@astrosheep/square 0.3.74 → 0.3.75

package/dist/attention-presentation.d.ts

@@ -12,4 +12,6 @@ export declare function previewAttentionBody(body: string): string;
 export declare function attentionBodyIsClipped(body: string): boolean;
 export declare function displayAttentionPath(squarePath: string): string;
 export declare function renderAttentionDescription({ actor, recipient, route }: Pick<AttentionPreview, 'actor' | 'recipient' | 'route'>): string;
+/** Full notification text for human-facing expansion, never the bounded model preview. */
+export declare function renderAttentionFull(attention: AttentionPreview): string;
 export declare function renderAttentionPreview(attention: AttentionPreview): string;

package/dist/attention-presentation.js

@@ -24,14 +24,23 @@ export function renderAttentionDescription({ actor, recipient, route }) {
         case 'bell': return `${actor} rang the bell · everyone’s attention`;
     }
 }
-export function renderAttentionPreview(attention) {
+/** Full notification text for human-facing expansion, never the bounded model preview. */
+export function renderAttentionFull(attention) {
+    return renderAttentionBlock(attention, attention.body);
+}
+function renderAttentionBlock(attention, body) {
     return [
         '<square-activity>',
         `· ${displayAttentionPath(attention.squarePath)} · ${formatActivityId(attention.actIndex)}`,
         `● ${renderAttentionDescription(attention)}`,
         '',
-        previewAttentionBody(attention.body),
+        body,
         '</square-activity>',
+    ].join('\n');
+}
+export function renderAttentionPreview(attention) {
+    return [
+        renderAttentionBlock(attention, previewAttentionBody(attention.body)),
         // A clipped body ends with the full command to read it all: a labeled caption, then the
         // command bare on its own line so it can be copied and run as it is.
         ...(attentionBodyIsClipped(attention.body)

package/dist/cli/express-presentation.js

@@ -156,8 +156,7 @@ export async function executeExpression(application, squarePath, requestedName,
         const lines = [message, `· draft kept: ${draftPath}`];
         const recipientFailure = detail?.subject === 'recipient';
         const repair = reason === 'bell_mention_conflict' ? { bell: true, fromBody: true }
-            : reason === 'unmatched_mention' ? { bell: false, fromBody: true }
-                : reason === 'not_standing' && recipientFailure ? { bell: false, fromBody: false } : undefined;
+            : reason === 'not_standing' && recipientFailure ? { bell: false, fromBody: false } : undefined;
         if (isSquareError(error)) {
             if ((reason === 'never_joined' && detail?.subject === 'caller') || error.code === 'unknown_participant' || error.code === 'not_joined') {
                 lines.push(joinRecoveryCommand(squarePath, name));

package/dist/cli/ledger-command.js

@@ -4,6 +4,7 @@ import { usage } from './context.js';
 function renderReport(report) {
     const lines = [
         `host ledger: ${report.status}`,
+        `root: ${report.rootPath}`,
         `presence: ${report.presence} · evidence: ${report.evidence}`,
     ];
     if (report.presenceRevision !== undefined) {
@@ -21,9 +22,12 @@ function renderReport(report) {
     }
     if (report.status === 'legacy') {
         if (report.ready)
-            lines.push('Stop all Square hosts before conversion.', 'square ledger migrate');
+            lines.push('Stop agent sessions and MCP services using Square with this ledger before conversion.', 'Keep them stopped until migration and verification succeed; then start them with the updated Square version.', 'Next: migrate, then verify.', 'square ledger migrate', 'square ledger verify');
         else
-            lines.push('Unsafe legacy records; conversion refused.');
+            lines.push('Unsafe legacy records; conversion refused. Preserve the sources and resolve the rejected records before retrying verification.');
+    }
+    if (report.status === 'migrated' || report.status === 'upgraded') {
+        lines.push('Keep affected sessions and MCP services stopped until verification succeeds.', 'After verification, start them with the updated Square version.', 'square ledger verify');
     }
     return lines.join('\n') + '\n';
 }

package/dist/cli/meta-commands.js

@@ -12,7 +12,7 @@ export const helpCommand = {
             return renderGlobalHelp();
         const rendered = renderSubcommandHelp(intent.command);
         if (rendered === undefined)
-            fail(`unknown command: ${intent.command}\nrun 'square help' to list available commands`);
+            fail(`unknown command: ${intent.command}\nrun 'square --help' to list available commands`);
         return rendered;
     },
     present: (result) => process.stdout.write(result),

package/dist/decisions.js

@@ -107,30 +107,15 @@ export function decideAct(facts, input) {
             throw activityRefusal('invalid_args', `${participantIdentity(requested)} is not standing in this square`, { reason: 'not_standing', targets: [requested] });
         addMention(resolved);
     }
-    if (input.noMention !== true) {
-        const unmatched = [];
-        for (const candidate of scanMentionCandidates(body)) {
-            const resolved = resolveNameAt(body, candidate, joinedNames);
-            if (resolved === undefined)
-                unmatched.push(candidate);
-            else
-                addMention(resolved);
-        }
-        if (reach !== 'bell' && unmatched.length > 0) {
-            const names = roster.map((participant) => participant.name);
-            const notStanding = unmatched.filter((candidate) => resolveNameAt(body, candidate, names) !== undefined);
-            const unknown = unmatched.filter((candidate) => !notStanding.includes(candidate));
-            const lines = [];
-            if (unknown.length > 0)
-                lines.push(`${unknown.map((candidate) => participantIdentity(candidate.token)).join(', ')} ${unknown.length === 1 ? 'does' : 'do'} not match anyone in this square`);
-            if (notStanding.length > 0)
-                lines.push(`${notStanding.map((candidate) => participantIdentity(candidate.token)).join(', ')} ${notStanding.length === 1 ? 'is' : 'are'} not standing in this square`);
-            throw activityRefusal('invalid_args', lines.join('\n'), { reason: 'unmatched_mention', targets: unmatched.map((candidate) => candidate.token) });
-        }
+    const bodyMentions = input.noMention === true ? [] : scanMentionCandidates(body);
+    for (const candidate of bodyMentions) {
+        const resolved = resolveNameAt(body, candidate, joinedNames);
+        if (resolved !== undefined)
+            addMention(resolved);
     }
     if (reach === 'bell' && mentionNames.length > 0)
         throw activityRefusal('invalid_args', 'A bell cannot be combined with a mention', { reason: 'bell_mention_conflict', targets: mentionNames });
-    if (input.requireExplicitReach && reach !== 'bell' && mentionNames.length === 0 && reply === undefined && input.noMention !== true) {
+    if (input.requireExplicitReach && reach !== 'bell' && mentionNames.length === 0 && bodyMentions.length === 0 && reply === undefined && input.noMention !== true) {
         throw activityRefusal('invalid_args', 'Express needs a recipient, reply, bell, or explicit bare reach', { reason: 'explicit_reach_required' });
     }
     const header = facts.header();

package/dist/help.js

@@ -77,12 +77,12 @@ const COMMANDS = [
     {
         names: ['migrate'], usage: 'migrate', usesSquare: true, group: 'maintenance',
         summary: 'Convert an existing version 1 square to row storage in place.',
-        details: ['For the selected square artifact only; there is no --check, --backup or --force.', 'A version 2 square is left untouched; an unrelated or unsupported artifact is refused without a write.'],
+        details: ['For the selected .square artifact only. Global identity and delivery records use square ledger migrate instead.', 'Stop sessions and services using this artifact before conversion. Back up the stopped artifact, migrate it, then run square --location <path> doctor before starting updated clients.', 'A version 2 square is left untouched; an unrelated or unsupported artifact is refused without a write. There is no --check, --backup or --force.'],
     },
     {
         names: ['ledger'], usage: 'ledger <verify|migrate|gc>', usesSquare: false, group: 'maintenance',
         summary: 'Verify, convert, or reclaim the machine-local host ledger.',
-        details: ['verify: read-only SQLite integrity or full legacy readiness with accepted/ignored/rejected counts and source hashes; not-ready exits 2, an empty root stays empty. An older or unsupported database is refused with the migrate command and is never upgraded by verify.', 'migrate: stop every Square host first, then convert legacy NDJSON, or upgrade an older SQLite ledger in place. Sources, records, order and observer revisions are preserved; an existing current ledger is an untouched no-op.', 'gc [--dry-run]: reclaim old wake/presentation evidence only where the square artifact proves the recipient is closed — the activity reached them and catch receipted it or they later rejoined. Dispatching, lifecycle and unprovable rows are retained. Deleted rows free reusable pages, not file size (no VACUUM); retired Claude recognition tokens keep growing in total.', 'Run gc with --dry-run first: it reports eligible, retired, cas-miss and unreadable-artifact counts without writing. Eligible rows are candidates only: a changed record or an unusable Claude correlation is retained.', 'No participant or square location is required. Uses SQUARE_HOST_LEDGER_ROOT, then SQUARE_REGISTRY’s directory, then ~/.square/host-ledger.', 'These commands never stop, restart, install into or schedule hosts; conversion and schema upgrade are never automatic. No --force or repair.'],
+        details: ['verify: read-only SQLite integrity or full legacy readiness with accepted/ignored/rejected counts and source hashes; not-ready exits 2, an empty root stays empty. An older supported SQLite format requires explicit migration. Unsupported versions or invalid databases need diagnosis; migration is not a repair command.', 'migrate: stop agent sessions and MCP services using Square with this ledger first, then convert legacy NDJSON or upgrade supported SQLite version 1 in place. Keep them stopped, run square ledger verify afterward, then start them with the updated Square version. Sources, records, order and observer revisions are preserved; an existing current ledger is an untouched no-op.', 'gc [--dry-run]: reclaim old wake/presentation evidence only where the square artifact proves the recipient is closed — the activity reached them and catch receipted it or they later rejoined. Dispatching, lifecycle and unprovable rows are retained. Deleted rows free reusable pages, not file size (no VACUUM); retired Claude recognition tokens keep growing in total.', 'Run gc with --dry-run first: it reports eligible, retired, cas-miss and unreadable-artifact counts without writing. Eligible rows are candidates only: a changed record or an unusable Claude correlation is retained.', 'No participant or square location is required. Uses SQUARE_HOST_LEDGER_ROOT, then SQUARE_REGISTRY’s directory, then ~/.square/host-ledger.', 'These commands never stop, restart, install into or schedule hosts; conversion and schema upgrade are never automatic. No --force or repair.'],
     },
 ];
 function definitionFor(command) {
@@ -131,7 +131,7 @@ export function renderSubcommandHelp(command) {
         'Help:',
         '  -h, --help  Show this command help.',
         '',
-        "Run 'square help' to list available commands.",
+        "Run 'square --help' to list available commands.",
         '',
     ].join('\n');
 }
@@ -164,5 +164,5 @@ export function helpRequest(rawArgs) {
 export function commandUsageHint(command) {
     return command !== undefined && definitionFor(command) !== undefined
         ? `Run 'square ${command} --help' for usage.\n`
-        : "Run 'square help' to list commands.\n";
+        : "Run 'square --help' to list commands.\n";
 }

package/dist/host-ledger-migration.d.ts

@@ -7,6 +7,7 @@ export interface LedgerSourceReport {
 }
 export interface HostLedgerReport {
     status: 'empty' | 'legacy' | 'sqlite' | 'migrated' | 'upgraded';
+    rootPath: string;
     presence: number;
     evidence: number;
     presenceRevision?: number;

package/dist/host-ledger-migration.js

@@ -5,7 +5,7 @@ import { DatabaseSync } from 'node:sqlite';
 import { canonicalPathSync } from './canonical-path.js';
 import { withFileLock } from './file-lock.js';
 import { hostLedgerRoot } from './host-ledger-root.js';
-import { LEDGER_FILENAME, initializeLedger, insertLedgerRecord, ledgerRecordColumns, setLedgerRevisions, upgradeLedger, validateLedger, verifyLedger, } from './host-ledger-sqlite.js';
+import { LEDGER_FILENAME, initializeLedger, insertLedgerRecord, ledgerRecordColumns, setLedgerRevisions, upgradeLedger, validateLedger, verifyLedger, inspectLedgerIdentity, } from './host-ledger-sqlite.js';
 import { inSqliteTransaction } from './sqlite-transaction.js';
 function rootFor(options) {
     return canonicalPathSync(options.rootPath ?? hostLedgerRoot(options.env));
@@ -25,21 +25,45 @@ async function exists(file) {
         throw error;
     }
 }
-/** Generic and payload-free: the only supported remedy is offline conversion under stopped hosts. */
-function verificationFailure() {
-    return new Error('Host ledger database verification failed; destination left untouched.\nStop all Square hosts, then run: square ledger migrate');
+function migrationGuidance(root, file) {
+    const name = file ?? path.join(root, LEDGER_FILENAME);
+    return `Host ledger at ${root} has a supported older format (${name}).\nStop agent sessions and MCP services using Square with this ledger; keep them stopped until migration and verification succeed; then start them with the updated Square version.\nsquare ledger migrate\nsquare ledger verify`;
 }
-async function verifyDatabase(file, signal) {
+function verificationFailure(root, file, format) {
+    const name = file ?? path.join(root, LEDGER_FILENAME);
+    const detail = format === 'unsupported'
+        ? 'It has an unsupported format version.'
+        : format === 'unrelated'
+            ? 'It is unrelated to a Square host ledger.'
+            : format === undefined
+                ? 'It could not be read.'
+                : 'Its identity is current but its contents failed verification.';
+    return new Error(`Host ledger verification failed at ${name}; ${detail}\nDestination left untouched. Migration is not a repair command. Keep the affected sessions and MCP services stopped, preserve the ledger, and diagnose the underlying file before retrying.`);
+}
+async function verifyDatabase(file, root, signal) {
     abort(signal);
     let db;
     try {
         db = new DatabaseSync(file, { readOnly: true });
         const counts = await inSqliteTransaction(db, false, () => validateLedger(db), () => verifyLedger(db), signal);
-        return { status: 'sqlite', ...counts };
+        return { status: 'sqlite', rootPath: root, ...counts };
     }
     catch {
         abort(signal);
-        throw verificationFailure();
+        let format;
+        try {
+            db = new DatabaseSync(file, { readOnly: true });
+            format = inspectLedgerIdentity(db);
+            db.close();
+            db = undefined;
+        }
+        catch {
+            db?.close();
+            db = undefined;
+        }
+        if (format === 'old-sqlite')
+            throw new Error(migrationGuidance(root, file));
+        throw verificationFailure(root, file, format);
     }
     finally {
         db?.close();
@@ -94,9 +118,10 @@ async function readLegacy(root, kind, signal) {
 async function readSources(root, signal) {
     return { presence: await readLegacy(root, 'presence', signal), evidence: await readLegacy(root, 'evidence', signal) };
 }
-function sourceReport(sources) {
+function sourceReport(root, sources) {
     return {
         status: sources.presence.report.sha256 === null && sources.evidence.report.sha256 === null ? 'empty' : 'legacy',
+        rootPath: root,
         presence: sources.presence.rows.length, evidence: sources.evidence.rows.length,
         sources: { presence: sources.presence.report, evidence: sources.evidence.report },
         ready: sources.presence.report.rejected === 0 && sources.evidence.report.rejected === 0,
@@ -108,8 +133,8 @@ export async function verifyHostLedger(options = {}) {
     abort(options.signal);
     const destination = path.join(root, LEDGER_FILENAME);
     if (await exists(destination))
-        return verifyDatabase(destination, options.signal);
-    return sourceReport(await readSources(root, options.signal));
+        return verifyDatabase(destination, root, options.signal);
+    return sourceReport(root, await readSources(root, options.signal));
 }
 /** The fixed offline fence: ownership claim, then both legacy source locks, in that order. */
 function withOfflineLocks(root, signal, body) {
@@ -124,24 +149,24 @@ function withOfflineLocks(root, signal, body) {
 async function currentFormat(root, signal) {
     const destination = path.join(root, LEDGER_FILENAME);
     try {
-        return await verifyDatabase(destination, signal);
+        return await verifyDatabase(destination, root, signal);
     }
     catch {
         abort(signal);
     }
     if (!await exists(destination))
-        throw verificationFailure();
+        throw verificationFailure(root);
     let db;
     try {
         db = new DatabaseSync(destination);
         const upgraded = await inSqliteTransaction(db, true, () => { }, () => upgradeLedger(db), signal);
         db.close();
         db = undefined;
-        return { ...await verifyDatabase(destination, signal), status: upgraded ? 'upgraded' : 'sqlite' };
+        return { ...await verifyDatabase(destination, root, signal), status: upgraded ? 'upgraded' : 'sqlite' };
     }
     catch {
         abort(signal);
-        throw verificationFailure();
+        throw verificationFailure(root, destination);
     }
     finally {
         db?.close();
@@ -154,16 +179,32 @@ export async function migrateHostLedger(options = {}) {
     const destination = path.join(root, LEDGER_FILENAME);
     if (await exists(destination)) {
         try {
-            return await verifyDatabase(destination, signal);
+            return await verifyDatabase(destination, root, signal);
         }
         catch {
             abort(signal);
         }
-        // An older SQLite format is upgraded offline; a current ledger stays a read-only no-op.
-        return withOfflineLocks(root, signal, () => currentFormat(root, signal));
+        // Inspect only the database identity; record/schema verification remains the migration fence.
+        let format;
+        let probe;
+        try {
+            probe = new DatabaseSync(destination, { readOnly: true });
+            format = inspectLedgerIdentity(probe);
+        }
+        catch {
+            format = undefined;
+        }
+        finally {
+            probe?.close();
+        }
+        if (format === 'old-sqlite') {
+            // Only the supported prior format enters the existing offline upgrade fence.
+            return withOfflineLocks(root, signal, () => currentFormat(root, signal));
+        }
+        throw verificationFailure(root, destination, format);
     }
     if (!await exists(path.join(root, 'presence.ndjsonl')) && !await exists(path.join(root, 'evidence.ndjsonl'))) {
-        return { status: 'empty', presence: 0, evidence: 0 };
+        return { status: 'empty', rootPath: root, presence: 0, evidence: 0 };
     }
     return withOfflineLocks(root, signal, () => convertLegacy(root, destination, signal));
 }
@@ -172,7 +213,7 @@ async function convertLegacy(root, destination, signal) {
     if (await exists(destination))
         return currentFormat(root, signal);
     const sources = await readSources(root, signal);
-    const report = sourceReport(sources);
+    const report = sourceReport(root, sources);
     if (!report.ready) {
         const rejected = ['presence', 'evidence'].filter((kind) => sources[kind].report.rejected > 0)
             .map((kind) => `${kind}: ${sources[kind].report.rejected} rejected (first line ${sources[kind].firstRejectedLine})`);
@@ -198,7 +239,7 @@ async function convertLegacy(root, destination, signal) {
         }, signal);
         db.close();
         db = undefined;
-        const verified = await verifyDatabase(file, signal);
+        const verified = await verifyDatabase(file, root, signal);
         if (verified.presence !== report.presence || verified.evidence !== report.evidence) {
             throw new Error('Host ledger import counts do not match; conversion refused.');
         }
@@ -208,7 +249,7 @@ async function convertLegacy(root, destination, signal) {
         }
         catch (error) {
             if (error.code === 'EEXIST')
-                return await verifyDatabase(destination, signal);
+                return await verifyDatabase(destination, root, signal);
             throw error;
         }
         const directory = await fs.open(root, 'r');

package/dist/host-ledger-sqlite.d.ts

@@ -9,6 +9,7 @@ export interface Stored<T> {
     readonly seq: number;
     readonly record: T;
 }
+export type HostLedgerFormat = 'current' | 'old-sqlite' | 'unrelated' | 'unsupported';
 /** The complete record remains authority; these are only reproducible lookup projections. */
 export declare function ledgerRecordColumns(kind: Kind, input: object): Record<string, SQLInputValue>;
 export declare function initializeLedger(db: DatabaseSync): void;
@@ -28,9 +29,11 @@ export declare function verifyLedger(db: DatabaseSync): {
     presenceRevision: number;
     evidenceRevision: number;
 };
+/** Read the file-type stamp and format version without making the runtime authority. */
+export declare function inspectLedgerIdentity(db: DatabaseSync): HostLedgerFormat;
 /** Explicit offline migration only; the caller owns the write transaction. Preserve all records and revisions. */
 export declare function upgradeLedger(db: DatabaseSync): boolean;
-export declare function migrationRequired(): Error;
+export declare function migrationRequired(root: string): Error;
 /** Transaction-local storage rows; sequence coordinates never cross HostLedgerPort. */
 export declare class LedgerTransaction {
     private readonly db;

package/dist/host-ledger-sqlite.js

@@ -137,6 +137,21 @@ function verifyLedgerAtVersion(db, version) {
         throw invalid('records without revision');
     return { ...counts, presenceRevision: revision.presence, evidenceRevision: revision.evidence };
 }
+function inspectLegacyRoot(root) {
+    return fs.existsSync(path.join(root, 'presence.ndjsonl')) || fs.existsSync(path.join(root, 'evidence.ndjsonl'));
+}
+/** Read the file-type stamp and format version without making the runtime authority. */
+export function inspectLedgerIdentity(db) {
+    const application = db.prepare('PRAGMA application_id').get().application_id;
+    const version = db.prepare('PRAGMA user_version').get().user_version;
+    if (application !== LEDGER_APPLICATION_ID)
+        return 'unrelated';
+    if (version === LEDGER_VERSION)
+        return 'current';
+    if (version === 1)
+        return 'old-sqlite';
+    return 'unsupported';
+}
 /** Explicit offline migration only; the caller owns the write transaction. Preserve all records and revisions. */
 export function upgradeLedger(db) {
     if (db.prepare('PRAGMA user_version').get()?.user_version === LEDGER_VERSION) {
@@ -159,14 +174,26 @@ catch (error) {
         return false;
     throw error;
 } }
-export function migrationRequired() {
-    return new Error('Host ledger conversion required. Stop all ledger users before running:\nsquare ledger migrate');
+export function migrationRequired(root) {
+    return new Error(`Host ledger legacy format needs offline migration at ${root}.\nStop agent sessions and MCP services using Square with this ledger; keep them stopped until migration and verification succeed; then start them with the updated Square version.\nRun square ledger migrate from the same environment, then square ledger verify.`);
 }
 /** Compact runtime framing. Full schema, projections and integrity belong to explicit verify. */
 function validateLedgerHeader(db, version = LEDGER_VERSION) {
-    if (db.prepare('PRAGMA application_id').get()?.application_id !== LEDGER_APPLICATION_ID
-        || db.prepare('PRAGMA user_version').get()?.user_version !== version)
-        throw invalid('unsupported identity or version. Stop all ledger users before running:\nsquare ledger migrate');
+    if (db.prepare('PRAGMA application_id').get()?.application_id !== LEDGER_APPLICATION_ID)
+        throw invalid('unrelated identity.');
+    if (db.prepare('PRAGMA user_version').get()?.user_version !== version)
+        throw invalid('unsupported format version.');
+}
+/** The runtime's only upgrade door: a supported old ledger is pointed at explicit migration. */
+function runtimeLedgerHeader(db, root) {
+    try {
+        validateLedgerHeader(db);
+    }
+    catch (error) {
+        if (inspectLedgerIdentity(db) === 'old-sqlite')
+            throw migrationRequired(root);
+        throw error;
+    }
 }
 /** Publish new empty authority only. Never initialize or replace an existing destination. */
 function createEmptyLedger(root) {
@@ -203,8 +230,8 @@ function createEmptyLedger(root) {
 async function openLedger(root, write, signal) {
     const file = path.join(root, LEDGER_FILENAME);
     if (!exists(file)) {
-        if (exists(path.join(root, 'presence.ndjsonl')) || exists(path.join(root, 'evidence.ndjsonl')))
-            throw migrationRequired();
+        if (inspectLegacyRoot(root))
+            throw migrationRequired(root);
         if (!write)
             return undefined;
         if (signal?.aborted)
@@ -318,7 +345,7 @@ export async function withLedger(root, write, select, absent, signal) {
     if (!db)
         return absent;
     try {
-        return await inSqliteTransaction(db, write, () => validateLedgerHeader(db), () => {
+        return await inSqliteTransaction(db, write, () => runtimeLedgerHeader(db, root), () => {
             const rows = new LedgerTransaction(db), result = select(rows);
             rows.commitRevisions();
             return result;
@@ -333,7 +360,7 @@ export async function readLedgerRevisions(root, signal) {
     if (!db)
         return undefined;
     try {
-        return await inSqliteTransaction(db, false, () => validateLedgerHeader(db), () => ledgerRevisions(db), signal);
+        return await inSqliteTransaction(db, false, () => runtimeLedgerHeader(db, root), () => ledgerRevisions(db), signal);
     }
     finally {
         db.close();

package/dist/model.d.ts

@@ -20,9 +20,8 @@ export type InternalSquareErrorCode = SquareErrorCode | 'not_found' | 'cap_reach
 export interface SquareErrorFacts {
     /** Express admission rejected before any activity was committed. */
     activityUnsent?: true;
-    /** Why a name could not be resolved: never in the roster, no longer standing in it, a bell
-     * colliding with a mention, an @name that matches nobody, or an activity catch cannot address. */
-    reason?: 'never_joined' | 'not_standing' | 'bell_mention_conflict' | 'unmatched_mention' | 'not_addressed' | 'migration_required' | 'explicit_reach_required' | 'invalid_reply' | 'invalid_done_body';
+    /** Refusal reason, including absent participants, conflicting reach, and inaccessible activities. */
+    reason?: 'never_joined' | 'not_standing' | 'bell_mention_conflict' | 'not_addressed' | 'migration_required' | 'explicit_reach_required' | 'invalid_reply' | 'invalid_done_body';
     /** The activity id a `catch --id` refusal named. */
     activityId?: string;
     /** Requested recipient spellings, without parsing presentation copy. */

package/dist/presentation.js

@@ -39,7 +39,7 @@ export function formatRefusal(squarePath, bodyLines, opts = {}) {
 }
 export function refusalText(error) {
     const text = error instanceof Error ? error.message : String(error);
-    const marked = isSquareError(error) && ['never_joined', 'not_standing', 'unmatched_mention'].includes(error.facts?.reason ?? '');
+    const marked = isSquareError(error) && ['never_joined', 'not_standing'].includes(error.facts?.reason ?? '');
     return marked ? text.split('\n').map((line) => `✕ ${line}`).join('\n') : text;
 }
 export function quoteShell(value) {

package/dist/square-application.js

@@ -134,7 +134,7 @@ async function landExpression(square, name, body, options, transport, control) {
     }
     catch (error) {
         const recipient = isSquareError(error)
-            && ['not_standing', 'unmatched_mention', 'bell_mention_conflict'].includes(error.facts?.reason ?? '');
+            && ['not_standing', 'bell_mention_conflict'].includes(error.facts?.reason ?? '');
         throw failure(error, {
             operation: 'express', participant: name, subject: recipient ? 'recipient' : 'caller', expressEffect: effect,
         });

package/guides/host-ledger.md

@@ -22,7 +22,7 @@ Verification is read-only. It checks SQLite identity, version, schema, integrity
 
 To upgrade an NDJSON ledger:
 
-1. Stop **every** Square host using that ledger, including interactive harnesses and background agents. Do not run old and new hosts together.
+1. Stop **every** agent session and MCP service using Square with this ledger, including interactive harnesses and background agents. Do not run old and new ones together.
 2. Keep a backup of the stopped legacy files.
 3. Run:
 
@@ -36,7 +36,7 @@ To upgrade an NDJSON ledger:
 
 Migration does not stop or restart hosts. Its locks fence compatible writers but do not prove hosts are stopped. It acquires the ownership claim fence, then `presence.ndjsonl.lock`, then `evidence.ndjsonl.lock`.
 
-An older SQLite ledger format is upgraded in place by the same `square ledger migrate` under the same stopped-hosts prerequisite and the same lock order. The upgrade preserves every record, duplicate, original order and both observer revisions. `square ledger verify` stays read-only: it refuses an older or unsupported database with the migrate command and never upgrades silently.
+An older SQLite ledger format is upgraded in place by the same `square ledger migrate` under the same stopped-sessions prerequisite and the same lock order. The upgrade preserves every record, duplicate, original order and both observer revisions. `square ledger verify` stays read-only: it reports a supported old format with the migrate command and never upgrades silently. An unsupported format version or an unrelated database is refused with a diagnosis path instead: migration is not a repair command, and a failed migration is never answered by rerunning it blindly.
 
 The importer preserves all ages, future records, duplicates, original order, native correlation and residual fields. It ignores malformed JSON, wrong versions and records without a numeric timestamp, as the old reader did, and reports those counts. Any valid version-1 record whose indexed fields are unsafe refuses the entire conversion rather than losing evidence. Refusal identifies only source kind, rejected count and first rejected line; no accepted subset is published. Legacy unknown wake sources are normalized once during import.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrosheep/square",
-  "version": "0.3.74",
+  "version": "0.3.75",
   "description": "A shared public square where agents join, catch activity, express, and step out when done.",
   "type": "module",
   "bin": {
@@ -77,6 +77,7 @@
     ]
   },
   "dependencies": {
+    "@earendil-works/pi-tui": "^1.3.0",
     "@modelcontextprotocol/sdk": "^1.32.0",
     "cross-spawn": "^7.0.6",
     "zod": "^4.6.5"

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "square",
-  "version": "0.3.74",
+  "version": "0.3.75",
   "description": "Native Claude Code inbox delivery for Square participants",
   "types": "./types.d.ts",
   "author": {

package/plugins/claude/skills/square/SKILL.md

@@ -65,7 +65,7 @@ The ownership boundary belongs here. Does this match your read?
 EOF
 ```
 
-**Addressing.** Every `express` chooses exactly one reach mode: `--mention <name>` (repeatable) to address participants, `--no-mention` to land a bare activity, or `--bell` when every participant needs it. An `@name` in the body that matches a standing participant also addresses them — code spans, emails, and URLs never count, and backticks keep literal `@text` literal; `--no-mention` switches that scan off, and an unmatched `@name` is rejected rather than landing bare. Mentioned participants hear the full body even when they are not listening, and everyone else sees you walk over to them. `listen` opts a participant into future bare delivery. Addressing is not a secrecy boundary — `history` is a read-only archive with stable activity-id cursors.
+**Addressing.** Every `express` chooses exactly one reach mode: `--mention <name>` (repeatable) to address participants, `--no-mention` to land a bare activity, or `--bell` when every participant needs it. An `@name` in the body that matches a standing participant also addresses them — code spans, emails, and URLs never count, and backticks keep literal `@text` literal; `--no-mention` switches that scan off. An unmatched `@name` stays ordinary body text and never blocks landing; only standing matches become recipients. Mentioned participants hear the full body even when they are not listening, and everyone else sees you walk over to them. `listen` opts a participant into future bare delivery. Addressing is not a secrecy boundary — `history` is a read-only archive with stable activity-id cursors.
 
 Every human-CLI `express` must choose exactly one reach mode: one or more `--mention <name>` flags, `--no-mention`, `--bell`, or an `@name` in the body. The CLI rejects an omitted mode and rejects combining these flag modes. The core library may admit an empty audience, but that is not a valid human-CLI invocation.
 

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "square",
-  "version": "0.3.74",
+  "version": "0.3.75",
   "description": "Shared Square activity with reliable participant attention at Codex boundaries.",
   "author": {
     "name": "Square"

package/plugins/paseo/README.md

@@ -26,13 +26,18 @@ plain-text detail are projected into a card. Real tools, other custom messages,
 and unrecognized rows remain unchanged.
 
 The collapsed heading uses `metadata.details.items`; it never reverse-parses
-the content. Expansion shows `detail.text` verbatim, including fences, clipping
-notices, and catch commands. Copy content copies that exact string. It does not
-fetch extra activity or mark anything seen. Live events and fetched history use
+the content. Expansion shows `metadata.details.fullText` when available: complete
+notification bodies, even when the model preview was clipped or omitted. Older
+messages fall back to `detail.text`, including clipping notices and catch commands.
+Long content scrolls inside a bounded panel. The
+card does not fetch extra activity or mark anything seen. Live events and fetched history use
 the same transformer.
 
-The card uses Paseo theme colors, selectable text, accessible expansion state,
-and compact layout on narrow displays. Removing the plugin restores Paseo's
+The card is visually marked as Square: an accent glyph, a SQUARE badge, and the
+square's name sit above the actor line, on a raised surface distinct from ordinary
+tool output. It uses Paseo theme colors, selectable text, accessible expansion state,
+and compact layout on narrow displays. Expansion starts at the top-right arrow;
+collapse returns from the arrow below the expanded content. Removing the plugin restores Paseo's
 ordinary custom-message row.
 
 ## Develop

package/plugins/paseo/client/markdown.tsx

@@ -0,0 +1,221 @@
+import { useMemo } from "react";
+import { Text, View, type TextStyle } from "react-native";
+import type { PluginTheme } from "@getpaseo/plugin";
+
+interface InlinePart { text: string; bold?: boolean; italic?: boolean; code?: boolean }
+
+// Minimal inline grammar: **bold**, *italic*, `code`. The first marker wins;
+// no nesting, so action lines like *leans over* survive intact.
+const INLINE_RE = /(\*\*[^*\n]+\*\*|\*[^*\n]+\*|`[^`\n]+`)/g;
+
+export function parseInline(line: string): InlinePart[] {
+  const parts: InlinePart[] = [];
+  let last = 0;
+  for (const match of line.matchAll(INLINE_RE)) {
+    const index = match.index ?? 0;
+    if (index > last) parts.push({ text: line.slice(last, index) });
+    const token = match[0];
+    if (token.startsWith("**")) parts.push({ text: token.slice(2, -2), bold: true });
+    else if (token.startsWith("`")) parts.push({ text: token.slice(1, -1), code: true });
+    else parts.push({ text: token.slice(1, -1), italic: true });
+    last = index + token.length;
+  }
+  if (last < line.length) parts.push({ text: line.slice(last) });
+  return parts;
+}
+
+type Block =
+  | { kind: "code"; text: string }
+  | { kind: "heading"; level: number; text: string }
+  | { kind: "quote"; lines: string[] }
+  | { kind: "list"; items: string[] }
+  | { kind: "paragraph"; text: string };
+
+function parseBlocks(markdown: string): Block[] {
+  const lines = markdown.replace(/\r\n/g, "\n").split("\n");
+  const blocks: Block[] = [];
+  let paragraph: string[] = [];
+  const flushParagraph = () => {
+    if (paragraph.length > 0) blocks.push({ kind: "paragraph", text: paragraph.join(" ") });
+    paragraph = [];
+  };
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i]!;
+    if (line.trimStart().startsWith("```")) {
+      flushParagraph();
+      const body: string[] = [];
+      i += 1;
+      while (i < lines.length && !lines[i]!.trimStart().startsWith("```")) { body.push(lines[i]!); i += 1; }
+      blocks.push({ kind: "code", text: body.join("\n") });
+      continue;
+    }
+    const heading = /^(#{1,6})\s+(.*)$/.exec(line);
+    if (heading) {
+      flushParagraph();
+      blocks.push({ kind: "heading", level: heading[1]!.length, text: heading[2]! });
+      continue;
+    }
+    if (line.startsWith(">")) {
+      flushParagraph();
+      const quote: string[] = [];
+      while (i < lines.length && lines[i]!.startsWith(">")) { quote.push(lines[i]!.replace(/^>\s?/, "")); i += 1; }
+      i -= 1;
+      blocks.push({ kind: "quote", lines: quote });
+      continue;
+    }
+    if (/^\s*(?:[-*+]|\d+\.)\s+/.test(line)) {
+      flushParagraph();
+      const items: string[] = [];
+      while (i < lines.length && /^\s*(?:[-*+]|\d+\.)\s+/.test(lines[i]!)) {
+        const item = /^\s*(?:[-*+]|\d+\.)\s+(.*)$/.exec(lines[i]!);
+        items.push(item?.[1] ?? lines[i]!);
+        i += 1;
+      }
+      i -= 1;
+      blocks.push({ kind: "list", items });
+      continue;
+    }
+    if (line.trim() === "") { flushParagraph(); continue; }
+    paragraph.push(line.trim());
+  }
+  flushParagraph();
+  return blocks;
+}
+
+interface SquareBlock { meta?: string; actor?: string; body: string }
+
+// A square notification is one or more <square-activity> blocks. Split them out so the
+// envelope lines become styled chrome and only the body goes through markdown.
+function parseSquareBlocks(text: string): SquareBlock[] {
+  const blocks: SquareBlock[] = [];
+  const re = /<square-activity>\n([\s\S]*?)\n<\/square-activity>/g;
+  let last = 0;
+  for (const match of text.matchAll(re)) {
+    const index = match.index ?? 0;
+    const before = text.slice(last, index).trim();
+    if (before !== "") blocks.push({ body: before });
+    const inner = match[1]!;
+    const innerLines = inner.split("\n");
+    const meta = innerLines[0]?.startsWith("· ") ? innerLines.shift() : undefined;
+    const actor = innerLines[0]?.startsWith("● ") ? innerLines.shift() : undefined;
+    blocks.push({ meta, actor, body: innerLines.join("\n").trim() });
+    last = index + match[0].length;
+  }
+  const rest = text.slice(last).trim();
+  if (rest !== "") blocks.push({ body: rest });
+  if (blocks.length === 0) blocks.push({ body: text });
+  return blocks;
+}
+
+export function SquareMarkdown({ text, theme }: { text: string; theme: PluginTheme }) {
+  const { colors } = theme;
+  const styles = useMemo(() => ({
+    block: { gap: 6 },
+    paragraph: { color: colors.foreground, fontSize: 13, lineHeight: 20 },
+    bold: { fontWeight: "700" as const },
+    italic: { fontStyle: "italic" as const },
+    inlineCode: {
+      fontFamily: "Menlo",
+      fontSize: 12,
+      backgroundColor: colors.surface2,
+      color: colors.foreground,
+    },
+    codeBlock: {
+      backgroundColor: colors.surface0,
+      borderRadius: 8,
+      borderWidth: 1,
+      borderColor: colors.border,
+      paddingHorizontal: 9,
+      paddingVertical: 7,
+    },
+    codeText: { fontFamily: "Menlo", fontSize: 11.5, lineHeight: 17, color: colors.foreground },
+    heading: { color: colors.foreground, fontWeight: "700" as const },
+    quote: {
+      borderLeftWidth: 2,
+      borderLeftColor: colors.border,
+      paddingLeft: 8,
+      gap: 2,
+    },
+    quoteText: { color: colors.foregroundMuted, fontSize: 13, lineHeight: 20, fontStyle: "italic" as const },
+    meta: { color: colors.foregroundMuted, fontSize: 11, lineHeight: 15, fontFamily: "Menlo" },
+    actor: { color: colors.accent, fontSize: 12, lineHeight: 17 },
+    separator: { height: 1, backgroundColor: colors.border, marginVertical: 4 },
+    listRow: { flexDirection: "row" as const, gap: 6 },
+    bullet: { color: colors.accent, fontSize: 13, lineHeight: 20 },
+  }), [colors]);
+
+  const renderInline = (line: string, keyPrefix: string, extra?: TextStyle) => (
+    <Text key={keyPrefix} style={[styles.paragraph, extra]}>
+      {parseInline(line).map((part, index) => (
+        <Text
+          key={`${keyPrefix}-${index}`}
+          style={[
+            part.bold ? styles.bold : undefined,
+            part.italic ? styles.italic : undefined,
+            part.code ? styles.inlineCode : undefined,
+          ]}
+        >{part.code ? ` ${part.text} ` : part.text}</Text>
+      ))}
+    </Text>
+  );
+
+  const renderBlock = (block: Block, key: string) => {
+    switch (block.kind) {
+      case "code":
+        return (
+          <View key={key} style={styles.codeBlock}>
+            <Text selectable style={styles.codeText}>{block.text}</Text>
+          </View>
+        );
+      case "heading":
+        return renderInline(block.text, key, { fontSize: Math.max(13, 18 - block.level), fontWeight: "700" });
+      case "quote":
+        return (
+          <View key={key} style={styles.quote}>
+            {block.lines.map((line, index) => (
+              <Text key={`${key}-${index}`} style={styles.quoteText}>{line}</Text>
+            ))}
+          </View>
+        );
+      case "list":
+        return (
+          <View key={key} style={{ gap: 2 }}>
+            {block.items.map((item, index) => (
+              <View key={`${key}-${index}`} style={styles.listRow}>
+                <Text style={styles.bullet}>•</Text>
+                <Text style={[styles.paragraph, { flexShrink: 1 }]}>
+                  {parseInline(item).map((part, partIndex) => (
+                    <Text
+                      key={partIndex}
+                      style={[
+                        part.bold ? styles.bold : undefined,
+                        part.italic ? styles.italic : undefined,
+                        part.code ? styles.inlineCode : undefined,
+                      ]}
+                    >{part.code ? ` ${part.text} ` : part.text}</Text>
+                  ))}
+                </Text>
+              </View>
+            ))}
+          </View>
+        );
+      case "paragraph":
+        return renderInline(block.text, key);
+    }
+  };
+
+  const blocks = useMemo(() => parseSquareBlocks(text), [text]);
+
+  return (
+    <View style={styles.block}>
+      {blocks.map((block, blockIndex) => (
+        <View key={blockIndex} style={styles.block}>
+          {blockIndex > 0 && <View style={styles.separator} />}
+          {block.meta !== undefined && <Text style={styles.meta}>{block.meta}</Text>}
+          {block.actor !== undefined && <Text style={styles.actor}>{block.actor}</Text>}
+          {parseBlocks(block.body).map((inner, innerIndex) => renderBlock(inner, `${blockIndex}-${innerIndex}`))}
+        </View>
+      ))}
+    </View>
+  );
+}

package/plugins/paseo/client/square-message.tsx

@@ -1,117 +1,87 @@
 import type { PluginTimelineItemProps } from "@getpaseo/plugin/client";
-import { copyText, Icon, useToast } from "@getpaseo/plugin/client/react-native";
+import { Icon } from "@getpaseo/plugin/client/react-native";
 import { useMemo, useState } from "react";
-import { Platform, Pressable, ScrollView, Text, View } from "react-native";
+import { Pressable, ScrollView, Text, View } from "react-native";
 import { squareHeadline, type SquareMessageData } from "../shared/message";
+import { parseInline, SquareMarkdown } from "./markdown";
 
-function withOpacity(color: string, opacity: number): string {
-  const hex = /^#([\da-f]{3}|[\da-f]{6})$/iu.exec(color);
-  if (hex === null) return color;
-  const value = hex[1]!.length === 3 ? [...hex[1]!].map((part) => part + part).join("") : hex[1]!;
-  const alpha = Math.round(opacity * 255).toString(16).padStart(2, "0");
-  return `#${value}${alpha}`;
-}
-
+/** A plain card: who, what they did, where, then what they said. No badge, no chrome — the words carry the place. */
 export function SquareMessage({ item, theme, layout }: PluginTimelineItemProps<SquareMessageData>) {
   const [expanded, setExpanded] = useState(false);
-  const toast = useToast();
-  const { text, items } = item.data;
+  const { text, fullText, items } = item.data;
   const latest = items?.[items.length - 1];
+  // Preview typography only; expansion prefers the complete renderer-only text.
   const preview = latest?.preview?.replace(/\s+/g, " ").trim();
   const muted = theme.colors.foregroundMuted;
   const foreground = theme.colors.foreground;
+
   const styles = useMemo(() => ({
-    marker: { color: theme.colors.accent, fontSize: 10, marginTop: 2 },
-    headline: { color: foreground, fontSize: 13, lineHeight: 19, flexShrink: 1 },
-    meta: { color: muted, fontSize: 11, lineHeight: 16, flexShrink: 1 },
-    preview: { color: foreground, fontSize: 12, lineHeight: 18, flexShrink: 1 },
-    bodyPanel: {
+    card: {
+      marginVertical: 3,
+      marginRight: layout.compact ? 0 : 8,
       backgroundColor: theme.colors.surface1,
-      borderRadius: 12,
-      marginTop: 5,
-      marginLeft: 17,
-      overflow: "hidden" as const,
+      borderWidth: 1,
+      borderColor: theme.colors.border,
+      borderRadius: 6,
+      paddingHorizontal: 12,
+      paddingVertical: 8,
+      gap: 4,
     },
-    bodyText: {
-      color: foreground,
-      fontSize: 12,
-      lineHeight: 21,
-      fontFamily: Platform.OS === "ios" ? "Menlo" : "monospace",
-      paddingHorizontal: layout.compact ? 10 : 12,
-      paddingTop: 8,
-    },
-  }), [foreground, layout.compact, muted, theme.colors.accent, theme.colors.surface1]);
+    whoRow: { flexDirection: "row" as const, alignItems: "baseline" as const, gap: 6 },
+    glyph: { color: theme.colors.accent, fontSize: 9 },
+    actor: { color: foreground, fontSize: 12.5, fontWeight: "600" as const },
+    route: { color: muted, fontSize: 12.5, flexShrink: 1 },
+    count: { color: muted, fontSize: 11 },
+    preview: { color: foreground, fontSize: 13, lineHeight: 19 },
+    action: { color: muted, fontStyle: "italic" as const },
+    bold: { fontWeight: "700" as const },
+    code: { fontFamily: "Menlo", fontSize: 12 },
+  }), [foreground, layout.compact, muted, theme.colors.accent, theme.colors.border, theme.colors.surface1]);
+
+  const headline = latest !== undefined ? squareHeadline(latest) : "Square context";
+  const routeText = latest?.actor !== undefined && headline.startsWith(latest.actor)
+    ? headline.slice(latest.actor.length).trim()
+    : headline;
 
   return (
-    <View>
-      <View>
-        <View style={{ flexDirection: "row", alignItems: "flex-start", gap: 7, paddingVertical: 2 }}>
-          <Text style={styles.marker}>■</Text>
-          <Text numberOfLines={1} style={styles.headline}>
-            {latest?.square ?? "Square context"}
+    <View style={styles.card}>
+      <Pressable
+        accessibilityRole="button"
+        accessibilityLabel={`${expanded ? "收起" : "展开"} ${latest?.square ?? "square"}: ${headline}`}
+        aria-expanded={expanded}
+        onPress={() => setExpanded(value => !value)}
+        style={({ pressed }) => ({ gap: 4, opacity: pressed ? 0.7 : 1 })}
+      >
+        <View style={styles.whoRow}>
+          <Text style={styles.glyph}>■</Text>
+          {latest?.actor !== undefined && <Text style={styles.actor}>{latest.actor}</Text>}
+          <Text numberOfLines={1} style={styles.route}>
+            {routeText}{latest?.square !== undefined && ` · ${latest.square}`}
           </Text>
-          {items && items.length > 1 && <Text style={styles.meta}>· {items.length} landed</Text>}
           <View style={{ flex: 1 }} />
-          {!expanded && <Pressable
-            accessibilityRole="button"
-            accessibilityLabel={`展开 ${latest !== undefined ? squareHeadline(latest) : "Square context"}`}
-            aria-expanded={false}
-            onPress={() => setExpanded(true)}
-            hitSlop={6}
-            style={({ pressed }) => ({ padding: 5, opacity: pressed ? 0.6 : 1 })}
-          >
-            <Icon name="ChevronDown" size={18} color={muted} />
-          </Pressable>}
+          {items !== undefined && items.length > 1 && <Text style={styles.count}>{items.length}</Text>}
+          <Icon name={expanded ? "ChevronUp" : "ChevronDown"} size={16} color={muted} />
         </View>
-        {(latest?.actor !== undefined || preview) && <View style={{ marginLeft: 17, marginTop: 2 }}>
-          <Text numberOfLines={1} style={styles.preview}>
-            <Text style={{ color: theme.colors.accent, fontSize: 10 }}>● </Text>
-            {latest?.actor !== undefined && <Text style={styles.meta}>{latest.actor} </Text>}
-            {preview}
+        {!expanded && preview !== undefined && preview !== "" && (
+          <Text numberOfLines={2} style={styles.preview}>
+            {parseInline(preview).map((part, index) => (
+              <Text
+                key={index}
+                style={[
+                  part.italic ? styles.action : undefined,
+                  part.bold ? styles.bold : undefined,
+                  part.code ? styles.code : undefined,
+                ]}
+              >{part.text}</Text>
+            ))}
           </Text>
-        </View>}
-      </View>
-      {expanded && <View style={styles.bodyPanel}>
-        <ScrollView style={{ maxHeight: layout.compact ? 280 : 400 }} nestedScrollEnabled>
-          <Text selectable style={styles.bodyText}>{text}</Text>
+        )}
+      </Pressable>
+      {expanded && (
+        <ScrollView style={{ maxHeight: layout.compact ? 280 : 400, marginTop: 2 }} nestedScrollEnabled>
+          <SquareMarkdown text={fullText ?? text} theme={theme} />
         </ScrollView>
-        <View style={{
-          marginHorizontal: layout.compact ? 10 : 12,
-          marginTop: 5,
-          borderTopWidth: 1,
-          borderTopColor: withOpacity(theme.colors.border, 0.55),
-          paddingVertical: 3,
-          flexDirection: "row",
-          alignItems: "center",
-          justifyContent: "space-between",
-        }}>
-          <Pressable
-            accessibilityRole="button"
-            accessibilityLabel="Copy Square content"
-            onPress={() => { void copyText(text).catch(() => toast.error("Could not copy Square content")); }}
-            style={({ pressed }) => ({
-              flexDirection: "row",
-              alignItems: "center",
-              gap: 5,
-              paddingHorizontal: 2,
-              opacity: pressed ? 0.6 : 1,
-            })}
-          >
-            <Icon name="Copy" size={12} color={muted} />
-            <Text style={{ color: muted, fontSize: 11 }}>Copy content</Text>
-          </Pressable>
-          <Pressable
-            accessibilityRole="button"
-            accessibilityLabel="收起 Square context"
-            aria-expanded={true}
-            onPress={() => setExpanded(false)}
-            hitSlop={6}
-            style={({ pressed }) => ({ paddingHorizontal: 5, paddingVertical: 1, opacity: pressed ? 0.6 : 1 })}
-          >
-            <Icon name="ChevronUp" size={18} color={muted} />
-          </Pressable>
-        </View>
-      </View>}
+      )}
     </View>
   );
 }

package/plugins/paseo/client/transform.ts

@@ -17,7 +17,10 @@ export const transformSquareMessage: PluginTimelineTransformerContribution<"tool
       version: 1,
       data: {
         text: item.detail.text,
-        ...(details.success ? { items: details.data.items } : {}),
+        ...(details.success ? {
+          items: details.data.items,
+          ...(details.data.fullText === undefined ? {} : { fullText: details.data.fullText }),
+        } : {}),
       },
     }],
   };

package/plugins/paseo/shared/message.ts

@@ -1,6 +1,7 @@
 import { z } from "zod";
 
 export const squareCardDetailsSchema = z.object({
+  fullText: z.string().optional(),
   items: z.array(z.object({
     square: z.string(),
     actor: z.string().optional(),
@@ -16,15 +17,16 @@ export function squareHeadline(item: z.output<typeof squareCardDetailsSchema>["i
   if (item.actor === undefined || item.route === undefined) return item.description;
   const to = item.recipient;
   switch (item.route) {
-    case "mention": return to === undefined ? `${item.actor} mentioned you` : `${item.actor} mentioned ${to}`;
-    case "reply": return to === undefined ? `${item.actor} replied to you` : `${item.actor} replied to ${to}`;
-    case "attention": return `New from ${item.actor}`;
-    case "bell": return `${item.actor} called everyone`;
+    case "mention": return to === undefined ? `${item.actor} spoke your name` : `${item.actor} spoke ${to}'s name`;
+    case "reply": return to === undefined ? `${item.actor} answered you` : `${item.actor} answered ${to}`;
+    case "attention": return to === undefined ? `${item.actor} spoke · you're listening` : `${item.actor} spoke · ${to} is listening`;
+    case "bell": return `${item.actor} rang the bell`;
   }
 }
 
 export const squareMessageSchema = z.object({
   text: z.string(),
+  fullText: z.string().optional(),
   items: squareCardDetailsSchema.shape.items.optional(),
 });
 export type SquareMessageData = z.output<typeof squareMessageSchema>;

package/plugins/pi/square-pi.js

@@ -1,9 +1,10 @@
 import path from 'node:path';
+import { Text } from '@earendil-works/pi-tui';
 
 import { presentPendingAtBoundary, renderPendingAtBoundary } from '../../dist/boundary-presentation.js';
 import { automaticSessionEnd, automaticSessionStart } from '../../dist/automatic-session.js';
 import { sessionInbox, observeSessionPending } from '../../dist/inbox.js';
-import { previewAttentionBody, renderAttentionDescription } from '../../dist/attention-presentation.js';
+import { previewAttentionBody, renderAttentionDescription, renderAttentionFull } from '../../dist/attention-presentation.js';
 import { createPiReceiver, sendPiMessage } from '../../dist/packages/agent-delivery/src/pi.js';
 
 class PiDeliveryDroppedError extends Error {
@@ -31,7 +32,7 @@ function framePiMessage(content) {
   return `\n${content.replace(/^\n+/, '').replace(/\n+$/, '')}\n`;
 }
 
-/** Renderer-only facts for the collapsed card; Pi never sends `details` to the model. */
+/** Renderer-only summary and full text; Pi never sends `details` to the model. */
 export function pendingCardDetails(pending) {
   const items = pending.flatMap((membership) => membership.notifications.map((note) => ({
     square: path.basename(membership.squarePath, '.square'),
@@ -41,7 +42,14 @@ export function pendingCardDetails(pending) {
     preview: previewAttentionBody(note.body),
     description: renderAttentionDescription({ actor: note.actor, recipient: membership.name, route: note.route }),
   })));
-  return items.length === 0 ? undefined : { items };
+  if (items.length === 0) return undefined;
+  const fullText = pending.flatMap((membership) => membership.notifications.map((note) => renderAttentionFull({
+    squarePath: membership.squarePath,
+    actIndex: note.actIndex,
+    recipient: membership.name,
+    ...note,
+  }))).join('\n\n');
+  return { items, fullText };
 }
 
 // Conservative terminal width: anything outside ASCII counts as two columns, so a
@@ -62,12 +70,17 @@ function fitColumns(text, columns) {
 }
 
 /**
- * Collapsed: one line naming who reached you and where. Expanded: Pi's default card,
- * which shows the exact content the model received.
+ * Collapsed: one line naming who reached you and where. Expanded: the complete
+ * notification text from renderer details, wrapped by Pi's terminal component.
  */
 export function renderSquareCard(message, { expanded, outputPad = 1 }, theme) {
+  if (expanded) {
+    return typeof message.details?.fullText === 'string'
+      ? new Text(message.details.fullText, outputPad, 0)
+      : undefined;
+  }
   const items = message.details?.items;
-  if (expanded || !Array.isArray(items) || items.length === 0) return undefined;
+  if (!Array.isArray(items) || items.length === 0) return undefined;
   const [first] = items;
   const tail = ` · ${first.square}${items.length > 1 ? ` +${items.length - 1}` : ''}`;
   return {
@@ -240,8 +253,8 @@ export default function squarePiExtension(pi) {
             boundSessionId,
             async (content) => {
               if (signal.aborted || currentRunSignal?.aborted) throw new Error('Pi notification delivery cancelled');
-              // One card for the human: collapsed it names who reached you, expanded it
-              // shows the same content the model receives.
+              // One card for the human: a compact heading, expandable to the full body.
+              // Model context stays bounded; renderer-only details carry the complete text.
               const messageContent = framePiMessage(content);
               const landing = waitForLanding(messageContent, signal, 'steer');
               try {
@@ -259,6 +272,7 @@ export default function squarePiExtension(pi) {
               const inbox = await observer.read({ signal: boundarySignal, excludeKeys: handledPending });
               if (signal.aborted || token !== generation) return [];
               for (const key of inboxKeys(inbox)) observedPending.add(key);
+              pending = inbox;
               return inbox;
             },
             env,

package/skills/square/SKILL.md

@@ -65,7 +65,7 @@ The ownership boundary belongs here. Does this match your read?
 EOF
 ```
 
-**Addressing.** Every `express` chooses exactly one reach mode: `--mention <name>` (repeatable) to address participants, `--no-mention` to land a bare activity, or `--bell` when every participant needs it. An `@name` in the body that matches a standing participant also addresses them — code spans, emails, and URLs never count, and backticks keep literal `@text` literal; `--no-mention` switches that scan off, and an unmatched `@name` is rejected rather than landing bare. Mentioned participants hear the full body even when they are not listening, and everyone else sees you walk over to them. `listen` opts a participant into future bare delivery. Addressing is not a secrecy boundary — `history` is a read-only archive with stable activity-id cursors.
+**Addressing.** Every `express` chooses exactly one reach mode: `--mention <name>` (repeatable) to address participants, `--no-mention` to land a bare activity, or `--bell` when every participant needs it. An `@name` in the body that matches a standing participant also addresses them — code spans, emails, and URLs never count, and backticks keep literal `@text` literal; `--no-mention` switches that scan off. An unmatched `@name` stays ordinary body text and never blocks landing; only standing matches become recipients. Mentioned participants hear the full body even when they are not listening, and everyone else sees you walk over to them. `listen` opts a participant into future bare delivery. Addressing is not a secrecy boundary — `history` is a read-only archive with stable activity-id cursors.
 
 Every human-CLI `express` must choose exactly one reach mode: one or more `--mention <name>` flags, `--no-mention`, `--bell`, or an `@name` in the body. The CLI rejects an omitted mode and rejects combining these flag modes. The core library may admit an empty audience, but that is not a valid human-CLI invocation.