dsh-taskboard 0.2.0 → 0.2.2

package/README.md

@@ -20,13 +20,14 @@ DeepSeek Harness 的**任务看板插件**：人建卡、agent 认领执行、
 - 列头状态色圆点：待规划灰 / 待办蓝 / 进行中橙 / 待验收紫 / 已完成绿 / 已删除红
 - 新建/编辑弹窗：项目、模型、紧急度、执行方式、cron 实时校验与下次运行预览
 - 详情面板：状态流转（done 仅限人工）、agent/用户评论流、执行记录（倒序，最新在最上；会话 ID 点击跳转打开该执行会话；已删除/已归档分开提示）、停止执行
+- 待验收列卡片快捷操作：「✓ 完成」一键验收、「✗ 退回」退回待办并可附退回原因（agent 开工前会读）
 
 **Agent 工具（taskboard_\*）**
 - 8 个工具：查板 / 建卡 / 改卡 / 移卡 / 评论 / 软删除，任何会话可用
 - 代码级协议闸：agent 永远移不到 done；任务被持有时不可抢占；model/execution 对 agent 只读
 
 **执行**
-- 手动执行或 cron 定时：每次执行在任务项目内新建全新会话（干净上下文、可指定模型）
+- 手动执行或 cron 定时：每次执行在任务项目内新建全新会话（干净上下文、可指定模型）；开场两条消息同一回合送达——插件上下文行携带任务框架与交接协议（含失败回退路径），卡片内容（提示词或标题+描述）以正常用户消息呈现
 - host 侧调度：关掉浏览器照常触发；错过窗口跳过不补跑
 - 乐观并发（ifVersion）+ 完整归因（谁改的、哪个会话执行的）
 
@@ -43,12 +44,21 @@ dsh plugin --profile <name> add github:cloader/dsh-taskboard   # GitHub 源
 
 ```bash
 npm install && npm run build    # host ESM + client CJS 双构建
-npm test                        # vitest 64 项
+npm test                        # vitest 67 项
 node scripts/screenshot.mjs     # 重新生成 img/ 截图（需本机 Edge）
 ```
 
 ## 升级日志
 
+### 0.2.2
+
+- **待验收快捷操作**：待验收列卡片上直接「✓ 完成 / ✗ 退回」，退回可附原因（可留空），退回与评语一次原子提交（移卡失败不会产生孤儿评论）
+- 非法状态流转的 HTTP 状态码由 500 修正为 400
+
+### 0.2.1
+
+- 调整任务发起时的提示词
+
 ### 0.2.0
 
 - **看板效率**：顶栏新增搜索（标题/ID，大小写不敏感）、列内排序（默认/最近更新/紧急度/创建时间）；筛选与排序按 localStorage 持久化（搜索不持久）

package/lib/client.js

@@ -34,6 +34,7 @@ window.__ModuleLoader__.load({
 				get: (id) => unwrap(fetch(`/dsh-taskboard/tasks/${encodeURIComponent(id)}`)),
 				update: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/update`, body),
 				move: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/move`, body),
+				reject: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/reject`, body),
 				comment: (id, bodyText) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/comment`, { body: bodyText }),
 				remove: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/delete`, body),
 				run: (id) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/run`, {}),
@@ -474,6 +475,27 @@ window.__ModuleLoader__.load({
 					this.setState({ error: error instanceof Error ? error.message : String(error) });
 				}
 			}
+			/**
+			* Quick-reject (card ✗ button): move back to todo with an optional user
+			* comment, committed atomically host-side. Returns whether the task moved.
+			* @param id - task id.
+			* @param ifVersion - optimistic version (captured at click time).
+			* @param comment - optional comment text; blank = move only.
+			*/
+			async reject(id, ifVersion, comment) {
+				const body = comment !== void 0 && comment.trim().length > 0 ? comment.trim() : void 0;
+				try {
+					await this.client.reject(id, body === void 0 ? { ifVersion } : {
+						ifVersion,
+						body
+					});
+					await this.refresh();
+					return true;
+				} catch (error) {
+					this.setState({ error: error instanceof Error ? error.message : String(error) });
+					return false;
+				}
+			}
 			/** Toggle the blocked marker. */
 			async toggleBlocked(task) {
 				try {
@@ -763,6 +785,21 @@ window.__ModuleLoader__.load({
 		.dsh-atb-badge[data-kind="done"] { background: rgba(46,160,67,.16); color: #2ea043; }
 		.dsh-atb-badge[data-kind="running"] { background: rgba(229,152,42,.16); color: #e69842; }
 
+		/* ---------- card quick review (in_review column) ---------- */
+		.dsh-atb-quick { display: flex; gap: 6px; margin-top: 7px; }
+		.dsh-atb-quickbtn {
+		  flex: 1; font-size: 11.5px; padding: 3px 8px; border-radius: 6px; cursor: pointer;
+		  border: 1px solid var(--dsw-border, rgba(128,128,128,.3));
+		  background: var(--dsw-bg-elevated, rgba(128,128,128,.12)); color: inherit;
+		}
+		.dsh-atb-quickbtn:hover { border-color: var(--dsw-border-strong, rgba(128,128,128,.6)); }
+		.dsh-atb-quickbtn[data-act="done"] { background: rgba(46,160,67,.14); color: #2ea043; border-color: rgba(46,160,67,.4); }
+		.dsh-atb-quickbtn[data-act="done"]:hover { background: rgba(46,160,67,.22); }
+		.dsh-atb-quickbtn[data-act="reject"] { background: rgba(229,152,42,.12); color: #d9822b; border-color: rgba(229,152,42,.4); }
+		.dsh-atb-quickbtn[data-act="reject"]:hover { background: rgba(229,152,42,.2); }
+		.dsh-atb-quick-reject { display: flex; gap: 6px; margin-top: 7px; align-items: stretch; }
+		.dsh-atb-quick-note { flex: 1; min-width: 0; font-size: 11.5px; padding: 3px 8px; }
+
 		.dsh-atb-error { font-size: 12px; color: #e5484d; padding: 4px 8px; border-radius: 6px; background: rgba(229,72,77,.1); }
 		.dsh-atb-empty { font-size: 12px; color: var(--dsw-text-secondary, gray); padding: 10px 4px; }
 
@@ -1312,10 +1349,23 @@ window.__ModuleLoader__.load({
 		* @module dsh-taskboard/shared/version
 		*/
 		/** The package version (must equal package.json "version"). */
-		const PLUGIN_VERSION = "0.2.0";
+		const PLUGIN_VERSION = "0.2.2";
 
 		//#endregion
 		//#region src/client/board/TaskCard.tsx
+		/**
+		* One board card: urgency edge, title, project/urgency/model/schedule/
+		* blocked/trashed badges, comment count, and the last execution outcome.
+		* Click opens the detail pane; cards in the backlog/todo columns are
+		* draggable between those two columns (HTML5 drag & drop). Cards sitting
+		* in the in_review column also carry quick-review actions (✓ complete /
+		* ✗ send back with an optional note).
+		*
+		* The root is a div[role=button] (not a <button>) so the quick actions can
+		* be real nested buttons — valid HTML and native keyboard activation.
+		*
+		* @module dsh-taskboard/client/board/TaskCard
+		*/
 		const URGENCY_LABEL$1 = {
 			urgent: "紧急",
 			normal: "一般",
@@ -1338,14 +1388,27 @@ window.__ModuleLoader__.load({
 		* @param onAlert - show an alert message (replaces native alert).
 		*/
 		function TaskCard({ task, controller, draggable = false, now, onAlert }) {
+			const [rejectOpen, setRejectOpen] = (0, react.useState)(false);
+			const [note, setNote] = (0, react.useState)("");
 			const last = task.executions.length > 0 ? task.executions[task.executions.length - 1] : void 0;
 			const running = task.executions.find((ex) => ex.outcome === "running");
 			const stale = now !== void 0 && isStaleClaim(task, now);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
-				type: "button",
+			const reviewing = task.status === "in_review" && task.trashedAt === void 0;
+			/** Submit the quick-reject: one atomic route (move + optional note). */
+			const submitReject = () => {
+				controller.reject(task.id, task.version, note).then((ok) => {
+					if (ok) {
+						setRejectOpen(false);
+						setNote("");
+					}
+				});
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				role: "button",
+				tabIndex: 0,
 				className: "dsh-atb-card",
 				"data-urgency": task.urgency,
-				draggable,
+				draggable: draggable && !rejectOpen,
 				onDragStart: (e) => {
 					if (running !== void 0) {
 						e.preventDefault();
@@ -1362,57 +1425,123 @@ window.__ModuleLoader__.load({
 					delete e.currentTarget.dataset.dragging;
 				},
 				onClick: () => controller.select(task.id),
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: "dsh-atb-card-title",
-					children: task.title
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dsh-atb-card-meta",
-					children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							children: URGENCY_LABEL$1[task.urgency]
-						}),
-						task.blocked && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							"data-kind": "blocked",
-							children: "受阻"
-						}),
-						stale && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							"data-kind": "stale",
-							children: "⏱ 认领超时"
-						}),
-						task.execution.mode === "scheduled" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-							className: "dsh-atb-badge",
-							"data-kind": "scheduled",
-							children: ["⏰ ", fmtTime(task.execution.nextRunAt)]
-						}),
-						task.model !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							children: task.model.model
-						}),
-						task.status === "done" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							"data-kind": "done",
-							children: "完成"
-						}),
-						last !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							"data-kind": last.outcome === "running" ? "running" : last.outcome,
-							children: OUTCOME_LABEL$1[last.outcome] ?? last.outcome
-						}),
-						task.comments.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: ["💬 ", task.comments.length] }),
-						task.trashedAt !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-atb-badge",
-							"data-kind": "trashed",
-							children: "待清除"
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							style: { marginLeft: "auto" },
-							children: fmtTime(task.updatedAt)
-						})
-					]
-				})]
+				onKeyDown: (e) => {
+					if (e.target !== e.currentTarget) return;
+					if (e.key === "Enter" || e.key === " ") {
+						e.preventDefault();
+						controller.select(task.id);
+					}
+				},
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-atb-card-title",
+						children: task.title
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-atb-card-meta",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								children: URGENCY_LABEL$1[task.urgency]
+							}),
+							task.blocked && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								"data-kind": "blocked",
+								children: "受阻"
+							}),
+							stale && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								"data-kind": "stale",
+								children: "⏱ 认领超时"
+							}),
+							task.execution.mode === "scheduled" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: "dsh-atb-badge",
+								"data-kind": "scheduled",
+								children: ["⏰ ", fmtTime(task.execution.nextRunAt)]
+							}),
+							task.model !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								children: task.model.model
+							}),
+							task.status === "done" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								"data-kind": "done",
+								children: "完成"
+							}),
+							last !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								"data-kind": last.outcome === "running" ? "running" : last.outcome,
+								children: OUTCOME_LABEL$1[last.outcome] ?? last.outcome
+							}),
+							task.comments.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: ["💬 ", task.comments.length] }),
+							task.trashedAt !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-atb-badge",
+								"data-kind": "trashed",
+								children: "待清除"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: { marginLeft: "auto" },
+								children: fmtTime(task.updatedAt)
+							})
+						]
+					}),
+					reviewing && (rejectOpen ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-atb-quick-reject",
+						onClick: (e) => e.stopPropagation(),
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								className: "dsh-atb-input dsh-atb-quick-note",
+								value: note,
+								placeholder: "退回原因（可选，agent 开工前会读）…",
+								autoFocus: true,
+								spellCheck: false,
+								onChange: (e) => setNote(e.target.value),
+								onKeyDown: (e) => {
+									if (e.key === "Enter") submitReject();
+									else if (e.key === "Escape") {
+										setRejectOpen(false);
+										setNote("");
+									}
+								}
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-atb-quickbtn",
+								"data-act": "reject-confirm",
+								onClick: submitReject,
+								children: "退回待办"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-atb-quickbtn",
+								"data-act": "reject-cancel",
+								onClick: () => {
+									setRejectOpen(false);
+									setNote("");
+								},
+								children: "取消"
+							})
+						]
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-atb-quick",
+						onClick: (e) => e.stopPropagation(),
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-atb-quickbtn",
+							"data-act": "done",
+							title: "验收完成：移至已完成",
+							onClick: () => void controller.move(task.id, task.version, "done"),
+							children: "✓ 完成"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-atb-quickbtn",
+							"data-act": "reject",
+							title: "退回待办，可附退回原因",
+							onClick: () => setRejectOpen(true),
+							children: "✗ 退回"
+						})]
+					}))
+				]
 			});
 		}
 

package/lib/host/execution.js

@@ -149,16 +149,27 @@ var ExecutionService = class {
 			this.deps.renameSession?.(sessionId, task.title);
 		} catch {}
 		await this.patchExecution(executionId, { sessionId });
-		const message = {
+		handle.agent.inject({
 			id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),
 			role: "user",
 			content: [{
 				type: "text",
-				text: this.executionPrompt(task)
+				text: this.pluginFraming(task)
+			}],
+			source: {
+				kind: "plugin",
+				plugin: "dsh-taskboard"
+			}
+		});
+		handle.agent.followup({
+			id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),
+			role: "user",
+			content: [{
+				type: "text",
+				text: this.userBody(task)
 			}],
 			source: { kind: "user" }
-		};
-		handle.agent.followup(message);
+		});
 		const settle = () => {
 			this.runs.delete(executionId);
 			this.deps.store.mutate("execution-recorded", (ledger) => {
@@ -280,21 +291,26 @@ var ExecutionService = class {
 		});
 	}
 	/**
-	* The prompt text one execution submits (task context + instructions).
-	* The effective prompt supports two template variables, rendered from the
-	* task's own history at submit time (valuable for recurring patrols):
+	* The plugin framing line (rendered as a plugin context row): task head,
+	* already-claimed state, and the handoff protocol — everything the session
+	* must know about the board. The task id appears exactly once (here); the
+	* protocol steps below refer to it as 本任务.
+	*/
+	pluginFraming(task) {
+		return `【任务看板】${task.title}（ID: ${task.id}）\n本会话由任务看板执行服务启动，任务已置为进行中——无需认领；「已完成」仅限用户在界面操作（代码已限制，移了会被拒）。\n完成后按序交接：\n1. taskboard_get 读取本任务，取得最新 version\n2. taskboard_comment_add 留评论：做了什么改动 / 如何验证 / 剩余风险\n3. taskboard_move 将本任务移至待验收 in_review（带 ifVersion）\n若无法完成：留评论说明原因，将任务移回待办 todo。`;
+	}
+	/**
+	* The card body as a normal user bubble: the effective prompt (explicit
+	* prompt, else title+description) with template variables resolved from
+	* the task's own history at submit time (valuable for recurring patrols):
 	* `{{lastExecution}}` → the previous execution's trigger/outcome/error;
 	* `{{lastComments}}` → the last three comments (who + body).
 	*/
-	executionPrompt(task) {
-		const state = "本任务由执行服务启动本会话并已置为 in_progress（你无需再认领，也无需移到 done）。";
-		const tail = `完成后请：1) 用 taskboard_get 读取任务 ${task.id} 拿最新 version；2) 用 taskboard_comment_add 留评论（做了什么改动、如何验证、剩余风险）；3) 用 taskboard_move 把任务 ${task.id} 移到 in_review（带 ifVersion）。`;
-		const base = effectivePrompt(task);
+	userBody(task) {
 		const lastExec = [...task.executions].reverse().find((e) => e.outcome !== "running");
 		const lastExecText = lastExec === void 0 ? "（无）" : `${lastExec.trigger} · ${lastExec.outcome}${lastExec.error !== void 0 ? ` · ${lastExec.error.slice(0, 200)}` : ""} · ${new Date(lastExec.startedAt ?? 0).toISOString()}`;
 		const lastCommentsText = task.comments.slice(-3).map((c) => `[${c.threadId !== void 0 ? "agent" : "user"}] ${c.body}`).join("\n") || "（无）";
-		const body = base.replace(/\{\{lastExecution\}\}/g, lastExecText).replace(/\{\{lastComments\}\}/g, lastCommentsText);
-		return `【任务】${task.title}（任务 ID: ${task.id}）\n\n${state}\n\n${body}\n\n${tail}`;
+		return effectivePrompt(task).replace(/\{\{lastExecution\}\}/g, lastExecText).replace(/\{\{lastComments\}\}/g, lastCommentsText);
 	}
 	/** Move a task back out of in_progress (and release its hold) after a failed start. */
 	async revertProgress(taskId) {

package/lib/host/execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution.js","names":[],"sources":["../../src/host/execution.ts"],"sourcesContent":["/**\n * Host execution service: runs a task through dsh's REAL session machinery —\n * a fresh agent+session inside the task's project workspace (creation carries\n * the pinned model when the task has one), the session is attached to the\n * workspace so it appears in the GUI's project session list, the effective\n * prompt is submitted as an ordinary user message, and the turn settlement\n * (turn/end reason) is folded back into the task's execution record.\n *\n * Every execution is a NEW session: clean context, no reuse of previous runs.\n *\n * @module dsh-taskboard/host/execution\n */\nimport {\n  effectivePrompt,\n  newCommentId,\n  newExecutionId,\n  normalizeBody,\n  type ExecutionRecord,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { MessageId } from './sdk.ts'\nimport type { TaskStore } from './store.ts'\n\n/** Default cap on concurrently running executions (env-overridable). */\nexport const DEFAULT_MAX_CONCURRENT = 3\n\n/** Narrow agents face (the registry's create, structurally). */\nexport interface AgentsFace {\n  create(options: {\n    sessionId: string\n    meta?: { cwd?: string }\n    agentOptions?: { provider?: string; model?: string }\n  }): Promise<{\n    agent: {\n      id: string\n      followup(message: unknown): void\n      whenIdle(): Promise<void>\n    }\n    dispose(): Promise<void>\n  }>\n}\n\n/** Narrow workspaces face for execution. */\nexport interface ExecutionWorkspaceFace {\n  get(id: string): { id: string; path: string } | undefined\n  attach(workspaceId: string, sessionId: string): Promise<void>\n}\n\n/** Narrow event-bus face for settlement listening. */\nexport interface EventsFace {\n  onSessionEvent(listener: (sessionId: string, event: { type: string; data?: unknown }) => void): () => void\n}\n\n/** Everything the execution service needs. */\nexport interface ExecutionDeps {\n  store: TaskStore\n  agents: AgentsFace\n  workspaces: ExecutionWorkspaceFace\n  events: EventsFace\n  now: () => number\n  /** The deployment default model (fills sessions of unpinned tasks). */\n  defaultModel?: () => { provider: string; model: string } | undefined\n  /** Mint session ids (injectable for tests). */\n  mintSessionId?: () => string\n  /** Mint message ids (injectable for tests). */\n  mintMessageId?: () => string\n  /** Best-effort session rename (pins the session list title to the task title). */\n  renameSession?: (sessionId: string, title: string) => void\n  /** Max concurrently running executions across all tasks (default 3). */\n  maxConcurrent?: number\n}\n\n/** Outcome of a run request (immediate; the run settles asynchronously). */\nexport type RunRequestResult =\n  | { ok: true; executionId: string; sessionId: string }\n  | { ok: false; error: string }\n\n/** Outcome of a cancel request. */\nexport type CancelRequestResult =\n  | { ok: true; executionId: string }\n  | { ok: false; error: string }\n\n/** Whether a turn/end payload closed with an error reason. */\nfunction isErrorTurnEnd(data: unknown): { message: string } | undefined {\n  if (typeof data !== 'object' || data === null) return undefined\n  const reason = (data as { reason?: unknown }).reason\n  if (typeof reason !== 'object' || reason === null) return undefined\n  const kind = (reason as { kind?: unknown }).kind\n  if (kind !== 'error') return undefined\n  const error = (reason as { error?: { message?: unknown } }).error\n  const detail = JSON.stringify(error) ?? ''\n  const message = typeof error?.message === 'string' ? error.message : 'turn failed'\n  console.error('[dsh-taskboard] turn error detail:', detail.slice(0, 2000))\n  void detail\n  return { message }\n}\n\n/** One live execution tracked for settlement and cancellation. */\ninterface RunEntry {\n  sessionId: string\n  settle: () => void\n  dispose: () => Promise<void>\n}\n\n/**\n * The execution service.\n */\nexport class ExecutionService {\n  /** Live executions by execution id (settles and cancels remove entries). */\n  private readonly runs = new Map<string, RunEntry>()\n\n  /** @param deps - store + agents + workspaces + events + clock. */\n  constructor(private readonly deps: ExecutionDeps) {\n    deps.events.onSessionEvent((sessionId, event) => {\n      if (event.type !== 'turn/end') return\n      const failure = isErrorTurnEnd(event.data)\n      if (failure !== undefined) this.noteFailure(sessionId, failure.message)\n    })\n  }\n\n  /** Record a turn failure against the running execution of that session and give the task back. */\n  private noteFailure(sessionId: string, message: string): void {\n    void this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        for (const execution of task.executions) {\n          if (execution.sessionId === sessionId && execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = message.slice(0, 500)\n            execution.endedAt = this.deps.now()\n            // The failed session will not finish the work: hand the task back\n            // instead of leaving it stuck in in_progress forever — and leave a\n            // system comment so the GUI shows why.\n            if (task.status === 'in_progress' && task.claimedBy === sessionId) {\n              task.status = 'todo'\n              task.updatedAt = this.deps.now()\n              delete task.claimedBy\n              delete task.claimedAt\n              task.comments.push({\n                id: newCommentId(),\n                body: normalizeBody(`[系统] 执行失败：${message.slice(0, 300)}；任务已退回待办。`),\n                version: 1,\n                createdAt: this.deps.now(),\n              })\n            }\n            return [task]\n          }\n        }\n      }\n      return undefined\n    })\n  }\n\n  /** Patch one task's execution record in the ledger. */\n  private async patchExecution(executionId: string, patch: Partial<ExecutionRecord>): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        const execution = task.executions.find(e => e.id === executionId)\n        if (execution !== undefined) {\n          Object.assign(execution, patch)\n          return [task]\n        }\n      }\n      return undefined\n    })\n  }\n\n  /**\n   * Run one task now (manual button or scheduler tick).\n   *\n   * The in-progress gate and the execution-open write happen inside ONE\n   * serial-queue mutation, so two overlapping run() calls (double click,\n   * overlapping scheduler ticks) can never both pass — exactly one session\n   * is opened per task.\n   * @param taskId - the task to run.\n   * @param trigger - what started it.\n   * @returns the immediate result; settlement lands in the ledger.\n   */\n  async run(taskId: string, trigger: ExecutionRecord['trigger']): Promise<RunRequestResult> {\n    const max = this.deps.maxConcurrent ?? DEFAULT_MAX_CONCURRENT\n    if (this.runs.size >= max) {\n      return { ok: false, error: `execution concurrency limit reached (${this.runs.size}/${max} running)` }\n    }\n    const task = this.deps.store.get(taskId)\n    if (task === undefined || task.trashedAt !== undefined) {\n      return { ok: false, error: `no task ${taskId}` }\n    }\n    const workspace = this.deps.workspaces.get(task.workspaceId)\n    if (workspace === undefined) {\n      return { ok: false, error: `unknown workspace ${task.workspaceId}` }\n    }\n\n    const executionId = newExecutionId()\n    const sessionId = this.deps.mintSessionId?.() ?? `session-taskboard-${crypto.randomUUID()}`\n\n    // 1. Open the execution record, flip the card to in_progress, and record\n    //    the executing session as the claim holder — atomically.\n    let gate: string | undefined\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined || target.trashedAt !== undefined) {\n        gate = `no task ${taskId}`\n        return undefined\n      }\n      if (target.status === 'in_progress') {\n        gate = 'task is already in progress'\n        return undefined\n      }\n      target.executions.push({\n        id: executionId,\n        trigger,\n        startedAt: this.deps.now(),\n        outcome: 'running',\n      })\n      target.status = 'in_progress'\n      target.updatedAt = this.deps.now()\n      target.updatedBy = { kind: 'user' }\n      target.claimedBy = sessionId\n      target.claimedAt = this.deps.now()\n      return [target]\n    })\n    if (gate !== undefined) return { ok: false, error: gate }\n\n    // 2. Create the fresh agent+session inside the task's project, carrying\n    //    the pinned model — or the deployment default when unpinned (the\n    //    persona template renders {{model}}, so the session always needs one).\n    let handle: Awaited<ReturnType<AgentsFace['create']>>\n    try {\n      const model = task.model ?? this.deps.defaultModel?.()\n      handle = await this.deps.agents.create({\n        sessionId,\n        meta: { cwd: workspace.path },\n        ...(model !== undefined ? { agentOptions: { provider: model.provider, model: model.model } } : {}),\n      })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      await this.patchExecution(executionId, { outcome: 'failed', error: message.slice(0, 500), endedAt: this.deps.now() })\n      await this.revertProgress(taskId)\n      return { ok: false, error: message }\n    }\n\n    // 3. Attach the session to the workspace (GUI project session list).\n    await this.deps.workspaces.attach(task.workspaceId, sessionId).catch(() => { /* cosmetic */ })\n\n    // 3b. Best-effort rename: pin the session title to the task title so the\n    //     session list shows the task name (a user-sourced title also stops\n    //     automatic first-prompt retitling).\n    try {\n      this.deps.renameSession?.(sessionId, task.title)\n    } catch { /* cosmetic */ }\n\n    // 4. Record the session id (execution is really started now).\n    await this.patchExecution(executionId, { sessionId })\n\n    // 5. Submit the effective prompt as an ordinary user message and settle\n    //    on quiescence (turn/end errors were already folded by the listener).\n    //    Source `user` (not `plugin`) so the opening message renders as a\n    //    normal user bubble in the conversation, exactly like a typed prompt.\n    const message = {\n      id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),\n      role: 'user' as const,\n      content: [{ type: 'text' as const, text: this.executionPrompt(task) }],\n      source: { kind: 'user' as const },\n    }\n    handle.agent.followup(message)\n\n    // 6. Settlement watcher: mark succeeded, release the executing session's\n    //    hold, and — when the session did NOT follow the handoff protocol —\n    //    auto-move the card to in_review with a system comment (otherwise a\n    //    disobedient session would leave it hanging in in_progress forever).\n    const settle = (): void => {\n      this.runs.delete(executionId)\n      void this.deps.store.mutate('execution-recorded', (ledger) => {\n        for (const t of ledger.tasks) {\n          const execution = t.executions.find(e => e.id === executionId)\n          if (execution !== undefined && execution.outcome === 'running') {\n            const now = this.deps.now()\n            execution.outcome = 'succeeded'\n            execution.endedAt = now\n            if (t.status === 'in_progress' && t.claimedBy === sessionId) {\n              delete t.claimedBy\n              delete t.claimedAt\n            }\n            if (t.status === 'in_progress') {\n              const commented = t.comments.some(c => c.threadId === sessionId)\n              t.comments.push({\n                id: newCommentId(),\n                body: normalizeBody(commented\n                  ? '[系统] 执行会话已结束并留有评论，但未移至待验收；系统自动移入待验收。'\n                  : '[系统] 执行会话已结束，但未按协议交接（无评论、未移至待验收）；系统自动移入待验收，请审查后退回或验收。'),\n                version: 1,\n                createdAt: now,\n              })\n              t.status = 'in_review'\n              t.updatedAt = now\n              t.updatedBy = { kind: 'user' }\n            }\n            return [t]\n          }\n        }\n        return undefined\n      })\n    }\n    this.runs.set(executionId, { sessionId, settle, dispose: () => handle.dispose() })\n    void handle.agent.whenIdle().then(settle, () => {\n      this.noteFailure(sessionId, 'agent did not reach quiescence')\n      settle()\n    })\n\n    return { ok: true, executionId, sessionId }\n  }\n\n  /** How many executions are currently running (for the concurrency cap). */\n  inFlight(): number {\n    return this.runs.size\n  }\n\n  /**\n   * Cancel the running execution of a task (user action): stop the agent\n   * session, mark the execution cancelled, and hand the task back to todo.\n   * @param taskId - the task whose execution should be stopped.\n   * @returns the immediate result.\n   */\n  async cancel(taskId: string): Promise<CancelRequestResult> {\n    const task = this.deps.store.get(taskId)\n    if (task === undefined) return { ok: false, error: `no task ${taskId}` }\n    const running = [...task.executions].reverse().find(e => e.outcome === 'running')\n    if (running === undefined) return { ok: false, error: 'no running execution' }\n\n    const entry = this.runs.get(running.id)\n    this.runs.delete(running.id)\n    // Stop the agent first (best effort): dispose stops the loop, unregisters\n    // the agent, and removes its session. A late whenIdle settlement no-ops —\n    // the record is no longer 'running'.\n    try {\n      await entry?.dispose()\n    } catch { /* already gone */ }\n\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined) return undefined\n      const execution = target.executions.find(e => e.id === running.id)\n      if (execution === undefined || execution.outcome !== 'running') return undefined\n      execution.outcome = 'cancelled'\n      execution.endedAt = this.deps.now()\n      if (target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        delete target.claimedBy\n        delete target.claimedAt\n      }\n      return [target]\n    })\n    return { ok: true, executionId: running.id }\n  }\n\n  /**\n   * Startup reconciliation after a host restart: executions left `running`\n   * by the previous process can never settle here (their settlement watchers\n   * died with it), so mark them failed and hand their tasks back to todo.\n   */\n  async reconcile(): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const now = this.deps.now()\n      const touched: TaskRecord[] = []\n      for (const task of ledger.tasks) {\n        let dirty = false\n        for (const execution of task.executions) {\n          if (execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = 'interrupted by host restart'\n            execution.endedAt = now\n            dirty = true\n          }\n        }\n        if (!dirty) continue\n        if (task.status === 'in_progress') {\n          task.status = 'todo'\n          task.updatedAt = now\n          delete task.claimedBy\n          delete task.claimedAt\n        }\n        touched.push(task)\n      }\n      return touched.length > 0 ? touched : undefined\n    })\n  }\n\n  /**\n   * The prompt text one execution submits (task context + instructions).\n   * The effective prompt supports two template variables, rendered from the\n   * task's own history at submit time (valuable for recurring patrols):\n   * `{{lastExecution}}` → the previous execution's trigger/outcome/error;\n   * `{{lastComments}}` → the last three comments (who + body).\n   */\n  private executionPrompt(task: TaskRecord): string {\n    const state = '本任务由执行服务启动本会话并已置为 in_progress（你无需再认领，也无需移到 done）。'\n    const tail = `完成后请：1) 用 taskboard_get 读取任务 ${task.id} 拿最新 version；`\n      + `2) 用 taskboard_comment_add 留评论（做了什么改动、如何验证、剩余风险）；`\n      + `3) 用 taskboard_move 把任务 ${task.id} 移到 in_review（带 ifVersion）。`\n    const base = effectivePrompt(task)\n    const lastExec = [...task.executions].reverse().find(e => e.outcome !== 'running')\n    const lastExecText = lastExec === undefined\n      ? '（无）'\n      : `${lastExec.trigger} · ${lastExec.outcome}${lastExec.error !== undefined ? ` · ${lastExec.error.slice(0, 200)}` : ''} · ${new Date(lastExec.startedAt ?? 0).toISOString()}`\n    const lastCommentsText = task.comments.slice(-3)\n      .map(c => `[${c.threadId !== undefined ? 'agent' : 'user'}] ${c.body}`)\n      .join('\\n') || '（无）'\n    const body = base\n      .replace(/\\{\\{lastExecution\\}\\}/g, lastExecText)\n      .replace(/\\{\\{lastComments\\}\\}/g, lastCommentsText)\n    return `【任务】${task.title}（任务 ID: ${task.id}）\\n\\n${state}\\n\\n${body}\\n\\n${tail}`\n  }\n\n  /** Move a task back out of in_progress (and release its hold) after a failed start. */\n  private async revertProgress(taskId: string): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target !== undefined && target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        delete target.claimedBy\n        delete target.claimedAt\n        return [target]\n      }\n      return undefined\n    })\n  }\n}\n"],"mappings":";;;AAmFA,SAAS,eAAe,MAAgD;CACtE,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO,KAAA;CACtD,MAAM,SAAU,KAA8B;CAC9C,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;CAE1D,IADc,OAA8B,SAC/B,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAS,OAA6C;CAC5D,MAAM,SAAS,KAAK,UAAU,KAAK,KAAK;CACxC,MAAM,UAAU,OAAO,OAAO,YAAY,WAAW,MAAM,UAAU;CACrE,QAAQ,MAAM,sCAAsC,OAAO,MAAM,GAAG,GAAI,CAAC;CAEzE,OAAO,EAAE,QAAQ;AACnB;;;;AAYA,IAAa,mBAAb,MAA8B;CAKC;;CAH7B,uBAAwB,IAAI,IAAsB;;CAGlD,YAAY,MAAsC;EAArB,KAAA,OAAA;EAC3B,KAAK,OAAO,gBAAgB,WAAW,UAAU;GAC/C,IAAI,MAAM,SAAS,YAAY;GAC/B,MAAM,UAAU,eAAe,MAAM,IAAI;GACzC,IAAI,YAAY,KAAA,GAAW,KAAK,YAAY,WAAW,QAAQ,OAAO;EACxE,CAAC;CACH;;CAGA,YAAoB,WAAmB,SAAuB;EAC5D,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC5D,KAAK,MAAM,QAAQ,OAAO,OACxB,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,cAAc,aAAa,UAAU,YAAY,WAAW;IACxE,UAAU,UAAU;IACpB,UAAU,QAAQ,QAAQ,MAAM,GAAG,GAAG;IACtC,UAAU,UAAU,KAAK,KAAK,IAAI;IAIlC,IAAI,KAAK,WAAW,iBAAiB,KAAK,cAAc,WAAW;KACjE,KAAK,SAAS;KACd,KAAK,YAAY,KAAK,KAAK,IAAI;KAC/B,OAAO,KAAK;KACZ,OAAO,KAAK;KACZ,KAAK,SAAS,KAAK;MACjB,IAAI,aAAa;MACjB,MAAM,cAAc,aAAa,QAAQ,MAAM,GAAG,GAAG,EAAE,UAAU;MACjE,SAAS;MACT,WAAW,KAAK,KAAK,IAAI;KAC3B,CAAC;IACH;IACA,OAAO,CAAC,IAAI;GACd;EAIN,CAAC;CACH;;CAGA,MAAc,eAAe,aAAqB,OAAgD;EAChG,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,MAAM,YAAY,KAAK,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;IAChE,IAAI,cAAc,KAAA,GAAW;KAC3B,OAAO,OAAO,WAAW,KAAK;KAC9B,OAAO,CAAC,IAAI;IACd;GACF;EAEF,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,IAAI,QAAgB,SAAgE;EACxF,MAAM,MAAM,KAAK,KAAK,iBAAA;EACtB,IAAI,KAAK,KAAK,QAAQ,KACpB,OAAO;GAAE,IAAI;GAAO,OAAO,wCAAwC,KAAK,KAAK,KAAK,GAAG,IAAI;EAAW;EAEtG,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,KAAa,KAAK,cAAc,KAAA,GAC3C,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EAEjD,MAAM,YAAY,KAAK,KAAK,WAAW,IAAI,KAAK,WAAW;EAC3D,IAAI,cAAc,KAAA,GAChB,OAAO;GAAE,IAAI;GAAO,OAAO,qBAAqB,KAAK;EAAc;EAGrE,MAAM,cAAc,eAAe;EACnC,MAAM,YAAY,KAAK,KAAK,gBAAgB,KAAK,qBAAqB,OAAO,WAAW;EAIxF,IAAI;EACJ,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,cAAc,KAAA,GAAW;IAC1D,OAAO,WAAW;IAClB;GACF;GACA,IAAI,OAAO,WAAW,eAAe;IACnC,OAAO;IACP;GACF;GACA,OAAO,WAAW,KAAK;IACrB,IAAI;IACJ;IACA,WAAW,KAAK,KAAK,IAAI;IACzB,SAAS;GACX,CAAC;GACD,OAAO,SAAS;GAChB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,YAAY,EAAE,MAAM,OAAO;GAClC,OAAO,YAAY;GACnB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,CAAC,MAAM;EAChB,CAAC;EACD,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAK;EAKxD,IAAI;EACJ,IAAI;GACF,MAAM,QAAQ,KAAK,SAAS,KAAK,KAAK,eAAe;GACrD,SAAS,MAAM,KAAK,KAAK,OAAO,OAAO;IACrC;IACA,MAAM,EAAE,KAAK,UAAU,KAAK;IAC5B,GAAI,UAAU,KAAA,IAAY,EAAE,cAAc;KAAE,UAAU,MAAM;KAAU,OAAO,MAAM;IAAM,EAAE,IAAI,CAAC;GAClG,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,KAAK,eAAe,aAAa;IAAE,SAAS;IAAU,OAAO,QAAQ,MAAM,GAAG,GAAG;IAAG,SAAS,KAAK,KAAK,IAAI;GAAE,CAAC;GACpH,MAAM,KAAK,eAAe,MAAM;GAChC,OAAO;IAAE,IAAI;IAAO,OAAO;GAAQ;EACrC;EAGA,MAAM,KAAK,KAAK,WAAW,OAAO,KAAK,aAAa,SAAS,CAAC,CAAC,YAAY,CAAiB,CAAC;EAK7F,IAAI;GACF,KAAK,KAAK,gBAAgB,WAAW,KAAK,KAAK;EACjD,QAAQ,CAAiB;EAGzB,MAAM,KAAK,eAAe,aAAa,EAAE,UAAU,CAAC;EAMpD,MAAM,UAAU;GACd,IAAI,KAAK,KAAK,gBAAgB,KAAK,UAAU,iBAAiB,OAAO,WAAW,GAAG;GACnF,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAiB,MAAM,KAAK,gBAAgB,IAAI;GAAE,CAAC;GACrE,QAAQ,EAAE,MAAM,OAAgB;EAClC;EACA,OAAO,MAAM,SAAS,OAAO;EAM7B,MAAM,eAAqB;GACzB,KAAK,KAAK,OAAO,WAAW;GAC5B,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;IAC5D,KAAK,MAAM,KAAK,OAAO,OAAO;KAC5B,MAAM,YAAY,EAAE,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;KAC7D,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW;MAC9D,MAAM,MAAM,KAAK,KAAK,IAAI;MAC1B,UAAU,UAAU;MACpB,UAAU,UAAU;MACpB,IAAI,EAAE,WAAW,iBAAiB,EAAE,cAAc,WAAW;OAC3D,OAAO,EAAE;OACT,OAAO,EAAE;MACX;MACA,IAAI,EAAE,WAAW,eAAe;OAC9B,MAAM,YAAY,EAAE,SAAS,MAAK,MAAK,EAAE,aAAa,SAAS;OAC/D,EAAE,SAAS,KAAK;QACd,IAAI,aAAa;QACjB,MAAM,cAAc,YAChB,yCACA,uDAAuD;QAC3D,SAAS;QACT,WAAW;OACb,CAAC;OACD,EAAE,SAAS;OACX,EAAE,YAAY;OACd,EAAE,YAAY,EAAE,MAAM,OAAO;MAC/B;MACA,OAAO,CAAC,CAAC;KACX;IACF;GAEF,CAAC;EACH;EACA,KAAK,KAAK,IAAI,aAAa;GAAE;GAAW;GAAQ,eAAe,OAAO,QAAQ;EAAE,CAAC;EACjF,OAAY,MAAM,SAAS,CAAC,CAAC,KAAK,cAAc;GAC9C,KAAK,YAAY,WAAW,gCAAgC;GAC5D,OAAO;EACT,CAAC;EAED,OAAO;GAAE,IAAI;GAAM;GAAa;EAAU;CAC5C;;CAGA,WAAmB;EACjB,OAAO,KAAK,KAAK;CACnB;;;;;;;CAQA,MAAM,OAAO,QAA8C;EACzD,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EACvE,MAAM,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,YAAY,SAAS;EAChF,IAAI,YAAY,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAuB;EAE7E,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE;EACtC,KAAK,KAAK,OAAO,QAAQ,EAAE;EAI3B,IAAI;GACF,MAAM,OAAO,QAAQ;EACvB,QAAQ,CAAqB;EAE7B,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,MAAM,YAAY,OAAO,WAAW,MAAK,MAAK,EAAE,OAAO,QAAQ,EAAE;GACjE,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW,OAAO,KAAA;GACvE,UAAU,UAAU;GACpB,UAAU,UAAU,KAAK,KAAK,IAAI;GAClC,IAAI,OAAO,WAAW,eAAe;IACnC,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,OAAO;IACd,OAAO,OAAO;GAChB;GACA,OAAO,CAAC,MAAM;EAChB,CAAC;EACD,OAAO;GAAE,IAAI;GAAM,aAAa,QAAQ;EAAG;CAC7C;;;;;;CAOA,MAAM,YAA2B;EAC/B,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,MAAM,UAAwB,CAAC;GAC/B,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,IAAI,QAAQ;IACZ,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,YAAY,WAAW;KACnC,UAAU,UAAU;KACpB,UAAU,QAAQ;KAClB,UAAU,UAAU;KACpB,QAAQ;IACV;IAEF,IAAI,CAAC,OAAO;IACZ,IAAI,KAAK,WAAW,eAAe;KACjC,KAAK,SAAS;KACd,KAAK,YAAY;KACjB,OAAO,KAAK;KACZ,OAAO,KAAK;IACd;IACA,QAAQ,KAAK,IAAI;GACnB;GACA,OAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;EACxC,CAAC;CACH;;;;;;;;CASA,gBAAwB,MAA0B;EAChD,MAAM,QAAQ;EACd,MAAM,OAAO,gCAAgC,KAAK,GAAG,wFAEtB,KAAK,GAAG;EACvC,MAAM,OAAO,gBAAgB,IAAI;EACjC,MAAM,WAAW,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,YAAY,SAAS;EACjF,MAAM,eAAe,aAAa,KAAA,IAC9B,QACA,GAAG,SAAS,QAAQ,KAAK,SAAS,UAAU,SAAS,UAAU,KAAA,IAAY,MAAM,SAAS,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,IAAI,KAAK,SAAS,aAAa,CAAC,CAAC,CAAC,YAAY;EAC5K,MAAM,mBAAmB,KAAK,SAAS,MAAM,EAAE,CAAC,CAC7C,KAAI,MAAK,IAAI,EAAE,aAAa,KAAA,IAAY,UAAU,OAAO,IAAI,EAAE,MAAM,CAAC,CACtE,KAAK,IAAI,KAAK;EACjB,MAAM,OAAO,KACV,QAAQ,0BAA0B,YAAY,CAAC,CAC/C,QAAQ,yBAAyB,gBAAgB;EACpD,OAAO,OAAO,KAAK,MAAM,UAAU,KAAK,GAAG,OAAO,MAAM,MAAM,KAAK,MAAM;CAC3E;;CAGA,MAAc,eAAe,QAA+B;EAC1D,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,eAAe;IAC3D,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,OAAO;IACd,OAAO,OAAO;IACd,OAAO,CAAC,MAAM;GAChB;EAEF,CAAC;CACH;AACF"}
+{"version":3,"file":"execution.js","names":[],"sources":["../../src/host/execution.ts"],"sourcesContent":["/**\n * Host execution service: runs a task through dsh's REAL session machinery —\n * a fresh agent+session inside the task's project workspace (creation carries\n * the pinned model when the task has one), the session is attached to the\n * workspace so it appears in the GUI's project session list, the effective\n * prompt is submitted as an ordinary user message, and the turn settlement\n * (turn/end reason) is folded back into the task's execution record.\n *\n * Every execution is a NEW session: clean context, no reuse of previous runs.\n *\n * @module dsh-taskboard/host/execution\n */\nimport {\n  effectivePrompt,\n  newCommentId,\n  newExecutionId,\n  normalizeBody,\n  type ExecutionRecord,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { MessageId } from './sdk.ts'\nimport type { TaskStore } from './store.ts'\n\n/** Default cap on concurrently running executions (env-overridable). */\nexport const DEFAULT_MAX_CONCURRENT = 3\n\n/** Narrow agents face (the registry's create, structurally). */\nexport interface AgentsFace {\n  create(options: {\n    sessionId: string\n    meta?: { cwd?: string }\n    agentOptions?: { provider?: string; model?: string }\n  }): Promise<{\n    agent: {\n      id: string\n      followup(message: unknown): void\n      inject(message: unknown): void\n      whenIdle(): Promise<void>\n    }\n    dispose(): Promise<void>\n  }>\n}\n\n/** Narrow workspaces face for execution. */\nexport interface ExecutionWorkspaceFace {\n  get(id: string): { id: string; path: string } | undefined\n  attach(workspaceId: string, sessionId: string): Promise<void>\n}\n\n/** Narrow event-bus face for settlement listening. */\nexport interface EventsFace {\n  onSessionEvent(listener: (sessionId: string, event: { type: string; data?: unknown }) => void): () => void\n}\n\n/** Everything the execution service needs. */\nexport interface ExecutionDeps {\n  store: TaskStore\n  agents: AgentsFace\n  workspaces: ExecutionWorkspaceFace\n  events: EventsFace\n  now: () => number\n  /** The deployment default model (fills sessions of unpinned tasks). */\n  defaultModel?: () => { provider: string; model: string } | undefined\n  /** Mint session ids (injectable for tests). */\n  mintSessionId?: () => string\n  /** Mint message ids (injectable for tests). */\n  mintMessageId?: () => string\n  /** Best-effort session rename (pins the session list title to the task title). */\n  renameSession?: (sessionId: string, title: string) => void\n  /** Max concurrently running executions across all tasks (default 3). */\n  maxConcurrent?: number\n}\n\n/** Outcome of a run request (immediate; the run settles asynchronously). */\nexport type RunRequestResult =\n  | { ok: true; executionId: string; sessionId: string }\n  | { ok: false; error: string }\n\n/** Outcome of a cancel request. */\nexport type CancelRequestResult =\n  | { ok: true; executionId: string }\n  | { ok: false; error: string }\n\n/** Whether a turn/end payload closed with an error reason. */\nfunction isErrorTurnEnd(data: unknown): { message: string } | undefined {\n  if (typeof data !== 'object' || data === null) return undefined\n  const reason = (data as { reason?: unknown }).reason\n  if (typeof reason !== 'object' || reason === null) return undefined\n  const kind = (reason as { kind?: unknown }).kind\n  if (kind !== 'error') return undefined\n  const error = (reason as { error?: { message?: unknown } }).error\n  const detail = JSON.stringify(error) ?? ''\n  const message = typeof error?.message === 'string' ? error.message : 'turn failed'\n  console.error('[dsh-taskboard] turn error detail:', detail.slice(0, 2000))\n  void detail\n  return { message }\n}\n\n/** One live execution tracked for settlement and cancellation. */\ninterface RunEntry {\n  sessionId: string\n  settle: () => void\n  dispose: () => Promise<void>\n}\n\n/**\n * The execution service.\n */\nexport class ExecutionService {\n  /** Live executions by execution id (settles and cancels remove entries). */\n  private readonly runs = new Map<string, RunEntry>()\n\n  /** @param deps - store + agents + workspaces + events + clock. */\n  constructor(private readonly deps: ExecutionDeps) {\n    deps.events.onSessionEvent((sessionId, event) => {\n      if (event.type !== 'turn/end') return\n      const failure = isErrorTurnEnd(event.data)\n      if (failure !== undefined) this.noteFailure(sessionId, failure.message)\n    })\n  }\n\n  /** Record a turn failure against the running execution of that session and give the task back. */\n  private noteFailure(sessionId: string, message: string): void {\n    void this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        for (const execution of task.executions) {\n          if (execution.sessionId === sessionId && execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = message.slice(0, 500)\n            execution.endedAt = this.deps.now()\n            // The failed session will not finish the work: hand the task back\n            // instead of leaving it stuck in in_progress forever — and leave a\n            // system comment so the GUI shows why.\n            if (task.status === 'in_progress' && task.claimedBy === sessionId) {\n              task.status = 'todo'\n              task.updatedAt = this.deps.now()\n              delete task.claimedBy\n              delete task.claimedAt\n              task.comments.push({\n                id: newCommentId(),\n                body: normalizeBody(`[系统] 执行失败：${message.slice(0, 300)}；任务已退回待办。`),\n                version: 1,\n                createdAt: this.deps.now(),\n              })\n            }\n            return [task]\n          }\n        }\n      }\n      return undefined\n    })\n  }\n\n  /** Patch one task's execution record in the ledger. */\n  private async patchExecution(executionId: string, patch: Partial<ExecutionRecord>): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        const execution = task.executions.find(e => e.id === executionId)\n        if (execution !== undefined) {\n          Object.assign(execution, patch)\n          return [task]\n        }\n      }\n      return undefined\n    })\n  }\n\n  /**\n   * Run one task now (manual button or scheduler tick).\n   *\n   * The in-progress gate and the execution-open write happen inside ONE\n   * serial-queue mutation, so two overlapping run() calls (double click,\n   * overlapping scheduler ticks) can never both pass — exactly one session\n   * is opened per task.\n   * @param taskId - the task to run.\n   * @param trigger - what started it.\n   * @returns the immediate result; settlement lands in the ledger.\n   */\n  async run(taskId: string, trigger: ExecutionRecord['trigger']): Promise<RunRequestResult> {\n    const max = this.deps.maxConcurrent ?? DEFAULT_MAX_CONCURRENT\n    if (this.runs.size >= max) {\n      return { ok: false, error: `execution concurrency limit reached (${this.runs.size}/${max} running)` }\n    }\n    const task = this.deps.store.get(taskId)\n    if (task === undefined || task.trashedAt !== undefined) {\n      return { ok: false, error: `no task ${taskId}` }\n    }\n    const workspace = this.deps.workspaces.get(task.workspaceId)\n    if (workspace === undefined) {\n      return { ok: false, error: `unknown workspace ${task.workspaceId}` }\n    }\n\n    const executionId = newExecutionId()\n    const sessionId = this.deps.mintSessionId?.() ?? `session-taskboard-${crypto.randomUUID()}`\n\n    // 1. Open the execution record, flip the card to in_progress, and record\n    //    the executing session as the claim holder — atomically.\n    let gate: string | undefined\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined || target.trashedAt !== undefined) {\n        gate = `no task ${taskId}`\n        return undefined\n      }\n      if (target.status === 'in_progress') {\n        gate = 'task is already in progress'\n        return undefined\n      }\n      target.executions.push({\n        id: executionId,\n        trigger,\n        startedAt: this.deps.now(),\n        outcome: 'running',\n      })\n      target.status = 'in_progress'\n      target.updatedAt = this.deps.now()\n      target.updatedBy = { kind: 'user' }\n      target.claimedBy = sessionId\n      target.claimedAt = this.deps.now()\n      return [target]\n    })\n    if (gate !== undefined) return { ok: false, error: gate }\n\n    // 2. Create the fresh agent+session inside the task's project, carrying\n    //    the pinned model — or the deployment default when unpinned (the\n    //    persona template renders {{model}}, so the session always needs one).\n    let handle: Awaited<ReturnType<AgentsFace['create']>>\n    try {\n      const model = task.model ?? this.deps.defaultModel?.()\n      handle = await this.deps.agents.create({\n        sessionId,\n        meta: { cwd: workspace.path },\n        ...(model !== undefined ? { agentOptions: { provider: model.provider, model: model.model } } : {}),\n      })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      await this.patchExecution(executionId, { outcome: 'failed', error: message.slice(0, 500), endedAt: this.deps.now() })\n      await this.revertProgress(taskId)\n      return { ok: false, error: message }\n    }\n\n    // 3. Attach the session to the workspace (GUI project session list).\n    await this.deps.workspaces.attach(task.workspaceId, sessionId).catch(() => { /* cosmetic */ })\n\n    // 3b. Best-effort rename: pin the session title to the task title so the\n    //     session list shows the task name (a user-sourced title also stops\n    //     automatic first-prompt retitling).\n    try {\n      this.deps.renameSession?.(sessionId, task.title)\n    } catch { /* cosmetic */ }\n\n    // 4. Record the session id (execution is really started now).\n    await this.patchExecution(executionId, { sessionId })\n\n    // 5. Submit the opening pair and settle on quiescence (turn/end errors\n    //    were already folded by the listener). Two messages, ONE turn:\n    //    - inject() queues the plugin framing line (next-step, no wake); it\n    //      renders as a plugin context row in the conversation.\n    //    - followup() queues the card body as a normal user message\n    //      (next-turn, wakes the driver). At claim time the loop drains ALL\n    //      next-step messages plus the one next-turn message into a single\n    //    turn — framing first, then the user bubble.\n    handle.agent.inject({\n      id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),\n      role: 'user' as const,\n      content: [{ type: 'text' as const, text: this.pluginFraming(task) }],\n      source: { kind: 'plugin' as const, plugin: 'dsh-taskboard' },\n    })\n    handle.agent.followup({\n      id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),\n      role: 'user' as const,\n      content: [{ type: 'text' as const, text: this.userBody(task) }],\n      source: { kind: 'user' as const },\n    })\n\n    // 6. Settlement watcher: mark succeeded, release the executing session's\n    //    hold, and — when the session did NOT follow the handoff protocol —\n    //    auto-move the card to in_review with a system comment (otherwise a\n    //    disobedient session would leave it hanging in in_progress forever).\n    const settle = (): void => {\n      this.runs.delete(executionId)\n      void this.deps.store.mutate('execution-recorded', (ledger) => {\n        for (const t of ledger.tasks) {\n          const execution = t.executions.find(e => e.id === executionId)\n          if (execution !== undefined && execution.outcome === 'running') {\n            const now = this.deps.now()\n            execution.outcome = 'succeeded'\n            execution.endedAt = now\n            if (t.status === 'in_progress' && t.claimedBy === sessionId) {\n              delete t.claimedBy\n              delete t.claimedAt\n            }\n            if (t.status === 'in_progress') {\n              const commented = t.comments.some(c => c.threadId === sessionId)\n              t.comments.push({\n                id: newCommentId(),\n                body: normalizeBody(commented\n                  ? '[系统] 执行会话已结束并留有评论，但未移至待验收；系统自动移入待验收。'\n                  : '[系统] 执行会话已结束，但未按协议交接（无评论、未移至待验收）；系统自动移入待验收，请审查后退回或验收。'),\n                version: 1,\n                createdAt: now,\n              })\n              t.status = 'in_review'\n              t.updatedAt = now\n              t.updatedBy = { kind: 'user' }\n            }\n            return [t]\n          }\n        }\n        return undefined\n      })\n    }\n    this.runs.set(executionId, { sessionId, settle, dispose: () => handle.dispose() })\n    void handle.agent.whenIdle().then(settle, () => {\n      this.noteFailure(sessionId, 'agent did not reach quiescence')\n      settle()\n    })\n\n    return { ok: true, executionId, sessionId }\n  }\n\n  /** How many executions are currently running (for the concurrency cap). */\n  inFlight(): number {\n    return this.runs.size\n  }\n\n  /**\n   * Cancel the running execution of a task (user action): stop the agent\n   * session, mark the execution cancelled, and hand the task back to todo.\n   * @param taskId - the task whose execution should be stopped.\n   * @returns the immediate result.\n   */\n  async cancel(taskId: string): Promise<CancelRequestResult> {\n    const task = this.deps.store.get(taskId)\n    if (task === undefined) return { ok: false, error: `no task ${taskId}` }\n    const running = [...task.executions].reverse().find(e => e.outcome === 'running')\n    if (running === undefined) return { ok: false, error: 'no running execution' }\n\n    const entry = this.runs.get(running.id)\n    this.runs.delete(running.id)\n    // Stop the agent first (best effort): dispose stops the loop, unregisters\n    // the agent, and removes its session. A late whenIdle settlement no-ops —\n    // the record is no longer 'running'.\n    try {\n      await entry?.dispose()\n    } catch { /* already gone */ }\n\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined) return undefined\n      const execution = target.executions.find(e => e.id === running.id)\n      if (execution === undefined || execution.outcome !== 'running') return undefined\n      execution.outcome = 'cancelled'\n      execution.endedAt = this.deps.now()\n      if (target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        delete target.claimedBy\n        delete target.claimedAt\n      }\n      return [target]\n    })\n    return { ok: true, executionId: running.id }\n  }\n\n  /**\n   * Startup reconciliation after a host restart: executions left `running`\n   * by the previous process can never settle here (their settlement watchers\n   * died with it), so mark them failed and hand their tasks back to todo.\n   */\n  async reconcile(): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const now = this.deps.now()\n      const touched: TaskRecord[] = []\n      for (const task of ledger.tasks) {\n        let dirty = false\n        for (const execution of task.executions) {\n          if (execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = 'interrupted by host restart'\n            execution.endedAt = now\n            dirty = true\n          }\n        }\n        if (!dirty) continue\n        if (task.status === 'in_progress') {\n          task.status = 'todo'\n          task.updatedAt = now\n          delete task.claimedBy\n          delete task.claimedAt\n        }\n        touched.push(task)\n      }\n      return touched.length > 0 ? touched : undefined\n    })\n  }\n\n  /**\n   * The plugin framing line (rendered as a plugin context row): task head,\n   * already-claimed state, and the handoff protocol — everything the session\n   * must know about the board. The task id appears exactly once (here); the\n   * protocol steps below refer to it as 本任务.\n   */\n  private pluginFraming(task: TaskRecord): string {\n    return `【任务看板】${task.title}（ID: ${task.id}）\\n`\n      + `本会话由任务看板执行服务启动，任务已置为进行中——无需认领；「已完成」仅限用户在界面操作（代码已限制，移了会被拒）。\\n`\n      + `完成后按序交接：\\n`\n      + `1. taskboard_get 读取本任务，取得最新 version\\n`\n      + `2. taskboard_comment_add 留评论：做了什么改动 / 如何验证 / 剩余风险\\n`\n      + `3. taskboard_move 将本任务移至待验收 in_review（带 ifVersion）\\n`\n      + `若无法完成：留评论说明原因，将任务移回待办 todo。`\n  }\n\n  /**\n   * The card body as a normal user bubble: the effective prompt (explicit\n   * prompt, else title+description) with template variables resolved from\n   * the task's own history at submit time (valuable for recurring patrols):\n   * `{{lastExecution}}` → the previous execution's trigger/outcome/error;\n   * `{{lastComments}}` → the last three comments (who + body).\n   */\n  private userBody(task: TaskRecord): string {\n    const lastExec = [...task.executions].reverse().find(e => e.outcome !== 'running')\n    const lastExecText = lastExec === undefined\n      ? '（无）'\n      : `${lastExec.trigger} · ${lastExec.outcome}${lastExec.error !== undefined ? ` · ${lastExec.error.slice(0, 200)}` : ''} · ${new Date(lastExec.startedAt ?? 0).toISOString()}`\n    const lastCommentsText = task.comments.slice(-3)\n      .map(c => `[${c.threadId !== undefined ? 'agent' : 'user'}] ${c.body}`)\n      .join('\\n') || '（无）'\n    return effectivePrompt(task)\n      .replace(/\\{\\{lastExecution\\}\\}/g, lastExecText)\n      .replace(/\\{\\{lastComments\\}\\}/g, lastCommentsText)\n  }\n\n  /** Move a task back out of in_progress (and release its hold) after a failed start. */\n  private async revertProgress(taskId: string): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target !== undefined && target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        delete target.claimedBy\n        delete target.claimedAt\n        return [target]\n      }\n      return undefined\n    })\n  }\n}\n"],"mappings":";;;AAoFA,SAAS,eAAe,MAAgD;CACtE,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO,KAAA;CACtD,MAAM,SAAU,KAA8B;CAC9C,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;CAE1D,IADc,OAA8B,SAC/B,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAS,OAA6C;CAC5D,MAAM,SAAS,KAAK,UAAU,KAAK,KAAK;CACxC,MAAM,UAAU,OAAO,OAAO,YAAY,WAAW,MAAM,UAAU;CACrE,QAAQ,MAAM,sCAAsC,OAAO,MAAM,GAAG,GAAI,CAAC;CAEzE,OAAO,EAAE,QAAQ;AACnB;;;;AAYA,IAAa,mBAAb,MAA8B;CAKC;;CAH7B,uBAAwB,IAAI,IAAsB;;CAGlD,YAAY,MAAsC;EAArB,KAAA,OAAA;EAC3B,KAAK,OAAO,gBAAgB,WAAW,UAAU;GAC/C,IAAI,MAAM,SAAS,YAAY;GAC/B,MAAM,UAAU,eAAe,MAAM,IAAI;GACzC,IAAI,YAAY,KAAA,GAAW,KAAK,YAAY,WAAW,QAAQ,OAAO;EACxE,CAAC;CACH;;CAGA,YAAoB,WAAmB,SAAuB;EAC5D,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC5D,KAAK,MAAM,QAAQ,OAAO,OACxB,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,cAAc,aAAa,UAAU,YAAY,WAAW;IACxE,UAAU,UAAU;IACpB,UAAU,QAAQ,QAAQ,MAAM,GAAG,GAAG;IACtC,UAAU,UAAU,KAAK,KAAK,IAAI;IAIlC,IAAI,KAAK,WAAW,iBAAiB,KAAK,cAAc,WAAW;KACjE,KAAK,SAAS;KACd,KAAK,YAAY,KAAK,KAAK,IAAI;KAC/B,OAAO,KAAK;KACZ,OAAO,KAAK;KACZ,KAAK,SAAS,KAAK;MACjB,IAAI,aAAa;MACjB,MAAM,cAAc,aAAa,QAAQ,MAAM,GAAG,GAAG,EAAE,UAAU;MACjE,SAAS;MACT,WAAW,KAAK,KAAK,IAAI;KAC3B,CAAC;IACH;IACA,OAAO,CAAC,IAAI;GACd;EAIN,CAAC;CACH;;CAGA,MAAc,eAAe,aAAqB,OAAgD;EAChG,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,MAAM,YAAY,KAAK,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;IAChE,IAAI,cAAc,KAAA,GAAW;KAC3B,OAAO,OAAO,WAAW,KAAK;KAC9B,OAAO,CAAC,IAAI;IACd;GACF;EAEF,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,IAAI,QAAgB,SAAgE;EACxF,MAAM,MAAM,KAAK,KAAK,iBAAA;EACtB,IAAI,KAAK,KAAK,QAAQ,KACpB,OAAO;GAAE,IAAI;GAAO,OAAO,wCAAwC,KAAK,KAAK,KAAK,GAAG,IAAI;EAAW;EAEtG,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,KAAa,KAAK,cAAc,KAAA,GAC3C,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EAEjD,MAAM,YAAY,KAAK,KAAK,WAAW,IAAI,KAAK,WAAW;EAC3D,IAAI,cAAc,KAAA,GAChB,OAAO;GAAE,IAAI;GAAO,OAAO,qBAAqB,KAAK;EAAc;EAGrE,MAAM,cAAc,eAAe;EACnC,MAAM,YAAY,KAAK,KAAK,gBAAgB,KAAK,qBAAqB,OAAO,WAAW;EAIxF,IAAI;EACJ,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,cAAc,KAAA,GAAW;IAC1D,OAAO,WAAW;IAClB;GACF;GACA,IAAI,OAAO,WAAW,eAAe;IACnC,OAAO;IACP;GACF;GACA,OAAO,WAAW,KAAK;IACrB,IAAI;IACJ;IACA,WAAW,KAAK,KAAK,IAAI;IACzB,SAAS;GACX,CAAC;GACD,OAAO,SAAS;GAChB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,YAAY,EAAE,MAAM,OAAO;GAClC,OAAO,YAAY;GACnB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,CAAC,MAAM;EAChB,CAAC;EACD,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAK;EAKxD,IAAI;EACJ,IAAI;GACF,MAAM,QAAQ,KAAK,SAAS,KAAK,KAAK,eAAe;GACrD,SAAS,MAAM,KAAK,KAAK,OAAO,OAAO;IACrC;IACA,MAAM,EAAE,KAAK,UAAU,KAAK;IAC5B,GAAI,UAAU,KAAA,IAAY,EAAE,cAAc;KAAE,UAAU,MAAM;KAAU,OAAO,MAAM;IAAM,EAAE,IAAI,CAAC;GAClG,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,KAAK,eAAe,aAAa;IAAE,SAAS;IAAU,OAAO,QAAQ,MAAM,GAAG,GAAG;IAAG,SAAS,KAAK,KAAK,IAAI;GAAE,CAAC;GACpH,MAAM,KAAK,eAAe,MAAM;GAChC,OAAO;IAAE,IAAI;IAAO,OAAO;GAAQ;EACrC;EAGA,MAAM,KAAK,KAAK,WAAW,OAAO,KAAK,aAAa,SAAS,CAAC,CAAC,YAAY,CAAiB,CAAC;EAK7F,IAAI;GACF,KAAK,KAAK,gBAAgB,WAAW,KAAK,KAAK;EACjD,QAAQ,CAAiB;EAGzB,MAAM,KAAK,eAAe,aAAa,EAAE,UAAU,CAAC;EAUpD,OAAO,MAAM,OAAO;GAClB,IAAI,KAAK,KAAK,gBAAgB,KAAK,UAAU,iBAAiB,OAAO,WAAW,GAAG;GACnF,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAiB,MAAM,KAAK,cAAc,IAAI;GAAE,CAAC;GACnE,QAAQ;IAAE,MAAM;IAAmB,QAAQ;GAAgB;EAC7D,CAAC;EACD,OAAO,MAAM,SAAS;GACpB,IAAI,KAAK,KAAK,gBAAgB,KAAK,UAAU,iBAAiB,OAAO,WAAW,GAAG;GACnF,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAiB,MAAM,KAAK,SAAS,IAAI;GAAE,CAAC;GAC9D,QAAQ,EAAE,MAAM,OAAgB;EAClC,CAAC;EAMD,MAAM,eAAqB;GACzB,KAAK,KAAK,OAAO,WAAW;GAC5B,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;IAC5D,KAAK,MAAM,KAAK,OAAO,OAAO;KAC5B,MAAM,YAAY,EAAE,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;KAC7D,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW;MAC9D,MAAM,MAAM,KAAK,KAAK,IAAI;MAC1B,UAAU,UAAU;MACpB,UAAU,UAAU;MACpB,IAAI,EAAE,WAAW,iBAAiB,EAAE,cAAc,WAAW;OAC3D,OAAO,EAAE;OACT,OAAO,EAAE;MACX;MACA,IAAI,EAAE,WAAW,eAAe;OAC9B,MAAM,YAAY,EAAE,SAAS,MAAK,MAAK,EAAE,aAAa,SAAS;OAC/D,EAAE,SAAS,KAAK;QACd,IAAI,aAAa;QACjB,MAAM,cAAc,YAChB,yCACA,uDAAuD;QAC3D,SAAS;QACT,WAAW;OACb,CAAC;OACD,EAAE,SAAS;OACX,EAAE,YAAY;OACd,EAAE,YAAY,EAAE,MAAM,OAAO;MAC/B;MACA,OAAO,CAAC,CAAC;KACX;IACF;GAEF,CAAC;EACH;EACA,KAAK,KAAK,IAAI,aAAa;GAAE;GAAW;GAAQ,eAAe,OAAO,QAAQ;EAAE,CAAC;EACjF,OAAY,MAAM,SAAS,CAAC,CAAC,KAAK,cAAc;GAC9C,KAAK,YAAY,WAAW,gCAAgC;GAC5D,OAAO;EACT,CAAC;EAED,OAAO;GAAE,IAAI;GAAM;GAAa;EAAU;CAC5C;;CAGA,WAAmB;EACjB,OAAO,KAAK,KAAK;CACnB;;;;;;;CAQA,MAAM,OAAO,QAA8C;EACzD,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EACvE,MAAM,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,YAAY,SAAS;EAChF,IAAI,YAAY,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAuB;EAE7E,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE;EACtC,KAAK,KAAK,OAAO,QAAQ,EAAE;EAI3B,IAAI;GACF,MAAM,OAAO,QAAQ;EACvB,QAAQ,CAAqB;EAE7B,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,MAAM,YAAY,OAAO,WAAW,MAAK,MAAK,EAAE,OAAO,QAAQ,EAAE;GACjE,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW,OAAO,KAAA;GACvE,UAAU,UAAU;GACpB,UAAU,UAAU,KAAK,KAAK,IAAI;GAClC,IAAI,OAAO,WAAW,eAAe;IACnC,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,OAAO;IACd,OAAO,OAAO;GAChB;GACA,OAAO,CAAC,MAAM;EAChB,CAAC;EACD,OAAO;GAAE,IAAI;GAAM,aAAa,QAAQ;EAAG;CAC7C;;;;;;CAOA,MAAM,YAA2B;EAC/B,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,MAAM,UAAwB,CAAC;GAC/B,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,IAAI,QAAQ;IACZ,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,YAAY,WAAW;KACnC,UAAU,UAAU;KACpB,UAAU,QAAQ;KAClB,UAAU,UAAU;KACpB,QAAQ;IACV;IAEF,IAAI,CAAC,OAAO;IACZ,IAAI,KAAK,WAAW,eAAe;KACjC,KAAK,SAAS;KACd,KAAK,YAAY;KACjB,OAAO,KAAK;KACZ,OAAO,KAAK;IACd;IACA,QAAQ,KAAK,IAAI;GACnB;GACA,OAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;EACxC,CAAC;CACH;;;;;;;CAQA,cAAsB,MAA0B;EAC9C,OAAO,SAAS,KAAK,MAAM,OAAO,KAAK,GAAG;CAO5C;;;;;;;;CASA,SAAiB,MAA0B;EACzC,MAAM,WAAW,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,YAAY,SAAS;EACjF,MAAM,eAAe,aAAa,KAAA,IAC9B,QACA,GAAG,SAAS,QAAQ,KAAK,SAAS,UAAU,SAAS,UAAU,KAAA,IAAY,MAAM,SAAS,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,IAAI,KAAK,SAAS,aAAa,CAAC,CAAC,CAAC,YAAY;EAC5K,MAAM,mBAAmB,KAAK,SAAS,MAAM,EAAE,CAAC,CAC7C,KAAI,MAAK,IAAI,EAAE,aAAa,KAAA,IAAY,UAAU,OAAO,IAAI,EAAE,MAAM,CAAC,CACtE,KAAK,IAAI,KAAK;EACjB,OAAO,gBAAgB,IAAI,CAAC,CACzB,QAAQ,0BAA0B,YAAY,CAAC,CAC/C,QAAQ,yBAAyB,gBAAgB;CACtD;;CAGA,MAAc,eAAe,QAA+B;EAC1D,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,eAAe;IAC3D,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,OAAO;IACd,OAAO,OAAO;IACd,OAAO,CAAC,MAAM;GAChB;EAEF,CAAC;CACH;AACF"}

package/lib/host/routes.js

@@ -29,7 +29,7 @@ function fail(code, message) {
 				message
 			}
 		},
-		status: code === "invalid_input" ? 400 : code === "not_found" ? 404 : code === "version_conflict" ? 409 : code === "forbidden" ? 403 : 500
+		status: code === "invalid_input" || code === "invalid_transition" ? 400 : code === "not_found" ? 404 : code === "version_conflict" ? 409 : code === "forbidden" ? 403 : 500
 	};
 }
 /** Read one JSON body (null on parse failure). */
@@ -251,6 +251,35 @@ function registerTaskboardRoutes(ctx, options) {
 						});
 						return;
 					}
+					if (action === "reject") {
+						const ifVersion = num(body, "ifVersion");
+						if (ifVersion === void 0 || ifVersion === null) throw new Error("Error: version_conflict: ifVersion required");
+						if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`);
+						if (!canTransition(task.status, "todo")) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → todo`);
+						const next = structuredClone(task);
+						next.status = "todo";
+						next.version = task.version + 1;
+						next.updatedAt = options.now();
+						next.updatedBy = { kind: "user" };
+						syncClaim(next, "todo", options.now());
+						const commentText = str(body, "body") ?? "";
+						if (commentText.trim().length > 0) next.comments.push({
+							id: newCommentId(),
+							body: normalizeBody(commentText),
+							version: 1,
+							createdAt: options.now()
+						});
+						await store.mutate("task-moved", (ledger) => {
+							const i = ledger.tasks.findIndex((t) => t.id === id);
+							ledger.tasks[i] = next;
+							return [next];
+						});
+						json(res, {
+							ok: true,
+							value: summarize(next)
+						});
+						return;
+					}
 					if (action === "comment") {
 						const bodyText = str(body, "body") ?? "";
 						const comment = {

package/lib/host/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","names":[],"sources":["../../src/host/routes.ts"],"sourcesContent":["/**\n * /dsh-taskboard routes on the shared DSH webserver: a JSON API for the\n * GUI's human operations (create/update/move/comment/delete — actor `user`,\n * the done move IS allowed here) plus an SSE stream mirroring every\n * committed ledger mutation.\n *\n * All domain validation goes through the shared protocol pure functions; the\n * route layer only maps transport to envelope.\n *\n * @module dsh-taskboard/host/routes\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { Context } from '@deepseek-ai/cordis'\n// Type-only: pulls the webServer Context merge (ctx.webServer).\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport {\n  asStatus,\n  asUrgency,\n  canTransition,\n  newCommentId,\n  newTaskId,\n  normalizeBody,\n  normalizeExecution,\n  normalizeModel,\n  normalizePrompt,\n  normalizeTitle,\n  summarize,\n  syncClaim,\n  type TaskModel,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { ROUTE_PREFIX, SSE_PATH, type ApiFail, type ApiResult } from '../shared/api.ts'\nimport type { TaskStore } from './store.ts'\nimport type { WorkspaceFace } from './tools.ts'\n\n/** Heartbeat cadence for the SSE stream. */\nconst HEARTBEAT_MS = 20_000\n\n/** The workspaces face routes need (same narrow shape as tools). */\nexport type RoutesWorkspaceFace = WorkspaceFace\n\n/** Options. */\nexport interface TaskboardRoutesOptions {\n  store: TaskStore\n  workspaces: RoutesWorkspaceFace\n  now: () => number\n  /** Manual-run hook (the execution service); absent → 501. */\n  run?: (taskId: string) => Promise<{ ok: true; executionId: string; sessionId: string } | { ok: false; error: string }>\n  /** Cancel hook (the execution service); absent → 501. */\n  cancel?: (taskId: string) => Promise<{ ok: true; executionId: string } | { ok: false; error: string }>\n  /**\n   * Registered model provider routes (from the host llm runtime), for\n   * advisory validation of pinned models; undefined = runtime unavailable.\n   */\n  modelProviders?: () => string[] | undefined\n}\n\n/** Validate a pinned model: structural check always, provider route when known. */\nfunction checkModel(raw: unknown, modelProviders?: () => string[] | undefined): TaskModel {\n  const model = normalizeModel(raw)\n  const providers = modelProviders?.()\n  if (providers !== undefined && !providers.includes(model.provider)) {\n    throw new Error(`Error: invalid_input: model provider \"${model.provider}\" has no registered route (available: ${providers.join(', ')})`)\n  }\n  return model\n}\n\n/** JSON-envelope writer. */\nfunction json(res: ServerResponse, payload: ApiResult<unknown>, status = 200): void {\n  const body = JSON.stringify(payload)\n  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })\n  res.end(body)\n}\n\n/** Domain failure → envelope + HTTP status. */\nfunction fail(code: ApiFail['error']['code'], message: string): { res: ApiFail; status: number } {\n  const status = code === 'invalid_input' ? 400\n    : code === 'not_found' ? 404\n      : code === 'version_conflict' ? 409\n        : code === 'forbidden' ? 403\n          : 500\n  return { res: { ok: false, error: { code, message } }, status }\n}\n\n/** Read one JSON body (null on parse failure). */\nasync function readBody(req: IncomingMessage): Promise<Record<string, unknown> | null> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(chunk as Buffer)\n  if (chunks.length === 0) return {}\n  try {\n    const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'))\n    return typeof parsed === 'object' && parsed !== null ? parsed as Record<string, unknown> : null\n  } catch {\n    return null\n  }\n}\n\n/** String field accessor (null when absent/not a string). */\nfunction str(body: Record<string, unknown>, key: string): string | null {\n  const v = body[key]\n  return typeof v === 'string' ? v : null\n}\n\n/** Number field accessor (undefined when absent; null when present but not a number). */\nfunction num(body: Record<string, unknown>, key: string): number | undefined | null {\n  const v = body[key]\n  if (v === undefined) return undefined\n  return typeof v === 'number' && Number.isFinite(v) ? v : null\n}\n\n/** Map a thrown domain error to the envelope. */\nfunction toFail(error: unknown): { res: ApiFail; status: number } {\n  const message = error instanceof Error ? error.message : String(error)\n  const code = message.startsWith('Error: ') ? message.slice(7).split(':')[0] : undefined\n  const known: ApiFail['error']['code'][] = ['invalid_input', 'not_found', 'version_conflict', 'invalid_transition', 'forbidden', 'internal']\n  if (code !== undefined && (known as string[]).includes(code)) {\n    return fail(code as ApiFail['error']['code'], message.slice(7 + code.length + 2))\n  }\n  if (code === 'workspace_mismatch') return fail('forbidden', message.slice(7 + code.length + 2))\n  return fail('invalid_input', message)\n}\n\n/**\n * Register the taskboard routes.\n * @param ctx - context carrying the webServer service.\n * @param options - store + workspaces + clock.\n * @returns the disposer.\n */\nexport function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOptions): () => void {\n  const { store, workspaces } = options\n  const subscribers = new Set<ServerResponse>()\n  let heartbeat: NodeJS.Timeout | undefined\n\n  const broadcast = (change: { revision: number; kind: string; tasks: readonly TaskRecord[] }): void => {\n    const frame = `event: change\\ndata: ${JSON.stringify({ revision: change.revision, kind: change.kind, tasks: change.tasks.map(summarize) })}\\n\\n`\n    for (const res of subscribers) res.write(frame)\n  }\n  store.subscribe(broadcast)\n\n  const handler = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    try {\n      const url = new URL(req.url ?? '/', 'http://x')\n      const pathname = url.pathname\n\n      // ---------------------------------------------------------------- GET\n      if (req.method === 'GET') {\n        if (pathname === `${ROUTE_PREFIX}/state`) {\n          await store.load()\n          json(res, { ok: true, value: store.snapshot() })\n          return\n        }\n        if (pathname === `${ROUTE_PREFIX}/workspaces`) {\n          json(res, { ok: true, value: workspaces.list() })\n          return\n        }\n        const taskMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)$`))\n        if (taskMatch !== null) {\n          const task = store.get(taskMatch[1]!)\n          if (task === undefined) { const f = fail('not_found', 'no such task'); json(res, f.res, f.status); return }\n          json(res, { ok: true, value: task })\n          return\n        }\n        res.writeHead(404)\n        res.end()\n        return\n      }\n\n      if (req.method !== 'POST') {\n        res.writeHead(405)\n        res.end()\n        return\n      }\n      // CSRF fence: cross-site simple requests cannot set application/json.\n      const contentType = req.headers['content-type'] ?? ''\n      if (!contentType.toLowerCase().startsWith('application/json')) {\n        const f = fail('invalid_input', 'content-type must be application/json')\n        json(res, f.res, 415)\n        return\n      }\n      const body = await readBody(req)\n      if (body === null) {\n        const f = fail('invalid_input', 'body is not a JSON object')\n        json(res, f.res, 400)\n        return\n      }\n\n      // ------------------------------------------------- POST /tasks (create)\n      if (pathname === `${ROUTE_PREFIX}/tasks`) {\n        try {\n          const title = normalizeTitle(str(body, 'title') ?? '')\n          const workspaceId = str(body, 'workspaceId') ?? ''\n          if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n          const urgency = asUrgency(str(body, 'urgency') ?? '')\n          const status = str(body, 'status') === null ? 'todo' as const : asStatus(str(body, 'status')!)\n          const execution = normalizeExecution((body.execution as { mode?: string; cron?: string } | undefined) ?? {}, options.now())\n          const model = body.model === undefined ? undefined : checkModel(body.model, options.modelProviders)\n          const now = options.now()\n          const task: TaskRecord = {\n            id: newTaskId(),\n            title,\n            description: (str(body, 'description') ?? '').trim(),\n            prompt: normalizePrompt(str(body, 'prompt') ?? undefined),\n            workspaceId,\n            urgency,\n            status,\n            blocked: false,\n            execution,\n            model,\n            version: 1,\n            createdAt: now,\n            updatedAt: now,\n            createdBy: { kind: 'user' },\n            updatedBy: { kind: 'user' },\n            comments: [],\n            executions: [],\n          }\n          await store.mutate('task-created', ledger => {\n            ledger.tasks.push(task)\n            return [task]\n          })\n          json(res, { ok: true, value: summarize(task) }, 201)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      // ------------------------------------------- POST /tasks/:id/{action}\n      const actionMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/(\\\\w+)$`))\n      if (actionMatch !== null) {\n        const id = actionMatch[1]!\n        const action = actionMatch[2]!\n        try {\n          const task = store.get(id)\n          if (task === undefined) throw new Error('Error: not_found: no such task')\n          if (action === 'update') {\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            const title = str(body, 'title')\n            if (title !== null) next.title = normalizeTitle(title)\n            const description = str(body, 'description')\n            if (description !== null) next.description = description.trim()\n            const prompt = str(body, 'prompt')\n            if (prompt !== null) next.prompt = normalizePrompt(prompt)\n            const urgency = str(body, 'urgency')\n            if (urgency !== null) next.urgency = asUrgency(urgency)\n            // GUI-only rebind to another project; validated against the workspace registry.\n            const workspaceId = str(body, 'workspaceId')\n            if (workspaceId !== null) {\n              if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n              next.workspaceId = workspaceId\n            }\n            if (typeof body.blocked === 'boolean') next.blocked = body.blocked\n            // The GUI (task owner surface) may edit model/execution; null clears the model.\n            if (body.execution !== undefined) next.execution = normalizeExecution(body.execution as { mode?: string; cron?: string }, options.now())\n            if (body.model === null) next.model = undefined\n            else if (body.model !== undefined) next.model = checkModel(body.model, options.modelProviders)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            await store.mutate('task-updated', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'move') {\n            const ifVersion = num(body, 'ifVersion')\n            const status = str(body, 'status') ?? ''\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const to = asStatus(status)\n            if (!canTransition(task.status, to)) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → ${to}`)\n            const next = structuredClone(task)\n            next.status = to\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            if (task.status === 'todo' && to === 'in_progress') next.blocked = false\n            // A user move records no holder; leaving in_progress releases any hold.\n            syncClaim(next, to, options.now())\n            await store.mutate('task-moved', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'comment') {\n            const bodyText = str(body, 'body') ?? ''\n            const comment = { id: newCommentId(), body: normalizeBody(bodyText), version: 1, createdAt: options.now() }\n            const next = structuredClone(task)\n            next.comments.push(comment)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            await store.mutate('comment-added', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: comment }, 201)\n            return\n          }\n          if (action === 'delete') {\n            const purge = body.purge === true\n            if (purge) {\n              if (task.trashedAt === undefined) throw new Error('Error: invalid_input: purge requires a trashed task (soft-delete first)')\n              await store.mutate('task-deleted', ledger => {\n                ledger.tasks = ledger.tasks.filter(t => t.id !== id)\n                return []\n              })\n              json(res, { ok: true, value: { purged: true } })\n              return\n            }\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            next.trashedAt = options.now()\n            next.version = task.version + 1\n            await store.mutate('task-deleted', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: { trashed: true } })\n            return\n          }\n          if (action === 'run') {\n            if (options.run === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.run(id)\n            if (result.ok) json(res, { ok: true, value: result }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          if (action === 'cancel') {\n            if (options.cancel === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.cancel(id)\n            if (result.ok) json(res, { ok: true, value: { cancelled: true, executionId: result.executionId } }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          const f = fail('not_found', `unknown action ${action}`)\n          json(res, f.res, f.status)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      res.writeHead(404)\n      res.end()\n    } catch (error) {\n      const f = fail('internal', error instanceof Error ? error.message : String(error))\n      json(res, f.res, f.status)\n    }\n  }\n\n  const sse = (req: IncomingMessage, res: ServerResponse): void => {\n    res.writeHead(200, {\n      'content-type': 'text/event-stream; charset=utf-8',\n      'cache-control': 'no-cache',\n      connection: 'keep-alive',\n    })\n    res.write('retry: 2000\\n\\n')\n    // Baseline frame: the client reconciles by revision and refetches state on gaps.\n    res.write(`event: hello\\ndata: ${JSON.stringify({ revision: store.snapshot().revision })}\\n\\n`)\n    subscribers.add(res)\n    if (heartbeat === undefined) {\n      heartbeat = setInterval(() => {\n        for (const current of subscribers) current.write(': ping\\n\\n')\n      }, HEARTBEAT_MS)\n    }\n    req.on('close', () => {\n      subscribers.delete(res)\n      if (subscribers.size === 0 && heartbeat !== undefined) {\n        clearInterval(heartbeat)\n        heartbeat = undefined\n      }\n    })\n  }\n\n  const disposers = [\n    ctx.webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }),\n    ctx.webServer.register({ kind: 'exact', path: SSE_PATH, handler: sse }),\n  ]\n  return () => {\n    for (const dispose of disposers) dispose()\n    if (heartbeat !== undefined) clearInterval(heartbeat)\n    for (const res of subscribers) res.end()\n    subscribers.clear()\n  }\n}\n"],"mappings":";;;;AAoCA,MAAM,eAAe;;AAsBrB,SAAS,WAAW,KAAc,gBAAwD;CACxF,MAAM,QAAQ,eAAe,GAAG;CAChC,MAAM,YAAY,iBAAiB;CACnC,IAAI,cAAc,KAAA,KAAa,CAAC,UAAU,SAAS,MAAM,QAAQ,GAC/D,MAAM,IAAI,MAAM,yCAAyC,MAAM,SAAS,wCAAwC,UAAU,KAAK,IAAI,EAAE,EAAE;CAEzI,OAAO;AACT;;AAGA,SAAS,KAAK,KAAqB,SAA6B,SAAS,KAAW;CAClF,MAAM,OAAO,KAAK,UAAU,OAAO;CACnC,IAAI,UAAU,QAAQ;EAAE,gBAAgB;EAAmC,iBAAiB;CAAW,CAAC;CACxG,IAAI,IAAI,IAAI;AACd;;AAGA,SAAS,KAAK,MAAgC,SAAmD;CAM/F,OAAO;EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE;IAAM;GAAQ;EAAE;EAAG,QALxC,SAAS,kBAAkB,MACtC,SAAS,cAAc,MACrB,SAAS,qBAAqB,MAC5B,SAAS,cAAc,MACrB;CACoD;AAChE;;AAGA,eAAe,SAAS,KAA+D;CACrF,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KAAK,OAAO,KAAK,KAAe;CAC1D,IAAI,OAAO,WAAW,GAAG,OAAO,CAAC;CACjC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;EAChE,OAAO,OAAO,WAAW,YAAY,WAAW,OAAO,SAAoC;CAC7F,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,IAAI,MAA+B,KAA4B;CACtE,MAAM,IAAI,KAAK;CACf,OAAO,OAAO,MAAM,WAAW,IAAI;AACrC;;AAGA,SAAS,IAAI,MAA+B,KAAwC;CAClF,MAAM,IAAI,KAAK;CACf,IAAI,MAAM,KAAA,GAAW,OAAO,KAAA;CAC5B,OAAO,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,IAAI,IAAI;AAC3D;;AAGA,SAAS,OAAO,OAAkD;CAChE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,MAAM,OAAO,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAA;CAE9E,IAAI,SAAS,KAAA,KAAc;EADgB;EAAiB;EAAa;EAAoB;EAAsB;EAAa;CACjG,CAAC,CAAc,SAAS,IAAI,GACzD,OAAO,KAAK,MAAkC,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAElF,IAAI,SAAS,sBAAsB,OAAO,KAAK,aAAa,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAC9F,OAAO,KAAK,iBAAiB,OAAO;AACtC;;;;;;;AAQA,SAAgB,wBAAwB,KAAc,SAA6C;CACjG,MAAM,EAAE,OAAO,eAAe;CAC9B,MAAM,8BAAc,IAAI,IAAoB;CAC5C,IAAI;CAEJ,MAAM,aAAa,WAAmF;EACpG,MAAM,QAAQ,wBAAwB,KAAK,UAAU;GAAE,UAAU,OAAO;GAAU,MAAM,OAAO;GAAM,OAAO,OAAO,MAAM,IAAI,SAAS;EAAE,CAAC,EAAE;EAC3I,KAAK,MAAM,OAAO,aAAa,IAAI,MAAM,KAAK;CAChD;CACA,MAAM,UAAU,SAAS;CAEzB,MAAM,UAAU,OAAO,KAAsB,QAAuC;EAClF,IAAI;GAEF,MAAM,WAAW,IADD,IAAI,IAAI,OAAO,KAAK,UACjB,CAAC,CAAC;GAGrB,IAAI,IAAI,WAAW,OAAO;IACxB,IAAI,aAAa,wBAAyB;KACxC,MAAM,MAAM,KAAK;KACjB,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,MAAM,SAAS;KAAE,CAAC;KAC/C;IACF;IACA,IAAI,aAAa,6BAA8B;KAC7C,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,WAAW,KAAK;KAAE,CAAC;KAChD;IACF;IACA,MAAM,YAAY,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,gBAAgB,CAAC;IAC9E,IAAI,cAAc,MAAM;KACtB,MAAM,OAAO,MAAM,IAAI,UAAU,EAAG;KACpC,IAAI,SAAS,KAAA,GAAW;MAAE,MAAM,IAAI,KAAK,aAAa,cAAc;MAAG,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAAG;KAAO;KAC1G,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO;KAAK,CAAC;KACnC;IACF;IACA,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAEA,IAAI,IAAI,WAAW,QAAQ;IACzB,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAGA,IAAI,EADgB,IAAI,QAAQ,mBAAmB,GAAA,CAClC,YAAY,CAAC,CAAC,WAAW,kBAAkB,GAAG;IAE7D,KAAK,KADK,KAAK,iBAAiB,uCACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GACA,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,IAAI,SAAS,MAAM;IAEjB,KAAK,KADK,KAAK,iBAAiB,2BACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GAGA,IAAI,aAAa,wBAAyB;IACxC,IAAI;KACF,MAAM,QAAQ,eAAe,IAAI,MAAM,OAAO,KAAK,EAAE;KACrD,MAAM,cAAc,IAAI,MAAM,aAAa,KAAK;KAChD,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;KACpG,MAAM,UAAU,UAAU,IAAI,MAAM,SAAS,KAAK,EAAE;KACpD,MAAM,SAAS,IAAI,MAAM,QAAQ,MAAM,OAAO,SAAkB,SAAS,IAAI,MAAM,QAAQ,CAAE;KAC7F,MAAM,YAAY,mBAAoB,KAAK,aAA8D,CAAC,GAAG,QAAQ,IAAI,CAAC;KAC1H,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,KAAA,IAAY,WAAW,KAAK,OAAO,QAAQ,cAAc;KAClG,MAAM,MAAM,QAAQ,IAAI;KACxB,MAAM,OAAmB;MACvB,IAAI,UAAU;MACd;MACA,cAAc,IAAI,MAAM,aAAa,KAAK,GAAA,CAAI,KAAK;MACnD,QAAQ,gBAAgB,IAAI,MAAM,QAAQ,KAAK,KAAA,CAAS;MACxD;MACA;MACA;MACA,SAAS;MACT;MACA;MACA,SAAS;MACT,WAAW;MACX,WAAW;MACX,WAAW,EAAE,MAAM,OAAO;MAC1B,WAAW,EAAE,MAAM,OAAO;MAC1B,UAAU,CAAC;MACX,YAAY,CAAC;KACf;KACA,MAAM,MAAM,OAAO,iBAAgB,WAAU;MAC3C,OAAO,MAAM,KAAK,IAAI;MACtB,OAAO,CAAC,IAAI;KACd,CAAC;KACD,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,UAAU,IAAI;KAAE,GAAG,GAAG;IACrD,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAGA,MAAM,cAAc,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,uBAAuB,CAAC;GACvF,IAAI,gBAAgB,MAAM;IACxB,MAAM,KAAK,YAAY;IACvB,MAAM,SAAS,YAAY;IAC3B,IAAI;KACF,MAAM,OAAO,MAAM,IAAI,EAAE;KACzB,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,gCAAgC;KACxE,IAAI,WAAW,UAAU;MACvB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,MAAM,QAAQ,IAAI,MAAM,OAAO;MAC/B,IAAI,UAAU,MAAM,KAAK,QAAQ,eAAe,KAAK;MACrD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM,KAAK,cAAc,YAAY,KAAK;MAC9D,MAAM,SAAS,IAAI,MAAM,QAAQ;MACjC,IAAI,WAAW,MAAM,KAAK,SAAS,gBAAgB,MAAM;MACzD,MAAM,UAAU,IAAI,MAAM,SAAS;MACnC,IAAI,YAAY,MAAM,KAAK,UAAU,UAAU,OAAO;MAEtD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM;OACxB,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;OACpG,KAAK,cAAc;MACrB;MACA,IAAI,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK;MAE3D,IAAI,KAAK,cAAc,KAAA,GAAW,KAAK,YAAY,mBAAmB,KAAK,WAA+C,QAAQ,IAAI,CAAC;MACvI,IAAI,KAAK,UAAU,MAAM,KAAK,QAAQ,KAAA;WACjC,IAAI,KAAK,UAAU,KAAA,GAAW,KAAK,QAAQ,WAAW,KAAK,OAAO,QAAQ,cAAc;MAC7F,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,QAAQ;MACrB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,MAAM,SAAS,IAAI,MAAM,QAAQ,KAAK;MACtC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,KAAK,SAAS,MAAM;MAC1B,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,GAAG,MAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,KAAK,IAAI;MAC3H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS;MACd,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,IAAI,KAAK,WAAW,UAAU,OAAO,eAAe,KAAK,UAAU;MAEnE,UAAU,MAAM,IAAI,QAAQ,IAAI,CAAC;MACjC,MAAM,MAAM,OAAO,eAAc,WAAU;OACzC,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,WAAW;MACxB,MAAM,WAAW,IAAI,MAAM,MAAM,KAAK;MACtC,MAAM,UAAU;OAAE,IAAI,aAAa;OAAG,MAAM,cAAc,QAAQ;OAAG,SAAS;OAAG,WAAW,QAAQ,IAAI;MAAE;MAC1G,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS,KAAK,OAAO;MAC1B,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,MAAM,MAAM,OAAO,kBAAiB,WAAU;OAC5C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAQ,GAAG,GAAG;MAC3C;KACF;KACA,IAAI,WAAW,UAAU;MAEvB,IADc,KAAK,UAAU,MAClB;OACT,IAAI,KAAK,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,yEAAyE;OAC3H,MAAM,MAAM,OAAO,iBAAgB,WAAU;QAC3C,OAAO,QAAQ,OAAO,MAAM,QAAO,MAAK,EAAE,OAAO,EAAE;QACnD,OAAO,CAAC;OACV,CAAC;OACD,KAAK,KAAK;QAAE,IAAI;QAAM,OAAO,EAAE,QAAQ,KAAK;OAAE,CAAC;OAC/C;MACF;MACA,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,UAAU,KAAK,UAAU;MAC9B,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,EAAE,SAAS,KAAK;MAAE,CAAC;MAChD;KACF;KACA,IAAI,WAAW,OAAO;MACpB,IAAI,QAAQ,QAAQ,KAAA,GAAW;OAE7B,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,IAAI,EAAE;MACnC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAO,GAAG,GAAG;WACpD;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,IAAI,WAAW,UAAU;MACvB,IAAI,QAAQ,WAAW,KAAA,GAAW;OAEhC,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,OAAO,EAAE;MACtC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;QAAE,WAAW;QAAM,aAAa,OAAO;OAAY;MAAE,GAAG,GAAG;WAClG;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,MAAM,IAAI,KAAK,aAAa,kBAAkB,QAAQ;KACtD,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAEA,IAAI,UAAU,GAAG;GACjB,IAAI,IAAI;EACV,SAAS,OAAO;GACd,MAAM,IAAI,KAAK,YAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GACjF,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;EAC3B;CACF;CAEA,MAAM,OAAO,KAAsB,QAA8B;EAC/D,IAAI,UAAU,KAAK;GACjB,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;EACd,CAAC;EACD,IAAI,MAAM,iBAAiB;EAE3B,IAAI,MAAM,uBAAuB,KAAK,UAAU,EAAE,UAAU,MAAM,SAAS,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK;EAC9F,YAAY,IAAI,GAAG;EACnB,IAAI,cAAc,KAAA,GAChB,YAAY,kBAAkB;GAC5B,KAAK,MAAM,WAAW,aAAa,QAAQ,MAAM,YAAY;EAC/D,GAAG,YAAY;EAEjB,IAAI,GAAG,eAAe;GACpB,YAAY,OAAO,GAAG;GACtB,IAAI,YAAY,SAAS,KAAK,cAAc,KAAA,GAAW;IACrD,cAAc,SAAS;IACvB,YAAY,KAAA;GACd;EACF,CAAC;CACH;CAEA,MAAM,YAAY,CAChB,IAAI,UAAU,SAAS;EAAE,MAAM;EAAU,MAAM;EAAc;CAAQ,CAAC,GACtE,IAAI,UAAU,SAAS;EAAE,MAAM;EAAS,MAAM;EAAU,SAAS;CAAI,CAAC,CACxE;CACA,aAAa;EACX,KAAK,MAAM,WAAW,WAAW,QAAQ;EACzC,IAAI,cAAc,KAAA,GAAW,cAAc,SAAS;EACpD,KAAK,MAAM,OAAO,aAAa,IAAI,IAAI;EACvC,YAAY,MAAM;CACpB;AACF"}
+{"version":3,"file":"routes.js","names":[],"sources":["../../src/host/routes.ts"],"sourcesContent":["/**\n * /dsh-taskboard routes on the shared DSH webserver: a JSON API for the\n * GUI's human operations (create/update/move/comment/delete — actor `user`,\n * the done move IS allowed here) plus an SSE stream mirroring every\n * committed ledger mutation.\n *\n * All domain validation goes through the shared protocol pure functions; the\n * route layer only maps transport to envelope.\n *\n * @module dsh-taskboard/host/routes\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { Context } from '@deepseek-ai/cordis'\n// Type-only: pulls the webServer Context merge (ctx.webServer).\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport {\n  asStatus,\n  asUrgency,\n  canTransition,\n  newCommentId,\n  newTaskId,\n  normalizeBody,\n  normalizeExecution,\n  normalizeModel,\n  normalizePrompt,\n  normalizeTitle,\n  summarize,\n  syncClaim,\n  type TaskModel,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { ROUTE_PREFIX, SSE_PATH, type ApiFail, type ApiResult } from '../shared/api.ts'\nimport type { TaskStore } from './store.ts'\nimport type { WorkspaceFace } from './tools.ts'\n\n/** Heartbeat cadence for the SSE stream. */\nconst HEARTBEAT_MS = 20_000\n\n/** The workspaces face routes need (same narrow shape as tools). */\nexport type RoutesWorkspaceFace = WorkspaceFace\n\n/** Options. */\nexport interface TaskboardRoutesOptions {\n  store: TaskStore\n  workspaces: RoutesWorkspaceFace\n  now: () => number\n  /** Manual-run hook (the execution service); absent → 501. */\n  run?: (taskId: string) => Promise<{ ok: true; executionId: string; sessionId: string } | { ok: false; error: string }>\n  /** Cancel hook (the execution service); absent → 501. */\n  cancel?: (taskId: string) => Promise<{ ok: true; executionId: string } | { ok: false; error: string }>\n  /**\n   * Registered model provider routes (from the host llm runtime), for\n   * advisory validation of pinned models; undefined = runtime unavailable.\n   */\n  modelProviders?: () => string[] | undefined\n}\n\n/** Validate a pinned model: structural check always, provider route when known. */\nfunction checkModel(raw: unknown, modelProviders?: () => string[] | undefined): TaskModel {\n  const model = normalizeModel(raw)\n  const providers = modelProviders?.()\n  if (providers !== undefined && !providers.includes(model.provider)) {\n    throw new Error(`Error: invalid_input: model provider \"${model.provider}\" has no registered route (available: ${providers.join(', ')})`)\n  }\n  return model\n}\n\n/** JSON-envelope writer. */\nfunction json(res: ServerResponse, payload: ApiResult<unknown>, status = 200): void {\n  const body = JSON.stringify(payload)\n  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })\n  res.end(body)\n}\n\n/** Domain failure → envelope + HTTP status. */\nfunction fail(code: ApiFail['error']['code'], message: string): { res: ApiFail; status: number } {\n  const status = code === 'invalid_input' || code === 'invalid_transition' ? 400\n    : code === 'not_found' ? 404\n      : code === 'version_conflict' ? 409\n        : code === 'forbidden' ? 403\n          : 500\n  return { res: { ok: false, error: { code, message } }, status }\n}\n\n/** Read one JSON body (null on parse failure). */\nasync function readBody(req: IncomingMessage): Promise<Record<string, unknown> | null> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(chunk as Buffer)\n  if (chunks.length === 0) return {}\n  try {\n    const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'))\n    return typeof parsed === 'object' && parsed !== null ? parsed as Record<string, unknown> : null\n  } catch {\n    return null\n  }\n}\n\n/** String field accessor (null when absent/not a string). */\nfunction str(body: Record<string, unknown>, key: string): string | null {\n  const v = body[key]\n  return typeof v === 'string' ? v : null\n}\n\n/** Number field accessor (undefined when absent; null when present but not a number). */\nfunction num(body: Record<string, unknown>, key: string): number | undefined | null {\n  const v = body[key]\n  if (v === undefined) return undefined\n  return typeof v === 'number' && Number.isFinite(v) ? v : null\n}\n\n/** Map a thrown domain error to the envelope. */\nfunction toFail(error: unknown): { res: ApiFail; status: number } {\n  const message = error instanceof Error ? error.message : String(error)\n  const code = message.startsWith('Error: ') ? message.slice(7).split(':')[0] : undefined\n  const known: ApiFail['error']['code'][] = ['invalid_input', 'not_found', 'version_conflict', 'invalid_transition', 'forbidden', 'internal']\n  if (code !== undefined && (known as string[]).includes(code)) {\n    return fail(code as ApiFail['error']['code'], message.slice(7 + code.length + 2))\n  }\n  if (code === 'workspace_mismatch') return fail('forbidden', message.slice(7 + code.length + 2))\n  return fail('invalid_input', message)\n}\n\n/**\n * Register the taskboard routes.\n * @param ctx - context carrying the webServer service.\n * @param options - store + workspaces + clock.\n * @returns the disposer.\n */\nexport function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOptions): () => void {\n  const { store, workspaces } = options\n  const subscribers = new Set<ServerResponse>()\n  let heartbeat: NodeJS.Timeout | undefined\n\n  const broadcast = (change: { revision: number; kind: string; tasks: readonly TaskRecord[] }): void => {\n    const frame = `event: change\\ndata: ${JSON.stringify({ revision: change.revision, kind: change.kind, tasks: change.tasks.map(summarize) })}\\n\\n`\n    for (const res of subscribers) res.write(frame)\n  }\n  store.subscribe(broadcast)\n\n  const handler = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    try {\n      const url = new URL(req.url ?? '/', 'http://x')\n      const pathname = url.pathname\n\n      // ---------------------------------------------------------------- GET\n      if (req.method === 'GET') {\n        if (pathname === `${ROUTE_PREFIX}/state`) {\n          await store.load()\n          json(res, { ok: true, value: store.snapshot() })\n          return\n        }\n        if (pathname === `${ROUTE_PREFIX}/workspaces`) {\n          json(res, { ok: true, value: workspaces.list() })\n          return\n        }\n        const taskMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)$`))\n        if (taskMatch !== null) {\n          const task = store.get(taskMatch[1]!)\n          if (task === undefined) { const f = fail('not_found', 'no such task'); json(res, f.res, f.status); return }\n          json(res, { ok: true, value: task })\n          return\n        }\n        res.writeHead(404)\n        res.end()\n        return\n      }\n\n      if (req.method !== 'POST') {\n        res.writeHead(405)\n        res.end()\n        return\n      }\n      // CSRF fence: cross-site simple requests cannot set application/json.\n      const contentType = req.headers['content-type'] ?? ''\n      if (!contentType.toLowerCase().startsWith('application/json')) {\n        const f = fail('invalid_input', 'content-type must be application/json')\n        json(res, f.res, 415)\n        return\n      }\n      const body = await readBody(req)\n      if (body === null) {\n        const f = fail('invalid_input', 'body is not a JSON object')\n        json(res, f.res, 400)\n        return\n      }\n\n      // ------------------------------------------------- POST /tasks (create)\n      if (pathname === `${ROUTE_PREFIX}/tasks`) {\n        try {\n          const title = normalizeTitle(str(body, 'title') ?? '')\n          const workspaceId = str(body, 'workspaceId') ?? ''\n          if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n          const urgency = asUrgency(str(body, 'urgency') ?? '')\n          const status = str(body, 'status') === null ? 'todo' as const : asStatus(str(body, 'status')!)\n          const execution = normalizeExecution((body.execution as { mode?: string; cron?: string } | undefined) ?? {}, options.now())\n          const model = body.model === undefined ? undefined : checkModel(body.model, options.modelProviders)\n          const now = options.now()\n          const task: TaskRecord = {\n            id: newTaskId(),\n            title,\n            description: (str(body, 'description') ?? '').trim(),\n            prompt: normalizePrompt(str(body, 'prompt') ?? undefined),\n            workspaceId,\n            urgency,\n            status,\n            blocked: false,\n            execution,\n            model,\n            version: 1,\n            createdAt: now,\n            updatedAt: now,\n            createdBy: { kind: 'user' },\n            updatedBy: { kind: 'user' },\n            comments: [],\n            executions: [],\n          }\n          await store.mutate('task-created', ledger => {\n            ledger.tasks.push(task)\n            return [task]\n          })\n          json(res, { ok: true, value: summarize(task) }, 201)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      // ------------------------------------------- POST /tasks/:id/{action}\n      const actionMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/(\\\\w+)$`))\n      if (actionMatch !== null) {\n        const id = actionMatch[1]!\n        const action = actionMatch[2]!\n        try {\n          const task = store.get(id)\n          if (task === undefined) throw new Error('Error: not_found: no such task')\n          if (action === 'update') {\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            const title = str(body, 'title')\n            if (title !== null) next.title = normalizeTitle(title)\n            const description = str(body, 'description')\n            if (description !== null) next.description = description.trim()\n            const prompt = str(body, 'prompt')\n            if (prompt !== null) next.prompt = normalizePrompt(prompt)\n            const urgency = str(body, 'urgency')\n            if (urgency !== null) next.urgency = asUrgency(urgency)\n            // GUI-only rebind to another project; validated against the workspace registry.\n            const workspaceId = str(body, 'workspaceId')\n            if (workspaceId !== null) {\n              if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n              next.workspaceId = workspaceId\n            }\n            if (typeof body.blocked === 'boolean') next.blocked = body.blocked\n            // The GUI (task owner surface) may edit model/execution; null clears the model.\n            if (body.execution !== undefined) next.execution = normalizeExecution(body.execution as { mode?: string; cron?: string }, options.now())\n            if (body.model === null) next.model = undefined\n            else if (body.model !== undefined) next.model = checkModel(body.model, options.modelProviders)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            await store.mutate('task-updated', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'move') {\n            const ifVersion = num(body, 'ifVersion')\n            const status = str(body, 'status') ?? ''\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const to = asStatus(status)\n            if (!canTransition(task.status, to)) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → ${to}`)\n            const next = structuredClone(task)\n            next.status = to\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            if (task.status === 'todo' && to === 'in_progress') next.blocked = false\n            // A user move records no holder; leaving in_progress releases any hold.\n            syncClaim(next, to, options.now())\n            await store.mutate('task-moved', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'reject') {\n            // Card quick-reject: back to todo + optional user comment in one\n            // atomic mutation (a failed move never strands an orphan comment).\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            if (!canTransition(task.status, 'todo')) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → todo`)\n            const next = structuredClone(task)\n            next.status = 'todo'\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            syncClaim(next, 'todo', options.now())\n            const commentText = str(body, 'body') ?? ''\n            if (commentText.trim().length > 0) {\n              next.comments.push({ id: newCommentId(), body: normalizeBody(commentText), version: 1, createdAt: options.now() })\n            }\n            await store.mutate('task-moved', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'comment') {\n            const bodyText = str(body, 'body') ?? ''\n            const comment = { id: newCommentId(), body: normalizeBody(bodyText), version: 1, createdAt: options.now() }\n            const next = structuredClone(task)\n            next.comments.push(comment)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            await store.mutate('comment-added', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: comment }, 201)\n            return\n          }\n          if (action === 'delete') {\n            const purge = body.purge === true\n            if (purge) {\n              if (task.trashedAt === undefined) throw new Error('Error: invalid_input: purge requires a trashed task (soft-delete first)')\n              await store.mutate('task-deleted', ledger => {\n                ledger.tasks = ledger.tasks.filter(t => t.id !== id)\n                return []\n              })\n              json(res, { ok: true, value: { purged: true } })\n              return\n            }\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            next.trashedAt = options.now()\n            next.version = task.version + 1\n            await store.mutate('task-deleted', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: { trashed: true } })\n            return\n          }\n          if (action === 'run') {\n            if (options.run === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.run(id)\n            if (result.ok) json(res, { ok: true, value: result }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          if (action === 'cancel') {\n            if (options.cancel === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.cancel(id)\n            if (result.ok) json(res, { ok: true, value: { cancelled: true, executionId: result.executionId } }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          const f = fail('not_found', `unknown action ${action}`)\n          json(res, f.res, f.status)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      res.writeHead(404)\n      res.end()\n    } catch (error) {\n      const f = fail('internal', error instanceof Error ? error.message : String(error))\n      json(res, f.res, f.status)\n    }\n  }\n\n  const sse = (req: IncomingMessage, res: ServerResponse): void => {\n    res.writeHead(200, {\n      'content-type': 'text/event-stream; charset=utf-8',\n      'cache-control': 'no-cache',\n      connection: 'keep-alive',\n    })\n    res.write('retry: 2000\\n\\n')\n    // Baseline frame: the client reconciles by revision and refetches state on gaps.\n    res.write(`event: hello\\ndata: ${JSON.stringify({ revision: store.snapshot().revision })}\\n\\n`)\n    subscribers.add(res)\n    if (heartbeat === undefined) {\n      heartbeat = setInterval(() => {\n        for (const current of subscribers) current.write(': ping\\n\\n')\n      }, HEARTBEAT_MS)\n    }\n    req.on('close', () => {\n      subscribers.delete(res)\n      if (subscribers.size === 0 && heartbeat !== undefined) {\n        clearInterval(heartbeat)\n        heartbeat = undefined\n      }\n    })\n  }\n\n  const disposers = [\n    ctx.webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }),\n    ctx.webServer.register({ kind: 'exact', path: SSE_PATH, handler: sse }),\n  ]\n  return () => {\n    for (const dispose of disposers) dispose()\n    if (heartbeat !== undefined) clearInterval(heartbeat)\n    for (const res of subscribers) res.end()\n    subscribers.clear()\n  }\n}\n"],"mappings":";;;;AAoCA,MAAM,eAAe;;AAsBrB,SAAS,WAAW,KAAc,gBAAwD;CACxF,MAAM,QAAQ,eAAe,GAAG;CAChC,MAAM,YAAY,iBAAiB;CACnC,IAAI,cAAc,KAAA,KAAa,CAAC,UAAU,SAAS,MAAM,QAAQ,GAC/D,MAAM,IAAI,MAAM,yCAAyC,MAAM,SAAS,wCAAwC,UAAU,KAAK,IAAI,EAAE,EAAE;CAEzI,OAAO;AACT;;AAGA,SAAS,KAAK,KAAqB,SAA6B,SAAS,KAAW;CAClF,MAAM,OAAO,KAAK,UAAU,OAAO;CACnC,IAAI,UAAU,QAAQ;EAAE,gBAAgB;EAAmC,iBAAiB;CAAW,CAAC;CACxG,IAAI,IAAI,IAAI;AACd;;AAGA,SAAS,KAAK,MAAgC,SAAmD;CAM/F,OAAO;EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE;IAAM;GAAQ;EAAE;EAAG,QALxC,SAAS,mBAAmB,SAAS,uBAAuB,MACvE,SAAS,cAAc,MACrB,SAAS,qBAAqB,MAC5B,SAAS,cAAc,MACrB;CACoD;AAChE;;AAGA,eAAe,SAAS,KAA+D;CACrF,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KAAK,OAAO,KAAK,KAAe;CAC1D,IAAI,OAAO,WAAW,GAAG,OAAO,CAAC;CACjC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;EAChE,OAAO,OAAO,WAAW,YAAY,WAAW,OAAO,SAAoC;CAC7F,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,IAAI,MAA+B,KAA4B;CACtE,MAAM,IAAI,KAAK;CACf,OAAO,OAAO,MAAM,WAAW,IAAI;AACrC;;AAGA,SAAS,IAAI,MAA+B,KAAwC;CAClF,MAAM,IAAI,KAAK;CACf,IAAI,MAAM,KAAA,GAAW,OAAO,KAAA;CAC5B,OAAO,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,IAAI,IAAI;AAC3D;;AAGA,SAAS,OAAO,OAAkD;CAChE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,MAAM,OAAO,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAA;CAE9E,IAAI,SAAS,KAAA,KAAc;EADgB;EAAiB;EAAa;EAAoB;EAAsB;EAAa;CACjG,CAAC,CAAc,SAAS,IAAI,GACzD,OAAO,KAAK,MAAkC,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAElF,IAAI,SAAS,sBAAsB,OAAO,KAAK,aAAa,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAC9F,OAAO,KAAK,iBAAiB,OAAO;AACtC;;;;;;;AAQA,SAAgB,wBAAwB,KAAc,SAA6C;CACjG,MAAM,EAAE,OAAO,eAAe;CAC9B,MAAM,8BAAc,IAAI,IAAoB;CAC5C,IAAI;CAEJ,MAAM,aAAa,WAAmF;EACpG,MAAM,QAAQ,wBAAwB,KAAK,UAAU;GAAE,UAAU,OAAO;GAAU,MAAM,OAAO;GAAM,OAAO,OAAO,MAAM,IAAI,SAAS;EAAE,CAAC,EAAE;EAC3I,KAAK,MAAM,OAAO,aAAa,IAAI,MAAM,KAAK;CAChD;CACA,MAAM,UAAU,SAAS;CAEzB,MAAM,UAAU,OAAO,KAAsB,QAAuC;EAClF,IAAI;GAEF,MAAM,WAAW,IADD,IAAI,IAAI,OAAO,KAAK,UACjB,CAAC,CAAC;GAGrB,IAAI,IAAI,WAAW,OAAO;IACxB,IAAI,aAAa,wBAAyB;KACxC,MAAM,MAAM,KAAK;KACjB,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,MAAM,SAAS;KAAE,CAAC;KAC/C;IACF;IACA,IAAI,aAAa,6BAA8B;KAC7C,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,WAAW,KAAK;KAAE,CAAC;KAChD;IACF;IACA,MAAM,YAAY,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,gBAAgB,CAAC;IAC9E,IAAI,cAAc,MAAM;KACtB,MAAM,OAAO,MAAM,IAAI,UAAU,EAAG;KACpC,IAAI,SAAS,KAAA,GAAW;MAAE,MAAM,IAAI,KAAK,aAAa,cAAc;MAAG,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAAG;KAAO;KAC1G,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO;KAAK,CAAC;KACnC;IACF;IACA,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAEA,IAAI,IAAI,WAAW,QAAQ;IACzB,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAGA,IAAI,EADgB,IAAI,QAAQ,mBAAmB,GAAA,CAClC,YAAY,CAAC,CAAC,WAAW,kBAAkB,GAAG;IAE7D,KAAK,KADK,KAAK,iBAAiB,uCACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GACA,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,IAAI,SAAS,MAAM;IAEjB,KAAK,KADK,KAAK,iBAAiB,2BACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GAGA,IAAI,aAAa,wBAAyB;IACxC,IAAI;KACF,MAAM,QAAQ,eAAe,IAAI,MAAM,OAAO,KAAK,EAAE;KACrD,MAAM,cAAc,IAAI,MAAM,aAAa,KAAK;KAChD,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;KACpG,MAAM,UAAU,UAAU,IAAI,MAAM,SAAS,KAAK,EAAE;KACpD,MAAM,SAAS,IAAI,MAAM,QAAQ,MAAM,OAAO,SAAkB,SAAS,IAAI,MAAM,QAAQ,CAAE;KAC7F,MAAM,YAAY,mBAAoB,KAAK,aAA8D,CAAC,GAAG,QAAQ,IAAI,CAAC;KAC1H,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,KAAA,IAAY,WAAW,KAAK,OAAO,QAAQ,cAAc;KAClG,MAAM,MAAM,QAAQ,IAAI;KACxB,MAAM,OAAmB;MACvB,IAAI,UAAU;MACd;MACA,cAAc,IAAI,MAAM,aAAa,KAAK,GAAA,CAAI,KAAK;MACnD,QAAQ,gBAAgB,IAAI,MAAM,QAAQ,KAAK,KAAA,CAAS;MACxD;MACA;MACA;MACA,SAAS;MACT;MACA;MACA,SAAS;MACT,WAAW;MACX,WAAW;MACX,WAAW,EAAE,MAAM,OAAO;MAC1B,WAAW,EAAE,MAAM,OAAO;MAC1B,UAAU,CAAC;MACX,YAAY,CAAC;KACf;KACA,MAAM,MAAM,OAAO,iBAAgB,WAAU;MAC3C,OAAO,MAAM,KAAK,IAAI;MACtB,OAAO,CAAC,IAAI;KACd,CAAC;KACD,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,UAAU,IAAI;KAAE,GAAG,GAAG;IACrD,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAGA,MAAM,cAAc,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,uBAAuB,CAAC;GACvF,IAAI,gBAAgB,MAAM;IACxB,MAAM,KAAK,YAAY;IACvB,MAAM,SAAS,YAAY;IAC3B,IAAI;KACF,MAAM,OAAO,MAAM,IAAI,EAAE;KACzB,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,gCAAgC;KACxE,IAAI,WAAW,UAAU;MACvB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,MAAM,QAAQ,IAAI,MAAM,OAAO;MAC/B,IAAI,UAAU,MAAM,KAAK,QAAQ,eAAe,KAAK;MACrD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM,KAAK,cAAc,YAAY,KAAK;MAC9D,MAAM,SAAS,IAAI,MAAM,QAAQ;MACjC,IAAI,WAAW,MAAM,KAAK,SAAS,gBAAgB,MAAM;MACzD,MAAM,UAAU,IAAI,MAAM,SAAS;MACnC,IAAI,YAAY,MAAM,KAAK,UAAU,UAAU,OAAO;MAEtD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM;OACxB,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;OACpG,KAAK,cAAc;MACrB;MACA,IAAI,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK;MAE3D,IAAI,KAAK,cAAc,KAAA,GAAW,KAAK,YAAY,mBAAmB,KAAK,WAA+C,QAAQ,IAAI,CAAC;MACvI,IAAI,KAAK,UAAU,MAAM,KAAK,QAAQ,KAAA;WACjC,IAAI,KAAK,UAAU,KAAA,GAAW,KAAK,QAAQ,WAAW,KAAK,OAAO,QAAQ,cAAc;MAC7F,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,QAAQ;MACrB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,MAAM,SAAS,IAAI,MAAM,QAAQ,KAAK;MACtC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,KAAK,SAAS,MAAM;MAC1B,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,GAAG,MAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,KAAK,IAAI;MAC3H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS;MACd,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,IAAI,KAAK,WAAW,UAAU,OAAO,eAAe,KAAK,UAAU;MAEnE,UAAU,MAAM,IAAI,QAAQ,IAAI,CAAC;MACjC,MAAM,MAAM,OAAO,eAAc,WAAU;OACzC,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,UAAU;MAGvB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,IAAI,CAAC,cAAc,KAAK,QAAQ,MAAM,GAAG,MAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,QAAQ;MAC9H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS;MACd,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,UAAU,MAAM,QAAQ,QAAQ,IAAI,CAAC;MACrC,MAAM,cAAc,IAAI,MAAM,MAAM,KAAK;MACzC,IAAI,YAAY,KAAK,CAAC,CAAC,SAAS,GAC9B,KAAK,SAAS,KAAK;OAAE,IAAI,aAAa;OAAG,MAAM,cAAc,WAAW;OAAG,SAAS;OAAG,WAAW,QAAQ,IAAI;MAAE,CAAC;MAEnH,MAAM,MAAM,OAAO,eAAc,WAAU;OACzC,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,WAAW;MACxB,MAAM,WAAW,IAAI,MAAM,MAAM,KAAK;MACtC,MAAM,UAAU;OAAE,IAAI,aAAa;OAAG,MAAM,cAAc,QAAQ;OAAG,SAAS;OAAG,WAAW,QAAQ,IAAI;MAAE;MAC1G,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS,KAAK,OAAO;MAC1B,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,MAAM,MAAM,OAAO,kBAAiB,WAAU;OAC5C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAQ,GAAG,GAAG;MAC3C;KACF;KACA,IAAI,WAAW,UAAU;MAEvB,IADc,KAAK,UAAU,MAClB;OACT,IAAI,KAAK,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,yEAAyE;OAC3H,MAAM,MAAM,OAAO,iBAAgB,WAAU;QAC3C,OAAO,QAAQ,OAAO,MAAM,QAAO,MAAK,EAAE,OAAO,EAAE;QACnD,OAAO,CAAC;OACV,CAAC;OACD,KAAK,KAAK;QAAE,IAAI;QAAM,OAAO,EAAE,QAAQ,KAAK;OAAE,CAAC;OAC/C;MACF;MACA,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,UAAU,KAAK,UAAU;MAC9B,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,EAAE,SAAS,KAAK;MAAE,CAAC;MAChD;KACF;KACA,IAAI,WAAW,OAAO;MACpB,IAAI,QAAQ,QAAQ,KAAA,GAAW;OAE7B,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,IAAI,EAAE;MACnC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAO,GAAG,GAAG;WACpD;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,IAAI,WAAW,UAAU;MACvB,IAAI,QAAQ,WAAW,KAAA,GAAW;OAEhC,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,OAAO,EAAE;MACtC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;QAAE,WAAW;QAAM,aAAa,OAAO;OAAY;MAAE,GAAG,GAAG;WAClG;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,MAAM,IAAI,KAAK,aAAa,kBAAkB,QAAQ;KACtD,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAEA,IAAI,UAAU,GAAG;GACjB,IAAI,IAAI;EACV,SAAS,OAAO;GACd,MAAM,IAAI,KAAK,YAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GACjF,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;EAC3B;CACF;CAEA,MAAM,OAAO,KAAsB,QAA8B;EAC/D,IAAI,UAAU,KAAK;GACjB,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;EACd,CAAC;EACD,IAAI,MAAM,iBAAiB;EAE3B,IAAI,MAAM,uBAAuB,KAAK,UAAU,EAAE,UAAU,MAAM,SAAS,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK;EAC9F,YAAY,IAAI,GAAG;EACnB,IAAI,cAAc,KAAA,GAChB,YAAY,kBAAkB;GAC5B,KAAK,MAAM,WAAW,aAAa,QAAQ,MAAM,YAAY;EAC/D,GAAG,YAAY;EAEjB,IAAI,GAAG,eAAe;GACpB,YAAY,OAAO,GAAG;GACtB,IAAI,YAAY,SAAS,KAAK,cAAc,KAAA,GAAW;IACrD,cAAc,SAAS;IACvB,YAAY,KAAA;GACd;EACF,CAAC;CACH;CAEA,MAAM,YAAY,CAChB,IAAI,UAAU,SAAS;EAAE,MAAM;EAAU,MAAM;EAAc;CAAQ,CAAC,GACtE,IAAI,UAAU,SAAS;EAAE,MAAM;EAAS,MAAM;EAAU,SAAS;CAAI,CAAC,CACxE;CACA,aAAa;EACX,KAAK,MAAM,WAAW,WAAW,QAAQ;EACzC,IAAI,cAAc,KAAA,GAAW,cAAc,SAAS;EACpD,KAAK,MAAM,OAAO,aAAa,IAAI,IAAI;EACvC,YAAY,MAAM;CACpB;AACF"}

package/lib/shared/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","names":[],"sources":["../../src/shared/api.ts"],"sourcesContent":["/**\n * Wire contract for the /taskboard host routes: the JSON envelope,\n * request/response shapes, and SSE event payloads shared by the host routes\n * and the browser client.\n *\n * @module dsh-taskboard/shared/api\n */\nimport type { TaskLedger, TaskRecord, TaskSummary } from './protocol.ts'\n\nexport type { TaskRecord }\n\n/** Route prefix on the shared DSH webserver (same origin as the GUI). */\nexport const ROUTE_PREFIX = '/dsh-taskboard'\n\n/** SSE stream path (exact route; longest-prefix wins keep it disjoint). */\nexport const SSE_PATH = '/dsh-taskboard/events'\n\n/** Stable error codes (mirror the tool-level codes plus HTTP mapping). */\nexport type ApiErrorCode =\n  | 'invalid_input'\n  | 'not_found'\n  | 'version_conflict'\n  | 'invalid_transition'\n  | 'forbidden'\n  | 'internal'\n\n/** Success envelope. */\nexport type ApiOk<T> = { ok: true; value: T }\n\n/** Failure envelope. */\nexport type ApiFail = { ok: false; error: { code: ApiErrorCode; message: string } }\n\n/** The envelope either way. */\nexport type ApiResult<T> = ApiOk<T> | ApiFail\n\n// ---------------------------------------------------------------------------\n// payloads\n// ---------------------------------------------------------------------------\n\n/** Full-state response (the reconnect baseline after an SSE gap). */\nexport type StateResponse = TaskLedger\n\n/** Workspace listing for the UI pickers. */\nexport type WorkspaceView = { id: string; path: string; title: string; sessionCount: number }\n\n/** Create-task request body (actor is always the GUI user). */\nexport type CreateTaskBody = {\n  title: string\n  workspaceId: string\n  urgency: string\n  description?: string\n  prompt?: string\n  execution?: { mode?: string; cron?: string }\n  model?: { provider: string; model: string }\n}\n\n/** Update-task request body (ifVersion mandatory). */\nexport type UpdateTaskBody = {\n  ifVersion: number\n  title?: string\n  description?: string\n  prompt?: string\n  urgency?: string\n  blocked?: boolean\n  /** Rebind the task to another project (GUI owner surface only). */\n  workspaceId?: string\n  execution?: { mode?: string; cron?: string }\n  model?: { provider: string; model: string } | null\n}\n\n/** Move-task request body (ifVersion mandatory; the user MAY move to done). */\nexport type MoveTaskBody = { ifVersion: number; status: string }\n\n/** Comment request body. */\nexport type CommentBody = { body: string }\n\n/** Delete request body (purge=true physically removes a trashed task). */\nexport type DeleteTaskBody = { ifVersion?: number; purge?: boolean }\n\n/** Run request body (P3). */\nexport type RunTaskBody = Record<string, never>\n\n/** One task (full record) response. */\nexport type TaskResponse = TaskRecord\n\n/** Summary response used by list-ish endpoints. */\nexport type SummaryResponse = { tasks: TaskSummary[] }\n\n// ---------------------------------------------------------------------------\n// SSE\n// ---------------------------------------------------------------------------\n\n/** Change frame pushed on every committed ledger mutation. */\nexport type ChangeEvent = {\n  revision: number\n  kind: 'task-created' | 'task-updated' | 'task-moved' | 'task-deleted' | 'comment-added' | 'execution-recorded'\n  tasks: TaskSummary[]\n}\n"],"mappings":";;AAYA,MAAa,eAAe;;AAG5B,MAAa,WAAW"}
+{"version":3,"file":"api.js","names":[],"sources":["../../src/shared/api.ts"],"sourcesContent":["/**\n * Wire contract for the /taskboard host routes: the JSON envelope,\n * request/response shapes, and SSE event payloads shared by the host routes\n * and the browser client.\n *\n * @module dsh-taskboard/shared/api\n */\nimport type { TaskLedger, TaskRecord, TaskSummary } from './protocol.ts'\n\nexport type { TaskRecord }\n\n/** Route prefix on the shared DSH webserver (same origin as the GUI). */\nexport const ROUTE_PREFIX = '/dsh-taskboard'\n\n/** SSE stream path (exact route; longest-prefix wins keep it disjoint). */\nexport const SSE_PATH = '/dsh-taskboard/events'\n\n/** Stable error codes (mirror the tool-level codes plus HTTP mapping). */\nexport type ApiErrorCode =\n  | 'invalid_input'\n  | 'not_found'\n  | 'version_conflict'\n  | 'invalid_transition'\n  | 'forbidden'\n  | 'internal'\n\n/** Success envelope. */\nexport type ApiOk<T> = { ok: true; value: T }\n\n/** Failure envelope. */\nexport type ApiFail = { ok: false; error: { code: ApiErrorCode; message: string } }\n\n/** The envelope either way. */\nexport type ApiResult<T> = ApiOk<T> | ApiFail\n\n// ---------------------------------------------------------------------------\n// payloads\n// ---------------------------------------------------------------------------\n\n/** Full-state response (the reconnect baseline after an SSE gap). */\nexport type StateResponse = TaskLedger\n\n/** Workspace listing for the UI pickers. */\nexport type WorkspaceView = { id: string; path: string; title: string; sessionCount: number }\n\n/** Create-task request body (actor is always the GUI user). */\nexport type CreateTaskBody = {\n  title: string\n  workspaceId: string\n  urgency: string\n  description?: string\n  prompt?: string\n  execution?: { mode?: string; cron?: string }\n  model?: { provider: string; model: string }\n}\n\n/** Update-task request body (ifVersion mandatory). */\nexport type UpdateTaskBody = {\n  ifVersion: number\n  title?: string\n  description?: string\n  prompt?: string\n  urgency?: string\n  blocked?: boolean\n  /** Rebind the task to another project (GUI owner surface only). */\n  workspaceId?: string\n  execution?: { mode?: string; cron?: string }\n  model?: { provider: string; model: string } | null\n}\n\n/** Move-task request body (ifVersion mandatory; the user MAY move to done). */\nexport type MoveTaskBody = { ifVersion: number; status: string }\n\n/**\n * Quick-reject request body (card ✗ button): move back to todo plus an\n * optional user comment, committed as ONE ledger mutation so a failed move\n * can never strand an orphan comment.\n */\nexport type RejectTaskBody = { ifVersion: number; body?: string }\n\n/** Comment request body. */\nexport type CommentBody = { body: string }\n\n/** Delete request body (purge=true physically removes a trashed task). */\nexport type DeleteTaskBody = { ifVersion?: number; purge?: boolean }\n\n/** Run request body (P3). */\nexport type RunTaskBody = Record<string, never>\n\n/** One task (full record) response. */\nexport type TaskResponse = TaskRecord\n\n/** Summary response used by list-ish endpoints. */\nexport type SummaryResponse = { tasks: TaskSummary[] }\n\n// ---------------------------------------------------------------------------\n// SSE\n// ---------------------------------------------------------------------------\n\n/** Change frame pushed on every committed ledger mutation. */\nexport type ChangeEvent = {\n  revision: number\n  kind: 'task-created' | 'task-updated' | 'task-moved' | 'task-deleted' | 'comment-added' | 'execution-recorded'\n  tasks: TaskSummary[]\n}\n"],"mappings":";;AAYA,MAAa,eAAe;;AAG5B,MAAa,WAAW"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-taskboard",
   "description": "Agent-first task board for the DSH web GUI: host-authoritative task ledger with taskboard_* agent tools, project (= workspace) claim boundaries, per-task model execution in fresh sessions, host-side cron scheduling, and a live SSE kanban view. Mounts via the official dsh plugin system — no DSH source changes.",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "type": "module",
   "main": "lib/index.js",
   "exports": {

package/src/client/api.ts

@@ -11,6 +11,7 @@ import type {
   CreateTaskBody,
   DeleteTaskBody,
   MoveTaskBody,
+  RejectTaskBody,
   StateResponse,
   TaskRecord,
   UpdateTaskBody,
@@ -44,6 +45,8 @@ export interface TaskboardClient {
   get(id: string): Promise<TaskRecord>
   update(id: string, body: UpdateTaskBody): Promise<TaskSummary>
   move(id: string, body: MoveTaskBody): Promise<TaskSummary>
+  /** Quick-reject (card ✗): back to todo + optional comment, one mutation. */
+  reject(id: string, body: RejectTaskBody): Promise<TaskSummary>
   comment(id: string, bodyText: string): Promise<CommentRecord>
   remove(id: string, body: DeleteTaskBody): Promise<{ trashed?: boolean; purged?: boolean }>
   /** Trigger a manual run (fresh in-project session). */
@@ -63,6 +66,7 @@ export function createClient(): TaskboardClient {
     get: id => unwrap<TaskRecord>(fetch(`/dsh-taskboard/tasks/${encodeURIComponent(id)}`)),
     update: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/update`, body),
     move: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/move`, body),
+    reject: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/reject`, body),
     comment: (id, bodyText) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/comment`, { body: bodyText }),
     remove: (id, body) => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/delete`, body),
     run: id => post(`/dsh-taskboard/tasks/${encodeURIComponent(id)}/run`, {}),

package/src/client/board/TaskCard.tsx

@@ -2,10 +2,16 @@
  * One board card: urgency edge, title, project/urgency/model/schedule/
  * blocked/trashed badges, comment count, and the last execution outcome.
  * Click opens the detail pane; cards in the backlog/todo columns are
- * draggable between those two columns (HTML5 drag & drop).
+ * draggable between those two columns (HTML5 drag & drop). Cards sitting
+ * in the in_review column also carry quick-review actions (✓ complete /
+ * ✗ send back with an optional note).
+ *
+ * The root is a div[role=button] (not a <button>) so the quick actions can
+ * be real nested buttons — valid HTML and native keyboard activation.
  *
  * @module dsh-taskboard/client/board/TaskCard
  */
+import { useState } from 'react'
 import type { BoardController } from '../controller.ts'
 import type { TaskRecord } from '../../shared/protocol.ts'
 import { fmtTime, isStaleClaim } from './TaskBoard.tsx'
@@ -25,15 +31,28 @@ export const DRAG_TYPE = 'application/x-dsh-atb-task'
  * @param onAlert - show an alert message (replaces native alert).
  */
 export function TaskCard({ task, controller, draggable = false, now, onAlert }: { task: TaskRecord; controller: BoardController; draggable?: boolean; now?: number; onAlert?: (msg: string) => void }) {
+  const [rejectOpen, setRejectOpen] = useState(false)
+  const [note, setNote] = useState('')
   const last = task.executions.length > 0 ? task.executions[task.executions.length - 1] : undefined
   const running = task.executions.find(ex => ex.outcome === 'running')
   const stale = now !== undefined && isStaleClaim(task, now)
+  const reviewing = task.status === 'in_review' && task.trashedAt === undefined
+
+  /** Submit the quick-reject: one atomic route (move + optional note). */
+  const submitReject = (): void => {
+    void controller.reject(task.id, task.version, note).then(ok => {
+      if (ok) { setRejectOpen(false); setNote('') }
+      // On failure the error surface explains; the form stays open for retry.
+    })
+  }
+
   return (
-    <button
-      type="button"
+    <div
+      role="button"
+      tabIndex={0}
       className="dsh-atb-card"
       data-urgency={task.urgency}
-      draggable={draggable}
+      draggable={draggable && !rejectOpen}
       onDragStart={(e) => {
         // Block drag if a session is still executing this task
         if (running !== undefined) {
@@ -49,6 +68,14 @@ export function TaskCard({ task, controller, draggable = false, now, onAlert }:
       }}
       onDragEnd={(e) => { delete e.currentTarget.dataset.dragging }}
       onClick={() => controller.select(task.id)}
+      onKeyDown={(e) => {
+        // Only the card itself (not the nested quick-action controls).
+        if (e.target !== e.currentTarget) return
+        if (e.key === 'Enter' || e.key === ' ') {
+          e.preventDefault()
+          controller.select(task.id)
+        }
+      }}
     >
       <div className="dsh-atb-card-title">{task.title}</div>
       <div className="dsh-atb-card-meta">
@@ -69,6 +96,47 @@ export function TaskCard({ task, controller, draggable = false, now, onAlert }:
         {task.trashedAt !== undefined && <span className="dsh-atb-badge" data-kind="trashed">待清除</span>}
         <span style={{ marginLeft: 'auto' }}>{fmtTime(task.updatedAt)}</span>
       </div>
-    </button>
+      {reviewing && (rejectOpen
+        ? (
+            <div className="dsh-atb-quick-reject" onClick={e => e.stopPropagation()}>
+              <input
+                className="dsh-atb-input dsh-atb-quick-note"
+                value={note}
+                placeholder="退回原因（可选，agent 开工前会读）…"
+                autoFocus
+                spellCheck={false}
+                onChange={e => setNote(e.target.value)}
+                onKeyDown={e => {
+                  if (e.key === 'Enter') submitReject()
+                  else if (e.key === 'Escape') { setRejectOpen(false); setNote('') }
+                }}
+              />
+              <button type="button" className="dsh-atb-quickbtn" data-act="reject-confirm" onClick={submitReject}>退回待办</button>
+              <button type="button" className="dsh-atb-quickbtn" data-act="reject-cancel" onClick={() => { setRejectOpen(false); setNote('') }}>取消</button>
+            </div>
+          )
+        : (
+            <div className="dsh-atb-quick" onClick={e => e.stopPropagation()}>
+              <button
+                type="button"
+                className="dsh-atb-quickbtn"
+                data-act="done"
+                title="验收完成：移至已完成"
+                onClick={() => void controller.move(task.id, task.version, 'done')}
+              >
+                ✓ 完成
+              </button>
+              <button
+                type="button"
+                className="dsh-atb-quickbtn"
+                data-act="reject"
+                title="退回待办，可附退回原因"
+                onClick={() => setRejectOpen(true)}
+              >
+                ✗ 退回
+              </button>
+            </div>
+          ))}
+    </div>
   )
 }

package/src/client/controller.ts

@@ -286,6 +286,25 @@ export class BoardController {
     }
   }
 
+  /**
+   * Quick-reject (card ✗ button): move back to todo with an optional user
+   * comment, committed atomically host-side. Returns whether the task moved.
+   * @param id - task id.
+   * @param ifVersion - optimistic version (captured at click time).
+   * @param comment - optional comment text; blank = move only.
+   */
+  async reject(id: string, ifVersion: number, comment?: string): Promise<boolean> {
+    const body = comment !== undefined && comment.trim().length > 0 ? comment.trim() : undefined
+    try {
+      await this.client.reject(id, body === undefined ? { ifVersion } : { ifVersion, body })
+      await this.refresh()
+      return true
+    } catch (error) {
+      this.setState({ error: error instanceof Error ? error.message : String(error) })
+      return false
+    }
+  }
+
   /** Toggle the blocked marker. */
   async toggleBlocked(task: TaskRecord): Promise<void> {
     try {

package/src/client/styles.ts

@@ -148,6 +148,21 @@ html[data-dsh-atb-active] .dsh-atb-view { display: flex; flex-direction: column;
 .dsh-atb-badge[data-kind="done"] { background: rgba(46,160,67,.16); color: #2ea043; }
 .dsh-atb-badge[data-kind="running"] { background: rgba(229,152,42,.16); color: #e69842; }
 
+/* ---------- card quick review (in_review column) ---------- */
+.dsh-atb-quick { display: flex; gap: 6px; margin-top: 7px; }
+.dsh-atb-quickbtn {
+  flex: 1; font-size: 11.5px; padding: 3px 8px; border-radius: 6px; cursor: pointer;
+  border: 1px solid var(--dsw-border, rgba(128,128,128,.3));
+  background: var(--dsw-bg-elevated, rgba(128,128,128,.12)); color: inherit;
+}
+.dsh-atb-quickbtn:hover { border-color: var(--dsw-border-strong, rgba(128,128,128,.6)); }
+.dsh-atb-quickbtn[data-act="done"] { background: rgba(46,160,67,.14); color: #2ea043; border-color: rgba(46,160,67,.4); }
+.dsh-atb-quickbtn[data-act="done"]:hover { background: rgba(46,160,67,.22); }
+.dsh-atb-quickbtn[data-act="reject"] { background: rgba(229,152,42,.12); color: #d9822b; border-color: rgba(229,152,42,.4); }
+.dsh-atb-quickbtn[data-act="reject"]:hover { background: rgba(229,152,42,.2); }
+.dsh-atb-quick-reject { display: flex; gap: 6px; margin-top: 7px; align-items: stretch; }
+.dsh-atb-quick-note { flex: 1; min-width: 0; font-size: 11.5px; padding: 3px 8px; }
+
 .dsh-atb-error { font-size: 12px; color: #e5484d; padding: 4px 8px; border-radius: 6px; background: rgba(229,72,77,.1); }
 .dsh-atb-empty { font-size: 12px; color: var(--dsw-text-secondary, gray); padding: 10px 4px; }
 

package/src/host/execution.ts

@@ -34,6 +34,7 @@ export interface AgentsFace {
     agent: {
       id: string
       followup(message: unknown): void
+      inject(message: unknown): void
       whenIdle(): Promise<void>
     }
     dispose(): Promise<void>
@@ -251,17 +252,26 @@ export class ExecutionService {
     // 4. Record the session id (execution is really started now).
     await this.patchExecution(executionId, { sessionId })
 
-    // 5. Submit the effective prompt as an ordinary user message and settle
-    //    on quiescence (turn/end errors were already folded by the listener).
-    //    Source `user` (not `plugin`) so the opening message renders as a
-    //    normal user bubble in the conversation, exactly like a typed prompt.
-    const message = {
+    // 5. Submit the opening pair and settle on quiescence (turn/end errors
+    //    were already folded by the listener). Two messages, ONE turn:
+    //    - inject() queues the plugin framing line (next-step, no wake); it
+    //      renders as a plugin context row in the conversation.
+    //    - followup() queues the card body as a normal user message
+    //      (next-turn, wakes the driver). At claim time the loop drains ALL
+    //      next-step messages plus the one next-turn message into a single
+    //    turn — framing first, then the user bubble.
+    handle.agent.inject({
       id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),
       role: 'user' as const,
-      content: [{ type: 'text' as const, text: this.executionPrompt(task) }],
+      content: [{ type: 'text' as const, text: this.pluginFraming(task) }],
+      source: { kind: 'plugin' as const, plugin: 'dsh-taskboard' },
+    })
+    handle.agent.followup({
+      id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),
+      role: 'user' as const,
+      content: [{ type: 'text' as const, text: this.userBody(task) }],
       source: { kind: 'user' as const },
-    }
-    handle.agent.followup(message)
+    })
 
     // 6. Settlement watcher: mark succeeded, release the executing session's
     //    hold, and — when the session did NOT follow the handoff protocol —
@@ -386,18 +396,29 @@ export class ExecutionService {
   }
 
   /**
-   * The prompt text one execution submits (task context + instructions).
-   * The effective prompt supports two template variables, rendered from the
-   * task's own history at submit time (valuable for recurring patrols):
+   * The plugin framing line (rendered as a plugin context row): task head,
+   * already-claimed state, and the handoff protocol — everything the session
+   * must know about the board. The task id appears exactly once (here); the
+   * protocol steps below refer to it as 本任务.
+   */
+  private pluginFraming(task: TaskRecord): string {
+    return `【任务看板】${task.title}（ID: ${task.id}）\n`
+      + `本会话由任务看板执行服务启动，任务已置为进行中——无需认领；「已完成」仅限用户在界面操作（代码已限制，移了会被拒）。\n`
+      + `完成后按序交接：\n`
+      + `1. taskboard_get 读取本任务，取得最新 version\n`
+      + `2. taskboard_comment_add 留评论：做了什么改动 / 如何验证 / 剩余风险\n`
+      + `3. taskboard_move 将本任务移至待验收 in_review（带 ifVersion）\n`
+      + `若无法完成：留评论说明原因，将任务移回待办 todo。`
+  }
+
+  /**
+   * The card body as a normal user bubble: the effective prompt (explicit
+   * prompt, else title+description) with template variables resolved from
+   * the task's own history at submit time (valuable for recurring patrols):
    * `{{lastExecution}}` → the previous execution's trigger/outcome/error;
    * `{{lastComments}}` → the last three comments (who + body).
    */
-  private executionPrompt(task: TaskRecord): string {
-    const state = '本任务由执行服务启动本会话并已置为 in_progress（你无需再认领，也无需移到 done）。'
-    const tail = `完成后请：1) 用 taskboard_get 读取任务 ${task.id} 拿最新 version；`
-      + `2) 用 taskboard_comment_add 留评论（做了什么改动、如何验证、剩余风险）；`
-      + `3) 用 taskboard_move 把任务 ${task.id} 移到 in_review（带 ifVersion）。`
-    const base = effectivePrompt(task)
+  private userBody(task: TaskRecord): string {
     const lastExec = [...task.executions].reverse().find(e => e.outcome !== 'running')
     const lastExecText = lastExec === undefined
       ? '（无）'
@@ -405,10 +426,9 @@ export class ExecutionService {
     const lastCommentsText = task.comments.slice(-3)
       .map(c => `[${c.threadId !== undefined ? 'agent' : 'user'}] ${c.body}`)
       .join('\n') || '（无）'
-    const body = base
+    return effectivePrompt(task)
       .replace(/\{\{lastExecution\}\}/g, lastExecText)
       .replace(/\{\{lastComments\}\}/g, lastCommentsText)
-    return `【任务】${task.title}（任务 ID: ${task.id}）\n\n${state}\n\n${body}\n\n${tail}`
   }
 
   /** Move a task back out of in_progress (and release its hold) after a failed start. */

package/src/host/routes.ts

@@ -74,7 +74,7 @@ function json(res: ServerResponse, payload: ApiResult<unknown>, status = 200): v
 
 /** Domain failure → envelope + HTTP status. */
 function fail(code: ApiFail['error']['code'], message: string): { res: ApiFail; status: number } {
-  const status = code === 'invalid_input' ? 400
+  const status = code === 'invalid_input' || code === 'invalid_transition' ? 400
     : code === 'not_found' ? 404
       : code === 'version_conflict' ? 409
         : code === 'forbidden' ? 403
@@ -292,6 +292,31 @@ export function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOp
             json(res, { ok: true, value: summarize(next) })
             return
           }
+          if (action === 'reject') {
+            // Card quick-reject: back to todo + optional user comment in one
+            // atomic mutation (a failed move never strands an orphan comment).
+            const ifVersion = num(body, 'ifVersion')
+            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')
+            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)
+            if (!canTransition(task.status, 'todo')) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → todo`)
+            const next = structuredClone(task)
+            next.status = 'todo'
+            next.version = task.version + 1
+            next.updatedAt = options.now()
+            next.updatedBy = { kind: 'user' }
+            syncClaim(next, 'todo', options.now())
+            const commentText = str(body, 'body') ?? ''
+            if (commentText.trim().length > 0) {
+              next.comments.push({ id: newCommentId(), body: normalizeBody(commentText), version: 1, createdAt: options.now() })
+            }
+            await store.mutate('task-moved', ledger => {
+              const i = ledger.tasks.findIndex(t => t.id === id)
+              ledger.tasks[i] = next
+              return [next]
+            })
+            json(res, { ok: true, value: summarize(next) })
+            return
+          }
           if (action === 'comment') {
             const bodyText = str(body, 'body') ?? ''
             const comment = { id: newCommentId(), body: normalizeBody(bodyText), version: 1, createdAt: options.now() }

package/src/shared/api.ts

@@ -71,6 +71,13 @@ export type UpdateTaskBody = {
 /** Move-task request body (ifVersion mandatory; the user MAY move to done). */
 export type MoveTaskBody = { ifVersion: number; status: string }
 
+/**
+ * Quick-reject request body (card ✗ button): move back to todo plus an
+ * optional user comment, committed as ONE ledger mutation so a failed move
+ * can never strand an orphan comment.
+ */
+export type RejectTaskBody = { ifVersion: number; body?: string }
+
 /** Comment request body. */
 export type CommentBody = { body: string }
 

package/src/shared/version.ts

@@ -6,4 +6,4 @@
  */
 
 /** The package version (must equal package.json "version"). */
-export const PLUGIN_VERSION = '0.2.0'
+export const PLUGIN_VERSION = '0.2.2'