dsh-taskboard 0.3.3 → 0.4.1

package/src/client/styles.ts

@@ -513,6 +513,159 @@ html[data-dsh-atb-active] .dsh-atb-view { display: flex; flex-direction: column;
   border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.25));
 }
 .dsh-atb-diag-orphan-path { font-size: 11.5px; font-family: ui-monospace, Consolas, monospace; word-break: break-all; }
+
+/* ---------- 0.4.0 checklist ---------- */
+.dsh-atb-cke { display: flex; flex-direction: column; gap: 6px; }
+.dsh-atb-cke-row { display: flex; align-items: center; gap: 8px; }
+.dsh-atb-cke-box { flex-shrink: 0; width: 15px; height: 15px; cursor: pointer; }
+.dsh-atb-cke-text {
+  flex: 1; min-width: 0; font-size: 12.5px; padding: 6px 9px;
+  border-radius: 8px; border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.3));
+  background: var(--dsw-alias-bg-layer-1, transparent); color: inherit;
+}
+.dsh-atb-cke-del {
+  flex-shrink: 0; border: none; background: none; cursor: pointer; padding: 4px;
+  color: var(--dsw-alias-label-tertiary, gray); font-size: 12px; border-radius: 6px;
+}
+.dsh-atb-cke-del:hover { color: var(--dsw-alias-state-error-primary, #e5484d); background: rgba(229,72,77,.08); }
+.dsh-atb-cke-add {
+  align-self: flex-start; border: 1px dashed var(--dsw-alias-border-l2, rgba(128,128,128,.4));
+  background: none; color: var(--dsw-alias-label-secondary, inherit); cursor: pointer;
+  font-size: 11.5px; padding: 5px 12px; border-radius: 8px;
+}
+.dsh-atb-cke-add:hover { color: var(--dsw-alias-state-business-primary, #3e63dd); border-color: var(--dsw-alias-state-business-primary, #3e63dd); }
+.dsh-atb-cke-hint { font-size: 10.5px; color: var(--dsw-alias-label-tertiary, gray); }
+
+.dsh-atb-cl-progress { margin-left: 8px; font-size: 11px; font-weight: 400; color: var(--dsw-alias-label-tertiary, gray); }
+.dsh-atb-cl-progress[data-tone="bad"] { color: var(--dsw-alias-state-error-primary, #e5484d); font-weight: 600; }
+.dsh-atb-cl-items { display: flex; flex-direction: column; gap: 5px; }
+.dsh-atb-cl-item {
+  display: flex; align-items: baseline; gap: 9px; padding: 6px 9px; border-radius: 8px;
+  border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.22));
+  background: var(--dsw-alias-bg-layer-1, rgba(128,128,128,.03)); cursor: pointer;
+}
+.dsh-atb-cl-item:hover { border-color: var(--dsw-alias-border-l2, rgba(128,128,128,.4)); }
+.dsh-atb-cl-item input { flex-shrink: 0; transform: translateY(1px); cursor: pointer; }
+.dsh-atb-cl-item[data-checked="true"] .dsh-atb-cl-text { text-decoration: line-through; color: var(--dsw-alias-label-tertiary, gray); }
+.dsh-atb-cl-item[data-alert="true"] {
+  border-color: rgba(229,72,77,.45); background: rgba(229,72,77,.06);
+}
+.dsh-atb-cl-text { flex: 1; min-width: 0; font-size: 12.5px; word-break: break-word; }
+.dsh-atb-cl-meta { flex-shrink: 0; font-size: 10.5px; color: var(--dsw-alias-label-tertiary, gray); display: flex; flex-direction: column; gap: 2px; align-items: flex-end; }
+.dsh-atb-cl-note { max-width: 280px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; color: var(--dsw-alias-label-secondary, inherit); }
+
+/* ---------- 0.4.0 report ---------- */
+.dsh-atb-rpt-summary { font-size: 12.5px; line-height: 1.6; white-space: pre-wrap; word-break: break-word; margin-bottom: 8px; }
+.dsh-atb-rpt-sec { margin-bottom: 8px; }
+.dsh-atb-rpt-label { font-size: 11px; color: var(--dsw-alias-label-tertiary, gray); margin-bottom: 4px; }
+.dsh-atb-rpt-list { margin: 0; padding-left: 18px; font-size: 12px; line-height: 1.55; word-break: break-all; }
+.dsh-atb-rpt-risk {
+  font-size: 12px; line-height: 1.55; white-space: pre-wrap; word-break: break-word;
+  color: var(--dsw-alias-state-warn-primary, #f5a524);
+  background: rgba(245,165,36,.08); border: 1px solid rgba(245,165,36,.3);
+  border-radius: 8px; padding: 6px 10px;
+}
+
+/* ---------- 0.4.0 diff viewer ---------- */
+.dsh-atb-iso-commit { display: flex; flex-direction: column; gap: 3px; }
+.dsh-atb-iso-commit-btn {
+  display: flex; gap: 8px; font-size: 11.5px; align-items: baseline; text-align: left;
+  border: none; background: none; padding: 2px 4px; margin: 0 -4px; border-radius: 6px; cursor: pointer;
+  color: inherit; width: fit-content; max-width: 100%;
+}
+.dsh-atb-iso-commit-btn:hover { background: var(--dsw-alias-bg-layer-2, rgba(128,128,128,.08)); }
+.dsh-atb-iso-commit-btn code {
+  font-family: ui-monospace, Consolas, monospace; font-size: 10.5px;
+  color: var(--dsw-alias-state-business-primary, #3e63dd); flex-shrink: 0;
+}
+.dsh-atb-iso-commit-btn span { word-break: break-all; color: var(--dsw-alias-label-secondary, inherit); }
+.dsh-atb-iso-commit[data-open="true"] > .dsh-atb-iso-commit-btn code { font-weight: 700; }
+.dsh-atb-iso-dirty { display: flex; flex-direction: column; gap: 6px;
+  font-size: 11.5px; color: var(--dsw-alias-state-error-primary, #e5484d);
+  background: rgba(229,72,77,.09); border: 1px solid rgba(229,72,77,.35);
+  border-radius: 8px; padding: 6px 10px; margin-bottom: 8px;
+}
+.dsh-atb-iso-dirty-toggle { border: none; background: none; cursor: pointer; padding: 0; text-align: left; color: inherit; font-size: inherit; }
+.dsh-atb-iso-dirty-files { display: flex; flex-direction: column; gap: 2px; }
+.dsh-atb-iso-dirty-file {
+  border: none; background: none; cursor: pointer; text-align: left; padding: 1px 2px;
+  font-size: 11px; color: var(--dsw-alias-label-secondary, inherit); border-radius: 4px; word-break: break-all;
+}
+.dsh-atb-iso-dirty-file:hover { background: rgba(128,128,128,.1); color: var(--dsw-alias-state-business-primary, #3e63dd); }
+.dsh-atb-iso-dirty-file code { font-family: ui-monospace, Consolas, monospace; font-size: 10px; margin-right: 6px; }
+.dsh-atb-diffview { margin-top: 6px; border-radius: 8px; overflow: hidden;
+  border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.25)); }
+.dsh-atb-diffview-head { display: flex; align-items: center; gap: 10px; padding: 5px 10px;
+  background: var(--dsw-alias-bg-layer-2, rgba(128,128,128,.08)); }
+.dsh-atb-diffview-title { font-family: ui-monospace, Consolas, monospace; font-size: 10.5px;
+  color: var(--dsw-alias-state-business-primary, #3e63dd); word-break: break-all; }
+.dsh-atb-diffview-hint { font-size: 10.5px; color: var(--dsw-alias-label-tertiary, gray); }
+.dsh-atb-diffview-error { padding: 8px 10px; font-size: 11.5px; color: var(--dsw-alias-state-error-primary, #e5484d); }
+.dsh-atb-diffview-pre {
+  margin: 0; padding: 8px 10px; max-height: 340px; overflow: auto;
+  font-family: ui-monospace, Consolas, monospace; font-size: 10.5px; line-height: 1.5;
+  white-space: pre; color: var(--dsw-alias-label-secondary, inherit);
+}
+
+/* ---------- 0.4.0 new-task menu + template manager + import ---------- */
+.dsh-atb-newmenu { position: relative; display: inline-flex; }
+.dsh-atb-newmenu-backdrop { position: fixed; inset: 0; z-index: 40; }
+.dsh-atb-newmenu-list {
+  position: absolute; top: calc(100% + 4px); left: 0; z-index: 41; min-width: 180px;
+  display: flex; flex-direction: column; padding: 5px; border-radius: 10px;
+  background: var(--dsw-alias-bg-overlay, #fff); color: var(--dsw-alias-label-primary, inherit);
+  border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.25));
+  box-shadow: var(--dsw-shadow-lv3, 0 12px 32px rgba(0,0,0,.18));
+}
+.dsh-atb-newmenu-opt {
+  border: none; background: none; text-align: left; cursor: pointer; padding: 7px 10px;
+  font-size: 12.5px; color: inherit; border-radius: 7px; white-space: nowrap;
+}
+.dsh-atb-newmenu-opt:hover { background: var(--dsw-alias-bg-layer-2, rgba(128,128,128,.1)); }
+.dsh-atb-newmenu-sep { height: 1px; margin: 4px 6px; background: var(--dsw-alias-border-l2, rgba(128,128,128,.25)); }
+
+.dsh-atb-tplm { max-width: 560px; width: min(560px, 92vw); }
+.dsh-atb-tplm-list { display: flex; flex-direction: column; gap: 8px; }
+.dsh-atb-tplm-row {
+  display: flex; align-items: center; gap: 10px; padding: 8px 10px; border-radius: 8px;
+  border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.25));
+}
+.dsh-atb-tplm-name {
+  flex: 0 0 160px; font-size: 12.5px; padding: 5px 8px; border-radius: 7px;
+  border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.3));
+  background: var(--dsw-alias-bg-layer-1, transparent); color: inherit;
+}
+.dsh-atb-tplm-meta { flex: 1; min-width: 0; font-size: 10.5px; color: var(--dsw-alias-label-tertiary, gray); }
+.dsh-atb-tplm-btns { display: flex; gap: 6px; flex-shrink: 0; }
+
+.dsh-atb-imp { max-width: 600px; width: min(600px, 92vw); }
+.dsh-atb-imp-picker { display: flex; align-items: center; gap: 10px; margin-bottom: 8px; }
+.dsh-atb-imp-picker input[type="file"] { font-size: 12px; }
+.dsh-atb-imp-filename { font-size: 11.5px; color: var(--dsw-alias-state-business-primary, #3e63dd); word-break: break-all; }
+.dsh-atb-imp-note { font-size: 11px; color: var(--dsw-alias-label-tertiary, gray); margin-bottom: 10px; }
+.dsh-atb-imp-error { font-size: 12px; color: var(--dsw-alias-state-error-primary, #e5484d); margin-bottom: 8px; }
+.dsh-atb-imp-stats { display: grid; grid-template-columns: repeat(3, 1fr); gap: 8px; margin-bottom: 12px; }
+.dsh-atb-imp-stat {
+  display: flex; flex-direction: column; align-items: center; gap: 2px; padding: 9px 6px; border-radius: 9px;
+  border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.25));
+}
+.dsh-atb-imp-stat b { font-size: 17px; font-weight: 700; }
+.dsh-atb-imp-stat span { font-size: 10.5px; color: var(--dsw-alias-label-tertiary, gray); }
+.dsh-atb-imp-stat[data-tone="ok"] b { color: var(--dsw-alias-state-success-primary, #30a46c); }
+.dsh-atb-imp-stat[data-tone="warn"] b { color: var(--dsw-alias-state-warn-primary, #f5a524); }
+.dsh-atb-imp-stat[data-tone="bad"] b { color: var(--dsw-alias-state-error-primary, #e5484d); }
+.dsh-atb-imp-sec h4 { margin: 0 0 6px; font-size: 12px; }
+.dsh-atb-imp-sec { margin-bottom: 10px; }
+.dsh-atb-imp-list { display: flex; flex-direction: column; gap: 4px; max-height: 160px; overflow-y: auto; }
+.dsh-atb-imp-row {
+  display: flex; align-items: center; gap: 10px; justify-content: space-between;
+  padding: 5px 9px; border-radius: 7px; border: 1px solid var(--dsw-alias-border-l2, rgba(128,128,128,.2));
+}
+.dsh-atb-imp-row[data-tone="bad"] { border-color: rgba(229,72,77,.35); }
+.dsh-atb-imp-row-title { font-size: 12px; flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.dsh-atb-imp-row-status { font-size: 10.5px; color: var(--dsw-alias-label-tertiary, gray); flex-shrink: 0; }
+.dsh-atb-imp-result { font-size: 12px; color: var(--dsw-alias-state-success-primary, #30a46c); margin-top: 10px; }
+.dsh-atb-badge[data-kind="checklist"] { color: var(--dsw-alias-label-secondary, inherit); }
 `
 
 let injected = false

package/src/host/execution.ts

@@ -622,9 +622,17 @@ export class ExecutionService {
       + `本会话由任务看板执行服务启动，任务已置为进行中——无需认领；「已完成」仅限用户在界面操作（代码已限制，移了会被拒）。\n`
       + `完成后按序交接：\n`
       + `1. taskboard_get 读取本任务，取得最新 version\n`
-      + `2. taskboard_comment_add 留评论：做了什么改动 / 如何验证 / 剩余风险\n`
-      + `3. taskboard_move 将本任务移至待验收 in_review（带 ifVersion）\n`
+      + `2. taskboard_execution_report 提交结构化执行报告（做了什么/改了哪些文件/如何验证/剩余风险；提交与评论不冲突，都会展示给验收人）\n`
+      + `3. taskboard_comment_add 留评论：做了什么改动 / 如何验证 / 剩余风险\n`
+      + `4. taskboard_move 将本任务移至待验收 in_review（带 ifVersion）\n`
       + `若无法完成：留评论说明原因，将任务移回待办 todo。`
+    if (task.checklist !== undefined && task.checklist.length > 0) {
+      const items = task.checklist
+        .map((item, index) => `${item.checked ? '☑' : '☐'} ${index + 1}. ${item.text}${item.note !== undefined ? `（证据: ${item.note}）` : ''}`)
+        .join('\n')
+      const done = task.checklist.filter(i => i.checked).length
+      text += `\n本任务有验收清单（DoD，${done}/${task.checklist.length} 已完成）——按清单干活：\n${items}\n完成一项就用 taskboard_checklist（action=check，附 note 证据）勾选；未完成项会在验收时高亮，全部完成再移待验收。需要补充验收项也可用 action=add 追加。`
+    }
     if (prepared !== undefined) {
       if (prepared.reused === true) {
         text += `\n本任务启用了 Git Worktree 隔离，且本次为续跑：任务工作目录是独立分支 ${prepared.branch} 的 worktree——\n${prepared.worktreePath}\n上一次执行的改动与提交都保留在原处——请先查看已有改动（git status / git log）再继续，避免重复劳动，并把新完成的工作提交到该分支。`

package/src/host/git.ts

@@ -39,6 +39,39 @@ export const MAX_COMMIT_EVIDENCE = 50
 /** Evidence caps: uncommitted-change lines kept per execution record. */
 export const MAX_DIRTY_EVIDENCE = 100
 
+/** Diff viewer caps (0.4.0): raw text kept per view. */
+export const MAX_DIFF_BYTES = 128 * 1024
+
+/** Diff viewer caps: lines kept per view. */
+export const MAX_DIFF_LINES = 2_000
+
+/** One capped, read-only diff view (diff viewer, 0.4.0). */
+export interface DiffResult {
+  text: string
+  truncated: boolean
+}
+
+/** Cap one diff payload by bytes and lines (in order, marking truncation). */
+function capDiff(out: string): DiffResult {
+  let text = out
+  let truncated = false
+  if (text.length > MAX_DIFF_BYTES) {
+    text = text.slice(0, MAX_DIFF_BYTES)
+    truncated = true
+  }
+  const lines = text.split('\n')
+  if (lines.length > MAX_DIFF_LINES) {
+    text = lines.slice(0, MAX_DIFF_LINES).join('\n')
+    truncated = true
+  }
+  return { text, truncated }
+}
+
+/** A plausible git object hash (defense against option injection). */
+function isHash(hash: string): boolean {
+  return /^[0-9a-f]{4,64}$/i.test(hash)
+}
+
 /** Result of one underlying exec: `ok` is exit-0, output never null. */
 export interface ExecResult { ok: boolean; stdout: string; stderr: string }
 
@@ -94,6 +127,18 @@ export interface GitFace {
   removeWorktree(root: string, worktreePath: string): Promise<void>
   /** Delete a branch; THROWS (e.g. still checked out in a worktree). */
   deleteBranch(root: string, branch: string): Promise<void>
+  /**
+   * Show one commit (message + patch) — diff viewer (0.4.0). Fail-soft:
+   * undefined on any git failure; the payload is capped.
+   */
+  showCommit(cwd: string, hash: string): Promise<DiffResult | undefined>
+  /**
+   * Show the diff of one path — diff viewer (0.4.0). Without `baseCommit`:
+   * the working-tree view (staged + unstaged vs HEAD, e.g. uncommitted
+   * changes in a live worktree); with `baseCommit`: the range
+   * base..HEAD restricted to the path. Fail-soft: undefined on failure.
+   */
+  showPathDiff(cwd: string, path: string, baseCommit?: string): Promise<DiffResult | undefined>
 }
 
 /**
@@ -289,5 +334,37 @@ export function createGitFace(exec: ExecFn = realExec): GitFace {
       const deleted = await heavy(['branch', '-D', branch], root)
       if (!deleted.ok) throw new Error(`删除分支失败：${deleted.stderr.trim().slice(0, 300)}`)
     }),
+
+    async showCommit(cwd, hash) {
+      if (!isHash(hash)) return undefined
+      const r = await quick(['show', '--no-color', '--format=medium', hash], cwd)
+      if (!r.ok || r.stdout.trim().length === 0) return undefined
+      return capDiff(r.stdout)
+    },
+
+    async showPathDiff(cwd, path, baseCommit) {
+      const target = path.trim()
+      if (target.length === 0) return undefined
+      if (baseCommit !== undefined && isHash(baseCommit)) {
+        const r = await quick(['diff', '--no-color', `${baseCommit}..HEAD`, '--', target], cwd)
+        if (!r.ok) return undefined
+        if (r.stdout.trim().length === 0) return { text: '（该文件无差异）', truncated: false }
+        return capDiff(r.stdout)
+      }
+      // Working-tree view: staged + unstaged vs HEAD.
+      const r = await quick(['diff', '--no-color', 'HEAD', '--', target], cwd)
+      if (r.ok && r.stdout.trim().length > 0) return capDiff(r.stdout)
+      // Untracked files never appear in `git diff` — detect one and synthesize
+      // its new-file patch via --no-index (which exits 1 on differences, so
+      // its stdout is trusted whenever it carries a diff header).
+      const st = await quick(['status', '--porcelain', '--', target], cwd)
+      if (r.ok && st.ok && st.stdout.trim().startsWith('??')) {
+        const ni = await exec(['diff', '--no-color', '--no-index', '--', '/dev/null', target], { cwd, timeout: QUICK_TIMEOUT_MS })
+        if (ni.stdout.includes('diff --git')) return capDiff(ni.stdout)
+        return { text: `（未跟踪新文件：${target}）`, truncated: false }
+      }
+      if (!r.ok) return undefined
+      return { text: '（该文件无差异）', truncated: false }
+    },
   }
 }

package/src/host/protocol-text.ts

@@ -14,7 +14,8 @@
 export const TASKBOARD_PROTOCOL = [
   '本机已安装 dsh-taskboard 插件（DSH 任务看板）：任务挂在项目（DSH workspace）上，',
   '用 taskboard_* 工具读写；人在 Web GUI 看板上实时看到同样数据。能力：查板(list/get)、',
-  '建卡(create)、改卡(update)、移卡(move)、评论(comment_add/comments)、删除(delete=仅标记)。',
+  '建卡(create)、改卡(update)、移卡(move)、评论(comment_add/comments)、删除(delete=仅标记)、',
+  '验收清单(checklist)、执行报告(execution_report)。',
   '任务带紧急度(urgent红/normal紫/relaxed蓝)、执行方式(claim认领/scheduled定时)与可选指定模型。',
   '工作纪律：',
   '1. 开工先查板：开始工作前先 taskboard_list（按本项目过滤、status=todo），有可认领任务时按纪律认领。',
@@ -22,8 +23,9 @@ export const TASKBOARD_PROTOCOL = [
   '3. 先认领再干活：把 todo→in_progress（带 ifVersion）成功后，才开始读代码/分析实现；',
   '   认领失败（版本冲突/项目边界不符/已被他人持有）就停止并报告，绝不循环重试或接管他人任务。',
   '4. 版本冲突只重试一次：ifVersion 冲突时重新读卡，仅当状态仍可认领且需求未变时用新版本号重试一次，再失败即停止报告。',
-  '5. 验收交接：实现并自验后，评论记录（改动/验证结果/剩余风险），再把 in_progress→in_review。',
-  '6. 完成须用户确认：你永远不能把任务移到 done——那是用户的确认动作；blocked=无法继续，canceled=不再继续。',
+  '5. 验收交接：实现并自验后，taskboard_execution_report 提交结构化报告（摘要/改动文件/自验/风险），',
+  '   评论记录补充细节，再把 in_progress→in_review；任务带验收清单时用 taskboard_checklist 逐项勾选（附证据）。',
+  '6. 完成须用户确认：你永远不能把任务移到 done——那是用户的确认动作；清单全勾也不等于完成；blocked=无法继续，canceled=不再继续。',
   '7. backlog=未授权：backlog 任务不算批准执行，被指派也不是授权，除非用户明确要求。',
   '8. 模型与定时只读：任务的 model 与 execution 配置归创建者/用户所有，update 工具不允许你修改这两个字段。',
   '项目边界：只有属于任务所在项目的会话才能认领（todo→in_progress）或执行它。',

package/src/host/routes.ts

@@ -20,19 +20,24 @@ import {
   asStatus,
   asUrgency,
   canTransition,
+  checklistFromTexts,
   newCommentId,
   newTaskId,
   normalizeBody,
+  normalizeChecklist,
   normalizeExecution,
   normalizeModel,
   normalizePrompt,
   normalizeTitle,
   summarize,
   syncClaim,
+  validateLedgerImport,
   type TaskModel,
   type TaskRecord,
 } from '../shared/protocol.ts'
 import { WORKTREE_DIR, worktreePathOf, type GitFace } from './git.ts'
+import type { TaskTemplate } from '../shared/api.ts'
+import type { TemplateStore } from './templates.ts'
 import { ROUTE_PREFIX, SSE_PATH, type ApiFail, type ApiResult } from '../shared/api.ts'
 import type { TaskStore } from './store.ts'
 import type { WorkspaceFace } from './tools.ts'
@@ -62,6 +67,45 @@ export interface TaskboardRoutesOptions {
   modelProviders?: () => string[] | undefined
   /** Git face for worktree actions + workspace git detection; absent → 501 on git actions. */
   git?: GitFace
+  /** Task-template store (0.4.0); absent → 501 on template actions. */
+  templates?: TemplateStore
+}
+
+/** Validate a template's task spec (routes-side, unknown → invalid_input). */
+function normalizeTemplateSpec(raw: unknown): TaskTemplate['task'] {
+  if (typeof raw !== 'object' || raw === null) throw new Error('Error: invalid_input: task must be an object')
+  const e = raw as Record<string, unknown>
+  const spec: TaskTemplate['task'] = {}
+  const str = (key: string): string | undefined => {
+    const v = e[key]
+    if (v === undefined) return undefined
+    if (typeof v !== 'string') throw new Error(`Error: invalid_input: task.${key} must be a string`)
+    return v
+  }
+  const title = str('title')
+  const description = str('description')
+  const prompt = str('prompt')
+  const urgency = str('urgency')
+  const isolation = str('isolation')
+  const presetId = str('presetId')
+  if (title !== undefined) spec.title = normalizeTitle(title)
+  if (description !== undefined) spec.description = description
+  if (prompt !== undefined) spec.prompt = normalizePrompt(prompt)
+  if (urgency !== undefined) spec.urgency = asUrgency(urgency)
+  if (isolation !== undefined) spec.isolation = asIsolation(isolation)
+  if (presetId !== undefined && presetId.trim().length > 0) spec.presetId = presetId.trim()
+  if (e.execution !== undefined) {
+    spec.execution = normalizeExecution(e.execution as { mode?: string; cron?: string }, Date.now())
+  }
+  if (e.model !== undefined) spec.model = normalizeModel(e.model)
+  if (e.checklist !== undefined) {
+    if (!Array.isArray(e.checklist) || e.checklist.some(c => typeof c !== 'string')) {
+      throw new Error('Error: invalid_input: task.checklist must be an array of strings')
+    }
+    checklistFromTexts(e.checklist as string[]) // validates count + texts
+    spec.checklist = e.checklist as string[]
+  }
+  return spec
 }
 
 /** Validate a pinned model: structural check always, provider route when known. */
@@ -257,6 +301,60 @@ export function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOp
           })
           return
         }
+        // Diff viewer (0.4.0): read-only git show/diff for one execution's
+        // commit or changed path. Prefers the live worktree (uncommitted
+        // view), falls back to the main repo.
+        const diffMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/diff$`))
+        if (diffMatch !== null) {
+          try {
+            if (options.git === undefined) {
+              const f = fail('invalid_input', 'git integration unavailable')
+              json(res, f.res, 501)
+              return
+            }
+            const task = store.get(diffMatch[1]!)
+            if (task === undefined) throw new Error('Error: not_found: no such task')
+            const execution = task.executions.find(e => e.id === url.searchParams.get('execution'))
+            if (execution === undefined) throw new Error('Error: not_found: no such execution')
+            const commit = url.searchParams.get('commit')
+            const filePath = url.searchParams.get('path')
+            const ws = workspaces.get(task.workspaceId)
+            if (ws === undefined) throw new Error('Error: not_found: unknown workspace')
+            const cwd = execution.worktreePath ?? ws.path
+            let result = commit !== null
+              ? await options.git.showCommit(cwd, commit)
+              : filePath !== null ? await options.git.showPathDiff(cwd, filePath, execution.baseCommit) : undefined
+            // Fallback: the worktree may be gone — commits and committed
+            // ranges still resolve in the main repo.
+            if (result === undefined && execution.worktreePath !== undefined && cwd !== ws.path) {
+              result = commit !== null
+                ? await options.git.showCommit(ws.path, commit)
+                : filePath !== null && execution.baseCommit !== undefined
+                  ? await options.git.showPathDiff(ws.path, filePath, execution.baseCommit)
+                  : undefined
+            }
+            if (result === undefined) {
+              throw new Error('Error: invalid_input: 无法获取 diff（git 报错、对象不存在，或仅存于已删除的 worktree 且无基线）')
+            }
+            json(res, { ok: true, value: { diff: result.text, truncated: result.truncated } })
+          } catch (error) {
+            const f = toFail(error)
+            json(res, f.res, f.status)
+          }
+          return
+        }
+
+        // Templates listing (0.4.0).
+        if (pathname === `${ROUTE_PREFIX}/templates`) {
+          if (options.templates === undefined) {
+            const f = fail('invalid_input', 'template store unavailable')
+            json(res, f.res, 501)
+            return
+          }
+          json(res, { ok: true, value: { templates: await options.templates.list() } })
+          return
+        }
+
         const taskMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)$`))
         if (taskMatch !== null) {
           const task = store.get(taskMatch[1]!)
@@ -301,6 +399,14 @@ export function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOp
           const isolationRaw = str(body, 'isolation')
           const isolation = isolationRaw === null ? undefined : asIsolation(isolationRaw)
           const presetId = normalizePresetId(str(body, 'presetId'))
+          let checklist: TaskRecord['checklist'] = undefined
+          if (body.checklist !== undefined) {
+            if (!Array.isArray(body.checklist) || body.checklist.some(c => typeof c !== 'string')) {
+              throw new Error('Error: invalid_input: checklist must be an array of strings')
+            }
+            const texts = (body.checklist as string[]).map(c => c.trim()).filter(c => c.length > 0)
+            if (texts.length > 0) checklist = checklistFromTexts(texts)
+          }
           const now = options.now()
           const task: TaskRecord = {
             id: newTaskId(),
@@ -315,6 +421,7 @@ export function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOp
             model,
             ...(isolation !== undefined ? { isolation } : {}),
             ...(presetId !== undefined ? { presetId } : {}),
+            ...(checklist !== undefined ? { checklist } : {}),
             version: 1,
             createdAt: now,
             updatedAt: now,
@@ -381,6 +488,13 @@ export function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOp
             // Preset may change any time: each run composes fresh.
             if (body.presetId === null) delete next.presetId
             else if (body.presetId !== undefined) next.presetId = normalizePresetId(str(body, 'presetId'))!
+            // Checklist (0.4.0): the GUI replaces the whole list; null clears.
+            if (body.checklist === null) delete next.checklist
+            else if (body.checklist !== undefined) {
+              const items = normalizeChecklist(body.checklist)
+              if (items.length > 0) next.checklist = items
+              else delete next.checklist
+            }
             next.version = task.version + 1
             next.updatedAt = options.now()
             next.updatedBy = { kind: 'user' }
@@ -657,6 +771,107 @@ export function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOp
         return
       }
 
+      // ---------------------------------------------- POST /import/preview
+      // (0.4.0) Dry-run: classify every task in the uploaded ledger file
+      // against the live one; nothing is written.
+      if (pathname === `${ROUTE_PREFIX}/import/preview`) {
+        try {
+          const known = new Set(store.snapshot().tasks.map(t => t.id))
+          const plan = validateLedgerImport(body, known, options.now())
+          json(res, {
+            ok: true,
+            value: {
+              plan: {
+                create: plan.create.map(t => ({ id: t.id, title: t.title, status: t.status })),
+                overwrite: plan.overwrite.map(t => ({ id: t.id, title: t.title, status: t.status })),
+                invalid: plan.invalid,
+              },
+            },
+          })
+        } catch (error) {
+          const f = toFail(error)
+          json(res, f.res, f.status)
+        }
+        return
+      }
+
+      // ------------------------------------------------------ POST /import
+      // (0.4.0) Commit an import. mode=merge upserts (create + overwrite by
+      // id); mode=replace swaps the WHOLE ledger (invalid entries dropped)
+      // after writing a timestamped backup of the current one.
+      if (pathname === `${ROUTE_PREFIX}/import`) {
+        try {
+          const mode = str(body, 'mode') === 'replace' ? 'replace' as const : 'merge' as const
+          const raw = body.ledger
+          const known = new Set(store.snapshot().tasks.map(t => t.id))
+          const plan = validateLedgerImport(raw, known, options.now())
+          const imported = [...plan.create, ...plan.overwrite]
+          if (mode === 'replace' && imported.length === 0) {
+            throw new Error('Error: invalid_input: 导入文件没有可导入的任务，已拒绝整册替换')
+          }
+          let backupFile: string | undefined
+          if (mode === 'replace' && store.snapshot().tasks.length > 0) {
+            backupFile = await store.backup()
+          }
+          let replacedTotal: number | undefined
+          await store.mutate('task-created', ledger => {
+            if (mode === 'replace') {
+              replacedTotal = ledger.tasks.length
+              ledger.tasks = structuredClone(imported)
+              return ledger.tasks
+            }
+            const byId = new Map(ledger.tasks.map(t => [t.id, t]))
+            for (const task of imported) byId.set(task.id, structuredClone(task))
+            ledger.tasks = [...byId.values()]
+            return structuredClone(imported)
+          })
+          json(res, {
+            ok: true,
+            value: {
+              mode,
+              created: plan.create.length,
+              overwritten: plan.overwrite.length,
+              ...(mode === 'replace' ? { replacedTotal } : {}),
+              ...(backupFile !== undefined ? { backupFile } : {}),
+            },
+          })
+        } catch (error) {
+          const f = toFail(error)
+          json(res, f.res, f.status)
+        }
+        return
+      }
+
+      // ------------------------------------------- POST /templates (+delete)
+      if (pathname === `${ROUTE_PREFIX}/templates` || pathname === `${ROUTE_PREFIX}/templates/delete`) {
+        try {
+          if (options.templates === undefined) {
+            const f = fail('invalid_input', 'template store unavailable')
+            json(res, f.res, 501)
+            return
+          }
+          if (pathname.endsWith('/delete')) {
+            const id = str(body, 'id') ?? ''
+            if (id.length === 0) throw new Error('Error: invalid_input: id required')
+            const deleted = await options.templates.remove(id)
+            json(res, { ok: true, value: { deleted } })
+            return
+          }
+          const name = str(body, 'name') ?? ''
+          if (name.trim().length === 0) throw new Error('Error: invalid_input: name required')
+          const template = await options.templates.upsert({
+            id: str(body, 'id') ?? undefined,
+            name,
+            task: normalizeTemplateSpec(body.task),
+          })
+          json(res, { ok: true, value: template }, 201)
+        } catch (error) {
+          const f = toFail(error)
+          json(res, f.res, f.status)
+        }
+        return
+      }
+
       res.writeHead(404)
       res.end()
     } catch (error) {

package/src/host/store.ts

@@ -103,6 +103,19 @@ export class TaskStore {
     return () => this.subscribers.delete(fn)
   }
 
+  /**
+   * Write a timestamped backup copy of the current ledger next to the live
+   * file (import-replace safety, 0.4.0). Never throws the caller's flow —
+   * a backup failure fails the import itself.
+   * @returns the backup file path.
+   */
+  async backup(): Promise<string> {
+    await this.load()
+    const target = `${this.file}.backup-${Date.now()}`
+    await persistAtomic(target, JSON.stringify(this.ledger, null, 2))
+    return target
+  }
+
   /**
    * Run one mutation inside the serial queue. The mutator works on a
    * structured clone; returning `undefined` aborts with no write.