[Bug] connection fails to start when a third-party plugin registers an HTTP channel: cannot get property 'webServer' without inject

[Nathjia]

Describe the bug

After upgrading from dsh-v0.1.3-alpha.1 to dsh-v0.1.3-alpha.2 (currently at c389f96bf3, merge #3713), booting dsh web fails when a third-party client plugin (dsh-ssh v0.3.0-pre, which registers its /dsh-ssh channel through ctx.connection.rpc.handle) tries to mount its channel:

Error: dsh: plugin tree failed to load: failed to apply loader entry ssh-web-channel (dsh-ssh/web): cannot get property "webServer" without inject
Error: cannot get property "webServer" without inject
    at Fiber.<anonymous> (packages/client/connection/src/rpc-host.ts:179:19)
    at Proxy.register (packages/client/connection/src/rpc-host.ts:178:18)
    at Object.handle (packages/client/connection/src/rpc-host.ts:82:42)
    at new apply (node_modules/dsh-ssh/src/web.ts:336:38)

Root cause

HostConnectionService.register / registerFetchRoute (packages/client/connection/src/rpc-host.ts:178-179) access owner.webServer.register(route) on the connection plugin's own context (owner = this.ctx), but connection's top-level inject list (packages/client/connection/src/index.ts:69) only declares ['credentials'] and does not declare webServer. With Cordis' strict service-access check (vendor/cordis/src/reflect.ts:144), reading an undeclared service on the plugin context throws and aborts the whole plugin-tree boot.

First-party plugins register routes through their own declared services, so only third-party plugins that register an HTTP channel via connection.rpc / connection.fetch hit this — dsh-ssh is the first one to expose the gap. dsh-v0.1.3-alpha.1 booted fine; the failure appeared after the alpha.2 upgrade.

Expected behavior

Either declare webServer in connection's top-level inject (it genuinely depends on the web server to mount channels), or wrap the owner.webServer.register(...) calls in register/registerFetchRoute with a local owner.inject(['webServer'], ...) so the dependency stays scoped.

Workaround (local)

--- a/packages/client/connection/src/index.ts
+++ b/packages/client/connection/src/index.ts
@@ -66,7 +66,7 @@
 /** Services required before providing Connection. */
-export const inject = ['credentials']
+export const inject = ['webServer', 'credentials']

Environment

• deepseek-harness: dsh-v0.1.3-alpha.2-133-gc389f96bf3 (HEAD c389f96bf3, 2026-09-08, merge An unset value in an MCP entry env kills the whole harness, and the error omits the key that caused it #3713)
  • git clean -fdx && pnpm install && pnpm run build all succeed; pnpm dsh web fails at plugin-tree boot
• OS: macOS 26.6.2 · Node: v24.19.0 · pnpm: 11.7.0
• profile: $DSH_HOME/profiles/web
• triggering plugin: dsh-ssh v0.3.0-pre (registers /dsh-ssh via ctx.connection.rpc.handle, lib/web.js ~:298)