@linxin666/dsh-client-ui-task-board 0.3.6 → 0.3.10

package/lib/client.js

@@ -7,7 +7,6 @@ window.__ModuleLoader__.load({
 		let react_dom_client = require("react-dom/client");
 		let react = require("react");
 		let react_jsx_runtime = require("react/jsx-runtime");
-		let _deepseek_ai_dsh_client_runtime_client = require("@deepseek-ai/dsh-client-runtime/client");
 		//#region src/core/tasks.ts
 		/** Statuses a settled task may be archived from. */
 		const ARCHIVABLE_STATUSES = ["done", "failed"];
@@ -67,6 +66,20 @@ window.__ModuleLoader__.load({
 			const trimmed = value?.trim();
 			return trimmed === void 0 || trimmed === "" ? void 0 : trimmed;
 		}
+		/**
+		* Build the persisted freeze snapshot from a sanitized input, stamping the
+		* freeze instant (shared by the create and update use cases).
+		*/
+		function freezeOf(input, now) {
+			return {
+				goal: input.goal,
+				progress: input.progress,
+				next: input.next,
+				frozenAt: now,
+				...input.redacted === true ? { redacted: true } : {},
+				...input.frozenBy === void 0 || input.frozenBy === "" ? {} : { frozenBy: input.frozenBy }
+			};
+		}
 		/** Create a task from user input. */
 		function createTask(input, now, id) {
 			return {
@@ -80,7 +93,12 @@ window.__ModuleLoader__.load({
 				executions: [],
 				workspaceId: normalizeTargetId(input.workspaceId),
 				mode: normalizeTargetId(input.mode),
-				permission: isTaskPermission(input.permission) ? input.permission : void 0
+				permission: isTaskPermission(input.permission) ? input.permission : void 0,
+				...input.freeze === void 0 ? {} : { freeze: freezeOf(input.freeze, now) },
+				...input.handover === void 0 ? {} : { handover: {
+					...input.handover,
+					bundledAt: now
+				} }
 			};
 		}
 		/** Clone a task with an updated status and a fresh updatedAt. */
@@ -455,13 +473,11 @@ window.__ModuleLoader__.load({
 		* fresh updatedAt. Pure ledger transition (no persistence or notify — the
 		* controller orchestrates those).
 		*
-		* An explicit `undefined` in the patch clears an execution-target field
-		* (the task falls back to the runtime default); content fields are trimmed
-		* and never cleared. An unknown permission string is ignored so stale UI
-		* can never persist a value the execution service rejects.
+		* An explicit `undefined` in the patch clears the field (the task falls
+		* back to the runtime default); an unknown permission string is ignored so
+		* stale UI can never persist a value the execution service rejects.
 		*/
-		/**
-		* The fields that edit the task's content (what the user reads and what the
+		/** The fields that edit the task's content (what the user reads and what the
 		* next execution sends). Unlike the execution targets they stay editable only
 		* while the task has never started executing — after the first run the
 		* recorded prompt is the record of what actually ran, so it becomes read-only.
@@ -495,12 +511,13 @@ window.__ModuleLoader__.load({
 		function applyUpdateTask(tasks, id, patch, now) {
 			return tasks.map((task) => {
 				if (task.id !== id) return task;
+				const { freeze: freezePatch, handover: handoverPatch, ...rest } = patch;
 				const workspaceId = "workspaceId" in patch ? normalizeTargetId(patch.workspaceId) : void 0;
 				const mode = "mode" in patch ? normalizeTargetId(patch.mode) : void 0;
 				const permission = "permission" in patch ? normalizePermission(task.permission, patch.permission) : void 0;
 				const next = {
 					...task,
-					...patch,
+					...rest,
 					updatedAt: now
 				};
 				for (const field of TASK_CONTENT_FIELDS) {
@@ -508,6 +525,12 @@ window.__ModuleLoader__.load({
 					const value = patch[field];
 					next[field] = value === void 0 ? task[field] : value.trim();
 				}
+				next.freeze = freezePatch == null ? void 0 : freezeOf(freezePatch, now);
+				next.handover = handoverPatch == null ? void 0 : {
+					...handoverPatch,
+					bundledAt: now
+				};
+				if ("permission" in patch && patch.permission !== void 0 && patch.permission !== task.permission || "handover" in patch) next.permissionConfirmedAt = void 0;
 				if (workspaceId !== void 0 || "workspaceId" in patch) next.workspaceId = workspaceId;
 				if (mode !== void 0 || "mode" in patch) next.mode = mode;
 				if (permission !== void 0 || "permission" in patch) next.permission = permission;
@@ -516,6 +539,9 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/core/controller.ts
+		function currentOf(sessions) {
+			return sessions?.list.getSnapshot().current;
+		}
 		/** The selected task (resolved from the ledger), or undefined. */
 		function selectedTaskOf(snapshot) {
 			if (snapshot.selectedTaskId === void 0) return void 0;
@@ -818,6 +844,26 @@ window.__ModuleLoader__.load({
 				return await this.commitRemote({
 					kind: "run",
 					taskId: id
+				}, id, currentOf(this.deps.sessions));
+			}
+			/**
+			* Confirm a card's above-default permission binding through the Host
+			* (resolves the pending-confirmation transaction; no-op otherwise).
+			*/
+			async confirmPermission(id) {
+				if (this.tasks.find((candidate) => candidate.id === id) === void 0) return false;
+				if (this.deps.transport === void 0) {
+					this.tasks = this.tasks.map((candidate) => candidate.id === id ? {
+						...candidate,
+						permissionConfirmedAt: this.now(),
+						updatedAt: this.now()
+					} : candidate);
+					this.persistAndNotify();
+					return true;
+				}
+				return await this.commitRemote({
+					kind: "confirm-permission",
+					taskId: id
 				}, id);
 			}
 			/** Re-run a settled task through the Host (the Host replans and executes). */
@@ -828,7 +874,7 @@ window.__ModuleLoader__.load({
 				await this.commitRemote({
 					kind: "rerun",
 					taskId: id
-				}, id);
+				}, id, currentOf(this.deps.sessions));
 			}
 			/**
 			* Session-list notifications fire for all kinds of incidental churn
@@ -845,10 +891,10 @@ window.__ModuleLoader__.load({
 				if (this.deps.transport === void 0) this.deps.store.save(this.tasks);
 				this.notify();
 			}
-			async commitRemote(action, taskId) {
+			async commitRemote(action, taskId, initiator) {
 				if (this.deps.transport === void 0) return true;
-				if (taskId === void 0) return await this.performRemote(action);
-				const operation = (this.taskQueues.get(taskId) ?? Promise.resolve()).catch(() => {}).then(async () => await this.performRemote(action));
+				if (taskId === void 0) return await this.performRemote(action, initiator);
+				const operation = (this.taskQueues.get(taskId) ?? Promise.resolve()).catch(() => {}).then(async () => await this.performRemote(action, initiator));
 				const tail = operation.then(() => {}, () => {});
 				this.taskQueues.set(taskId, tail);
 				this.pendingTaskIds.add(taskId);
@@ -863,13 +909,13 @@ window.__ModuleLoader__.load({
 					}
 				}
 			}
-			async performRemote(action) {
+			async performRemote(action, initiator) {
 				const transport = this.deps.transport;
 				if (transport === void 0) return true;
 				this.transportError = void 0;
 				this.notify();
 				try {
-					return this.acceptRemote(await transport.action(action)) || await this.refreshRemote();
+					return this.acceptRemote(await transport.action(action, initiator)) || await this.refreshRemote();
 				} catch (error) {
 					await this.refreshRemote(messageOf(error));
 					return false;
@@ -955,6 +1001,248 @@ window.__ModuleLoader__.load({
 				for (const fn of [...this.listeners]) fn();
 			}
 		};
+		/** Marker replacing every sensitive match. */
+		const REDACTED_MARKER = "[REDACTED]";
+		const BEGIN = "<<<FREEZE";
+		const END = ">>>FREEZE";
+		const SECTION_KEYS = /* @__PURE__ */ new Map([
+			["目标:", "goal"],
+			["进度:", "progress"],
+			["下一步:", "next"]
+		]);
+		const SECTION_ORDER = [
+			"goal",
+			"progress",
+			"next"
+		];
+		const SECTION_NAMES = {
+			goal: "目标",
+			progress: "进度",
+			next: "下一步"
+		};
+		/**
+		* Sensitive patterns, each matched globally over every field body:
+		* PEM private key blocks (whole block collapses to one marker), Bearer
+		* credentials, OpenAI sk-, GitHub ghp_, GitLab glpat-, Slack xox* tokens,
+		* and AWS access key ids.
+		*/
+		const SENSITIVE_PATTERNS = [
+			/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+			/Bearer\s+[A-Za-z0-9._~+\/=:-]{8,}/gi,
+			/sk-[A-Za-z0-9_-]{8,}/g,
+			/ghp_[A-Za-z0-9]{20,}/g,
+			/glpat-[A-Za-z0-9_-]{15,}/g,
+			/xox[bpars]-[A-Za-z0-9-]{10,}/g,
+			/AKIA[0-9A-Z]{16}/g
+		];
+		function fail(code, message) {
+			return {
+				ok: false,
+				error: {
+					code,
+					message
+				}
+			};
+		}
+		function utf8Bytes(text) {
+			return new TextEncoder().encode(text).length;
+		}
+		/** Redact sensitive patterns to the marker; reports whether any hit occurred. */
+		function redactSensitive(text) {
+			let out = text;
+			let redacted = false;
+			for (const pattern of SENSITIVE_PATTERNS) {
+				if (pattern.test(out)) {
+					redacted = true;
+					out = out.replace(pattern, REDACTED_MARKER);
+				}
+				pattern.lastIndex = 0;
+			}
+			return {
+				text: out,
+				redacted
+			};
+		}
+		/**
+		* True when any line of the text starts with "/" (a DSH command line).
+		* Leading horizontal whitespace before the slash counts too: a frozen
+		* body line like `  /kill` is still a command, not prose.
+		*/
+		function hasSlashCommandLines(text) {
+			return text.split(/\r?\n/).some((line) => /^[ \t]+\//.test(line) || line.startsWith("/"));
+		}
+		/**
+		* Sanitize a structured freeze snapshot (the create/update action payload):
+		* shape check, slash-command taint rejection, sensitive redaction, and the
+		* per-field byte cap - the same gate parseFreezeRequest applies to
+		* free-text freeze requests, exposed for the action data plane (issue #4).
+		* @param value - the freeze object carried by an action or read back from disk.
+		* @param extraKeys - keys allowed alongside goal/progress/next (e.g. the
+		*   protocol redacted flag, the ledger frozenAt stamp) and preserved verbatim
+		*   when present; their validation stays with the caller.
+		*/
+		function sanitizeFreezeSnapshot(value, extraKeys = []) {
+			const bad = (code, message) => ({
+				ok: false,
+				error: {
+					code,
+					message
+				}
+			});
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return bad("invalid-freeze", "冻结快照必须是 goal/progress/next 字符串对象");
+			const record = value;
+			const allowed = [
+				"goal",
+				"progress",
+				"next",
+				...extraKeys
+			];
+			if (!Object.keys(record).every((key) => allowed.includes(key))) return bad("invalid-freeze", "冻结快照包含未知字段");
+			for (const key of SECTION_ORDER) if (typeof record[key] !== "string") return bad("invalid-freeze", "冻结快照字段 " + SECTION_NAMES[key] + " 必须是字符串");
+			for (const key of SECTION_ORDER) if (hasSlashCommandLines(record[key])) return bad("dsh-command-line", "冻结文本的" + SECTION_NAMES[key] + "包含以 / 开头的命令行，整体拒绝");
+			let redacted = false;
+			const snapshot = {
+				goal: "",
+				progress: "",
+				next: ""
+			};
+			for (const key of SECTION_ORDER) {
+				const result = redactSensitive(record[key]);
+				snapshot[key] = result.text;
+				redacted = redacted || result.redacted;
+			}
+			for (const key of SECTION_ORDER) if (utf8Bytes(snapshot[key]) > 8192) return bad("field-too-large", "冻结快照字段 " + SECTION_NAMES[key] + " 超过 8 KiB 上限");
+			const extras = {};
+			for (const key of extraKeys) if (key in record) extras[key] = record[key];
+			return {
+				ok: true,
+				snapshot: {
+					goal: snapshot.goal,
+					progress: snapshot.progress,
+					next: snapshot.next
+				},
+				redacted,
+				extras
+			};
+		}
+		/**
+		* Parse the freeze-request format: a <<<FREEZE ... >>>FREEZE block whose body
+		* is 目标: / 进度: / 下一步: section headers, each followed by body lines.
+		* The gate applies before returning: slash-command taint rejects the whole
+		* request, sensitive patterns are redacted to markers, and each field is
+		* capped at FREEZE_FIELD_BYTE_LIMIT UTF-8 bytes.
+		*/
+		function parseFreezeRequest(input) {
+			const beginIndex = input.indexOf(BEGIN);
+			if (beginIndex === -1) return fail("missing-block", "未找到冻结请求块（需要 <<<FREEZE ... >>>FREEZE）");
+			const bodyStart = beginIndex + 9;
+			const endIndex = input.indexOf(END, bodyStart);
+			if (endIndex === -1) return fail("unterminated-block", "冻结请求块未闭合（缺少 >>>FREEZE）");
+			const block = input.slice(bodyStart, endIndex);
+			const raw = /* @__PURE__ */ new Map();
+			let current;
+			for (const line of block.split(/\r?\n/)) {
+				const key = SECTION_KEYS.get(line);
+				if (key !== void 0) {
+					if (raw.has(key)) return fail("duplicate-section", `重复的段落标题：${SECTION_NAMES[key]}`);
+					raw.set(key, []);
+					current = key;
+				} else if (current !== void 0) raw.get(current).push(line);
+			}
+			const snapshot = {
+				goal: "",
+				progress: "",
+				next: ""
+			};
+			for (const key of SECTION_ORDER) {
+				if (!raw.has(key)) return fail("missing-section", `冻结请求缺少段落：${SECTION_NAMES[key]}`);
+				const lines = raw.get(key);
+				while (lines.length > 0 && lines[lines.length - 1].trim() === "") lines.pop();
+				snapshot[key] = lines.join("\n");
+			}
+			for (const key of SECTION_ORDER) if (hasSlashCommandLines(snapshot[key])) return fail("dsh-command-line", `冻结文本的${SECTION_NAMES[key]}包含以 / 开头的命令行，整体拒绝`);
+			let redacted = false;
+			for (const key of SECTION_ORDER) {
+				const result = redactSensitive(snapshot[key]);
+				snapshot[key] = result.text;
+				redacted = redacted || result.redacted;
+			}
+			for (const key of SECTION_ORDER) if (utf8Bytes(snapshot[key]) > 8192) return fail("field-too-large", `冻结快照字段 ${SECTION_NAMES[key]} 超过 8 KiB 上限`);
+			return {
+				ok: true,
+				snapshot: {
+					goal: snapshot.goal,
+					progress: snapshot.progress,
+					next: snapshot.next
+				},
+				warnings: redacted ? ["redacted"] : []
+			};
+		}
+		/** The board's notion of the deployment session-default permission (fail-safe default). */
+		const DEFAULT_SESSION_PERMISSION = "read-only";
+		/** Permission elevation rank (higher = more authority). */
+		const PERMISSION_RANK = /* @__PURE__ */ new Map([
+			["read-only", 0],
+			["workspace-write", 1],
+			["danger-full-access", 2]
+		]);
+		function byteLength(value) {
+			return new TextEncoder().encode(value).length;
+		}
+		/**
+		* Gate a handover bundle from the wire or disk: exact keys, string targets
+		* under the byte cap, a known permission, and a bounded string reference
+		* list. Returns the sanitized bundle, or undefined when rejected.
+		*/
+		function sanitizeHandover(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+			const bundle = value;
+			if (!Object.keys(bundle).every((key) => [
+				"workspaceId",
+				"mode",
+				"permission",
+				"references"
+			].includes(key))) return void 0;
+			if (!Array.isArray(bundle.references)) return void 0;
+			if (bundle.references.length > 32) return void 0;
+			let total = 0;
+			for (const reference of bundle.references) {
+				if (typeof reference !== "string" || reference === "") return void 0;
+				const size = byteLength(reference);
+				if (size > 512) return void 0;
+				total += size;
+				if (total > 8192) return void 0;
+			}
+			for (const key of ["workspaceId", "mode"]) {
+				const target = bundle[key];
+				if (target !== void 0 && (typeof target !== "string" || byteLength(target) > 256)) return void 0;
+			}
+			if (bundle.permission !== void 0 && !isTaskPermission(bundle.permission)) return void 0;
+			const workspaceId = bundle.workspaceId;
+			const mode = bundle.mode;
+			return {
+				...typeof workspaceId === "string" ? { workspaceId } : {},
+				...typeof mode === "string" ? { mode } : {},
+				...bundle.permission === void 0 ? {} : { permission: bundle.permission },
+				references: [...bundle.references]
+			};
+		}
+		/** The permission an execution session would actually run under. */
+		function effectivePermission(task) {
+			return task.handover?.permission ?? task.permission;
+		}
+		/** Whether a binding's permission is elevated above the session default. */
+		function exceedsSessionDefault(permission, sessionDefault) {
+			if (permission === void 0) return false;
+			return (PERMISSION_RANK.get(permission) ?? -1) > (PERMISSION_RANK.get(sessionDefault) ?? -1);
+		}
+		/**
+		* The confirmation-gate predicate: an elevated permission without a human
+		* confirmation stamp. Manual run/rerun and cron must refuse such a card.
+		*/
+		function requiresPermissionConfirmation(task, sessionDefault = DEFAULT_SESSION_PERMISSION) {
+			return exceedsSessionDefault(effectivePermission(task), sessionDefault) && task.permissionConfirmedAt === void 0;
+		}
 		//#endregion
 		//#region src/core/store.ts
 		/**
@@ -998,6 +1286,9 @@ window.__ModuleLoader__.load({
 				if (entry.endedAt !== void 0 && typeof entry.endedAt !== "number") return false;
 				if (entry.result !== void 0 && entry.result !== "succeeded" && entry.result !== "failed" && entry.result !== "cancelled") return false;
 				if (entry.error !== void 0 && typeof entry.error !== "string") return false;
+				if (entry.initiatedBy !== void 0 && typeof entry.initiatedBy !== "string") return false;
+				if (entry.frozenBy !== void 0 && typeof entry.frozenBy !== "string") return false;
+				if (entry.frozenAt !== void 0 && typeof entry.frozenAt !== "number") return false;
 			}
 			return true;
 		}
@@ -1022,6 +1313,49 @@ window.__ModuleLoader__.load({
 				lastTriggeredAt: typeof rule.lastTriggeredAt === "number" ? rule.lastTriggeredAt : void 0
 			};
 		}
+		/**
+		* Repair a persisted freeze snapshot: shape + gate re-check (slash taint,
+		* redaction idempotence, byte cap); a malformed or tainted snapshot is
+		* dropped (undefined) rather than dropping the whole task row, mirroring
+		* the schedule repair policy.
+		*/
+		function normalizeFreeze(value) {
+			const result = sanitizeFreezeSnapshot(value, [
+				"frozenAt",
+				"redacted",
+				"frozenBy"
+			]);
+			if (!result.ok) return void 0;
+			const frozenAt = result.extras.frozenAt;
+			if (typeof frozenAt !== "number" || !Number.isFinite(frozenAt)) return void 0;
+			if (result.extras.redacted !== void 0 && result.extras.redacted !== true) return void 0;
+			const frozenBy = result.extras.frozenBy;
+			if (frozenBy !== void 0 && (typeof frozenBy !== "string" || frozenBy === "")) return void 0;
+			return {
+				goal: result.snapshot.goal,
+				progress: result.snapshot.progress,
+				next: result.snapshot.next,
+				frozenAt,
+				...result.redacted || result.extras.redacted === true ? { redacted: true } : {},
+				...frozenBy === void 0 ? {} : { frozenBy }
+			};
+		}
+		/**
+		* Repair a persisted handover bundle: shape re-check through the same gate
+		* as the wire path; a malformed bundle is dropped rather than dropping the
+		* task row (mirroring the schedule/freeze repair policy).
+		*/
+		function normalizeHandover(value) {
+			if (typeof value !== "object" || value === null) return void 0;
+			const { bundledAt, ...rest } = value;
+			const bundle = sanitizeHandover(rest);
+			if (bundle === void 0) return void 0;
+			if (typeof bundledAt !== "number" || !Number.isFinite(bundledAt)) return void 0;
+			return {
+				...bundle,
+				bundledAt
+			};
+		}
 		/** Parse + validate a persisted ledger document; invalid rows are dropped. */
 		function parseLedger(raw) {
 			if (raw === null) return [];
@@ -1051,6 +1385,9 @@ window.__ModuleLoader__.load({
 				task.mode = normalizeTargetId(row.mode);
 				task.archivedAt = typeof row.archivedAt === "number" && Number.isFinite(row.archivedAt) ? row.archivedAt : void 0;
 				task.permission = isTaskPermission(row.permission) ? row.permission : void 0;
+				task.freeze = normalizeFreeze(row.freeze);
+				task.handover = normalizeHandover(row.handover);
+				task.permissionConfirmedAt = typeof row.permissionConfirmedAt === "number" && Number.isFinite(row.permissionConfirmedAt) ? row.permissionConfirmedAt : void 0;
 				tasks.push(task);
 			}
 			return tasks;
@@ -1175,6 +1512,24 @@ window.__ModuleLoader__.load({
 			"new.submit": "创建",
 			"new.cancel": "取消",
 			"new.required": "标题不能为空",
+			"new.freeze": "冻结快照（可选）",
+			"new.freezePlaceholder": "粘贴会话输出的 <<<FREEZE … >>>FREEZE 冻结块，解析为目标/进度/下一步（可选）",
+			"detail.freeze": "冻结快照",
+			"detail.freeze.goal": "目标",
+			"detail.freeze.progress": "进度",
+			"detail.freeze.next": "下一步",
+			"detail.freeze.frozenAt": "冻结于 {time}",
+			"detail.freeze.frozenBy": "来源会话 {session}",
+			"detail.freeze.redacted": "冻结文本命中敏感模式，已自动替换为 [REDACTED]；接手前请人工复核。",
+			"card.frozen": "冻结",
+			"new.handover": "交接包引用（可选）",
+			"new.handoverPlaceholder": "每行一个文档/脚本引用；填写后，上面选择的钉住三元组（工作区/模式/权限）会作为交接包附加到卡片",
+			"detail.handover": "交接包",
+			"detail.handover.bundledAt": "打包于 {time}",
+			"detail.handover.references": "引用",
+			"detail.permissionPending": "权限待确认：本卡有效权限（{permission}）高于会话默认，手动执行与定时调度都会被拒绝，需人工确认后才能运行。",
+			"detail.permissionConfirm": "确认权限绑定",
+			"detail.permissionConfirmed": "已确认权限绑定 · {time}",
 			"detail.title": "任务详情",
 			"detail.edit": "编辑",
 			"detail.close": "关闭",
@@ -1193,6 +1548,7 @@ window.__ModuleLoader__.load({
 			"detail.viewSession": "查看会话",
 			"detail.noSession": "暂无会话",
 			"detail.executionStarted": "已启动",
+			"detail.execution.initiator": "发起会话 {session}",
 			"detail.executionEnded": "已结束",
 			"detail.result.succeeded": "成功",
 			"detail.result.failed": "失败",
@@ -1253,7 +1609,7 @@ window.__ModuleLoader__.load({
 			"settings.off": "关",
 			"settings.overridden": "已覆盖",
 			"settings.reset": "恢复默认",
-			"settings.notExposed": "当前 DSH 版本未向设置页暴露本插件的配置命名空间，表单不可用。可编辑 ~/.dsh/settings.yaml 直接配置，或为 dsh-host-apiproxy 的 WEB_SETTINGS_NAMESPACES 白名单补充本命名空间后重启。",
+			"settings.notExposed": "当前 DSH 版本未向设置页暴露本插件的配置命名空间，表单不可用。可编辑 ~/.dsh/settings.yaml 直接配置，或将本命名空间加入 Host 设置白名单后重启。",
 			"settings.readOnly": "当前部署的设置只读。",
 			"settings.expand": "展开设置",
 			"settings.collapse": "收起设置",
@@ -1299,6 +1655,24 @@ window.__ModuleLoader__.load({
 			"new.submit": "Create",
 			"new.cancel": "Cancel",
 			"new.required": "Title is required",
+			"new.freeze": "Frozen snapshot (optional)",
+			"new.freezePlaceholder": "Paste a <<<FREEZE ... >>>FREEZE block from a session; it parses into goal/progress/next (optional)",
+			"detail.freeze": "Frozen snapshot",
+			"detail.freeze.goal": "Goal",
+			"detail.freeze.progress": "Progress",
+			"detail.freeze.next": "Next",
+			"detail.freeze.frozenAt": "Frozen at {time}",
+			"detail.freeze.frozenBy": "Source session {session}",
+			"detail.freeze.redacted": "Sensitive patterns were detected in the frozen text and replaced with [REDACTED]; review manually before resuming.",
+			"card.frozen": "frozen",
+			"new.handover": "Handover references (optional)",
+			"new.handoverPlaceholder": "One doc/script reference per line; when filled, the pinned triplet picked above (workspace/mode/permission) is attached to the card as a handover bundle",
+			"detail.handover": "Handover bundle",
+			"detail.handover.bundledAt": "Bundled at {time}",
+			"detail.handover.references": "References",
+			"detail.permissionPending": "Permission pending confirmation: this card's effective permission ({permission}) is above the session default; manual runs and cron are refused until a human confirms.",
+			"detail.permissionConfirm": "Confirm permission binding",
+			"detail.permissionConfirmed": "Permission confirmed · {time}",
 			"detail.title": "Task Detail",
 			"detail.edit": "Edit",
 			"detail.close": "Close",
@@ -1317,6 +1691,7 @@ window.__ModuleLoader__.load({
 			"detail.viewSession": "View Session",
 			"detail.noSession": "No session",
 			"detail.executionStarted": "Started",
+			"detail.execution.initiator": "Initiated by session {session}",
 			"detail.executionEnded": "Ended",
 			"detail.result.succeeded": "Succeeded",
 			"detail.result.failed": "Failed",
@@ -1377,7 +1752,7 @@ window.__ModuleLoader__.load({
 			"settings.off": "Off",
 			"settings.overridden": "Overridden",
 			"settings.reset": "Reset to default",
-			"settings.notExposed": "This DSH version does not expose this plugin's settings namespace to the configuration page, so the form is unavailable. Edit ~/.dsh/settings.yaml directly, or add the namespace to dsh-host-apiproxy's WEB_SETTINGS_NAMESPACES allowlist and restart.",
+			"settings.notExposed": "This DSH version does not expose this plugin's settings namespace to the configuration page, so the form is unavailable. Edit ~/.dsh/settings.yaml directly, or add the namespace to the Host settings allowlist and restart.",
 			"settings.readOnly": "This deployment stores settings read-only.",
 			"settings.expand": "Show settings",
 			"settings.collapse": "Hide settings",
@@ -1392,8 +1767,21 @@ window.__ModuleLoader__.load({
 		function dictionary() {
 			return (typeof document !== "undefined" ? document.documentElement.lang : "zh").toLowerCase().startsWith("en") ? en : zh;
 		}
+		/**
+		* SDK translate seat wired by the browser apply() once ctx.locale is bound
+		* (setRuntimeTranslate). When present it reads the ACTIVE locale at call
+		* time, so plain-DOM surfaces (sidebar row, toggles) follow a runtime
+		* language switch; the document-language pick above stays only as the
+		* unwired fallback (locale service absent, module-scope early callers).
+		*/
+		let runtimeT;
+		/** Wire the SDK translate seat; pass undefined to restore the document-language pick. */
+		function setRuntimeTranslate(t) {
+			runtimeT = t;
+		}
 		/** Translate a key with optional {name} template params. */
 		function t(key, params) {
+			if (runtimeT !== void 0) return runtimeT(key, params);
 			let text = dictionary()[key];
 			if (params !== void 0) for (const [name, value] of Object.entries(params)) text = text.replaceAll(`{${name}}`, value);
 			return text;
@@ -1603,6 +1991,9 @@ window.__ModuleLoader__.load({
 			const [scheduleEnabled, setScheduleEnabled] = (0, react.useState)(false);
 			const [scheduleCron, setScheduleCron] = (0, react.useState)("");
 			const [scheduleError, setScheduleError] = (0, react.useState)(void 0);
+			const [freezeText, setFreezeText] = (0, react.useState)("");
+			const [freezeError, setFreezeError] = (0, react.useState)(void 0);
+			const [handoverText, setHandoverText] = (0, react.useState)("");
 			const [error, setError] = (0, react.useState)(void 0);
 			const [pending, setPending] = (0, react.useState)(false);
 			const [options, setOptions] = (0, react.useState)(controller.getSnapshot().executionOptions);
@@ -1615,11 +2006,32 @@ window.__ModuleLoader__.load({
 						return;
 					}
 				}
+				let freeze = void 0;
+				if (freezeText.trim() !== "") {
+					const parsed = parseFreezeRequest(freezeText);
+					if (!parsed.ok) {
+						setFreezeError(parsed.error.message);
+						return;
+					}
+					freeze = {
+						...parsed.snapshot,
+						...parsed.warnings.includes("redacted") ? { redacted: true } : {}
+					};
+				}
+				const references = handoverText.split("\n").map((line) => line.trim()).filter((line) => line !== "");
+				const handover = references.length === 0 ? void 0 : {
+					references,
+					workspaceId: workspaceId === "" ? void 0 : workspaceId,
+					mode: mode === "" ? void 0 : mode,
+					permission: permission === "" ? void 0 : permission
+				};
 				setPending(true);
 				if (await controller.createTaskConfirmed({
 					title,
 					description,
 					prompt,
+					freeze,
+					handover,
 					workspaceId: workspaceId === "" ? void 0 : workspaceId,
 					mode: mode === "" ? void 0 : mode,
 					permission: permission === "" ? void 0 : permission,
@@ -1658,6 +2070,43 @@ window.__ModuleLoader__.load({
 						onDescriptionChange: setDescription,
 						onPromptChange: setPrompt
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+						className: board_module_css_default.field,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: board_module_css_default.fieldLabel,
+							children: t("new.freeze")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("textarea", {
+							className: board_module_css_default.input,
+							rows: 4,
+							value: freezeText,
+							placeholder: t("new.freezePlaceholder"),
+							spellCheck: false,
+							onChange: (event) => {
+								setFreezeText(event.target.value);
+								setFreezeError(void 0);
+							}
+						})]
+					}),
+					freezeError !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: board_module_css_default.formError,
+						children: freezeError
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+						className: board_module_css_default.field,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: board_module_css_default.fieldLabel,
+							children: t("new.handover")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("textarea", {
+							className: board_module_css_default.input,
+							rows: 3,
+							value: handoverText,
+							placeholder: t("new.handoverPlaceholder"),
+							spellCheck: false,
+							onChange: (event) => {
+								setHandoverText(event.target.value);
+							}
+						})]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 						className: board_module_css_default.field,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
@@ -1867,6 +2316,11 @@ window.__ModuleLoader__.load({
 									formatTime(task.updatedAt)
 								]
 							}),
+							task.freeze !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: board_module_css_default.cardSchedule,
+								title: task.freeze.goal,
+								children: t("card.frozen")
+							}),
 							!archived && task.schedule?.enabled === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: board_module_css_default.cardSchedule,
 								title: task.schedule.nextRunAt !== void 0 ? `${t("card.scheduled")} · ${formatHostTimestamp(task.schedule.nextRunAt, timeZone)}` : t("card.scheduled"),
@@ -2039,6 +2493,11 @@ window.__ModuleLoader__.load({
 							execution.endedAt !== void 0 && ` · ${t("detail.executionEnded")} ${formatTime(execution.endedAt, timeZone)}`
 						]
 					}),
+					execution.initiatedBy !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: board_module_css_default.executionTimes,
+						title: execution.initiatedBy,
+						children: t("detail.execution.initiator", { session: execution.initiatedBy })
+					}),
 					execution.sessionId !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 						type: "button",
 						className: board_module_css_default.linkButton,
@@ -2299,6 +2758,7 @@ window.__ModuleLoader__.load({
 			const pending = snapshot.pendingTaskIds.includes(current.id);
 			const transportError = snapshot.transportError;
 			const timeZone = snapshot.host?.scheduler.timeZone;
+			const permissionPending = requiresPermissionConfirmation(current, snapshot.host?.sessionDefaultPermission);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: board_module_css_default.modalBackdrop,
 				onMouseDown: (event) => {
@@ -2358,6 +2818,107 @@ window.__ModuleLoader__.load({
 											children: current.description !== "" ? current.description : "—"
 										})]
 									}),
+									current.freeze !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+										className: board_module_css_default.detailSection,
+										"data-dsh-part": "freeze",
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", { children: t("detail.freeze") }),
+											current.freeze.redacted === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.formError,
+												children: t("detail.freeze.redacted")
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailText,
+												children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("detail.freeze.goal") })
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+												className: board_module_css_default.promptBlock,
+												children: current.freeze.goal
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailText,
+												children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("detail.freeze.progress") })
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+												className: board_module_css_default.promptBlock,
+												children: current.freeze.progress
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailText,
+												children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("detail.freeze.next") })
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+												className: board_module_css_default.promptBlock,
+												children: current.freeze.next
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailMeta,
+												children: t("detail.freeze.frozenAt", { time: formatHostTimestamp(current.freeze.frozenAt, timeZone) })
+											}),
+											current.freeze.frozenBy !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailMeta,
+												children: t("detail.freeze.frozenBy", { session: current.freeze.frozenBy })
+											})
+										]
+									}),
+									current.handover !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+										className: board_module_css_default.detailSection,
+										"data-dsh-part": "handover",
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", { children: t("detail.handover") }),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+												className: board_module_css_default.detailText,
+												children: [
+													t("new.workspace"),
+													": ",
+													current.handover.workspaceId ?? t("exec.workspace.recent"),
+													" · ",
+													t("new.mode"),
+													": ",
+													current.handover.mode ?? t("exec.mode.default"),
+													" · ",
+													t("new.permission"),
+													": ",
+													current.handover.permission === void 0 ? t("exec.permission.default") : t(`exec.permission.${current.handover.permission}`)
+												]
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailText,
+												children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("detail.handover.references") })
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+												className: board_module_css_default.executionList,
+												children: current.handover.references.map((reference) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", {
+													className: board_module_css_default.executionRow,
+													children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: reference })
+												}, reference))
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+												className: board_module_css_default.detailMeta,
+												children: t("detail.handover.bundledAt", { time: formatHostTimestamp(current.handover.bundledAt, timeZone) })
+											})
+										]
+									}),
+									permissionPending && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+										className: board_module_css_default.detailSection,
+										"data-dsh-part": "permission-gate",
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											className: board_module_css_default.formError,
+											children: t("detail.permissionPending", { permission: t(`exec.permission.${current.handover?.permission ?? current.permission}`) })
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: board_module_css_default.primaryButton,
+											disabled: pending,
+											onClick: () => {
+												controller.confirmPermission(current.id);
+											},
+											children: t("detail.permissionConfirm")
+										})]
+									}),
+									current.permissionConfirmedAt !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: board_module_css_default.detailMeta,
+										children: t("detail.permissionConfirmed", { time: formatHostTimestamp(current.permissionConfirmedAt, timeZone) })
+									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 										className: board_module_css_default.detailSection,
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h4", { children: t("detail.prompt") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
@@ -2503,11 +3064,13 @@ window.__ModuleLoader__.load({
 		* active. Cards open the task detail (never execute directly); the header
 		* offers filter, new-task, and a back-to-chat escape.
 		*/
-		/** Case-insensitive title/description match. */
+		/** Case-insensitive title/description/freeze-snapshot match. */
 		function matchesFilter(task, filter) {
 			if (filter.trim() === "") return true;
 			const needle = filter.trim().toLowerCase();
-			return task.title.toLowerCase().includes(needle) || task.description.toLowerCase().includes(needle);
+			const haystacks = [task.title, task.description];
+			if (task.freeze !== void 0) haystacks.push(task.freeze.goal, task.freeze.progress, task.freeze.next);
+			return haystacks.some((text) => text.toLowerCase().includes(needle));
 		}
 		/**
 		* Memoized per-card adapter: with a stable `onOpen` from the board and an
@@ -2733,11 +3296,19 @@ window.__ModuleLoader__.load({
 		* Mount the board React tree into the center column and bind its visibility
 		* to the controller's boardOpen state.
 		* @param controller - the board controller driving the view.
+		* @param locale - locale-change source; when given, re-renders a mounted board
+		*   on a Language switch.
 		* @returns disposer unmounting the tree and restoring the column.
 		*/
-		function mountBoard(controller) {
+		function mountBoard(controller, locale) {
 			let root;
 			let container;
+			let unsubscribeLocale;
+			try {
+				unsubscribeLocale = locale?.subscribe(() => {
+					if (root !== void 0) root.render(/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TaskBoard, { controller }));
+				});
+			} catch {}
 			const ensure = () => {
 				if (container !== void 0) {
 					if (container.isConnected) return;
@@ -2790,6 +3361,7 @@ window.__ModuleLoader__.load({
 				document.removeEventListener(ACTIVATE_EVENT, onOtherActivate);
 				waitObserver.disconnect();
 				unsubscribe();
+				unsubscribeLocale?.();
 				document.documentElement.removeAttribute(ACTIVE_ATTR);
 				root?.unmount();
 				root = void 0;
@@ -2821,11 +3393,23 @@ window.__ModuleLoader__.load({
 				entry.setAttribute("data-dsh-part", "sidebar-entry");
 			}
 			entry.className = options.css["entry"] ?? "";
-			entry.setAttribute("aria-label", options.label());
-			if (options.tooltip !== void 0) entry.setAttribute("title", options.tooltip());
-			entry.innerHTML = "<span class=\"" + (options.css["entryIcon"] ?? "") + "\">" + options.icon + "</span><span class=\"" + (options.css["entryLabel"] ?? "") + "\">" + options.label() + "</span>";
+			const labelSpan = document.createElement("span");
+			labelSpan.className = options.css["entryLabel"] ?? "";
+			const iconSpan = document.createElement("span");
+			iconSpan.className = options.css["entryIcon"] ?? "";
+			iconSpan.innerHTML = options.icon;
+			entry.append(iconSpan, labelSpan);
+			const applyLabel = () => {
+				entry.setAttribute("aria-label", options.label());
+				if (options.tooltip !== void 0) entry.setAttribute("title", options.tooltip());
+				labelSpan.textContent = options.label();
+			};
+			applyLabel();
 			entry.addEventListener("click", options.onToggle);
-			return entry;
+			return {
+				entry,
+				applyLabel
+			};
 		}
 		/** Re-insert the entry after the New Session row (before the browser region). */
 		function placeEntry(root, entry, options) {
@@ -2848,9 +3432,13 @@ window.__ModuleLoader__.load({
 		*/
 		function mountSidebarEntry$1(options) {
 			if (typeof document !== "undefined" && document.querySelector(options.rowSelector) !== null) return () => {};
-			const entry = createEntry(options);
+			const { entry, applyLabel } = createEntry(options);
 			let root;
 			let placed = false;
+			let unsubscribeRefresh;
+			if (options.refresh !== void 0) try {
+				unsubscribeRefresh = options.refresh.subscribe(applyLabel);
+			} catch {}
 			const tryPlace = () => {
 				if (root !== void 0 && !root.isConnected) {
 					rootObserver.disconnect();
@@ -2899,6 +3487,7 @@ window.__ModuleLoader__.load({
 			return () => {
 				waitObserver.disconnect();
 				rootObserver.disconnect();
+				unsubscribeRefresh?.();
 				unsubscribeActive?.();
 				entry.remove();
 			};
@@ -2913,9 +3502,11 @@ window.__ModuleLoader__.load({
 		* Mount the sidebar entry, waiting for the shell to render and self-healing
 		* on later React re-renders.
 		* @param controller - the board controller the entry toggles.
+		* @param locale - locale-change source; when given, re-applies the label on
+		*   a Language switch (the plain-DOM row otherwise keeps the mount-time copy).
 		* @returns disposer removing the entry and its observers.
 		*/
-		function mountSidebarEntry(controller) {
+		function mountSidebarEntry(controller, locale) {
 			return mountSidebarEntry$1({
 				rowAttribute: "data-dsh-taskboard-entry",
 				rowSelector: ENTRY_SELECTOR,
@@ -2923,6 +3514,7 @@ window.__ModuleLoader__.load({
 				icon: ICON,
 				css: board_module_css_default,
 				label: () => t("entry.label"),
+				refresh: locale === void 0 ? void 0 : { subscribe: (listener) => locale.subscribe(listener) },
 				onToggle: () => {
 					controller.toggleBoard();
 				},
@@ -3341,6 +3933,19 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region \0dsh-store-engine
+		const platform = ["@deepseek-ai/dsh-client", "-store"].join("");
+		const legacy = ["@deepseek-ai/dsh-client-runtime", "/client"].join("");
+		let engine;
+		try {
+			engine = require(platform);
+		} catch {
+			engine = require(legacy);
+		}
+		const createSnapshotStore = engine.createSnapshotStore;
+		engine.defineStore;
+		engine.shallowEqual;
+		//#endregion
 		//#region src/client/settings-form.ts
 		/** A boolean field, edited through true/false draft text. */
 		function booleanField(field) {
@@ -3400,7 +4005,7 @@ window.__ModuleLoader__.load({
 			}
 			/** Publish a projection of this form, rebuilt whenever the scope or a draft changes. */
 			bind(project) {
-				const store = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)(project());
+				const store = createSnapshotStore(project());
 				this.listeners.add(() => {
 					store.set(project());
 				});
@@ -3415,7 +4020,7 @@ window.__ModuleLoader__.load({
 					exposed: snapshot.status === "ready",
 					writable: snapshot.writable,
 					dirty: plan.length > 0,
-					invalid: plan.some((item) => item.run === void 0),
+					invalid: plan.some((item) => item.judge === void 0),
 					saving: this.saving,
 					failed: this.failed,
 					...this.failedReason === void 0 ? {} : { failedReason: this.failedReason }
@@ -3465,45 +4070,52 @@ window.__ModuleLoader__.load({
 				};
 			}
 			/**
-			* Write every staged edit, then re-seed from what the Host accepted.
+			* Write every staged edit in one atomic scope mutation, then re-seed from
+			* what the Host accepted.
 			*
-			* When the scope carries the optional batch surface (the dsh-web
-			* bridge scope), every planned write rides one mutation so cross-field
-			* validate hooks (baseURL+model) judge the batch as a unit instead of
-			* deadlocking on per-field writes. Otherwise the per-field loop runs.
-			* A field lands only when the Host reports it held the staged value; a
-			* landed field's draft is dropped, a failed one stays staged for the user.
-			* @returns settlement after every write and the read-back.
+			* The whole batch rides one mutate, so cross-field validate hooks
+			* (baseURL+model) judge it as a unit: the Host either applies every write
+			* or refuses the batch. The 0.1.2 scope contract never rejects a refused
+			* mutation — the scope recovers with a fresh Host view and resolves — so
+			* resolution alone proves nothing: the outcome is judged by reading the
+			* settled snapshot back, one planned write at a time, and one missed write
+			* fails the whole save. A scope that still rejects on refusal (the dsh-web
+			* bridge scope) reports through the same failure path with its rejection
+			* message. A save that did not land keeps its drafts, so the user can
+			* correct them instead of retyping.
+			* @returns settlement after the mutation and the read-back.
 			*/
 			async save() {
 				const plan = this.plan();
-				const valid = plan.filter((item) => item.run !== void 0);
+				const valid = plan.filter((item) => item.judge !== void 0);
 				if (plan.length === 0 || this.saving || valid.length !== plan.length) return;
-				const plannedWrites = valid.map((item) => item.op);
 				const pending = /* @__PURE__ */ new Map();
 				for (const item of plan) pending.set(item.field, this.staged.get(item.field));
 				this.saving = true;
 				this.failed = false;
 				this.failedReason = void 0;
 				this.publish();
-				const landed = /* @__PURE__ */ new Set();
-				const batch = this.batchedScope();
-				if (batch !== void 0) {
-					const result = await batch.mutate(plannedWrites);
-					if (result.ok) {
-						for (const field of result.fields) if (field.landed) landed.add(field.field);
-					} else this.failedReason = result.message;
-				} else for (const item of valid) if (await item.run()) landed.add(item.field);
-				for (const [field, before] of pending) if (landed.has(field) && this.staged.get(field) === before) this.staged.delete(field);
+				const ops = valid.map((item) => item.op.op === "set" ? {
+					op: "set",
+					path: [item.field],
+					value: item.op.value
+				} : {
+					op: "unset",
+					path: [item.field]
+				});
+				let failedReason;
+				try {
+					await this.scope.mutate(ops);
+				} catch (error) {
+					failedReason = error instanceof Error ? error.message : String(error);
+				}
+				const landed = failedReason === void 0 && valid.every((item) => item.judge());
+				for (const [field, before] of pending) if (landed && this.staged.get(field) === before) this.staged.delete(field);
 				this.saving = false;
-				this.failed = landed.size !== pending.size;
+				this.failed = !landed;
+				this.failedReason = failedReason;
 				this.publish();
 			}
-			/** The scope's batch surface when it supports one; undefined conservatively otherwise. */
-			batchedScope() {
-				const candidate = this.scope;
-				return typeof candidate?.mutate === "function" ? candidate : void 0;
-			}
 			/**
 			* Every staged edit a save would write. An entry whose draft is not a value
 			* its field accepts carries no write: the form is still dirty, and the save
@@ -3522,7 +4134,7 @@ window.__ModuleLoader__.load({
 								field,
 								op: "unset"
 							},
-							run: () => this.clear(field)
+							judge: () => this.landedUnset(field)
 						});
 						continue;
 					}
@@ -3534,7 +4146,7 @@ window.__ModuleLoader__.load({
 							field,
 							op: "unset"
 						},
-						run: void 0
+						judge: void 0
 					});
 					else if (write.kind === "clear") plan.push({
 						field,
@@ -3542,7 +4154,7 @@ window.__ModuleLoader__.load({
 							field,
 							op: "unset"
 						},
-						run: () => this.clear(field)
+						judge: () => this.landedUnset(field)
 					});
 					else plan.push({
 						field,
@@ -3551,20 +4163,26 @@ window.__ModuleLoader__.load({
 							op: "set",
 							value: write.value
 						},
-						run: () => this.store(field, write.value)
+						judge: () => this.landedSet(field, write.value)
 					});
 				}
 				return plan;
 			}
-			async clear(field) {
-				await this.scope.unset(field);
-				return !this.stored(field);
-			}
-			async store(field, value) {
-				await this.scope.set(field, value);
+			/**
+			* Read-back judgment for a planned set: the user layer must hold the
+			* intended value once the mutation has settled.
+			*/
+			landedSet(field, value) {
 				if (this.specOf(field).secret) return true;
 				return this.userLayer()?.[field] === value;
 			}
+			/**
+			* Read-back judgment for a planned unset: the field must be gone from the
+			* user layer once the mutation has settled.
+			*/
+			landedUnset(field) {
+				return !this.stored(field);
+			}
 			stage(field, edit) {
 				this.staged.set(field, edit);
 				this.failed = false;
@@ -3784,13 +4402,14 @@ window.__ModuleLoader__.load({
 			async state() {
 				return await this.request(`${TASK_BOARD_API_PREFIX}/state`, { cache: "no-store" });
 			}
-			async action(action) {
-				return await this.post(uuid(), action);
+			async action(action, initiator) {
+				return await this.post(uuid(), action, initiator);
 			}
-			async post(requestId, action) {
+			async post(requestId, action, initiator) {
 				const envelope = {
 					requestId,
-					action
+					action,
+					...initiator === void 0 || initiator === "" ? {} : { initiator }
 				};
 				return await this.request(`${TASK_BOARD_API_PREFIX}/action`, {
 					method: "POST",
@@ -3844,7 +4463,7 @@ window.__ModuleLoader__.load({
 		/** The building package's version, when the bundle carries it. */
 		function bakedVersion() {
 			try {
-				return "0.3.6";
+				return "0.3.10";
 			} catch {
 				return;
 			}
@@ -3912,7 +4531,14 @@ window.__ModuleLoader__.load({
 		const NS = "task-board";
 		/** Settings namespace the settings card edits (the Host plugin registers it). */
 		const TASK_BOARD_NS = "task-board";
-		/** Required services (fiber inject waiting — the runtime must be up first). */
+		/**
+		* Required services (fiber inject waiting — the runtime must be up first).
+		* The generated remote faces are probed at use time instead of injected:
+		* `remote.agentPresets` only registers on 0.1.2-alpha.2 hosts (the
+		* api-remotes contribution), so a hard wait would pend the entry forever
+		* on hosts below that cohort, which serve the same roster through the
+		* connection RPC face.
+		*/
 		const inject = [
 			"slots",
 			"sessions",
@@ -3923,6 +4549,44 @@ window.__ModuleLoader__.load({
 			"remote"
 		];
 		/**
+		* Read the agent-preset roster through whichever face the running host
+		* serves: the generated api-remotes face (`remote.agentPresets`,
+		* 0.1.2-alpha.2) or the connection RPC face
+		* (`connection.api.agentPresets`, hosts below that cohort). Answers
+		* undefined when the host serves neither, so the caller leaves the picker
+		* options untouched instead of erroring.
+		*/
+		async function readPresetRoster(ctx, remote) {
+			let remotes;
+			try {
+				remotes = remote.agentPresets;
+			} catch {
+				remotes = void 0;
+			}
+			if (remotes !== void 0) {
+				const response = await remotes.list();
+				if (!response.ok) return {
+					ok: false,
+					presets: []
+				};
+				return {
+					ok: true,
+					presets: response.value.presets
+				};
+			}
+			const legacy = ctx.get("connection").api?.agentPresets;
+			if (legacy === void 0) return void 0;
+			const response = await legacy.list({});
+			if (!response.result.ok || response.result.value === void 0) return {
+				ok: false,
+				presets: []
+			};
+			return {
+				ok: true,
+				presets: response.result.value.presets ?? []
+			};
+		}
+		/**
 		* Mount the task board.
 		* @param ctx - client root context (services: sessions, workspaces).
 		*/
@@ -3940,6 +4604,9 @@ window.__ModuleLoader__.load({
 					return () => {};
 				}
 			}, "task-board: dictionaries");
+			try {
+				setRuntimeTranslate(ctx.locale.bind(NS));
+			} catch {}
 			const settingsScope = (ctx.get("webUiSettings") ?? ctx.settingsScope).bind({ namespace: TASK_BOARD_NS });
 			const settingsCard = new TaskBoardSettingsCardController(settingsScope);
 			ctx.slots.inject("web-ui.plugin.item", () => {
@@ -3964,7 +4631,7 @@ window.__ModuleLoader__.load({
 				if (uiDisposer !== void 0) return;
 				const sessions = ctx.get("sessions");
 				const workspaces = ctx.get("workspaces");
-				const connection = ctx.get("connection");
+				const remote = ctx.get("remote");
 				const controller = new BoardController({
 					store: new LocalStorageTaskStore(),
 					transport: new HttpTaskBoardHostTransport(),
@@ -3986,9 +4653,9 @@ window.__ModuleLoader__.load({
 				disposers.push(workspaces.list.subscribe(pushWorkspaceOptions));
 				const pushPresetOptions = async () => {
 					try {
-						const response = await connection.api.agentPresets.list({});
-						if (!response.result.ok) return;
-						controller.setExecutionOptions({ presets: response.result.value.presets.map((preset) => ({
+						const roster = await readPresetRoster(ctx, remote);
+						if (roster === void 0 || !roster.ok) return;
+						controller.setExecutionOptions({ presets: roster.presets.map((preset) => ({
 							id: preset.id,
 							name: preset.name,
 							description: preset.description,
@@ -4004,8 +4671,8 @@ window.__ModuleLoader__.load({
 					pushPresetOptions();
 				}));
 				try {
-					disposers.push(mountSidebarEntry(controller));
-					disposers.push(mountBoard(controller));
+					disposers.push(mountSidebarEntry(controller, ctx.locale));
+					disposers.push(mountBoard(controller, ctx.locale));
 				} catch (error) {
 					console.error("[dsh-task-board] mount failed:", error);
 				}