@william2000/dsh-nova-ui-task-board 0.1.0

package/lib/index.js

@@ -0,0 +1,4873 @@
+import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import z from "schemastery";
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { homedir } from "node:os";
+//#region src/core/context.ts
+/** 自动收集来源（§14.3：只进 backlog，必须人工 promote 才可执行）。 */
+const AUTO_COLLECTED_SOURCES = ["github_issue", "bookmark_collector"];
+/** 是否自动收集来源（人工审核闸门的判据之一）。 */
+function isAutoCollected(task) {
+	return task.source !== void 0 && AUTO_COLLECTED_SOURCES.includes(task.source);
+}
+/**
+* 清洗文本（§14.3）：剥离控制字符（保留 \n \t）、trim、长度封顶。
+* 用于自动收集的标题/描述、评论正文等一切外部输入。
+*/
+function sanitizeCollectedText(text, maxLength = 4e3) {
+	if (typeof text !== "string") return "";
+	return text.replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, "").trim().slice(0, maxLength);
+}
+/** 收集去重键（§14.1/14.2）：同来源同 URL 视为同一条外部内容。 */
+function collectorDedupKey(source, metadata) {
+	const url = metadata?.url;
+	return url === void 0 || url === "" ? void 0 : `${source}:${url}`;
+}
+/** 账本中是否已存在同 (source, url) 的收集任务（去重判定，Host 落账前调用）。 */
+function hasCollected(tasks, source, metadata) {
+	const key = collectorDedupKey(source, metadata);
+	if (key === void 0) return false;
+	return tasks.some((task) => task.source === source && task.metadata?.url !== void 0 && collectorDedupKey(source, task.metadata) === key);
+}
+/** GitHub 标签命中判定（§14.1 过滤器）：规则标签非空时，Issue 至少命中一个（大小写不敏感）。 */
+function matchesGithubLabels(issueLabels, ruleLabels) {
+	if (ruleLabels.length === 0) return true;
+	const wanted = ruleLabels.map((label) => label.toLowerCase());
+	return (issueLabels ?? []).some((label) => wanted.includes(label.toLowerCase()));
+}
+/** 从 Issue 载荷/API 响应的 labels 提取标签名数组（string 或 {name} 两种形态）。 */
+function issueLabelNames(issue) {
+	return (issue.labels ?? []).map((label) => typeof label === "string" ? label : label?.name ?? "").filter((label) => label !== "");
+}
+/**
+* 由收集输入构造一条标准的 backlog 任务（§14.3：只进 backlog；prompt 回退用
+* 标题——promote 到 todo 后执行即以标题为 Prompt；tags 默认 [] 待人工标注）。
+*/
+function newCollectedTask(input, id, now, order) {
+	return {
+		id,
+		title: input.title,
+		description: input.description,
+		prompt: input.title,
+		status: "backlog",
+		source: input.source,
+		createdAt: now,
+		updatedAt: now,
+		executions: [],
+		tags: [],
+		comments: [],
+		artifacts: [],
+		metadata: input.metadata,
+		order
+	};
+}
+/**
+* 严格解析 GitHub webhook `issues` 事件载荷（§14.1）：只消费已知字段、未知
+* 字段剥离（载荷为外部输入，永不被解释为任务字段）；结构非法返回 undefined。
+* 收集内容（标题/正文）在映射时经 sanitizeCollectedText 清洗（§14.3）。
+*/
+function parseGithubWebhookPayload(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+	const payload = value;
+	if (typeof payload.action !== "string" || payload.action === "") return void 0;
+	const issue = payload.issue;
+	if (typeof issue !== "object" || issue === null || Array.isArray(issue)) return void 0;
+	const issueRaw = issue;
+	const labels = [];
+	if (Array.isArray(issueRaw.labels)) {
+		for (const label of issueRaw.labels) if (typeof label === "string") labels.push(label);
+		else if (typeof label === "object" && label !== null && typeof label.name === "string") labels.push({ name: label.name });
+	}
+	const out = {
+		action: payload.action,
+		issue: { labels }
+	};
+	if (typeof issueRaw.number === "number" && Number.isFinite(issueRaw.number)) out.issue.number = issueRaw.number;
+	if (typeof issueRaw.title === "string") out.issue.title = issueRaw.title;
+	if (typeof issueRaw.html_url === "string") out.issue.html_url = issueRaw.html_url;
+	if (typeof issueRaw.body === "string" || issueRaw.body === null) out.issue.body = issueRaw.body;
+	if (typeof payload.repository === "object" && payload.repository !== null) {
+		const repository = payload.repository;
+		if (typeof repository.full_name === "string" && repository.full_name !== "") out.repository = { full_name: repository.full_name };
+	}
+	return out;
+}
+/**
+* GitHub Issue → 收集任务输入（§14.1）：标题/描述清洗、来源链接等写入
+* metadata（url/externalId/repo/labels），供去重与追溯。
+*/
+function githubIssueToCollectedTaskInput(issue, repo) {
+	const number = issue.number;
+	const title = sanitizeCollectedText(typeof issue.title === "string" ? issue.title : "", 200) || (number === void 0 ? "GitHub Issue" : `GitHub Issue #${number}`);
+	const description = sanitizeCollectedText(issue.body ?? "", 4e3);
+	const labels = (issue.labels ?? []).map((label) => typeof label === "string" ? label : label?.name ?? "").filter((label) => label !== "");
+	return {
+		title,
+		description,
+		source: "github_issue",
+		metadata: {
+			...typeof issue.html_url === "string" && issue.html_url !== "" ? { url: issue.html_url.slice(0, 2048) } : {},
+			...number !== void 0 ? { externalId: String(number) } : {},
+			...repo !== void 0 && repo !== "" ? { repo: repo.slice(0, 256) } : {},
+			...labels.length > 0 ? { labels: labels.join(",") } : {}
+		}
+	};
+}
+/** 书签条目 → 收集任务输入（§14.2）：URL 缺失丢弃；标题回退用 URL。 */
+function bookmarkEntryToCollectedTaskInput(entry) {
+	const url = typeof entry.url === "string" ? sanitizeCollectedText(entry.url, 2048) : "";
+	if (url === "") return void 0;
+	return {
+		title: sanitizeCollectedText(entry.title, 200) || url,
+		description: sanitizeCollectedText(entry.note, 4e3),
+		source: "bookmark_collector",
+		metadata: { url }
+	};
+}
+/** 解析书签收件箱文件（JSONL：每行一个 JSON 对象；空行/非法行跳过）。 */
+function parseBookmarkEntries(content) {
+	const entries = [];
+	for (const line of content.split("\n")) {
+		const trimmed = line.trim();
+		if (trimmed === "") continue;
+		try {
+			const parsed = JSON.parse(trimmed);
+			if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) continue;
+			const entry = parsed;
+			if (entry.title !== void 0 && typeof entry.title !== "string") continue;
+			if (entry.url !== void 0 && typeof entry.url !== "string") continue;
+			if (entry.note !== void 0 && typeof entry.note !== "string") continue;
+			entries.push({
+				...typeof entry.title === "string" ? { title: entry.title } : {},
+				...typeof entry.url === "string" ? { url: entry.url } : {},
+				...typeof entry.note === "string" ? { note: entry.note } : {}
+			});
+		} catch {}
+	}
+	return entries;
+}
+/**
+* 注入 token 预算（B5 调研结论：Host 侧摘取 + 固定预算，避免把全量上下文灌给
+* agent）。逐字段上限 + 注入块总量上限（约 400 token，中文按 0.6 token/字）。
+*/
+const CONTEXT_INJECTION_BUDGET = {
+	/** goal 上限（字符）。 */
+	goalMax: 200,
+	/** lastAiSummary 上限（字符）。 */
+	summaryMax: 600,
+	/** latestUserFeedback 上限（字符）。 */
+	feedbackMax: 300,
+	/** relatedLinks 合计上限（字符）。 */
+	linksMax: 400,
+	/** 注入块总量上限（字符）。 */
+	totalMax: 1500
+};
+/** 任务最近一条 user_feedback 评论的正文（供快照 latestUserFeedback）。 */
+function latestUserFeedback(task) {
+	let latest;
+	for (const comment of task.comments) {
+		if (comment.type !== "user_feedback") continue;
+		if (latest === void 0 || comment.createdAt >= latest.createdAt) latest = comment;
+	}
+	return latest?.body;
+}
+/** 截断文本到上限（中文友好：按字符计）。 */
+function truncateText(text, max) {
+	return text.length <= max ? text : `${text.slice(0, max)}…`;
+}
+/**
+* 组合注入块（B5）：只带摘要与必要片段——goal / lastAiSummary /
+* latestUserFeedback / relatedLinks，逐字段按预算截断，总量再封顶。
+* 快照不存在或无可注入内容时返回 undefined（不追加注入）。
+*/
+function composeInjectionContext(task) {
+	const snapshot = task.contextSnapshot;
+	if (snapshot === void 0) return void 0;
+	const lines = [];
+	if (snapshot.goal !== void 0 && snapshot.goal !== "") lines.push(`目标: ${truncateText(snapshot.goal, CONTEXT_INJECTION_BUDGET.goalMax)}`);
+	if (snapshot.lastAiSummary !== void 0 && snapshot.lastAiSummary !== "") lines.push(`最近 AI 摘要: ${truncateText(snapshot.lastAiSummary, CONTEXT_INJECTION_BUDGET.summaryMax)}`);
+	if (snapshot.latestUserFeedback !== void 0 && snapshot.latestUserFeedback !== "") lines.push(`最近用户反馈: ${truncateText(snapshot.latestUserFeedback, CONTEXT_INJECTION_BUDGET.feedbackMax)}`);
+	if (snapshot.relatedLinks.length > 0) {
+		const joined = snapshot.relatedLinks.join(" ").slice(0, CONTEXT_INJECTION_BUDGET.linksMax);
+		if (joined !== "") lines.push(`相关链接: ${joined}`);
+	}
+	if (lines.length === 0) return void 0;
+	let block = `[任务上下文 · 摘要注入]\n${lines.join("\n")}`;
+	if (block.length > CONTEXT_INJECTION_BUDGET.totalMax) block = block.slice(0, CONTEXT_INJECTION_BUDGET.totalMax);
+	return block;
+}
+/**
+* 执行 Prompt 合成（B5 落定，runner.launch 使用）：基线为任务 Prompt（空则
+* 回退标题）；任务有上下文快照时在尾部追加注入块——后续调用只使用摘要与
+* 必要片段。无快照的任务行为与 T005 完全一致（不影响既有执行语义）。
+*/
+function composePrompt(task) {
+	const base = task.prompt.trim() !== "" ? task.prompt : task.title;
+	const injected = composeInjectionContext(task);
+	return injected === void 0 ? base : `${base}\n\n${injected}`;
+}
+/** 从快照补丁构造 Host 侧结算后快照更新（B5：只覆盖可注入字段）。 */
+function contextPatchFromSettle(task, lastAiSummary) {
+	const patch = {};
+	if (lastAiSummary !== void 0 && lastAiSummary !== "") patch.lastAiSummary = truncateText(lastAiSummary, CONTEXT_INJECTION_BUDGET.summaryMax);
+	const feedback = latestUserFeedback(task);
+	if (feedback !== void 0) patch.latestUserFeedback = feedback;
+	const url = task.metadata?.url;
+	if (url !== void 0 && url !== "") patch.relatedLinks = [url];
+	return patch;
+}
+/** 上下文快照的数组字段归一化（跨模块共用：去空、去重、封顶）。 */
+function normalizeSnapshotList(value) {
+	const seen = /* @__PURE__ */ new Set();
+	const items = [];
+	for (const item of value ?? []) {
+		const trimmed = item.trim();
+		if (trimmed === "" || seen.has(trimmed)) continue;
+		seen.add(trimmed);
+		items.push(trimmed);
+		if (items.length >= 50) break;
+	}
+	return items;
+}
+/** 从 AutomationRule 读取收集来源配置（带默认值）。 */
+function ruleConfig(rule, key, fallback) {
+	const value = rule.config[key];
+	return value !== void 0 && value !== "" ? value : fallback;
+}
+//#endregion
+//#region src/host-runner.ts
+/** `/permission <id>` 命令的超时（对齐参考实现 30s）。 */
+const PERMISSION_COMMAND_TIMEOUT_MS = 3e4;
+/** 会话创建后的启动失败：仍标识会话（服务层先回填 sessionId 再结算 failed）。 */
+var SessionLaunchError = class extends Error {
+	sessionId;
+	constructor(sessionId, cause) {
+		super(`execution session ${sessionId} failed during launch: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+		this.sessionId = sessionId;
+		this.name = "SessionLaunchError";
+	}
+};
+/** RPC 信封铸造（对齐参考实现的 request 助手；rpcId 带 nova 前缀标识本项目）。 */
+function request(payload) {
+	return {
+		rpcId: `nova-task-board-${crypto.randomUUID()}`,
+		payload
+	};
+}
+/** RPC 业务错误 → 可读 Error（消息形如 `code: message`）。 */
+function failure(error) {
+	return /* @__PURE__ */ new Error(`${error.code}: ${error.message}`);
+}
+/** turn/end 载荷是否以 error 结束（§13.3 lastAgentError 判定）。 */
+function isErrorTurnEnd(data) {
+	if (typeof data !== "object" || data === null) return false;
+	const reason = data.reason;
+	return typeof reason === "object" && reason !== null && reason.kind === "error";
+}
+/**
+* 从历史事件中摘取本次执行（time ≥ startedAt）最近的 assistant 消息文本
+* （B5：Host 侧摘取摘要源，零额外 RPC——复用 inspect 已翻页的历史；长度上限
+* 8000 字符，最终摘要长度由 CONTEXT_INJECTION_BUDGET 约束）。
+*/
+function lastAssistantTextFrom(events, startedAt) {
+	let best;
+	for (const entry of events) {
+		const event = entry.event;
+		if (typeof event.time !== "number" || event.time < startedAt) continue;
+		if (event.type !== "assistant/message") continue;
+		const message = event.data?.message;
+		if (typeof message?.text !== "string" || message.text === "") continue;
+		const seq = typeof event.seq === "number" ? event.seq : 0;
+		if (best === void 0 || seq > best.seq) best = {
+			seq,
+			text: message.text.slice(0, 8e3)
+		};
+	}
+	return best?.text;
+}
+/** 翻页读取会话历史事件（逐页向旧翻，直到无更多页；失败抛错由调用方处理）。 */
+async function readHistoryEvents(api, sessionId, maxPages = 100) {
+	const events = [];
+	let beforeSeq;
+	for (let page = 0; page < maxPages; page += 1) {
+		const history = await api.history(request({
+			sessionId,
+			maxMessages: 100,
+			...beforeSeq === void 0 ? {} : { beforeSeq }
+		}));
+		if (!history.result.ok) throw failure(history.result.error);
+		events.push(...history.result.value.events);
+		if (!history.result.value.hasMore) return events;
+		const oldestSeq = history.result.value.events.reduce((oldest, entry) => {
+			const seq = entry.event.seq;
+			return oldest === void 0 ? seq : Math.min(oldest, seq);
+		}, void 0);
+		if (oldestSeq === void 0 || oldestSeq === beforeSeq) return events;
+		beforeSeq = oldestSeq;
+	}
+	return events;
+}
+/** 会话 transcript 全文读取上限（T012/B8：拆分会话结果解析；防超大会话内存放大）。 */
+const TRANSCRIPT_TEXT_LIMIT = 2e5;
+/**
+* 真实执行与结算驱动（§13.2/§13.3）。无状态、无计时器——轮询调度由
+* TaskBoardHostService 持有（5s 间隔）；本类只做单次 launch/inspect。
+*/
+var HostExecutionRunner = class {
+	api;
+	commands;
+	/** @param api - apiProxy 窄面（workspace/agentPresets/sessions 的读写子集）。 */
+	constructor(api, commands) {
+		this.api = api;
+		this.commands = commands;
+	}
+	/**
+	* 启动一次执行（§13.2 流程）：
+	* 1. fail-closed 校验钉住目标（工作区存在、预设存在且未损坏）——任一失败抛
+	*    错，调用方结算 failed，**不发送任务 Prompt**；
+	* 2. `sessions.create` 创建独立会话（携带钉住的 workspaceId/agentPreset）；
+	* 3. rename 为任务标题（可失败但仅装饰）；权限经 `/permission` 命令应用
+	*    （被拒/未匹配 → 失败）；
+	* 4. `sessions.prompt(mode:'queue', text = prompt || title)`。
+	*
+	* 会话创建之后的任何失败抛 `SessionLaunchError`（携带 sessionId）。
+	* @returns 创建的会话 id。
+	*/
+	async launch(task) {
+		if (task.workspaceId !== void 0) {
+			const workspaces = await this.api.workspace.list(request({}));
+			if (!workspaces.result.ok) throw failure(workspaces.result.error);
+			if (!workspaces.result.value.items.some((item) => item.workspaceId === task.workspaceId)) throw new Error(`workspace not found: ${task.workspaceId}`);
+		}
+		if (task.mode !== void 0) {
+			const presets = await this.api.agentPresets.list(request({}));
+			if (!presets.result.ok) throw failure(presets.result.error);
+			const preset = presets.result.value.presets.find((item) => item.id === task.mode);
+			if (preset === void 0) throw new Error(`agent preset not found: ${task.mode}`);
+			if (preset.broken !== void 0) throw new Error(`agent preset is unavailable: ${preset.broken}`);
+		}
+		const created = await this.api.sessions.create(request({
+			...task.workspaceId === void 0 ? {} : { workspaceId: task.workspaceId },
+			...task.mode === void 0 ? {} : { agentPreset: task.mode }
+		}));
+		if (!created.result.ok) throw failure(created.result.error);
+		const sessionId = created.result.value.sessionId;
+		try {
+			try {
+				const renamed = await this.api.sessions.rename(request({
+					sessionId,
+					title: task.title
+				}));
+				if (!renamed.result.ok) console.warn(`[dsh-task-board] session rename failed (decorative): ${renamed.result.error.code}: ${renamed.result.error.message}`);
+			} catch (error) {
+				console.warn(`[dsh-task-board] session rename failed (decorative): ${error instanceof Error ? error.message : String(error)}`);
+			}
+			if (task.permission !== void 0) {
+				if (this.commands === void 0) throw new Error("permission command dispatcher is unavailable");
+				const command = await this.commands.execute(sessionId, `/permission ${task.permission}`, AbortSignal.timeout(PERMISSION_COMMAND_TIMEOUT_MS));
+				if (command === void 0) throw new Error("permission command was not acknowledged");
+				if (command.kind !== "success") throw new Error(command.text ?? "permission command failed");
+			}
+			const prompt = await this.api.sessions.prompt(request({
+				sessionId,
+				mode: "queue",
+				content: [{
+					type: "text",
+					text: composePrompt(task)
+				}]
+			}));
+			if (!prompt.result.ok) throw failure(prompt.result.error);
+		} catch (error) {
+			throw new SessionLaunchError(sessionId, error);
+		}
+		return sessionId;
+	}
+	/**
+	* 轮询会话列表（§13.3，5s 一次由服务层调度）。RPC 失败/不可用 → known:false
+	* （服务层据此把 sessionStateKnown 置 false，不据此结算）。
+	*/
+	async listRunning() {
+		try {
+			const response = await this.api.sessions.list(request({}));
+			return response.result.ok ? {
+				known: true,
+				count: response.result.value.items.filter((item) => item.running).length,
+				items: response.result.value.items
+			} : { known: false };
+		} catch {
+			return { known: false };
+		}
+	}
+	/**
+	* 单条执行的结算判定（§13.3）：
+	* - 会话不在列表中 → cancelled（`execution session no longer exists`）；
+	* - 会话仍在运行 → pending；
+	* - 已结束 → 翻页读历史直到越过 startedAt 边界，取时间 ≥ startedAt 的首条
+	*   `turn/end`：reason.kind==='error' → failed，否则 → succeeded；边界内无
+	*   turn/end（如 prompt 从未被消费）→ pending（保持观察）。
+	* @param sessions - 本次轮询已取的会话列表（避免 1 + E 次 list RPC，对齐参考
+	*   实现）；缺省时自行拉取。
+	*/
+	async inspect(sessionId, startedAt, sessions) {
+		let items;
+		if (sessions !== void 0) items = sessions;
+		else {
+			const response = await this.api.sessions.list(request({}));
+			if (!response.result.ok) return { outcome: "pending" };
+			items = response.result.value.items;
+		}
+		const summary = items.find((item) => item.sessionId === sessionId);
+		if (summary === void 0) return {
+			outcome: "cancelled",
+			error: "execution session no longer exists"
+		};
+		if (summary.running) return { outcome: "pending" };
+		const events = [];
+		let beforeSeq;
+		let reachedExecutionBoundary = false;
+		for (let page = 0; page < 100; page += 1) {
+			const history = await this.api.sessions.history(request({
+				sessionId: summary.sessionId,
+				maxMessages: 100,
+				...beforeSeq === void 0 ? {} : { beforeSeq }
+			}));
+			if (!history.result.ok) return { outcome: "pending" };
+			events.push(...history.result.value.events);
+			const oldestTime = history.result.value.events.reduce((oldest, entry) => {
+				const time = entry.event.time;
+				return oldest === void 0 ? time : Math.min(oldest, time);
+			}, void 0);
+			if (!history.result.value.hasMore || oldestTime !== void 0 && oldestTime <= startedAt) {
+				reachedExecutionBoundary = true;
+				break;
+			}
+			const oldestSeq = history.result.value.events.reduce((oldest, entry) => {
+				const seq = entry.event.seq;
+				return oldest === void 0 ? seq : Math.min(oldest, seq);
+			}, void 0);
+			if (oldestSeq === void 0 || oldestSeq === beforeSeq) return { outcome: "pending" };
+			beforeSeq = oldestSeq;
+		}
+		if (!reachedExecutionBoundary) return { outcome: "pending" };
+		const turnEnd = events.filter((entry) => entry.event.type === "turn/end" && (startedAt <= 0 || typeof entry.event.time === "number" && entry.event.time >= startedAt)).sort((a, b) => (a.event.seq ?? Number.MAX_SAFE_INTEGER) - (b.event.seq ?? Number.MAX_SAFE_INTEGER))[0];
+		if (turnEnd === void 0) return { outcome: "pending" };
+		const lastAssistantText = lastAssistantTextFrom(events, startedAt);
+		if (isErrorTurnEnd(turnEnd.event.data)) return {
+			outcome: "failed",
+			error: "agent turn ended with an error",
+			...lastAssistantText === void 0 ? {} : { lastAssistantText }
+		};
+		return {
+			outcome: "succeeded",
+			...lastAssistantText === void 0 ? {} : { lastAssistantText }
+		};
+	}
+	/**
+	* 读取会话 transcript 全文（T012/B8：拆分会话结果解析用）。翻页读取历史事件，
+	* 拼接全部 assistant 消息文本（顺序拼接、换行分隔；总长封顶
+	* TRANSCRIPT_TEXT_LIMIT）。会话不存在/历史不可读 → undefined（调用方按失败
+	* 处理）。拆分会话是独立专用会话，全文即拆分结果（无需按 startedAt 截取）。
+	*/
+	async readTranscriptText(sessionId) {
+		try {
+			const events = await readHistoryEvents(this.api.sessions, sessionId);
+			const parts = [];
+			let length = 0;
+			for (const entry of events) {
+				if (entry.event.type !== "assistant/message") continue;
+				const message = entry.event.data?.message;
+				if (typeof message?.text !== "string" || message.text === "") continue;
+				const remaining = TRANSCRIPT_TEXT_LIMIT - length;
+				if (remaining <= 0) break;
+				const slice = message.text.length > remaining ? message.text.slice(0, remaining) : message.text;
+				parts.push(slice);
+				length += slice.length;
+			}
+			const text = parts.join("\n");
+			return text === "" ? void 0 : text;
+		} catch {
+			return;
+		}
+	}
+};
+//#endregion
+//#region src/loopback.ts
+/** IPv4 127/8 谓词（四个十进制八位组、首段 == 127）。 */
+function isIPv4Loopback(v4) {
+	const parts = v4.split(".");
+	return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
+}
+/** socket 远端地址是否属于回环范围（127/8、::1、IPv4-mapped）。 */
+function isLoopbackAddress(address) {
+	if (address === void 0) return false;
+	const normalized = address.toLowerCase();
+	if (normalized === "::1") return true;
+	if (normalized.startsWith("::ffff:")) return isIPv4Loopback(normalized.slice(7));
+	return isIPv4Loopback(normalized);
+}
+/** 归一化 URL 主机名是否为回环 authority（localhost、[::1]、127/8）。 */
+function isLoopbackHostname(hostname) {
+	if (hostname === "localhost" || hostname === "[::1]") return true;
+	return isIPv4Loopback(hostname);
+}
+/**
+* 请求级信任栅栏：回环 socket 地址 AND 回环 Host 头，加上浏览器同源标记。
+* socket 地址权威；`X-Forwarded-For` 永不信任。Origin 缺省时仅接受
+* `sec-fetch-site: same-origin` 的显式标记。
+*/
+function isLoopbackRequest(request) {
+	if (!isLoopbackAddress(request.socket.remoteAddress)) return false;
+	const host = request.headers.host;
+	if (typeof host !== "string") return false;
+	let hostUrl;
+	try {
+		hostUrl = new URL("http://" + host);
+	} catch {
+		return false;
+	}
+	if (!isLoopbackHostname(hostUrl.hostname)) return false;
+	if (request.headers["sec-fetch-site"] === "cross-site") return false;
+	const origin = request.headers.origin;
+	if (origin === void 0) return true;
+	try {
+		return new URL(origin).host === hostUrl.host;
+	} catch {
+		return false;
+	}
+}
+/** 任务生命周期状态，与看板列一一对应（§10.1）；`proposed` 为对话流转候选（D7/P3.1）。 */
+const TASK_STATUSES = [
+	"proposed",
+	"backlog",
+	"todo",
+	"running",
+	"done",
+	"failed"
+];
+/** 任务来源（§9.2，v1.0 字段，P3 随对话流转启用）。 */
+const TASK_SOURCES = [
+	"manual",
+	"conversation",
+	"github_issue",
+	"bookmark_collector",
+	"feishu",
+	"requirement",
+	"other"
+];
+/** 执行会话钉住的权限预设 id（`/permission <id>`，§9.2）。 */
+const TASK_PERMISSIONS = [
+	"read-only",
+	"workspace-write",
+	"danger-full-access"
+];
+/** 执行结果（§9.3）。 */
+const EXECUTION_RESULTS = [
+	"succeeded",
+	"failed",
+	"cancelled"
+];
+/** 评论类型（§9.5 comments：user_feedback/ai_log/system_event）。 */
+const COMMENT_TYPES = [
+	"user_feedback",
+	"ai_log",
+	"system_event"
+];
+/** 产物类型（§9.5 artifacts；会话 transcript 即默认产物 `session`）。 */
+const ARTIFACT_TYPES = [
+	"session",
+	"link",
+	"file",
+	"other"
+];
+/** 自动化收集来源（§14.1/14.2 automation_rules.source）。 */
+const AUTOMATION_SOURCES = ["github_issue", "bookmark_collector"];
+/** 来源会话引用写入 metadata 的键（§9.2/§14.4：可跳回对话）。 */
+const SOURCE_CONVERSATION_META_KEY = "sourceConversationId";
+/** 来源消息引用写入 metadata 的键（§9.2/§14.4：可跳回消息）。 */
+const SOURCE_MESSAGE_META_KEY = "sourceMessageId";
+/** 账本级损坏（schema 不兼容/不可解析），由 HostLedger 走隔离路径。 */
+var LedgerSchemaError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "LedgerSchemaError";
+	}
+};
+/** 有限数字守卫。 */
+function isFiniteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value);
+}
+/** 非空字符串（trim 后）守卫，空串/空白清除钉住字段（对齐参考实现 normalizeTargetId）。 */
+function normalizeOptionalString(value) {
+	if (typeof value !== "string") return void 0;
+	const trimmed = value.trim();
+	return trimmed === "" ? void 0 : trimmed;
+}
+/** 是否为已知任务状态。 */
+function isTaskStatus(value) {
+	return typeof value === "string" && TASK_STATUSES.includes(value);
+}
+/** 是否为已知任务来源。 */
+function isTaskSource(value) {
+	return typeof value === "string" && TASK_SOURCES.includes(value);
+}
+/** 是否为已知权限预设。 */
+function isTaskPermission(value) {
+	return typeof value === "string" && TASK_PERMISSIONS.includes(value);
+}
+/** 是否为已知执行结果。 */
+function isExecutionResult(value) {
+	return typeof value === "string" && EXECUTION_RESULTS.includes(value);
+}
+/** 是否为已知评论类型。 */
+function isCommentType(value) {
+	return typeof value === "string" && COMMENT_TYPES.includes(value);
+}
+/** 是否为已知产物类型。 */
+function isArtifactType(value) {
+	return typeof value === "string" && ARTIFACT_TYPES.includes(value);
+}
+/** 是否为已知自动化收集来源。 */
+function isAutomationSource(value) {
+	return typeof value === "string" && AUTOMATION_SOURCES.includes(value);
+}
+/**
+* cron 表达式的基础形状校验（§9.4：5 段 cron「分 时 日 月 周」）。
+* 这是结构级校验：段数、字符集（数字、`* , - / ?` 及名字字母）。cron 的到期
+* 计算与完整合法性由 T006 的调度器实现；本层只保证持久化的规则形状可解析。
+*/
+const CRON_FIELD_RE = /^[0-9A-Za-z*,\-\/?]+$/;
+function isPlausibleCron(cron) {
+	if (typeof cron !== "string" || cron.trim() === "") return false;
+	const fields = cron.trim().split(/\s+/);
+	if (fields.length !== 5) return false;
+	return fields.every((field) => CRON_FIELD_RE.test(field));
+}
+/**
+* 归一化一条持久化的执行安排（§9.4 判别联合）：
+* - `kind: 'one-shot'` → one-shot 分支；`runAt` 非有限数则整条丢弃；
+* - `kind: 'cron'` 或缺省 kind（v1/v2 旧形状）→ cron 分支；cron 形状非法则整条
+*   丢弃（「修复或丢弃 schedule、绝不丢整行」——坏 schedule 不拖垮任务行）；
+* - 其他 kind → 丢弃。
+*/
+function normalizeSchedule(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const rule = value;
+	if (rule.kind === "one-shot") {
+		if (!isFiniteNumber(rule.runAt)) return void 0;
+		const schedule = {
+			kind: "one-shot",
+			runAt: rule.runAt
+		};
+		if (isFiniteNumber(rule.firedAt)) schedule.firedAt = rule.firedAt;
+		return schedule;
+	}
+	if (rule.kind !== void 0 && rule.kind !== "cron") return void 0;
+	if (!isPlausibleCron(rule.cron)) return void 0;
+	const schedule = {
+		kind: "cron",
+		enabled: rule.enabled === true,
+		cron: rule.cron
+	};
+	if (isFiniteNumber(rule.nextRunAt)) schedule.nextRunAt = rule.nextRunAt;
+	if (isFiniteNumber(rule.lastTriggeredAt)) schedule.lastTriggeredAt = rule.lastTriggeredAt;
+	return schedule;
+}
+/** 归一化一条执行记录（§9.3）；结构非法返回 undefined。 */
+function normalizeExecution(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const entry = value;
+	if (typeof entry.id !== "string" || entry.id === "") return void 0;
+	if (!isFiniteNumber(entry.startedAt)) return void 0;
+	if (entry.sessionId !== void 0 && typeof entry.sessionId !== "string") return void 0;
+	if (entry.endedAt !== void 0 && !isFiniteNumber(entry.endedAt)) return void 0;
+	if (entry.result !== void 0 && !isExecutionResult(entry.result)) return void 0;
+	if (entry.error !== void 0 && typeof entry.error !== "string") return void 0;
+	const execution = {
+		id: entry.id,
+		startedAt: entry.startedAt
+	};
+	if (typeof entry.sessionId === "string") execution.sessionId = entry.sessionId;
+	if (isFiniteNumber(entry.endedAt)) execution.endedAt = entry.endedAt;
+	if (isExecutionResult(entry.result)) execution.result = entry.result;
+	if (typeof entry.error === "string") execution.error = entry.error;
+	return execution;
+}
+/**
+* 归一化标签数组（§9.2 默认 []）：仅保留字符串元素，逐项 trim、丢弃空白项、
+* 按首次出现顺序去重；缺省/非法 → []。标签是展示/过滤维度的原始字符串，
+* 大小写敏感（`API` 与 `api` 是两个标签），去重不折叠大小写。
+*/
+function normalizeTags(value) {
+	if (!Array.isArray(value)) return [];
+	const seen = /* @__PURE__ */ new Set();
+	const tags = [];
+	for (const tag of value) {
+		if (typeof tag !== "string") continue;
+		const trimmed = tag.trim();
+		if (trimmed === "" || seen.has(trimmed)) continue;
+		seen.add(trimmed);
+		tags.push(trimmed);
+	}
+	return tags;
+}
+/** 通用字符串数组归一化（trim、丢空白、首现去重、条目长度封顶、数量封顶）。 */
+function normalizeStringList(value, maxItems, maxLength) {
+	if (!Array.isArray(value)) return [];
+	const seen = /* @__PURE__ */ new Set();
+	const items = [];
+	for (const item of value) {
+		if (typeof item !== "string") continue;
+		const trimmed = item.trim().slice(0, maxLength);
+		if (trimmed === "" || seen.has(trimmed)) continue;
+		seen.add(trimmed);
+		items.push(trimmed);
+		if (items.length >= maxItems) break;
+	}
+	return items;
+}
+/** 归一化来源元数据（§14.1/14.2）：仅保留字符串键值对；缺省/非法 → undefined。 */
+function normalizeMetadata(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+	const metadata = {};
+	for (const [key, entry] of Object.entries(value)) {
+		if (typeof entry !== "string" || key.trim() === "") continue;
+		metadata[key.trim().slice(0, 64)] = entry.slice(0, 2048);
+	}
+	return Object.keys(metadata).length > 0 ? metadata : void 0;
+}
+/** 归一化一条评论（§9.5）；结构非法返回 undefined。 */
+function normalizeComment(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const entry = value;
+	if (typeof entry.id !== "string" || entry.id === "") return void 0;
+	if (typeof entry.body !== "string" || entry.body === "") return void 0;
+	if (!isFiniteNumber(entry.createdAt)) return void 0;
+	if (entry.author !== void 0 && typeof entry.author !== "string") return void 0;
+	if (entry.type !== void 0 && !isCommentType(entry.type)) return void 0;
+	return {
+		id: entry.id,
+		author: typeof entry.author === "string" && entry.author.trim() !== "" ? entry.author.slice(0, 64) : "user",
+		body: entry.body.slice(0, 4e3),
+		type: isCommentType(entry.type) ? entry.type : "user_feedback",
+		createdAt: entry.createdAt
+	};
+}
+/** 归一化评论集合（§9.5 comments，默认 []）；非法条目丢弃。 */
+function normalizeComments(value) {
+	if (!Array.isArray(value)) return [];
+	const comments = [];
+	for (const entry of value) {
+		const comment = normalizeComment(entry);
+		if (comment !== void 0) comments.push(comment);
+	}
+	return comments;
+}
+/** 归一化一条产物（§9.5 artifacts）；结构非法返回 undefined。 */
+function normalizeArtifact(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const entry = value;
+	if (typeof entry.id !== "string" || entry.id === "") return void 0;
+	if (!isArtifactType(entry.type)) return void 0;
+	if (typeof entry.title !== "string" || entry.title === "") return void 0;
+	if (!isFiniteNumber(entry.createdAt)) return void 0;
+	if (entry.url !== void 0 && typeof entry.url !== "string") return void 0;
+	if (entry.contentRef !== void 0 && typeof entry.contentRef !== "string") return void 0;
+	const artifact = {
+		id: entry.id,
+		type: entry.type,
+		title: entry.title.slice(0, 500),
+		createdAt: entry.createdAt
+	};
+	if (typeof entry.url === "string" && entry.url.trim() !== "") artifact.url = entry.url.slice(0, 2048);
+	if (typeof entry.contentRef === "string" && entry.contentRef.trim() !== "") artifact.contentRef = entry.contentRef.slice(0, 512);
+	return artifact;
+}
+/** 归一化产物集合（§9.5 artifacts，默认 []）；非法条目丢弃。 */
+function normalizeArtifacts(value) {
+	if (!Array.isArray(value)) return [];
+	const artifacts = [];
+	for (const entry of value) {
+		const artifact = normalizeArtifact(entry);
+		if (artifact !== void 0) artifacts.push(artifact);
+	}
+	return artifacts;
+}
+/** 归一化上下文快照（§9.5 context_snapshot）；结构非法返回 undefined。 */
+function normalizeContextSnapshot(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const entry = value;
+	if (!isFiniteNumber(entry.updatedAt)) return void 0;
+	if (entry.goal !== void 0 && typeof entry.goal !== "string") return void 0;
+	if (entry.lastAiSummary !== void 0 && typeof entry.lastAiSummary !== "string") return void 0;
+	if (entry.latestUserFeedback !== void 0 && typeof entry.latestUserFeedback !== "string") return void 0;
+	const snapshot = {
+		keyDecisions: normalizeStringList(entry.keyDecisions, 50, 500),
+		filePaths: normalizeStringList(entry.filePaths, 100, 500),
+		relatedLinks: normalizeStringList(entry.relatedLinks, 20, 2048),
+		updatedAt: entry.updatedAt
+	};
+	if (typeof entry.goal === "string" && entry.goal.trim() !== "") snapshot.goal = entry.goal.trim().slice(0, 2e3);
+	if (typeof entry.lastAiSummary === "string" && entry.lastAiSummary.trim() !== "") snapshot.lastAiSummary = entry.lastAiSummary.trim().slice(0, 8e3);
+	if (typeof entry.latestUserFeedback === "string" && entry.latestUserFeedback.trim() !== "") snapshot.latestUserFeedback = entry.latestUserFeedback.trim().slice(0, 4e3);
+	return snapshot;
+}
+/** 归一化一条自动化规则（§9.5 automation_rules）；结构非法返回 undefined。 */
+function normalizeAutomationRule(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const rule = value;
+	if (typeof rule.id !== "string" || rule.id === "") return void 0;
+	if (!isAutomationSource(rule.source)) return void 0;
+	if (typeof rule.enabled !== "boolean") return void 0;
+	if (typeof rule.createdAt !== "number" || !Number.isFinite(rule.createdAt)) return void 0;
+	if (typeof rule.updatedAt !== "number" || !Number.isFinite(rule.updatedAt)) return void 0;
+	const trigger = rule.trigger;
+	if (typeof trigger !== "object" || trigger === null) return void 0;
+	const triggerRaw = trigger;
+	if (triggerRaw.kind !== "cron" || typeof triggerRaw.cron !== "string") return void 0;
+	if (!isPlausibleCron(triggerRaw.cron)) return void 0;
+	const config = {};
+	if (rule.config !== void 0) {
+		if (typeof rule.config !== "object" || rule.config === null || Array.isArray(rule.config)) return void 0;
+		for (const [key, entry] of Object.entries(rule.config)) {
+			if (typeof entry !== "string" || key.trim() === "") continue;
+			config[key.trim().slice(0, 64)] = entry.slice(0, 2048);
+		}
+	}
+	let labels = [];
+	if (rule.filter !== void 0) {
+		if (typeof rule.filter !== "object" || rule.filter === null) return void 0;
+		const filter = rule.filter;
+		if (!Array.isArray(filter.labels) || !filter.labels.every((label) => typeof label === "string")) return void 0;
+		labels = normalizeTags(filter.labels);
+	}
+	const automation = {
+		id: rule.id,
+		enabled: rule.enabled,
+		source: rule.source,
+		trigger: {
+			kind: "cron",
+			cron: triggerRaw.cron
+		},
+		config,
+		filter: { labels },
+		createdAt: rule.createdAt,
+		updatedAt: rule.updatedAt
+	};
+	if (isFiniteNumber(triggerRaw.nextRunAt)) automation.trigger.nextRunAt = triggerRaw.nextRunAt;
+	if (isFiniteNumber(triggerRaw.lastTriggeredAt)) automation.trigger.lastTriggeredAt = triggerRaw.lastTriggeredAt;
+	return automation;
+}
+/**
+* 归一化一条任务行（§9.2）。
+*
+* 结构非法（id/title/description/prompt/createdAt/updatedAt/executions 任一不
+* 符合）→ 返回 undefined（整行丢弃，HostLedger 记入 scheduler.error）；
+* 语义非法 → 就地修复：
+* - 未知状态 → `todo`（未来版本的未知状态落入待办而非丢行，对齐参考实现）；
+* - 未知 source/permission → undefined；空白 workspaceId/mode/project/parentId
+*   → undefined；archivedAt 非有限数 → undefined；
+* - tags 非字符串数组 → []；order 非有限数 → 0（T009 重算列内唯一）；
+* - schedule 交给 normalizeSchedule（修复或丢弃，不丢行）。
+*/
+function normalizeTask(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const record = value;
+	if (typeof record.id !== "string" || record.id === "") return void 0;
+	if (typeof record.title !== "string") return void 0;
+	if (typeof record.description !== "string") return void 0;
+	if (typeof record.prompt !== "string") return void 0;
+	if (!isFiniteNumber(record.createdAt) || !isFiniteNumber(record.updatedAt)) return void 0;
+	if (!Array.isArray(record.executions)) return void 0;
+	const executions = [];
+	for (const entry of record.executions) {
+		const execution = normalizeExecution(entry);
+		if (execution === void 0) return void 0;
+		executions.push(execution);
+	}
+	const task = {
+		id: record.id,
+		title: record.title,
+		description: record.description,
+		prompt: record.prompt,
+		status: isTaskStatus(record.status) ? record.status : "todo",
+		createdAt: record.createdAt,
+		updatedAt: record.updatedAt,
+		executions,
+		tags: normalizeTags(record.tags),
+		comments: normalizeComments(record.comments),
+		artifacts: normalizeArtifacts(record.artifacts),
+		order: isFiniteNumber(record.order) ? record.order : 0
+	};
+	if (isTaskSource(record.source)) task.source = record.source;
+	const metadata = normalizeMetadata(record.metadata);
+	if (metadata !== void 0) task.metadata = metadata;
+	const contextSnapshot = normalizeContextSnapshot(record.contextSnapshot);
+	if (contextSnapshot !== void 0) task.contextSnapshot = contextSnapshot;
+	const schedule = normalizeSchedule(record.schedule);
+	if (schedule !== void 0) task.schedule = schedule;
+	const workspaceId = normalizeOptionalString(record.workspaceId);
+	if (workspaceId !== void 0) task.workspaceId = workspaceId;
+	const mode = normalizeOptionalString(record.mode);
+	if (mode !== void 0) task.mode = mode;
+	if (isTaskPermission(record.permission)) task.permission = record.permission;
+	if (isFiniteNumber(record.archivedAt)) task.archivedAt = record.archivedAt;
+	const project = normalizeOptionalString(record.project);
+	if (project !== void 0) task.project = project;
+	const parentId = normalizeOptionalString(record.parentId);
+	if (parentId !== void 0) task.parentId = parentId;
+	return task;
+}
+/** Host 本地时区（§9.1 scheduler.timeZone）。 */
+function hostTimeZone() {
+	return Intl.DateTimeFormat().resolvedOptions().timeZone || "local";
+}
+/**
+* 空账本文档（新账本/损坏隔离后的重建起点）。
+* @param error - 首次持久化即可见的错误（如损坏隔离说明）。
+*/
+function emptyLedgerDocument(error) {
+	return {
+		schemaVersion: 2,
+		revision: 0,
+		tasks: [],
+		scheduler: {
+			timeZone: hostTimeZone(),
+			ledgerId: crypto.randomUUID(),
+			...error === void 0 ? {} : { error }
+		},
+		recentRequests: [],
+		automationRules: []
+	};
+}
+/**
+* 解析并归一化账本文档（§9.1）。
+*
+* 账本级损坏（非 JSON、根非对象、schemaVersion ≠ 2、tasks 非数组）抛
+* `LedgerSchemaError`，由 HostLedger 隔离原文件（`corrupt-*` 保留原字节）后
+* 以空账本重建。行级损坏（非法任务行、非法执行记录行）丢弃该行并记入
+* `scheduler.error`；`revision` 非负安全整数 → 0；`recentRequests` 仅保留
+* 合法条目并截断到最近 256 条。
+*/
+function parseLedgerDocument(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (error) {
+		throw new LedgerSchemaError(`ledger is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new LedgerSchemaError("ledger root must be a JSON object");
+	const doc = parsed;
+	if (doc.schemaVersion !== 2) throw new LedgerSchemaError(`unsupported ledger schemaVersion ${JSON.stringify(doc.schemaVersion)} (expected 2)`);
+	if (!Array.isArray(doc.tasks)) throw new LedgerSchemaError("ledger tasks must be an array");
+	const dropped = [];
+	const tasks = [];
+	for (const row of doc.tasks) {
+		const task = normalizeTask(row);
+		if (task === void 0) {
+			const id = typeof row === "object" && row !== null ? row.id : void 0;
+			dropped.push(typeof id === "string" ? id : "<invalid row>");
+			continue;
+		}
+		tasks.push(task);
+	}
+	const schedulerRaw = typeof doc.scheduler === "object" && doc.scheduler !== null ? doc.scheduler : {};
+	const scheduler = {
+		timeZone: hostTimeZone(),
+		ledgerId: typeof schedulerRaw.ledgerId === "string" && schedulerRaw.ledgerId !== "" ? schedulerRaw.ledgerId : crypto.randomUUID()
+	};
+	if (isFiniteNumber(schedulerRaw.lastTickAt)) scheduler.lastTickAt = schedulerRaw.lastTickAt;
+	if (typeof schedulerRaw.error === "string") scheduler.error = schedulerRaw.error;
+	if (Array.isArray(schedulerRaw.importedSources)) scheduler.importedSources = schedulerRaw.importedSources.filter((source) => typeof source === "string");
+	if (dropped.length > 0) scheduler.error = `dropped ${dropped.length} invalid task row(s): ${dropped.join(", ")}`;
+	const droppedRules = [];
+	const automationRules = [];
+	if (doc.automationRules !== void 0 && !Array.isArray(doc.automationRules)) droppedRules.push("<invalid rules list>");
+	else if (Array.isArray(doc.automationRules)) for (const row of doc.automationRules) {
+		const rule = normalizeAutomationRule(row);
+		if (rule === void 0) {
+			const id = typeof row === "object" && row !== null ? row.id : void 0;
+			droppedRules.push(typeof id === "string" ? id : "<invalid rule>");
+			continue;
+		}
+		automationRules.push(rule);
+	}
+	if (droppedRules.length > 0) scheduler.error = `dropped ${droppedRules.length} invalid automation rule(s): ${droppedRules.join(", ")}`;
+	return {
+		schemaVersion: 2,
+		revision: Number.isSafeInteger(doc.revision) && doc.revision >= 0 ? doc.revision : 0,
+		tasks,
+		scheduler,
+		recentRequests: Array.isArray(doc.recentRequests) ? doc.recentRequests.flatMap((entry) => {
+			if (typeof entry !== "object" || entry === null) return [];
+			const request = entry;
+			return typeof request.requestId === "string" && request.requestId !== "" && typeof request.fingerprint === "string" ? [{
+				requestId: request.requestId,
+				fingerprint: request.fingerprint
+			}] : [];
+		}).slice(-256) : [],
+		automationRules
+	};
+}
+//#endregion
+//#region src/core/cron.ts
+/** 每字段的闭区间，按 cron 顺序。 */
+const FIELD_RANGES = [
+	[0, 59],
+	[0, 23],
+	[1, 31],
+	[1, 12],
+	[0, 7]
+];
+/**
+* 解析一个 5 段 cron 表达式。
+* @returns 各字段匹配集合；表达式非法时返回 null。
+*/
+function parseCron(expr) {
+	const fields = expr.trim().split(/\s+/);
+	if (fields.length !== 5) return null;
+	const sets = [];
+	for (let index = 0; index < 5; index += 1) {
+		const [min, max] = FIELD_RANGES[index];
+		const set = /* @__PURE__ */ new Set();
+		if (!parseField(fields[index], min, max, set)) return null;
+		sets.push(set);
+	}
+	const weekdays = /* @__PURE__ */ new Set();
+	for (const day of sets[4]) weekdays.add(day === 7 ? 0 : day);
+	return {
+		minutes: sets[0],
+		hours: sets[1],
+		days: sets[2],
+		months: sets[3],
+		weekdays,
+		dayWildcard: fields[2] === "*",
+		weekdayWildcard: fields[4] === "*"
+	};
+}
+/** 表达式是否可解析（语法合法）。 */
+function isValidCron(expr) {
+	return parseCron(expr) !== null;
+}
+/**
+* 计算 `fromMs`（ms epoch）之后的下一个匹配时刻（T006 §9.4/§13.1）。返回匹配
+* 分钟起点的 ms epoch，**严格大于** fromMs；日历约束永不可能满足时返回
+* undefined（如 `0 0 30 2 *`——五年视界包含完整闰周期，合法的 2 月 29 日
+* 计划在任意非闰年仍可达）。
+*
+* 语义（对齐参考实现 core/schedule.ts，T006 验收 3）：
+* - **Host 本地时区**：按 `new Date(y, m, d, h, min)` 墙钟字段遍历候选，不换算
+*   到 UTC——DST 由本地时间语义自然承担；
+* - **日/周 OR 语义**：日字段与周字段字面 `*` 时各自视为未限制（见 parseCron），
+*   二者都受限时用 OR 组合（标准 cron）；
+* - **DST 正确性**：墙钟字段构造 + 最终 `matches` 复检复现旧分钟扫描的 DST
+*   语义——春令时不存在的时间（如 02:30 → 03:30）被 JS 归一化前移，回拨的
+*   重复小时（fall-back）只访问第一次出现；本实现不逐分钟扫描，而是直接从
+*   解析后的字段集合遍历年/月/日/时/分候选，稀疏表达式（如 `0 0 29 2 *`）不会
+*   扫过约 150 万分钟。
+*/
+function nextRunAtMs(expr, fromMs) {
+	const schedule = parseCron(expr);
+	if (schedule === null) return void 0;
+	if (!hasPossibleCalendarDay(schedule)) return void 0;
+	const from = new Date(fromMs);
+	const limitMs = fromMs + 158112e6;
+	const sortedMinutes = [...schedule.minutes].sort((a, b) => a - b);
+	const sortedHours = [...schedule.hours].sort((a, b) => a - b);
+	const sortedMonths = [...schedule.months].sort((a, b) => a - b);
+	let year = from.getFullYear();
+	let month = from.getMonth() + 1;
+	let day = from.getDate();
+	let hour = from.getHours();
+	let minute = from.getMinutes() + 1;
+	while (new Date(year, month - 1, 1, 0, 0, 0, 0).getTime() <= limitMs) {
+		for (const candidateMonth of sortedMonths) {
+			if (candidateMonth < month) continue;
+			const daysInMonth = new Date(year, candidateMonth, 0).getDate();
+			const dayStart = candidateMonth === month ? day : 1;
+			for (let candidateDay = dayStart; candidateDay <= daysInMonth; candidateDay += 1) {
+				if (!dayCandidate(schedule, new Date(year, candidateMonth - 1, candidateDay, 0, 0, 0, 0))) continue;
+				const hourStart = candidateMonth === month && candidateDay === day ? hour : 0;
+				for (const candidateHour of sortedHours) {
+					if (candidateHour < hourStart) continue;
+					const minuteStart = candidateMonth === month && candidateDay === day && candidateHour === hour ? minute : 0;
+					for (const candidateMinute of sortedMinutes) {
+						if (candidateMinute < minuteStart) continue;
+						const candidate = new Date(year, candidateMonth - 1, candidateDay, candidateHour, candidateMinute, 0, 0);
+						const time = candidate.getTime();
+						if (time <= fromMs) continue;
+						if (time > limitMs) return void 0;
+						if (matches(schedule, candidate)) return time;
+					}
+				}
+			}
+		}
+		year += 1;
+		month = 1;
+		day = 1;
+		hour = 0;
+		minute = 0;
+	}
+}
+/** 日/周 OR 门（`matches` 与候选扫描共用）。 */
+function dayCandidate(schedule, date) {
+	const dayMatches = schedule.days.has(date.getDate());
+	const weekdayMatches = schedule.weekdays.has(date.getDay());
+	if (schedule.dayWildcard) return weekdayMatches;
+	if (schedule.weekdayWildcard) return dayMatches;
+	return dayMatches || weekdayMatches;
+}
+/** 拒绝不可能匹配的月/日组合，免去多年扫描（如 `0 0 30 2 *`）。 */
+function hasPossibleCalendarDay(schedule) {
+	if (schedule.dayWildcard || !schedule.weekdayWildcard) return true;
+	const maximumDay = /* @__PURE__ */ new Map([
+		[1, 31],
+		[2, 29],
+		[3, 31],
+		[4, 30],
+		[5, 31],
+		[6, 30],
+		[7, 31],
+		[8, 31],
+		[9, 30],
+		[10, 31],
+		[11, 30],
+		[12, 31]
+	]);
+	for (const month of schedule.months) {
+		const maximum = maximumDay.get(month) ?? 0;
+		if ([...schedule.days].some((day) => day <= maximum)) return true;
+	}
+	return false;
+}
+/** 日/周 OR 语义：受限的日字段单独门控，周字段反之亦然（标准 cron）。 */
+function matches(schedule, date) {
+	if (!schedule.minutes.has(date.getMinutes())) return false;
+	if (!schedule.hours.has(date.getHours())) return false;
+	if (!schedule.months.has(date.getMonth() + 1)) return false;
+	return dayCandidate(schedule, date);
+}
+/** 解析一个逗号列表字段，写入匹配集合；非法返回 false。 */
+function parseField(field, min, max, out) {
+	if (field === "*") {
+		for (let value = min; value <= max; value += 1) out.add(value);
+		return true;
+	}
+	for (const part of field.split(",")) {
+		if (part === "") return false;
+		const [range, stepRaw] = part.split("/");
+		let low;
+		let high;
+		if (range === "*") {
+			low = min;
+			high = max;
+		} else if (range.includes("-")) {
+			const [a, b] = range.split("-");
+			if (a === "" || b === "" || !isDigits(a) || !isDigits(b)) return false;
+			low = Number(a);
+			high = Number(b);
+		} else if (isDigits(range)) {
+			low = Number(range);
+			high = Number(range);
+		} else return false;
+		if (low < min || high > max || low > high) return false;
+		const step = stepRaw === void 0 ? 1 : isDigits(stepRaw) ? Number(stepRaw) : NaN;
+		if (!Number.isInteger(step) || step < 1) return false;
+		for (let value = low; value <= high; value += step) out.add(value);
+	}
+	return true;
+}
+function isDigits(value) {
+	return /^\d+$/.test(value);
+}
+//#endregion
+//#region src/protocol.ts
+/** 本项目 API 前缀（AGENTS.md D2，2026-08-22 定值；参考实现占用 /api/task-board）。 */
+const TASK_BOARD_API_PREFIX = "/api/nova-task-board";
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function exactKeys(value, allowed) {
+	return Object.keys(value).every((key) => allowed.includes(key));
+}
+function optionalString(value) {
+	return value === void 0 || typeof value === "string";
+}
+function optionalFiniteNumber(value) {
+	return value === void 0 || typeof value === "number" && Number.isFinite(value);
+}
+/** import/外部载荷递归拒绝的命令类字段（§16.2/§19-9，大小写不敏感）。 */
+const FORBIDDEN_IMPORT_FIELDS = /* @__PURE__ */ new Set([
+	"args",
+	"command",
+	"executable",
+	"powershell",
+	"shell"
+]);
+/**
+* 载荷是否含命令类字段（§16.2/§19-9）：对键名递归检查
+* `args/command/executable/powershell/shell`（大小写不敏感）。import 与
+* GitHub Webhook 外部载荷共用（T010 §14.3：自动收集内容不携带命令结构）。
+*/
+function hasForbiddenCommandFields(value) {
+	if (Array.isArray(value)) return value.some(hasForbiddenCommandFields);
+	const row = record(value);
+	if (row === void 0) return false;
+	return Object.entries(row).some(([key, nested]) => FORBIDDEN_IMPORT_FIELDS.has(key.toLowerCase()) || hasForbiddenCommandFields(nested));
+}
+/** import 执行记录的严格校验与规范化（§9.3）。 */
+function strictImportedExecution(value) {
+	const entry = record(value);
+	if (entry === void 0 || typeof entry.id !== "string" || entry.id === "") return void 0;
+	if (!isFiniteNumber(entry.startedAt)) return void 0;
+	if (!optionalString(entry.sessionId)) return void 0;
+	if (!optionalFiniteNumber(entry.endedAt)) return void 0;
+	if (entry.result !== void 0 && ![
+		"succeeded",
+		"failed",
+		"cancelled"
+	].includes(String(entry.result))) return void 0;
+	if (!optionalString(entry.error)) return void 0;
+	const execution = {
+		id: entry.id,
+		startedAt: entry.startedAt
+	};
+	if (typeof entry.sessionId === "string") execution.sessionId = entry.sessionId;
+	if (isFiniteNumber(entry.endedAt)) execution.endedAt = entry.endedAt;
+	if ([
+		"succeeded",
+		"failed",
+		"cancelled"
+	].includes(String(entry.result))) execution.result = entry.result;
+	if (typeof entry.error === "string") execution.error = entry.error;
+	return execution;
+}
+/** import 执行安排（§9.4 判别联合）的严格校验：cron 语法合法（isValidCron）、时间戳有限。 */
+function strictImportedSchedule(value) {
+	const rule = record(value);
+	if (rule === void 0) return void 0;
+	if (rule.kind === "one-shot") {
+		if (!isFiniteNumber(rule.runAt) || !optionalFiniteNumber(rule.firedAt)) return void 0;
+		const schedule = {
+			kind: "one-shot",
+			runAt: rule.runAt
+		};
+		if (isFiniteNumber(rule.firedAt)) schedule.firedAt = rule.firedAt;
+		return schedule;
+	}
+	if (rule.kind !== void 0 && rule.kind !== "cron") return void 0;
+	if (typeof rule.enabled !== "boolean" || typeof rule.cron !== "string") return void 0;
+	if (!isValidCron(rule.cron)) return void 0;
+	if (!optionalFiniteNumber(rule.nextRunAt) || !optionalFiniteNumber(rule.lastTriggeredAt)) return void 0;
+	const schedule = {
+		kind: "cron",
+		enabled: rule.enabled,
+		cron: rule.cron
+	};
+	if (isFiniteNumber(rule.nextRunAt)) schedule.nextRunAt = rule.nextRunAt;
+	if (isFiniteNumber(rule.lastTriggeredAt)) schedule.lastTriggeredAt = rule.lastTriggeredAt;
+	return schedule;
+}
+/**
+* import 任务行的严格校验与规范化。校验失败（命令类字段、类型/枚举/时间戳/
+* cron 非法）整行拒绝；未知字段剥离（v1 历史字段如 priority 不阻断迁移）。
+*/
+function strictImportedTask(value) {
+	const input = record(value);
+	if (input === void 0 || hasForbiddenCommandFields(input)) return void 0;
+	if (typeof input.id !== "string" || input.id === "") return void 0;
+	if (typeof input.title !== "string" || typeof input.description !== "string" || typeof input.prompt !== "string") return;
+	if (!isTaskStatus(input.status)) return void 0;
+	if (!isFiniteNumber(input.createdAt) || !isFiniteNumber(input.updatedAt)) return void 0;
+	if (input.source !== void 0 && !isTaskSource(input.source)) return void 0;
+	if (!optionalString(input.workspaceId) || !optionalString(input.mode)) return void 0;
+	if (input.permission !== void 0 && !isTaskPermission(input.permission)) return void 0;
+	if (input.archivedAt !== void 0 && !isFiniteNumber(input.archivedAt)) return void 0;
+	if (input.tags !== void 0 && (!Array.isArray(input.tags) || !input.tags.every((tag) => typeof tag === "string"))) return;
+	if (input.project !== void 0 && typeof input.project !== "string") return void 0;
+	if (input.parentId !== void 0 && typeof input.parentId !== "string") return void 0;
+	if (input.order !== void 0 && !isFiniteNumber(input.order)) return void 0;
+	if (!Array.isArray(input.executions)) return void 0;
+	const executions = [];
+	for (const entry of input.executions) {
+		const execution = strictImportedExecution(entry);
+		if (execution === void 0) return void 0;
+		executions.push(execution);
+	}
+	if (input.schedule !== void 0) {
+		if (strictImportedSchedule(input.schedule) === void 0) return void 0;
+	}
+	const task = {
+		id: input.id,
+		title: input.title,
+		description: input.description,
+		prompt: input.prompt,
+		status: input.status,
+		createdAt: input.createdAt,
+		updatedAt: input.updatedAt,
+		executions,
+		tags: input.tags === void 0 ? [] : [...input.tags],
+		comments: [],
+		artifacts: [],
+		order: input.order === void 0 ? 0 : input.order
+	};
+	if (typeof input.source === "string" && isTaskSource(input.source)) task.source = input.source;
+	if (typeof input.workspaceId === "string" && input.workspaceId.trim() !== "") task.workspaceId = input.workspaceId.trim();
+	if (typeof input.mode === "string" && input.mode.trim() !== "") task.mode = input.mode.trim();
+	if (isTaskPermission(input.permission)) task.permission = input.permission;
+	if (isFiniteNumber(input.archivedAt)) task.archivedAt = input.archivedAt;
+	const schedule = strictImportedSchedule(input.schedule);
+	if (schedule !== void 0) task.schedule = schedule;
+	if (typeof input.project === "string" && input.project.trim() !== "") task.project = input.project.trim();
+	if (typeof input.parentId === "string" && input.parentId.trim() !== "") task.parentId = input.parentId.trim();
+	return task;
+}
+/**
+* create 输入的严格校验（§11.2：exact keys、类型、枚举；无 schedule——归 T006）。
+* T008 扩展：`project` 可选字符串、`tags` 可选字符串数组（元素必须是字符串，
+* 内容清洗/去重由 transitions 的 normalizeTags 落账层完成）。
+*/
+function createInput(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"permission",
+		"project",
+		"tags"
+	])) return false;
+	if (typeof input.title !== "string" || typeof input.description !== "string" || typeof input.prompt !== "string") return false;
+	if (!optionalString(input.workspaceId) || !optionalString(input.mode)) return false;
+	if (!optionalString(input.project)) return false;
+	if (input.tags !== void 0 && (!Array.isArray(input.tags) || !input.tags.every((tag) => typeof tag === "string"))) return false;
+	return input.permission === void 0 || isTaskPermission(input.permission);
+}
+/**
+* propose 输入的严格校验（§11.2/§16.7，T011）：在 create 输入之上扩展
+* `sourceConversationId`/`sourceMessageId` 两个可选字符串（来源会话/消息引用，
+* 写入 metadata 供跳回对话追溯）；**递归拒绝命令类字段**（§16.7 安全红线，
+* 与 import/Webhook 同一条红线——候选内容永不被解释为可执行结构）。
+* 标题/描述/prompt 的内容清洗（控制字符/长度）由状态机落账层完成
+* （transitions.applyProposeTask）。
+*/
+function proposeInput(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"permission",
+		"project",
+		"tags",
+		"sourceConversationId",
+		"sourceMessageId"
+	])) return false;
+	if (hasForbiddenCommandFields(input)) return false;
+	if (typeof input.title !== "string" || typeof input.description !== "string" || typeof input.prompt !== "string") return false;
+	if (!optionalString(input.workspaceId) || !optionalString(input.mode)) return false;
+	if (!optionalString(input.project)) return false;
+	if (!optionalString(input.sourceConversationId) || !optionalString(input.sourceMessageId)) return false;
+	if (input.tags !== void 0 && (!Array.isArray(input.tags) || !input.tags.every((tag) => typeof tag === "string"))) return false;
+	return input.permission === void 0 || isTaskPermission(input.permission);
+}
+/**
+* propose-batch 条目的严格校验（§11.2/§16.8，T012）：在 propose 输入之上扩展
+* `parentId` 可选字符串（父需求任务引用；必须指向账本内已存在且非自身的任务、
+* 禁止环引用——引用合法性由状态机落账层校验，见 transitions.applyProposeBatch）。
+* 命令类字段递归拒绝（与 propose/import 同一条红线）。
+*/
+function batchProposeItem(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"permission",
+		"project",
+		"tags",
+		"sourceConversationId",
+		"sourceMessageId",
+		"parentId"
+	])) return false;
+	if (hasForbiddenCommandFields(input)) return false;
+	if (typeof input.title !== "string" || typeof input.description !== "string" || typeof input.prompt !== "string") return false;
+	if (!optionalString(input.workspaceId) || !optionalString(input.mode)) return false;
+	if (!optionalString(input.project)) return false;
+	if (!optionalString(input.sourceConversationId) || !optionalString(input.sourceMessageId)) return false;
+	if (!optionalString(input.parentId)) return false;
+	if (input.tags !== void 0 && (!Array.isArray(input.tags) || !input.tags.every((tag) => typeof tag === "string"))) return false;
+	return input.permission === void 0 || isTaskPermission(input.permission);
+}
+/**
+* start-split 输入的严格校验（§11.2/§12.9，T012）：标题必填非空；`text` 与
+* `filePath` 至少其一（需求来源）；project/parentTaskId 可选字符串、tags 可选
+* 字符串数组。需求文本是发给 agent 的数据（同任务 prompt 语义），**不做命令类
+* 字段拒绝**——控制字符/长度清洗在拆分结算落账层（transitions/split）。
+*/
+function splitRequestInput(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"title",
+		"text",
+		"filePath",
+		"project",
+		"tags",
+		"parentTaskId"
+	])) return false;
+	if (typeof input.title !== "string" || input.title.trim() === "") return false;
+	if (!optionalString(input.text) || !optionalString(input.filePath)) return false;
+	if (!optionalString(input.project) || !optionalString(input.parentTaskId)) return false;
+	if (input.tags !== void 0 && (!Array.isArray(input.tags) || !input.tags.every((tag) => typeof tag === "string"))) return false;
+	const text = typeof input.text === "string" ? input.text.trim() : "";
+	const filePath = typeof input.filePath === "string" ? input.filePath.trim() : "";
+	return text !== "" || filePath !== "";
+}
+/** update 补丁的严格校验（§11.2：可编辑字段全集；Host/runner 独占字段不在补丁面内）。T008：project/tags 并入补丁面。 */
+function updatePatch(value) {
+	const patch = record(value);
+	if (patch === void 0 || !exactKeys(patch, [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"permission",
+		"project",
+		"tags"
+	])) return false;
+	for (const key of [
+		"title",
+		"description",
+		"prompt",
+		"workspaceId",
+		"mode",
+		"project"
+	]) if (!optionalString(patch[key])) return false;
+	if (patch.tags !== void 0 && (!Array.isArray(patch.tags) || !patch.tags.every((tag) => typeof tag === "string"))) return false;
+	return patch.permission === void 0 || isTaskPermission(patch.permission);
+}
+/**
+* set-schedule 补丁的严格校验（§11.2：exact keys 仅 enabled/cron；cron 出现时
+* 必须语法合法；两者皆缺 = 空补丁拒绝）。nextRunAt/lastTriggeredAt 是 Host
+* 独占字段，不在补丁面内（§9.4，浏览器不可写）。
+*/
+function schedulePatch(value) {
+	const patch = record(value);
+	if (patch === void 0 || !exactKeys(patch, ["enabled", "cron"])) return false;
+	if (patch.enabled !== void 0 && typeof patch.enabled !== "boolean") return false;
+	if (patch.cron !== void 0 && (typeof patch.cron !== "string" || !isValidCron(patch.cron))) return false;
+	return patch.enabled !== void 0 || patch.cron !== void 0;
+}
+/**
+* set-one-shot 补丁的严格校验（§11.2：exact keys 仅 runAt；出现时必须是有限
+* 毫秒时间戳）。空补丁合法——runAt 缺省或 0 = 取消（§9.4 未到时刻前可取消，
+* 与 set-schedule「空补丁拒绝」不同：cron 空补丁无意义，one-shot 空补丁即取消）。
+*/
+function oneShotPatch(value) {
+	const patch = record(value);
+	if (patch === void 0 || !exactKeys(patch, ["runAt"])) return false;
+	if (patch.runAt !== void 0 && !isFiniteNumber(patch.runAt)) return false;
+	return true;
+}
+/**
+* add-comment 输入的严格校验（§11.2：exact keys 仅 author/body/type）。
+* body 必填非空字符串；author/type 可选（author 字符串、type 枚举）。
+* 内容清洗（控制字符/长度）由状态机落账层完成（transitions.applyAddComment）。
+*/
+function commentInput(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"author",
+		"body",
+		"type"
+	])) return false;
+	if (typeof input.body !== "string" || input.body.trim() === "") return false;
+	if (!optionalString(input.author)) return false;
+	if (input.type !== void 0 && !isCommentType(input.type)) return false;
+	return true;
+}
+/**
+* add-artifact 输入的严格校验（§11.2：exact keys 仅 type/title/url/contentRef）。
+* type 枚举、title 必填非空字符串、url/contentRef 可选字符串。
+*/
+function artifactInput(value) {
+	const input = record(value);
+	if (input === void 0 || !exactKeys(input, [
+		"type",
+		"title",
+		"url",
+		"contentRef"
+	])) return false;
+	if (input.type === void 0 || !isArtifactType(input.type)) return false;
+	if (typeof input.title !== "string" || input.title.trim() === "") return false;
+	if (!optionalString(input.url) || !optionalString(input.contentRef)) return false;
+	return true;
+}
+/**
+* update-context 补丁的严格校验（§11.2：exact keys 仅六个可编辑字段；空补丁
+* 拒绝）。字符串字段可选字符串、数组字段可选字符串数组；updatedAt 是 Host
+* 独占字段，不在补丁面内。
+*/
+function contextPatch(value) {
+	const patch = record(value);
+	if (patch === void 0 || !exactKeys(patch, [
+		"goal",
+		"keyDecisions",
+		"filePaths",
+		"lastAiSummary",
+		"latestUserFeedback",
+		"relatedLinks"
+	])) return false;
+	for (const key of [
+		"goal",
+		"lastAiSummary",
+		"latestUserFeedback"
+	]) if (!optionalString(patch[key])) return false;
+	for (const key of [
+		"keyDecisions",
+		"filePaths",
+		"relatedLinks"
+	]) if (patch[key] !== void 0 && (!Array.isArray(patch[key]) || !patch[key].every((item) => typeof item === "string"))) return false;
+	return Object.keys(patch).length > 0;
+}
+/**
+* upsert-automation 输入的严格校验（§11.2：exact keys 仅 id/enabled/source/
+* trigger/config/filter；trigger 仅 kind/cron；filter 仅 labels）。
+* cron 语法合法、source 枚举、config 全部字符串值；nextRunAt/lastTriggeredAt
+* 为 Host 独占字段，不在输入面内。
+*/
+function automationRuleInput(value) {
+	const rule = record(value);
+	if (rule === void 0 || !exactKeys(rule, [
+		"id",
+		"enabled",
+		"source",
+		"trigger",
+		"config",
+		"filter"
+	])) return false;
+	if (typeof rule.id !== "string" || rule.id.trim() === "" || rule.id.length > 128) return false;
+	if (typeof rule.enabled !== "boolean") return false;
+	if (rule.source === void 0 || !isAutomationSource(rule.source)) return false;
+	const trigger = record(rule.trigger);
+	if (trigger === void 0 || !exactKeys(trigger, ["kind", "cron"])) return false;
+	if (trigger.kind !== "cron" || typeof trigger.cron !== "string" || !isValidCron(trigger.cron)) return false;
+	const config = record(rule.config);
+	if (config === void 0 || !Object.values(config).every((value) => typeof value === "string")) return false;
+	const filter = record(rule.filter);
+	if (filter === void 0 || !exactKeys(filter, ["labels"])) return false;
+	if (!Array.isArray(filter.labels) || !filter.labels.every((label) => typeof label === "string")) return false;
+	return true;
+}
+/**
+* 解析幂等 action 信封（§11.2/§11.3）。任何结构/类型/枚举/时间戳/cron/未知
+* 字段/未知 action 问题 → undefined（路由层 400 invalid-action）。返回的 action
+* 为规范化对象（import 任务行经严格校验与字段剥离）。
+*
+* T009（§11.2/D10）：
+* - `reorder`：`order` 必填有限数字（浏览器提交的落位下标，0-based；Host 重算
+*   同列唯一，不信任浏览器序号——见 transitions.applyReorderTask）；`status` 须
+*   为合法状态且与任务当前状态一致（防竞态，状态机层校验）；`project` 可选字符串
+*   （空串 = 清除归属，沿用 update 语义）；`tags` 可选字符串数组（整体替换，
+*   沿用 update 的 normalizeTags 语义）。
+* - `move`：新增可选 `order`（有限数字 = 目标列落位下标，缺省追加目标列末尾）。
+*/
+function parseActionEnvelope(value) {
+	const envelope = record(value);
+	if (envelope === void 0 || !exactKeys(envelope, ["requestId", "action"])) return void 0;
+	if (typeof envelope.requestId !== "string" || envelope.requestId.trim() === "" || envelope.requestId.length > 256) return;
+	const action = record(envelope.action);
+	if (action === void 0 || typeof action.kind !== "string") return void 0;
+	const taskId = typeof action.taskId === "string" && action.taskId.trim() !== "" ? action.taskId : void 0;
+	switch (action.kind) {
+		case "import":
+			if (!exactKeys(action, [
+				"kind",
+				"sourceId",
+				"tasks"
+			])) return void 0;
+			if (typeof action.sourceId !== "string" || action.sourceId === "" || !Array.isArray(action.tasks)) return void 0;
+			{
+				const tasks = [];
+				for (const row of action.tasks) {
+					const task = strictImportedTask(row);
+					if (task === void 0) return void 0;
+					tasks.push(task);
+				}
+				return {
+					requestId: envelope.requestId,
+					action: {
+						kind: "import",
+						sourceId: action.sourceId,
+						tasks
+					}
+				};
+			}
+		case "create":
+			if (!exactKeys(action, [
+				"kind",
+				"id",
+				"input"
+			])) return void 0;
+			return typeof action.id === "string" && action.id.trim() !== "" && createInput(action.input) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "create",
+					id: action.id,
+					input: action.input
+				}
+			} : void 0;
+		case "propose":
+			if (!exactKeys(action, [
+				"kind",
+				"id",
+				"input"
+			])) return void 0;
+			return typeof action.id === "string" && action.id.trim() !== "" && proposeInput(action.input) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "propose",
+					id: action.id,
+					input: action.input
+				}
+			} : void 0;
+		case "propose-batch":
+			if (!exactKeys(action, [
+				"kind",
+				"id",
+				"items"
+			])) return void 0;
+			if (typeof action.id !== "string" || action.id.trim() === "" || !Array.isArray(action.items)) return void 0;
+			if (action.items.length === 0) return void 0;
+			{
+				const items = [];
+				for (const row of action.items) {
+					if (!batchProposeItem(row)) return void 0;
+					items.push(row);
+				}
+				return {
+					requestId: envelope.requestId,
+					action: {
+						kind: "propose-batch",
+						id: action.id,
+						items
+					}
+				};
+			}
+		case "start-split":
+			if (!exactKeys(action, [
+				"kind",
+				"id",
+				"input"
+			])) return void 0;
+			return typeof action.id === "string" && action.id.trim() !== "" && splitRequestInput(action.input) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "start-split",
+					id: action.id,
+					input: action.input
+				}
+			} : void 0;
+		case "confirm":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"target"
+			])) return void 0;
+			return taskId !== void 0 && (action.target === "backlog" || action.target === "todo") ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "confirm",
+					taskId,
+					target: action.target
+				}
+			} : void 0;
+		case "dismiss":
+			if (!exactKeys(action, ["kind", "taskId"])) return void 0;
+			return taskId === void 0 ? void 0 : {
+				requestId: envelope.requestId,
+				action: {
+					kind: "dismiss",
+					taskId
+				}
+			};
+		case "update":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"patch"
+			])) return void 0;
+			return taskId !== void 0 && updatePatch(action.patch) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "update",
+					taskId,
+					patch: action.patch
+				}
+			} : void 0;
+		case "set-schedule":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"patch"
+			])) return void 0;
+			return taskId !== void 0 && schedulePatch(action.patch) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "set-schedule",
+					taskId,
+					patch: action.patch
+				}
+			} : void 0;
+		case "set-one-shot":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"patch"
+			])) return void 0;
+			return taskId !== void 0 && oneShotPatch(action.patch) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "set-one-shot",
+					taskId,
+					patch: action.patch
+				}
+			} : void 0;
+		case "move":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"status",
+				"order"
+			])) return void 0;
+			if (taskId === void 0 || !isTaskStatus(action.status)) return void 0;
+			if (action.order !== void 0 && !isFiniteNumber(action.order)) return void 0;
+			return action.order === void 0 ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "move",
+					taskId,
+					status: action.status
+				}
+			} : {
+				requestId: envelope.requestId,
+				action: {
+					kind: "move",
+					taskId,
+					status: action.status,
+					order: action.order
+				}
+			};
+		case "reorder":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"status",
+				"order",
+				"project",
+				"tags"
+			])) return void 0;
+			if (taskId === void 0 || !isTaskStatus(action.status) || !isFiniteNumber(action.order)) return void 0;
+			if (action.project !== void 0 && typeof action.project !== "string") return void 0;
+			if (action.tags !== void 0 && (!Array.isArray(action.tags) || !action.tags.every((tag) => typeof tag === "string"))) return;
+			return {
+				requestId: envelope.requestId,
+				action: {
+					kind: "reorder",
+					taskId,
+					status: action.status,
+					order: action.order,
+					...typeof action.project === "string" ? { project: action.project } : {},
+					...Array.isArray(action.tags) ? { tags: action.tags } : {}
+				}
+			};
+		case "delete":
+		case "archive":
+		case "restore":
+		case "run":
+		case "rerun":
+			if (!exactKeys(action, ["kind", "taskId"])) return void 0;
+			return taskId === void 0 ? void 0 : {
+				requestId: envelope.requestId,
+				action: {
+					kind: action.kind,
+					taskId
+				}
+			};
+		case "add-comment":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"comment"
+			])) return void 0;
+			return taskId !== void 0 && commentInput(action.comment) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "add-comment",
+					taskId,
+					comment: action.comment
+				}
+			} : void 0;
+		case "add-artifact":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"artifact"
+			])) return void 0;
+			return taskId !== void 0 && artifactInput(action.artifact) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "add-artifact",
+					taskId,
+					artifact: action.artifact
+				}
+			} : void 0;
+		case "update-context":
+			if (!exactKeys(action, [
+				"kind",
+				"taskId",
+				"patch"
+			])) return void 0;
+			return taskId !== void 0 && contextPatch(action.patch) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "update-context",
+					taskId,
+					patch: action.patch
+				}
+			} : void 0;
+		case "upsert-automation":
+			if (!exactKeys(action, ["kind", "rule"])) return void 0;
+			return automationRuleInput(action.rule) ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: "upsert-automation",
+					rule: action.rule
+				}
+			} : void 0;
+		case "delete-automation":
+		case "run-automation":
+			if (!exactKeys(action, ["kind", "ruleId"])) return void 0;
+			return typeof action.ruleId === "string" && action.ruleId.trim() !== "" ? {
+				requestId: envelope.requestId,
+				action: {
+					kind: action.kind,
+					ruleId: action.ruleId
+				}
+			} : void 0;
+		default: return;
+	}
+}
+/** SSE 心跳间隔（§17 性能：SSE 心跳 15s）。 */
+const HEARTBEAT_MS = 15e3;
+/** 同机认证反代在自身认证后替换注入的服务端 token 头（§16.1）。 */
+const TASK_BOARD_PROXY_TOKEN_HEADER = "x-dsh-task-board-proxy-token";
+function json(res, status, body) {
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"cache-control": "no-store"
+	});
+	res.end(JSON.stringify(body));
+}
+/** 解析并规范化一个 host[:port] authority（反代白名单条目）。 */
+function parseAuthority(authority) {
+	if (authority.trim() !== authority) return void 0;
+	const match = authority.startsWith("[") ? /^\[[^\]]+\](?::([0-9]+))?$/.exec(authority) : /^[^:@/?#\s]+(?::([0-9]+))?$/.exec(authority);
+	if (match === null) return void 0;
+	try {
+		const url = new URL(`http://${authority}`);
+		if (url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "") return;
+		const rawPort = match[1];
+		if (rawPort !== void 0 && (String(Number(rawPort)) !== rawPort || Number(rawPort) > 65535)) return void 0;
+		return {
+			canonical: url.hostname.toLowerCase() + (rawPort === void 0 ? "" : `:${rawPort}`),
+			url
+		};
+	} catch {
+		return;
+	}
+}
+/** 解析访问面并校验白名单条目的规范化形态（配置错误直接 throw，插件加载失败）。 */
+function resolveAccess(access) {
+	const trustedProxyHosts = /* @__PURE__ */ new Set();
+	for (const authority of access.trustedProxyHosts ?? []) {
+		const parsed = parseAuthority(authority);
+		if (parsed === void 0 || parsed.canonical !== authority.toLowerCase()) throw new Error(`nova-task-board: trustedProxyHosts entry ${JSON.stringify(authority)} is not a canonical host[:port] authority`);
+		trustedProxyHosts.add(parsed.canonical);
+	}
+	if (trustedProxyHosts.size > 0 && (access.proxyToken === void 0 || access.proxyToken === "")) throw new Error("nova-task-board: authenticated proxy hosts require a non-empty proxy token");
+	const webhookSecret = access.webhookSecret === void 0 ? void 0 : access.webhookSecret.trim() === "" ? void 0 : access.webhookSecret;
+	return {
+		trustedProxyHosts,
+		...access.proxyToken === void 0 ? {} : { proxyToken: access.proxyToken },
+		...webhookSecret === void 0 ? {} : { webhookSecret }
+	};
+}
+/**
+* 浏览器信号触发器（非权威校验）：裸 curl 两者皆无 → 拒绝；伪造 Origin 也能
+* 通过——真正边界是回环 socket + Host + origin 等价校验（isTrustedTaskBoardRequest）。
+*/
+function browserSameOriginMarker(req) {
+	return req.headers["sec-fetch-site"] === "same-origin" || typeof req.headers.origin === "string";
+}
+/** origin 与 Host 的等价校验（§16.1 origin 等价）。 */
+function sameAuthority(req, host) {
+	if (req.headers["sec-fetch-site"] === "cross-site") return false;
+	const origin = req.headers.origin;
+	if (origin === void 0) return req.headers["sec-fetch-site"] === "same-origin";
+	try {
+		return new URL(origin).host === host.host;
+	} catch {
+		return false;
+	}
+}
+/** 恒定时间 token 比较。 */
+function matchesToken(candidate, expected) {
+	if (typeof candidate !== "string" || expected === void 0 || candidate === "" || expected === "") return false;
+	const actual = Buffer.from(candidate);
+	const wanted = Buffer.from(expected);
+	return actual.length === wanted.length && timingSafeEqual(actual, wanted);
+}
+/**
+* GitHub Webhook 签名校验（§14.1）：`X-Hub-Signature-256: sha256=<hex>`，
+* 对原始请求体做 HMAC-SHA256 并恒定时间比较。签名头缺失/畸形/不匹配 → false。
+*/
+function verifyGithubSignature(rawBody, signature, secret) {
+	if (typeof signature !== "string" || secret === "") return false;
+	if (!signature.startsWith("sha256=")) return false;
+	const expected = signature.slice(7);
+	if (!/^[0-9a-f]{64}$/i.test(expected)) return false;
+	return matchesToken(expected, createHmac("sha256", secret).update(rawBody, "utf8").digest("hex"));
+}
+/**
+* 请求级信任判定：浏览器同源标记 + （回环请求 | 白名单反代 + token）。
+* 回环判定包含 socket 地址、Host 头与 origin 等价校验（loopback.ts）。
+*/
+function isTrustedTaskBoardRequest(req, access) {
+	if (!browserSameOriginMarker(req)) return false;
+	if (isLoopbackRequest(req)) return true;
+	if (!isLoopbackAddress(req.socket.remoteAddress)) return false;
+	const host = req.headers.host;
+	if (typeof host !== "string") return false;
+	const parsed = parseAuthority(host);
+	if (parsed === void 0 || parsed.canonical !== host.toLowerCase()) return false;
+	if (!access.trustedProxyHosts.has(parsed.canonical) || !sameAuthority(req, parsed.url)) return false;
+	return matchesToken(req.headers[TASK_BOARD_PROXY_TOKEN_HEADER], access.proxyToken);
+}
+/** 读取请求体；超限（> IMPORT_LIMIT，含 content-length 快检）抛 'body-too-large'；JSON 解析失败抛 'invalid-json'。 */
+async function readBody(req) {
+	const declared = req.headers["content-length"];
+	if (declared !== void 0 && Number(declared) > 2097152) throw new Error("body-too-large");
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = chunk;
+		size += buffer.length;
+		if (size > 2097152) throw new Error("body-too-large");
+		chunks.push(buffer);
+	}
+	const raw = Buffer.concat(chunks).toString("utf8");
+	let value;
+	try {
+		value = JSON.parse(raw);
+	} catch {
+		throw new Error("invalid-json");
+	}
+	return {
+		raw,
+		value
+	};
+}
+/** 组装三个端点路由（宿主的 webServer.register 对重复 (kind, path) 直接 throw，勿重复注册）。 */
+function makeTaskBoardRoutes(service, access = {}) {
+	const resolvedAccess = resolveAccess(access);
+	const guard = (req, res) => {
+		if (isTrustedTaskBoardRequest(req, resolvedAccess)) return true;
+		json(res, 403, {
+			ok: false,
+			error: "forbidden"
+		});
+		return false;
+	};
+	return [
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/state`,
+			handler: (req, res) => {
+				if (req.method !== "GET") return json(res, 405, {
+					ok: false,
+					error: "method-not-allowed"
+				});
+				if (!guard(req, res)) return;
+				json(res, 200, service.snapshot());
+			}
+		},
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/action`,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, {
+					ok: false,
+					error: "method-not-allowed"
+				});
+				if (!guard(req, res)) return;
+				if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return json(res, 415, {
+					ok: false,
+					error: "json-required"
+				});
+				try {
+					const body = await readBody(req);
+					const parsed = parseActionEnvelope(body.value);
+					if (parsed === void 0) return json(res, 400, {
+						ok: false,
+						error: "invalid-action"
+					});
+					if (parsed.action.kind !== "import" && parsed.action.kind !== "propose-batch" && parsed.action.kind !== "start-split" && Buffer.byteLength(body.raw) > 65536) return json(res, 413, {
+						ok: false,
+						error: "body-too-large"
+					});
+					json(res, 200, service.apply(parsed.requestId, parsed.action));
+				} catch (error) {
+					const message = error instanceof Error ? error.message : String(error);
+					json(res, message === "body-too-large" ? 413 : 400, {
+						ok: false,
+						error: message
+					});
+				}
+			}
+		},
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/events`,
+			handler: (req, res) => {
+				if (req.method !== "GET") {
+					res.writeHead(405);
+					res.end();
+					return;
+				}
+				if (!guard(req, res)) return;
+				res.writeHead(200, {
+					"content-type": "text/event-stream; charset=utf-8",
+					"cache-control": "no-cache",
+					connection: "keep-alive"
+				});
+				const push = () => {
+					const payload = service.eventPayload();
+					res.write(`data: ${JSON.stringify(payload)}\n\n`);
+				};
+				const unsubscribe = service.subscribe(push);
+				const heartbeat = setInterval(() => {
+					res.write(": ping\n\n");
+				}, HEARTBEAT_MS);
+				const close = () => {
+					clearInterval(heartbeat);
+					unsubscribe();
+				};
+				req.once("close", close);
+				res.once("close", close);
+				push();
+			}
+		},
+		{
+			kind: "exact",
+			path: `${TASK_BOARD_API_PREFIX}/webhooks/github`,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, {
+					ok: false,
+					error: "method-not-allowed"
+				});
+				if (resolvedAccess.webhookSecret === void 0) return json(res, 503, {
+					ok: false,
+					error: "webhook not configured"
+				});
+				let body;
+				try {
+					body = await readBody(req);
+				} catch (error) {
+					const message = error instanceof Error ? error.message : String(error);
+					return json(res, message === "body-too-large" ? 413 : 400, {
+						ok: false,
+						error: message
+					});
+				}
+				if (!verifyGithubSignature(body.raw, req.headers["x-hub-signature-256"], resolvedAccess.webhookSecret)) return json(res, 401, {
+					ok: false,
+					error: "invalid signature"
+				});
+				const event = req.headers["x-github-event"];
+				if (event === "ping") return json(res, 200, {
+					ok: true,
+					ping: true
+				});
+				if (event !== "issues") return json(res, 200, {
+					ok: true,
+					ignored: String(event ?? "unknown")
+				});
+				try {
+					return json(res, 200, {
+						ok: true,
+						...service.ingestGithubWebhook(body.value)
+					});
+				} catch (error) {
+					return json(res, 400, {
+						ok: false,
+						error: error instanceof Error ? error.message : String(error)
+					});
+				}
+			}
+		}
+	];
+}
+//#endregion
+//#region src/core/migrate.ts
+/**
+* 二选一并取更「有信息量」的同 id 执行记录：
+* - 已结算胜过未结算（未结算多为陈旧副本的残留 open 记录）；
+* - 同为已结算/未结算时取较晚者（以 endedAt ?? startedAt 为准）。
+*/
+function mergeExecution(a, b) {
+	if (a.endedAt === void 0 && b.endedAt !== void 0) return b;
+	if (b.endedAt === void 0 && a.endedAt !== void 0) return a;
+	return (b.endedAt ?? b.startedAt) >= (a.endedAt ?? a.startedAt) ? b : a;
+}
+/** 按 id 合并两条任务：较新 `updatedAt` 为底，执行记录按 id 合并并按时序排序。 */
+function mergeTask(a, b) {
+	const newer = b.updatedAt > a.updatedAt ? b : a;
+	const byId = /* @__PURE__ */ new Map();
+	for (const entry of [...a.executions, ...b.executions]) {
+		const previous = byId.get(entry.id);
+		byId.set(entry.id, previous === void 0 ? entry : mergeExecution(previous, entry));
+	}
+	return {
+		...newer,
+		executions: [...byId.values()].sort((x, y) => x.startedAt - y.startedAt)
+	};
+}
+/**
+* 将一批 v1 任务按 sourceId 导入账本（就地修改 `doc`）：
+* - `doc.scheduler.importedSources` 已含 sourceId → `{ changed: false }`（跳过）；
+* - 否则逐条 `normalizeTask`（防御性校验：协议层已校验过类型，这里兜底），
+*   非法行丢弃并记入 error；合法行按 id 合并进 `doc.tasks`；
+* - 追加 sourceId 到 importedSources（导入 marker，随下次原子落账持久化）。
+*/
+function importIntoLedger(doc, sourceId, incoming) {
+	const sources = new Set(doc.scheduler.importedSources ?? []);
+	if (sources.has(sourceId)) return { changed: false };
+	const dropped = [];
+	const merged = new Map(doc.tasks.map((task) => [task.id, task]));
+	for (const row of incoming) {
+		const task = normalizeTask(row);
+		if (task === void 0) {
+			dropped.push(typeof row.id === "string" && row.id !== "" ? row.id : "<invalid row>");
+			continue;
+		}
+		const existing = merged.get(task.id);
+		merged.set(task.id, existing === void 0 ? task : mergeTask(existing, task));
+	}
+	doc.tasks = [...merged.values()];
+	doc.scheduler.importedSources = [...sources, sourceId];
+	const error = dropped.length > 0 ? `import dropped ${dropped.length} invalid task row(s): ${dropped.join(", ")}` : void 0;
+	return {
+		changed: true,
+		...error === void 0 ? {} : { error }
+	};
+}
+//#endregion
+//#region src/core/split.ts
+/**
+* 需求拆分核心（T012/P3.2，DSH-REQ-001 §12.9/§14.5 + 附录 B8 调研定案）。
+*
+* B8 结论（2026-08-23）：
+* - **拆分执行通道**：`start-split` action 提交需求（粘贴文本/工作区文件路径）
+*   后，Host 复用 T005 执行通道（runner.launch）启动**独立拆分会话**
+*   （标题「需求拆分：<标题>」），按 §14.5 方法论（粒度启发式 + 拆后自检）驱动
+*   agent 拆分；会话结束时 Host 读取 transcript，解析结构化标记，经父需求任务
+*   propose + `propose-batch` 原子落账（全部 proposed，人工确认闸门复用 T011）。
+*   会话不复用当前对话（不污染聊天记录）；成本 = 每次拆分一个独立会话（额度
+*   成本随会话数量线性，递归拆分同理）；会话标题可辨识、候选 metadata 携带
+*   拆分会话引用（可跳回追溯，§15）。
+* - **输出契约**：agent 逐条输出单行标记 `⟦task-board:split⟧ 标题 | 描述 | prompt`
+*   （与 T011 的 `⟦task-board:propose⟧` 同格式契约，按 `|` 分段），最后一行
+*   `⟦task-board:coverage⟧ 覆盖矩阵`。解析为纯函数（本文件），可脱离宿主单测。
+* - **粒度启发式**（§14.5）：单一职责、会话边界、单次 3~15 个（超限递归）；
+*   拆后自检：覆盖完备 / 无重叠 / 可验收 / 依赖明确；拆分维度：功能模块 /
+*   架构分层 / 交付顺序 / 验收逐条 / 混合。以上全部内嵌于指令模板
+*   （composeSplitInstruction），由拆分会话的系统 Prompt 承载。
+* - **父需求任务**（§14.5）：不引入独立「需求实体」——拆分结算时创建父任务
+*   「需求：<标题>」（proposed、source=requirement），描述承载需求原文/来源与
+*   覆盖矩阵（P3 产物表落地前存描述）；子任务 parentId 指向该父任务；
+*   递归拆分（§12.9）时新父任务以原任务为父（parentId），形成树状层级。
+*/
+/** 子任务单行标记（agent 输出契约，与 T011 的 propose 标记同格式）。 */
+const SPLIT_MARKER = "⟦task-board:split⟧";
+/** 覆盖矩阵单行标记（agent 输出契约；其后内容 = 覆盖矩阵文本）。 */
+const COVERAGE_MARKER = "⟦task-board:coverage⟧";
+/** 父需求任务描述的长度封顶（§16.7 清洗：需求原文 + 覆盖矩阵整体封顶）。 */
+const REQUIREMENT_DESCRIPTION_LIMIT = 4e4;
+/** 拆分会话（独立执行会话）标题前缀：`需求拆分：<标题>`。 */
+const SPLIT_SESSION_TITLE_PREFIX = "需求拆分：";
+/** 父需求任务标题前缀：`需求：<标题>`（§14.5 父需求任务）。 */
+const REQUIREMENT_PARENT_TITLE_PREFIX = "需求：";
+/**
+* 解析 transcript 中的拆分标记（纯函数，可脱离宿主单测）：
+* - 逐行扫描 `⟦task-board:split⟧`，每行一条子任务；行内按 `|` 分段（首段 =
+*   标题，空则丢弃该条；次段 = 描述；其余拼接为 prompt）——与 T011
+*   parseProposeMarkers 同契约；
+* - 扫描 `⟦task-board:coverage⟧`，该行标记之后的内容 = 覆盖矩阵文本（首条
+*   为准）；无标记 → 无覆盖矩阵；
+* - 其余文本（说明性内容）忽略。
+*/
+function parseSplitMarkers(text) {
+	const items = [];
+	let coverage;
+	for (const line of text.split("\n")) {
+		const splitIndex = line.indexOf(SPLIT_MARKER);
+		if (splitIndex !== -1) {
+			const parts = line.slice(splitIndex + 18).split("|").map((part) => part.trim());
+			const title = parts[0] ?? "";
+			if (title !== "") items.push({
+				title,
+				description: parts[1] ?? "",
+				prompt: parts.slice(2).join("|").trim()
+			});
+			continue;
+		}
+		const coverageIndex = line.indexOf(COVERAGE_MARKER);
+		if (coverageIndex !== -1 && coverage === void 0) coverage = line.slice(coverageIndex + 21).trim();
+	}
+	return {
+		items,
+		...coverage === void 0 ? {} : { coverage }
+	};
+}
+/**
+* 需求拆分指令模板（B8：粒度启发式 + 覆盖自检 + 输出 schema，§14.5）。
+* 作为拆分会话（独立执行会话）的首条 Prompt 发送：内嵌需求标题与需求原文
+* （text 优先；filePath 时指示 agent 先读文件），随后是拆分方法论与输出契约。
+* @param input - 拆分请求（title 必填；text/filePath 至少其一）。
+*/
+function composeSplitInstruction(input) {
+	const title = input.title.trim();
+	const text = typeof input.text === "string" ? input.text.trim() : "";
+	const filePath = typeof input.filePath === "string" ? input.filePath.trim() : "";
+	return [
+		"请将以下需求文档拆分为一组可独立执行、可独立验收的子任务，并严格按输出格式给出结果。",
+		"",
+		"## 需求标题",
+		title,
+		"",
+		text !== "" ? "【需求原文】\n" + text : `【需求来源】工作区文件路径：${filePath}\n（请先读取该文件，再按下列方法论拆分）`,
+		"",
+		"## 拆分方法论（必须遵守）",
+		`1. 粒度：每个子任务约等于一次 DSH 执行会话可完成并验收的工作单元，自带完成标准（done 定义）。`,
+		`2. 启发式：单一职责（每个子任务只产出一种可验收结果）；会话边界（预计需多轮长会话或跨多文件大改动的继续细分，很快完成的相邻项可合并）；数量界（单次拆分 3~15 个，少于 3 个提示合并，多于 15 个先拆 2~4 个子需求再各拆，或收紧粒度）。`,
+		`3. 拆后自检（返回前执行）：覆盖完备（原需求每个功能点/验收条目至少被一个子任务覆盖）；无重叠（子任务职责互不重叠，MECE 近似）；可验收（每个子任务含明确验收标准，而非模糊描述）；依赖明确（子任务间的先后/依赖关系写入描述，完整 DAG 列为 P4）。`,
+		`4. 拆分维度任选其一：按功能模块/用户故事；按架构分层（数据模型 → 协议 → Host 服务 → UI → 测试）；按交付顺序/里程碑（先底层后上层、先核心后周边）；按验收标准逐条；混合（先按模块、再对复杂模块递归细分）。`,
+		"",
+		"## 输出格式（严格，除标记行外不要输出其他内容）",
+		"每行一条子任务，格式：",
+		`${SPLIT_MARKER} 子任务标题 | 描述（含完成标准/验收标准与依赖说明） | 执行 Prompt（可直接执行，可省略则留空）`,
+		"最后单独一行输出覆盖矩阵（原需求功能点/验收条目 → 子任务映射）：",
+		`${COVERAGE_MARKER} 覆盖矩阵内容`
+	].join("\n");
+}
+/**
+* 构造父需求任务的描述（§14.5：承载需求原文与覆盖矩阵，P3 产物表落地前存
+* 描述）：按「需求原文（text）/ 需求来源（filePath）/ 覆盖矩阵」三段拼接。
+* 纯函数；长度封顶与清洗由调用方落账时经 sanitizeCollectedText 完成。
+*/
+function buildRequirementDescription(input) {
+	const text = typeof input.text === "string" ? input.text.trim() : "";
+	const filePath = typeof input.filePath === "string" ? input.filePath.trim() : "";
+	const coverage = typeof input.coverage === "string" ? input.coverage.trim() : "";
+	const parts = [];
+	if (text !== "") parts.push(`【需求原文】\n${text}`);
+	if (filePath !== "") parts.push(`【需求来源】工作区文件：${filePath}`);
+	if (coverage !== "") parts.push(`【覆盖矩阵】\n${coverage}`);
+	return parts.join("\n\n");
+}
+/** 父需求任务标题（§14.5：`需求：<标题>`），清洗后返回；空输入返回空串。 */
+function requirementParentTitle(title) {
+	return sanitizeCollectedText(`${REQUIREMENT_PARENT_TITLE_PREFIX}${title}`, 200);
+}
+/** 拆分会话标题（`需求拆分：<标题>`），清洗后返回；空输入返回空串。 */
+function splitSessionTitle(title) {
+	return sanitizeCollectedText(`${SPLIT_SESSION_TITLE_PREFIX}${title}`, 200);
+}
+//#endregion
+//#region src/core/transitions.ts
+/** 用户可手动移动到的目标列（§10.2：backlog/todo 互移；done/failed 重开落回）。 */
+const MANUAL_TARGET_STATUSES = ["backlog", "todo"];
+/** 可归档的状态（§10.2：仅已结算状态可归档）。 */
+const ARCHIVABLE_STATUSES = ["done", "failed"];
+/**
+* 手动移动的来源约束：running 由 runner 独占、proposed 候选只读（T011 的
+* confirm/dismiss 是唯一路径），二者都不可作为 move 来源。
+*/
+const MANUAL_MOVE_SOURCES = [
+	"backlog",
+	"todo",
+	"done",
+	"failed"
+];
+/** 状态流转守卫错误：消息直接透出为路由 400 的错误信息。 */
+var TaskBoardTransitionError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "TaskBoardTransitionError";
+	}
+};
+/** 任务是否带有未结算的执行（running 独占性的第二道判据）。 */
+function hasOpenExecution(task) {
+	return task.executions.some((execution) => execution.endedAt === void 0);
+}
+/** 手动移动合法性：来源 ∈ {backlog,todo,done,failed} 且目标 ∈ {backlog,todo}。 */
+function canMoveManually(from, to) {
+	return MANUAL_MOVE_SOURCES.includes(from) && MANUAL_TARGET_STATUSES.includes(to);
+}
+/** 同状态任务的最大 order（无则 0）——新任务/跨列移动追加到目标列末尾。 */
+function maxOrderOf(tasks, status) {
+	let max = 0;
+	for (const task of tasks) {
+		if (task.status !== status) continue;
+		if (isFiniteNumber(task.order) && task.order > max) max = task.order;
+	}
+	return max;
+}
+/** 从用户输入构造一条新任务（create 的落地；§9.2 字段归一化）。T008：project/tags 落字段。 */
+function newTaskFromInput(input, id, now, order) {
+	const workspaceId = normalizeOptionalString(input.workspaceId);
+	const mode = normalizeOptionalString(input.mode);
+	const project = normalizeOptionalString(input.project);
+	const task = {
+		id,
+		title: input.title.trim(),
+		description: input.description.trim(),
+		prompt: input.prompt.trim(),
+		status: "todo",
+		createdAt: now,
+		updatedAt: now,
+		executions: [],
+		tags: normalizeTags(input.tags),
+		comments: [],
+		artifacts: [],
+		order
+	};
+	if (workspaceId !== void 0) task.workspaceId = workspaceId;
+	if (mode !== void 0) task.mode = mode;
+	if (isTaskPermission(input.permission)) task.permission = input.permission;
+	if (project !== void 0) task.project = project;
+	return task;
+}
+/**
+* create（§11.2）：新任务默认进 todo，追加到列末尾（order = 同列 max+1）。
+* 守卫：id 唯一、标题 trim 后非空。返回是否发生变更（恒 true）。
+*/
+function applyCreateTask(doc, input, id, now) {
+	if (doc.tasks.some((task) => task.id === id)) throw new TaskBoardTransitionError("task id already exists");
+	if (input.title.trim() === "") throw new TaskBoardTransitionError("invalid task");
+	const order = maxOrderOf(doc.tasks, "todo") + 1;
+	doc.tasks = [...doc.tasks, newTaskFromInput(input, id, now, order)];
+	return true;
+}
+/** 描述/prompt 长度上限（§16.7 清洗：对齐评论正文封顶）。 */
+const PROPOSE_TEXT_LIMIT = 4e3;
+/**
+* propose（§11.2/§14.4，T011）：对话提取/手动转任务 → 创建 proposed 候选任务。
+*
+* 守卫：id 唯一、清洗后标题非空。
+* 清洗（§16.7 安全红线）：title/description/prompt 剥离控制字符 + trim + 长度
+* 封顶（sanitizeCollectedText，与自动收集同一条红线）；命令类字段的协议层拒绝
+* 在 protocol.ts（hasForbiddenCommandFields）。
+* 数据（§9.2/§14.4）：status=proposed、source=conversation、来源会话/消息引用
+* 写入 metadata（sourceConversationId/sourceMessageId，可跳回对话）；order 追加
+* proposed 列尾；project/tags 沿用 create 的归一化语义。
+*/
+function applyProposeTask(doc, input, id, now) {
+	if (doc.tasks.some((task) => task.id === id)) throw new TaskBoardTransitionError("task id already exists");
+	const title = sanitizeCollectedText(input.title, 200);
+	if (title === "") throw new TaskBoardTransitionError("invalid task");
+	const workspaceId = normalizeOptionalString(input.workspaceId);
+	const mode = normalizeOptionalString(input.mode);
+	const project = normalizeOptionalString(input.project);
+	const order = maxOrderOf(doc.tasks, "proposed") + 1;
+	const task = {
+		id,
+		title,
+		description: sanitizeCollectedText(input.description, PROPOSE_TEXT_LIMIT),
+		prompt: sanitizeCollectedText(input.prompt, PROPOSE_TEXT_LIMIT),
+		status: "proposed",
+		source: "conversation",
+		createdAt: now,
+		updatedAt: now,
+		executions: [],
+		tags: normalizeTags(input.tags),
+		comments: [],
+		artifacts: [],
+		order
+	};
+	if (workspaceId !== void 0) task.workspaceId = workspaceId;
+	if (mode !== void 0) task.mode = mode;
+	if (isTaskPermission(input.permission)) task.permission = input.permission;
+	if (project !== void 0) task.project = project;
+	const sourceConversationId = normalizeOptionalString(input.sourceConversationId);
+	const sourceMessageId = normalizeOptionalString(input.sourceMessageId);
+	if (sourceConversationId !== void 0 || sourceMessageId !== void 0) {
+		const metadata = {};
+		if (sourceConversationId !== void 0) metadata[SOURCE_CONVERSATION_META_KEY] = sourceConversationId;
+		if (sourceMessageId !== void 0) metadata[SOURCE_MESSAGE_META_KEY] = sourceMessageId;
+		task.metadata = metadata;
+	}
+	doc.tasks = [...doc.tasks, task];
+	return true;
+}
+/**
+* confirm（§10.2/§11.2，T011）：确认候选任务 → 落列（backlog/todo）。
+* 守卫：任务存在、非归档、status=proposed、target ∈ {backlog, todo}。
+* 落列后：status=target、order 追加目标列尾（max+1）、source 缺省补
+* 'conversation'（§10.2「确认后 source 置 conversation」；propose 落账时已置，
+* 这里只兜底陈旧数据）；来源引用 metadata 保留（可跳回对话）。confirm 是候选
+* 进入正式看板的唯一路径（防注入闸门，§14.4/§16.7）。
+*/
+function applyConfirmTask(doc, taskId, target, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (task.status !== "proposed") throw new TaskBoardTransitionError("only proposed tasks can be confirmed");
+	if (target !== "backlog" && target !== "todo") throw new TaskBoardTransitionError("invalid confirm target");
+	const order = maxOrderOf(doc.tasks, target) + 1;
+	const next = {
+		...task,
+		status: target,
+		order,
+		updatedAt: now
+	};
+	if (next.source === void 0) next.source = "conversation";
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? next : candidate);
+	return true;
+}
+/**
+* dismiss（§10.2/§11.2，T011）：拒绝/忽略候选任务 → 删除。
+* 守卫：任务存在、非归档、status=proposed——dismiss 是 proposed 专属路径
+* （删除正式任务请用 delete）。
+*/
+function applyDismissTask(doc, taskId) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (task.status !== "proposed") throw new TaskBoardTransitionError("only proposed tasks can be dismissed");
+	doc.tasks = doc.tasks.filter((candidate) => candidate.id !== taskId);
+	return true;
+}
+/**
+* parentId 引用校验（§16.8）：指向的任务必须存在于账本中（`非自身`由调用方
+* 保证——本批条目的 id 为新建 uuid，不可能等于已有任务 id；递归父任务的自身
+* 引用同样在创建前生成新 id），并沿祖先链向上走查环：
+* - 链中出现本批新条目 id（newIds）或已访问任务 → 环引用，拒绝（防御账本
+*   既有损坏环 / 未来允许批内引用时的自环）；
+* - 链上任务缺失 → 非法父引用，拒绝；
+* - 链长超过 MAX_PARENT_CHAIN → 视为异常链，拒绝。
+*/
+function assertValidParentRef(doc, parentId, newIds = /* @__PURE__ */ new Set()) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = parentId;
+	for (let depth = 0; depth < 64; depth += 1) {
+		if (newIds.has(current)) throw new TaskBoardTransitionError("parent reference forms a cycle");
+		if (seen.has(current)) throw new TaskBoardTransitionError("parent reference forms a cycle");
+		seen.add(current);
+		const parent = doc.tasks.find((task) => task.id === current);
+		if (parent === void 0) throw new TaskBoardTransitionError("parent task not found");
+		if (parent.parentId === void 0) return;
+		current = parent.parentId;
+	}
+	throw new TaskBoardTransitionError("parent reference chain is too deep");
+}
+/** 由 propose 系输入构造一条 proposed 任务行（propose/批量共用的行构造）。 */
+function proposedTaskFromInput(item, id, title, now, order, source) {
+	const workspaceId = normalizeOptionalString(item.workspaceId);
+	const mode = normalizeOptionalString(item.mode);
+	const project = normalizeOptionalString(item.project);
+	const task = {
+		id,
+		title,
+		description: sanitizeCollectedText(item.description, PROPOSE_TEXT_LIMIT),
+		prompt: sanitizeCollectedText(item.prompt, PROPOSE_TEXT_LIMIT),
+		status: "proposed",
+		source,
+		createdAt: now,
+		updatedAt: now,
+		executions: [],
+		tags: normalizeTags(item.tags),
+		comments: [],
+		artifacts: [],
+		order
+	};
+	if (workspaceId !== void 0) task.workspaceId = workspaceId;
+	if (mode !== void 0) task.mode = mode;
+	if (isTaskPermission(item.permission)) task.permission = item.permission;
+	if (project !== void 0) task.project = project;
+	const sourceConversationId = normalizeOptionalString(item.sourceConversationId);
+	const sourceMessageId = normalizeOptionalString(item.sourceMessageId);
+	if (sourceConversationId !== void 0 || sourceMessageId !== void 0) {
+		const metadata = {};
+		if (sourceConversationId !== void 0) metadata[SOURCE_CONVERSATION_META_KEY] = sourceConversationId;
+		if (sourceMessageId !== void 0) metadata[SOURCE_MESSAGE_META_KEY] = sourceMessageId;
+		task.metadata = metadata;
+	}
+	return task;
+}
+/**
+* propose-batch（§11.2/§14.5/§16.8，T012）：批量创建候选任务（需求拆分产物）。
+*
+* **原子性**：先全部校验（标题清洗后非空 + parentId 引用合法性），任一条目
+* 非法 → 抛 `TaskBoardTransitionError`，**整批拒绝、账本零变更**；全部合法后
+* 统一追加（单 revision）。id 由本函数生成（uuid，防客户端碰撞/自引用）。
+*
+* 数据：status=proposed、source=requirement、来源会话/消息引用写 metadata、
+* order 接 proposed 列尾、project/tags 沿用 create 归一化语义；命令类字段的
+* 协议层拒绝在 protocol.ts（hasForbiddenCommandFields）。
+*/
+function applyProposeBatch(doc, items, now) {
+	if (items.length === 0) throw new TaskBoardTransitionError("propose-batch requires at least one item");
+	const validated = [];
+	const newIds = /* @__PURE__ */ new Set();
+	for (const item of items) {
+		const id = crypto.randomUUID();
+		const title = sanitizeCollectedText(item.title, 200);
+		if (title === "") throw new TaskBoardTransitionError("invalid task");
+		const parentId = normalizeOptionalString(item.parentId);
+		if (parentId !== void 0) {
+			if (parentId === id) throw new TaskBoardTransitionError("parent reference forms a cycle");
+			assertValidParentRef(doc, parentId, newIds);
+		}
+		newIds.add(id);
+		validated.push({
+			item,
+			id,
+			title,
+			parentId
+		});
+	}
+	let order = maxOrderOf(doc.tasks, "proposed");
+	const created = [];
+	for (const { item, id, title, parentId } of validated) {
+		order += 1;
+		const task = proposedTaskFromInput(item, id, title, now, order, "requirement");
+		if (parentId !== void 0) task.parentId = parentId;
+		created.push(task);
+	}
+	doc.tasks = [...doc.tasks, ...created];
+	return true;
+}
+/**
+* 创建父需求任务（§14.5，T012）：`需求：<标题>`，status=proposed、
+* source=requirement，描述 = 需求原文/来源 + 覆盖矩阵（P3 产物表落地前存
+* 描述），order 接 proposed 列尾。递归拆分（§12.9）时 `parentId` 指向原任务
+* （assertValidParentRef 校验）；`parentId` 创建后不可改（update 补丁面不含）。
+* 守卫：id 唯一；清洗后标题非空。
+*/
+function applyCreateRequirementParent(doc, input, parentId, now) {
+	if (doc.tasks.some((task) => task.id === parentId)) throw new TaskBoardTransitionError("task id already exists");
+	if (typeof input.title !== "string" || input.title.trim() === "") throw new TaskBoardTransitionError("invalid task");
+	const title = requirementParentTitle(input.title);
+	if (title === "") throw new TaskBoardTransitionError("invalid task");
+	const parentTaskId = normalizeOptionalString(input.parentId);
+	if (parentTaskId !== void 0) {
+		if (parentTaskId === parentId) throw new TaskBoardTransitionError("parent reference forms a cycle");
+		assertValidParentRef(doc, parentTaskId);
+	}
+	const description = sanitizeCollectedText(buildRequirementDescription({
+		text: input.requirementText,
+		...input.coverage === void 0 ? {} : { coverage: input.coverage }
+	}), REQUIREMENT_DESCRIPTION_LIMIT);
+	const project = normalizeOptionalString(input.project);
+	const order = maxOrderOf(doc.tasks, "proposed") + 1;
+	const task = {
+		id: parentId,
+		title,
+		description,
+		prompt: "",
+		status: "proposed",
+		source: "requirement",
+		createdAt: now,
+		updatedAt: now,
+		executions: [],
+		tags: normalizeTags(input.tags),
+		comments: [],
+		artifacts: [],
+		order
+	};
+	if (project !== void 0) task.project = project;
+	if (parentTaskId !== void 0) task.parentId = parentTaskId;
+	const sourceConversationId = normalizeOptionalString(input.sourceConversationId);
+	if (sourceConversationId !== void 0) task.metadata = { [SOURCE_CONVERSATION_META_KEY]: sourceConversationId };
+	doc.tasks = [...doc.tasks, task];
+	return true;
+}
+/**
+* update（§11.2）：可编辑字段补丁（标题/描述/prompt/工作区/模式/权限/项目/标签）。
+* 守卫：任务存在、非归档。空字符串清除钉住字段（workspaceId/mode/project）；
+* 未知权限串忽略（陈旧 UI 不得持久化执行服务拒绝的值）；标题 trim 后非空。
+* T008：`project` 空串清除（normalizeOptionalString）、`tags` 整体替换
+* （normalizeTags：trim/去重/丢弃空白，空数组 = 清空）。
+*/
+function applyUpdateTask(doc, taskId, patch, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	const title = "title" in patch && typeof patch.title === "string" ? patch.title.trim() : task.title;
+	if (title === "") throw new TaskBoardTransitionError("invalid task");
+	const next = {
+		...task,
+		title,
+		...typeof patch.description === "string" ? { description: patch.description.trim() } : {},
+		...typeof patch.prompt === "string" ? { prompt: patch.prompt.trim() } : {},
+		updatedAt: now
+	};
+	if ("workspaceId" in patch) next.workspaceId = normalizeOptionalString(patch.workspaceId);
+	if ("mode" in patch) next.mode = normalizeOptionalString(patch.mode);
+	if ("permission" in patch) {
+		if (isTaskPermission(patch.permission)) next.permission = patch.permission;
+		else if (patch.permission === void 0) next.permission = void 0;
+	}
+	if ("project" in patch) next.project = normalizeOptionalString(patch.project);
+	if ("tags" in patch) next.tags = normalizeTags(patch.tags);
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? next : candidate);
+	return true;
+}
+/**
+* delete（§10.2/§19-8）：守卫——任务存在、非 running、无未结算执行。
+* 归档任务可删除（归档只读的例外：恢复/删除/看 transcript）。
+*/
+function applyDeleteTask(doc, taskId) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.status === "running" || hasOpenExecution(task)) throw new TaskBoardTransitionError("running task cannot be deleted");
+	doc.tasks = doc.tasks.filter((candidate) => candidate.id !== taskId);
+	return true;
+}
+/**
+* 列内排序的稳定比较器（§9.2 order 升序；order 相等时按 createdAt/id 决胜，
+* 兼容 T009 前的重复 order 历史数据）。客户端分组视图的排序必须与本函数
+* 一致（grouping.ts sortByOrder），否则浏览器计算的落位下标与 Host 重算不一致。
+*/
+function byOrderStable(a, b) {
+	return a.order - b.order || a.createdAt - b.createdAt || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+}
+/** 目标列（status 相同、按 order 稳定升序）的任务列表。 */
+function sortedColumn(doc, status) {
+	return doc.tasks.filter((task) => task.status === status).sort(byOrderStable);
+}
+/**
+* 内部落位例程（reorder/move-with-order 共用，§11.2/D10）：
+* 把任务按 0-based 落位下标插入目标列（列内按 byOrderStable 排序），随后对
+* 整个目标列重编号为 1..n——保证同列唯一（不信任浏览器序号，浏览器只提供
+* 落位提示）。可选 `patch` 在落位的同时原子变更该任务行（如 move 改 status、
+* reorder 的归属变更）。
+*
+* - 下标越界截断到 [0, 列长]；
+* - 位置不变且无补丁（或补丁不产生实际变更）→ 返回 false（不 bump revision）；
+* - 只有被落位的任务 bump updatedAt（整列重编号不污染其他任务的时间戳）。
+*/
+function applyReposition(doc, taskId, status, order, now, patch) {
+	const column = sortedColumn(doc, status);
+	const currentIndex = column.findIndex((task) => task.id === taskId);
+	const rest = column.filter((task) => task.id !== taskId);
+	const insert = Math.max(0, Math.min(Math.floor(order), rest.length));
+	if (insert === currentIndex && patch === void 0) return false;
+	const base = doc.tasks.find((task) => task.id === taskId);
+	if (base === void 0) throw new TaskBoardTransitionError("task not found");
+	const moved = patch === void 0 ? {
+		...base,
+		updatedAt: now
+	} : patch(base);
+	const ordered = [
+		...rest.slice(0, insert),
+		moved,
+		...rest.slice(insert)
+	];
+	const renumbered = new Map(ordered.map((task, index) => [task.id, index + 1]));
+	let changed = false;
+	doc.tasks = doc.tasks.map((task) => {
+		if (task.id === taskId) {
+			if (JSON.stringify(moved) === JSON.stringify(base) && renumbered.get(taskId) === base.order) return task;
+			changed = true;
+			return {
+				...moved,
+				order: renumbered.get(taskId)
+			};
+		}
+		const nextOrder = renumbered.get(task.id);
+		if (nextOrder === void 0 || task.order === nextOrder) return task;
+		changed = true;
+		return {
+			...task,
+			order: nextOrder
+		};
+	});
+	return changed;
+}
+/**
+* move（§10.2/§11.2 基线 + T009 order 扩展）：跨列移动/跨列拖拽。守卫——任务
+* 存在、非归档、非 running/无未结算执行、来源与目标合法（backlog/todo 互移、
+* done/failed 重开；proposed 与 running 不可作为来源）。目标列与当前列不同时
+* 追加到目标列末尾（order 由 Host 重算，不信任浏览器序号）；T009 起 `order`
+* 可选：提供时为目标列落位下标（0-based，整列重编号），缺省追加末尾；同状态
+* move 保持 order（沿用基线行为，仅 bump updatedAt）。
+*/
+function applyMoveTask(doc, taskId, status, now, order) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (task.status === "running" || hasOpenExecution(task)) throw new TaskBoardTransitionError("running task cannot be moved");
+	if (!canMoveManually(task.status, status)) throw new TaskBoardTransitionError("invalid manual status");
+	if (status === task.status && order === void 0) {
+		doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+			...candidate,
+			updatedAt: now
+		} : candidate);
+		return true;
+	}
+	if (order === void 0) {
+		const target = maxOrderOf(doc.tasks, status) + 1;
+		doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+			...candidate,
+			status,
+			order: target,
+			updatedAt: now
+		} : candidate);
+		return true;
+	}
+	return applyReposition(doc, taskId, status, order, now, task.status === status ? void 0 : (candidate) => ({
+		...candidate,
+		status,
+		updatedAt: now
+	}));
+}
+/**
+* reorder（§11.2/D10，T009）：列内排序/分组落位。守卫——任务存在、非归档、
+* 非 running/无未结算执行、`status` 与任务当前状态一致（防竞态——reorder 只
+* 调整列内 order，绝不改状态，跨列走 move）。`order` 必填有限数字，语义为
+* 0-based 落位下标（目标列按 byOrderStable 排序后插入，Host 整列重编号保证
+* 同列唯一，不信任浏览器序号）。可选 `ownership`（project/tags）为分组视图
+* 跨组落位的归属变更（§12.10）：`project` 空串 = 清除归属、`tags` 整体替换
+* （沿用 applyUpdateTask 的 normalizeOptionalString/normalizeTags 语义），与
+* order 原子落账。
+*/
+function applyReorderTask(doc, taskId, status, order, ownership, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (task.status === "running" || hasOpenExecution(task)) throw new TaskBoardTransitionError("running task cannot be reordered");
+	if (task.status === "proposed") throw new TaskBoardTransitionError("proposed task cannot be reordered");
+	if (task.status !== status) throw new TaskBoardTransitionError("status mismatch: reorder must match the task current status");
+	if (!isFiniteNumber(order)) throw new TaskBoardTransitionError("invalid order");
+	return applyReposition(doc, taskId, status, order, now, ownership === void 0 ? void 0 : (candidate) => {
+		const next = { ...candidate };
+		if ("project" in ownership) next.project = normalizeOptionalString(ownership.project);
+		if ("tags" in ownership) next.tags = normalizeTags(ownership.tags);
+		return JSON.stringify(next) === JSON.stringify(candidate) ? candidate : {
+			...next,
+			updatedAt: now
+		};
+	});
+}
+/**
+* archive（§10.2/§19-6）：仅已结算状态（done/failed）可归档；归档自动解除
+* 定时——cron 分支解除武装（enabled:false、清 nextRunAt，保留 cron 配置便于
+* 恢复后重新武装），one-shot 分支整体清除（§9.4：归档时自动清除 one-shot
+* 计划）。已归档任务重复归档为 no-op。
+*/
+function applyArchiveTask(doc, taskId, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) return false;
+	if (!ARCHIVABLE_STATUSES.includes(task.status)) throw new TaskBoardTransitionError("task cannot be archived");
+	const next = {
+		...task,
+		archivedAt: now,
+		updatedAt: now
+	};
+	if (task.schedule !== void 0) {
+		if (task.schedule.kind === "cron") next.schedule = {
+			...task.schedule,
+			enabled: false,
+			nextRunAt: void 0
+		};
+		else delete next.schedule;
+	}
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? next : candidate);
+	return true;
+}
+/**
+* restore（§10.2）：恢复归档任务回主看板（原状态列），保留执行历史；定时保持
+* 解除状态（恢复前不可运行，需用户重新武装——T006 联调）。非归档任务抛错。
+*/
+function applyRestoreTask(doc, taskId, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt === void 0) throw new TaskBoardTransitionError("task is not archived");
+	const { archivedAt: _archived, ...rest } = task;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...rest,
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/** run/rerun 允许的来源状态（§10.2/§13.2）：非 running、非 proposed 候选、非归档。 */
+const RUNNABLE_SOURCES = [
+	"backlog",
+	"todo",
+	"done",
+	"failed"
+];
+/**
+* run/rerun 共同守卫（§13.2）：任务非归档、非 running、无未结算执行、来源在
+* RUNNABLE_SOURCES（proposed 候选不可执行——确认闸门是唯一 promote 路径，T011；
+* T010：自动收集任务在 backlog 期间同样不可执行——人工审核闸门，§14.3）。
+*/
+function canRunTask(task) {
+	return task.archivedAt === void 0 && task.status !== "running" && !hasOpenExecution(task) && RUNNABLE_SOURCES.includes(task.status) && !(isAutoCollected(task) && task.status === "backlog");
+}
+/**
+* 开启一条新执行（§13.2）：任务置 running + 追加 open ExecutionRecord
+* （startedAt=now；sessionId/endedAt/result 待创建会话后回填/结算）。
+* 返回新任务与执行记录（HostRunner 据此启动会话）。
+*/
+function openExecution(task, now, executionId) {
+	const execution = {
+		id: executionId,
+		startedAt: now
+	};
+	return {
+		task: {
+			...task,
+			status: "running",
+			updatedAt: now,
+			executions: [...task.executions, execution]
+		},
+		execution
+	};
+}
+/** run/rerun 守卫：任务存在、非归档、非 running、无未结算执行、来源合法；通过则返回任务。 */
+function requireRunnable(task) {
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (isAutoCollected(task) && task.status === "backlog") throw new TaskBoardTransitionError("auto-collected task must be promoted to todo before it can run");
+	if (!canRunTask(task)) throw new TaskBoardTransitionError("task is already running or missing");
+	return task;
+}
+/**
+* run（§13.1 手动执行 / §13.2 起点）：开启执行（置 running + 追加 open 执行
+* 记录）。守卫：任务存在、非归档、非 running、无未结算执行、来源合法。
+*/
+function applyRunTask(doc, taskId, now) {
+	const opened = openExecution(requireRunnable(doc.tasks.find((candidate) => candidate.id === taskId)), now, crypto.randomUUID());
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? opened.task : candidate);
+	return true;
+}
+/**
+* rerun（§13.2 重新执行）：先落回 todo（重开语义——done/failed 重跑不改历史
+* 状态，见 §12.10「拖回重开」），再按 run 开启执行。守卫同 run。
+*/
+function applyRerunTask(doc, taskId, now) {
+	const task = requireRunnable(doc.tasks.find((candidate) => candidate.id === taskId));
+	const opened = openExecution(task.status === "todo" ? task : {
+		...task,
+		status: "todo",
+		updatedAt: now
+	}, now, crypto.randomUUID());
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? opened.task : candidate);
+	return true;
+}
+/**
+* attachSession（§13.2 会话回填）：把创建的 DSH 会话 id 回填到指定执行记录。
+* 执行不存在抛错；已结算记录也允许回填（崩溃后会话号晚到仍保留跳转线索，
+* 对齐参考实现 attachSession）。同值回填为 no-op。
+*/
+function applyAttachSession(doc, taskId, executionId, sessionId, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	const index = task.executions.findIndex((execution) => execution.id === executionId);
+	if (index === -1) throw new TaskBoardTransitionError("execution not found");
+	if (task.executions[index].sessionId === sessionId) return false;
+	const executions = [...task.executions];
+	executions[index] = {
+		...executions[index],
+		sessionId
+	};
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		executions,
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/** 结算结果 → 任务回落状态（§13.3）：succeeded→done、failed→failed、cancelled→todo。 */
+function settleStatusOf(result, current) {
+	if (result === "succeeded") return "done";
+	if (result === "failed") return "failed";
+	return current === "running" ? "todo" : current;
+}
+/**
+* settleExecution（§13.3）：结算一条运行中的执行——写 endedAt/result/error，
+* 任务按结果回落列（succeeded→done、failed→failed、cancelled→todo）。
+* 守卫：执行存在；已结算执行为 no-op（返回 false，不 bump revision）。
+*/
+function applySettleExecution(doc, taskId, executionId, result, now, error) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	const index = task.executions.findIndex((execution) => execution.id === executionId);
+	if (index === -1) throw new TaskBoardTransitionError("execution not found");
+	const execution = task.executions[index];
+	if (execution.endedAt !== void 0) return false;
+	const executions = [...task.executions];
+	executions[index] = {
+		...execution,
+		endedAt: now,
+		result,
+		...error === void 0 ? {} : { error }
+	};
+	const next = {
+		...task,
+		status: settleStatusOf(result, task.status),
+		updatedAt: now,
+		executions
+	};
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? next : candidate);
+	return true;
+}
+/** 从 cron 分支构造一条新的 ScheduleRule（丢弃 lastTriggeredAt 之外的字段）。 */
+function cronRule(schedule, cron, enabled, nextRunAt) {
+	const rule = {
+		kind: "cron",
+		enabled,
+		cron
+	};
+	if (nextRunAt !== void 0) rule.nextRunAt = nextRunAt;
+	if (schedule !== void 0 && schedule.kind === "cron" && schedule.lastTriggeredAt !== void 0) rule.lastTriggeredAt = schedule.lastTriggeredAt;
+	return rule;
+}
+/**
+* set-schedule（§11.2 / §9.4 cron 分支）：设定/修改/关闭任务的 cron 周期定时。
+*
+* - 守卫：任务存在、非归档、非 proposed（§10.2：候选任务不可设置任何执行安排）；
+* - cron 取 `patch.cron ?? 当前 cron`；空/语法非法抛错（§11.2 cron 合法性；
+*   状态机层再校验，Host 不信任浏览器预检）；
+* - enabled 取 `patch.enabled ?? 当前 enabled ?? false`；置武装（true）时立即计算
+*   nextRunAt（`nextRunAtMs(cron, now)`），不可能匹配的表达式（如 `0 0 30 2 *`）
+*   抛错；解除武装只清 nextRunAt、保留 cron 配置（归档同语义，见 applyArchiveTask）；
+* - 与 one-shot 互斥（D6）：无论 patch 内容，结果恒为 cron 分支，原 one-shot
+*   整体清除；
+* - 无实际变更（同值 patch）返回 false，不 bump revision。
+*/
+function applySetSchedule(doc, taskId, patch, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (task.status === "proposed") throw new TaskBoardTransitionError("proposed task cannot be scheduled");
+	if (isAutoCollected(task) && task.status === "backlog") throw new TaskBoardTransitionError("auto-collected task must be promoted to todo before it can be scheduled");
+	const current = task.schedule;
+	const currentCron = current?.kind === "cron" ? current.cron : void 0;
+	const currentEnabled = current?.kind === "cron" ? current.enabled : void 0;
+	const cron = (patch.cron ?? currentCron ?? "").trim();
+	if (cron === "" || !isValidCron(cron)) throw new TaskBoardTransitionError("invalid cron expression");
+	const enabled = patch.enabled ?? currentEnabled ?? false;
+	const nextRunAt = enabled ? nextRunAtMs(cron, now) : void 0;
+	if (enabled && nextRunAt === void 0) throw new TaskBoardTransitionError("cron expression can never match");
+	const schedule = cronRule(current, cron, enabled, nextRunAt);
+	if (current !== void 0 && JSON.stringify(current) === JSON.stringify(schedule)) return false;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		schedule,
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* 到期滚动（调度 tick 用，§13.1）：把一条 cron 规则滚动到下一个匹配点。
+* - 任务不存在/已归档/无 schedule/非 cron 分支 → no-op（返回 false）；
+* - 写 nextRunAt 与 lastTriggeredAt（Host 独占字段）；nextRunAt 传 undefined
+*   表示清空（不可能匹配的表达式滚动后不再到期）；lastTriggeredAt 传 undefined
+*   表示保留现值（running 中到期只滚动不触发，本次不记触发点）；
+* - 同值滚动为 no-op（不 bump revision）。
+*/
+function applyScheduleRoll(doc, taskId, nextRunAt, lastTriggeredAt, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0 || task.archivedAt !== void 0) return false;
+	const schedule = task.schedule;
+	if (schedule === void 0 || schedule.kind !== "cron") return false;
+	const next = {
+		kind: "cron",
+		enabled: schedule.enabled,
+		cron: schedule.cron
+	};
+	if (nextRunAt !== void 0) next.nextRunAt = nextRunAt;
+	if (lastTriggeredAt !== void 0) next.lastTriggeredAt = lastTriggeredAt;
+	else if (schedule.lastTriggeredAt !== void 0) next.lastTriggeredAt = schedule.lastTriggeredAt;
+	if (JSON.stringify(schedule) === JSON.stringify(next)) return false;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		schedule: next,
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* 恢复期跳过（§13.1：错过触发点跳过不补跑）：Host 停机/睡眠/长暂停后首个 tick
+* 对全部到期的武装 cron 规则执行——不触发执行，直接把 nextRunAt 滚动到
+* `nextRunAtMs(cron, now)`（now 之后的下一个匹配点）。无实际变更返回 false。
+*
+* T007 扩展：one-shot 分支同样消费——runAt ≤ now 且未消费（firedAt 缺省）的
+* 一次性计划写 `firedAt = now` 标记为已错过（§13.5 错过恢复：跳过不补跑，
+* UI 展示「已过期/已跳过」），但不触发执行。
+*/
+function applySkipMissedSchedules(doc, now) {
+	let changed = false;
+	doc.tasks = doc.tasks.map((task) => {
+		if (task.archivedAt !== void 0) return task;
+		const schedule = task.schedule;
+		if (schedule === void 0) return task;
+		if (schedule.kind === "one-shot") {
+			if (schedule.firedAt !== void 0 || schedule.runAt > now) return task;
+			changed = true;
+			return {
+				...task,
+				schedule: {
+					...schedule,
+					firedAt: now
+				},
+				updatedAt: now
+			};
+		}
+		if (!schedule.enabled) return task;
+		if (schedule.nextRunAt === void 0 || schedule.nextRunAt > now) return task;
+		const next = nextRunAtMs(schedule.cron, now);
+		const rolled = {
+			kind: "cron",
+			enabled: schedule.enabled,
+			cron: schedule.cron
+		};
+		if (next !== void 0) rolled.nextRunAt = next;
+		if (schedule.lastTriggeredAt !== void 0) rolled.lastTriggeredAt = schedule.lastTriggeredAt;
+		changed = true;
+		return {
+			...task,
+			schedule: rolled,
+			updatedAt: now
+		};
+	});
+	return changed;
+}
+/**
+* set-one-shot（§11.2 / §9.4 one-shot 分支）：设定/修改/清除任务的一次性计划。
+*
+* - 守卫：任务存在、非归档、非 proposed（§10.2：候选任务不可设置任何执行安排）；
+* - `runAt` 缺省或 0 → 清除 one-shot 计划（整条 schedule 删除；与 cron 分支
+*   无关——清除 one-shot 不触碰 cron，设定才互斥）；
+* - `runAt` 为有限数 → 设定 `{ kind: 'one-shot', runAt }`，与 cron 分支互斥
+*   （D6）：无论账本当前是 cron 还是 one-shot，结果恒为 one-shot 分支，原
+*   cron 整体清除；
+* - 无实际变更（同值 patch）返回 false，不 bump revision。
+*/
+function applySetOneShot(doc, taskId, patch, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	if (task.status === "proposed") throw new TaskBoardTransitionError("proposed task cannot be scheduled");
+	if (isAutoCollected(task) && task.status === "backlog") throw new TaskBoardTransitionError("auto-collected task must be promoted to todo before it can be scheduled");
+	if (patch.runAt === void 0 || patch.runAt === 0) {
+		if (task.schedule?.kind !== "one-shot") return false;
+		const { schedule: _removed, ...rest } = task;
+		doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+			...rest,
+			updatedAt: now
+		} : candidate);
+		return true;
+	}
+	const schedule = {
+		kind: "one-shot",
+		runAt: patch.runAt
+	};
+	if (JSON.stringify(task.schedule ?? null) === JSON.stringify(schedule)) return false;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		schedule,
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* 触发即消费（§13.5 tick 用）：把一条到点的一次性计划标记为已消费（写
+* `firedAt = now`），防止重启后重复触发。
+* - 任务不存在/已归档/无 schedule/非 one-shot 分支/已消费 → no-op（false）；
+* - 同值消费（firedAt 已等于 now）为 no-op（不 bump revision）。
+* 与 cron 的滚动（applyScheduleRoll）相对：one-shot 只触发一次，消费即终态。
+*/
+function applyMarkOneShotConsumed(doc, taskId, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0 || task.archivedAt !== void 0) return false;
+	const schedule = task.schedule;
+	if (schedule === void 0 || schedule.kind !== "one-shot" || schedule.firedAt !== void 0) return false;
+	if (schedule.firedAt === now) return false;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		schedule: {
+			...schedule,
+			firedAt: now
+		},
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* add-comment（§9.5 comments）：任务存在、非归档；正文清洗（控制字符 + 长度
+* 封顶 4000）后追加；作者缺省 'user'、类型缺省 'user_feedback'（user_feedback/
+* ai_log/system_event 三型，§9.5）。
+*/
+function applyAddComment(doc, taskId, input, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	const body = sanitizeCollectedText(input.body, 4e3);
+	if (body === "") throw new TaskBoardTransitionError("invalid comment");
+	const comment = {
+		id: crypto.randomUUID(),
+		author: typeof input.author === "string" && input.author.trim() !== "" ? input.author.trim().slice(0, 64) : "user",
+		body,
+		type: isCommentType(input.type) ? input.type : "user_feedback",
+		createdAt: now
+	};
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		comments: [...candidate.comments, comment],
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* add-artifact（§9.5 artifacts）：任务存在、非归档；标题清洗后非空、类型合法；
+* 同 (type, contentRef) 或 (type, url) 视为同一条产物（会话产物防重），返回
+* false（不 bump revision）。会话 transcript 由 Host 在执行结算成功时自动记录
+* （type='session'，contentRef=sessionId）。
+*/
+function applyAddArtifact(doc, taskId, input, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	const title = sanitizeCollectedText(input.title, 500);
+	if (title === "" || !isArtifactType(input.type)) throw new TaskBoardTransitionError("invalid artifact");
+	const url = typeof input.url === "string" ? sanitizeCollectedText(input.url, 2048) : void 0;
+	const contentRef = typeof input.contentRef === "string" ? sanitizeCollectedText(input.contentRef, 512) : void 0;
+	if (task.artifacts.some((artifact) => artifact.type === input.type && (contentRef !== void 0 && artifact.contentRef === contentRef || url !== void 0 && artifact.url === url))) return false;
+	const artifact = {
+		id: crypto.randomUUID(),
+		type: input.type,
+		title,
+		createdAt: now
+	};
+	if (url !== void 0 && url !== "") artifact.url = url;
+	if (contentRef !== void 0 && contentRef !== "") artifact.contentRef = contentRef;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		artifacts: [...candidate.artifacts, artifact],
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* update-context（§9.5 context_snapshot）：部分补丁合并进既有快照（缺省字段
+* 保持现值）；字符串清洗、数组 trim/去重/封顶；空串/空数组清除对应字段；
+* updatedAt 由 Host 写（now）。无实际内容变更返回 false（不 bump revision）。
+* 每次执行后由 Host 以 contextPatchFromSettle 合成更新（host-service.ts）。
+*/
+function applyUpdateContextSnapshot(doc, taskId, patch, now) {
+	const task = doc.tasks.find((candidate) => candidate.id === taskId);
+	if (task === void 0) throw new TaskBoardTransitionError("task not found");
+	if (task.archivedAt !== void 0) throw new TaskBoardTransitionError("archived task is read-only");
+	const current = task.contextSnapshot;
+	const next = {
+		keyDecisions: patch.keyDecisions !== void 0 ? normalizeSnapshotList(patch.keyDecisions) : current?.keyDecisions ?? [],
+		filePaths: patch.filePaths !== void 0 ? normalizeSnapshotList(patch.filePaths) : current?.filePaths ?? [],
+		relatedLinks: patch.relatedLinks !== void 0 ? normalizeSnapshotList(patch.relatedLinks) : current?.relatedLinks ?? [],
+		updatedAt: now
+	};
+	if (patch.goal !== void 0) {
+		const goal = sanitizeCollectedText(patch.goal, 2e3);
+		if (goal !== "") next.goal = goal;
+	} else if (current?.goal !== void 0) next.goal = current.goal;
+	if (patch.lastAiSummary !== void 0) {
+		const summary = sanitizeCollectedText(patch.lastAiSummary, 8e3);
+		if (summary !== "") next.lastAiSummary = summary;
+	} else if (current?.lastAiSummary !== void 0) next.lastAiSummary = current.lastAiSummary;
+	if (patch.latestUserFeedback !== void 0) {
+		const feedback = sanitizeCollectedText(patch.latestUserFeedback, 4e3);
+		if (feedback !== "") next.latestUserFeedback = feedback;
+	} else if (current?.latestUserFeedback !== void 0) next.latestUserFeedback = current.latestUserFeedback;
+	if (current !== void 0 && current.goal === next.goal && current.lastAiSummary === next.lastAiSummary && current.latestUserFeedback === next.latestUserFeedback && JSON.stringify(current.keyDecisions) === JSON.stringify(next.keyDecisions) && JSON.stringify(current.filePaths) === JSON.stringify(next.filePaths) && JSON.stringify(current.relatedLinks) === JSON.stringify(next.relatedLinks)) return false;
+	doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? {
+		...candidate,
+		contextSnapshot: next,
+		updatedAt: now
+	} : candidate);
+	return true;
+}
+/**
+* upsert-automation（§9.5 automation_rules）：创建或整条替换一条规则。
+* - 校验：id 非空、source 合法、cron 语法合法（不可匹配的表达式抛错）；
+* - 武装（enabled=true）时立即计算 nextRunAt；解除武装清 nextRunAt、保留 cron
+*   配置（与 set-schedule 同语义）；
+* - lastTriggeredAt 从既有规则延续（Host 独占字段）；同内容 upsert 为 no-op。
+*/
+function applyUpsertAutomationRule(doc, input, now) {
+	const id = input.id.trim().slice(0, 128);
+	if (id === "") throw new TaskBoardTransitionError("invalid automation rule id");
+	if (!isAutomationSource(input.source)) throw new TaskBoardTransitionError("invalid automation source");
+	const cron = input.trigger.cron.trim();
+	if (!isValidCron(cron)) throw new TaskBoardTransitionError("invalid cron expression");
+	const config = {};
+	for (const [key, value] of Object.entries(input.config)) {
+		const trimmedKey = key.trim().slice(0, 64);
+		const trimmedValue = value.trim().slice(0, 2048);
+		if (trimmedKey === "" || trimmedValue === "") continue;
+		config[trimmedKey] = trimmedValue;
+	}
+	const labels = normalizeTags(input.filter.labels);
+	const existing = doc.automationRules.find((rule) => rule.id === id);
+	const next = {
+		id,
+		enabled: input.enabled === true,
+		source: input.source,
+		trigger: {
+			kind: "cron",
+			cron
+		},
+		config,
+		filter: { labels },
+		createdAt: existing?.createdAt ?? now,
+		updatedAt: now
+	};
+	if (input.enabled) {
+		const nextRunAt = nextRunAtMs(cron, now);
+		if (nextRunAt === void 0) throw new TaskBoardTransitionError("cron expression can never match");
+		next.trigger.nextRunAt = nextRunAt;
+	}
+	if (existing?.trigger.lastTriggeredAt !== void 0) next.trigger.lastTriggeredAt = existing.trigger.lastTriggeredAt;
+	if (existing !== void 0 && JSON.stringify({
+		...existing,
+		updatedAt: now
+	}) === JSON.stringify(next)) return false;
+	doc.automationRules = existing === void 0 ? [...doc.automationRules, next] : doc.automationRules.map((rule) => rule.id === id ? next : rule);
+	return true;
+}
+/** delete-automation（§11.2）：规则不存在抛错。 */
+function applyDeleteAutomationRule(doc, ruleId) {
+	if (!doc.automationRules.some((rule) => rule.id === ruleId)) throw new TaskBoardTransitionError("automation rule not found");
+	doc.automationRules = doc.automationRules.filter((rule) => rule.id !== ruleId);
+	return true;
+}
+/**
+* 收集器滚动（tick/手动触发用，§14.2）：写规则 trigger 的 nextRunAt 与
+* lastTriggeredAt（Host 独占字段）。nextRunAt 传 undefined 表示保留现值
+* （手动 run-automation 不消费计划触发点）；lastTriggeredAt 传 undefined 表示
+* 保留现值。同值滚动为 no-op。
+*/
+function applyCollectorRoll(doc, ruleId, nextRunAt, lastTriggeredAt, now) {
+	const rule = doc.automationRules.find((candidate) => candidate.id === ruleId);
+	if (rule === void 0) return false;
+	const next = {
+		...rule,
+		trigger: {
+			kind: "cron",
+			cron: rule.trigger.cron
+		}
+	};
+	if (nextRunAt !== void 0) next.trigger.nextRunAt = nextRunAt;
+	else if (rule.trigger.nextRunAt !== void 0) next.trigger.nextRunAt = rule.trigger.nextRunAt;
+	if (lastTriggeredAt !== void 0) next.trigger.lastTriggeredAt = lastTriggeredAt;
+	else if (rule.trigger.lastTriggeredAt !== void 0) next.trigger.lastTriggeredAt = rule.trigger.lastTriggeredAt;
+	if (JSON.stringify(rule) === JSON.stringify(next)) return false;
+	next.updatedAt = now;
+	doc.automationRules = doc.automationRules.map((candidate) => candidate.id === ruleId ? next : candidate);
+	return true;
+}
+/**
+* 恢复期跳过（§14.2，与任务 cron 的 applySkipMissedSchedules 同语义）：Host
+* 停机/睡眠/长暂停后首个 tick 对全部到期的武装规则——不触发收集，直接把
+* nextRunAt 滚动到 now 之后的下一个匹配点（错过不补跑）。
+*/
+function applySkipMissedAutomationRules(doc, now) {
+	let changed = false;
+	doc.automationRules = doc.automationRules.map((rule) => {
+		if (!rule.enabled || rule.trigger.nextRunAt === void 0 || rule.trigger.nextRunAt > now) return rule;
+		const nextRunAt = nextRunAtMs(rule.trigger.cron, now);
+		if (nextRunAt === void 0) return rule;
+		changed = true;
+		const next = {
+			...rule,
+			trigger: {
+				kind: "cron",
+				cron: rule.trigger.cron,
+				nextRunAt
+			}
+		};
+		if (rule.trigger.lastTriggeredAt !== void 0) next.trigger.lastTriggeredAt = rule.trigger.lastTriggeredAt;
+		return {
+			...next,
+			updatedAt: now
+		};
+	});
+	return changed;
+}
+/**
+* 收集落账：逐条把收集到的任务追加为 backlog。守卫：
+* - id 已存在 → 跳过（幂等）；
+* - 账本中已有同 (source, metadata.url) 的任务 → 跳过（去重，§14.1/14.2）；
+* - order 由 Host 接 backlog 列尾重算（不信任收集器传入的 order）。
+* 返回是否发生实际变更。
+*/
+function applyAddCollectedTasks(doc, tasks) {
+	let changed = false;
+	let order = maxOrderOf(doc.tasks, "backlog");
+	const existingIds = new Set(doc.tasks.map((task) => task.id));
+	for (const input of tasks) {
+		if (input.id === "" || input.source === void 0 || existingIds.has(input.id)) continue;
+		if (hasCollected(doc.tasks, input.source, input.metadata)) continue;
+		order += 1;
+		const task = {
+			...input,
+			order
+		};
+		doc.tasks = [...doc.tasks, task];
+		existingIds.add(task.id);
+		changed = true;
+	}
+	return changed;
+}
+//#endregion
+//#region src/dsh-home.ts
+/**
+* DSH_HOME 解析（AGENTS.md §1.2 / D2：本项目账本目录
+* `$DSH_HOME/nova-ui/task-board/`，避开宿主 `$DSH_HOME/task-board/`）。
+*
+* 环境变量 `DSH_HOME` 优先（支持 `~` 展开与相对路径按 cwd 解析），否则回退
+* 平台家目录下的 `.dsh`。与宿主 dsh 系列插件的解析约定一致。
+*/
+/** 展开路径前导 `~`（或 `~user`）。 */
+function expandHome(path, home = homedir()) {
+	if (path === "~") return home;
+	if (path.startsWith("~/") || path.startsWith("~\\")) return join(home, path.slice(2));
+	return path;
+}
+/**
+* 解析 DSH 家目录。
+* @param env - 读取 DSH_HOME 的环境（测试可注入）。
+* @param home - 平台家目录回退（测试可注入）。
+*/
+function resolveDshHome(env = process.env, home = homedir()) {
+	const raw = env.DSH_HOME;
+	if (raw !== void 0 && raw.trim() !== "") {
+		const expanded = expandHome(raw.trim(), home);
+		return isAbsolute(expanded) ? expanded : join(process.cwd(), expanded);
+	}
+	return join(home, ".dsh");
+}
+/** 从当前环境解析 DSH 家目录。 */
+function dshHome() {
+	return resolveDshHome();
+}
+/** 本项目账本目录（相对 DSH_HOME 的子路径，见 AGENTS.md D2）。 */
+const LEDGER_DIR_RELATIVE = join("nova-ui", "task-board");
+/** 本项目账本目录的绝对路径。 */
+function ledgerDir() {
+	return join(dshHome(), LEDGER_DIR_RELATIVE);
+}
+//#endregion
+//#region src/core/recovery.ts
+/** 无 sessionId 的中断执行被标记 cancelled 的原因文案。 */
+const INTERRUPTED_START_REASON = "host restarted before the execution session was recorded";
+/**
+* 结算中断执行：running 任务 + 最后一条执行 open 且无 sessionId → 置
+* cancelled（endedAt = now，记原因，bump updatedAt），状态按 §10.2
+* `running → settle(cancelled) → todo` 回落待办，避免卡死幽灵 running 态。
+* 其余任务原样保留。
+*/
+function settleInterruptedStarts(tasks, now) {
+	let changed = false;
+	return {
+		tasks: tasks.map((task) => {
+			if (task.status !== "running") return task;
+			const execution = task.executions.at(-1);
+			if (execution === void 0 || execution.endedAt !== void 0 || execution.sessionId !== void 0) return task;
+			changed = true;
+			return {
+				...task,
+				status: "todo",
+				updatedAt: now,
+				executions: [...task.executions.slice(0, -1), {
+					...execution,
+					endedAt: now,
+					result: "cancelled",
+					error: INTERRUPTED_START_REASON
+				}]
+			};
+		}),
+		changed
+	};
+}
+//#endregion
+//#region src/host-ledger.ts
+/**
+* Host 权威账本（DSH-REQ-001 §8 架构 / §9.1 / §17 可靠性）。
+*
+* 「Host 权威、浏览器只是异步视图」的数据底座：所有任务状态持久化到
+* `$DSH_HOME/nova-ui/task-board/ledger-v2.json`（0600，原子写），保证重启不丢、
+* 并发一致、损坏可隔离。T003（协议）/T005（执行）/T006（调度）等在此之上工作。
+*
+* 可靠性机制（§17 / §19-7 数据部分）：
+* - **原子写**：临时文件 + fsync + 原子 rename + 目录 fsync；任何失败清理临时
+*   文件并重新抛出，绝不产生半写文件；
+* - **损坏隔离**：schema 不兼容/不可解析的账本 rename 为 `ledger-v2.json.corrupt-*`
+*   （保留原字节）并以空账本重建，不崩溃；
+* - **单写者锁**：`ledger-v2.lock`（0600，`wx` 排他创建）记录 PID + token +
+*   进程启动时间探测；PID 复用通过启动时间不匹配识别为陈旧锁并接管（防误判），
+*   僵尸/死亡进程（Z/X）不阻塞启动；
+* - **幂等缓存**：`recentRequests`（最近 256 条 requestId→SHA-256 指纹）随账本
+*   原子持久化，Host 重启后浏览器重试仍安全（§11.3）；
+* - **v1 迁移**：`importSource` 按 sourceId 一次性导入、按 id 合并，导入 marker
+*   随原子落账持久化（Host 确认后浏览器才清除 v1 原值，见 core/migrate.ts）。
+*
+* 串行性：本类全部方法为同步实现（无 await），单进程内天然串行；跨进程互斥
+* 由锁保证。`revision` 每次原子落账严格 +1（scheduler 心跳类补丁除外，见
+* `setScheduler`）。
+*/
+function cloneTasks(tasks) {
+	return JSON.parse(JSON.stringify(tasks));
+}
+function cloneAutomationRules(rules) {
+	return JSON.parse(JSON.stringify(rules));
+}
+/**
+* 进程状态中「已死但仍占 PID 表」的状态：`Z`（僵尸）与 `X`（dead，正被回收）。
+* `process.kill(pid, 0)` 会把这类 PID 报为存活，若崩溃残留的子进程从未被回收，
+* 会把活的锁主误判成「正在运行」而永久阻塞账本启动。
+*/
+const DEAD_STATES = /* @__PURE__ */ new Set(["Z", "X"]);
+/**
+* 尽力而为的单字母进程状态（'R','S','D','Z',...），平台不支持时返回 undefined。
+* Linux 直接读 /proc（无子进程）；其他 POSIX 用 `ps -o stat=`；Windows 无僵尸
+* 态，返回 undefined（此时 kill(0) 探测为唯一权威）。
+*/
+function processState(pid) {
+	if (process.platform === "linux") try {
+		const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+		const end = stat.lastIndexOf(")");
+		if (end === -1) return void 0;
+		return stat.slice(end + 2).split(" ")[0] || void 0;
+	} catch {
+		return;
+	}
+	if (process.platform === "win32") return void 0;
+	try {
+		const probe = spawnSync("ps", [
+			"-o",
+			"stat=",
+			"-p",
+			String(pid)
+		], { timeout: PROCESS_PROBE_TIMEOUT_MS });
+		if (probe.status !== 0 || probe.stdout.length === 0) return void 0;
+		const state = probe.stdout.toString("utf8").trim();
+		return state.length > 0 ? state[0] : void 0;
+	} catch {
+		return;
+	}
+}
+/** PID 是否存活（僵尸/死亡态视为不存活）。 */
+function processIsAlive(pid) {
+	if (!Number.isSafeInteger(pid) || pid <= 0) return false;
+	const state = processState(pid);
+	if (state !== void 0 && DEAD_STATES.has(state)) return false;
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		return error.code !== "ESRCH";
+	}
+}
+const PROCESS_PROBE_TIMEOUT_MS = 3e3;
+let ownStartTime;
+let ownStartTimeResolved = false;
+/**
+* Linux 下精确进程启动时间（Unix epoch ms）：直接读 /proc（field 22 = 开机后的
+* ticks，btime = 开机 epoch 秒）。无子进程、无取整，与历史锁记录的 `startedAt`
+* 可精确比对。
+*/
+function linuxStartTimeMs(pid) {
+	try {
+		const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+		const end = stat.lastIndexOf(")");
+		if (end === -1) return void 0;
+		const ticks = Number(stat.slice(end + 2).split(" ")[19]);
+		if (!Number.isFinite(ticks)) return void 0;
+		const bootMatch = /^btime\s+(\d+)/m.exec(readFileSync("/proc/stat", "utf8"));
+		if (bootMatch === null) return void 0;
+		const btime = Number(bootMatch[1]);
+		if (!Number.isFinite(btime)) return void 0;
+		return btime * 1e3 + ticks * 1e3 / 100;
+	} catch {
+		return;
+	}
+}
+/**
+* 尽力而为的进程启动时间（Unix epoch ms），用于证明锁记录里的 PID 是否真的是
+* 之前那个进程（PID 复用会被识别为陈旧锁而不是永久阻塞启动）。平台探测不可用
+* 时返回 undefined，调用方 fail closed。
+*/
+function processStartTimeMs(pid) {
+	if (process.platform === "linux") return linuxStartTimeMs(pid);
+	if (process.platform === "win32") {
+		const probe = spawnSync("powershell", [
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			"[DateTimeOffset]::FromFileTime((Get-Process -Id " + String(pid) + " -ErrorAction SilentlyContinue).StartTime.ToUniversalTime().ToFileTime()).ToUnixTimeMilliseconds()"
+		], {
+			timeout: PROCESS_PROBE_TIMEOUT_MS,
+			windowsHide: true
+		});
+		if (probe.status !== 0 || probe.stdout.length === 0) return void 0;
+		const started = Number(probe.stdout.toString("utf8").trim());
+		return Number.isFinite(started) ? started : void 0;
+	}
+	const env = {
+		...process.env,
+		LC_ALL: "C"
+	};
+	const lstart = spawnSync("ps", [
+		"-o",
+		"lstart=",
+		"-p",
+		String(pid)
+	], {
+		timeout: PROCESS_PROBE_TIMEOUT_MS,
+		env
+	});
+	if (lstart.status === 0 && lstart.stdout.length > 0) {
+		const started = Date.parse(lstart.stdout.toString("utf8").trim());
+		if (Number.isFinite(started)) return started;
+	}
+	const elapsed = spawnSync("ps", [
+		"-o",
+		"etimes=",
+		"-p",
+		String(pid)
+	], {
+		timeout: PROCESS_PROBE_TIMEOUT_MS,
+		env
+	});
+	if (elapsed.status !== 0 || elapsed.stdout.length === 0) return void 0;
+	const seconds = Number(elapsed.stdout.toString("utf8").trim());
+	if (!Number.isFinite(seconds)) return void 0;
+	return Date.now() - seconds * 1e3;
+}
+function ownProcessStartTimeMs() {
+	if (!ownStartTimeResolved) {
+		ownStartTimeResolved = true;
+		ownStartTime = processStartTimeMs(process.pid);
+	}
+	return ownStartTime;
+}
+/**
+* 旧锁记录的容差：ms 级精确探测落地前，锁的 `startedAt` 来自 `ps -o lstart=`
+* 秒级分辨率；用 /proc 精确探测同一存活进程会差出亚秒余量，若当作 PID 复用会
+* 在滚动升级时偷走活锁主、出现第二个账本写者。ms 级探测写出的记录带
+* `probe: 'exact'` 严格比对；其余（旧锁、秒级探测）走本容差。
+*/
+const LEGACY_START_TOLERANCE_MS = 2e3;
+/** 记录的启动时间是否证明记录的 PID 已是另一个进程（PID 复用探测核心）。 */
+function startTimeMismatch(recorded, actual, exact) {
+	return exact ? recorded !== actual : Math.abs(recorded - actual) > LEGACY_START_TOLERANCE_MS;
+}
+const defaultProbes = {
+	isAlive: processIsAlive,
+	startTimeMs: processStartTimeMs,
+	ownStartTimeMs: () => ownProcessStartTimeMs()
+};
+/**
+* Host 权威账本。构造即获取单写者锁并加载/恢复账本；进程内所有写入经
+* `applyRequest`/`importSource`/`mutate`/`setScheduler` 串行原子落账。
+*/
+var HostLedger = class {
+	now;
+	/** 账本文件绝对路径。 */
+	file;
+	/** 锁文件绝对路径。 */
+	lockFile;
+	/** 账本目录。 */
+	dir;
+	document;
+	listeners = /* @__PURE__ */ new Set();
+	requestCache = /* @__PURE__ */ new Map();
+	lockToken = crypto.randomUUID();
+	lockFd;
+	probes;
+	/**
+	* @param dir - 账本目录（默认 `$DSH_HOME/nova-ui/task-board/`，见 AGENTS.md D2）。
+	* @param now - 时间源（测试可注入）。
+	* @param probes - 进程探测面（默认真实探测；测试可注入 fake，见 §17 可测试性）。
+	*/
+	constructor(dir = ledgerDir(), now = Date.now, probes = defaultProbes) {
+		this.now = now;
+		this.probes = probes;
+		mkdirSync(dir, { recursive: true });
+		this.dir = dir;
+		this.file = join(dir, "ledger-v2.json");
+		this.lockFile = join(dir, "ledger-v2.lock");
+		this.lockFd = this.acquireLock();
+		try {
+			this.document = this.load();
+			for (const request of this.document.recentRequests) this.requestCache.set(request.requestId, { fingerprint: request.fingerprint });
+			const recovered = settleInterruptedStarts(this.document.tasks, this.now());
+			if (recovered.changed) this.document.tasks = recovered.tasks;
+			this.commit(false);
+		} catch (error) {
+			this.dispose();
+			throw error;
+		}
+	}
+	/** revision + scheduler（不克隆任务），供 SSE 事件帧使用。 */
+	summary() {
+		const { importedSources: _internal, ...scheduler } = this.document.scheduler;
+		return {
+			revision: this.document.revision,
+			scheduler: { ...scheduler }
+		};
+	}
+	/** 全量状态快照（任务/规则深拷贝，调用方修改不影响账本）。 */
+	state() {
+		return {
+			...this.summary(),
+			tasks: cloneTasks(this.document.tasks),
+			automationRules: cloneAutomationRules(this.document.automationRules)
+		};
+	}
+	/**
+	* 只读任务数组（不克隆，O(1)）。仅供服务层扫描/计数（如 power 快照的
+	* runningSessions/armedSchedules）；**绝不可修改**——任何变更必须走
+	* `applyRequest`/`mutate` 的原子落账路径。
+	*/
+	peekTasks() {
+		return this.document.tasks;
+	}
+	/** 只读自动化规则数组（不克隆；变更必须走 applyRequest/mutate 原子落账）。 */
+	peekAutomationRules() {
+		return this.document.automationRules;
+	}
+	/** 订阅账本变更（每次原子落账后触发）。 */
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	/** 释放锁（仅当锁仍属本实例时删除锁文件，避免误删外部替换的锁）。 */
+	dispose() {
+		const fd = this.lockFd;
+		if (fd === void 0) return;
+		this.lockFd = void 0;
+		closeSync(fd);
+		try {
+			if (JSON.parse(readFileSync(this.lockFile, "utf8")).token === this.lockToken) unlinkSync(this.lockFile);
+		} catch {}
+	}
+	/**
+	* 幂等 action 应用（§11.3）。调用方（T003 协议层）提供序列化的 action（仅
+	* 用于 SHA-256 指纹）与变更闭包；闭包返回 true 表示文档有实际变更。
+	*
+	* - 重复 requestId + 相同指纹 → 直接返回当前 state（不重新应用、不 bump）；
+	* - 同 requestId + 不同动作 → 抛错（`request id was reused with a different action`）；
+	* - 首次请求 → 指纹先行入缓存，随后应用；变更闭包抛错则回滚缓存条目；
+	* - 成功且 changed → 原子落账（revision+1），指纹随账本一并持久化——
+	*   Host 重启后浏览器重试仍安全。
+	*
+	* @param requestId - 浏览器侧 uuid。
+	* @param action - 序列化 action（指纹源；必须可 JSON 序列化）。
+	* @param apply - 变更闭包，就地修改文档；返回 true 表示发生变更（需落账）。
+	*/
+	applyRequest(requestId, action, apply) {
+		const fingerprint = createHash("sha256").update(JSON.stringify(action)).digest("hex");
+		const cached = this.requestCache.get(requestId);
+		if (cached !== void 0) {
+			if (cached.fingerprint !== fingerprint) throw new Error("request id was reused with a different action");
+			return this.state();
+		}
+		this.requestCache.set(requestId, { fingerprint });
+		while (this.requestCache.size > 256) this.requestCache.delete(this.requestCache.keys().next().value);
+		this.syncRecentRequests();
+		try {
+			return this.mutate(apply);
+		} catch (error) {
+			this.requestCache.delete(requestId);
+			this.syncRecentRequests();
+			throw error;
+		}
+	}
+	/**
+	* v1 迁移导入（§11.2 `import` / §9.5）：按 sourceId 一次性导入、按 id 合并、
+	* 写入 importedSources marker（原子落账确认后才写入）。重复 sourceId 幂等
+	* no-op（不落账不 bump）。浏览器以成功响应 + 记住 ledgerId 作为确认凭证
+	* （T003/T004 接线；marker 不进 state/summary，见 `summary`）。
+	*/
+	importSource(requestId, sourceId, tasks) {
+		return this.applyRequest(requestId, {
+			kind: "import",
+			sourceId,
+			tasks
+		}, (doc) => {
+			const result = importIntoLedger(doc, sourceId, tasks);
+			if (result.error !== void 0) doc.scheduler.error = result.error;
+			return result.changed;
+		});
+	}
+	/**
+	* 通用原子变更（Host 编排用，T005/T006 的 runner/scheduler 也走这里）。
+	* `apply` 返回 true 才落账（revision+1）；返回 false 保持 revision 不变。
+	*/
+	mutate(apply) {
+		if (apply(this.document)) this.commit(true);
+		return this.state();
+	}
+	/**
+	* 更新 scheduler 补丁（心跳 lastTickAt、错误可见性等，§9.1）。
+	* 不 bump revision（避免 30s 心跳驱动客户端全量重拉）；无实际变更不写盘。
+	*/
+	setScheduler(patch) {
+		const merged = {
+			...this.document.scheduler,
+			...patch
+		};
+		if (JSON.stringify(merged) === JSON.stringify(this.document.scheduler)) return;
+		this.document.scheduler = merged;
+		this.commit(false);
+	}
+	syncRecentRequests() {
+		this.document.recentRequests = [...this.requestCache].map(([requestId, request]) => ({
+			requestId,
+			fingerprint: request.fingerprint
+		}));
+	}
+	/**
+	* 原子落账：临时文件 + fsync + 原子 rename + 目录 fsync（0600）。
+	* 任一步失败清理临时文件并重新抛出——绝不产生半写文件。
+	*/
+	commit(bumpRevision) {
+		if (bumpRevision) this.document.revision += 1;
+		mkdirSync(dirname(this.file), { recursive: true });
+		const tmp = `${this.file}.tmp-${process.pid}`;
+		let fd;
+		try {
+			fd = openSync(tmp, "w", 384);
+			writeFileSync(fd, JSON.stringify(this.document, null, 2), { encoding: "utf8" });
+			fsyncSync(fd);
+			closeSync(fd);
+			fd = void 0;
+			try {
+				chmodSync(tmp, 384);
+			} catch {}
+			renameSync(tmp, this.file);
+			try {
+				const dirFd = openSync(dirname(this.file), "r");
+				try {
+					fsyncSync(dirFd);
+				} finally {
+					closeSync(dirFd);
+				}
+			} catch {}
+		} catch (error) {
+			if (fd !== void 0) closeSync(fd);
+			try {
+				unlinkSync(tmp);
+			} catch {}
+			throw error;
+		}
+		this.notify();
+	}
+	/** 加载账本；损坏/schema 不兼容 → 隔离原文件并以空账本重建（§17 损坏隔离）。 */
+	load() {
+		if (!existsSync(this.file)) return emptyLedgerDocument();
+		let raw;
+		try {
+			raw = readFileSync(this.file, "utf8");
+		} catch (error) {
+			if (!this.quarantine(error instanceof Error ? error.message : String(error))) throw error;
+			return emptyLedgerDocument(`corrupt ledger was quarantined: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		try {
+			return parseLedgerDocument(raw);
+		} catch (error) {
+			this.quarantine(error instanceof Error ? error.message : String(error));
+			return emptyLedgerDocument(`corrupt ledger was quarantined: ${error instanceof Error ? error.message : String(error)}`);
+		}
+	}
+	/** 损坏隔离：原文件 rename 为 `ledger-v2.json.corrupt-<ts>-<pid>-<uuid>`，原字节保留。 */
+	quarantine(reason) {
+		const target = `${this.file}.corrupt-${this.now()}-${process.pid}-${crypto.randomUUID()}`;
+		try {
+			renameSync(this.file, target);
+			console.warn(`[dsh-task-board] corrupt ledger quarantined to ${target}: ${reason}`);
+			return true;
+		} catch (error) {
+			console.error(`[dsh-task-board] failed to quarantine corrupt ledger ${this.file}: ${error instanceof Error ? error.message : String(error)}`);
+			return false;
+		}
+	}
+	notify() {
+		for (const listener of [...this.listeners]) listener();
+	}
+	/**
+	* 获取单写者锁：`wx` 排他创建（已存在则 EEXIST 走锁主判定）。
+	* 锁记录 PID + token + 启动时间探测；PID 复用（启动时间不匹配）识别为陈旧锁
+	* 并接管；锁不可读时 fail closed（提示人工清理）。
+	*/
+	acquireLock() {
+		for (let attempt = 0; attempt < 2; attempt += 1) try {
+			const fd = openSync(this.lockFile, "wx", 384);
+			const startedAt = this.probes.ownStartTimeMs();
+			const probe = process.platform === "linux" || process.platform === "win32" ? "exact" : "legacy";
+			writeFileSync(fd, JSON.stringify({
+				pid: process.pid,
+				token: this.lockToken,
+				startedAt,
+				probe
+			}), { encoding: "utf8" });
+			fsyncSync(fd);
+			try {
+				chmodSync(this.lockFile, 384);
+			} catch {}
+			return fd;
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+			let owner;
+			try {
+				const parsed = JSON.parse(readFileSync(this.lockFile, "utf8"));
+				if (typeof parsed.pid === "number" && typeof parsed.token === "string") owner = {
+					pid: parsed.pid,
+					token: parsed.token,
+					...typeof parsed.startedAt === "number" ? { startedAt: parsed.startedAt } : {},
+					...parsed.probe === "exact" ? { probe: "exact" } : {}
+				};
+			} catch {
+				throw new Error(`nova-task-board ledger lock is unreadable: ${this.lockFile}; if this is a leftover from an unclean shutdown and no other DSH host is running, remove it manually and retry`);
+			}
+			if (owner === void 0) throw new Error(`nova-task-board ledger lock is unreadable: ${this.lockFile}; if this is a leftover from an unclean shutdown and no other DSH host is running, remove it manually and retry`);
+			if (this.probes.isAlive(owner.pid)) {
+				const actualStartedAt = owner.pid === process.pid ? this.probes.ownStartTimeMs() : this.probes.startTimeMs(owner.pid);
+				if (!(actualStartedAt !== void 0 && (owner.startedAt !== void 0 ? startTimeMismatch(owner.startedAt, actualStartedAt, owner.probe === "exact") : (() => {
+					try {
+						return statSync(this.lockFile).mtimeMs < actualStartedAt;
+					} catch {
+						return true;
+					}
+				})()))) throw new Error(`nova-task-board ledger is already owned by process ${owner.pid}`);
+			}
+			try {
+				unlinkSync(this.lockFile);
+			} catch (unlinkError) {
+				if (unlinkError.code !== "ENOENT") throw unlinkError;
+			}
+		}
+		throw new Error(`nova-task-board ledger lock could not be acquired: ${this.lockFile}`);
+	}
+};
+//#endregion
+//#region src/host-automation.ts
+/**
+* 自动化收集器（DSH-REQ-001 §14.1/14.2，T010/P3）：把外部内容拉取为标准化
+* 的 backlog `TaskRecord`（去重键、清洗与映射在 core/context.ts，本模块只做
+* I/O 与编排）。
+*
+* 两个收集源：
+* - **bookmark_collector（§14.2 收藏收集）**：读取本地「收藏收件箱」文件
+*   （JSONL：每行 `{"title","url","note"}`），逐条映射为 backlog 任务。
+*   默认文件 `$DSH_HOME/nova-ui/task-board/bookmarks.jsonl`（规则 config 的
+*   `filePath` 可覆盖）；浏览器侧导出书签/手动追加均可（B4 调研：浏览器
+*   书签 API 需扩展能力，v1.0 由「收件箱文件 + 人工维护」承载）。
+* - **github_issue（§14.1 GitHub Issue → backlog）**：经 GitHub REST API 拉取
+*   仓库 open issues（规则 config 的 `repo`），按 `filter.labels` 过滤（非空时
+*   Issue 必须命中至少一个标签），跳过 PR。Webhook 推送是另一入口
+*   （host-routes.ts `POST /api/nova-task-board/webhooks/github`，HMAC 校验）。
+*
+* 依赖面（§17 可测试性）：fetch/readFile 结构面注入（测试注入 fake）；token
+* 从环境解析（不落配置/账本）。收集结果经 transitions.applyAddCollectedTasks
+* 原子落账（同 (source, url) 去重）。
+*/
+/** 默认文件读取：ENOENT/不可读 → undefined（收集器报可见错误，不崩溃）。 */
+function defaultReadFile(file) {
+	try {
+		return readFileSync(file, "utf8");
+	} catch {
+		return;
+	}
+}
+/**
+* 自动化收集器：两个收集源的 I/O 实现。无状态、无计时器——由
+* TaskBoardHostService 在 tick / 手动触发 / Webhook 时调用。
+*/
+var TaskBoardAutomationCollector = class {
+	deps;
+	constructor(deps = {}) {
+		this.deps = deps;
+	}
+	readFile(file) {
+		return this.deps.readFile !== void 0 ? this.deps.readFile(file) : defaultReadFile(file);
+	}
+	/**
+	* 收藏收集（§14.2）：读收件箱 JSONL → 逐条映射 backlog 任务。
+	* 文件缺失/不可读 → error（不产出任务）。去重（同 url）由落账层完成。
+	*/
+	collectBookmarks(rule, now) {
+		const filePath = ruleConfig(rule, "filePath") ?? join(this.deps.bookmarkDir ?? ".", "bookmarks.jsonl");
+		const content = this.readFile(filePath);
+		if (content === void 0) return {
+			tasks: [],
+			error: `bookmark inbox not found or unreadable: ${filePath}`
+		};
+		const tasks = [];
+		for (const entry of parseBookmarkEntries(content)) {
+			const input = bookmarkEntryToCollectedTaskInput(entry);
+			if (input === void 0) continue;
+			tasks.push(newCollectedTask(input, crypto.randomUUID(), now, 0));
+		}
+		return { tasks };
+	}
+	/**
+	* GitHub Issue 收集（§14.1 轮询路径）：`GET /repos/{repo}/issues?state=open`，
+	* 跳过 PR、按规则标签过滤；token 缺省时匿名请求。网络/HTTP 失败 → error
+	* （Host 记入可见错误，不产出任务）。
+	*/
+	async collectGithubIssues(rule, now) {
+		const repo = ruleConfig(rule, "repo");
+		if (repo === void 0 || repo === "") return {
+			tasks: [],
+			error: "github_issue rule requires config.repo"
+		};
+		const fetchImpl = this.deps.fetchImpl ?? globalThis.fetch;
+		const url = `https://api.github.com/repos/${repo}/issues?state=open&per_page=100`;
+		const headers = {
+			accept: "application/vnd.github+json",
+			"user-agent": "dsh-nova-ui-task-board"
+		};
+		if (this.deps.githubToken !== void 0 && this.deps.githubToken !== "") headers.authorization = `Bearer ${this.deps.githubToken}`;
+		let response;
+		try {
+			response = await fetchImpl(url, { headers });
+		} catch (error) {
+			return {
+				tasks: [],
+				error: `github api request failed: ${error instanceof Error ? error.message : String(error)}`
+			};
+		}
+		if (!response.ok) return {
+			tasks: [],
+			error: `github api error: ${response.status} ${response.statusText}`
+		};
+		let body;
+		try {
+			body = await response.json();
+		} catch {
+			return {
+				tasks: [],
+				error: "github api returned a non-JSON payload"
+			};
+		}
+		if (!Array.isArray(body)) return {
+			tasks: [],
+			error: "github api returned an unexpected payload"
+		};
+		const tasks = [];
+		for (const item of body) {
+			if (typeof item !== "object" || item === null) continue;
+			const issue = item;
+			if (issue.pull_request !== void 0) continue;
+			if (!matchesGithubLabels(issueLabelNames(issue), rule.filter.labels)) continue;
+			const input = githubIssueToCollectedTaskInput(issue, repo);
+			tasks.push(newCollectedTask(input, crypto.randomUUID(), now, 0));
+		}
+		return { tasks };
+	}
+};
+//#endregion
+//#region src/host-service.ts
+/**
+* 任务看板协议服务层（DSH-REQ-001 §8 架构「Host（控制面）」）。
+*
+* T003 交付控制面的串行应用骨架：浏览器提交 `{requestId, action}` → 幂等判定
+* （复用 T002 HostLedger 的 applyRequest + recentRequests 持久化）→ 状态机
+* 守卫（core/transitions.ts）→ 原子落账（revision+1）→ 返回全量 snapshot。
+* T005 接入真实执行（§13）：`run/rerun` action 经状态机开执行记录后由
+* HostExecutionRunner 启动独立 DSH 会话；5s 轮询会话列表按 turn 结算
+* （§13.3）；Host 重启后带 sessionId 的 running 执行由轮询继续观察结算。
+* T006 接入 cron 周期定时（§9.4/§13.1）：30s tick 扫描到期任务并触发执行
+* （浏览器关闭也生效）——启动/恢复首个 tick 跳过错过的触发点（不补跑）、
+* 到期且 enabled → 复用 T005 的 launch 入口开启执行、同任务 running 中到期
+* 只滚动到下一匹配点不并发；`set-schedule` action（§11.2）设定/修改/关闭
+* cron（nextRunAt/lastTriggeredAt 为 Host 独占字段）。
+* T007 接入一次性计划（§9.4/§11.2 set-one-shot/§13.5）：同一 30s tick 同时
+* 扫描 one-shot——`runAt ≤ now && firedAt 缺省` 即触发一次并写 firedAt（触发
+* 即消费，绝不重复）；触发时任务 running → 不并发不排队、本次仍标记消费；
+* 错过（停机/睡眠/长暂停，恢复首 tick）→ 跳过不补跑、写 firedAt 展示「已过期
+* /已跳过」；`set-one-shot` 设定/修改/清除（runAt 缺省或 0 = 取消），与 cron
+* 互斥（D6）。
+* T009 接入列内排序与跨列拖拽（§9.2/§10.2/§11.2/§12.10）：`reorder` 经状态机
+* 重算列内 order（同列唯一、整列重编号；status 须与当前状态一致防竞态；可携带
+* project/tags 归属变更原子落账）、`move.order` 可选落位（缺省追加目标列末尾，
+* done/failed 拖回 backlog/todo 为重开不触发执行）。分组视图模式由浏览器端持有，
+* Host 不感知（§12.10）。
+* T010 接入自动化收集与上下文闭环（§9.5/§14，P3）：
+* - 自动化规则（§9.5 automation_rules）：`upsert-automation`/`delete-automation`
+*   落账；30s tick 与任务 schedule 同轮扫描规则 cron——到期滚动
+*   （applyCollectorRoll）后异步执行收集（收藏收件箱文件 / GitHub API 轮询，
+*   host-automation.ts），恢复期首 tick 跳过（applySkipMissedAutomationRules，
+*   错过不补跑）；`run-automation` 手动触发一次收集（只滚 lastTriggeredAt，
+*   不消费计划触发点）；收集产物经 applyAddCollectedTasks 去重落 backlog
+*   （§14.3：只进 backlog，人工 promote 前不可执行/不可定时，守卫在状态机）；
+* - GitHub Webhook（§14.1）：`ingestGithubWebhook` 把 `issues` 事件按启用规则
+*   的标签过滤创建 backlog 任务（命令类字段递归拒绝，§14.3/§16.2）；HMAC
+*   校验在路由层（host-routes.ts）；
+* - 评论/产物/上下文快照（§9.5）：`add-comment`/`add-artifact`/`update-context`
+*   经状态机落账；每次执行结算后 Host 自动更新——成功时记录会话产物
+*   （type=session，transcript 即默认产物）并摘取最近 assistant 文本写入
+*   `contextSnapshot.lastAiSummary`（B5：Host 侧摘取 + token 预算），
+*   latestUserFeedback/relatedLinks 同步刷新；后续调用只注入摘要与必要片段
+*   （runner.launch 经 composePrompt，见 core/context.ts）。
+* T011 接入对话候选流转（§11.2/§14.4，P3.1）：`propose`（对话提取/手动转任务
+* → proposed 候选，source=conversation，输入清洗与命令字段拒绝在状态机/协议
+* 层）、`confirm`（确认候选 → 落 backlog/todo，确认是唯一 promote 路径——
+* 防注入闸门）、`dismiss`（拒绝/忽略删除）三个 action 经状态机落账。
+* T012 接入需求拆分（§11.2/§12.9/§14.5，P3.2，见 B8）：`start-split` 提交需求
+* （粘贴文本/工作区文件路径）→ 注册拆分作业 → 启动独立拆分会话（复用 T005
+* 执行通道，指令模板 = 粒度启发式 + 覆盖自检 + 输出 schema）→ 会话结束后读取
+* transcript、解析结构化标记 → 创建父需求任务「需求：<标题>」+ `propose-batch`
+* 原子落账（全部 proposed、source=requirement、children parentId 指向父任务、
+* 递归拆分挂到原任务下；人工确认闸门复用 T011）；`propose-batch` 亦可独立提交
+* （批量候选，parentId 引用校验与防环在状态机层，§16.8）。
+*
+* 分层：路由层（host-routes.ts）负责安全栅栏与载荷校验；本服务只认已解析的
+* 判别联合（protocol.ts 的输出），内部不含 HTTP 语义。调度（cron/one-shot/
+* 自动化规则，T006/T007/T010）、电源保护实现（后续任务）不在本基线内；
+* power 快照仅提供稳定的类型契约与基础值（sessionStateKnown 由轮询驱动）。
+*/
+/** 会话轮询间隔（§17 性能：5s，对齐参考实现）。 */
+const SESSION_POLL_MS = 5e3;
+/** 调度 tick 间隔（§13.1/§17 性能：30s，对齐参考实现）。 */
+const SCHEDULE_TICK_MS = 3e4;
+/** 任务看板协议服务：串行 apply + 幂等 + snapshot/event/power + 执行轮询。 */
+var TaskBoardHostService = class {
+	/** 权威账本。 */
+	ledger;
+	listeners = /* @__PURE__ */ new Set();
+	now;
+	platform;
+	runner;
+	automation;
+	active = true;
+	preventIdleSleep = false;
+	disposed = false;
+	pollTimer;
+	pollInFlight = false;
+	sessionStateKnown = false;
+	scheduleTimer;
+	tickInFlight = false;
+	lastScheduleTick;
+	/** 需求拆分作业（T012/B8：独立拆分会话驱动；key = action.id）。 */
+	splitJobs = /* @__PURE__ */ new Map();
+	constructor(options = {}) {
+		this.ledger = options.ledger ?? new HostLedger();
+		this.now = options.now ?? Date.now;
+		this.platform = options.platform ?? process.platform;
+		this.runner = options.runner;
+		this.automation = new TaskBoardAutomationCollector({
+			...options.automation ?? {},
+			bookmarkDir: options.automation?.bookmarkDir ?? this.ledger.dir
+		});
+		this.ledger.subscribe(() => this.emit());
+	}
+	/**
+	* 应用配置（插件 enabled / preventIdleSleep）。enabled=false 时 apply 抛错
+	* （路由层 400），SSE 订阅方通过事件帧感知 power 变化。从禁用恢复启用时
+	* 立即补一轮会话轮询与调度 tick（首 tick 跳过停机期错过的触发点）。
+	*/
+	setConfiguration(active, preventIdleSleep) {
+		const resumed = !this.active && active;
+		this.active = active;
+		this.preventIdleSleep = preventIdleSleep;
+		if (resumed) {
+			this.schedulePoll();
+			this.scheduleTick(true);
+		}
+		this.emit();
+	}
+	/** 全量状态快照（§11.1 `GET /state`）。 */
+	snapshot() {
+		const state = this.ledger.state();
+		return {
+			schemaVersion: 2,
+			revision: state.revision,
+			tasks: state.tasks,
+			scheduler: state.scheduler,
+			power: this.powerSnapshot(),
+			automationRules: state.automationRules
+		};
+	}
+	/** SSE 事件帧载荷（§11.1 `GET /events`）：只推 revision/scheduler/power。 */
+	eventPayload() {
+		const { revision, scheduler } = this.ledger.summary();
+		return {
+			revision,
+			scheduler,
+			power: this.powerSnapshot()
+		};
+	}
+	/** 订阅账本/配置变更（SSE 推送源；路由层在推送前先主动推一帧）。 */
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	/**
+	* 幂等应用一个已解析的 action（§11.3）：账本层判定 requestId + SHA-256 指纹，
+	* 命中缓存直接返回当前 state（不 bump）；首次请求经状态机守卫原子落账。
+	* 守卫/校验失败抛错（`TaskBoardTransitionError` 等），路由层转为 400。
+	*
+	* T005：`run/rerun` 在本次 apply 真实开启执行（revision +1）时，异步调度
+	* launch（创建会话 + 发送 Prompt）；幂等重放（revision 不变）不再重复启动。
+	*/
+	apply(requestId, action) {
+		if (!this.active) throw new Error("task board is disabled");
+		const before = this.ledger.summary().revision;
+		const state = this.ledger.applyRequest(requestId, action, (doc) => this.applyAction(doc, action));
+		if (state.revision > before) {
+			if (action.kind === "run" || action.kind === "rerun") {
+				const task = state.tasks.find((candidate) => candidate.id === action.taskId);
+				const execution = task?.executions.at(-1);
+				if (task !== void 0 && execution !== void 0) this.scheduleLaunch(task, execution);
+			} else if (action.kind === "run-automation") this.scheduleAutomationRun(action.ruleId);
+		} else if (action.kind === "start-split") {
+			const job = this.splitJobs.get(action.id);
+			if (job !== void 0 && !job.launched) {
+				job.launched = true;
+				this.scheduleSplitLaunch(job);
+			}
+		}
+		return {
+			schemaVersion: 2,
+			revision: state.revision,
+			tasks: state.tasks,
+			scheduler: state.scheduler,
+			power: this.powerSnapshot(),
+			automationRules: state.automationRules
+		};
+	}
+	/**
+	* 启动执行轮询（§13.3）：5s 间隔轮询会话列表结算 open 执行，启动时立即
+	* 轮询一次（覆盖 Host 重启后带 sessionId 的 running 执行）。幂等；无 runner
+	* 时 no-op（纯账本模式不轮询）。dispose 时停止。
+	*
+	* T006/T007 调度 tick（§13.1/§13.5）：30s 间隔扫描到期 cron 与 one-shot，
+	* 启动时立即 tick 一次——首个 tick 视为恢复（错过触发点跳过不补跑，见
+	* tickSchedule）。
+	*/
+	start() {
+		if (this.disposed || this.pollTimer !== void 0 || this.runner === void 0) return;
+		this.pollTimer = setInterval(() => {
+			this.schedulePoll();
+		}, SESSION_POLL_MS);
+		this.schedulePoll();
+		this.scheduleTimer = setInterval(() => {
+			this.scheduleTick(false);
+		}, SCHEDULE_TICK_MS);
+		this.scheduleTick(true);
+	}
+	/** 释放：轮询/调度定时器、账本锁、订阅。 */
+	dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		if (this.pollTimer !== void 0) clearInterval(this.pollTimer);
+		this.pollTimer = void 0;
+		if (this.scheduleTimer !== void 0) clearInterval(this.scheduleTimer);
+		this.scheduleTimer = void 0;
+		this.ledger.dispose();
+		this.listeners.clear();
+	}
+	/** 电源保护快照（§11.1 power 字段；保护实现随后续任务，本期为基础值 + 配置态）。 */
+	powerSnapshot() {
+		const tasks = this.ledger.peekTasks();
+		let runningSessions = 0;
+		let armedSchedules = 0;
+		for (const task of tasks) {
+			if (task.executions.some((execution) => execution.endedAt === void 0)) runningSessions += 1;
+			if (task.archivedAt === void 0 && isArmedSchedule(task)) armedSchedules += 1;
+		}
+		const enabled = this.active && this.preventIdleSleep;
+		return {
+			platform: this.platform,
+			phase: enabled ? "idle" : "disabled",
+			enabled,
+			runningSessions,
+			armedSchedules,
+			sessionStateKnown: this.sessionStateKnown
+		};
+	}
+	/** 状态机分发：协议 action → transitions 纯函数（就地修改账本文档并返回是否变更）。 */
+	applyAction(doc, action) {
+		switch (action.kind) {
+			case "import": {
+				const result = importIntoLedger(doc, action.sourceId, action.tasks);
+				if (result.error !== void 0) doc.scheduler.error = result.error;
+				return result.changed;
+			}
+			case "create": return applyCreateTask(doc, action.input, action.id, this.now());
+			case "propose": return applyProposeTask(doc, action.input, action.id, this.now());
+			case "confirm": return applyConfirmTask(doc, action.taskId, action.target, this.now());
+			case "dismiss": return applyDismissTask(doc, action.taskId);
+			case "start-split":
+				if (this.runner === void 0) throw new Error("execution runner is not available");
+				return this.registerSplitJob(doc, action.id, action.input);
+			case "propose-batch": return applyProposeBatch(doc, action.items, this.now());
+			case "update": return applyUpdateTask(doc, action.taskId, action.patch, this.now());
+			case "set-schedule": return applySetSchedule(doc, action.taskId, action.patch, this.now());
+			case "set-one-shot": return applySetOneShot(doc, action.taskId, action.patch, this.now());
+			case "delete": return applyDeleteTask(doc, action.taskId);
+			case "move": return applyMoveTask(doc, action.taskId, action.status, this.now(), action.order);
+			case "reorder": return applyReorderTask(doc, action.taskId, action.status, action.order, {
+				...action.project !== void 0 ? { project: action.project } : {},
+				...action.tags !== void 0 ? { tags: action.tags } : {}
+			}, this.now());
+			case "archive": return applyArchiveTask(doc, action.taskId, this.now());
+			case "restore": return applyRestoreTask(doc, action.taskId, this.now());
+			case "run":
+			case "rerun":
+				if (this.runner === void 0) throw new Error("execution runner is not available");
+				return action.kind === "run" ? applyRunTask(doc, action.taskId, this.now()) : applyRerunTask(doc, action.taskId, this.now());
+			case "add-comment": return applyAddComment(doc, action.taskId, action.comment, this.now());
+			case "add-artifact": return applyAddArtifact(doc, action.taskId, action.artifact, this.now());
+			case "update-context": return applyUpdateContextSnapshot(doc, action.taskId, action.patch, this.now());
+			case "upsert-automation": return applyUpsertAutomationRule(doc, action.rule, this.now());
+			case "delete-automation": return applyDeleteAutomationRule(doc, action.ruleId);
+			case "run-automation":
+				if (!doc.automationRules.some((rule) => rule.id === action.ruleId)) throw new Error("automation rule not found");
+				return applyCollectorRoll(doc, action.ruleId, void 0, this.now(), this.now());
+		}
+	}
+	/** 异步调度 launch（fire-and-forget；结算失败仅记录日志，不中断控制面）。 */
+	scheduleLaunch(task, execution) {
+		this.launchExecution(task, execution).catch((error) => {
+			console.error("[dsh-task-board] execution launch settlement failed", error);
+		});
+	}
+	/**
+	* launch 编排（§13.2 尾部）：runner 创建会话成功 → 回填 sessionId（之后由
+	* 轮询结算）；任何失败 → 结算 failed 并保留错误文本（会话创建后的失败携带
+	* sessionId，先回填再结算，详情页保留跳转线索）。
+	*/
+	async launchExecution(task, execution) {
+		const runner = this.runner;
+		if (runner === void 0) return;
+		try {
+			const sessionId = await runner.launch(task);
+			this.ledger.mutate((doc) => applyAttachSession(doc, task.id, execution.id, sessionId, this.now()));
+		} catch (error) {
+			if (error instanceof SessionLaunchError) this.ledger.mutate((doc) => applyAttachSession(doc, task.id, execution.id, error.sessionId, this.now()));
+			this.ledger.mutate((doc) => applySettleExecution(doc, task.id, execution.id, "failed", this.now(), error instanceof Error ? error.message : String(error)));
+		}
+	}
+	/** 轮询调度（防重入）：单轮在途时跳过，dispose 后不再启动。 */
+	schedulePoll() {
+		if (this.pollInFlight || this.disposed) return;
+		this.pollInFlight = true;
+		this.pollSessions().catch((error) => {
+			console.error("[dsh-task-board] session polling failed", error);
+		}).finally(() => {
+			this.pollInFlight = false;
+		});
+	}
+	/**
+	* 单轮结算轮询（§13.3）：会话列表 → 逐条判定 open 执行；会话列表不可知时
+	* 仅降级 sessionStateKnown（不结算，避免误判）。重启恢复语义：
+	* - 有 sessionId 的 running 执行 → 继续观察结算（本方法覆盖）；
+	* - 无 sessionId 的启动中断 → HostLedger 加载时已标 cancelled（core/recovery.ts），
+	*   本方法跳过（禁止自动重发）。
+	* T012：同一轮次顺带结算需求拆分作业（复用会话列表，1 + E，B8）。
+	*/
+	async pollSessions() {
+		const runner = this.runner;
+		if (runner === void 0) return;
+		const open = this.openExecutions();
+		if (!this.active && open.length === 0 && this.splitJobs.size === 0) return;
+		const state = await runner.listRunning();
+		if (!state.known) {
+			this.setSessionStateKnown(false);
+			return;
+		}
+		this.setSessionStateKnown(true);
+		for (const execution of open) {
+			if (execution.sessionId === void 0) continue;
+			try {
+				const result = await runner.inspect(execution.sessionId, execution.startedAt, state.items);
+				const outcome = result.outcome;
+				if (outcome === "pending") continue;
+				const settledAt = this.now();
+				this.ledger.mutate((doc) => {
+					let changed = applySettleExecution(doc, execution.taskId, execution.executionId, outcome, settledAt, result.error);
+					const task = doc.tasks.find((candidate) => candidate.id === execution.taskId);
+					if (task !== void 0) {
+						if (outcome === "succeeded") changed = applyAddArtifact(doc, task.id, {
+							type: "session",
+							title: task.title,
+							contentRef: execution.sessionId
+						}, settledAt) || changed;
+						const patch = contextPatchFromSettle(task, outcome === "succeeded" ? result.lastAssistantText : void 0);
+						if (Object.keys(patch).length > 0) changed = applyUpdateContextSnapshot(doc, task.id, patch, settledAt) || changed;
+					}
+					return changed;
+				});
+			} catch (error) {}
+		}
+		await this.pollSplitJobs(state.items);
+	}
+	/** 账本中全部未结算执行的最小投影（taskId/executionId/sessionId/startedAt）。 */
+	openExecutions() {
+		const open = [];
+		for (const task of this.ledger.peekTasks()) for (const execution of task.executions) {
+			if (execution.endedAt !== void 0) continue;
+			open.push({
+				taskId: task.id,
+				executionId: execution.id,
+				sessionId: execution.sessionId,
+				startedAt: execution.startedAt
+			});
+		}
+		return open;
+	}
+	setSessionStateKnown(known) {
+		if (this.sessionStateKnown === known) return;
+		this.sessionStateKnown = known;
+		this.emit();
+	}
+	/** 调度 tick 调度（防重入）：单轮在途时跳过，dispose 后不再启动。 */
+	scheduleTick(first) {
+		if (this.tickInFlight || this.disposed) return;
+		this.tickInFlight = true;
+		this.tickSchedule(first).catch((error) => {
+			console.error("[dsh-task-board] scheduler tick failed", error);
+		}).finally(() => {
+			this.tickInFlight = false;
+		});
+	}
+	/**
+	* 单轮调度 tick（§13.1/§13.5）：
+	* - 记录 lastTickAt（setScheduler 不 bump revision，§17 性能）；
+	* - **恢复判定**：首个 tick（启动/从禁用恢复）或距上次 tick 超过
+	*   RESUME_GAP_MS（Host 停机/睡眠/长暂停）→ 跳过错过的触发点（skipMissed，
+	*   不补跑），并把全部到期规则滚动到 now 之后的下一个匹配点（cron）或写
+	*   firedAt 消费（one-shot）；
+	* - 正常 tick：扫描到期 cron（enabled 且 nextRunAt ≤ now 且非归档）与到期
+	*   one-shot（firedAt 缺省且 runAt ≤ now 且非归档），逐条开启执行（复用 T005
+	*   launch 入口）；同任务 running 中到期 → cron 只滚动不触发、one-shot 只写
+	*   firedAt 不触发（openScheduled/openScheduledOneShot 内部判定）。
+	*/
+	async tickSchedule(first) {
+		if (this.disposed || !this.active) return;
+		const now = this.now();
+		const recovered = first || this.lastScheduleTick !== void 0 && now - this.lastScheduleTick > 45e3;
+		this.lastScheduleTick = now;
+		this.ledger.setScheduler({ lastTickAt: now });
+		if (recovered) {
+			this.ledger.mutate((doc) => applySkipMissedSchedules(doc, now));
+			this.ledger.mutate((doc) => applySkipMissedAutomationRules(doc, now));
+			return;
+		}
+		for (const due of this.dueAutomationRules(now)) {
+			const next = nextRunAtMs(due.cron, due.nextRunAt);
+			this.ledger.mutate((doc) => applyCollectorRoll(doc, due.ruleId, next, now, now));
+			this.scheduleAutomationRun(due.ruleId);
+		}
+		if (this.runner === void 0) return;
+		for (const due of this.dueSchedules(now)) {
+			const next = nextRunAtMs(due.cron, due.nextRunAt);
+			const opened = this.openScheduled(due.taskId, next, now);
+			if (opened !== void 0) this.scheduleLaunch(opened.task, opened.execution);
+		}
+		for (const due of this.dueOneShots(now)) {
+			const opened = this.openScheduledOneShot(due.taskId, now);
+			if (opened !== void 0) this.scheduleLaunch(opened.task, opened.execution);
+		}
+	}
+	/** 账本中当前到期（enabled 且 nextRunAt ≤ now）的自动化规则最小投影。 */
+	dueAutomationRules(now) {
+		const due = [];
+		for (const rule of this.ledger.peekAutomationRules()) {
+			if (!rule.enabled) continue;
+			const nextRunAt = rule.trigger.nextRunAt;
+			if (nextRunAt === void 0 || nextRunAt > now) continue;
+			due.push({
+				ruleId: rule.id,
+				cron: rule.trigger.cron,
+				nextRunAt
+			});
+		}
+		return due;
+	}
+	/** 账本中当前到期（enabled 且 nextRunAt ≤ now）的 cron 规则最小投影。 */
+	dueSchedules(now) {
+		const due = [];
+		for (const task of this.ledger.peekTasks()) {
+			if (task.archivedAt !== void 0) continue;
+			const schedule = task.schedule;
+			if (schedule === void 0 || schedule.kind !== "cron" || !schedule.enabled) continue;
+			if (schedule.nextRunAt === void 0 || schedule.nextRunAt > now) continue;
+			due.push({
+				taskId: task.id,
+				cron: schedule.cron,
+				nextRunAt: schedule.nextRunAt
+			});
+		}
+		return due;
+	}
+	/**
+	* 开启一次到期的调度执行（§13.1/§13.2 尾部）：
+	* - 任务不存在/已归档 → no-op；
+	* - 任务 running 或带未结算执行 → **不并发、不排队**：本次只把 nextRunAt
+	*   滚动到下一匹配点（lastTriggeredAt 保留现值，本次不记触发），返回 undefined；
+	* - 否则开启执行（置 running + 追加 open 执行记录，startedAt=触发时刻）并把
+	*   规则滚动到下一匹配点（lastTriggeredAt=本次触发点），返回开启的执行供
+	*   scheduleLaunch 启动会话。
+	*/
+	openScheduled(taskId, nextRunAt, now) {
+		let opened;
+		this.ledger.mutate((doc) => {
+			const task = doc.tasks.find((candidate) => candidate.id === taskId);
+			if (task === void 0 || task.archivedAt !== void 0) return false;
+			if (task.status === "running" || hasOpenExecution(task)) return applyScheduleRoll(doc, taskId, nextRunAt, void 0, now);
+			opened = openExecution(task, now, crypto.randomUUID());
+			doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? opened.task : candidate);
+			applyScheduleRoll(doc, taskId, nextRunAt, now, now);
+			return true;
+		});
+		return opened;
+	}
+	/**
+	* 开启一次到期的 one-shot 执行（§13.5）：
+	* - 任务不存在/已归档 → no-op；
+	* - 任务 running 或带未结算执行 → **不并发、不排队**：本次仍标记消费
+	*   （写 firedAt），但不触发执行，返回 undefined；
+	* - 否则先标记消费（firedAt=now，触发即消费——防重启后重复触发），再开启
+	*   执行（置 running + 追加 open 执行记录，startedAt=触发时刻），返回开启的
+	*   执行供 scheduleLaunch 启动会话。
+	*/
+	openScheduledOneShot(taskId, now) {
+		let opened;
+		this.ledger.mutate((doc) => {
+			const task = doc.tasks.find((candidate) => candidate.id === taskId);
+			if (task === void 0 || task.archivedAt !== void 0) return false;
+			if (task.status === "running" || hasOpenExecution(task)) return applyMarkOneShotConsumed(doc, taskId, now);
+			applyMarkOneShotConsumed(doc, taskId, now);
+			const consumed = doc.tasks.find((candidate) => candidate.id === taskId);
+			if (consumed === void 0) return false;
+			opened = openExecution(consumed, now, crypto.randomUUID());
+			doc.tasks = doc.tasks.map((candidate) => candidate.id === taskId ? opened.task : candidate);
+			return true;
+		});
+		return opened;
+	}
+	/** 账本中当前到期（firedAt 缺省且 runAt ≤ now）的 one-shot 规则最小投影。 */
+	dueOneShots(now) {
+		const due = [];
+		for (const task of this.ledger.peekTasks()) {
+			if (task.archivedAt !== void 0) continue;
+			const schedule = task.schedule;
+			if (schedule === void 0 || schedule.kind !== "one-shot") continue;
+			if (schedule.firedAt !== void 0 || schedule.runAt > now) continue;
+			due.push({ taskId: task.id });
+		}
+		return due;
+	}
+	/** 异步调度一次收集（fire-and-forget；失败记日志，不中断控制面）。 */
+	scheduleAutomationRun(ruleId) {
+		this.runAutomationRule(ruleId).catch((error) => {
+			console.error("[dsh-task-board] automation collection failed", error);
+		});
+	}
+	/**
+	* 执行一次收集（§14.2）：按规则来源分发（书签收件箱文件 / GitHub API），产物
+	* 经 applyAddCollectedTasks 去重落 backlog（同 (source, url) 幂等）；收集失败
+	* 写入可见错误（scheduler.error，UI 可见），不抛给控制面。
+	*/
+	async runAutomationRule(ruleId) {
+		const rule = this.ledger.peekAutomationRules().find((candidate) => candidate.id === ruleId);
+		if (rule === void 0) return;
+		const now = this.now();
+		let batch;
+		try {
+			batch = rule.source === "bookmark_collector" ? this.automation.collectBookmarks(rule, now) : await this.automation.collectGithubIssues(rule, now);
+		} catch (error) {
+			const message = `[automation:${rule.id}] collection failed: ${error instanceof Error ? error.message : String(error)}`;
+			this.ledger.setScheduler({ error: message });
+			console.error(`[dsh-task-board] ${message}`);
+			return;
+		}
+		let created = 0;
+		if (batch.tasks.length > 0) {
+			const before = this.ledger.summary().revision;
+			this.ledger.mutate((doc) => applyAddCollectedTasks(doc, batch.tasks));
+			created = this.ledger.summary().revision - before;
+		}
+		if (batch.error !== void 0) this.ledger.setScheduler({ error: `[automation:${rule.id}] ${batch.error}` });
+		if (created > 0 || batch.error !== void 0) console.log(`[dsh-task-board] automation ${rule.id} (${rule.source}) collected ${batch.tasks.length} item(s), created ${created}` + (batch.error === void 0 ? "" : `: ${batch.error}`));
+	}
+	/**
+	* GitHub Webhook `issues` 事件摄入（§14.1）：命令类字段递归拒绝（§14.3/§16.2，
+	* 与 import 同一条红线）；只处理 opened/reopened；按启用 github_issue 规则的
+	* repo（配置了时须匹配）与标签过滤创建 backlog 任务（跨规则去重，同 url 只建
+	* 一条）。返回本次实际创建数（含账本去重）。
+	*/
+	ingestGithubWebhook(payload) {
+		if (hasForbiddenCommandFields(payload)) throw new Error("webhook payload contains forbidden fields");
+		const parsed = parseGithubWebhookPayload(payload);
+		if (parsed === void 0 || parsed.issue === void 0) return { created: 0 };
+		if (parsed.action !== "opened" && parsed.action !== "reopened") return { created: 0 };
+		const now = this.now();
+		const repo = parsed.repository?.full_name;
+		const tasks = [];
+		const seen = /* @__PURE__ */ new Set();
+		for (const rule of this.ledger.peekAutomationRules()) {
+			if (!rule.enabled || rule.source !== "github_issue") continue;
+			const ruleRepo = rule.config.repo;
+			if (ruleRepo !== void 0 && ruleRepo !== "" && repo !== void 0 && ruleRepo !== repo) continue;
+			if (!matchesGithubLabels(issueLabelNames(parsed.issue), rule.filter.labels)) continue;
+			const input = githubIssueToCollectedTaskInput(parsed.issue, repo);
+			const key = input.metadata.url ?? input.title;
+			if (seen.has(key)) continue;
+			seen.add(key);
+			tasks.push(newCollectedTask(input, crypto.randomUUID(), now, 0));
+		}
+		if (tasks.length === 0) return { created: 0 };
+		const before = this.ledger.summary().revision;
+		this.ledger.mutate((doc) => applyAddCollectedTasks(doc, tasks));
+		return { created: this.ledger.summary().revision - before };
+	}
+	/**
+	* 注册拆分作业（start-split 的变更闭包）：校验递归父任务引用（存在性 + 防环，
+	* §16.8）后登记作业并返回 false（不产生账本变更、revision 不 bump——拆分
+	* 结果在拆分会话结算时落账）。幂等重放命中缓存不会调用本闭包 → 不重复注册。
+	*/
+	registerSplitJob(doc, id, input) {
+		if (this.splitJobs.has(id)) throw new Error("split job already exists");
+		const parentTaskId = normalizeOptionalString(input.parentTaskId);
+		if (parentTaskId !== void 0) assertValidParentRef(doc, parentTaskId);
+		this.splitJobs.set(id, {
+			id,
+			input,
+			startedAt: this.now(),
+			parentId: crypto.randomUUID()
+		});
+		return false;
+	}
+	/** 异步调度拆分会话启动（fire-and-forget；失败记 scheduler.error，不中断控制面）。 */
+	scheduleSplitLaunch(job) {
+		this.launchSplit(job).catch((error) => {
+			console.error(`[dsh-task-board] split launch settlement failed: ${error instanceof Error ? error.message : String(error)}`);
+		});
+	}
+	/**
+	* 启动拆分会话（B8）：合成拆分驱动任务（标题「需求拆分：<标题>」、Prompt =
+	* 拆分指令模板）复用 runner.launch（fail-closed 校验 + 创建会话 + 发送 Prompt）；
+	* 会话 id 回填作业（供轮询结算）。启动失败 → 记 scheduler.error 并移除作业。
+	*/
+	async launchSplit(job) {
+		const runner = this.runner;
+		if (runner === void 0) return;
+		const now = this.now();
+		const driver = {
+			id: `split-${job.id}`,
+			title: splitSessionTitle(job.input.title),
+			description: "",
+			prompt: composeSplitInstruction(job.input),
+			status: "todo",
+			createdAt: now,
+			updatedAt: now,
+			executions: [],
+			tags: [],
+			comments: [],
+			artifacts: [],
+			order: 0
+		};
+		try {
+			const sessionId = await runner.launch(driver);
+			const current = this.splitJobs.get(job.id);
+			if (current === void 0) return;
+			this.splitJobs.set(job.id, {
+				...current,
+				sessionId
+			});
+		} catch (error) {
+			this.failSplit(job, `split launch failed: ${error instanceof Error ? error.message : String(error)}`);
+		}
+	}
+	/** 拆分作业失败：移除作业 + scheduler.error（UI 可见）。 */
+	failSplit(job, message) {
+		this.splitJobs.delete(job.id);
+		this.ledger.setScheduler({ error: `[split:${job.id}] ${message}` });
+		console.error(`[dsh-task-board] ${message}`);
+	}
+	/**
+	* 单轮拆分作业结算（B8，复用 pollSessions 已取的会话列表，1 + E）：
+	* - sessionId 未回填（launch 进行中）→ 跳过；
+	* - 会话不在列表（被删/从未创建成功）→ 失败；
+	* - 会话仍在运行 → 跳过（等待 agent 完成拆分）；
+	* - 会话已结束 → 读取 transcript、解析标记、原子落账（settleSplit）。
+	*/
+	async pollSplitJobs(items) {
+		if (this.splitJobs.size === 0) return;
+		const runner = this.runner;
+		if (runner === void 0) return;
+		for (const job of [...this.splitJobs.values()]) {
+			const sessionId = job.sessionId;
+			if (sessionId === void 0) continue;
+			const summary = items.find((item) => item.sessionId === sessionId);
+			if (summary === void 0) {
+				this.failSplit(job, `split session ${sessionId} no longer exists`);
+				continue;
+			}
+			if (summary.running) continue;
+			try {
+				const text = await runner.readTranscriptText(sessionId);
+				if (text === void 0) {
+					this.failSplit(job, "split session transcript is unavailable");
+					continue;
+				}
+				this.settleSplit(job, text);
+			} catch (error) {
+				this.failSplit(job, `split settlement failed: ${error instanceof Error ? error.message : String(error)}`);
+			}
+		}
+	}
+	/**
+	* 拆分结算（§12.9/§14.5）：解析 transcript 的结构化标记（`⟦task-board:split⟧`
+	* 逐条 + `⟦task-board:coverage⟧` 覆盖矩阵）→ 创建父需求任务 + `propose-batch`
+	* 原子落账（同一 mutate 闭包，任一失败整体回滚、revision 不变——§16.8）。
+	* 产物全部 proposed（source=requirement，人工确认闸门复用 T011）；children
+	* parentId 指向父需求任务；父任务递归拆分时挂到原任务下（§12.9）；候选
+	* metadata 携带拆分会话引用（可跳回追溯，§15）。解析不到任何条目 → 失败。
+	*/
+	settleSplit(job, transcript) {
+		const parsed = parseSplitMarkers(transcript);
+		if (parsed.items.length === 0) {
+			this.failSplit(job, "split result contains no valid task markers");
+			return;
+		}
+		const input = job.input;
+		const text = typeof input.text === "string" ? input.text.trim() : "";
+		const filePath = typeof input.filePath === "string" ? input.filePath.trim() : "";
+		const items = parsed.items.map((item) => ({
+			title: item.title,
+			description: item.description,
+			prompt: item.prompt,
+			...input.project === void 0 ? {} : { project: input.project },
+			...input.tags !== void 0 && input.tags.length > 0 ? { tags: input.tags } : {},
+			parentId: job.parentId,
+			...job.sessionId === void 0 ? {} : { sourceConversationId: job.sessionId }
+		}));
+		const now = this.now();
+		this.ledger.mutate((doc) => {
+			if (!applyCreateRequirementParent(doc, {
+				title: input.title,
+				requirementText: text !== "" ? text : `工作区文件：${filePath}`,
+				...parsed.coverage === void 0 ? {} : { coverage: parsed.coverage },
+				...input.project === void 0 ? {} : { project: input.project },
+				...input.tags !== void 0 && input.tags.length > 0 ? { tags: input.tags } : {},
+				...normalizeOptionalString(input.parentTaskId) === void 0 ? {} : { parentId: normalizeOptionalString(input.parentTaskId) },
+				...job.sessionId === void 0 ? {} : { sourceConversationId: job.sessionId }
+			}, job.parentId, now)) throw new Error("requirement parent task was not created");
+			return applyProposeBatch(doc, items, now);
+		});
+		this.splitJobs.delete(job.id);
+		console.log(`[dsh-task-board] split ${job.id} settled: ${parsed.items.length} candidate(s) + parent task (session ${job.sessionId ?? "unknown"})`);
+	}
+	emit() {
+		for (const listener of [...this.listeners]) listener();
+	}
+};
+/** 执行安排是否处于武装状态（§12.5 启用计划数）：cron enabled 或 one-shot 未触发。 */
+function isArmedSchedule(task) {
+	const schedule = task.schedule;
+	if (schedule === void 0) return false;
+	if (schedule.kind === "cron") return schedule.enabled;
+	return schedule.firedAt === void 0;
+}
+//#endregion
+//#region src/mount-once.ts
+const MOUNTED = Symbol.for("dsh-nova-ui.mounted-plugins");
+function mountedSet() {
+	const registry = globalThis;
+	return registry[MOUNTED] ??= /* @__PURE__ */ new Set();
+}
+/**
+* Wrap a cordis plugin apply so the package runs at most once per process.
+* The first mount registers normally and unmarks when its fiber disposes;
+* any later mount of the same package name is a no-op.
+* @param packageName - npm package identity shared by every install source.
+* @param fn - the original plugin apply.
+* @returns an apply of the same shape.
+*/
+function mountOnce(packageName, fn) {
+	return ((...args) => {
+		const mounted = mountedSet();
+		if (mounted.has(packageName)) return;
+		mounted.add(packageName);
+		args[0]?.effect?.(() => () => {
+			mounted.delete(packageName);
+		});
+		return fn(...args);
+	});
+}
+//#endregion
+//#region src/index.ts
+/** Order of the announcement section within the tool-guidance band. */
+const SECTION_ORDER = 200;
+/** Default environment variable holding the authenticated proxy token. */
+const DEFAULT_PROXY_TOKEN_ENV = "DSH_TASK_BOARD_PROXY_TOKEN";
+/** Default environment variable holding the GitHub Webhook HMAC secret. */
+const DEFAULT_GITHUB_WEBHOOK_SECRET_ENV = "DSH_TASK_BOARD_GITHUB_WEBHOOK_SECRET";
+/** Default environment variable holding the GitHub API token (issue polling). */
+const DEFAULT_GITHUB_TOKEN_ENV = "DSH_TASK_BOARD_GITHUB_TOKEN";
+/** Required services (the announcement section needs the system-prompt seam; the control plane registers on the webServer; execution uses the apiProxy + agent/command registries). */
+const inject = [
+	"systemPrompt",
+	"webServer",
+	"apiProxy",
+	"agents",
+	"commands"
+];
+/**
+* Settings namespace of the board — the section the web settings surface
+* edits. Spelled here rather than imported: the browser half spells the same
+* value and must not depend on a Host package.
+*/
+const NOVA_TASK_BOARD_SETTINGS_NAMESPACE = settingsNamespace("nova-task-board");
+/** Model-facing announcement: plugin presence, capabilities, and limits. */
+const TASK_BOARD_GUIDANCE = "本机已安装 dsh-nova-ui-task-board 插件（DSH Web GUI 的任务看板，Nova 系列）：侧边栏「任务看板」入口。能力：多列看板管理任务；Host 权威账本；关闭浏览器后仍由 Host 执行和结算；任务可钉住工作区、agent 预设和权限；支持 Host 本地时区的 5 段 cron，错过的触发点不补跑；可选且默认关闭的空闲系统睡眠保护。对话候选任务流转（P3.1）：用户要求「做某事」「记下来」「后续要处理」等明确任务意图时，在回复末尾输出一行结构化候选标记 `⟦task-board:propose⟧ 标题 | 描述 | prompt`（描述可为空，prompt 为执行时发送给 agent 的完整指令、可省略），前端解析后进入看板「待确认」列，经用户确认后方可执行。用户提到「任务看板 / 看板 / 定时任务 / 候选任务」时即指本插件，请据此协作。";
+const Config = z.object({
+	announceToAgent: z.boolean().default(false),
+	enabled: z.boolean().default(true),
+	preventIdleSleep: z.boolean().default(false),
+	trustedProxyHosts: z.array(z.string()).default([]),
+	proxyTokenEnv: z.string().min(1).default(DEFAULT_PROXY_TOKEN_ENV),
+	githubWebhookSecretEnv: z.string().min(1).default(DEFAULT_GITHUB_WEBHOOK_SECRET_ENV),
+	githubTokenEnv: z.string().min(1).default(DEFAULT_GITHUB_TOKEN_ENV)
+});
+/** Resolve proxy access without ever placing the token value in plugin config. */
+function resolveProxyAccess(config, env = process.env) {
+	const trustedProxyHosts = config?.trustedProxyHosts ?? [];
+	if (trustedProxyHosts.length === 0) return { trustedProxyHosts };
+	const proxyTokenEnv = config?.proxyTokenEnv ?? "DSH_TASK_BOARD_PROXY_TOKEN";
+	if (proxyTokenEnv.trim() === "") throw new Error("nova-task-board: proxyTokenEnv must not be empty");
+	const proxyToken = env[proxyTokenEnv];
+	if (proxyToken === void 0 || proxyToken === "") throw new Error(`nova-task-board: trustedProxyHosts requires a non-empty ${proxyTokenEnv} environment variable`);
+	return {
+		trustedProxyHosts,
+		proxyToken
+	};
+}
+/**
+* Resolve T010 automation secrets from environment variables (never placed in
+* plugin config or the ledger). Empty/absent env values resolve to undefined:
+* - webhookSecret 缺省 → GitHub Webhook 端点 503（未配置）；
+* - githubToken 缺省 → Issue 轮询走匿名（GitHub 限速）。
+*/
+function resolveAutomationSecrets(config, env = process.env) {
+	const webhookEnv = config?.githubWebhookSecretEnv ?? "DSH_TASK_BOARD_GITHUB_WEBHOOK_SECRET";
+	const tokenEnv = config?.githubTokenEnv ?? "DSH_TASK_BOARD_GITHUB_TOKEN";
+	const webhookSecret = webhookEnv.trim() === "" ? void 0 : env[webhookEnv];
+	const githubToken = tokenEnv.trim() === "" ? void 0 : env[tokenEnv];
+	return {
+		...webhookSecret !== void 0 && webhookSecret !== "" ? { webhookSecret } : {},
+		...githubToken !== void 0 && githubToken !== "" ? { githubToken } : {}
+	};
+}
+/** Schema default, re-read for hand-built test contexts (the loader applies them normally). */
+const DEFAULT_ANNOUNCE = false;
+/**
+* Register the board's announcement section, gated on the composition entry's
+* `announceToAgent` (and the live settings value once the web settings
+* surface is served). The section is re-registered whenever the source
+* changes, so a settings edit takes effect without a restart.
+* @param ctx - the plugin context (systemPrompt injected).
+* @param config - resolved plugin config (schema defaults applied by the loader).
+*/
+const apply = mountOnce("dsh-nova-ui-task-board", applyImpl);
+function applyImpl(ctx, config) {
+	const automationSecrets = resolveAutomationSecrets(config);
+	const host = new TaskBoardHostService({
+		runner: new HostExecutionRunner(ctx.apiProxy, { execute: async (sessionId, line, signal) => {
+			const agent = ctx.agents.get(sessionId);
+			if (agent === void 0) throw new Error(`execution session ${sessionId} is not available`);
+			return (await ctx.commands.execute(agent, line, [], signal))?.result;
+		} }),
+		automation: { ...automationSecrets.githubToken === void 0 ? {} : { githubToken: automationSecrets.githubToken } }
+	});
+	host.setConfiguration(config?.enabled ?? true, config?.preventIdleSleep ?? false);
+	host.start();
+	ctx.effect(() => {
+		const disposers = [];
+		try {
+			for (const route of makeTaskBoardRoutes(host, {
+				...resolveProxyAccess(config),
+				...automationSecrets.webhookSecret === void 0 ? {} : { webhookSecret: automationSecrets.webhookSecret }
+			})) disposers.push(ctx.webServer.register(route));
+		} catch (error) {
+			for (const dispose of disposers) dispose();
+			host.dispose();
+			throw error;
+		}
+		return () => {
+			for (const dispose of disposers) dispose();
+			host.dispose();
+		};
+	}, "nova-task-board: host ledger, state machine, execution runner, automation, and routes");
+	let current = () => config ?? {};
+	let disposeSection;
+	const sync = () => {
+		if (disposeSection !== void 0) {
+			disposeSection();
+			disposeSection = void 0;
+		}
+		const active = current().enabled ?? true;
+		host.setConfiguration(active, current().preventIdleSleep ?? false);
+		if (!active) return;
+		if ((current().announceToAgent ?? DEFAULT_ANNOUNCE) === false) return;
+		disposeSection = ctx.systemPrompt.section({
+			name: "plugin:nova-task-board",
+			order: SECTION_ORDER,
+			text: TASK_BOARD_GUIDANCE
+		});
+	};
+	installSettingsSection(ctx, NOVA_TASK_BOARD_SETTINGS_NAMESPACE, Config, config ?? {}, {
+		setSource: (source) => {
+			current = source;
+		},
+		onChange: sync
+	});
+	sync();
+}
+//#endregion
+export { Config, DEFAULT_GITHUB_TOKEN_ENV, DEFAULT_GITHUB_WEBHOOK_SECRET_ENV, DEFAULT_PROXY_TOKEN_ENV, NOVA_TASK_BOARD_SETTINGS_NAMESPACE, TASK_BOARD_GUIDANCE, apply, inject, resolveAutomationSecrets, resolveProxyAccess };