@linxin666/dsh-client-ui-task-board 0.2.4 → 0.2.6

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   node scripts/verify-docs.mjs --write <dir>
-README.md: e9bcccc740d89fdd20a5142efa96dfe79ec842ab
-README.zh.md: bd1b15821bda1577565044c8f9a8e34c1aadfb82
+README.md: 359b35160b1cf7a8c697152b4e3fc60193ed3599
+README.zh.md: 535ac2b5c8b4c6fdbff61c08b9cadae3b5679cc7

package/README.md

@@ -18,7 +18,7 @@ A hot-pluggable DeepSeek Harness (DSH) Web GUI plugin with a Host-authoritative
 - **Deterministic recovery**: a running execution with a recorded session is observed after restart; an interrupted start without a session id is cancelled and is not resent.
 - **Live synchronization**: mutations return a full revisioned snapshot; SSE announces revision, scheduler, and power changes, while reconnect and page visibility recovery fetch a full snapshot.
 - **Optional idle-sleep protection**: off by default; when enabled it covers every running DSH session, enabled non-archived task-board schedules, and unknown session state.
-- **System-prompt injection**: the Host registers a `plugin:task-board` section (order 200) through `SystemPrompt.section`, and the task-board settings can disable the announcement without disabling the board.
+- **System-prompt injection**: the Host registers a `plugin:task-board` section (order 200) through `SystemPrompt.section`, and the task-board settings can disable the announcement without disabling the board. The guidance also reminds agents to close any visible `todo_write` plan before the final answer.
 
 ## Architecture and protocol
 

package/README.zh.md

@@ -18,7 +18,7 @@
 - **确定性恢复**：已有 session id 的 running execution 在重启后继续观察；没有 session id 的启动中断会取消且不会重发。
 - **实时同步**：变更返回完整 revision snapshot；SSE 只提示 revision、scheduler 与 power 变化，重连和页面恢复可见时重新拉完整 snapshot。
 - **可选空闲睡眠保护**：默认关闭；开启后覆盖全部运行中的 DSH 会话、已启用且未归档的任务计划和未知会话状态。
-- **系统提示词注入**：Host 通过 `SystemPrompt.section` 注册 order 200 的 `plugin:task-board` 段；任务看板设置可单独关闭声明而不关闭看板。
+- **系统提示词注入**：Host 通过 `SystemPrompt.section` 注册 order 200 的 `plugin:task-board` 段；任务看板设置可单独关闭声明而不关闭看板。该提示也会提醒 agent 在最终回复前收尾可见的 `todo_write` 计划列表。
 
 ## 架构与协议
 

package/lib/client.js

@@ -2908,7 +2908,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0dsh-css:packages/dsh-task-board/src/client/settings-card.module.css.mjs
-		const css = ".Jh0q7G_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}.Jh0q7G_card:hover{border-color:var(--dsw-alias-label-dimmed)}.Jh0q7G_cardOpen{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}.Jh0q7G_header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}.Jh0q7G_header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.Jh0q7G_headerStatic{border-radius:12px;align-items:center;gap:12px;width:100%;padding:14px 16px;display:flex}.Jh0q7G_headText{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}.Jh0q7G_name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}.Jh0q7G_description{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}.Jh0q7G_pending{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Jh0q7G_chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}.Jh0q7G_chevronOpen{transform:rotate(180deg)}.Jh0q7G_body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}.Jh0q7G_readOnly{color:var(--dsw-alias-label-tertiary);margin:12px 0 0;font-size:12px;line-height:1.5}.Jh0q7G_notExposed{color:var(--dsw-alias-state-warn-primary);margin:12px 0 0;font-size:12px;line-height:1.5}.Jh0q7G_footer{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px;display:flex}.Jh0q7G_failed{min-width:0;color:var(--dsw-alias-label-error);text-overflow:ellipsis;white-space:nowrap;flex:1;margin:0;font-size:12px;line-height:1.5;overflow:hidden}.Jh0q7G_discard,.Jh0q7G_save{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5}.Jh0q7G_discard{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}.Jh0q7G_discard:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}.Jh0q7G_save{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}.Jh0q7G_discard:disabled,.Jh0q7G_save:disabled{opacity:.4;cursor:default}.Jh0q7G_discard:focus-visible,.Jh0q7G_save:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}.Jh0q7G_field{flex-direction:column;gap:6px;padding:12px 0;display:flex}.Jh0q7G_field+.Jh0q7G_field{border-top:1px solid var(--dsw-alias-border-l2)}.Jh0q7G_head{align-items:center;gap:8px;display:flex}.Jh0q7G_label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}.Jh0q7G_badges{align-items:center;gap:8px;display:inline-flex}.Jh0q7G_badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Jh0q7G_reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}.Jh0q7G_reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}.Jh0q7G_reset:disabled{cursor:default}.Jh0q7G_reset:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px;outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.Jh0q7G_input,.Jh0q7G_select{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Jh0q7G_input:focus-visible,.Jh0q7G_select:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}.Jh0q7G_input:disabled,.Jh0q7G_select:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}.Jh0q7G_inputInvalid{border:1px solid var(--dsw-alias-label-error);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Jh0q7G_inputInvalid:focus-visible{outline:2px solid var(--dsw-alias-label-error);outline-offset:1px;border-color:var(--dsw-alias-label-error)}.Jh0q7G_selectWrap{position:relative}.Jh0q7G_selectButton{appearance:none;text-align:left;cursor:pointer;justify-content:space-between;align-items:center;gap:8px;width:100%;display:flex}.Jh0q7G_selectLabel{text-overflow:ellipsis;white-space:nowrap;min-width:0;overflow:hidden}.Jh0q7G_selectChevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}.Jh0q7G_selectChevronOpen{transform:rotate(180deg)}.Jh0q7G_selectPopup{z-index:40;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);max-height:240px;box-shadow:0 8px 24px var(--dsw-alias-bg-mask-2);opacity:0;border-radius:8px;flex-direction:column;padding:4px;transition:opacity .1s,transform .1s;display:flex;position:absolute;top:calc(100% + 4px);left:0;right:0;overflow-y:auto;transform:translateY(-4px)}.Jh0q7G_selectPopupOpen{opacity:1;transform:none}.Jh0q7G_selectPopupClose{opacity:0;pointer-events:none;transform:translateY(-4px)}.Jh0q7G_selectOption{color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;text-overflow:ellipsis;border-radius:6px;padding:6px 10px;font-size:13px;line-height:1.5;overflow:hidden}.Jh0q7G_selectOption:hover,.Jh0q7G_selectOptionActive{background:var(--dsw-alias-interactive-bg-hover)}.Jh0q7G_selectOptionSelected{color:var(--dsw-alias-brand-primary);background:color-mix(in srgb, var(--dsw-alias-brand-primary-new-colorprimary-new-color) 10%, transparent);font-weight:500}.Jh0q7G_invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}.Jh0q7G_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}@media (prefers-reduced-motion:reduce){.Jh0q7G_card,.Jh0q7G_header,.Jh0q7G_chevron,.Jh0q7G_chevronOpen,.Jh0q7G_discard,.Jh0q7G_save,.Jh0q7G_selectChevron,.Jh0q7G_selectChevronOpen,.Jh0q7G_selectPopup{transition:none}}";
+		const css = ".Jh0q7G_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}.Jh0q7G_card:hover{border-color:var(--dsw-alias-label-dimmed)}.Jh0q7G_cardOpen{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}.Jh0q7G_header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}.Jh0q7G_header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.Jh0q7G_headerStatic{border-radius:12px;align-items:center;gap:12px;width:100%;padding:14px 16px;display:flex}.Jh0q7G_headText{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}.Jh0q7G_name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}.Jh0q7G_description{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}.Jh0q7G_pending{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Jh0q7G_chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}.Jh0q7G_chevronOpen{transform:rotate(180deg)}.Jh0q7G_body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}.Jh0q7G_readOnly{color:var(--dsw-alias-label-tertiary);margin:12px 0 0;font-size:12px;line-height:1.5}.Jh0q7G_notExposed{color:var(--dsw-alias-state-warn-primary);margin:12px 0 0;font-size:12px;line-height:1.5}.Jh0q7G_footer{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px;display:flex}.Jh0q7G_failed{min-width:0;color:var(--dsw-alias-label-error);text-overflow:ellipsis;white-space:nowrap;flex:1;margin:0;font-size:12px;line-height:1.5;overflow:hidden}.Jh0q7G_discard,.Jh0q7G_save{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5}.Jh0q7G_discard{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}.Jh0q7G_discard:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}.Jh0q7G_save{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}.Jh0q7G_discard:disabled,.Jh0q7G_save:disabled{opacity:.4;cursor:default}.Jh0q7G_discard:focus-visible,.Jh0q7G_save:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}.Jh0q7G_field{flex-direction:column;gap:6px;padding:12px 0;display:flex}.Jh0q7G_field+.Jh0q7G_field{border-top:1px solid var(--dsw-alias-border-l2)}.Jh0q7G_head{align-items:center;gap:8px;display:flex}.Jh0q7G_label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}.Jh0q7G_badges{align-items:center;gap:8px;display:inline-flex}.Jh0q7G_badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Jh0q7G_reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}.Jh0q7G_reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}.Jh0q7G_reset:disabled{cursor:default}.Jh0q7G_reset:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px;outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.Jh0q7G_input,.Jh0q7G_select{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Jh0q7G_input:focus-visible,.Jh0q7G_select:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}.Jh0q7G_input:disabled,.Jh0q7G_select:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}.Jh0q7G_inputInvalid{border:1px solid var(--dsw-alias-label-error);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Jh0q7G_inputInvalid:focus-visible{outline:2px solid var(--dsw-alias-label-error);outline-offset:1px;border-color:var(--dsw-alias-label-error)}.Jh0q7G_selectWrap{position:relative}.Jh0q7G_selectButton{appearance:none;text-align:left;cursor:pointer;justify-content:space-between;align-items:center;gap:8px;width:100%;display:flex}.Jh0q7G_selectLabel{text-overflow:ellipsis;white-space:nowrap;min-width:0;overflow:hidden}.Jh0q7G_selectChevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}.Jh0q7G_selectChevronOpen{transform:rotate(180deg)}.Jh0q7G_selectPopup{z-index:40;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);max-height:240px;box-shadow:0 8px 24px var(--dsw-alias-bg-mask-2);opacity:0;border-radius:8px;flex-direction:column;padding:4px;transition:opacity .1s,transform .1s;display:flex;position:absolute;top:calc(100% + 4px);left:0;right:0;overflow-y:auto;transform:translateY(-4px)}.Jh0q7G_selectPopupOpen{opacity:1;transform:none}.Jh0q7G_selectPopupClose{opacity:0;pointer-events:none;transform:translateY(-4px)}.Jh0q7G_selectOption{color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;text-overflow:ellipsis;border-radius:6px;flex-shrink:0;padding:6px 10px;font-size:13px;line-height:1.5;overflow:hidden}.Jh0q7G_selectOption:hover,.Jh0q7G_selectOptionActive{background:var(--dsw-alias-interactive-bg-hover)}.Jh0q7G_selectOptionSelected{color:var(--dsw-alias-brand-primary);background:color-mix(in srgb, var(--dsw-alias-brand-primary-new-colorprimary-new-color) 10%, transparent);font-weight:500}.Jh0q7G_invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}.Jh0q7G_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}@media (prefers-reduced-motion:reduce){.Jh0q7G_card,.Jh0q7G_header,.Jh0q7G_chevron,.Jh0q7G_chevronOpen,.Jh0q7G_discard,.Jh0q7G_save,.Jh0q7G_selectChevron,.Jh0q7G_selectChevronOpen,.Jh0q7G_selectPopup{transition:none}}";
 		const tagId = "@linxin666/dsh-client-ui-task-board/settings-card.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");

package/lib/index.js

@@ -1,10 +1,10 @@
 import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import z from "schemastery";
+import { spawn, spawnSync } from "node:child_process";
 import { createHash, timingSafeEqual } from "node:crypto";
-import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, isAbsolute, join, win32 } from "node:path";
 import { homedir } from "node:os";
-import { spawn, spawnSync } from "node:child_process";
 //#region src/core/schedule.ts
 /** Inclusive ranges per field, in cron order. */
 const FIELD_RANGES = [
@@ -861,6 +861,69 @@ function processIsAlive(pid) {
 		return error.code !== "ESRCH";
 	}
 }
+const PROCESS_PROBE_TIMEOUT_MS = 3e3;
+let ownStartTime;
+let ownStartTimeResolved = false;
+/**
+* Best-effort start time (Unix epoch ms) of a live process. Used to prove
+* whether the ledger lock really belongs to the PID recorded in it, so a
+* crash leftover whose PID was reused by an unrelated process (issue #786)
+* is detected as stale instead of blocking startup forever. Returns
+* undefined when the platform probe is unavailable; callers fail closed.
+*/
+function processStartTimeMs(pid) {
+	if (process.platform === "win32") {
+		const probe = spawnSync("powershell", [
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			"[DateTimeOffset]::FromFileTime((Get-Process -Id " + String(pid) + " -ErrorAction SilentlyContinue).StartTime.ToUniversalTime().ToFileTime()).ToUnixTimeMilliseconds()"
+		], {
+			timeout: PROCESS_PROBE_TIMEOUT_MS,
+			windowsHide: true
+		});
+		if (probe.status !== 0 || probe.stdout.length === 0) return void 0;
+		const started = Number(probe.stdout.toString("utf8").trim());
+		return Number.isFinite(started) ? started : void 0;
+	}
+	const env = {
+		...process.env,
+		LC_ALL: "C"
+	};
+	const probe = spawnSync("ps", [
+		"-o",
+		"lstart=",
+		"-p",
+		String(pid)
+	], {
+		timeout: PROCESS_PROBE_TIMEOUT_MS,
+		env
+	});
+	if (probe.status === 0 && probe.stdout.length > 0) {
+		const started = Date.parse(probe.stdout.toString("utf8").trim());
+		if (Number.isFinite(started)) return started;
+	}
+	const elapsed = spawnSync("ps", [
+		"-o",
+		"etimes=",
+		"-p",
+		String(pid)
+	], {
+		timeout: PROCESS_PROBE_TIMEOUT_MS,
+		env
+	});
+	if (elapsed.status !== 0 || elapsed.stdout.length === 0) return void 0;
+	const seconds = Number(elapsed.stdout.toString("utf8").trim());
+	if (!Number.isFinite(seconds)) return void 0;
+	return Date.now() - seconds * 1e3;
+}
+function ownProcessStartTimeMs() {
+	if (!ownStartTimeResolved) {
+		ownStartTimeResolved = true;
+		ownStartTime = processStartTimeMs(process.pid);
+	}
+	return ownStartTime;
+}
 function betterExecution(a, b) {
 	if (a.endedAt === void 0 && b.endedAt !== void 0) return b;
 	if (b.endedAt === void 0 && a.endedAt !== void 0) return a;
@@ -1308,7 +1371,8 @@ var HostTaskLedger = class {
 			const fd = openSync(this.lockFile, "wx", 384);
 			writeFileSync(fd, JSON.stringify({
 				pid: process.pid,
-				token: this.lockToken
+				token: this.lockToken,
+				startedAt: ownProcessStartTimeMs()
 			}), { encoding: "utf8" });
 			fsyncSync(fd);
 			try {
@@ -1318,13 +1382,27 @@ var HostTaskLedger = class {
 		} catch (error) {
 			if (error.code !== "EEXIST") throw error;
 			let pid;
+			let ownerStartedAt;
 			try {
 				const owner = JSON.parse(readFileSync(this.lockFile, "utf8"));
 				if (typeof owner.pid === "number") pid = owner.pid;
+				if (typeof owner.startedAt === "number") ownerStartedAt = owner.startedAt;
 			} catch {
 				throw new Error(`task-board ledger lock is unreadable: ${this.lockFile}`);
 			}
-			if (pid !== void 0 && processIsAlive(pid)) throw new Error(`task-board ledger is already owned by process ${pid}`);
+			if (pid !== void 0 && processIsAlive(pid)) {
+				const actualStartedAt = pid === process.pid ? ownProcessStartTimeMs() : processStartTimeMs(pid);
+				if (!(actualStartedAt !== void 0 && (ownerStartedAt !== void 0 ? actualStartedAt !== ownerStartedAt : (() => {
+					try {
+						return statSync(this.lockFile).mtimeMs < actualStartedAt;
+					} catch {
+						return true;
+					}
+				})()))) {
+					const hint = ownerStartedAt !== void 0 && actualStartedAt === ownerStartedAt ? "" : `; if this PID was reused after a crash and no other DSH host is running, remove ${this.lockFile} manually and retry`;
+					throw new Error(`task-board ledger is already owned by process ${pid}${hint}`);
+				}
+			}
 			try {
 				unlinkSync(this.lockFile);
 			} catch (unlinkError) {
@@ -1361,8 +1439,10 @@ function isErrorTurnEnd(data) {
 }
 var HostExecutionRunner = class {
 	api;
-	constructor(api) {
+	commands;
+	constructor(api, commands) {
 		this.api = api;
+		this.commands = commands;
 	}
 	async launch(task) {
 		if (task.workspaceId !== void 0) {
@@ -1390,16 +1470,10 @@ var HostExecutionRunner = class {
 			}));
 			if (!renamed.result.ok) throw failure(renamed.result.error);
 			if (task.permission !== void 0) {
-				const command = await this.api.sessions.prompt(request({
-					sessionId,
-					mode: "queue",
-					content: [{
-						type: "text",
-						text: `/permission ${task.permission}`
-					}]
-				}));
-				if (!command.result.ok) throw failure(command.result.error);
-				if (command.result.value.command?.kind !== "success") throw new Error("permission command was not acknowledged");
+				if (this.commands === void 0) throw new Error("permission command dispatcher is unavailable");
+				const command = await this.commands.execute(sessionId, `/permission ${task.permission}`, AbortSignal.timeout(3e4));
+				if (command === void 0) throw new Error("permission command was not acknowledged");
+				if (command.kind !== "success") throw new Error(command.text ?? "permission command failed");
 			}
 			const prompt = await this.api.sessions.prompt(request({
 				sessionId,
@@ -1805,7 +1879,7 @@ var TaskBoardHostService = class {
 	now;
 	constructor(api, options = {}) {
 		this.ledger = options.ledger ?? new HostTaskLedger();
-		this.runner = new HostExecutionRunner(api);
+		this.runner = new HostExecutionRunner(api, options.commandDispatcher);
 		this.power = options.power ?? new PowerInhibitor();
 		this.now = options.now ?? Date.now;
 		this.ledger.subscribe(() => {
@@ -2277,10 +2351,12 @@ const DEFAULT_PROXY_TOKEN_ENV = "DSH_TASK_BOARD_PROXY_TOKEN";
 const inject = [
 	"systemPrompt",
 	"apiProxy",
-	"webServer"
+	"webServer",
+	"agents",
+	"commands"
 ];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。";
+const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。若你同时用 todo_write 维护会话顶部的可见计划列表，最终回复前必须再次调用 todo_write 收尾：没有剩余工作时不要保留 in_progress，已完成的最后一步要标为 completed。";
 /**
 * Settings namespace of the board's announcement capability — the section the
 * web settings surface edits. Spelled here rather than imported: the browser
@@ -2319,7 +2395,11 @@ const DEFAULT_ANNOUNCE = true;
 */
 const apply = mountOnce("@linxin666/dsh-client-ui-task-board", applyImpl);
 function applyImpl(ctx, config) {
-	const host = new TaskBoardHostService(ctx.apiProxy);
+	const host = new TaskBoardHostService(ctx.apiProxy, { commandDispatcher: { async execute(sessionId, line, signal) {
+		const agent = ctx.agents.get(sessionId);
+		if (agent === void 0) throw new Error(`execution session ${sessionId} is not available`);
+		return (await ctx.commands.execute(agent, line, [], signal))?.result;
+	} } });
 	host.setConfiguration(config?.enabled ?? true, config?.preventIdleSleep ?? false);
 	host.start();
 	ctx.effect(() => {

package/lib/types/host-runner.d.ts

@@ -1,9 +1,16 @@
 import type { ApiProxy } from '@deepseek-ai/dsh-host-apiproxy';
+import type { CommandResult } from '@deepseek-ai/dsh-commands/types';
 import type { TaskRecord } from './core/tasks.ts';
 /** One session-list row, extracted from the sessions.list RPC result. */
 export type SessionSummary = Extract<Awaited<ReturnType<ApiProxy['sessions']['list']>>['result'], {
     ok: true;
 }>['value']['items'][number];
+type ExecutionSessionId = Extract<Awaited<ReturnType<ApiProxy['sessions']['create']>>['result'], {
+    ok: true;
+}>['value']['sessionId'];
+export interface SessionCommandDispatcher {
+    execute(sessionId: ExecutionSessionId, line: string, signal: AbortSignal): Promise<CommandResult | undefined>;
+}
 export type ExecutionInspection = {
     outcome: 'pending';
 } | {
@@ -22,7 +29,8 @@ export declare class SessionLaunchError extends Error {
 }
 export declare class HostExecutionRunner {
     private readonly api;
-    constructor(api: ApiProxy);
+    private readonly commands?;
+    constructor(api: ApiProxy, commands?: SessionCommandDispatcher | undefined);
     launch(task: TaskRecord): Promise<string>;
     listRunning(): Promise<{
         known: true;
@@ -39,3 +47,4 @@ export declare class HostExecutionRunner {
      */
     inspect(sessionId: string, startedAt?: number, sessions?: readonly SessionSummary[]): Promise<ExecutionInspection>;
 }
+export {};

package/lib/types/host-service.d.ts

@@ -1,6 +1,6 @@
 import type { ApiProxy } from '@deepseek-ai/dsh-host-apiproxy';
 import { HostTaskLedger } from './host-ledger.ts';
-import { HostExecutionRunner } from './host-runner.ts';
+import { HostExecutionRunner, type SessionCommandDispatcher } from './host-runner.ts';
 import { PowerInhibitor } from './power-inhibitor.ts';
 import type { TaskBoardAction, TaskBoardEventPayload, TaskBoardSnapshot } from './protocol.ts';
 export declare class TaskBoardHostService {
@@ -21,6 +21,7 @@ export declare class TaskBoardHostService {
         ledger?: HostTaskLedger;
         power?: PowerInhibitor;
         now?: () => number;
+        commandDispatcher?: SessionCommandDispatcher;
     });
     start(): void;
     setConfiguration(active: boolean, preventIdleSleep: boolean): void;

package/lib/types/index.d.ts

@@ -11,7 +11,7 @@ import z from 'schemastery';
 export declare const DEFAULT_PROXY_TOKEN_ENV = "DSH_TASK_BOARD_PROXY_TOKEN";
 export declare const inject: string[];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-export declare const TASK_BOARD_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-task-board \u63D2\u4EF6\uFF08DSH Web GUI \u7684\u4EFB\u52A1\u770B\u677F\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300C\u4EFB\u52A1\u770B\u677F\u300D\u5165\u53E3\uFF1B\u5728 dsh-web-ui \u63D2\u4EF6\u5168\u5BB6\u6876\u4ED3\u5E93\uFF08packages/dsh-task-board\uFF09\u7EDF\u4E00\u7EF4\u62A4\uFF0C\u7ECF\u805A\u5408\u5305 web-ui-all \u4E00\u952E\u5B89\u88C5\u3002\u80FD\u529B\uFF1A\u591A\u5217\u770B\u677F\u7BA1\u7406\u4EFB\u52A1\uFF1BHost \u6743\u5A01\u8D26\u672C\uFF1B\u5173\u95ED\u6D4F\u89C8\u5668\u540E\u4ECD\u7531 Host \u6267\u884C\u548C\u7ED3\u7B97\uFF1B\u4EFB\u52A1\u53EF\u9489\u4F4F\u5DE5\u4F5C\u533A\u3001agent \u9884\u8BBE\u548C\u6743\u9650\uFF1B\u652F\u6301 Host \u672C\u5730\u65F6\u533A\u7684 5 \u6BB5 cron\uFF0C\u9519\u8FC7\u7684\u89E6\u53D1\u70B9\u4E0D\u8865\u8DD1\uFF1B\u53EF\u9009\u4E14\u9ED8\u8BA4\u5173\u95ED\u7684\u7A7A\u95F2\u7CFB\u7EDF\u7761\u7720\u4FDD\u62A4\u5141\u8BB8\u5C4F\u5E55\u7184\u706D\uFF0C\u4F46\u4E0D\u627F\u8BFA\u62E6\u622A\u5408\u76D6\u3001\u624B\u52A8\u7761\u7720\u3001\u4F11\u7720\u3001\u5173\u673A\u6216\u5524\u9192\u5DF2\u7761\u7720\u673A\u5668\u3002\u6267\u884C\u6D88\u8017 API \u989D\u5EA6\u3002\u7528\u6237\u63D0\u5230\u300C\u4EFB\u52A1\u770B\u677F / \u770B\u677F / \u5B9A\u65F6\u4EFB\u52A1\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002";
+export declare const TASK_BOARD_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-task-board \u63D2\u4EF6\uFF08DSH Web GUI \u7684\u4EFB\u52A1\u770B\u677F\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300C\u4EFB\u52A1\u770B\u677F\u300D\u5165\u53E3\uFF1B\u5728 dsh-web-ui \u63D2\u4EF6\u5168\u5BB6\u6876\u4ED3\u5E93\uFF08packages/dsh-task-board\uFF09\u7EDF\u4E00\u7EF4\u62A4\uFF0C\u7ECF\u805A\u5408\u5305 web-ui-all \u4E00\u952E\u5B89\u88C5\u3002\u80FD\u529B\uFF1A\u591A\u5217\u770B\u677F\u7BA1\u7406\u4EFB\u52A1\uFF1BHost \u6743\u5A01\u8D26\u672C\uFF1B\u5173\u95ED\u6D4F\u89C8\u5668\u540E\u4ECD\u7531 Host \u6267\u884C\u548C\u7ED3\u7B97\uFF1B\u4EFB\u52A1\u53EF\u9489\u4F4F\u5DE5\u4F5C\u533A\u3001agent \u9884\u8BBE\u548C\u6743\u9650\uFF1B\u652F\u6301 Host \u672C\u5730\u65F6\u533A\u7684 5 \u6BB5 cron\uFF0C\u9519\u8FC7\u7684\u89E6\u53D1\u70B9\u4E0D\u8865\u8DD1\uFF1B\u53EF\u9009\u4E14\u9ED8\u8BA4\u5173\u95ED\u7684\u7A7A\u95F2\u7CFB\u7EDF\u7761\u7720\u4FDD\u62A4\u5141\u8BB8\u5C4F\u5E55\u7184\u706D\uFF0C\u4F46\u4E0D\u627F\u8BFA\u62E6\u622A\u5408\u76D6\u3001\u624B\u52A8\u7761\u7720\u3001\u4F11\u7720\u3001\u5173\u673A\u6216\u5524\u9192\u5DF2\u7761\u7720\u673A\u5668\u3002\u6267\u884C\u6D88\u8017 API \u989D\u5EA6\u3002\u7528\u6237\u63D0\u5230\u300C\u4EFB\u52A1\u770B\u677F / \u770B\u677F / \u5B9A\u65F6\u4EFB\u52A1\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002\u82E5\u4F60\u540C\u65F6\u7528 todo_write \u7EF4\u62A4\u4F1A\u8BDD\u9876\u90E8\u7684\u53EF\u89C1\u8BA1\u5212\u5217\u8868\uFF0C\u6700\u7EC8\u56DE\u590D\u524D\u5FC5\u987B\u518D\u6B21\u8C03\u7528 todo_write \u6536\u5C3E\uFF1A\u6CA1\u6709\u5269\u4F59\u5DE5\u4F5C\u65F6\u4E0D\u8981\u4FDD\u7559 in_progress\uFF0C\u5DF2\u5B8C\u6210\u7684\u6700\u540E\u4E00\u6B65\u8981\u6807\u4E3A completed\u3002";
 /**
  * Settings namespace of the board's announcement capability — the section the
  * web settings surface edits. Spelled here rather than imported: the browser

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Host-authoritative task board for the DSH Web GUI with real session execution, Host cron scheduling, and optional cross-platform idle-sleep protection; mounted without DSH source changes.",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -35,6 +35,8 @@
     }
   },
   "peerDependencies": {
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
     "react": "^18.2.0"
   },
   "dependencies": {
@@ -42,11 +44,13 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-client-connection": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-host-apiproxy": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-settings": "^0.1.0-rc.8",

package/src/client/settings-card.module.css

@@ -354,6 +354,8 @@
 }
 
 .selectOption {
+  /* 弹层是 max-height 受限的 flex 列：选项必须保持自然行高，超出交给弹层滚动 */
+  flex-shrink: 0;
   border-radius: 6px;
   padding: 6px 10px;
   font-size: 13px;

package/src/host-ledger.ts

@@ -1,5 +1,6 @@
+import { spawnSync } from 'node:child_process'
 import { createHash } from 'node:crypto'
-import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import { dshHome } from './dsh-home.ts'
 import { isValidCron, nextRunAtMs } from './core/schedule.ts'
@@ -68,6 +69,53 @@ function processIsAlive(pid: number): boolean {
   }
 }
 
+const PROCESS_PROBE_TIMEOUT_MS = 3000
+
+let ownStartTime: number | undefined
+let ownStartTimeResolved = false
+
+/**
+ * Best-effort start time (Unix epoch ms) of a live process. Used to prove
+ * whether the ledger lock really belongs to the PID recorded in it, so a
+ * crash leftover whose PID was reused by an unrelated process (issue #786)
+ * is detected as stale instead of blocking startup forever. Returns
+ * undefined when the platform probe is unavailable; callers fail closed.
+ */
+function processStartTimeMs(pid: number): number | undefined {
+  if (process.platform === 'win32') {
+    const probe = spawnSync(
+      'powershell',
+      ['-NoProfile', '-NonInteractive', '-Command',
+        '[DateTimeOffset]::FromFileTime((Get-Process -Id ' + String(pid) + ' -ErrorAction SilentlyContinue).StartTime.ToUniversalTime().ToFileTime()).ToUnixTimeMilliseconds()'],
+      { timeout: PROCESS_PROBE_TIMEOUT_MS, windowsHide: true },
+    )
+    if (probe.status !== 0 || probe.stdout.length === 0) return undefined
+    const started = Number(probe.stdout.toString('utf8').trim())
+    return Number.isFinite(started) ? started : undefined
+  }
+  // POSIX: ps lstart with a forced English locale, falling back to the
+  // elapsed-seconds column when lstart cannot be parsed.
+  const env = { ...process.env, LC_ALL: 'C' }
+  const probe = spawnSync('ps', ['-o', 'lstart=', '-p', String(pid)], { timeout: PROCESS_PROBE_TIMEOUT_MS, env })
+  if (probe.status === 0 && probe.stdout.length > 0) {
+    const started = Date.parse(probe.stdout.toString('utf8').trim())
+    if (Number.isFinite(started)) return started
+  }
+  const elapsed = spawnSync('ps', ['-o', 'etimes=', '-p', String(pid)], { timeout: PROCESS_PROBE_TIMEOUT_MS, env })
+  if (elapsed.status !== 0 || elapsed.stdout.length === 0) return undefined
+  const seconds = Number(elapsed.stdout.toString('utf8').trim())
+  if (!Number.isFinite(seconds)) return undefined
+  return Date.now() - seconds * 1000
+}
+
+function ownProcessStartTimeMs(): number | undefined {
+  if (!ownStartTimeResolved) {
+    ownStartTimeResolved = true
+    ownStartTime = processStartTimeMs(process.pid)
+  }
+  return ownStartTime
+}
+
 function betterExecution(a: ExecutionRecord, b: ExecutionRecord): ExecutionRecord {
   if (a.endedAt === undefined && b.endedAt !== undefined) return b
   if (b.endedAt === undefined && a.endedAt !== undefined) return a
@@ -512,7 +560,7 @@ export class HostTaskLedger {
     for (let attempt = 0; attempt < 2; attempt += 1) {
       try {
         const fd = openSync(this.lockFile, 'wx', 0o600)
-        writeFileSync(fd, JSON.stringify({ pid: process.pid, token: this.lockToken }), { encoding: 'utf8' })
+        writeFileSync(fd, JSON.stringify({ pid: process.pid, token: this.lockToken, startedAt: ownProcessStartTimeMs() }), { encoding: 'utf8' })
         fsyncSync(fd)
         try { chmodSync(this.lockFile, 0o600) } catch { /* Windows ACLs own access */ }
         return fd
@@ -520,14 +568,35 @@ export class HostTaskLedger {
         const code = (error as NodeJS.ErrnoException).code
         if (code !== 'EEXIST') throw error
         let pid: number | undefined
+        let ownerStartedAt: number | undefined
         try {
-          const owner = JSON.parse(readFileSync(this.lockFile, 'utf8')) as { pid?: unknown }
+          const owner = JSON.parse(readFileSync(this.lockFile, 'utf8')) as { pid?: unknown; startedAt?: unknown }
           if (typeof owner.pid === 'number') pid = owner.pid
+          if (typeof owner.startedAt === 'number') ownerStartedAt = owner.startedAt
         } catch {
           throw new Error(`task-board ledger lock is unreadable: ${this.lockFile}`)
         }
         if (pid !== undefined && processIsAlive(pid)) {
-          throw new Error(`task-board ledger is already owned by process ${pid}`)
+          const actualStartedAt = pid === process.pid ? ownProcessStartTimeMs() : processStartTimeMs(pid)
+          // A reused PID is exposed when the live process identity no longer
+          // matches the recorded one: either the recorded start time differs,
+          // or (legacy locks without one) the lock file predates the live
+          // process and therefore cannot have been written by it. Takeover is
+          // safe in both cases — the original owner is gone.
+          const staleReuse = actualStartedAt !== undefined && (
+            ownerStartedAt !== undefined
+              ? actualStartedAt !== ownerStartedAt
+              : (() => {
+                try { return statSync(this.lockFile).mtimeMs < actualStartedAt } catch { return true }
+              })()
+          )
+          if (!staleReuse) {
+            const confirmedOwner = ownerStartedAt !== undefined && actualStartedAt === ownerStartedAt
+            const hint = confirmedOwner
+              ? ''
+              : `; if this PID was reused after a crash and no other DSH host is running, remove ${this.lockFile} manually and retry`
+            throw new Error(`task-board ledger is already owned by process ${pid}${hint}`)
+          }
         }
         try { unlinkSync(this.lockFile) } catch (unlinkError) {
           if ((unlinkError as NodeJS.ErrnoException).code !== 'ENOENT') throw unlinkError

package/src/host-runner.ts

@@ -1,4 +1,5 @@
 import type { ApiProxy, RpcId } from '@deepseek-ai/dsh-host-apiproxy'
+import type { CommandResult } from '@deepseek-ai/dsh-commands/types'
 import type { TaskRecord } from './core/tasks.ts'
 
 function request<T>(payload: T) {
@@ -15,6 +16,19 @@ export type SessionSummary = Extract<
   { ok: true }
 >['value']['items'][number]
 
+type ExecutionSessionId = Extract<
+  Awaited<ReturnType<ApiProxy['sessions']['create']>>['result'],
+  { ok: true }
+>['value']['sessionId']
+
+export interface SessionCommandDispatcher {
+  execute(
+    sessionId: ExecutionSessionId,
+    line: string,
+    signal: AbortSignal,
+  ): Promise<CommandResult | undefined>
+}
+
 export type ExecutionInspection =
   | { outcome: 'pending' }
   | { outcome: 'succeeded' }
@@ -36,7 +50,10 @@ function isErrorTurnEnd(data: unknown): boolean {
 }
 
 export class HostExecutionRunner {
-  constructor(private readonly api: ApiProxy) {}
+  constructor(
+    private readonly api: ApiProxy,
+    private readonly commands?: SessionCommandDispatcher,
+  ) {}
 
   async launch(task: TaskRecord): Promise<string> {
     if (task.workspaceId !== undefined) {
@@ -63,13 +80,10 @@ export class HostExecutionRunner {
       const renamed = await this.api.sessions.rename(request({ sessionId, title: task.title }))
       if (!renamed.result.ok) throw failure(renamed.result.error)
       if (task.permission !== undefined) {
-        const command = await this.api.sessions.prompt(request({
-          sessionId,
-          mode: 'queue' as const,
-          content: [{ type: 'text' as const, text: `/permission ${task.permission}` }],
-        }))
-        if (!command.result.ok) throw failure(command.result.error)
-        if (command.result.value.command?.kind !== 'success') throw new Error('permission command was not acknowledged')
+        if (this.commands === undefined) throw new Error('permission command dispatcher is unavailable')
+        const command = await this.commands.execute(sessionId, `/permission ${task.permission}`, AbortSignal.timeout(30_000))
+        if (command === undefined) throw new Error('permission command was not acknowledged')
+        if (command.kind !== 'success') throw new Error(command.text ?? 'permission command failed')
       }
       const prompt = await this.api.sessions.prompt(request({
         sessionId,

package/src/host-service.ts

@@ -2,7 +2,7 @@ import type { ApiProxy } from '@deepseek-ai/dsh-host-apiproxy'
 import { nextRunAtMs } from './core/schedule.ts'
 import type { TaskRecord } from './core/tasks.ts'
 import { HostTaskLedger, type OpenedRun } from './host-ledger.ts'
-import { HostExecutionRunner, SessionLaunchError, type SessionSummary } from './host-runner.ts'
+import { HostExecutionRunner, SessionLaunchError, type SessionCommandDispatcher, type SessionSummary } from './host-runner.ts'
 import { PowerInhibitor } from './power-inhibitor.ts'
 import type { TaskBoardAction, TaskBoardEventPayload, TaskBoardSnapshot } from './protocol.ts'
 
@@ -25,9 +25,14 @@ export class TaskBoardHostService {
   private lastPowerJson = ''
   private readonly now: () => number
 
-  constructor(api: ApiProxy, options: { ledger?: HostTaskLedger; power?: PowerInhibitor; now?: () => number } = {}) {
+  constructor(api: ApiProxy, options: {
+    ledger?: HostTaskLedger
+    power?: PowerInhibitor
+    now?: () => number
+    commandDispatcher?: SessionCommandDispatcher
+  } = {}) {
     this.ledger = options.ledger ?? new HostTaskLedger()
-    this.runner = new HostExecutionRunner(api)
+    this.runner = new HostExecutionRunner(api, options.commandDispatcher)
     this.power = options.power ?? new PowerInhibitor()
     this.now = options.now ?? Date.now
     this.ledger.subscribe(() => {

package/src/index.ts

@@ -7,6 +7,8 @@
  */
 
 import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-agent'
+import type {} from '@deepseek-ai/dsh-commands'
 import { installSettingsSection, settingsNamespace } from '@deepseek-ai/dsh-settings'
 import z from 'schemastery'
 import type {} from '@deepseek-ai/dsh-system-prompt'
@@ -22,10 +24,10 @@ const SECTION_ORDER = 200
 /** Default environment variable holding the authenticated proxy token. */
 export const DEFAULT_PROXY_TOKEN_ENV = 'DSH_TASK_BOARD_PROXY_TOKEN'
 
-export const inject = ['systemPrompt', 'apiProxy', 'webServer']
+export const inject = ['systemPrompt', 'apiProxy', 'webServer', 'agents', 'commands']
 
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-export const TASK_BOARD_GUIDANCE = '本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。'
+export const TASK_BOARD_GUIDANCE = '本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。若你同时用 todo_write 维护会话顶部的可见计划列表，最终回复前必须再次调用 todo_write 收尾：没有剩余工作时不要保留 in_progress，已完成的最后一步要标为 completed。'
 
 /**
  * Settings namespace of the board's announcement capability — the section the
@@ -87,7 +89,15 @@ const DEFAULT_ANNOUNCE = true
 export const apply = mountOnce('@linxin666/dsh-client-ui-task-board', applyImpl)
 
 function applyImpl(ctx: Context, config?: Config): void {
-  const host = new TaskBoardHostService(ctx.apiProxy)
+  const host = new TaskBoardHostService(ctx.apiProxy, {
+    commandDispatcher: {
+      async execute(sessionId, line, signal) {
+        const agent = ctx.agents.get(sessionId)
+        if (agent === undefined) throw new Error(`execution session ${sessionId} is not available`)
+        return (await ctx.commands.execute(agent, line, [], signal))?.result
+      },
+    },
+  })
   host.setConfiguration(config?.enabled ?? true, config?.preventIdleSleep ?? false)
   host.start()
   ctx.effect(() => {