@linxin666/dsh-client-ui-task-board 0.4.4 → 0.4.6

package/lib/types/index.d.ts

@@ -47,9 +47,12 @@ export interface Config {
     /** Environment variable whose value the authenticated proxy injects upstream. */
     proxyTokenEnv?: string;
     /**
-     * The deployment's session-default permission. A card whose effective
-     * permission (handover bundle or pin) is above this value requires a human
-     * confirmation before it may run; cron refuses unconfirmed cards.
+     * An explicit baseline for the permission confirmation gate. Left unset, the
+     * board follows the Host's own default permission preset — the value new DSH
+     * sessions start at — and falls back to `read-only` when the deployment
+     * serves no permission catalog. A card whose effective permission (handover
+     * bundle or pin) is above the baseline requires a human confirmation before
+     * it may run; cron refuses unconfirmed cards.
      */
     sessionDefaultPermission?: TaskPermission;
     /**
@@ -59,12 +62,77 @@ export interface Config {
      * of the root task opens, so the ceiling is deliberately small.
      */
     maxSubtaskDepth?: Volatile<number>;
+    /**
+     * How often, in seconds, the Host re-reads the DSH session roster while the
+     * board has something to reconcile: a running card, an open execution, or an
+     * active provider extension. An idle board with none of those does not poll
+     * at all, so this cadence only bounds how quickly a running card settles.
+     */
+    sessionPollSeconds?: Volatile<number>;
     /**
      * Continuable-subagent provider the Agent Teams service uses to compose a
      * teammate. Matches the Agent Teams tool plugin's `freshProvider` default;
      * only team-mode runs use it.
      */
     teamProvider?: string;
+    /**
+     * GLOBAL native /goal switch (default OFF), the master control over whether
+     * this board starts a run with dsh's built-in /goal at all. A run uses native
+     * /goal only when THIS is on AND the task's own `goalRun` is not off; while
+     * it is off every task runs one plain turn.
+     *
+     * The value is frozen when an execution starts, so toggling it only affects
+     * executions that begin afterwards and never re-writes a task's stored
+     * `goalRun` preference. A run that consequently does not execute native
+     * /goal is marked as such (its acceptance applicability is `goal-disabled`)
+     * and is never reported as a passed goal acceptance or failed for lacking a
+     * completion call. Independent of `goalVerification`; acceptance governs the
+     * completing call of a goal-form run, this switch governs whether the run
+     * becomes a goal run.
+     */
+    goalRunEnabled?: Volatile<boolean>;
+    /**
+     * Goal acceptance for executions this board starts (default ON). When on,
+     * update_goal(action: complete) inside a task execution is refused until an
+     * acceptance pass is recorded for that execution: the three coding criteria,
+     * a 0.65 threshold, two rounds per criterion with the A/B slots swapped, and
+     * at most two acceptances per execution — the first failure returns its
+     * findings to the fixing agent, the second ends the cycle. The switch only
+     * affects goal-form executions of the board; plain chat and a task pinned to
+     * goalRun: false are untouched. When a separate third-party verifier also
+     * runs its own automatic acceptance, both judges score independently: this
+     * one gates completion, the other only steers, and no public interface lets
+     * the two share a verdict.
+     */
+    goalVerification?: Volatile<boolean>;
+    /**
+     * Judge model for goal acceptance as provider/model. Blank inherits the HOST's
+     * own model catalog default — never the card's pinned execution model.
+     */
+    goalVerificationModel?: Volatile<string>;
+    /**
+     * Reasoning effort for the judge. Blank inherits the host default level; an
+     * effort the resolved model does not declare is dropped instead of being
+     * sent, and the fallback to the model's own default is reported.
+     */
+    goalVerificationReasoningEffort?: Volatile<string>;
+    /**
+     * Ceiling of ONE judge request of a goal acceptance, in seconds
+     * (30..600, default 150). One acceptance issues six judge requests (three
+     * criteria times two rounds), so a ceiling that is too small turns a slow but
+     * healthy judge route into a wall of timeouts, and every timeout was charged
+     * as an acceptance anomaly. Raise it for a reasoning model reading a long
+     * trace.
+     */
+    goalVerificationCallTimeoutSeconds?: Volatile<number>;
+    /**
+     * Total ceiling of ONE goal acceptance attempt, in seconds (120..1800,
+     * default eight times the per-call default). Keep it at or above
+     * `goalVerificationCallTimeoutSeconds` times six or an acceptance can never
+     * finish: the attempt then ends early with a budget stop that judges nothing
+     * and spends no acceptance budget.
+     */
+    goalVerificationBudgetSeconds?: Volatile<number>;
 }
 /**
  * Continuable-subagent provider for fresh teammates, matching the Agent Teams
@@ -72,30 +140,56 @@ export interface Config {
  */
 export declare const DEFAULT_TEAM_PROVIDER = "spawn";
 /**
- * The schema is left to inference rather than annotated with `z<Config>`: a
- * volatile field's parsed output is a `Volatile` reference while its accepted
- * input stays the plain value, so the two sides no longer share one shape and
- * the annotation would reject the schema the Host must be given.
+ * Profile-patch shape of {@link Config}: what the Host validates the row's
+ * config against, before the schema turns volatile fields into live references
+ * and applies defaults. Declared separately because the two sides no longer
+ * share one shape, so the schema is annotated `z<ConfigInput, Config>` — the
+ * same split `dsh-git-graph` uses. The annotation is also what keeps the
+ * emitted declaration portable: an unannotated schema holding a nested object
+ * array infers a type that cannot be named without reaching into a transitive
+ * dependency's own types.
  */
-export declare const Config: z<Schemastery.ObjectS<NoInfer<{
-    announceToAgent: z<boolean, boolean, "volatile-defined">;
-    enabled: z<boolean, boolean, "volatile-defined">;
-    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
-    trustedProxyHosts: z<string[], string[], "defined">;
-    proxyTokenEnv: z<string, string, "defined">;
-    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
-    maxSubtaskDepth: z<number, number, "volatile-defined">;
-    teamProvider: z<string, string, "defined">;
-}>>, Schemastery.ObjectT<NoInfer<{
-    announceToAgent: z<boolean, boolean, "volatile-defined">;
-    enabled: z<boolean, boolean, "volatile-defined">;
-    preventIdleSleep: z<boolean, boolean, "volatile-defined">;
-    trustedProxyHosts: z<string[], string[], "defined">;
-    proxyTokenEnv: z<string, string, "defined">;
-    sessionDefaultPermission: z<"read-only" | "workspace-write" | "danger-full-access", "read-only" | "workspace-write" | "danger-full-access", "defined">;
-    maxSubtaskDepth: z<number, number, "volatile-defined">;
-    teamProvider: z<string, string, "defined">;
-}>>, "plain">;
+export interface ConfigInput {
+    /** Announce the board in the system prompt. */
+    announceToAgent?: boolean;
+    /** Master switch for the plugin. */
+    enabled?: boolean;
+    /** Prevent idle system sleep while sessions run or schedules are armed. */
+    preventIdleSleep?: boolean;
+    /** Canonical reverse-proxy Host authorities. */
+    trustedProxyHosts?: string[];
+    /** Environment variable whose value the authenticated proxy injects. */
+    proxyTokenEnv?: string;
+    /** Explicit baseline for the permission confirmation gate; unset follows the Host default. */
+    sessionDefaultPermission?: TaskPermission;
+    /** Subtask depth limit, 1..3. */
+    maxSubtaskDepth?: number;
+    /** Roster-poll cadence in seconds while the board has work to reconcile. */
+    sessionPollSeconds?: number;
+    /** Continuable-subagent provider the Agent Teams service composes a teammate from. */
+    teamProvider?: string;
+    /** Global native /goal switch; default off, frozen per execution. */
+    goalRunEnabled?: boolean;
+    /** Goal acceptance switch. */
+    goalVerification?: boolean;
+    /** Judge model route for goal acceptance; blank inherits the host default. */
+    goalVerificationModel?: string;
+    /** Judge reasoning effort; blank inherits the host default. */
+    goalVerificationReasoningEffort?: string;
+    /** Ceiling of one judge request of a goal acceptance, in seconds. */
+    goalVerificationCallTimeoutSeconds?: number;
+    /** Total ceiling of one goal acceptance attempt, in seconds. */
+    goalVerificationBudgetSeconds?: number;
+}
+export declare const Config: z<ConfigInput, Config>;
+/** Schema default for the goal-acceptance switch, re-read for hand-built contexts. */
+export declare const DEFAULT_GOAL_VERIFICATION = true;
+/**
+ * Schema default for the GLOBAL native-/goal switch, re-read for hand-built
+ * contexts. Deliberately false: a deployment that never configured it (and
+ * every card written before the option existed) runs plain single turns.
+ */
+export declare const DEFAULT_GOAL_RUN = false;
 declare module '@deepseek-ai/cordis' {
     interface Events {
         /**
@@ -129,6 +223,8 @@ export declare function resolveProxyAccess(config: Config | undefined, env?: Nod
 /** The registry face the agent tools register into. */
 interface AgentToolRegistry {
     register(definition: ToolDefinition): () => void;
+    /** Scoped lookup; present on the real registry, absent on a stub that only registers. */
+    get?(name: string, scope?: unknown): unknown;
 }
 /**
  * Resolve the optional agent-tool registry. The board deliberately does not
@@ -149,6 +245,18 @@ export declare function resolveToolRegistry(ctx: Context): AgentToolRegistry | u
  * @returns the timer face, or undefined when this deployment serves none.
  */
 export declare function resolveHostTimers(ctx: Context): HostTimerFace | undefined;
+/**
+ * The Host's own default permission preset, mapped into the board's vocabulary.
+ *
+ * This is the value new DSH sessions start at (the deployment's `permission`
+ * settings row), so a board that follows it treats an ordinary card exactly as
+ * the Host would. Absent when the deployment serves no permission catalog, or
+ * its default is a current-session identity (`auto`) that names no fixed
+ * sandbox mode; the caller then keeps the fail-safe baseline.
+ * @param ctx - the plugin context.
+ * @returns the Host default as a board permission, or undefined when unreadable.
+ */
+export declare function resolveHostDefaultPermission(ctx: Context): TaskPermission | undefined;
 /** The subset of the Agent Teams service this plugin drives. */
 interface AgentTeamsFace {
     spawnTeammate(caller: unknown, request: {

package/lib/types/protocol.d.ts

@@ -1,11 +1,36 @@
 import type { TaskUpdatePatch } from './core/use-cases/task-update.ts';
+import type { SetSchedulePatch } from './core/use-cases/task-schedule.ts';
 import { type NewTaskInput, type TaskPermission, type TaskRecord, type TaskStatus } from './core/tasks.ts';
-export declare const TASK_BOARD_SCHEMA_VERSION: 4;
-/** Ledger documents written before v4; loaded once and migrated on startup. */
-export declare const TASK_BOARD_LEGACY_SCHEMA_VERSION: 3;
-/** Ledger documents written before v3; migrated through the v3 normalization too. */
-export declare const TASK_BOARD_OLDER_SCHEMA_VERSION: 2;
+import { type TaskBoardExtensionPayload } from './core/extension.ts';
+import { type ModelCatalogView, type VerificationContract, type VerificationSettings } from './core/verification.ts';
+export declare const TASK_BOARD_SCHEMA_VERSION: 6;
+/** Ledger documents written before v6; loaded once and migrated on startup. */
+export declare const TASK_BOARD_LEGACY_SCHEMA_VERSION: 5;
+/** Ledger documents written before v5; migrated through the v5 normalization too. */
+export declare const TASK_BOARD_PRE_ACCEPTANCE_SCHEMA_VERSION: 4;
+/** Ledger documents written before v4; migrated through the v4 normalization too. */
+export declare const TASK_BOARD_OLDER_SCHEMA_VERSION: 3;
+/** Ledger documents written before v3; migrated through every later normalization too. */
+export declare const TASK_BOARD_OLDEST_SCHEMA_VERSION: 2;
+/**
+ * The last generation whose rules still need the Host zone stamped on them at
+ * migration: v4 introduced the stored zone but a rule written without one must
+ * stop following a later TZ change. A v5 rule already carries its zone (or
+ * deliberately follows the Host), so it is NOT stamped again.
+ */
+export declare const TASK_BOARD_ZONE_STAMP_SCHEMA_VERSION: 4;
+/**
+ * Every older generation the loader migrates in place. v5 only added the
+ * per-execution acceptance block and v6 only added the scheduling mode and run
+ * budget, so the migration is the normalization pass that re-validates each
+ * row; a document from any listed generation upgrades losslessly.
+ */
+export declare const TASK_BOARD_MIGRATABLE_SCHEMA_VERSIONS: readonly number[];
 export declare const TASK_BOARD_API_PREFIX = "/api/task-board";
+/** Longest accepted caller identity on an external outcome record. */
+export declare const EXTERNAL_INITIATOR_MAX_LENGTH = 200;
+/** Longest accepted free-text summary on an external outcome record. */
+export declare const EXTERNAL_SUMMARY_MAX_LENGTH = 1000;
 export type PowerPhase = 'disabled' | 'idle' | 'acquiring' | 'active' | 'error' | 'unsupported';
 export interface TaskBoardPowerSnapshot {
     platform: string;
@@ -41,6 +66,32 @@ export interface TaskBoardSnapshot {
      * into team execution (Team Lead session plus one teammate per subtask).
      */
     teamRunAvailable?: boolean;
+    /**
+     * Live GLOBAL native-/goal switch. The browser uses it to disable the
+     * task-level option (and explain that the global switch must be turned on
+     * first) WITHOUT rewriting anyone's stored per-task preference; the Host
+     * freezes its own read per execution, so this mirror never governs a run in
+     * flight.
+     */
+    goalRunEnabled?: boolean;
+    /**
+     * Read-only summaries published by running extensions, keyed by extension id.
+     * The board forwards them verbatim; it never interprets their shape.
+     */
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Body of `GET {TASK_BOARD_API_PREFIX}/verification`: the acceptance settings the
+ * card edits, the contract they resolve to right now, and the host model catalog
+ * the model and reasoning choices come from. Served through the same loopback /
+ * authenticated-proxy guard as the rest of the board API, and it carries no
+ * credential material — model routes and level ids only.
+ */
+export interface TaskBoardVerificationOptions {
+    settings: VerificationSettings;
+    /** The RESOLVED contract, so the card can show what the next execution freezes. */
+    contract: VerificationContract;
+    catalog: ModelCatalogView;
 }
 /** SSE event frame: revision/scheduler/power only, never the task list. */
 export interface TaskBoardEventPayload {
@@ -95,14 +146,30 @@ export type TaskBoardAction = {
 } | {
     kind: 'settle';
     taskId: string;
+}
+/** Clear the acceptance anomalies recorded on a card's open execution (issue #1828). */
+ | {
+    kind: 'reset-verification';
+    taskId: string;
+}
+/**
+ * Record an outcome an agent OUTSIDE the Host produced (issue #1826).
+ *
+ * It writes a real execution record, so the terminal column and the run
+ * history both derive from that one record instead of a bare column edit.
+ * `cancelled` is deliberately absent: nothing outside a DSH session may
+ * claim the Host closed a run, and `running` must stay Host-only.
+ */
+ | {
+    kind: 'record-external-outcome';
+    taskId: string;
+    result: 'succeeded' | 'failed';
+    initiatedBy: string;
+    summary?: string;
 } | {
     kind: 'set-schedule';
     taskId: string;
-    patch: {
-        enabled?: boolean;
-        cron?: string;
-        timeZone?: string | null;
-    };
+    patch: SetSchedulePatch;
 } | {
     kind: 'run';
     taskId: string;
@@ -116,6 +183,21 @@ export type TaskBoardAction = {
     kind: 'set-parent';
     taskId: string;
     parentId: string | null;
+}
+/** Ledger-wide label management; see core/use-cases/task-tag.ts. */
+ | {
+    kind: 'rename-tag';
+    from: string;
+    to: string;
+} | {
+    kind: 'delete-tag';
+    name: string;
+} | {
+    kind: 'extension-action';
+    extensionId: string;
+    action: string;
+    taskId?: string;
+    payload?: TaskBoardExtensionPayload;
 };
 export interface TaskBoardActionEnvelope {
     requestId: string;

package/lib/types/tool-surface.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Family-shared tool-surface conventions for the packages that register
+ * model-facing tools.
+ *
+ * One home for the prompt-section placement and the visibility gate this
+ * family previously restated per package.
+ *
+ * Modelled on the official tool packages:
+ * - `@deepseek-ai/dsh-tool-subagent` renders its section through
+ *   `tools.get(name, context.scope) === undefined ? '' : text`, so guidance
+ *   disappears together with a restricted tool.
+ * - 21 of the 22 official tool packages register their tools GLOBALLY and gate
+ *   them with a setting, not per agent. Only the Agent Teams tool package —
+ *   whose tools belong to one membership — installs into each `agent.ctx`.
+ *   This family follows the majority: registration stays global so the
+ *   registry's per-scope `restrict()` mask (which filters inherited global
+ *   tools and REJECTS scope-local names) can still withhold these tools.
+ *
+ * Structural types only: this copy lands in packages that do not all depend on
+ * the same SDK service packages.
+ */
+/**
+ * Prompt-section order for each package's tool guidance.
+ *
+ * These sit in the family band between the deployment persona and the SDK's
+ * `PLAN_POLICY` (500). Values are owned here rather than written per package so
+ * the host plugins whose guidance shares one prompt cannot drift into an
+ * accidental tie.
+ */
+export declare const PLUGIN_TOOL_SECTION_ORDERS: {
+    readonly ssh: 150;
+    readonly 'task-board': 200;
+};
+/** One plugin id keyed by {@link PLUGIN_TOOL_SECTION_ORDERS}. */
+export type PluginToolSectionId = keyof typeof PLUGIN_TOOL_SECTION_ORDERS;
+/**
+ * Order of an external provider extension's own guidance section, right after
+ * the band of the plugin it extends.
+ *
+ * An extension names itself, not the plugin it plugs into, so its order stays
+ * out of {@link PLUGIN_TOOL_SECTION_ORDERS}: every package's copy of this module
+ * then carries no provider id. The slot still has one owner and cannot collide
+ * with a host plugin's band.
+ */
+export declare const EXTENSION_TOOL_SECTION_ORDER = 210;
+/**
+ * The scoped tool lookup a section provider needs: the registry read for one
+ * assembly's scope. Matches `ctx.tools.get(name, scope)`.
+ */
+export interface ScopedToolLookup {
+    get(name: string, scope?: unknown): unknown;
+}
+/** One assembly context carrying the scope the section is rendered for. */
+export interface SectionScopeContext {
+    scope?: unknown;
+}
+/**
+ * Build a section provider that renders \`text\` only while at least one of
+ * \`toolNames\` is visible to the rendering scope.
+ *
+ * The native convention: a tool that a restriction, a preset, or a missing
+ * registry removed must not leave guidance behind telling the model to call it.
+ * An unreadable registry renders the text unchanged — guidance that outlives a
+ * momentary read failure is recoverable; guidance for a tool that is gone is
+ * not.
+ * @param tools - the scoped tool registry, when the deployment serves one.
+ * @param toolNames - registered names the guidance describes.
+ * @param text - the guidance rendered while they are reachable.
+ * @returns the section text provider.
+ */
+export declare function visibleToolText(tools: ScopedToolLookup | undefined, toolNames: readonly string[], text: string): (context: SectionScopeContext) => string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-client-ui-task-board",
   "description": "Host-authoritative task board for the DSH Web GUI with real session execution, Host cron scheduling, and optional cross-platform idle-sleep protection; mounted without DSH source changes.",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "icon": "icon.svg",
   "type": "module",
   "main": "lib/index.js",
@@ -11,10 +11,6 @@
       "types": "./lib/types/index.d.ts",
       "default": "./lib/index.js"
     },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
     "./client": {
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
@@ -24,7 +20,7 @@
   },
   "dsh": {
     "engines": {
-      "dsh": ">=0.2.0-rc.1"
+      "dsh": ">=0.2.0-rc.2"
     },
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -44,36 +40,37 @@
     }
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh": ">=0.2.0-rc.1",
+    "@deepseek-ai/dsh": ">=0.2.0-rc.2",
     "react": "^18.2.0"
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.4"
+    "@deepseek-ai/schemastery": "^3.18.4",
+    "marked": "^18.0.14"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-agent": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-agent-preset-registry": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-gateway": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-remotes": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-api-workspace-controller": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-connection": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-store": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-layout": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.2.0-rc.1",
-    "@deepseek-ai/dsh-workspace": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-gateway": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-connection": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-commands": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-workspace": "^0.2.0-rc.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.5",
@@ -100,7 +97,7 @@
     "url": "https://github.com/zhu1090093659/dsh-web.git"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && tsdown",
+    "build": "tsc -b tsconfig.build.json && tsdown",
     "bundle": "tsdown",
     "watch": "tsdown --watch",
     "typecheck": "tsc --noEmit",

package/src/client/PluginSettingsCard.tsx

@@ -41,6 +41,13 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
   descriptionKey: TKey
   /** Optional rich header description rendered instead of the plain t(descriptionKey) text (the plain text stays as the tooltip). */
   descriptionNode?: ReactNode
+  /**
+   * Optional leading mark identifying the plugin. A card without one keeps the
+   * plain official header shape, so the chrome stays a readable sibling of the
+   * built-in PluginCard wherever a family plugin lands in the official bundle
+   * seat.
+   */
+  icon?: ReactNode
   /** The card's form state: availability, writability, and what a save would do. */
   state: CardShell
   /** Write every staged edit. */
@@ -91,6 +98,7 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
   const header = alwaysOpen === true
     ? (
       <div className={css.headerStatic}>
+        {props.icon !== undefined ? <span className={css.mark} aria-hidden="true">{props.icon}</span> : null}
         <span className={css.headText}>
           <span className={css.name} title={title}>{title}</span>
           <span className={css.description} title={description}>{props.descriptionNode ?? description}</span>
@@ -106,6 +114,7 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
         aria-label={`${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`}
         onClick={() => { setOpen(!open) }}
       >
+        {props.icon !== undefined ? <span className={css.mark} aria-hidden="true">{props.icon}</span> : null}
         <span className={css.headText}>
           <span className={css.name} title={title}>{title}</span>
           <span className={css.description} title={description}>{props.descriptionNode ?? description}</span>