dsh-device-fleet 0.1.0-dev.13 → 0.1.0-dev.14

package/README.md

@@ -10,7 +10,8 @@ DeepSeek Harness 的设备联邦插件：把登录同一账号、且都安装本
 - ✅ **审批收件箱逻辑层（dev.7）**：`fleet_approvals` / `fleet_approve` / `fleet_deny`，ask 档排队、超时 fail-closed、once/ttl 授权、`fleet_simulate_request` 本机演练；Client 审批面板待做
 - ✅ **Room 逻辑层（dev.8，单机模拟）**：`room_create` / `room_add_local` / `room_send` / `room_messages` / `room_status` / `room_task_*` / `room_close`；本地真实 agent 参与者、寻址唤醒、Room Board 串行交接；单机仿真验证通过
 - ✅ **审批面板 UI（dev.12，已验证）**：Host `/device-fleet/approvals` HTTP 数据面 + Client 入口在 Settings 上方、居中审批对话框（允许一次/15 分钟/拒绝）；用户点击「允许」后 Host 列表清空，端到端闭环
-- ⏳ 远程参与者传输、房间视图、插件重载 rehydrate、SSE 推送（下一步）
+- ✅ **Fleet 控制台（dev.13，Phase A）**：Host `/device-fleet/overview`、`/rooms`、`/rooms/:id`；Room 持久化到 `$DSH_HOME/device-fleet/rooms.json` 并 rehydrate（插件重载不丢房间）；Client `sidebar.panellist` + `main` 面板，设备/房间/审批三 Tab
+- ⏳ Phase B 配置页（即时生效，无需重启）、Phase C 房间/配对交互、Phase D SSE/通知/i18n/a11y
 
 ## 安装（开发版）
 

package/client.js

@@ -501,6 +501,274 @@ window.__ModuleLoader__.load({
       );
     }
 
+    const inputStyle = {
+      width: '100%',
+      boxSizing: 'border-box',
+      padding: '5px 8px',
+      borderRadius: 6,
+      border: '1px solid var(--dsw-alias-border, #3a3a3a)',
+      background: 'transparent',
+      color: 'inherit',
+      fontSize: 13,
+    };
+    const labelStyle = { display: 'block', margin: '4px 0 10px' };
+    const labelTextStyle = { fontSize: 12, opacity: 0.72, marginBottom: 3 };
+
+    function Field({ label, hint, children }) {
+      return h('label', { style: labelStyle }, h('div', { style: labelTextStyle }, label), children, hint ? h('div', { style: { fontSize: 11, opacity: 0.55, marginTop: 2 } }, hint) : null);
+    }
+
+    function TextField({ label, value, onChange, hint, type = 'text' }) {
+      return h(Field, { label, hint }, h('input', { type, value: value ?? '', onChange: (event) => onChange(event.target.value), style: inputStyle }));
+    }
+
+    function NumberField({ label, value, onChange, hint }) {
+      return h(Field, { label, hint }, h('input', { type: 'number', value: value ?? 0, onChange: (event) => onChange(Number(event.target.value || 0)), style: inputStyle }));
+    }
+
+    function ToggleField({ label, checked, onChange }) {
+      return h('label', { style: { display: 'flex', alignItems: 'center', gap: 8, margin: '4px 0 10px', fontSize: 13 } },
+        h('input', { type: 'checkbox', checked: checked === true, onChange: (event) => onChange(event.target.checked) }),
+        h('span', null, label),
+      );
+    }
+
+    function SelectField({ label, value, options, onChange }) {
+      return h(Field, { label }, h('select', { value, onChange: (event) => onChange(event.target.value), style: inputStyle },
+        ...options.map((option) => h('option', { key: option, value: option }, option)),
+      ));
+    }
+
+    function configToDraft(config = {}) {
+      const execution = config.execution ?? {};
+      const policy = config.policy ?? {};
+      const approvals = config.approvals ?? {};
+      const direct = config.direct ?? {};
+      const relay = config.relay ?? {};
+      return {
+        deviceName: config.deviceName ?? '',
+        directHost: direct.host ?? '0.0.0.0',
+        directPort: direct.port ?? 0,
+        discovery: config.discovery !== false,
+        relayHost: relay.host ?? '',
+        relayPort: relay.port ?? 0,
+        relayDataPort: relay.dataPort ?? 0,
+        execCwd: execution.cwd ?? '',
+        execPreset: execution.agentPreset ?? '',
+        execShellTool: execution.shellTool ?? '',
+        execApprovalTimeoutMs: execution.approvalTimeoutMs ?? 60000,
+        execDelegateTimeoutMs: execution.delegateTimeoutMs ?? 180000,
+        execSubagentProvider: execution.subagentProvider ?? 'spawn',
+        rootsText: (policy.allowedRoots ?? []).join('\n'),
+        toolsText: (policy.allowedTools ?? []).join('\n'),
+        capRead: policy.capabilities?.read ?? 'auto',
+        capList: policy.capabilities?.list ?? 'auto',
+        capGrep: policy.capabilities?.grep ?? 'auto',
+        capFetch: policy.capabilities?.fetch ?? 'auto',
+        capRun: policy.capabilities?.run ?? 'ask',
+        capTool: policy.capabilities?.tool ?? 'deny',
+        capDelegate: policy.capabilities?.delegate ?? 'ask',
+        policyApprovalTtlMs: policy.approvalTtlMs ?? 900000,
+        approvalsTtlMs: approvals.ttlMs ?? 60000,
+        approvalsMaxPending: approvals.maxPending ?? 50,
+        autoApproveAsk: config.autoApproveAsk === true,
+        promptSection: config.promptSection !== false,
+        simulation: approvals.simulation === true,
+        dataDir: config.dataDir ?? '',
+      };
+    }
+
+    function draftToPatch(draft) {
+      return {
+        deviceName: draft.deviceName,
+        direct: { host: draft.directHost, port: draft.directPort },
+        discovery: draft.discovery,
+        relay: draft.relayHost && draft.relayPort > 0
+          ? { host: draft.relayHost, port: draft.relayPort, dataPort: draft.relayDataPort }
+          : null,
+        execution: {
+          cwd: draft.execCwd,
+          agentPreset: draft.execPreset,
+          shellTool: draft.execShellTool,
+          approvalTimeoutMs: draft.execApprovalTimeoutMs,
+          delegateTimeoutMs: draft.execDelegateTimeoutMs,
+          subagentProvider: draft.execSubagentProvider,
+        },
+        policy: {
+          allowedRoots: draft.rootsText.split('\n').map((item) => item.trim()).filter(Boolean),
+          allowedTools: draft.toolsText.split('\n').map((item) => item.trim()).filter(Boolean),
+          capabilities: {
+            read: draft.capRead,
+            list: draft.capList,
+            grep: draft.capGrep,
+            fetch: draft.capFetch,
+            run: draft.capRun,
+            tool: draft.capTool,
+            delegate: draft.capDelegate,
+          },
+          approvalTtlMs: draft.policyApprovalTtlMs,
+        },
+        approvals: {
+          ttlMs: draft.approvalsTtlMs,
+          maxPending: draft.approvalsMaxPending,
+          simulation: draft.simulation,
+        },
+        autoApproveAsk: draft.autoApproveAsk,
+        promptSection: draft.promptSection,
+      };
+    }
+
+    function FleetConfig() {
+      const [draft, setDraft] = useState(null);
+      const [status, setStatus] = useState('');
+      const [busy, setBusy] = useState(false);
+
+      const load = async () => {
+        try {
+          const response = await fetch('/device-fleet/config', { headers: { accept: 'application/json' } });
+          if (!response.ok) throw new Error('HTTP ' + response.status);
+          const data = await response.json();
+          setDraft(configToDraft(data.config));
+        } catch (problem) {
+          setStatus('加载配置失败：' + String(problem.message ?? problem));
+        }
+      };
+
+      useEffect(() => {
+        void load();
+      }, []);
+
+      if (!draft) return h('div', { style: { padding: 8, opacity: 0.7 } }, status || '加载中…');
+
+      const set = (key, value) => setDraft((current) => ({ ...current, [key]: value }));
+      const save = async () => {
+        setBusy(true);
+        setStatus('');
+        try {
+          const response = await fetch('/device-fleet/config', {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(draftToPatch(draft)),
+          });
+          const data = await response.json();
+          if (!response.ok) throw new Error(data.error ?? 'HTTP ' + response.status);
+          setDraft(configToDraft(data.config));
+          setStatus('已应用（无需重启插件或 DSH）');
+        } catch (problem) {
+          setStatus('保存失败：' + String(problem.message ?? problem));
+        } finally {
+          setBusy(false);
+        }
+      };
+
+      const sectionCard = (title, children, hint) =>
+        h('div', { style: { ...cardStyle, padding: 14 } },
+          h('div', { style: sectionTitle }, title),
+          hint ? h('div', { style: { fontSize: 11, opacity: 0.55, marginBottom: 8 } }, hint) : null,
+          children,
+        );
+
+      const capabilityFields = [
+        ['capRead', 'read 读取'],
+        ['capList', 'list 列目录'],
+        ['capGrep', 'grep 搜索'],
+        ['capFetch', 'fetch 取文件'],
+        ['capRun', 'run 执行命令'],
+        ['capTool', 'tool 原始工具'],
+        ['capDelegate', 'delegate 委派'],
+      ];
+      const twoCol = (left, right) => h('div', { style: { display: 'flex', gap: 12 } }, h('div', { style: { flex: 1 } }, left), h('div', { style: { flex: 1 } }, right));
+
+      return h('div', { style: { padding: '2px 2px 24px', maxWidth: 760 } },
+        h('div', { style: { display: 'flex', alignItems: 'center', gap: 10, marginBottom: 10, flexWrap: 'wrap' } },
+          h('strong', null, 'Device Fleet 配置'),
+          h('span', { style: { flex: 1 } }),
+          status ? h('span', { style: { fontSize: 12, opacity: 0.8 } }, status) : null,
+          h('button', {
+            type: 'button',
+            disabled: busy,
+            onClick: () => void save(),
+            style: {
+              padding: '6px 14px',
+              borderRadius: 7,
+              border: '1px solid var(--dsw-alias-accent, #2f6fed)',
+              background: 'var(--dsw-alias-accent, #2f6fed)',
+              color: '#fff',
+              cursor: busy ? 'default' : 'pointer',
+              opacity: busy ? 0.6 : 1,
+            },
+          }, busy ? '保存中…' : '保存并立即生效'),
+        ),
+        h('div', { style: { fontSize: 12, opacity: 0.6, marginBottom: 12 } }, '保存后立即对运行中的插件生效，不需要重启插件或 DSH。dataDir 为只读（启动路径）。'),
+        sectionCard('设备与网络',
+          h('div', null,
+            h(TextField, { label: '设备名称', value: draft.deviceName, onChange: (value) => set('deviceName', value) }),
+            twoCol(
+              h(TextField, { label: '直连绑定地址', value: draft.directHost, onChange: (value) => set('directHost', value) }),
+              h(NumberField, { label: '直连端口（0=随机）', value: draft.directPort, onChange: (value) => set('directPort', value) }),
+            ),
+            h(ToggleField, { label: '局域网发现（UDP 组播）', checked: draft.discovery, onChange: (value) => set('discovery', value) }),
+            h('div', { style: { ...labelTextStyle, marginTop: 10 } }, '自建 Relay（v2，可选）'),
+            twoCol(
+              h(TextField, { label: 'Relay host', value: draft.relayHost, onChange: (value) => set('relayHost', value) }),
+              h(NumberField, { label: 'Relay control 端口', value: draft.relayPort, onChange: (value) => set('relayPort', value) }),
+            ),
+            h(NumberField, { label: 'Relay data 端口', value: draft.relayDataPort, onChange: (value) => set('relayDataPort', value) }),
+          )),
+        sectionCard('执行上下文（远端调用/委派在本机执行时使用）',
+          h('div', null,
+            twoCol(
+              h(TextField, { label: '工作目录 cwd', value: draft.execCwd, onChange: (value) => set('execCwd', value) }),
+              h(TextField, { label: 'Agent Preset', value: draft.execPreset, onChange: (value) => set('execPreset', value) }),
+            ),
+            twoCol(
+              h(TextField, { label: 'shell 工具名', value: draft.execShellTool, onChange: (value) => set('execShellTool', value) }),
+              h(TextField, { label: '委派 subagent provider', value: draft.execSubagentProvider, onChange: (value) => set('execSubagentProvider', value) }),
+            ),
+            twoCol(
+              h(NumberField, { label: '审批超时 (ms)', value: draft.execApprovalTimeoutMs, onChange: (value) => set('execApprovalTimeoutMs', value) }),
+              h(NumberField, { label: '委派超时 (ms)', value: draft.execDelegateTimeoutMs, onChange: (value) => set('execDelegateTimeoutMs', value) }),
+            ),
+          )),
+        sectionCard('远端权限（Tool Policy：别人能对你做什么）',
+          h('div', null,
+            h(Field, { label: '允许访问的根目录（每行一个）' },
+              h('textarea', {
+                value: draft.rootsText,
+                onChange: (event) => set('rootsText', event.target.value),
+                rows: 3,
+                style: { ...inputStyle, fontFamily: 'ui-monospace, monospace', resize: 'vertical' },
+              }),
+            ),
+            h(Field, { label: '允许的原始工具（每行一个，配合 tool 能力）' },
+              h('textarea', {
+                value: draft.toolsText,
+                onChange: (event) => set('toolsText', event.target.value),
+                rows: 3,
+                style: { ...inputStyle, fontFamily: 'ui-monospace, monospace', resize: 'vertical' },
+              }),
+            ),
+            h('div', { style: { display: 'grid', gridTemplateColumns: '1fr 1fr', gap: '0 12px' } },
+              ...capabilityFields.map(([key, label]) =>
+                h(SelectField, { key, label, value: draft[key], options: ['auto', 'ask', 'deny'], onChange: (value) => set(key, value) }),
+              ),
+            ),
+            h(NumberField, { label: '一次授权的 TTL (ms)', value: draft.policyApprovalTtlMs, onChange: (value) => set('policyApprovalTtlMs', value) }),
+          )),
+        sectionCard('本地审批与提示',
+          h('div', null,
+            twoCol(
+              h(NumberField, { label: '审批请求超时 (ms)', value: draft.approvalsTtlMs, onChange: (value) => set('approvalsTtlMs', value) }),
+              h(NumberField, { label: '最多排队请求数', value: draft.approvalsMaxPending, onChange: (value) => set('approvalsMaxPending', value) }),
+            ),
+            h(ToggleField, { label: '自动批准所有审批请求（仅测试）', checked: draft.autoApproveAsk, onChange: (value) => set('autoApproveAsk', value) }),
+            h(ToggleField, { label: '系统提示词中的 Fleet 提示', checked: draft.promptSection, onChange: (value) => set('promptSection', value) }),
+            h(ToggleField, { label: '允许 fleet_simulate_request（测试用）', checked: draft.simulation, onChange: (value) => set('simulation', value) }),
+            h(TextField, { label: '状态目录 dataDir（只读，需重启）', value: draft.dataDir, onChange: () => {} }),
+          )),
+      );
+    }
+
     return {
       inject: ['slots'],
       apply(ctx) {
@@ -517,6 +785,13 @@ window.__ModuleLoader__.load({
           ctx.slots.register({ name: 'sidebar.panellist', id: 'fleet', order: 20, label: '设备联邦' }, FleetIcon),
         );
         ctx.slots.register({ name: 'main', key: 'fleet' }, FleetConsole);
+        // Configuration page: Settings → Plugins → Device Fleet (row + bundle).
+        ctx.slots.inject('plugins.row.config', () =>
+          ctx.slots.register({ name: 'plugins.row.config', key: 'dsh-device-fleet#device-fleet' }, FleetConfig),
+        );
+        ctx.slots.inject('plugins.bundle.config', () =>
+          ctx.slots.register({ name: 'plugins.bundle.config', key: 'dsh-device-fleet' }, FleetConfig),
+        );
       },
     };
   },

package/docs/notes/dev-release.md

@@ -39,19 +39,19 @@ dsh plugin --profile desktop add dsh-device-fleet@dev
 - 邀请里新增 `endpoints`（创建者的局域网/热点 IPv4 + direct 端口），加入方重启后自动向这些地址回连，绕开组播发现失败；
 - 新增 `fleet_status`（deviceId/直连端口/发现/连接/roster/hints）与 `fleet_connect(host, port)`（手动直连，成功后会从握手学到对端 deviceId）；
 - `fleet_list` 仍是本地视图；配对成功后双方 roster 会自动固定对端公钥。
-## 0.1.0-dev.12（稳定化）
+## 0.1.0-dev.13（稳定化）
 
 - 直连端口可固定（profile `direct.port`），插件重载不再换端口；
 - 连接断开后自动重试已知地址（不再只在启动时试一次）；
 - `fleet_connect` 手动地址会持久化到 `peer-hints.json`，重启后继续回连；
 - 新增 `fleet_delegate`（dev.5）：目标设备用 `SubagentProvider` + `delivery:'caller'` 跑 agent 并返回最终结果。
-## 0.1.0-dev.12（审批收件箱，逻辑层）
+## 0.1.0-dev.13（审批收件箱，逻辑层）
 
 - 新增 `ApprovalInbox`：ask 档请求排队、超时 fail-closed、approve（once/ttl）/deny、关闭时全部失败关闭；
 - 直调与委派的 ask 档改为等待本机收件箱结果（不再一律拒绝）；
 - 新工具：`fleet_approvals` / `fleet_approve` / `fleet_deny`；`fleet_simulate_request`（仅 `approvals.simulation: true`）用于本机无第二台设备时演练流程；
 - 审批面板（Client UI）与通知尚未实现，当前通过工具/后续 UI 应答。
-## 0.1.0-dev.12（Room 逻辑层，本机模拟）
+## 0.1.0-dev.13（Room 逻辑层，本机模拟）
 
 - `RoomService`：当前会话升级为 Room Host；本地模拟参与者（真实 DSH session/agent）；
 - 寻址消息：`room_send` 只唤醒被点名成员，Host 会话写权威 `room/message` 事件；
@@ -59,13 +59,13 @@ dsh plugin --profile desktop add dsh-device-fleet@dev
 - Room Board：`room_task_add/update/list`，`dependsOn` 串行交接（前置完成时唤醒下一个 owner），无依赖任务并行不受影响；
 - 工具：`room_create / room_add_local / room_remove_member / room_send / room_messages / room_status / room_task_* / room_close`；
 - 远程参与者传输与 Client UI 未做（下一步）。
-## 0.1.0-dev.12（审批面板 UI，第一版）
+## 0.1.0-dev.13（审批面板 UI，第一版）
 
 - Host 新增本地 HTTP 数据面：GET `/device-fleet/approvals`、POST `/device-fleet/approvals/decide`（仅本机 web 载体，决策仍走 ApprovalInbox）；
 - Client half：`client.js` 闭包工厂，注册 `shell.overlay` 浮动「Fleet 审批」按钮 + 面板，轮询待审批列表，支持允许一次 / 允许 15 分钟 / 拒绝；
 - package.json 增加 `dsh.client` 与 `./client` 导出；`files` 增加 client.js；
 - Client 视觉验证需要刷新页面；当前无浏览器控制，仅验证了 bundle 语法与 Host 路由注册。
-## 0.1.0-dev.12（审批入口不遮挡）
+## 0.1.0-dev.13（审批入口不遮挡）
 
 - 触发按钮从右下角浮动改为 `sidebar.footer.action`（设置旁边），不再遮挡任务列表/内容面板；
 - 审批 inbox 改为点击后居中的模态对话框（带遮罩，Esc/点遮罩关闭）；

package/docs/notes/fleet-console-ui.md

@@ -0,0 +1,44 @@
+# Fleet 控制台 UI（Phase A，dev.13）
+
+## 用户决策（2026-11-09）
+
+1. **配置保存必须即时生效**：不重启插件、不重启 DSH。→ Phase B 采用"运行时配置 + 持久化 overrides"设计（下一阶段实现）。
+2. 房间 UI 动作身份：以**用户**身份（ADR-0007）。
+3. 实施顺序：A → B → C → D。
+
+## 本阶段实现
+
+### Host 读模型
+
+`src/host/ui-web.js`：
+
+- `GET /device-fleet/overview`：`FleetNode.status()` + rooms 摘要 + approvals 列表；
+- `GET /device-fleet/rooms`：房间摘要列表；
+- `GET /device-fleet/rooms/:id`：房间详情（成员、策略、transcript、看板任务）。
+
+### Room 持久化 / rehydrate
+
+`RoomService` 新增 `stateFile`（`$DSH_HOME/device-fleet/rooms.json`）：
+
+- 每次 append（创建/成员/消息/任务/关闭）后原子写快照；
+- 启动时 `load()` 重建 rooms/members/messages/tasks；
+- 成员 agent 不序列化，唤醒时通过 `sessionController.resolveAgent(sessionId)` 懒解析；
+- 插件卸载不再关闭房间（避免重载即销毁）。
+
+**验证**：创建 room + worker-c + 任务 + 1 条消息 → 插件重载 → `room_status` 仍显示 2 名成员、1 条消息、1 个任务；`room_task_list` 保留任务。
+
+### Client
+
+`client.js` 新增：
+
+- `sidebar.panellist` 图标（id `fleet`，label `设备联邦`，圆形网格图标）；
+- `main` keyed 面板 `fleet` = Fleet 控制台，三个 Tab：
+  - **设备**：本机名称/id、直连地址、relay、发现数量；Fleet 成员列表（在线/离线）；回连地址；
+  - **房间**：房间列表（成员数/消息数/任务数），选中后展示成员、看板、时间线；
+  - **审批**：待审批列表 + 允许一次/15 分钟/拒绝（与快捷面板共用 Host API）。
+
+## 未完成（Phase B/C/D）
+
+- 配置页与即时生效（Phase B）；
+- 房间交互：以用户身份发消息、看板操作、邀请/移除成员（Phase C）；
+- 配对向导、设备操作、审批历史/授权撤销、SSE、通知、i18n、a11y（Phase C/D）。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-device-fleet",
-  "version": "0.1.0-dev.13",
+  "version": "0.1.0-dev.14",
   "description": "DeepSeek Harness device fleet: enroll devices, direct-call remote tools, shared Rooms with lazy-woken agents, and delegated subagents across devices.",
   "type": "module",
   "main": "src/plugin/index.js",

package/src/host/config-web.js

@@ -0,0 +1,61 @@
+// Runtime config HTTP surface (dev.14): read the effective config and apply a
+// patch live. The UI posts here; no plugin or DSH restart is involved.
+const MAX_BODY_BYTES = 256 * 1024
+
+function json(res, status, value) {
+  res.statusCode = status
+  res.setHeader('content-type', 'application/json; charset=utf-8')
+  res.setHeader('cache-control', 'no-store')
+  res.end(JSON.stringify(value))
+}
+
+async function readJsonBody(req) {
+  const chunks = []
+  let size = 0
+  for await (const chunk of req) {
+    size += chunk.length
+    if (size > MAX_BODY_BYTES) throw Object.assign(new Error('request body is too large'), { code: 'body-too-large' })
+    chunks.push(chunk)
+  }
+  if (chunks.length === 0) return {}
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  } catch {
+    throw Object.assign(new Error('request body must be JSON'), { code: 'bad-json' })
+  }
+}
+
+export function registerConfigRoutes({ webServer, runtime, logger = null }) {
+  if (!webServer?.register || !runtime) return () => {}
+  const disposers = []
+  disposers.push(
+    webServer.register({
+      kind: 'exact',
+      path: '/device-fleet/config',
+      handler: async (req, res) => {
+        if (req.method === 'GET') {
+          try {
+            json(res, 200, runtime.snapshot())
+          } catch (error) {
+            json(res, 500, { error: String(error?.message ?? error) })
+          }
+          return
+        }
+        if (req.method !== 'POST') return json(res, 405, { error: 'method not allowed' })
+        try {
+          const body = await readJsonBody(req)
+          const patch = body?.patch ?? body
+          const config = await runtime.update(patch)
+          json(res, 200, { ok: true, config, appliedAt: Date.now() })
+        } catch (error) {
+          const status = ['bad-request', 'bad-json', 'body-too-large', 'readonly'].includes(error?.code) ? 400 : 500
+          if (status === 500) logger?.warn?.(`[device-fleet] config update failed: ${String(error?.message ?? error)}`)
+          json(res, status, { error: String(error?.message ?? error), code: error?.code ?? 'error' })
+        }
+      },
+    }),
+  )
+  return () => {
+    for (const dispose of disposers) dispose()
+  }
+}

package/src/host/execution-slot.js

@@ -18,6 +18,14 @@ export class ExecutionSlot {
     this.initializing = null
   }
 
+  /** Replace the slot's creation config; the next call lazily recreates the agent. */
+  setConfig(next = {}) {
+    this.config = { ...this.config, ...(next ?? {}) }
+    this.agent = null
+    this.sessionId = null
+    this.initializing = null
+  }
+
   async ensureAgent() {
     if (this.agent) return this.agent
     if (this.initializing) return this.initializing

package/src/host/index.js

@@ -7,5 +7,7 @@ export * from './delegation.js'
 export * from './approval-inbox.js'
 export * from './approval-web.js'
 export * from './ui-web.js'
+export * from './config-web.js'
+export * from './runtime-config.js'
 export * from './room-service.js'
 export * from './tools.js'

package/src/host/runtime-config.js

@@ -0,0 +1,192 @@
+// Runtime configuration (ADR-0025): the profile patch stays the base layer,
+// while `$DSH_HOME/device-fleet/config-overrides.json` holds UI edits. Applying
+// a patch merges it, persists it and runs the registered live-apply handlers so
+// no plugin/DSH restart is required.
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'
+import { dirname } from 'node:path'
+
+const READONLY_FIELDS = ['dataDir']
+const CAPABILITY_MODES = ['auto', 'ask', 'deny']
+
+function isPlainObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+}
+
+export function deepMerge(base, patch) {
+  if (!isPlainObject(patch)) return patch
+  const result = isPlainObject(base) ? { ...base } : {}
+  for (const [key, value] of Object.entries(patch)) {
+    if (value === undefined) continue
+    if (Array.isArray(value)) result[key] = value.map((item) => (isPlainObject(item) ? deepMerge({}, item) : item))
+    else if (isPlainObject(value)) result[key] = deepMerge(result[key], value)
+    else result[key] = value
+  }
+  return result
+}
+
+function readJson(file) {
+  if (!file || !existsSync(file)) return null
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'))
+  } catch {
+    return null
+  }
+}
+
+function requirePositiveInteger(value, name, { min = 1, max = Number.MAX_SAFE_INTEGER } = {}) {
+  if (!Number.isInteger(value) || value < min || value > max) {
+    throw Object.assign(new Error(`${name} must be an integer between ${min} and ${max}`), { code: 'bad-request' })
+  }
+  return value
+}
+
+function stringList(value, name) {
+  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string')) {
+    throw Object.assign(new Error(`${name} must be an array of strings`), { code: 'bad-request' })
+  }
+  return value.map((item) => item.trim()).filter((item) => item !== '')
+}
+
+function optionalString(value, name) {
+  if (value === undefined || value === null) return ''
+  if (typeof value !== 'string') throw Object.assign(new Error(`${name} must be a string`), { code: 'bad-request' })
+  return value.trim()
+}
+
+/**
+ * Validate and clean a UI patch. Only known fields survive; unknown keys are
+ * dropped instead of leaking arbitrary objects into the effective config.
+ */
+export function sanitizeConfigPatch(patch) {
+  if (!isPlainObject(patch)) throw Object.assign(new Error('config patch must be an object'), { code: 'bad-request' })
+  const clean = {}
+  if (patch.deviceName !== undefined) {
+    const name = optionalString(patch.deviceName, 'deviceName')
+    if (name !== '') clean.deviceName = name.slice(0, 80)
+  }
+  if (patch.promptSection !== undefined) clean.promptSection = patch.promptSection === true
+  if (patch.autoApproveAsk !== undefined) clean.autoApproveAsk = patch.autoApproveAsk === true
+  if (patch.discovery !== undefined) clean.discovery = patch.discovery === true
+  if (patch.dataDir !== undefined) {
+    throw Object.assign(new Error('dataDir cannot be changed at runtime'), { code: 'readonly' })
+  }
+  if (patch.direct !== undefined) {
+    if (!isPlainObject(patch.direct)) throw Object.assign(new Error('direct must be an object'), { code: 'bad-request' })
+    clean.direct = {
+      host: optionalString(patch.direct.host, 'direct.host') || '0.0.0.0',
+      port: requirePositiveInteger(Number(patch.direct.port ?? 0), 'direct.port', { min: 0, max: 65535 }),
+    }
+  }
+  if (patch.relay !== undefined) {
+    if (patch.relay === null) clean.relay = null
+    else if (isPlainObject(patch.relay)) {
+      clean.relay = {
+        host: optionalString(patch.relay.host, 'relay.host'),
+        port: requirePositiveInteger(Number(patch.relay.port ?? 0), 'relay.port', { min: 0, max: 65535 }),
+        dataPort: requirePositiveInteger(Number(patch.relay.dataPort ?? 0), 'relay.dataPort', { min: 0, max: 65535 }),
+        reconnect: patch.relay.reconnect !== false,
+      }
+      if (clean.relay.host === '' || clean.relay.port === 0) clean.relay = null
+    } else {
+      throw Object.assign(new Error('relay must be an object or null'), { code: 'bad-request' })
+    }
+  }
+  if (patch.execution !== undefined) {
+    if (!isPlainObject(patch.execution)) throw Object.assign(new Error('execution must be an object'), { code: 'bad-request' })
+    const execution = {}
+    if (patch.execution.cwd !== undefined) execution.cwd = optionalString(patch.execution.cwd, 'execution.cwd')
+    if (patch.execution.agentPreset !== undefined) execution.agentPreset = optionalString(patch.execution.agentPreset, 'execution.agentPreset')
+    if (patch.execution.shellTool !== undefined) execution.shellTool = optionalString(patch.execution.shellTool, 'execution.shellTool')
+    if (patch.execution.subagentProvider !== undefined) execution.subagentProvider = optionalString(patch.execution.subagentProvider, 'execution.subagentProvider')
+    if (patch.execution.approvalTimeoutMs !== undefined) {
+      execution.approvalTimeoutMs = requirePositiveInteger(Number(patch.execution.approvalTimeoutMs), 'execution.approvalTimeoutMs', { min: 1000 })
+    }
+    if (patch.execution.delegateTimeoutMs !== undefined) {
+      execution.delegateTimeoutMs = requirePositiveInteger(Number(patch.execution.delegateTimeoutMs), 'execution.delegateTimeoutMs', { min: 1000 })
+    }
+    clean.execution = execution
+  }
+  if (patch.policy !== undefined) {
+    if (!isPlainObject(patch.policy)) throw Object.assign(new Error('policy must be an object'), { code: 'bad-request' })
+    const policy = {}
+    if (patch.policy.allowedRoots !== undefined) policy.allowedRoots = stringList(patch.policy.allowedRoots, 'policy.allowedRoots')
+    if (patch.policy.allowedTools !== undefined) policy.allowedTools = stringList(patch.policy.allowedTools, 'policy.allowedTools')
+    if (patch.policy.approvalTtlMs !== undefined) {
+      policy.approvalTtlMs = requirePositiveInteger(Number(patch.policy.approvalTtlMs), 'policy.approvalTtlMs', { min: 1000 })
+    }
+    if (patch.policy.capabilities !== undefined) {
+      if (!isPlainObject(patch.policy.capabilities)) throw Object.assign(new Error('policy.capabilities must be an object'), { code: 'bad-request' })
+      const capabilities = {}
+      for (const [key, value] of Object.entries(patch.policy.capabilities)) {
+        if (!CAPABILITY_MODES.includes(value)) {
+          throw Object.assign(new Error(`policy.capabilities.${key} must be auto|ask|deny`), { code: 'bad-request' })
+        }
+        capabilities[key] = value
+      }
+      policy.capabilities = capabilities
+    }
+    clean.policy = policy
+  }
+  if (patch.approvals !== undefined) {
+    if (!isPlainObject(patch.approvals)) throw Object.assign(new Error('approvals must be an object'), { code: 'bad-request' })
+    const approvals = {}
+    if (patch.approvals.ttlMs !== undefined) approvals.ttlMs = requirePositiveInteger(Number(patch.approvals.ttlMs), 'approvals.ttlMs', { min: 1000 })
+    if (patch.approvals.maxPending !== undefined) approvals.maxPending = requirePositiveInteger(Number(patch.approvals.maxPending), 'approvals.maxPending', { min: 1 })
+    if (patch.approvals.simulation !== undefined) approvals.simulation = patch.approvals.simulation === true
+    clean.approvals = approvals
+  }
+  return clean
+}
+
+export class RuntimeConfig {
+  /**
+   * @param {object} options
+   * @param {object} options.base profile (Cordis) config
+   * @param {string} [options.overridesFile] JSON file edited from the UI
+   */
+  constructor({ base = {}, overridesFile = null } = {}) {
+    this.base = base
+    this.overridesFile = overridesFile
+    this.overrides = readJson(overridesFile) ?? {}
+    this.current = deepMerge(this.base, this.overrides)
+    this.applyHandlers = []
+    this.updating = Promise.resolve()
+  }
+
+  onChange(handler) {
+    this.applyHandlers.push(handler)
+  }
+
+  persist() {
+    if (!this.overridesFile) return
+    try {
+      mkdirSync(dirname(this.overridesFile), { recursive: true })
+      const temporary = `${this.overridesFile}.tmp`
+      writeFileSync(temporary, JSON.stringify(this.overrides, null, 2), 'utf8')
+      renameSync(temporary, this.overridesFile)
+    } catch {
+      /* overrides are best effort; the in-memory config is still applied */
+    }
+  }
+
+  /** Merge, persist and live-apply one patch. Returns the effective config. */
+  update(patch) {
+    const clean = sanitizeConfigPatch(patch)
+    return this.updating.then(async () => {
+      const previous = this.current
+      this.overrides = deepMerge(this.overrides, clean)
+      this.current = deepMerge(this.base, this.overrides)
+      this.persist()
+      for (const handler of this.applyHandlers) await handler(this.current, previous)
+      return this.current
+    })
+  }
+
+  snapshot() {
+    return {
+      config: this.current,
+      overrides: this.overrides,
+      readonly: READONLY_FIELDS,
+    }
+  }
+}

package/src/net/fleet-node.js

@@ -489,6 +489,28 @@ export class FleetNode extends EventEmitter {
     return [...this.channels.keys()]
   }
 
+  /** Apply live network changes without recreating the node or its identity. */
+  async reconfigure({ name, direct, discovery, relay } = {}) {
+    if (this.closed) return
+    if (typeof name === 'string' && name !== '') this.name = name
+    const networkChanged = direct !== undefined || discovery !== undefined || relay !== undefined
+    if (!networkChanged) return
+    const wasStarted = this.started
+    await this.close()
+    this.closed = false
+    this.started = false
+    this.hintAttempt = 0
+    this.discovered.clear()
+    if (direct !== undefined) this.directConfig = direct
+    if (discovery !== undefined) this.discoveryConfig = discovery
+    if (relay !== undefined) this.relayConfig = relay
+    this.directServer = null
+    this.discovery = null
+    this.relayClient = null
+    this.directAddress = null
+    if (wasStarted) await this.start()
+  }
+
   async close() {
     this.closed = true
     clearTimeout(this.hintTimer)

package/src/plugin/index.js

@@ -19,6 +19,8 @@ import { ApprovalInbox } from '../host/approval-inbox.js'
 import { RoomService } from '../host/room-service.js'
 import { registerApprovalRoutes } from '../host/approval-web.js'
 import { registerUiRoutes } from '../host/ui-web.js'
+import { registerConfigRoutes } from '../host/config-web.js'
+import { RuntimeConfig } from '../host/runtime-config.js'
 import { ExecutionSlot, DEFAULT_SHELL_TOOL } from '../host/execution-slot.js'
 import { ToolPolicy } from '../host/tool-policy.js'
 import { createFleetHandlers, createFleetToolDefinitions } from '../host/tools.js'
@@ -128,7 +130,7 @@ function withManual(definitions) {
   }))
 }
 
-export function apply(ctx, config) {
+export function apply(ctx, profileConfig) {
   const pluginVersion = packageVersion()
   const dshVersion = process.env.DSH_CLIENT_VERSION ?? 'unknown'
   // Optional services: Cordis throws on direct property access for services the
@@ -144,12 +146,20 @@ export function apply(ctx, config) {
 
   let state
   try {
-    state = loadState({ dshHome: process.env.DSH_HOME, dataDir: config.dataDir, name: config.deviceName })
+    state = loadState({ dshHome: process.env.DSH_HOME, dataDir: profileConfig?.dataDir, name: profileConfig?.deviceName })
   } catch (error) {
     logger.error?.(`[device-fleet] cannot load state: ${String(error?.message ?? error)}`)
     return
   }
 
+  // Runtime config: profile patch is the base, UI edits are persisted in the
+  // state dir and applied live (no plugin/DSH restart).
+  const runtime = new RuntimeConfig({
+    base: profileConfig ?? {},
+    overridesFile: join(state.dataDir, 'config-overrides.json'),
+  })
+  const config = runtime.current
+
   const node = new FleetNode({
     identity: state.identity,
     fleet: state.fleet,
@@ -165,7 +175,7 @@ export function apply(ctx, config) {
     capabilities: CAPABILITIES,
   })
 
-  const policy = new ToolPolicy(config.policy)
+  let policy = new ToolPolicy(config.policy)
   const sessionController = service('sessionController')
   const fs = service('fs')
   const subagents = service('subagents')
@@ -178,26 +188,26 @@ export function apply(ctx, config) {
     list: () => inbox.list(),
     approve: (id, options) => inbox.approve(id, options),
     deny: (id, reason) => inbox.deny(id, reason),
-    simulate: config.approvals?.simulation
-      ? async ({ fromDeviceId, capability, tool, reason }) => {
-          const promise = inbox.request({
-            fromDeviceId: fromDeviceId ?? 'simulated-device',
-            capability: capability ?? 'run',
-            tool: tool ?? null,
-            reason: reason ?? 'simulated approval request',
-            args: {},
-          })
-          const summary = inbox.list().at(-1)
-          // Keep the promise from becoming an unhandled rejection when the
-          // request expires without an answer; the demo only inspects the inbox.
-          promise.catch(() => {})
-          return `simulated approval request ${summary?.id ?? '?'} created; use fleet_approvals / fleet_approve / fleet_deny`
-        }
-      : null,
+    simulate: async ({ fromDeviceId, capability, tool, reason }) => {
+      if (runtime.current.approvals?.simulation !== true) {
+        throw Object.assign(new Error('approval simulation is disabled'), { code: 'unsupported' })
+      }
+      const promise = inbox.request({
+        fromDeviceId: fromDeviceId ?? 'simulated-device',
+        capability: capability ?? 'run',
+        tool: tool ?? null,
+        reason: reason ?? 'simulated approval request',
+        args: {},
+      })
+      const summary = inbox.list().at(-1)
+      // Keep the promise from becoming an unhandled rejection when the
+      // request expires without an answer; the demo only inspects the inbox.
+      promise.catch(() => {})
+      return `simulated approval request ${summary?.id ?? '?'} created; use fleet_approvals / fleet_approve / fleet_deny`
+    },
   }
-  const requestApproval = config.autoApproveAsk
-    ? async () => ({ approved: true, scope: 'once' })
-    : async (request) => inbox.request(request)
+  const requestApproval = async (request) =>
+    runtime.current.autoApproveAsk === true ? { approved: true, scope: 'once' } : inbox.request(request)
 
   const rooms = new RoomService({
     sessionController,
@@ -210,6 +220,7 @@ export function apply(ctx, config) {
   const webServer = service('webServer')
   if (webServer) {
     ctx.effect(() => registerApprovalRoutes({ webServer, inbox, logger }))
+    ctx.effect(() => registerConfigRoutes({ webServer, runtime, logger }))
     ctx.effect(() =>
       registerUiRoutes({
         webServer,
@@ -317,7 +328,7 @@ export function apply(ctx, config) {
           : (state.enrollment?.accountFingerprint ?? null)
       return createInvite(state, {
         accountFingerprint: fingerprint,
-        relay: config.relay ?? state.enrollment?.relay ?? null,
+        relay: runtime.current.relay ?? state.enrollment?.relay ?? null,
         endpoints: localEndpoints(),
       })
     },
@@ -345,13 +356,14 @@ export function apply(ctx, config) {
 
   // Adoption layer 2: one sentence, only when the Fleet has members.
   const systemPrompt = service('systemPrompt')
-  if (systemPrompt && config.promptSection !== false) {
+  if (systemPrompt) {
     const order = systemPrompt.getSectionOrder?.('TOOL_SUBAGENT') ?? PROMPT_SECTION_ORDER
     ctx.effect(() =>
       systemPrompt.section({
         name: 'device-fleet:members',
         order,
         text: () => {
+          if (runtime.current.promptSection === false) return ''
           const members = node.rosterEntries().length
           if (members === 0) return ''
           return `This DSH instance is part of a device Fleet with ${members} other device(s). Use fleet_list/fleet_read/fleet_fetch/fleet_run for work that belongs on another device; direct calls fail fast when that device is offline.`
@@ -360,6 +372,48 @@ export function apply(ctx, config) {
     )
   }
 
+  // Live config application: every UI save runs these handlers in-process.
+  runtime.onChange(async (next, previous) => {
+    if (JSON.stringify(next.policy) !== JSON.stringify(previous?.policy)) {
+      policy = new ToolPolicy(next.policy)
+      if (host) host.policy = policy
+      if (delegation) delegation.policy = policy
+    }
+    if (JSON.stringify(next.execution) !== JSON.stringify(previous?.execution)) {
+      slot?.setConfig(next.execution)
+      if (host) {
+        host.shellTool = next.execution?.shellTool ?? DEFAULT_SHELL_TOOL
+        host.approvalTimeoutMs = next.execution?.approvalTimeoutMs ?? 60_000
+      }
+      if (delegation) {
+        delegation.defaultCwd = next.execution?.cwd
+        delegation.defaultAgentPreset = next.execution?.agentPreset
+        delegation.provider = next.execution?.subagentProvider ?? 'spawn'
+        delegation.timeoutMs = next.execution?.delegateTimeoutMs ?? 180_000
+      }
+    }
+    if (JSON.stringify(next.approvals) !== JSON.stringify(previous?.approvals)) {
+      if (Number.isInteger(next.approvals?.ttlMs) && next.approvals.ttlMs >= 1000) inbox.ttlMs = next.approvals.ttlMs
+      if (Number.isInteger(next.approvals?.maxPending) && next.approvals.maxPending >= 1) inbox.maxPending = next.approvals.maxPending
+    }
+    if (next.deviceName !== previous?.deviceName) {
+      node.name = next.deviceName
+      if (host) host.name = next.deviceName
+    }
+    const networkChanged =
+      JSON.stringify(next.direct) !== JSON.stringify(previous?.direct) ||
+      next.discovery !== previous?.discovery ||
+      JSON.stringify(next.relay) !== JSON.stringify(previous?.relay)
+    if (networkChanged) {
+      await node.reconfigure({
+        name: next.deviceName,
+        direct: next.direct,
+        discovery: next.discovery ? true : false,
+        relay: next.relay ?? null,
+      })
+    }
+  })
+
   // Adoption layer 4: one-line nudge when the model starts orchestrating.
   ctx.on?.('tools/post-execute', async (exec, _result, next) => {
     const decision = await next()