@co0ontty/wand 4.82.0 → 4.83.1

package/dist/session-provider.js

@@ -1,16 +1,9 @@
 import { constants, accessSync, statSync } from "node:fs";
 import path from "node:path";
-/** 全部受支持的会话 provider；顺序与 UI / 派发选择器一致。 */
-export const SESSION_PROVIDERS = ["claude", "codex", "opencode", "grok", "qoder", "pi", "gemini"];
-const SESSION_PROVIDER_SET = new Set(SESSION_PROVIDERS);
-/** 运行时守卫：把配置、数据库、请求体里的任意值收敛成 SessionProvider。 */
-export function isSessionProvider(value) {
-    return typeof value === "string" && SESSION_PROVIDER_SET.has(value);
-}
-/** provider 对应的 CLI 可执行文件名（Qoder 的 CLI 叫 qodercli）。 */
-export function providerCliCommand(provider) {
-    return provider === "qoder" ? "qodercli" : provider;
-}
+import { providerCliCommand } from "./provider-catalog.js";
+// Provider 列表、别名、展示名与推断规则全部收敛在 src/provider-catalog.ts（浏览器层同用）。
+// 这里只保留服务端特有的、需要 node:fs 的能力。
+export { SESSION_PROVIDERS, isSessionProvider, providerCliCommand, providerDisplayName, inferProviderFromRunner, inferProviderFromCommand, normalizeProviderId, } from "./provider-catalog.js";
 /**
  * 不启动 shell 也能判断某个 provider 的 CLI 是否在 PATH 上（与子进程 PATH 一致）。
  * 用于多候选降级时跳过没安装的工具，避免白等一次 spawn 失败。
@@ -30,46 +23,3 @@ export function providerCliInstalled(provider, pathValue = process.env.PATH ?? "
     }
     return false;
 }
-/** 从 runner 名推断 provider；`pty` 等与 provider 无关的 runner 返回 undefined。 */
-export function inferProviderFromRunner(runner) {
-    if (runner === "claude-cli" || runner === "claude-cli-print" || runner === "claude-sdk")
-        return "claude";
-    if (runner === "codex-cli-exec")
-        return "codex";
-    if (runner === "opencode-cli-run")
-        return "opencode";
-    if (runner === "grok-cli-headless")
-        return "grok";
-    if (runner === "qoder-cli-print")
-        return "qoder";
-    if (runner === "pi-cli-json")
-        return "pi";
-    if (runner === "gemini-cli-json")
-        return "gemini";
-    return undefined;
-}
-/**
- * 从启动命令推断 provider；无法识别时返回 undefined，由调用方决定默认值。
- *
- * 识别的是命令行的第一个 token：`claude`、`npx claude`、任意路径下的 `claude`
- * 都算 Claude，其余 provider 要求命令以其 CLI 名开头。
- */
-export function inferProviderFromCommand(command) {
-    const value = command.trim();
-    if (/^(?:claude|npx\s+claude|[^\s]+\/claude)(?:\s|$)/i.test(value))
-        return "claude";
-    if (/^codex\b/i.test(value))
-        return "codex";
-    if (/^opencode\b/i.test(value))
-        return "opencode";
-    if (/^grok\b/i.test(value))
-        return "grok";
-    if (/^qodercli\b/i.test(value))
-        return "qoder";
-    if (/^pi\b/i.test(value))
-        return "pi";
-    // Gemini CLI 的可执行文件就叫 gemini；-p / --prompt 等参数不影响首 token 识别。
-    if (/^gemini\b/i.test(value))
-        return "gemini";
-    return undefined;
-}

package/dist/session-registry.d.ts

@@ -31,6 +31,11 @@ export declare class SessionRegistry {
     setSessionThinkingEffort(id: string, effort: SessionSnapshot["thinkingEffort"]): SessionSnapshot | null;
     setSessionMode(id: string, mode: ExecutionMode): SessionSnapshot | null;
     setSessionTopic(id: string, title: string, description: string): SessionSnapshot | null;
+    /**
+     * 归档 / 取消归档一个会话：只写标记，不杀进程、不删历史；真正的清理留给保留期扫描。
+     * 会话可能只存在于 storage（重启后未加载），因此 storage-only 也要能改。
+     */
+    setArchived(id: string, archived: boolean): SessionSnapshot | null;
     updateWorktreeState(id: string, status: SessionSnapshot["worktreeMergeStatus"], info: SessionSnapshot["worktreeMergeInfo"]): SessionSnapshot | null;
     delete(id: string): SessionSnapshot | null;
     deleteWithProviderHistory(id: string): SessionSnapshot | null;

package/dist/session-registry.js

@@ -67,7 +67,7 @@ export class SessionRegistry {
     get(id) {
         const snapshot = this.structured.get(id) ?? this.processes.getOwned(id) ?? this.storage.getSession(id);
         const membership = this.storage.getSessionWorkspace(id);
-        return snapshot && membership ? { ...snapshot, ...membership } : snapshot;
+        return snapshot ? { ...snapshot, ...membership, ...this.storage.getSessionCompletion(id) } : null;
     }
     getLatest(id) {
         return this.get(id);
@@ -84,6 +84,8 @@ export class SessionRegistry {
             const live = byId.get(snapshot.id);
             byId.set(snapshot.id, live ? {
                 ...live, workspaceId: snapshot.workspaceId, workspaceTaskId: snapshot.workspaceTaskId,
+                completionRevision: snapshot.completionRevision,
+                viewedCompletionRevision: snapshot.viewedCompletionRevision,
             } : snapshot);
         }
         return Array.from(byId.values()).sort((a, b) => b.startedAt.localeCompare(a.startedAt));
@@ -137,6 +139,22 @@ export class SessionRegistry {
             return this.processes.setSessionTopic(id, title, description);
         return this.updateStored(id, (snapshot) => ({ ...snapshot, title, description, summary: description }));
     }
+    /**
+     * 归档 / 取消归档一个会话：只写标记，不杀进程、不删历史；真正的清理留给保留期扫描。
+     * 会话可能只存在于 storage（重启后未加载），因此 storage-only 也要能改。
+     */
+    setArchived(id, archived) {
+        const owner = this.ownerOf(id);
+        if (owner === "structured")
+            return this.structured.setSessionArchived(id, archived);
+        if (owner === "pty")
+            return this.processes.setSessionArchived(id, archived);
+        return this.updateStored(id, (snapshot) => ({
+            ...snapshot,
+            archived,
+            archivedAt: archived ? new Date().toISOString() : null,
+        }));
+    }
     updateWorktreeState(id, status, info) {
         const owner = this.ownerOf(id);
         if (owner === "structured")

package/dist/session-transport.js

@@ -50,6 +50,8 @@ function sessionBase(snapshot) {
         exitCode: snapshot.exitCode,
         startedAt: snapshot.startedAt,
         endedAt: snapshot.endedAt,
+        completionRevision: snapshot.completionRevision ?? 0,
+        viewedCompletionRevision: snapshot.viewedCompletionRevision ?? 0,
         archived: snapshot.archived,
         archivedAt: snapshot.archivedAt,
         permissionBlocked: snapshot.permissionBlocked,

package/dist/storage.d.ts

@@ -345,6 +345,10 @@ export declare class WandStorage {
     issueEmployeeKnowledgeAccess(sessionId: string, employeeId: string, now?: number): string;
     resolveEmployeeKnowledgeAccess(token: string, now?: number): string | null;
     revokeEmployeeKnowledgeAccess(token: string): void;
+    /** Inference-only capability; never accepted by general HTTP authentication. */
+    issueDecisionAccess(sessionId: string, now?: number): string;
+    resolveDecisionAccess(token: string, now?: number): string | null;
+    revokeDecisionAccess(token: string): void;
     /** No IO on input hot paths; queued observations still CAS against the database before writing. */
     userMemoryCaptureState(): Readonly<{
         enabled: boolean;
@@ -412,6 +416,14 @@ export declare class WandStorage {
     upsertAgentActivity(item: AgentActivityItem): void;
     listAgentActivity(): AgentActivityItem[];
     markAgentActivityRead(sessionId?: string): void;
+    /** Completion/read state is independent of runner checkpoints and survives restarts. */
+    getSessionCompletion(id: string): {
+        completionRevision: number;
+        viewedCompletionRevision: number;
+    } | null;
+    recordSessionCompletion(id: string): ReturnType<WandStorage["getSessionCompletion"]>;
+    /** A delayed view of generation N must never consume a newer completion N+1. */
+    markSessionCompletionViewed(id: string, revision: number): boolean;
     saveSession(snapshot: SessionSnapshot): void;
     /** Update runtime/scalar fields without serializing or rewriting messages/output. */
     updateSessionRuntimeMetadata(snapshot: SessionSnapshot): void;

package/dist/storage.js

@@ -8,12 +8,13 @@ import { inferProviderFromCommand, inferProviderFromRunner, isSessionProvider, S
 import { DEFAULT_ITERATION_NAME, DEFAULT_WAND_TASK_AGENT_KIND, DEFAULT_WAND_TASK_PRIORITY, isWandTaskAgentKind, normalizeWandTaskAgentMode } from "./task-types.js";
 import { firstLayoutTabId } from "./layout-tree.js";
 import { isUnnamedWorkspaceTaskName } from "./wand-task-sync.js";
-import { AI_TEAM_DEFAULT_MAX_STEPS, AI_TEAM_TERMINAL_RUN_STATUSES, aiTeamChatTitle, isTeamMemberRole, memberAgents } from "./ai-team-types.js";
+import { AI_TEAM_DEFAULT_MAX_STEPS, AI_TEAM_TERMINAL_RUN_STATUSES, aiTeamChatTitle, isBuiltinSiliconEmployee, isTeamMemberRole, memberAgents, parseSiliconEmployeeTags, siliconEmployeeTags } from "./ai-team-types.js";
+import { freezeTeamEmployees, projectTeamDefinition, restoreTeamMemberEmployee, serializeExecutionTeam } from "./ai-team-employee-binding.js";
 import { isTaskExecutionSubject } from "./task-types.js";
 import { SYSTEM_EMPLOYEE_KEY, systemEmployeeDefinition, systemEmployeeSeedAgents, } from "./system-employee.js";
 import { isThinkingEffort } from "./structured-provider-common.js";
 import { DEFAULT_EMPLOYEE_KEY } from "./ai-team-types.js";
-import { defaultEmployeeDefinition } from "./default-employee.js";
+import { defaultEmployeeDefinition, legacyPtyRoleIdentity } from "./default-employee.js";
 import { normalizeEmployeeKnowledge } from "./employee-knowledge-content.js";
 import { EMPLOYEE_KNOWLEDGE_MAX_ENTRIES } from "./employee-knowledge-types.js";
 import { USER_MEMORY_MAX_EVENTS, USER_MEMORY_RETENTION_MS, } from "./user-memory-types.js";
@@ -302,7 +303,7 @@ function mapWorktreeMergeFields(row) {
 }
 function sessionSelectFields(slim = false) {
     return `id, session_source, automation_id, provider, session_kind, runner, command, cwd, mode, status, exit_code, started_at, ended_at, ${slim ? "'' AS output" : "output"}, pty_output_seq, archived, archived_at, claude_session_id, ${slim ? "NULL AS messages" : "messages"}, queued_messages, queued_message_skills, structured_state
-             , resumed_from_session_id, auto_recovered, worktree_enabled, worktree_info, worktree_merge_status, worktree_merge_info, title, description, session_options, workspace_id, workspace_task_id`;
+             , resumed_from_session_id, auto_recovered, worktree_enabled, worktree_info, worktree_merge_status, worktree_merge_info, title, description, session_options, workspace_id, workspace_task_id, completion_revision, viewed_completion_revision`;
 }
 function mapWorkspaceKind(raw) {
     return raw === "global" ? "global" : "project";
@@ -497,6 +498,8 @@ function mapSessionCore(row) {
         exitCode: row.exit_code,
         startedAt: row.started_at,
         endedAt: row.ended_at,
+        completionRevision: row.completion_revision ?? 0,
+        viewedCompletionRevision: row.viewed_completion_revision ?? 0,
         output: row.output,
         ptyOutputSeq: row.pty_output_seq,
         archived: Boolean(row.archived),
@@ -515,6 +518,7 @@ function mapSessionCore(row) {
         workspaceTaskId: row.workspace_task_id ?? undefined,
         ...mapWorktreeMergeFields(row),
         ...sessionOptions,
+        ...legacyPtyRoleIdentity({ ...sessionOptions, sessionKind: row.session_kind ?? "pty", provider }),
         ...(Object.prototype.hasOwnProperty.call(sessionOptions, "pendingEscalation")
             ? { permissionBlocked: Boolean(sessionOptions.pendingEscalation) }
             : {}),
@@ -781,6 +785,7 @@ const INIT_SQL = `
     parent_task_id TEXT,
     title_source TEXT,
     auto_title_signature TEXT,
+    archived_at TEXT,
     created_at TEXT NOT NULL,
     updated_at TEXT NOT NULL,
     FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE SET NULL
@@ -839,6 +844,13 @@ const INIT_SQL = `
   );
   CREATE INDEX IF NOT EXISTS idx_employee_knowledge_access_expiry ON employee_knowledge_access(expires_at);
 
+  CREATE TABLE IF NOT EXISTS decision_access (
+    token_hash TEXT PRIMARY KEY,
+    session_id TEXT NOT NULL REFERENCES command_sessions(id) ON DELETE CASCADE,
+    expires_at INTEGER NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS idx_decision_access_expiry ON decision_access(expires_at);
+
   CREATE TABLE IF NOT EXISTS user_memory_events (
     id INTEGER PRIMARY KEY AUTOINCREMENT,
     feature TEXT NOT NULL,
@@ -935,6 +947,9 @@ function ensureAiTeamSchema(db) {
     if (employeeColumns.size > 0 && !employeeColumns.has("system_key")) {
         db.exec("ALTER TABLE silicon_employees ADD COLUMN system_key TEXT");
     }
+    if (employeeColumns.size > 0 && !employeeColumns.has("tags_json")) {
+        db.exec("ALTER TABLE silicon_employees ADD COLUMN tags_json TEXT NOT NULL DEFAULT '[]'");
+    }
 }
 function ensureWandTaskSchema(db) {
     const columns = db.prepare("PRAGMA table_info(wand_tasks)").all();
@@ -962,6 +977,9 @@ function ensureWandTaskSchema(db) {
     // 里程碑：只加列，历史行保持 NULL；里程碑本体在 wand_milestones（INIT_SQL 建表）。
     if (columns.length > 0 && !names.has("milestone_id"))
         db.exec("ALTER TABLE wand_tasks ADD COLUMN milestone_id TEXT");
+    // 归档时间（自动/手动归档都写它）：保留期清理按它起算 7 天，历史归档行保持 NULL。
+    if (columns.length > 0 && !names.has("archived_at"))
+        db.exec("ALTER TABLE wand_tasks ADD COLUMN archived_at TEXT");
     if (columns.length > 0) {
         // Index creation must wait until the column exists on legacy databases.
         // INIT_SQL cannot create it: CREATE TABLE IF NOT EXISTS is a no-op on old
@@ -1086,7 +1104,7 @@ export function ensureDatabaseFile(dbPath) {
 }
 const WAND_TASK_FIELDS = `id, identifier, workspace_id, workspace_task_id, parent_task_id,
   title, title_source, auto_title_signature, description, status, priority, labels_json,
-  due_date, milestone_id, sort_order, agent_json, execution_subject_json, created_at, updated_at`;
+  due_date, milestone_id, sort_order, agent_json, execution_subject_json, archived_at, created_at, updated_at`;
 // Shared metadata comes from the latest explicitly linked card, including meaningful NULLs.
 // The old container columns remain readable for legacy rows until the startup migration.
 const WORKSPACE_TASK_PROJECTION = `SELECT wt.id,
@@ -1559,9 +1577,12 @@ export class WandStorage {
     }
     tasksAggregateFingerprint() {
         const sessions = this.db.prepare(`SELECT COUNT(*) AS count,
+              COALESCE(SUM(archived), 0) AS archivedCount,
               COALESCE(MAX(started_at), '') AS started,
               COALESCE(MAX(ended_at), '') AS ended,
-              COALESCE(MAX(title), '') AS title
+              COALESCE(MAX(title), '') AS title,
+              COALESCE(SUM(completion_revision), 0) AS completionRevision,
+              COALESCE(SUM(viewed_completion_revision), 0) AS viewedCompletionRevision
        FROM command_sessions`).get();
         // Per-task metadata catches edits even when another task owns the maximum
         // timestamp/revision. Layout payloads are represented by their own revision.
@@ -1630,6 +1651,7 @@ export class WandStorage {
             })(),
             createdAt: String(row.created_at),
             updatedAt: String(row.updated_at),
+            archivedAt: typeof row.archived_at === "string" && row.archived_at ? row.archived_at : null,
         };
     }
     getWandTask(id) {
@@ -1646,13 +1668,15 @@ export class WandStorage {
     insertWandTask(input, createdAt = nowIso()) {
         const id = crypto.randomUUID();
         const status = input.status ?? "todo";
+        const createdAtValue = createdAt;
+        const archivedAt = status === "archived" ? createdAtValue : null;
         const max = this.db.prepare(`SELECT COALESCE(MAX(sort_order), -1) AS value FROM wand_tasks
       WHERE workspace_id IS ? AND status = ?`).get(input.workspaceId ?? null, status);
         const number = this.db.prepare(`SELECT COALESCE(MAX(CAST(substr(identifier, 6) AS INTEGER)), 0) AS value
       FROM wand_tasks WHERE identifier GLOB 'TASK-[0-9]*'`).get();
         this.db.prepare(`INSERT INTO wand_tasks (${WAND_TASK_FIELDS})
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
-            .run(id, `TASK-${number.value + 1}`, input.workspaceId ?? null, input.workspaceTaskId ?? null, input.parentTaskId ?? null, input.title, input.titleSource ?? "user", null, input.description ?? "", status, input.priority ?? DEFAULT_WAND_TASK_PRIORITY, JSON.stringify(input.labels ?? []), input.dueDate ?? null, input.milestoneId ?? null, max.value + 1, input.agent ? JSON.stringify(input.agent) : null, input.executionSubject ? JSON.stringify(input.executionSubject) : null, createdAt, createdAt);
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(id, `TASK-${number.value + 1}`, input.workspaceId ?? null, input.workspaceTaskId ?? null, input.parentTaskId ?? null, input.title, input.titleSource ?? "user", null, input.description ?? "", status, input.priority ?? DEFAULT_WAND_TASK_PRIORITY, JSON.stringify(input.labels ?? []), input.dueDate ?? null, input.milestoneId ?? null, max.value + 1, input.agent ? JSON.stringify(input.agent) : null, input.executionSubject ? JSON.stringify(input.executionSubject) : null, archivedAt, createdAtValue, createdAtValue);
         return this.getWandTask(id);
     }
     createWandTask(input) {
@@ -1685,6 +1709,14 @@ export class WandStorage {
     /** Private canonical writer; callers own the transaction, never a reverse writer. */
     writeWandTask(current, patch) {
         const next = { ...current, ...patch, updatedAt: nowIso() };
+        // 归档时间只在进入归档时写一次；取消归档/重新打开时清空，恢复“未动多久”重新计时。
+        if (next.status === "archived") {
+            if (!next.archivedAt)
+                next.archivedAt = next.updatedAt;
+        }
+        else {
+            next.archivedAt = null;
+        }
         if (patch.milestoneId !== undefined || patch.workspaceId !== undefined) {
             next.milestoneId = this.taskMilestoneForWrite(next.milestoneId, next.workspaceId);
         }
@@ -1699,9 +1731,10 @@ export class WandStorage {
         }
         this.db.prepare(`UPDATE wand_tasks SET workspace_id = ?, workspace_task_id = ?, parent_task_id = ?,
       title = ?, title_source = ?, auto_title_signature = ?, description = ?, status = ?, priority = ?,
-      labels_json = ?, due_date = ?, milestone_id = ?, sort_order = ?, agent_json = ?, execution_subject_json = ?, updated_at = ?
+      labels_json = ?, due_date = ?, milestone_id = ?, sort_order = ?, agent_json = ?, execution_subject_json = ?,
+      archived_at = ?, updated_at = ?
       WHERE id = ?`)
-            .run(next.workspaceId, next.workspaceTaskId, next.parentTaskId, next.title, next.titleSource, next.autoTitleSignature ?? null, next.description, next.status, next.priority, JSON.stringify(next.labels), next.dueDate, next.milestoneId ?? null, next.sortOrder, next.agent ? JSON.stringify(next.agent) : null, next.executionSubject ? JSON.stringify(next.executionSubject) : null, next.updatedAt, next.id);
+            .run(next.workspaceId, next.workspaceTaskId, next.parentTaskId, next.title, next.titleSource, next.autoTitleSignature ?? null, next.description, next.status, next.priority, JSON.stringify(next.labels), next.dueDate, next.milestoneId ?? null, next.sortOrder, next.agent ? JSON.stringify(next.agent) : null, next.executionSubject ? JSON.stringify(next.executionSubject) : null, next.archivedAt, next.updatedAt, next.id);
         if (patch.workspaceId !== undefined && next.workspaceTaskId) {
             const workspaceId = next.workspaceId ?? this.ensureGlobalWorkspace().id;
             // The container FK/index and standalone session workspace bucket follow the canonical project.
@@ -2416,18 +2449,22 @@ export class WandStorage {
         return existing;
     }
     saveSiliconEmployee(employee) {
+        const tags = isBuiltinSiliconEmployee(employee)
+            ? siliconEmployeeTags(employee)
+            : parseSiliconEmployeeTags(employee.tags ?? []);
         this.db.prepare(`INSERT INTO silicon_employees (
-         id, name, duty, prompt, avatar, agents_json, system_key, archived_at, created_at, updated_at
-       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         id, name, duty, prompt, avatar, agents_json, system_key, archived_at, created_at, updated_at, tags_json
+       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ON CONFLICT(id) DO UPDATE SET
          name = excluded.name,
          duty = excluded.duty,
          prompt = excluded.prompt,
          avatar = excluded.avatar,
          agents_json = excluded.agents_json,
+         tags_json = excluded.tags_json,
          system_key = excluded.system_key,
          archived_at = excluded.archived_at,
-         updated_at = excluded.updated_at`).run(employee.id, employee.name, employee.duty, employee.prompt, employee.avatar, JSON.stringify(employee.agents), employee.systemKey ?? null, employee.archivedAt ?? null, employee.createdAt, employee.updatedAt);
+         updated_at = excluded.updated_at`).run(employee.id, employee.name, employee.duty, employee.prompt, employee.avatar, JSON.stringify(employee.agents), employee.systemKey ?? null, employee.archivedAt ?? null, employee.createdAt, employee.updatedAt, JSON.stringify(tags));
     }
     archiveSiliconEmployee(id, archivedAt = new Date().toISOString()) {
         this.db.prepare("UPDATE silicon_employees SET archived_at = ?, updated_at = ? WHERE id = ?").run(archivedAt, new Date().toISOString(), id);
@@ -2530,6 +2567,27 @@ export class WandStorage {
         this.db.prepare("DELETE FROM employee_knowledge_access WHERE token_hash = ?")
             .run(crypto.createHash("sha256").update(token).digest("hex"));
     }
+    /** Inference-only capability; never accepted by general HTTP authentication. */
+    issueDecisionAccess(sessionId, now = Date.now()) {
+        if (!this.getSessionSlim(sessionId))
+            throw new Error("决策调用所属会话不存在。");
+        this.db.prepare("DELETE FROM decision_access WHERE expires_at <= ? OR session_id = ?").run(now, sessionId);
+        const token = `wd_${crypto.randomBytes(32).toString("base64url")}`;
+        this.db.prepare("INSERT INTO decision_access (token_hash, session_id, expires_at) VALUES (?, ?, ?)")
+            .run(crypto.createHash("sha256").update(token).digest("hex"), sessionId, now + 6 * 60 * 60 * 1000);
+        return token;
+    }
+    resolveDecisionAccess(token, now = Date.now()) {
+        if (!/^wd_[A-Za-z0-9_-]{43}$/.test(token))
+            return null;
+        const row = this.db.prepare("SELECT session_id FROM decision_access WHERE token_hash = ? AND expires_at > ?")
+            .get(crypto.createHash("sha256").update(token).digest("hex"), now);
+        return typeof row?.session_id === "string" ? row.session_id : null;
+    }
+    revokeDecisionAccess(token) {
+        this.db.prepare("DELETE FROM decision_access WHERE token_hash = ?")
+            .run(crypto.createHash("sha256").update(token).digest("hex"));
+    }
     // ============ User short-term memory ============
     /** No IO on input hot paths; queued observations still CAS against the database before writing. */
     userMemoryCaptureState() {
@@ -2644,13 +2702,14 @@ export class WandStorage {
     // ============ AI Teams ============
     listAiTeams() {
         const rows = this.db.prepare("SELECT * FROM ai_teams ORDER BY created_at ASC").all();
-        return rows.map(mapAiTeamRow);
+        return rows.map((row) => projectTeamDefinition(mapAiTeamRow(row), this));
     }
     getAiTeam(id) {
         const row = this.db.prepare("SELECT * FROM ai_teams WHERE id = ?").get(id);
-        return row ? mapAiTeamRow(row) : null;
+        return row ? projectTeamDefinition(mapAiTeamRow(row), this) : null;
     }
     saveAiTeam(team) {
+        team = freezeTeamEmployees(team, this);
         this.db.prepare(`INSERT INTO ai_teams (
          id, name, description, instructions, members_json, require_plan_approval, max_steps,
          created_at, updated_at
@@ -2678,7 +2737,7 @@ export class WandStorage {
          steps_used = excluded.steps_used, step_limit = excluded.step_limit,
          format_retries = excluded.format_retries, plan_approved = excluded.plan_approved,
          chat_session_id = excluded.chat_session_id, pending_notes_json = excluded.pending_notes_json,
-         updated_at = excluded.updated_at`).run(run.id, run.teamId, run.taskId, JSON.stringify(run.team), run.objective, run.cwd, run.status, run.statusDetail, run.stepsUsed, run.stepLimit, run.formatRetries, run.planApproved ? 1 : 0, run.chatSessionId, JSON.stringify(run.pendingNotes), run.createdAt, run.updatedAt);
+         updated_at = excluded.updated_at`).run(run.id, run.teamId, run.taskId, serializeExecutionTeam(run.team), run.objective, run.cwd, run.status, run.statusDetail, run.stepsUsed, run.stepLimit, run.formatRetries, run.planApproved ? 1 : 0, run.chatSessionId, JSON.stringify(run.pendingNotes), run.createdAt, run.updatedAt);
     }
     /** 群聊会话对应的最近一次运行（同一个群聊可以接着开新运行）。 */
     getLatestAiTeamRunByChat(sessionId) {
@@ -2741,7 +2800,12 @@ export class WandStorage {
                 // ai_teams.members_json 存的是裸成员数组；team_json 存的是整份团队对象。
                 currentTeams.set(runId, safeJsonParse(typeof row.current_members_json === "string" ? row.current_members_json : null));
             }
-            const memberName = teamMemberName(currentTeams.get(runId), memberId)
+            const frozenMember = normalizeAiTeamMembers(runTeam?.members).find((member) => member.id === memberId);
+            const currentMember = normalizeAiTeamMembers(currentTeams.get(runId)).find((member) => member.id === memberId);
+            const employee = frozenMember?.employeeId ? this.getSiliconEmployee(frozenMember.employeeId) : null;
+            const memberName = (frozenMember?.employeeId
+                ? employee?.name ?? frozenMember.name
+                : currentMember?.employeeId ? undefined : teamMemberName(currentTeams.get(runId), memberId))
                 ?? teamMemberName(runTeam?.members, memberId)
                 ?? memberId;
             const runStatus = String(row.run_status ?? "");
@@ -2909,6 +2973,26 @@ export class WandStorage {
         else
             this.db.prepare("UPDATE agent_activity SET read_at = ? WHERE read_at IS NULL").run(at);
     }
+    /** Completion/read state is independent of runner checkpoints and survives restarts. */
+    getSessionCompletion(id) {
+        const row = this.db.prepare(`SELECT completion_revision AS completionRevision,
+      viewed_completion_revision AS viewedCompletionRevision FROM command_sessions WHERE id = ?`)
+            .get(id);
+        return row ? { ...row } : null;
+    }
+    recordSessionCompletion(id) {
+        const row = this.db.prepare(`UPDATE command_sessions SET completion_revision = completion_revision + 1
+      WHERE id = ? RETURNING completion_revision AS completionRevision,
+        viewed_completion_revision AS viewedCompletionRevision`)
+            .get(id);
+        return row ? { ...row } : null;
+    }
+    /** A delayed view of generation N must never consume a newer completion N+1. */
+    markSessionCompletionViewed(id, revision) {
+        return this.db.prepare(`UPDATE command_sessions SET viewed_completion_revision = ?
+      WHERE id = ? AND completion_revision = ? AND viewed_completion_revision < ?`)
+            .run(revision, id, revision, revision).changes > 0;
+    }
     saveSession(snapshot) {
         const isNew = !this.getSessionWorkspace(snapshot.id);
         // A single SQLite statement is already atomic. Avoid BEGIN IMMEDIATE in
@@ -3029,6 +3113,8 @@ function mapSiliconEmployeeRow(row) {
             .filter((candidate) => candidate !== null)
         : [];
     const systemKey = typeof row.system_key === "string" && row.system_key ? row.system_key : undefined;
+    const rawTags = safeJsonParse(typeof row.tags_json === "string" ? row.tags_json : null);
+    const tags = Array.isArray(rawTags) ? rawTags.filter((tag) => typeof tag === "string") : [];
     return {
         id: String(row.id),
         name: String(row.name),
@@ -3037,6 +3123,7 @@ function mapSiliconEmployeeRow(row) {
         avatar: String(row.avatar ?? ""),
         agents,
         systemKey,
+        tags: siliconEmployeeTags({ systemKey, tags }),
         archivedAt: typeof row.archived_at === "string" && row.archived_at ? row.archived_at : undefined,
         createdAt: String(row.created_at),
         updatedAt: String(row.updated_at),
@@ -3085,6 +3172,20 @@ function normalizeAiTeamMember(raw) {
         member.avatar = value.avatar;
     if (isTeamMemberRole(value.role))
         member.role = value.role;
+    if (typeof value.employeeId === "string" && value.employeeId.trim()) {
+        member.employeeId = value.employeeId.trim();
+        const raw = value._employeeSnapshot;
+        if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+            const snapshot = raw;
+            if (snapshot.id === member.employeeId && typeof snapshot.prompt === "string") {
+                restoreTeamMemberEmployee(member, {
+                    id: member.employeeId, name: member.name, avatar: member.avatar ?? "",
+                    prompt: snapshot.prompt, duty: String(snapshot.duty ?? ""), agents,
+                    createdAt: String(snapshot.createdAt ?? ""), updatedAt: String(snapshot.updatedAt ?? ""),
+                });
+            }
+        }
+    }
     return member;
 }
 function normalizeAiTeamMembers(raw) {
@@ -3386,6 +3487,8 @@ const SCHEMA_MIGRATIONS = [
     ["session_options", `ALTER TABLE command_sessions ADD COLUMN session_options TEXT NOT NULL DEFAULT '{"schemaVersion":1}'`],
     ["workspace_id", "ALTER TABLE command_sessions ADD COLUMN workspace_id TEXT"],
     ["workspace_task_id", "ALTER TABLE command_sessions ADD COLUMN workspace_task_id TEXT"],
+    ["completion_revision", "ALTER TABLE command_sessions ADD COLUMN completion_revision INTEGER NOT NULL DEFAULT 0"],
+    ["viewed_completion_revision", "ALTER TABLE command_sessions ADD COLUMN viewed_completion_revision INTEGER NOT NULL DEFAULT 0"],
 ];
 /** 首页目录组顺序的偏好键（app_config 表，与其它 UI 偏好同一套读写）。 */
 const WORKSPACE_GROUP_ORDER_KEY = "workspaceGroupOrder";

package/dist/structured-client-protocol.js

@@ -1,4 +1,6 @@
+import { withToolPreview } from "./tool-preview.js";
 import { asRecord, isStructuredImagePart } from "./structured-content.js";
+import { isDecisionToolCall, decisionCardSummary } from "./decision-tool.js";
 export const WAND_PROTOCOL_VERSION = 2;
 function text(value) {
     return typeof value === "string" && value ? value : undefined;
@@ -255,9 +257,42 @@ function rewriteInlineToolImageUrls(messages, sessionId) {
  * 传 sessionId 时额外把内联图片改写成取图 URL（见 rewriteInlineToolImageUrls）。
  */
 export function enrichStructuredMessages(messages, sessionId) {
+    // 决策卡缩略投影：入参与结果可能分属不同 turn（流式/分页），先按调用 id 配对，
+    // 让两个块拿到同一份摘要；只有窗口里存在的那一侧才参与计算。
+    const decisionCalls = new Map();
+    for (const turn of messages) {
+        for (const block of turn.content) {
+            if (block.type === "tool_use" && isDecisionToolCall(block)) {
+                const call = decisionCalls.get(block.id) ?? {};
+                call.use = block;
+                decisionCalls.set(block.id, call);
+            }
+            else if (block.type === "tool_result") {
+                const call = decisionCalls.get(block.tool_use_id);
+                if (call)
+                    call.result = block;
+            }
+        }
+    }
+    const decisionIds = new Set(decisionCalls.keys());
+    const decisionSummaries = new Map([...decisionCalls].map(([id, call]) => [id, decisionCardSummary(call.use?.input, call.result)]));
+    const decisionSemantic = (id) => {
+        const summary = decisionSummaries.get(id);
+        return summary ? { kind: "decision", summary } : { kind: "decision" };
+    };
     const enriched = stampDerivedSubagents(messages).map((turn) => ({
         ...turn,
-        content: turn.content.map((block) => {
+        content: turn.content.map(withToolPreview).map((block) => {
+            if (block.type === "tool_use" && decisionIds.has(block.id)) {
+                return { ...block, semantic: decisionSemantic(block.id), activity: undefined };
+            }
+            if (block.type === "tool_result" && decisionIds.has(block.tool_use_id)) {
+                return { ...block, semantic: decisionSemantic(block.tool_use_id) };
+            }
+            if (block.type === "tool_result" && block.semantic?.kind === "decision") {
+                const summary = decisionSummaries.get(block.tool_use_id) ?? block.semantic.summary;
+                return { ...block, semantic: { kind: "decision", ...(summary ? { summary } : {}) } };
+            }
             if (block.type !== "tool_use" || block.name !== "AskUserQuestion")
                 return block;
             const questions = questionsFromInput(block.input);

package/dist/structured-provider-common.js

@@ -1,5 +1,5 @@
+import { isNativeThinkingEffort } from "./provider-catalog.js";
 import { shellQuote } from "./shell-quote.js";
-const NATIVE_THINKING_EFFORT = /^(claude|codex|opencode|grok|qoder|pi):[a-z0-9][a-z0-9_-]{0,31}$/;
 /**
  * 把会话级系统提示交给 CLI 的开关。Claude / Qoder / Pi 用 `--append-system-prompt`，
  * Grok 用 `--rules`；Codex / OpenCode / Gemini 没有这个入口，只能退回并入本轮消息
@@ -58,7 +58,7 @@ export function isThinkingEffort(value) {
         || value === "standard"
         || value === "deep"
         || value === "max"
-        || (typeof value === "string" && NATIVE_THINKING_EFFORT.test(value));
+        || isNativeThinkingEffort(value);
 }
 /** 只取本 provider 的原生档位。别的 CLI 的前缀不能串过去。 */
 export function prefixedThinkingEffort(provider, effort) {
@@ -127,7 +127,7 @@ export function normalizeThinkingEffort(value) {
     const normalized = value.trim().toLowerCase();
     if (normalized === "off" || normalized === "standard" || normalized === "deep" || normalized === "max")
         return normalized;
-    if (NATIVE_THINKING_EFFORT.test(normalized))
+    if (isNativeThinkingEffort(normalized))
         return normalized;
     return null;
 }

package/dist/structured-session-manager.d.ts

@@ -3,6 +3,7 @@ import { SessionLogger } from "./session-logger.js";
 import { WandStorage } from "./storage.js";
 import { ConversationTurn, ExecutionMode, ProcessEvent, SessionProvider, SessionRunner, SessionSnapshot, SessionSource, WandConfig } from "./types.js";
 import type { WandTaskAgent } from "./task-types.js";
+import { type DecisionRuntimeAccess } from "./decision-runner.js";
 import { type StructuredExecHost } from "./structured-exec-host.js";
 import type { StructuredRunnerAdapter } from "./structured-runner.js";
 export interface StructuredSessionManagerRunners {
@@ -69,6 +70,7 @@ export declare class StructuredSessionManager {
     private readonly execHost?;
     private readonly sessions;
     private readonly pendingRunnerExecutions;
+    private readonly unacceptedTeamStarts;
     private readonly interruptedWith;
     private readonly preserveQueueOnInterrupt;
     /** Last wall-clock time (ms) a streaming checkpoint reached SQLite. */
@@ -102,7 +104,7 @@ export declare class StructuredSessionManager {
     private detachedRecoveryRetryTimer;
     private detachedRecoveryFailureLogged;
     private disposed;
-    constructor(storage: WandStorage, config: WandConfig, logger?: SessionLogger | null, runners?: StructuredSessionManagerRunners, execHost?: StructuredExecHost | undefined);
+    constructor(storage: WandStorage, config: WandConfig, logger?: SessionLogger | null, runners?: StructuredSessionManagerRunners, execHost?: StructuredExecHost | undefined, decisionRuntime?: () => DecisionRuntimeAccess | null);
     private archiveExpiredSessions;
     setEventEmitter(emitEvent: (event: ProcessEvent) => void): void;
     /** Stop every runner and flush terminal state before storage is closed. */
@@ -128,6 +130,8 @@ export declare class StructuredSessionManager {
     get(id: string): SessionSnapshot | null;
     setSessionWorkspace(id: string, membership: Pick<SessionSnapshot, "workspaceId" | "workspaceTaskId">): void;
     setSessionTopic(id: string, title: string, description: string): SessionSnapshot;
+    /** 归档 / 取消归档：只写标记并广播，不中断运行中的 run，也不删历史。 */
+    setSessionArchived(id: string, archived: boolean): SessionSnapshot;
     private setSessionTopicGenerating;
     /**
      * Update worktree merge progress on the canonical in-memory snapshot before
@@ -144,6 +148,10 @@ export declare class StructuredSessionManager {
         automationId: string;
         title: string;
     }): SessionSnapshot;
+    /** Server-only generation anchor, including a failed unaccepted turn whose activeRequestId is cleared. */
+    teamRequestId(id: string): string | null;
+    /** Consume only the exact failed request observed by the team's dispatch, never error-text inference. */
+    consumeUnacceptedTeamStartup(id: string, requestId: string): boolean;
     /** Only an unstarted employee conversation may change CLI after a failed first turn. */
     private retryEmployeeCandidate;
     /** 往转发会话里追加别的参与者的发言。 */
@@ -153,6 +161,7 @@ export declare class StructuredSessionManager {
         idempotencyKey?: string;
         preserveQueue?: boolean;
         queueAlreadyRemoved?: boolean;
+        teamRequestStarted?: (sessionId: string, requestId: string) => void;
     }): Promise<SessionSnapshot>;
     /**
      * Reorder the pending queued messages. `order` is a permutation of the current
@@ -175,6 +184,8 @@ export declare class StructuredSessionManager {
     promoteQueuedMessage(sessionId: string, index: number, expectedText?: string, idempotencyKey?: string): Promise<SessionSnapshot>;
     /** Clear all queued messages. No-op when queue is already empty. */
     clearQueuedMessages(sessionId: string): SessionSnapshot;
+    /** 新建空白对话可原位换 CLI；接受过输入、恢复会话和自动化不跨 provider 搬历史。 */
+    setSessionProvider(sessionId: string, provider: SessionProvider): SessionSnapshot;
     /** Update the selected model for a structured session. Takes effect on the next spawn. */
     setSessionModel(sessionId: string, model: string | null): SessionSnapshot;
     /**
@@ -196,6 +207,7 @@ export declare class StructuredSessionManager {
     denyPermission(sessionId: string): SessionSnapshot;
     /** Resolve a specific escalation by requestId. */
     resolveEscalation(sessionId: string, requestId: string, resolution: unknown): SessionSnapshot;
+    private requireRecoveryControl;
     stop(id: string): SessionSnapshot;
     delete(id: string): void;
     private requireSession;