@linxin666/dsh-client-ui-task-board 0.4.5 → 0.4.6

package/src/client/index.ts

@@ -33,7 +33,7 @@ import { TaskBoardSettingsCard, TaskBoardSettingsCardController, type TaskBoardS
 import { en, zh, setRuntimeTranslate, type TaskBoardKey } from './locales.ts'
 import { HttpTaskBoardHostTransport } from './host-api.ts'
 import { reportDailyHeartbeat } from './telemetry.ts'
-import { installBoardCard } from './board-card-seat.ts'
+import { installPluginCard } from './plugin-card-seat.ts'
 import { createServedEntryForm } from './settings-entry-form.ts'
 import { TaskBoardClientService } from './service.ts'
 import {
@@ -133,15 +133,17 @@ declare module '@deepseek-ai/cordis' {
 
 /**
  * Required services (fiber inject waiting — the runtime must be up first).
- * The generated remote faces are probed at use time instead of injected:
- * `remote.agentPresets` only registers on 0.1.2-alpha.2 hosts (the
- * api-remotes contribution), so a hard wait would pend the entry forever
- * on hosts below that cohort, which serve the same roster through the
- * connection RPC face.
+ * The generated remote namespaces are not all hard injects: `remote.session`
+ * is one, while `remote.agentPresets` is reached through a scoped inject at
+ * use time (see mountUi), because the namespace mounts with the official
+ * api-remotes assembly applied beside this entry rather than before it.
  */
 export const inject = ['slots', 'sessions', 'workspaces', 'connection', 'configForms', 'locale', 'remote', 'remote.session', 'uiWorkspace', 'layout']
 
-/** One agent-preset row the mode picker consumes (either face's wire shape). */
+/** The generated Remote namespace the mode picker reads its roster from. */
+type PresetRemote = ClientRemote['agentPresets']
+
+/** One agent-preset row the mode picker consumes. */
 interface PresetRosterRow {
   id: string
   name?: string
@@ -152,41 +154,17 @@ interface PresetRosterRow {
 }
 
 /**
- * Read the agent-preset roster through whichever face the running host
- * serves: the generated api-remotes face (`remote.agentPresets`,
- * 0.1.2-alpha.2) or the connection RPC face
- * (`connection.api.agentPresets`, hosts below that cohort). Answers
- * undefined when the host serves neither, so the caller leaves the picker
- * options untouched instead of erroring.
+ * Read the agent-preset roster through the generated api-remotes face. The
+ * caller passes the namespace resolved inside its scoped inject, so a host
+ * that serves no such namespace never reaches here; a host that serves it
+ * answers `ok: false` instead, which leaves the picker options untouched.
+ * @param remote - the `remote.agentPresets` namespace.
+ * @returns the roster, or a failed read the caller ignores.
  */
-async function readPresetRoster(
-  ctx: ClientContext,
-  remote: ClientRemote,
-): Promise<{ ok: boolean; presets: readonly PresetRosterRow[] } | undefined> {
-  // The cordis `remote` proxy throws on a property that was never injected
-  // ("cannot get property X without inject") rather than returning undefined,
-  // so the probe must guard the access — a hard read would abort mounting on
-  // hosts below the 0.1.2-alpha.2 cohort instead of degrading to the legacy
-  // connection RPC face below.
-  let remotes: ClientRemote['agentPresets'] | undefined
-  try {
-    remotes = (remote as Partial<ClientRemote>).agentPresets
-  } catch {
-    remotes = undefined
-  }
-  if (remotes !== undefined) {
-    const response = await remotes.list()
-    if (!response.ok) return { ok: false, presets: [] }
-    return { ok: true, presets: response.value.presets }
-  }
-  const connection = ctx.get('connection') as unknown as {
-    api?: { agentPresets?: { list(request: Record<string, never>): Promise<{ result: { ok: boolean; value?: { presets?: readonly PresetRosterRow[] } } }> } }
-  }
-  const legacy = connection.api?.agentPresets
-  if (legacy === undefined) return undefined
-  const response = await legacy.list({})
-  if (!response.result.ok || response.result.value === undefined) return { ok: false, presets: [] }
-  return { ok: true, presets: response.result.value.presets ?? [] }
+async function readPresetRoster(remote: PresetRemote): Promise<{ ok: boolean; presets: readonly PresetRosterRow[] }> {
+  const response = await remote.list()
+  if (!response.ok) return { ok: false, presets: [] }
+  return { ok: true, presets: response.value.presets }
 }
 
 /**
@@ -238,7 +216,7 @@ export function apply(ctx: ClientContext): void {
   ctx.effect(() => () => { clientService.detach() }, 'task-board: extension service')
 
   const settingsCard = new TaskBoardSettingsCardController(settingsForm, request => clientService.dispatch(request))
-  installBoardCard(ctx, {
+  installPluginCard(ctx, {
     bundle: '@linxin666/dsh-client-ui-task-board',
     id: 'task-board',
     order: 110,
@@ -321,10 +299,10 @@ export function apply(ctx: ClientContext): void {
       const created = await workspaces.create({ path })
       return { workspaceId: created.workspaceId }
     })
-    const pushPresetOptions = async (): Promise<void> => {
+    const pushPresetOptions = async (presetRemote: PresetRemote): Promise<void> => {
       try {
-        const roster = await readPresetRoster(ctx, remote)
-        if (roster === undefined || !roster.ok) return
+        const roster = await readPresetRoster(presetRemote)
+        if (!roster.ok) return
         controller.setExecutionOptions({
           presets: roster.presets.map(preset => ({
             id: preset.id,
@@ -340,6 +318,25 @@ export function apply(ctx: ClientContext): void {
         console.error('[dsh-task-board] agent preset roster read failed', error)
       }
     }
+    // The roster namespace mounts with the official api-remotes assembly,
+    // which the page applies beside this entry: at mount time the namespace is
+    // usually still absent, and reading it through `remote.agentPresets`
+    // before it lands throws ("cannot get property ... without inject"), so a
+    // one-shot probe leaves the mode picker with nothing but "inherit" for the
+    // page lifetime. A hard inject is no better — it would pend the whole
+    // board on a deployment that never mounts the namespace. The scoped inject
+    // runs the feed exactly when the namespace exists and re-runs it if the
+    // namespace is replaced; the reconnect read inside covers a deployment
+    // change behind the same namespace.
+    const presetRosterFeed = ctx.inject(['remote.agentPresets'], (inner) => {
+      const presetRemote = inner.get('remote.agentPresets') as PresetRemote | undefined
+      if (presetRemote === undefined) return
+      void pushPresetOptions(presetRemote)
+      // Subscribed inside the injected scope, so a namespace that goes away
+      // takes its listener with it instead of leaving one per remount.
+      return inner.on('connection/reset', () => { void pushPresetOptions(presetRemote) })
+    })
+    disposers.push(() => { void presetRosterFeed.dispose() })
     const pushModelOptions = async (): Promise<void> => {
       try {
         let models: Array<{ id: string; name?: string; provider?: string }> = []
@@ -404,12 +401,8 @@ export function apply(ctx: ClientContext): void {
         console.error('[dsh-task-board] model options read failed', error)
       }
     }
-    void pushPresetOptions()
     void pushModelOptions()
-    disposers.push(ctx.on('connection/reset', () => {
-      void pushPresetOptions()
-      void pushModelOptions()
-    }))
+    disposers.push(ctx.on('connection/reset', () => { void pushModelOptions() }))
     // Native panel surfaces: one sidebar row and one center-column page, both
     // through the official slot seats the shell itself renders. The layout's
     // panel selection is reconciled back into the controller so the board's own

package/src/client/locales.ts

@@ -152,6 +152,7 @@ export const zh = {
   'detail.noSession': '暂无会话',
   'detail.executionStarted': '已启动',
   'detail.execution.initiator': '发起会话 {session}',
+  'detail.execution.external': 'Host 之外完成：{agent}',
   'detail.executionEnded': '已结束',
   'detail.result.succeeded': '成功',
   'detail.result.failed': '失败',
@@ -194,7 +195,35 @@ export const zh = {
   'detail.schedule.duration.hours': '{count} 小时',
   'detail.schedule.duration.minutes': '{count} 分钟',
   'detail.schedule.duration.seconds': '{count} 秒',
+  // 调度方式：单次计划与循环规则是两类计划，不是同一 cron 的日期限定写法。
+  'detail.schedule.mode': '调度方式',
+  'detail.schedule.mode.cron': '循环',
+  'detail.schedule.mode.once': '单次',
+  'detail.schedule.at': '执行时间',
+  'detail.schedule.atHint': '按所选时区解读的计划时刻；必须是未来时间。',
+  'detail.schedule.atInvalid': '请选择未来的有效时间',
+  'detail.schedule.plannedAt': '计划时间',
+  'detail.schedule.zoneOnceHint': '所选时刻按此时区解读。',
+  'detail.schedule.maxRuns': '次数上限',
+  'detail.schedule.maxRunsUnlimited': '不限次数',
+  'detail.schedule.maxRunsValue': '最多 {count} 次',
+  'detail.schedule.maxRunsCustom': '自定义',
+  'detail.schedule.maxRunsInvalid': '次数上限必须是正整数',
+  'detail.schedule.runs': '已执行 {done}/{total} 次',
+  'detail.schedule.runsUnlimited': '已执行 {done} 次',
+  'detail.schedule.remaining': '剩余 {count} 次',
+  'detail.schedule.cancel': '关闭调度',
+  'detail.schedule.ended': '调度已结束：{reason}',
+  'detail.schedule.skipped': '上次跳过：{reason}',
+  'detail.schedule.stop.fired': '单次计划已执行',
+  'detail.schedule.stop.limit': '已达次数上限',
+  'detail.schedule.stop.no-target': '计划已无可执行时刻',
+  'detail.schedule.stop.missed': '错过执行时刻，已跳过',
+  'detail.schedule.stop.busy': '触发时任务正在运行，已跳过',
+  'detail.schedule.stop.permission': '权限待人工确认，已跳过',
+  'detail.schedule.stop.launch-failed': '启动失败未创建执行，次数已退回',
   'card.scheduled': '定时',
+  'card.scheduledOnce': '单次',
   'new.workspace': '工作区',
   'new.agentPreset': 'Agent 预设',
   'new.permission': '权限',
@@ -224,7 +253,7 @@ export const zh = {
   'exec.teamRunUnavailable': '当前部署未提供 Agent Teams 服务，无法启用。',
   'exec.reuseSessionHint': '开启后，本任务的后续执行在上一次会话里继续（该会话空闲且仍存在时），不再每次新建对话；每次复用时都会重新应用上面钉住的权限与模型。',
   'exec.goalRun': '以 dsh 内置的 /goal 开始执行任务',
-  'exec.goalRunHint': '默认开启：执行时把任务目标作为持久目标交给 dsh 内置的 /goal，会话会自动续跑多轮，直到 agent 标记目标完成；看板在该目标真正结束后才结算本次执行。关闭则只执行一轮普通对话。',
+  'exec.goalRunHint': '默认关闭：勾选后执行时把任务目标作为持久目标交给 dsh 内置的 /goal，会话会自动续跑多轮，直到 agent 标记目标完成；看板在该目标真正结束后才结算本次执行。不勾选则只执行一轮普通对话。',
   'exec.skipVerification': '跳过本任务的验收',
   'exec.skipVerificationHint': '默认关闭：勾选后本任务以 goal 形式执行时不再拦截 update_goal 标记完成，也不要求通过验收；执行记录会标注「该卡片跳过验收」。仅对之后新开的执行生效，验收总开关关闭时本项无意义。',
   'detail.executionSettings': '执行设置',
@@ -258,9 +287,16 @@ export const zh = {
   'settings.unsaved': '未保存',
   'settings.saveFailed': '部署未接受这些值，已保留供你修改。',
   'settings.invalidNumber': '请输入数字，留空则使用默认值。',
+  'settings.sessionPollSeconds': '会话轮询间隔（秒）',
+  'settings.sessionPollSecondsHint': '默认 5 秒。仅在看板有需要核对的事情——运行中的卡片或未结算的执行——时才读取会话名册；两者都没有时不再轮询，Host 不会持续扫描持久化会话目录。取值 1–300 秒：间隔越短结算越快、Host 负载越高。',
   'settings.maxSubtaskDepth': '子任务深度上限',
   'settings.maxSubtaskDepthHint': '默认 1：一个任务只允许一层子任务，子任务不能再创建或关联子任务。最大 3。执行父任务会并发执行它的整棵子任务树，层级越深，一次执行开启的会话越多。',
   'settings.maxSubtaskDepthOption': '{depth} 层',
+  'settings.runBehaviorTitle': '运行行为',
+  'settings.runBehaviorCardHint': '全局原生 /goal 执行开关（总开关，默认关闭）。',
+  'settings.goalRunGlobal': '全局启用 DSH 原生 /goal 执行',
+  'settings.goalRunGlobalHint': '默认关闭。关闭时所有任务都按普通单回合执行，不调用 dsh 内置的 /goal；只有这里开启、且任务级「以 /goal 开始执行」被勾选时，才执行原生 /goal。任务级勾选始终可操作、也不会被这里的开关改写，总开关只决定它是否生效。开关按执行启动时冻结，只影响之后新开的执行。',
+  'settings.goalRunGlobalDisabledTaskOption': '全局「原生 /goal 执行」总开关已关闭：任务级选项仍可随时勾选或取消，但暂不生效，你保存的偏好也不会被改写；开启总开关后即按该偏好执行。本次执行按普通单回合进行，未执行 goal 验收。',
   'settings.goalVerificationTitle': '任务验收',
   'settings.goalVerification': '启用任务验收',
   'settings.goalVerificationCardHint': '验收开关、裁判模型与判据阈值。',
@@ -290,6 +326,7 @@ export const zh = {
   'running.repairing': '验收未通过修复中',
   'running.verificationPassed': '验收通过',
   'running.verificationFailed': '验收未通过',
+  'running.verificationInvalid': '验收无效，等待处理',
   'verify.title': '验收报告',
   'verify.status.passed': '通过',
   'verify.status.failed': '未通过',
@@ -297,6 +334,34 @@ export const zh = {
   'verify.status.verifying': '验收中',
   'verify.status.pending': '待验收',
   'verify.status.off': '本次执行未启用验收',
+  'verify.status.invalid': '验收无效',
+  'verify.status.invalidHeld': '验收无效，等待人工处理',
+  'verify.attemptInvalid': '第 {index} 次验收无效',
+  'verify.invalidReason.missing-finding': '未达标的判据没有对应的结构化问题反馈',
+  'verify.invalidReason.unlocatable-quote': '问题反馈引用的位置不存在于本次裁判所见的证据中',
+  'verify.invalidReason.baseline-finding': '问题反馈指向空工作基线，而不是本次执行的工作',
+  'verify.invalidReason.vacuous-finding': '问题反馈为空或空泛评价，没有说明实际观测与差异',
+  'verify.invalidReason.insufficient-evidence': '裁判看到的证据不足（例如轨迹被截断），无法支撑否决',
+  'verify.invalidReason.unknown': '未产生可用的质量判定',
+  'verify.invalidCounts': '有效质量判定 {quality}/{max} · 无效验收 {invalid}/{maxInvalid} · 验收异常 {exceptions}/{max}',
+  'verify.invalidDetail': '无效原因：{reason}',
+  'verify.criterionFindings': '结构化问题反馈（判据 · 引用位置 · 实际引用）',
+  'verify.criterionFinding': '{criterion} · {location}：“{quote}”',
+  'verify.criterionFindingFull': '{criterion} · {location}：“{quote}” 要求：{requirement} 观测：{observation} 差异：{gap}',
+  'verify.location.task': '任务要求',
+  'verify.location.trajectory': '执行轨迹',
+  'verify.location.workspace': '宿主记录的变更',
+  'verify.location.baseline': '空工作基线（不构成否决证据）',
+  'verify.location.unknown': '未标明位置',
+  'verify.detailRemoved': '本条验收的详细材料已在通过并成功结算后自动清理（不是裁判未举证）。',
+  'verify.cleanup.cleaned': '本次执行的验收专用详细材料已在通过并成功结算后自动清理；以下为保留的轻量审计凭据。',
+  'verify.cleanup.pending': '验收专用详细材料待清理（将通过并结算后启动）。',
+  'verify.cleanup.failed': '验收详细材料清理失败（已重试 {attempts} 次）：{error}；通过记录仍然有效，宿主重启后会补清。',
+  'verify.cleanup.audit': '保留凭据：第 {index} 次 · {stage} · 分数 {score} · 证据哈希 {hash}',
+  'verify.cleanup.stage.quality': '质量判定',
+  'verify.cleanup.stage.invalid': '无效验收',
+  'verify.cleanup.stage.exception': '验收异常',
+  'verify.cleanup.stage.budget': '时间预算耗尽',
   'verify.summary': '总分 {score}（阈值 {threshold}）· 空工作基线 {baseline}',
   'verify.criteria': '逐项判据',
   'verify.criterion': '{name}：{score}（阈值 {threshold}）',
@@ -315,9 +380,10 @@ export const zh = {
   'verify.usageIncomplete': '（至少一次请求的用量未知，以上为下限）',
   'verify.finalFailure': '判定依据：{reason}',
   'verify.applicability.disabled': '本次执行启动时验收开关关闭，按原有回合判定结算。',
-  'verify.applicability.goalUnavailable': '本次执行未成为 goal 执行（/goal 被拒绝或不可用），验收未强制执行。',
+  'verify.applicability.goalUnavailable': '本次执行未成为 goal 执行（卡片未勾选「以 /goal 开始执行任务」，或 /goal 被拒绝/不可用），验收未强制执行。',
   'verify.applicability.skipped': '该任务卡勾选了「跳过验收」，本次执行未经验收判定。',
   'verify.applicability.teamMember': '团队执行成员：由 Lead 的团队汇总证据统一验收。',
+  'verify.applicability.goalDisabled': '本次执行启动时全局「原生 /goal 执行」总开关关闭，按普通单回合执行：本次未执行 goal 验收，既不算已验收通过，也不因此判失败。',
   'verify.effortFallback': '推理强度回退：{requested} → {resolved}',
   'verify.thresholdValue': '{value}%',
   // 子任务（父子关系、级联执行、关联/解除关联）。
@@ -515,6 +581,7 @@ export const en: Record<keyof typeof zh, string> = {
   'detail.noSession': 'No session',
   'detail.executionStarted': 'Started',
   'detail.execution.initiator': 'Initiated by session {session}',
+  'detail.execution.external': 'Completed outside this Host by {agent}',
   'detail.executionEnded': 'Ended',
   'detail.result.succeeded': 'Succeeded',
   'detail.result.failed': 'Failed',
@@ -557,7 +624,36 @@ export const en: Record<keyof typeof zh, string> = {
   'detail.schedule.duration.hours': '{count}h',
   'detail.schedule.duration.minutes': '{count}m',
   'detail.schedule.duration.seconds': '{count}s',
+  // Scheduling mode: a one-shot and a recurring rule are two kinds of plan,
+  // not the same cron expression restricted to a date.
+  'detail.schedule.mode': 'Mode',
+  'detail.schedule.mode.cron': 'Recurring',
+  'detail.schedule.mode.once': 'Once',
+  'detail.schedule.at': 'Run at',
+  'detail.schedule.atHint': 'Planned instant, read in the selected zone; it must be in the future.',
+  'detail.schedule.atInvalid': 'Choose a valid future time',
+  'detail.schedule.plannedAt': 'Planned time',
+  'detail.schedule.zoneOnceHint': 'The chosen instant is read in this zone.',
+  'detail.schedule.maxRuns': 'Run limit',
+  'detail.schedule.maxRunsUnlimited': 'Unlimited',
+  'detail.schedule.maxRunsValue': 'At most {count} runs',
+  'detail.schedule.maxRunsCustom': 'Custom',
+  'detail.schedule.maxRunsInvalid': 'The run limit must be a positive whole number',
+  'detail.schedule.runs': 'Ran {done}/{total}',
+  'detail.schedule.runsUnlimited': 'Ran {done}',
+  'detail.schedule.remaining': '{count} left',
+  'detail.schedule.cancel': 'Cancel schedule',
+  'detail.schedule.ended': 'Schedule ended: {reason}',
+  'detail.schedule.skipped': 'Last skip: {reason}',
+  'detail.schedule.stop.fired': 'the one-shot ran',
+  'detail.schedule.stop.limit': 'the run limit was reached',
+  'detail.schedule.stop.no-target': 'the plan has no reachable occurrence',
+  'detail.schedule.stop.missed': 'the instant was missed and skipped',
+  'detail.schedule.stop.busy': 'the task was already running, so the occurrence was skipped',
+  'detail.schedule.stop.permission': 'a permission awaited human confirmation, so the occurrence was skipped',
+  'detail.schedule.stop.launch-failed': 'the launch failed before any execution existed, so the run was refunded',
   'card.scheduled': 'scheduled',
+  'card.scheduledOnce': 'once',
   'new.workspace': 'Workspace',
   'new.agentPreset': 'Agent preset',
   'new.permission': 'Permission',
@@ -587,7 +683,7 @@ export const en: Record<keyof typeof zh, string> = {
   'exec.teamRunUnavailable': 'This deployment serves no Agent Teams service, so team runs cannot be enabled.',
   'exec.reuseSessionHint': 'When on, later runs continue in the previous session (when that session is idle and still exists) instead of starting a new conversation each time; the pinned permission and model above are re-applied on every reuse.',
   'exec.goalRun': "Start the run with dsh's built-in /goal",
-  'exec.goalRunHint': 'On by default: the run arms dsh built-in /goal with the task objective, so the session keeps working automatic continuation rounds until the agent marks the goal complete, and the board settles the execution only when that goal really ends. Off: one plain turn.',
+  'exec.goalRunHint': 'Off by default: when checked, the run arms dsh built-in /goal with the task objective, so the session keeps working automatic continuation rounds until the agent marks the goal complete, and the board settles the execution only when that goal really ends. Unchecked: one plain turn.',
   'exec.skipVerification': 'Skip acceptance for this task',
   'exec.skipVerificationHint': 'Off by default: when checked, a goal-form run of this task no longer gates update_goal on a passing acceptance, and the execution record is marked as skipped. It applies only to executions started afterwards, and means nothing while the board-wide acceptance switch is off.',
   'detail.executionSettings': 'Execution Settings',
@@ -621,9 +717,16 @@ export const en: Record<keyof typeof zh, string> = {
   'settings.unsaved': 'Unsaved',
   'settings.saveFailed': 'The deployment did not accept these values; they were left for you to correct.',
   'settings.invalidNumber': 'Enter a number, or leave blank to use the default.',
+  'settings.sessionPollSeconds': 'Session poll interval (seconds)',
+  'settings.sessionPollSecondsHint': 'Default 5. The Host reads the DSH session roster only while the board has something to reconcile: a running card or an open execution. With neither it stops polling and never re-scans the persisted session directory. Range 1 to 300 seconds: a shorter interval settles runs sooner and costs the Host more.',
   'settings.maxSubtaskDepth': 'Subtask depth limit',
   'settings.maxSubtaskDepthHint': 'Default 1: a task may carry one level of subtasks, and a subtask cannot create or link further subtasks. Maximum 3. Running a task also runs its whole subtask tree concurrently, and every extra level opens more sessions per run.',
   'settings.maxSubtaskDepthOption': '{depth} levels',
+  'settings.runBehaviorTitle': 'Run behavior',
+  'settings.runBehaviorCardHint': 'The global native /goal switch (master control, off by default).',
+  'settings.goalRunGlobal': 'Global: run tasks with dsh native /goal',
+  'settings.goalRunGlobalHint': 'Off by default. While off, every task runs one plain turn and never calls dsh built-in /goal; a run uses native /goal only when this is on AND the task-level option is checked (see the task option below). The task-level checkbox always stays operable and this switch never rewrites it: the master switch only decides whether that choice takes effect. The switch is frozen when an execution starts, so it only affects runs opened afterwards.',
+  'settings.goalRunGlobalDisabledTaskOption': 'The global native /goal switch is off: the task-level option can still be checked or cleared, but it has no effect right now and the preference you save is never rewritten; turning the global switch back on applies it. This execution runs one plain turn and performs no goal acceptance.',
   'settings.goalVerificationTitle': 'Task acceptance',
   'settings.goalVerification': 'Enable task acceptance',
   'settings.goalVerificationCardHint': 'The switch, the judge model and the criteria threshold.',
@@ -653,6 +756,7 @@ export const en: Record<keyof typeof zh, string> = {
   'running.repairing': 'Fixing a failed acceptance',
   'running.verificationPassed': 'Acceptance passed',
   'running.verificationFailed': 'Acceptance failed',
+  'running.verificationInvalid': 'Invalid acceptance, waiting for a human',
   'verify.title': 'Acceptance report',
   'verify.status.passed': 'Passed',
   'verify.status.failed': 'Failed',
@@ -660,6 +764,34 @@ export const en: Record<keyof typeof zh, string> = {
   'verify.status.verifying': 'Verifying',
   'verify.status.pending': 'Not yet verified',
   'verify.status.off': 'Acceptance was off for this execution',
+  'verify.status.invalid': 'Invalid acceptance',
+  'verify.status.invalidHeld': 'Invalid acceptance, waiting for a human',
+  'verify.attemptInvalid': 'Invalid acceptance {index}',
+  'verify.invalidReason.missing-finding': 'A failing criterion carries no structured finding of its own',
+  'verify.invalidReason.unlocatable-quote': 'A finding cites a passage that is not in the evidence the judge saw',
+  'verify.invalidReason.baseline-finding': 'A finding points at the empty-work baseline instead of this execution\'s work',
+  'verify.invalidReason.vacuous-finding': 'A finding is empty or a generic evaluation with no observation or difference',
+  'verify.invalidReason.insufficient-evidence': 'The judge saw too little evidence (for example a truncated trace) to support a veto',
+  'verify.invalidReason.unknown': 'No usable quality verdict was produced',
+  'verify.invalidCounts': 'Valid quality verdicts {quality}/{max} · invalid acceptances {invalid}/{maxInvalid} · anomalies {exceptions}/{max}',
+  'verify.invalidDetail': 'Invalid because: {reason}',
+  'verify.criterionFindings': 'Structured findings (criterion · cited location · verbatim citation)',
+  'verify.criterionFinding': '{criterion} · {location}: "{quote}"',
+  'verify.criterionFindingFull': '{criterion} · {location}: "{quote}" requirement: {requirement} observed: {observation} gap: {gap}',
+  'verify.location.task': 'task statement',
+  'verify.location.trajectory': 'execution trajectory',
+  'verify.location.workspace': 'host-recorded changes',
+  'verify.location.baseline': 'empty-work baseline (not evidence against the work)',
+  'verify.location.unknown': 'location not named',
+  'verify.detailRemoved': 'This attempt detail was cleaned up automatically after the execution passed and settled (the judge did report evidence).',
+  'verify.cleanup.cleaned': 'The acceptance-only detail of this execution was cleaned up automatically after it passed and settled; what remains is the lightweight audit credential.',
+  'verify.cleanup.pending': 'The acceptance-only detail is pending cleanup (started once the execution passes and settles).',
+  'verify.cleanup.failed': 'Cleaning the acceptance detail failed after {attempts} attempts: {error}. The pass record is still valid and the host retries on its next start.',
+  'verify.cleanup.audit': 'Kept credential: attempt {index} · {stage} · score {score} · evidence hash {hash}',
+  'verify.cleanup.stage.quality': 'quality verdict',
+  'verify.cleanup.stage.invalid': 'invalid acceptance',
+  'verify.cleanup.stage.exception': 'acceptance anomaly',
+  'verify.cleanup.stage.budget': 'time budget exhausted',
   'verify.summary': 'Total {score} (threshold {threshold}) · empty-work baseline {baseline}',
   'verify.criteria': 'Per-criterion scores',
   'verify.criterion': '{name}: {score} (threshold {threshold})',
@@ -678,9 +810,10 @@ export const en: Record<keyof typeof zh, string> = {
   'verify.usageIncomplete': ' (at least one request usage is unknown; these counts are a floor)',
   'verify.finalFailure': 'Verdict basis: {reason}',
   'verify.applicability.disabled': 'Acceptance was off when this execution started; it settles on the historical verdict.',
-  'verify.applicability.goalUnavailable': 'This execution never became a goal run (/goal was refused or unavailable), so acceptance was not enforced.',
+  'verify.applicability.goalUnavailable': 'This execution never became a goal run (the card did not check Start with /goal, or /goal was refused or unavailable), so acceptance was not enforced.',
   'verify.applicability.skipped': 'This card checked Skip acceptance, so the execution was never judged.',
   'verify.applicability.teamMember': 'Team member: the Lead team-summary evidence is accepted as one execution.',
+  'verify.applicability.goalDisabled': 'The global native /goal switch was off when this execution started, so it ran one plain turn: no goal acceptance was performed, which neither counts as a pass nor fails the run.',
   'verify.effortFallback': 'Reasoning effort fallback: {requested} → {resolved}',
   'verify.thresholdValue': '{value}%',
   // Subtasks (parent/child links, cascade runs, link/detach).

package/src/client/plugin-card-seat.ts

@@ -86,6 +86,11 @@ export interface PluginCardSeat {
   label?: () => string
   /** Locale namespace the card renders with. */
   locale: string
+  /**
+   * Child slots this card declares and renders. Forwarded to whichever seat
+   * the host renders; absent for a card that declares none.
+   */
+  children?: Record<string, unknown>
   /** Business-face factory of the registration. */
   inject?: () => object
   /**
@@ -162,12 +167,14 @@ export function installPluginCard(ctx: PluginCardContext, seat: PluginCardSeat):
           ...(seat.order === undefined ? {} : { order: seat.order }),
           ...(seat.label === undefined ? {} : { label: seat.label }),
           locale: seat.locale,
+          ...(seat.children === undefined ? {} : { children: seat.children }),
           ...(seat.inject === undefined ? {} : { inject }),
         }
         : {
           name: OFFICIAL_PLUGIN_CARD_SEAT,
           key: seat.bundle,
           locale: seat.locale,
+          ...(seat.children === undefined ? {} : { children: seat.children }),
           ...(seat.inject === undefined ? {} : { inject }),
         }) as never, component) as () => void
       current = target

package/src/client/schedule-zone.ts

@@ -7,8 +7,9 @@
  * the Host schedules with (`core/schedule.ts`), so the preview a user sees is
  * computed by the code that will actually arm the rule.
  */
-import { isValidTimeZone } from '../core/schedule.ts'
-import { t } from './locales.ts'
+import { isValidTimeZone, partsInZone, resolveHostTimeZone, zonedEpoch } from '../core/schedule.ts'
+import { scheduleRunBudget, type ScheduleRule, type ScheduleStopReason } from '../core/tasks.ts'
+import { t, type TaskBoardKey } from './locales.ts'
 
 /** One selectable zone, in the order the picker shows it. */
 export interface ZoneChoice {
@@ -112,6 +113,103 @@ export function relativeTimeLabel(targetMs: number, now: number): string {
   return `${durationParts(delta)}`
 }
 
+/** Zero-pad a calendar/clock field for a `datetime-local` value. */
+function pad(value: number): string {
+  return String(value).padStart(2, '0')
+}
+
+/**
+ * The `datetime-local` input value for an instant, read in an explicit zone:
+ * `YYYY-MM-DDTHH:mm`. Uses the shared engine's zone reader, so the editor
+ * shows the same wall clock the Host schedules by.
+ * @param epochMs - the instant to render.
+ * @param timeZone - zone to read it in; absent uses the Host zone.
+ * @returns the input value.
+ */
+export function zonedInputValue(epochMs: number, timeZone?: string): string {
+  const parts = partsInZone(usableZone(timeZone), epochMs)
+  return `${parts.year}-${pad(parts.month)}-${pad(parts.day)}T${pad(parts.hour)}:${pad(parts.minute)}`
+}
+
+/**
+ * Parse a `datetime-local` input value back to an instant, read in an explicit
+ * zone. Returns undefined when the text is not a whole calendar wall clock or
+ * names one the zone skips (a spring-forward gap), so the editor can refuse an
+ * unusable instant instead of silently moving it.
+ * @param value - the input text.
+ * @param timeZone - zone to interpret it in; absent uses the Host zone.
+ * @returns the instant, or undefined when it is not a usable wall clock.
+ */
+export function parseZonedInput(value: string, timeZone?: string): number | undefined {
+  const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})/.exec(value.trim())
+  if (match === null) return undefined
+  const [year, month, day, hour, minute] = match.slice(1).map(Number)
+  if (month < 1 || month > 12 || day < 1 || day > 31 || hour > 23 || minute > 59) return undefined
+  return zonedEpoch(usableZone(timeZone), year, month, day, hour, minute)
+}
+
+/**
+ * The default instant a new one-shot editor opens on: the next whole hour,
+ * rendered in the zone the rule will be read in.
+ * @param now - reference instant.
+ * @param timeZone - zone the rule is read in.
+ * @returns the input value for a near-future default.
+ */
+export function defaultZonedInputValue(now: number, timeZone?: string): string {
+  const nextHour = Math.ceil(now / 3_600_000) * 3_600_000
+  return zonedInputValue(nextHour, timeZone)
+}
+
+/** The zone the input helpers resolve against: an explicit resolved zone, or the Host zone. */
+function usableZone(timeZone: string | undefined): string {
+  return timeZone !== undefined && isValidTimeZone(timeZone) ? timeZone : resolveHostTimeZone()
+}
+
+/**
+ * The editor's run-cap option for a stored cap: the two named presets, the
+ * unlimited entry, or a custom value the editor shows in its own field.
+ * @param maxRuns - the stored cap, when any.
+ * @returns the select option value.
+ */
+export function runCapOption(maxRuns: number | undefined): string {
+  if (maxRuns === undefined) return 'unlimited'
+  if (maxRuns === 1) return '1'
+  if (maxRuns === 2) return '2'
+  return 'custom'
+}
+
+/** The locale key describing why a rule stopped or skipped an occurrence. */
+export function stopReasonKey(reason: ScheduleStopReason): TaskBoardKey {
+  return `detail.schedule.stop.${reason}` as TaskBoardKey
+}
+
+/**
+ * The run-budget line: how many scheduled executions the Host opened and how
+ * many remain. Derived from the counter and the cap rather than stored, so the
+ * display cannot drift from the ledger.
+ * @param rule - the schedule rule.
+ * @returns localized wording.
+ */
+export function budgetLabel(rule: ScheduleRule): string {
+  const budget = scheduleRunBudget(rule)
+  const done = String(rule.runCount)
+  if (budget === undefined) return t('detail.schedule.runsUnlimited', { done })
+  const remaining = Math.max(budget - rule.runCount, 0)
+  return `${t('detail.schedule.runs', { done, total: String(budget) })} · ${t('detail.schedule.remaining', { count: String(remaining) })}`
+}
+
+/** The line describing a rule that stopped itself, or undefined while it may still fire. */
+export function endedLabel(rule: ScheduleRule): string | undefined {
+  if (rule.endedReason === undefined) return undefined
+  return t('detail.schedule.ended', { reason: t(stopReasonKey(rule.endedReason)) })
+}
+
+/** The line describing the last skipped occurrence, or undefined when none. */
+export function skippedLabel(rule: ScheduleRule): string | undefined {
+  if (rule.skippedReason === undefined) return undefined
+  return t('detail.schedule.skipped', { reason: t(stopReasonKey(rule.skippedReason)) })
+}
+
 /**
  * The full next-run label: the absolute wall clock in the schedule's own zone,
  * plus the relative distance in parentheses. Showing both matters because a

package/src/core/controller.ts

@@ -16,7 +16,7 @@ import { hasOpenExecution, withStatus, type NewTaskInput, type TaskRecord, type
 import { applyArchiveTask, applyRestoreTask } from './use-cases/task-archive.ts'
 import { applyCreateTask } from './use-cases/task-create.ts'
 import { applyDeleteTask } from './use-cases/task-delete.ts'
-import { applyScheduleNextRun as applyScheduleRollForward, applySetSchedule } from './use-cases/task-schedule.ts'
+import { applyScheduleNextRun as applyScheduleRollForward, applySetSchedule, type SetSchedulePatch } from './use-cases/task-schedule.ts'
 import { resolveHostTimeZone } from './schedule.ts'
 import { applySetParent } from './use-cases/task-parent.ts'
 import { applyDeleteTag, applyRenameTag } from './use-cases/task-tag.ts'
@@ -141,7 +141,7 @@ export interface ExecutionOptionsSnapshot {
  * (revision/scheduler/power); a full snapshot also carries the deployment
  * constants the UI reads (session default permission, subtask depth).
  */
-export type HostMirror = Pick<TaskBoardSnapshot, 'revision' | 'scheduler' | 'power' | 'sessionDefaultPermission' | 'maxSubtaskDepth' | 'teamRunAvailable' | 'extensions'>
+export type HostMirror = Pick<TaskBoardSnapshot, 'revision' | 'scheduler' | 'power' | 'sessionDefaultPermission' | 'maxSubtaskDepth' | 'teamRunAvailable' | 'goalRunEnabled' | 'extensions'>
 
 /** Immutable controller snapshot for UI subscriptions. */
 export interface ControllerSnapshot {
@@ -597,15 +597,17 @@ export class BoardController {
   // --- scheduling ---------------------------------------------------------------
 
   /**
-   * Update a task's schedule rule. A blank or invalid cron expression is
-   * rejected (returns false, state untouched). When the rule ends up enabled
-   * the next run instant is computed immediately; a disabled rule carries no
-   * next-run instant. Delegates the domain transition to the schedule use case.
+   * Update a task's schedule rule. An unusable plan (blank or invalid cron, a
+   * one-shot with no future instant, a non-positive run cap) is rejected
+   * (returns false, state untouched). When the rule ends up enabled the next
+   * run instant is computed immediately — a one-shot's next instant IS its
+   * planned instant — and a disabled rule carries none. Delegates the domain
+   * transition to the schedule use case.
    * @param id - the task to schedule.
    * @param patch - fields to change (absent fields keep their current value).
-   * @returns true when applied, false when rejected (invalid cron / unknown task).
+   * @returns true when applied, false when rejected (unknown task / unusable plan).
    */
-  setSchedule(id: string, patch: { enabled?: boolean; cron?: string; timeZone?: string | null }): boolean {
+  setSchedule(id: string, patch: SetSchedulePatch): boolean {
     // The Host zone is the fallback a rule with no stored zone follows: the
     // mirrored snapshot carries it, and a controller without a Host mirror
     // (pure client tests) falls back to the process zone.
@@ -813,6 +815,7 @@ export class BoardController {
     const sessionDefaultPermission = snapshot.sessionDefaultPermission ?? this.hostState?.sessionDefaultPermission
     const maxSubtaskDepth = snapshot.maxSubtaskDepth ?? this.hostState?.maxSubtaskDepth
     const teamRunAvailable = snapshot.teamRunAvailable ?? this.hostState?.teamRunAvailable
+    const goalRunEnabled = snapshot.goalRunEnabled ?? this.hostState?.goalRunEnabled
     const extensions = snapshot.extensions ?? this.hostState?.extensions
     return {
       revision: snapshot.revision,
@@ -821,6 +824,7 @@ export class BoardController {
       ...(sessionDefaultPermission === undefined ? {} : { sessionDefaultPermission }),
       ...(maxSubtaskDepth === undefined ? {} : { maxSubtaskDepth }),
       ...(teamRunAvailable === undefined ? {} : { teamRunAvailable }),
+      ...(goalRunEnabled === undefined ? {} : { goalRunEnabled }),
       ...(extensions === undefined ? {} : { extensions }),
     }
   }