@linxin666/dsh-client-ui-task-board 0.2.9 → 0.3.1

package/lib/index.js

@@ -204,8 +204,19 @@ function resolveDshHome(env = process.env, home = homedir()) {
 function dshHome() {
 	return resolveDshHome();
 }
-//#endregion
-//#region src/core/tasks.ts
+/**
+* Trim an execution list to at most {@link EXECUTION_HISTORY_LIMIT} records,
+* most recent last. A running (unsettled) execution is never trimmed: the
+* Host monitor and restart recovery depend on the active record, and a task
+* cannot start a new run while one is still open.
+*/
+function retainRecentExecutions(executions) {
+	if (executions.length <= 20) return [...executions];
+	const open = executions.filter((execution) => execution.endedAt === void 0);
+	const settled = executions.filter((execution) => execution.endedAt !== void 0);
+	const keepSettled = Math.max(20 - open.length, 0);
+	return [...settled.slice(Math.max(settled.length - keepSettled, 0)), ...open];
+}
 /** Statuses a settled task may be archived from. */
 const ARCHIVABLE_STATUSES = ["done", "failed"];
 /** Permission presets a task may pin on its execution session (the `/permission <id>` ids). */
@@ -307,7 +318,7 @@ function startExecution(task, now, executionId) {
 			...task,
 			status: "running",
 			updatedAt: now,
-			executions: [...task.executions, execution]
+			executions: retainRecentExecutions([...task.executions, execution])
 		},
 		execution
 	};
@@ -1014,9 +1025,10 @@ function mergeTask(a, b) {
 		const previous = byId.get(entry.id);
 		byId.set(entry.id, previous === void 0 ? entry : betterExecution(previous, entry));
 	}
+	const executions = [...byId.values()].sort((x, y) => x.startedAt - y.startedAt);
 	return {
 		...newer,
-		executions: [...byId.values()].sort((x, y) => x.startedAt - y.startedAt)
+		executions: retainRecentExecutions(executions)
 	};
 }
 function parseHostTasks(values) {
@@ -1360,7 +1372,10 @@ var HostTaskLedger = class {
 		try {
 			const parsed = JSON.parse(readFileSync(this.file, "utf8"));
 			if (parsed.schemaVersion !== 2 || !Array.isArray(parsed.tasks)) throw new Error("unsupported ledger schema");
-			const tasks = parseHostTasks(parsed.tasks);
+			const tasks = parseHostTasks(parsed.tasks).map((task) => ({
+				...task,
+				executions: retainRecentExecutions(task.executions)
+			}));
 			const invalidScheduleIds = parsed.tasks.flatMap((value) => {
 				if (typeof value !== "object" || value === null) return [];
 				const row = value;
@@ -2194,6 +2209,26 @@ var TaskBoardHostService = class {
 	}
 };
 //#endregion
+//#region src/http.ts
+/** Family-default JSON response headers; callers may append or override. */
+const JSON_HEADERS = {
+	"content-type": "application/json; charset=utf-8",
+	"referrer-policy": "no-referrer"
+};
+/**
+* Write one JSON response. Default headers are the family defaults
+* (content-type and referrer-policy); caller headers are appended or
+* override them.
+*/
+function writeJson(res, status, body, headers = {}) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		...JSON_HEADERS,
+		...headers
+	});
+	res.end(payload);
+}
+//#endregion
 //#region src/loopback.ts
 /** IPv4 127/8 predicate (four decimal octets, first == 127). */
 function isIPv4Loopback(v4) {
@@ -2245,13 +2280,6 @@ const IMPORT_LIMIT = 2 * 1024 * 1024;
 const HEARTBEAT_MS = 15e3;
 /** Header replaced by an authenticated same-host reverse proxy. */
 const TASK_BOARD_PROXY_TOKEN_HEADER = "x-dsh-task-board-proxy-token";
-function json(res, status, body) {
-	res.writeHead(status, {
-		"content-type": "application/json; charset=utf-8",
-		"cache-control": "no-store"
-	});
-	res.end(JSON.stringify(body));
-}
 function parseAuthority(authority) {
 	if (authority.trim() !== authority) return void 0;
 	const match = authority.startsWith("[") ? /^\[[^\]]+\](?::([0-9]+))?$/.exec(authority) : /^[^:@/?#\s]+(?::([0-9]+))?$/.exec(authority);
@@ -2346,10 +2374,10 @@ function makeTaskBoardRoutes(service, access = {}) {
 	const resolvedAccess = resolveAccess(access);
 	const guard = (req, res) => {
 		if (isTrustedTaskBoardRequest(req, resolvedAccess)) return true;
-		json(res, 403, {
+		writeJson(res, 403, {
 			ok: false,
 			error: "forbidden"
-		});
+		}, { "cache-control": "no-store" });
 		return false;
 	};
 	return [
@@ -2357,45 +2385,45 @@ function makeTaskBoardRoutes(service, access = {}) {
 			kind: "exact",
 			path: `${TASK_BOARD_API_PREFIX}/state`,
 			handler: (req, res) => {
-				if (req.method !== "GET") return json(res, 405, {
+				if (req.method !== "GET") return writeJson(res, 405, {
 					ok: false,
 					error: "method-not-allowed"
-				});
+				}, { "cache-control": "no-store" });
 				if (!guard(req, res)) return;
-				json(res, 200, service.snapshot());
+				writeJson(res, 200, service.snapshot(), { "cache-control": "no-store" });
 			}
 		},
 		{
 			kind: "exact",
 			path: `${TASK_BOARD_API_PREFIX}/action`,
 			handler: async (req, res) => {
-				if (req.method !== "POST") return json(res, 405, {
+				if (req.method !== "POST") return writeJson(res, 405, {
 					ok: false,
 					error: "method-not-allowed"
-				});
+				}, { "cache-control": "no-store" });
 				if (!guard(req, res)) return;
-				if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return json(res, 415, {
+				if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return writeJson(res, 415, {
 					ok: false,
 					error: "json-required"
-				});
+				}, { "cache-control": "no-store" });
 				try {
 					const body = await readBody(req);
 					const parsed = parseActionEnvelope(body.value);
-					if (parsed === void 0) return json(res, 400, {
+					if (parsed === void 0) return writeJson(res, 400, {
 						ok: false,
 						error: "invalid-action"
-					});
-					if (parsed.action.kind !== "import" && Buffer.byteLength(body.raw) > ACTION_LIMIT) return json(res, 413, {
+					}, { "cache-control": "no-store" });
+					if (parsed.action.kind !== "import" && Buffer.byteLength(body.raw) > ACTION_LIMIT) return writeJson(res, 413, {
 						ok: false,
 						error: "body-too-large"
-					});
-					json(res, 200, service.apply(parsed.requestId, parsed.action));
+					}, { "cache-control": "no-store" });
+					writeJson(res, 200, service.apply(parsed.requestId, parsed.action), { "cache-control": "no-store" });
 				} catch (error) {
 					const message = error instanceof Error ? error.message : String(error);
-					json(res, message === "body-too-large" ? 413 : 400, {
+					writeJson(res, message === "body-too-large" ? 413 : 400, {
 						ok: false,
 						error: message
-					});
+					}, { "cache-control": "no-store" });
 				}
 			}
 		},

package/lib/types/core/controller.d.ts

@@ -2,17 +2,15 @@
  * Board controller: the single owner of task-ledger state and view state.
  *
  * In production it projects the Host ledger and submits confirmed actions;
- * the legacy store/execution seams remain for v1 migration tests. It also
- * closes the board whenever the user navigates to a session.
+ * the legacy store seam remains for v1 migration tests. It also closes the
+ * board whenever the user navigates to a session.
  * Framework-free (structural runtime faces) so the whole orchestration is
  * unit-testable with fakes.
  *
  * The per use-case domain transitions (create/update/delete/schedule) live in
  * dedicated modules under core/use-cases and are applied here; the controller
- * owns only the orchestration seam (state, persistence, notify, execution,
- * navigation, reconciliation).
+ * owns only the orchestration seam (state, persistence, notify, navigation).
  */
-import type { ExecutionService } from './execution.ts';
 import type { TaskStore } from './store.ts';
 import { type NewTaskInput, type TaskRecord, type TaskStatus } from './tasks.ts';
 import { type TaskUpdatePatch } from './use-cases/task-update.ts';
@@ -37,15 +35,11 @@ export interface SessionsControllerFace {
 /** Controller dependencies (all swappable in tests). */
 export interface ControllerDeps {
     store: TaskStore;
-    /** Legacy browser execution seam used only by isolated v1 tests. */
-    exec?: ExecutionService;
     sessions: SessionsControllerFace;
     /** Clock; defaults to Date.now. */
     now?: () => number;
     /** Id minting; defaults to a random-uuid. */
     uuid?: () => string;
-    /** Debounce (ms) for session-list-changed reconciles; defaults to 350. */
-    reconcileDebounceMs?: number;
     /** Host-authoritative transport; absent keeps the legacy in-memory test path. */
     transport?: TaskBoardTransport;
 }
@@ -105,7 +99,7 @@ export declare class BoardController {
     private hostState;
     private remoteSubscribed;
     private remoteInitialization;
-    /** @param deps - store, execution service, and the sessions navigation face. */
+    /** @param deps - store and the sessions navigation face. */
     constructor(deps: ControllerDeps);
     /** Load the persisted ledger and start the navigation/status subscriptions. */
     start(): void;
@@ -178,32 +172,17 @@ export declare class BoardController {
      */
     openSession(sessionId: string): void;
     /**
-     * Execute a task for real: move it to 'running', open an execution record,
-     * and hand off to the ExecutionService. A second call while the task is
-     * already running is ignored.
+     * Request a Host execution for a task: the Host ledger owns the running
+     * transition, the execution record, and the settlement. A second call
+     * while the task is already running is ignored; without a Host transport
+     * the run is refused (returns false).
      */
     runTask(id: string): Promise<boolean>;
-    /** Re-run a settled task: move it back to 'todo' first, then execute. */
+    /** Re-run a settled task through the Host (the Host replans and executes). */
     rerunTask(id: string): Promise<void>;
-    private handleExecutionEvent;
-    /** Reconcile running tasks and close the board when the user navigates. */
+    /** Close the board when the user navigates to another session. */
     private onSessionsChanged;
     private lastCurrent;
-    /** Execution ids launched on this page; they settle via their live watch, never list reconciliation. */
-    private readonly activeExecutionIds;
-    /** Debounce timer for {@link reconcileRunningTasks}. */
-    private reconcileTimer;
-    /** Whether a reconcile pass is underway (single-flight guard). */
-    private reconcileInFlight;
-    /**
-     * Debounce + single-flight trigger for the running-task reconciliation.
-     * Session-list notifications arrive in bursts (one per session status
-     * change); both guards together keep a burst from reading the history API
-     * once per running task.
-     */
-    private scheduleReconcile;
-    /** Settle tasks left 'running' whose sessions already finished. */
-    private reconcileRunningTasks;
     private persistAndNotify;
     private commitRemote;
     private performRemote;

package/lib/types/core/tasks.d.ts

@@ -25,6 +25,19 @@ export interface ExecutionRecord {
     /** Human failure text when the run failed (prompt rejection or agent error). */
     error: string | undefined;
 }
+/**
+ * Maximum number of execution records retained per task. Older settled runs
+ * are trimmed when a new execution starts so per-action ledger cost stays
+ * bounded regardless of how often a task ran before.
+ */
+export declare const EXECUTION_HISTORY_LIMIT = 20;
+/**
+ * Trim an execution list to at most {@link EXECUTION_HISTORY_LIMIT} records,
+ * most recent last. A running (unsettled) execution is never trimmed: the
+ * Host monitor and restart recovery depend on the active record, and a task
+ * cannot start a new run while one is still open.
+ */
+export declare function retainRecentExecutions(executions: readonly ExecutionRecord[]): ExecutionRecord[];
 /**
  * A scheduled-run rule attached to a task. The Host scheduler triggers the
  * task when `nextRunAt` is due and persists the rule in the Host ledger.
@@ -55,7 +68,10 @@ export interface TaskRecord {
     createdAt: number;
     /** Last mutation instant (ms epoch). */
     updatedAt: number;
-    /** Every execution attempt, most recent last. */
+    /**
+     * Execution history retained on the task, most recent last: the latest
+     * {@link EXECUTION_HISTORY_LIMIT} attempts, oldest trimmed on append.
+     */
     executions: ExecutionRecord[];
     /** Optional scheduled-run rule (absent on tasks without a schedule). */
     schedule?: ScheduleRule;

package/lib/types/http.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Shared JSON body/response helpers for the host route families: one strict
+ * bounded body reader, one lenient bounded body reader, one JSON object
+ * narrow, and one JSON writer. Previously these were copy-pasted across the
+ * package route files (routes.ts, update-routes.ts, mobile-api.ts, and each
+ * family's route module) with drifting contracts: body caps ranging 4 KiB to
+ * 1 MiB and four distinct overflow behaviors (reject, undefined, null, throw).
+ *
+ * Packages receive this file as a generated copy via scripts/sync-shared.mjs;
+ * edit this shared source and re-run the sync instead of editing a copy.
+ * Consumer code is migrated onto it in follow-up waves; no call site changes
+ * belong in the same change as its introduction.
+ * @module dsh-web-ui-shared/host/http
+ */
+import type { IncomingMessage, OutgoingHttpHeaders, ServerResponse } from 'node:http';
+/**
+ * Strict bounded body reader: parse a request body of at most maxBytes as
+ * JSON.
+ * @throws 'body too large' past the cap, or the JSON.parse error for an
+ *   invalid or empty payload.
+ */
+export declare function readBoundedJson(req: IncomingMessage, maxBytes: number): Promise<unknown>;
+/**
+ * Lenient bounded body reader: parse a request body as JSON, or null on an
+ * empty body, invalid JSON, or a body past maxBytes (default 64 KiB).
+ * Overflow destroys the request instead of draining the remainder (no drain
+ * call, matching the current repo-wide behavior); callers must not keep
+ * reading the request afterwards. With objectOnly, non-JSON-object payloads
+ * also yield null.
+ */
+export declare function readJsonBody(req: IncomingMessage, opts?: {
+    maxBytes?: number;
+    objectOnly?: boolean;
+}): Promise<unknown | null>;
+/** Narrow a value to a JSON object, or undefined when it is not one. */
+export declare function asJsonObject(value: unknown): Record<string, unknown> | undefined;
+/**
+ * Write one JSON response. Default headers are the family defaults
+ * (content-type and referrer-policy); caller headers are appended or
+ * override them.
+ */
+export declare function writeJson(res: ServerResponse, status: number, body: unknown, headers?: OutgoingHttpHeaders): void;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Host-authoritative task board for the DSH Web GUI with real session execution, Host cron scheduling, and optional cross-platform idle-sleep protection; mounted without DSH source changes.",
-  "version": "0.2.9",
+  "version": "0.3.1",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",

package/src/client/board/TaskBoard.tsx

@@ -52,9 +52,11 @@ export function TaskBoard({ controller }: { controller: BoardController }) {
   return (
     <div className={css.board} data-dsh-taskboard-board="" data-dsh-plugin="task-board">
       <header className={css.boardHeader}>
+        {/* Shared hook: dsh-web-ui-all offsets center-view back controls beside the collapsed mobile sidebar. */}
         <button
           type="button"
           className={`${css.ghostButton} ${css.backButton}`}
+          data-dsh-center-view-back=""
           aria-label={t('board.close')}
           onClick={() => { controller.closeBoard() }}
         >

package/src/client/board.module.css

@@ -51,12 +51,13 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
 /* --- sidebar entry row ------------------------------------------------------- */
 
 .entry {
+  box-sizing: border-box;
   display: flex;
   align-items: center;
   gap: 8px;
   width: 100%;
-  height: 32px;
-  padding: 0 12px;
+  height: 36px;
+  padding: 0 10px;
   background: transparent;
   border: none;
   border-radius: 8px;
@@ -67,12 +68,12 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
 }
 
 .entry:hover {
-  background: var(--dsw-specific-sidebar-nav-item-hover);
+  background: var(--dsw-alias-interactive-bg-hover);
   color: var(--dsw-alias-label-primary);
 }
 
 .entry[data-active] {
-  background: var(--dsw-specific-sidebar-nav-item-active);
+  background: var(--dsw-alias-interactive-bg-active);
   color: var(--dsw-alias-label-primary);
   font-weight: 600;
 }
@@ -81,9 +82,17 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
   display: inline-flex;
   align-items: center;
   justify-content: center;
+  width: 24px;
+  height: 24px;
   flex: none;
 }
 
+.entryIcon svg {
+  display: block;
+  width: 18px;
+  height: 18px;
+}
+
 .entryLabel {
   overflow: hidden;
   text-overflow: ellipsis;
@@ -93,7 +102,10 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
 [data-dsh-frame][data-sidebar-collapsed] .entry {
   justify-content: center;
   padding: 0;
-  width: 100%;
+  width: 36px;
+  height: 36px;
+  margin: 0 auto 12px;
+  border-radius: 50%;
 }
 
 [data-dsh-frame][data-sidebar-collapsed] .entryLabel {
@@ -809,31 +821,191 @@ html[data-dsh-taskboard-active]:not([data-dsh-ssh-active]) [class*='centerCol']
 
 /* --- constrained board containers ------------------------------------------ */
 
-@container task-board-view (max-width: 720px) {
+@container task-board-view (max-width: 768px) {
   .board {
     gap: 10px;
     padding: 10px;
   }
 
+  .boardHeader {
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 8px;
+  }
+
+  .backButton {
+    flex: 0 0 auto;
+    order: 1;
+  }
+
+  .boardTitle {
+    flex: 1 1 auto;
+    order: 2;
+  }
+
+  .boardHeader > .detailMeta {
+    flex: 1 0 100%;
+    margin-left: 0;
+    order: 3;
+  }
+
+  .search {
+    flex: 1 0 100%;
+    min-width: 0;
+    order: 4;
+  }
+
+  .boardHeader > button:not(.backButton) {
+    flex: 1 1 0;
+    min-width: 0;
+    order: 5;
+  }
+
   .columns {
+    grid-auto-columns: 86cqw;
     gap: 10px;
+    padding-inline: 2px 14cqw;
+    scroll-padding-inline: 2px;
+    scroll-snap-type: inline mandatory;
+    scrollbar-width: none;
+    -webkit-overflow-scrolling: touch;
+  }
+
+  .columns::-webkit-scrollbar {
+    display: none;
+  }
+
+  .column {
+    scroll-snap-align: start;
+    scroll-snap-stop: always;
+  }
+}
+
+@container task-board-view (max-width: 720px) {
+  .boardHeader > .detailMeta {
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
   }
 }
 
 @container task-board-view (max-width: 600px) {
-  .boardHeader {
+  .board {
+    padding-inline: 8px;
+  }
+}
+
+/* Viewport-specific mobile treatment: overlays occupy the dynamic viewport,
+   preserve notches/home indicators, and keep their action rows reachable. */
+@media (max-width: 768px) {
+  [data-dsh-taskboard-view] {
+    height: 100vh;
+    height: 100dvh;
+  }
+
+  .entry,
+  .card,
+  .primaryButton,
+  .ghostButton,
+  .dangerButton,
+  .iconButton,
+  .linkButton,
+  .search,
+  .input,
+  .select,
+  .schedulePreset,
+  .scheduleToggle {
+    min-height: 44px;
+  }
+
+  .search,
+  .input,
+  .select,
+  .schedulePreset {
+    box-sizing: border-box;
+    font-size: 16px;
+  }
+
+  .modalBackdrop {
+    align-items: stretch;
+    justify-content: stretch;
+    width: 100vw;
+    height: 100vh;
+    height: 100dvh;
+  }
+
+  .modal,
+  .detail {
+    box-sizing: border-box;
+    width: 100vw;
+    height: 100vh;
+    height: 100dvh;
+    max-height: none;
+    border: 0;
+    border-radius: 0;
+  }
+
+  .modal {
+    padding-top: max(16px, env(safe-area-inset-top));
+    padding-right: max(16px, env(safe-area-inset-right));
+    padding-bottom: max(16px, env(safe-area-inset-bottom));
+    padding-left: max(16px, env(safe-area-inset-left));
+  }
+
+  .modalFooter {
+    position: sticky;
+    bottom: 0;
+    z-index: 1;
     flex-wrap: wrap;
-    gap: 8px;
+    padding-top: 8px;
+    background: var(--dsw-alias-bg-base);
   }
 
-  .search {
-    flex: 1 1 calc(100% - 72px);
+  .modalFooter > button {
+    flex: 1 1 120px;
+  }
+
+  .detailHeader {
+    flex-wrap: wrap;
+    padding-top: max(12px, env(safe-area-inset-top));
+    padding-right: max(14px, env(safe-area-inset-right));
+    padding-left: max(14px, env(safe-area-inset-left));
+  }
+
+  .detailTitle {
     min-width: 0;
   }
 
-  .boardHeader > button {
-    flex: 1 1 0;
-    min-width: max-content;
+  .detailBody {
+    overscroll-behavior-y: contain;
+    padding-right: max(14px, env(safe-area-inset-right));
+    padding-left: max(14px, env(safe-area-inset-left));
+  }
+
+  .detailFooter {
+    flex-wrap: wrap;
+    padding-right: max(14px, env(safe-area-inset-right));
+    padding-bottom: max(12px, env(safe-area-inset-bottom));
+    padding-left: max(14px, env(safe-area-inset-left));
+  }
+
+  .detailFooter > button {
+    flex: 1 1 96px;
+  }
+
+  .detailFooter > .detailMeta {
+    flex: 1 0 100%;
+    margin-left: 0;
+    text-align: end;
+  }
+
+  .scheduleRow {
+    align-items: stretch;
+    flex-direction: column;
+  }
+
+  .schedulePreset {
+    width: 100%;
   }
 }
 

package/src/client/index.ts

@@ -84,7 +84,13 @@ export function apply(ctx: ClientContext): void {
   // page instead of being silently dropped.
   ctx.effect(() => releaseTaskboardApply, 'task-board: apply claim')
 
-  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'task-board: dictionaries')
+  ctx.effect(() => {
+    try {
+      return ctx.locale.register(NS, { zh, en })
+    } catch {
+      return () => {}
+    }
+  }, 'task-board: dictionaries')
 
   // Plugin configuration card: one staged form over the `task-board` settings
   // namespace, contributed to the Web UI plugin group.
@@ -92,16 +98,20 @@ export function apply(ctx: ClientContext): void {
   const settingsScope = binder.bind<TaskBoardSettings>({ namespace: TASK_BOARD_NS })
   const settingsCard = new TaskBoardSettingsCardController(settingsScope)
   ctx.slots.inject('web-ui.plugin.item', () => {
-    const unregister = ctx.slots.register({
-      name: 'web-ui.plugin.item',
-      id: 'task-board',
-      order: 110,
-      locale: NS,
-      inject: () => settingsCard.inject(),
-    }, TaskBoardSettingsCard)
-    return () => {
-      settingsCard.dispose()
-      unregister()
+    try {
+      const unregister = ctx.slots.register({
+        name: 'web-ui.plugin.item',
+        id: 'task-board',
+        order: 110,
+        locale: NS,
+        inject: () => settingsCard.inject(),
+      }, TaskBoardSettingsCard)
+      return () => {
+        settingsCard.dispose()
+        unregister()
+      }
+    } catch {
+      return () => {}
     }
   })
 

package/src/client/sidebar-entry.ts

@@ -19,8 +19,8 @@ import { mountSidebarEntry as mountSharedSidebarEntry } from './sidebar-entry-co
 /** Stable data attribute identifying the injected entry row. */
 export const ENTRY_SELECTOR = '[data-dsh-taskboard-entry]'
 
-/** Inline icon (matches the shell's 16px nav-icon look). */
-const ICON = '<svg viewBox="0 0 16 16" width="14" height="14" fill="none" stroke="currentColor" stroke-width="1.3" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="2" y="2.5" width="12" height="11" rx="1.5"/><path d="M2 6.5h12M6.5 6.5v7"/></svg>'
+/** Inline icon normalized to the shell's 18px navigation glyph size. */
+const ICON = '<svg viewBox="0 0 16 16" width="18" height="18" fill="none" stroke="currentColor" stroke-width="1.3" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="2" y="2.5" width="12" height="11" rx="1.5"/><path d="M2 6.5h12M6.5 6.5v7"/></svg>'
 
 /**
  * Mount the sidebar entry, waiting for the shell to render and self-healing