dsh-deeppilot 0.9.13 → 0.9.15

package/lib/index.js

@@ -16,7 +16,7 @@ import { Context } from "@deepseek-ai/cordis";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { isIP } from "node:net";
 import { generate } from "selfsigned";
-//#region src/wire-errors.ts
+// src/wire-errors.ts
 /**
 * 错误词表（error vocabulary）的唯一属主。
 *
@@ -42,7 +42,8 @@ const ERROR_CODES = {
 	E_BUSY: "session is busy",
 	E_UNSUPPORTED: "protocol version or capability unsupported",
 	E_INTERNAL: "internal error",
-	E_STEER_UNAVAILABLE: "queued item can no longer steer the current turn"
+	E_STEER_UNAVAILABLE: "queued item can no longer steer the current turn",
+	E_TOO_LARGE: "response exceeds the client frame limit"
 };
 /** Bridge 未携带 code 的结果（内部守卫失败等）落到这一档。 */
 const WIRE_ERROR_FALLBACK = "E_INTERNAL";
@@ -90,6 +91,9 @@ const DOMAIN_TABLES = {
 		"schedule_not_found": "E_NOT_FOUND",
 		"delivery_cursor_not_found": "E_NOT_FOUND",
 		"schedule_conflict": "E_BUSY",
+		"schedule_execution_pending": "E_BUSY",
+		"schedule/target-archived": "E_NOT_FOUND",
+		"schedule/input-invalid": "E_PROTOCOL",
 		"invalid_prompt": "E_PROTOCOL",
 		"invalid_selector": "E_PROTOCOL",
 		"invalid_rule": "E_PROTOCOL",
@@ -209,9 +213,10 @@ function pendingResponseMessage(kind, reason) {
 		case "transport": return "host connection failed while answering " + kind;
 	}
 }
-//#endregion
-//#region src/connection-policy.ts
+// src/connection-policy.ts
 const AUTH_TIMEOUT_MS = 35e3;
+/** 附件 ack 在 `{mediaType,data}` 之外的信封字段（v/type/id/ts）余量。 */
+const ATTACHMENT_ENVELOPE_HEADROOM_BYTES = 1024;
 const IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
 	"image/png",
 	"image/jpeg",
@@ -287,8 +292,20 @@ function sanitizeImageName(value) {
 function sanitizeDocumentField(value, maxChars) {
 	return value.replace(/[\u0000-\u001F\u007F]/g, " ").trim().slice(0, maxChars);
 }
-//#endregion
-//#region src/auth-rate-limit.ts
+/** 二进制模式下导出与附件的单块字节数。连接在发送缓冲降到 256 KiB 以下才发
+*  下一块，缓冲峰值约 512 KiB，远低于 4 MiB 的慢客户端断开线。 */
+const BINARY_CHUNK_BYTES = 262144;
+/** 把 envelope 头部与原始字节拼成一帧。 */
+function encodeBinaryFrame(header, body) {
+	const headerBytes = Buffer.from(JSON.stringify(header), "utf8");
+	const frame = Buffer.allocUnsafe(5 + headerBytes.length + body.length);
+	frame.writeUInt8(1, 0);
+	frame.writeUInt32BE(headerBytes.length, 1);
+	headerBytes.copy(frame, 5);
+	frame.set(body, 5 + headerBytes.length);
+	return frame;
+}
+// src/auth-rate-limit.ts
 const DEFAULT_AUTH_RATE_POLICY = {
 	windowMs: 6e4,
 	attemptsPerSource: 12,
@@ -405,8 +422,7 @@ var AuthRateLimiter = class {
 		}
 	}
 };
-//#endregion
-//#region src/diagnostics.ts
+// src/diagnostics.ts
 /**
 * 连接诊断事件模型（Diagnostics）——插件唯一的「失败可观测」面。
 *
@@ -469,7 +485,7 @@ function defaultLevel(kind) {
 function sanitizeText(value, maxChars) {
 	return value.replace(/[\u0000-\u001f\u007f-\u009f]+/gu, " ").replace(/\s+/g, " ").trim().slice(0, maxChars);
 }
-function normalizeReason(reason) {
+function normalizeReason$1(reason) {
 	return sanitizeText(reason, MAX_REASON_CHARS).replace(/\s+/g, "-");
 }
 /**
@@ -550,7 +566,7 @@ var DiagnosticsStore = class {
 		const event = {
 			ts,
 			kind,
-			reason: normalizeReason(reason),
+			reason: normalizeReason$1(reason),
 			level: extra.level ?? defaultLevel(kind),
 			...attemptId !== void 0 ? { attemptId } : {},
 			...source !== void 0 ? { source } : {},
@@ -732,8 +748,7 @@ function buildHealthPayload(input) {
 		}
 	};
 }
-//#endregion
-//#region src/device-auth.ts
+// src/device-auth.ts
 function getPairingCodeTtlMs() {
 	return Number(process.env.DEEPPILOT_PAIRING_TTL_MS) || 3e5;
 }
@@ -822,6 +837,30 @@ function normalizeDeviceScopes(value) {
 	const allowed = new Set(DEVICE_SCOPES);
 	return [...new Set(value.filter((scope) => typeof scope === "string" && allowed.has(scope)))];
 }
+/**
+* 0.8.3 之前的「全部权限」：当时还没有 `schedule.manage`。App 配对时一直申请
+* DeviceScope 的全部取值，设置页也没有收窄权限的入口，所以存量记录恰好等于这五项，
+* 只说明「配对时这项权限还不存在」，不是有意关闭。
+*/
+const LEGACY_FULL_SCOPES = [
+	"sessions.read",
+	"prompt.send",
+	"sessions.manage",
+	"interactions.respond",
+	"notifications.register"
+];
+/**
+* 存量设备权限升级：恰好等于旧版全部权限时补上之后新增的默认权限，返回新列表；
+* 其余情况（含任何非完整集合）返回 null，原样保留。只放宽「旧版全量」这一种形态，
+* 避免把将来可能出现的、有意收窄过的记录一并放开。
+*/
+function upgradeLegacyFullScopes(value) {
+	if (!Array.isArray(value)) return null;
+	const current = new Set(value);
+	if (current.size !== LEGACY_FULL_SCOPES.length) return null;
+	if (!LEGACY_FULL_SCOPES.every((scope) => current.has(scope))) return null;
+	return [...DEFAULT_DEVICE_SCOPES];
+}
 /** One active, single-use pairing grant per plugin runtime. */
 var PairingCodeManager = class {
 	active = null;
@@ -857,8 +896,7 @@ function createAuthChallenge(audience, now = Date.now()) {
 		expiresAt: now + AUTH_CHALLENGE_TTL_MS
 	};
 }
-//#endregion
-//#region src/wire-interaction.ts
+// src/wire-interaction.ts
 /**
 * 交互特性的 wire 行：回答待决的 approval 与 question。
 *
@@ -918,8 +956,7 @@ const interactionRows = [{
 		ctx.send("s2c.ack", {});
 	}
 }];
-//#endregion
-//#region src/wire-device.ts
+// src/wire-device.ts
 /**
 * 设备生命周期特性的 wire 行：自撤销（解绑）。
 *
@@ -957,8 +994,7 @@ const deviceRows = [{
 		ctx.close(4401, "device revoked");
 	}
 }];
-//#endregion
-//#region src/token.ts
+// src/token.ts
 /** Expand a leading ~ using the process home directory. */
 function expandHome(p) {
 	if (p === "~") return homedir();
@@ -1035,7 +1071,20 @@ var DeviceStore = class DeviceStore {
 		const store = new DeviceStore(filePath);
 		try {
 			const raw = JSON.parse(await readFile(expandHome(filePath), "utf8"));
-			for (const rec of raw.devices ?? []) if (typeof rec.deviceId === "string") store.devices.set(rec.deviceId, rec);
+			let upgraded = 0;
+			for (const rec of raw.devices ?? []) {
+				if (typeof rec.deviceId !== "string") continue;
+				const next = rec.revokedAt === void 0 ? upgradeLegacyFullScopes(rec.scopes) : null;
+				if (next !== null) {
+					rec.scopes = next;
+					upgraded += 1;
+				}
+				store.devices.set(rec.deviceId, rec);
+			}
+			if (upgraded > 0) {
+				console.log(formatLogLine("info", `device scopes upgraded for ${upgraded} legacy device(s): schedule.manage added`));
+				store.flush();
+			}
 		} catch (error) {
 			if (error?.code === "ENOENT") {} else console.log(formatLogLine("warn", "device registry unreadable, starting empty: " + String(error)));
 		}
@@ -1260,8 +1309,7 @@ var DeviceStore = class DeviceStore {
 		console.log(formatLogLine("warn", "device registry write failed" + (typeof code === "string" ? " code=" + code : "") + ": " + message.slice(0, 160)));
 	}
 };
-//#endregion
-//#region src/wire-push.ts
+// src/wire-push.ts
 /** Live Activity 需要的三个 scope：通知注册 + 会话读取 + 交互应答。 */
 const LIVE_ACTIVITY_SCOPES = [
 	"notifications.register",
@@ -1408,21 +1456,83 @@ const pushRows = [
 		}
 	}
 ];
-//#endregion
-//#region src/wire-schedule.ts
+// src/wire-schedule.ts
 /**
-* 定时任务特性的 wire 行：列表、历史、创建、修改、删除。
+* 定时任务特性的 wire 行：会话级（列表、历史、创建、修改、删除）与宿主级
+* （list/view/create/edit/run/limits）两套。
 *
 * scope 取 `schedule.manage` + `sessions.read`：PROTOCOL.md scope 映射表写明
 * 「`schedule.manage` 定时任务/提醒的列表、历史、创建、修改和删除；同时需要
 * `sessions.read` 才能读取任务内容」。迁移前这条组合一半住在 requiredScope、
 * 一半住在 connection.ts 调用点的一行补充规则里（334-336），现在是一行声明。
 *
-* 五个帧共享一个能力位 `schedules`；该位现在只要求 Schedule 服务存在
-* （见 host-capabilities.ts 的 G4 修正）。
+* 五个会话级帧共享能力位 `schedules`；该位现在只要求 Schedule 服务存在
+* （见 host-capabilities.ts 的 G4 修正）。六个宿主级帧共享 `schedulesHost`：
+* 该位由 adapter 判别位推导，false/缺失时新帧一律 E_UNSUPPORTED，客户端只能
+* 走会话级帧（PROTOCOL.md「Schedule 宿主级任务扩展」）。
 */
 /** PROTOCOL.md scope 映射表：schedule.manage 需搭配 sessions.read。 */
 const SCHEDULE_SCOPES = ["schedule.manage", "sessions.read"];
+/** 普通 JSON 对象（宿主级 timing/target/patch 都是嵌套对象）。 */
+function isObjectValue(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** `{time, time_zone}` 本地时间输入：取值合法性由 Host 完整校验。 */
+function isLocalTimeInput(value) {
+	return isObjectValue(value) && isText(value.time) && isText(value.time_zone);
+}
+function isWeekdayList(value) {
+	return Array.isArray(value) && value.length > 0 && value.every((day) => isInteger(day, 1, 7));
+}
+/**
+* 宿主级 timing 判别联合的形状检查。
+*
+* 只判结构与数量级（PROTOCOL.md 章节限额）；日期格式、时区与频率是否可达由
+* Host 的 Schedule 服务负责——重复一遍只会制造两套口径。
+*/
+function isHostTiming(value) {
+	if (!isObjectValue(value)) return false;
+	switch (value.kind) {
+		case "after": return isInteger(value.after_seconds, 1, Number.MAX_SAFE_INTEGER);
+		case "at": return isText(value.at) || isObjectValue(value.at) && isText(value.at.date) && isText(value.at.time) && isText(value.at.time_zone);
+		case "every": return isInteger(value.every_seconds, 60, Number.MAX_SAFE_INTEGER);
+		case "daily": return isLocalTimeInput(value.daily);
+		case "weekly": return isObjectValue(value.weekly) && isLocalTimeInput(value.weekly) && isWeekdayList(value.weekly.weekdays);
+		case "cron": return isObjectValue(value.cron) && isText(value.cron.expression) && isText(value.cron.time_zone);
+		case "rrule": return isText(value.rrule);
+		default: return false;
+	}
+}
+/** `{cwd?, agentPreset?}`：省略即 Host 默认。 */
+function isHostCreateSpec(value) {
+	return isObjectValue(value) && isOptionalField(value, "cwd", (v) => isText(v)) && isOptionalField(value, "agentPreset", (v) => isText(v));
+}
+/**
+* 创建/编辑请求里的 target。`session` 必须给 sessionId；`new_once`/`new` 的
+* 会话由 Host 预留或新建，`create` 省略即默认。客户端若把查看结果里的
+* `new_once.sessionId` 原样回传，也接受（未知/冗余字段不该让编辑失败）。
+*/
+function isHostTarget(value) {
+	if (!isObjectValue(value)) return false;
+	switch (value.kind) {
+		case "session": return isText(value.sessionId);
+		case "new_once": return isOptionalField(value, "sessionId", (v) => isText(v)) && isOptionalField(value, "create", isHostCreateSpec);
+		case "new": return isOptionalField(value, "create", isHostCreateSpec);
+		default: return false;
+	}
+}
+/** 编辑补丁：至少一个字段，且各字段形状合法。 */
+function isHostPatch(value) {
+	if (!isObjectValue(value)) return false;
+	if ([
+		"title",
+		"prompt",
+		"timing",
+		"target",
+		"active"
+	].filter((key) => value[key] !== void 0).length === 0) return false;
+	return isOptionalField(value, "title", (v) => isText(v, 120)) && isOptionalField(value, "prompt", (v) => isText(v, 262144)) && isOptionalField(value, "timing", isHostTiming) && isOptionalField(value, "target", isHostTarget) && isOptionalField(value, "active", (v) => typeof v === "boolean");
+}
 const scheduleRows = [
 	{
 		type: "c2s.schedule.list",
@@ -1454,14 +1564,16 @@ const scheduleRows = [
 		validate: (payload) => {
 			const checked = payloadObject(payload);
 			if (!checked.ok) return checked;
-			if (!isText(checked.value.sessionId) || !isText(checked.value.id) || !isInteger(checked.value.limit, 1, 100) || !isOptionalField(checked.value, "before", (v) => isText(v))) return reject$1("E_PROTOCOL", "invalid schedule history");
+			if (!isOptionalField(checked.value, "sessionId", (v) => isText(v)) || !isText(checked.value.id) || !isInteger(checked.value.limit, 1, 100) || !isOptionalField(checked.value, "before", (v) => isText(v))) return reject$1("E_PROTOCOL", "invalid schedule history");
 			return checked;
 		},
 		handle: async (ctx, payload) => {
-			const result = await ctx.bridge.scheduleHistory(payload.sessionId, payload.id, payload.limit, payload.before);
+			const sessionId = payload.sessionId;
+			if (sessionId === void 0 && ctx.bridge.capabilities.schedulesHost !== true) return ctx.fail("E_PROTOCOL", "invalid schedule history");
+			const result = await ctx.bridge.scheduleHistory(sessionId ?? "", payload.id, payload.limit, payload.before);
 			if (!result.ok) return ctx.fail(result.code, result.message);
 			ctx.send("s2c.schedule.history", {
-				sessionId: payload.sessionId,
+				...sessionId !== void 0 ? { sessionId } : {},
 				history: result.value
 			});
 		}
@@ -1553,10 +1665,159 @@ const scheduleRows = [
 				...result.replayed ? { replayed: true } : {}
 			});
 		}
+	},
+	{
+		type: "c2s.schedule.host.list",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.list",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!isOptionalField(p, "active", (v) => typeof v === "boolean") || !isOptionalField(p, "limit", (v) => isInteger(v, 1, 500)) || !isOptionalField(p, "offset", (v) => isInteger(v, 0, Number.MAX_SAFE_INTEGER))) return reject$1("E_PROTOCOL", "invalid schedule host list");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.listHostSchedules({
+				...payload.active !== void 0 ? { active: payload.active } : {},
+				...payload.limit !== void 0 ? { limit: payload.limit } : {},
+				...payload.offset !== void 0 ? { offset: payload.offset } : {}
+			});
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.snapshot", result.value);
+		}
+	},
+	{
+		type: "c2s.schedule.host.view",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.view",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!isText(checked.value.id)) return reject$1("E_PROTOCOL", "invalid schedule id");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.viewHostSchedule(payload.id);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.task", { task: result.value });
+		}
+	},
+	{
+		type: "c2s.schedule.host.create",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.create",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!validSendId(p.clientRequestId) || !isText(p.title, 120) || !isText(p.prompt, 262144) || !isHostTiming(p.timing) || !isOptionalField(p, "target", isHostTarget)) return reject$1("E_PROTOCOL", "invalid schedule host create fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.createHostSchedule(ctx.deviceId, payload);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				task: result.value,
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.edit",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.edit",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			const p = checked.value;
+			if (!validSendId(p.clientRequestId) || !isText(p.id) || !isOptionalField(p, "expectedUpdatedAt", (v) => v === null || isText(v))) return reject$1("E_PROTOCOL", "invalid schedule host edit fields");
+			if (p.action !== "update" && p.action !== "delete") return reject$1("E_PROTOCOL", "invalid schedule host edit action");
+			if (p.action === "update" && !isHostPatch(p.patch)) return reject$1("E_PROTOCOL", "invalid schedule host edit patch");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.editHostSchedule(ctx.deviceId, payload);
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			const value = result.value;
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				..."deleted" in value ? { deleted: true } : { task: value.task },
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.run",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.run",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!validSendId(checked.value.clientRequestId) || !isText(checked.value.id)) return reject$1("E_PROTOCOL", "invalid schedule host run fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.runHostSchedule(ctx.deviceId, {
+				clientRequestId: payload.clientRequestId,
+				id: payload.id
+			});
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				task: result.value,
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.deleteEnded",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.deleteEnded",
+		validate: (payload) => {
+			const checked = payloadObject(payload);
+			if (!checked.ok) return checked;
+			if (!validSendId(checked.value.clientRequestId)) return reject$1("E_PROTOCOL", "invalid schedule host delete ended fields");
+			return checked;
+		},
+		handle: async (ctx, payload) => {
+			const result = await ctx.bridge.deleteEndedHostSchedules(ctx.deviceId, { clientRequestId: payload.clientRequestId });
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.updated", {
+				clientRequestId: payload.clientRequestId,
+				...result.value.deleted !== void 0 ? { deletedEnded: result.value.deleted } : {},
+				...result.replayed ? { replayed: true } : {}
+			});
+		}
+	},
+	{
+		type: "c2s.schedule.host.limits",
+		stage: "authenticated",
+		scopes: SCHEDULE_SCOPES,
+		capability: "schedulesHost",
+		doc: "PROTOCOL.md c2s.schedule.host.limits",
+		validate: (payload) => payloadObject(payload),
+		handle: async (ctx) => {
+			const result = await ctx.bridge.scheduleLimits();
+			if (!result.ok) return ctx.fail(result.code, result.message);
+			ctx.send("s2c.schedule.host.limits", result.value);
+		}
 	}
 ];
-//#endregion
-//#region src/document-payload.ts
+// src/document-payload.ts
 const PREFIX = "[DeepPilot document:";
 const SUFFIX = "]";
 /**
@@ -1593,8 +1854,7 @@ function projectedDocument(text) {
 		return;
 	}
 }
-//#endregion
-//#region src/host-event-projection.ts
+// src/host-event-projection.ts
 const MAX_MESSAGE_PROJECTION_BYTES = 262144;
 /** One durable host event sequence becomes exactly one phone message row.
 * Keep the last projection when a host history response repeats an event. */
@@ -1682,7 +1942,8 @@ function projectEvent(sessionId, event) {
 						name: String(data?.name ?? "tool"),
 						state: "running",
 						summary: summarizeArgs(data?.arguments),
-						...data?.callId ? { callId: String(data.callId) } : {}
+						...data?.callId ? { callId: String(data.callId) } : {},
+						...editField(data?.name, data?.arguments)
 					},
 					ts: tsOf(event)
 				}
@@ -1730,6 +1991,12 @@ function userMessageSource(data) {
 	if (obj.source && typeof obj.source === "object") return obj.source;
 	if (obj.message && typeof obj.message === "object" && obj.message.source && typeof obj.message.source === "object") return obj.message.source;
 }
+/** Source kind of one user/message payload (`user`, `schedule`, injected
+* context kinds, …); undefined on legacy hosts that record no source. */
+function userMessageSourceKind(data) {
+	const kind = userMessageSource(data)?.kind;
+	return typeof kind === "string" ? kind : void 0;
+}
 /** Wire role for one user/message payload. A payload without any readable
 * source degrades to 'user' so history written by older hosts stays visible;
 * a present source follows the host's own trajectory rule — anything whose
@@ -1882,6 +2149,10 @@ function chunkText(data) {
 	const direct = data;
 	return typeof direct.text === "string" ? direct.text : "";
 }
+function editField(name, raw) {
+	const edit = toolEditOf(name, raw);
+	return edit ? { edit } : {};
+}
 function summarizeArgs(raw) {
 	if (typeof raw !== "string" || raw.length === 0) return "";
 	try {
@@ -1893,6 +2164,68 @@ function summarizeArgs(raw) {
 		return truncate(raw, 90);
 	}
 }
+/** 宿主的文件编辑工具名（DSH `dsh-tool-str-replace-editor`）。 */
+const EDITOR_TOOL_NAME = "str_replace_editor";
+/**
+* 把编辑类工具调用的原始参数归一化成 `ToolEditProjection`。
+*
+* 只认 `str_replace_editor` 的 `str_replace` / `create` / `insert`（`view` 不改文件），
+* 其他工具或无法解析的参数返回 undefined，工具行保持原样。与 iOS `ToolEditDiff.parse`
+* 的解析口径一致：`new_str` 缺失视为删除（空串）。
+*/
+function toolEditOf(name, raw) {
+	if (name !== EDITOR_TOOL_NAME || typeof raw !== "string" || raw.length === 0) return void 0;
+	let args;
+	try {
+		const parsed = JSON.parse(raw);
+		if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+		args = parsed;
+	} catch {
+		return;
+	}
+	const path = args.path;
+	if (typeof path !== "string" || path.length === 0) return void 0;
+	let edit;
+	switch (args.command) {
+		case "str_replace":
+			if (typeof args.old_str !== "string") return void 0;
+			edit = {
+				path,
+				operation: "replace",
+				oldText: args.old_str,
+				newText: typeof args.new_str === "string" ? args.new_str : ""
+			};
+			break;
+		case "create":
+			if (typeof args.file_text !== "string") return void 0;
+			edit = {
+				path,
+				operation: "create",
+				newText: args.file_text
+			};
+			break;
+		case "insert":
+			if (typeof args.new_str !== "string") return void 0;
+			edit = {
+				path,
+				operation: "insert",
+				newText: args.new_str,
+				...Number.isSafeInteger(args.insert_line) ? { insertLine: args.insert_line } : {}
+			};
+			break;
+		default: return;
+	}
+	return [edit.oldText, edit.newText].some((text) => text !== void 0 && Buffer.byteLength(text, "utf8") > 16384) ? withoutEditBodies(edit) : edit;
+}
+/** 去掉改动正文，只留路径、操作与 truncated 标记（超限或整条消息超限时用）。 */
+function withoutEditBodies(edit) {
+	return {
+		path: edit.path,
+		operation: edit.operation,
+		...edit.insertLine !== void 0 ? { insertLine: edit.insertLine } : {},
+		truncated: true
+	};
+}
 function truncate(text, max) {
 	return text.length <= max ? text : text.slice(0, max - 1) + "…";
 }
@@ -1936,7 +2269,8 @@ function projectHistory(events) {
 					tool: {
 						name: String(data?.name ?? "tool"),
 						state: "running",
-						summary: summarizeArgs(data?.arguments)
+						summary: summarizeArgs(data?.arguments),
+						...editField(data?.name, data?.arguments)
 					}
 				};
 				messages.push(row);
@@ -1985,7 +2319,8 @@ function limitMessageProjection(message) {
 		...message.tool ? { tool: {
 			...message.tool,
 			name: truncateUtf8(message.tool.name, 4096),
-			summary: truncateUtf8(message.tool.summary, 65536)
+			summary: truncateUtf8(message.tool.summary, 65536),
+			...message.tool.edit ? { edit: withoutEditBodies(message.tool.edit) } : {}
 		} } : {},
 		...message.attachments ? { attachments: message.attachments.slice(0, 16).map((attachment) => ({
 			...attachment,
@@ -2129,8 +2464,7 @@ function historyWindow(source, options) {
 		hasMore: older.length > 0
 	};
 }
-//#endregion
-//#region src/wire-session.ts
+// src/wire-session.ts
 /**
 * 会话特性的 wire 行：列表/归档、打开与关闭、创建/分支/重命名/取消、历史与
 * 附件、模型目录与切换、prompt 投递。
@@ -2464,6 +2798,9 @@ const sessionRows = [
 			const invalid = requireSessionId(checked.value);
 			if (invalid) return invalid;
 			if (!isText(checked.value.attachmentId)) return reject$1("E_PROTOCOL", "invalid attachmentId");
+			const maxFrameBytes = checked.value.maxFrameBytes;
+			if (maxFrameBytes !== void 0 && (!Number.isSafeInteger(maxFrameBytes) || maxFrameBytes <= 0)) return reject$1("E_PROTOCOL", "invalid maxFrameBytes");
+			if (checked.value.binary !== void 0 && typeof checked.value.binary !== "boolean") return reject$1("E_PROTOCOL", "invalid binary");
 			return checked;
 		},
 		handle: async (ctx, payload) => {
@@ -2471,6 +2808,34 @@ const sessionRows = [
 			if (attachmentId.length === 0) return ctx.fail("E_PROTOCOL", "sessionId and attachmentId required");
 			const image = await ctx.bridge.attachmentData(payload.sessionId, attachmentId);
 			if (!image) return ctx.fail("E_NOT_FOUND", "attachment unavailable");
+			if (payload.binary === true && ctx.sendBinary) {
+				const bytes = Buffer.from(image.data, "base64");
+				if (bytes.length === 0) return ctx.fail("E_NOT_FOUND", "attachment unavailable");
+				if (bytes.length > 12582912) return ctx.fail("E_TOO_LARGE", `attachment ${bytes.length} bytes exceeds limit`);
+				let index = 0;
+				try {
+					for (let offset = 0; offset < bytes.length; offset += BINARY_CHUNK_BYTES) {
+						await ctx.waitForWritable?.();
+						ctx.sendBinary("s2c.session.attachment.chunk", { index: index++ }, bytes.subarray(offset, offset + BINARY_CHUNK_BYTES));
+					}
+				} catch {
+					return;
+				}
+				const ack = {
+					...image.mediaType !== void 0 ? { mediaType: image.mediaType } : {},
+					chunks: index,
+					bytes: bytes.length
+				};
+				return ctx.send("s2c.ack", ack);
+			}
+			const clientLimit = payload.maxFrameBytes ?? 1048576;
+			const frameBytes = image.data.length + (image.mediaType?.length ?? 0) + ATTACHMENT_ENVELOPE_HEADROOM_BYTES;
+			if (frameBytes > Math.min(clientLimit, 2097152)) return ctx.fail("E_TOO_LARGE", `attachment frame ${frameBytes} bytes exceeds limit`);
+			try {
+				await ctx.waitForWritable?.();
+			} catch {
+				return;
+			}
 			ctx.send("s2c.ack", image);
 		}
 	},
@@ -2682,8 +3047,7 @@ const sessionRows = [
 		}
 	}
 ];
-//#endregion
-//#region src/wire-command.ts
+// src/wire-command.ts
 function sessionPayload(value) {
 	const result = payloadObject(value);
 	return result.ok && !isText(result.value.sessionId) ? reject$1("E_PROTOCOL", "会话标识无效") : result;
@@ -2755,6 +3119,7 @@ const commandRows = [...[
 		const result = sessionPayload(value);
 		if (!result.ok) return result;
 		if (result.value.format !== void 0 && result.value.format !== "zip" && result.value.format !== "markdown") return reject$1("E_PROTOCOL", "导出格式无效");
+		if (result.value.binary !== void 0 && typeof result.value.binary !== "boolean") return reject$1("E_PROTOCOL", "传输方式无效");
 		return result;
 	},
 	handle: async (ctx, payload) => {
@@ -2768,22 +3133,34 @@ const commandRows = [...[
 		try {
 			reader = (format === void 0 ? await ctx.bridge.exportSession(payload.sessionId, signal) : await ctx.bridge.exportSession(payload.sessionId, signal, format)).body.getReader();
 			signal.addEventListener("abort", cancel, { once: true });
+			const binary = payload.binary === true && ctx.sendBinary !== void 0;
 			let index = 0, bytes = 0;
+			const sendChunk = async (chunk) => {
+				bytes += chunk.length;
+				await ctx.waitForWritable?.();
+				if (binary) ctx.sendBinary("s2c.session.export.chunk", { index: index++ }, chunk);
+				else ctx.send("s2c.session.export.chunk", {
+					index: index++,
+					data: Buffer.from(chunk).toString("base64")
+				});
+			};
+			let carry;
 			while (true) {
 				signal.throwIfAborted();
 				const next = await reader.read();
 				if (next.done) break;
-				for (let offset = 0; offset < next.value.length; offset += 49152) {
-					const chunk = next.value.subarray(offset, offset + 49152);
-					bytes += chunk.length;
-					await ctx.waitForWritable?.();
-					ctx.send("s2c.session.export.chunk", {
-						index: index++,
-						data: Buffer.from(chunk).toString("base64")
-					});
+				if (!binary) {
+					for (let offset = 0; offset < next.value.length; offset += 49152) await sendChunk(next.value.subarray(offset, offset + 49152));
+					continue;
+				}
+				carry = carry ? Buffer.concat([carry, next.value]) : Buffer.from(next.value);
+				while (carry.length >= BINARY_CHUNK_BYTES) {
+					await sendChunk(carry.subarray(0, BINARY_CHUNK_BYTES));
+					carry = carry.subarray(BINARY_CHUNK_BYTES);
 				}
 			}
 			signal.throwIfAborted();
+			if (carry !== void 0 && carry.length > 0) await sendChunk(carry);
 			ctx.send("s2c.ack", {
 				sessionId: payload.sessionId,
 				fileName: format === "markdown" ? "dsh-session.md" : "dsh-session-log.zip",
@@ -2806,8 +3183,7 @@ const commandRows = [...[
 		}
 	}
 }];
-//#endregion
-//#region src/plugin-update.ts
+// src/plugin-update.ts
 const PACKAGE = "dsh-deeppilot";
 const PHASES = [
 	"preparing",
@@ -3254,8 +3630,7 @@ function supportsPluginUpdate(value) {
 		"registries"
 	].every((key) => typeof value[key] === "function");
 }
-//#endregion
-//#region src/wire-plugin-update.ts
+// src/wire-plugin-update.ts
 function payloadObject$1(value) {
 	if (value === void 0 || value === null) return {
 		ok: true,
@@ -3459,8 +3834,7 @@ const ROWS_BY_TYPE = new Map(WIRE_FRAME_ROWS.map((row) => [row.type, row]));
 function registryRowFor(type) {
 	return ROWS_BY_TYPE.get(type);
 }
-//#endregion
-//#region src/connection-gate.ts
+// src/connection-gate.ts
 /**
 * 连接门（ConnectionGate）——「一个匿名 socket 被允许做什么」的唯一属主。
 *
@@ -3752,6 +4126,7 @@ var ConnectionGate = class {
 			debug: host.debug,
 			log: (message) => host.log(message),
 			send: (type, payload) => host.send(type, payload, env.id),
+			...host.sendBinary ? { sendBinary: (type, payload, body) => host.sendBinary(type, payload, body, env.id) } : {},
 			fail: (code, message) => host.fail(env.id, code, message),
 			close: (code, reason) => host.close(code, reason),
 			canReceive: (scope) => host.canReceive(scope),
@@ -3779,8 +4154,7 @@ var ConnectionGate = class {
 		};
 	}
 };
-//#endregion
-//#region src/connection.ts
+// src/connection.ts
 /**
 * One connected phone. Implements BridgeSink so the HostBridge can push
 * projected frames and replays.
@@ -3852,6 +4226,7 @@ var BridgeConnection = class {
 			},
 			log: (message) => deps.log(message),
 			send: (type, payload, id) => connection.send(type, payload, id),
+			sendBinary: (type, payload, body, id) => connection.send(type, payload, id, void 0, body),
 			fail: (id, code, message) => connection.fail(id, code, message),
 			close: (code, reason) => connection.close(code, reason),
 			canReceive: (scope) => connection.canReceive(scope),
@@ -4021,7 +4396,8 @@ var BridgeConnection = class {
 			this.ws.terminate();
 		}
 	}
-	send(type, payload, id, seq) {
+	/** `body` 存在时按二进制帧发送（见 binary-frame.ts），头部仍是同一个 envelope。 */
+	send(type, payload, id, seq, body) {
 		const envelope = {
 			v: 2,
 			type,
@@ -4035,7 +4411,7 @@ var BridgeConnection = class {
 			this.close(1013, "client too slow");
 			return;
 		}
-		this.ws.send(JSON.stringify(envelope));
+		this.ws.send(body === void 0 ? JSON.stringify(envelope) : encodeBinaryFrame(envelope, body));
 	}
 	fail(id, code, message) {
 		this.send("s2c.error", {
@@ -4069,8 +4445,7 @@ var BridgeConnection = class {
 function normalizeFunnelConnectionLimit(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 16 ? value : 8;
 }
-//#endregion
-//#region src/tailscale-version.ts
+// src/tailscale-version.ts
 /**
 * 内嵌 helper 上报的 tailscale.com 模块版本。
 *
@@ -4093,8 +4468,7 @@ const MAX_TAILSCALE_VERSION_LENGTH = 80;
 function isTailscaleVersion(value) {
 	return typeof value === "string" && value.length <= MAX_TAILSCALE_VERSION_LENGTH && TAILSCALE_VERSION_PATTERN.test(value);
 }
-//#endregion
-//#region src/remote-supervisor.ts
+// src/remote-supervisor.ts
 const RESTART_DELAYS_MS = [
 	1e3,
 	2e3,
@@ -4523,8 +4897,7 @@ var RemoteSupervisor = class {
 		else if (next.phase === "error" || next.phase === "unavailable") this.options.log(`remote Funnel ${next.phase}: ${next.message ?? "unknown error"}`);
 	}
 };
-//#endregion
-//#region src/local-policy.ts
+// src/local-policy.ts
 const DEFAULT_LOCAL_PORT = 3098;
 const MIN_LOCAL_PORT = 1024;
 const MAX_LOCAL_PORT = 65535;
@@ -4542,8 +4915,7 @@ function localListenError(error, port) {
 	if (code === "EACCES") return `permission denied while opening local port ${port}`;
 	return error instanceof Error ? error.message : String(error);
 }
-//#endregion
-//#region src/config.ts
+// src/config.ts
 /** Operator-run relay used by distributed builds; overridable via config. */
 const DEFAULT_RELAY_URL = "https://pilot.hailab.dev";
 const Config = z.object({
@@ -4632,8 +5004,7 @@ function normalizeOptions(options) {
 	if (options && typeof options === "object") return plainConfig(options);
 	return plainConfig(Config(void 0) ?? {});
 }
-//#endregion
-//#region src/apns.ts
+// src/apns.ts
 /**
 * Minimal APNs provider client (HTTP/2) with zero npm dependencies.
 *
@@ -4870,8 +5241,7 @@ var ApnsClient = class {
 		return token.length <= 10 ? "…" : token.slice(0, 6) + "…" + token.slice(-4);
 	}
 };
-//#endregion
-//#region src/relay-url.ts
+// src/relay-url.ts
 /**
 * Normalize an operator-configured relay URL without a backtracking regular
 * expression. Scanning from the end keeps even pathological inputs linear.
@@ -4882,8 +5252,7 @@ function normalizeRelayBaseUrl(value) {
 	while (end > 0 && trimmed.charCodeAt(end - 1) === 47) end -= 1;
 	return end === trimmed.length ? trimmed : trimmed.slice(0, end);
 }
-//#endregion
-//#region src/relay-client.ts
+// src/relay-client.ts
 var RelayClient = class {
 	base;
 	token;
@@ -4976,8 +5345,7 @@ var RelayClient = class {
 		}
 	}
 };
-//#endregion
-//#region src/widget-push.ts
+// src/widget-push.ts
 /** Coalesce bursts and bound continuous updates, without starving the trailing
 * state. One scheduler per host, not per token or per streaming text frame. */
 var WidgetPushScheduler = class {
@@ -5014,8 +5382,7 @@ var WidgetPushScheduler = class {
 		this.timer = void 0;
 	}
 };
-//#endregion
-//#region src/live-activity.ts
+// src/live-activity.ts
 function liveActivityState(session) {
 	const total = Math.max(0, session?.todos?.total ?? session?.todoItems?.length ?? 0);
 	const done = Math.min(total, Math.max(0, session?.todos?.done ?? 0));
@@ -5087,8 +5454,7 @@ var LiveActivityPushManager = class {
 		this.scheduler.dispose();
 	}
 };
-//#endregion
-//#region src/push-policy.ts
+// src/push-policy.ts
 /** Prune only when the provider supplies an authoritative token-lifecycle verdict. */
 function shouldPrunePushToken(outcome, reason) {
 	return outcome === "invalid-token" && (reason === "Unregistered" || reason === "ExpiredToken");
@@ -5124,8 +5490,7 @@ function pushContent(notification, mode) {
 		body: bodies[notification.category] ?? "Open DeepPilot for an update."
 	};
 }
-//#endregion
-//#region src/relay-test.ts
+// src/relay-test.ts
 /**
 * Relay connectivity self-test used by the settings page "测试中继" button.
 *
@@ -5251,8 +5616,7 @@ async function runRelayProbe(options) {
 		steps
 	};
 }
-//#endregion
-//#region src/push-gateway.ts
+// src/push-gateway.ts
 /**
 * 推送网关（PushGateway）——离线推送的单一属主。
 *
@@ -5742,8 +6106,7 @@ var PushGateway = class {
 		await this.ensureRelayEnrolled(url);
 	}
 };
-//#endregion
-//#region src/phone-server.ts
+// src/phone-server.ts
 /**
 * A deliberately narrow transport listener. Both the LAN endpoint and the
 * loopback-only Funnel origin use this factory, so neither can accidentally
@@ -5822,8 +6185,7 @@ function closeServer(server) {
 	if (server === void 0 || !server.listening) return Promise.resolve();
 	return new Promise((resolve) => server.close(() => resolve()));
 }
-//#endregion
-//#region src/transport-reconciler.ts
+// src/transport-reconciler.ts
 var TransportReconciler = class {
 	spec;
 	config;
@@ -6051,8 +6413,7 @@ function createRemoteTransport(deps) {
 		statusOf: (supervisor) => supervisor?.status() ?? fallbackStatus()
 	}, deps.config, deps.log, fallbackStatus());
 }
-//#endregion
-//#region src/dispatch-journal.ts
+// src/dispatch-journal.ts
 /**
 * at-most-once dispatch journal：prompt 投递与非 prompt 变更的**同一个** module。
 *
@@ -6484,8 +6845,7 @@ function scheduleMutationCodec(persistValues) {
 		}))
 	};
 }
-//#endregion
-//#region src/notification-text.ts
+// src/notification-text.ts
 /**
 * 通知正文的纯文本投影。
 *
@@ -6528,8 +6888,7 @@ function decodePercentRuns(text) {
 		}
 	});
 }
-//#endregion
-//#region src/host-api.ts
+// src/host-api.ts
 /**
 * Subagent sessions are host-internal workers of a parent conversation.
 * They must never surface on the phone: not in the project/session list,
@@ -6552,8 +6911,231 @@ function unwrapStreamItem(item) {
 	} : nested;
 	return item;
 }
-//#endregion
-//#region src/host-capabilities.ts
+// src/quiet-completion.ts
+/**
+* 计划任务按需完成通知（#35）。
+*
+* heartbeat 式计划任务大多数轮次"一切正常"，每轮都推「任务完成」是噪音。插件
+* 给计划任务会话提供一个 Agent 工具：Agent 按任务提示词里的规则判断本轮不需要
+* 提醒时调用它，本轮成功结束就不发完成通知（不写 s2c.notify、不推 APNs）。
+* 失败、审批、提问照常通知；模型忘了调用时照常提醒，宁可多一次打扰也不漏报。
+*
+* 职责划分：
+* - scheduledTurnOf：同步读宿主会话日志，判定当前这一轮是否由计划任务投递驱动。
+*   工具的 `when` 与 `execute` 都在宿主进程内同步调用它，不依赖桥接层异步收到的
+*   事件（实测 `when` 求值时本轮 user/message 尚未落盘，桥接层也还没收到）。
+* - QuietCompletionTracker：计划任务会话的粘性集合，以及每个会话"本轮已请求静默"
+*   的记录；HostBridge 在 user/message 与 turn.end 处调用它。
+* - quietCompletionTool：面向模型的工具定义，由 index.ts 注册到宿主 `ctx.tools`。
+*
+* 只在宿主级计划任务（`schedulesHost`，DSH 0.2.2 起）上注册：0.2.1 的
+* `tools.register` 不支持 `when`，多余参数会被静默忽略，工具会变成全局可见。
+*/
+const QUIET_COMPLETION_TOOL_NAME = "deeppilot_skip_completion_notice";
+/** 往回扫描会话日志的上限：一轮内的事件远少于此，防止异常长轮次拖慢步骤准备。 */
+const MAX_TURN_SCAN_EVENTS = 2e3;
+function sessionLogOf(agent) {
+	const session = agent?.session;
+	if (!session || typeof session.id !== "string" || typeof session.seq !== "number" || typeof session.eventAt !== "function") return;
+	return session;
+}
+function sourceKindOf(value) {
+	const kind = value?.source?.kind;
+	return typeof kind === "string" ? kind : void 0;
+}
+/** 一次 inbox 拼接里插入的条目（按插入顺序）及其目标队列。 */
+function insertedOf(event) {
+	if (event.type !== "agent/inbox/spliced") return void 0;
+	const data = event.data;
+	const items = Array.isArray(data?.inserted) ? data.inserted : [];
+	return items.length > 0 ? {
+		target: data?.target,
+		items
+	} : void 0;
+}
+/**
+* 判定当前这一轮是否由计划任务投递驱动（同步读宿主会话日志，DSH 0.2.2-rc.1 实测形状）。
+*
+* 宿主把待处理消息先拼进 inbox（`agent/inbox/spliced`，带条目本体与目标队列），
+* `turn/start` 之后的拼接只是取走（`removedCount`，不带内容），条目随后才落成
+* user/message。因此按 inbox 插入判定：
+* - 本轮开始之后插入 `next-step` 的用户条目 = 用户中途插话，不算；
+* - 本轮开始时取走的是上一轮开始之后插入 `next-turn` 的条目；其中最后插入的一条
+*   来源为 `schedule` 才算（计划任务投递）；来源为 `user` 不算；
+* - 同为 `schedule` 来源的任务变更提示插入的是 `next-step`（宿主注明"不是投递"），不参与判定；
+* - 扫不到本轮 `turn/start` 时按普通轮次处理，宁可照常提醒。
+*/
+function scheduledTurnOf(session) {
+	const floor = Math.max(0, session.seq - MAX_TURN_SCAN_EVENTS);
+	let turn;
+	let seenTurnStart = false;
+	for (let seq = session.seq - 1; seq >= floor; seq--) {
+		const event = session.eventAt(seq);
+		if (!event) continue;
+		if (event.type === "turn/start") {
+			if (seenTurnStart) break;
+			seenTurnStart = true;
+			const value = event.data?.turn;
+			if (typeof value === "number") turn = value;
+			continue;
+		}
+		const splice = insertedOf(event);
+		if (splice === void 0) continue;
+		if (!seenTurnStart) {
+			if (splice.target === "next-step" && splice.items.some((item) => sourceKindOf(item) === "user")) return {
+				scheduled: false,
+				...turn !== void 0 ? { turn } : {}
+			};
+			continue;
+		}
+		if (splice.target !== "next-turn") continue;
+		for (let index = splice.items.length - 1; index >= 0; index--) {
+			const kind = sourceKindOf(splice.items[index]);
+			if (kind === "user") return {
+				scheduled: false,
+				...turn !== void 0 ? { turn } : {}
+			};
+			if (kind === "schedule") return {
+				scheduled: true,
+				...turn !== void 0 ? { turn } : {}
+			};
+		}
+	}
+	return {
+		scheduled: false,
+		...turn !== void 0 ? { turn } : {}
+	};
+}
+var QuietCompletionTracker = class {
+	/**
+	* 判定过计划任务轮次的会话。粘性集合：加入后不再移除，工具不按轮出现或消失。
+	* 宿主每次工具列表变化都会往会话追加一条工具增减消息并让提示词缓存失效，
+	* 按轮开关会让同一会话反复产生这类消息。
+	*/
+	scheduleSessions = /* @__PURE__ */ new Set();
+	quiet = /* @__PURE__ */ new Map();
+	/** 启动时用宿主任务列表里的投递目标会话预热，避免重启后工具先消失再出现。 */
+	seed(sessionIds) {
+		for (const sessionId of sessionIds) if (sessionId) this.scheduleSessions.add(sessionId);
+	}
+	isScheduleSession(sessionId) {
+		return this.scheduleSessions.has(sessionId);
+	}
+	/** 加入粘性集合；返回是否为新加入（调用方据此记一次日志）。 */
+	markScheduleSession(sessionId) {
+		if (this.scheduleSessions.has(sessionId)) return false;
+		this.scheduleSessions.add(sessionId);
+		return true;
+	}
+	/** 工具执行：只在计划任务轮次内生效。 */
+	requestQuiet(sessionId, verdict, seq) {
+		if (sessionId === void 0 || !verdict.scheduled) return {
+			suppressed: false,
+			note: "This run was not started by a scheduled task; the completion notification will be sent as usual."
+		};
+		this.quiet.set(sessionId, {
+			...verdict.turn !== void 0 ? { turn: verdict.turn } : {},
+			seq
+		});
+		return { suppressed: true };
+	}
+	/**
+	* 桥接层观察到 user/message：用户在请求静默之后插话（日志位置更晚）就撤销静默，
+	* 本轮照常提醒。计划任务与注入上下文不影响。
+	*/
+	noteUserMessage(sessionId, sourceKind, seq) {
+		const request = this.quiet.get(sessionId);
+		if (request === void 0 || sourceKind !== "user") return;
+		if (seq === void 0 || seq > request.seq) this.quiet.delete(sessionId);
+	}
+	/**
+	* turn.end 时调用。返回 true 表示本轮完成通知应被抑制：成功结束、且本轮请求过静默。
+	* 轮次号能对上时按轮次号判定；迟到的上一轮 turn.end 保留本轮的请求。
+	*/
+	consumeTurnEnd(sessionId, ok, turn, seq) {
+		const request = this.quiet.get(sessionId);
+		if (request === void 0) return false;
+		if (turn !== void 0 && request.turn !== void 0) {
+			if (turn < request.turn) return false;
+			this.quiet.delete(sessionId);
+			return ok && turn === request.turn;
+		}
+		if (seq !== void 0 && seq < request.seq) return false;
+		this.quiet.delete(sessionId);
+		return ok;
+	}
+};
+const DESCRIPTION = [
+	"Call this during a scheduled run only when the task prompt says the user does not need to be notified",
+	"for results like this one. It suppresses only this run's \"task completed\" notification; approvals,",
+	"questions and errors still notify. Do not call it if anything needs the user's attention, or if the",
+	"prompt gives no such rule."
+].join(" ");
+/** reason 归一化：非字符串按空串处理，去首尾空白并截断。 */
+function normalizeReason(raw) {
+	const text = typeof raw === "string" ? raw.trim() : "";
+	return text.length > 200 ? text.slice(0, 200) : text;
+}
+/**
+* 面向模型的工具定义（宿主 ToolDefinition 原始形状：JSON Schema 参数、输出 schema
+* 与 render、execute）。`log` 只记会话 ID、结果与 reason 长度：reason 由模型撰写，
+* 可能引用结果内容，按插件日志约定不打正文。
+*/
+function quietCompletionTool(tracker, log = () => {}) {
+	return {
+		name: QUIET_COMPLETION_TOOL_NAME,
+		description: DESCRIPTION,
+		parameters: {
+			type: "object",
+			additionalProperties: false,
+			required: ["reason"],
+			properties: { reason: {
+				type: "string",
+				description: `Why this run does not need the user's attention (at most 200 characters).`
+			} }
+		},
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: false,
+				required: ["suppressed"],
+				properties: {
+					suppressed: { type: "boolean" },
+					note: { type: "string" }
+				}
+			},
+			render(_args, value) {
+				return [{
+					type: "text",
+					text: value.suppressed ? "The completion notification for this run will not be sent." : value.note ?? "The completion notification will be sent as usual."
+				}];
+			}
+		},
+		async execute(args, exec) {
+			const session = sessionLogOf(exec.agent);
+			const reason = normalizeReason(args?.reason);
+			const result = session === void 0 ? tracker.requestQuiet(void 0, { scheduled: false }, 0) : tracker.requestQuiet(session.id, scheduledTurnOf(session), session.seq);
+			log(`quiet completion requested session=${session?.id ?? "?"} suppressed=${result.suppressed} reasonChars=${reason.length}`);
+			return result;
+		}
+	};
+}
+/**
+* 注册工具。`when`：粘性集合内的会话直接放行；否则同步判定本轮是否计划任务轮次，
+* 是则加入集合（首轮即可见，`new` 目标每次新建的会话同样可见）。普通会话看不到。
+* 返回宿主给的注销函数。
+*/
+function registerQuietCompletionTool(tools, tracker, log = () => {}) {
+	return tools.register(quietCompletionTool(tracker, log), { when: (context) => {
+		const session = sessionLogOf(context.agent);
+		if (session === void 0) return false;
+		if (tracker.isScheduleSession(session.id)) return true;
+		if (!scheduledTurnOf(session).scheduled) return false;
+		if (tracker.markScheduleSession(session.id)) log(`quiet completion: session joined scheduled set session=${session.id}`);
+		return true;
+	} });
+}
+// src/host-capabilities.ts
 const pluginUpdateProbes = /* @__PURE__ */ new WeakMap();
 function setPluginUpdateProbe(proxy, probe) {
 	if (probe) pluginUpdateProbes.set(proxy, probe);
@@ -6569,6 +7151,7 @@ const HOST_CAPABILITY_PROBES = {
 	sessionRestore: (proxy) => typeof proxy.workspace?.unarchiveSession === "function",
 	projectSelection: (proxy) => typeof proxy.workspace?.list === "function" && typeof proxy.workspace?.create === "function",
 	schedules: (proxy) => proxy.schedule !== void 0,
+	schedulesHost: (proxy) => proxy.schedule?.mode === "host",
 	promptQueue: (proxy) => typeof proxy.sessions.updateQueue === "function",
 	sessionMarkdown: (proxy) => proxy.commands?.markdownAvailable === true && typeof proxy.commands?.export === "function",
 	assistantStream: (proxy) => proxy.assistantStreamAvailable === true,
@@ -6582,6 +7165,7 @@ function capabilityBits(proxy, pushOutlet) {
 	return {
 		historyPaging: true,
 		replay: true,
+		binaryFrames: true,
 		approvals: true,
 		questions: true,
 		pendingSnapshot: true,
@@ -6595,6 +7179,7 @@ function capabilityBits(proxy, pushOutlet) {
 		sessionRestore: HOST_CAPABILITY_PROBES.sessionRestore(proxy),
 		projectSelection: HOST_CAPABILITY_PROBES.projectSelection(proxy),
 		schedules: HOST_CAPABILITY_PROBES.schedules(proxy),
+		schedulesHost: HOST_CAPABILITY_PROBES.schedulesHost(proxy),
 		promptQueue: HOST_CAPABILITY_PROBES.promptQueue(proxy),
 		sessionMarkdown: HOST_CAPABILITY_PROBES.sessionMarkdown(proxy),
 		assistantStream: HOST_CAPABILITY_PROBES.assistantStream(proxy),
@@ -6605,8 +7190,7 @@ function capabilityBits(proxy, pushOutlet) {
 		deviceRevoke: true
 	};
 }
-//#endregion
-//#region src/prompt-queue.ts
+// src/prompt-queue.ts
 /**
 * 运行中排队与转向（PROTOCOL.md「运行中排队与转向扩展」）的纯函数部分。
 *
@@ -6857,8 +7441,7 @@ var AssistantStream = class {
 		this.attempts.clear();
 	}
 };
-//#endregion
-//#region src/host-bridge.ts
+// src/host-bridge.ts
 const MAX_RING_DEFAULT = 2e3;
 /**
 * Process-wide bridge state: session mirror, pending approvals/questions,
@@ -6880,6 +7463,8 @@ var HostBridge = class {
 	* and restore them. Excluded from `summaries` and from the live broadcast. */
 	archivedSummaries = /* @__PURE__ */ new Map();
 	subagentSessionIds = /* @__PURE__ */ new Set();
+	/** 计划任务按需完成通知（quiet-completion.ts）：index.ts 用它注册 Agent 工具。 */
+	quietCompletion = new QuietCompletionTracker();
 	/**
 	* 每个会话最近一次已知的队列（inbox 投影的折叠结果）及其指纹。来源是实时
 	* 投影通知或打开会话时读到的基线；指纹用来丢掉内容没变的重复通知。
@@ -7127,6 +7712,35 @@ var HostBridge = class {
 		this.runMuxStream();
 		this.refreshSummaries();
 	}
+	/**
+	* 用宿主任务列表里的投递目标会话预热计划任务会话集合，避免插件重启后工具
+	* 先消失、等下一次投递再出现（每次变化都会给会话追加工具增减消息）。
+	* `new` 目标没有固定会话，只能从最近一次投递回执里取。失败只记日志：集合仍会
+	* 在下一次投递时补上。由 index.ts 在 schedule 服务就绪、注册工具时调用。
+	*/
+	async seedQuietCompletionSessions() {
+		if (this.hostSchedule === void 0) return;
+		const sessionIds = [];
+		let offset = 0;
+		for (;;) {
+			const result = await this.listHostSchedules({
+				limit: HOST_SCHEDULE_PAGE_SIZE,
+				offset
+			});
+			if (!result.ok) {
+				this.log?.(`quiet completion seed skipped: ${result.code}`);
+				return;
+			}
+			for (const task of result.value.tasks) {
+				if (task.target.kind !== "new") sessionIds.push(task.target.sessionId);
+				if (task.lastDelivery) sessionIds.push(task.lastDelivery.targetSessionId);
+			}
+			offset += result.value.tasks.length;
+			if (result.value.tasks.length === 0 || offset >= result.value.total) break;
+		}
+		if (this.disposed) return;
+		this.quietCompletion.seed(sessionIds);
+	}
 	dispose() {
 		if (this.disposed) return;
 		this.disposed = true;
@@ -7217,6 +7831,7 @@ var HostBridge = class {
 				if (event.type === "turn/end") this.assistantStream.abandon(sessionId);
 				if (event.type === "agent-preset/selected") this.record("s2c.skills.changed", { sessionId });
 				this.noteActivity(sessionId, event);
+				if (event.type === "user/message") this.quietCompletion.noteUserMessage(sessionId, userMessageSourceKind(event.data), event.seq);
 				this.captureAssistantText(sessionId, event);
 				const projection = projectEvent(sessionId, event);
 				this.captureActivity(sessionId, event, projection?.data.tool);
@@ -7229,7 +7844,12 @@ var HostBridge = class {
 						...streamId && projection.kind === "message.final" ? { streamId } : {}
 					}
 				});
-				if (projection?.kind === "turn.end") this.emitTurnCompletedNotify(sessionId, projection.data.ok === true);
+				if (projection?.kind === "turn.end") {
+					const ok = projection.data.ok === true;
+					const turn = event.data?.turn;
+					if (this.quietCompletion.consumeTurnEnd(sessionId, ok, typeof turn === "number" ? turn : void 0, event.seq)) this.log?.(`completion notice skipped by scheduled run session=${sessionId}`);
+					else this.emitTurnCompletedNotify(sessionId, ok);
+				}
 				break;
 			}
 			case "session/projection": {
@@ -8182,6 +8802,17 @@ var HostBridge = class {
 			replayed: result.replayed
 		};
 	}
+	/**
+	* 当前 adapter 是否宿主级计划任务模型。
+	*
+	* 能力位 `schedulesHost`（host-capabilities.ts）与新帧、旧帧映射全部读这一个
+	* 判别位：探测只发生一次（DshApiProxy.resolveSchedule），这里不再看控制器
+	* 方法，也不看版本号字符串。
+	*/
+	get hostSchedule() {
+		const schedule = this.apiProxy.schedule;
+		return schedule?.mode === "host" ? schedule : void 0;
+	}
 	async listSchedules(sessionId) {
 		const schedule = this.apiProxy.schedule;
 		if (schedule === void 0) return {
@@ -8189,6 +8820,7 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") return this.listHostSchedulesAsLegacy(schedule, sessionId);
 		try {
 			const response = await schedule.list({
 				rpcId: randomUUID(),
@@ -8212,15 +8844,376 @@ var HostBridge = class {
 			};
 		}
 	}
-	async scheduleHistory(sessionId, id, limit, before) {
-		const schedule = this.apiProxy.schedule;
+	/** 宿主级列表 -> 旧会话级视图：过滤 session 目标、丢弃 ended、按 scheduledAt 升序。 */
+	async listHostSchedulesAsLegacy(schedule, sessionId) {
+		try {
+			const tasks = [];
+			let offset = 0;
+			for (;;) {
+				const response = await schedule.list({
+					rpcId: randomUUID(),
+					payload: {
+						limit: HOST_SCHEDULE_PAGE_SIZE,
+						offset
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule list returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const page = response.result.value;
+				tasks.push(...page.tasks);
+				offset += page.tasks.length;
+				if (page.tasks.length === 0 || offset >= page.total) break;
+			}
+			const views = [];
+			for (const task of tasks) {
+				if (task.target.kind !== "session" || task.target.sessionId !== sessionId) continue;
+				if (task.status === "ended") continue;
+				const view = toLegacyScheduleView(task);
+				if (view !== void 0) views.push(view);
+			}
+			views.sort((left, right) => left.scheduledAt < right.scheduledAt ? -1 : left.scheduledAt > right.scheduledAt ? 1 : 0);
+			return {
+				ok: true,
+				value: views
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async listHostSchedules(request = {}) {
+		const schedule = this.hostSchedule;
 		if (schedule === void 0) return {
 			ok: false,
 			code: "E_UNSUPPORTED",
-			message: "schedules unavailable on this host version"
+			message: "host-level schedules unavailable on this host version"
 		};
 		try {
-			const response = await schedule.history({
+			const response = await schedule.list({
+				rpcId: randomUUID(),
+				payload: request
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host list returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async viewHostSchedule(id) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.view({
+				rpcId: randomUUID(),
+				payload: { id }
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host view returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			return {
+				ok: true,
+				value: value.task
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async createHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const { clientRequestId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+			const response = await schedule.create({
+				rpcId: randomUUID(),
+				payload: {
+					title: request.title,
+					prompt: request.prompt,
+					timing: request.timing,
+					...request.target !== void 0 ? { target: request.target } : {}
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host create returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async editHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const { clientRequestId, ...request } = payload;
+		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+			const expected = request.expectedUpdatedAt !== void 0 ? { expectedUpdatedAt: request.expectedUpdatedAt } : {};
+			const response = await schedule.edit({
+				rpcId: randomUUID(),
+				payload: request.action === "update" ? {
+					id: request.id,
+					action: "update",
+					patch: request.patch,
+					...expected
+				} : {
+					id: request.id,
+					action: "delete",
+					...expected
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host edit returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "conflict") return {
+				ok: false,
+				code: "E_BUSY",
+				message: "schedule changed since it was read"
+			};
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			if (request.action === "delete") {
+				if (value.kind !== "deleted") return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned an updated task"
+				};
+				return {
+					ok: true,
+					value: {
+						deleted: true,
+						id: value.id
+					}
+				};
+			}
+			if (value.kind !== "task") return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule update returned a deletion"
+			};
+			return {
+				ok: true,
+				value: { task: value.task }
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async runHostSchedule(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, { id: payload.id }, async () => {
+			const response = await schedule.run({
+				rpcId: randomUUID(),
+				payload: { id: payload.id }
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule host run returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			const value = response.result.value;
+			if (value.kind === "pending") return {
+				ok: false,
+				code: "E_BUSY",
+				message: "schedule execution already pending"
+			};
+			if (value.kind === "not-found") return {
+				ok: false,
+				code: "E_NOT_FOUND",
+				message: "schedule not found"
+			};
+			return {
+				ok: true,
+				value: value.task
+			};
+		});
+		if (result.ok) {
+			this.record("s2c.schedule.changed", {});
+			return {
+				ok: true,
+				value: result.value,
+				replayed: result.replayed
+			};
+		}
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	/**
+	* 删除宿主上全部已结束（`status="ended"`）的任务，返回删除条数。
+	*
+	* 与其他变更帧共用 scheduleMutations journal：同一 clientRequestId 重放时直接回放
+	* 首次结果，不会再删一次。成功后广播 `s2c.schedule.changed`；失败时同样广播——上游
+	* 文档说明失败的批次无法确定哪些行已删除，客户端应重新读取列表。
+	*/
+	async deleteEndedHostSchedules(deviceId, payload) {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, { operation: "deleteEnded" }, async () => {
+			const response = await schedule.deleteEnded({
+				rpcId: randomUUID(),
+				payload: {}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule delete ended returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		});
+		this.record("s2c.schedule.changed", {});
+		if (result.ok) return {
+			ok: true,
+			value: result.value ?? {},
+			replayed: result.replayed
+		};
+		return {
+			ok: false,
+			code: result.code,
+			message: result.message ?? result.code,
+			replayed: result.replayed
+		};
+	}
+	async scheduleLimits() {
+		const schedule = this.hostSchedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "host-level schedules unavailable on this host version"
+		};
+		try {
+			const response = await schedule.limits({
+				rpcId: randomUUID(),
+				payload: {}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule limits returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+	}
+	async scheduleHistory(sessionId, id, limit, before) {
+		const schedule = this.apiProxy.schedule;
+		if (schedule === void 0) return {
+			ok: false,
+			code: "E_UNSUPPORTED",
+			message: "schedules unavailable on this host version"
+		};
+		if (schedule.mode === "host") try {
+			const response = await schedule.history({
+				rpcId: randomUUID(),
+				payload: {
+					id,
+					limit,
+					...before !== void 0 ? { before } : {}
+				}
+			});
+			if (!response.result) return {
+				ok: false,
+				code: "E_INTERNAL",
+				message: "schedule history returned no result"
+			};
+			if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+			return {
+				ok: true,
+				value: response.result.value
+			};
+		} catch (error) {
+			return wireErrorOf("schedule", hostFailureOf(error, "internal"));
+		}
+		try {
+			const response = await schedule.history({
 				rpcId: randomUUID(),
 				payload: {
 					sessionId,
@@ -8254,6 +9247,68 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") {
+			const { clientRequestId, sessionId, title, prompt, ...selectors } = payload;
+			const timing = hostTimingFromLegacySelector(selectors);
+			if (timing === void 0) return {
+				ok: false,
+				code: "E_PROTOCOL",
+				message: "unsupported schedule selector"
+			};
+			const request = {
+				title,
+				prompt,
+				timing,
+				target: {
+					kind: "session",
+					sessionId
+				}
+			};
+			const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
+				const response = await schedule.create({
+					rpcId: randomUUID(),
+					payload: {
+						title,
+						prompt,
+						timing,
+						target: {
+							kind: "session",
+							sessionId
+						}
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule create returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const legacy = toLegacyScheduleView(response.result.value);
+				if (legacy === void 0) return {
+					ok: false,
+					code: "E_PROTOCOL",
+					message: "schedule cannot be represented in the session-scoped view"
+				};
+				return {
+					ok: true,
+					value: legacy
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const { clientRequestId, sessionId, ...request } = payload;
 		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, {
 			sessionId,
@@ -8299,6 +9354,106 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") {
+			const request = {
+				sessionId: payload.sessionId,
+				id: payload.id,
+				expected: payload.expected,
+				title: payload.title,
+				prompt: payload.prompt,
+				change: payload.change
+			};
+			const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, request, async () => {
+				const current = await schedule.view({
+					rpcId: randomUUID(),
+					payload: { id: payload.id }
+				});
+				if (!current.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule view returned no result"
+				};
+				if (!current.result.ok) return wireErrorOf("schedule", current.result.error);
+				if (current.result.value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				const currentTask = current.result.value.task;
+				if (!legacyScheduleMatchesExpected(currentTask, payload.expected)) return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				const patch = hostPatchFromLegacyUpdate(payload);
+				if (Object.keys(patch).length === 0) {
+					const legacy = toLegacyScheduleView(currentTask);
+					if (legacy === void 0) return {
+						ok: false,
+						code: "E_PROTOCOL",
+						message: "schedule cannot be represented in the session-scoped view"
+					};
+					return {
+						ok: true,
+						value: legacy
+					};
+				}
+				const response = await schedule.edit({
+					rpcId: randomUUID(),
+					payload: {
+						id: payload.id,
+						action: "update",
+						patch
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule edit returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const value = response.result.value;
+				if (value.kind === "conflict") return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				if (value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				if (value.kind !== "task") return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule edit returned an unexpected deletion"
+				};
+				const legacy = toLegacyScheduleView(value.task);
+				if (legacy === void 0) return {
+					ok: false,
+					code: "E_PROTOCOL",
+					message: "schedule cannot be represented in the session-scoped view"
+				};
+				return {
+					ok: true,
+					value: legacy
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const { clientRequestId, ...request } = payload;
 		const result = await this.scheduleMutations.dispatch(deviceId, clientRequestId, request, async () => {
 			const response = await schedule.update({
@@ -8344,6 +9499,63 @@ var HostBridge = class {
 			code: "E_UNSUPPORTED",
 			message: "schedules unavailable on this host version"
 		};
+		if (schedule.mode === "host") {
+			const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, {
+				sessionId: payload.sessionId,
+				id: payload.id
+			}, async () => {
+				const response = await schedule.edit({
+					rpcId: randomUUID(),
+					payload: {
+						id: payload.id,
+						action: "delete"
+					}
+				});
+				if (!response.result) return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned no result"
+				};
+				if (!response.result.ok) return wireErrorOf("schedule", response.result.error);
+				const value = response.result.value;
+				if (value.kind === "deleted") return {
+					ok: true,
+					value: {
+						id: value.id,
+						deleted: true
+					}
+				};
+				if (value.kind === "not-found") return {
+					ok: false,
+					code: "E_NOT_FOUND",
+					message: "schedule not found"
+				};
+				if (value.kind === "conflict") return {
+					ok: false,
+					code: "E_BUSY",
+					message: "schedule changed since it was read"
+				};
+				return {
+					ok: false,
+					code: "E_INTERNAL",
+					message: "schedule delete returned an updated task"
+				};
+			});
+			if (result.ok) {
+				this.record("s2c.schedule.changed", {});
+				return {
+					ok: true,
+					value: result.value,
+					replayed: result.replayed
+				};
+			}
+			return {
+				ok: false,
+				code: result.code,
+				message: result.message ?? result.code,
+				replayed: result.replayed
+			};
+		}
 		const result = await this.scheduleMutations.dispatch(deviceId, payload.clientRequestId, {
 			sessionId: payload.sessionId,
 			id: payload.id
@@ -8728,8 +9940,236 @@ function projectSessionModels(value) {
 	};
 }
 /** Project a history page (raw events) into MessageProjection rows. */
-//#endregion
-//#region src/dsh-remote-interactions.ts
+/** 宿主级列表全量拉取时的页大小（Host 允许的最大值）。 */
+const HOST_SCHEDULE_PAGE_SIZE = 500;
+/** 参与旧帧冲突比较的字段：`state`/`deliveryMode` 是派生字段，不参与。 */
+const LEGACY_PROJECTION_FIELDS = [
+	"id",
+	"kind",
+	"title",
+	"prompt",
+	"scheduledAt",
+	"afterSeconds",
+	"everySeconds",
+	"time",
+	"timeZone",
+	"weekdays",
+	"expression"
+];
+function isPlainObject$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function legacyNumber(...values) {
+	for (const value of values) if (typeof value === "number" && Number.isFinite(value)) return value;
+}
+function legacyString(...values) {
+	for (const value of values) if (typeof value === "string" && value.length > 0) return value;
+}
+function normalizeAtInput(value) {
+	if (typeof value === "string" && value.length > 0) return value;
+	if (!isPlainObject$1(value)) return void 0;
+	const date = legacyString(value.date);
+	const time = legacyString(value.time);
+	const zone = legacyString(value.time_zone, value.timeZone);
+	return date !== void 0 && time !== void 0 && zone !== void 0 ? {
+		date,
+		time,
+		time_zone: zone
+	} : void 0;
+}
+function normalizeLocalTime(value) {
+	if (!isPlainObject$1(value)) return void 0;
+	const time = legacyString(value.time);
+	const zone = legacyString(value.time_zone, value.timeZone);
+	return time !== void 0 && zone !== void 0 ? {
+		time,
+		time_zone: zone
+	} : void 0;
+}
+function normalizeWeekdays(value) {
+	if (!Array.isArray(value) || value.length === 0) return void 0;
+	const days = value.filter((day) => typeof day === "number" && Number.isSafeInteger(day) && day >= 1 && day <= 7);
+	return days.length === value.length ? days : void 0;
+}
+/** 旧创建帧的选择器 -> 宿主级 timing。旧 wire 校验保证恰好一个选择器。 */
+function hostTimingFromLegacySelector(selectors) {
+	const after = legacyNumber(selectors.after_seconds);
+	if (after !== void 0) return {
+		kind: "after",
+		after_seconds: after
+	};
+	if (selectors.at !== void 0) {
+		const at = normalizeAtInput(selectors.at);
+		return at === void 0 ? void 0 : {
+			kind: "at",
+			at
+		};
+	}
+	const every = legacyNumber(selectors.every_seconds);
+	if (every !== void 0) return {
+		kind: "every",
+		every_seconds: every
+	};
+	if (selectors.daily !== void 0) {
+		const daily = normalizeLocalTime(selectors.daily);
+		return daily === void 0 ? void 0 : {
+			kind: "daily",
+			daily
+		};
+	}
+	if (selectors.weekly !== void 0) {
+		if (!isPlainObject$1(selectors.weekly)) return void 0;
+		const time = normalizeLocalTime(selectors.weekly);
+		const weekdays = normalizeWeekdays(selectors.weekly.weekdays);
+		return time === void 0 || weekdays === void 0 ? void 0 : {
+			kind: "weekly",
+			weekly: {
+				...time,
+				weekdays
+			}
+		};
+	}
+	if (selectors.cron !== void 0) {
+		if (!isPlainObject$1(selectors.cron)) return void 0;
+		const expression = legacyString(selectors.cron.expression);
+		const zone = legacyString(selectors.cron.time_zone, selectors.cron.timeZone);
+		return expression === void 0 || zone === void 0 ? void 0 : {
+			kind: "cron",
+			cron: {
+				expression,
+				time_zone: zone
+			}
+		};
+	}
+}
+/**
+* 旧更新帧的 `change` -> 宿主级 timing。
+*
+* 两种历史写法都认：选择器式（`{kind:'daily', daily:{...}}`，与创建帧同形）与
+* 扁平式（`{kind:'daily', time, timeZone}` / `{kind:'cron', expression}`）。
+*/
+function hostTimingFromLegacyChange(change) {
+	if (!isPlainObject$1(change)) return void 0;
+	const selector = hostTimingFromLegacySelector(change);
+	if (selector !== void 0) return selector;
+	switch (change.kind) {
+		case "daily": {
+			const time = legacyString(change.time);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			return time === void 0 || zone === void 0 ? void 0 : {
+				kind: "daily",
+				daily: {
+					time,
+					time_zone: zone
+				}
+			};
+		}
+		case "weekly": {
+			const time = legacyString(change.time);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			const weekdays = normalizeWeekdays(change.weekdays);
+			return time === void 0 || zone === void 0 || weekdays === void 0 ? void 0 : {
+				kind: "weekly",
+				weekly: {
+					time,
+					time_zone: zone,
+					weekdays
+				}
+			};
+		}
+		case "cron": {
+			const expression = legacyString(change.expression);
+			const zone = legacyString(change.time_zone, change.timeZone);
+			return expression === void 0 || zone === void 0 ? void 0 : {
+				kind: "cron",
+				cron: {
+					expression,
+					time_zone: zone
+				}
+			};
+		}
+		case "rrule": {
+			const rrule = legacyString(change.rrule);
+			return rrule === void 0 ? void 0 : {
+				kind: "rrule",
+				rrule
+			};
+		}
+		default: return;
+	}
+}
+/** 旧更新帧的 title/prompt/change -> 宿主级 patch。 */
+function hostPatchFromLegacyUpdate(payload) {
+	const patch = {};
+	if (typeof payload.title === "string") patch.title = payload.title;
+	if (typeof payload.prompt === "string") patch.prompt = payload.prompt;
+	const timing = hostTimingFromLegacyChange(payload.change);
+	if (timing !== void 0) patch.timing = timing;
+	return patch;
+}
+/**
+* 宿主级任务视图 -> 旧会话级视图。
+*
+* `state` 只由 `scheduledAt` 是否已过推导（PROTOCOL.md 映射表）；`rrule` 在旧枚举
+* 里没有对应 kind，返回 undefined 让调用方跳过——旧客户端按枚举解码列表，塞进
+* 未知 kind 会让整页解码失败，静默隐藏比让旧 App 打不开列表更安全。
+*/
+function toLegacyScheduleView(task) {
+	const instant = Date.parse(task.scheduledAt);
+	const base = {
+		id: task.id,
+		title: task.title,
+		prompt: task.prompt,
+		scheduledAt: task.scheduledAt,
+		state: Number.isFinite(instant) && instant < Date.now() ? "overdue" : "scheduled",
+		deliveryMode: "host"
+	};
+	switch (task.timing.kind) {
+		case "after": return {
+			...base,
+			kind: "after",
+			afterSeconds: task.timing.after_seconds
+		};
+		case "at": return {
+			...base,
+			kind: "at"
+		};
+		case "every": return {
+			...base,
+			kind: "every",
+			everySeconds: task.timing.every_seconds
+		};
+		case "daily": return {
+			...base,
+			kind: "daily",
+			time: task.timing.daily.time,
+			timeZone: task.timing.daily.time_zone
+		};
+		case "weekly": return {
+			...base,
+			kind: "weekly",
+			time: task.timing.weekly.time,
+			timeZone: task.timing.weekly.time_zone,
+			weekdays: [...task.timing.weekly.weekdays]
+		};
+		case "cron": return {
+			...base,
+			kind: "cron",
+			expression: task.timing.cron.expression,
+			timeZone: task.timing.cron.time_zone
+		};
+		default: return;
+	}
+}
+/** 旧帧的冲突保护：当前任务的旧投影与客户端回传的 `expected` 逐字段相等。 */
+function legacyScheduleMatchesExpected(task, expected) {
+	const view = toLegacyScheduleView(task);
+	if (view === void 0) return false;
+	if (!isPlainObject$1(expected)) return false;
+	const actual = view;
+	return LEGACY_PROJECTION_FIELDS.every((key) => JSON.stringify(actual[key]) === JSON.stringify(expected[key]));
+}
+// src/dsh-remote-interactions.ts
 /**
 * Resident DSH Remote Events client for phone interactions.
 *
@@ -8917,8 +10357,7 @@ async function startDshRemoteInteractions(hostCtx, handlers) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/command-api.ts
+// src/command-api.ts
 /**
 * 给本域自造的失败带上 Host 风格的码。
 *
@@ -9065,8 +10504,7 @@ var DshCommandApi = class {
 		return response;
 	}
 };
-//#endregion
-//#region src/dsh-api-proxy.ts
+// src/dsh-api-proxy.ts
 /**
 * Adapter for the DSH rc.2 controller API.
 *
@@ -9075,6 +10513,14 @@ var DshCommandApi = class {
 * Session/Workspace controllers and Gateway-backed Remote Events, keeping
 * the phone protocol isolated from the Host API.
 */
+/**
+* 形状探测：宿主级模型只有 `edit`（没有 `update`）。不按版本号字符串判断——
+* 版本号无法说明 Schedule bundle 是否挂载、也无法覆盖回退组合。
+*/
+function isHostScheduleController(controller) {
+	const value = controller;
+	return typeof value.edit === "function" && typeof value.update !== "function";
+}
 /** Direct-controller adapter with the shape HostBridge consumes. */
 var DshApiProxy = class {
 	ctx;
@@ -9145,14 +10591,16 @@ var DshApiProxy = class {
 		const controller = this.ctx.get("schedule");
 		if (controller === void 0) return;
 		this.scheduleController = controller;
-		this.scheduleApi = this.createScheduleApi(controller);
+		this.scheduleApi = isHostScheduleController(controller) ? this.createHostScheduleApi(controller) : this.createLegacyScheduleApi(controller);
 	}
 	get schedule() {
 		this.resolveSchedule();
 		return this.scheduleApi;
 	}
-	createScheduleApi(controller) {
+	/** 会话级适配器：行为与宿主级扩展加入前逐字节一致，只多一个判别位。 */
+	createLegacyScheduleApi(controller) {
 		return {
+			mode: "legacy",
 			list: async (request) => this.call(async () => ({
 				sessionId: request.payload.sessionId,
 				tasks: (await controller.list({ sessionId: request.payload.sessionId })).map(toScheduleTask)
@@ -9201,6 +10649,83 @@ var DshApiProxy = class {
 		};
 	}
 	/**
+	* 宿主级适配器：把 DSH `ScheduleService` 的分页列表/结果对象归一化成 Bridge
+	* 消费的稳定视图。
+	*
+	* 失败分两类：`view/edit/run/history` 的「找不到」是**结果对象**里的 code
+	* （非变更 miss，不抛错），这里翻译成 outcome 或带 code 的 Error；
+	* `create/edit/run` 的输入非法与目标已归档是 RemoteError 抛出，由
+	* `this.call` 收成 `{code}`，再由 Bridge 按错误词表映射。
+	*/
+	createHostScheduleApi(controller) {
+		return {
+			mode: "host",
+			list: async (request) => this.call(async () => {
+				const payload = request.payload ?? {};
+				const value = await controller.list({
+					...payload.active !== void 0 ? { active: payload.active } : {},
+					...payload.limit !== void 0 ? { limit: payload.limit } : {},
+					...payload.offset !== void 0 ? { offset: payload.offset } : {}
+				});
+				const items = Array.isArray(value.items) ? value.items : [];
+				return {
+					tasks: items.map(toHostScheduleTask),
+					shown: finiteCount(value.shown, items.length),
+					total: finiteCount(value.total, items.length),
+					limit: finiteCount(value.limit, payload.limit ?? 100),
+					offset: finiteCount(value.offset, payload.offset ?? 0)
+				};
+			}),
+			view: async (request) => this.call(async () => {
+				return toHostScheduleViewOutcome(await controller.view({ id: request.payload.id }), request.payload.id);
+			}),
+			create: async (request) => this.call(async () => {
+				const payload = request.payload;
+				return toHostScheduleTask(await controller.create({
+					title: payload.title,
+					prompt: payload.prompt,
+					timing: payload.timing,
+					...payload.target !== void 0 ? { target: normalizeTargetRequest(payload.target) } : {}
+				}));
+			}),
+			edit: async (request) => this.call(async () => {
+				const payload = request.payload;
+				const expected = payload.expectedUpdatedAt !== void 0 ? { expectedUpdatedAt: payload.expectedUpdatedAt } : {};
+				const edit = payload.action === "update" ? {
+					id: payload.id,
+					action: "update",
+					patch: normalizeHostPatch(payload.patch),
+					...expected
+				} : {
+					id: payload.id,
+					action: "delete",
+					...expected
+				};
+				return toHostScheduleEditOutcome(await controller.edit(edit), payload.id);
+			}),
+			run: async (request) => this.call(async () => {
+				return toHostScheduleRunOutcome(await controller.run({ id: request.payload.id }), request.payload.id);
+			}),
+			history: async (request) => this.call(async () => {
+				const value = await controller.history({
+					id: request.payload.id,
+					limit: request.payload.limit,
+					...request.payload.before !== void 0 ? { before: request.payload.before } : {}
+				});
+				if (typeof value.code === "string") throw Object.assign(new Error(String(value.code)), { code: value.code });
+				return toScheduleHistory(value);
+			}),
+			limits: async () => this.call(async () => {
+				const value = controller.deliveryLimits();
+				return { newSessionIntervalSeconds: Math.max(0, Math.trunc(Number(value?.newSessionIntervalSeconds) || 0)) };
+			}),
+			deleteEnded: async () => this.call(async () => {
+				const value = await controller.deleteInactive();
+				return { deleted: Math.max(0, Math.trunc(Number(value?.deleted) || 0)) };
+			})
+		};
+	}
+	/**
 	* Decide whether this Gateway Client can surface a phone card. The decision
 	* fails open to false so a broken device registry delegates this delivery
 	* while the official Web Client remains able to answer.
@@ -9613,6 +11138,206 @@ function toScheduleHistory(value) {
 		...typeof row.nextBefore === "string" ? { nextBefore: row.nextBefore } : {}
 	};
 }
+/**
+* 请求侧 target：`new_once`/`new` 的会话由 Host 预留或新建，客户端若把查看结果
+* 里的 `sessionId` 原样回传，不向上游透传（Host 的创建/编辑请求没有这个字段）。
+*/
+function normalizeTargetRequest(value) {
+	if (value.kind === "session") return {
+		kind: "session",
+		sessionId: String(value.sessionId ?? "")
+	};
+	const create = toHostScheduleCreateSpec(value.create);
+	return {
+		kind: value.kind,
+		...create !== void 0 ? { create } : {}
+	};
+}
+/** 编辑补丁归一化：字段按契约逐个透传，target 走请求侧投影。 */
+function normalizeHostPatch(value) {
+	return {
+		...value.title !== void 0 ? { title: value.title } : {},
+		...value.prompt !== void 0 ? { prompt: value.prompt } : {},
+		...value.timing !== void 0 ? { timing: value.timing } : {},
+		...value.target !== void 0 ? { target: normalizeTargetRequest(value.target) } : {},
+		...value.active !== void 0 ? { active: value.active } : {}
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toRecord(value) {
+	return isRecord(value) ? value : {};
+}
+/** 非负安全整数；形状不符时退回 fallback（分页字段只用于展示）。 */
+function finiteCount(value, fallback) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : fallback;
+}
+function positiveSeconds(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+}
+function hostResultCode(value) {
+	return typeof value.code === "string" ? value.code : void 0;
+}
+/** 结果对象里的「非变更 miss」不是抛错，这里翻译成 outcome 或带 code 的 Error。 */
+function throwHostResultCode(code) {
+	throw Object.assign(new Error(code), { code });
+}
+function toHostScheduleCreateSpec(value) {
+	const row = toRecord(value);
+	const spec = {
+		...typeof row.cwd === "string" ? { cwd: row.cwd } : {},
+		...typeof row.agentPreset === "string" ? { agentPreset: row.agentPreset } : {}
+	};
+	return Object.keys(spec).length > 0 ? spec : void 0;
+}
+/**
+* 交付目标投影。`session` 与 `new_once` 带 sessionId（后者是创建时 Host 预留
+* 的会话）；`new` 每次投递新建会话。`create` 省略时按 Host 默认。
+*/
+function toHostScheduleTarget(value) {
+	const target = toRecord(value);
+	const create = toHostScheduleCreateSpec(target.create);
+	if (target.kind === "session") return {
+		kind: "session",
+		sessionId: String(target.sessionId ?? "")
+	};
+	if (target.kind === "new_once") return {
+		kind: "new_once",
+		sessionId: String(target.sessionId ?? ""),
+		...create !== void 0 ? { create } : {}
+	};
+	return {
+		kind: "new",
+		...create !== void 0 ? { create } : {}
+	};
+}
+function toHostScheduleReceipt(value) {
+	const row = toRecord(value);
+	return {
+		scheduledAt: String(row.scheduledAt ?? ""),
+		deliveredAt: String(row.deliveredAt ?? ""),
+		messageId: String(row.messageId ?? ""),
+		targetSessionId: String(row.targetSessionId ?? "")
+	};
+}
+/**
+* timing 反向投影：DSH 存储记录用 camelCase（`afterSeconds`/`timeZone`），wire
+* 用 PROTOCOL.md 的 snake_case 嵌套结构。
+*
+* `at` 存储后只剩 `scheduledAt`（原始绝对时刻不是独立字段），因此用排定时刻
+* 回填——对 active 的一次性任务它就是目标时刻。
+*/
+function toHostScheduleTiming(row) {
+	switch (row.kind) {
+		case "after": return {
+			kind: "after",
+			after_seconds: positiveSeconds(row.afterSeconds)
+		};
+		case "every": return {
+			kind: "every",
+			every_seconds: positiveSeconds(row.everySeconds)
+		};
+		case "daily": return {
+			kind: "daily",
+			daily: localTimeInput(row)
+		};
+		case "weekly": return {
+			kind: "weekly",
+			weekly: {
+				...localTimeInput(row),
+				weekdays: Array.isArray(row.weekdays) ? row.weekdays.filter((day) => typeof day === "number") : []
+			}
+		};
+		case "cron": return {
+			kind: "cron",
+			cron: {
+				expression: String(row.expression ?? ""),
+				time_zone: String(row.timeZone ?? "")
+			}
+		};
+		case "rrule": return {
+			kind: "rrule",
+			rrule: String(row.rrule ?? "")
+		};
+		default: return {
+			kind: "at",
+			at: String(row.scheduledAt ?? "")
+		};
+	}
+}
+function localTimeInput(row) {
+	return {
+		time: String(row.time ?? ""),
+		time_zone: String(row.timeZone ?? "")
+	};
+}
+/** Host `ScheduleCatalogEntry` -> wire `schedule.host.task`（丢弃 involvedSessionIds）。 */
+function toHostScheduleTask(value) {
+	const row = toRecord(value);
+	return {
+		id: String(row.id ?? ""),
+		title: String(row.title ?? ""),
+		prompt: String(row.prompt ?? ""),
+		timing: toHostScheduleTiming(row),
+		target: toHostScheduleTarget(row.target),
+		status: row.status === "paused" || row.status === "ended" ? row.status : "active",
+		scheduledAt: String(row.scheduledAt ?? ""),
+		...typeof row.createdAt === "string" ? { createdAt: row.createdAt } : {},
+		...typeof row.updatedAt === "string" ? { updatedAt: row.updatedAt } : {},
+		...typeof row.executionActive === "boolean" ? { executionActive: row.executionActive } : {},
+		...typeof row.deliveryFloorEndsAt === "string" ? { deliveryFloorEndsAt: row.deliveryFloorEndsAt } : {},
+		...isRecord(row.lastDelivery) ? { lastDelivery: toHostScheduleReceipt(row.lastDelivery) } : {}
+	};
+}
+function toHostScheduleViewOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
+function toHostScheduleEditOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_conflict") return {
+		kind: "conflict",
+		id
+	};
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	if (value.deleted === true) return {
+		kind: "deleted",
+		id: String(value.id ?? id)
+	};
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
+function toHostScheduleRunOutcome(value, id) {
+	const code = hostResultCode(value);
+	if (code === "schedule_execution_pending") return {
+		kind: "pending",
+		id
+	};
+	if (code === "schedule_not_found") return {
+		kind: "not-found",
+		id
+	};
+	if (code !== void 0) throwHostResultCode(code);
+	return {
+		kind: "task",
+		task: toHostScheduleTask(value)
+	};
+}
 async function readWorkspaceBaseline(controller) {
 	const abort = new AbortController();
 	const iterator = controller.follow(abort.signal)[Symbol.asyncIterator]();
@@ -9642,8 +11367,7 @@ async function projectModels(catalog, sessionId, list) {
 		failures: Array.isArray(value.failures) ? value.failures : []
 	};
 }
-//#endregion
-//#region src/report-service.ts
+// src/report-service.ts
 /**
 * The Typert receiver the Gateway resolves for the DeepPilot Bridge report.
 * Snapshot data stays non-secret; the token crosses the boundary only through
@@ -9689,8 +11413,7 @@ var DeepPilotReportService = class extends TypertRemoteService {
 		return this.pushTester();
 	}
 };
-//#endregion
-//#region src/report-wire.ts
+// src/report-wire.ts
 /** The npm package identity both contribution registrations claim. */
 const REPORT_REMOTE_PACKAGE = "dsh-deeppilot";
 /** Canonical `<namespace>/<method>` endpoint of the report Remote. */
@@ -10075,8 +11798,7 @@ const REPORT_HOST_CONTRIBUTION = {
 		}
 	]
 };
-//#endregion
-//#region src/report-remote.ts
+// src/report-remote.ts
 /**
 * Provide the report service and register its Remote descriptor. Rides an
 * optional `typert` inject: profiles without the web stack never activate it.
@@ -10088,8 +11810,7 @@ function applyReportRemote(ctx, snapshot, pairingStarter, deviceRevoker, deviceR
 		remoteCtx.effect(() => () => void unregister(), "dsh-deeppilot: report remote");
 	});
 }
-//#endregion
-//#region src/local-address.ts
+// src/local-address.ts
 function octetsOf(address) {
 	const octets = address.split(".").map(Number);
 	if (octets.length !== 4 || octets.some((value) => !Number.isInteger(value) || value < 0 || value > 255)) return null;
@@ -10140,8 +11861,7 @@ function localLANIPv4Addresses() {
 	candidates.sort((left, right) => priority(left.name) - priority(right.name) || left.name.localeCompare(right.name));
 	return [...new Set(candidates.map(({ address }) => address))];
 }
-//#endregion
-//#region src/update-check.ts
+// src/update-check.ts
 /**
 * Lightweight self-update check for dsh-deeppilot.
 *
@@ -10337,8 +12057,7 @@ var UpdateChecker = class {
 	/** No-op kept for API symmetry with the host lifecycle wiring. */
 	dispose() {}
 };
-//#endregion
-//#region src/phone-http.ts
+// src/phone-http.ts
 const CLIENT_IP_HEADER = "x-deeppilot-client-ip";
 function rejectUpgrade(socket, status, reason, retryAfterSeconds) {
 	const body = JSON.stringify({ error: reason });
@@ -10372,8 +12091,7 @@ function requestClientIdentity(req) {
 	}
 	return normalizedAddress(req.socket.remoteAddress) ?? "unknown";
 }
-//#endregion
-//#region src/lan-tls.ts
+// src/lan-tls.ts
 const LAN_TLS_COMMON_NAME = "dsh-deeppilot";
 const LAN_TLS_KEY_FILE = "key.pem";
 const LAN_TLS_CERT_FILE = "cert.pem";
@@ -10546,8 +12264,7 @@ async function writePrivate(path, contents) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 /**
 * dsh-deeppilot — data bridge between the DSH host and DeepPilot
 * clients. Owns independent, narrowly routed LAN (TLS-only, pinned by paired
@@ -11184,6 +12901,20 @@ function apply(ctx, options) {
 			if (state.bridge === bridge) state.bridge = void 0;
 			bridge.dispose();
 		}, "deeppilot: host streams");
+		apiCtx.inject(["tools", "schedule"], (sub) => {
+			if (bridge.capabilities.schedulesHost !== true) {
+				log("quiet completion tool not registered: host-level schedules unavailable");
+				return;
+			}
+			const tools = sub.tools;
+			if (typeof tools?.register !== "function") {
+				log("quiet completion tool not registered: tools service unavailable", "warn");
+				return;
+			}
+			sub.effect(() => registerQuietCompletionTool(tools, bridge.quietCompletion, (message) => log(message)), "deeppilot: quiet completion tool");
+			log("quiet completion tool registered");
+			bridge.seedQuietCompletionSessions();
+		});
 	});
 	ctx.effect(() => async () => {
 		closeAllConnections();
@@ -11197,7 +12928,6 @@ function apply(ctx, options) {
 		await diagnostics.dispose();
 	}, "deeppilot: process resources");
 }
-//#endregion
 export { Config, HostBridge, apply, inject, mayReceivePush, name, shouldPrunePushToken, shouldReEnrollRelayToken };
 
 //# sourceMappingURL=index.js.map