@linxin666/dsh-client-ui-task-board 0.3.24 → 0.4.1

package/lib/types/client/PluginSettingsCard.d.ts

@@ -47,6 +47,10 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
      * edits, so the footer would sit there permanently disabled.
      */
     hideFooter?: boolean;
+    /** Render children even when the settings namespace is not exposed by the host. */
+    renderChildrenWhenNotExposed?: boolean;
+    /** Hide the 'not exposed' warning banner when the settings namespace is not exposed. */
+    hideNotExposedNotice?: boolean;
     /** The plugin's controls. */
     children: ReactNode;
 }

package/lib/types/client/TaskBoardSettingsCard.d.ts

@@ -5,7 +5,7 @@
  */
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
 import { type CardActions, type CardShell, type FieldState as CardFieldState } from './settings-form.ts';
 /** The task-board fields this card edits (the namespace's full schema). */
 export interface TaskBoardSettings {
@@ -32,12 +32,12 @@ export interface TaskBoardSettingsCardFace extends CardActions {
         taskBoardSettingsCard: SnapshotStore<TaskBoardSettingsCardState>;
     };
 }
-/** Bridges the `task-board` scope onto the card's staged form. */
+/** Bridges the `task-board` settings form onto the card's staged form. */
 export declare class TaskBoardSettingsCardController {
     private readonly form;
     private readonly store;
-    /** @param scope - the bound settings scope for the `task-board` namespace. */
-    constructor(scope: SettingsScope<TaskBoardSettings>);
+    /** @param scope - the bound configuration form for the `task-board` namespace. */
+    constructor(scope: ConfigForm<TaskBoardSettings>);
     private projection;
     /**
      * Build the face the card's slot registration injects.
@@ -45,7 +45,7 @@ export declare class TaskBoardSettingsCardController {
      */
     inject(): TaskBoardSettingsCardFace;
     /**
-     * Release the card's scope subscription and bound stores; the slot
+     * Release the card's form subscription and bound stores; the slot
      * disposer calls this on teardown.
      */
     dispose(): void;

package/lib/types/client/index.d.ts

@@ -9,8 +9,30 @@
  * plugin must not take the GUI down.
  */
 import type { Context as ClientContext } from '@deepseek-ai/cordis';
-import type { SettingsScope, SettingsScopeSpec } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
+import { type TaskBoardSettings } from './TaskBoardSettingsCard.tsx';
 import { type TaskBoardKey } from './locales.ts';
+/** Domain-owned description of one settings namespace a family card binds. */
+export interface SettingsFormSpec<T> {
+    /** Settings namespace the card edits. */
+    namespace: string;
+    /**
+     * Narrow one wire section; undefined keeps the last accepted value. The
+     * shared form already resolves the namespace's own serialized wire schema,
+     * so a decoder exists only to narrow beyond that schema.
+     */
+    decode?: (section: unknown) => T | undefined;
+}
+/**
+ * The family settings binder published by dsh-web-settings. Its `bind` resolves
+ * a family namespace to the profile entry id that owns it and hands back the
+ * shared configuration form, so it is the only seat that can reach this card's
+ * form on a Host whose row id is not the namespace.
+ */
+export interface SettingsFormBinder {
+    /** Bind one family settings namespace. */
+    bind<T>(spec: SettingsFormSpec<T>): ConfigForm<T>;
+}
 declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface LocaleNamespaceMap {
         /** Task-board surface copy. */
@@ -19,9 +41,9 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface SlotMap {
         /**
          * The child slot the Web UI plugin group declares; this card registers
-         * into the group instead of the top-level `settings.plugin.item` list.
-         * Spelled here with the same shape so this package can register without
-         * depending on the sibling UI package.
+         * into the group's list seat rather than the official
+         * bundle-configuration seat. Spelled here with the same shape so this
+         * package can register without depending on the sibling UI package.
          */
         'web-ui.plugin.item': {
             kind: 'list';
@@ -38,13 +60,11 @@ export interface SettingsPluginItemOwnerProps {
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /**
-         * Optional rc.6 compatibility binder provided by dsh-web-settings;
-         * absent when that group plugin is not installed, so callers fall back to
-         * the official settings scope.
+         * Optional family settings binder provided by dsh-web-settings; absent
+         * when that group plugin is not installed, so callers fall back to the
+         * shared configuration forms service.
          */
-        webUiSettings?: {
-            bind<S>(spec: SettingsScopeSpec<S>): SettingsScope<S>;
-        };
+        webUiSettings?: SettingsFormBinder;
     }
 }
 /**
@@ -61,3 +81,16 @@ export declare const inject: string[];
  * @param ctx - client root context (services: sessions, workspaces).
  */
 export declare function apply(ctx: ClientContext): void;
+/**
+ * Bind the settings form this card stages over.
+ *
+ * The family binder (`ctx.get('webUiSettings')`, published by dsh-web-settings)
+ * comes first: it is what traces this package's family namespace onto the
+ * profile entry id the Host serves the form under, and it keeps the loopback
+ * bridge as its own fallback. A page without that group falls back to the
+ * shared configuration forms service bound directly at one of this package's
+ * own profile entry ids.
+ * @param ctx - client root context.
+ * @returns the form the settings card reads and writes.
+ */
+export declare function bindSettingsForm(ctx: ClientContext): ConfigForm<TaskBoardSettings>;

package/lib/types/client/main-session.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Main-view Session derivation for the multi-instance Client Session model.
+ *
+ * The Client Session Controller carries no global "current" selection: view
+ * selection belongs to the workspace UI, which owns the main-area reference and
+ * publishes it through the catalog's per-source ownership counts
+ * (`SessionSummary.retainedBy.mainView`). A plugin that needs the Session the
+ * main view shows derives it from that marker instead of the removed
+ * `SessionListState.current` field.
+ *
+ * The marker describes view ownership, not authority. It is the right input for
+ * presentation and for deciding which view a navigation targets; it is not a
+ * business fallback, because source counts never imply visibility or success.
+ * @module dsh-web/shared/main-session
+ */
+/** The catalog row subset this helper reads (a `SessionSummary` projection). */
+export interface MainViewOwnedRow<Id extends string = string> {
+    /** Catalog row identity. */
+    readonly id: Id;
+    /** Per-source local ownership counts; absent rows are never owned. */
+    readonly retainedBy?: Readonly<Partial<Record<string, number>>> | undefined;
+}
+/**
+ * Resolve the Session the main view currently shows.
+ *
+ * Reads the catalog's rows rather than a per-id retain-info source: ownership
+ * counts ride the list snapshot, so this neither allocates observers nor opens
+ * history, and a subscription to the list still fires when the selection moves.
+ * @param byId - the session catalog's rows (`SessionListState.byId`), when available.
+ * @returns the main-view session id, or undefined when the main view shows none.
+ */
+export declare function mainViewSessionId<Id extends string>(byId: Readonly<Record<Id, MainViewOwnedRow<Id> | undefined>> | undefined | null): Id | undefined;

package/lib/types/client/plugin-card-seat.d.ts

@@ -6,22 +6,24 @@
  *
  * - `web-ui.plugin.item` — the list seat declared by the dsh-web-settings
  *   group section (this family's own first-level "Web UI plugins" section);
- * - `settings.plugin.item` — the official keyed seat of the harness's
- *   `ui-settings-plugins` tab, keyed by the settings namespace the card edits.
+ * - `plugins.bundle.config` — the official keyed seat of the harness's plugin
+ *   manager page, keyed by the bundle's package name and rendered on that
+ *   bundle's page. alpha.2 removed the `settings.plugin.item` keyed seat of the
+ *   `ui-settings-plugins` tab that this helper used before, so a card keyed by
+ *   its settings namespace has no seat to land in any more.
  *
- * SEAT SELECTION IS NOT A DECLARATION PROBE. The official `ui-settings-plugins`
- * row belongs to the harness bundle and its `configurable` tab always declares
- * `settings.plugin.item` before any external plugin's `apply()` runs, so
- * "is the official seat declared?" answers yes even in the deployment whose
- * whole point is the family group. Choosing on that probe sends every family
- * card to the official Plugins tab and leaves the group's own section
- * permanently empty — the family of reports where the section renders its
- * heading and zero cards.
+ * SEAT SELECTION IS NOT A DECLARATION PROBE. The official plugin surface
+ * belongs to the harness bundle and declares its seats before any external
+ * plugin's `apply()` runs, so "is the official seat declared?" answers yes even
+ * in the deployment whose whole point is the family group. Choosing on that
+ * probe sends every family card to the official page and leaves the group's own
+ * section permanently empty — the family of reports where the section renders
+ * its heading and zero cards.
  *
  * The signal that actually distinguishes the two deployments is whether
  * dsh-web-settings is loaded: it is the package that owns the group section and
  * it publishes the `webUiSettings` service during `apply()`, which every
- * family plugin already reads for its settings scope. Group loaded -> the family
+ * family plugin already reads for its settings form. Group loaded -> the family
  * seat; group absent -> the official seat.
  *
  * The decision is re-evaluated on every `slots/changed` because the group may
@@ -37,8 +39,8 @@
  */
 /** The family list seat key. */
 export declare const FAMILY_PLUGIN_CARD_SEAT = "web-ui.plugin.item";
-/** The official keyed plugin-card seat key. */
-export declare const OFFICIAL_PLUGIN_CARD_SEAT = "settings.plugin.item";
+/** The official keyed plugin-card seat key (the alpha.2 bundle-configuration seat). */
+export declare const OFFICIAL_PLUGIN_CARD_SEAT = "plugins.bundle.config";
 /** The service dsh-web-settings publishes while it is loaded. */
 export declare const FAMILY_GROUP_SERVICE = "webUiSettings";
 /** The slot-registry member this helper uses (structurally satisfied by ctx.slots). */
@@ -54,15 +56,20 @@ export interface PluginCardContext {
     /** Event subscription seat; absent on an event-less test double. */
     on?(event: string, listener: (...args: never[]) => void): unknown;
 }
-/** Owner share of a plugin card (both seats supply nothing). */
+/** Owner share of a family list-seat card (that seat supplies nothing). */
 export interface SettingsPluginItemOwnerProps {
     /** Marker field: card owner props are intentionally empty. */
     children?: never;
 }
 /** One family plugin's card contribution. */
 export interface PluginCardSeat {
-    /** Settings namespace the card edits (the official seat's dispatch key). */
-    namespace: string;
+    /**
+     * Npm package name of the bundle this card configures; the official keyed
+     * seat dispatches on it. Every family package ships its own bundle patch, so
+     * a standalone install lists that package as the bundle whose page renders
+     * this card.
+     */
+    bundle: string;
     /** Family list-seat entry id. */
     id: string;
     /** Family list-seat sort order. */

package/lib/types/client/settings-form.d.ts

@@ -6,7 +6,7 @@
  * each plugin's client bundle; mirrors the official ui-plugin-config
  * card-store pattern.
  */
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
 /** The write one field's staged text performs when the card is saved. */
 export type FieldWrite = {
@@ -86,7 +86,7 @@ export interface CardActions {
     /** Drop every staged edit. */
     discard: () => void;
 }
-/** One durable write inside the save's atomic scope mutation. */
+/** One durable write inside the save's atomic form mutation. */
 export interface BatchedWrite {
     /** Field this entry writes. */
     field: string;
@@ -130,20 +130,20 @@ export declare class CardForm<T> {
     private readonly specs;
     private readonly staged;
     private readonly listeners;
-    /** The scope subscription installed in the constructor; released by dispose(). */
-    private readonly disposeScope;
+    /** The form subscription installed in the constructor; released by dispose(). */
+    private readonly disposeForm;
     private disposed;
     private saving;
     private failed;
     private failedReason;
-    /** @param scope - the bound settings scope for this card's namespace. */
-    constructor(scope: SettingsScope<T>, specs: FieldSpec[]);
+    /** @param scope - the bound configuration form for this card's namespace. */
+    constructor(scope: ConfigForm<T>, specs: FieldSpec[]);
     /**
-     * Release the scope subscription and every bound store listener. The card
+     * Release the form subscription and every bound store listener. The card
      * must call this on teardown; later calls are no-ops.
      */
     dispose(): void;
-    /** Publish a projection of this form, rebuilt whenever the scope or a draft changes. */
+    /** Publish a projection of this form, rebuilt whenever the form or a draft changes. */
     bind<S>(project: () => S): SnapshotStore<S>;
     /** Read the card-level state: what the Host serves, and what a save would do. */
     shell(): CardShell;
@@ -152,19 +152,19 @@ export declare class CardForm<T> {
     /** The actions the card's slot registration injects. */
     actions(): CardActions;
     /**
-     * Write every staged edit in one atomic scope mutation, then re-seed from
+     * Write every staged edit in one atomic form mutation, then re-seed from
      * what the Host accepted.
      *
      * The whole batch rides one mutate, so cross-field validate hooks
      * (baseURL+model) judge it as a unit: the Host either applies every write
-     * or refuses the batch. The 0.1.2 scope contract never rejects a refused
-     * mutation — the scope recovers with a fresh Host view and resolves — so
-     * resolution alone proves nothing: the outcome is judged by reading the
-     * settled snapshot back, one planned write at a time, and one missed write
-     * fails the whole save. A scope that still rejects on refusal (the dsh-web
-     * bridge scope) reports through the same failure path with its rejection
-     * message. A save that did not land keeps its drafts, so the user can
-     * correct them instead of retyping.
+     * or refuses the batch. The form contract answers a refusal or a skipped
+     * write with `false` (it recovers with a fresh Host view instead of
+     * throwing), so the outcome is judged twice: the answer itself, and then the
+     * settled snapshot read back one planned write at a time. One missed write
+     * fails the whole save. A transport that rejects instead (the dsh-web bridge
+     * controller on a dead connection) reports through the same failure path
+     * with its rejection message. A save that did not land keeps its drafts, so
+     * the user can correct them instead of retyping.
      * @returns settlement after the mutation and the read-back.
      */
     save(): Promise<void>;

package/lib/types/client/sidebar-entry-core.d.ts

@@ -1,29 +1,3 @@
-/**
- * One trailing action button seated at the entry row's right edge (e.g. a
- * refresh command or a collapse chevron). Rows with actions switch from the
- * classic single-button structure to a container with a main button plus the
- * action buttons (nested interactive elements are invalid HTML); rows without
- * actions keep the classic structure untouched.
- */
-export interface SidebarEntryAction {
-    /** Stable id stamped as data-dsh-entry-action="<id>" (CSS hooks and tests). */
-    id: string;
-    /** Inline icon markup while the row is active (always, when inactiveIcon is unset). */
-    icon: string;
-    /**
-     * Optional icon while the row is inactive. Setting it makes the action a
-     * state mirror (a collapse chevron): the core swaps the icon and stamps
-     * aria-expanded on every active-state change. Requires the active bridge.
-     */
-    inactiveIcon?: string;
-    /** Localized accessible label (aria-label + title); receives the active state. */
-    label(active: boolean): string;
-    /**
-     * Click handler; receives the button so the caller can drive transient
-     * affordances (a refresh cooldown) without a re-render.
-     */
-    onClick(button: HTMLButtonElement): void;
-}
 /** Per-package configuration for one sidebar entry row. */
 export interface SidebarEntryOptions {
     /** Full attribute name identifying the injected row (idempotency key), e.g. 'data-dsh-ssh-entry'. */
@@ -57,12 +31,6 @@ export interface SidebarEntryOptions {
     };
     /** Click action (open/toggle the owning panel). */
     onToggle(): void;
-    /**
-     * Optional trailing action buttons at the row's right edge. Requires the
-     * package CSS to seat entryMain / entryAction; empty keeps the classic
-     * single-button row.
-     */
-    actions?: readonly SidebarEntryAction[];
     /** Family-block position: 'before' inserts ahead of sibling plugin rows, 'after' behind them. */
     position: 'before' | 'after';
     /**

package/lib/types/core/controller.d.ts

@@ -30,16 +30,18 @@ export interface TaskBoardTransport {
      */
     parseDraft?(request: TaskBoardParseRequest, signal?: AbortSignal): Promise<TaskBoardParseDraft>;
 }
-/** The sessions face the controller needs for navigation awareness. */
+/**
+ * The sessions face the controller needs for navigation awareness. The Client
+ * Session Controller carries no global selection since 0.1.6-alpha.2, so the
+ * wiring resolves the main-view Session once and exposes it as current().
+ */
 export interface SessionsControllerFace {
-    list: {
-        getSnapshot(): {
-            current: string | undefined;
-        };
-        subscribe(fn: () => void): () => void;
-    };
-    /** Select a session as current (navigates the conversation view). */
+    /** The Session the main view currently shows, when any. */
+    current(): string | undefined;
+    /** Navigate the main view to a Session. */
     open(id: string): void;
+    /** Subscribe to catalog changes; selection ownership rides the same snapshot. */
+    subscribe(fn: () => void): () => void;
 }
 /** Controller dependencies (all swappable in tests). */
 export interface ControllerDeps {

package/lib/types/http.d.ts

@@ -1,7 +1,9 @@
 /**
  * Shared JSON body/response helpers for the host route families: one strict
  * bounded body reader, one lenient bounded body reader, one JSON object
- * narrow, and one JSON writer. Previously these were copy-pasted across the
+ * narrow, one JSON writer, and the outbound request-init helper that keeps a
+ * host fetch body decodable (withIdentityEncoding). Previously the readers
+ * were copy-pasted across the
  * package route files (routes.ts, update-routes.ts, mobile-api.ts, and each
  * family's route module) with drifting contracts: body caps ranging 4 KiB to
  * 1 MiB and four distinct overflow behaviors (reject, undefined, null, throw).
@@ -34,6 +36,21 @@ export declare function readJsonBody(req: IncomingMessage, opts?: {
 }): Promise<unknown | null>;
 /** Narrow a value to a JSON object, or undefined when it is not one. */
 export declare function asJsonObject(value: unknown): Record<string, unknown> | undefined;
+/**
+ * Request init that asks a remote origin for an uncompressed body.
+ *
+ * The DSH host boots `@deepseek-ai/dsh-http-proxy`, whose top-level import of
+ * the npm `undici` copy replaces the legacy `undici.globalDispatcher.1` slot
+ * Node's built-in `fetch()` reads. That cross-major wrapper drops the
+ * `content-encoding` header and automatic decompression, so a plain fetch
+ * resolves to raw gzip/brotli/zstd bytes — compressed noise no JSON or text
+ * consumer can read. Every host fetch that parses a remote body must request
+ * identity encoding. Caller headers survive; `accept-encoding` is forced to
+ * `identity` because a caller value has no decoder behind it in this host.
+ * @param init - the caller's request init (signal, headers, method, ...).
+ * @returns a copy with `accept-encoding: identity` merged in.
+ */
+export declare function withIdentityEncoding(init?: RequestInit): RequestInit;
 /**
  * Write one JSON response. Default headers are the family defaults
  * (content-type and referrer-policy); caller headers are appended or

package/lib/types/index.d.ts

@@ -5,9 +5,8 @@
  * execution reconciliation, and optional idle-sleep inhibitor. The browser is
  * a same-origin asynchronous view over that service.
  */
-import type { Context } from '@deepseek-ai/cordis';
-import type { SettingsNamespace } from '@deepseek-ai/dsh-settings';
-import z from 'schemastery';
+import type { Context, Volatile } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
 import type { LlmRuntime } from '@deepseek-ai/dsh-llm';
 import { type TaskPermission } from './core/tasks.ts';
 /** Default environment variable holding the authenticated proxy token. */
@@ -16,24 +15,30 @@ export declare const inject: string[];
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
 export declare const TASK_BOARD_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-task-board \u63D2\u4EF6\uFF08DSH Web GUI \u7684\u4EFB\u52A1\u770B\u677F\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300C\u4EFB\u52A1\u770B\u677F\u300D\u5165\u53E3\uFF1B\u5728 dsh-web \u63D2\u4EF6\u5168\u5BB6\u6876\u4ED3\u5E93\uFF08packages/dsh-task-board\uFF09\u7EDF\u4E00\u7EF4\u62A4\uFF0C\u7ECF\u805A\u5408\u5305 web-ui-all \u4E00\u952E\u5B89\u88C5\u3002\u80FD\u529B\uFF1A\u591A\u5217\u770B\u677F\u7BA1\u7406\u4EFB\u52A1\uFF1BHost \u6743\u5A01\u8D26\u672C\uFF1B\u5173\u95ED\u6D4F\u89C8\u5668\u540E\u4ECD\u7531 Host \u6267\u884C\u548C\u7ED3\u7B97\uFF1B\u4EFB\u52A1\u53EF\u9489\u4F4F\u5DE5\u4F5C\u533A\u3001agent \u9884\u8BBE\u548C\u6743\u9650\uFF1B\u652F\u6301 Host \u672C\u5730\u65F6\u533A\u7684 5 \u6BB5 cron\uFF0C\u9519\u8FC7\u7684\u89E6\u53D1\u70B9\u4E0D\u8865\u8DD1\uFF1B\u53EF\u9009\u4E14\u9ED8\u8BA4\u5173\u95ED\u7684\u7A7A\u95F2\u7CFB\u7EDF\u7761\u7720\u4FDD\u62A4\u5141\u8BB8\u5C4F\u5E55\u7184\u706D\uFF0C\u4F46\u4E0D\u627F\u8BFA\u62E6\u622A\u5408\u76D6\u3001\u624B\u52A8\u7761\u7720\u3001\u4F11\u7720\u3001\u5173\u673A\u6216\u5524\u9192\u5DF2\u7761\u7720\u673A\u5668\u3002\u6267\u884C\u6D88\u8017 API \u989D\u5EA6\u3002\u7528\u6237\u63D0\u5230\u300C\u4EFB\u52A1\u770B\u677F / \u770B\u677F / \u5B9A\u65F6\u4EFB\u52A1\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002\u82E5\u4F60\u540C\u65F6\u7528 todo_write \u7EF4\u62A4\u4F1A\u8BDD\u9876\u90E8\u7684\u53EF\u89C1\u8BA1\u5212\u5217\u8868\uFF0C\u6700\u7EC8\u56DE\u590D\u524D\u5FC5\u987B\u518D\u6B21\u8C03\u7528 todo_write \u6536\u5C3E\uFF1A\u6CA1\u6709\u5269\u4F59\u5DE5\u4F5C\u65F6\u4E0D\u8981\u4FDD\u7559 in_progress\uFF0C\u5DF2\u5B8C\u6210\u7684\u6700\u540E\u4E00\u6B65\u8981\u6807\u4E3A completed\u3002";
 /**
- * Settings namespace of the board's announcement capability — the section the
- * web settings surface edits. Spelled here rather than imported: the browser
- * half spells the same value and must not depend on a Host package.
+ * Plugin config, validated by the same-named schemastery schema.
+ *
+ * This schema IS the board's settings page: the 0.1.7 Host serves one
+ * configuration form per profile entry from the entry's own Config, so the
+ * three fields the browser card edits are marked volatile — the Loader commits
+ * an edit into the running fiber's references without remounting the row (no
+ * settings document of the plugin's own exists any more).
  */
-export declare const TASK_BOARD_SETTINGS_NAMESPACE: SettingsNamespace;
-/** Plugin config, validated by the same-named schemastery schema. */
 export interface Config {
     /**
      * When true (default), a system-prompt section announces the board to every
      * agent. Set false to keep the board silent in prompts; agents then learn
      * about it only when the user mentions it.
      */
-    announceToAgent?: boolean;
+    announceToAgent?: Volatile<boolean>;
     /** Master switch for the plugin (browser half + host announcement). */
-    enabled?: boolean;
+    enabled?: Volatile<boolean>;
     /** Prevent idle system sleep while sessions run or schedules are armed. */
-    preventIdleSleep?: boolean;
-    /** Canonical reverse-proxy Host authorities admitted with a server-side token. */
+    preventIdleSleep?: Volatile<boolean>;
+    /**
+     * Canonical reverse-proxy Host authorities admitted with a server-side
+     * token. Deployment-level, so it stays an ordinary field: editing it reloads
+     * the row, which re-registers the routes with the new proxy access.
+     */
     trustedProxyHosts?: string[];
     /** Environment variable whose value the authenticated proxy injects upstream. */
     proxyTokenEnv?: string;
@@ -44,7 +49,52 @@ export interface Config {
      */
     sessionDefaultPermission?: TaskPermission;
 }
-export declare const Config: z<Config>;
+/**
+ * The schema is left to inference rather than annotated with `z<Config>`: a
+ * volatile field's parsed output is a `Volatile` reference while its accepted
+ * input stays the plain value, so the two sides no longer share one shape and
+ * the annotation would reject the schema the Host must be given.
+ */
+export declare const Config: z<Schemastery.ObjectS<NoInfer<{
+    announceToAgent: z<boolean, boolean, "volatile-defined">;
+    enabled: z<boolean, boolean, "volatile-defined">;
+    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
+    trustedProxyHosts: z<string[], string[], "defined">;
+    proxyTokenEnv: z<string, string, "defined">;
+    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
+}>>, Schemastery.ObjectT<NoInfer<{
+    announceToAgent: z<boolean, boolean, "volatile-defined">;
+    enabled: z<boolean, boolean, "volatile-defined">;
+    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
+    trustedProxyHosts: z<string[], string[], "defined">;
+    proxyTokenEnv: z<string, string, "defined">;
+    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
+}>>, "plain">;
+declare module '@deepseek-ai/cordis' {
+    interface Events {
+        /**
+         * Volatile config values were committed into the running fiber without a
+         * remount; dispatched to the owning fiber only. Spelled here because the
+         * Loader package is not a dependency of this plugin, with the Loader's own
+         * shape so the two declarations merge when a Host program carries both.
+         * @param paths - changed config paths as key arrays; every value is committed before dispatch.
+         * @mode emit
+         */
+        'loader/volatile-update'(paths: readonly (readonly string[])[]): void;
+    }
+}
+/**
+ * Read one config field's current value.
+ *
+ * The Loader hands schema-volatile fields as stable references it commits in
+ * place, so a live value must be read at use time rather than captured when
+ * the plugin activates; a plain value (a programmatic mount, or a field the
+ * schema does not mark volatile) is returned as it stands.
+ * @param field - the config field as the Loader handed it.
+ * @param fallback - value to use when the field is absent.
+ * @returns the effective field value.
+ */
+export declare function readConfigField<T>(field: Volatile<T> | T | undefined, fallback: T): T;
 /** Resolve proxy access without ever placing the token value in plugin config. */
 export declare function resolveProxyAccess(config: Config | undefined, env?: NodeJS.ProcessEnv): {
     trustedProxyHosts: string[];
@@ -59,10 +109,15 @@ export declare function resolveProxyAccess(config: Config | undefined, env?: Nod
  */
 export declare function resolveLlmRuntime(ctx: Context): LlmRuntime | undefined;
 /**
- * Register the board's announcement section, gated on the composition entry's
- * `announceToAgent` (and the live settings value once the web settings
- * surface is served). The section is re-registered whenever the source
- * changes, so a settings edit takes effect without a restart.
+ * Activate the board's host half: ledger, routes, cron scheduler, power
+ * inhibitor, and the model-facing announcement.
+ *
+ * The effective settings are the config the Host hands this row. The three
+ * fields the browser card edits are schema-volatile, so the Loader commits an
+ * edit into the running fiber's references instead of remounting the row —
+ * `sync` therefore reads them at use time and follows
+ * `loader/volatile-update`, the event the Loader emits once it has committed
+ * them. Every other field reloads the row, which re-runs this activation.
  * @param ctx - the plugin context (systemPrompt injected).
  * @param config - resolved plugin config (schema defaults applied by the loader).
  */

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Host-authoritative task board for the DSH Web GUI with real session execution, Host cron scheduling, and optional cross-platform idle-sleep protection; mounted without DSH source changes.",
-  "version": "0.3.24",
+  "version": "0.4.1",
+  "icon": "icon.svg",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -23,7 +24,7 @@
   },
   "dsh": {
     "engines": {
-      "dsh": ">=0.1.5-rc.1"
+      "dsh": ">=0.1.7-rc.1"
     },
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -35,46 +36,49 @@
         "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-api-session-controller",
         "@deepseek-ai/dsh-api-workspace-controller",
-        "@deepseek-ai/dsh-api-remotes"
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-client-ui-workspace"
       ],
       "platform": "web"
     }
   },
   "peerDependencies": {
+    "@deepseek-ai/dsh": ">=0.1.7-rc.1",
     "react": "^18.2.0"
   },
   "dependencies": {
-    "schemastery": "^3.18.0"
+    "@deepseek-ai/schemastery": "^3.18.4"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-api-gateway": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-workspace": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-api-session-controller": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-api-workspace-controller": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-store": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.5-rc.1",
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/dsh-agent": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-agent-preset-registry": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-api-gateway": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-api-workspace-controller": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-store": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-workspace": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-workspace": "^0.1.7-rc.1",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.5",
-    "@vitest/coverage-v8": "^3.2.7",
+    "@vitest/coverage-v8": "^4.1.11",
     "jsdom": "^25.0.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "tsdown": "0.22.2",
     "typescript": "~5.7.2",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.11"
   },
   "files": [
     "lib/**/*.js",
@@ -82,7 +86,8 @@
     "lib/**/*.d.ts",
     "lib/**/*.d.ts.map",
     "src",
-    "cordis.patch.yml"
+    "cordis.patch.yml",
+    "icon.svg"
   ],
   "license": "Apache-2.0",
   "repository": {