@linxin666/dsh-client-ui-task-board 0.1.18 → 0.1.20

package/lib/index.js

@@ -1,5 +1,46 @@
 import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import z from "schemastery";
+//#region src/mount-once.ts
+/**
+* Host single-instance guard shared by the plugin family. The family bundle
+* (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+* the loader accepts a standalone install of the same package side by side;
+* without this guard the second instance would still re-register the same
+* webserver routes, tools, settings namespaces, and system-prompt sections
+* and fail the boot. mountOnce makes the second host apply a no-op for the
+* lifetime of the first instance (the browser half is already deduped by
+* package name in the client module host).
+*
+* The registry rides a global symbol so two module instances of the same
+* package (npm copy vs repository link) still share one verdict. cordis
+* `ctx.effect` runs its callback immediately and treats the callback's
+* return value as the fiber disposer, so the unmarker is returned, not run.
+*/
+const MOUNTED = Symbol.for("dsh-web-ui.mounted-plugins");
+function mountedSet() {
+	const registry = globalThis;
+	return registry[MOUNTED] ??= /* @__PURE__ */ new Set();
+}
+/**
+* Wrap a cordis plugin apply so the package runs at most once per process.
+* The first mount registers normally and unmarks when its fiber disposes;
+* any later mount of the same package name is a no-op.
+* @param packageName - npm package identity shared by every install source.
+* @param fn - the original plugin apply.
+* @returns an apply of the same shape.
+*/
+function mountOnce(packageName, fn) {
+	return ((...args) => {
+		const mounted = mountedSet();
+		if (mounted.has(packageName)) return;
+		mounted.add(packageName);
+		args[0]?.effect?.(() => () => {
+			mounted.delete(packageName);
+		});
+		return fn(...args);
+	});
+}
+//#endregion
 //#region src/index.ts
 /** Order of the announcement section within the tool-guidance band. */
 const SECTION_ORDER = 200;
@@ -26,7 +67,8 @@ const DEFAULT_ANNOUNCE = true;
 * @param ctx - the plugin context (systemPrompt injected).
 * @param config - resolved plugin config (schema defaults applied by the loader).
 */
-function apply(ctx, config) {
+const apply = mountOnce("@linxin666/dsh-client-ui-task-board", applyImpl);
+function applyImpl(ctx, config) {
 	let current = () => config ?? {};
 	let disposeSection;
 	const sync = () => {

package/lib/types/client/PluginSettingsCard.d.ts

@@ -9,7 +9,7 @@
 import { type ReactNode } from 'react';
 import type { CardShell } from './settings-form.ts';
 /** Copy keys the card chrome itself reads; every consumer locale carries this shared vocabulary. */
-export declare const CARD_COPY_KEYS: readonly ["settings.collapse", "settings.expand", "settings.notExposed", "settings.unsaved", "settings.readOnly", "settings.saveFailed", "settings.discard", "settings.save", "settings.saving"];
+export declare const CARD_COPY_KEYS: readonly ['settings.collapse', 'settings.expand', 'settings.notExposed', 'settings.unsaved', 'settings.readOnly', 'settings.saveFailed', 'settings.discard', 'settings.save', 'settings.saving'];
 /** Copy key the card chrome itself reads. */
 export type CardCopyKey = (typeof CARD_COPY_KEYS)[number];
 /** Key domain for the plugin's own copy (inferred per consumer). */

package/lib/types/client/TaskBoardSettingsCard.d.ts

@@ -40,6 +40,11 @@ export declare class TaskBoardSettingsCardController {
      * @returns the card's snapshot and its form actions.
      */
     inject(): TaskBoardSettingsCardFace;
+    /**
+     * Release the card's scope subscription and bound stores; the slot
+     * disposer calls this on teardown.
+     */
+    dispose(): void;
 }
 /** Props the renderer binds for the task-board card. */
 export type TaskBoardSettingsCardProps = PropsRuntime<'web-ui.plugin.item'> & PropsLocale<'task-board'> & InjectFace<TaskBoardSettingsCardFace>;

package/lib/types/client/board/status-key.d.ts

@@ -0,0 +1,4 @@
+import type { TaskStatus } from '../../core/tasks.ts';
+import type { TaskBoardKey } from '../locales.ts';
+/** Task status → locale key (board column titles and the detail badge). */
+export declare const STATUS_KEY: Record<TaskStatus, TaskBoardKey>;

package/lib/types/client/settings-form.d.ts

@@ -149,11 +149,19 @@ export declare class CardForm<T> {
     private readonly specs;
     private readonly staged;
     private readonly listeners;
+    /** The scope subscription installed in the constructor; released by dispose(). */
+    private readonly disposeScope;
+    private disposed;
     private saving;
     private failed;
     private failedReason;
     /** @param scope - the bound settings scope for this card's namespace. */
     constructor(scope: SettingsScope<T>, specs: FieldSpec[]);
+    /**
+     * Release the scope subscription and every bound store listener. The card
+     * must call this on teardown; later calls are no-ops.
+     */
+    dispose(): void;
     /** Publish a projection of this form, rebuilt whenever the scope or a draft changes. */
     bind<S>(project: () => S): SnapshotStore<S>;
     /** Read the card-level state: what the Host serves, and what a save would do. */

package/lib/types/core/scheduler.d.ts

@@ -41,6 +41,9 @@ export declare class SchedulerService {
     private environmentListener;
     private disposed;
     private started;
+    /** Cron expressions that matched no instant in the scan window, per task —
+     *  remembered so a never-matching rule is not re-scanned on every tick. */
+    private readonly unmatchableRepair;
     /** @param deps - tasks/clock/trigger/apply faces (see {@link SchedulerDeps}). */
     constructor(deps: SchedulerDeps);
     /**

package/lib/types/core/tasks.d.ts

@@ -84,7 +84,7 @@ export interface TaskRecord {
 /** Statuses a settled task may be archived from. */
 export declare const ARCHIVABLE_STATUSES: readonly TaskStatus[];
 /** Permission presets a task may pin on its execution session (the `/permission <id>` ids). */
-export declare const TASK_PERMISSIONS: readonly ["read-only", "workspace-write", "danger-full-access"];
+export declare const TASK_PERMISSIONS: readonly ['read-only', 'workspace-write', 'danger-full-access'];
 /** One permission preset id. */
 export type TaskPermission = typeof TASK_PERMISSIONS[number];
 /** Whether an unknown value is a known permission preset id. */
@@ -125,6 +125,8 @@ export declare const ALL_STATUSES: readonly TaskStatus[];
 export declare function isTaskStatus(value: unknown): value is TaskStatus;
 /** Whether a manual move target is allowed from the given status. */
 export declare function canMoveManually(_from: TaskStatus, to: TaskStatus): boolean;
+/** Normalize one optional execution-target string: trim; blank collapses to undefined. */
+export declare function normalizeTargetId(value: string | undefined): string | undefined;
 /** Create a task from user input. */
 export declare function createTask(input: NewTaskInput, now: number, id: string): TaskRecord;
 /** Clone a task with an updated status and a fresh updatedAt. */

package/lib/types/index.d.ts

@@ -41,4 +41,6 @@ export declare const Config: z<Config>;
  * @param ctx - the plugin context (systemPrompt injected).
  * @param config - resolved plugin config (schema defaults applied by the loader).
  */
-export declare function apply(ctx: Context, config?: Config): void;
+export declare const apply: typeof applyImpl;
+declare function applyImpl(ctx: Context, config?: Config): void;
+export {};

package/lib/types/mount-once.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Host single-instance guard shared by the plugin family. The family bundle
+ * (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+ * the loader accepts a standalone install of the same package side by side;
+ * without this guard the second instance would still re-register the same
+ * webserver routes, tools, settings namespaces, and system-prompt sections
+ * and fail the boot. mountOnce makes the second host apply a no-op for the
+ * lifetime of the first instance (the browser half is already deduped by
+ * package name in the client module host).
+ *
+ * The registry rides a global symbol so two module instances of the same
+ * package (npm copy vs repository link) still share one verdict. cordis
+ * `ctx.effect` runs its callback immediately and treats the callback's
+ * return value as the fiber disposer, so the unmarker is returned, not run.
+ */
+/**
+ * Wrap a cordis plugin apply so the package runs at most once per process.
+ * The first mount registers normally and unmarks when its fiber disposes;
+ * any later mount of the same package name is a no-op.
+ * @param packageName - npm package identity shared by every install source.
+ * @param fn - the original plugin apply.
+ * @returns an apply of the same shape.
+ */
+export declare function mountOnce<T extends (...args: any[]) => unknown>(packageName: string, fn: T): T;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Task board for the dsh web GUI: a sidebar entry plus a multi-column kanban view with local persistence, task details, and real execution through dsh sessions (session.prompt). Hot-pluggable — mounted via ~/.dsh/cordis.patch.yml + a profile node_modules symlink, no dsh source changes.",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",

package/src/client/TaskBoardSettingsCard.tsx

@@ -63,6 +63,14 @@ export class TaskBoardSettingsCardController {
   inject(): TaskBoardSettingsCardFace {
     return { hooks: { taskBoardSettingsCard: this.store }, ...this.form.actions() }
   }
+
+  /**
+   * Release the card's scope subscription and bound stores; the slot
+   * disposer calls this on teardown.
+   */
+  dispose(): void {
+    this.form.dispose()
+  }
 }
 
 /** Props the renderer binds for the task-board card. */

package/src/client/board/TaskBoard.tsx

@@ -9,18 +9,10 @@ import { COLUMNS, type TaskRecord, type TaskStatus } from '../../core/tasks.ts'
 import { t, type TaskBoardKey } from '../locales.ts'
 import css from '../board.module.css'
 import { NewTaskModal } from './NewTaskModal.tsx'
+import { STATUS_KEY } from './status-key.ts'
 import { TaskCard } from './TaskCard.tsx'
 import { TaskDetail } from './TaskDetail.tsx'
 
-/** Column status → locale key. */
-const STATUS_KEY: Record<TaskStatus, TaskBoardKey> = {
-  backlog: 'board.status.backlog',
-  todo: 'board.status.todo',
-  running: 'board.status.running',
-  done: 'board.status.done',
-  failed: 'board.status.failed',
-}
-
 /** Case-insensitive title/description match. */
 function matchesFilter(task: TaskRecord, filter: string): boolean {
   if (filter.trim() === '') return true
@@ -60,6 +52,15 @@ export function TaskBoard({ controller }: { controller: BoardController }) {
   return (
     <div className={css.board} data-dsh-taskboard-board="">
       <header className={css.boardHeader}>
+        <button
+          type="button"
+          className={`${css.ghostButton} ${css.backButton}`}
+          aria-label={t('board.close')}
+          onClick={() => { controller.closeBoard() }}
+        >
+          <span aria-hidden="true">‹</span>
+          <span>{t('board.close')}</span>
+        </button>
         <h2 className={css.boardTitle}>{t('board.title')}</h2>
         <input
           className={css.search}
@@ -85,13 +86,6 @@ export function TaskBoard({ controller }: { controller: BoardController }) {
         >
           + {t('board.new')}
         </button>
-        <button
-          type="button"
-          className={css.ghostButton}
-          onClick={() => { controller.closeBoard() }}
-        >
-          {t('board.close')}
-        </button>
       </header>
 
       <div className={css.columns}>

package/src/client/board/TaskDetail.tsx

@@ -13,6 +13,7 @@ import { SCHEDULE_PRESETS } from '../schedule-presets.ts'
 import css from '../board.module.css'
 import { ConfirmDialog } from './ConfirmDialog.tsx'
 import { formatTime } from './TaskCard.tsx'
+import { STATUS_KEY } from './status-key.ts'
 
 /** Execution outcome → locale key. */
 const RESULT_KEY: Record<NonNullable<ExecutionRecord['result']>, TaskBoardKey> = {
@@ -21,15 +22,6 @@ const RESULT_KEY: Record<NonNullable<ExecutionRecord['result']>, TaskBoardKey> =
   cancelled: 'detail.result.cancelled',
 }
 
-/** Status → locale key (detail badge). */
-const STATUS_KEY: Record<TaskStatus, TaskBoardKey> = {
-  backlog: 'board.status.backlog',
-  todo: 'board.status.todo',
-  running: 'board.status.running',
-  done: 'board.status.done',
-  failed: 'board.status.failed',
-}
-
 /** One execution-history row. */
 function ExecutionRow({ execution, onOpen }: { execution: ExecutionRecord; onOpen: (sessionId: string) => void }) {
   const result = execution.result

package/src/client/board/status-key.ts

@@ -0,0 +1,11 @@
+import type { TaskStatus } from '../../core/tasks.ts'
+import type { TaskBoardKey } from '../locales.ts'
+
+/** Task status → locale key (board column titles and the detail badge). */
+export const STATUS_KEY: Record<TaskStatus, TaskBoardKey> = {
+  backlog: 'board.status.backlog',
+  todo: 'board.status.todo',
+  running: 'board.status.running',
+  done: 'board.status.done',
+  failed: 'board.status.failed',
+}

package/src/client/board.module.css

@@ -18,6 +18,8 @@
   inset: 0;
   display: none;
   z-index: 60;
+  container-name: task-board-view;
+  container-type: inline-size;
   /* Opaque backdrop: the conversation subtree stays mounted under the view.
      Even if the hide rule below were defeated by a stronger host inline
      style, this background keeps sticky code-block banners (host z-index 6)
@@ -103,6 +105,7 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
 .board {
   display: flex;
   flex-direction: column;
+  box-sizing: border-box;
   height: 100%;
   min-width: 0;
   min-height: 0;
@@ -128,6 +131,12 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
   white-space: nowrap;
 }
 
+.backButton {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+}
+
 .search {
   flex: 0 1 260px;
   min-width: 120px;
@@ -148,10 +157,38 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
 
 .columns {
   display: grid;
-  grid-template-columns: repeat(5, minmax(0, 1fr));
+  grid-auto-flow: column;
+  grid-auto-columns: minmax(220px, 1fr);
   gap: 12px;
   flex: 1;
   min-height: 0;
+  overflow-x: auto;
+  overflow-y: hidden;
+  overscroll-behavior-inline: contain;
+  padding-bottom: 6px;
+  scrollbar-color: var(--dsw-alias-border-l3) var(--dsw-alias-interactive-bg-hover);
+  scrollbar-width: thin;
+}
+
+.columns::-webkit-scrollbar {
+  height: 10px;
+}
+
+.columns::-webkit-scrollbar-track {
+  background: var(--dsw-alias-interactive-bg-hover);
+  border-radius: 999px;
+}
+
+.columns::-webkit-scrollbar-thumb {
+  background: var(--dsw-alias-border-l3);
+  background-clip: content-box;
+  border: 2px solid transparent;
+  border-radius: 999px;
+}
+
+.columns::-webkit-scrollbar-thumb:hover {
+  background: var(--dsw-alias-border-l4);
+  background-clip: content-box;
 }
 
 .column {
@@ -770,6 +807,36 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
   color: var(--dsw-alias-label-tertiary);
 }
 
+/* --- constrained board containers ------------------------------------------ */
+
+@container task-board-view (max-width: 720px) {
+  .board {
+    gap: 10px;
+    padding: 10px;
+  }
+
+  .columns {
+    gap: 10px;
+  }
+}
+
+@container task-board-view (max-width: 600px) {
+  .boardHeader {
+    flex-wrap: wrap;
+    gap: 8px;
+  }
+
+  .search {
+    flex: 1 1 calc(100% - 72px);
+    min-width: 0;
+  }
+
+  .boardHeader > button {
+    flex: 1 1 0;
+    min-width: max-content;
+  }
+}
+
 /* -----------------------------------------------------------------------------
  * Polish pass: complete interaction states (hover / active / focus-visible /
  * disabled), unified 120ms motion, and reduced-motion fallback.

package/src/client/index.ts

@@ -92,13 +92,19 @@ export function apply(ctx: ClientContext): void {
   const binder = ctx.get('webUiSettings') ?? ctx.settingsScope
   const settingsScope = binder.bind<TaskBoardSettings>({ namespace: TASK_BOARD_NS })
   const settingsCard = new TaskBoardSettingsCardController(settingsScope)
-  ctx.slots.inject('web-ui.plugin.item', () => ctx.slots.register({
-    name: 'web-ui.plugin.item',
-    id: 'task-board',
-    order: 110,
-    locale: NS,
-    inject: () => settingsCard.inject(),
-  }, TaskBoardSettingsCard))
+  ctx.slots.inject('web-ui.plugin.item', () => {
+    const unregister = ctx.slots.register({
+      name: 'web-ui.plugin.item',
+      id: 'task-board',
+      order: 110,
+      locale: NS,
+      inject: () => settingsCard.inject(),
+    }, TaskBoardSettingsCard)
+    return () => {
+      settingsCard.dispose()
+      unregister()
+    }
+  })
 
   // The sidebar entry and board view mount once the settings scope settles;
   // while the scope is still loading, the composition default is unknown, so

package/src/client/locales.ts

@@ -9,7 +9,7 @@
 export const zh = {
   'entry.label': '任务看板',
   'board.title': '任务看板',
-  'board.close': '返回对话',
+  'board.close': '返回会话',
   'board.new': '新建任务',
   'board.search': '筛选任务…',
   'board.empty': '这个状态还没有任务',

package/src/client/settings-form.ts

@@ -234,6 +234,9 @@ export class CardForm<T> {
   private readonly specs: Map<string, FieldSpec>
   private readonly staged = new Map<string, StagedEdit>()
   private readonly listeners = new Set<() => void>()
+  /** The scope subscription installed in the constructor; released by dispose(). */
+  private readonly disposeScope: () => void
+  private disposed = false
   private saving = false
   private failed = false
   private failedReason: string | undefined
@@ -244,7 +247,18 @@ export class CardForm<T> {
     specs: FieldSpec[],
   ) {
     this.specs = new Map(specs.map(spec => [spec.field, spec]))
-    scope.subscribe(() => { this.publish() })
+    this.disposeScope = scope.subscribe(() => { this.publish() })
+  }
+
+  /**
+   * Release the scope subscription and every bound store listener. The card
+   * must call this on teardown; later calls are no-ops.
+   */
+  dispose(): void {
+    if (this.disposed) return
+    this.disposed = true
+    this.disposeScope()
+    this.listeners.clear()
   }
 
   /** Publish a projection of this form, rebuilt whenever the scope or a draft changes. */

package/src/core/controller.ts

@@ -89,6 +89,10 @@ export function selectedTaskOf(snapshot: ControllerSnapshot): TaskRecord | undef
 }
 
 function randomUuid(): string {
+  const randomUUID = globalThis.crypto?.randomUUID
+  if (randomUUID !== undefined) {
+    return randomUUID.call(globalThis.crypto!)
+  }
   const bytes = globalThis.crypto?.getRandomValues(new Uint8Array(16))
   if (bytes === undefined) {
     // Non-secure fallback (tests, odd environments).

package/src/core/scheduler.ts

@@ -68,6 +68,9 @@ export class SchedulerService {
   private environmentListener: (() => void) | undefined
   private disposed = false
   private started = false
+  /** Cron expressions that matched no instant in the scan window, per task —
+   *  remembered so a never-matching rule is not re-scanned on every tick. */
+  private readonly unmatchableRepair = new Map<string, string>()
 
   /** @param deps - tasks/clock/trigger/apply faces (see {@link SchedulerDeps}). */
   constructor(private readonly deps: SchedulerDeps) {}
@@ -133,9 +136,16 @@ export class SchedulerService {
       if (schedule === undefined || !schedule.enabled) continue
       if (schedule.nextRunAt === undefined) {
         // Missing next-run instant (repaired/legacy data): recompute from the
-        // cron expression and wait; an unparseable expression is skipped.
+        // cron expression and wait; an unparseable expression is skipped. A
+        // grammatically valid rule with no match in the window (e.g. Feb 30)
+        // would otherwise re-run the full minute-by-minute scan every tick.
+        if (this.unmatchableRepair.get(task.id) === schedule.cron) continue
         const repaired = nextRunAtMs(schedule.cron, now)
-        if (repaired === undefined) continue
+        if (repaired === undefined) {
+          this.unmatchableRepair.set(task.id, schedule.cron)
+          continue
+        }
+        this.unmatchableRepair.delete(task.id)
         this.deps.applySchedule(task.id, repaired, undefined)
         continue
       }

package/src/core/store.ts

@@ -14,7 +14,7 @@
  * localStorage backend.
  */
 import { isValidCron } from './schedule.ts'
-import { isTaskPermission, isTaskStatus, type ScheduleRule, type TaskRecord, type TaskPermission, type TaskStatus } from './tasks.ts'
+import { isTaskPermission, isTaskStatus, normalizeTargetId, type ScheduleRule, type TaskRecord, type TaskPermission, type TaskStatus } from './tasks.ts'
 
 /** Persistence seam for the task ledger. */
 export interface TaskStore {
@@ -80,11 +80,6 @@ function isTaskRecordShape(value: unknown): value is Omit<TaskRecord, 'status'>
   return true
 }
 
-/** Collapse a blank persisted target string to undefined (clears the pin). */
-function normalizeTargetId(value: string | undefined): string | undefined {
-  return value !== undefined && value.trim() === '' ? undefined : value
-}
-
 /** A task record is structurally valid if it round-trips through the UI. */
 export function isTaskRecord(value: unknown): value is TaskRecord {
   return isTaskRecordShape(value) && isTaskStatus(value.status)

package/src/core/tasks.ts

@@ -151,7 +151,7 @@ export function canMoveManually(_from: TaskStatus, to: TaskStatus): boolean {
 }
 
 /** Normalize one optional execution-target string: trim; blank collapses to undefined. */
-function normalizeTargetId(value: string | undefined): string | undefined {
+export function normalizeTargetId(value: string | undefined): string | undefined {
   const trimmed = value?.trim()
   return trimmed === undefined || trimmed === '' ? undefined : trimmed
 }

package/src/core/use-cases/task-update.ts

@@ -8,16 +8,11 @@
  * back to the runtime default); an unknown permission string is ignored so
  * stale UI can never persist a value the execution service rejects.
  */
-import { isTaskPermission, type TaskRecord, type TaskPermission } from '../tasks.ts'
+import { isTaskPermission, normalizeTargetId, type TaskRecord, type TaskPermission } from '../tasks.ts'
 
 /** Editable fields on a task (the update patch surface). */
 export type TaskUpdatePatch = Partial<Pick<TaskRecord, 'title' | 'description' | 'prompt' | 'workspaceId' | 'mode' | 'permission'>>
 
-/** Collapse a blank target string to undefined (clears the pin). */
-function normalizeTargetId(value: string | undefined): string | undefined {
-  return value !== undefined && value.trim() === '' ? undefined : value
-}
-
 /** Keep an unknown permission string from entering the ledger. */
 function normalizePermission(
   current: TaskPermission | undefined,

package/src/index.ts

@@ -15,6 +15,7 @@ import type { Context } from '@deepseek-ai/cordis'
 import { installSettingsSection, settingsNamespace } from '@deepseek-ai/dsh-settings'
 import z from 'schemastery'
 import type {} from '@deepseek-ai/dsh-system-prompt'
+import { mountOnce } from './mount-once.ts'
 
 /** Order of the announcement section within the tool-guidance band. */
 const SECTION_ORDER = 200
@@ -59,7 +60,9 @@ const DEFAULT_ANNOUNCE = true
  * @param ctx - the plugin context (systemPrompt injected).
  * @param config - resolved plugin config (schema defaults applied by the loader).
  */
-export function apply(ctx: Context, config?: Config): void {
+export const apply = mountOnce('@linxin666/dsh-client-ui-task-board', applyImpl)
+
+function applyImpl(ctx: Context, config?: Config): void {
   // The live source the announcement reads: the settings section once the web
   // settings surface is served, the composition entry otherwise
   // (installSettingsSection swaps it when the namespace registers).

package/src/mount-once.ts

@@ -0,0 +1,48 @@
+// Generated by scripts/sync-shared.mjs from shared/host/mount-once.ts. Do not edit this copy; edit the shared source and run "node scripts/sync-shared.mjs".
+/**
+ * Host single-instance guard shared by the plugin family. The family bundle
+ * (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+ * the loader accepts a standalone install of the same package side by side;
+ * without this guard the second instance would still re-register the same
+ * webserver routes, tools, settings namespaces, and system-prompt sections
+ * and fail the boot. mountOnce makes the second host apply a no-op for the
+ * lifetime of the first instance (the browser half is already deduped by
+ * package name in the client module host).
+ *
+ * The registry rides a global symbol so two module instances of the same
+ * package (npm copy vs repository link) still share one verdict. cordis
+ * `ctx.effect` runs its callback immediately and treats the callback's
+ * return value as the fiber disposer, so the unmarker is returned, not run.
+ */
+
+const MOUNTED = Symbol.for('dsh-web-ui.mounted-plugins')
+
+interface MountRegistry {
+  [MOUNTED]?: Set<string>
+}
+
+function mountedSet(): Set<string> {
+  const registry = globalThis as MountRegistry
+  return (registry[MOUNTED] ??= new Set())
+}
+
+/**
+ * Wrap a cordis plugin apply so the package runs at most once per process.
+ * The first mount registers normally and unmarks when its fiber disposes;
+ * any later mount of the same package name is a no-op.
+ * @param packageName - npm package identity shared by every install source.
+ * @param fn - the original plugin apply.
+ * @returns an apply of the same shape.
+ */
+export function mountOnce<T extends (...args: any[]) => unknown>(packageName: string, fn: T): T {
+  return ((...args: unknown[]) => {
+    const mounted = mountedSet()
+    if (mounted.has(packageName)) return
+    mounted.add(packageName)
+    const ctx = args[0] as { effect?: (effect: () => unknown) => unknown } | undefined
+    ctx?.effect?.(() => () => {
+      mounted.delete(packageName)
+    })
+    return fn(...args)
+  }) as T
+}