeTranslator;
-    return module.exports;
-  },
-});
+/**
+ * DSH Web client half of `@twinsearth/w2m-dsh-plugin`: the composer's target-machine control.
+ *
+ * # What this file is
+ *
+ * This is the *shipped* client bundle, not compiled output: the package has no build step and no
+ * dependencies, so the half the browser loads is written here in the exact module format the DSH
+ * web shell's loader consumes (`window.__ModuleLoader__.load({ id, factory })`, a lazy CJS table
+ * whose factory runs at materialization). `package.json` declares it with
+ * `dsh.client: { platform: 'web' }` and `exports['./client'] = './lib/client.js'`, which is what the
+ * host scans for. There is no second copy to keep in sync: this file **is** the source, and
+ * `test/client-bundle.test.mjs` is where its entry shape is read.
+ *
+ * # A failed client entry is fatal, and silence is not a neutral failure
+ *
+ * Measured twice in production: when this entry's `apply` throws, the page does not degrade — the
+ * shell audits every entry after activation and refuses to boot with
+ * `web boot: 1 entry did not activate / @twinsearth/w2m-dsh-plugin: failed`, which in the desktop
+ * app is forwarded to the main process and written as a `web-boot` crash: **the app does not start**.
+ * The audit prints the entry's *name* and its fiber state and nothing else, so the cause has to be
+ * carried by the failing code itself; {@link apply} therefore reports its own error to
+ * `console.error`, which is the error-level renderer console the crash log already captures.
+ *
+ * The failure that cost those two outages was a single property read. Cordis resolves `ctx.<name>`
+ * through the fiber's `inject` list: a service the fiber never declared **throws**
+ * (`cannot get property "locale" without inject`) whether or not some plugin provides it, and every
+ * name that *is* declared becomes a required dependency the entry waits for. Both halves of that rule
+ * are load-bearing here — see {@link inject} for what this bundle declares, and how the optional
+ * locale carrier is read instead.
+ *
+ * Two consequences, both deliberate:
+ *
+ *   * **No JSX and no bundler.** `React.createElement` keeps the file plain JavaScript a reviewer
+ *     can read, and the module system's platform seed table already holds React (`react`,
+ *     `react/jsx-runtime`, `react-dom`, Cordis and the shell's static UI libraries are frozen seeds
+ *     for every dynamic bundle), so `require('react')` resolves without this package shipping or
+ *     declaring anything.
+ *   * **Only React is required.** `@deepseek-ai/dsh-client-ui-primitives` is *available* to a
+ *     dynamic bundle — the shipped permission control next to this one uses its `Menu` — but a
+ *     package that must stay dependency-free should not take a rendering dependency for one
+ *     dropdown. The control is styled with the shell's own theme tokens instead, which is what
+ *     makes it correct in both themes rather than "similar in one".
+ *
+ * # Where it sits
+ *
+ * `conversation.input.left` — `kind: list`, `scope: session`, `replaceRisk: none`. The shipped
+ * permission control owns `conversation.input.permission` (`single`, `replaceRisk:
+ * shadows-shipped-ui`) and is **not** touched: this entry is appended to the composer's left group,
+ * so it renders to the right of the permission control and never competes with it for a seat.
+ *
+ * # What it shows
+ *
+ * The machine this session's work will be dispatched to, and — on click — the fleet the relay
+ * currently holds. Liveness comes from the host plugin, never from this file: a machine is
+ * selectable because the relay lists it as online, and one that is not listed that way is rendered
+ * with its state and cannot be chosen. A selection is written to the host process, so it survives a
+ * reload and is visible to `w2m_run`, which is where it actually means something.
+ */
+
+window.__ModuleLoader__.load({
+  id: '@twinsearth/w2m-dsh-plugin',
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+    Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+    const React = require('react');
+
+    // -------------------------------------------------------------------------------------------
+    // Wire
+    // -------------------------------------------------------------------------------------------
+    //
+    // Mirrors TARGET_ROUTE_PATH in src/plugin/fleet-target.mjs, `/api` prefix included: the host's
+    // Connection service mounts its exact-fetch-route registry under that channel and refuses any
+    // path that does not start with `/api/`. Plain same-origin `fetch` rather than a Remote method:
+    // the route is mounted inside the host's authentication fence, so the page's own cookie is the
+    // credential and there is no descriptor to keep in sync.
+    const ROUTE = '/api/w2m/target';
+
+    /**
+     * The locale namespace and its two dictionaries.
+     *
+     * Registered through `ctx.locale` when the composition provides it, exactly as the shipped
+     * permission control beside this one does; the Chinese dictionary is the fallback when it does
+     * not, because a missing localisation service is not a reason for an operator to lose the
+     * control. Only the *visible* strings are here. A refusal from the host is reported in the
+     * host's own words — it is a diagnostic naming a machine, a relay or an HTTP status, and
+     * translating it would put a second, drifting copy of that vocabulary in the browser.
+     */
+    const NS = 'w2m.target';
+    const DICT = {
+      zh: {
+        all: '全部机器',
+        machine: '机器',
+        local: '本机',
+        online: '在线',
+        noRoster: '无列表',
+        empty: '机器列表里没有机器',
+        costAll: '本次会话的派发会送到所有在线机器',
+        costOne: '本次会话的派发会送到 {name}',
+        unconfirmed: '（未确认在线）',
+        targetLabel: '目标机器：{name}',
+        unreachable: '无法连接插件',
+        routeMissing: '这个 Harness 没有提供插件目标路由',
+        fleetUnreadable: '机器列表读取失败',
+      },
+      en: {
+        all: 'All machines',
+        machine: 'Machine',
+        local: 'This machine',
+        online: 'online',
+        noRoster: 'no roster',
+        empty: 'the fleet lists no machines',
+        costAll: 'Work from this session goes to every online machine',
+        costOne: 'Work from this session goes to {name}',
+        unconfirmed: ' (not confirmed online)',
+        targetLabel: 'target machine: {name}',
+        unreachable: 'the plugin could not be reached',
+        routeMissing: 'this host does not serve the W2M target route',
+        fleetUnreadable: 'the fleet could not be read',
+      },
+    };
+
+    /**
+     * A translator over {@link DICT}, preferring the shell's locale service.
+     *
+     * `{name}` substitution is deliberately the only templating: these strings have one variable
+     * each, and a message format would be a dependency this package does not have.
+     *
+     * @param localeOf - the shell's locale service, or a function returning it (read at lookup time).
+     *   Passed in rather than read from `ctx` here: the service is optional, and reading an optional
+     *   service off the context is the one operation in this file that can kill the page (see
+     *   {@link readOptionalService}). A function is accepted because the service may arrive *after*
+     *   this entry activates — the shell's `bind()` is live, so a deferred read still localises.
+     * @returns {(key: string, values?: object) => string}
+     */
+    function makeTranslator(localeOf) {
+      const resolveLocale = () => (typeof localeOf === 'function' ? localeOf() : localeOf);
+      return (key, values) => {
+        const locale = resolveLocale();
+        const bound = typeof locale?.bind === 'function' ? locale.bind(NS) : null;
+        const template = bound === null
+          ? (DICT.zh[key] ?? DICT.en[key] ?? key)
+          : bound(key, values);
+        const text = typeof template === 'string' && template !== '' ? template : (DICT.en[key] ?? key);
+        if (values === undefined) return text;
+        return text.replace(/\{(\w+)\}/g, (match, name) => (values[name] === undefined ? match : String(values[name])));
+      };
+    }
+
+    /**
+     * Read a service the composition may or may not provide, without the inject requirement.
+     *
+     * `ctx.get(name)` is Cordis's inject-free lookup, and it is the only correct way to read an
+     * *optional* service from a plugin: `ctx[name]` throws for anything the fiber did not declare as
+     * a dependency, and declaring it would make the service *required* — an entry whose declared
+     * dependency never arrives never activates either, which is fatal in exactly the same way. So a
+     * carrier that must not be able to block the control (`locale`) is read here, and a service the
+     * control cannot work without (`slots`) is declared in {@link inject}.
+     *
+     * @param ctx - the client plugin context.
+     * @param name - the service name.
+     * @returns the service, or undefined when the composition has none (or this is not a Cordis
+     *   context at all, which is how `test/client-bundle.test.mjs` applies this bundle).
+     */
+    function readOptionalService(ctx, name) {
+      return typeof ctx?.get === 'function' ? ctx.get(name) : undefined;
+    }
+
+    /**
+     * Register {@link DICT} with the shell's locale service whenever that service exists.
+     *
+     * Two paths, one outcome. When the service is already up, the registration is an effect of this
+     * entry and goes away with it. When it is not up yet, the registration rides a **child fiber**
+     * (`ctx.inject`) that waits for `locale` without holding this entry back: declaring `locale` in
+     * {@link inject} instead would make it required, and a composition without a locale service
+     * would then report this entry as `pending` — which the shell's audit treats exactly like
+     * `failed`, i.e. the page does not boot. A missing localisation service must never cost an
+     * operator the control, and must never cost them the app.
+     *
+     * @param ctx - the client plugin context.
+     * @param locale - the shell's locale service, or undefined when the composition has none.
+     */
+    function registerDictionaries(ctx, locale) {
+      if (typeof locale?.register === 'function') {
+        ctx.effect(() => locale.register(NS, DICT), 'w2m: composer target control dictionaries');
+        return;
+      }
+      if (typeof ctx?.inject !== 'function') return;
+      ctx.inject(['locale'], (localeCtx) => {
+        localeCtx.effect(() => localeCtx.locale.register(NS, DICT), 'w2m: composer target control dictionaries');
+      });
+    }
+
+    /** One JSON call to the host half, folded into a value: a refusal is never an exception here. */
+    async function callHost(options) {
+      let response;
+      try {
+        response = await fetch(options.url, options.init);
+      } catch (error) {
+        return { ok: false, error: `the plugin could not be reached: ${error instanceof Error ? error.message : String(error)}`, status: 0 };
+      }
+      if (response.status === 404) {
+        return { ok: false, status: 404, error: 'this host does not serve the W2M target route' };
+      }
+      let body = null;
+      try {
+        body = await response.json();
+      } catch {
+        return { ok: false, status: response.status, error: `the plugin answered HTTP ${response.status} with a body that is not JSON` };
+      }
+      if (response.ok !== true) {
+        return { ok: false, status: response.status, error: typeof body?.error === 'string' ? body.error : `HTTP ${response.status}` };
+      }
+      return { ok: true, status: response.status, state: body };
+    }
+
+    const readState = (sessionId, signal) => callHost({
+      url: `${ROUTE}?session_id=${encodeURIComponent(sessionId)}`,
+      init: { method: 'GET', credentials: 'same-origin', headers: { accept: 'application/json' }, signal },
+    });
+
+    const writeSelection = (sessionId, machineId, machineName) => callHost({
+      url: ROUTE,
+      init: {
+        method: 'POST',
+        credentials: 'same-origin',
+        headers: { 'content-type': 'application/json', accept: 'application/json' },
+        body: JSON.stringify({ session_id: sessionId, machine_id: machineId, machine_name: machineName }),
+      },
+    });
+
+    const labelOf = (state, t) => state?.selected?.machine_id != null
+      ? (state.selected.name ?? state.selected.machine_id)
+      : t('all');
+
+    /** The one-line reason the list cannot be trusted, or null when it can. */
+    function fleetProblem(state, t) {
+      if (state === null || state === undefined) return null;
+      if (state.host?.detail_unavailable === true) return t('routeMissing');
+      if (state.fleet?.ok === true) return null;
+      return state.fleet?.error ?? t('fleetUnreadable');
+    }
+
+    // -------------------------------------------------------------------------------------------
+    // Styles
+    // -------------------------------------------------------------------------------------------
+    //
+    // Token colours only: `--dsw-*` is the shell's own theme surface, so the control follows the
+    // light/dark switch instead of inventing a palette that is wrong in one of them. The geometry
+    // (28px height, `--dsw-radius-sm`, 13px/500 label, 4px gap, 8px leading pad) is copied from the
+    // shipped permission trigger in the same row, and the status dot uses the theme's state colours:
+    // business blue for this machine, success green for a reachable peer, warn/error for the two
+    // states that are not "ready".
+    const TAG_ID = '@twinsearth/w2m-dsh-plugin/TargetSelect.css';
+    const CSS = [
+      '.w2mTarget_trigger{display:inline-flex;align-items:center;gap:4px;height:28px;max-width:220px;min-width:0;',
+      'padding:0 4px 0 8px;border:none;border-radius:var(--dsw-radius-sm);background:transparent;',
+      'color:var(--dsw-alias-label-secondary);font-size:13px;font-weight:500;line-height:20px;cursor:pointer;outline:none}',
+      '.w2mTarget_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
+      '.w2mTarget_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary))}',
+      '.w2mTarget_trigger:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}',
+      '.w2mTarget_dot{flex:none;width:8px;height:8px;border-radius:999px;background:var(--dsw-alias-state-idle-primary);',
+      'box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2)}',
+      '.w2mTarget_dot[data-state="local"]{background:var(--dsw-alias-state-business-primary)}',
+      '.w2mTarget_dot[data-state="online"]{background:var(--dsw-alias-state-success-primary)}',
+      '.w2mTarget_dot[data-state="stale"]{background:transparent;border:1px solid var(--dsw-alias-state-warn-primary)}',
+      '.w2mTarget_dot[data-state="none"]{background:transparent;border:1px solid var(--dsw-alias-label-caption)}',
+      '.w2mTarget_label{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
+      '.w2mTarget_chevron{flex:none;display:inline-flex;color:var(--dsw-alias-label-caption);transition:transform .12s}',
+      '.w2mTarget_chevron[data-open="true"]{transform:rotate(180deg)}',
+      '.w2mTarget_menu{position:fixed;z-index:60;box-sizing:border-box;min-width:200px;max-width:300px;',
+      'padding:4px;border-radius:var(--dsw-radius-lg);border:.5px solid var(--dsw-alias-border-l2);',
+      'background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);',
+      'font-size:13px;line-height:20px;color:var(--dsw-alias-label-primary)}',
+      '.w2mTarget_note{padding:6px 8px;color:var(--dsw-alias-label-tertiary);font-weight:400}',
+      '.w2mTarget_option{display:block;width:100%;box-sizing:border-box;padding:6px 8px;border:none;border-radius:var(--dsw-radius-sm);',
+      'background:transparent;color:inherit;font:inherit;text-align:left;cursor:pointer}',
+      '.w2mTarget_option:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
+      '.w2mTarget_option:disabled{cursor:default;color:var(--dsw-alias-label-dimmed)}',
+      '.w2mTarget_option[data-active="true"]{color:var(--dsw-alias-state-business-primary)}',
+      '.w2mTarget_row{display:flex;align-items:center;gap:8px}',
+      '.w2mTarget_name{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
+      '.w2mTarget_detail{margin-left:auto;flex:none;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:400}',
+      '.w2mTarget_option:disabled .w2mTarget_detail{color:var(--dsw-alias-label-caption)}',
+      '.w2mChat{position:relative;display:inline-flex;align-items:center}',
+      '.w2mChat_trigger{display:inline-flex;align-items:center;gap:4px;height:28px;padding:0 8px;border:none;border-radius:var(--dsw-radius-sm);background:transparent;color:var(--dsw-alias-label-secondary);font-size:13px;font-weight:500;line-height:20px;cursor:pointer;outline:none}',
+      '.w2mChat_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
+      '.w2mChat_trigger:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}',
+      '.w2mChat_panel{position:fixed;right:16px;bottom:88px;z-index:60;display:flex;flex-direction:column;width:340px;max-height:420px;border-radius:var(--dsw-radius-lg);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);font-size:13px;line-height:20px;color:var(--dsw-alias-label-primary);overflow:hidden}',
+      '.w2mChat_head{display:flex;align-items:center;gap:8px;padding:8px 10px;border-bottom:.5px solid var(--dsw-alias-border-l2);font-weight:600}',
+      '.w2mChat_usage{margin-left:auto;font-weight:400;color:var(--dsw-alias-label-tertiary);font-size:11px}',
+      '.w2mChat_close{border:none;background:transparent;color:var(--dsw-alias-label-secondary);cursor:pointer;font-size:16px;line-height:16px;padding:0 2px}',
+      '.w2mChat_list{flex:1;overflow-y:auto;padding:8px 10px;display:flex;flex-direction:column;gap:8px;min-height:120px}',
+      '.w2mChat_empty{color:var(--dsw-alias-label-tertiary)}',
+      '.w2mChat_msg{display:flex;flex-direction:column;gap:2px}',
+      '.w2mChat_meta{color:var(--dsw-alias-label-tertiary);font-size:11px}',
+      '.w2mChat_text{white-space:pre-wrap;word-break:break-word}',
+        '.w2mChat_msg.is-session .w2mChat_text{color:var(--dsw-danger)}',         '.w2mChat_msg.is-chat .w2mChat_text{color:var(--dsw-success)}',         '.w2mChat_msg.is-remote .w2mChat_text{color:var(--dsw-text)}',         '.w2mChat_avatar{display:inline-flex;width:16px;height:16px;margin-right:5px;vertical-align:-3px}',
+      '.w2mChat_compose{display:flex;gap:8px;padding:8px 10px;border-top:.5px solid var(--dsw-alias-border-l2);align-items:flex-end}',
+      '.w2mChat_input{flex:1;resize:none;box-sizing:border-box;font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-2);border:.5px solid var(--dsw-alias-border-l2);border-radius:var(--dsw-radius-sm);padding:6px 8px;outline:none;min-height:38px;max-height:96px}',
+      '.w2mChat_send{flex:none;height:28px;padding:0 10px;border:none;border-radius:var(--dsw-radius-sm);background:var(--dsw-alias-state-business-primary);color:var(--dsw-alias-text-on-business);font:inherit;font-weight:500;cursor:pointer}',
+      '.w2mChat_send:disabled{opacity:.5;cursor:default}',
+      '.w2mChat_error{padding:0 10px 8px;color:var(--dsw-alias-state-error-primary);font-size:11px}',
+    ].join('');
+
+    /**
+     * Install the stylesheet once per document, and hand back a disposer for the plugin's lifetime.
+     *
+     * Idempotent by the tag id, not by a module flag: two plugin instances in one page (a reload
+     * that did not evict the old one, two compositions) must not produce two stylesheets, and an
+     * unload must take exactly the one this call created. When a tag is already present this is a
+     * no-op that returns nothing, because removing a tag this call did not add would be a
+     * disposer that breaks whichever instance owns it.
+     *
+     * @returns {(() => void)|null} Disposer, or null when the stylesheet was already installed.
+     */
+    function injectStyle(hostDocument) {
+      if (hostDocument === undefined || hostDocument === null) return null;
+      if (hostDocument.querySelector(`style[data-plugin-css="${TAG_ID}"]`) !== null) return null;
+      const tag = hostDocument.createElement('style');
+      tag.dataset.plugin = '@twinsearth/w2m-dsh-plugin';
+      tag.dataset.pluginCss = TAG_ID;
+      tag.textContent = CSS;
+      hostDocument.head.appendChild(tag);
+      return () => {
+        tag.remove();
+      };
+    }
+
+    const cls = (name) => `w2mTarget_${name}`;
+    const h = React.createElement;
+
+    /** The status dot: the colour is the machine's state, and the title says it in words. */
+    function StatusDot({ kind, title }) {
+      return h('span', { className: cls('dot'), 'data-state': kind, title, 'aria-hidden': 'true' });
+    }
+
+    /**
+     * This machine is `local` — the one whose composer this is — and the blue dot marks it; a
+     * reachable peer is green; anything else is drawn as an outline in the state's own colour so an
+     * offline row can never be mistaken for a live one.
+     */
+    function dotKind(machine) {
+      if (machine.online !== true) return machine.state === 'expired' ? 'none' : 'stale';
+      return machine.local === true ? 'local' : 'online';
+    }
+
+    /** The label the trigger shows before the host has answered: the configured fleet name. */
+    const provisionalLabel = (state) => state?.host?.local_machine_name ?? null;
+
+    /**
+     * `locked` is accepted for parity with the seat's other occupants and deliberately unused: the
+     * target is a choice about the *next* dispatch, which is legitimate to change while a turn runs.
+     * `t` arrives through the entry's inject face (see {@link apply}).
+     */
+    function TargetSelect({ sessionId, locked: _locked, t }) {
+      const [open, setOpen] = React.useState(false);
+      const [reloadSeq, setReloadSeq] = React.useState(0);
+      const [state, setState] = React.useState(null);
+      const [error, setError] = React.useState(null);
+      const [busy, setBusy] = React.useState(false);
+      const anchorRef = React.useRef(null);
+      const menuRef = React.useRef(null);
+      const [placement, setPlacement] = React.useState(null);
+
+      // The host half is the source of truth, so every read replaces the mirror rather than merging
+      // into it: a stale "online" must not outlive the answer that disproved it.
+      React.useEffect(() => {
+        if (typeof sessionId !== 'string' || sessionId === '') return undefined;
+        const controller = new AbortController();
+        readState(sessionId, controller.signal).then((result) => {
+          if (controller.signal.aborted) return;
+          if (result.ok) {
+            setState(result.state);
+            setError(null);
+          } else {
+            setError(result.error);
+          }
+        });
+        return () => controller.abort();
+      }, [sessionId, reloadSeq]);
+
+      // Opening the menu is a read: the roster and the selection are re-asked for every time, so a
+      // machine that went away while the menu was closed cannot be clicked as if it were live. The
+      // host caches its own relay read for a few seconds, so this is not a request storm.
+      React.useEffect(() => {
+        if (open) setReloadSeq((seq) => seq + 1);
+      }, [open]);
+
+      React.useEffect(() => {
+        if (!open) return undefined;
+        const reposition = () => {
+          const anchor = anchorRef.current;
+          if (anchor === null) return;
+          const rect = anchor.getBoundingClientRect();
+          const width = Math.min(300, Math.max(200, Math.round(rect.width) + 96));
+          const left = Math.max(8, Math.min(rect.left, window.innerWidth - width - 8));
+          // Above the composer by default — it is at the bottom of the window — and below it only
+          // when the space above is genuinely unusable.
+          const roomAbove = rect.top;
+          const maxHeight = Math.max(160, Math.min(320, roomAbove > 240 ? roomAbove - 16 : window.innerHeight - rect.bottom - 24));
+          setPlacement(roomAbove > 240
+            ? { left, width, maxHeight, bottom: window.innerHeight - rect.top + 6, top: 'auto' }
+            : { left, width, maxHeight, top: rect.bottom + 6, bottom: 'auto' });
+        };
+        const onKeyDown = (event) => {
+          if (event.key === 'Escape') {
+            setOpen(false);
+            anchorRef.current?.focus?.();
+          }
+        };
+        const onPointerDown = (event) => {
+          const target = event.target;
+          if (anchorRef.current?.contains(target) === true) return;
+          if (menuRef.current?.contains(target) === true) return;
+          setOpen(false);
+        };
+        reposition();
+        // `capture` matters: the composer's own editor listens on the document too, and Escape has
+        // to close this menu before anything else reads it.
+        document.addEventListener('keydown', onKeyDown, true);
+        document.addEventListener('pointerdown', onPointerDown, true);
+        window.addEventListener('resize', reposition);
+        window.addEventListener('scroll', reposition, true);
+        return () => {
+          document.removeEventListener('keydown', onKeyDown, true);
+          document.removeEventListener('pointerdown', onPointerDown, true);
+          window.removeEventListener('resize', reposition);
+          window.removeEventListener('scroll', reposition, true);
+        };
+      }, [open]);
+
+      const chosen = state?.selected?.machine_id ?? null;
+      const machines = Array.isArray(state?.machines) ? state.machines : [];
+      const problem = error ?? fleetProblem(state, t);
+      const disabled = typeof sessionId !== 'string' || sessionId === '';
+      const label = state === null ? (provisionalLabel(state) ?? t('machine')) : labelOf(state, t);
+      const selectedMachine = machines.find((machine) => machine.machine_id === chosen) ?? null;
+      const selectedOnline = state === null
+        ? null
+        : (selectedMachine !== null ? selectedMachine.online === true : (chosen === null ? null : state?.selected?.online ?? null));
+      const dot = chosen === null
+        ? 'none'
+        : (selectedOnline === true ? (selectedMachine?.local === true ? 'local' : 'online') : 'stale');
+      const title = problem ?? (chosen === null
+        ? t('costAll')
+        : `${t('costOne', { name: label })}${selectedOnline === true ? '' : t('unconfirmed')}`);
+
+      const choose = (machineId, machineName) => {
+        setOpen(false);
+        if (machineId === chosen) return;
+        setBusy(true);
+        writeSelection(sessionId, machineId, machineName).then((result) => {
+          setBusy(false);
+          if (result.ok) {
+            setState(result.state);
+            setError(null);
+            return;
+          }
+          // The write is refused for a reason the operator can act on (the machine went away, the
+          // fleet could not be read), so it is shown where they are looking rather than swallowed.
+          setError(result.error);
+          setReloadSeq((seq) => seq + 1);
+        });
+      };
+
+      const menu = open && placement !== null
+        ? h('div', {
+            className: cls('menu'),
+            role: 'listbox',
+            'aria-label': t('targetLabel', { name: label }),
+            ref: menuRef,
+            style: {
+              left: `${placement.left}px`,
+              top: placement.top === 'auto' ? 'auto' : `${placement.top}px`,
+              bottom: placement.bottom === undefined || placement.bottom === 'auto' ? 'auto' : `${placement.bottom}px`,
+              width: `${placement.width}px`,
+              maxHeight: `${placement.maxHeight}px`,
+              overflowY: 'auto',
+            },
+          }, [
+            h('button', {
+              key: '__all__',
+              type: 'button',
+              role: 'option',
+              className: cls('option'),
+              'data-active': chosen === null ? 'true' : 'false',
+              'aria-selected': chosen === null,
+              onClick: () => choose(null, null),
+              title: t('costAll'),
+            }, h('span', { className: cls('row') }, [
+              h(StatusDot, { key: 'dot', kind: 'none', title: t('all') }),
+              h('span', { key: 'name', className: cls('name') }, t('all')),
+              h('span', { key: 'detail', className: cls('detail') }, state?.fleet?.ok === true ? `${state.fleet.online} ${t('online')}` : '—'),
+            ])),
+            problem === null ? null : h('div', { key: '__problem__', className: cls('note'), role: 'status' }, problem),
+            machines.length === 0
+              ? h('div', { key: '__empty__', className: cls('note') }, problem === null ? t('empty') : t('noRoster'))
+              : machines.map((machine) => h('button', {
+                  key: machine.machine_id ?? machine.name ?? Math.random().toString(36).slice(2),
+                  type: 'button',
+                  role: 'option',
+                  className: cls('option'),
+                  'data-active': machine.machine_id !== null && machine.machine_id === chosen ? 'true' : 'false',
+                  'aria-selected': machine.machine_id !== null && machine.machine_id === chosen,
+                  disabled: machine.online !== true,
+                  title: machine.online === true
+                    ? `${machine.name ?? machine.machine_id} — ${machine.local === true ? t('local') : t('online')}`
+                    : `${machine.name ?? machine.machine_id} — ${machine.state}`,
+                  onClick: () => choose(machine.machine_id, machine.name),
+                }, h('span', { className: cls('row') }, [
+                  h(StatusDot, { key: 'dot', kind: dotKind(machine), title: machine.state }),
+                  h('span', { key: 'name', className: cls('name') }, machine.name ?? machine.machine_id ?? 'unnamed'),
+                  h('span', { key: 'detail', className: cls('detail') }, machine.local === true
+                    ? t('local')
+                    : (machine.online === true ? (machine.os ?? t('online')) : machine.state)),
+                ]))),
+          ])
+        : null;
+
+      return h(React.Fragment, null, [
+        h('button', {
+          key: 'trigger',
+          type: 'button',
+          ref: anchorRef,
+          className: cls('trigger'),
+          'aria-label': t('targetLabel', { name: label }),
+          'aria-haspopup': 'listbox',
+          'aria-expanded': open,
+          'aria-busy': busy,
+          title,
+          disabled,
+          onClick: () => setOpen((wasOpen) => !wasOpen),
+        }, [
+          h(StatusDot, { key: 'dot', kind: dot, title: title ?? '' }),
+          h('span', { key: 'label', className: cls('label') }, label),
+          h('span', { key: 'chevron', className: cls('chevron'), 'data-open': open ? 'true' : 'false', 'aria-hidden': 'true' },
+            h('svg', { width: 12, height: 12, viewBox: '0 0 12 12', fill: 'none' },
+              h('path', {
+                d: 'M3 4.5L6 7.5L9 4.5',
+                stroke: 'currentColor',
+                strokeWidth: 1.5,
+                strokeLinecap: 'round',
+                strokeLinejoin: 'round',
+              }))),
+        ]),
+        menu,
+      ]);
+    }
+
+    // -------------------------------------------------------------------------------------------
+    // Fleet chat panel (v1.1.18 addition: the missing browser half of `w2m_chat`)
+    // -------------------------------------------------------------------------------------------
+    //
+    // v1.1.17 shipped fleet chat as a tool only — its own CHANGELOG records "no client UI panel
+    // beyond the generic tool card". This is that panel: a session-scoped broadcast board the
+    // operator and the agent share. Every read and write goes through the host route
+    // `/api/w2m/chat` (host-side `fleet-chat-route.mjs`), so the device token stays in the host
+    // process and this file never holds a credential.
+    const CHAT_ROUTE = '/api/w2m/chat';
+
+    /** One JSON call to the host chat route; a refusal is a value, not an exception. */
+    async function chatCall(options) {
+      let response;
+      try {
+        response = await fetch(options.url, options.init);
+      } catch (error) {
+        return { ok: false, error: `the plugin could not be reached: ${error instanceof Error ? error.message : String(error)}` };
+      }
+      let body = null;
+      try {
+        body = await response.json();
+      } catch {
+        return { ok: false, error: `the plugin answered HTTP ${response.status} with a body that is not JSON` };
+      }
+      if (response.status === 404) return { ok: false, error: 'this host does not serve the W2M chat route' };
+      if (response.ok !== true || body?.ok === false) {
+        return { ok: false, error: typeof body?.error === 'string' ? body.error : `HTTP ${response.status}` };
+      }
+      return { ok: true, state: body };
+    }
+
+    /**
+     * The fleet-chat control: opens a panel with the session's messages, a compose box and the
+     * relay's current usage. The text stays on the relay; this component keeps only the last view.
+     */
+    const AVATAR_PALETTE = ['#4c6ef5', '#12b886', '#f59f00', '#e8590c', '#ae3ec9', '#1098ad', '#d6336c', '#5c940d'];
+
+    /** A machine keeps its colour: the index comes from its id, not from the order of the list. */
+    function avatarColor(machineId) {
+      var h = 0;
+      var s = String(machineId == null ? '' : machineId);
+      for (var i = 0; i < s.length; i += 1) h = (h * 31 + s.charCodeAt(i)) >>> 0;
+      return AVATAR_PALETTE[h % AVATAR_PALETTE.length];
+    }
+
+    /** The DeepSeek whale, filled with the machine colour. */
+    function WhaleAvatar({ machineId }) {
+      return h('span', { className: 'w2mChat_avatar', style: { color: avatarColor(machineId) }, 'aria-hidden': 'true' },
+        h('svg', { viewBox: '0 0 24 24', width: 16, height: 16 },
+          h('path', { fill: 'currentColor', d: 'M2 13c2.2-3.4 5.4-5 9-5 3.1 0 5.6 1.2 7.2 3.2h2.3l-1.6-2.4 1.6.9L22 6.9l.6 3.4 1.4.8-1.4.8-.6 3.4-1.5-2.8-1.6.9 1.6-2.4h-2.2C16.6 8.9 13.9 7.6 11 7.6 6.6 7.6 3.3 9.6 1 13h1Z' })));
+    }
+
+    /** session = this machine typed it into DSH; chat = typed here; remote = another machine. */
+    function messageKind(message, localMachineId) {
+      if (localMachineId == null || message == null || message.machine_id !== localMachineId) return 'remote';
+      return message.origin === 'session' ? 'session' : 'chat';
+    }
+
+    function FleetChat({ sessionId }) {
+      const [open, setOpen] = React.useState(false);
+      const [messages, setMessages] = React.useState([]);
+      const [usage, setUsage] = React.useState(null);
+      const [text, setText] = React.useState('');
+      const [error, setError] = React.useState(null);
+      const [busy, setBusy] = React.useState(false);
+      const [localMachineId, setLocalMachineId] = React.useState(null);
+
+      const load = React.useCallback(async (signal) => {
+        if (typeof sessionId !== 'string' || sessionId === '') return;
+        const result = await chatCall({
+          url: `${CHAT_ROUTE}?session_id=${encodeURIComponent(sessionId)}&limit=50`,
+          init: { method: 'GET', credentials: 'same-origin', headers: { accept: 'application/json' }, signal },
+        });
+        if (result.ok) {
+          setMessages(Array.isArray(result.state.messages) ? result.state.messages : []);
+        setLocalMachineId(typeof result.state.local_machine_id === 'string' ? result.state.local_machine_id : null);
+          setUsage(result.state.usage ?? null);
+          setError(null);
+        } else {
+          setError(result.error);
+        }
+      }, [sessionId]);
+
+      React.useEffect(() => {
+        if (!open) return undefined;
+        const controller = new AbortController();
+        load(controller.signal);
+        const timer = setInterval(() => load(controller.signal), 3000);
+        return () => {
+          controller.abort();
+          clearInterval(timer);
+        };
+      }, [open, load]);
+
+      const send = React.useCallback(async () => {
+        const value = text.trim();
+        if (value === '' || busy) return undefined;
+        setBusy(true);
+        const result = await chatCall({
+          url: CHAT_ROUTE,
+          init: {
+            method: 'POST',
+            credentials: 'same-origin',
+            headers: { 'content-type': 'application/json', accept: 'application/json' },
+            body: JSON.stringify({ session_id: sessionId, text: value }),
+          },
+        });
+        setBusy(false);
+        if (result.ok) {
+          setText('');
+          await load();
+        } else {
+          setError(result.error);
+        }
+        return undefined;
+      }, [busy, load, sessionId, text]);
+
+      const disabled = typeof sessionId !== 'string' || sessionId === '';
+      const usageText = usage === null ? null : `${Math.round((usage.used_24h_bytes ?? 0) / 1024)} KiB/24h · ${usage.messages ?? 0} 条`;
+      const machineLabel = (message) => {
+        const id = typeof message?.machine_id === 'string' ? message.machine_id : '?';
+        return id.length > 12 ? `${id.slice(0, 8)}…` : id;
+      };
+      const timeLabel = (message) => (Number.isFinite(message?.at_ms) ? new Date(message.at_ms).toLocaleTimeString() : '');
+
+      return h('span', { className: 'w2mChat' },
+        h('button', {
+          type: 'button',
+          className: 'w2mChat_trigger',
+          title: '编队聊天（本会话广播）',
+          'aria-expanded': open,
+          disabled,
+          onClick: () => setOpen((value) => !value),
+        }, '💬', h('span', { className: 'w2mChat_label' }, '编队聊天')),
+        open
+          ? h('div', { className: 'w2mChat_panel', role: 'dialog', 'aria-label': '编队聊天' },
+              h('div', { className: 'w2mChat_head' },
+                h('span', null, '编队聊天'),
+                usageText === null ? null : h('span', { className: 'w2mChat_usage' }, usageText),
+                h('button', { type: 'button', className: 'w2mChat_close', title: '关闭', onClick: () => setOpen(false) }, '×')),
+              h('div', { className: 'w2mChat_list' },
+                error !== null ? h('div', { className: 'w2mChat_error' }, error) : null,
+                messages.length === 0
+                  ? (error === null ? h('div', { className: 'w2mChat_empty' }, '本会话还没有消息') : null)
+                  : messages.map((message) => {
+                      var kind = messageKind(message, localMachineId);
+                      return h('div', { key: message?.message_id ?? `${message?.machine_id}:${message?.at_ms}`, className: 'w2mChat_msg is-' + kind },
+                        h('div', { className: 'w2mChat_meta' }, h(WhaleAvatar, { machineId: message?.machine_id }), `${machineLabel(message)} · ${timeLabel(message)}`, kind === 'session' ? ' · 来自会话' : ''),
+                        h('div', { className: 'w2mChat_text' }, message?.text ?? ''));
+                    })),
+
+
+              h('div', { className: 'w2mChat_compose' },
+                h('textarea', {
+                  className: 'w2mChat_input',
+                  value: text,
+                  rows: 2,
+                  placeholder: '说点什么，发给本会话的机器…',
+                  disabled: busy,
+                  onChange: (event) => setText(event.target.value),
+                  onKeyDown: (event) => {
+                    if (event.key === 'Enter' && event.shiftKey !== true) {
+                      event.preventDefault();
+                      send();
+                    }
+                  },
+                }),
+                h('button', { type: 'button', className: 'w2mChat_send', disabled: busy || text.trim() === '', onClick: send }, busy ? '发送中…' : '发送')))
+          : null);
+    }
+
+    /**
+     * Client plugin body: install the stylesheet, register the dictionaries, take the seat.
+     *
+     * @param ctx - the client root context.
+     */
+    function apply(ctx) {
+      try {
+        mount(ctx);
+      } catch (error) {
+        // The audit that decides whether the app boots reports the entry's name and the word
+        // "failed" and nothing else, so this is where the cause has to be said out loud. The
+        // renderer console at error level is the channel the desktop crash log already carries
+        // (`--- renderer console (error level, oldest first) ---`), which makes this the one place a
+        // browser half can put its own diagnosis next to the failure it caused.
+        console.error(
+          '@twinsearth/w2m-dsh-plugin: the client entry failed to activate, so this page will not boot: ' +
+            `${error instanceof Error ? error.message : String(error)}`,
+          error,
+        );
+        // Deliberately rethrown. A swallowed failure would boot a page that looks healthy with no
+        // target control in it — the silent-half-arrival failure this package has already shipped
+        // once (v0.5.4) and refuses to ship again.
+        throw error;
+      }
+    }
+
+    /**
+     * The body of {@link apply}, wrapped so no failure can escape without a diagnostic.
+     *
+     * `slots.inject` (not a bare `register`) is what the slot's declaration requires of an entry
+     * from a package that does not own the seat: the parent declared `conversation.input.left`, and
+     * an entry may only register into a key it has announced. The returned `inject` factory is
+     * called per render position with that session's id, and its keys become this component's props
+     * — which is how the control knows which session's selection it is showing.
+     *
+     * The stylesheet is installed here rather than at module scope, so its lifetime is the plugin's:
+     * `ctx.effect` disposes it on unload, and nothing a bundle factory does at materialization can
+     * outlive the entry that materialized it.
+     *
+     * @param ctx - the client root context.
+     */
+    function mount(ctx) {
+      // `ctx.slots` is legal to read because {@link inject} declares it — and declaring it is also
+      // what makes this entry wait for the seat instead of racing it. The shape check is for callers
+      // that are not a Cordis fiber at all (`test/client-bundle.test.mjs`): a missing or foreign
+      // registry is a control that cannot be mounted, and a control that cannot be mounted must not
+      // be allowed to take the whole page down with it.
+      const slots = ctx?.slots;
+      if (typeof slots?.inject !== 'function' || typeof slots?.register !== 'function') {
+        console.error(
+          '@twinsearth/w2m-dsh-plugin: the client half found no slot registry on this context, so the ' +
+            'dispatch-target control is not mounted; the rest of the page is unaffected',
+        );
+        return;
+      }
+      const styleDisposer = injectStyle(typeof document === 'undefined' ? null : document);
+      if (styleDisposer !== null && typeof ctx.effect === 'function') {
+        ctx.effect(() => styleDisposer, 'w2m: composer target control styles');
+      }
+      // Dictionaries as early as the composition allows: a namespace registered after the UI has
+      // mounted is still picked up, and the service is optional, so nothing here may block.
+      const locale = readOptionalService(ctx, 'locale');
+      registerDictionaries(ctx, locale);
+      const t = makeTranslator(() => readOptionalService(ctx, 'locale'));
+      slots.inject('conversation.input.left', () => slots.register({
+        name: 'conversation.input.left',
+        id: 'w2m-target',
+        // After the shipped permission control and the plan control, which sit earlier in the
+        // composer row: the target is a per-session choice like them, and the row reads left to
+        // right as "attach, permissions, plan, where it runs".
+        order: 40,
+        label: 'dispatch target',
+        inject: (sessionId) => ({
+          sessionId,
+          t,
+        }),
+      }, TargetSelect));
+
+      // The fleet-chat panel: the same session-scoped seat, one slot after the target control.
+      // Wrapped in its own try/catch on purpose — the target control is the primary half of this
+      // bundle, and a chat panel that cannot mount must not take the page (or the app) down with it.
+      try {
+        slots.inject('conversation.input.left', () => slots.register({
+          name: 'conversation.input.left',
+          id: 'w2m-chat',
+          order: 41,
+          label: 'fleet chat',
+          inject: (sessionId) => ({ sessionId }),
+        }, FleetChat));
+      } catch (error) {
+        console.error(
+          '@twinsearth/w2m-dsh-plugin: the fleet chat panel was not mounted; the rest of the page is unaffected',
+          error,
+        );
+      }
+    }
+
+    /**
+     * Cordis services this entry depends on, read by the fiber that mounts this bundle.
+     *
+     * `slots` is the seat: the control is registered into `conversation.input.left` through the
+     * slot registry, and a fiber that cannot see `slots` has nowhere to register. Declaring it is
+     * not bookkeeping. Cordis resolves `ctx.<name>` against this list, so reading an undeclared
+     * service **throws** (`cannot get property "slots" without inject`) even when the service is
+     * provided — measured in production: this bundle shipped with `inject = []` while reading
+     * `ctx.locale` and `ctx.slots`, the first read threw, and the app refused to boot.
+     *
+     * `locale` is deliberately absent, and that is the other half of the same rule: **every**
+     * declared name is a required dependency, so an entry that declares a service the composition
+     * does not provide never reaches `active` either — the audit then reports it as
+     * `pending (waiting for service: locale)`, which is just as fatal. Optional carriers are read
+     * with {@link readOptionalService} instead, and waited for by a child fiber when waiting is
+     * useful ({@link registerDictionaries}). Keep those two decisions in step with the reads in
+     * {@link mount}: `test/client-bundle.test.mjs` mounts this bundle behind a context that throws
+     * on any undeclared service read, exactly as Cordis does.
+     */
+    const inject = ['slots'];
+
+    exports.apply = apply;
+    exports.inject = inject;
+    exports.TargetSelect = TargetSelect;
+    exports.FleetChat = FleetChat;
+    exports.injectStyle = injectStyle;
+    exports.makeTranslator = makeTranslator;
+    return module.exports;
+  },
+});