@yeaft/webchat-agent 1.0.649 → 1.0.651

package/connection/index.js

@@ -4,8 +4,10 @@ import { sendToServer, parseMessage } from './buffer.js';
 import { startAgentHeartbeat, stopAgentHeartbeat, scheduleReconnect } from './heartbeat.js';
 import { handleMessage } from './message-router.js';
 import { cleanupTerminalsForDisconnect } from '../terminal.js';
+import { invalidateYeaftProjectContexts } from '../yeaft/web-bridge.js';
 
 export function resetConnectionTransport() {
+  invalidateYeaftProjectContexts();
   ctx.sessionKey = null;
   ctx.serverEncryptionRequired = true;
   ctx.serverCapabilities = new Set();
@@ -106,6 +108,7 @@ export function connect(WebSocketImpl = WebSocket) {
   socket.on('close', (code, reason) => {
     if (socket !== ctx.ws) return;
     console.log(`Disconnected from server: ${code} ${reason}`);
+    invalidateYeaftProjectContexts();
     ctx.sessionKey = null;
     ctx.pendingAuthTempId = null;
     stopAgentHeartbeat();

package/connection/message-router.js

@@ -30,7 +30,7 @@ import { getLlmConfig, updateLlmConfig, getYeaftSettings, updateYeaftSettings, g
 import { loadConfig } from '../yeaft/config.js';
 import { discoverLlmModels } from '../llm-model-discovery.js';
 import { fetchModelsDev } from '../yeaft/llm/models-dev.js';
-import { handleYeaftSessionSend, handleYeaftAskUserAnswer, handleYeaftSubAgentPrompt, handleYeaftTaskCancel, handleYeaftModeSwitch, handleYeaftModelSwitch, resetYeaftSession, refreshLiveSessionConfig, handleYeaftLoadHistory, handleYeaftLoadHistoryOutline, handleYeaftSearchHistory, handleYeaftLoadHistoryWindow, handleYeaftLoadMoreHistory, handleYeaftAbortThread, handleYeaftAbortAll, handleYeaftAbortTurn, handleYeaftVpSubscribe, handleYeaftVpCreate, handleYeaftVpUpdate, handleYeaftVpDelete, handleYeaftVpRead, handleYeaftListSessions, handleYeaftProjectContextSync, handleYeaftProjectMutation, handleYeaftCreateSession, handleYeaftCopySession, handleYeaftMergeSessions, handleYeaftRenameSession, handleYeaftUpdateSession, handleYeaftUpdateSessionConfig, handleYeaftArchiveSession, handleYeaftDeleteSession, handleYeaftSessionAddMember, handleYeaftSessionRemoveMember, handleYeaftSessionSetDefaultVp, handleYeaftScanWorkdirSessions, handleYeaftRestoreSession, handleYeaftDreamTrigger, handleYeaftFetchToolStats, handleYeaftFetchDebugHistory, handleYeaftMcpList, handleYeaftMcpAdd, handleYeaftMcpRemove, handleYeaftMcpReload, handleYeaftPluginCatalog, handleYeaftManagedSkill, ensureSessionLoaded, broadcastLanguageChange, broadcastYeaftSessionSnapshotEager, broadcastYeaftVpSnapshotEager, preloadYeaftSkillSlashCommands } from '../yeaft/web-bridge.js';
+import { invalidateYeaftProjectContexts, startYeaftScheduledTasks, handleYeaftScheduledTask, handleYeaftSessionSend, handleYeaftAskUserAnswer, handleYeaftSubAgentPrompt, handleYeaftTaskCancel, handleYeaftModeSwitch, handleYeaftModelSwitch, resetYeaftSession, refreshLiveSessionConfig, handleYeaftLoadHistory, handleYeaftLoadHistoryOutline, handleYeaftSearchHistory, handleYeaftLoadHistoryWindow, handleYeaftLoadMoreHistory, handleYeaftAbortThread, handleYeaftAbortAll, handleYeaftAbortTurn, handleYeaftVpSubscribe, handleYeaftVpCreate, handleYeaftVpUpdate, handleYeaftVpDelete, handleYeaftVpRead, handleYeaftListSessions, handleYeaftProjectContextSync, handleYeaftProjectMutation, handleYeaftCreateSession, handleYeaftCopySession, handleYeaftMergeSessions, handleYeaftRenameSession, handleYeaftUpdateSession, handleYeaftUpdateSessionConfig, handleYeaftArchiveSession, handleYeaftDeleteSession, handleYeaftSessionAddMember, handleYeaftSessionRemoveMember, handleYeaftSessionSetDefaultVp, handleYeaftScanWorkdirSessions, handleYeaftRestoreSession, handleYeaftDreamTrigger, handleYeaftFetchToolStats, handleYeaftFetchDebugHistory, handleYeaftMcpList, handleYeaftMcpAdd, handleYeaftMcpRemove, handleYeaftMcpReload, handleYeaftPluginCatalog, handleYeaftManagedSkill, ensureSessionLoaded, broadcastLanguageChange, broadcastYeaftSessionSnapshotEager, broadcastYeaftVpSnapshotEager, preloadYeaftSkillSlashCommands } from '../yeaft/web-bridge.js';
 import { startYeaftStatusRefresh, forceRefreshYeaftStatus } from '../yeaft/status-cache.js';
 import { handleWorkCenterRequest } from '../yeaft/work-center/bridge.js';
 import { handlePersonRequest } from '../yeaft/person/bridge.js';
@@ -175,6 +175,7 @@ export async function handleMessage(msg) {
   if (await handleBrowserRuntimeMessage(msg)) return;
   switch (msg.type) {
     case 'registered':
+      invalidateYeaftProjectContexts();
       applyRegisteredTransport(msg);
 
       // 只保存基本配置。instanceId 是本地服务实例身份；agentName 只用于展示。
@@ -210,6 +211,7 @@ export async function handleMessage(msg) {
       // The callee already wraps its FS scan + emit in try/catch and
       // logs via console.warn — no second guard needed here.
       broadcastYeaftSessionSnapshotEager();
+      startYeaftScheduledTasks();
       // Stock VPs are bundled Agent data. Seed + publish them during register so
       // a first-install user can open the create dialog immediately instead of
       // depending on a later Session runtime or modal subscription race.
@@ -847,6 +849,9 @@ export async function handleMessage(msg) {
       handleYeaftRestoreSession(msg);
       break;
     // Phase 2: session_send is just group_chat (N≥1 fan-out already works).
+    case 'yeaft_scheduled_task':
+      handleYeaftScheduledTask(msg);
+      break;
     case 'yeaft_session_send':
       handleYeaftSessionSend(msg);
       break;

package/index.js

@@ -178,7 +178,7 @@ async function detectCapabilities() {
   // agent build can speak plaintext WS frames. New servers see this and
   // flip `agent.encryptOutbound = false`, stopping outbound encryption
   // to this peer. Old servers ignore the unknown capability token.
-  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'workbench_session_routes', 'workbench_request_correlation', 'workbench_terminal_cleanup_fence', 'workbench_file_content_chunks', 'workbench_video_stream', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch', 'session_fork_from_turn', 'session_fork_while_running', 'session_merge', 'file_reference_resolution', 'response_image_preview', 'yeaft_plugins', 'yeaft_managed_skills', 'settings_request_correlation', 'work_center_feature_settings'];
+  const capabilities = ['scheduled_tasks', 'scheduled_task_month_days', 'background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'workbench_session_routes', 'workbench_request_correlation', 'workbench_terminal_cleanup_fence', 'workbench_file_content_chunks', 'workbench_video_stream', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch', 'session_fork_from_turn', 'session_fork_while_running', 'session_merge', 'file_reference_resolution', 'response_image_preview', 'yeaft_plugins', 'yeaft_managed_skills', 'settings_request_correlation', 'work_center_feature_settings'];
   capabilities.push('digital_person', getAgentUpgradeCapability());
   if (ctx.CONFIG?.workCenterEnabled === true) {
     capabilities.push('work_center', 'work_center_message_v2', 'work_center_workbench');

package/local-runtime/server/db/connection.js

@@ -404,6 +404,7 @@ const yeaftSessionsTable = `
     default_vp_id TEXT,
     work_dir TEXT,
     config_json TEXT,
+    task_json TEXT,
     announcement TEXT,
     created_at INTEGER,
     updated_at INTEGER NOT NULL,
@@ -519,6 +520,7 @@ const yeaftMigrations = [
   `ALTER TABLE yeaft_sessions ADD COLUMN is_pinned INTEGER DEFAULT 0`,
   `ALTER TABLE yeaft_sessions ADD COLUMN sort_order INTEGER`,
   `ALTER TABLE yeaft_sessions ADD COLUMN metadata_updated_at INTEGER`,
+  `ALTER TABLE yeaft_sessions ADD COLUMN task_json TEXT`,
 ];
 for (const migration of yeaftMigrations) {
   try { db.exec(migration); } catch (_) { /* column exists */ }
@@ -1408,8 +1410,8 @@ export const stmts = {
   upsertYeaftSession: db.prepare(`
     INSERT INTO yeaft_sessions
       (id, user_id, agent_id, name, roster_json, default_vp_id, work_dir,
-       config_json, announcement, created_at, updated_at, is_archived)
-    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       config_json, announcement, created_at, updated_at, is_archived, task_json)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     ON CONFLICT(user_id, agent_id, id) DO UPDATE SET
       user_id = COALESCE(excluded.user_id, user_id),
       name = excluded.name,
@@ -1417,6 +1419,7 @@ export const stmts = {
       default_vp_id = excluded.default_vp_id,
       work_dir = excluded.work_dir,
       config_json = excluded.config_json,
+      task_json = excluded.task_json,
       announcement = excluded.announcement,
       created_at = COALESCE(yeaft_sessions.created_at, excluded.created_at),
       updated_at = excluded.updated_at,

package/local-runtime/server/db/yeaft-project-db.js

@@ -267,6 +267,8 @@ export const yeaftProjectDb = {
         for (const rawSessionId of Array.isArray(row.sessionIds) ? row.sessionIds : []) {
           const sessionId = typeof rawSessionId === 'string' ? rawSessionId.trim() : '';
           if (!sessionId || !sessionExists(sessionId)) continue;
+          // Legacy discovery is not authority over an existing Server membership.
+          if (stmts.getYeaftProjectForSession.get(ownerId, targetAgentId, sessionId)) continue;
           stmts.deleteYeaftProjectSessionMembership.run(ownerId, targetAgentId, sessionId);
           stmts.insertYeaftProjectSessionMembership.run(
             ownerId,

package/local-runtime/server/db/yeaft-session-db.js

@@ -39,7 +39,9 @@ function sessionOrderKey(agentId, sessionId) {
 
 function mapRow(row) {
   if (!row) return row;
+  const task = safeJsonParse(row.task_json, null);
   return {
+    ...(task && typeof task === 'object' && !Array.isArray(task) ? { task } : {}),
     id: row.id,
     userId: row.user_id || null,
     agentId: row.agent_id,
@@ -72,7 +74,7 @@ export const yeaftSessionDb = {
    * @param {string} userId
    * @param {string} agentId
    * @param {object} session  Shape from `web-bridge.snapshotSessions()`:
-   *   { id, name, roster[], defaultVpId, workDir, config, announcement, createdAt }
+   *   { id, name, roster[], defaultVpId, workDir, config, announcement, createdAt, task? }
    */
   upsertFromSnapshot(userId, agentId, session) {
     if (!session || !session.id || !agentId) return;
@@ -90,6 +92,7 @@ export const yeaftSessionDb = {
       session.createdAt || now,
       now,
       0,
+      safeJsonStringify(session.task && typeof session.task === 'object' && !Array.isArray(session.task) ? session.task : null),
     );
     if (session.metadataUpdatedAt) {
       stmts.touchYeaftSessionMetadata.run(

package/local-runtime/server/handlers/agent-output.js

@@ -6,6 +6,7 @@ import { advanceYeaftDebugRequestChunk, consumeYeaftDebugRequest, webClients, pr
 import { CONFIG } from '../config.js';
 import { yeaftAssetStore } from '../yeaft-asset-store.js';
 import { recordPerfTraceEvent } from '../perf-trace.js';
+import { syncProjectContextsToAgents } from './client-conversation.js';
 
 
 /** Keep Skill detail read-only and browser-safe, including replies from newer Agents. */
@@ -69,7 +70,7 @@ function reconcileAuthoritativeSessionSnapshot(ownerId, agentId, sessions) {
   return rows;
 }
 
-function syncYeaftSessionMetadata(agentId, agent, event) {
+async function syncYeaftSessionMetadata(agentId, agent, event) {
   if (!event || typeof event !== 'object') return event;
   const ownerId = agent?.ownerId || null;
 
@@ -80,6 +81,8 @@ function syncYeaftSessionMetadata(agentId, agent, event) {
       .map(session => [session.id, { ...session }]));
     try {
       if (ownerId) {
+        // Catalog discovery can precede the one-time legacy Project import.
+        // Existing memberships are protected by importLegacyProjects itself.
         reconcileAuthoritativeSessionSnapshot(ownerId, agentId, rows);
         yeaftProjectDb.importLegacyProjects(
           ownerId,
@@ -87,6 +90,7 @@ function syncYeaftSessionMetadata(agentId, agent, event) {
           event.projects,
           sessionId => rows.some(row => row?.id === sessionId),
         );
+        await syncProjectContextsToAgents(ownerId, agentId);
       }
     } catch (e) {
       console.warn(`[Server] yeaft session persist failed for agent ${agentId}:`, e?.message || e);
@@ -99,12 +103,30 @@ function syncYeaftSessionMetadata(agentId, agent, event) {
   const sessionId = event.sessionId;
   if (event.ok && op === 'list' && Array.isArray(event.sessions)) {
     try {
-      if (ownerId) reconcileAuthoritativeSessionSnapshot(ownerId, agentId, event.sessions);
+      if (ownerId) {
+        reconcileAuthoritativeSessionSnapshot(ownerId, agentId, event.sessions);
+        await syncProjectContextsToAgents(ownerId, agentId);
+      }
     } catch (e) {
       console.warn(`[Server] yeaft session list persist failed for agent ${agentId}:`, e?.message || e);
     }
     return { ...event, sessions: decorateYeaftSessionsWithPinned(agentId, event.sessions) };
   }
+  // Task state is Agent-authored. Persist successful CRUD rows as well as full
+  // snapshots so reloads after an acknowledgement cannot show stale run state.
+  if (event.ok && ownerId && event.session?.id
+      && (['update_task', 'run_task'].includes(op)
+        || (event.session.task && op !== 'copy' && op !== 'merge'))) {
+    try {
+      const existing = yeaftSessionDb.getForAgent(ownerId, agentId, event.session.id);
+      yeaftSessionDb.upsertFromSnapshot(ownerId, agentId, { ...existing, ...event.session });
+      agent.yeaftSessions ??= new Map();
+      agent.yeaftSessions.set(event.session.id, { ...existing, ...event.session });
+      if (op === 'create') await syncProjectContextsToAgents(ownerId, agentId);
+    } catch (e) {
+      console.warn(`[Server] task Session persist failed for agent ${agentId}:`, e?.message || e);
+    }
+  }
   // A fork/merge is a new Session on the same Agent, not a new Project. Resolve
   // membership here (never from browser/Agent project metadata) before the
   // successful acknowledgement can focus the new Session in the browser.
@@ -628,7 +650,7 @@ export async function handleAgentOutput(agentId, agent, msg) {
     case 'session_output': {
       if (isRetiredDreamEvent(msg.event)) break;
       const data = hydrateInlinePreviewData(msg.data);
-      let event = syncYeaftSessionMetadata(agentId, agent, msg.event);
+      let event = await syncYeaftSessionMetadata(agentId, agent, msg.event);
       if ((event?.type === 'session_list_updated' || event?.type === 'session_crud_result') && agent.ownerId) {
         event = {
           ...event,
@@ -636,7 +658,12 @@ export async function handleAgentOutput(agentId, agent, msg) {
           projectsAuthoritative: true,
         };
       }
-      let catalogChanged = false;
+      // Task notifications are live owner events, never request-client events.
+      // Do not widen this boundary in skip-auth mode when an owner is known.
+      const taskNotification = event?.type === 'scheduled_task_notification';
+      const taskResult = event?.type === 'session_crud_result'
+        && (['update_task', 'run_task'].includes(event.op) || event.session?.task);
+      let catalogChanged = !!(taskResult && event.ok && event.session?.id);
       if (event?.type === 'yeaft_status') {
         agent.yeaftStatus = event;
         await broadcastAgentList();
@@ -655,6 +682,7 @@ export async function handleAgentOutput(agentId, agent, msg) {
               defaultVpId: event.defaultVpId != null ? event.defaultVpId : (existing.defaultVpId || null),
               workDir: existing.workDir || '',
               config: existing.config || {},
+              ...(existing.task ? { task: existing.task } : {}),
               announcement: typeof event.announcement === 'string'
                 ? event.announcement
                 : (existing.announcement || ''),
@@ -685,7 +713,8 @@ export async function handleAgentOutput(agentId, agent, msg) {
       }
       // History request completions are client-scoped; live Session output stays
       // broadcast to every authenticated tab owned by this user.
-      const hasRequestedClient = typeof msg._requestClientId === 'string' && !!msg._requestClientId;
+      const hasRequestedClient = !taskNotification
+        && typeof msg._requestClientId === 'string' && !!msg._requestClientId;
       const requestedClient = hasRequestedClient ? webClients.get(msg._requestClientId) : null;
       const outputClients = hasRequestedClient
         ? (requestedClient ? [[msg._requestClientId, requestedClient]] : [])
@@ -715,7 +744,10 @@ export async function handleAgentOutput(agentId, agent, msg) {
       // are non-empty in practice, but we don't want the relay silently
       // eating a legitimate "" or 0 if one ever shows up.
       for (const [cId, c] of outputClients) {
-        if (c.authenticated && (CONFIG.skipAuth || c.userId === agent.ownerId)) {
+        const ownerMatches = taskNotification || taskResult
+          ? !!agent.ownerId && c.userId === agent.ownerId
+          : CONFIG.skipAuth || c.userId === agent.ownerId;
+        if (c.authenticated && ownerMatches) {
           await sendToWebClient(c, {
             type: 'yeaft_output',
             conversationId: msg.conversationId,
@@ -977,7 +1009,7 @@ export async function handleAgentOutput(agentId, agent, msg) {
       // Use one batch read (`getByAgent`) and a Set lookup instead of an
       // N+1 `get(id)` per row — relays this size hot path on every
       // snapshot per connected client.
-      const syncedEvent = syncYeaftSessionMetadata(agentId, agent, msg);
+      const syncedEvent = await syncYeaftSessionMetadata(agentId, agent, msg);
       const decoratedSessions = syncedEvent.sessions;
       await broadcastSessionCatalog(agent.ownerId);
       // Relay verbatim to web (agentId stamped so the web sessions store
@@ -1020,6 +1052,7 @@ export async function handleAgentOutput(agentId, agent, msg) {
                 : (existing?.defaultVpId || null),
               workDir: existing?.workDir || '',
               config: existing?.config || {},
+              ...(existing?.task ? { task: existing.task } : {}),
               announcement: typeof msg.announcement === 'string'
                 ? msg.announcement
                 : (existing?.announcement || ''),
@@ -1042,12 +1075,19 @@ export async function handleAgentOutput(agentId, agent, msg) {
     }
 
     case 'session_crud_result': {
+      // Task-capable Agents may use the top-level CRUD alias. Normalize it to
+      // the same requester-scoped envelope as nested task acknowledgements.
+      if (['update_task', 'run_task'].includes(msg.op) || msg.session?.task) {
+        const { type: _type, _requestClientId, ...event } = msg;
+        await handleAgentOutput(agentId, agent, { type: 'yeaft_output', _requestClientId, event });
+        break;
+      }
       // Surface op result to the web (the only client that cares about
       // requestId routing). Keep the server shadow table in sync for list
       // probes too: entering Yeaft asks each connected agent for its opened
       // sessions, and that response must carry persisted server-side pin
       // state before it hits the web store.
-      const syncedMsg = syncYeaftSessionMetadata(agentId, agent, msg);
+      const syncedMsg = await syncYeaftSessionMetadata(agentId, agent, msg);
       const outboundMsg = agent.ownerId
         ? { ...syncedMsg, projects: yeaftProjectDb.listForAgent(agent.ownerId, agentId), projectsAuthoritative: true }
         : { ...syncedMsg, projects: [], projectsAuthoritative: true };

package/local-runtime/server/handlers/client-conversation.js

@@ -22,6 +22,7 @@ import {
   verifyConversationOwnership, verifyAgentOwnership, resolveAgentAccessError
 } from '../ws-utils.js';
 import { routeSessionPin } from './session-pin-router.js';
+import { handleClientScheduledTasks } from './client-scheduled-tasks.js';
 import { recordPerfTraceEvent } from '../perf-trace.js';
 import {
   chatCatalogKey,
@@ -119,9 +120,10 @@ async function sendVpSnapshotError(client, msg, error) {
   });
 }
 
-export async function syncProjectContextsToAgents(userId) {
+export async function syncProjectContextsToAgents(userId, targetAgentId = null) {
   try {
-    const sessionsByAgent = groupOnlineYeaftSessions(yeaftSessionDb.getByUser(userId));
+    const sessionsByAgent = groupOnlineYeaftSessions(yeaftSessionDb.getByUser(userId)
+      .filter(row => !targetAgentId || row.agentId === targetAgentId));
     await Promise.all(Object.entries(sessionsByAgent).map(async ([agentId, sessions]) => {
       try {
         const contexts = sessions.map(session => ({
@@ -303,6 +305,7 @@ function skippedYeaftDreamResult(msg, reason) {
  *        update_conversation_settings, ask_user_answer, btw_question
  */
 export async function handleClientConversation(clientId, client, msg, checkAgentAccess) {
+  if (await handleClientScheduledTasks(clientId, client, msg)) return true;
   switch (msg.type) {
     case 'get_agents':
       // 前端可能附带 conversationIds（server 重启后恢复场景）
@@ -1736,6 +1739,15 @@ export async function handleClientConversation(clientId, client, msg, checkAgent
       if (typeof msg.type === 'string' && (msg.type.startsWith('yeaft_') || msg.type.startsWith('unify_'))) {
         const relayType = msg.type.startsWith('unify_') ? `yeaft_${msg.type.slice('unify_'.length)}` : msg.type;
         const relayAgentId = msg.agentId || client.currentAgent;
+        // Internal authority messages are generated from Server SQLite only.
+        // Generic relay must not turn a browser assertion into trusted context.
+        if (relayType === 'yeaft_project_context_sync') {
+          await sendToWebClient(client, {
+            type: 'error', code: 'server_only_message', message: 'Project context synchronization is Server-only.',
+            requestId: msg.requestId ?? null, agentId: relayAgentId || null,
+          });
+          return true;
+        }
         const isSessionSend = relayType === 'yeaft_session_send' || relayType === 'yeaft_session_chat';
         if (msg.perfTraceId) {
           recordPerfTraceEvent({

package/local-runtime/server/handlers/client-scheduled-tasks.js

@@ -0,0 +1,121 @@
+import { agents } from '../context.js';
+import { yeaftProjectDb, yeaftSessionDb } from '../database.js';
+import { forwardToAgent, resolveAgentAccessError, sendToWebClient } from '../ws-utils.js';
+
+const CREATE_TYPES = new Set(['yeaft_create_session', 'yeaft_create_group', 'unify_create_group', 'unify_create_session']);
+const TASK_TYPES = new Set(['yeaft_scheduled_task', 'unify_scheduled_task']);
+const CREATE_FIELDS = ['name', 'roster', 'defaultVpId', 'workDir', 'config'];
+
+function isRecord(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function validIdentity(value) {
+  return typeof value === 'string' && value.length > 0 && value.length <= 256
+    && value === value.trim() && !/[\u0000-\u001f\u007f]/.test(value);
+}
+
+/** Only user-authored configuration crosses this boundary. Runtime state is Agent-owned. */
+function projectTaskInput(source) {
+  if (!isRecord(source)) throw new Error('task must be an object');
+  if (Buffer.byteLength(JSON.stringify(source)) > 96 * 1024) throw new Error('Task input is too large');
+  const task = {};
+  if (Object.hasOwn(source, 'prompt')) {
+    if (typeof source.prompt !== 'string' || !source.prompt.trim() || source.prompt.length > 65536) {
+      throw new Error('Task prompt must be non-empty text of at most 65536 characters');
+    }
+    task.prompt = source.prompt;
+  }
+  for (const key of ['enabled', 'notify']) {
+    if (!Object.hasOwn(source, key)) continue;
+    if (typeof source[key] !== 'boolean') throw new Error(`${key} must be a boolean`);
+    task[key] = source[key];
+  }
+  if (Object.hasOwn(source, 'trigger')) {
+    const trigger = source.trigger;
+    if (!isRecord(trigger) || !['manual', 'schedule'].includes(trigger.type)) throw new Error('Invalid task trigger');
+    task.trigger = { type: trigger.type };
+    if (trigger.type === 'schedule') {
+      if (!Number.isSafeInteger(trigger.scheduledFor) || trigger.scheduledFor < 0) throw new Error('Invalid scheduledFor');
+      task.trigger.scheduledFor = trigger.scheduledFor;
+      if (Object.hasOwn(trigger, 'recurrence')) {
+        if (trigger.recurrence !== null && !isRecord(trigger.recurrence)) throw new Error('Invalid recurrence');
+        // Calendar-rule validation belongs to the Agent; never forward shared input objects.
+        const recurrence = JSON.stringify(trigger.recurrence);
+        if (recurrence.length > 4096) throw new Error('Recurrence is too large');
+        task.trigger.recurrence = JSON.parse(recurrence);
+      }
+    }
+  }
+  if (!Object.keys(task).length) throw new Error('No editable task fields supplied');
+  return task;
+}
+
+/** Task creation shares Session CRUD, but must never fall through to an older Agent. */
+export async function handleClientScheduledTasks(clientId, client, msg) {
+  const isCreate = CREATE_TYPES.has(msg.type) && isRecord(msg.payload) && Object.hasOwn(msg.payload, 'task');
+  if (!isCreate && !TASK_TYPES.has(msg.type)) return false;
+  const agentId = msg.agentId;
+  const sessionId = isCreate ? null : msg.sessionId;
+  const requestId = validIdentity(msg.requestId) ? msg.requestId : null;
+  const op = isCreate ? 'create' : (msg.op === 'update' ? 'update_task' : 'run_task');
+  const reject = async (code, message) => {
+    await sendToWebClient(client, {
+      type: 'yeaft_output', agentId: typeof agentId === 'string' ? agentId : null,
+      ...(sessionId != null ? { sessionId } : {}), requestId,
+      event: { type: 'session_crud_result', op, requestId, ok: false, error: { code, message } },
+    });
+    return true;
+  };
+  // No currentAgent fallback: a task action must name its full durable identity.
+  if (!validIdentity(agentId) || (!isCreate && !validIdentity(sessionId))) {
+    return reject('invalid_identity', 'An explicit Agent and Session identity is required');
+  }
+  if (!requestId || (!isCreate && !['update', 'run'].includes(msg.op))) {
+    return reject('invalid_request', 'A requestId and valid operation are required');
+  }
+  const accessError = resolveAgentAccessError(agentId, client.userId, client.role);
+  if (!client.authenticated || accessError) {
+    const denied = !client.authenticated || accessError === 'Agent access denied';
+    return reject(denied ? 'agent_access_denied' : 'agent_offline', denied ? 'Agent access denied' : 'Agent is offline');
+  }
+  const agent = agents.get(agentId);
+  if (!agent?.capabilities?.includes('scheduled_tasks')) {
+    return reject('scheduled_tasks_unsupported', 'This Agent does not support scheduled tasks; upgrade it first');
+  }
+  if (!isCreate && !yeaftSessionDb.getForAgent(client.userId, agentId, sessionId)) {
+    return reject('session_access_denied', 'Session not found or access denied');
+  }
+  const outbound = {
+    type: isCreate ? 'yeaft_create_session' : 'yeaft_scheduled_task',
+    requestId, _requestClientId: clientId,
+  };
+  try {
+    if (isCreate) {
+      outbound.payload = Object.fromEntries(CREATE_FIELDS.filter(key => Object.hasOwn(msg.payload, key)).map(key => [key, msg.payload[key]]));
+      outbound.payload.task = projectTaskInput(msg.payload.task);
+    } else {
+      outbound.op = msg.op;
+      outbound.sessionId = sessionId;
+      if (msg.op === 'update') {
+        if (typeof msg.expectedRevision !== 'string' || !msg.expectedRevision) {
+          return reject('task_conflict', 'A task revision is required; refresh before editing');
+        }
+        outbound.expectedRevision = msg.expectedRevision;
+        outbound.task = projectTaskInput(msg.task);
+      } else {
+        if (Object.hasOwn(msg, 'task')) throw new Error('run does not accept task configuration');
+        // Never relay a browser-supplied Project; this authority comes only from SQLite.
+        outbound.projectContext = yeaftProjectDb.contextForSession(client.userId, agentId, sessionId);
+      }
+    }
+  } catch (error) {
+    return reject('invalid_task', error.message);
+  }
+  // Override private routing instead of accepting any browser-provided identity.
+  // A socket may disappear between the access check and the write.
+  try {
+    if (await forwardToAgent(agentId, outbound)) return true;
+  } catch { /* Report a correlated failure instead of leaving the CRUD promise pending. */ }
+  return reject('agent_offline', 'Agent delivery could not be confirmed; refresh before retrying');
+}

package/local-runtime/server/session-catalog.js

@@ -88,6 +88,7 @@ export function projectSessionCatalog({
     rows.push({
       catalogKey,
       runtimeProvider: 'yeaft',
+      ...(session.task ? { task: session.task } : {}),
       routeRef: { runtimeProvider: 'yeaft', agentId: session.agentId, sessionId: session.id },
       title: session.name || session.id,
       workDir: session.workDir || '',

package/local-runtime/server/ws-client.js

@@ -144,6 +144,7 @@ export function handleWebConnection(ws, url, req = {}) {
       acceptPlaintext: true,
       yeaftSessionInventoryComplete: true,
       sessionCatalogProtocol: 1,
+      scheduledTaskProtocol: 1,
       workbenchRouteProtocol: WORKBENCH_ROUTE_PROTOCOL,
       workCenterWorkbenchProtocol: WORK_CENTER_WORKBENCH_PROTOCOL,
       browserRuntimeProtocol: BROWSER_RUNTIME_PROTOCOL,

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.649"}
+{"version":"1.0.651"}