@linxin666/dsh-client-ui-task-board 0.3.23 → 0.4.0

package/lib/types/client/PluginSettingsCard.d.ts

@@ -47,6 +47,10 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
      * edits, so the footer would sit there permanently disabled.
      */
     hideFooter?: boolean;
+    /** Render children even when the settings namespace is not exposed by the host. */
+    renderChildrenWhenNotExposed?: boolean;
+    /** Hide the 'not exposed' warning banner when the settings namespace is not exposed. */
+    hideNotExposedNotice?: boolean;
     /** The plugin's controls. */
     children: ReactNode;
 }

package/lib/types/client/TaskBoardSettingsCard.d.ts

@@ -5,7 +5,7 @@
  */
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
 import { type CardActions, type CardShell, type FieldState as CardFieldState } from './settings-form.ts';
 /** The task-board fields this card edits (the namespace's full schema). */
 export interface TaskBoardSettings {
@@ -32,12 +32,12 @@ export interface TaskBoardSettingsCardFace extends CardActions {
         taskBoardSettingsCard: SnapshotStore<TaskBoardSettingsCardState>;
     };
 }
-/** Bridges the `task-board` scope onto the card's staged form. */
+/** Bridges the `task-board` settings form onto the card's staged form. */
 export declare class TaskBoardSettingsCardController {
     private readonly form;
     private readonly store;
-    /** @param scope - the bound settings scope for the `task-board` namespace. */
-    constructor(scope: SettingsScope<TaskBoardSettings>);
+    /** @param scope - the bound configuration form for the `task-board` namespace. */
+    constructor(scope: ConfigForm<TaskBoardSettings>);
     private projection;
     /**
      * Build the face the card's slot registration injects.
@@ -45,7 +45,7 @@ export declare class TaskBoardSettingsCardController {
      */
     inject(): TaskBoardSettingsCardFace;
     /**
-     * Release the card's scope subscription and bound stores; the slot
+     * Release the card's form subscription and bound stores; the slot
      * disposer calls this on teardown.
      */
     dispose(): void;

package/lib/types/client/board/TaskForm.d.ts

@@ -7,7 +7,7 @@
 import type { ReactNode } from 'react';
 import { type TaskTag } from '../../core/tasks.ts';
 /** Modal overlay: closes on backdrop press, submits through the form. */
-export declare function ModalShell({ ariaLabel, title, error, pending, submitLabel, onSubmit, onClose, children, }: {
+export declare function ModalShell({ ariaLabel, title, error, pending, submitLabel, onSubmit, onClose, secondaryAction, children, }: {
     ariaLabel: string;
     title: string;
     error: string | undefined;
@@ -15,6 +15,11 @@ export declare function ModalShell({ ariaLabel, title, error, pending, submitLab
     submitLabel: string;
     onSubmit: () => void;
     onClose: () => void;
+    /** Optional second action beside the primary submit (e.g. create and run). */
+    secondaryAction?: {
+        label: string;
+        onSubmit: () => void;
+    };
     children: ReactNode;
 }): import("react").JSX.Element;
 /** Title + description + prompt fields shared by the new and edit task forms. */

package/lib/types/client/board/parse-model-pref.d.ts

@@ -0,0 +1,4 @@
+/** The remembered parse model; '' means the Host default (or no preference). */
+export declare function readParseModelPreference(storage?: Pick<Storage, 'getItem'> | undefined): string;
+/** Remember the picked parse model; '' records the Host-default choice. */
+export declare function writeParseModelPreference(model: string, storage?: Pick<Storage, 'setItem'> | undefined): void;

package/lib/types/client/index.d.ts

@@ -9,8 +9,30 @@
  * plugin must not take the GUI down.
  */
 import type { Context as ClientContext } from '@deepseek-ai/cordis';
-import type { SettingsScope, SettingsScopeSpec } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
+import { type TaskBoardSettings } from './TaskBoardSettingsCard.tsx';
 import { type TaskBoardKey } from './locales.ts';
+/** Domain-owned description of one settings namespace a family card binds. */
+export interface SettingsFormSpec<T> {
+    /** Settings namespace the card edits. */
+    namespace: string;
+    /**
+     * Narrow one wire section; undefined keeps the last accepted value. The
+     * shared form already resolves the namespace's own serialized wire schema,
+     * so a decoder exists only to narrow beyond that schema.
+     */
+    decode?: (section: unknown) => T | undefined;
+}
+/**
+ * The family settings binder published by dsh-web-settings. Its `bind` resolves
+ * a family namespace to the profile entry id that owns it and hands back the
+ * shared configuration form, so it is the only seat that can reach this card's
+ * form on a Host whose row id is not the namespace.
+ */
+export interface SettingsFormBinder {
+    /** Bind one family settings namespace. */
+    bind<T>(spec: SettingsFormSpec<T>): ConfigForm<T>;
+}
 declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface LocaleNamespaceMap {
         /** Task-board surface copy. */
@@ -19,9 +41,9 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface SlotMap {
         /**
          * The child slot the Web UI plugin group declares; this card registers
-         * into the group instead of the top-level `settings.plugin.item` list.
-         * Spelled here with the same shape so this package can register without
-         * depending on the sibling UI package.
+         * into the group's list seat rather than the official
+         * bundle-configuration seat. Spelled here with the same shape so this
+         * package can register without depending on the sibling UI package.
          */
         'web-ui.plugin.item': {
             kind: 'list';
@@ -38,13 +60,11 @@ export interface SettingsPluginItemOwnerProps {
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /**
-         * Optional rc.6 compatibility binder provided by dsh-web-settings;
-         * absent when that group plugin is not installed, so callers fall back to
-         * the official settings scope.
+         * Optional family settings binder provided by dsh-web-settings; absent
+         * when that group plugin is not installed, so callers fall back to the
+         * shared configuration forms service.
          */
-        webUiSettings?: {
-            bind<S>(spec: SettingsScopeSpec<S>): SettingsScope<S>;
-        };
+        webUiSettings?: SettingsFormBinder;
     }
 }
 /**
@@ -61,3 +81,16 @@ export declare const inject: string[];
  * @param ctx - client root context (services: sessions, workspaces).
  */
 export declare function apply(ctx: ClientContext): void;
+/**
+ * Bind the settings form this card stages over.
+ *
+ * The family binder (`ctx.get('webUiSettings')`, published by dsh-web-settings)
+ * comes first: it is what traces this package's family namespace onto the
+ * profile entry id the Host serves the form under, and it keeps the loopback
+ * bridge as its own fallback. A page without that group falls back to the
+ * shared configuration forms service bound directly at one of this package's
+ * own profile entry ids.
+ * @param ctx - client root context.
+ * @returns the form the settings card reads and writes.
+ */
+export declare function bindSettingsForm(ctx: ClientContext): ConfigForm<TaskBoardSettings>;

package/lib/types/client/locales.d.ts

@@ -61,6 +61,7 @@ export declare const zh: {
     'new.prompt': string;
     'new.promptPlaceholder': string;
     'new.submit': string;
+    'new.createAndRun': string;
     'new.cancel': string;
     'new.required': string;
     'new.freeze': string;

package/lib/types/client/main-session.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Main-view Session derivation for the multi-instance Client Session model.
+ *
+ * The Client Session Controller carries no global "current" selection: view
+ * selection belongs to the workspace UI, which owns the main-area reference and
+ * publishes it through the catalog's per-source ownership counts
+ * (`SessionSummary.retainedBy.mainView`). A plugin that needs the Session the
+ * main view shows derives it from that marker instead of the removed
+ * `SessionListState.current` field.
+ *
+ * The marker describes view ownership, not authority. It is the right input for
+ * presentation and for deciding which view a navigation targets; it is not a
+ * business fallback, because source counts never imply visibility or success.
+ * @module dsh-web/shared/main-session
+ */
+/** The catalog row subset this helper reads (a `SessionSummary` projection). */
+export interface MainViewOwnedRow<Id extends string = string> {
+    /** Catalog row identity. */
+    readonly id: Id;
+    /** Per-source local ownership counts; absent rows are never owned. */
+    readonly retainedBy?: Readonly<Partial<Record<string, number>>> | undefined;
+}
+/**
+ * Resolve the Session the main view currently shows.
+ *
+ * Reads the catalog's rows rather than a per-id retain-info source: ownership
+ * counts ride the list snapshot, so this neither allocates observers nor opens
+ * history, and a subscription to the list still fires when the selection moves.
+ * @param byId - the session catalog's rows (`SessionListState.byId`), when available.
+ * @returns the main-view session id, or undefined when the main view shows none.
+ */
+export declare function mainViewSessionId<Id extends string>(byId: Readonly<Record<Id, MainViewOwnedRow<Id> | undefined>> | undefined | null): Id | undefined;

package/lib/types/client/plugin-card-seat.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Family plugin-card seat.
+ *
+ * A family plugin contributes its settings card to whichever plugin-card seat
+ * the running host actually renders:
+ *
+ * - `web-ui.plugin.item` — the list seat declared by the dsh-web-settings
+ *   group section (this family's own first-level "Web UI plugins" section);
+ * - `plugins.bundle.config` — the official keyed seat of the harness's plugin
+ *   manager page, keyed by the bundle's package name and rendered on that
+ *   bundle's page. alpha.2 removed the `settings.plugin.item` keyed seat of the
+ *   `ui-settings-plugins` tab that this helper used before, so a card keyed by
+ *   its settings namespace has no seat to land in any more.
+ *
+ * SEAT SELECTION IS NOT A DECLARATION PROBE. The official plugin surface
+ * belongs to the harness bundle and declares its seats before any external
+ * plugin's `apply()` runs, so "is the official seat declared?" answers yes even
+ * in the deployment whose whole point is the family group. Choosing on that
+ * probe sends every family card to the official page and leaves the group's own
+ * section permanently empty — the family of reports where the section renders
+ * its heading and zero cards.
+ *
+ * The signal that actually distinguishes the two deployments is whether
+ * dsh-web-settings is loaded: it is the package that owns the group section and
+ * it publishes the `webUiSettings` service during `apply()`, which every
+ * family plugin already reads for its settings form. Group loaded -> the family
+ * seat; group absent -> the official seat.
+ *
+ * The decision is re-evaluated on every `slots/changed` because the group may
+ * apply after this plugin (the family aggregate orders it first, a profile that
+ * installs the group separately need not): the initial contribution goes to the
+ * official seat, then moves to the family seat the moment the group's section
+ * registers. The entry is disposed before the replacement is registered, so a
+ * card is never in two seats at once.
+ *
+ * The shared tree has no client-SDK dependency, so this module reads its
+ * context through the structural shape below; callers pass the plugin's own
+ * `ctx`.
+ */
+/** The family list seat key. */
+export declare const FAMILY_PLUGIN_CARD_SEAT = "web-ui.plugin.item";
+/** The official keyed plugin-card seat key (the alpha.2 bundle-configuration seat). */
+export declare const OFFICIAL_PLUGIN_CARD_SEAT = "plugins.bundle.config";
+/** The service dsh-web-settings publishes while it is loaded. */
+export declare const FAMILY_GROUP_SERVICE = "webUiSettings";
+/** The slot-registry member this helper uses (structurally satisfied by ctx.slots). */
+export interface PluginCardSlots {
+    /** Contribution of one card entry. */
+    register(options: never, component: never): unknown;
+}
+/** The slice of the client context a card contribution needs. */
+export interface PluginCardContext {
+    slots: PluginCardSlots;
+    /** Service lookup; absent on a context double that only models the slots. */
+    get?(name: string): unknown;
+    /** Event subscription seat; absent on an event-less test double. */
+    on?(event: string, listener: (...args: never[]) => void): unknown;
+}
+/** Owner share of a family list-seat card (that seat supplies nothing). */
+export interface SettingsPluginItemOwnerProps {
+    /** Marker field: card owner props are intentionally empty. */
+    children?: never;
+}
+/** One family plugin's card contribution. */
+export interface PluginCardSeat {
+    /**
+     * Npm package name of the bundle this card configures; the official keyed
+     * seat dispatches on it. Every family package ships its own bundle patch, so
+     * a standalone install lists that package as the bundle whose page renders
+     * this card.
+     */
+    bundle: string;
+    /** Family list-seat entry id. */
+    id: string;
+    /** Family list-seat sort order. */
+    order?: number;
+    /** Family list-seat display label; the official keyed seat carries none. */
+    label?: () => string;
+    /** Locale namespace the card renders with. */
+    locale: string;
+    /** Business-face factory of the registration. */
+    inject?: () => object;
+    /**
+     * The card component. Its props type is the seat's composed shape, which is
+     * chosen at runtime, so the helper takes it erased; the registrant keeps its
+     * own precise typing at the call site.
+     */
+    component: unknown;
+}
+/**
+ * Whether the family group (dsh-web-settings) is loaded in this page. The
+ * service is the group package's own contract, so the probe cannot be fooled
+ * by a harness release that starts declaring the official seat differently.
+ */
+export declare function familyGroupLoaded(ctx: PluginCardContext): boolean;
+/**
+ * Contribute one family plugin card to the seat this host renders, following
+ * the group if it loads later. The entry is disposed and re-registered on a
+ * seat change, never duplicated.
+ * @param ctx - client context (its slot registry decides the seat).
+ * @param seat - the card contribution.
+ */
+export declare function installPluginCard(ctx: PluginCardContext, seat: PluginCardSeat): void;

package/lib/types/client/settings-form.d.ts

@@ -6,7 +6,7 @@
  * each plugin's client bundle; mirrors the official ui-plugin-config
  * card-store pattern.
  */
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
 /** The write one field's staged text performs when the card is saved. */
 export type FieldWrite = {
@@ -86,7 +86,7 @@ export interface CardActions {
     /** Drop every staged edit. */
     discard: () => void;
 }
-/** One durable write inside the save's atomic scope mutation. */
+/** One durable write inside the save's atomic form mutation. */
 export interface BatchedWrite {
     /** Field this entry writes. */
     field: string;
@@ -130,20 +130,20 @@ export declare class CardForm<T> {
     private readonly specs;
     private readonly staged;
     private readonly listeners;
-    /** The scope subscription installed in the constructor; released by dispose(). */
-    private readonly disposeScope;
+    /** The form subscription installed in the constructor; released by dispose(). */
+    private readonly disposeForm;
     private disposed;
     private saving;
     private failed;
     private failedReason;
-    /** @param scope - the bound settings scope for this card's namespace. */
-    constructor(scope: SettingsScope<T>, specs: FieldSpec[]);
+    /** @param scope - the bound configuration form for this card's namespace. */
+    constructor(scope: ConfigForm<T>, specs: FieldSpec[]);
     /**
-     * Release the scope subscription and every bound store listener. The card
+     * Release the form subscription and every bound store listener. The card
      * must call this on teardown; later calls are no-ops.
      */
     dispose(): void;
-    /** Publish a projection of this form, rebuilt whenever the scope or a draft changes. */
+    /** Publish a projection of this form, rebuilt whenever the form or a draft changes. */
     bind<S>(project: () => S): SnapshotStore<S>;
     /** Read the card-level state: what the Host serves, and what a save would do. */
     shell(): CardShell;
@@ -152,19 +152,19 @@ export declare class CardForm<T> {
     /** The actions the card's slot registration injects. */
     actions(): CardActions;
     /**
-     * Write every staged edit in one atomic scope mutation, then re-seed from
+     * Write every staged edit in one atomic form mutation, then re-seed from
      * what the Host accepted.
      *
      * The whole batch rides one mutate, so cross-field validate hooks
      * (baseURL+model) judge it as a unit: the Host either applies every write
-     * or refuses the batch. The 0.1.2 scope contract never rejects a refused
-     * mutation — the scope recovers with a fresh Host view and resolves — so
-     * resolution alone proves nothing: the outcome is judged by reading the
-     * settled snapshot back, one planned write at a time, and one missed write
-     * fails the whole save. A scope that still rejects on refusal (the dsh-web
-     * bridge scope) reports through the same failure path with its rejection
-     * message. A save that did not land keeps its drafts, so the user can
-     * correct them instead of retyping.
+     * or refuses the batch. The form contract answers a refusal or a skipped
+     * write with `false` (it recovers with a fresh Host view instead of
+     * throwing), so the outcome is judged twice: the answer itself, and then the
+     * settled snapshot read back one planned write at a time. One missed write
+     * fails the whole save. A transport that rejects instead (the dsh-web bridge
+     * controller on a dead connection) reports through the same failure path
+     * with its rejection message. A save that did not land keeps its drafts, so
+     * the user can correct them instead of retyping.
      * @returns settlement after the mutation and the read-back.
      */
     save(): Promise<void>;

package/lib/types/core/controller.d.ts

@@ -30,16 +30,18 @@ export interface TaskBoardTransport {
      */
     parseDraft?(request: TaskBoardParseRequest, signal?: AbortSignal): Promise<TaskBoardParseDraft>;
 }
-/** The sessions face the controller needs for navigation awareness. */
+/**
+ * The sessions face the controller needs for navigation awareness. The Client
+ * Session Controller carries no global selection since 0.1.6-alpha.2, so the
+ * wiring resolves the main-view Session once and exposes it as current().
+ */
 export interface SessionsControllerFace {
-    list: {
-        getSnapshot(): {
-            current: string | undefined;
-        };
-        subscribe(fn: () => void): () => void;
-    };
-    /** Select a session as current (navigates the conversation view). */
+    /** The Session the main view currently shows, when any. */
+    current(): string | undefined;
+    /** Navigate the main view to a Session. */
     open(id: string): void;
+    /** Subscribe to catalog changes; selection ownership rides the same snapshot. */
+    subscribe(fn: () => void): () => void;
 }
 /** Controller dependencies (all swappable in tests). */
 export interface ControllerDeps {

package/lib/types/core/session-reuse.d.ts

@@ -8,8 +8,10 @@ import type { TaskRecord } from './tasks.ts';
  * Pick the session a new execution of this task may continue in, or undefined
  * to mint a fresh conversation. Reuse requires ALL of:
  * - the task opted in (`reuseSession === true`);
- * - the task's newest execution carries a session id and has settled (an open
- *   execution would have made the ledger refuse the run in the first place);
+ * - the task's newest SETTLED execution carries a session id (issue #1587: the
+ *   launch path calls this after `startExecution` appended this run's own open
+ *   record, so reading the array tail always found an unsettled row and reuse
+ *   never happened);
  * - the roster is known and that session is present and idle.
  *
  * An unknown roster (session/list unavailable) never reuses: minting a fresh

package/lib/types/host-ledger.d.ts

@@ -37,6 +37,21 @@ export interface LedgerRuntimeView {
  */
 export declare function processState(pid: number): string | undefined;
 export declare function processIsAlive(pid: number): boolean;
+/** Runs one PowerShell script and returns its trimmed stdout. */
+export type PowerShellProbe = (script: string, timeoutMs: number) => string | undefined;
+/**
+ * Windows start time (Unix epoch ms) of a live process.
+ *
+ * `Get-Process` is the precise first choice, but an unprivileged caller cannot
+ * read `.StartTime` for a protected process (System, svchost): the property is
+ * empty, so the probe returns nothing. Without a fallback, a crash leftover
+ * lock whose PID was reused by such a process could never be proven stale and
+ * blocked every startup until the lock was deleted by hand (issue #1629).
+ * Win32_Process through CIM reports the same CreationDate for those processes
+ * at the same millisecond precision, so it is the second identity source. The
+ * probe is injectable so the fallback chain is testable off Windows.
+ */
+export declare function win32StartTimeMs(pid: number, probe?: PowerShellProbe): number | undefined;
 export declare class HostTaskLedger {
     private readonly now;
     private document;

package/lib/types/http.d.ts

@@ -1,7 +1,9 @@
 /**
  * Shared JSON body/response helpers for the host route families: one strict
  * bounded body reader, one lenient bounded body reader, one JSON object
- * narrow, and one JSON writer. Previously these were copy-pasted across the
+ * narrow, one JSON writer, and the outbound request-init helper that keeps a
+ * host fetch body decodable (withIdentityEncoding). Previously the readers
+ * were copy-pasted across the
  * package route files (routes.ts, update-routes.ts, mobile-api.ts, and each
  * family's route module) with drifting contracts: body caps ranging 4 KiB to
  * 1 MiB and four distinct overflow behaviors (reject, undefined, null, throw).
@@ -34,6 +36,21 @@ export declare function readJsonBody(req: IncomingMessage, opts?: {
 }): Promise<unknown | null>;
 /** Narrow a value to a JSON object, or undefined when it is not one. */
 export declare function asJsonObject(value: unknown): Record<string, unknown> | undefined;
+/**
+ * Request init that asks a remote origin for an uncompressed body.
+ *
+ * The DSH host boots `@deepseek-ai/dsh-http-proxy`, whose top-level import of
+ * the npm `undici` copy replaces the legacy `undici.globalDispatcher.1` slot
+ * Node's built-in `fetch()` reads. That cross-major wrapper drops the
+ * `content-encoding` header and automatic decompression, so a plain fetch
+ * resolves to raw gzip/brotli/zstd bytes — compressed noise no JSON or text
+ * consumer can read. Every host fetch that parses a remote body must request
+ * identity encoding. Caller headers survive; `accept-encoding` is forced to
+ * `identity` because a caller value has no decoder behind it in this host.
+ * @param init - the caller's request init (signal, headers, method, ...).
+ * @returns a copy with `accept-encoding: identity` merged in.
+ */
+export declare function withIdentityEncoding(init?: RequestInit): RequestInit;
 /**
  * Write one JSON response. Default headers are the family defaults
  * (content-type and referrer-policy); caller headers are appended or

package/lib/types/index.d.ts

@@ -5,9 +5,8 @@
  * execution reconciliation, and optional idle-sleep inhibitor. The browser is
  * a same-origin asynchronous view over that service.
  */
-import type { Context } from '@deepseek-ai/cordis';
-import type { SettingsNamespace } from '@deepseek-ai/dsh-settings';
-import z from 'schemastery';
+import type { Context, Volatile } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
 import type { LlmRuntime } from '@deepseek-ai/dsh-llm';
 import { type TaskPermission } from './core/tasks.ts';
 /** Default environment variable holding the authenticated proxy token. */
@@ -16,24 +15,30 @@ export declare const inject: string[];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
 export declare const TASK_BOARD_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-task-board \u63D2\u4EF6\uFF08DSH Web GUI \u7684\u4EFB\u52A1\u770B\u677F\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300C\u4EFB\u52A1\u770B\u677F\u300D\u5165\u53E3\uFF1B\u5728 dsh-web \u63D2\u4EF6\u5168\u5BB6\u6876\u4ED3\u5E93\uFF08packages/dsh-task-board\uFF09\u7EDF\u4E00\u7EF4\u62A4\uFF0C\u7ECF\u805A\u5408\u5305 web-ui-all \u4E00\u952E\u5B89\u88C5\u3002\u80FD\u529B\uFF1A\u591A\u5217\u770B\u677F\u7BA1\u7406\u4EFB\u52A1\uFF1BHost \u6743\u5A01\u8D26\u672C\uFF1B\u5173\u95ED\u6D4F\u89C8\u5668\u540E\u4ECD\u7531 Host \u6267\u884C\u548C\u7ED3\u7B97\uFF1B\u4EFB\u52A1\u53EF\u9489\u4F4F\u5DE5\u4F5C\u533A\u3001agent \u9884\u8BBE\u548C\u6743\u9650\uFF1B\u652F\u6301 Host \u672C\u5730\u65F6\u533A\u7684 5 \u6BB5 cron\uFF0C\u9519\u8FC7\u7684\u89E6\u53D1\u70B9\u4E0D\u8865\u8DD1\uFF1B\u53EF\u9009\u4E14\u9ED8\u8BA4\u5173\u95ED\u7684\u7A7A\u95F2\u7CFB\u7EDF\u7761\u7720\u4FDD\u62A4\u5141\u8BB8\u5C4F\u5E55\u7184\u706D\uFF0C\u4F46\u4E0D\u627F\u8BFA\u62E6\u622A\u5408\u76D6\u3001\u624B\u52A8\u7761\u7720\u3001\u4F11\u7720\u3001\u5173\u673A\u6216\u5524\u9192\u5DF2\u7761\u7720\u673A\u5668\u3002\u6267\u884C\u6D88\u8017 API \u989D\u5EA6\u3002\u7528\u6237\u63D0\u5230\u300C\u4EFB\u52A1\u770B\u677F / \u770B\u677F / \u5B9A\u65F6\u4EFB\u52A1\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002\u82E5\u4F60\u540C\u65F6\u7528 todo_write \u7EF4\u62A4\u4F1A\u8BDD\u9876\u90E8\u7684\u53EF\u89C1\u8BA1\u5212\u5217\u8868\uFF0C\u6700\u7EC8\u56DE\u590D\u524D\u5FC5\u987B\u518D\u6B21\u8C03\u7528 todo_write \u6536\u5C3E\uFF1A\u6CA1\u6709\u5269\u4F59\u5DE5\u4F5C\u65F6\u4E0D\u8981\u4FDD\u7559 in_progress\uFF0C\u5DF2\u5B8C\u6210\u7684\u6700\u540E\u4E00\u6B65\u8981\u6807\u4E3A completed\u3002";
 /**
- * Settings namespace of the board's announcement capability — the section the
- * web settings surface edits. Spelled here rather than imported: the browser
- * half spells the same value and must not depend on a Host package.
+ * Plugin config, validated by the same-named schemastery schema.
+ *
+ * This schema IS the board's settings page: the 0.1.7 Host serves one
+ * configuration form per profile entry from the entry's own Config, so the
+ * three fields the browser card edits are marked volatile — the Loader commits
+ * an edit into the running fiber's references without remounting the row (no
+ * settings document of the plugin's own exists any more).
  */
-export declare const TASK_BOARD_SETTINGS_NAMESPACE: SettingsNamespace;
-/** Plugin config, validated by the same-named schemastery schema. */
 export interface Config {
     /**
      * When true (default), a system-prompt section announces the board to every
      * agent. Set false to keep the board silent in prompts; agents then learn
      * about it only when the user mentions it.
      */
-    announceToAgent?: boolean;
+    announceToAgent?: Volatile<boolean>;
     /** Master switch for the plugin (browser half + host announcement). */
-    enabled?: boolean;
+    enabled?: Volatile<boolean>;
     /** Prevent idle system sleep while sessions run or schedules are armed. */
-    preventIdleSleep?: boolean;
-    /** Canonical reverse-proxy Host authorities admitted with a server-side token. */
+    preventIdleSleep?: Volatile<boolean>;
+    /**
+     * Canonical reverse-proxy Host authorities admitted with a server-side
+     * token. Deployment-level, so it stays an ordinary field: editing it reloads
+     * the row, which re-registers the routes with the new proxy access.
+     */
     trustedProxyHosts?: string[];
     /** Environment variable whose value the authenticated proxy injects upstream. */
     proxyTokenEnv?: string;
@@ -44,7 +49,52 @@ export interface Config {
      */
     sessionDefaultPermission?: TaskPermission;
 }
-export declare const Config: z<Config>;
+/**
+ * The schema is left to inference rather than annotated with `z<Config>`: a
+ * volatile field's parsed output is a `Volatile` reference while its accepted
+ * input stays the plain value, so the two sides no longer share one shape and
+ * the annotation would reject the schema the Host must be given.
+ */
+export declare const Config: z<Schemastery.ObjectS<NoInfer<{
+    announceToAgent: z<boolean, boolean, "volatile-defined">;
+    enabled: z<boolean, boolean, "volatile-defined">;
+    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
+    trustedProxyHosts: z<string[], string[], "defined">;
+    proxyTokenEnv: z<string, string, "defined">;
+    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
+}>>, Schemastery.ObjectT<NoInfer<{
+    announceToAgent: z<boolean, boolean, "volatile-defined">;
+    enabled: z<boolean, boolean, "volatile-defined">;
+    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
+    trustedProxyHosts: z<string[], string[], "defined">;
+    proxyTokenEnv: z<string, string, "defined">;
+    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
+}>>, "plain">;
+declare module '@deepseek-ai/cordis' {
+    interface Events {
+        /**
+         * Volatile config values were committed into the running fiber without a
+         * remount; dispatched to the owning fiber only. Spelled here because the
+         * Loader package is not a dependency of this plugin, with the Loader's own
+         * shape so the two declarations merge when a Host program carries both.
+         * @param paths - changed config paths as key arrays; every value is committed before dispatch.
+         * @mode emit
+         */
+        'loader/volatile-update'(paths: readonly (readonly string[])[]): void;
+    }
+}
+/**
+ * Read one config field's current value.
+ *
+ * The Loader hands schema-volatile fields as stable references it commits in
+ * place, so a live value must be read at use time rather than captured when
+ * the plugin activates; a plain value (a programmatic mount, or a field the
+ * schema does not mark volatile) is returned as it stands.
+ * @param field - the config field as the Loader handed it.
+ * @param fallback - value to use when the field is absent.
+ * @returns the effective field value.
+ */
+export declare function readConfigField<T>(field: Volatile<T> | T | undefined, fallback: T): T;
 /** Resolve proxy access without ever placing the token value in plugin config. */
 export declare function resolveProxyAccess(config: Config | undefined, env?: NodeJS.ProcessEnv): {
     trustedProxyHosts: string[];
@@ -59,10 +109,15 @@ export declare function resolveProxyAccess(config: Config | undefined, env?: Nod
  */
 export declare function resolveLlmRuntime(ctx: Context): LlmRuntime | undefined;
 /**
- * Register the board's announcement section, gated on the composition entry's
- * `announceToAgent` (and the live settings value once the web settings
- * surface is served). The section is re-registered whenever the source
- * changes, so a settings edit takes effect without a restart.
+ * Activate the board's host half: ledger, routes, cron scheduler, power
+ * inhibitor, and the model-facing announcement.
+ *
+ * The effective settings are the config the Host hands this row. The three
+ * fields the browser card edits are schema-volatile, so the Loader commits an
+ * edit into the running fiber's references instead of remounting the row —
+ * `sync` therefore reads them at use time and follows
+ * `loader/volatile-update`, the event the Loader emits once it has committed
+ * them. Every other field reloads the row, which re-runs this activation.
  * @param ctx - the plugin context (systemPrompt injected).
  * @param config - resolved plugin config (schema defaults applied by the loader).
  */