@linxin666/dsh-client-ui-task-board 0.3.2 → 0.3.4

package/lib/index.js

@@ -5,6 +5,7 @@ import { createHash, timingSafeEqual } from "node:crypto";
 import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, isAbsolute, join, win32 } from "node:path";
 import { homedir } from "node:os";
+import { isAbsolute as isAbsolute$1, join as join$1 } from "node:path/posix";
 //#region src/core/schedule.ts
 /** Inclusive ranges per field, in cron order. */
 const FIELD_RANGES = [
@@ -182,8 +183,9 @@ function isDigits(value) {
 */
 /** Expand a leading ~ (or ~user) in a path, platform-style. */
 function expandHome(path, home = homedir()) {
+	const j = home.startsWith("/") ? join$1 : join;
 	if (path === "~") return home;
-	if (path.startsWith("~/") || path.startsWith("~\\")) return join(home, path.slice(2));
+	if (path.startsWith("~/") || path.startsWith("~\\")) return j(home, path.slice(2));
 	return path;
 }
 /**
@@ -193,12 +195,15 @@ function expandHome(path, home = homedir()) {
 * @returns the absolute DSH home path.
 */
 function resolveDshHome(env = process.env, home = homedir()) {
+	const isPosix = home.startsWith("/");
+	const j = isPosix ? join$1 : join;
+	const isAbs = isPosix ? isAbsolute$1 : isAbsolute;
 	const raw = env.DSH_HOME;
 	if (raw !== void 0 && raw.trim() !== "") {
 		const expanded = expandHome(raw.trim(), home);
-		return isAbsolute(expanded) ? expanded : join(process.cwd(), expanded);
+		return isAbs(expanded) ? expanded : j(process.cwd(), expanded);
 	}
-	return join(home, ".dsh");
+	return j(home, ".dsh");
 }
 /** Resolve the DSH home directory from the live environment. */
 function dshHome() {
@@ -611,10 +616,34 @@ function applyScheduleNextRun(tasks, id, nextRunAt, lastTriggeredAt, now) {
 * fresh updatedAt. Pure ledger transition (no persistence or notify — the
 * controller orchestrates those).
 *
-* An explicit `undefined` in the patch clears the field (the task falls
-* back to the runtime default); an unknown permission string is ignored so
-* stale UI can never persist a value the execution service rejects.
+* An explicit `undefined` in the patch clears an execution-target field
+* (the task falls back to the runtime default); content fields are trimmed
+* and never cleared. An unknown permission string is ignored so stale UI
+* can never persist a value the execution service rejects.
 */
+/**
+* The fields that edit the task's content (what the user reads and what the
+* next execution sends). Unlike the execution targets they stay editable only
+* while the task has never started executing — after the first run the
+* recorded prompt is the record of what actually ran, so it becomes read-only.
+*/
+const TASK_CONTENT_FIELDS = [
+	"title",
+	"description",
+	"prompt"
+];
+/** Whether an update patch touches any task-content field. */
+function hasContentPatch(patch) {
+	return TASK_CONTENT_FIELDS.some((field) => field in patch);
+}
+/**
+* Whether a task's content may still be edited: the task must be on-board
+* (not archived) and must never have started executing. Fail-closed: a
+* running, settled, or cancelled-before-launch task keeps its content fixed.
+*/
+function canEditTaskContent(task) {
+	return task.archivedAt === void 0 && task.status !== "running" && task.executions.length === 0;
+}
 /** Keep an unknown permission string from entering the ledger. */
 function normalizePermission(current, value) {
 	if (value === void 0) return void 0;
@@ -639,6 +668,11 @@ function applyUpdateTask(tasks, id, patch, now) {
 			...patch,
 			updatedAt: now
 		};
+		for (const field of TASK_CONTENT_FIELDS) {
+			if (!(field in patch)) continue;
+			const value = patch[field];
+			next[field] = value === void 0 ? task[field] : value.trim();
+		}
 		if (workspaceId !== void 0 || "workspaceId" in patch) next.workspaceId = workspaceId;
 		if (mode !== void 0 || "mode" in patch) next.mode = mode;
 		if (permission !== void 0 || "permission" in patch) next.permission = permission;
@@ -1266,6 +1300,8 @@ var HostTaskLedger = class {
 				const task = this.document.tasks.find((task) => task.id === action.taskId);
 				if (task === void 0) throw new Error("task not found");
 				if (task.archivedAt !== void 0) throw new Error("archived task is read-only");
+				if (hasContentPatch(action.patch) && !canEditTaskContent(task)) throw new Error("task has already been executed");
+				if ("title" in action.patch && action.patch.title?.trim() === "") throw new Error("title is required");
 				this.document.tasks = [...applyUpdateTask(this.document.tasks, action.taskId, action.patch, now)];
 				break;
 			}
@@ -2465,7 +2501,7 @@ function makeTaskBoardRoutes(service, access = {}) {
 //#region src/mount-once.ts
 /**
 * Host single-instance guard shared by the plugin family. The family bundle
-* (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+* (dsh-web-all / dsh-skins) namespaces every child row id (web-ui-*), so
 * the loader accepts a standalone install of the same package side by side;
 * without this guard the second instance would still re-register the same
 * webserver routes, tools, settings namespaces, and system-prompt sections
@@ -2478,7 +2514,7 @@ function makeTaskBoardRoutes(service, access = {}) {
 * `ctx.effect` runs its callback immediately and treats the callback's
 * return value as the fiber disposer, so the unmarker is returned, not run.
 */
-const MOUNTED = Symbol.for("dsh-web-ui.mounted-plugins");
+const MOUNTED = Symbol.for("dsh-web.mounted-plugins");
 function mountedSet() {
 	const registry = globalThis;
 	return registry[MOUNTED] ??= /* @__PURE__ */ new Set();
@@ -2516,7 +2552,7 @@ const inject = [
 	"commands"
 ];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web-ui 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。若你同时用 todo_write 维护会话顶部的可见计划列表，最终回复前必须再次调用 todo_write 收尾：没有剩余工作时不要保留 in_progress，已完成的最后一步要标为 completed。";
+const TASK_BOARD_GUIDANCE = "本机已安装 dsh-task-board 插件（DSH Web GUI 的任务看板）：侧边栏「任务看板」入口；在 dsh-web 插件全家桶仓库（packages/dsh-task-board）统一维护，经聚合包 web-ui-all 一键安装。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护允许屏幕熄灭，但不承诺拦截合盖、手动睡眠、休眠、关机或唤醒已睡眠机器。执行消耗 API 额度。用户提到「任务看板 / 看板 / 定时任务」时即指本插件，请据此协作。若你同时用 todo_write 维护会话顶部的可见计划列表，最终回复前必须再次调用 todo_write 收尾：没有剩余工作时不要保留 in_progress，已完成的最后一步要标为 completed。";
 /**
 * Settings namespace of the board's announcement capability — the section the
 * web settings surface edits. Spelled here rather than imported: the browser

package/lib/types/client/PluginSettingsCard.d.ts

@@ -22,6 +22,8 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
     titleKey: TKey;
     /** Locale key of the line describing what this plugin's settings govern. */
     descriptionKey: TKey;
+    /** Optional rich header description rendered instead of the plain t(descriptionKey) text (the plain text stays as the tooltip). */
+    descriptionNode?: ReactNode;
     /** The card's form state: availability, writability, and what a save would do. */
     state: CardShell;
     /** Write every staged edit. */

package/lib/types/client/board/EditTaskModal.d.ts

@@ -0,0 +1,8 @@
+import type { BoardController } from '../../core/controller.ts';
+import type { TaskRecord } from '../../core/tasks.ts';
+/** Edit-task form overlay. */
+export declare function EditTaskModal({ controller, task, onClose }: {
+    controller: BoardController;
+    task: TaskRecord;
+    onClose: () => void;
+}): import("react").JSX.Element;

package/lib/types/client/index.d.ts

@@ -37,7 +37,7 @@ export interface SettingsPluginItemOwnerProps {
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /**
-         * Optional rc.6 compatibility binder provided by dsh-web-ui-settings;
+         * Optional rc.6 compatibility binder provided by dsh-web-settings;
          * absent when that group plugin is not installed, so callers fall back to
          * the official settings scope.
          */

package/lib/types/client/locales.d.ts

@@ -40,7 +40,10 @@ export declare const zh: {
     'new.cancel': string;
     'new.required': string;
     'detail.title': string;
+    'detail.edit': string;
     'detail.close': string;
+    'edit.title': string;
+    'edit.save': string;
     'detail.prompt': string;
     'detail.description': string;
     'detail.execution': string;

package/lib/types/client/settings-form.d.ts

@@ -173,7 +173,7 @@ export declare class CardForm<T> {
     /**
      * Write every staged edit, then re-seed from what the Host accepted.
      *
-     * When the scope carries the optional batch surface (the dsh-web-ui
+     * When the scope carries the optional batch surface (the dsh-web
      * bridge scope), every planned write rides one mutation so cross-field
      * validate hooks (baseURL+model) judge the batch as a unit instead of
      * deadlocking on per-field writes. Otherwise the per-field loop runs.

package/lib/types/client/telemetry.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Anonymous install telemetry shared by the DSH Web UI family plugins.
+ *
+ * Once per UTC day per browser, each wired plugin sends one heartbeat to
+ * the dsh-market edge API listing its package name (and version when known).
+ * The payload carries no conversation data and no identifiers beyond a random
+ * UUID generated in localStorage; the server hashes it with a deployment salt
+ * before storage and never persists IP addresses. Sends are fire-and-forget:
+ * failures stay silent and simply retry on a later mount or day. The system
+ * is documented in docs/telemetry.md.
+ */
+export type TelemetryChannel = 'market' | 'npm' | 'unknown';
+export interface TelemetryItem {
+    /** npm package name or asset id, e.g. "@linxin666/dsh-pet" or "skin:harbor". */
+    name: string;
+    /** Installed version when known; omitted otherwise. */
+    version?: string;
+    /** Install channel when determinable (market = Workshop install). */
+    channel?: TelemetryChannel;
+}
+/**
+ * Fire the daily heartbeat for the given items at most once per UTC day per
+ * browser. Never throws and never blocks the caller. Items without an explicit
+ * version inherit the bundle's baked build version.
+ */
+export declare function reportDailyHeartbeat(items: readonly TelemetryItem[]): void;

package/lib/types/core/controller.d.ts

@@ -125,7 +125,15 @@ export declare class BoardController {
     createTask(input: NewTaskInput): TaskRecord | undefined;
     /** Create through the Host and expose the task only after confirmation. */
     createTaskConfirmed(input: NewTaskInput): Promise<TaskRecord | undefined>;
-    updateTask(id: string, patch: TaskUpdatePatch): void;
+    /**
+     * Apply an editable-field patch (task content + execution targets).
+     * Host-backed: the Host ledger owns the fail-closed checks (the content of
+     * an executed task is read-only) and confirms the mutation, so the resolved
+     * value reflects whether the Host accepted it; the legacy in-memory path
+     * applies and persists synchronously.
+     * @returns true when the patch was accepted by the authority.
+     */
+    updateTask(id: string, patch: TaskUpdatePatch): Promise<boolean>;
     /**
      * Replace (a part of) the picker option sets the UI feeds (workspace list
      * and agent-preset roster come from the runtime, not the ledger).

package/lib/types/core/use-cases/task-update.d.ts

@@ -4,13 +4,29 @@
  * fresh updatedAt. Pure ledger transition (no persistence or notify — the
  * controller orchestrates those).
  *
- * An explicit `undefined` in the patch clears the field (the task falls
- * back to the runtime default); an unknown permission string is ignored so
- * stale UI can never persist a value the execution service rejects.
+ * An explicit `undefined` in the patch clears an execution-target field
+ * (the task falls back to the runtime default); content fields are trimmed
+ * and never cleared. An unknown permission string is ignored so stale UI
+ * can never persist a value the execution service rejects.
  */
 import { type TaskRecord } from '../tasks.ts';
 /** Editable fields on a task (the update patch surface). */
 export type TaskUpdatePatch = Partial<Pick<TaskRecord, 'title' | 'description' | 'prompt' | 'workspaceId' | 'mode' | 'permission'>>;
+/**
+ * The fields that edit the task's content (what the user reads and what the
+ * next execution sends). Unlike the execution targets they stay editable only
+ * while the task has never started executing — after the first run the
+ * recorded prompt is the record of what actually ran, so it becomes read-only.
+ */
+export declare const TASK_CONTENT_FIELDS: readonly ["title", "description", "prompt"];
+/** Whether an update patch touches any task-content field. */
+export declare function hasContentPatch(patch: TaskUpdatePatch): boolean;
+/**
+ * Whether a task's content may still be edited: the task must be on-board
+ * (not archived) and must never have started executing. Fail-closed: a
+ * running, settled, or cancelled-before-launch task keeps its content fixed.
+ */
+export declare function canEditTaskContent(task: TaskRecord): boolean;
 /**
  * Apply an update across the ledger. Tasks that do not match the id are left
  * untouched; the matched task receives the patch plus a fresh updatedAt.

package/lib/types/http.d.ts

@@ -10,7 +10,7 @@
  * edit this shared source and re-run the sync instead of editing a copy.
  * Consumer code is migrated onto it in follow-up waves; no call site changes
  * belong in the same change as its introduction.
- * @module dsh-web-ui-shared/host/http
+ * @module dsh-web-shared/host/http
  */
 import type { IncomingMessage, OutgoingHttpHeaders, ServerResponse } from 'node:http';
 /**

package/lib/types/index.d.ts

@@ -11,7 +11,7 @@ import z from 'schemastery';
 export declare const DEFAULT_PROXY_TOKEN_ENV = "DSH_TASK_BOARD_PROXY_TOKEN";
 export declare const inject: string[];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-export declare const TASK_BOARD_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-task-board \u63D2\u4EF6\uFF08DSH Web GUI \u7684\u4EFB\u52A1\u770B\u677F\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300C\u4EFB\u52A1\u770B\u677F\u300D\u5165\u53E3\uFF1B\u5728 dsh-web-ui \u63D2\u4EF6\u5168\u5BB6\u6876\u4ED3\u5E93\uFF08packages/dsh-task-board\uFF09\u7EDF\u4E00\u7EF4\u62A4\uFF0C\u7ECF\u805A\u5408\u5305 web-ui-all \u4E00\u952E\u5B89\u88C5\u3002\u80FD\u529B\uFF1A\u591A\u5217\u770B\u677F\u7BA1\u7406\u4EFB\u52A1\uFF1BHost \u6743\u5A01\u8D26\u672C\uFF1B\u5173\u95ED\u6D4F\u89C8\u5668\u540E\u4ECD\u7531 Host \u6267\u884C\u548C\u7ED3\u7B97\uFF1B\u4EFB\u52A1\u53EF\u9489\u4F4F\u5DE5\u4F5C\u533A\u3001agent \u9884\u8BBE\u548C\u6743\u9650\uFF1B\u652F\u6301 Host \u672C\u5730\u65F6\u533A\u7684 5 \u6BB5 cron\uFF0C\u9519\u8FC7\u7684\u89E6\u53D1\u70B9\u4E0D\u8865\u8DD1\uFF1B\u53EF\u9009\u4E14\u9ED8\u8BA4\u5173\u95ED\u7684\u7A7A\u95F2\u7CFB\u7EDF\u7761\u7720\u4FDD\u62A4\u5141\u8BB8\u5C4F\u5E55\u7184\u706D\uFF0C\u4F46\u4E0D\u627F\u8BFA\u62E6\u622A\u5408\u76D6\u3001\u624B\u52A8\u7761\u7720\u3001\u4F11\u7720\u3001\u5173\u673A\u6216\u5524\u9192\u5DF2\u7761\u7720\u673A\u5668\u3002\u6267\u884C\u6D88\u8017 API \u989D\u5EA6\u3002\u7528\u6237\u63D0\u5230\u300C\u4EFB\u52A1\u770B\u677F / \u770B\u677F / \u5B9A\u65F6\u4EFB\u52A1\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002\u82E5\u4F60\u540C\u65F6\u7528 todo_write \u7EF4\u62A4\u4F1A\u8BDD\u9876\u90E8\u7684\u53EF\u89C1\u8BA1\u5212\u5217\u8868\uFF0C\u6700\u7EC8\u56DE\u590D\u524D\u5FC5\u987B\u518D\u6B21\u8C03\u7528 todo_write \u6536\u5C3E\uFF1A\u6CA1\u6709\u5269\u4F59\u5DE5\u4F5C\u65F6\u4E0D\u8981\u4FDD\u7559 in_progress\uFF0C\u5DF2\u5B8C\u6210\u7684\u6700\u540E\u4E00\u6B65\u8981\u6807\u4E3A completed\u3002";
+export declare const TASK_BOARD_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-task-board \u63D2\u4EF6\uFF08DSH Web GUI \u7684\u4EFB\u52A1\u770B\u677F\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300C\u4EFB\u52A1\u770B\u677F\u300D\u5165\u53E3\uFF1B\u5728 dsh-web \u63D2\u4EF6\u5168\u5BB6\u6876\u4ED3\u5E93\uFF08packages/dsh-task-board\uFF09\u7EDF\u4E00\u7EF4\u62A4\uFF0C\u7ECF\u805A\u5408\u5305 web-ui-all \u4E00\u952E\u5B89\u88C5\u3002\u80FD\u529B\uFF1A\u591A\u5217\u770B\u677F\u7BA1\u7406\u4EFB\u52A1\uFF1BHost \u6743\u5A01\u8D26\u672C\uFF1B\u5173\u95ED\u6D4F\u89C8\u5668\u540E\u4ECD\u7531 Host \u6267\u884C\u548C\u7ED3\u7B97\uFF1B\u4EFB\u52A1\u53EF\u9489\u4F4F\u5DE5\u4F5C\u533A\u3001agent \u9884\u8BBE\u548C\u6743\u9650\uFF1B\u652F\u6301 Host \u672C\u5730\u65F6\u533A\u7684 5 \u6BB5 cron\uFF0C\u9519\u8FC7\u7684\u89E6\u53D1\u70B9\u4E0D\u8865\u8DD1\uFF1B\u53EF\u9009\u4E14\u9ED8\u8BA4\u5173\u95ED\u7684\u7A7A\u95F2\u7CFB\u7EDF\u7761\u7720\u4FDD\u62A4\u5141\u8BB8\u5C4F\u5E55\u7184\u706D\uFF0C\u4F46\u4E0D\u627F\u8BFA\u62E6\u622A\u5408\u76D6\u3001\u624B\u52A8\u7761\u7720\u3001\u4F11\u7720\u3001\u5173\u673A\u6216\u5524\u9192\u5DF2\u7761\u7720\u673A\u5668\u3002\u6267\u884C\u6D88\u8017 API \u989D\u5EA6\u3002\u7528\u6237\u63D0\u5230\u300C\u4EFB\u52A1\u770B\u677F / \u770B\u677F / \u5B9A\u65F6\u4EFB\u52A1\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002\u82E5\u4F60\u540C\u65F6\u7528 todo_write \u7EF4\u62A4\u4F1A\u8BDD\u9876\u90E8\u7684\u53EF\u89C1\u8BA1\u5212\u5217\u8868\uFF0C\u6700\u7EC8\u56DE\u590D\u524D\u5FC5\u987B\u518D\u6B21\u8C03\u7528 todo_write \u6536\u5C3E\uFF1A\u6CA1\u6709\u5269\u4F59\u5DE5\u4F5C\u65F6\u4E0D\u8981\u4FDD\u7559 in_progress\uFF0C\u5DF2\u5B8C\u6210\u7684\u6700\u540E\u4E00\u6B65\u8981\u6807\u4E3A completed\u3002";
 /**
  * Settings namespace of the board's announcement capability — the section the
  * web settings surface edits. Spelled here rather than imported: the browser

package/lib/types/loopback.d.ts

@@ -7,7 +7,7 @@
  * Semantics: RFC 5735 IPv4 127/8, ::1, IPv4-mapped ::ffff:127/8 (matching the
  * remote-web-ui gate), localhost hostnames, plus the browser same-origin
  * markers (sec-fetch-site and Origin) for the request-level fence.
- * @module dsh-web-ui-shared/host/loopback
+ * @module dsh-web-shared/host/loopback
  */
 import type { IncomingMessage } from 'node:http';
 /** IPv4 127/8 predicate (four decimal octets, first == 127). */

package/lib/types/mount-once.d.ts

@@ -1,6 +1,6 @@
 /**
  * Host single-instance guard shared by the plugin family. The family bundle
- * (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+ * (dsh-web-all / dsh-skins) namespaces every child row id (web-ui-*), so
  * the loader accepts a standalone install of the same package side by side;
  * without this guard the second instance would still re-register the same
  * webserver routes, tools, settings namespaces, and system-prompt sections

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Host-authoritative task board for the DSH Web GUI with real session execution, Host cron scheduling, and optional cross-platform idle-sleep protection; mounted without DSH source changes.",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -38,8 +38,6 @@
     }
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.1-rc.2",
     "react": "^18.2.0"
   },
   "dependencies": {
@@ -79,7 +77,7 @@
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "https://github.com/zhu1090093659/dsh-web-ui.git"
+    "url": "https://github.com/zhu1090093659/dsh-web.git"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && tsdown",

package/src/client/PluginSettingsCard.tsx

@@ -39,6 +39,8 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
   titleKey: TKey
   /** Locale key of the line describing what this plugin's settings govern. */
   descriptionKey: TKey
+  /** Optional rich header description rendered instead of the plain t(descriptionKey) text (the plain text stays as the tooltip). */
+  descriptionNode?: ReactNode
   /** The card's form state: availability, writability, and what a save would do. */
   state: CardShell
   /** Write every staged edit. */
@@ -87,7 +89,7 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
       <div className={css.headerStatic}>
         <span className={css.headText}>
           <span className={css.name} title={title}>{title}</span>
-          <span className={css.description} title={description}>{description}</span>
+          <span className={css.description} title={description}>{props.descriptionNode ?? description}</span>
         </span>
         {state.dirty ? <span className={css.pending} title={props.t('settings.unsaved')}>{props.t('settings.unsaved')}</span> : null}
       </div>
@@ -102,7 +104,7 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
       >
         <span className={css.headText}>
           <span className={css.name} title={title}>{title}</span>
-          <span className={css.description} title={description}>{description}</span>
+          <span className={css.description} title={description}>{props.descriptionNode ?? description}</span>
         </span>
         {state.dirty ? <span className={css.pending} title={props.t('settings.unsaved')}>{props.t('settings.unsaved')}</span> : null}
         <svg

package/src/client/board/EditTaskModal.tsx

@@ -0,0 +1,94 @@
+/**
+ * Edit-task modal: title + description + the prompt the next execution will
+ * send, pre-filled from the task. Shown only for tasks that have never
+ * started executing (the detail view gates on canEditTaskContent); the Host
+ * still re-checks at submit, so a task that started running while the modal
+ * was open fails closed and the error surfaces here.
+ */
+import { useState } from 'react'
+import type { BoardController } from '../../core/controller.ts'
+import type { TaskRecord } from '../../core/tasks.ts'
+import { t } from '../locales.ts'
+import css from '../board.module.css'
+
+/** Edit-task form overlay. */
+export function EditTaskModal({ controller, task, onClose }: { controller: BoardController; task: TaskRecord; onClose: () => void }) {
+  const [title, setTitle] = useState(task.title)
+  const [description, setDescription] = useState(task.description)
+  const [prompt, setPrompt] = useState(task.prompt)
+  const [error, setError] = useState<string | undefined>(undefined)
+  const [pending, setPending] = useState(false)
+
+  const submit = async (): Promise<void> => {
+    if (title.trim() === '') {
+      setError(t('new.required'))
+      return
+    }
+    setPending(true)
+    // The Host confirms the mutation (and its fail-closed checks); only a
+    // confirmed save closes the modal.
+    if (await controller.updateTask(task.id, { title, description, prompt })) {
+      onClose()
+      return
+    }
+    setPending(false)
+    setError(controller.getSnapshot().transportError ?? t('new.required'))
+  }
+
+  return (
+    <div className={css.modalBackdrop} onMouseDown={event => { if (event.target === event.currentTarget) onClose() }}>
+      <form
+        className={css.modal}
+        role="dialog"
+        aria-label={t('edit.title')}
+        onSubmit={event => { event.preventDefault(); void submit() }}
+      >
+        <h2 className={css.modalTitle}>{t('edit.title')}</h2>
+
+        <label className={css.field}>
+          <span className={css.fieldLabel}>{t('new.title')}</span>
+          <input
+            className={css.input}
+            value={title}
+            autoFocus
+            placeholder={t('new.titlePlaceholder')}
+            onChange={event => { setTitle(event.target.value); setError(undefined) }}
+          />
+        </label>
+
+        <label className={css.field}>
+          <span className={css.fieldLabel}>{t('new.description')}</span>
+          <textarea
+            className={css.input}
+            rows={3}
+            value={description}
+            placeholder={t('new.descriptionPlaceholder')}
+            onChange={event => { setDescription(event.target.value) }}
+          />
+        </label>
+
+        <label className={css.field}>
+          <span className={css.fieldLabel}>{t('new.prompt')}</span>
+          <textarea
+            className={css.input}
+            rows={4}
+            value={prompt}
+            placeholder={t('new.promptPlaceholder')}
+            onChange={event => { setPrompt(event.target.value) }}
+          />
+        </label>
+
+        {error !== undefined && <p className={css.formError}>{error}</p>}
+
+        <footer className={css.modalFooter}>
+          <button type="button" className={css.ghostButton} onClick={onClose}>
+            {t('new.cancel')}
+          </button>
+          <button type="submit" className={css.primaryButton} disabled={pending}>
+            {t('edit.save')}
+          </button>
+        </footer>
+      </form>
+    </div>
+  )
+}

package/src/client/board/TaskBoard.tsx

@@ -52,7 +52,7 @@ export function TaskBoard({ controller }: { controller: BoardController }) {
   return (
     <div className={css.board} data-dsh-taskboard-board="" data-dsh-plugin="task-board">
       <header className={css.boardHeader}>
-        {/* Shared hook: dsh-web-ui-all offsets center-view back controls beside the collapsed mobile sidebar. */}
+        {/* Shared hook: dsh-web-all offsets center-view back controls beside the collapsed mobile sidebar. */}
         <button
           type="button"
           className={`${css.ghostButton} ${css.backButton}`}

package/src/client/board/TaskDetail.tsx

@@ -8,10 +8,12 @@ import { useEffect, useState } from 'react'
 import type { BoardController } from '../../core/controller.ts'
 import { isValidCron } from '../../core/schedule.ts'
 import { MANUAL_STATUSES, TASK_PERMISSIONS, type ExecutionRecord, type TaskPermission, type TaskRecord } from '../../core/tasks.ts'
+import { canEditTaskContent } from '../../core/use-cases/task-update.ts'
 import { t, type TaskBoardKey } from '../locales.ts'
 import { SCHEDULE_PRESETS } from '../schedule-presets.ts'
 import css from '../board.module.css'
 import { ConfirmDialog } from './ConfirmDialog.tsx'
+import { EditTaskModal } from './EditTaskModal.tsx'
 import { formatHostTimestamp, formatTime } from './TaskCard.tsx'
 import { STATUS_KEY } from './status-key.ts'
 
@@ -232,10 +234,13 @@ function ScheduleSection({ controller, task, pending }: { controller: BoardContr
 /** Task detail overlay. */
 export function TaskDetail({ controller, task }: { controller: BoardController; task: TaskRecord }) {
   const [confirmDelete, setConfirmDelete] = useState(false)
+  const [showEdit, setShowEdit] = useState(false)
 
   // Keep the overlay in sync if the task record changes underneath.
   const [latest, setLatest] = useState(task)
   useEffect(() => { setLatest(task) }, [task])
+  // A re-used overlay instance must not carry an edit session across tasks.
+  useEffect(() => { setShowEdit(false) }, [task.id])
   const current = latest
   const snapshot = controller.getSnapshot()
   const running = current.status === 'running'
@@ -328,6 +333,16 @@ export function TaskDetail({ controller, task }: { controller: BoardController;
 
         <footer className={css.detailFooter}>
           {!archived && pending && <span className={css.detailMeta}>{t('board.pending')}…</span>}
+          {!archived && canEditTaskContent(current) && (
+            <button
+              type="button"
+              className={css.ghostButton}
+              disabled={pending}
+              onClick={() => { setShowEdit(true) }}
+            >
+              {t('detail.edit')}
+            </button>
+          )}
           {!archived && (
             <button
               type="button"
@@ -395,6 +410,10 @@ export function TaskDetail({ controller, task }: { controller: BoardController;
           }}
         />
       )}
+
+      {showEdit && !archived && canEditTaskContent(current) && (
+        <EditTaskModal controller={controller} task={current} onClose={() => { setShowEdit(false) }} />
+      )}
     </div>
   )
 }

package/src/client/index.ts

@@ -24,6 +24,7 @@ import { mountSidebarEntry } from './sidebar-entry.ts'
 import { TaskBoardSettingsCard, TaskBoardSettingsCardController, type TaskBoardSettings } from './TaskBoardSettingsCard.tsx'
 import { en, zh, type TaskBoardKey } from './locales.ts'
 import { HttpTaskBoardHostTransport } from './host-api.ts'
+import { reportDailyHeartbeat } from './telemetry.ts'
 
 /** Locale namespace this plugin owns. */
 const NS = 'task-board'
@@ -57,7 +58,7 @@ export interface SettingsPluginItemOwnerProps {
 declare module '@deepseek-ai/cordis' {
   interface Context {
     /**
-     * Optional rc.6 compatibility binder provided by dsh-web-ui-settings;
+     * Optional rc.6 compatibility binder provided by dsh-web-settings;
      * absent when that group plugin is not installed, so callers fall back to
      * the official settings scope.
      */
@@ -74,6 +75,10 @@ export const inject = ['slots', 'sessions', 'workspaces', 'connection', 'setting
  * @param ctx - client root context (services: sessions, workspaces).
  */
 export function apply(ctx: ClientContext): void {
+  // Anonymous install heartbeat (docs/telemetry.md): one beat per browser per
+  // UTC day, package name only, silent failure.
+  reportDailyHeartbeat([{ name: '@linxin666/dsh-client-ui-task-board' }])
+
   // A duplicated client injection (module factory executed twice in one page
   // lifetime) would otherwise mount a second sidebar entry and board view.
   // First application wins; later calls become no-ops (see apply-guard.ts).

package/src/client/locales.ts

@@ -41,7 +41,10 @@ export const zh = {
   'new.cancel': '取消',
   'new.required': '标题不能为空',
   'detail.title': '任务详情',
+  'detail.edit': '编辑',
   'detail.close': '关闭',
+  'edit.title': '编辑任务',
+  'edit.save': '保存',
   'detail.prompt': '执行 Prompt',
   'detail.description': '描述',
   'detail.execution': '执行记录',
@@ -164,7 +167,10 @@ export const en: Record<keyof typeof zh, string> = {
   'new.cancel': 'Cancel',
   'new.required': 'Title is required',
   'detail.title': 'Task Detail',
+  'detail.edit': 'Edit',
   'detail.close': 'Close',
+  'edit.title': 'Edit Task',
+  'edit.save': 'Save',
   'detail.prompt': 'Run Prompt',
   'detail.description': 'Description',
   'detail.execution': 'Execution History',

package/src/client/settings-card.module.css

@@ -24,6 +24,10 @@
 .header {
   appearance: none;
   width: 100%;
+  /* The suite does not force a global border-box, so width:100% + padding
+     would stretch the row 32px past the card and push the trailing pending
+     badge (last flex item) outside the card border. */
+  box-sizing: border-box;
   font: inherit;
   color: inherit;
   text-align: left;
@@ -44,6 +48,7 @@
 
 .headerStatic {
   width: 100%;
+  box-sizing: border-box;
   border-radius: 12px;
   align-items: center;
   gap: 12px;

package/src/client/settings-form.ts

@@ -320,7 +320,7 @@ export class CardForm<T> {
   /**
    * Write every staged edit, then re-seed from what the Host accepted.
    *
-   * When the scope carries the optional batch surface (the dsh-web-ui
+   * When the scope carries the optional batch surface (the dsh-web
    * bridge scope), every planned write rides one mutation so cross-field
    * validate hooks (baseURL+model) judge the batch as a unit instead of
    * deadlocking on per-field writes. Otherwise the per-field loop runs.