@linxin666/dsh-client-ui-task-board 0.4.4 → 0.4.5

package/lib/types/host-service.d.ts

@@ -3,6 +3,9 @@ import { HostTaskLedger } from './host-ledger.ts';
 import { HostExecutionRunner, type SessionCommandDispatcher, type TaskBoardWorkspaceRegistry } from './host-runner.ts';
 import { PowerInhibitor } from './power-inhibitor.ts';
 import { type TaskBoardAction, type TaskBoardEventPayload, type TaskBoardSnapshot } from './protocol.ts';
+import { TaskBoardExtensionRegistry } from './host/extension-registry.ts';
+import type { TaskBoardExtension } from './core/extension.ts';
+import { type ModelCatalogView, type VerificationContract, type VerificationSettings } from './core/verification.ts';
 import type { TaskPermission } from './core/handover.ts';
 /** One teammate the Host asks the Agent Teams service to spawn for a team run. */
 export interface TeamSpawnInput {
@@ -80,28 +83,105 @@ export declare class TaskBoardHostService {
      */
     private readonly unreadablePolls;
     private preventIdleSleep;
+    private readonly verificationSettings;
+    private readonly verificationCatalog;
     private readonly team;
     private readonly timers;
     private lastPowerJson;
     private readonly now;
+    /** The deployment's workspaces, consulted to resolve a card that pins none. */
+    private readonly workspaceRegistry;
+    /**
+     * External provider extensions. The board owns task lifecycle and execution;
+     * a provider observes them through the registry's capability face and never
+     * reaches into the ledger itself.
+     */
+    readonly extensions: TaskBoardExtensionRegistry;
     constructor(gateway: TypertGateway, options?: {
         ledger?: HostTaskLedger;
         power?: PowerInhibitor;
         now?: () => number;
         commandDispatcher?: SessionCommandDispatcher;
         workspaceRegistry?: TaskBoardWorkspaceRegistry;
-        sessionDefaultPermission?: TaskPermission;
+        /**
+         * Permission baseline of the confirmation gate: a fixed value, or a live
+         * resolver the board re-reads so a Host Settings change needs no remount.
+         */
+        sessionDefaultPermission?: TaskPermission | (() => TaskPermission);
         maxSubtaskDepth?: number;
         team?: TaskBoardTeamDispatcher;
         timers?: HostTimerFace;
+        /**
+         * Live acceptance settings (volatile config reads). Absent keeps goal
+         * acceptance OFF for every execution this service opens, which is what a
+         * programmatic mount without the settings domain gets.
+         */
+        verificationSettings?: () => VerificationSettings;
+        /** The host model catalog the acceptance contract resolves its route from. */
+        verificationCatalog?: () => Promise<ModelCatalogView | undefined>;
     });
     start(): void;
     setConfiguration(active: boolean, preventIdleSleep: boolean): void;
     snapshot(): TaskBoardSnapshot;
+    /**
+     * Admit one external provider. Idempotent by extension id; the returned
+     * disposer releases it (its stored data stays).
+     */
+    registerExtension(extension: TaskBoardExtension): () => void;
+    /**
+     * The acceptance configuration the settings card displays: the live settings,
+     * the contract they resolve to, and the host catalog the choices come from.
+     *
+     * The card shows the RESOLVED route, not the raw configuration, so "inherit
+     * host" reads as the concrete model and reasoning level the next execution
+     * will actually freeze, including any recorded effort fallback.
+     * @returns the resolved acceptance options.
+     */
+    verificationOptions(): Promise<{
+        settings: VerificationSettings;
+        contract: VerificationContract;
+        catalog: ModelCatalogView;
+    }>;
     /** SSE frame payload; deliberately skips the tasks deep-clone of {@link snapshot}. */
     eventPayload(): TaskBoardEventPayload;
     subscribe(listener: () => void): () => void;
-    apply(requestId: string, action: TaskBoardAction, initiator?: string): TaskBoardSnapshot;
+    /**
+     * Give a root card created without a workspace pin the workspace its creator
+     * is in.
+     *
+     * An agent's `task_board_create` arrives with the calling session, and the
+     * GUI submits the session the main view shows, so the card lands where the
+     * work was asked for instead of where the Host process happens to run. A card
+     * that names a workspace keeps it, and a subtask keeps inheriting its lineage
+     * (the runner walks the ancestor chain for that).
+     *
+     * The initiator is client-asserted, so it only chooses among workspaces the
+     * deployment already knows: it can neither register one nor reach outside the
+     * list the user sees.
+     * @param action - the action about to be applied.
+     * @param initiator - the session that issued the action, when one was asserted.
+     * @returns the action, with an inherited workspace on a root creation.
+     */
+    private withInheritedWorkspace;
+    apply(requestId: string, action: Extract<TaskBoardAction, {
+        kind: 'extension-action';
+    }>, initiator?: string): Promise<TaskBoardSnapshot>;
+    apply(requestId: string, action: Exclude<TaskBoardAction, {
+        kind: 'extension-action';
+    }>, initiator?: string): TaskBoardSnapshot;
+    apply(requestId: string, action: TaskBoardAction, initiator?: string): TaskBoardSnapshot | Promise<TaskBoardSnapshot>;
+    /**
+     * Apply one board-owned action with every gate intact. Provider capability
+     * calls and the same-origin wire both land here, so the two surfaces can
+     * never disagree about a card.
+     */
+    private applyBoardAction;
+    /** Route one provider action and answer the resulting board snapshot. */
+    private handleExtensionAction;
+    /** Current task id -> status map, for change detection around a mutation. */
+    private statusMap;
+    /** Emit a status change for every task whose column moved, isolated per callback. */
+    private emitStatusChanges;
     dispose(): void;
     private launch;
     private scheduleTeammate;
@@ -125,6 +205,7 @@ export declare class TaskBoardHostService {
      * ancestor of it — in the running column with no way out. The first poll of
      * each streak is logged, so the Host log names the session.
      */
+    private settleAndNotify;
     private noteUnreadableInspection;
     /** Drop the armed schedule timer and forget its target. */
     private clearScheduleTimer;
@@ -161,6 +242,11 @@ export declare class TaskBoardHostService {
      * session instead, once that session exists.
      */
     private dispatchRuns;
+    /**
+     * Move one execution's applicability without touching its frozen contract or
+     * its recorded attempts (used when the run's goal form becomes known).
+     */
+    private setApplicability;
     private scheduleLaunch;
     private schedulePoll;
     /**

package/lib/types/index.d.ts

@@ -47,9 +47,12 @@ export interface Config {
     /** Environment variable whose value the authenticated proxy injects upstream. */
     proxyTokenEnv?: string;
     /**
-     * The deployment's session-default permission. A card whose effective
-     * permission (handover bundle or pin) is above this value requires a human
-     * confirmation before it may run; cron refuses unconfirmed cards.
+     * An explicit baseline for the permission confirmation gate. Left unset, the
+     * board follows the Host's own default permission preset — the value new DSH
+     * sessions start at — and falls back to `read-only` when the deployment
+     * serves no permission catalog. A card whose effective permission (handover
+     * bundle or pin) is above the baseline requires a human confirmation before
+     * it may run; cron refuses unconfirmed cards.
      */
     sessionDefaultPermission?: TaskPermission;
     /**
@@ -65,6 +68,31 @@ export interface Config {
      * only team-mode runs use it.
      */
     teamProvider?: string;
+    /**
+     * Goal acceptance for executions this board starts (default ON). When on,
+     * update_goal(action: complete) inside a task execution is refused until an
+     * acceptance pass is recorded for that execution: the three coding criteria,
+     * a 0.65 threshold, two rounds per criterion with the A/B slots swapped, and
+     * at most two acceptances per execution — the first failure returns its
+     * findings to the fixing agent, the second ends the cycle. The switch only
+     * affects goal-form executions of the board; plain chat and a task pinned to
+     * goalRun: false are untouched. When a separate third-party verifier also
+     * runs its own automatic acceptance, both judges score independently: this
+     * one gates completion, the other only steers, and no public interface lets
+     * the two share a verdict.
+     */
+    goalVerification?: Volatile<boolean>;
+    /**
+     * Judge model for goal acceptance as provider/model. Blank inherits the HOST's
+     * own model catalog default — never the card's pinned execution model.
+     */
+    goalVerificationModel?: Volatile<string>;
+    /**
+     * Reasoning effort for the judge. Blank inherits the host default level; an
+     * effort the resolved model does not declare is dropped instead of being
+     * sent, and the fallback to the model's own default is reported.
+     */
+    goalVerificationReasoningEffort?: Volatile<string>;
 }
 /**
  * Continuable-subagent provider for fresh teammates, matching the Agent Teams
@@ -72,30 +100,42 @@ export interface Config {
  */
 export declare const DEFAULT_TEAM_PROVIDER = "spawn";
 /**
- * The schema is left to inference rather than annotated with `z<Config>`: a
- * volatile field's parsed output is a `Volatile` reference while its accepted
- * input stays the plain value, so the two sides no longer share one shape and
- * the annotation would reject the schema the Host must be given.
+ * Profile-patch shape of {@link Config}: what the Host validates the row's
+ * config against, before the schema turns volatile fields into live references
+ * and applies defaults. Declared separately because the two sides no longer
+ * share one shape, so the schema is annotated `z<ConfigInput, Config>` — the
+ * same split `dsh-git-graph` uses. The annotation is also what keeps the
+ * emitted declaration portable: an unannotated schema holding a nested object
+ * array infers a type that cannot be named without reaching into a transitive
+ * dependency's own types.
  */
-export declare const Config: z<Schemastery.ObjectS<NoInfer<{
-    announceToAgent: z<boolean, boolean, "volatile-defined">;
-    enabled: z<boolean, boolean, "volatile-defined">;
-    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
-    trustedProxyHosts: z<string[], string[], "defined">;
-    proxyTokenEnv: z<string, string, "defined">;
-    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
-    maxSubtaskDepth: z<number, number, "volatile-defined">;
-    teamProvider: z<string, string, "defined">;
-}>>, Schemastery.ObjectT<NoInfer<{
-    announceToAgent: z<boolean, boolean, "volatile-defined">;
-    enabled: z<boolean, boolean, "volatile-defined">;
-    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
-    trustedProxyHosts: z<string[], string[], "defined">;
-    proxyTokenEnv: z<string, string, "defined">;
-    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
-    maxSubtaskDepth: z<number, number, "volatile-defined">;
-    teamProvider: z<string, string, "defined">;
-}>>, "plain">;
+export interface ConfigInput {
+    /** Announce the board in the system prompt. */
+    announceToAgent?: boolean;
+    /** Master switch for the plugin. */
+    enabled?: boolean;
+    /** Prevent idle system sleep while sessions run or schedules are armed. */
+    preventIdleSleep?: boolean;
+    /** Canonical reverse-proxy Host authorities. */
+    trustedProxyHosts?: string[];
+    /** Environment variable whose value the authenticated proxy injects. */
+    proxyTokenEnv?: string;
+    /** Explicit baseline for the permission confirmation gate; unset follows the Host default. */
+    sessionDefaultPermission?: TaskPermission;
+    /** Subtask depth limit, 1..3. */
+    maxSubtaskDepth?: number;
+    /** Continuable-subagent provider the Agent Teams service composes a teammate from. */
+    teamProvider?: string;
+    /** Goal acceptance switch. */
+    goalVerification?: boolean;
+    /** Judge model route for goal acceptance; blank inherits the host default. */
+    goalVerificationModel?: string;
+    /** Judge reasoning effort; blank inherits the host default. */
+    goalVerificationReasoningEffort?: string;
+}
+export declare const Config: z<ConfigInput, Config>;
+/** Schema default for the goal-acceptance switch, re-read for hand-built contexts. */
+export declare const DEFAULT_GOAL_VERIFICATION = true;
 declare module '@deepseek-ai/cordis' {
     interface Events {
         /**
@@ -129,6 +169,8 @@ export declare function resolveProxyAccess(config: Config | undefined, env?: Nod
 /** The registry face the agent tools register into. */
 interface AgentToolRegistry {
     register(definition: ToolDefinition): () => void;
+    /** Scoped lookup; present on the real registry, absent on a stub that only registers. */
+    get?(name: string, scope?: unknown): unknown;
 }
 /**
  * Resolve the optional agent-tool registry. The board deliberately does not
@@ -149,6 +191,18 @@ export declare function resolveToolRegistry(ctx: Context): AgentToolRegistry | u
  * @returns the timer face, or undefined when this deployment serves none.
  */
 export declare function resolveHostTimers(ctx: Context): HostTimerFace | undefined;
+/**
+ * The Host's own default permission preset, mapped into the board's vocabulary.
+ *
+ * This is the value new DSH sessions start at (the deployment's `permission`
+ * settings row), so a board that follows it treats an ordinary card exactly as
+ * the Host would. Absent when the deployment serves no permission catalog, or
+ * its default is a current-session identity (`auto`) that names no fixed
+ * sandbox mode; the caller then keeps the fail-safe baseline.
+ * @param ctx - the plugin context.
+ * @returns the Host default as a board permission, or undefined when unreadable.
+ */
+export declare function resolveHostDefaultPermission(ctx: Context): TaskPermission | undefined;
 /** The subset of the Agent Teams service this plugin drives. */
 interface AgentTeamsFace {
     spawnTeammate(caller: unknown, request: {

package/lib/types/protocol.d.ts

@@ -1,10 +1,21 @@
 import type { TaskUpdatePatch } from './core/use-cases/task-update.ts';
 import { type NewTaskInput, type TaskPermission, type TaskRecord, type TaskStatus } from './core/tasks.ts';
-export declare const TASK_BOARD_SCHEMA_VERSION: 4;
-/** Ledger documents written before v4; loaded once and migrated on startup. */
-export declare const TASK_BOARD_LEGACY_SCHEMA_VERSION: 3;
-/** Ledger documents written before v3; migrated through the v3 normalization too. */
-export declare const TASK_BOARD_OLDER_SCHEMA_VERSION: 2;
+import { type TaskBoardExtensionPayload } from './core/extension.ts';
+import { type ModelCatalogView, type VerificationContract, type VerificationSettings } from './core/verification.ts';
+export declare const TASK_BOARD_SCHEMA_VERSION: 5;
+/** Ledger documents written before v5; loaded once and migrated on startup. */
+export declare const TASK_BOARD_LEGACY_SCHEMA_VERSION: 4;
+/** Ledger documents written before v4; migrated through the v4 normalization too. */
+export declare const TASK_BOARD_OLDER_SCHEMA_VERSION: 3;
+/** Ledger documents written before v3; migrated through every later normalization too. */
+export declare const TASK_BOARD_OLDEST_SCHEMA_VERSION: 2;
+/**
+ * Every older generation the loader migrates in place. v5 only ADDS the
+ * per-execution acceptance block, so the migration is the normalization pass
+ * that re-validates each row; a document from any listed generation upgrades
+ * losslessly.
+ */
+export declare const TASK_BOARD_MIGRATABLE_SCHEMA_VERSIONS: readonly number[];
 export declare const TASK_BOARD_API_PREFIX = "/api/task-board";
 export type PowerPhase = 'disabled' | 'idle' | 'acquiring' | 'active' | 'error' | 'unsupported';
 export interface TaskBoardPowerSnapshot {
@@ -41,6 +52,24 @@ export interface TaskBoardSnapshot {
      * into team execution (Team Lead session plus one teammate per subtask).
      */
     teamRunAvailable?: boolean;
+    /**
+     * Read-only summaries published by running extensions, keyed by extension id.
+     * The board forwards them verbatim; it never interprets their shape.
+     */
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Body of `GET {TASK_BOARD_API_PREFIX}/verification`: the acceptance settings the
+ * card edits, the contract they resolve to right now, and the host model catalog
+ * the model and reasoning choices come from. Served through the same loopback /
+ * authenticated-proxy guard as the rest of the board API, and it carries no
+ * credential material — model routes and level ids only.
+ */
+export interface TaskBoardVerificationOptions {
+    settings: VerificationSettings;
+    /** The RESOLVED contract, so the card can show what the next execution freezes. */
+    contract: VerificationContract;
+    catalog: ModelCatalogView;
 }
 /** SSE event frame: revision/scheduler/power only, never the task list. */
 export interface TaskBoardEventPayload {
@@ -116,6 +145,21 @@ export type TaskBoardAction = {
     kind: 'set-parent';
     taskId: string;
     parentId: string | null;
+}
+/** Ledger-wide label management; see core/use-cases/task-tag.ts. */
+ | {
+    kind: 'rename-tag';
+    from: string;
+    to: string;
+} | {
+    kind: 'delete-tag';
+    name: string;
+} | {
+    kind: 'extension-action';
+    extensionId: string;
+    action: string;
+    taskId?: string;
+    payload?: TaskBoardExtensionPayload;
 };
 export interface TaskBoardActionEnvelope {
     requestId: string;

package/lib/types/tool-surface.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Family-shared tool-surface conventions for the packages that register
+ * model-facing tools.
+ *
+ * One home for the prompt-section placement and the visibility gate this
+ * family previously restated per package.
+ *
+ * Modelled on the official tool packages:
+ * - `@deepseek-ai/dsh-tool-subagent` renders its section through
+ *   `tools.get(name, context.scope) === undefined ? '' : text`, so guidance
+ *   disappears together with a restricted tool.
+ * - 21 of the 22 official tool packages register their tools GLOBALLY and gate
+ *   them with a setting, not per agent. Only the Agent Teams tool package —
+ *   whose tools belong to one membership — installs into each `agent.ctx`.
+ *   This family follows the majority: registration stays global so the
+ *   registry's per-scope `restrict()` mask (which filters inherited global
+ *   tools and REJECTS scope-local names) can still withhold these tools.
+ *
+ * Structural types only: this copy lands in packages that do not all depend on
+ * the same SDK service packages.
+ */
+/**
+ * Prompt-section order for each package's tool guidance.
+ *
+ * These sit in the family band between the deployment persona and the SDK's
+ * `PLAN_POLICY` (500). Values are owned here rather than written per package so
+ * the host plugins whose guidance shares one prompt cannot drift into an
+ * accidental tie.
+ */
+export declare const PLUGIN_TOOL_SECTION_ORDERS: {
+    readonly ssh: 150;
+    readonly 'task-board': 200;
+};
+/** One plugin id keyed by {@link PLUGIN_TOOL_SECTION_ORDERS}. */
+export type PluginToolSectionId = keyof typeof PLUGIN_TOOL_SECTION_ORDERS;
+/**
+ * Order of an external provider extension's own guidance section, right after
+ * the band of the plugin it extends.
+ *
+ * An extension names itself, not the plugin it plugs into, so its order stays
+ * out of {@link PLUGIN_TOOL_SECTION_ORDERS}: every package's copy of this module
+ * then carries no provider id. The slot still has one owner and cannot collide
+ * with a host plugin's band.
+ */
+export declare const EXTENSION_TOOL_SECTION_ORDER = 210;
+/**
+ * The scoped tool lookup a section provider needs: the registry read for one
+ * assembly's scope. Matches `ctx.tools.get(name, scope)`.
+ */
+export interface ScopedToolLookup {
+    get(name: string, scope?: unknown): unknown;
+}
+/** One assembly context carrying the scope the section is rendered for. */
+export interface SectionScopeContext {
+    scope?: unknown;
+}
+/**
+ * Build a section provider that renders \`text\` only while at least one of
+ * \`toolNames\` is visible to the rendering scope.
+ *
+ * The native convention: a tool that a restriction, a preset, or a missing
+ * registry removed must not leave guidance behind telling the model to call it.
+ * An unreadable registry renders the text unchanged — guidance that outlives a
+ * momentary read failure is recoverable; guidance for a tool that is gone is
+ * not.
+ * @param tools - the scoped tool registry, when the deployment serves one.
+ * @param toolNames - registered names the guidance describes.
+ * @param text - the guidance rendered while they are reachable.
+ * @returns the section text provider.
+ */
+export declare function visibleToolText(tools: ScopedToolLookup | undefined, toolNames: readonly string[], text: string): (context: SectionScopeContext) => string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Host-authoritative task board for the DSH Web GUI with real session execution, Host cron scheduling, and optional cross-platform idle-sleep protection; mounted without DSH source changes.",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "icon": "icon.svg",
   "type": "module",
   "main": "lib/index.js",
@@ -24,7 +24,7 @@
   },
   "dsh": {
     "engines": {
-      "dsh": ">=0.2.0-rc.1"
+      "dsh": ">=0.2.0-rc.2"
     },
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -44,36 +44,37 @@
     }
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh": ">=0.2.0-rc.1",
+    "@deepseek-ai/dsh": ">=0.2.0-rc.2",
     "react": "^18.2.0"
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.4"
+    "@deepseek-ai/schemastery": "^3.18.4",
+    "marked": "^18.0.14"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-agent": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset-registry": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-gateway": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-remotes": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-workspace-controller": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-connection": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-store": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-layout": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-workspace": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-gateway": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-connection": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-workspace": "^0.2.0-rc.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.5",

package/src/client/PluginSettingsCard.tsx

@@ -41,6 +41,13 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
   descriptionKey: TKey
   /** Optional rich header description rendered instead of the plain t(descriptionKey) text (the plain text stays as the tooltip). */
   descriptionNode?: ReactNode
+  /**
+   * Optional leading mark identifying the plugin. A card without one keeps the
+   * plain official header shape, so the chrome stays a readable sibling of the
+   * built-in PluginCard wherever a family plugin lands in the official bundle
+   * seat.
+   */
+  icon?: ReactNode
   /** The card's form state: availability, writability, and what a save would do. */
   state: CardShell
   /** Write every staged edit. */
@@ -91,6 +98,7 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
   const header = alwaysOpen === true
     ? (
       <div className={css.headerStatic}>
+        {props.icon !== undefined ? <span className={css.mark} aria-hidden="true">{props.icon}</span> : null}
         <span className={css.headText}>
           <span className={css.name} title={title}>{title}</span>
           <span className={css.description} title={description}>{props.descriptionNode ?? description}</span>
@@ -106,6 +114,7 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
         aria-label={`${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`}
         onClick={() => { setOpen(!open) }}
       >
+        {props.icon !== undefined ? <span className={css.mark} aria-hidden="true">{props.icon}</span> : null}
         <span className={css.headText}>
           <span className={css.name} title={title}>{title}</span>
           <span className={css.description} title={description}>{props.descriptionNode ?? description}</span>