@co0ontty/wand 4.77.0 → 4.78.0-beta.ga1e4f59

package/dist/server-task-routes.js

@@ -8,7 +8,7 @@ import { generateWandTaskTitle, provisionalTaskTitleFromDescription, TASK_TITLE_
 import { recordIterationPromptForTask } from "./iteration-log.js";
 import { resolveSystemAiContext } from "./session-ai-context.js";
 import { DEFAULT_WAND_TASK_AGENT_KIND, DEFAULT_WAND_TASK_AGENT_MODE, DEFAULT_WAND_TASK_PRIORITY, isWandTaskAgentKind, isWandTaskAgentMode, normalizeWandTaskAgentMode, WAND_MILESTONE_NAME_MAX_LENGTH } from "./task-types.js";
-import { archiveBoardTask, ensureWorkspaceTaskForBoardTask, isAutoNameableBoardTask, moveSessionToWorkspaceTask, syncClosedBoardTask, syncUngroupedSessionsToBoard, syncWorkspaceTaskToBoard, taskAutoNameSignature, taskAutoNameSourceText } from "./wand-task-sync.js";
+import { isAutoNameableBoardTask, taskAutoNameSignature, taskAutoNameSourceText } from "./wand-task-sync.js";
 import { isSessionProvider } from "./session-provider.js";
 import { isThinkingEffort } from "./structured-provider-common.js";
 const STATUSES = new Set(["todo", "doing", "done", "archived"]);
@@ -268,12 +268,6 @@ export function registerTaskRoutes(app, deps) {
     const { storage, sessions, structured, processes, config } = deps;
     const dto = (task) => taskDto(deps, task);
     app.get("/api/wand-tasks", (req, res) => {
-        try {
-            syncUngroupedSessionsToBoard(storage);
-        }
-        catch (error) {
-            console.error("[WandTask] Failed to sync ungrouped sessions onto the board:", getErrorMessage(error));
-        }
         try {
             // 侧栏建的任务 / 后续新增的会话都会在这里补上自动标题。
             refreshAutoBoardTaskTitles(storage, { config, generateTitle: deps.generateTitle });
@@ -406,22 +400,18 @@ export function registerTaskRoutes(app, deps) {
             const requestedMilestoneId = milestoneIdFrom(storage, body.milestoneId) ?? defaultMilestoneIdForWrite(storage);
             const milestoneId = scopedMilestoneId(storage, requestedMilestoneId, workspaceId)
                 ?? defaultMilestoneIdForWrite(storage);
-            const task = storage.transaction(() => {
-                const card = storage.createWandTask({
-                    workspaceId,
-                    parentTaskId,
-                    title,
-                    titleSource,
-                    description,
-                    status,
-                    priority,
-                    labels,
-                    dueDate,
-                    milestoneId,
-                    agent,
-                });
-                ensureWorkspaceTaskForBoardTask(storage, card);
-                return storage.getWandTask(card.id);
+            const task = storage.createWandTask({
+                workspaceId,
+                parentTaskId,
+                title,
+                titleSource,
+                description,
+                status,
+                priority,
+                labels,
+                dueDate,
+                milestoneId,
+                agent,
             });
             if (titleSource === "auto") {
                 refreshAutoBoardTaskTitles(storage, {
@@ -505,8 +495,6 @@ export function registerTaskRoutes(app, deps) {
                 res.status(404).json({ error: "未找到该任务。" });
                 return;
             }
-            if (task.status === "done" || task.status === "archived")
-                syncClosedBoardTask(storage, task);
             res.json(dto(storage.getWandTask(task.id) ?? task));
         }
         catch (error) {
@@ -514,7 +502,7 @@ export function registerTaskRoutes(app, deps) {
         }
     });
     app.delete("/api/wand-tasks/:id", (req, res) => {
-        const archived = archiveBoardTask(storage, req.params.id);
+        const archived = storage.updateWandTask(req.params.id, { status: "archived" });
         if (!archived) {
             res.status(404).json({ error: "未找到该任务。" });
             return;
@@ -533,8 +521,7 @@ export function registerTaskRoutes(app, deps) {
                 res.status(404).json({ error: "未找到该任务。" });
                 return;
             }
-            const task = ensureWorkspaceTaskForBoardTask(storage, card);
-            moveSessionToWorkspaceTask(storage, sessionId, task.id);
+            storage.bindWandTaskSession(card.id, sessionId);
             sessions?.refreshSessionWorkspace(sessionId);
             res.status(201).json(dto(storage.getWandTask(req.params.id)));
         }
@@ -546,7 +533,7 @@ export function registerTaskRoutes(app, deps) {
         const card = storage.getWandTask(req.params.id);
         const session = storage.getSession(req.params.sessionId);
         if (card?.workspaceTaskId && session?.workspaceTaskId === card.workspaceTaskId) {
-            moveSessionToWorkspaceTask(storage, session.id, null);
+            storage.moveSessionToWorkspaceTask(session.id, null);
             sessions?.refreshSessionWorkspace(session.id);
         }
         else {
@@ -626,9 +613,6 @@ export function registerTaskRoutes(app, deps) {
         }
     }));
     app.get("/api/wand-tasks/:id", asyncRoute(async (req, res) => {
-        // 单卡读取不跑全量同步，但至少把这张卡片自己的任务归属对上：
-        // 原生客户端 / 详情面板只拉单卡时，也不会看到一张没有会话的卡片。
-        syncWorkspaceTaskToBoard(storage, storage.getWandTask(req.params.id)?.workspaceTaskId);
         const task = dto(storage.getWandTask(req.params.id));
         if (!task) {
             res.status(404).json({ error: "未找到该任务。" });

package/dist/server-workspace-routes.js

@@ -10,7 +10,7 @@ import { collectSessionTopicBlocklist } from "./session-topic.js";
 import { resolveSessionDisplayTitle } from "./session-transport.js";
 import { attachUnboundSessionsToWorkspace, backfillSessionWorkspaces, normalizeProjectCwd, projectCwdForSession, isGlobalWorkspace, syncDirectoryNameForWorkspace } from "./workspace-binding.js";
 import { defaultMilestoneIdForWrite, resolvedMilestoneFields, scopedMilestoneId } from "./milestone-scope.js";
-import { archiveBoardTaskForWorkspaceTask, archiveWorkspaceTask, ensureBoardTaskForWorkspaceTask, isUnnamedWorkspaceTaskName, moveSessionToWorkspaceTask, syncSidebarTasksFromBoard, UNNAMED_WORKSPACE_TASK_NAME } from "./wand-task-sync.js";
+import { isUnnamedWorkspaceTaskName, UNNAMED_WORKSPACE_TASK_NAME } from "./wand-task-sync.js";
 import { isSessionProvider } from "./session-provider.js";
 import { firstLayoutTabId } from "./layout-tree.js";
 import { parentTaskIdFrom, refreshAutoBoardTaskTitles } from "./server-task-routes.js";
@@ -25,7 +25,7 @@ function workspaceSessionTitle(session, names = {}) {
 function liveSession(session, registry) {
     return registry?.getLatest(session.id) ?? session;
 }
-function workspaceSessionSummary(session, names = {}, registry, teamChat) {
+function workspaceSessionSummary(session, names = {}, registry, team = {}) {
     const live = liveSession(session, registry);
     return {
         id: live.id,
@@ -40,12 +40,30 @@ function workspaceSessionSummary(session, names = {}, registry, teamChat) {
         inFlight: live.structuredState?.inFlight === true,
         cwd: live.cwd,
         startedAt: live.startedAt,
-        ...(teamChat ? { teamChat } : {}),
+        ...(team.chat ? { teamChat: team.chat } : {}),
+        ...(team.step ? { teamStep: team.step } : {}),
     };
 }
+/**
+ * 会话列表用的团队标记索引：群聊入口 + 成员派发步骤，各一次查询建整张表，
+ * 列表里每条会话只做 Map 命中，不逐个查库。
+ */
+function teamSessionMarkers(storage) {
+    return { chat: storage.listAiTeamRunChatMarkers(), step: storage.listAiTeamStepSessionMarkers() };
+}
+/** 单条会话的团队标记；群聊条目只按群聊算，别再当成派发步骤折进任务下面的团队分组。 */
+function teamMarkersFor(markers, sessionId) {
+    const chat = markers.chat.get(sessionId);
+    if (chat)
+        return { chat };
+    const step = markers.step.get(sessionId);
+    return step ? { step } : {};
+}
 function cheapTasksRevision(storage, registry) {
     const fingerprint = [
         storage.tasksAggregateFingerprint(),
+        // 团队标记（群聊入口、成员步骤与运行状态）也在列表里。
+        storage.teamSessionFingerprint(),
         // 排序只更新偏好，不改变任务和会话；轮询 revision 也必须跟着变化。
         storage.getWorkspaceGroupOrder(),
         ...(registry?.listSlim() ?? []).map((session) => [
@@ -192,11 +210,7 @@ function createTaskForWorkspace(storage, workspace, body) {
         cwd: storedCwd,
         worktree,
         milestoneId,
-    });
-    ensureBoardTaskForWorkspaceTask(storage, task, workspace, {
-        titleSource: named ? "user" : "auto",
-        description,
-        parentTaskId,
+        board: { titleSource: named ? "user" : "auto", description, parentTaskId },
     });
     return {
         task,
@@ -357,11 +371,11 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             return;
         }
         storage.touchWorkspace(workspace.id);
-        const teamChatMarkers = storage.listAiTeamRunChatMarkers();
+        const teamMarkers = teamSessionMarkers(storage);
         res.json({
             ...workspaceWithCounts(storage, workspace),
             sessions: storage.listSessionsByWorkspace(workspace.id).map((session) => ({
-                ...workspaceSessionSummary(session, { workspaceName: workspace.name }, sessions, teamChatMarkers.get(session.id)),
+                ...workspaceSessionSummary(session, { workspaceName: workspace.name }, sessions, teamMarkersFor(teamMarkers, session.id)),
                 workspaceTaskId: session.workspaceTaskId,
             })),
         });
@@ -480,7 +494,6 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
     }));
     // 目录组为一级容器的任务聚合列表，供侧栏「任务」视图一次拉全。
     app.get("/api/tasks", (req, res) => {
-        syncSidebarTasksFromBoard(storage);
         // 侧栏轮询也在补自动标题：不打开看板的任务（以及新增会话后的改名）也要吃到。
         try {
             refreshAutoBoardTaskTitles(storage, titleOptions);
@@ -511,9 +524,9 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         // messages 大字段 JSON 解析一遍（单会话可达十几 MB，整表 ~30MB）。
         const allSessions = storage.loadSessionsSlim();
         const workspaces = storage.listWorkspaces();
-        // 群聊标记一次查全：列表里每条会话只做 Map 命中，不逐个查库。
-        const teamChatMarkers = storage.listAiTeamRunChatMarkers();
-        const summarize = (session, names = {}) => workspaceSessionSummary(session, names, sessions, teamChatMarkers.get(session.id));
+        // 群聊与成员派发标记一次查全：列表里每条会话只做 Map 命中，不逐个查库。
+        const teamMarkers = teamSessionMarkers(storage);
+        const summarize = (session, names = {}) => workspaceSessionSummary(session, names, sessions, teamMarkersFor(teamMarkers, session.id));
         // 目录自定义名（工作区名称）：没有项目实体的合成目录也按这个名字显示。
         const directoryNames = storage.listSessionDirectoryNames();
         const customNameForCwd = (cwd) => {
@@ -811,7 +824,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         }
         storage.touchWorkspaceTask(task.id);
         const workspace = storage.getWorkspace(task.workspaceId);
-        const teamChatMarkers = storage.listAiTeamRunChatMarkers();
+        const teamMarkers = teamSessionMarkers(storage);
         res.json({
             ...task,
             ...resolvedMilestoneFields(storage, task.milestoneId),
@@ -820,7 +833,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
                 ...workspaceSessionSummary(session, {
                     taskName: task.name,
                     workspaceName: workspace?.name,
-                }, sessions, teamChatMarkers.get(session.id)),
+                }, sessions, teamMarkersFor(teamMarkers, session.id)),
                 workspaceTaskId: task.id,
             })),
         });
@@ -833,7 +846,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             return;
         }
         try {
-            moveSessionToWorkspaceTask(storage, sessionId, req.params.taskId);
+            storage.moveSessionToWorkspaceTask(sessionId, req.params.taskId);
             sessions?.refreshSessionWorkspace(sessionId);
             res.json({ ok: true });
         }
@@ -864,8 +877,6 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             patch.milestoneId = milestoneId || defaultMilestoneIdForWrite(storage);
         }
         storage.updateWorkspaceTask(existing.id, patch);
-        if (patch.status === "done")
-            archiveBoardTaskForWorkspaceTask(storage, existing.id);
         const updated = storage.getWorkspaceTask(existing.id);
         res.json({
             ...updated,
@@ -879,7 +890,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             res.status(404).json({ error: "未找到该任务。" });
             return;
         }
-        archiveWorkspaceTask(storage, existing);
+        storage.archiveWorkspaceTask(existing.id);
         const archived = storage.getWorkspaceTask(existing.id);
         res.json({
             ...archived,
@@ -908,10 +919,6 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         // 尽力清理 worktree 与分支；失败不阻塞删除任务行。
         if (cascade)
             cleanupWorktreeSync(existing.worktree);
-        archiveBoardTaskForWorkspaceTask(storage, existing.id);
-        const board = storage.getWandTaskByWorkspaceTaskId(existing.id);
-        if (board)
-            storage.updateWandTask(board.id, { workspaceTaskId: null, status: "archived" });
         storage.deleteWorkspaceTask(existing.id, { cascade });
         res.json({ ok: true });
     });

package/dist/server.js

@@ -48,7 +48,6 @@ import { RuntimeConfigState } from "./runtime-config.js";
 import { safeServiceInstalled } from "./tui/runtime-utils.js";
 import { checkManagedServiceUpdatePreflight, } from "./update-helper.js";
 import { toSessionDetailDTO } from "./session-transport.js";
-import { syncWorkspaceTaskToBoard } from "./wand-task-sync.js";
 import { registerUploadRoutes } from "./upload-routes.js";
 import { optimizePrompt, PromptOptimizeError } from "./prompt-optimizer.js";
 import { resolveDatabasePath, WandStorage } from "./storage.js";
@@ -57,12 +56,13 @@ import { DistributionManager } from "./distribution-manager.js";
 import { isLogBusActive, wandTuiLog } from "./tui/log-bus.js";
 import { EMBEDDED_WEB_ASSETS } from "./web-ui/embedded-assets.js";
 import { renderApp } from "./web-ui/index.js";
-import { getAiTeamsChunk } from "./web-ui/scripts.js";
+import { getAiTeamsChunk, getScriptAsset } from "./web-ui/scripts.js";
+import { getStylesAsset } from "./web-ui/styles.js";
 import { WsBroadcastManager } from "./ws-broadcast.js";
 import { TerminalDaemonClient } from "./terminal-daemon-client.js";
 import { createUpgradeAwareTerminalHost } from "./render-host.js";
 import { createUpgradeAwareStructuredHost } from "./render-structured-host.js";
-import { checkRateLimit, recordFailedLogin, resetRateLimit } from "./middleware/rate-limit.js";
+import { checkPasswordRateLimit, recordFailedPassword, resetPasswordRateLimit } from "./middleware/rate-limit.js";
 import { updateProviderClis, verifyProviderCliUpdateResults, } from "./provider-cli-updater.js";
 const SERVER_MODULE_DIR = path.dirname(new URL(import.meta.url).pathname);
 const RUNTIME_ROOT_DIR = path.resolve(SERVER_MODULE_DIR, "..");
@@ -70,7 +70,7 @@ const RUNTIME_ROOT_DIR = path.resolve(SERVER_MODULE_DIR, "..");
 const PKG_JSON = JSON.parse(readFileSync(path.join(RUNTIME_ROOT_DIR, "package.json"), "utf8"));
 const PKG_NAME = PKG_JSON.name;
 const PKG_VERSION = PKG_JSON.version;
-const PKG_NODE_REQ = PKG_JSON.engines?.node ?? ">=22.5.0";
+const PKG_NODE_REQ = PKG_JSON.engines?.node ?? ">=26.10.0";
 const PKG_REPO_URL = "https://github.com/co0ontty/wand";
 /** 结构化聊天头像允许的图片类型；未知扩展名回 415。 */
 const AVATAR_CONTENT_TYPES = {
@@ -349,6 +349,8 @@ export async function startServer(config, configPath, options = {}) {
     const missions = new Missions(storage, structuredSessions, sessionRegistry);
     // wsManager 在后面才建：团队运行的变更通知经由这个转发口，接好之前静默丢弃。
     let notifyAiTeamRun = (_data) => { };
+    // 运行中步骤的 live 文本推送（§4.9），同样走系统通知，接好之前静默丢弃。
+    let notifyAiTeamRunLive = (_update) => { };
     // 团队降级的 model-unknown 事前比对只看这份已发现的清单；没刷新过就是空，判定方向是放行。
     const aiTeamModelIds = (provider) => {
         const cache = modelCatalog.snapshot();
@@ -365,7 +367,10 @@ export async function startServer(config, configPath, options = {}) {
     const aiTeams = createAiTeamRunner({
         storage, config, structured: structuredSessions, processes, sessions: sessionRegistry,
         notify: (run) => notifyAiTeamRun({ kind: "ai-team-run", runId: run.id, taskId: run.taskId }),
+        notifyLive: (update) => notifyAiTeamRunLive(update),
         models: aiTeamModelIds,
+        // 成员名单里的模型名：`default` 哨兵换成服务端为该 CLI 配置的默认模型。
+        defaultModelOf: (provider) => getDefaultModelForProvider(config, provider),
     });
     const updateState = new ServerUpdateState();
     const getUpdateChannel = () => normalizeUpdateChannel(storage.getConfigValue("updateChannel"));
@@ -412,20 +417,36 @@ export async function startServer(config, configPath, options = {}) {
         }
         next();
     });
-    const sendEmbeddedVendorAsset = (assetPath, _req, res) => {
+    const requestedHash = (req) => typeof req.query.v === "string" ? req.query.v : undefined;
+    const setAssetCache = (req, res, hash, visibility) => {
+        // Never cache new bytes under an old URL after a package replacement. An old
+        // process can still serve its embedded version; a new process serves current
+        // bytes without caching the mismatch so an in-flight page remains usable.
+        res.setHeader("Cache-Control", requestedHash(req) === hash
+            ? `${visibility}, max-age=31536000, immutable`
+            : "no-store");
+    };
+    const sendEmbeddedVendorAsset = (assetPath, req, res) => {
         const asset = EMBEDDED_WEB_ASSETS.vendor[assetPath];
-        res.setHeader("Cache-Control", "public, max-age=604800, immutable");
+        setAssetCache(req, res, asset.hash, "public");
         res.type(asset.contentType).send(asset.content);
     };
     app.get("/vendor/xterm/xterm.bundle.js", (req, res) => sendEmbeddedVendorAsset("/vendor/xterm/xterm.bundle.js", req, res));
     app.get("/vendor/xterm/xterm.css", (req, res) => sendEmbeddedVendorAsset("/vendor/xterm/xterm.css", req, res));
     app.get("/vendor/qrcode/qrcode.bundle.js", (req, res) => sendEmbeddedVendorAsset("/vendor/qrcode/qrcode.bundle.js", req, res));
-    // AI 团队页按需脚本：页面 meta 里的地址带内容 hash，hash 对得上才长缓存。
+    app.get("/assets/app.css", (req, res) => {
+        const asset = getStylesAsset(requestedHash(req));
+        setAssetCache(req, res, asset.hash, "public");
+        res.type("text/css").send(asset.content);
+    });
+    app.get("/assets/app.js", (req, res) => {
+        const asset = getScriptAsset(configPath, requestedHash(req));
+        setAssetCache(req, res, asset.hash, "private");
+        res.type("application/javascript").send(asset.content);
+    });
     app.get("/assets/ai-teams.js", (req, res) => {
-        const chunk = getAiTeamsChunk();
-        res.setHeader("Cache-Control", req.query.v === chunk.hash
-            ? "public, max-age=604800, immutable"
-            : "no-cache");
+        const chunk = getAiTeamsChunk(requestedHash(req));
+        setAssetCache(req, res, chunk.hash, "public");
         res.type("application/javascript").send(chunk.content);
     });
     // ── Web UI endpoints ──
@@ -467,14 +488,13 @@ export async function startServer(config, configPath, options = {}) {
     // ── Auth routes ──
     app.post("/api/login", (req, res) => {
         const clientIp = req.ip || req.socket.remoteAddress || "unknown";
-        if (!checkRateLimit(clientIp)) {
-            res.status(429).json({ error: "登录尝试次数过多，请在 15 分钟后再试。" });
-            return;
-        }
         const { password, appToken, client } = req.body;
         const effectivePassword = getEffectivePassword(storage, config);
         // App token login is intentionally restricted even though the token remains
         // password-derived for compatibility with existing connect codes.
+        // A stale token gets 401 without feeding the counter: the client cannot fix it by
+        // retrying, and one device holding one used to lock out every user behind the same
+        // reverse proxy IP. An active lock still gates unverified attempts.
         let principal = null;
         if (appToken) {
             try {
@@ -486,15 +506,27 @@ export async function startServer(config, configPath, options = {}) {
                 principal = null;
             }
         }
+        if (!principal) {
+            const lock = checkPasswordRateLimit(clientIp);
+            if (lock) {
+                const minutes = Math.max(1, Math.ceil(lock.retryAfter / 60));
+                res.setHeader("Retry-After", String(lock.retryAfter));
+                res
+                    .status(429)
+                    .json({ error: `登录尝试次数过多，请在约 ${minutes} 分钟后再试。`, retryAfter: lock.retryAfter });
+                return;
+            }
+        }
         if (!principal) {
             if (password !== effectivePassword) {
-                recordFailedLogin(clientIp);
+                if (!appToken)
+                    recordFailedPassword(clientIp);
                 res.status(401).json({ error: "密码错误，请重试。" });
                 return;
             }
             principal = { ...BROWSER_ADMIN_PRINCIPAL, scopes: [...BROWSER_ADMIN_PRINCIPAL.scopes] };
         }
-        resetRateLimit(clientIp);
+        resetPasswordRateLimit(clientIp);
         const token = authService.createSession(principal);
         const cookieOpts = {
             httpOnly: true,
@@ -676,7 +708,11 @@ export async function startServer(config, configPath, options = {}) {
     registerGithubRoutes(app, { storage, requireAdmin, sessions: sessionRegistry });
     // 任务管理与 Missions 一样只需登录：原生 connected-app 也要能列/建/派发。
     registerTaskRoutes(app, { storage, sessions: sessionRegistry, structured: structuredSessions, processes, config });
-    registerAiTeamRoutes(app, { storage, runner: aiTeams });
+    registerAiTeamRoutes(app, {
+        storage,
+        runner: aiTeams,
+        notifyTeamChanged: (teamId) => notifyAiTeamRun({ kind: "ai-team-definition", teamId }),
+    });
     registerAttentionRoutes(app, { sessions: sessionRegistry, runner: aiTeams });
     registerAdminUpdateRoutes(app, {
         storage,
@@ -708,7 +744,7 @@ export async function startServer(config, configPath, options = {}) {
     registerClaudeHistoryRoutes(app, processes, storage);
     registerWorkspaceRoutes(app, storage, sessionRegistry, { config });
     registerMissionRoutes(app, missions);
-    registerUploadRoutes(app, processes);
+    registerUploadRoutes(app, sessionRegistry);
     app.post("/api/optimize-prompt", asyncRoute(async (req, res) => {
         const body = (req.body ?? {});
         const text = typeof body.text === "string" ? body.text : "";
@@ -800,8 +836,6 @@ export async function startServer(config, configPath, options = {}) {
                     ...origin,
                 }));
             recordRecentPath(storage, snapshot.cwd);
-            // 会话一落地就挂到任务的看板卡片上，不等下一次看板列表的兜底同步。
-            syncWorkspaceTaskToBoard(storage, snapshot.workspaceTaskId);
             res.status(201).json(toSessionDetailDTO(snapshot));
         }
         catch (error) {
@@ -885,6 +919,11 @@ export async function startServer(config, configPath, options = {}) {
     notifyAiTeamRun = (data) => {
         wsManager.emitEvent({ type: "notification", sessionId: "__system__", data });
     };
+    notifyAiTeamRunLive = (update) => {
+        wsManager.emitEvent({
+            type: "notification", sessionId: "__system__", data: { kind: "ai-team-step-live", ...update },
+        });
+    };
     // Re-attach structured CLI runs that kept going inside terminald while the
     // previous web process was down; fire-and-forget, failures are logged inside.
     void structuredSessions.recoverDetachedRuns();

package/dist/storage.d.ts

@@ -1,6 +1,6 @@
 import { SessionSnapshot, ConversationTurn, SessionProvider, StructuredSessionState, Workspace, LayoutNode, TaskWindowLayout, WorkspaceDefaultProvider, WorkspaceKind, WorkspaceTask, WorkspaceTaskWorktree, WorkspaceTaskStatus } from "./types.js";
-import type { AiTeam, AiTeamRun, AiTeamRunChatMarker, AiTeamRunStatus, AiTeamStep, CandidateFailureKind, StepDispatchInfo } from "./ai-team-types.js";
-import type { WandTaskAgentKind } from "./task-types.js";
+import type { AiTeam, AiTeamRun, AiTeamRunChatMarker, AiTeamRunStatus, AiTeamStep, AiTeamStepSessionMarker, CandidateFailureKind, StepDispatchInfo } from "./ai-team-types.js";
+import type { WandTask, WandTaskAgent, WandTaskAgentKind, WandTaskTitleSource } from "./task-types.js";
 import type { AgentActivityItem, Mission, MissionAttempt, MissionReviewComment, MissionReviewStatus, MissionStatus } from "./mission-types.js";
 import { type PasswordVault, type PasswordVaultItem, type PasswordVaultItemFilter, type PasswordVaultItemInput } from "./password-manager.js";
 /** `ai_team_runs.run_state_json`：本次运行的候选黑名单（§3.4 修正 B12 两层键值 + host-disabled）。 */
@@ -42,6 +42,21 @@ export interface PersistedAuthSession {
 }
 export declare function resolveDatabasePath(configPath: string): string;
 export declare function ensureDatabaseFile(dbPath: string): boolean;
+interface CreateWandTaskInput {
+    workspaceId?: string | null;
+    workspaceTaskId?: string | null;
+    parentTaskId?: string | null;
+    title: string;
+    titleSource?: WandTaskTitleSource;
+    description?: string;
+    status?: WandTask["status"];
+    priority?: WandTask["priority"];
+    labels?: string[];
+    dueDate?: string | null;
+    milestoneId?: string | null;
+    agent?: WandTaskAgent | null;
+}
+type WandTaskPatch = Partial<Pick<WandTask, "workspaceId" | "workspaceTaskId" | "parentTaskId" | "title" | "titleSource" | "autoTitleSignature" | "description" | "status" | "priority" | "labels" | "dueDate" | "milestoneId" | "sortOrder" | "agent">>;
 export declare class WandStorage {
     private readonly db;
     private readonly dbPath;
@@ -112,9 +127,11 @@ export declare class WandStorage {
         cwd: string;
         worktree: SessionSnapshot["worktree"];
     }>;
-    /** 侧栏任务顺序：新创建在前。GET /api/tasks 按此顺序填充目录组。 */
+    /** Both task DTOs read one set of task metadata; containers own only local layout/worktree. */
     listWorkspaceTasks(workspaceId: string): WorkspaceTask[];
     getWorkspaceTask(id: string): WorkspaceTask | null;
+    private insertWorkspaceTask;
+    private taskMilestoneForWrite;
     createWorkspaceTask(input: {
         workspaceId: string;
         name: string;
@@ -122,6 +139,11 @@ export declare class WandStorage {
         cwd?: string | null;
         status?: WorkspaceTaskStatus;
         milestoneId?: string | null;
+        board?: {
+            titleSource?: WandTaskTitleSource;
+            description?: string;
+            parentTaskId?: string | null;
+        };
     }): WorkspaceTask;
     updateWorkspaceTask(id: string, patch: {
         name?: string;
@@ -130,6 +152,7 @@ export declare class WandStorage {
         milestoneId?: string | null;
         workspaceId?: string;
     }): void;
+    archiveWorkspaceTask(id: string): WandTask | null;
     saveWorkspaceTaskLayout(id: string, layout: TaskWindowLayout | null, expectedRevision?: number): {
         ok: true;
         layoutRevision: number;
@@ -144,27 +167,26 @@ export declare class WandStorage {
         cascade?: boolean;
     }): void;
     tasksAggregateFingerprint(): string;
+    /**
+     * 会话列表团队标记的廉价指纹：运行/步骤状态一变，`/api/tasks` 里的 `teamChat`/`teamStep`
+     * 就跟着变，客户端必须肯重拉。只看聚合值和最近若干条状态，不逐行拼整张表。
+     */
+    teamSessionFingerprint(): string;
     /** GET /api/wand-tasks 的顺序：新创建在前。客户端按此顺序渲染，不再本地排序。 */
     listWandTasks(workspaceId?: string | null): import("./task-types.js").WandTask[];
     private mapWandTaskRow;
-    getWandTask(id: string): import("./task-types.js").WandTask | null;
-    getWandTaskByWorkspaceTaskId(workspaceTaskId: string): import("./task-types.js").WandTask | null;
-    createWandTask(input: {
-        workspaceId?: string | null;
-        workspaceTaskId?: string | null;
-        parentTaskId?: string | null;
-        title: string;
-        titleSource?: import("./task-types.js").WandTaskTitleSource;
-        description?: string;
-        status?: import("./task-types.js").WandTaskStatus;
-        priority?: import("./task-types.js").WandTaskPriority;
-        labels?: string[];
-        dueDate?: string | null;
-        milestoneId?: string | null;
-        agent?: import("./task-types.js").WandTaskAgent | null;
-    }): import("./task-types.js").WandTask;
-    updateWandTask(id: string, patch: Partial<Pick<import("./task-types.js").WandTask, "workspaceId" | "workspaceTaskId" | "parentTaskId" | "title" | "titleSource" | "autoTitleSignature" | "description" | "status" | "priority" | "labels" | "dueDate" | "milestoneId" | "sortOrder" | "agent">>): import("./task-types.js").WandTask | null;
+    getWandTask(id: string): WandTask | null;
+    getWandTaskByWorkspaceTaskId(workspaceTaskId: string): WandTask | null;
+    private insertWandTask;
+    createWandTask(input: CreateWandTaskInput): WandTask;
+    /** Private canonical writer; callers own the transaction, never a reverse writer. */
+    private writeWandTask;
+    updateWandTask(id: string, patch: WandTaskPatch): WandTask | null;
+    /** Commit completion archives only the selected completed cards, atomically. */
+    archiveCompletedWandTasks(ids: readonly string[]): string[];
     deleteWandTask(id: string): void;
+    /** One-time id-based reconciliation; normal reads never create tasks or repair membership. */
+    private migrateTaskRecords;
     /**
      * 里程碑列表。传工作区 id 时返回「该工作区 + 全局（workspace_id IS NULL）」；
      * 未指定工作区（null / undefined / 空串）时返回全部。
@@ -224,12 +246,17 @@ export declare class WandStorage {
     listIterationPromptsByIds(ids: readonly string[]): import("./task-types.js").WandIterationPrompt[];
     /** 标记这些记录已被某次提交用掉，下一轮「上次提交以来」从这里开始。 */
     markIterationPromptsConsumed(ids: readonly string[], commit: string): number;
-    /** 会话绑定的看板任务 id；没绑或已删除时返回 null。 */
+    /** Live membership has a single owner: command_sessions.workspace_task_id. */
     getWandTaskIdForSession(sessionId: string): string | null;
+    private legacyWandTaskSessionIds;
     listWandTaskSessionIds(taskId: string): string[];
     listBoundWandTaskSessionIds(): string[];
     bindWandTaskSession(taskId: string, sessionId: string): void;
     unbindWandTaskSession(taskId: string, sessionId: string): void;
+    /** Atomic exclusive ownership change; cwd, output and execution are untouched. */
+    moveSessionToWorkspaceTask(sessionId: string, taskId: string | null): void;
+    /** Metadata promotion happens on session creation/move, never on reads or checkpoints. */
+    private recordTaskSession;
     listGithubIssueBindings(owner: string, repo: string, issueNumber: number): Array<{
         sessionId: string;
         boundAt: string;
@@ -296,6 +323,12 @@ export declare class WandStorage {
      * 一次查询建整张表，供 /api/tasks 每请求一次构建；不逐会话查询。
      */
     listAiTeamRunChatMarkers(): Map<string, AiTeamRunChatMarker>;
+    /**
+     * 会话列表用的成员步骤标记：session_id → 这一步的身份。
+     * 和 `listAiTeamRunChatMarkers()` 一样一次查询建整张表，供 /api/tasks 每请求一次构建。
+     * 同一个会话被多个步骤复用时取 seq 最大的那一步（最近一次派发）。
+     */
+    listAiTeamStepSessionMarkers(): Map<string, AiTeamStepSessionMarker>;
     getAiTeamRun(id: string): AiTeamRun | null;
     listAiTeamRuns(filter?: {
         taskId?: string;