dsh-deeppilot 0.9.13 → 0.9.14

package/lib/index.js

@@ -16,7 +16,7 @@ import { Context } from "@deepseek-ai/cordis";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { isIP } from "node:net";
 import { generate } from "selfsigned";
-//#region src/wire-errors.ts
+// src/wire-errors.ts
 /**
 * 错误词表（error vocabulary）的唯一属主。
 *
@@ -42,7 +42,8 @@ const ERROR_CODES = {
 	E_BUSY: "session is busy",
 	E_UNSUPPORTED: "protocol version or capability unsupported",
 	E_INTERNAL: "internal error",
-	E_STEER_UNAVAILABLE: "queued item can no longer steer the current turn"
+	E_STEER_UNAVAILABLE: "queued item can no longer steer the current turn",
+	E_TOO_LARGE: "response exceeds the client frame limit"
 };
 /** Bridge 未携带 code 的结果（内部守卫失败等）落到这一档。 */
 const WIRE_ERROR_FALLBACK = "E_INTERNAL";
@@ -90,6 +91,9 @@ const DOMAIN_TABLES = {
 		"schedule_not_found": "E_NOT_FOUND",
 		"delivery_cursor_not_found": "E_NOT_FOUND",
 		"schedule_conflict": "E_BUSY",
+		"schedule_execution_pending": "E_BUSY",
+		"schedule/target-archived": "E_NOT_FOUND",
+		"schedule/input-invalid": "E_PROTOCOL",
 		"invalid_prompt": "E_PROTOCOL",
 		"invalid_selector": "E_PROTOCOL",
 		"invalid_rule": "E_PROTOCOL",
@@ -209,9 +213,10 @@ function pendingResponseMessage(kind, reason) {
 		case "transport": return "host connection failed while answering " + kind;
 	}
 }
-//#endregion
-//#region src/connection-policy.ts
+// src/connection-policy.ts
 const AUTH_TIMEOUT_MS = 35e3;
+/** 附件 ack 在 `{mediaType,data}` 之外的信封字段（v/type/id/ts）余量。 */
+const ATTACHMENT_ENVELOPE_HEADROOM_BYTES = 1024;
 const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
 	"image/png",
 	"image/jpeg",
@@ -287,8 +292,20 @@ function sanitizeImageName(value) {
 function sanitizeDocumentField(value, maxChars) {
 	return value.replace(/[\u0000-\u001F\u007F]/g, " ").trim().slice(0, maxChars);
 }
-//#endregion
-//#region src/auth-rate-limit.ts
+/** 二进制模式下导出与附件的单块字节数。连接在发送缓冲降到 256 KiB 以下才发
+*  下一块，缓冲峰值约 512 KiB，远低于 4 MiB 的慢客户端断开线。 */
+const BINARY_CHUNK_BYTES = 262144;
+/** 把 envelope 头部与原始字节拼成一帧。 */
+function encodeBinaryFrame(header, body) {
+	const headerBytes = Buffer.from(JSON.stringify(header), "utf8");
+	const frame = Buffer.allocUnsafe(5 + headerBytes.length + body.length);
+	frame.writeUInt8(1, 0);
+	frame.writeUInt32BE(headerBytes.length, 1);
+	headerBytes.copy(frame, 5);
+	frame.set(body, 5 + headerBytes.length);
+	return frame;
+}
+// src/auth-rate-limit.ts
 const DEFAULT_AUTH_RATE_POLICY = {
 	windowMs: 6e4,
 	attemptsPerSource: 12,
@@ -405,8 +422,7 @@ var AuthRateLimiter = class {
 		}
 	}
 };
-//#endregion
-//#region src/diagnostics.ts
+// src/diagnostics.ts
 /**
 * 连接诊断事件模型（Diagnostics）——插件唯一的「失败可观测」面。
 *
@@ -732,8 +748,7 @@ function buildHealthPayload(input) {
 		}
 	};
 }
-//#endregion
-//#region src/device-auth.ts
+// src/device-auth.ts
 function getPairingCodeTtlMs() {
 	return Number(process.env.DEEPPILOT_PAIRING_TTL_MS) || 3e5;
 }
@@ -822,6 +837,30 @@ function normalizeDeviceScopes(value) {
 	const allowed = new Set(DEVICE_SCOPES);
 	return [...new Set(value.filter((scope) => typeof scope === "string" && allowed.has(scope)))];
 }
+/**
+* 0.8.3 之前的「全部权限」：当时还没有 `schedule.manage`。App 配对时一直申请
+* DeviceScope 的全部取值，设置页也没有收窄权限的入口，所以存量记录恰好等于这五项，
+* 只说明「配对时这项权限还不存在」，不是有意关闭。
+*/
+const LEGACY_FULL_SCOPES = [
+	"sessions.read",
+	"prompt.send",
+	"sessions.manage",
+	"interactions.respond",
+	"notifications.register"
+];
+/**
+* 存量设备权限升级：恰好等于旧版全部权限时补上之后新增的默认权限，返回新列表；
+* 其余情况（含任何非完整集合）返回 null，原样保留。只放宽「旧版全量」这一种形态，
+* 避免把将来可能出现的、有意收窄过的记录一并放开。
+*/
+function upgradeLegacyFullScopes(value) {
+	if (!Array.isArray(value)) return null;
+	const current = new Set(value);
+	if (current.size !== LEGACY_FULL_SCOPES.length) return null;
+	if (!LEGACY_FULL_SCOPES.every((scope) => current.has(scope))) return null;
+	return [...DEFAULT_DEVICE_SCOPES];
+}
 /** One active, single-use pairing grant per plugin runtime. */
 var PairingCodeManager = class {
 	active = null;
@@ -857,8 +896,7 @@ function createAuthChallenge(audience, now = Date.now()) {
 		expiresAt: now + AUTH_CHALLENGE_TTL_MS
 	};
 }
-//#endregion
-//#region src/wire-interaction.ts
+// src/wire-interaction.ts
 /**
 * 交互特性的 wire 行：回答待决的 approval 与 question。
 *
@@ -918,8 +956,7 @@ const interactionRows = [{
 		ctx.send("s2c.ack", {});
 	}
 }];
-//#endregion
-//#region src/wire-device.ts
+// src/wire-device.ts
 /**
 * 设备生命周期特性的 wire 行：自撤销（解绑）。
 *
@@ -957,8 +994,7 @@ const deviceRows = [{
 		ctx.close(4401, "device revoked");
 	}
 }];
-//#endregion
-//#region src/token.ts
+// src/token.ts
 /** Expand a leading ~ using the process home directory. */
 function expandHome(p) {
 	if (p === "~") return homedir();
@@ -1035,7 +1071,20 @@ var DeviceStore = class DeviceStore {
 		const store = new DeviceStore(filePath);
 		try {
 			const raw = JSON.parse(await readFile(expandHome(filePath), "utf8"));
-			for (const rec of raw.devices ?? []) if (typeof rec.deviceId === "string") store.devices.set(rec.deviceId, rec);
+			let upgraded = 0;
+			for (const rec of raw.devices ?? []) {
+				if (typeof rec.deviceId !== "string") continue;
+				const next = rec.revokedAt === void 0 ? upgradeLegacyFullScopes(rec.scopes) : null;
+				if (next !== null) {
+					rec.scopes = next;
+					upgraded += 1;
+				}
+				store.devices.set(rec.deviceId, rec);
+			}
+			if (upgraded > 0) {
+				console.log(formatLogLine("info", `device scopes upgraded for ${upgraded} legacy device(s): schedule.manage added`));
+				store.flush();
+			}
 		} catch (error) {
 			if (error?.code === "ENOENT") {} else console.log(formatLogLine("warn", "device registry unreadable, starting empty: " + String(error)));
 		}
@@ -1260,8 +1309,7 @@ var DeviceStore = class DeviceStore {
 		console.log(formatLogLine("warn", "device registry write failed" + (typeof code === "string" ? " code=" + code : "") + ": " + message.slice(0, 160)));
 	}
 };
-//#endregion
-//#region src/wire-push.ts
+// src/wire-push.ts
 /** Live Activity 需要的三个 scope：通知注册 + 会话读取 + 交互应答。 */
 const LIVE_ACTIVITY_SCOPES = [
 	"notifications.register",
@@ -1408,21 +1456,83 @@ const pushRows = [
 		}
 	}
 ];
-//#endregion
-//#region src/wire-schedule.ts
+// src/wire-schedule.ts
 /**
-* 定时任务特性的 wire 行：列表、历史、创建、修改、删除。
+* 定时任务特性的 wire 行：会话级（列表、历史、创建、修改、删除）与宿主级
+* （list/view/create/edit/run/limits）两套。
 *
 * scope 取 `schedule.manage` + `sessions.read`：PROTOCOL.md scope 映射表写明
 * 「`schedule.manage` 定时任务/提醒的列表、历史、创建、修改和删除；同时需要
 * `sessions.read` 才能读取任务内容」。迁移前这条组合一半住在 requiredScope、
 * 一半住在 connection.ts 调用点的一行补充规则里（334-336），现在是一行声明。
 *
-* 五个帧共享一个能力位 `schedules`；该位现在只要求 Schedule 服务存在
-* （见 host-capabilities.ts 的 G4 修正）。
+* 五个会话级帧共享能力位 `schedules`；该位现在只要求 Schedule 服务存在
+* （见 host-capabilities.ts 的 G4 修正）。六个宿主级帧共享 `schedulesHost`：
+* 该位由 adapter 判别位推导，false/缺失时新帧一律 E_UNSUPPORTED，客户端只能
+* 走会话级帧（PROTOCOL.md「Schedule 宿主级任务扩展」）。
 */
 /** PROTOCOL.md scope 映射表：schedule.manage 需搭配 sessions.read。 */
 const SCHEDULE_SCOPES = ["schedule.manage", "sessions.read"];
+/** 普通 JSON 对象（宿主级 timing/target/patch 都是嵌套对象）。 */
+function isObjectValue(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** `{time, time_zone}` 本地时间输入：取值合法性由 Host 完整校验。 */
+function isLocalTimeInput(value) {
+	return isObjectValue(value) && isText(value.time) && isText(value.time_zone);
+}
+function isWeekdayList(value) {
+	return Array.isArray(value) && value.length > 0 && value.every((day) => isInteger(day, 1, 7));
+}
+/**
+* 宿主级 timing 判别联合的形状检查。
+*
+* 只判结构与数量级（PROTOCOL.md 章节限额）；日期格式、时区与频率是否可达由
+* Host 的 Schedule 服务负责——重复一遍只会制造两套口径。
+*/
+function isHostTiming(value) {
+	if (!isObjectValue(value)) return false;
+	switch (value.kind) {
+		case "after": return isInteger(value.after_seconds, 1, Number.MAX_SAFE_INTEGER);
+		case "at": return isText(value.at) || isObjectValue(value.at) && isText(value.at.date) && isText(value.at.time) && isText(value.at.time_zone);
+		case "every": return isInteger(value.every_seconds, 60, Number.MAX_SAFE_INTEGER);
+		case "daily": return isLocalTimeInput(value.daily);
+		case "weekly": return isObjectValue(value.weekly) && isLocalTimeInput(value.weekly) && isWeekdayList(value.weekly.weekdays);
+		case "cron": return isObjectValue(value.cron) && isText(value.cron.expression) && isText(value.cron.time_zone);
+		case "rrule": return isText(value.rrule);
+		default: return false;
+	}
+}
+/** `{cwd?, agentPreset?}`：省略即 Host 默认。 */
+function isHostCreateSpec(value) {
+	return isObjectValue(value) && isOptionalField(value, "cwd", (v) => isText(v)) && isOptionalField(value, "agentPreset", (v) => isText(v));
+}
+/**
+* 创建/编辑请求里的 target。`session` 必须给 sessionId；`new_once`/`new` 的
+* 会话由 Host 预留或新建，`create` 省略即默认。客户端若把查看结果里的
+* `new_once.sessionId` 原样回传，也接受（未知/冗余字段不该让编辑失败）。
+*/
+function isHostTarget(value) {
+	if (!isObjectValue(value)) return false;
+	switch (value.kind) {
+		case "session": return isText(value.sessionId);
+		case "new_once": return isOptionalField(value, "sessionId", (v) => isText(v)) && isOptionalField(value, "create", isHostCreateSpec);
+		case "new": return isOptionalField(value, "create", isHostCreateSpec);
+		default: return false;
+	}
+}
+/** 编辑补丁：至少一个字段，且各字段形状合法。 */
+function isHostPatch(value) {
+	if (!isObjectValue(value)) return false;
+	if ([
+		"title",
+		"prompt",
+		"timing",
+		"target",
+		"active"
+	].filter((key) => value[key] !== void 0).length === 0) return false;
+	return isOptionalField(value, "title", (v) => isText(v, 120)) && isOptionalField(value, "prompt", (v) => isText(v, 262144)) && isOptionalField(value, "timing", isHostTiming) && isOptionalField(value, "target", isHostTarget) && isOptionalField(value, "active", (v) => typeof v === "boolean");
+}
 const scheduleRows = [
 	{
 		type: "c2s.schedule.list",
@@ -1454,14 +1564,16 @@ const scheduleRows = [
 		validate: (payload) => {
 			const checked = payloadObject(payload);
 			if (!checked.ok) return checked;
-			if (!isText(checked.value.sessionId) || !isText(checked.value.id) || !isInteger(checked.value.limit, 1, 100) || !isOptionalField(checked.value, "before", (v) => isText(v))) return reject$1("E_PROTOCOL", "invalid schedule history");
+			if (!isOptionalField(checked.value, "sessionId", (v) => isText(v)) || !isText(checked.value.id) || !isInteger(checked.value.limit, 1, 100) || !isOptionalField(checked.value, "before", (v) => isText(v))) return reject$1("E_PROTOCOL", "invalid schedule history");
 			return checked;
 		},
 		handle: async (ctx, payload) => {
-			const result = await ctx.bridge.scheduleHistory(payload.sessionId, payload.id, payload.limit, payload.before);
+			const sessionId = payload.sessionId;
+			if (sessionId === void 0 && ctx.bridge.capabilities.schedulesHost !== true) return ctx.fail("E_PROTOCOL", "invalid schedule history");
+			const result = await ctx.bridge.scheduleHistory(sessionId ?? "", payload.id, payload.limit, payload.before);
 			if (!result.ok) return ctx.fail(result.code, result.message);
 			ctx.send("s2c.schedule.history", {
-				sessionId: payload.sessionId,
+				...sessionId !== void 0 ? { sessionId } : {},
 				history: result.value
 			});
 		}
@@ -1553,10 +1665,159 @@ const scheduleRows = [
 				...result.replayed ? { replayed: true } : {}
 			});
 		}
+	},
+	{
+		type: "c2s.schedule.host.list",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.list",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!isOptionalField(p, "active", (v) => typeof v === "boolean") || !isOptionalField(p, "limit", (v) => isInteger(v, 1, 500)) || !isOptionalField(p, "offset", (v) => isInteger(v, 0, Number.MAX_SAFE_INTEGER))) return reject$1("E_PROTOCOL", "invalid schedule host list");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.listHostSchedules({
+				...payload.active !== void 0 ? { active: payload.active } : {},
+				...payload.limit !== void 0 ? { limit: payload.limit } : {},
+				...payload.offset !== void 0 ? { offset: payload.offset } : {}
+			});
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.snapshot", result.value);
+		}
+	},
+	{
+		type: "c2s.schedule.host.view",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.view",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!isText(checked.value.id)) return reject$1("E_PROTOCOL", "invalid schedule id");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.viewHostSchedule(payload.id);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.task", { task: result.value });
+		}
+	},
+	{
+		type: "c2s.schedule.host.create",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.create",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!validSendId(p.clientRequestId) || !isText(p.title, 120) || !isText(p.prompt, 262144) || !isHostTiming(p.timing) || !isOptionalField(p, "target", isHostTarget)) return reject$1("E_PROTOCOL", "invalid schedule host create fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.createHostSchedule(ctx.deviceId, payload);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				task: result.value,
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.edit",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.edit",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!validSendId(p.clientRequestId) || !isText(p.id) || !isOptionalField(p, "expectedUpdatedAt", (v) => v === null || isText(v))) return reject$1("E_PROTOCOL", "invalid schedule host edit fields");
+			if (p.action !== "update" && p.action !== "delete") return reject$1("E_PROTOCOL", "invalid schedule host edit action");
+			if (p.action === "update" && !isHostPatch(p.patch)) return reject$1("E_PROTOCOL", "invalid schedule host edit patch");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.editHostSchedule(ctx.deviceId, payload);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			const value = result.value;
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				..."deleted" in value ? { deleted: true } : { task: value.task },
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.run",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.run",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!validSendId(checked.value.clientRequestId) || !isText(checked.value.id)) return reject$1("E_PROTOCOL", "invalid schedule host run fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.runHostSchedule(ctx.deviceId, {
+				clientRequestId: payload.clientRequestId,
+				id: payload.id
+			});
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				task: result.value,
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.deleteEnded",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.deleteEnded",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!validSendId(checked.value.clientRequestId)) return reject$1("E_PROTOCOL", "invalid schedule host delete ended fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.deleteEndedHostSchedules(ctx.deviceId, { clientRequestId: payload.clientRequestId });
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				...result.value.deleted !== void 0 ? { deletedEnded: result.value.deleted } : {},
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.limits",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.limits",
+		validate: (payload) => payloadObject(payload),
+		handle: async (ctx) => {
+			const result = await ctx.bridge.scheduleLimits();
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.limits", result.value);
+		}
 	}
 ];
-//#endregion
-//#region src/document-payload.ts
+// src/document-payload.ts
 const PREFIX = "[DeepPilot document:";
 const SUFFIX = "]";
 /**
@@ -1593,8 +1854,7 @@ function projectedDocument(text) {
 		return;
 	}
 }
-//#endregion
-//#region src/host-event-projection.ts
+// src/host-event-projection.ts
 const MAX_MESSAGE_PROJECTION_BYTES = 262144;
 /** One durable host event sequence becomes exactly one phone message row.
 * Keep the last projection when a host history response repeats an event. */
@@ -1682,7 +1942,8 @@ function projectEvent(sessionId, event) {
 						name: String(data?.name ?? "tool"),
 						state: "running",
 						summary: summarizeArgs(data?.arguments),
-						...data?.callId ? { callId: String(data.callId) } : {}
+						...data?.callId ? { callId: String(data.callId) } : {},
+						...editField(data?.name, data?.arguments)
 					},
 					ts: tsOf(event)
 				}
@@ -1882,6 +2143,10 @@ function chunkText(data) {
 	const direct = data;
 	return typeof direct.text === "string" ? direct.text : "";
 }
+function editField(name, raw) {
+	const edit = toolEditOf(name, raw);
+	return edit ? { edit } : {};
+}
 function summarizeArgs(raw) {
 	if (typeof raw !== "string" || raw.length === 0) return "";
 	try {
@@ -1893,6 +2158,68 @@ function summarizeArgs(raw) {
 		return truncate(raw, 90);
 	}
 }
+/** 宿主的文件编辑工具名（DSH `dsh-tool-str-replace-editor`）。 */
+const EDITOR_TOOL_NAME = "str_replace_editor";
+/**
+* 把编辑类工具调用的原始参数归一化成 `ToolEditProjection`。
+*
+* 只认 `str_replace_editor` 的 `str_replace` / `create` / `insert`（`view` 不改文件），
+* 其他工具或无法解析的参数返回 undefined，工具行保持原样。与 iOS `ToolEditDiff.parse`
+* 的解析口径一致：`new_str` 缺失视为删除（空串）。
+*/
+function toolEditOf(name, raw) {
+	if (name !== EDITOR_TOOL_NAME || typeof raw !== "string" || raw.length === 0) return void 0;
+	let args;
+	try {
+		const parsed = JSON.parse(raw);
+		if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+		args = parsed;
+	} catch {
+		return;
+	}
+	const path = args.path;
+	if (typeof path !== "string" || path.length === 0) return void 0;
+	let edit;
+	switch (args.command) {
+		case "str_replace":
+			if (typeof args.old_str !== "string") return void 0;
+			edit = {
+				path,
+				operation: "replace",
+				oldText: args.old_str,
+				newText: typeof args.new_str === "string" ? args.new_str : ""
+			};
+			break;
+		case "create":
+			if (typeof args.file_text !== "string") return void 0;
+			edit = {
+				path,
+				operation: "create",
+				newText: args.file_text
+			};
+			break;
+		case "insert":
+			if (typeof args.new_str !== "string") return void 0;
+			edit = {
+				path,
+				operation: "insert",
+				newText: args.new_str,
+				...Number.isSafeInteger(args.insert_line) ? { insertLine: args.insert_line } : {}
+			};
+			break;
+		default: return;
+	}
+	return [edit.oldText, edit.newText].some((text) => text !== void 0 && Buffer.byteLength(text, "utf8") > 16384) ? withoutEditBodies(edit) : edit;
+}
+/** 去掉改动正文，只留路径、操作与 truncated 标记（超限或整条消息超限时用）。 */
+function withoutEditBodies(edit) {
+	return {
+		path: edit.path,
+		operation: edit.operation,
+		...edit.insertLine !== void 0 ? { insertLine: edit.insertLine } : {},
+		truncated: true
+	};
+}
 function truncate(text, max) {
 	return text.length <= max ? text : text.slice(0, max - 1) + "…";
 }
@@ -1936,7 +2263,8 @@ function projectHistory(events) {
 					tool: {
 						name: String(data?.name ?? "tool"),
 						state: "running",
-						summary: summarizeArgs(data?.arguments)
+						summary: summarizeArgs(data?.arguments),
+						...editField(data?.name, data?.arguments)
 					}
 				};
 				messages.push(row);
@@ -1985,7 +2313,8 @@ function limitMessageProjection(message) {
 		...message.tool ? { tool: {
 			...message.tool,
 			name: truncateUtf8(message.tool.name, 4096),
-			summary: truncateUtf8(message.tool.summary, 65536)
+			summary: truncateUtf8(message.tool.summary, 65536),
+			...message.tool.edit ? { edit: withoutEditBodies(message.tool.edit) } : {}
 		} } : {},
 		...message.attachments ? { attachments: message.attachments.slice(0, 16).map((attachment) => ({
 			...attachment,
@@ -2129,8 +2458,7 @@ function historyWindow(source, options) {
 		hasMore: older.length > 0
 	};
 }
-//#endregion
-//#region src/wire-session.ts
+// src/wire-session.ts
 /**
 * 会话特性的 wire 行：列表/归档、打开与关闭、创建/分支/重命名/取消、历史与
 * 附件、模型目录与切换、prompt 投递。
@@ -2464,6 +2792,9 @@ const sessionRows = [
 			const invalid = requireSessionId(checked.value);
 			if (invalid) return invalid;
 			if (!isText(checked.value.attachmentId)) return reject$1("E_PROTOCOL", "invalid attachmentId");
+			const maxFrameBytes = checked.value.maxFrameBytes;
+			if (maxFrameBytes !== void 0 && (!Number.isSafeInteger(maxFrameBytes) || maxFrameBytes <= 0)) return reject$1("E_PROTOCOL", "invalid maxFrameBytes");
+			if (checked.value.binary !== void 0 && typeof checked.value.binary !== "boolean") return reject$1("E_PROTOCOL", "invalid binary");
 			return checked;
 		},
 		handle: async (ctx, payload) => {
@@ -2471,6 +2802,34 @@ const sessionRows = [
 			if (attachmentId.length === 0) return ctx.fail("E_PROTOCOL", "sessionId and attachmentId required");
 			const image = await ctx.bridge.attachmentData(payload.sessionId, attachmentId);
 			if (!image) return ctx.fail("E_NOT_FOUND", "attachment unavailable");
+			if (payload.binary === true && ctx.sendBinary) {
+				const bytes = Buffer.from(image.data, "base64");
+				if (bytes.length === 0) return ctx.fail("E_NOT_FOUND", "attachment unavailable");
+				if (bytes.length > 12582912) return ctx.fail("E_TOO_LARGE", `attachment ${bytes.length} bytes exceeds limit`);
+				let index = 0;
+				try {
+					for (let offset = 0; offset < bytes.length; offset += BINARY_CHUNK_BYTES) {
+						await ctx.waitForWritable?.();
+						ctx.sendBinary("s2c.session.attachment.chunk", { index: index++ }, bytes.subarray(offset, offset + BINARY_CHUNK_BYTES));
+					}
+				} catch {
+					return;
+				}
+				const ack = {
+					...image.mediaType !== void 0 ? { mediaType: image.mediaType } : {},
+					chunks: index,
+					bytes: bytes.length
+				};
+				return ctx.send("s2c.ack", ack);
+			}
+			const clientLimit = payload.maxFrameBytes ?? 1048576;
+			const frameBytes = image.data.length + (image.mediaType?.length ?? 0) + ATTACHMENT_ENVELOPE_HEADROOM_BYTES;
+			if (frameBytes > Math.min(clientLimit, 2097152)) return ctx.fail("E_TOO_LARGE", `attachment frame ${frameBytes} bytes exceeds limit`);
+			try {
+				await ctx.waitForWritable?.();
+			} catch {
+				return;
+			}
 			ctx.send("s2c.ack", image);
 		}
 	},
@@ -2682,8 +3041,7 @@ const sessionRows = [
 		}
 	}
 ];
-//#endregion
-//#region src/wire-command.ts
+// src/wire-command.ts
 function sessionPayload(value) {
 	const result = payloadObject(value);
 	return result.ok && !isText(result.value.sessionId) ? reject$1("E_PROTOCOL", "会话标识无效") : result;
@@ -2755,6 +3113,7 @@ const commandRows = [...[
 		const result = sessionPayload(value);
 		if (!result.ok) return result;
 		if (result.value.format !== void 0 && result.value.format !== "zip" && result.value.format !== "markdown") return reject$1("E_PROTOCOL", "导出格式无效");
+		if (result.value.binary !== void 0 && typeof result.value.binary !== "boolean") return reject$1("E_PROTOCOL", "传输方式无效");
 		return result;
 	},
 	handle: async (ctx, payload) => {
@@ -2768,22 +3127,34 @@ const commandRows = [...[
 		try {
 			reader = (format === void 0 ? await ctx.bridge.exportSession(payload.sessionId, signal) : await ctx.bridge.exportSession(payload.sessionId, signal, format)).body.getReader();
 			signal.addEventListener("abort", cancel, { once: true });
+			const binary = payload.binary === true && ctx.sendBinary !== void 0;
 			let index = 0, bytes = 0;
+			const sendChunk = async (chunk) => {
+				bytes += chunk.length;
+				await ctx.waitForWritable?.();
+				if (binary) ctx.sendBinary("s2c.session.export.chunk", { index: index++ }, chunk);
+				else ctx.send("s2c.session.export.chunk", {
+					index: index++,
+					data: Buffer.from(chunk).toString("base64")
+				});
+			};
+			let carry;
 			while (true) {
 				signal.throwIfAborted();
 				const next = await reader.read();
 				if (next.done) break;
-				for (let offset = 0; offset < next.value.length; offset += 49152) {
-					const chunk = next.value.subarray(offset, offset + 49152);
-					bytes += chunk.length;
-					await ctx.waitForWritable?.();
-					ctx.send("s2c.session.export.chunk", {
-						index: index++,
-						data: Buffer.from(chunk).toString("base64")
-					});
+				if (!binary) {
+					for (let offset = 0; offset < next.value.length; offset += 49152) await sendChunk(next.value.subarray(offset, offset + 49152));
+					continue;
+				}
+				carry = carry ? Buffer.concat([carry, next.value]) : Buffer.from(next.value);
+				while (carry.length >= BINARY_CHUNK_BYTES) {
+					await sendChunk(carry.subarray(0, BINARY_CHUNK_BYTES));
+					carry = carry.subarray(BINARY_CHUNK_BYTES);
 				}
 			}
 			signal.throwIfAborted();
+			if (carry !== void 0 && carry.length > 0) await sendChunk(carry);
 			ctx.send("s2c.ack", {
 				sessionId: payload.sessionId,
 				fileName: format === "markdown" ? "dsh-session.md" : "dsh-session-log.zip",
@@ -2806,8 +3177,7 @@ const commandRows = [...[
 		}
 	}
 }];
-//#endregion
-//#region src/plugin-update.ts
+// src/plugin-update.ts
 const PACKAGE = "dsh-deeppilot";
 const PHASES = [
 	"preparing",
@@ -3254,8 +3624,7 @@ function supportsPluginUpdate(value) {
 		"registries"
 	].every((key) => typeof value[key] === "function");
 }
-//#endregion
-//#region src/wire-plugin-update.ts
+// src/wire-plugin-update.ts
 function payloadObject$1(value) {
 	if (value === void 0 || value === null) return {
 		ok: true,
@@ -3459,8 +3828,7 @@ const ROWS_BY_TYPE = new Map(WIRE_FRAME_ROWS.map((row) => [row.type, row]));
 function registryRowFor(type) {
 	return ROWS_BY_TYPE.get(type);
 }
-//#endregion
-//#region src/connection-gate.ts
+// src/connection-gate.ts
 /**
 * 连接门（ConnectionGate）——「一个匿名 socket 被允许做什么」的唯一属主。
 *
@@ -3752,6 +4120,7 @@ var ConnectionGate = class {
 			debug: host.debug,
 			log: (message) => host.log(message),
 			send: (type, payload) => host.send(type, payload, env.id),
+			...host.sendBinary ? { sendBinary: (type, payload, body) => host.sendBinary(type, payload, body, env.id) } : {},
 			fail: (code, message) => host.fail(env.id, code, message),
 			close: (code, reason) => host.close(code, reason),
 			canReceive: (scope) => host.canReceive(scope),
@@ -3779,8 +4148,7 @@ var ConnectionGate = class {
 		};
 	}
 };
-//#endregion
-//#region src/connection.ts
+// src/connection.ts
 /**
 * One connected phone. Implements BridgeSink so the HostBridge can push
 * projected frames and replays.
@@ -3852,6 +4220,7 @@ var BridgeConnection = class {
 			},
 			log: (message) => deps.log(message),
 			send: (type, payload, id) => connection.send(type, payload, id),
+			sendBinary: (type, payload, body, id) => connection.send(type, payload, id, void 0, body),
 			fail: (id, code, message) => connection.fail(id, code, message),
 			close: (code, reason) => connection.close(code, reason),
 			canReceive: (scope) => connection.canReceive(scope),
@@ -4021,7 +4390,8 @@ var BridgeConnection = class {
 			this.ws.terminate();
 		}
 	}
-	send(type, payload, id, seq) {
+	/** `body` 存在时按二进制帧发送（见 binary-frame.ts），头部仍是同一个 envelope。 */
+	send(type, payload, id, seq, body) {
 		const envelope = {
 			v: 2,
 			type,
@@ -4035,7 +4405,7 @@ var BridgeConnection = class {
 			this.close(1013, "client too slow");
 			return;
 		}
-		this.ws.send(JSON.stringify(envelope));
+		this.ws.send(body === void 0 ? JSON.stringify(envelope) : encodeBinaryFrame(envelope, body));
 	}
 	fail(id, code, message) {
 		this.send("s2c.error", {
@@ -4069,8 +4439,7 @@ var BridgeConnection = class {
 function normalizeFunnelConnectionLimit(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 16 ? value : 8;
 }
-//#endregion
-//#region src/tailscale-version.ts
+// src/tailscale-version.ts
 /**
 * 内嵌 helper 上报的 tailscale.com 模块版本。
 *
@@ -4093,8 +4462,7 @@ const MAX_TAILSCALE_VERSION_LENGTH = 80;
 function isTailscaleVersion(value) {
 	return typeof value === "string" && value.length <= MAX_TAILSCALE_VERSION_LENGTH && TAILSCALE_VERSION_PATTERN.test(value);
 }
-//#endregion
-//#region src/remote-supervisor.ts
+// src/remote-supervisor.ts
 const RESTART_DELAYS_MS = [
 	1e3,
 	2e3,
@@ -4523,8 +4891,7 @@ var RemoteSupervisor = class {
 		else if (next.phase === "error" || next.phase === "unavailable") this.options.log(`remote Funnel ${next.phase}: ${next.message ?? "unknown error"}`);
 	}
 };
-//#endregion
-//#region src/local-policy.ts
+// src/local-policy.ts
 const DEFAULT_LOCAL_PORT = 3098;
 const MIN_LOCAL_PORT = 1024;
 const MAX_LOCAL_PORT = 65535;
@@ -4542,8 +4909,7 @@ function localListenError(error, port) {
 	if (code === "EACCES") return `permission denied while opening local port ${port}`;
 	return error instanceof Error ? error.message : String(error);
 }
-//#endregion
-//#region src/config.ts
+// src/config.ts
 /** Operator-run relay used by distributed builds; overridable via config. */
 const DEFAULT_RELAY_URL = "https://pilot.hailab.dev";
 const Config = z.object({
@@ -4632,8 +4998,7 @@ function normalizeOptions(options) {
 	if (options && typeof options === "object") return plainConfig(options);
 	return plainConfig(Config(void 0) ?? {});
 }
-//#endregion
-//#region src/apns.ts
+// src/apns.ts
 /**
 * Minimal APNs provider client (HTTP/2) with zero npm dependencies.
 *
@@ -4870,8 +5235,7 @@ var ApnsClient = class {
 		return token.length <= 10 ? "…" : token.slice(0, 6) + "…" + token.slice(-4);
 	}
 };
-//#endregion
-//#region src/relay-url.ts
+// src/relay-url.ts
 /**
 * Normalize an operator-configured relay URL without a backtracking regular
 * expression. Scanning from the end keeps even pathological inputs linear.
@@ -4882,8 +5246,7 @@ function normalizeRelayBaseUrl(value) {
 	while (end > 0 && trimmed.charCodeAt(end - 1) === 47) end -= 1;
 	return end === trimmed.length ? trimmed : trimmed.slice(0, end);
 }
-//#endregion
-//#region src/relay-client.ts
+// src/relay-client.ts
 var RelayClient = class {
 	base;
 	token;
@@ -4976,8 +5339,7 @@ var RelayClient = class {
 		}
 	}
 };
-//#endregion
-//#region src/widget-push.ts
+// src/widget-push.ts
 /** Coalesce bursts and bound continuous updates, without starving the trailing
 * state. One scheduler per host, not per token or per streaming text frame. */
 var WidgetPushScheduler = class {
@@ -5014,8 +5376,7 @@ var WidgetPushScheduler = class {
 		this.timer = void 0;
 	}
 };
-//#endregion
-//#region src/live-activity.ts
+// src/live-activity.ts
 function liveActivityState(session) {
 	const total = Math.max(0, session?.todos?.total ?? session?.todoItems?.length ?? 0);
 	const done = Math.min(total, Math.max(0, session?.todos?.done ?? 0));
@@ -5087,8 +5448,7 @@ var LiveActivityPushManager = class {
 		this.scheduler.dispose();
 	}
 };
-//#endregion
-//#region src/push-policy.ts
+// src/push-policy.ts
 /** Prune only when the provider supplies an authoritative token-lifecycle verdict. */
 function shouldPrunePushToken(outcome, reason) {
 	return outcome === "invalid-token" && (reason === "Unregistered" || reason === "ExpiredToken");
@@ -5124,8 +5484,7 @@ function pushContent(notification, mode) {
 		body: bodies[notification.category] ?? "Open DeepPilot for an update."
 	};
 }
-//#endregion
-//#region src/relay-test.ts
+// src/relay-test.ts
 /**
 * Relay connectivity self-test used by the settings page "测试中继" button.
 *
@@ -5251,8 +5610,7 @@ async function runRelayProbe(options) {
 		steps
 	};
 }
-//#endregion
-//#region src/push-gateway.ts
+// src/push-gateway.ts
 /**
 * 推送网关（PushGateway）——离线推送的单一属主。
 *
@@ -5742,8 +6100,7 @@ var PushGateway = class {
 		await this.ensureRelayEnrolled(url);
 	}
 };
-//#endregion
-//#region src/phone-server.ts
+// src/phone-server.ts
 /**
 * A deliberately narrow transport listener. Both the LAN endpoint and the
 * loopback-only Funnel origin use this factory, so neither can accidentally
@@ -5822,8 +6179,7 @@ function closeServer(server) {
 	if (server === void 0 || !server.listening) return Promise.resolve();
 	return new Promise((resolve) => server.close(() => resolve()));
 }
-//#endregion
-//#region src/transport-reconciler.ts
+// src/transport-reconciler.ts
 var TransportReconciler = class {
 	spec;
 	config;
@@ -6051,8 +6407,7 @@ function createRemoteTransport(deps) {
 		statusOf: (supervisor) => supervisor?.status() ?? fallbackStatus()
 	}, deps.config, deps.log, fallbackStatus());
 }
-//#endregion
-//#region src/dispatch-journal.ts
+// src/dispatch-journal.ts
 /**
 * at-most-once dispatch journal：prompt 投递与非 prompt 变更的**同一个** module。
 *
@@ -6484,8 +6839,7 @@ function scheduleMutationCodec(persistValues) {
 		}))
 	};
 }
-//#endregion
-//#region src/notification-text.ts
+// src/notification-text.ts
 /**
 * 通知正文的纯文本投影。
 *
@@ -6528,8 +6882,7 @@ function decodePercentRuns(text) {
 		}
 	});
 }
-//#endregion
-//#region src/host-api.ts
+// src/host-api.ts
 /**
 * Subagent sessions are host-internal workers of a parent conversation.
 * They must never surface on the phone: not in the project/session list,
@@ -6552,8 +6905,7 @@ function unwrapStreamItem(item) {
 	} : nested;
 	return item;
 }
-//#endregion
-//#region src/host-capabilities.ts
+// src/host-capabilities.ts
 const pluginUpdateProbes = /* @__PURE__ */ new WeakMap();
 function setPluginUpdateProbe(proxy, probe) {
 	if (probe) pluginUpdateProbes.set(proxy, probe);
@@ -6569,6 +6921,7 @@ const HOST_CAPABILITY_PROBES = {
 	sessionRestore: (proxy) => typeof proxy.workspace?.unarchiveSession === "function",
 	projectSelection: (proxy) => typeof proxy.workspace?.list === "function" && typeof proxy.workspace?.create === "function",
 	schedules: (proxy) => proxy.schedule !== void 0,
+	schedulesHost: (proxy) => proxy.schedule?.mode === "host",
 	promptQueue: (proxy) => typeof proxy.sessions.updateQueue === "function",
 	sessionMarkdown: (proxy) => proxy.commands?.markdownAvailable === true && typeof proxy.commands?.export === "function",
 	assistantStream: (proxy) => proxy.assistantStreamAvailable === true,
@@ -6582,6 +6935,7 @@ function capabilityBits(proxy, pushOutlet) {
 	return {
 		historyPaging: true,
 		replay: true,
+		binaryFrames: true,
 		approvals: true,
 		questions: true,
 		pendingSnapshot: true,
@@ -6595,6 +6949,7 @@ function capabilityBits(proxy, pushOutlet) {
 		sessionRestore: HOST_CAPABILITY_PROBES.sessionRestore(proxy),
 		projectSelection: HOST_CAPABILITY_PROBES.projectSelection(proxy),
 		schedules: HOST_CAPABILITY_PROBES.schedules(proxy),
+		schedulesHost: HOST_CAPABILITY_PROBES.schedulesHost(proxy),
 		promptQueue: HOST_CAPABILITY_PROBES.promptQueue(proxy),
 		sessionMarkdown: HOST_CAPABILITY_PROBES.sessionMarkdown(proxy),
 		assistantStream: HOST_CAPABILITY_PROBES.assistantStream(proxy),
@@ -6605,8 +6960,7 @@ function capabilityBits(proxy, pushOutlet) {
 		deviceRevoke: true
 	};
 }
-//#endregion
-//#region src/prompt-queue.ts
+// src/prompt-queue.ts
 /**
 * 运行中排队与转向（PROTOCOL.md「运行中排队与转向扩展」）的纯函数部分。
 *
@@ -6857,8 +7211,7 @@ var AssistantStream = class {
 		this.attempts.clear();
 	}
 };
-//#endregion
-//#region src/host-bridge.ts
+// src/host-bridge.ts
 const MAX_RING_DEFAULT = 2e3;
 /**
 * Process-wide bridge state: session mirror, pending approvals/questions,
@@ -8182,6 +8535,17 @@ var HostBridge = class {
 			replayed: result.replayed
 		};
 	}
+	/**
+	* 当前 adapter 是否宿主级计划任务模型。
+	*
+	* 能力位 `schedulesHost`（host-capabilities.ts）与新帧、旧帧映射全部读这一个
+	* 判别位：探测只发生一次（DshApiProxy.resolveSchedule），这里不再看控制器
+	* 方法，也不看版本号字符串。
+	*/
+	get hostSchedule() {
+		const schedule = this.apiProxy.schedule;
+		return schedule?.mode === "host" ? schedule : void 0;
+	}
 	async listSchedules(sessionId) {
 		const schedule = this.apiProxy.schedule;
 		if (schedule === void 0) return {
@@ -8189,6 +8553,7 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") return this.listHostSchedulesAsLegacy(schedule, sessionId);
 		try {
 			const response = await schedule.list({
 				rpcId: randomUUID(),
@@ -8212,64 +8577,126 @@ var HostBridge = class {
 			};
 		}
 	}
-	async scheduleHistory(sessionId, id, limit, before) {
-		const schedule = this.apiProxy.schedule;
+	/** 宿主级列表 -> 旧会话级视图：过滤 session 目标、丢弃 ended、按 scheduledAt 升序。 */
+	async listHostSchedulesAsLegacy(schedule, sessionId) {
+		try {
+			const tasks = [];
+			let offset = 0;
+			for (;;) {
+				const response = await schedule.list({
+					rpcId: randomUUID(),
+					payload: {
+						limit: HOST_SCHEDULE_PAGE_SIZE,
+						offset
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule list returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const page = response.result.value;
+				tasks.push(...page.tasks);
+				offset += page.tasks.length;
+				if (page.tasks.length === 0 || offset >= page.total) break;
+			}
+			const views = [];
+			for (const task of tasks) {
+				if (task.target.kind !== "session" || task.target.sessionId !== sessionId) continue;
+				if (task.status === "ended") continue;
+				const view = toLegacyScheduleView(task);
+				if (view !== void 0) views.push(view);
+			}
+			views.sort((left, right) => left.scheduledAt < right.scheduledAt ? -1 : left.scheduledAt > right.scheduledAt ? 1 : 0);
+			return {
+				ok: true,
+				value: views
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async listHostSchedules(request = {}) {
+		const schedule = this.hostSchedule;
 		if (schedule === void 0) return {
 			ok: false,
 			code: "E_UNSUPPORTED",
-			message: "schedules unavailable on this host version"
+			message: "host-level schedules unavailable on this host version"
 		};
 		try {
-			const response = await schedule.history({
+			const response = await schedule.list({
 				rpcId: randomUUID(),
-				payload: {
-					sessionId,
-					id,
-					limit,
-					...before !== void 0 ? { before } : {}
-				}
+				payload: request
 			});
 			if (!response.result) return {
 				ok: false,
 				code: "E_INTERNAL",
-				message: "schedule history returned no result"
+				message: "schedule host list returned no result"
 			};
 			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
 			return {
 				ok: true,
-				value: response.result.value.history
+				value: response.result.value
 			};
 		} catch (error) {
-			return {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async viewHostSchedule(id) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.view({
+				rpcId: randomUUID(),
+				payload: { id }
+			});
+			if (!response.result) return {
 				ok: false,
 				code: "E_INTERNAL",
-				message: String(error)
+				message: "schedule host view returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
 			};
+			return {
+				ok: true,
+				value: value.task
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
 		}
 	}
-	async createSchedule(deviceId, payload) {
-		const schedule = this.apiProxy.schedule;
+	async createHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
 		if (schedule === void 0) return {
 			ok: false,
 			code: "E_UNSUPPORTED",
-			message: "schedules unavailable on this host version"
+			message: "host-level schedules unavailable on this host version"
 		};
-		const { clientRequestId, sessionId, ...request } = payload;
-		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, {
-			sessionId,
-			request
-		}, async () => {
+		const { clientRequestId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
 			const response = await schedule.create({
 				rpcId: randomUUID(),
 				payload: {
-					sessionId,
-					...request
+					title: request.title,
+					prompt: request.prompt,
+					timing: request.timing,
+					...request.target !== void 0 ? { target: request.target } : {}
 				}
 			});
 			if (!response.result) return {
 				ok: false,
 				code: "E_INTERNAL",
-				message: "schedule create returned no result"
+				message: "schedule host create returned no result"
 			};
 			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
 			return {
@@ -8292,39 +8719,500 @@ var HostBridge = class {
 			replayed: result.replayed
 		};
 	}
-	async updateSchedule(deviceId, payload) {
-		const schedule = this.apiProxy.schedule;
+	async editHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
 		if (schedule === void 0) return {
 			ok: false,
 			code: "E_UNSUPPORTED",
-			message: "schedules unavailable on this host version"
+			message: "host-level schedules unavailable on this host version"
 		};
 		const { clientRequestId, ...request } = payload;
 		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
-			const response = await schedule.update({
+			const expected = request.expectedUpdatedAt !== void 0 ? { expectedUpdatedAt: request.expectedUpdatedAt } : {};
+			const response = await schedule.edit({
 				rpcId: randomUUID(),
-				payload: request
+				payload: request.action === "update" ? {
+					id: request.id,
+					action: "update",
+					patch: request.patch,
+					...expected
+				} : {
+					id: request.id,
+					action: "delete",
+					...expected
+				}
 			});
 			if (!response.result) return {
 				ok: false,
 				code: "E_INTERNAL",
-				message: "schedule update returned no result"
+				message: "schedule host edit returned no result"
 			};
 			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
 			const value = response.result.value;
-			if (value.updated !== true || value.record === void 0) return {
+			if (value.kind === "conflict") return {
 				ok: false,
-				code: wireCodeFor("schedule", value.code),
-				message: value.code ?? "schedule update rejected"
+				code: "E_BUSY",
+				message: "schedule changed since it was read"
 			};
-			return {
-				ok: true,
-				value: value.record
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
 			};
-		});
-		if (result.ok) {
-			this.record("s2c.schedule.changed", {});
-			return {
+			if (request.action === "delete") {
+				if (value.kind !== "deleted") return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned an updated task"
+				};
+				return {
+					ok: true,
+					value: {
+						deleted: true,
+						id: value.id
+					}
+				};
+			}
+			if (value.kind !== "task") return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule update returned a deletion"
+			};
+			return {
+				ok: true,
+				value: { task: value.task }
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async runHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, { id: payload.id }, async () => {
+			const response = await schedule.run({
+				rpcId: randomUUID(),
+				payload: { id: payload.id }
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host run returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "pending") return {
+				ok: false,
+				code: "E_BUSY",
+				message: "schedule execution already pending"
+			};
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			return {
+				ok: true,
+				value: value.task
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	/**
+	* 删除宿主上全部已结束（`status="ended"`）的任务，返回删除条数。
+	*
+	* 与其他变更帧共用 scheduleMutations journal：同一 clientRequestId 重放时直接回放
+	* 首次结果，不会再删一次。成功后广播 `s2c.schedule.changed`；失败时同样广播——上游
+	* 文档说明失败的批次无法确定哪些行已删除，客户端应重新读取列表。
+	*/
+	async deleteEndedHostSchedules(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, { operation: "deleteEnded" }, async () => {
+			const response = await schedule.deleteEnded({
+				rpcId: randomUUID(),
+				payload: {}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule delete ended returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		});
+		this.record("s2c.schedule.changed", {});
+		if (result.ok) return {
+			ok: true,
+			value: result.value ?? {},
+			replayed: result.replayed
+		};
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async scheduleLimits() {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.limits({
+				rpcId: randomUUID(),
+				payload: {}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule limits returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async scheduleHistory(sessionId, id, limit, before) {
+		const schedule = this.apiProxy.schedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "schedules unavailable on this host version"
+		};
+		if (schedule.mode === "host") try {
+			const response = await schedule.history({
+				rpcId: randomUUID(),
+				payload: {
+					id,
+					limit,
+					...before !== void 0 ? { before } : {}
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule history returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+		try {
+			const response = await schedule.history({
+				rpcId: randomUUID(),
+				payload: {
+					sessionId,
+					id,
+					limit,
+					...before !== void 0 ? { before } : {}
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule history returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value.history
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: String(error)
+			};
+		}
+	}
+	async createSchedule(deviceId, payload) {
+		const schedule = this.apiProxy.schedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "schedules unavailable on this host version"
+		};
+		if (schedule.mode === "host") {
+			const { clientRequestId, sessionId, title, prompt, ...selectors } = payload;
+			const timing = hostTimingFromLegacySelector(selectors);
+			if (timing === void 0) return {
+				ok: false,
+				code: "E_PROTOCOL",
+				message: "unsupported schedule selector"
+			};
+			const request = {
+				title,
+				prompt,
+				timing,
+				target: {
+					kind: "session",
+					sessionId
+				}
+			};
+			const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+				const response = await schedule.create({
+					rpcId: randomUUID(),
+					payload: {
+						title,
+						prompt,
+						timing,
+						target: {
+							kind: "session",
+							sessionId
+						}
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule create returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const legacy = toLegacyScheduleView(response.result.value);
+				if (legacy === void 0) return {
+					ok: false,
+					code: "E_PROTOCOL",
+					message: "schedule cannot be represented in the session-scoped view"
+				};
+				return {
+					ok: true,
+					value: legacy
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
+		const { clientRequestId, sessionId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, {
+			sessionId,
+			request
+		}, async () => {
+			const response = await schedule.create({
+				rpcId: randomUUID(),
+				payload: {
+					sessionId,
+					...request
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule create returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async updateSchedule(deviceId, payload) {
+		const schedule = this.apiProxy.schedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "schedules unavailable on this host version"
+		};
+		if (schedule.mode === "host") {
+			const request = {
+				sessionId: payload.sessionId,
+				id: payload.id,
+				expected: payload.expected,
+				title: payload.title,
+				prompt: payload.prompt,
+				change: payload.change
+			};
+			const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, request, async () => {
+				const current = await schedule.view({
+					rpcId: randomUUID(),
+					payload: { id: payload.id }
+				});
+				if (!current.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule view returned no result"
+				};
+				if (!current.result.ok) return wireErrorOf("schedule", current.result.error);
+				if (current.result.value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				const currentTask = current.result.value.task;
+				if (!legacyScheduleMatchesExpected(currentTask, payload.expected)) return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				const patch = hostPatchFromLegacyUpdate(payload);
+				if (Object.keys(patch).length === 0) {
+					const legacy = toLegacyScheduleView(currentTask);
+					if (legacy === void 0) return {
+						ok: false,
+						code: "E_PROTOCOL",
+						message: "schedule cannot be represented in the session-scoped view"
+					};
+					return {
+						ok: true,
+						value: legacy
+					};
+				}
+				const response = await schedule.edit({
+					rpcId: randomUUID(),
+					payload: {
+						id: payload.id,
+						action: "update",
+						patch
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule edit returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const value = response.result.value;
+				if (value.kind === "conflict") return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				if (value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				if (value.kind !== "task") return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule edit returned an unexpected deletion"
+				};
+				const legacy = toLegacyScheduleView(value.task);
+				if (legacy === void 0) return {
+					ok: false,
+					code: "E_PROTOCOL",
+					message: "schedule cannot be represented in the session-scoped view"
+				};
+				return {
+					ok: true,
+					value: legacy
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
+		const { clientRequestId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+			const response = await schedule.update({
+				rpcId: randomUUID(),
+				payload: request
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule update returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.updated !== true || value.record === void 0) return {
+				ok: false,
+				code: wireCodeFor("schedule", value.code),
+				message: value.code ?? "schedule update rejected"
+			};
+			return {
+				ok: true,
+				value: value.record
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
 				ok: true,
 				value: result.value,
 				replayed: result.replayed
@@ -8344,6 +9232,63 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") {
+			const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, {
+				sessionId: payload.sessionId,
+				id: payload.id
+			}, async () => {
+				const response = await schedule.edit({
+					rpcId: randomUUID(),
+					payload: {
+						id: payload.id,
+						action: "delete"
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const value = response.result.value;
+				if (value.kind === "deleted") return {
+					ok: true,
+					value: {
+						id: value.id,
+						deleted: true
+					}
+				};
+				if (value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				if (value.kind === "conflict") return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned an updated task"
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, {
 			sessionId: payload.sessionId,
 			id: payload.id
@@ -8728,8 +9673,236 @@ function projectSessionModels(value) {
 	};
 }
 /** Project a history page (raw events) into MessageProjection rows. */
-//#endregion
-//#region src/dsh-remote-interactions.ts
+/** 宿主级列表全量拉取时的页大小（Host 允许的最大值）。 */
+const HOST_SCHEDULE_PAGE_SIZE = 500;
+/** 参与旧帧冲突比较的字段：`state`/`deliveryMode` 是派生字段，不参与。 */
+const LEGACY_PROJECTION_FIELDS = [
+	"id",
+	"kind",
+	"title",
+	"prompt",
+	"scheduledAt",
+	"afterSeconds",
+	"everySeconds",
+	"time",
+	"timeZone",
+	"weekdays",
+	"expression"
+];
+function isPlainObject$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function legacyNumber(...values) {
+	for (const value of values) if (typeof value === "number" && Number.isFinite(value)) return value;
+}
+function legacyString(...values) {
+	for (const value of values) if (typeof value === "string" && value.length > 0) return value;
+}
+function normalizeAtInput(value) {
+	if (typeof value === "string" && value.length > 0) return value;
+	if (!isPlainObject$1(value)) return void 0;
+	const date = legacyString(value.date);
+	const time = legacyString(value.time);
+	const zone = legacyString(value.time_zone, value.timeZone);
+	return date !== void 0 && time !== void 0 && zone !== void 0 ? {
+		date,
+		time,
+		time_zone: zone
+	} : void 0;
+}
+function normalizeLocalTime(value) {
+	if (!isPlainObject$1(value)) return void 0;
+	const time = legacyString(value.time);
+	const zone = legacyString(value.time_zone, value.timeZone);
+	return time !== void 0 && zone !== void 0 ? {
+		time,
+		time_zone: zone
+	} : void 0;
+}
+function normalizeWeekdays(value) {
+	if (!Array.isArray(value) || value.length === 0) return void 0;
+	const days = value.filter((day) => typeof day === "number" && Number.isSafeInteger(day) && day >= 1 && day <= 7);
+	return days.length === value.length ? days : void 0;
+}
+/** 旧创建帧的选择器 -> 宿主级 timing。旧 wire 校验保证恰好一个选择器。 */
+function hostTimingFromLegacySelector(selectors) {
+	const after = legacyNumber(selectors.after_seconds);
+	if (after !== void 0) return {
+		kind: "after",
+		after_seconds: after
+	};
+	if (selectors.at !== void 0) {
+		const at = normalizeAtInput(selectors.at);
+		return at === void 0 ? void 0 : {
+			kind: "at",
+			at
+		};
+	}
+	const every = legacyNumber(selectors.every_seconds);
+	if (every !== void 0) return {
+		kind: "every",
+		every_seconds: every
+	};
+	if (selectors.daily !== void 0) {
+		const daily = normalizeLocalTime(selectors.daily);
+		return daily === void 0 ? void 0 : {
+			kind: "daily",
+			daily
+		};
+	}
+	if (selectors.weekly !== void 0) {
+		if (!isPlainObject$1(selectors.weekly)) return void 0;
+		const time = normalizeLocalTime(selectors.weekly);
+		const weekdays = normalizeWeekdays(selectors.weekly.weekdays);
+		return time === void 0 || weekdays === void 0 ? void 0 : {
+			kind: "weekly",
+			weekly: {
+				...time,
+				weekdays
+			}
+		};
+	}
+	if (selectors.cron !== void 0) {
+		if (!isPlainObject$1(selectors.cron)) return void 0;
+		const expression = legacyString(selectors.cron.expression);
+		const zone = legacyString(selectors.cron.time_zone, selectors.cron.timeZone);
+		return expression === void 0 || zone === void 0 ? void 0 : {
+			kind: "cron",
+			cron: {
+				expression,
+				time_zone: zone
+			}
+		};
+	}
+}
+/**
+* 旧更新帧的 `change` -> 宿主级 timing。
+*
+* 两种历史写法都认：选择器式（`{kind:'daily', daily:{...}}`，与创建帧同形）与
+* 扁平式（`{kind:'daily', time, timeZone}` / `{kind:'cron', expression}`）。
+*/
+function hostTimingFromLegacyChange(change) {
+	if (!isPlainObject$1(change)) return void 0;
+	const selector = hostTimingFromLegacySelector(change);
+	if (selector !== void 0) return selector;
+	switch (change.kind) {
+		case "daily": {
+			const time = legacyString(change.time);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			return time === void 0 || zone === void 0 ? void 0 : {
+				kind: "daily",
+				daily: {
+					time,
+					time_zone: zone
+				}
+			};
+		}
+		case "weekly": {
+			const time = legacyString(change.time);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			const weekdays = normalizeWeekdays(change.weekdays);
+			return time === void 0 || zone === void 0 || weekdays === void 0 ? void 0 : {
+				kind: "weekly",
+				weekly: {
+					time,
+					time_zone: zone,
+					weekdays
+				}
+			};
+		}
+		case "cron": {
+			const expression = legacyString(change.expression);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			return expression === void 0 || zone === void 0 ? void 0 : {
+				kind: "cron",
+				cron: {
+					expression,
+					time_zone: zone
+				}
+			};
+		}
+		case "rrule": {
+			const rrule = legacyString(change.rrule);
+			return rrule === void 0 ? void 0 : {
+				kind: "rrule",
+				rrule
+			};
+		}
+		default: return;
+	}
+}
+/** 旧更新帧的 title/prompt/change -> 宿主级 patch。 */
+function hostPatchFromLegacyUpdate(payload) {
+	const patch = {};
+	if (typeof payload.title === "string") patch.title = payload.title;
+	if (typeof payload.prompt === "string") patch.prompt = payload.prompt;
+	const timing = hostTimingFromLegacyChange(payload.change);
+	if (timing !== void 0) patch.timing = timing;
+	return patch;
+}
+/**
+* 宿主级任务视图 -> 旧会话级视图。
+*
+* `state` 只由 `scheduledAt` 是否已过推导（PROTOCOL.md 映射表）；`rrule` 在旧枚举
+* 里没有对应 kind，返回 undefined 让调用方跳过——旧客户端按枚举解码列表，塞进
+* 未知 kind 会让整页解码失败，静默隐藏比让旧 App 打不开列表更安全。
+*/
+function toLegacyScheduleView(task) {
+	const instant = Date.parse(task.scheduledAt);
+	const base = {
+		id: task.id,
+		title: task.title,
+		prompt: task.prompt,
+		scheduledAt: task.scheduledAt,
+		state: Number.isFinite(instant) && instant < Date.now() ? "overdue" : "scheduled",
+		deliveryMode: "host"
+	};
+	switch (task.timing.kind) {
+		case "after": return {
+			...base,
+			kind: "after",
+			afterSeconds: task.timing.after_seconds
+		};
+		case "at": return {
+			...base,
+			kind: "at"
+		};
+		case "every": return {
+			...base,
+			kind: "every",
+			everySeconds: task.timing.every_seconds
+		};
+		case "daily": return {
+			...base,
+			kind: "daily",
+			time: task.timing.daily.time,
+			timeZone: task.timing.daily.time_zone
+		};
+		case "weekly": return {
+			...base,
+			kind: "weekly",
+			time: task.timing.weekly.time,
+			timeZone: task.timing.weekly.time_zone,
+			weekdays: [...task.timing.weekly.weekdays]
+		};
+		case "cron": return {
+			...base,
+			kind: "cron",
+			expression: task.timing.cron.expression,
+			timeZone: task.timing.cron.time_zone
+		};
+		default: return;
+	}
+}
+/** 旧帧的冲突保护：当前任务的旧投影与客户端回传的 `expected` 逐字段相等。 */
+function legacyScheduleMatchesExpected(task, expected) {
+	const view = toLegacyScheduleView(task);
+	if (view === void 0) return false;
+	if (!isPlainObject$1(expected)) return false;
+	const actual = view;
+	return LEGACY_PROJECTION_FIELDS.every((key) => JSON.stringify(actual[key]) === JSON.stringify(expected[key]));
+}
+// src/dsh-remote-interactions.ts
 /**
 * Resident DSH Remote Events client for phone interactions.
 *
@@ -8917,8 +10090,7 @@ async function startDshRemoteInteractions(hostCtx, handlers) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/command-api.ts
+// src/command-api.ts
 /**
 * 给本域自造的失败带上 Host 风格的码。
 *
@@ -9065,8 +10237,7 @@ var DshCommandApi = class {
 		return response;
 	}
 };
-//#endregion
-//#region src/dsh-api-proxy.ts
+// src/dsh-api-proxy.ts
 /**
 * Adapter for the DSH rc.2 controller API.
 *
@@ -9075,6 +10246,14 @@ var DshCommandApi = class {
 * Session/Workspace controllers and Gateway-backed Remote Events, keeping
 * the phone protocol isolated from the Host API.
 */
+/**
+* 形状探测：宿主级模型只有 `edit`（没有 `update`）。不按版本号字符串判断——
+* 版本号无法说明 Schedule bundle 是否挂载、也无法覆盖回退组合。
+*/
+function isHostScheduleController(controller) {
+	const value = controller;
+	return typeof value.edit === "function" && typeof value.update !== "function";
+}
 /** Direct-controller adapter with the shape HostBridge consumes. */
 var DshApiProxy = class {
 	ctx;
@@ -9145,14 +10324,16 @@ var DshApiProxy = class {
 		const controller = this.ctx.get("schedule");
 		if (controller === void 0) return;
 		this.scheduleController = controller;
-		this.scheduleApi = this.createScheduleApi(controller);
+		this.scheduleApi = isHostScheduleController(controller) ? this.createHostScheduleApi(controller) : this.createLegacyScheduleApi(controller);
 	}
 	get schedule() {
 		this.resolveSchedule();
 		return this.scheduleApi;
 	}
-	createScheduleApi(controller) {
+	/** 会话级适配器：行为与宿主级扩展加入前逐字节一致，只多一个判别位。 */
+	createLegacyScheduleApi(controller) {
 		return {
+			mode: "legacy",
 			list: async (request) => this.call(async () => ({
 				sessionId: request.payload.sessionId,
 				tasks: (await controller.list({ sessionId: request.payload.sessionId })).map(toScheduleTask)
@@ -9201,6 +10382,83 @@ var DshApiProxy = class {
 		};
 	}
 	/**
+	* 宿主级适配器：把 DSH `ScheduleService` 的分页列表/结果对象归一化成 Bridge
+	* 消费的稳定视图。
+	*
+	* 失败分两类：`view/edit/run/history` 的「找不到」是**结果对象**里的 code
+	* （非变更 miss，不抛错），这里翻译成 outcome 或带 code 的 Error；
+	* `create/edit/run` 的输入非法与目标已归档是 RemoteError 抛出，由
+	* `this.call` 收成 `{code}`，再由 Bridge 按错误词表映射。
+	*/
+	createHostScheduleApi(controller) {
+		return {
+			mode: "host",
+			list: async (request) => this.call(async () => {
+				const payload = request.payload ?? {};
+				const value = await controller.list({
+					...payload.active !== void 0 ? { active: payload.active } : {},
+					...payload.limit !== void 0 ? { limit: payload.limit } : {},
+					...payload.offset !== void 0 ? { offset: payload.offset } : {}
+				});
+				const items = Array.isArray(value.items) ? value.items : [];
+				return {
+					tasks: items.map(toHostScheduleTask),
+					shown: finiteCount(value.shown, items.length),
+					total: finiteCount(value.total, items.length),
+					limit: finiteCount(value.limit, payload.limit ?? 100),
+					offset: finiteCount(value.offset, payload.offset ?? 0)
+				};
+			}),
+			view: async (request) => this.call(async () => {
+				return toHostScheduleViewOutcome(await controller.view({ id: request.payload.id }), request.payload.id);
+			}),
+			create: async (request) => this.call(async () => {
+				const payload = request.payload;
+				return toHostScheduleTask(await controller.create({
+					title: payload.title,
+					prompt: payload.prompt,
+					timing: payload.timing,
+					...payload.target !== void 0 ? { target: normalizeTargetRequest(payload.target) } : {}
+				}));
+			}),
+			edit: async (request) => this.call(async () => {
+				const payload = request.payload;
+				const expected = payload.expectedUpdatedAt !== void 0 ? { expectedUpdatedAt: payload.expectedUpdatedAt } : {};
+				const edit = payload.action === "update" ? {
+					id: payload.id,
+					action: "update",
+					patch: normalizeHostPatch(payload.patch),
+					...expected
+				} : {
+					id: payload.id,
+					action: "delete",
+					...expected
+				};
+				return toHostScheduleEditOutcome(await controller.edit(edit), payload.id);
+			}),
+			run: async (request) => this.call(async () => {
+				return toHostScheduleRunOutcome(await controller.run({ id: request.payload.id }), request.payload.id);
+			}),
+			history: async (request) => this.call(async () => {
+				const value = await controller.history({
+					id: request.payload.id,
+					limit: request.payload.limit,
+					...request.payload.before !== void 0 ? { before: request.payload.before } : {}
+				});
+				if (typeof value.code === "string") throw Object.assign(new Error(String(value.code)), { code: value.code });
+				return toScheduleHistory(value);
+			}),
+			limits: async () => this.call(async () => {
+				const value = controller.deliveryLimits();
+				return { newSessionIntervalSeconds: Math.max(0, Math.trunc(Number(value?.newSessionIntervalSeconds) || 0)) };
+			}),
+			deleteEnded: async () => this.call(async () => {
+				const value = await controller.deleteInactive();
+				return { deleted: Math.max(0, Math.trunc(Number(value?.deleted) || 0)) };
+			})
+		};
+	}
+	/**
 	* Decide whether this Gateway Client can surface a phone card. The decision
 	* fails open to false so a broken device registry delegates this delivery
 	* while the official Web Client remains able to answer.
@@ -9613,6 +10871,206 @@ function toScheduleHistory(value) {
 		...typeof row.nextBefore === "string" ? { nextBefore: row.nextBefore } : {}
 	};
 }
+/**
+* 请求侧 target：`new_once`/`new` 的会话由 Host 预留或新建，客户端若把查看结果
+* 里的 `sessionId` 原样回传，不向上游透传（Host 的创建/编辑请求没有这个字段）。
+*/
+function normalizeTargetRequest(value) {
+	if (value.kind === "session") return {
+		kind: "session",
+		sessionId: String(value.sessionId ?? "")
+	};
+	const create = toHostScheduleCreateSpec(value.create);
+	return {
+		kind: value.kind,
+		...create !== void 0 ? { create } : {}
+	};
+}
+/** 编辑补丁归一化：字段按契约逐个透传，target 走请求侧投影。 */
+function normalizeHostPatch(value) {
+	return {
+		...value.title !== void 0 ? { title: value.title } : {},
+		...value.prompt !== void 0 ? { prompt: value.prompt } : {},
+		...value.timing !== void 0 ? { timing: value.timing } : {},
+		...value.target !== void 0 ? { target: normalizeTargetRequest(value.target) } : {},
+		...value.active !== void 0 ? { active: value.active } : {}
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toRecord(value) {
+	return isRecord(value) ? value : {};
+}
+/** 非负安全整数；形状不符时退回 fallback（分页字段只用于展示）。 */
+function finiteCount(value, fallback) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : fallback;
+}
+function positiveSeconds(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+}
+function hostResultCode(value) {
+	return typeof value.code === "string" ? value.code : void 0;
+}
+/** 结果对象里的「非变更 miss」不是抛错，这里翻译成 outcome 或带 code 的 Error。 */
+function throwHostResultCode(code) {
+	throw Object.assign(new Error(code), { code });
+}
+function toHostScheduleCreateSpec(value) {
+	const row = toRecord(value);
+	const spec = {
+		...typeof row.cwd === "string" ? { cwd: row.cwd } : {},
+		...typeof row.agentPreset === "string" ? { agentPreset: row.agentPreset } : {}
+	};
+	return Object.keys(spec).length > 0 ? spec : void 0;
+}
+/**
+* 交付目标投影。`session` 与 `new_once` 带 sessionId（后者是创建时 Host 预留
+* 的会话）；`new` 每次投递新建会话。`create` 省略时按 Host 默认。
+*/
+function toHostScheduleTarget(value) {
+	const target = toRecord(value);
+	const create = toHostScheduleCreateSpec(target.create);
+	if (target.kind === "session") return {
+		kind: "session",
+		sessionId: String(target.sessionId ?? "")
+	};
+	if (target.kind === "new_once") return {
+		kind: "new_once",
+		sessionId: String(target.sessionId ?? ""),
+		...create !== void 0 ? { create } : {}
+	};
+	return {
+		kind: "new",
+		...create !== void 0 ? { create } : {}
+	};
+}
+function toHostScheduleReceipt(value) {
+	const row = toRecord(value);
+	return {
+		scheduledAt: String(row.scheduledAt ?? ""),
+		deliveredAt: String(row.deliveredAt ?? ""),
+		messageId: String(row.messageId ?? ""),
+		targetSessionId: String(row.targetSessionId ?? "")
+	};
+}
+/**
+* timing 反向投影：DSH 存储记录用 camelCase（`afterSeconds`/`timeZone`），wire
+* 用 PROTOCOL.md 的 snake_case 嵌套结构。
+*
+* `at` 存储后只剩 `scheduledAt`（原始绝对时刻不是独立字段），因此用排定时刻
+* 回填——对 active 的一次性任务它就是目标时刻。
+*/
+function toHostScheduleTiming(row) {
+	switch (row.kind) {
+		case "after": return {
+			kind: "after",
+			after_seconds: positiveSeconds(row.afterSeconds)
+		};
+		case "every": return {
+			kind: "every",
+			every_seconds: positiveSeconds(row.everySeconds)
+		};
+		case "daily": return {
+			kind: "daily",
+			daily: localTimeInput(row)
+		};
+		case "weekly": return {
+			kind: "weekly",
+			weekly: {
+				...localTimeInput(row),
+				weekdays: Array.isArray(row.weekdays) ? row.weekdays.filter((day) => typeof day === "number") : []
+			}
+		};
+		case "cron": return {
+			kind: "cron",
+			cron: {
+				expression: String(row.expression ?? ""),
+				time_zone: String(row.timeZone ?? "")
+			}
+		};
+		case "rrule": return {
+			kind: "rrule",
+			rrule: String(row.rrule ?? "")
+		};
+		default: return {
+			kind: "at",
+			at: String(row.scheduledAt ?? "")
+		};
+	}
+}
+function localTimeInput(row) {
+	return {
+		time: String(row.time ?? ""),
+		time_zone: String(row.timeZone ?? "")
+	};
+}
+/** Host `ScheduleCatalogEntry` -> wire `schedule.host.task`（丢弃 involvedSessionIds）。 */
+function toHostScheduleTask(value) {
+	const row = toRecord(value);
+	return {
+		id: String(row.id ?? ""),
+		title: String(row.title ?? ""),
+		prompt: String(row.prompt ?? ""),
+		timing: toHostScheduleTiming(row),
+		target: toHostScheduleTarget(row.target),
+		status: row.status === "paused" || row.status === "ended" ? row.status : "active",
+		scheduledAt: String(row.scheduledAt ?? ""),
+		...typeof row.createdAt === "string" ? { createdAt: row.createdAt } : {},
+		...typeof row.updatedAt === "string" ? { updatedAt: row.updatedAt } : {},
+		...typeof row.executionActive === "boolean" ? { executionActive: row.executionActive } : {},
+		...typeof row.deliveryFloorEndsAt === "string" ? { deliveryFloorEndsAt: row.deliveryFloorEndsAt } : {},
+		...isRecord(row.lastDelivery) ? { lastDelivery: toHostScheduleReceipt(row.lastDelivery) } : {}
+	};
+}
+function toHostScheduleViewOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
+function toHostScheduleEditOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_conflict") return {
+		kind: "conflict",
+		id
+	};
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	if (value.deleted === true) return {
+		kind: "deleted",
+		id: String(value.id ?? id)
+	};
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
+function toHostScheduleRunOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_execution_pending") return {
+		kind: "pending",
+		id
+	};
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
 async function readWorkspaceBaseline(controller) {
 	const abort = new AbortController();
 	const iterator = controller.follow(abort.signal)[Symbol.asyncIterator]();
@@ -9642,8 +11100,7 @@ async function projectModels(catalog, sessionId, list) {
 		failures: Array.isArray(value.failures) ? value.failures : []
 	};
 }
-//#endregion
-//#region src/report-service.ts
+// src/report-service.ts
 /**
 * The Typert receiver the Gateway resolves for the DeepPilot Bridge report.
 * Snapshot data stays non-secret; the token crosses the boundary only through
@@ -9689,8 +11146,7 @@ var DeepPilotReportService = class extends TypertRemoteService {
 		return this.pushTester();
 	}
 };
-//#endregion
-//#region src/report-wire.ts
+// src/report-wire.ts
 /** The npm package identity both contribution registrations claim. */
 const REPORT_REMOTE_PACKAGE = "dsh-deeppilot";
 /** Canonical `<namespace>/<method>` endpoint of the report Remote. */
@@ -10075,8 +11531,7 @@ const REPORT_HOST_CONTRIBUTION = {
 		}
 	]
 };
-//#endregion
-//#region src/report-remote.ts
+// src/report-remote.ts
 /**
 * Provide the report service and register its Remote descriptor. Rides an
 * optional `typert` inject: profiles without the web stack never activate it.
@@ -10088,8 +11543,7 @@ function applyReportRemote(ctx, snapshot, pairingStarter, deviceRevoker, deviceR
 		remoteCtx.effect(() => () => void unregister(), "dsh-deeppilot: report remote");
 	});
 }
-//#endregion
-//#region src/local-address.ts
+// src/local-address.ts
 function octetsOf(address) {
 	const octets = address.split(".").map(Number);
 	if (octets.length !== 4 || octets.some((value) => !Number.isInteger(value) || value < 0 || value > 255)) return null;
@@ -10140,8 +11594,7 @@ function localLANIPv4Addresses() {
 	candidates.sort((left, right) => priority(left.name) - priority(right.name) || left.name.localeCompare(right.name));
 	return [...new Set(candidates.map(({ address }) => address))];
 }
-//#endregion
-//#region src/update-check.ts
+// src/update-check.ts
 /**
 * Lightweight self-update check for dsh-deeppilot.
 *
@@ -10337,8 +11790,7 @@ var UpdateChecker = class {
 	/** No-op kept for API symmetry with the host lifecycle wiring. */
 	dispose() {}
 };
-//#endregion
-//#region src/phone-http.ts
+// src/phone-http.ts
 const CLIENT_IP_HEADER = "x-deeppilot-client-ip";
 function rejectUpgrade(socket, status, reason, retryAfterSeconds) {
 	const body = JSON.stringify({ error: reason });
@@ -10372,8 +11824,7 @@ function requestClientIdentity(req) {
 	}
 	return normalizedAddress(req.socket.remoteAddress) ?? "unknown";
 }
-//#endregion
-//#region src/lan-tls.ts
+// src/lan-tls.ts
 const LAN_TLS_COMMON_NAME = "dsh-deeppilot";
 const LAN_TLS_KEY_FILE = "key.pem";
 const LAN_TLS_CERT_FILE = "cert.pem";
@@ -10546,8 +11997,7 @@ async function writePrivate(path, contents) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 /**
 * dsh-deeppilot — data bridge between the DSH host and DeepPilot
 * clients. Owns independent, narrowly routed LAN (TLS-only, pinned by paired
@@ -11197,7 +12647,6 @@ function apply(ctx, options) {
 		await diagnostics.dispose();
 	}, "deeppilot: process resources");
 }
-//#endregion
 export { Config, HostBridge, apply, inject, mayReceivePush, name, shouldPrunePushToken, shouldReEnrollRelayToken };
 
 //# sourceMappingURL=index.js.map