@linxin666/dsh-client-ui-task-board 0.4.5 → 0.4.6

package/lib/client.js

@@ -78,6 +78,28 @@ window.__ModuleLoader__.load({
 			}
 			return Object.keys(result).length === 0 ? void 0 : result;
 		}
+		//#endregion
+		//#region src/core/tasks.ts
+		/** Every stop reason this build understands; the repair and wire gates share it. */
+		const SCHEDULE_STOP_REASONS = [
+			"fired",
+			"limit",
+			"no-target",
+			"missed",
+			"busy",
+			"permission",
+			"launch-failed"
+		];
+		/**
+		* The rule's total run budget: one for a one-shot, the stored cap for a
+		* recurring rule, and undefined when the rule is unlimited.
+		* @param rule - the schedule rule.
+		* @returns the budget, or undefined for an uncapped rule.
+		*/
+		function scheduleRunBudget(rule) {
+			if (rule.mode === "once") return 1;
+			return rule.maxRuns;
+		}
 		/**
 		* Repair a persisted tag list: keep the well-formed entries, trim, drop
 		* blanks and repeats, cap the count, and collapse a blank prompt line to
@@ -274,7 +296,7 @@ window.__ModuleLoader__.load({
 				model: normalizeTargetId(input.model),
 				reuseSession: input.reuseSession === true ? true : void 0,
 				teamRun: input.teamRun === true ? true : void 0,
-				goalRun: input.goalRun === false ? false : void 0,
+				goalRun: input.goalRun === true ? true : void 0,
 				skipVerification: input.skipVerification === true ? true : void 0,
 				...input.freeze === void 0 ? {} : { freeze: freezeOf(input.freeze, now) },
 				...input.handover === void 0 ? {} : { handover: {
@@ -294,27 +316,47 @@ window.__ModuleLoader__.load({
 				updatedAt: now
 			};
 		}
+		/** Every field a schedule patch may carry; the rest of the rule is carried over. */
+		const SCHEDULE_PATCH_KEYS = [
+			"enabled",
+			"mode",
+			"cron",
+			"at",
+			"timeZone",
+			"nextRunAt",
+			"lastTriggeredAt",
+			"runCount",
+			"maxRuns",
+			"endedAt",
+			"endedReason",
+			"skippedAt",
+			"skippedReason"
+		];
 		/**
 		* Merge a schedule patch into a task's schedule rule (creating it when
 		* absent), with a fresh updatedAt. Keys present in the patch overwrite the
 		* current value — including explicit `undefined`, which clears a field (used
-		* to disarm `nextRunAt`); absent keys keep their current value.
+		* to disarm `nextRunAt` or to drop an ended/skip record); absent keys keep
+		* their current value.
 		*/
 		function withSchedule(task, patch, now) {
-			const current = task.schedule;
-			const schedule = {
-				enabled: current?.enabled ?? false,
-				cron: current?.cron ?? "",
-				...current?.timeZone === void 0 ? {} : { timeZone: current.timeZone },
-				nextRunAt: current?.nextRunAt,
-				lastTriggeredAt: current?.lastTriggeredAt
-			};
-			if ("enabled" in patch) schedule.enabled = patch.enabled ?? false;
-			if ("cron" in patch) schedule.cron = patch.cron ?? "";
-			if ("timeZone" in patch) if (patch.timeZone === void 0) delete schedule.timeZone;
-			else schedule.timeZone = patch.timeZone;
-			if ("nextRunAt" in patch) schedule.nextRunAt = patch.nextRunAt;
-			if ("lastTriggeredAt" in patch) schedule.lastTriggeredAt = patch.lastTriggeredAt;
+			const schedule = task.schedule === void 0 ? {
+				enabled: false,
+				mode: "cron",
+				nextRunAt: void 0,
+				lastTriggeredAt: void 0,
+				runCount: 0
+			} : { ...task.schedule };
+			const fields = schedule;
+			const next = patch;
+			for (const key of SCHEDULE_PATCH_KEYS) {
+				if (!(key in patch)) continue;
+				if (next[key] === void 0) delete fields[key];
+				else fields[key] = next[key];
+			}
+			if (schedule.enabled !== true) schedule.enabled = false;
+			if (schedule.mode !== "once") schedule.mode = "cron";
+			if (!Number.isFinite(schedule.runCount) || schedule.runCount < 0) schedule.runCount = 0;
 			return {
 				...task,
 				updatedAt: now,
@@ -889,21 +931,49 @@ window.__ModuleLoader__.load({
 				model: input.model ?? parent.model
 			}, now, id);
 			const requested = input.schedule;
-			if (requested?.enabled === true && requested.cron.trim() !== "" && isValidCron(requested.cron)) {
-				const cron = requested.cron.trim();
+			if (requested?.enabled === true) {
 				const requestedZone = requested.timeZone;
 				if (requestedZone !== void 0 && !isValidTimeZone(requestedZone)) return {
 					task: void 0,
 					tasks,
 					error: "invalid schedule time zone"
 				};
-				const nextRunAt = nextRunAtMs(cron, now, requestedZone ?? hostTimeZone);
-				if (nextRunAt !== void 0) task = withSchedule(task, {
-					enabled: true,
-					cron,
-					timeZone: requestedZone,
-					nextRunAt
-				}, now);
+				if (requested.mode === "once") {
+					const at = requested.at;
+					if (at === void 0 || !Number.isInteger(at) || at <= now) return {
+						task: void 0,
+						tasks,
+						error: "invalid schedule instant"
+					};
+					task = withSchedule(task, {
+						enabled: true,
+						mode: "once",
+						at,
+						timeZone: requestedZone,
+						nextRunAt: at,
+						runCount: 0
+					}, now);
+				} else {
+					const cron = (requested.cron ?? "").trim();
+					if (cron !== "" && isValidCron(cron)) {
+						const maxRuns = requested.maxRuns;
+						if (maxRuns !== void 0 && (!Number.isInteger(maxRuns) || maxRuns < 1)) return {
+							task: void 0,
+							tasks,
+							error: "invalid schedule run cap"
+						};
+						const nextRunAt = nextRunAtMs(cron, now, requestedZone ?? hostTimeZone);
+						if (nextRunAt !== void 0) task = withSchedule(task, {
+							enabled: true,
+							mode: "cron",
+							cron,
+							maxRuns,
+							timeZone: requestedZone,
+							nextRunAt,
+							runCount: 0
+						}, now);
+					}
+				}
 			}
 			return {
 				task,
@@ -934,16 +1004,30 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/core/use-cases/task-schedule.ts
 		/**
-		* Schedule use case: arm/disarm a task's cron rule and roll a rule forward.
-		* Pure ledger transitions (no persistence or notify — the controller
-		* orchestrates those). Validation and next-run computation live here, sharing
-		* the core cron parser (schedule.ts) and the withSchedule transition.
-		*/
-		/**
-		* Set an on-board task's schedule rule. A blank or invalid cron, an unknown or
-		* archived task, or an unusable zone is rejected (state untouched); an enabled
-		* rule computes the next run instant immediately in the rule's own zone, a
-		* disabled one carries no next-run instant.
+		* Schedule use cases: arm/disarm a task's scheduling rule, and record what a
+		* due occurrence did to it. Pure ledger transitions (no persistence or notify
+		* — the controller orchestrates those). Validation and next-run computation
+		* live here, sharing the core cron parser (schedule.ts) and the withSchedule
+		* transition.
+		*
+		* A rule is either a recurring cron rule or a single planned instant, and
+		* either kind may be capped by a run budget. The counter (`runCount`) moves
+		* only when the Host actually opened an execution; a skipped occurrence
+		* (busy, unconfirmed permission, missed instant, unreachable plan) moves the
+		* rule without consuming its budget.
+		*/
+		/**
+		* Set an on-board task's scheduling rule. An unknown or archived task, an
+		* unusable zone, a blank or invalid cron, a one-shot with no usable instant,
+		* a one-shot armed in the past, and a run cap that is not a positive integer
+		* are all rejected (state untouched). An enabled rule computes its next run
+		* instant immediately — a one-shot's next instant IS its planned instant — and
+		* a disabled rule carries none.
+		*
+		* Arming a rule that was not enabled, or switching its kind, starts a fresh
+		* budget: the run counter and any previous stop/skip record are cleared. Edits
+		* to a live rule (expression, zone, cap) keep the consumed count, so an
+		* already-spent budget can never silently reset and overrun.
 		* @param tasks - current ledger.
 		* @param id - the task to schedule.
 		* @param patch - rule fields to change (absent fields keep their current value).
@@ -957,36 +1041,91 @@ window.__ModuleLoader__.load({
 				applied: false
 			};
 			const current = task.schedule;
+			const mode = patch.mode ?? current?.mode ?? "cron";
+			const timeZone = patch.timeZone === void 0 ? current?.timeZone : patch.timeZone ?? void 0;
+			if (timeZone !== void 0 && !isValidTimeZone(timeZone)) return {
+				tasks,
+				applied: false
+			};
+			const enabled = patch.enabled ?? current?.enabled ?? false;
+			const restart = enabled && current?.enabled !== true || (current?.mode ?? "cron") !== mode;
+			const runCount = restart ? 0 : current?.runCount ?? 0;
+			const effectiveZone = timeZone ?? hostTimeZone;
+			const cleared = restart ? {
+				endedAt: void 0,
+				endedReason: void 0,
+				skippedAt: void 0,
+				skippedReason: void 0
+			} : {
+				endedAt: current?.endedAt,
+				endedReason: current?.endedReason,
+				skippedAt: current?.skippedAt,
+				skippedReason: current?.skippedReason
+			};
+			if (mode === "once") {
+				const at = patch.at ?? current?.at;
+				if (at === void 0 || !Number.isInteger(at)) return {
+					tasks,
+					applied: false
+				};
+				if (enabled && at <= now) return {
+					tasks,
+					applied: false
+				};
+				return {
+					tasks: tasks.map((candidate) => candidate.id !== id ? candidate : withSchedule(candidate, {
+						enabled,
+						mode: "once",
+						at,
+						cron: void 0,
+						maxRuns: void 0,
+						timeZone: timeZone ?? void 0,
+						nextRunAt: enabled ? at : void 0,
+						runCount,
+						...cleared
+					}, now)),
+					applied: true
+				};
+			}
 			const cron = (patch.cron ?? current?.cron ?? "").trim();
 			if (cron === "" || !isValidCron(cron)) return {
 				tasks,
 				applied: false
 			};
-			const requestedZone = patch.timeZone === void 0 ? current?.timeZone : patch.timeZone ?? void 0;
-			if (requestedZone !== void 0 && !isValidTimeZone(requestedZone)) return {
+			const maxRuns = ("maxRuns" in patch ? patch.maxRuns : current?.maxRuns) ?? void 0;
+			if (maxRuns !== void 0 && (!Number.isInteger(maxRuns) || maxRuns < 1)) return {
 				tasks,
 				applied: false
 			};
-			const enabled = patch.enabled ?? current?.enabled ?? false;
-			const nextRunAt = enabled ? nextRunAtMs(cron, now, requestedZone ?? hostTimeZone) : void 0;
-			if (enabled && nextRunAt === void 0) return {
+			const spent = maxRuns !== void 0 && runCount >= maxRuns;
+			const armed = enabled && !spent;
+			const nextRunAt = armed ? nextRunAtMs(cron, now, effectiveZone) : void 0;
+			if (armed && nextRunAt === void 0) return {
 				tasks,
 				applied: false
 			};
+			const exhausted = enabled && spent;
 			return {
-				tasks: tasks.map((candidate) => candidate.id === id ? withSchedule(candidate, {
-					enabled,
+				tasks: tasks.map((candidate) => candidate.id !== id ? candidate : withSchedule(candidate, {
+					enabled: armed,
+					mode: "cron",
 					cron,
-					timeZone: requestedZone ?? void 0,
-					nextRunAt
-				}, now) : candidate),
+					at: void 0,
+					maxRuns,
+					timeZone: timeZone ?? void 0,
+					nextRunAt,
+					runCount,
+					...exhausted ? {
+						endedAt: now,
+						endedReason: "limit"
+					} : cleared
+				}, now)),
 				applied: true
 			};
 		}
 		/**
-		* Roll a task's schedule rule forward (scheduler callback): persist the next
-		* due instant and the trigger instant. No-op for tasks without a rule (deleted
-		* mid-tick, for example).
+		* Roll a task's schedule rule forward (legacy pure-controller seam): persist
+		* the next due instant and the trigger instant. No-op for tasks without a rule.
 		* @param tasks - current ledger.
 		* @param id - the task to roll forward.
 		* @param nextRunAt - next due instant (may be undefined to clear).
@@ -1258,7 +1397,7 @@ window.__ModuleLoader__.load({
 				if ("permission" in patch && patch.permission !== void 0 && patch.permission !== task.permission || "handover" in patch) next.permissionConfirmedAt = void 0;
 				if ("reuseSession" in patch) next.reuseSession = patch.reuseSession === true ? true : void 0;
 				if ("teamRun" in patch) next.teamRun = patch.teamRun === true ? true : void 0;
-				if ("goalRun" in patch) next.goalRun = patch.goalRun === false ? false : void 0;
+				if ("goalRun" in patch) next.goalRun = patch.goalRun === true ? true : void 0;
 				if ("skipVerification" in patch) next.skipVerification = patch.skipVerification === true ? true : void 0;
 				if (workspaceId !== void 0 || "workspaceId" in patch) next.workspaceId = workspaceId;
 				if (mode !== void 0 || "mode" in patch) next.mode = mode;
@@ -1673,13 +1812,15 @@ window.__ModuleLoader__.load({
 				return true;
 			}
 			/**
-			* Update a task's schedule rule. A blank or invalid cron expression is
-			* rejected (returns false, state untouched). When the rule ends up enabled
-			* the next run instant is computed immediately; a disabled rule carries no
-			* next-run instant. Delegates the domain transition to the schedule use case.
+			* Update a task's schedule rule. An unusable plan (blank or invalid cron, a
+			* one-shot with no future instant, a non-positive run cap) is rejected
+			* (returns false, state untouched). When the rule ends up enabled the next
+			* run instant is computed immediately — a one-shot's next instant IS its
+			* planned instant — and a disabled rule carries none. Delegates the domain
+			* transition to the schedule use case.
 			* @param id - the task to schedule.
 			* @param patch - fields to change (absent fields keep their current value).
-			* @returns true when applied, false when rejected (invalid cron / unknown task).
+			* @returns true when applied, false when rejected (unknown task / unusable plan).
 			*/
 			setSchedule(id, patch) {
 				const hostTimeZone = this.hostState?.scheduler.timeZone ?? resolveHostTimeZone();
@@ -1879,6 +2020,7 @@ window.__ModuleLoader__.load({
 				const sessionDefaultPermission = snapshot.sessionDefaultPermission ?? this.hostState?.sessionDefaultPermission;
 				const maxSubtaskDepth = snapshot.maxSubtaskDepth ?? this.hostState?.maxSubtaskDepth;
 				const teamRunAvailable = snapshot.teamRunAvailable ?? this.hostState?.teamRunAvailable;
+				const goalRunEnabled = snapshot.goalRunEnabled ?? this.hostState?.goalRunEnabled;
 				const extensions = snapshot.extensions ?? this.hostState?.extensions;
 				return {
 					revision: snapshot.revision,
@@ -1887,6 +2029,7 @@ window.__ModuleLoader__.load({
 					...sessionDefaultPermission === void 0 ? {} : { sessionDefaultPermission },
 					...maxSubtaskDepth === void 0 ? {} : { maxSubtaskDepth },
 					...teamRunAvailable === void 0 ? {} : { teamRunAvailable },
+					...goalRunEnabled === void 0 ? {} : { goalRunEnabled },
 					...extensions === void 0 ? {} : { extensions }
 				};
 			}
@@ -2210,6 +2353,19 @@ window.__ModuleLoader__.load({
 		function exceptionAttempts(verification) {
 			return verification === void 0 ? [] : verification.attempts.filter((attempt) => attempt.stage === "exception");
 		}
+		/**
+		* Invalid acceptances spent by this cycle: a veto whose required evidence was
+		* missing, unlocatable, or aimed at the empty-work baseline. They are NOT
+		* quality verdicts, so they never close the cycle and never fail the card; the
+		* bound is what keeps an evidence-free judge from re-running forever.
+		*/
+		function invalidAttempts(verification) {
+			return verification === void 0 ? [] : verification.attempts.filter((attempt) => attempt.stage === "invalid");
+		}
+		/** Whether this cycle still has invalid-acceptance budget left. */
+		function hasInvalidBudget(verification) {
+			return invalidAttempts(verification).length < 2;
+		}
 		/** The quality attempt that passed, when one did. */
 		function passedAttempt(verification) {
 			return qualityAttempts(verification).find((attempt) => attempt.passed);
@@ -2225,7 +2381,7 @@ window.__ModuleLoader__.load({
 			if (verification.failedReason !== void 0) return "failed";
 			if (passedAttempt(verification) !== void 0) return "passed";
 			if (verification.inFlight === true) return "verifying";
-			if (qualityAttempts(verification).length === 0) return "executing";
+			if (qualityAttempts(verification).length === 0) return hasInvalidBudget(verification) ? "executing" : "invalid";
 			return hasQualityBudget(verification) ? "repairing" : "failed";
 		}
 		/** Whether an unknown value carries every field a persisted attempt needs. */
@@ -2233,7 +2389,7 @@ window.__ModuleLoader__.load({
 			if (typeof value !== "object" || value === null) return void 0;
 			const row = value;
 			if (typeof row.index !== "number" || typeof row.at !== "number") return void 0;
-			if (row.stage !== "quality" && row.stage !== "exception") return void 0;
+			if (row.stage !== "quality" && row.stage !== "exception" && row.stage !== "budget" && row.stage !== "invalid") return void 0;
 			if (typeof row.passed !== "boolean") return void 0;
 			if (typeof row.score !== "number" || !Number.isFinite(row.score)) return void 0;
 			if (typeof row.baseline !== "number" || !Number.isFinite(row.baseline)) return void 0;
@@ -2268,7 +2424,18 @@ window.__ModuleLoader__.load({
 			const routeRow = route;
 			if (typeof routeRow.provider !== "string" || typeof routeRow.model !== "string") return void 0;
 			if (routeRow.reasoningEffort !== void 0 && typeof routeRow.reasoningEffort !== "string") return void 0;
-			const findings = Array.isArray(row.findings) ? row.findings.filter((item) => typeof item === "string") : [];
+			const findings = (Array.isArray(row.findings) ? row.findings : []).filter((item) => typeof item === "string").slice(0, 12).map((item) => clipRead(item, 400));
+			const criterionFindings = [];
+			if (Array.isArray(row.criterionFindings)) {
+				if (row.criterionFindings.length > 12) return void 0;
+				for (const entry of row.criterionFindings) {
+					const finding = readCriterionFinding(entry);
+					if (finding === void 0) return void 0;
+					criterionFindings.push(finding);
+				}
+			}
+			const invalidReason = row.invalidReason;
+			if (invalidReason !== void 0 && invalidReason !== "missing-finding" && invalidReason !== "unlocatable-quote" && invalidReason !== "baseline-finding" && invalidReason !== "vacuous-finding" && invalidReason !== "insufficient-evidence") return void 0;
 			return {
 				index: row.index,
 				at: row.at,
@@ -2301,7 +2468,51 @@ window.__ModuleLoader__.load({
 				},
 				channel: "explicit-tag",
 				rounds: typeof row.rounds === "number" ? row.rounds : 2,
-				...typeof row.error === "string" ? { error: row.error } : {}
+				...typeof row.error === "string" ? { error: row.error } : {},
+				...criterionFindings.length === 0 ? {} : { criterionFindings },
+				...typeof invalidReason === "string" ? { invalidReason } : {}
+			};
+		}
+		/**
+		* Bound one persisted finding's text to what the acceptance itself would have
+		* written.
+		*
+		* The reader is the only other door into the ledger: a hand-edited or
+		* corrupted document could otherwise carry a megabyte of prose in a field the
+		* writer caps at a few hundred characters, and every later render, audit
+		* summary and cleanup pass would pay for it. Clipping on READ (never rejecting)
+		* keeps the block usable and its capacity bounded: the acceptance-only material
+		* the cleanup removes is bounded by construction on both sides.
+		* @param value - the raw persisted text.
+		* @param max - the cap the writer applies to that field.
+		* @returns the bounded text.
+		*/
+		function clipRead(value, max) {
+			return value.length <= max ? value : value.slice(0, max);
+		}
+		/**
+		* Repair one persisted structured finding, or undefined when it is unusable.
+		* A malformed finding drops the WHOLE acceptance block (fail closed): a
+		* persisted veto that cannot be read back could otherwise be counted as
+		* evidence it no longer holds.
+		*/
+		function readCriterionFinding(value) {
+			if (typeof value !== "object" || value === null) return void 0;
+			const row = value;
+			if (typeof row.criterionId !== "string" || row.criterionId === "") return void 0;
+			if (typeof row.requirement !== "string" || typeof row.observation !== "string" || typeof row.gap !== "string") return void 0;
+			if (typeof row.quote !== "string") return void 0;
+			if (row.criterionId.length > 64) return void 0;
+			const location = row.location;
+			if (location !== "task" && location !== "trajectory" && location !== "workspace" && location !== "baseline" && location !== "unknown") return void 0;
+			return {
+				criterionId: row.criterionId,
+				requirement: clipRead(row.requirement, 400),
+				observation: clipRead(row.observation, 400),
+				gap: clipRead(row.gap, 400),
+				quote: clipRead(row.quote, 600),
+				location,
+				...typeof row.action === "string" ? { action: clipRead(row.action, 400) } : {}
 			};
 		}
 		/**
@@ -2349,7 +2560,7 @@ window.__ModuleLoader__.load({
 				};
 			}
 			const applicability = row.applicability;
-			if (applicability !== "enforced" && applicability !== "disabled" && applicability !== "skipped" && applicability !== "goal-unavailable" && applicability !== "team-member") return void 0;
+			if (applicability !== "enforced" && applicability !== "disabled" && applicability !== "skipped" && applicability !== "goal-unavailable" && applicability !== "team-member" && applicability !== "goal-disabled") return void 0;
 			const attempts = [];
 			if (!Array.isArray(row.attempts)) return void 0;
 			for (const entry of row.attempts) {
@@ -2358,6 +2569,8 @@ window.__ModuleLoader__.load({
 				attempts.push(attempt);
 			}
 			if (typeof row.failedReason === "string" && row.failedReason === "") return void 0;
+			const cleanup = readCleanupRecord(row.cleanup);
+			if (row.cleanup !== void 0 && cleanup === void 0) return void 0;
 			return {
 				contract: {
 					enabled: contractRow.enabled,
@@ -2372,7 +2585,98 @@ window.__ModuleLoader__.load({
 				...row.inFlight === true ? { inFlight: true } : {},
 				applicability,
 				...typeof row.failedReason === "string" ? { failedReason: row.failedReason } : {},
-				...typeof row.failedAt === "number" && Number.isFinite(row.failedAt) ? { failedAt: row.failedAt } : {}
+				...typeof row.failedAt === "number" && Number.isFinite(row.failedAt) ? { failedAt: row.failedAt } : {},
+				...cleanup === void 0 ? {} : { cleanup }
+			};
+		}
+		/**
+		* Repair the persisted cleanup record, or undefined when it is unusable. The
+		* record is the audit trail the UI reads to tell "the judge gave its evidence
+		* and it was cleaned up" apart from "the judge produced no evidence at all",
+		* so a malformed one drops the whole block (fail closed).
+		*/
+		function readCleanupRecord(value) {
+			if (typeof value !== "object" || value === null) return void 0;
+			const row = value;
+			if (row.state !== "pending" && row.state !== "cleaned" && row.state !== "failed") return void 0;
+			if (typeof row.attempts !== "number" || !Number.isInteger(row.attempts) || row.attempts < 0) return void 0;
+			if (typeof row.startedAt !== "number" || !Number.isFinite(row.startedAt)) return void 0;
+			if (row.cleanedAt !== void 0 && (typeof row.cleanedAt !== "number" || !Number.isFinite(row.cleanedAt))) return void 0;
+			if (row.lastError !== void 0 && typeof row.lastError !== "string") return void 0;
+			if (!Array.isArray(row.audit)) return void 0;
+			const audit = [];
+			for (const entry of row.audit) {
+				const parsed = readAuditRecord(entry);
+				if (parsed === void 0) return void 0;
+				audit.push(parsed);
+			}
+			return {
+				state: row.state,
+				attempts: row.attempts,
+				startedAt: row.startedAt,
+				...typeof row.cleanedAt === "number" ? { cleanedAt: row.cleanedAt } : {},
+				...typeof row.lastError === "string" ? { lastError: row.lastError } : {},
+				audit
+			};
+		}
+		/** Repair one persisted audit credential, or undefined when it is unusable. */
+		function readAuditRecord(value) {
+			if (typeof value !== "object" || value === null) return void 0;
+			const row = value;
+			if (row.stage !== "quality" && row.stage !== "exception" && row.stage !== "budget" && row.stage !== "invalid") return void 0;
+			if (typeof row.passed !== "boolean") return void 0;
+			if (typeof row.at !== "number" || !Number.isFinite(row.at)) return void 0;
+			if (typeof row.score !== "number" || !Number.isFinite(row.score)) return void 0;
+			if (typeof row.baseline !== "number" || !Number.isFinite(row.baseline)) return void 0;
+			if (!Array.isArray(row.criteria)) return void 0;
+			const criteria = [];
+			for (const entry of row.criteria) {
+				if (typeof entry !== "object" || entry === null) return void 0;
+				const criterion = entry;
+				if (typeof criterion.id !== "string" || typeof criterion.name !== "string") return void 0;
+				if (typeof criterion.score !== "number" || !Number.isFinite(criterion.score)) return void 0;
+				if (typeof criterion.baseline !== "number" || !Number.isFinite(criterion.baseline)) return void 0;
+				if (typeof criterion.threshold !== "number" || !Number.isFinite(criterion.threshold)) return void 0;
+				criteria.push({
+					id: criterion.id,
+					name: criterion.name,
+					score: criterion.score,
+					baseline: criterion.baseline,
+					threshold: criterion.threshold,
+					passed: criterion.passed === true
+				});
+			}
+			if (typeof row.evidenceHash !== "string") return void 0;
+			const route = row.route;
+			if (typeof route !== "object" || route === null) return void 0;
+			const routeRow = route;
+			if (typeof routeRow.provider !== "string" || typeof routeRow.model !== "string") return void 0;
+			const usage = row.usage;
+			if (typeof usage !== "object" || usage === null) return void 0;
+			const usageRow = usage;
+			if (typeof usageRow.calls !== "number" || typeof usageRow.inputTokens !== "number" || typeof usageRow.outputTokens !== "number" || typeof usageRow.reasoningTokens !== "number") return void 0;
+			return {
+				stage: row.stage,
+				passed: row.passed,
+				at: row.at,
+				score: row.score,
+				baseline: row.baseline,
+				criteria,
+				evidenceHash: row.evidenceHash,
+				route: {
+					provider: routeRow.provider,
+					model: routeRow.model,
+					...typeof routeRow.reasoningEffort === "string" ? { reasoningEffort: routeRow.reasoningEffort } : {}
+				},
+				...typeof row.error === "string" ? { error: row.error } : {},
+				...typeof row.findingSummary === "string" ? { findingSummary: row.findingSummary } : {},
+				usage: {
+					calls: usageRow.calls,
+					inputTokens: usageRow.inputTokens,
+					outputTokens: usageRow.outputTokens,
+					reasoningTokens: usageRow.reasoningTokens,
+					...usageRow.usageIncomplete === true ? { usageIncomplete: true } : {}
+				}
 			};
 		}
 		/** Sum the attempts of one execution. */
@@ -2380,6 +2684,7 @@ window.__ModuleLoader__.load({
 			const totals = {
 				quality: 0,
 				exceptions: 0,
+				invalid: 0,
 				calls: 0,
 				inputTokens: 0,
 				outputTokens: 0,
@@ -2389,6 +2694,7 @@ window.__ModuleLoader__.load({
 			if (verification === void 0) return totals;
 			for (const attempt of verification.attempts) {
 				if (attempt.stage === "quality") totals.quality += 1;
+				else if (attempt.stage === "invalid") totals.invalid += 1;
 				else totals.exceptions += 1;
 				totals.calls += attempt.usage.calls;
 				totals.inputTokens += attempt.usage.inputTokens;
@@ -2526,6 +2832,7 @@ window.__ModuleLoader__.load({
 				if (entry.initiatedBy !== void 0 && typeof entry.initiatedBy !== "string") return false;
 				if (entry.frozenBy !== void 0 && typeof entry.frozenBy !== "string") return false;
 				if (entry.frozenAt !== void 0 && typeof entry.frozenAt !== "number") return false;
+				if (entry.external !== void 0 && typeof entry.external !== "boolean") return false;
 				if (entry.verification !== void 0 && normalizeVerification(entry.verification) === void 0) return false;
 			}
 			return true;
@@ -2534,23 +2841,62 @@ window.__ModuleLoader__.load({
 		function normalizeStatus(status) {
 			return isTaskStatus(status) ? status : "todo";
 		}
+		/** A persisted ms timestamp, kept only when it is a usable finite number. */
+		function optionalInstant(value) {
+			return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+		}
+		/** A persisted positive-integer run cap, or undefined for unlimited/repair. */
+		function optionalRunCap(value) {
+			return typeof value === "number" && Number.isInteger(value) && value >= 1 ? value : void 0;
+		}
+		/** A persisted stop reason, kept only when it names a reason this build knows. */
+		function optionalStopReason(value) {
+			return typeof value === "string" && SCHEDULE_STOP_REASONS.includes(value) ? value : void 0;
+		}
 		/**
-		* Repair a persisted schedule rule: drop rules without a usable cron string,
-		* coerce booleans/numbers, and leave `nextRunAt`/`lastTriggeredAt` undefined
-		* when missing (a fresh recompute or the next tick fixes them).
+		* Repair a persisted schedule rule. Both modes are repaired field by field and
+		* a rule that carries no usable plan is dropped (the task row survives):
+		* a recurring rule without a well-formed 5-field cron, or a one-shot without a
+		* finite planned instant. A rule written before `mode` existed is a cron rule.
 		*/
 		function normalizeSchedule(schedule) {
 			if (typeof schedule !== "object" || schedule === null) return void 0;
 			const rule = schedule;
+			const timeZone = typeof rule.timeZone === "string" && isValidTimeZone(rule.timeZone) ? rule.timeZone : void 0;
+			const runCountValue = rule.runCount;
+			const runCount = typeof runCountValue === "number" && Number.isInteger(runCountValue) && runCountValue >= 0 ? runCountValue : 0;
+			const endedAt = optionalInstant(rule.endedAt);
+			const endedReason = optionalStopReason(rule.endedReason);
+			const skippedAt = optionalInstant(rule.skippedAt);
+			const skippedReason = optionalStopReason(rule.skippedReason);
+			const common = {
+				enabled: rule.enabled === true,
+				...timeZone === void 0 ? {} : { timeZone },
+				nextRunAt: optionalInstant(rule.nextRunAt),
+				lastTriggeredAt: optionalInstant(rule.lastTriggeredAt),
+				runCount,
+				...endedAt === void 0 ? {} : { endedAt },
+				...endedReason === void 0 ? {} : { endedReason },
+				...skippedAt === void 0 ? {} : { skippedAt },
+				...skippedReason === void 0 ? {} : { skippedReason }
+			};
+			if (rule.mode === "once") {
+				const at = optionalInstant(rule.at);
+				if (at === void 0) return void 0;
+				return {
+					...common,
+					mode: "once",
+					at
+				};
+			}
 			if (typeof rule.cron !== "string") return void 0;
 			if (rule.cron.trim() === "" || !isValidCron(rule.cron)) return void 0;
-			const timeZone = typeof rule.timeZone === "string" && isValidTimeZone(rule.timeZone) ? rule.timeZone : void 0;
+			const maxRuns = optionalRunCap(rule.maxRuns);
 			return {
-				enabled: rule.enabled === true,
+				...common,
+				mode: "cron",
 				cron: rule.cron,
-				...timeZone === void 0 ? {} : { timeZone },
-				nextRunAt: typeof rule.nextRunAt === "number" ? rule.nextRunAt : void 0,
-				lastTriggeredAt: typeof rule.lastTriggeredAt === "number" ? rule.lastTriggeredAt : void 0
+				...maxRuns === void 0 ? {} : { maxRuns }
 			};
 		}
 		/**
@@ -2627,14 +2973,15 @@ window.__ModuleLoader__.load({
 					runGroupId: normalizeTargetId(execution.runGroupId),
 					ownResult: isExecutionOutcome(execution.ownResult) ? execution.ownResult : void 0,
 					ownError: typeof execution.ownError === "string" ? execution.ownError : void 0,
-					verification: normalizeVerification(execution.verification)
+					verification: normalizeVerification(execution.verification),
+					external: execution.external === true ? true : void 0
 				}));
 				task.workspaceId = normalizeTargetId(row.workspaceId);
 				task.mode = normalizeTargetId(row.mode);
 				task.archivedAt = typeof row.archivedAt === "number" && Number.isFinite(row.archivedAt) ? row.archivedAt : void 0;
 				task.permission = isTaskPermission(row.permission) ? row.permission : void 0;
 				task.reuseSession = row.reuseSession === true ? true : void 0;
-				task.goalRun = row.goalRun === false ? false : void 0;
+				task.goalRun = row.goalRun === true ? true : void 0;
 				task.skipVerification = row.skipVerification === true ? true : void 0;
 				task.freeze = normalizeFreeze(row.freeze);
 				task.handover = normalizeHandover(row.handover);
@@ -2877,6 +3224,7 @@ window.__ModuleLoader__.load({
 			"detail.noSession": "暂无会话",
 			"detail.executionStarted": "已启动",
 			"detail.execution.initiator": "发起会话 {session}",
+			"detail.execution.external": "Host 之外完成：{agent}",
 			"detail.executionEnded": "已结束",
 			"detail.result.succeeded": "成功",
 			"detail.result.failed": "失败",
@@ -2919,7 +3267,34 @@ window.__ModuleLoader__.load({
 			"detail.schedule.duration.hours": "{count} 小时",
 			"detail.schedule.duration.minutes": "{count} 分钟",
 			"detail.schedule.duration.seconds": "{count} 秒",
+			"detail.schedule.mode": "调度方式",
+			"detail.schedule.mode.cron": "循环",
+			"detail.schedule.mode.once": "单次",
+			"detail.schedule.at": "执行时间",
+			"detail.schedule.atHint": "按所选时区解读的计划时刻；必须是未来时间。",
+			"detail.schedule.atInvalid": "请选择未来的有效时间",
+			"detail.schedule.plannedAt": "计划时间",
+			"detail.schedule.zoneOnceHint": "所选时刻按此时区解读。",
+			"detail.schedule.maxRuns": "次数上限",
+			"detail.schedule.maxRunsUnlimited": "不限次数",
+			"detail.schedule.maxRunsValue": "最多 {count} 次",
+			"detail.schedule.maxRunsCustom": "自定义",
+			"detail.schedule.maxRunsInvalid": "次数上限必须是正整数",
+			"detail.schedule.runs": "已执行 {done}/{total} 次",
+			"detail.schedule.runsUnlimited": "已执行 {done} 次",
+			"detail.schedule.remaining": "剩余 {count} 次",
+			"detail.schedule.cancel": "关闭调度",
+			"detail.schedule.ended": "调度已结束：{reason}",
+			"detail.schedule.skipped": "上次跳过：{reason}",
+			"detail.schedule.stop.fired": "单次计划已执行",
+			"detail.schedule.stop.limit": "已达次数上限",
+			"detail.schedule.stop.no-target": "计划已无可执行时刻",
+			"detail.schedule.stop.missed": "错过执行时刻，已跳过",
+			"detail.schedule.stop.busy": "触发时任务正在运行，已跳过",
+			"detail.schedule.stop.permission": "权限待人工确认，已跳过",
+			"detail.schedule.stop.launch-failed": "启动失败未创建执行，次数已退回",
 			"card.scheduled": "定时",
+			"card.scheduledOnce": "单次",
 			"new.workspace": "工作区",
 			"new.agentPreset": "Agent 预设",
 			"new.permission": "权限",
@@ -2949,7 +3324,7 @@ window.__ModuleLoader__.load({
 			"exec.teamRunUnavailable": "当前部署未提供 Agent Teams 服务，无法启用。",
 			"exec.reuseSessionHint": "开启后，本任务的后续执行在上一次会话里继续（该会话空闲且仍存在时），不再每次新建对话；每次复用时都会重新应用上面钉住的权限与模型。",
 			"exec.goalRun": "以 dsh 内置的 /goal 开始执行任务",
-			"exec.goalRunHint": "默认开启：执行时把任务目标作为持久目标交给 dsh 内置的 /goal，会话会自动续跑多轮，直到 agent 标记目标完成；看板在该目标真正结束后才结算本次执行。关闭则只执行一轮普通对话。",
+			"exec.goalRunHint": "默认关闭：勾选后执行时把任务目标作为持久目标交给 dsh 内置的 /goal，会话会自动续跑多轮，直到 agent 标记目标完成；看板在该目标真正结束后才结算本次执行。不勾选则只执行一轮普通对话。",
 			"exec.skipVerification": "跳过本任务的验收",
 			"exec.skipVerificationHint": "默认关闭：勾选后本任务以 goal 形式执行时不再拦截 update_goal 标记完成，也不要求通过验收；执行记录会标注「该卡片跳过验收」。仅对之后新开的执行生效，验收总开关关闭时本项无意义。",
 			"detail.executionSettings": "执行设置",
@@ -2982,9 +3357,16 @@ window.__ModuleLoader__.load({
 			"settings.unsaved": "未保存",
 			"settings.saveFailed": "部署未接受这些值，已保留供你修改。",
 			"settings.invalidNumber": "请输入数字，留空则使用默认值。",
+			"settings.sessionPollSeconds": "会话轮询间隔（秒）",
+			"settings.sessionPollSecondsHint": "默认 5 秒。仅在看板有需要核对的事情——运行中的卡片或未结算的执行——时才读取会话名册；两者都没有时不再轮询，Host 不会持续扫描持久化会话目录。取值 1–300 秒：间隔越短结算越快、Host 负载越高。",
 			"settings.maxSubtaskDepth": "子任务深度上限",
 			"settings.maxSubtaskDepthHint": "默认 1：一个任务只允许一层子任务，子任务不能再创建或关联子任务。最大 3。执行父任务会并发执行它的整棵子任务树，层级越深，一次执行开启的会话越多。",
 			"settings.maxSubtaskDepthOption": "{depth} 层",
+			"settings.runBehaviorTitle": "运行行为",
+			"settings.runBehaviorCardHint": "全局原生 /goal 执行开关（总开关，默认关闭）。",
+			"settings.goalRunGlobal": "全局启用 DSH 原生 /goal 执行",
+			"settings.goalRunGlobalHint": "默认关闭。关闭时所有任务都按普通单回合执行，不调用 dsh 内置的 /goal；只有这里开启、且任务级「以 /goal 开始执行」被勾选时，才执行原生 /goal。任务级勾选始终可操作、也不会被这里的开关改写，总开关只决定它是否生效。开关按执行启动时冻结，只影响之后新开的执行。",
+			"settings.goalRunGlobalDisabledTaskOption": "全局「原生 /goal 执行」总开关已关闭：任务级选项仍可随时勾选或取消，但暂不生效，你保存的偏好也不会被改写；开启总开关后即按该偏好执行。本次执行按普通单回合进行，未执行 goal 验收。",
 			"settings.goalVerificationTitle": "任务验收",
 			"settings.goalVerification": "启用任务验收",
 			"settings.goalVerificationCardHint": "验收开关、裁判模型与判据阈值。",
@@ -3014,6 +3396,7 @@ window.__ModuleLoader__.load({
 			"running.repairing": "验收未通过修复中",
 			"running.verificationPassed": "验收通过",
 			"running.verificationFailed": "验收未通过",
+			"running.verificationInvalid": "验收无效，等待处理",
 			"verify.title": "验收报告",
 			"verify.status.passed": "通过",
 			"verify.status.failed": "未通过",
@@ -3021,6 +3404,34 @@ window.__ModuleLoader__.load({
 			"verify.status.verifying": "验收中",
 			"verify.status.pending": "待验收",
 			"verify.status.off": "本次执行未启用验收",
+			"verify.status.invalid": "验收无效",
+			"verify.status.invalidHeld": "验收无效，等待人工处理",
+			"verify.attemptInvalid": "第 {index} 次验收无效",
+			"verify.invalidReason.missing-finding": "未达标的判据没有对应的结构化问题反馈",
+			"verify.invalidReason.unlocatable-quote": "问题反馈引用的位置不存在于本次裁判所见的证据中",
+			"verify.invalidReason.baseline-finding": "问题反馈指向空工作基线，而不是本次执行的工作",
+			"verify.invalidReason.vacuous-finding": "问题反馈为空或空泛评价，没有说明实际观测与差异",
+			"verify.invalidReason.insufficient-evidence": "裁判看到的证据不足（例如轨迹被截断），无法支撑否决",
+			"verify.invalidReason.unknown": "未产生可用的质量判定",
+			"verify.invalidCounts": "有效质量判定 {quality}/{max} · 无效验收 {invalid}/{maxInvalid} · 验收异常 {exceptions}/{max}",
+			"verify.invalidDetail": "无效原因：{reason}",
+			"verify.criterionFindings": "结构化问题反馈（判据 · 引用位置 · 实际引用）",
+			"verify.criterionFinding": "{criterion} · {location}：“{quote}”",
+			"verify.criterionFindingFull": "{criterion} · {location}：“{quote}” 要求：{requirement} 观测：{observation} 差异：{gap}",
+			"verify.location.task": "任务要求",
+			"verify.location.trajectory": "执行轨迹",
+			"verify.location.workspace": "宿主记录的变更",
+			"verify.location.baseline": "空工作基线（不构成否决证据）",
+			"verify.location.unknown": "未标明位置",
+			"verify.detailRemoved": "本条验收的详细材料已在通过并成功结算后自动清理（不是裁判未举证）。",
+			"verify.cleanup.cleaned": "本次执行的验收专用详细材料已在通过并成功结算后自动清理；以下为保留的轻量审计凭据。",
+			"verify.cleanup.pending": "验收专用详细材料待清理（将通过并结算后启动）。",
+			"verify.cleanup.failed": "验收详细材料清理失败（已重试 {attempts} 次）：{error}；通过记录仍然有效，宿主重启后会补清。",
+			"verify.cleanup.audit": "保留凭据：第 {index} 次 · {stage} · 分数 {score} · 证据哈希 {hash}",
+			"verify.cleanup.stage.quality": "质量判定",
+			"verify.cleanup.stage.invalid": "无效验收",
+			"verify.cleanup.stage.exception": "验收异常",
+			"verify.cleanup.stage.budget": "时间预算耗尽",
 			"verify.summary": "总分 {score}（阈值 {threshold}）· 空工作基线 {baseline}",
 			"verify.criteria": "逐项判据",
 			"verify.criterion": "{name}：{score}（阈值 {threshold}）",
@@ -3039,9 +3450,10 @@ window.__ModuleLoader__.load({
 			"verify.usageIncomplete": "（至少一次请求的用量未知，以上为下限）",
 			"verify.finalFailure": "判定依据：{reason}",
 			"verify.applicability.disabled": "本次执行启动时验收开关关闭，按原有回合判定结算。",
-			"verify.applicability.goalUnavailable": "本次执行未成为 goal 执行（/goal 被拒绝或不可用），验收未强制执行。",
+			"verify.applicability.goalUnavailable": "本次执行未成为 goal 执行（卡片未勾选「以 /goal 开始执行任务」，或 /goal 被拒绝/不可用），验收未强制执行。",
 			"verify.applicability.skipped": "该任务卡勾选了「跳过验收」，本次执行未经验收判定。",
 			"verify.applicability.teamMember": "团队执行成员：由 Lead 的团队汇总证据统一验收。",
+			"verify.applicability.goalDisabled": "本次执行启动时全局「原生 /goal 执行」总开关关闭，按普通单回合执行：本次未执行 goal 验收，既不算已验收通过，也不因此判失败。",
 			"verify.effortFallback": "推理强度回退：{requested} → {resolved}",
 			"verify.thresholdValue": "{value}%",
 			"detail.parent": "父任务",
@@ -3236,6 +3648,7 @@ window.__ModuleLoader__.load({
 			"detail.noSession": "No session",
 			"detail.executionStarted": "Started",
 			"detail.execution.initiator": "Initiated by session {session}",
+			"detail.execution.external": "Completed outside this Host by {agent}",
 			"detail.executionEnded": "Ended",
 			"detail.result.succeeded": "Succeeded",
 			"detail.result.failed": "Failed",
@@ -3278,7 +3691,34 @@ window.__ModuleLoader__.load({
 			"detail.schedule.duration.hours": "{count}h",
 			"detail.schedule.duration.minutes": "{count}m",
 			"detail.schedule.duration.seconds": "{count}s",
+			"detail.schedule.mode": "Mode",
+			"detail.schedule.mode.cron": "Recurring",
+			"detail.schedule.mode.once": "Once",
+			"detail.schedule.at": "Run at",
+			"detail.schedule.atHint": "Planned instant, read in the selected zone; it must be in the future.",
+			"detail.schedule.atInvalid": "Choose a valid future time",
+			"detail.schedule.plannedAt": "Planned time",
+			"detail.schedule.zoneOnceHint": "The chosen instant is read in this zone.",
+			"detail.schedule.maxRuns": "Run limit",
+			"detail.schedule.maxRunsUnlimited": "Unlimited",
+			"detail.schedule.maxRunsValue": "At most {count} runs",
+			"detail.schedule.maxRunsCustom": "Custom",
+			"detail.schedule.maxRunsInvalid": "The run limit must be a positive whole number",
+			"detail.schedule.runs": "Ran {done}/{total}",
+			"detail.schedule.runsUnlimited": "Ran {done}",
+			"detail.schedule.remaining": "{count} left",
+			"detail.schedule.cancel": "Cancel schedule",
+			"detail.schedule.ended": "Schedule ended: {reason}",
+			"detail.schedule.skipped": "Last skip: {reason}",
+			"detail.schedule.stop.fired": "the one-shot ran",
+			"detail.schedule.stop.limit": "the run limit was reached",
+			"detail.schedule.stop.no-target": "the plan has no reachable occurrence",
+			"detail.schedule.stop.missed": "the instant was missed and skipped",
+			"detail.schedule.stop.busy": "the task was already running, so the occurrence was skipped",
+			"detail.schedule.stop.permission": "a permission awaited human confirmation, so the occurrence was skipped",
+			"detail.schedule.stop.launch-failed": "the launch failed before any execution existed, so the run was refunded",
 			"card.scheduled": "scheduled",
+			"card.scheduledOnce": "once",
 			"new.workspace": "Workspace",
 			"new.agentPreset": "Agent preset",
 			"new.permission": "Permission",
@@ -3308,7 +3748,7 @@ window.__ModuleLoader__.load({
 			"exec.teamRunUnavailable": "This deployment serves no Agent Teams service, so team runs cannot be enabled.",
 			"exec.reuseSessionHint": "When on, later runs continue in the previous session (when that session is idle and still exists) instead of starting a new conversation each time; the pinned permission and model above are re-applied on every reuse.",
 			"exec.goalRun": "Start the run with dsh's built-in /goal",
-			"exec.goalRunHint": "On by default: the run arms dsh built-in /goal with the task objective, so the session keeps working automatic continuation rounds until the agent marks the goal complete, and the board settles the execution only when that goal really ends. Off: one plain turn.",
+			"exec.goalRunHint": "Off by default: when checked, the run arms dsh built-in /goal with the task objective, so the session keeps working automatic continuation rounds until the agent marks the goal complete, and the board settles the execution only when that goal really ends. Unchecked: one plain turn.",
 			"exec.skipVerification": "Skip acceptance for this task",
 			"exec.skipVerificationHint": "Off by default: when checked, a goal-form run of this task no longer gates update_goal on a passing acceptance, and the execution record is marked as skipped. It applies only to executions started afterwards, and means nothing while the board-wide acceptance switch is off.",
 			"detail.executionSettings": "Execution Settings",
@@ -3341,9 +3781,16 @@ window.__ModuleLoader__.load({
 			"settings.unsaved": "Unsaved",
 			"settings.saveFailed": "The deployment did not accept these values; they were left for you to correct.",
 			"settings.invalidNumber": "Enter a number, or leave blank to use the default.",
+			"settings.sessionPollSeconds": "Session poll interval (seconds)",
+			"settings.sessionPollSecondsHint": "Default 5. The Host reads the DSH session roster only while the board has something to reconcile: a running card or an open execution. With neither it stops polling and never re-scans the persisted session directory. Range 1 to 300 seconds: a shorter interval settles runs sooner and costs the Host more.",
 			"settings.maxSubtaskDepth": "Subtask depth limit",
 			"settings.maxSubtaskDepthHint": "Default 1: a task may carry one level of subtasks, and a subtask cannot create or link further subtasks. Maximum 3. Running a task also runs its whole subtask tree concurrently, and every extra level opens more sessions per run.",
 			"settings.maxSubtaskDepthOption": "{depth} levels",
+			"settings.runBehaviorTitle": "Run behavior",
+			"settings.runBehaviorCardHint": "The global native /goal switch (master control, off by default).",
+			"settings.goalRunGlobal": "Global: run tasks with dsh native /goal",
+			"settings.goalRunGlobalHint": "Off by default. While off, every task runs one plain turn and never calls dsh built-in /goal; a run uses native /goal only when this is on AND the task-level option is checked (see the task option below). The task-level checkbox always stays operable and this switch never rewrites it: the master switch only decides whether that choice takes effect. The switch is frozen when an execution starts, so it only affects runs opened afterwards.",
+			"settings.goalRunGlobalDisabledTaskOption": "The global native /goal switch is off: the task-level option can still be checked or cleared, but it has no effect right now and the preference you save is never rewritten; turning the global switch back on applies it. This execution runs one plain turn and performs no goal acceptance.",
 			"settings.goalVerificationTitle": "Task acceptance",
 			"settings.goalVerification": "Enable task acceptance",
 			"settings.goalVerificationCardHint": "The switch, the judge model and the criteria threshold.",
@@ -3373,6 +3820,7 @@ window.__ModuleLoader__.load({
 			"running.repairing": "Fixing a failed acceptance",
 			"running.verificationPassed": "Acceptance passed",
 			"running.verificationFailed": "Acceptance failed",
+			"running.verificationInvalid": "Invalid acceptance, waiting for a human",
 			"verify.title": "Acceptance report",
 			"verify.status.passed": "Passed",
 			"verify.status.failed": "Failed",
@@ -3380,6 +3828,34 @@ window.__ModuleLoader__.load({
 			"verify.status.verifying": "Verifying",
 			"verify.status.pending": "Not yet verified",
 			"verify.status.off": "Acceptance was off for this execution",
+			"verify.status.invalid": "Invalid acceptance",
+			"verify.status.invalidHeld": "Invalid acceptance, waiting for a human",
+			"verify.attemptInvalid": "Invalid acceptance {index}",
+			"verify.invalidReason.missing-finding": "A failing criterion carries no structured finding of its own",
+			"verify.invalidReason.unlocatable-quote": "A finding cites a passage that is not in the evidence the judge saw",
+			"verify.invalidReason.baseline-finding": "A finding points at the empty-work baseline instead of this execution's work",
+			"verify.invalidReason.vacuous-finding": "A finding is empty or a generic evaluation with no observation or difference",
+			"verify.invalidReason.insufficient-evidence": "The judge saw too little evidence (for example a truncated trace) to support a veto",
+			"verify.invalidReason.unknown": "No usable quality verdict was produced",
+			"verify.invalidCounts": "Valid quality verdicts {quality}/{max} · invalid acceptances {invalid}/{maxInvalid} · anomalies {exceptions}/{max}",
+			"verify.invalidDetail": "Invalid because: {reason}",
+			"verify.criterionFindings": "Structured findings (criterion · cited location · verbatim citation)",
+			"verify.criterionFinding": "{criterion} · {location}: \"{quote}\"",
+			"verify.criterionFindingFull": "{criterion} · {location}: \"{quote}\" requirement: {requirement} observed: {observation} gap: {gap}",
+			"verify.location.task": "task statement",
+			"verify.location.trajectory": "execution trajectory",
+			"verify.location.workspace": "host-recorded changes",
+			"verify.location.baseline": "empty-work baseline (not evidence against the work)",
+			"verify.location.unknown": "location not named",
+			"verify.detailRemoved": "This attempt detail was cleaned up automatically after the execution passed and settled (the judge did report evidence).",
+			"verify.cleanup.cleaned": "The acceptance-only detail of this execution was cleaned up automatically after it passed and settled; what remains is the lightweight audit credential.",
+			"verify.cleanup.pending": "The acceptance-only detail is pending cleanup (started once the execution passes and settles).",
+			"verify.cleanup.failed": "Cleaning the acceptance detail failed after {attempts} attempts: {error}. The pass record is still valid and the host retries on its next start.",
+			"verify.cleanup.audit": "Kept credential: attempt {index} · {stage} · score {score} · evidence hash {hash}",
+			"verify.cleanup.stage.quality": "quality verdict",
+			"verify.cleanup.stage.invalid": "invalid acceptance",
+			"verify.cleanup.stage.exception": "acceptance anomaly",
+			"verify.cleanup.stage.budget": "time budget exhausted",
 			"verify.summary": "Total {score} (threshold {threshold}) · empty-work baseline {baseline}",
 			"verify.criteria": "Per-criterion scores",
 			"verify.criterion": "{name}: {score} (threshold {threshold})",
@@ -3398,9 +3874,10 @@ window.__ModuleLoader__.load({
 			"verify.usageIncomplete": " (at least one request usage is unknown; these counts are a floor)",
 			"verify.finalFailure": "Verdict basis: {reason}",
 			"verify.applicability.disabled": "Acceptance was off when this execution started; it settles on the historical verdict.",
-			"verify.applicability.goalUnavailable": "This execution never became a goal run (/goal was refused or unavailable), so acceptance was not enforced.",
+			"verify.applicability.goalUnavailable": "This execution never became a goal run (the card did not check Start with /goal, or /goal was refused or unavailable), so acceptance was not enforced.",
 			"verify.applicability.skipped": "This card checked Skip acceptance, so the execution was never judged.",
 			"verify.applicability.teamMember": "Team member: the Lead team-summary evidence is accepted as one execution.",
+			"verify.applicability.goalDisabled": "The global native /goal switch was off when this execution started, so it ran one plain turn: no goal acceptance was performed, which neither counts as a pass nor fails the run.",
 			"verify.effortFallback": "Reasoning effort fallback: {requested} → {resolved}",
 			"verify.thresholdValue": "{value}%",
 			"detail.parent": "Parent task",
@@ -3812,6 +4289,95 @@ window.__ModuleLoader__.load({
 			if (delta < 0) return t("detail.schedule.nextRunOverdue", { duration: durationParts(-delta) });
 			return `${durationParts(delta)}`;
 		}
+		/** Zero-pad a calendar/clock field for a `datetime-local` value. */
+		function pad(value) {
+			return String(value).padStart(2, "0");
+		}
+		/**
+		* The `datetime-local` input value for an instant, read in an explicit zone:
+		* `YYYY-MM-DDTHH:mm`. Uses the shared engine's zone reader, so the editor
+		* shows the same wall clock the Host schedules by.
+		* @param epochMs - the instant to render.
+		* @param timeZone - zone to read it in; absent uses the Host zone.
+		* @returns the input value.
+		*/
+		function zonedInputValue(epochMs, timeZone) {
+			const parts = partsInZone(usableZone(timeZone), epochMs);
+			return `${parts.year}-${pad(parts.month)}-${pad(parts.day)}T${pad(parts.hour)}:${pad(parts.minute)}`;
+		}
+		/**
+		* Parse a `datetime-local` input value back to an instant, read in an explicit
+		* zone. Returns undefined when the text is not a whole calendar wall clock or
+		* names one the zone skips (a spring-forward gap), so the editor can refuse an
+		* unusable instant instead of silently moving it.
+		* @param value - the input text.
+		* @param timeZone - zone to interpret it in; absent uses the Host zone.
+		* @returns the instant, or undefined when it is not a usable wall clock.
+		*/
+		function parseZonedInput(value, timeZone) {
+			const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})/.exec(value.trim());
+			if (match === null) return void 0;
+			const [year, month, day, hour, minute] = match.slice(1).map(Number);
+			if (month < 1 || month > 12 || day < 1 || day > 31 || hour > 23 || minute > 59) return void 0;
+			return zonedEpoch(usableZone(timeZone), year, month, day, hour, minute);
+		}
+		/**
+		* The default instant a new one-shot editor opens on: the next whole hour,
+		* rendered in the zone the rule will be read in.
+		* @param now - reference instant.
+		* @param timeZone - zone the rule is read in.
+		* @returns the input value for a near-future default.
+		*/
+		function defaultZonedInputValue(now, timeZone) {
+			return zonedInputValue(Math.ceil(now / 36e5) * 36e5, timeZone);
+		}
+		/** The zone the input helpers resolve against: an explicit resolved zone, or the Host zone. */
+		function usableZone(timeZone) {
+			return timeZone !== void 0 && isValidTimeZone(timeZone) ? timeZone : resolveHostTimeZone();
+		}
+		/**
+		* The editor's run-cap option for a stored cap: the two named presets, the
+		* unlimited entry, or a custom value the editor shows in its own field.
+		* @param maxRuns - the stored cap, when any.
+		* @returns the select option value.
+		*/
+		function runCapOption(maxRuns) {
+			if (maxRuns === void 0) return "unlimited";
+			if (maxRuns === 1) return "1";
+			if (maxRuns === 2) return "2";
+			return "custom";
+		}
+		/** The locale key describing why a rule stopped or skipped an occurrence. */
+		function stopReasonKey(reason) {
+			return `detail.schedule.stop.${reason}`;
+		}
+		/**
+		* The run-budget line: how many scheduled executions the Host opened and how
+		* many remain. Derived from the counter and the cap rather than stored, so the
+		* display cannot drift from the ledger.
+		* @param rule - the schedule rule.
+		* @returns localized wording.
+		*/
+		function budgetLabel(rule) {
+			const budget = scheduleRunBudget(rule);
+			const done = String(rule.runCount);
+			if (budget === void 0) return t("detail.schedule.runsUnlimited", { done });
+			const remaining = Math.max(budget - rule.runCount, 0);
+			return `${t("detail.schedule.runs", {
+				done,
+				total: String(budget)
+			})} · ${t("detail.schedule.remaining", { count: String(remaining) })}`;
+		}
+		/** The line describing a rule that stopped itself, or undefined while it may still fire. */
+		function endedLabel(rule) {
+			if (rule.endedReason === void 0) return void 0;
+			return t("detail.schedule.ended", { reason: t(stopReasonKey(rule.endedReason)) });
+		}
+		/** The line describing the last skipped occurrence, or undefined when none. */
+		function skippedLabel(rule) {
+			if (rule.skippedReason === void 0) return void 0;
+			return t("detail.schedule.skipped", { reason: t(stopReasonKey(rule.skippedReason)) });
+		}
 		/**
 		* The full next-run label: the absolute wall clock in the schedule's own zone,
 		* plus the relative distance in parentheses. Showing both matters because a
@@ -4474,7 +5040,8 @@ window.__ModuleLoader__.load({
 			verifying: "running.verifying",
 			repairing: "running.repairing",
 			passed: "running.verificationPassed",
-			failed: "running.verificationFailed"
+			failed: "running.verificationFailed",
+			invalid: "running.verificationInvalid"
 		};
 		/**
 		* The acceptance label for one open execution, or undefined when acceptance
@@ -6649,8 +7216,8 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 								}),
 								!archived && task.schedule?.enabled === true && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 									className: board_module_css_default.cardSchedule,
-									title: task.schedule.nextRunAt !== void 0 ? `${t("card.scheduled")} · ${formatHostTimestamp(task.schedule.nextRunAt, timeZone)}` : t("card.scheduled"),
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(IconClock, { size: 12 }), t("card.scheduled")]
+									title: task.schedule.nextRunAt !== void 0 ? `${t(task.schedule.mode === "once" ? "card.scheduledOnce" : "card.scheduled")} · ${formatHostTimestamp(task.schedule.nextRunAt, timeZone)}` : t(task.schedule.mode === "once" ? "card.scheduledOnce" : "card.scheduled"),
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(IconClock, { size: 12 }), t(task.schedule.mode === "once" ? "card.scheduledOnce" : "card.scheduled")]
 								}),
 								latest !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 									className: board_module_css_default.cardRun,
@@ -6765,10 +7332,14 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			const [model, setModel] = (0, react.useState)(initialTask?.model ?? parentTask?.model ?? "");
 			const inheritedPermission = parentTask === void 0 ? void 0 : effectiveTaskPermission(parentTask);
 			const [reuseSession, setReuseSession] = (0, react.useState)(initialTask?.reuseSession ?? false);
-			const [goalRun, setGoalRun] = (0, react.useState)(initialTask?.goalRun ?? true);
+			const [goalRun, setGoalRun] = (0, react.useState)(initialTask?.goalRun ?? false);
 			const [skipVerification, setSkipVerification] = (0, react.useState)(initialTask?.skipVerification ?? false);
 			const [scheduleEnabled, setScheduleEnabled] = (0, react.useState)(initialTask?.schedule?.enabled ?? false);
+			const [scheduleMode, setScheduleMode] = (0, react.useState)(initialTask?.schedule?.mode ?? "cron");
 			const [scheduleCron, setScheduleCron] = (0, react.useState)(initialTask?.schedule?.cron ?? "");
+			const [scheduleAt, setScheduleAt] = (0, react.useState)(() => initialTask?.schedule?.mode === "once" && initialTask.schedule.at !== void 0 ? zonedInputValue(initialTask.schedule.at, initialTask.schedule.timeZone) : defaultZonedInputValue(Date.now(), initialTask?.schedule?.timeZone));
+			const [scheduleMaxRunsChoice, setScheduleMaxRunsChoice] = (0, react.useState)(() => runCapOption(initialTask?.schedule?.maxRuns));
+			const [scheduleMaxRunsText, setScheduleMaxRunsText] = (0, react.useState)(initialTask?.schedule?.maxRuns === void 0 ? "" : String(initialTask.schedule.maxRuns));
 			const [scheduleZone, setScheduleZone] = (0, react.useState)(initialTask?.schedule?.timeZone ?? "");
 			const [scheduleError, setScheduleError] = (0, react.useState)(void 0);
 			const [freezeText, setFreezeText] = (0, react.useState)("");
@@ -6779,6 +7350,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			const [error, setError] = (0, react.useState)(void 0);
 			const [pending, setPending] = (0, react.useState)(false);
 			const [options, setOptions] = (0, react.useState)(controller.getSnapshot().executionOptions);
+			const [goalRunEnabled, setGoalRunEnabled] = (0, react.useState)(controller.getSnapshot().host?.goalRunEnabled === true);
 			const [canParse] = (0, react.useState)(controller.getSnapshot().canParseTask === true);
 			const [parseText, setParseText] = (0, react.useState)("");
 			const [parseModel, setParseModel] = (0, react.useState)(() => readParseModelPreference());
@@ -6789,7 +7361,11 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			const workspaceKnown = workspaceId === "" || options.workspaces.some((item) => item.workspaceId === workspaceId);
 			const modeKnown = mode === "" || options.presets.some((item) => item.id === mode);
 			const modelKnown = model === "" || parseModels.some((item) => item.id === model);
-			(0, react.useEffect)(() => controller.subscribe(() => setOptions(controller.getSnapshot().executionOptions)), [controller]);
+			(0, react.useEffect)(() => controller.subscribe(() => {
+				const snapshot = controller.getSnapshot();
+				setOptions(snapshot.executionOptions);
+				setGoalRunEnabled(snapshot.host?.goalRunEnabled === true);
+			}), [controller]);
 			(0, react.useEffect)(() => {
 				if (parseModel === "" || parseModels.length === 0) return;
 				if (parseModels.some((option) => option.id === parseModel)) return;
@@ -6828,12 +7404,25 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			* reporting the creation as failed.
 			*/
 			const submit = async (runAfterCreate) => {
-				if (scheduleEnabled) {
+				if (scheduleEnabled) if (scheduleMode === "once") {
+					const at = parseZonedInput(scheduleAt, scheduleZone === "" ? hostTimeZone : scheduleZone);
+					if (at === void 0 || at <= Date.now()) {
+						setScheduleError(t("detail.schedule.atInvalid"));
+						return;
+					}
+				} else {
 					const cron = scheduleCron.trim();
 					if (cron === "" || !isValidCron(cron)) {
 						setScheduleError(t("detail.schedule.invalid"));
 						return;
 					}
+					if (scheduleMaxRunsChoice === "custom") {
+						const cap = Number(scheduleMaxRunsText.trim());
+						if (scheduleMaxRunsText.trim() === "" || !Number.isInteger(cap) || cap < 1) {
+							setScheduleError(t("detail.schedule.maxRunsInvalid"));
+							return;
+						}
+					}
 				}
 				let freeze = void 0;
 				if (freezeText.trim() !== "") {
@@ -6868,12 +7457,19 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					permission: permission === "" ? void 0 : permission,
 					model: model === "" ? void 0 : model,
 					...reuseSession ? { reuseSession: true } : {},
-					...goalRun ? {} : { goalRun: false },
+					...goalRun ? { goalRun: true } : {},
 					...skipVerification ? { skipVerification: true } : {},
 					...tagList.length > 0 ? { tags: tagList } : {},
-					schedule: scheduleEnabled ? {
+					schedule: scheduleEnabled ? scheduleMode === "once" ? {
+						enabled: true,
+						mode: "once",
+						at: parseZonedInput(scheduleAt, scheduleZone === "" ? hostTimeZone : scheduleZone),
+						...scheduleZone === "" ? {} : { timeZone: scheduleZone }
+					} : {
 						enabled: true,
+						mode: "cron",
 						cron: scheduleCron.trim(),
+						...scheduleMaxRunsChoice === "unlimited" ? {} : { maxRuns: scheduleMaxRunsChoice === "custom" ? Number(scheduleMaxRunsText.trim()) : Number(scheduleMaxRunsChoice) },
 						...scheduleZone === "" ? {} : { timeZone: scheduleZone }
 					} : void 0
 				});
@@ -6891,7 +7487,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			};
 			const hostTimeZone = controller.getSnapshot().host?.scheduler.timeZone;
 			const scheduleTimeZone = scheduleZone === "" ? hostTimeZone : scheduleZone;
-			const scheduleNextRun = scheduleEnabled && scheduleCron.trim() !== "" && isValidCron(scheduleCron) ? nextRunAtMs(scheduleCron, Date.now(), scheduleTimeZone) : void 0;
+			const scheduleNextRun = !scheduleEnabled ? void 0 : scheduleMode === "once" ? parseZonedInput(scheduleAt, scheduleTimeZone) : scheduleCron.trim() !== "" && isValidCron(scheduleCron) ? nextRunAtMs(scheduleCron, Date.now(), scheduleTimeZone) : void 0;
 			const modalTitle = parentTask !== void 0 ? t("new.subtaskTitle") : isDuplicate ? t("new.duplicateTitle") : t("board.new");
 			const builtinPresets = options.presets.filter((preset) => isBuiltinPreset(preset.id));
 			const customPresets = options.presets.filter((preset) => !isBuiltinPreset(preset.id));
@@ -6909,9 +7505,9 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			].join(" · ");
 			const tagCount = cleanTags(tags).length;
 			const labelsSummary = tagCount === 0 ? t("new.summary.none") : t("new.summary.labelCount", { count: String(tagCount) });
-			const runSummary = [goalRun ? t("new.summary.multiRound") : t("new.summary.singleRound"), ...reuseSession ? [t("exec.reuseSession")] : []].join(" · ");
+			const runSummary = [goalRun && goalRunEnabled ? t("new.summary.multiRound") : t("new.summary.singleRound"), ...reuseSession ? [t("exec.reuseSession")] : []].join(" · ");
 			const handoverSummary = freezeText.trim() !== "" || handoverText.trim() !== "" ? t("new.summary.filled") : t("new.summary.none");
-			const scheduleSummary = !scheduleEnabled ? t("new.summary.scheduleOff") : scheduleCron.trim() === "" ? t("new.summary.none") : scheduleCron.trim();
+			const scheduleSummary = !scheduleEnabled ? t("new.summary.scheduleOff") : scheduleMode === "once" ? `${t("detail.schedule.mode.once")} · ${scheduleAt.replace("T", " ")}` : scheduleCron.trim() === "" ? t("new.summary.none") : [scheduleCron.trim(), ...scheduleMaxRunsChoice === "unlimited" ? [] : [t("detail.schedule.maxRunsValue", { count: scheduleMaxRunsChoice === "custom" ? scheduleMaxRunsText : scheduleMaxRunsChoice })]].join(" · ");
 			const parseSummary = parseText.trim() === "" ? t("new.summary.none") : t("new.summary.filled");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(ModalShell, {
 				ariaLabel: modalTitle,
@@ -7202,6 +7798,10 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 								className: board_module_css_default.detailText,
 								children: t("exec.goalRunHint")
 							}),
+							!goalRunEnabled && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: board_module_css_default.detailText,
+								children: t("settings.goalRunGlobalDisabledTaskOption")
+							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 								className: board_module_css_default.scheduleToggle,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
@@ -7277,36 +7877,116 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 								}
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.enable") })]
 						}), scheduleEnabled && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: board_module_css_default.scheduleRow,
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-									className: `${board_module_css_default.input} ${board_module_css_default.scheduleInput}${scheduleError !== void 0 ? ` ${board_module_css_default.scheduleInputInvalid}` : ""}`,
-									value: scheduleCron,
-									placeholder: "0 9 * * *",
-									spellCheck: false,
-									"aria-label": t("detail.schedule.cron"),
-									onChange: (event) => {
-										setScheduleCron(event.target.value);
-										setScheduleError(void 0);
-									}
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: board_module_css_default.scheduleZone,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.mode") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
 									className: board_module_css_default.schedulePreset,
-									value: "",
-									"aria-label": t("detail.schedule.presets"),
+									value: scheduleMode,
+									"aria-label": t("detail.schedule.mode"),
 									onChange: (event) => {
-										if (event.target.value === "") return;
-										setScheduleCron(event.target.value);
+										setScheduleMode(event.target.value);
 										setScheduleError(void 0);
 									},
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
-										value: "",
-										children: [t("detail.schedule.presets"), "…"]
-									}), SCHEDULE_PRESETS.map((preset) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
-										value: preset.cron,
-										children: t(preset.label)
-									}, preset.cron))]
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+										value: "cron",
+										children: t("detail.schedule.mode.cron")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+										value: "once",
+										children: t("detail.schedule.mode.once")
+									})]
 								})]
 							}),
+							scheduleMode === "once" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: board_module_css_default.scheduleZone,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.at") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									className: board_module_css_default.input,
+									type: "datetime-local",
+									value: scheduleAt,
+									"aria-label": t("detail.schedule.at"),
+									title: t("detail.schedule.atHint"),
+									onChange: (event) => {
+										setScheduleAt(event.target.value);
+										setScheduleError(void 0);
+									}
+								})]
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: board_module_css_default.scheduleRow,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										className: `${board_module_css_default.input} ${board_module_css_default.scheduleInput}${scheduleError !== void 0 ? ` ${board_module_css_default.scheduleInputInvalid}` : ""}`,
+										value: scheduleCron,
+										placeholder: "0 9 * * *",
+										spellCheck: false,
+										"aria-label": t("detail.schedule.cron"),
+										onChange: (event) => {
+											setScheduleCron(event.target.value);
+											setScheduleError(void 0);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+										className: board_module_css_default.schedulePreset,
+										value: "",
+										"aria-label": t("detail.schedule.presets"),
+										onChange: (event) => {
+											if (event.target.value === "") return;
+											setScheduleCron(event.target.value);
+											setScheduleError(void 0);
+										},
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
+											value: "",
+											children: [t("detail.schedule.presets"), "…"]
+										}), SCHEDULE_PRESETS.map((preset) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: preset.cron,
+											children: t(preset.label)
+										}, preset.cron))]
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+									className: board_module_css_default.scheduleZone,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.maxRuns") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+										className: board_module_css_default.schedulePreset,
+										value: scheduleMaxRunsChoice,
+										"aria-label": t("detail.schedule.maxRuns"),
+										onChange: (event) => {
+											setScheduleMaxRunsChoice(event.target.value);
+											setScheduleError(void 0);
+											if (event.target.value === "custom") setScheduleMaxRunsText(initialTask?.schedule?.maxRuns === void 0 ? "" : String(initialTask.schedule.maxRuns));
+										},
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+												value: "unlimited",
+												children: t("detail.schedule.maxRunsUnlimited")
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+												value: "1",
+												children: t("detail.schedule.maxRunsValue", { count: "1" })
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+												value: "2",
+												children: t("detail.schedule.maxRunsValue", { count: "2" })
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+												value: "custom",
+												children: t("detail.schedule.maxRunsCustom")
+											})
+										]
+									})]
+								}),
+								scheduleMaxRunsChoice === "custom" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+									className: board_module_css_default.scheduleZone,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.maxRuns") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										className: board_module_css_default.input,
+										type: "number",
+										min: 1,
+										step: 1,
+										value: scheduleMaxRunsText,
+										"aria-label": t("detail.schedule.maxRuns"),
+										onChange: (event) => {
+											setScheduleMaxRunsText(event.target.value);
+											setScheduleError(void 0);
+										}
+									})]
+								})
+							] }),
 							scheduleError !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: board_module_css_default.formError,
 								children: scheduleError
@@ -7317,7 +7997,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 									className: board_module_css_default.schedulePreset,
 									value: scheduleZone,
 									"aria-label": t("detail.schedule.timeZone"),
-									title: t("detail.schedule.timeZoneHint"),
+									title: scheduleMode === "once" ? t("detail.schedule.zoneOnceHint") : t("detail.schedule.timeZoneHint"),
 									onChange: (event) => {
 										setScheduleZone(event.target.value);
 										setScheduleError(void 0);
@@ -7847,11 +8527,39 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			verifying: "verify.status.verifying",
 			repairing: "verify.status.failed",
 			passed: "verify.status.passed",
-			failed: "verify.status.failed"
+			failed: "verify.status.failed",
+			invalid: "verify.status.invalidHeld"
 		};
-		/** One recorded attempt: a quality verdict or an acceptance anomaly. */
-		function AttemptRow({ attempt }) {
-			const exception = attempt.stage === "exception";
+		/** Evidence location → locale key, for one structured finding's citation. */
+		const LOCATION_KEY = {
+			task: "verify.location.task",
+			trajectory: "verify.location.trajectory",
+			workspace: "verify.location.workspace",
+			baseline: "verify.location.baseline",
+			unknown: "verify.location.unknown"
+		};
+		/** Invalid reason → locale key. */
+		function invalidReasonKey(attempt) {
+			switch (attempt.invalidReason) {
+				case "missing-finding": return "verify.invalidReason.missing-finding";
+				case "unlocatable-quote": return "verify.invalidReason.unlocatable-quote";
+				case "baseline-finding": return "verify.invalidReason.baseline-finding";
+				case "vacuous-finding": return "verify.invalidReason.vacuous-finding";
+				case "insufficient-evidence": return "verify.invalidReason.insufficient-evidence";
+				default: return "verify.invalidReason.unknown";
+			}
+		}
+		/** Audit stage → locale key (the lightweight credential after cleanup). */
+		const AUDIT_STAGE_KEY = {
+			quality: "verify.cleanup.stage.quality",
+			invalid: "verify.cleanup.stage.invalid",
+			exception: "verify.cleanup.stage.exception",
+			budget: "verify.cleanup.stage.budget"
+		};
+		/** One recorded attempt: a quality verdict, an invalid veto, an anomaly, or a budget stop. */
+		function AttemptRow({ attempt, detailRemoved }) {
+			const invalid = attempt.stage === "invalid";
+			const exception = attempt.stage !== "quality" && !invalid;
 			const result = exception ? "failed" : attempt.passed ? "succeeded" : "failed";
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: board_module_css_default.executionRow,
@@ -7860,17 +8568,21 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionBadge,
 						"data-result": result,
-						children: exception ? t("verify.status.exception") : attempt.passed ? t("verify.status.passed") : t("verify.status.failed")
+						children: invalid ? t("verify.status.invalid") : exception ? t("verify.status.exception") : attempt.passed ? t("verify.status.passed") : t("verify.status.failed")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 						className: board_module_css_default.executionTimes,
 						children: [
-							exception ? t("verify.attemptException", { index: String(attempt.index) }) : t("verify.attempt", { index: String(attempt.index) }),
+							invalid ? t("verify.attemptInvalid", { index: String(attempt.index) }) : exception ? t("verify.attemptException", { index: String(attempt.index) }) : t("verify.attempt", { index: String(attempt.index) }),
 							" · ",
 							routeLabel(attempt),
-							!exception && " · " + t("verify.rounds", { rounds: String(attempt.rounds) })
+							!exception && !invalid && " · " + t("verify.rounds", { rounds: String(attempt.rounds) })
 						]
 					}),
+					invalid && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: board_module_css_default.executionTimes,
+						children: t("verify.invalidDetail", { reason: t(invalidReasonKey(attempt)) })
+					}),
 					attempt.error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionTimes,
 						children: attempt.error
@@ -7900,6 +8612,23 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 							}, criterion.id))
 						})
 					] }),
+					(attempt.criterionFindings ?? []).length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: board_module_css_default.executionTimes,
+						children: t("verify.criterionFindings")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+						className: board_module_css_default.executionList,
+						children: (attempt.criterionFindings ?? []).map((finding, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", {
+							className: board_module_css_default.executionTimes,
+							children: t("verify.criterionFindingFull", {
+								criterion: finding.criterionId,
+								location: t(LOCATION_KEY[finding.location]),
+								quote: finding.quote,
+								requirement: finding.requirement,
+								observation: finding.observation,
+								gap: finding.gap
+							})
+						}, findingKey(attempt, index)))
+					})] }),
 					attempt.findings.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionTimes,
 						children: t("verify.findings")
@@ -7910,9 +8639,9 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 							children: finding
 						}, findingKey(attempt, index)))
 					})] }),
-					!exception && attempt.findings.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					!exception && !invalid && attempt.findings.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionTimes,
-						children: t("verify.noFindings")
+						children: t(detailRemoved ? "verify.detailRemoved" : "verify.noFindings")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 						className: board_module_css_default.executionTimes,
@@ -7948,7 +8677,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			if (phase === "off" && verification.contract.enabled === false && verification.applicability !== "skipped") return null;
 			const totals = verificationTotals(verification);
 			const route = verification.contract.route;
-			const applicabilityKey = verification.applicability === "disabled" ? "verify.applicability.disabled" : verification.applicability === "skipped" ? "verify.applicability.skipped" : verification.applicability === "goal-unavailable" ? "verify.applicability.goalUnavailable" : verification.applicability === "team-member" ? "verify.applicability.teamMember" : void 0;
+			const applicabilityKey = verification.applicability === "disabled" ? "verify.applicability.disabled" : verification.applicability === "skipped" ? "verify.applicability.skipped" : verification.applicability === "goal-unavailable" ? "verify.applicability.goalUnavailable" : verification.applicability === "goal-disabled" ? "verify.applicability.goalDisabled" : verification.applicability === "team-member" ? "verify.applicability.teamMember" : void 0;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: board_module_css_default.executionTimes,
 				children: [
@@ -7963,9 +8692,11 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionTimes,
-						children: t("verify.counts", {
+						children: t("verify.invalidCounts", {
 							quality: String(qualityAttempts(verification).length),
 							max: String(2),
+							invalid: String(invalidAttempts(verification).length),
+							maxInvalid: String(2),
 							exceptions: String(exceptionAttempts(verification).length)
 						})
 					}),
@@ -8002,11 +8733,45 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					}),
 					verification.attempts.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
 						className: board_module_css_default.executionList,
-						children: [...verification.attempts].reverse().map((attempt) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AttemptRow, { attempt }, attempt.at.toString(36) + "-" + attempt.stage + "-" + String(attempt.index)))
-					})
+						children: [...verification.attempts].reverse().map((attempt) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AttemptRow, {
+							attempt,
+							detailRemoved: verification.cleanup?.state === "cleaned"
+						}, attempt.at.toString(36) + "-" + attempt.stage + "-" + String(attempt.index)))
+					}),
+					verification.cleanup !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CleanupNotice, { cleanup: verification.cleanup })
 				]
 			});
 		}
+		/**
+		* Retention notice of one execution's acceptance detail.
+		*
+		* It exists so a reader never mistakes a cleaned-up report for a judge that
+		* produced no evidence: the notice says the detail WAS produced and was removed
+		* by the automatic cleanup, and lists the lightweight credential that survives.
+		* A pending or failed cleanup is reported the same way — never as a missing
+		* verdict and never as a revoked pass.
+		*/
+		function CleanupNotice({ cleanup }) {
+			const key = cleanup.state === "cleaned" ? "verify.cleanup.cleaned" : cleanup.state === "failed" ? "verify.cleanup.failed" : "verify.cleanup.pending";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: board_module_css_default.executionTimes,
+				children: cleanup.state === "failed" ? t(key, {
+					attempts: String(cleanup.attempts),
+					error: cleanup.lastError ?? ""
+				}) : t(key)
+			}), cleanup.audit.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+				className: board_module_css_default.executionList,
+				children: cleanup.audit.map((record, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+					className: board_module_css_default.executionTimes,
+					children: [t("verify.cleanup.audit", {
+						index: String(index + 1),
+						stage: t(AUDIT_STAGE_KEY[record.stage]),
+						score: percent(record.score),
+						hash: record.evidenceHash.slice(0, 12)
+					}), record.findingSummary === void 0 ? "" : " · " + record.findingSummary]
+				}, record.at.toString(36) + "-" + record.stage + "-" + String(index)))
+			})] });
+		}
 		//#endregion
 		//#region src/client/board/ClampedMarkdown.tsx
 		/**
@@ -8079,9 +8844,11 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 		/** One execution-history row. */
 		function ExecutionRow({ execution, timeZone, onOpen }) {
 			const result = execution.result;
+			const external = execution.external === true;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: board_module_css_default.executionRow,
 				"data-result": result,
+				"data-external": external ? "true" : void 0,
 				children: [
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionBadge,
@@ -8097,7 +8864,12 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 							execution.endedAt !== void 0 && ` · ${t("detail.executionEnded")} ${formatTime(execution.endedAt, timeZone)}`
 						]
 					}),
-					execution.initiatedBy !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					external && execution.initiatedBy !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: board_module_css_default.executionTimes,
+						title: execution.initiatedBy,
+						children: t("detail.execution.external", { agent: execution.initiatedBy })
+					}),
+					!external && execution.initiatedBy !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: board_module_css_default.executionTimes,
 						title: execution.initiatedBy,
 						children: t("detail.execution.initiator", { session: execution.initiatedBy })
@@ -8120,7 +8892,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			});
 		}
 		/** The execution-target editor: workspace / mode / permission pickers. */
-		function ExecutionSettingsSection({ controller, task, pending, executionOptions, teamRunAvailable }) {
+		function ExecutionSettingsSection({ controller, task, pending, executionOptions, teamRunAvailable, goalRunEnabled }) {
 			const options = executionOptions;
 			const workspaceId = task.workspaceId ?? "";
 			const mode = task.mode ?? "";
@@ -8266,7 +9038,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 						className: board_module_css_default.scheduleToggle,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 							type: "checkbox",
-							checked: task.goalRun !== false,
+							checked: task.goalRun === true,
 							disabled: pending,
 							onChange: (event) => {
 								controller.updateTask(task.id, { goalRun: event.target.checked });
@@ -8277,6 +9049,10 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 						className: board_module_css_default.detailText,
 						children: t("exec.goalRunHint")
 					}),
+					!goalRunEnabled && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: board_module_css_default.detailText,
+						children: t("settings.goalRunGlobalDisabledTaskOption")
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 						className: board_module_css_default.scheduleToggle,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
@@ -8310,31 +9086,48 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 				]
 			});
 		}
-		/** The scheduled-runs editor: enable toggle, cron input + presets, zone, next-run info. */
+		/**
+		* The scheduled-runs editor. A one-shot has one planned instant; a recurring
+		* rule has a cron expression, an optional run cap, and a zone. The editor
+		* shows the rule's own state (next target, run counter, stop/skip record) and
+		* can cancel a future plan.
+		*/
 		function ScheduleSection({ controller, task, pending }) {
 			const schedule = task.schedule;
+			const hostTimeZone = controller.getSnapshot().host?.scheduler.timeZone;
+			const [zone, setZone] = (0, react.useState)(schedule?.timeZone ?? "");
+			const [mode, setMode] = (0, react.useState)(schedule?.mode ?? "cron");
 			const [cron, setCron] = (0, react.useState)(schedule?.cron ?? "0 9 * * *");
+			const [atText, setAtText] = (0, react.useState)(() => schedule?.at === void 0 ? defaultZonedInputValue(Date.now(), schedule?.timeZone ?? hostTimeZone) : zonedInputValue(schedule.at, schedule?.timeZone ?? hostTimeZone));
+			const [maxRunsChoice, setMaxRunsChoice] = (0, react.useState)(() => runCapOption(schedule?.maxRuns));
+			const [maxRunsText, setMaxRunsText] = (0, react.useState)(schedule?.maxRuns === void 0 ? "" : String(schedule.maxRuns));
 			const [enabled, setEnabled] = (0, react.useState)(schedule?.enabled ?? false);
 			const [nextRunAt, setNextRunAt] = (0, react.useState)(schedule?.nextRunAt);
 			const [lastTriggeredAt, setLastTriggeredAt] = (0, react.useState)(schedule?.lastTriggeredAt);
 			const [error, setError] = (0, react.useState)(void 0);
-			const hostTimeZone = controller.getSnapshot().host?.scheduler.timeZone;
-			const [zone, setZone] = (0, react.useState)(schedule?.timeZone ?? "");
 			const now = Date.now();
 			(0, react.useEffect)(() => {
+				setMode(schedule?.mode ?? "cron");
 				setCron(schedule?.cron ?? "0 9 * * *");
+				setZone(schedule?.timeZone ?? "");
+				setAtText(schedule?.at === void 0 ? defaultZonedInputValue(Date.now(), schedule?.timeZone ?? hostTimeZone) : zonedInputValue(schedule.at, schedule?.timeZone ?? hostTimeZone));
+				setMaxRunsChoice(runCapOption(schedule?.maxRuns));
+				setMaxRunsText(schedule?.maxRuns === void 0 ? "" : String(schedule.maxRuns));
 				setEnabled(schedule?.enabled ?? false);
 				setNextRunAt(schedule?.nextRunAt);
 				setLastTriggeredAt(schedule?.lastTriggeredAt);
-				setZone(schedule?.timeZone ?? "");
 				setError(void 0);
 			}, [
 				task.id,
+				hostTimeZone,
+				schedule?.mode,
 				schedule?.enabled,
 				schedule?.cron,
+				schedule?.at,
 				schedule?.timeZone,
 				schedule?.nextRunAt,
-				schedule?.lastTriggeredAt
+				schedule?.lastTriggeredAt,
+				schedule?.maxRuns
 			]);
 			/** Validate + persist the current cron text (Enter or blur). */
 			const saveCron = (value) => {
@@ -8345,19 +9138,113 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					return;
 				}
 				setError(void 0);
-				controller.setSchedule(task.id, { cron: trimmed });
+				controller.setSchedule(task.id, {
+					mode: "cron",
+					cron: trimmed
+				});
+			};
+			/** Validate + persist the one-shot's planned instant. */
+			const saveAt = (value) => {
+				setAtText(value);
+				const at = parseZonedInput(value, effectiveZone);
+				if (at === void 0 || at <= now) {
+					setError(t("detail.schedule.atInvalid"));
+					return;
+				}
+				setError(void 0);
+				controller.setSchedule(task.id, {
+					mode: "once",
+					at
+				});
+			};
+			/** Switch the kind of plan, persisting a usable target for the new kind. */
+			const changeMode = (next) => {
+				if (next === "once") {
+					const at = parseZonedInput(atText, effectiveZone);
+					if (at === void 0 || at <= now) {
+						setError(t("detail.schedule.atInvalid"));
+						return;
+					}
+					setMode("once");
+					setError(void 0);
+					controller.setSchedule(task.id, {
+						mode: "once",
+						at
+					});
+					return;
+				}
+				const trimmed = cron.trim();
+				if (trimmed === "" || !isValidCron(trimmed)) {
+					setError(t("detail.schedule.invalid"));
+					return;
+				}
+				setMode("cron");
+				setError(void 0);
+				controller.setSchedule(task.id, {
+					mode: "cron",
+					cron: trimmed
+				});
 			};
 			/**
 			* Change the rule's zone. `''` clears the stored zone, which is how a user
-			* returns a rule to following the Host zone.
+			* returns a rule to following the Host zone. A one-shot's instant is
+			* absolute, so only its rendered wall clock follows the new zone; a cron
+			* rule's wall clock itself moves with the zone.
 			*/
 			const changeZone = (value) => {
 				setZone(value);
 				setError(void 0);
+				if (mode === "once" && schedule?.at !== void 0) {
+					setAtText(zonedInputValue(schedule.at, value === "" ? hostTimeZone : value));
+					controller.setSchedule(task.id, {
+						mode: "once",
+						timeZone: value === "" ? null : value
+					});
+					return;
+				}
 				controller.setSchedule(task.id, { timeZone: value === "" ? null : value });
 			};
-			/** Arm/disarm the schedule (arming first persists the edited cron). */
+			/** Change the recurring rule's run cap (unlimited, a preset, or a custom value). */
+			const applyMaxRuns = (choice) => {
+				setMaxRunsChoice(choice);
+				setError(void 0);
+				if (choice === "unlimited") {
+					controller.setSchedule(task.id, { maxRuns: null });
+					return;
+				}
+				if (choice === "custom") {
+					setMaxRunsText(schedule?.maxRuns === void 0 ? "" : String(schedule.maxRuns));
+					return;
+				}
+				controller.setSchedule(task.id, { maxRuns: Number(choice) });
+			};
+			/** Persist a custom run cap; a non-positive or fractional value is refused. */
+			const saveCustomMaxRuns = (value) => {
+				setMaxRunsText(value);
+				const parsed = Number(value.trim());
+				if (value.trim() === "" || !Number.isInteger(parsed) || parsed < 1) {
+					setError(t("detail.schedule.maxRunsInvalid"));
+					return;
+				}
+				setError(void 0);
+				controller.setSchedule(task.id, { maxRuns: parsed });
+			};
+			/** Arm/disarm the schedule (arming first persists the edited plan). */
 			const toggleEnabled = (next) => {
+				if (next && mode === "once") {
+					const at = parseZonedInput(atText, effectiveZone);
+					if (at === void 0 || at <= now) {
+						setError(t("detail.schedule.atInvalid"));
+						return;
+					}
+					setError(void 0);
+					if (controller.setSchedule(task.id, {
+						mode: "once",
+						at,
+						enabled: true
+					}) && !controller.isHostBacked()) setEnabled(true);
+					return;
+				}
 				const trimmed = cron.trim();
 				if (next && (trimmed === "" || !isValidCron(trimmed))) {
 					setError(t("detail.schedule.invalid"));
@@ -8369,16 +9256,28 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					...next && trimmed !== schedule?.cron ? { cron: trimmed } : {}
 				}) && !controller.isHostBacked()) setEnabled(next);
 			};
+			/** Drop every future trigger without touching the card's execution history. */
+			const cancelSchedule = () => {
+				setError(void 0);
+				if (controller.setSchedule(task.id, { enabled: false }) && !controller.isHostBacked()) setEnabled(false);
+			};
 			const applyPreset = (preset) => {
 				if (preset === "") return;
 				setCron(preset);
+				setMode("cron");
 				setError(void 0);
-				controller.setSchedule(task.id, { cron: preset });
+				controller.setSchedule(task.id, {
+					mode: "cron",
+					cron: preset
+				});
 			};
 			const effectiveZone = zone === "" ? hostTimeZone : zone;
 			const nextLabel = !enabled || nextRunAt === void 0 ? t("detail.schedule.notScheduled") : nextRunAt <= now ? t("detail.schedule.dueSoon") : nextRunLabel(nextRunAt, effectiveZone, formatHostTimestamp, now);
 			const lastLabel = lastTriggeredAt === void 0 ? "—" : formatHostTimestamp(lastTriggeredAt, effectiveZone);
 			const zones = zoneChoices(hostTimeZone, schedule?.timeZone);
+			const budget = schedule === void 0 ? void 0 : budgetLabel(schedule);
+			const ended = schedule === void 0 ? void 0 : endedLabel(schedule);
+			const skipped = schedule === void 0 ? void 0 : skippedLabel(schedule);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: board_module_css_default.detailSection,
 				children: [
@@ -8394,42 +9293,128 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 							}
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.enable") })]
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: board_module_css_default.scheduleRow,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-							className: `${board_module_css_default.input} ${board_module_css_default.scheduleInput}${error !== void 0 ? ` ${board_module_css_default.scheduleInputInvalid}` : ""}`,
-							value: cron,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+						className: board_module_css_default.scheduleZone,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.mode") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+							className: board_module_css_default.schedulePreset,
+							value: mode,
 							disabled: pending,
-							placeholder: "0 9 * * *",
-							spellCheck: false,
-							"aria-label": t("detail.schedule.cron"),
+							"aria-label": t("detail.schedule.mode"),
 							onChange: (event) => {
-								setCron(event.target.value);
-								setError(void 0);
+								changeMode(event.target.value);
 							},
-							onBlur: () => {
-								saveCron(cron);
-							},
-							onKeyDown: (event) => {
-								if (event.key === "Enter") saveCron(cron);
-							}
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
-							className: board_module_css_default.schedulePreset,
-							value: "",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+								value: "cron",
+								children: t("detail.schedule.mode.cron")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+								value: "once",
+								children: t("detail.schedule.mode.once")
+							})]
+						})]
+					}),
+					mode === "once" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+						className: board_module_css_default.scheduleZone,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.at") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+							className: board_module_css_default.input,
+							type: "datetime-local",
+							value: atText,
 							disabled: pending,
-							"aria-label": t("detail.schedule.presets"),
+							"aria-label": t("detail.schedule.at"),
+							title: t("detail.schedule.atHint"),
 							onChange: (event) => {
-								applyPreset(event.target.value);
+								setAtText(event.target.value);
+								setError(void 0);
 							},
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
-								value: "",
-								children: [t("detail.schedule.presets"), "…"]
-							}), SCHEDULE_PRESETS.map((preset) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
-								value: preset.cron,
-								children: t(preset.label)
-							}, preset.cron))]
+							onBlur: () => {
+								saveAt(atText);
+							}
 						})]
-					}),
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: board_module_css_default.scheduleRow,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								className: `${board_module_css_default.input} ${board_module_css_default.scheduleInput}${error !== void 0 ? ` ${board_module_css_default.scheduleInputInvalid}` : ""}`,
+								value: cron,
+								disabled: pending,
+								placeholder: "0 9 * * *",
+								spellCheck: false,
+								"aria-label": t("detail.schedule.cron"),
+								onChange: (event) => {
+									setCron(event.target.value);
+									setError(void 0);
+								},
+								onBlur: () => {
+									saveCron(cron);
+								},
+								onKeyDown: (event) => {
+									if (event.key === "Enter") saveCron(cron);
+								}
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+								className: board_module_css_default.schedulePreset,
+								value: "",
+								disabled: pending,
+								"aria-label": t("detail.schedule.presets"),
+								onChange: (event) => {
+									applyPreset(event.target.value);
+								},
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("option", {
+									value: "",
+									children: [t("detail.schedule.presets"), "…"]
+								}), SCHEDULE_PRESETS.map((preset) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+									value: preset.cron,
+									children: t(preset.label)
+								}, preset.cron))]
+							})]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							className: board_module_css_default.scheduleZone,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.maxRuns") }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+								className: board_module_css_default.schedulePreset,
+								value: maxRunsChoice,
+								disabled: pending,
+								"aria-label": t("detail.schedule.maxRuns"),
+								onChange: (event) => {
+									applyMaxRuns(event.target.value);
+								},
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+										value: "unlimited",
+										children: t("detail.schedule.maxRunsUnlimited")
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+										value: "1",
+										children: t("detail.schedule.maxRunsValue", { count: "1" })
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+										value: "2",
+										children: t("detail.schedule.maxRunsValue", { count: "2" })
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+										value: "custom",
+										children: t("detail.schedule.maxRunsCustom")
+									})
+								]
+							})]
+						}),
+						maxRunsChoice === "custom" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+							className: board_module_css_default.scheduleZone,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.maxRuns") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								className: board_module_css_default.input,
+								type: "number",
+								min: 1,
+								step: 1,
+								value: maxRunsText,
+								disabled: pending,
+								"aria-label": t("detail.schedule.maxRuns"),
+								onChange: (event) => {
+									setMaxRunsText(event.target.value);
+								},
+								onBlur: () => {
+									saveCustomMaxRuns(maxRunsText);
+								}
+							})]
+						})
+					] }),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 						className: board_module_css_default.scheduleZone,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("detail.schedule.timeZone") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
@@ -8437,7 +9422,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 							value: zone,
 							disabled: pending,
 							"aria-label": t("detail.schedule.timeZone"),
-							title: t("detail.schedule.timeZoneHint"),
+							title: mode === "once" ? t("detail.schedule.zoneOnceHint") : t("detail.schedule.timeZoneHint"),
 							onChange: (event) => {
 								changeZone(event.target.value);
 							},
@@ -8462,6 +9447,25 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 							" ",
 							lastLabel
 						]
+					}),
+					budget !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: board_module_css_default.scheduleMeta,
+						children: budget
+					}),
+					ended !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: board_module_css_default.scheduleMeta,
+						children: ended
+					}),
+					ended === void 0 && skipped !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: board_module_css_default.scheduleMeta,
+						children: skipped
+					}),
+					enabled && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: board_module_css_default.ghostButton,
+						disabled: pending,
+						onClick: cancelSchedule,
+						children: t("detail.schedule.cancel")
 					})
 				]
 			});
@@ -8818,7 +9822,8 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 										task: current,
 										pending,
 										executionOptions: snapshot.executionOptions,
-										teamRunAvailable: snapshot.host?.teamRunAvailable === true
+										teamRunAvailable: snapshot.host?.teamRunAvailable === true,
+										goalRunEnabled: snapshot.host?.goalRunEnabled === true
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScheduleSection, {
 										controller,
 										task: current,
@@ -9846,6 +10851,51 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 				}) : null]
 			});
 		}
+		/** A staged value field. `numeric` only hints the keypad: which drafts a field accepts is decided by its spec. */
+		function ValueField(props) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: settings_card_module_css_default.field,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: settings_card_module_css_default.head,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+							className: settings_card_module_css_default.label,
+							htmlFor: props.id,
+							children: props.label
+						}), props.overridden ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: settings_card_module_css_default.badges,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: settings_card_module_css_default.badge,
+								children: props.overriddenLabel
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: settings_card_module_css_default.reset,
+								disabled: props.disabled,
+								onClick: props.onReset,
+								children: props.resetLabel
+							})]
+						}) : null]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						id: props.id,
+						className: props.invalid ? settings_card_module_css_default.inputInvalid : settings_card_module_css_default.input,
+						type: "text",
+						...props.numeric === true ? { inputMode: "numeric" } : {},
+						...props.invalid ? { "aria-invalid": true } : {},
+						value: props.text,
+						placeholder: props.placeholder ?? "",
+						disabled: props.disabled,
+						onChange: (event) => {
+							props.onEdit(event.target.value);
+						}
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: props.invalid ? settings_card_module_css_default.invalid : settings_card_module_css_default.hint,
+						children: props.invalid ? props.invalidLabel : props.hint
+					})
+				]
+			});
+		}
 		const NON_SKIN_BODY_MARKERS = /* @__PURE__ */ new Set(["dshSkinCenter", "dshSidebarCollapsed"]);
 		function isSkinActive() {
 			return Object.keys(document.body.dataset).some((key) => key.startsWith("dsh") && !NON_SKIN_BODY_MARKERS.has(key));
@@ -10444,6 +11494,28 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 		/** The depth choices the card offers, derived from the supported range. */
 		const SUBTASK_DEPTH_CHOICES = Array.from({ length: 3 }, (_, index) => String(1 + index));
 		/**
+		* The roster-poll cadence field: a whole number of seconds inside the
+		* supported range, because the Host schema (`sessionPollSeconds`) is numeric.
+		* A draft outside the range blocks the save instead of staging a value the
+		* Host would clamp behind the user's back.
+		*/
+		function sessionPollField() {
+			return {
+				field: "sessionPollSeconds",
+				format: (value) => typeof value === "number" && Number.isInteger(value) ? String(value) : "",
+				parse: (text) => {
+					const trimmed = text.trim();
+					if (trimmed === "") return { kind: "clear" };
+					if (!/^\d+$/.test(trimmed)) return void 0;
+					const seconds = Number(trimmed);
+					return seconds >= 1 && seconds <= 300 ? {
+						kind: "set",
+						value: seconds
+					} : void 0;
+				}
+			};
+		}
+		/**
 		* The depth field: a choice among the supported levels whose draft text is a
 		* number, because the Host schema (`maxSubtaskDepth`) is numeric. A draft
 		* outside the range blocks the save instead of staging a value the Host
@@ -10513,6 +11585,8 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					booleanField("announceToAgent"),
 					booleanField("preventIdleSleep"),
 					subtaskDepthField(),
+					sessionPollField(),
+					booleanField("goalRunEnabled"),
 					booleanField("goalVerification"),
 					judgeModelField(),
 					judgeEffortField()
@@ -10526,6 +11600,8 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 					announceToAgent: this.form.field("announceToAgent"),
 					preventIdleSleep: this.form.field("preventIdleSleep"),
 					maxSubtaskDepth: this.form.field("maxSubtaskDepth"),
+					sessionPollSeconds: this.form.field("sessionPollSeconds"),
+					goalRunEnabled: this.form.field("goalRunEnabled"),
 					goalVerification: this.form.field("goalVerification"),
 					goalVerificationModel: this.form.field("goalVerificationModel"),
 					goalVerificationReasoningEffort: this.form.field("goalVerificationReasoningEffort")
@@ -10728,6 +11804,20 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 										props.resetField("preventIdleSleep");
 									}
 								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ValueField, {
+									id: "settings-task-board-session-poll",
+									label: t("settings.sessionPollSeconds"),
+									hint: t("settings.sessionPollSecondsHint"),
+									numeric: true,
+									...fieldProps,
+									...state.sessionPollSeconds,
+									onEdit: (text) => {
+										props.edit("sessionPollSeconds", text);
+									},
+									onReset: () => {
+										props.resetField("sessionPollSeconds");
+									}
+								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ChoiceField, {
 									id: "settings-task-board-subtask-depth",
 									label: t("settings.maxSubtaskDepth"),
@@ -10748,6 +11838,32 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 								})
 							]
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PluginSettingsCard, {
+							t,
+							titleKey: "settings.runBehaviorTitle",
+							descriptionKey: "settings.runBehaviorCardHint",
+							defaultOpen: false,
+							hideFooter: true,
+							state: nestedShell,
+							onSave: props.save,
+							onDiscard: props.discard,
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(BooleanField, {
+								id: "settings-task-board-goal-run",
+								label: t("settings.goalRunGlobal"),
+								hint: t("settings.goalRunGlobalHint"),
+								inheritLabel: t("settings.inherit"),
+								onLabel: t("settings.on"),
+								offLabel: t("settings.off"),
+								...fieldProps,
+								...state.goalRunEnabled,
+								onEdit: (text) => {
+									props.edit("goalRunEnabled", text);
+								},
+								onReset: () => {
+									props.resetField("goalRunEnabled");
+								}
+							})
+						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(PluginSettingsCard, {
 							t,
 							titleKey: "settings.goalVerificationTitle",
@@ -11220,7 +12336,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 		/** The building package's version, when the bundle carries it. */
 		function bakedVersion() {
 			try {
-				return "0.4.5";
+				return "0.4.6";
 			} catch {
 				return;
 			}
@@ -11343,40 +12459,33 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 				return false;
 			}
 		}
-		//#endregion
-		//#region src/client/board-card-seat.ts
-		/**
-		* Board-owned variant of the family plugin-card seat that can declare child
-		* slots on the registration.
-		*
-		* The shared `installPluginCard` helper owns seat selection but cannot forward
-		* a `children` declaration, and the task board's settings card declares the
-		* `task-board.settings.section` seat a provider renders into. This wrapper
-		* reuses the shared seat decision (`familyGroupLoaded` and the two seat keys)
-		* and adds the declaration; it should collapse back into the shared helper once
-		* that helper accepts children.
-		*
-		* @module dsh-task-board/client/board-card-seat
-		*/
+		/** Report a refused registration instead of leaving the user with no card. */
 		function warnRefusedSeat(seat, error) {
 			try {
 				console.warn(`[dsh-web] plugin card registration into "${seat}" was refused; the card will not render`, error);
 			} catch {}
 		}
 		/**
-		* Contribute the board's settings card to the seat this host renders, declaring
-		* the child slots it owns. Mirrors the shared helper's reconcile discipline: the
-		* entry moves when the family group appears, and is never in two seats at once.
+		* Contribute one family plugin card to the seat this host renders, following
+		* the group if it loads later. The entry is disposed and re-registered on a
+		* seat change, never duplicated.
 		* @param ctx - client context (its slot registry decides the seat).
-		* @param seat - the card contribution and its children declaration.
+		* @param seat - the card contribution.
 		*/
-		function installBoardCard(ctx, seat) {
+		function installPluginCard(ctx, seat) {
 			const slots = ctx.slots;
 			const component = seat.component;
 			const inject = seat.inject;
 			let dispose;
 			let current;
+			/**
+			* Re-entrancy latch. The registry emits a change event synchronously from
+			* inside both `register` and the previous entry's disposer, so an unguarded
+			* reconcile would re-enter itself mid-move and register the card twice into
+			* the seat it is leaving ("already has an entry for key ...").
+			*/
 			let reconciling = false;
+			/** Reconcile the contribution with the currently live seat (no-op when unchanged). */
 			const reconcile = () => {
 				if (reconciling) return;
 				const target = familyGroupLoaded(ctx) ? FAMILY_PLUGIN_CARD_SEAT : OFFICIAL_PLUGIN_CARD_SEAT;
@@ -11393,13 +12502,13 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 						...seat.order === void 0 ? {} : { order: seat.order },
 						...seat.label === void 0 ? {} : { label: seat.label },
 						locale: seat.locale,
-						children: seat.children,
+						...seat.children === void 0 ? {} : { children: seat.children },
 						...seat.inject === void 0 ? {} : { inject }
 					} : {
 						name: OFFICIAL_PLUGIN_CARD_SEAT,
 						key: seat.bundle,
 						locale: seat.locale,
-						children: seat.children,
+						...seat.children === void 0 ? {} : { children: seat.children },
 						...seat.inject === void 0 ? {} : { inject }
 					}, component);
 					current = target;
@@ -11601,11 +12710,10 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 		];
 		/**
 		* Required services (fiber inject waiting — the runtime must be up first).
-		* The generated remote faces are probed at use time instead of injected:
-		* `remote.agentPresets` only registers on 0.1.2-alpha.2 hosts (the
-		* api-remotes contribution), so a hard wait would pend the entry forever
-		* on hosts below that cohort, which serve the same roster through the
-		* connection RPC face.
+		* The generated remote namespaces are not all hard injects: `remote.session`
+		* is one, while `remote.agentPresets` is reached through a scoped inject at
+		* use time (see mountUi), because the namespace mounts with the official
+		* api-remotes assembly applied beside this entry rather than before it.
 		*/
 		const inject = [
 			"slots",
@@ -11620,41 +12728,22 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 			"layout"
 		];
 		/**
-		* Read the agent-preset roster through whichever face the running host
-		* serves: the generated api-remotes face (`remote.agentPresets`,
-		* 0.1.2-alpha.2) or the connection RPC face
-		* (`connection.api.agentPresets`, hosts below that cohort). Answers
-		* undefined when the host serves neither, so the caller leaves the picker
-		* options untouched instead of erroring.
+		* Read the agent-preset roster through the generated api-remotes face. The
+		* caller passes the namespace resolved inside its scoped inject, so a host
+		* that serves no such namespace never reaches here; a host that serves it
+		* answers `ok: false` instead, which leaves the picker options untouched.
+		* @param remote - the `remote.agentPresets` namespace.
+		* @returns the roster, or a failed read the caller ignores.
 		*/
-		async function readPresetRoster(ctx, remote) {
-			let remotes;
-			try {
-				remotes = remote.agentPresets;
-			} catch {
-				remotes = void 0;
-			}
-			if (remotes !== void 0) {
-				const response = await remotes.list();
-				if (!response.ok) return {
-					ok: false,
-					presets: []
-				};
-				return {
-					ok: true,
-					presets: response.value.presets
-				};
-			}
-			const legacy = ctx.get("connection").api?.agentPresets;
-			if (legacy === void 0) return void 0;
-			const response = await legacy.list({});
-			if (!response.result.ok || response.result.value === void 0) return {
+		async function readPresetRoster(remote) {
+			const response = await remote.list();
+			if (!response.ok) return {
 				ok: false,
 				presets: []
 			};
 			return {
 				ok: true,
-				presets: response.result.value.presets ?? []
+				presets: response.value.presets
 			};
 		}
 		/**
@@ -11685,7 +12774,7 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 				clientService.detach();
 			}, "task-board: extension service");
 			const settingsCard = new TaskBoardSettingsCardController(settingsForm, (request) => clientService.dispatch(request));
-			installBoardCard(ctx, {
+			installPluginCard(ctx, {
 				bundle: "@linxin666/dsh-client-ui-task-board",
 				id: "task-board",
 				order: 110,
@@ -11733,10 +12822,10 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 				controller.setWorkspaceCreator(async (path) => {
 					return { workspaceId: (await workspaces.create({ path })).workspaceId };
 				});
-				const pushPresetOptions = async () => {
+				const pushPresetOptions = async (presetRemote) => {
 					try {
-						const roster = await readPresetRoster(ctx, remote);
-						if (roster === void 0 || !roster.ok) return;
+						const roster = await readPresetRoster(presetRemote);
+						if (!roster.ok) return;
 						controller.setExecutionOptions({ presets: roster.presets.map((preset) => ({
 							id: preset.id,
 							name: preset.name,
@@ -11748,6 +12837,17 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 						console.error("[dsh-task-board] agent preset roster read failed", error);
 					}
 				};
+				const presetRosterFeed = ctx.inject(["remote.agentPresets"], (inner) => {
+					const presetRemote = inner.get("remote.agentPresets");
+					if (presetRemote === void 0) return;
+					pushPresetOptions(presetRemote);
+					return inner.on("connection/reset", () => {
+						pushPresetOptions(presetRemote);
+					});
+				});
+				disposers.push(() => {
+					presetRosterFeed.dispose();
+				});
 				const pushModelOptions = async () => {
 					try {
 						let models = [];
@@ -11803,10 +12903,8 @@ Please report this to https://github.com/markedjs/marked.`, e) {
 						console.error("[dsh-task-board] model options read failed", error);
 					}
 				};
-				pushPresetOptions();
 				pushModelOptions();
 				disposers.push(ctx.on("connection/reset", () => {
-					pushPresetOptions();
 					pushModelOptions();
 				}));
 				try {