dsh-device-fleet 0.1.0-dev.13 → 0.1.0-dev.15

package/README.md

@@ -10,7 +10,8 @@ DeepSeek Harness 的设备联邦插件：把登录同一账号、且都安装本
 - ✅ **审批收件箱逻辑层（dev.7）**：`fleet_approvals` / `fleet_approve` / `fleet_deny`，ask 档排队、超时 fail-closed、once/ttl 授权、`fleet_simulate_request` 本机演练；Client 审批面板待做
 - ✅ **Room 逻辑层（dev.8，单机模拟）**：`room_create` / `room_add_local` / `room_send` / `room_messages` / `room_status` / `room_task_*` / `room_close`；本地真实 agent 参与者、寻址唤醒、Room Board 串行交接；单机仿真验证通过
 - ✅ **审批面板 UI（dev.12，已验证）**：Host `/device-fleet/approvals` HTTP 数据面 + Client 入口在 Settings 上方、居中审批对话框（允许一次/15 分钟/拒绝）；用户点击「允许」后 Host 列表清空，端到端闭环
-- ⏳ 远程参与者传输、房间视图、插件重载 rehydrate、SSE 推送（下一步）
+- ✅ **Fleet 控制台（dev.13，Phase A）**：Host `/device-fleet/overview`、`/rooms`、`/rooms/:id`；Room 持久化到 `$DSH_HOME/device-fleet/rooms.json` 并 rehydrate（插件重载不丢房间）；Client `sidebar.panellist` + `main` 面板，设备/房间/审批三 Tab
+- ⏳ Phase B 配置页（即时生效，无需重启）、Phase C 房间/配对交互、Phase D SSE/通知/i18n/a11y
 
 ## 安装（开发版）
 

package/client.js

@@ -501,6 +501,383 @@ window.__ModuleLoader__.load({
       );
     }
 
+    // ---- DSH-styled configuration page -------------------------------------
+    const CONTROL_WIDTH = 260
+    const rowStyle = {
+      display: 'flex',
+      alignItems: 'center',
+      gap: 16,
+      minHeight: 42,
+      padding: '5px 0',
+      borderBottom: '1px solid var(--dsw-alias-border-l1, #333)',
+    }
+    const rowLabelStyle = { flex: 1, fontSize: 13, color: 'var(--dsw-alias-label-primary, #e8e8e8)' }
+    const controlStyle = {
+      width: CONTROL_WIDTH,
+      boxSizing: 'border-box',
+      height: 30,
+      padding: '3px 8px',
+      borderRadius: 6,
+      border: '1px solid var(--dsw-alias-border-l1, #333)',
+      background: 'var(--dsw-alias-bg-layer-2, #262626)',
+      color: 'var(--dsw-alias-label-primary, #e8e8e8)',
+      fontSize: 13,
+      outline: 'none',
+    }
+    const selectStyle = {
+      ...controlStyle,
+      appearance: 'none',
+      WebkitAppearance: 'none',
+      paddingRight: 24,
+      cursor: 'pointer',
+    }
+    const textareaStyle = {
+      ...controlStyle,
+      width: '100%',
+      height: 'auto',
+      minHeight: 64,
+      resize: 'vertical',
+      padding: '6px 8px',
+      lineHeight: 1.5,
+      fontFamily: 'ui-monospace, monospace',
+    }
+    const sectionStyle = {
+      margin: '22px 0 4px',
+      fontSize: 13,
+      fontWeight: 600,
+      color: 'var(--dsw-alias-label-primary, #e8e8e8)',
+    }
+
+    function Row({ label, children, wide = false }) {
+      return h('div', { style: rowStyle },
+        h('div', { style: rowLabelStyle }, label),
+        h('div', { style: wide ? { width: '100%' } : { width: CONTROL_WIDTH } }, children),
+      )
+    }
+
+    function SelectControl({ value, options, onChange }) {
+      return h('select', {
+        value: value ?? '',
+        onChange: (event) => onChange(event.target.value),
+        style: selectStyle,
+      },
+        ...(options ?? []).map((option) => {
+          const entry = typeof option === 'string' ? { value: option, label: option } : option
+          return h('option', { key: entry.value, value: entry.value }, entry.label)
+        }),
+      )
+    }
+
+    function TextControl({ value, onChange, placeholder }) {
+      return h('input', {
+        type: 'text',
+        value: value ?? '',
+        placeholder: placeholder ?? '',
+        onChange: (event) => onChange(event.target.value),
+        style: controlStyle,
+      })
+    }
+
+    function NumberControl({ value, onChange }) {
+      return h('input', {
+        type: 'number',
+        value: value ?? 0,
+        onChange: (event) => onChange(Number(event.target.value || 0)),
+        style: controlStyle,
+      })
+    }
+
+    function ToggleControl({ value, onChange }) {
+      return h(SelectControl, {
+        value: value ? 'on' : 'off',
+        options: [{ value: 'on', label: '开启' }, { value: 'off', label: '关闭' }],
+        onChange: (next) => onChange(next === 'on'),
+      })
+    }
+
+    const CAPABILITY_ROWS = [
+      ['capRead', '读取文件'],
+      ['capList', '列目录'],
+      ['capGrep', '搜索内容'],
+      ['capFetch', '获取文件'],
+      ['capRun', '执行命令'],
+      ['capTool', '调用原始工具'],
+      ['capDelegate', '委派任务'],
+    ]
+
+    function configToDraft(config = {}, options = {}) {
+      const execution = config.execution ?? {}
+      const policy = config.policy ?? {}
+      const approvals = config.approvals ?? {}
+      const direct = config.direct ?? {}
+      const relay = config.relay ?? null
+      const cwd = execution.cwd ?? ''
+      const cwdInfo = options.cwd ?? {}
+      let cwdMode = 'custom'
+      if (cwd === '') cwdMode = 'default'
+      else if (cwdInfo.workspace && cwd === cwdInfo.workspace) cwdMode = 'workspace'
+      else if (cwdInfo.dshHome && cwd === cwdInfo.dshHome) cwdMode = 'dshHome'
+      else if (cwdInfo.defaultDirectory && cwd === cwdInfo.defaultDirectory) cwdMode = 'default'
+      return {
+        deviceName: config.deviceName ?? '',
+        directHost: direct.host ?? '0.0.0.0',
+        directPort: direct.port ?? 0,
+        discovery: config.discovery !== false,
+        relayMode: relay && (relay.host || relay.port) ? 'custom' : 'off',
+        relayHost: relay?.host ?? '',
+        relayPort: relay?.port ?? 0,
+        relayDataPort: relay?.dataPort ?? 0,
+        cwdMode,
+        customCwd: cwdMode === 'custom' ? cwd : '',
+        execPreset: execution.agentPreset ?? '',
+        execShellTool: execution.shellTool ?? '',
+        execApprovalTimeoutMs: execution.approvalTimeoutMs ?? 60000,
+        execDelegateTimeoutMs: execution.delegateTimeoutMs ?? 180000,
+        execSubagentProvider: execution.subagentProvider ?? 'spawn',
+        rootsText: (policy.allowedRoots ?? []).join('\n'),
+        toolsText: (policy.allowedTools ?? []).join('\n'),
+        capRead: policy.capabilities?.read ?? 'auto',
+        capList: policy.capabilities?.list ?? 'auto',
+        capGrep: policy.capabilities?.grep ?? 'auto',
+        capFetch: policy.capabilities?.fetch ?? 'auto',
+        capRun: policy.capabilities?.run ?? 'ask',
+        capTool: policy.capabilities?.tool ?? 'deny',
+        capDelegate: policy.capabilities?.delegate ?? 'ask',
+        policyApprovalTtlMs: policy.approvalTtlMs ?? 900000,
+        approvalsTtlMs: approvals.ttlMs ?? 60000,
+        approvalsMaxPending: approvals.maxPending ?? 50,
+        autoApproveAsk: config.autoApproveAsk === true,
+        promptSection: config.promptSection !== false,
+        simulation: approvals.simulation === true,
+      }
+    }
+
+    function draftToPatch(draft, options = {}) {
+      const cwdInfo = options.cwd ?? {}
+      let cwd = ''
+      if (draft.cwdMode === 'workspace') cwd = cwdInfo.workspace ?? ''
+      else if (draft.cwdMode === 'dshHome') cwd = cwdInfo.dshHome ?? ''
+      else if (draft.cwdMode === 'default') cwd = cwdInfo.defaultDirectory || cwdInfo.workspace || ''
+      else if (draft.cwdMode === 'custom') cwd = draft.customCwd ?? ''
+      return {
+        deviceName: draft.deviceName,
+        direct: { host: draft.directHost, port: draft.directPort },
+        discovery: draft.discovery,
+        relay: draft.relayMode === 'custom'
+          ? { host: draft.relayHost, port: draft.relayPort, dataPort: draft.relayDataPort }
+          : null,
+        execution: {
+          cwd,
+          agentPreset: draft.execPreset,
+          shellTool: draft.execShellTool,
+          approvalTimeoutMs: draft.execApprovalTimeoutMs,
+          delegateTimeoutMs: draft.execDelegateTimeoutMs,
+          subagentProvider: draft.execSubagentProvider,
+        },
+        policy: {
+          allowedRoots: draft.rootsText.split('\n').map((item) => item.trim()).filter(Boolean),
+          allowedTools: draft.toolsText.split('\n').map((item) => item.trim()).filter(Boolean),
+          capabilities: {
+            read: draft.capRead,
+            list: draft.capList,
+            grep: draft.capGrep,
+            fetch: draft.capFetch,
+            run: draft.capRun,
+            tool: draft.capTool,
+            delegate: draft.capDelegate,
+          },
+          approvalTtlMs: draft.policyApprovalTtlMs,
+        },
+        approvals: {
+          ttlMs: draft.approvalsTtlMs,
+          maxPending: draft.approvalsMaxPending,
+          simulation: draft.simulation,
+        },
+        autoApproveAsk: draft.autoApproveAsk,
+        promptSection: draft.promptSection,
+      }
+    }
+
+    function FleetConfig() {
+      const [draft, setDraft] = useState(null)
+      const [options, setOptions] = useState({})
+      const [status, setStatus] = useState('')
+      const [busy, setBusy] = useState(false)
+
+      useEffect(() => {
+        let disposed = false
+        const load = async () => {
+          try {
+            const [configResponse, optionsResponse] = await Promise.all([
+              fetch('/device-fleet/config', { headers: { accept: 'application/json' } }),
+              fetch('/device-fleet/options', { headers: { accept: 'application/json' } }),
+            ])
+            const configData = await configResponse.json()
+            const optionsData = optionsResponse.ok ? await optionsResponse.json() : {}
+            if (disposed) return
+            setOptions(optionsData ?? {})
+            setDraft(configToDraft(configData.config ?? {}, optionsData ?? {}))
+          } catch (problem) {
+            if (!disposed) setStatus('加载失败')
+          }
+        }
+        void load()
+        return () => { disposed = true }
+      }, [])
+
+      if (!draft) return h('div', { style: { padding: 8, color: 'var(--dsw-alias-label-secondary, #999)' } }, status || '加载中…')
+
+      const set = (key, value) => setDraft((current) => ({ ...current, [key]: value }))
+      const save = async () => {
+        setBusy(true)
+        setStatus('')
+        try {
+          const response = await fetch('/device-fleet/config', {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(draftToPatch(draft, options)),
+          })
+          const data = await response.json()
+          if (!response.ok) throw new Error(data.error ?? 'HTTP ' + response.status)
+          setDraft(configToDraft(data.config ?? {}, options))
+          setStatus('已保存')
+        } catch (problem) {
+          setStatus('保存失败：' + String(problem.message ?? problem))
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const cwdOptions = [
+        { value: 'workspace', label: 'Device Fleet 工作区' },
+        { value: 'default', label: 'DSH 默认目录' },
+        { value: 'dshHome', label: 'DSH 主目录' },
+        { value: 'custom', label: '自定义路径' },
+      ]
+      const presetOptions = [{ value: '', label: '默认' }, ...((options.presets ?? []).map((preset) => ({ value: preset.id, label: preset.label })))]
+      const shellOptions = (options.shells ?? ['pwsh']).map((shell) => ({ value: shell, label: shell }))
+      const providerOptions = (options.subagentProviders ?? ['spawn']).map((provider) => ({ value: provider, label: provider }))
+      const hostOptions = (options.addresses ?? ['0.0.0.0']).map((address) => ({ value: address, label: address }))
+      const modeOptions = [{ value: 'auto', label: '自动' }, { value: 'ask', label: '询问' }, { value: 'deny', label: '拒绝' }]
+
+      return h('div', { style: { maxWidth: 760, padding: '4px 2px 28px', color: 'var(--dsw-alias-label-primary, #e8e8e8)' } },
+        h('div', { style: { display: 'flex', alignItems: 'center', gap: 12, marginBottom: 4 } },
+          h('div', { style: { fontSize: 15, fontWeight: 600 } }, 'Device Fleet'),
+          h('span', { style: { flex: 1 } }),
+          status ? h('span', { style: { fontSize: 12, color: 'var(--dsw-alias-label-secondary, #999)' } }, status) : null,
+          h('button', {
+            type: 'button',
+            disabled: busy,
+            onClick: () => void save(),
+            style: {
+              height: 30,
+              padding: '0 14px',
+              borderRadius: 6,
+              border: '1px solid var(--dsw-alias-brand-primary, #2f6fed)',
+              background: 'var(--dsw-alias-brand-primary, #2f6fed)',
+              color: '#fff',
+              fontSize: 13,
+              cursor: busy ? 'default' : 'pointer',
+              opacity: busy ? 0.6 : 1,
+            },
+          }, busy ? '保存中' : '保存'),
+        ),
+        h('div', { style: sectionStyle }, '设备'),
+        h(Row, { label: '名称' },
+          h(TextControl, { value: draft.deviceName, onChange: (value) => set('deviceName', value) }),
+        ),
+        h('div', { style: sectionStyle }, '网络'),
+        h(Row, { label: '直连地址' },
+          h(SelectControl, { value: draft.directHost, options: hostOptions, onChange: (value) => set('directHost', value) }),
+        ),
+        h(Row, { label: '直连端口' },
+          h(NumberControl, { value: draft.directPort, onChange: (value) => set('directPort', value) }),
+        ),
+        h(Row, { label: '局域网发现' },
+          h(ToggleControl, { value: draft.discovery, onChange: (value) => set('discovery', value) }),
+        ),
+        h(Row, { label: 'Relay' },
+          h(SelectControl, {
+            value: draft.relayMode,
+            options: [{ value: 'off', label: '不使用' }, { value: 'custom', label: '自定义' }],
+            onChange: (value) => set('relayMode', value),
+          }),
+        ),
+        draft.relayMode === 'custom' ? h(Row, { label: 'Relay 地址' },
+          h(TextControl, { value: draft.relayHost, onChange: (value) => set('relayHost', value) }),
+        ) : null,
+        draft.relayMode === 'custom' ? h(Row, { label: 'Relay 端口' },
+          h(NumberControl, { value: draft.relayPort, onChange: (value) => set('relayPort', value) }),
+        ) : null,
+        draft.relayMode === 'custom' ? h(Row, { label: 'Relay 数据端口' },
+          h(NumberControl, { value: draft.relayDataPort, onChange: (value) => set('relayDataPort', value) }),
+        ) : null,
+        h('div', { style: sectionStyle }, '执行上下文'),
+        h(Row, { label: '工作目录' },
+          h(SelectControl, { value: draft.cwdMode, options: cwdOptions, onChange: (value) => set('cwdMode', value) }),
+        ),
+        draft.cwdMode === 'custom' ? h(Row, { label: '路径' },
+          h(TextControl, { value: draft.customCwd, onChange: (value) => set('customCwd', value) }),
+        ) : null,
+        h(Row, { label: 'Agent Preset' },
+          h(SelectControl, { value: draft.execPreset, options: presetOptions, onChange: (value) => set('execPreset', value) }),
+        ),
+        h(Row, { label: 'Shell' },
+          h(SelectControl, { value: draft.execShellTool, options: shellOptions, onChange: (value) => set('execShellTool', value) }),
+        ),
+        h(Row, { label: '委派 Provider' },
+          h(SelectControl, { value: draft.execSubagentProvider, options: providerOptions, onChange: (value) => set('execSubagentProvider', value) }),
+        ),
+        h(Row, { label: '审批超时 (ms)' },
+          h(NumberControl, { value: draft.execApprovalTimeoutMs, onChange: (value) => set('execApprovalTimeoutMs', value) }),
+        ),
+        h(Row, { label: '委派超时 (ms)' },
+          h(NumberControl, { value: draft.execDelegateTimeoutMs, onChange: (value) => set('execDelegateTimeoutMs', value) }),
+        ),
+        h('div', { style: sectionStyle }, '远端权限'),
+        h(Row, { label: '可访问根目录', wide: true },
+          h('textarea', {
+            value: draft.rootsText,
+            onChange: (event) => set('rootsText', event.target.value),
+            rows: 3,
+            style: textareaStyle,
+          }),
+        ),
+        h(Row, { label: '允许的原始工具', wide: true },
+          h('textarea', {
+            value: draft.toolsText,
+            onChange: (event) => set('toolsText', event.target.value),
+            rows: 3,
+            style: textareaStyle,
+          }),
+        ),
+        ...CAPABILITY_ROWS.map(([key, label]) =>
+          h(Row, { key, label },
+            h(SelectControl, { value: draft[key], options: modeOptions, onChange: (value) => set(key, value) }),
+          ),
+        ),
+        h(Row, { label: '授权有效期 (ms)' },
+          h(NumberControl, { value: draft.policyApprovalTtlMs, onChange: (value) => set('policyApprovalTtlMs', value) }),
+        ),
+        h('div', { style: sectionStyle }, '审批与提示'),
+        h(Row, { label: '审批超时 (ms)' },
+          h(NumberControl, { value: draft.approvalsTtlMs, onChange: (value) => set('approvalsTtlMs', value) }),
+        ),
+        h(Row, { label: '最大排队数' },
+          h(NumberControl, { value: draft.approvalsMaxPending, onChange: (value) => set('approvalsMaxPending', value) }),
+        ),
+        h(Row, { label: '自动批准（测试）' },
+          h(ToggleControl, { value: draft.autoApproveAsk, onChange: (value) => set('autoApproveAsk', value) }),
+        ),
+        h(Row, { label: 'Fleet 系统提示' },
+          h(ToggleControl, { value: draft.promptSection, onChange: (value) => set('promptSection', value) }),
+        ),
+        h(Row, { label: '审批模拟（测试）' },
+          h(ToggleControl, { value: draft.simulation, onChange: (value) => set('simulation', value) }),
+        ),
+      )
+    }
+
     return {
       inject: ['slots'],
       apply(ctx) {
@@ -517,6 +894,13 @@ window.__ModuleLoader__.load({
           ctx.slots.register({ name: 'sidebar.panellist', id: 'fleet', order: 20, label: '设备联邦' }, FleetIcon),
         );
         ctx.slots.register({ name: 'main', key: 'fleet' }, FleetConsole);
+        // Configuration page: Settings → Plugins → Device Fleet (row + bundle).
+        ctx.slots.inject('plugins.row.config', () =>
+          ctx.slots.register({ name: 'plugins.row.config', key: 'dsh-device-fleet#device-fleet' }, FleetConfig),
+        );
+        ctx.slots.inject('plugins.bundle.config', () =>
+          ctx.slots.register({ name: 'plugins.bundle.config', key: 'dsh-device-fleet' }, FleetConfig),
+        );
       },
     };
   },

package/docs/notes/dev-release.md

@@ -39,19 +39,19 @@ dsh plugin --profile desktop add dsh-device-fleet@dev
 - 邀请里新增 `endpoints`（创建者的局域网/热点 IPv4 + direct 端口），加入方重启后自动向这些地址回连，绕开组播发现失败；
 - 新增 `fleet_status`（deviceId/直连端口/发现/连接/roster/hints）与 `fleet_connect(host, port)`（手动直连，成功后会从握手学到对端 deviceId）；
 - `fleet_list` 仍是本地视图；配对成功后双方 roster 会自动固定对端公钥。
-## 0.1.0-dev.12（稳定化）
+## 0.1.0-dev.14（稳定化）
 
 - 直连端口可固定（profile `direct.port`），插件重载不再换端口；
 - 连接断开后自动重试已知地址（不再只在启动时试一次）；
 - `fleet_connect` 手动地址会持久化到 `peer-hints.json`，重启后继续回连；
 - 新增 `fleet_delegate`（dev.5）：目标设备用 `SubagentProvider` + `delivery:'caller'` 跑 agent 并返回最终结果。
-## 0.1.0-dev.12（审批收件箱，逻辑层）
+## 0.1.0-dev.14（审批收件箱，逻辑层）
 
 - 新增 `ApprovalInbox`：ask 档请求排队、超时 fail-closed、approve（once/ttl）/deny、关闭时全部失败关闭；
 - 直调与委派的 ask 档改为等待本机收件箱结果（不再一律拒绝）；
 - 新工具：`fleet_approvals` / `fleet_approve` / `fleet_deny`；`fleet_simulate_request`（仅 `approvals.simulation: true`）用于本机无第二台设备时演练流程；
 - 审批面板（Client UI）与通知尚未实现，当前通过工具/后续 UI 应答。
-## 0.1.0-dev.12（Room 逻辑层，本机模拟）
+## 0.1.0-dev.14（Room 逻辑层，本机模拟）
 
 - `RoomService`：当前会话升级为 Room Host；本地模拟参与者（真实 DSH session/agent）；
 - 寻址消息：`room_send` 只唤醒被点名成员，Host 会话写权威 `room/message` 事件；
@@ -59,15 +59,22 @@ dsh plugin --profile desktop add dsh-device-fleet@dev
 - Room Board：`room_task_add/update/list`，`dependsOn` 串行交接（前置完成时唤醒下一个 owner），无依赖任务并行不受影响；
 - 工具：`room_create / room_add_local / room_remove_member / room_send / room_messages / room_status / room_task_* / room_close`；
 - 远程参与者传输与 Client UI 未做（下一步）。
-## 0.1.0-dev.12（审批面板 UI，第一版）
+## 0.1.0-dev.14（审批面板 UI，第一版）
 
 - Host 新增本地 HTTP 数据面：GET `/device-fleet/approvals`、POST `/device-fleet/approvals/decide`（仅本机 web 载体，决策仍走 ApprovalInbox）；
 - Client half：`client.js` 闭包工厂，注册 `shell.overlay` 浮动「Fleet 审批」按钮 + 面板，轮询待审批列表，支持允许一次 / 允许 15 分钟 / 拒绝；
 - package.json 增加 `dsh.client` 与 `./client` 导出；`files` 增加 client.js；
 - Client 视觉验证需要刷新页面；当前无浏览器控制，仅验证了 bundle 语法与 Host 路由注册。
-## 0.1.0-dev.12（审批入口不遮挡）
+## 0.1.0-dev.14（审批入口不遮挡）
 
 - 触发按钮从右下角浮动改为 `sidebar.footer.action`（设置旁边），不再遮挡任务列表/内容面板；
 - 审批 inbox 改为点击后居中的模态对话框（带遮罩，Esc/点遮罩关闭）；
 - 轮询在 Client apply 中启动并由 ctx.effect 清理；待审批数量作为按钮徽标；
-- 已实测：面板点击「允许」后 Host `fleet_approvals` 清空。
+- 已实测：面板点击「允许」后 Host `fleet_approvals` 清空。
+## 0.1.0-dev.14（Phase B：运行时配置 + 配置页）
+
+- `RuntimeConfig`：profile patch 为 base，UI 修改写入 `$DSH_HOME/device-fleet/config-overrides.json`，apply 时合并并持久化；
+- 保存即生效：policy/execution/approvals/deviceName/promptSection/autoApproveAsk 直接更新运行时对象；direct/discovery/relay 通过 `FleetNode.reconfigure()` 原地重启网络监听（不重启插件/DSH）；`dataDir` 只读；
+- Host：`GET /device-fleet/config`、`POST /device-fleet/config`（校验/清洗后应用）；
+- Client：注册 `plugins.row.config`（key `dsh-device-fleet#device-fleet`）与 `plugins.bundle.config`（key `dsh-device-fleet`），配置页含设备/网络、执行上下文、Tool Policy、审批与提示四组表单；
+- 单测 18/18、网络 9/9。

package/docs/notes/fleet-console-ui.md

@@ -0,0 +1,44 @@
+# Fleet 控制台 UI（Phase A，dev.13）
+
+## 用户决策（2026-11-09）
+
+1. **配置保存必须即时生效**：不重启插件、不重启 DSH。→ Phase B 采用"运行时配置 + 持久化 overrides"设计（下一阶段实现）。
+2. 房间 UI 动作身份：以**用户**身份（ADR-0007）。
+3. 实施顺序：A → B → C → D。
+
+## 本阶段实现
+
+### Host 读模型
+
+`src/host/ui-web.js`：
+
+- `GET /device-fleet/overview`：`FleetNode.status()` + rooms 摘要 + approvals 列表；
+- `GET /device-fleet/rooms`：房间摘要列表；
+- `GET /device-fleet/rooms/:id`：房间详情（成员、策略、transcript、看板任务）。
+
+### Room 持久化 / rehydrate
+
+`RoomService` 新增 `stateFile`（`$DSH_HOME/device-fleet/rooms.json`）：
+
+- 每次 append（创建/成员/消息/任务/关闭）后原子写快照；
+- 启动时 `load()` 重建 rooms/members/messages/tasks；
+- 成员 agent 不序列化，唤醒时通过 `sessionController.resolveAgent(sessionId)` 懒解析；
+- 插件卸载不再关闭房间（避免重载即销毁）。
+
+**验证**：创建 room + worker-c + 任务 + 1 条消息 → 插件重载 → `room_status` 仍显示 2 名成员、1 条消息、1 个任务；`room_task_list` 保留任务。
+
+### Client
+
+`client.js` 新增：
+
+- `sidebar.panellist` 图标（id `fleet`，label `设备联邦`，圆形网格图标）；
+- `main` keyed 面板 `fleet` = Fleet 控制台，三个 Tab：
+  - **设备**：本机名称/id、直连地址、relay、发现数量；Fleet 成员列表（在线/离线）；回连地址；
+  - **房间**：房间列表（成员数/消息数/任务数），选中后展示成员、看板、时间线；
+  - **审批**：待审批列表 + 允许一次/15 分钟/拒绝（与快捷面板共用 Host API）。
+
+## 未完成（Phase B/C/D）
+
+- 配置页与即时生效（Phase B）；
+- 房间交互：以用户身份发消息、看板操作、邀请/移除成员（Phase C）；
+- 配对向导、设备操作、审批历史/授权撤销、SSE、通知、i18n、a11y（Phase C/D）。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-device-fleet",
-  "version": "0.1.0-dev.13",
+  "version": "0.1.0-dev.15",
   "description": "DeepSeek Harness device fleet: enroll devices, direct-call remote tools, shared Rooms with lazy-woken agents, and delegated subagents across devices.",
   "type": "module",
   "main": "src/plugin/index.js",

package/src/host/config-web.js

@@ -0,0 +1,84 @@
+// Runtime config HTTP surface (dev.15): read effective config, list UI options,
+// and apply a patch live. The UI posts here; no plugin or DSH restart is involved.
+const MAX_BODY_BYTES = 256 * 1024
+
+function json(res, status, value) {
+  res.statusCode = status
+  res.setHeader('content-type', 'application/json; charset=utf-8')
+  res.setHeader('cache-control', 'no-store')
+  res.end(JSON.stringify(value))
+}
+
+async function readJsonBody(req) {
+  const chunks = []
+  let size = 0
+  for await (const chunk of req) {
+    size += chunk.length
+    if (size > MAX_BODY_BYTES) throw Object.assign(new Error('request body is too large'), { code: 'body-too-large' })
+    chunks.push(chunk)
+  }
+  if (chunks.length === 0) return {}
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  } catch {
+    throw Object.assign(new Error('request body must be JSON'), { code: 'bad-json' })
+  }
+}
+
+/**
+ * @param {object} options
+ * @param {object} options.webServer ctx.webServer
+ * @param {object} options.runtime RuntimeConfig
+ * @param {() => Promise<object>|object} [options.getOptions] UI option catalog (presets, shells, paths)
+ * @param {(patch: object) => Promise<object>|object} [options.preparePatch] side effects before applying (e.g. mkdir)
+ */
+export function registerConfigRoutes({ webServer, runtime, getOptions = null, preparePatch = null, logger = null }) {
+  if (!webServer?.register || !runtime) return () => {}
+  const disposers = []
+  disposers.push(
+    webServer.register({
+      kind: 'exact',
+      path: '/device-fleet/options',
+      handler: async (req, res) => {
+        if (req.method !== 'GET') return json(res, 405, { error: 'method not allowed' })
+        try {
+          json(res, 200, (await getOptions?.()) ?? {})
+        } catch (error) {
+          logger?.warn?.(`[device-fleet] options failed: ${String(error?.message ?? error)}`)
+          json(res, 500, { error: 'internal error' })
+        }
+      },
+    }),
+  )
+  disposers.push(
+    webServer.register({
+      kind: 'exact',
+      path: '/device-fleet/config',
+      handler: async (req, res) => {
+        if (req.method === 'GET') {
+          try {
+            json(res, 200, runtime.snapshot())
+          } catch (error) {
+            json(res, 500, { error: String(error?.message ?? error) })
+          }
+          return
+        }
+        if (req.method !== 'POST') return json(res, 405, { error: 'method not allowed' })
+        try {
+          const body = await readJsonBody(req)
+          const patch = body?.patch ?? body
+          const prepared = preparePatch ? await preparePatch(patch) : patch
+          const config = await runtime.update(prepared ?? patch)
+          json(res, 200, { ok: true, config, appliedAt: Date.now() })
+        } catch (error) {
+          const status = ['bad-request', 'bad-json', 'body-too-large', 'readonly'].includes(error?.code) ? 400 : 500
+          if (status === 500) logger?.warn?.(`[device-fleet] config update failed: ${String(error?.message ?? error)}`)
+          json(res, status, { error: String(error?.message ?? error), code: error?.code ?? 'error' })
+        }
+      },
+    }),
+  )
+  return () => {
+    for (const dispose of disposers) dispose()
+  }
+}

package/src/host/execution-slot.js

@@ -18,6 +18,14 @@ export class ExecutionSlot {
     this.initializing = null
   }
 
+  /** Replace the slot's creation config; the next call lazily recreates the agent. */
+  setConfig(next = {}) {
+    this.config = { ...this.config, ...(next ?? {}) }
+    this.agent = null
+    this.sessionId = null
+    this.initializing = null
+  }
+
   async ensureAgent() {
     if (this.agent) return this.agent
     if (this.initializing) return this.initializing

package/src/host/index.js

@@ -7,5 +7,7 @@ export * from './delegation.js'
 export * from './approval-inbox.js'
 export * from './approval-web.js'
 export * from './ui-web.js'
+export * from './config-web.js'
+export * from './runtime-config.js'
 export * from './room-service.js'
 export * from './tools.js'

package/src/host/runtime-config.js

@@ -0,0 +1,192 @@
+// Runtime configuration (ADR-0025): the profile patch stays the base layer,
+// while `$DSH_HOME/device-fleet/config-overrides.json` holds UI edits. Applying
+// a patch merges it, persists it and runs the registered live-apply handlers so
+// no plugin/DSH restart is required.
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'
+import { dirname } from 'node:path'
+
+const READONLY_FIELDS = ['dataDir']
+const CAPABILITY_MODES = ['auto', 'ask', 'deny']
+
+function isPlainObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+}
+
+export function deepMerge(base, patch) {
+  if (!isPlainObject(patch)) return patch
+  const result = isPlainObject(base) ? { ...base } : {}
+  for (const [key, value] of Object.entries(patch)) {
+    if (value === undefined) continue
+    if (Array.isArray(value)) result[key] = value.map((item) => (isPlainObject(item) ? deepMerge({}, item) : item))
+    else if (isPlainObject(value)) result[key] = deepMerge(result[key], value)
+    else result[key] = value
+  }
+  return result
+}
+
+function readJson(file) {
+  if (!file || !existsSync(file)) return null
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'))
+  } catch {
+    return null
+  }
+}
+
+function requirePositiveInteger(value, name, { min = 1, max = Number.MAX_SAFE_INTEGER } = {}) {
+  if (!Number.isInteger(value) || value < min || value > max) {
+    throw Object.assign(new Error(`${name} must be an integer between ${min} and ${max}`), { code: 'bad-request' })
+  }
+  return value
+}
+
+function stringList(value, name) {
+  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string')) {
+    throw Object.assign(new Error(`${name} must be an array of strings`), { code: 'bad-request' })
+  }
+  return value.map((item) => item.trim()).filter((item) => item !== '')
+}
+
+function optionalString(value, name) {
+  if (value === undefined || value === null) return ''
+  if (typeof value !== 'string') throw Object.assign(new Error(`${name} must be a string`), { code: 'bad-request' })
+  return value.trim()
+}
+
+/**
+ * Validate and clean a UI patch. Only known fields survive; unknown keys are
+ * dropped instead of leaking arbitrary objects into the effective config.
+ */
+export function sanitizeConfigPatch(patch) {
+  if (!isPlainObject(patch)) throw Object.assign(new Error('config patch must be an object'), { code: 'bad-request' })
+  const clean = {}
+  if (patch.deviceName !== undefined) {
+    const name = optionalString(patch.deviceName, 'deviceName')
+    if (name !== '') clean.deviceName = name.slice(0, 80)
+  }
+  if (patch.promptSection !== undefined) clean.promptSection = patch.promptSection === true
+  if (patch.autoApproveAsk !== undefined) clean.autoApproveAsk = patch.autoApproveAsk === true
+  if (patch.discovery !== undefined) clean.discovery = patch.discovery === true
+  if (patch.dataDir !== undefined) {
+    throw Object.assign(new Error('dataDir cannot be changed at runtime'), { code: 'readonly' })
+  }
+  if (patch.direct !== undefined) {
+    if (!isPlainObject(patch.direct)) throw Object.assign(new Error('direct must be an object'), { code: 'bad-request' })
+    clean.direct = {
+      host: optionalString(patch.direct.host, 'direct.host') || '0.0.0.0',
+      port: requirePositiveInteger(Number(patch.direct.port ?? 0), 'direct.port', { min: 0, max: 65535 }),
+    }
+  }
+  if (patch.relay !== undefined) {
+    if (patch.relay === null) clean.relay = null
+    else if (isPlainObject(patch.relay)) {
+      clean.relay = {
+        host: optionalString(patch.relay.host, 'relay.host'),
+        port: requirePositiveInteger(Number(patch.relay.port ?? 0), 'relay.port', { min: 0, max: 65535 }),
+        dataPort: requirePositiveInteger(Number(patch.relay.dataPort ?? 0), 'relay.dataPort', { min: 0, max: 65535 }),
+        reconnect: patch.relay.reconnect !== false,
+      }
+      if (clean.relay.host === '' || clean.relay.port === 0) clean.relay = null
+    } else {
+      throw Object.assign(new Error('relay must be an object or null'), { code: 'bad-request' })
+    }
+  }
+  if (patch.execution !== undefined) {
+    if (!isPlainObject(patch.execution)) throw Object.assign(new Error('execution must be an object'), { code: 'bad-request' })
+    const execution = {}
+    if (patch.execution.cwd !== undefined) execution.cwd = optionalString(patch.execution.cwd, 'execution.cwd')
+    if (patch.execution.agentPreset !== undefined) execution.agentPreset = optionalString(patch.execution.agentPreset, 'execution.agentPreset')
+    if (patch.execution.shellTool !== undefined) execution.shellTool = optionalString(patch.execution.shellTool, 'execution.shellTool')
+    if (patch.execution.subagentProvider !== undefined) execution.subagentProvider = optionalString(patch.execution.subagentProvider, 'execution.subagentProvider')
+    if (patch.execution.approvalTimeoutMs !== undefined) {
+      execution.approvalTimeoutMs = requirePositiveInteger(Number(patch.execution.approvalTimeoutMs), 'execution.approvalTimeoutMs', { min: 1000 })
+    }
+    if (patch.execution.delegateTimeoutMs !== undefined) {
+      execution.delegateTimeoutMs = requirePositiveInteger(Number(patch.execution.delegateTimeoutMs), 'execution.delegateTimeoutMs', { min: 1000 })
+    }
+    clean.execution = execution
+  }
+  if (patch.policy !== undefined) {
+    if (!isPlainObject(patch.policy)) throw Object.assign(new Error('policy must be an object'), { code: 'bad-request' })
+    const policy = {}
+    if (patch.policy.allowedRoots !== undefined) policy.allowedRoots = stringList(patch.policy.allowedRoots, 'policy.allowedRoots')
+    if (patch.policy.allowedTools !== undefined) policy.allowedTools = stringList(patch.policy.allowedTools, 'policy.allowedTools')
+    if (patch.policy.approvalTtlMs !== undefined) {
+      policy.approvalTtlMs = requirePositiveInteger(Number(patch.policy.approvalTtlMs), 'policy.approvalTtlMs', { min: 1000 })
+    }
+    if (patch.policy.capabilities !== undefined) {
+      if (!isPlainObject(patch.policy.capabilities)) throw Object.assign(new Error('policy.capabilities must be an object'), { code: 'bad-request' })
+      const capabilities = {}
+      for (const [key, value] of Object.entries(patch.policy.capabilities)) {
+        if (!CAPABILITY_MODES.includes(value)) {
+          throw Object.assign(new Error(`policy.capabilities.${key} must be auto|ask|deny`), { code: 'bad-request' })
+        }
+        capabilities[key] = value
+      }
+      policy.capabilities = capabilities
+    }
+    clean.policy = policy
+  }
+  if (patch.approvals !== undefined) {
+    if (!isPlainObject(patch.approvals)) throw Object.assign(new Error('approvals must be an object'), { code: 'bad-request' })
+    const approvals = {}
+    if (patch.approvals.ttlMs !== undefined) approvals.ttlMs = requirePositiveInteger(Number(patch.approvals.ttlMs), 'approvals.ttlMs', { min: 1000 })
+    if (patch.approvals.maxPending !== undefined) approvals.maxPending = requirePositiveInteger(Number(patch.approvals.maxPending), 'approvals.maxPending', { min: 1 })
+    if (patch.approvals.simulation !== undefined) approvals.simulation = patch.approvals.simulation === true
+    clean.approvals = approvals
+  }
+  return clean
+}
+
+export class RuntimeConfig {
+  /**
+   * @param {object} options
+   * @param {object} options.base profile (Cordis) config
+   * @param {string} [options.overridesFile] JSON file edited from the UI
+   */
+  constructor({ base = {}, overridesFile = null } = {}) {
+    this.base = base
+    this.overridesFile = overridesFile
+    this.overrides = readJson(overridesFile) ?? {}
+    this.current = deepMerge(this.base, this.overrides)
+    this.applyHandlers = []
+    this.updating = Promise.resolve()
+  }
+
+  onChange(handler) {
+    this.applyHandlers.push(handler)
+  }
+
+  persist() {
+    if (!this.overridesFile) return
+    try {
+      mkdirSync(dirname(this.overridesFile), { recursive: true })
+      const temporary = `${this.overridesFile}.tmp`
+      writeFileSync(temporary, JSON.stringify(this.overrides, null, 2), 'utf8')
+      renameSync(temporary, this.overridesFile)
+    } catch {
+      /* overrides are best effort; the in-memory config is still applied */
+    }
+  }
+
+  /** Merge, persist and live-apply one patch. Returns the effective config. */
+  update(patch) {
+    const clean = sanitizeConfigPatch(patch)
+    return this.updating.then(async () => {
+      const previous = this.current
+      this.overrides = deepMerge(this.overrides, clean)
+      this.current = deepMerge(this.base, this.overrides)
+      this.persist()
+      for (const handler of this.applyHandlers) await handler(this.current, previous)
+      return this.current
+    })
+  }
+
+  snapshot() {
+    return {
+      config: this.current,
+      overrides: this.overrides,
+      readonly: READONLY_FIELDS,
+    }
+  }
+}

package/src/net/fleet-node.js

@@ -489,6 +489,28 @@ export class FleetNode extends EventEmitter {
     return [...this.channels.keys()]
   }
 
+  /** Apply live network changes without recreating the node or its identity. */
+  async reconfigure({ name, direct, discovery, relay } = {}) {
+    if (this.closed) return
+    if (typeof name === 'string' && name !== '') this.name = name
+    const networkChanged = direct !== undefined || discovery !== undefined || relay !== undefined
+    if (!networkChanged) return
+    const wasStarted = this.started
+    await this.close()
+    this.closed = false
+    this.started = false
+    this.hintAttempt = 0
+    this.discovered.clear()
+    if (direct !== undefined) this.directConfig = direct
+    if (discovery !== undefined) this.discoveryConfig = discovery
+    if (relay !== undefined) this.relayConfig = relay
+    this.directServer = null
+    this.discovery = null
+    this.relayClient = null
+    this.directAddress = null
+    if (wasStarted) await this.start()
+  }
+
   async close() {
     this.closed = true
     clearTimeout(this.hintTimer)

package/src/plugin/index.js

@@ -4,7 +4,7 @@
 // the six `fleet_*` tools, and the two adoption mechanisms that are cheap to
 // land now (a prompt section and a first-use manual + orchestration nudge).
 // Room, Room Board, delegation and the UI land in later steps.
-import { readFileSync } from 'node:fs'
+import { mkdirSync, readFileSync } from 'node:fs'
 import { networkInterfaces } from 'node:os'
 import { join } from 'node:path'
 import { fileURLToPath } from 'node:url'
@@ -19,6 +19,8 @@ import { ApprovalInbox } from '../host/approval-inbox.js'
 import { RoomService } from '../host/room-service.js'
 import { registerApprovalRoutes } from '../host/approval-web.js'
 import { registerUiRoutes } from '../host/ui-web.js'
+import { registerConfigRoutes } from '../host/config-web.js'
+import { RuntimeConfig } from '../host/runtime-config.js'
 import { ExecutionSlot, DEFAULT_SHELL_TOOL } from '../host/execution-slot.js'
 import { ToolPolicy } from '../host/tool-policy.js'
 import { createFleetHandlers, createFleetToolDefinitions } from '../host/tools.js'
@@ -128,7 +130,7 @@ function withManual(definitions) {
   }))
 }
 
-export function apply(ctx, config) {
+export function apply(ctx, profileConfig) {
   const pluginVersion = packageVersion()
   const dshVersion = process.env.DSH_CLIENT_VERSION ?? 'unknown'
   // Optional services: Cordis throws on direct property access for services the
@@ -144,12 +146,20 @@ export function apply(ctx, config) {
 
   let state
   try {
-    state = loadState({ dshHome: process.env.DSH_HOME, dataDir: config.dataDir, name: config.deviceName })
+    state = loadState({ dshHome: process.env.DSH_HOME, dataDir: profileConfig?.dataDir, name: profileConfig?.deviceName })
   } catch (error) {
     logger.error?.(`[device-fleet] cannot load state: ${String(error?.message ?? error)}`)
     return
   }
 
+  // Runtime config: profile patch is the base, UI edits are persisted in the
+  // state dir and applied live (no plugin/DSH restart).
+  const runtime = new RuntimeConfig({
+    base: profileConfig ?? {},
+    overridesFile: join(state.dataDir, 'config-overrides.json'),
+  })
+  const config = runtime.current
+
   const node = new FleetNode({
     identity: state.identity,
     fleet: state.fleet,
@@ -169,6 +179,8 @@ export function apply(ctx, config) {
   const sessionController = service('sessionController')
   const fs = service('fs')
   const subagents = service('subagents')
+  const agentPresets = service('agentPresets')
+  const workingDirectory = service('workingDirectory')
   const inbox = new ApprovalInbox({
     ttlMs: config.approvals?.ttlMs ?? 60_000,
     maxPending: config.approvals?.maxPending ?? 50,
@@ -178,26 +190,26 @@ export function apply(ctx, config) {
     list: () => inbox.list(),
     approve: (id, options) => inbox.approve(id, options),
     deny: (id, reason) => inbox.deny(id, reason),
-    simulate: config.approvals?.simulation
-      ? async ({ fromDeviceId, capability, tool, reason }) => {
-          const promise = inbox.request({
-            fromDeviceId: fromDeviceId ?? 'simulated-device',
-            capability: capability ?? 'run',
-            tool: tool ?? null,
-            reason: reason ?? 'simulated approval request',
-            args: {},
-          })
-          const summary = inbox.list().at(-1)
-          // Keep the promise from becoming an unhandled rejection when the
-          // request expires without an answer; the demo only inspects the inbox.
-          promise.catch(() => {})
-          return `simulated approval request ${summary?.id ?? '?'} created; use fleet_approvals / fleet_approve / fleet_deny`
-        }
-      : null,
+    simulate: async ({ fromDeviceId, capability, tool, reason }) => {
+      if (runtime.current.approvals?.simulation !== true) {
+        throw Object.assign(new Error('approval simulation is disabled'), { code: 'unsupported' })
+      }
+      const promise = inbox.request({
+        fromDeviceId: fromDeviceId ?? 'simulated-device',
+        capability: capability ?? 'run',
+        tool: tool ?? null,
+        reason: reason ?? 'simulated approval request',
+        args: {},
+      })
+      const summary = inbox.list().at(-1)
+      // Keep the promise from becoming an unhandled rejection when the
+      // request expires without an answer; the demo only inspects the inbox.
+      promise.catch(() => {})
+      return `simulated approval request ${summary?.id ?? '?'} created; use fleet_approvals / fleet_approve / fleet_deny`
+    },
   }
-  const requestApproval = config.autoApproveAsk
-    ? async () => ({ approved: true, scope: 'once' })
-    : async (request) => inbox.request(request)
+  const requestApproval = async (request) =>
+    runtime.current.autoApproveAsk === true ? { approved: true, scope: 'once' } : inbox.request(request)
 
   const rooms = new RoomService({
     sessionController,
@@ -208,8 +220,74 @@ export function apply(ctx, config) {
   // Client approval panel data plane (dev.9). Optional service: host-only
   // deployments simply do not expose the panel routes.
   const webServer = service('webServer')
+  const workspaceDir = join(state.dataDir, 'workspace')
+  const getOptions = async () => {
+    const addresses = new Set(['0.0.0.0', '127.0.0.1', runtime.current.direct?.host ?? ''])
+    for (const entries of Object.values(networkInterfaces())) {
+      for (const entry of entries ?? []) {
+        if (entry.family === 'IPv4' && !entry.internal) addresses.add(entry.address)
+      }
+    }
+    addresses.delete('')
+    let toolNames = []
+    try {
+      toolNames = (ctx.tools.definitions?.() ?? []).map((definition) => definition.name)
+    } catch {
+      toolNames = []
+    }
+    const shellCandidates = ['pwsh', 'bash', 'cmd', 'sh']
+    let shells = shellCandidates.filter((name) => toolNames.includes(name))
+    if (shells.length === 0) shells = [process.platform === 'win32' ? 'pwsh' : 'bash']
+    let presets = []
+    try {
+      presets = (await agentPresets?.list?.()) ?? []
+    } catch {
+      presets = []
+    }
+    return {
+      platform: process.platform,
+      addresses: [...addresses],
+      shells,
+      subagentProviders: (() => {
+        try {
+          return subagents?.list?.() ?? ['spawn']
+        } catch {
+          return ['spawn']
+        }
+      })(),
+      presets: presets.map((preset) => ({
+        id: preset.id ?? preset.name,
+        label: preset.name ?? preset.title ?? preset.id,
+      })),
+      cwd: {
+        workspace: workspaceDir,
+        dshHome: process.env.DSH_HOME ?? '',
+        defaultDirectory: workingDirectory?.defaultDirectory ?? '',
+        current: runtime.current.execution?.cwd ?? '',
+      },
+    }
+  }
   if (webServer) {
     ctx.effect(() => registerApprovalRoutes({ webServer, inbox, logger }))
+    ctx.effect(() =>
+      registerConfigRoutes({
+        webServer,
+        runtime,
+        getOptions,
+        preparePatch: async (patch) => {
+          const cwd = patch?.execution?.cwd
+          if (typeof cwd === 'string' && cwd !== '') {
+            try {
+              mkdirSync(cwd, { recursive: true })
+            } catch (error) {
+              logger.warn?.(`[device-fleet] cannot create execution cwd: ${String(error?.message ?? error)}`)
+            }
+          }
+          return patch
+        },
+        logger,
+      }),
+    )
     ctx.effect(() =>
       registerUiRoutes({
         webServer,
@@ -317,7 +395,7 @@ export function apply(ctx, config) {
           : (state.enrollment?.accountFingerprint ?? null)
       return createInvite(state, {
         accountFingerprint: fingerprint,
-        relay: config.relay ?? state.enrollment?.relay ?? null,
+        relay: runtime.current.relay ?? state.enrollment?.relay ?? null,
         endpoints: localEndpoints(),
       })
     },
@@ -345,13 +423,14 @@ export function apply(ctx, config) {
 
   // Adoption layer 2: one sentence, only when the Fleet has members.
   const systemPrompt = service('systemPrompt')
-  if (systemPrompt && config.promptSection !== false) {
+  if (systemPrompt) {
     const order = systemPrompt.getSectionOrder?.('TOOL_SUBAGENT') ?? PROMPT_SECTION_ORDER
     ctx.effect(() =>
       systemPrompt.section({
         name: 'device-fleet:members',
         order,
         text: () => {
+          if (runtime.current.promptSection === false) return ''
           const members = node.rosterEntries().length
           if (members === 0) return ''
           return `This DSH instance is part of a device Fleet with ${members} other device(s). Use fleet_list/fleet_read/fleet_fetch/fleet_run for work that belongs on another device; direct calls fail fast when that device is offline.`
@@ -360,6 +439,48 @@ export function apply(ctx, config) {
     )
   }
 
+  // Live config application: every UI save runs these handlers in-process.
+  runtime.onChange(async (next, previous) => {
+    if (JSON.stringify(next.policy) !== JSON.stringify(previous?.policy)) {
+      policy = new ToolPolicy(next.policy)
+      if (host) host.policy = policy
+      if (delegation) delegation.policy = policy
+    }
+    if (JSON.stringify(next.execution) !== JSON.stringify(previous?.execution)) {
+      slot?.setConfig(next.execution)
+      if (host) {
+        host.shellTool = next.execution?.shellTool ?? DEFAULT_SHELL_TOOL
+        host.approvalTimeoutMs = next.execution?.approvalTimeoutMs ?? 60_000
+      }
+      if (delegation) {
+        delegation.defaultCwd = next.execution?.cwd
+        delegation.defaultAgentPreset = next.execution?.agentPreset
+        delegation.provider = next.execution?.subagentProvider ?? 'spawn'
+        delegation.timeoutMs = next.execution?.delegateTimeoutMs ?? 180_000
+      }
+    }
+    if (JSON.stringify(next.approvals) !== JSON.stringify(previous?.approvals)) {
+      if (Number.isInteger(next.approvals?.ttlMs) && next.approvals.ttlMs >= 1000) inbox.ttlMs = next.approvals.ttlMs
+      if (Number.isInteger(next.approvals?.maxPending) && next.approvals.maxPending >= 1) inbox.maxPending = next.approvals.maxPending
+    }
+    if (next.deviceName !== previous?.deviceName) {
+      node.name = next.deviceName
+      if (host) host.name = next.deviceName
+    }
+    const networkChanged =
+      JSON.stringify(next.direct) !== JSON.stringify(previous?.direct) ||
+      next.discovery !== previous?.discovery ||
+      JSON.stringify(next.relay) !== JSON.stringify(previous?.relay)
+    if (networkChanged) {
+      await node.reconfigure({
+        name: next.deviceName,
+        direct: next.direct,
+        discovery: next.discovery ? true : false,
+        relay: next.relay ?? null,
+      })
+    }
+  })
+
   // Adoption layer 4: one-line nudge when the model starts orchestrating.
   ctx.on?.('tools/post-execute', async (exec, _result, next) => {
     const decision = await next()