@linxin666/dsh-client-ui-task-board 0.1.19 → 0.2.0

package/lib/index.js

@@ -1,11 +1,2156 @@
 import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import z from "schemastery";
+import { createHash, timingSafeEqual } from "node:crypto";
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, win32 } from "node:path";
+import { homedir } from "node:os";
+import { spawn, spawnSync } from "node:child_process";
+//#region src/core/schedule.ts
+/** Inclusive ranges per field, in cron order. */
+const FIELD_RANGES = [
+	[0, 59],
+	[0, 23],
+	[1, 31],
+	[1, 12],
+	[0, 7]
+];
+/**
+* Parse a 5-field cron expression.
+* @returns the match sets, or null when the expression is invalid.
+*/
+function parseCron(expr) {
+	const fields = expr.trim().split(/\s+/);
+	if (fields.length !== 5) return null;
+	const sets = [];
+	for (let index = 0; index < 5; index++) {
+		const [min, max] = FIELD_RANGES[index];
+		const set = /* @__PURE__ */ new Set();
+		if (!parseField(fields[index], min, max, set)) return null;
+		sets.push(set);
+	}
+	const weekdays = /* @__PURE__ */ new Set();
+	for (const day of sets[4]) weekdays.add(day === 7 ? 0 : day);
+	return {
+		minutes: sets[0],
+		hours: sets[1],
+		days: sets[2],
+		months: sets[3],
+		weekdays,
+		dayWildcard: fields[2] === "*",
+		weekdayWildcard: fields[4] === "*"
+	};
+}
+/** Whether the expression parses. */
+function isValidCron(expr) {
+	return parseCron(expr) !== null;
+}
+/**
+* Compute the next matching instant after `fromMs` (ms epoch), in local time,
+* at minute granularity, strictly greater than `fromMs`. Returns the ms epoch
+* of the matching minute's start, or undefined when the calendar constraint
+* can never match (for example `0 0 30 2 *`). The five-year horizon includes
+* a full leap cycle, so a valid February 29 schedule remains reachable from
+* every non-leap year.
+*/
+function nextRunAtMs(expr, fromMs) {
+	const schedule = parseCron(expr);
+	if (schedule === null) return void 0;
+	if (!hasPossibleCalendarDay(schedule)) return void 0;
+	const from = new Date(fromMs);
+	const scan = new Date(from.getFullYear(), from.getMonth(), from.getDate(), from.getHours(), from.getMinutes() + 1, 0, 0);
+	const limitMs = fromMs + 5 * 366 * 24 * 60 * 60 * 1e3;
+	while (scan.getTime() <= limitMs) {
+		if (matches(schedule, scan)) return scan.getTime();
+		scan.setMinutes(scan.getMinutes() + 1);
+	}
+}
+/** Reject impossible month/day pairs without spending the multi-year scan. */
+function hasPossibleCalendarDay(schedule) {
+	if (schedule.dayWildcard || !schedule.weekdayWildcard) return true;
+	const maximumDay = /* @__PURE__ */ new Map([
+		[1, 31],
+		[2, 29],
+		[3, 31],
+		[4, 30],
+		[5, 31],
+		[6, 30],
+		[7, 31],
+		[8, 31],
+		[9, 30],
+		[10, 31],
+		[11, 30],
+		[12, 31]
+	]);
+	for (const month of schedule.months) {
+		const maximum = maximumDay.get(month) ?? 0;
+		if ([...schedule.days].some((day) => day <= maximum)) return true;
+	}
+	return false;
+}
+/** Parse one comma-list field into the match set. */
+function parseField(field, min, max, out) {
+	if (field === "*") {
+		for (let value = min; value <= max; value++) out.add(value);
+		return true;
+	}
+	for (const part of field.split(",")) {
+		if (part === "") return false;
+		const [range, stepRaw] = part.split("/");
+		let low;
+		let high;
+		if (range === "*") {
+			low = min;
+			high = max;
+		} else if (range.includes("-")) {
+			const [a, b] = range.split("-");
+			if (a === "" || b === "" || !isDigits(a) || !isDigits(b)) return false;
+			low = Number(a);
+			high = Number(b);
+		} else if (isDigits(range)) {
+			low = Number(range);
+			high = Number(range);
+		} else return false;
+		if (low < min || high > max || low > high) return false;
+		const step = stepRaw === void 0 ? 1 : isDigits(stepRaw) ? Number(stepRaw) : NaN;
+		if (!Number.isInteger(step) || step < 1) return false;
+		for (let value = low; value <= high; value += step) out.add(value);
+	}
+	return true;
+}
+/** Day/weekday OR semantics: a restricted day field alone gates, and vice versa. */
+function matches(schedule, date) {
+	if (!schedule.minutes.has(date.getMinutes())) return false;
+	if (!schedule.hours.has(date.getHours())) return false;
+	if (!schedule.months.has(date.getMonth() + 1)) return false;
+	const dayMatches = schedule.days.has(date.getDate());
+	const weekdayMatches = schedule.weekdays.has(date.getDay());
+	if (schedule.dayWildcard) return weekdayMatches;
+	if (schedule.weekdayWildcard) return dayMatches;
+	return dayMatches || weekdayMatches;
+}
+function isDigits(value) {
+	return /^\d+$/.test(value);
+}
+//#endregion
+//#region src/dsh-home.ts
+/**
+* DSH_HOME resolution shared by the plugin family's Host halves: the
+* environment override wins, the platform home fallback follows. Mirrors
+* what dsh-pet and dsh-liangshen each used to implement locally.
+*/
+/** Expand a leading ~ (or ~user) in a path, platform-style. */
+function expandHome(path, home = homedir()) {
+	if (path === "~") return home;
+	if (path.startsWith("~/") || path.startsWith("~\\")) return join(home, path.slice(2));
+	return path;
+}
+/**
+* Resolve the DSH home directory.
+* @param env - process environment to read DSH_HOME from.
+* @param home - platform home directory fallback (test seam).
+* @returns the absolute DSH home path.
+*/
+function resolveDshHome(env = process.env, home = homedir()) {
+	const raw = env.DSH_HOME;
+	if (raw !== void 0 && raw.trim() !== "") {
+		const expanded = expandHome(raw.trim(), home);
+		return isAbsolute(expanded) ? expanded : join(process.cwd(), expanded);
+	}
+	return join(home, ".dsh");
+}
+/** Resolve the DSH home directory from the live environment. */
+function dshHome() {
+	return resolveDshHome();
+}
+//#endregion
+//#region src/core/tasks.ts
+/** Statuses a settled task may be archived from. */
+const ARCHIVABLE_STATUSES = ["done", "failed"];
+/** Permission presets a task may pin on its execution session (the `/permission <id>` ids). */
+const TASK_PERMISSIONS = [
+	"read-only",
+	"workspace-write",
+	"danger-full-access"
+];
+/** Whether an unknown value is a known permission preset id. */
+function isTaskPermission(value) {
+	return typeof value === "string" && TASK_PERMISSIONS.includes(value);
+}
+/** Statuses a user may move a card to manually (execution states are owned by the runner). */
+const MANUAL_STATUSES = ["backlog", "todo"];
+/** All valid statuses (closed union guard). */
+const ALL_STATUSES = [
+	"backlog",
+	"todo",
+	"running",
+	"done",
+	"failed"
+];
+/** Brand an unknown string as a status; undefined when it is not one. */
+function isTaskStatus(value) {
+	return typeof value === "string" && ALL_STATUSES.includes(value);
+}
+/** Whether a manual move target is allowed from the given status. */
+function canMoveManually(from, to) {
+	return from !== "running" && MANUAL_STATUSES.includes(to);
+}
+/** Normalize one optional execution-target string: trim; blank collapses to undefined. */
+function normalizeTargetId(value) {
+	const trimmed = value?.trim();
+	return trimmed === void 0 || trimmed === "" ? void 0 : trimmed;
+}
+/** Create a task from user input. */
+function createTask(input, now, id) {
+	return {
+		id,
+		title: input.title.trim(),
+		description: input.description.trim(),
+		prompt: input.prompt.trim(),
+		status: "todo",
+		createdAt: now,
+		updatedAt: now,
+		executions: [],
+		workspaceId: normalizeTargetId(input.workspaceId),
+		mode: normalizeTargetId(input.mode),
+		permission: isTaskPermission(input.permission) ? input.permission : void 0
+	};
+}
+/** Clone a task with an updated status and a fresh updatedAt. */
+function withStatus(task, status, now) {
+	return {
+		...task,
+		status,
+		updatedAt: now
+	};
+}
+/**
+* Merge a schedule patch into a task's schedule rule (creating it when
+* absent), with a fresh updatedAt. Keys present in the patch overwrite the
+* current value — including explicit `undefined`, which clears a field (used
+* to disarm `nextRunAt`); absent keys keep their current value.
+*/
+function withSchedule(task, patch, now) {
+	const current = task.schedule;
+	const schedule = {
+		enabled: current?.enabled ?? false,
+		cron: current?.cron ?? "",
+		nextRunAt: current?.nextRunAt,
+		lastTriggeredAt: current?.lastTriggeredAt
+	};
+	if ("enabled" in patch) schedule.enabled = patch.enabled ?? false;
+	if ("cron" in patch) schedule.cron = patch.cron ?? "";
+	if ("nextRunAt" in patch) schedule.nextRunAt = patch.nextRunAt;
+	if ("lastTriggeredAt" in patch) schedule.lastTriggeredAt = patch.lastTriggeredAt;
+	return {
+		...task,
+		updatedAt: now,
+		schedule
+	};
+}
+/**
+* Open a fresh execution on a task: move it to 'running' and append a
+* running execution record. Returns the new task and the new execution.
+*/
+function startExecution(task, now, executionId) {
+	const execution = {
+		id: executionId,
+		sessionId: void 0,
+		startedAt: now,
+		endedAt: void 0,
+		result: void 0,
+		error: void 0
+	};
+	return {
+		task: {
+			...task,
+			status: "running",
+			updatedAt: now,
+			executions: [...task.executions, execution]
+		},
+		execution
+	};
+}
+/**
+* Settle a running execution: record the outcome and move the task into the
+* matching column. No-op (returns the input task) when the execution is not
+* the task's latest or is already settled.
+*/
+function settleExecution(task, executionId, outcome, now, error) {
+	const index = task.executions.findIndex((execution) => execution.id === executionId);
+	if (index === -1) return task;
+	const execution = task.executions[index];
+	if (execution.endedAt !== void 0) return task;
+	const settled = {
+		...execution,
+		endedAt: now,
+		result: outcome,
+		error
+	};
+	const executions = [...task.executions];
+	executions[index] = settled;
+	const status = outcome === "succeeded" ? "done" : outcome === "failed" ? "failed" : task.status === "running" ? "todo" : task.status;
+	return {
+		...task,
+		status,
+		updatedAt: now,
+		executions
+	};
+}
+//#endregion
+//#region src/core/store.ts
+/**
+* Legacy v1 browser persistence and the store seam used by pure client tests.
+*
+* Production v2 state is Host-authoritative. This backend is retained only to
+* read `dsh.taskBoard.v1` for one-time import; the old value is never removed,
+* so it remains a read-only rollback copy after migration.
+*
+* The seam keeps the backend swappable (e.g. an IndexedDB or a host-file
+* channel later); tests run against the in-memory backend and a jsdom
+* localStorage backend.
+*/
+/**
+* Structural row check with the status left unvalidated (see {@link parseLedger}).
+* The `schedule` field is deliberately NOT checked here: a malformed schedule
+* never drops the task row — {@link normalizeSchedule} repairs or drops the
+* schedule alone.
+*/
+function isTaskRecordShape(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	if (typeof record.id !== "string" || record.id === "") return false;
+	if (typeof record.title !== "string") return false;
+	if (typeof record.description !== "string") return false;
+	if (typeof record.prompt !== "string") return false;
+	if (typeof record.createdAt !== "number") return false;
+	if (typeof record.updatedAt !== "number") return false;
+	if (record.workspaceId !== void 0 && typeof record.workspaceId !== "string") return false;
+	if (record.mode !== void 0 && typeof record.mode !== "string") return false;
+	if (record.permission !== void 0 && typeof record.permission !== "string") return false;
+	if (!Array.isArray(record.executions)) return false;
+	for (const execution of record.executions) {
+		if (typeof execution !== "object" || execution === null) return false;
+		const entry = execution;
+		if (typeof entry.id !== "string") return false;
+		if (entry.sessionId !== void 0 && typeof entry.sessionId !== "string") return false;
+		if (typeof entry.startedAt !== "number") return false;
+		if (entry.endedAt !== void 0 && typeof entry.endedAt !== "number") return false;
+		if (entry.result !== void 0 && entry.result !== "succeeded" && entry.result !== "failed" && entry.result !== "cancelled") return false;
+		if (entry.error !== void 0 && typeof entry.error !== "string") return false;
+	}
+	return true;
+}
+/** Normalize an unknown persisted status back into the closed status union. */
+function normalizeStatus(status) {
+	return isTaskStatus(status) ? status : "todo";
+}
+/**
+* Repair a persisted schedule rule: drop rules without a usable cron string,
+* coerce booleans/numbers, and leave `nextRunAt`/`lastTriggeredAt` undefined
+* when missing (a fresh recompute or the next tick fixes them).
+*/
+function normalizeSchedule(schedule) {
+	if (typeof schedule !== "object" || schedule === null) return void 0;
+	const rule = schedule;
+	if (typeof rule.cron !== "string") return void 0;
+	if (rule.cron.trim() === "" || !isValidCron(rule.cron)) return void 0;
+	return {
+		enabled: rule.enabled === true,
+		cron: rule.cron,
+		nextRunAt: typeof rule.nextRunAt === "number" ? rule.nextRunAt : void 0,
+		lastTriggeredAt: typeof rule.lastTriggeredAt === "number" ? rule.lastTriggeredAt : void 0
+	};
+}
+/** Parse + validate a persisted ledger document; invalid rows are dropped. */
+function parseLedger(raw) {
+	if (raw === null) return [];
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (error) {
+		console.error("[dsh-task-board] persisted task ledger is not valid JSON; starting empty", error);
+		return [];
+	}
+	if (!Array.isArray(parsed)) {
+		console.error("[dsh-task-board] persisted task ledger is not an array; starting empty");
+		return [];
+	}
+	const tasks = [];
+	for (const row of parsed) {
+		if (!isTaskRecordShape(row)) {
+			console.warn("[dsh-task-board] dropping invalid task row from persisted ledger", row);
+			continue;
+		}
+		const task = {
+			...row,
+			status: normalizeStatus(row.status)
+		};
+		task.schedule = normalizeSchedule(row.schedule);
+		task.workspaceId = normalizeTargetId(row.workspaceId);
+		task.mode = normalizeTargetId(row.mode);
+		task.archivedAt = typeof row.archivedAt === "number" && Number.isFinite(row.archivedAt) ? row.archivedAt : void 0;
+		task.permission = isTaskPermission(row.permission) ? row.permission : void 0;
+		tasks.push(task);
+	}
+	return tasks;
+}
+//#endregion
+//#region src/core/use-cases/task-archive.ts
+/**
+* Archive one task: only settled statuses (done/failed) can be archived;
+* a running or not-yet-settled task stays on the board (its runner still
+* owns its lifecycle). Archiving disarms a schedule; already-archived tasks
+* are a no-op.
+*/
+function applyArchiveTask(tasks, id, now) {
+	let applied = false;
+	return {
+		tasks: tasks.map((task) => {
+			if (task.id !== id || task.archivedAt !== void 0) return task;
+			if (!ARCHIVABLE_STATUSES.includes(task.status)) return task;
+			applied = true;
+			const schedule = task.schedule === void 0 ? void 0 : {
+				...task.schedule,
+				enabled: false,
+				nextRunAt: void 0
+			};
+			return {
+				...task,
+				...schedule === void 0 ? {} : { schedule },
+				archivedAt: now,
+				updatedAt: now
+			};
+		}),
+		archived: applied
+	};
+}
+/** Restore one task back onto the main board (clears the archive marker). */
+function applyRestoreTask(tasks, id, now) {
+	let applied = false;
+	return {
+		tasks: tasks.map((task) => {
+			if (task.id !== id || task.archivedAt === void 0) return task;
+			applied = true;
+			const { archivedAt: _archived, ...rest } = task;
+			return {
+				...rest,
+				updatedAt: now
+			};
+		}),
+		archived: applied
+	};
+}
+//#endregion
+//#region src/core/use-cases/task-create.ts
+/**
+* Create-task use case: mint a new task from user input, rejecting a blank
+* title. Pure ledger transition (no persistence or notify — the controller
+* orchestrates those), so it is unit-testable without any runtime face.
+*/
+/**
+* Apply a create against the current ledger. Returns the new task and the
+* appended ledger, or the unchanged ledger when the title is blank.
+* @param tasks - current ledger.
+* @param input - raw user input (title/description/prompt + optional schedule).
+* @param now - clock instant (ms epoch).
+* @param id - minted task id.
+*/
+function applyCreateTask(tasks, input, now, id) {
+	if (input.title.trim() === "") return {
+		task: void 0,
+		tasks
+	};
+	let task = createTask(input, now, id);
+	const requested = input.schedule;
+	if (requested?.enabled === true && requested.cron.trim() !== "" && isValidCron(requested.cron)) {
+		const cron = requested.cron.trim();
+		task = withSchedule(task, {
+			enabled: true,
+			cron,
+			nextRunAt: nextRunAtMs(cron, now)
+		}, now);
+	}
+	return {
+		task,
+		tasks: [...tasks, task]
+	};
+}
+//#endregion
+//#region src/core/use-cases/task-delete.ts
+/**
+* Apply a delete across the ledger. The selection (a task id) is cleared when
+* it matches the removed task, so the UI never lingers on a vanished detail.
+* @param tasks - current ledger.
+* @param selectedTaskId - the currently selected task id (may be undefined).
+* @param id - the task to remove.
+*/
+function applyDeleteTask(tasks, selectedTaskId, id) {
+	return {
+		tasks: tasks.filter((task) => task.id !== id),
+		selectionCleared: selectedTaskId === id
+	};
+}
+//#endregion
+//#region src/core/use-cases/task-schedule.ts
+/**
+* Schedule use case: arm/disarm a task's cron rule and roll a rule forward.
+* Pure ledger transitions (no persistence or notify — the controller
+* orchestrates those). Validation and next-run computation live here, sharing
+* the core cron parser (schedule.ts) and the withSchedule transition.
+*/
+/**
+* Set an on-board task's schedule rule. A blank or invalid cron, or an
+* archived task, is rejected (state untouched); an enabled rule computes the
+* next run instant immediately, a disabled one carries no next-run instant.
+* @param tasks - current ledger.
+* @param id - the task to schedule.
+* @param patch - rule fields to change (absent fields keep their current value).
+* @param now - clock instant (ms epoch).
+*/
+function applySetSchedule(tasks, id, patch, now) {
+	const task = tasks.find((candidate) => candidate.id === id);
+	if (task === void 0 || task.archivedAt !== void 0) return {
+		tasks,
+		applied: false
+	};
+	const current = task.schedule;
+	const cron = (patch.cron ?? current?.cron ?? "").trim();
+	if (cron === "" || !isValidCron(cron)) return {
+		tasks,
+		applied: false
+	};
+	const enabled = patch.enabled ?? current?.enabled ?? false;
+	const nextRunAt = enabled ? nextRunAtMs(cron, now) : void 0;
+	if (enabled && nextRunAt === void 0) return {
+		tasks,
+		applied: false
+	};
+	return {
+		tasks: tasks.map((candidate) => candidate.id === id ? withSchedule(candidate, {
+			enabled,
+			cron,
+			nextRunAt
+		}, now) : candidate),
+		applied: true
+	};
+}
+/**
+* Roll a task's schedule rule forward (scheduler callback): persist the next
+* due instant and the trigger instant. No-op for tasks without a rule (deleted
+* mid-tick, for example).
+* @param tasks - current ledger.
+* @param id - the task to roll forward.
+* @param nextRunAt - next due instant (may be undefined to clear).
+* @param lastTriggeredAt - the trigger instant of this run.
+* @param now - clock instant (ms epoch).
+*/
+function applyScheduleNextRun(tasks, id, nextRunAt, lastTriggeredAt, now) {
+	return tasks.map((task) => task.id === id && task.archivedAt === void 0 && task.schedule !== void 0 ? withSchedule(task, {
+		nextRunAt,
+		lastTriggeredAt
+	}, now) : task);
+}
+//#endregion
+//#region src/core/use-cases/task-update.ts
+/**
+* Update-task use case: apply an editable-field patch (title/description/
+* prompt plus the execution targets workspaceId/mode/permission) with a
+* fresh updatedAt. Pure ledger transition (no persistence or notify — the
+* controller orchestrates those).
+*
+* An explicit `undefined` in the patch clears the field (the task falls
+* back to the runtime default); an unknown permission string is ignored so
+* stale UI can never persist a value the execution service rejects.
+*/
+/** Keep an unknown permission string from entering the ledger. */
+function normalizePermission(current, value) {
+	if (value === void 0) return void 0;
+	return isTaskPermission(value) ? value : current;
+}
+/**
+* Apply an update across the ledger. Tasks that do not match the id are left
+* untouched; the matched task receives the patch plus a fresh updatedAt.
+* @param tasks - current ledger.
+* @param id - the task to update.
+* @param patch - editable-field changes.
+* @param now - clock instant (ms epoch).
+*/
+function applyUpdateTask(tasks, id, patch, now) {
+	return tasks.map((task) => {
+		if (task.id !== id) return task;
+		const workspaceId = "workspaceId" in patch ? normalizeTargetId(patch.workspaceId) : void 0;
+		const mode = "mode" in patch ? normalizeTargetId(patch.mode) : void 0;
+		const permission = "permission" in patch ? normalizePermission(task.permission, patch.permission) : void 0;
+		const next = {
+			...task,
+			...patch,
+			updatedAt: now
+		};
+		if (workspaceId !== void 0 || "workspaceId" in patch) next.workspaceId = workspaceId;
+		if (mode !== void 0 || "mode" in patch) next.mode = mode;
+		if (permission !== void 0 || "permission" in patch) next.permission = permission;
+		return next;
+	});
+}
+//#endregion
+//#region src/protocol.ts
+const TASK_BOARD_API_PREFIX = "/api/task-board";
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function exactKeys(value, allowed) {
+	return Object.keys(value).every((key) => allowed.includes(key));
+}
+function optionalString(value) {
+	return value === void 0 || typeof value === "string";
+}
+const FORBIDDEN_IMPORT_FIELDS = /* @__PURE__ */ new Set([
+	"args",
+	"command",
+	"executable",
+	"powershell",
+	"shell"
+]);
+function hasForbiddenImportField(value) {
+	if (Array.isArray(value)) return value.some(hasForbiddenImportField);
+	const row = record(value);
+	if (row === void 0) return false;
+	return Object.entries(row).some(([key, nested]) => FORBIDDEN_IMPORT_FIELDS.has(key.toLowerCase()) || hasForbiddenImportField(nested));
+}
+function optionalFiniteNumber(value) {
+	return value === void 0 || typeof value === "number" && Number.isFinite(value);
+}
+function validImportedKnownFields(value) {
+	if (value.schedule !== void 0) {
+		const schedule = record(value.schedule);
+		if (schedule === void 0 || typeof schedule.enabled !== "boolean" || typeof schedule.cron !== "string") return false;
+		if (!optionalFiniteNumber(schedule.nextRunAt) || !optionalFiniteNumber(schedule.lastTriggeredAt)) return false;
+	}
+	if (value.executions !== void 0) {
+		if (!Array.isArray(value.executions)) return false;
+		for (const item of value.executions) {
+			const execution = record(item);
+			if (execution === void 0 || typeof execution.id !== "string" || !optionalString(execution.sessionId)) return false;
+			if (typeof execution.startedAt !== "number" || !Number.isFinite(execution.startedAt)) return false;
+			if (!optionalFiniteNumber(execution.endedAt) || !optionalString(execution.error)) return false;
+			if (execution.result !== void 0 && ![
+				"succeeded",
+				"failed",
+				"cancelled"
+			].includes(String(execution.result))) return false;
+		}
+	}
+	return true;
+}
+function importedTask(value) {
+	const input = record(value);
+	if (input === void 0 || hasForbiddenImportField(input) || !validImportedKnownFields(input)) return void 0;
+	const task = parseLedger(JSON.stringify([value]))[0];
+	if (task === void 0) return void 0;
+	return {
+		id: task.id,
+		title: task.title,
+		description: task.description,
+		prompt: task.prompt,
+		status: task.status,
+		createdAt: task.createdAt,
+		updatedAt: task.updatedAt,
+		executions: task.executions.map((execution) => ({
+			id: execution.id,
+			sessionId: execution.sessionId,
+			startedAt: execution.startedAt,
+			endedAt: execution.endedAt,
+			result: execution.result,
+			error: execution.error
+		})),
+		...task.schedule === void 0 ? {} : { schedule: {
+			enabled: task.schedule.enabled,
+			cron: task.schedule.cron,
+			nextRunAt: task.schedule.nextRunAt,
+			lastTriggeredAt: task.schedule.lastTriggeredAt
+		} },
+		...task.workspaceId === void 0 ? {} : { workspaceId: task.workspaceId },
+		...task.mode === void 0 ? {} : { mode: task.mode },
+		...task.permission === void 0 ? {} : { permission: task.permission },
+		...task.archivedAt === void 0 ? {} : { archivedAt: task.archivedAt }
+	};
+}
+function createInput(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"permission",
+		"schedule"
+	])) return false;
+	if (typeof input.title !== "string" || typeof input.description !== "string" || typeof input.prompt !== "string") return false;
+	if (!optionalString(input.workspaceId) || !optionalString(input.mode)) return false;
+	if (input.permission !== void 0 && !isTaskPermission(input.permission)) return false;
+	if (input.schedule !== void 0) {
+		const schedule = record(input.schedule);
+		if (schedule === void 0 || !exactKeys(schedule, ["enabled", "cron"])) return false;
+		if (typeof schedule.enabled !== "boolean" || typeof schedule.cron !== "string") return false;
+	}
+	return true;
+}
+function updatePatch(value) {
+	const patch = record(value);
+	if (patch === void 0 || !exactKeys(patch, [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"permission"
+	])) return false;
+	for (const key of [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode"
+	]) if (!optionalString(patch[key])) return false;
+	return patch.permission === void 0 || isTaskPermission(patch.permission);
+}
+function schedulePatch(value) {
+	const patch = record(value);
+	return patch !== void 0 && exactKeys(patch, ["enabled", "cron"]) && (patch.enabled === void 0 || typeof patch.enabled === "boolean") && (patch.cron === void 0 || typeof patch.cron === "string");
+}
+function parseActionEnvelope(value) {
+	const envelope = record(value);
+	if (envelope === void 0 || !exactKeys(envelope, ["requestId", "action"])) return void 0;
+	if (typeof envelope.requestId !== "string" || envelope.requestId.trim() === "" || envelope.requestId.length > 256) return void 0;
+	const action = record(envelope.action);
+	if (action === void 0 || typeof action.kind !== "string") return void 0;
+	const taskId = typeof action.taskId === "string" && action.taskId !== "" ? action.taskId : void 0;
+	switch (action.kind) {
+		case "import":
+			if (!exactKeys(action, [
+				"kind",
+				"sourceId",
+				"tasks"
+			])) return void 0;
+			if (typeof action.sourceId !== "string" || action.sourceId === "" || !Array.isArray(action.tasks)) return void 0;
+			{
+				const tasks = action.tasks.map(importedTask);
+				return tasks.every((task) => task !== void 0) ? {
+					requestId: envelope.requestId,
+					action: {
+						kind: "import",
+						sourceId: action.sourceId,
+						tasks
+					}
+				} : void 0;
+			}
+		case "create":
+			if (!exactKeys(action, [
+				"kind",
+				"id",
+				"input"
+			])) return void 0;
+			return typeof action.id === "string" && action.id !== "" && createInput(action.input) ? {
+				requestId: envelope.requestId,
+				action
+			} : void 0;
+		case "update":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"patch"
+			])) return void 0;
+			return taskId !== void 0 && updatePatch(action.patch) ? {
+				requestId: envelope.requestId,
+				action
+			} : void 0;
+		case "set-schedule":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"patch"
+			])) return void 0;
+			return taskId !== void 0 && schedulePatch(action.patch) ? {
+				requestId: envelope.requestId,
+				action
+			} : void 0;
+		case "move":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"status"
+			])) return void 0;
+			return taskId !== void 0 && isTaskStatus(action.status) ? {
+				requestId: envelope.requestId,
+				action
+			} : void 0;
+		case "delete":
+		case "archive":
+		case "restore":
+		case "run":
+		case "rerun":
+			if (!exactKeys(action, ["kind", "taskId"])) return void 0;
+			return taskId === void 0 ? void 0 : {
+				requestId: envelope.requestId,
+				action
+			};
+		default: return;
+	}
+}
+//#endregion
+//#region src/host-ledger.ts
+const MAX_REQUEST_CACHE = 256;
+function timeZone() {
+	return Intl.DateTimeFormat().resolvedOptions().timeZone || "local";
+}
+function cloneTasks(tasks) {
+	return JSON.parse(JSON.stringify(tasks));
+}
+function hasOpenExecution(task) {
+	return task.executions.some((execution) => execution.endedAt === void 0);
+}
+function processIsAlive(pid) {
+	if (!Number.isSafeInteger(pid) || pid <= 0) return false;
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		return error.code !== "ESRCH";
+	}
+}
+function betterExecution(a, b) {
+	if (a.endedAt === void 0 && b.endedAt !== void 0) return b;
+	if (b.endedAt === void 0 && a.endedAt !== void 0) return a;
+	return (b.endedAt ?? b.startedAt) >= (a.endedAt ?? a.startedAt) ? b : a;
+}
+function mergeTask(a, b) {
+	const newer = b.updatedAt > a.updatedAt ? b : a;
+	const byId = /* @__PURE__ */ new Map();
+	for (const entry of [...a.executions, ...b.executions]) {
+		const previous = byId.get(entry.id);
+		byId.set(entry.id, previous === void 0 ? entry : betterExecution(previous, entry));
+	}
+	return {
+		...newer,
+		executions: [...byId.values()].sort((x, y) => x.startedAt - y.startedAt)
+	};
+}
+function parseHostTasks(values, now) {
+	const rawById = /* @__PURE__ */ new Map();
+	for (const value of values) {
+		if (typeof value !== "object" || value === null) continue;
+		const raw = value;
+		if (typeof raw.id === "string") rawById.set(raw.id, raw);
+	}
+	return parseLedger(JSON.stringify(values)).map((task) => {
+		const rawSchedule = rawById.get(task.id)?.schedule;
+		if (typeof rawSchedule !== "object" || rawSchedule === null) return task;
+		const schedule = rawSchedule;
+		if (typeof schedule.cron !== "string" || isValidCron(schedule.cron)) return task;
+		return {
+			...task,
+			schedule: {
+				enabled: false,
+				cron: schedule.cron,
+				nextRunAt: void 0,
+				lastTriggeredAt: typeof schedule.lastTriggeredAt === "number" && Number.isFinite(schedule.lastTriggeredAt) ? schedule.lastTriggeredAt : void 0
+			}
+		};
+	});
+}
+var HostTaskLedger = class {
+	now;
+	document;
+	listeners = /* @__PURE__ */ new Set();
+	requestCache = /* @__PURE__ */ new Map();
+	lockToken = crypto.randomUUID();
+	lockFd;
+	file;
+	lockFile;
+	constructor(dir = join(dshHome(), "task-board"), now = Date.now) {
+		this.now = now;
+		mkdirSync(dir, { recursive: true });
+		this.file = join(dir, "ledger-v2.json");
+		this.lockFile = join(dir, "ledger-v2.lock");
+		this.lockFd = this.acquireLock();
+		try {
+			this.document = this.load(dir);
+			for (const request of this.document.recentRequests) this.requestCache.set(request.requestId, { fingerprint: request.fingerprint });
+			this.repairSchedules(true);
+			this.reconcileInterruptedStarts();
+			this.commit(false);
+		} catch (error) {
+			this.dispose();
+			throw error;
+		}
+	}
+	state() {
+		const { importedSources: _imports, ...scheduler } = this.document.scheduler;
+		return {
+			revision: this.document.revision,
+			tasks: cloneTasks(this.document.tasks),
+			scheduler: { ...scheduler }
+		};
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	dispose() {
+		const fd = this.lockFd;
+		if (fd === void 0) return;
+		this.lockFd = void 0;
+		closeSync(fd);
+		try {
+			if (JSON.parse(readFileSync(this.lockFile, "utf8")).token === this.lockToken) unlinkSync(this.lockFile);
+		} catch {}
+	}
+	applyRequest(requestId, action) {
+		const fingerprint = createHash("sha256").update(JSON.stringify(action)).digest("hex");
+		const cached = this.requestCache.get(requestId);
+		if (cached !== void 0) {
+			if (cached.fingerprint !== fingerprint) throw new Error("request id was reused with a different action");
+			return { state: this.state() };
+		}
+		this.requestCache.set(requestId, { fingerprint });
+		while (this.requestCache.size > MAX_REQUEST_CACHE) this.requestCache.delete(this.requestCache.keys().next().value);
+		this.syncRecentRequests();
+		try {
+			return this.apply(action);
+		} catch (error) {
+			this.requestCache.delete(requestId);
+			this.syncRecentRequests();
+			throw error;
+		}
+	}
+	openScheduled(taskId, nextRunAt, triggeredAt) {
+		const task = this.document.tasks.find((item) => item.id === taskId);
+		if (task === void 0 || task.archivedAt !== void 0) return void 0;
+		if (task.status === "running" || hasOpenExecution(task)) {
+			this.document.tasks = [...applyScheduleNextRun(this.document.tasks, taskId, nextRunAt, task.schedule?.lastTriggeredAt, triggeredAt)];
+			this.commit();
+			return;
+		}
+		const opened = startExecution(task, triggeredAt, crypto.randomUUID());
+		this.document.tasks = this.document.tasks.map((item) => item.id === taskId ? opened.task : item);
+		this.document.tasks = [...applyScheduleNextRun(this.document.tasks, taskId, nextRunAt, triggeredAt, triggeredAt)];
+		this.commit();
+		return opened;
+	}
+	skipMissed(now) {
+		let changed = false;
+		this.document.tasks = this.document.tasks.map((task) => {
+			const schedule = task.schedule;
+			if (schedule === void 0 || !schedule.enabled || schedule.nextRunAt === void 0 || schedule.nextRunAt > now) return task;
+			changed = true;
+			return {
+				...task,
+				schedule: {
+					...schedule,
+					nextRunAt: nextRunAtMs(schedule.cron, now)
+				},
+				updatedAt: now
+			};
+		});
+		if (changed) this.commit();
+	}
+	setScheduler(patch) {
+		this.document.scheduler = {
+			...this.document.scheduler,
+			...patch
+		};
+		this.commit(false);
+	}
+	attachSession(taskId, executionId, sessionId) {
+		const now = this.now();
+		this.document.tasks = this.document.tasks.map((task) => task.id !== taskId ? task : {
+			...task,
+			updatedAt: now,
+			executions: task.executions.map((entry) => entry.id === executionId ? {
+				...entry,
+				sessionId
+			} : entry)
+		});
+		this.commit();
+	}
+	settle(taskId, executionId, outcome, error) {
+		this.document.tasks = this.document.tasks.map((task) => task.id === taskId ? settleExecution(task, executionId, outcome, this.now(), error) : task);
+		this.commit();
+	}
+	apply(action) {
+		const now = this.now();
+		let run;
+		switch (action.kind) {
+			case "import": {
+				const sources = new Set(this.document.scheduler.importedSources ?? []);
+				if (sources.has(action.sourceId)) return { state: this.state() };
+				const invalidScheduleIds = action.tasks.filter((task) => task.schedule !== void 0 && !isValidCron(task.schedule.cron)).map((task) => task.id);
+				const incoming = parseHostTasks(action.tasks, now);
+				const merged = new Map(this.document.tasks.map((task) => [task.id, task]));
+				for (const task of incoming) merged.set(task.id, merged.has(task.id) ? mergeTask(merged.get(task.id), task) : task);
+				this.document.tasks = [...merged.values()];
+				this.document.scheduler.importedSources = [...sources, action.sourceId];
+				this.document.scheduler.error = invalidScheduleIds.length === 0 ? void 0 : `invalid cron disabled for task(s): ${invalidScheduleIds.join(", ")}`;
+				this.repairSchedules(true, false);
+				this.reconcileInterruptedStarts(false);
+				break;
+			}
+			case "create": {
+				if (this.document.tasks.some((task) => task.id === action.id)) throw new Error("task id already exists");
+				if (action.input.schedule?.enabled === true && (!isValidCron(action.input.schedule.cron) || nextRunAtMs(action.input.schedule.cron, now) === void 0)) throw new Error("invalid schedule");
+				const result = applyCreateTask(this.document.tasks, action.input, now, action.id);
+				if (result.task === void 0) throw new Error("invalid task");
+				this.document.tasks = [...result.tasks];
+				break;
+			}
+			case "update": {
+				const task = this.document.tasks.find((task) => task.id === action.taskId);
+				if (task === void 0) throw new Error("task not found");
+				if (task.archivedAt !== void 0) throw new Error("archived task is read-only");
+				this.document.tasks = [...applyUpdateTask(this.document.tasks, action.taskId, action.patch, now)];
+				break;
+			}
+			case "delete":
+				{
+					const task = this.document.tasks.find((task) => task.id === action.taskId);
+					if (task === void 0) throw new Error("task not found");
+					if (task.status === "running" || hasOpenExecution(task)) throw new Error("running task cannot be deleted");
+				}
+				this.document.tasks = [...applyDeleteTask(this.document.tasks, void 0, action.taskId).tasks];
+				break;
+			case "move": {
+				const task = this.document.tasks.find((item) => item.id === action.taskId);
+				if (task === void 0) throw new Error("task not found");
+				if (task.archivedAt !== void 0) throw new Error("archived task is read-only");
+				if (task.status === "running" || hasOpenExecution(task)) throw new Error("running task cannot be moved");
+				if (!canMoveManually(task.status, action.status)) throw new Error("invalid manual status");
+				this.document.tasks = this.document.tasks.map((item) => item.id === action.taskId ? withStatus(item, action.status, now) : item);
+				break;
+			}
+			case "archive": {
+				const result = applyArchiveTask(this.document.tasks, action.taskId, now);
+				if (!result.archived) throw new Error("task cannot be archived");
+				this.document.tasks = [...result.tasks];
+				break;
+			}
+			case "restore": {
+				const result = applyRestoreTask(this.document.tasks, action.taskId, now);
+				if (!result.archived) throw new Error("task is not archived");
+				this.document.tasks = [...result.tasks];
+				break;
+			}
+			case "set-schedule": {
+				if (this.document.tasks.find((task) => task.id === action.taskId)?.archivedAt !== void 0) throw new Error("archived task is read-only");
+				const result = applySetSchedule(this.document.tasks, action.taskId, action.patch, now);
+				if (!result.applied) throw new Error("invalid schedule");
+				this.document.tasks = [...result.tasks];
+				break;
+			}
+			case "rerun":
+			case "run": {
+				const task = this.document.tasks.find((item) => item.id === action.taskId);
+				if (task?.archivedAt !== void 0) throw new Error("archived task is read-only");
+				if (task === void 0 || task.status === "running" || hasOpenExecution(task)) throw new Error("task is already running or missing");
+				run = startExecution(action.kind === "rerun" ? withStatus(task, "todo", now) : task, now, crypto.randomUUID());
+				this.document.tasks = this.document.tasks.map((item) => item.id === task.id ? run.task : item);
+				break;
+			}
+		}
+		this.commit();
+		return {
+			state: this.state(),
+			...run === void 0 ? {} : { run }
+		};
+	}
+	repairSchedules(skipPast, persist = true) {
+		const now = this.now();
+		let changed = false;
+		this.document.tasks = this.document.tasks.map((task) => {
+			const schedule = task.schedule;
+			if (schedule === void 0 || !schedule.enabled) return task;
+			if (!skipPast && schedule.nextRunAt !== void 0) return task;
+			const next = nextRunAtMs(schedule.cron, now);
+			if (next === void 0) {
+				changed = true;
+				this.document.scheduler.error = `invalid cron disabled for task: ${task.id}`;
+				return {
+					...task,
+					schedule: {
+						...schedule,
+						enabled: false,
+						nextRunAt: void 0
+					},
+					updatedAt: now
+				};
+			}
+			if (schedule.nextRunAt === next) return task;
+			changed = true;
+			return {
+				...task,
+				schedule: {
+					...schedule,
+					nextRunAt: next
+				},
+				updatedAt: now
+			};
+		});
+		if (changed && persist) this.commit();
+	}
+	reconcileInterruptedStarts(persist = true) {
+		const now = this.now();
+		let changed = false;
+		this.document.tasks = this.document.tasks.map((task) => {
+			if (task.status !== "running") return task;
+			const execution = task.executions.at(-1);
+			if (execution === void 0 || execution.endedAt !== void 0 || execution.sessionId !== void 0) return task;
+			changed = true;
+			return settleExecution(task, execution.id, "cancelled", now, "host restarted before the execution session was recorded");
+		});
+		if (changed && persist) this.commit();
+	}
+	load(dir) {
+		const existed = existsSync(this.file);
+		try {
+			const parsed = JSON.parse(readFileSync(this.file, "utf8"));
+			if (parsed.schemaVersion !== 2 || !Array.isArray(parsed.tasks)) throw new Error("unsupported ledger schema");
+			const tasks = parseHostTasks(parsed.tasks, this.now());
+			const invalidScheduleIds = parsed.tasks.flatMap((value) => {
+				if (typeof value !== "object" || value === null) return [];
+				const row = value;
+				if (typeof row.schedule !== "object" || row.schedule === null) return [];
+				const cron = row.schedule.cron;
+				return typeof cron !== "string" || !isValidCron(cron) ? [typeof row.id === "string" ? row.id : "unknown"] : [];
+			});
+			return {
+				schemaVersion: 2,
+				revision: Number.isSafeInteger(parsed.revision) && parsed.revision >= 0 ? parsed.revision : 0,
+				tasks,
+				scheduler: {
+					timeZone: timeZone(),
+					ledgerId: typeof parsed.scheduler?.ledgerId === "string" && parsed.scheduler.ledgerId !== "" ? parsed.scheduler.ledgerId : crypto.randomUUID(),
+					...typeof parsed.scheduler?.lastTickAt === "number" ? { lastTickAt: parsed.scheduler.lastTickAt } : {},
+					...typeof parsed.scheduler?.error === "string" ? { error: parsed.scheduler.error } : {},
+					...invalidScheduleIds.length > 0 ? { error: `invalid cron disabled for task(s): ${invalidScheduleIds.join(", ")}` } : {},
+					...Array.isArray(parsed.scheduler?.importedSources) ? { importedSources: parsed.scheduler.importedSources.filter((x) => typeof x === "string") } : {}
+				},
+				recentRequests: Array.isArray(parsed.recentRequests) ? parsed.recentRequests.flatMap((entry) => {
+					if (typeof entry !== "object" || entry === null) return [];
+					const request = entry;
+					return typeof request.requestId === "string" && request.requestId !== "" && typeof request.fingerprint === "string" ? [{
+						requestId: request.requestId,
+						fingerprint: request.fingerprint
+					}] : [];
+				}).slice(-256) : []
+			};
+		} catch (error) {
+			if (existed) renameSync(this.file, `${this.file}.corrupt-${this.now()}-${process.pid}-${crypto.randomUUID()}`);
+			mkdirSync(dir, { recursive: true });
+			return {
+				schemaVersion: 2,
+				revision: 0,
+				tasks: [],
+				scheduler: {
+					timeZone: timeZone(),
+					ledgerId: crypto.randomUUID(),
+					...existed ? { error: `corrupt ledger was quarantined: ${error instanceof Error ? error.message : String(error)}` } : {}
+				},
+				recentRequests: []
+			};
+		}
+	}
+	syncRecentRequests() {
+		this.document.recentRequests = [...this.requestCache].map(([requestId, request]) => ({
+			requestId,
+			fingerprint: request.fingerprint
+		}));
+	}
+	commit(bumpRevision = true) {
+		if (bumpRevision) this.document.revision += 1;
+		mkdirSync(dirname(this.file), { recursive: true });
+		const tmp = `${this.file}.tmp-${process.pid}`;
+		let fd;
+		try {
+			fd = openSync(tmp, "w", 384);
+			writeFileSync(fd, JSON.stringify(this.document, null, 2), { encoding: "utf8" });
+			fsyncSync(fd);
+			closeSync(fd);
+			fd = void 0;
+			try {
+				chmodSync(tmp, 384);
+			} catch {}
+			renameSync(tmp, this.file);
+			try {
+				const dirFd = openSync(dirname(this.file), "r");
+				try {
+					fsyncSync(dirFd);
+				} finally {
+					closeSync(dirFd);
+				}
+			} catch {}
+		} catch (error) {
+			if (fd !== void 0) closeSync(fd);
+			try {
+				unlinkSync(tmp);
+			} catch {}
+			throw error;
+		}
+		this.notify();
+	}
+	notify() {
+		for (const listener of [...this.listeners]) listener();
+	}
+	acquireLock() {
+		for (let attempt = 0; attempt < 2; attempt += 1) try {
+			const fd = openSync(this.lockFile, "wx", 384);
+			writeFileSync(fd, JSON.stringify({
+				pid: process.pid,
+				token: this.lockToken
+			}), { encoding: "utf8" });
+			fsyncSync(fd);
+			try {
+				chmodSync(this.lockFile, 384);
+			} catch {}
+			return fd;
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+			let pid;
+			try {
+				const owner = JSON.parse(readFileSync(this.lockFile, "utf8"));
+				if (typeof owner.pid === "number") pid = owner.pid;
+			} catch {
+				throw new Error(`task-board ledger lock is unreadable: ${this.lockFile}`);
+			}
+			if (pid !== void 0 && processIsAlive(pid)) throw new Error(`task-board ledger is already owned by process ${pid}`);
+			try {
+				unlinkSync(this.lockFile);
+			} catch (unlinkError) {
+				if (unlinkError.code !== "ENOENT") throw unlinkError;
+			}
+		}
+		throw new Error(`task-board ledger lock could not be acquired: ${this.lockFile}`);
+	}
+};
+//#endregion
+//#region src/host-runner.ts
+function request(payload) {
+	return {
+		rpcId: `task-board-${crypto.randomUUID()}`,
+		payload
+	};
+}
+function failure(error) {
+	return /* @__PURE__ */ new Error(`${error.code}: ${error.message}`);
+}
+/** A post-create launch failure that still identifies the session to the ledger. */
+var SessionLaunchError = class extends Error {
+	sessionId;
+	constructor(sessionId, cause) {
+		super(`execution session ${sessionId} failed during launch: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+		this.sessionId = sessionId;
+		this.name = "SessionLaunchError";
+	}
+};
+function isErrorTurnEnd(data) {
+	if (typeof data !== "object" || data === null) return false;
+	const reason = data.reason;
+	return typeof reason === "object" && reason !== null && reason.kind === "error";
+}
+var HostExecutionRunner = class {
+	api;
+	constructor(api) {
+		this.api = api;
+	}
+	async launch(task) {
+		if (task.workspaceId !== void 0) {
+			const workspaces = await this.api.workspace.list(request({}));
+			if (!workspaces.result.ok) throw failure(workspaces.result.error);
+			if (!workspaces.result.value.items.some((item) => item.workspaceId === task.workspaceId)) throw new Error(`workspace not found: ${task.workspaceId}`);
+		}
+		if (task.mode !== void 0) {
+			const presets = await this.api.agentPresets.list(request({}));
+			if (!presets.result.ok) throw failure(presets.result.error);
+			const preset = presets.result.value.presets.find((item) => item.id === task.mode);
+			if (preset === void 0) throw new Error(`agent preset not found: ${task.mode}`);
+			if (preset.broken !== void 0) throw new Error(`agent preset is unavailable: ${preset.broken}`);
+		}
+		const created = await this.api.sessions.create(request({
+			...task.workspaceId === void 0 ? {} : { workspaceId: task.workspaceId },
+			...task.mode === void 0 ? {} : { agentPreset: task.mode }
+		}));
+		if (!created.result.ok) throw failure(created.result.error);
+		const sessionId = created.result.value.sessionId;
+		try {
+			const renamed = await this.api.sessions.rename(request({
+				sessionId,
+				title: task.title
+			}));
+			if (!renamed.result.ok) throw failure(renamed.result.error);
+			if (task.permission !== void 0) {
+				const command = await this.api.sessions.prompt(request({
+					sessionId,
+					mode: "queue",
+					content: [{
+						type: "text",
+						text: `/permission ${task.permission}`
+					}]
+				}));
+				if (!command.result.ok) throw failure(command.result.error);
+				if (command.result.value.command?.kind !== "success") throw new Error("permission command was not acknowledged");
+			}
+			const prompt = await this.api.sessions.prompt(request({
+				sessionId,
+				mode: "queue",
+				content: [{
+					type: "text",
+					text: task.prompt !== "" ? task.prompt : task.title
+				}]
+			}));
+			if (!prompt.result.ok) throw failure(prompt.result.error);
+		} catch (error) {
+			throw new SessionLaunchError(sessionId, error);
+		}
+		return sessionId;
+	}
+	async listRunning() {
+		try {
+			const response = await this.api.sessions.list(request({}));
+			return response.result.ok ? {
+				known: true,
+				count: response.result.value.items.filter((item) => item.running).length
+			} : { known: false };
+		} catch {
+			return { known: false };
+		}
+	}
+	async inspect(sessionId, startedAt = 0) {
+		const sessions = await this.api.sessions.list(request({}));
+		if (!sessions.result.ok) return { outcome: "pending" };
+		const summary = sessions.result.value.items.find((item) => item.sessionId === sessionId);
+		if (summary === void 0) return {
+			outcome: "cancelled",
+			error: "execution session no longer exists"
+		};
+		if (summary.running) return { outcome: "pending" };
+		const events = [];
+		let beforeSeq;
+		let reachedExecutionBoundary = false;
+		for (let page = 0; page < 100; page += 1) {
+			const history = await this.api.sessions.history(request({
+				sessionId: summary.sessionId,
+				maxMessages: 100,
+				...beforeSeq === void 0 ? {} : { beforeSeq }
+			}));
+			if (!history.result.ok) return { outcome: "pending" };
+			events.push(...history.result.value.events);
+			const oldestTime = history.result.value.events.reduce((oldest, entry) => {
+				const time = entry.event.time;
+				return typeof time !== "number" ? oldest : oldest === void 0 ? time : Math.min(oldest, time);
+			}, void 0);
+			if (!history.result.value.hasMore || oldestTime !== void 0 && oldestTime <= startedAt) {
+				reachedExecutionBoundary = true;
+				break;
+			}
+			const oldestSeq = history.result.value.events.reduce((oldest, entry) => {
+				const seq = entry.event.seq;
+				return typeof seq !== "number" ? oldest : oldest === void 0 ? seq : Math.min(oldest, seq);
+			}, void 0);
+			if (oldestSeq === void 0 || oldestSeq === beforeSeq) return { outcome: "pending" };
+			beforeSeq = oldestSeq;
+		}
+		if (!reachedExecutionBoundary) return { outcome: "pending" };
+		const turnEnd = events.filter((entry) => entry.event.type === "turn/end" && (startedAt <= 0 || typeof entry.event.time === "number" && entry.event.time >= startedAt)).sort((a, b) => (a.event.seq ?? Number.MAX_SAFE_INTEGER) - (b.event.seq ?? Number.MAX_SAFE_INTEGER))[0];
+		if (turnEnd === void 0) return { outcome: "pending" };
+		return isErrorTurnEnd(turnEnd.event.data) ? {
+			outcome: "failed",
+			error: "agent turn ended with an error"
+		} : { outcome: "succeeded" };
+	}
+};
+//#endregion
+//#region src/power-inhibitor.ts
+const RETRY_DELAYS = [
+	1e3,
+	2e3,
+	5e3,
+	1e4,
+	3e4
+];
+const DARWIN_STABLE_MS = 3e4;
+const WINDOWS_HELPER = String.raw`
+$source = @'
+using System;
+using System.Runtime.InteropServices;
+public static class DshExecutionState {
+  [DllImport("kernel32.dll", SetLastError = true)]
+  public static extern uint SetThreadExecutionState(uint flags);
+}
+'@
+Add-Type -TypeDefinition $source
+$continuous = [Convert]::ToUInt32('80000000', 16)
+$systemRequired = [uint32]0x00000001
+try {
+  $result = [DshExecutionState]::SetThreadExecutionState($continuous -bor $systemRequired)
+  if ($result -eq 0) { throw 'SetThreadExecutionState failed' }
+  [Console]::Out.WriteLine('READY')
+  [Console]::Out.Flush()
+  while ([Console]::In.ReadLine() -ne $null) { }
+} finally {
+  [void][DshExecutionState]::SetThreadExecutionState($continuous)
+}
+`;
+const LINUX_HELPER = String.raw`
+process.stdout.write('READY\n')
+process.stdin.resume()
+`;
+const LINUX_INHIBIT_PATHS = ["/usr/bin/systemd-inhibit", "/bin/systemd-inhibit"];
+var PowerInhibitor = class {
+	listeners = /* @__PURE__ */ new Set();
+	enabled = false;
+	reasons = {
+		runningSessions: 0,
+		armedSchedules: 0,
+		sessionStateKnown: false
+	};
+	phase = "disabled";
+	child;
+	retry;
+	retryReset;
+	retryIndex = 0;
+	lastError;
+	stopping = false;
+	platform;
+	pid;
+	env;
+	spawn;
+	spawnSync;
+	exists;
+	execPath;
+	timer;
+	clearTimer;
+	linuxProbe;
+	constructor(options = {}) {
+		this.platform = options.platform ?? process.platform;
+		this.pid = options.pid ?? process.pid;
+		this.env = options.env ?? process.env;
+		this.spawn = options.spawn ?? ((file, args, spawnOptions) => spawn(file, [...args], spawnOptions));
+		this.spawnSync = options.spawnSync ?? ((file, args, spawnOptions) => spawnSync(file, [...args], spawnOptions));
+		this.exists = options.exists ?? existsSync;
+		this.execPath = options.execPath ?? process.execPath;
+		this.timer = options.setTimeout ?? globalThis.setTimeout;
+		this.clearTimer = options.clearTimeout ?? globalThis.clearTimeout;
+	}
+	setEnabled(enabled) {
+		this.enabled = enabled;
+		this.sync();
+		this.emit();
+	}
+	updateReasons(reasons) {
+		this.reasons = reasons;
+		this.sync();
+		this.emit();
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	snapshot() {
+		return {
+			platform: this.platform,
+			phase: this.phase,
+			enabled: this.enabled,
+			...this.reasons,
+			...this.lastError === void 0 ? {} : { lastError: this.lastError }
+		};
+	}
+	dispose() {
+		this.enabled = false;
+		this.release();
+		this.phase = "disabled";
+		this.emit();
+		this.listeners.clear();
+	}
+	desired() {
+		return this.enabled && (!this.reasons.sessionStateKnown || this.reasons.runningSessions > 0 || this.reasons.armedSchedules > 0);
+	}
+	sync() {
+		if (!this.enabled) {
+			this.release();
+			this.phase = "disabled";
+			return;
+		}
+		if (this.platform !== "darwin" && this.platform !== "win32" && this.platform !== "linux") {
+			this.release();
+			this.phase = "unsupported";
+			return;
+		}
+		if (this.platform === "linux" && this.linuxSystemdInhibit() === void 0) {
+			this.release();
+			this.phase = "unsupported";
+			return;
+		}
+		if (!this.desired()) {
+			this.release();
+			this.phase = "idle";
+			return;
+		}
+		if (this.child === void 0 && this.retry === void 0) this.acquire();
+	}
+	acquire() {
+		this.phase = "acquiring";
+		this.emit();
+		this.stopping = false;
+		try {
+			const child = this.spawnCommand();
+			this.child = child;
+			let ready = false;
+			let stderr = "";
+			if (this.platform === "darwin") child.once("spawn", () => {
+				ready = true;
+				this.markReady(child);
+			});
+			child.stdout?.on("data", (chunk) => {
+				if (!ready && chunk.toString("utf8").includes("READY")) {
+					ready = true;
+					this.markReady(child);
+				}
+			});
+			child.stderr?.on("data", (chunk) => {
+				stderr = `${stderr}${chunk.toString("utf8")}`.slice(-2e3);
+			});
+			child.on("error", (error) => {
+				this.fail(error, child);
+			});
+			child.on("exit", (code, signal) => {
+				if (this.child !== child) return;
+				this.child = void 0;
+				if (this.stopping || !this.desired()) return;
+				const detail = stderr.trim();
+				this.fail(/* @__PURE__ */ new Error(`power helper exited (${String(code ?? signal ?? "unknown")})${detail === "" ? "" : `: ${detail}`}`));
+			});
+		} catch (error) {
+			this.fail(error);
+		}
+	}
+	markReady(child) {
+		if (this.child !== child || !this.desired()) return;
+		this.phase = "active";
+		if (this.platform === "darwin") this.retryReset = this.timer(() => {
+			this.retryReset = void 0;
+			if (this.child === child && this.desired()) this.retryIndex = 0;
+		}, DARWIN_STABLE_MS);
+		else this.retryIndex = 0;
+		this.lastError = void 0;
+		this.emit();
+	}
+	fail(error, source) {
+		if (source !== void 0 && this.child !== source) return;
+		this.clearRetryReset();
+		this.lastError = error instanceof Error ? error.message : String(error);
+		this.phase = "error";
+		this.emit();
+		const child = this.child;
+		this.child = void 0;
+		child?.stdin?.end();
+		child?.kill();
+		if (!this.desired() || this.retry !== void 0) return;
+		const delay = RETRY_DELAYS[Math.min(this.retryIndex, RETRY_DELAYS.length - 1)];
+		this.retryIndex += 1;
+		this.retry = this.timer(() => {
+			this.retry = void 0;
+			if (this.desired()) this.acquire();
+		}, delay);
+	}
+	release() {
+		this.clearRetryReset();
+		if (this.retry !== void 0) {
+			this.clearTimer(this.retry);
+			this.retry = void 0;
+		}
+		this.lastError = void 0;
+		const child = this.child;
+		this.child = void 0;
+		if (child === void 0) return;
+		this.stopping = true;
+		if (this.platform === "win32" || this.platform === "linux") {
+			child.stdin?.end();
+			const force = this.timer(() => {
+				if (child.exitCode === null) child.kill();
+			}, 1e3);
+			child.once("exit", () => {
+				this.clearTimer(force);
+			});
+		} else child.kill("SIGTERM");
+	}
+	clearRetryReset() {
+		if (this.retryReset === void 0) return;
+		this.clearTimer(this.retryReset);
+		this.retryReset = void 0;
+	}
+	windowsPowerShell() {
+		const root = this.env.SystemRoot;
+		if (root === void 0 || root.trim() === "") throw new Error("SystemRoot is unavailable");
+		if (!win32.isAbsolute(root)) throw new Error("SystemRoot is not an absolute path");
+		return win32.join(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+	}
+	linuxSystemdInhibit() {
+		if (this.linuxProbe !== void 0) return this.linuxProbe.available ? this.linuxProbe.executable : void 0;
+		const executable = LINUX_INHIBIT_PATHS.find((path) => this.exists(path));
+		if (executable === void 0) {
+			this.linuxProbe = { available: false };
+			return;
+		}
+		const probe = this.spawnSync(executable, ["--list", "--no-pager"], {
+			stdio: "ignore",
+			timeout: 2e3,
+			windowsHide: true
+		});
+		this.linuxProbe = {
+			executable,
+			available: probe.status === 0 && probe.error === void 0
+		};
+		return this.linuxProbe.available ? executable : void 0;
+	}
+	spawnCommand() {
+		if (this.platform === "darwin") return this.spawn("/usr/bin/caffeinate", [
+			"-i",
+			"-w",
+			String(this.pid)
+		], {
+			shell: false,
+			windowsHide: false,
+			stdio: [
+				"ignore",
+				"ignore",
+				"ignore"
+			]
+		});
+		if (this.platform === "linux") {
+			const executable = this.linuxSystemdInhibit();
+			if (executable === void 0) throw new Error("systemd-inhibit is unavailable");
+			return this.spawn(executable, [
+				"--what=idle",
+				"--who=DeepSeek Harness task board",
+				"--why=DSH sessions are running or schedules are armed",
+				"--mode=block",
+				"--",
+				this.execPath,
+				"-e",
+				LINUX_HELPER
+			], {
+				shell: false,
+				windowsHide: false,
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			});
+		}
+		return this.spawn(this.windowsPowerShell(), [
+			"-NoLogo",
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			WINDOWS_HELPER
+		], {
+			shell: false,
+			windowsHide: true,
+			stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			]
+		});
+	}
+	emit() {
+		for (const listener of [...this.listeners]) listener();
+	}
+};
+//#endregion
+//#region src/host-service.ts
+const SESSION_POLL_MS = 5e3;
+const SCHEDULE_TICK_MS = 3e4;
+const RESUME_GAP_MS = 45e3;
+var TaskBoardHostService = class {
+	ledger;
+	runner;
+	power;
+	listeners = /* @__PURE__ */ new Set();
+	timers = [];
+	lastScheduleTick;
+	disposed = false;
+	pollInFlight = false;
+	tickInFlight = false;
+	active = true;
+	preventIdleSleep = false;
+	now;
+	constructor(api, options = {}) {
+		this.ledger = options.ledger ?? new HostTaskLedger();
+		this.runner = new HostExecutionRunner(api);
+		this.power = options.power ?? new PowerInhibitor();
+		this.now = options.now ?? Date.now;
+		this.ledger.subscribe(() => {
+			this.syncPowerReasons();
+			this.emit();
+		});
+		this.power.subscribe(() => {
+			this.emit();
+		});
+	}
+	start() {
+		if (this.disposed || this.timers.length > 0) return;
+		this.syncPowerReasons();
+		this.timers.push(setInterval(() => {
+			this.schedulePoll();
+		}, SESSION_POLL_MS));
+		this.timers.push(setInterval(() => {
+			this.scheduleTick(false);
+		}, SCHEDULE_TICK_MS));
+		this.schedulePoll();
+		this.scheduleTick(true);
+	}
+	setConfiguration(active, preventIdleSleep) {
+		const resumed = !this.active && active;
+		this.active = active;
+		this.preventIdleSleep = preventIdleSleep;
+		if (resumed) {
+			const current = this.power.snapshot();
+			this.power.updateReasons({
+				runningSessions: current.runningSessions,
+				armedSchedules: this.armedSchedules(),
+				sessionStateKnown: false
+			});
+		}
+		this.power.setEnabled(active && preventIdleSleep);
+		if (resumed) {
+			this.schedulePoll();
+			this.scheduleTick(true);
+		}
+		this.emit();
+	}
+	snapshot() {
+		const state = this.ledger.state();
+		return {
+			schemaVersion: 2,
+			revision: state.revision,
+			tasks: state.tasks,
+			scheduler: state.scheduler,
+			power: this.power.snapshot()
+		};
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	apply(requestId, action) {
+		if (!this.active) throw new Error("task board is disabled");
+		const result = this.ledger.applyRequest(requestId, action);
+		if (result.run !== void 0) this.scheduleLaunch(result.run);
+		return {
+			schemaVersion: 2,
+			revision: result.state.revision,
+			tasks: result.state.tasks,
+			scheduler: result.state.scheduler,
+			power: this.power.snapshot()
+		};
+	}
+	dispose() {
+		this.disposed = true;
+		for (const timer of this.timers.splice(0)) clearInterval(timer);
+		this.power.dispose();
+		this.ledger.dispose();
+		this.listeners.clear();
+	}
+	async launch(opened) {
+		try {
+			const sessionId = await this.runner.launch(opened.task);
+			this.ledger.attachSession(opened.task.id, opened.execution.id, sessionId);
+		} catch (error) {
+			if (error instanceof SessionLaunchError) this.ledger.attachSession(opened.task.id, opened.execution.id, error.sessionId);
+			this.ledger.settle(opened.task.id, opened.execution.id, "failed", error instanceof Error ? error.message : String(error));
+		}
+	}
+	async pollSessions() {
+		if (this.disposed) return;
+		if (!this.active && !this.hasOpenExecutions()) return;
+		const running = await this.runner.listRunning();
+		const previous = this.power.snapshot();
+		this.power.updateReasons({
+			runningSessions: running.known ? running.count : previous.runningSessions,
+			armedSchedules: this.armedSchedules(),
+			sessionStateKnown: running.known
+		});
+		if (running.known) await this.reconcileExecutions();
+		this.emit();
+	}
+	async reconcileExecutions() {
+		for (const task of this.ledger.state().tasks) for (const execution of task.executions) {
+			if (execution.sessionId === void 0 || execution.endedAt !== void 0) continue;
+			try {
+				const result = await this.runner.inspect(execution.sessionId, execution.startedAt);
+				if (result.outcome === "pending") continue;
+				this.ledger.settle(task.id, execution.id, result.outcome, "error" in result ? result.error : void 0);
+			} catch {}
+		}
+	}
+	async tickSchedule(first) {
+		if (this.disposed || !this.active) return;
+		const now = this.now();
+		const recovered = first || this.lastScheduleTick !== void 0 && now - this.lastScheduleTick > RESUME_GAP_MS;
+		this.lastScheduleTick = now;
+		this.ledger.setScheduler({ lastTickAt: now });
+		if (recovered) {
+			this.ledger.skipMissed(now);
+			return;
+		}
+		for (const task of this.ledger.state().tasks) {
+			if (task.archivedAt !== void 0) continue;
+			const schedule = task.schedule;
+			if (schedule === void 0 || !schedule.enabled || schedule.nextRunAt === void 0 || schedule.nextRunAt > now) continue;
+			const next = nextRunAtMs(schedule.cron, schedule.nextRunAt);
+			const opened = this.ledger.openScheduled(task.id, next, now);
+			if (opened !== void 0) this.scheduleLaunch(opened);
+		}
+	}
+	armedSchedules() {
+		return this.ledger.state().tasks.filter((task) => task.archivedAt === void 0 && task.schedule?.enabled === true).length;
+	}
+	hasOpenExecutions() {
+		return this.ledger.state().tasks.some((task) => task.executions.some((execution) => execution.endedAt === void 0));
+	}
+	scheduleLaunch(opened) {
+		this.launch(opened).catch((error) => {
+			console.error("[dsh-task-board] execution launch settlement failed", error);
+		});
+	}
+	schedulePoll() {
+		if (this.pollInFlight || this.disposed) return;
+		this.pollInFlight = true;
+		this.pollSessions().catch((error) => {
+			console.error("[dsh-task-board] session polling failed", error);
+		}).finally(() => {
+			this.pollInFlight = false;
+		});
+	}
+	scheduleTick(first) {
+		if (this.tickInFlight || this.disposed) return;
+		this.tickInFlight = true;
+		this.tickSchedule(first).catch((error) => {
+			console.error("[dsh-task-board] scheduler tick failed", error);
+		}).finally(() => {
+			this.tickInFlight = false;
+		});
+	}
+	syncPowerReasons() {
+		const current = this.power.snapshot();
+		this.power.updateReasons({
+			runningSessions: current.runningSessions,
+			armedSchedules: this.armedSchedules(),
+			sessionStateKnown: current.sessionStateKnown
+		});
+		this.power.setEnabled(this.active && this.preventIdleSleep);
+	}
+	emit() {
+		for (const listener of [...this.listeners]) listener();
+	}
+};
+//#endregion
+//#region src/loopback.ts
+/** IPv4 127/8 predicate (four decimal octets, first == 127). */
+function isIPv4Loopback(v4) {
+	const parts = v4.split(".");
+	return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
+}
+/** Whether a socket remote address names the loopback range (127/8, ::1, IPv4-mapped). */
+function isLoopbackAddress(address) {
+	if (address === void 0) return false;
+	const normalized = address.toLowerCase();
+	if (normalized === "::1") return true;
+	if (normalized.startsWith("::ffff:")) return isIPv4Loopback(normalized.slice(7));
+	return isIPv4Loopback(normalized);
+}
+/** Whether a normalized URL hostname names the loopback authority (localhost, [::1], 127/8). */
+function isLoopbackHostname(hostname) {
+	if (hostname === "localhost" || hostname === "[::1]") return true;
+	return isIPv4Loopback(hostname);
+}
+/**
+* Request-level trust fence: a loopback socket address AND a loopback Host
+* header, plus browser same-origin markers. The socket address is
+* authoritative; X-Forwarded-For is never trusted.
+*/
+function isLoopbackRequest(request) {
+	if (!isLoopbackAddress(request.socket.remoteAddress)) return false;
+	const host = request.headers.host;
+	if (typeof host !== "string") return false;
+	let hostUrl;
+	try {
+		hostUrl = new URL("http://" + host);
+	} catch {
+		return false;
+	}
+	if (!isLoopbackHostname(hostUrl.hostname)) return false;
+	if (request.headers["sec-fetch-site"] === "cross-site") return false;
+	const origin = request.headers.origin;
+	if (origin === void 0) return true;
+	try {
+		return new URL(origin).host === hostUrl.host;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/host-routes.ts
+const ACTION_LIMIT = 64 * 1024;
+const IMPORT_LIMIT = 2 * 1024 * 1024;
+const HEARTBEAT_MS = 15e3;
+/** Header replaced by an authenticated same-host reverse proxy. */
+const TASK_BOARD_PROXY_TOKEN_HEADER = "x-dsh-task-board-proxy-token";
+function json(res, status, body) {
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"cache-control": "no-store"
+	});
+	res.end(JSON.stringify(body));
+}
+function parseAuthority(authority) {
+	if (authority.trim() !== authority) return void 0;
+	const match = authority.startsWith("[") ? /^\[[^\]]+\](?::([0-9]+))?$/.exec(authority) : /^[^:@/?#\s]+(?::([0-9]+))?$/.exec(authority);
+	if (match === null) return void 0;
+	try {
+		const url = new URL(`http://${authority}`);
+		if (url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "") return void 0;
+		const rawPort = match[1];
+		if (rawPort !== void 0 && (String(Number(rawPort)) !== rawPort || Number(rawPort) > 65535)) return void 0;
+		return {
+			canonical: url.hostname.toLowerCase() + (rawPort === void 0 ? "" : `:${rawPort}`),
+			url
+		};
+	} catch {
+		return;
+	}
+}
+function resolveAccess(access) {
+	const trustedProxyHosts = /* @__PURE__ */ new Set();
+	for (const authority of access.trustedProxyHosts ?? []) {
+		const parsed = parseAuthority(authority);
+		if (parsed === void 0 || parsed.canonical !== authority.toLowerCase()) throw new Error(`task-board: trustedProxyHosts entry ${JSON.stringify(authority)} is not a canonical host[:port] authority`);
+		trustedProxyHosts.add(parsed.canonical);
+	}
+	if (trustedProxyHosts.size > 0 && (access.proxyToken === void 0 || access.proxyToken === "")) throw new Error("task-board: authenticated proxy hosts require a non-empty proxy token");
+	return {
+		trustedProxyHosts,
+		...access.proxyToken === void 0 ? {} : { proxyToken: access.proxyToken }
+	};
+}
+function browserSameOriginMarker(req) {
+	return req.headers["sec-fetch-site"] === "same-origin" || typeof req.headers.origin === "string";
+}
+function sameAuthority(req, host) {
+	if (req.headers["sec-fetch-site"] === "cross-site") return false;
+	const origin = req.headers.origin;
+	if (origin === void 0) return req.headers["sec-fetch-site"] === "same-origin";
+	try {
+		return new URL(origin).host === host.host;
+	} catch {
+		return false;
+	}
+}
+function matchesToken(candidate, expected) {
+	if (typeof candidate !== "string" || expected === void 0 || candidate === "" || expected === "") return false;
+	const actual = Buffer.from(candidate);
+	const wanted = Buffer.from(expected);
+	return actual.length === wanted.length && timingSafeEqual(actual, wanted);
+}
+/**
+* Task-board route fence. Direct desktop access uses the repository-wide
+* loopback socket + Host guard and additionally requires a browser same-origin
+* marker, so a bare local curl cannot exercise the agent control plane.
+* Authenticated proxies must be explicitly allowlisted and replace the
+* internal token header after their own authentication step.
+*/
+function isTrustedTaskBoardRequest(req, access) {
+	if (!browserSameOriginMarker(req)) return false;
+	if (isLoopbackRequest(req)) return true;
+	if (!isLoopbackAddress(req.socket.remoteAddress)) return false;
+	const host = req.headers.host;
+	if (typeof host !== "string") return false;
+	const parsed = parseAuthority(host);
+	if (parsed === void 0 || parsed.canonical !== host.toLowerCase()) return false;
+	if (!access.trustedProxyHosts.has(parsed.canonical) || !sameAuthority(req, parsed.url)) return false;
+	return matchesToken(req.headers[TASK_BOARD_PROXY_TOKEN_HEADER], access.proxyToken);
+}
+async function readBody(req) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = chunk;
+		size += buffer.length;
+		if (size > IMPORT_LIMIT) throw new Error("body-too-large");
+		chunks.push(buffer);
+	}
+	const raw = Buffer.concat(chunks).toString("utf8");
+	return {
+		raw,
+		value: JSON.parse(raw)
+	};
+}
+function makeTaskBoardRoutes(service, access = {}) {
+	const resolvedAccess = resolveAccess(access);
+	const guard = (req, res) => {
+		if (isTrustedTaskBoardRequest(req, resolvedAccess)) return true;
+		json(res, 403, {
+			ok: false,
+			error: "forbidden"
+		});
+		return false;
+	};
+	return [
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/state`,
+			handler: (req, res) => {
+				if (req.method !== "GET") return json(res, 405, {
+					ok: false,
+					error: "method-not-allowed"
+				});
+				if (!guard(req, res)) return;
+				json(res, 200, service.snapshot());
+			}
+		},
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/action`,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, {
+					ok: false,
+					error: "method-not-allowed"
+				});
+				if (!guard(req, res)) return;
+				if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return json(res, 415, {
+					ok: false,
+					error: "json-required"
+				});
+				try {
+					const body = await readBody(req);
+					const parsed = parseActionEnvelope(body.value);
+					if (parsed === void 0) return json(res, 400, {
+						ok: false,
+						error: "invalid-action"
+					});
+					if (parsed.action.kind !== "import" && Buffer.byteLength(body.raw) > ACTION_LIMIT) return json(res, 413, {
+						ok: false,
+						error: "body-too-large"
+					});
+					json(res, 200, service.apply(parsed.requestId, parsed.action));
+				} catch (error) {
+					const message = error instanceof Error ? error.message : String(error);
+					json(res, message === "body-too-large" ? 413 : 400, {
+						ok: false,
+						error: message
+					});
+				}
+			}
+		},
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/events`,
+			handler: (req, res) => {
+				if (req.method !== "GET") {
+					res.writeHead(405);
+					res.end();
+					return;
+				}
+				if (!guard(req, res)) return;
+				res.writeHead(200, {
+					"content-type": "text/event-stream; charset=utf-8",
+					"cache-control": "no-cache",
+					connection: "keep-alive"
+				});
+				const push = () => {
+					const snapshot = service.snapshot();
+					res.write(`data: ${JSON.stringify({
+						revision: snapshot.revision,
+						scheduler: snapshot.scheduler,
+						power: snapshot.power
+					})}\n\n`);
+				};
+				const unsubscribe = service.subscribe(push);
+				const heartbeat = setInterval(() => {
+					res.write(": ping\n\n");
+				}, HEARTBEAT_MS);
+				const close = () => {
+					clearInterval(heartbeat);
+					unsubscribe();
+				};
+				req.once("close", close);
+				res.once("close", close);
+				push();
+			}
+		}
+	];
+}
+//#endregion
+//#region src/mount-once.ts
+/**
+* Host single-instance guard shared by the plugin family. The family bundle
+* (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+* the loader accepts a standalone install of the same package side by side;
+* without this guard the second instance would still re-register the same
+* webserver routes, tools, settings namespaces, and system-prompt sections
+* and fail the boot. mountOnce makes the second host apply a no-op for the
+* lifetime of the first instance (the browser half is already deduped by
+* package name in the client module host).
+*
+* The registry rides a global symbol so two module instances of the same
+* package (npm copy vs repository link) still share one verdict. cordis
+* `ctx.effect` runs its callback immediately and treats the callback's
+* return value as the fiber disposer, so the unmarker is returned, not run.
+*/
+const MOUNTED = Symbol.for("dsh-web-ui.mounted-plugins");
+function mountedSet() {
+	const registry = globalThis;
+	return registry[MOUNTED] ??= /* @__PURE__ */ new Set();
+}
+/**
+* Wrap a cordis plugin apply so the package runs at most once per process.
+* The first mount registers normally and unmarks when its fiber disposes;
+* any later mount of the same package name is a no-op.
+* @param packageName - npm package identity shared by every install source.
+* @param fn - the original plugin apply.
+* @returns an apply of the same shape.
+*/
+function mountOnce(packageName, fn) {
+	return ((...args) => {
+		const mounted = mountedSet();
+		if (mounted.has(packageName)) return;
+		mounted.add(packageName);
+		args[0]?.effect?.(() => () => {
+			mounted.delete(packageName);
+		});
+		return fn(...args);
+	});
+}
+//#endregion
 //#region src/index.ts
 /** Order of the announcement section within the tool-guidance band. */
 const SECTION_ORDER = 200;
-const inject = ["systemPrompt"];
+/** Default environment variable holding the authenticated proxy token. */
+const DEFAULT_PROXY_TOKEN_ENV = "DSH_TASK_BOARD_PROXY_TOKEN";
+const inject = [
+	"systemPrompt",
+	"apiProxy",
+	"webServer"
+];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；任务可真实执行（驱动 agent 会话）；任务可钉住执行目标——工作区 / 模式（agent 预设）/ 权限（read-only / workspace-write / danger-full-access），缺省用运行时默认；任务支持 5 段 cron 定时执行（如 0 23 * * *）；数据存浏览器 localStorage（键 dsh.taskBoard.v1）。限制：定时调度在浏览器端，需 GUI 标签页打开，错过即跳过；执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。";
+const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。";
 /**
 * Settings namespace of the board's announcement capability — the section the
 * web settings surface edits. Spelled here rather than imported: the browser
@@ -14,8 +2159,24 @@ const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI
 const TASK_BOARD_SETTINGS_NAMESPACE = settingsNamespace("task-board");
 const Config = z.object({
 	announceToAgent: z.boolean().default(true),
-	enabled: z.boolean().default(true)
+	enabled: z.boolean().default(true),
+	preventIdleSleep: z.boolean().default(false),
+	trustedProxyHosts: z.array(z.string()).default([]),
+	proxyTokenEnv: z.string().min(1).default(DEFAULT_PROXY_TOKEN_ENV)
 });
+/** Resolve proxy access without ever placing the token value in plugin config. */
+function resolveProxyAccess(config, env = process.env) {
+	const trustedProxyHosts = config?.trustedProxyHosts ?? [];
+	if (trustedProxyHosts.length === 0) return { trustedProxyHosts };
+	const proxyTokenEnv = config?.proxyTokenEnv ?? "DSH_TASK_BOARD_PROXY_TOKEN";
+	if (proxyTokenEnv.trim() === "") throw new Error("task-board: proxyTokenEnv must not be empty");
+	const proxyToken = env[proxyTokenEnv];
+	if (proxyToken === void 0 || proxyToken === "") throw new Error(`task-board: trustedProxyHosts requires a non-empty ${proxyTokenEnv} environment variable`);
+	return {
+		trustedProxyHosts,
+		proxyToken
+	};
+}
 /** Schema default, re-read for hand-built test contexts (the loader applies them normally). */
 const DEFAULT_ANNOUNCE = true;
 /**
@@ -26,7 +2187,25 @@ const DEFAULT_ANNOUNCE = true;
 * @param ctx - the plugin context (systemPrompt injected).
 * @param config - resolved plugin config (schema defaults applied by the loader).
 */
-function apply(ctx, config) {
+const apply = mountOnce("@linxin666/dsh-client-ui-task-board", applyImpl);
+function applyImpl(ctx, config) {
+	const host = new TaskBoardHostService(ctx.apiProxy);
+	host.setConfiguration(config?.enabled ?? true, config?.preventIdleSleep ?? false);
+	host.start();
+	ctx.effect(() => {
+		const disposers = [];
+		try {
+			for (const route of makeTaskBoardRoutes(host, resolveProxyAccess(config))) disposers.push(ctx.webServer.register(route));
+		} catch (error) {
+			for (const dispose of disposers) dispose();
+			host.dispose();
+			throw error;
+		}
+		return () => {
+			for (const dispose of disposers) dispose();
+			host.dispose();
+		};
+	}, "task-board: host ledger, scheduler, and routes");
 	let current = () => config ?? {};
 	let disposeSection;
 	const sync = () => {
@@ -34,7 +2213,9 @@ function apply(ctx, config) {
 			disposeSection();
 			disposeSection = void 0;
 		}
-		if ((current().enabled ?? true) === false) return;
+		const active = current().enabled ?? true;
+		host.setConfiguration(active, current().preventIdleSleep ?? false);
+		if (!active) return;
 		if ((current().announceToAgent ?? DEFAULT_ANNOUNCE) === false) return;
 		disposeSection = ctx.systemPrompt.section({
 			name: "plugin:task-board",
@@ -51,4 +2232,4 @@ function apply(ctx, config) {
 	sync();
 }
 //#endregion
-export { Config, TASK_BOARD_GUIDANCE, TASK_BOARD_SETTINGS_NAMESPACE, apply, inject };
+export { Config, DEFAULT_PROXY_TOKEN_ENV, TASK_BOARD_GUIDANCE, TASK_BOARD_SETTINGS_NAMESPACE, apply, inject, resolveProxyAccess };