@nanmicoder/dsh-agent-teams 0.1.23 → 0.1.24-rc.1

package/README.md

@@ -36,7 +36,7 @@ Ask in natural language. The plugin provides the team protocol, 14 coordination
 
 ## Releases
 
-[v0.1.23](./release-notes/v0.1.23.md) fixes team identity, member model routing, quality and repair gates, and cold fork recovery, and adds owner-configured member tool policies. This plugin release uses npm `latest`; the recommended host remains Harness `0.2.0-rc.2` (its `next` channel). See the exact [support matrix](./compatibility.json).
+[v0.1.24-rc.1](./release-notes/v0.1.24-rc.1.md) adapts member creation, cancellation and recovery to Harness `0.2.1-rc.1`, and preserves member roles and custom tool restrictions across plugin reloads. Release channel: npm `next` (prerelease). Check [npm versions](https://www.npmjs.com/package/@nanmicoder/dsh-agent-teams?activeTab=versions) for publication status before installing. See the exact [support matrix](./compatibility.json) and [migration evidence](./docs/harness-0.2.1-rc.1/README.md).
 
 ## Why AgentTeams?
 
@@ -55,33 +55,33 @@ The conversation card and activity panel use Harness's official locale service.
 
 ## Install and choose versions
 
-**Recommended pair: DeepSeek Harness `0.2.0-rc.2` + AgentTeams `0.1.23`. The host remains an RC.**
+**Recommended pair: DeepSeek Harness `0.2.1-rc.1` + AgentTeams `0.1.24-rc.1`. The host remains an RC.**
 
 | Use case | DeepSeek Harness | AgentTeams plugin |
 | --- | --- | --- |
-| **Recommended** | **`0.2.0-rc.2`** | **`0.1.23`** |
-| Previous recommended RC | `0.1.7-rc.2` | `0.1.23` |
-| Legacy RC | `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3` | `0.1.23` |
-| Retaining an older RC | `0.1.2-rc.1` | `0.1.23` |
-| Developer Alpha testing | `0.1.2-alpha.5` | `0.1.23` |
-| Retaining an older Alpha | `0.1.2-alpha.2` | `0.1.23` |
+| **Recommended** | **`0.2.1-rc.1`** | **`0.1.24-rc.1`** |
+| Previous recommended RC | `0.2.0-rc.2`, `0.1.7-rc.2` | `0.1.24-rc.1` |
+| Legacy RC | `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3` | `0.1.24-rc.1` |
+| Retaining an older RC | `0.1.2-rc.1` | `0.1.24-rc.1` |
+| Developer Alpha testing | `0.1.2-alpha.5` | `0.1.24-rc.1` |
+| Retaining an older Alpha | `0.1.2-alpha.2` | `0.1.24-rc.1` |
 
 ### Desktop app
 
 In the app sidebar, open **Plugins → Add plugin** and enter the npm package spec:
 
 ```text
-@nanmicoder/dsh-agent-teams@0.1.23
+@nanmicoder/dsh-agent-teams@0.1.24-rc.1
 ```
 
 Install it, then choose **Enable now**. If the host asks for a restart, restart the desktop app. Use the package spec above for the published build; an npm or GitHub webpage URL is not the same install source. For Git installation, use a commit containing the verified build outputs described below.
 
-The desktop app supplies its own Harness core and package manager. Upgrading the global CLI does not upgrade that core, and an ordinary standalone CLI cannot manage its desktop profile. The CLI carrier installed by the desktop app can manage that profile in `0.2.0-rc.2`. Check the embedded core against the compatibility list. Harness `0.2.0-rc.2` is now the exact published target; its RC status is unchanged. The earlier source-only `0.2.0` prediction is no longer a support declaration. See the [release migration evidence](./docs/harness-0.2.0-rc.2/README.md).
+The desktop app supplies its own Harness core and package manager. Upgrading the global CLI does not upgrade that core, and an ordinary standalone CLI cannot manage its desktop profile. The CLI carrier installed by the desktop app can manage that profile in `0.2.1-rc.1`. Check the embedded core against the compatibility list. Harness `0.2.1-rc.1` is now the exact published target; its RC status is unchanged. The earlier source-only `0.2.0` prediction is no longer a support declaration. See the [release migration evidence](./docs/harness-0.2.1-rc.1/README.md).
 
 ### CLI / Web: 1. Install DeepSeek Harness
 
 ```sh
-npm install --global @deepseek-ai/dsh@0.2.0-rc.2
+npm install --global @deepseek-ai/dsh@0.2.1-rc.1
 dsh --version
 ```
 
@@ -89,10 +89,10 @@ Skip this if you already run this version. Alpha is opt-in: select an exact Alph
 
 ### CLI / Web: 2. Install the AgentTeams plugin
 
-Install or upgrade from npm (pinned to this `latest` release):
+After this version is published, install or upgrade from npm using the exact prerelease version:
 
 ```sh
-dsh plugin --profile web add --save-exact @nanmicoder/dsh-agent-teams@0.1.23
+dsh plugin --profile web add --save-exact @nanmicoder/dsh-agent-teams@0.1.24-rc.1
 ```
 
 For a CLI-managed installation, replace `web` with your active CLI profile. **Stop and restart that profile's Harness process, then refresh the browser.** Installing the plugin does not upgrade Harness; the host and plugin have independent `latest` channels.

package/README_ZH.md

@@ -36,7 +36,7 @@
 
 ## 版本更新
 
-[v0.1.23](./release-notes/v0.1.23.md) 修复团队标识、成员模型路由、质量与修复门禁及 fork 冷恢复，并新增由工作区所有者配置的成员工具策略。本插件正式版使用 npm `latest` 渠道；推荐宿主仍为 Harness `0.2.0-rc.2`（宿主的 `next` 渠道）。精确支持范围见 [compatibility.json](./compatibility.json)。
+[v0.1.24-rc.1](./release-notes/v0.1.24-rc.1.md) 适配 Harness `0.2.1-rc.1` 的成员创建、停止和恢复，并在插件热重载后保留成员角色与自定义工具限制。发布渠道为 npm `next`（预发布）；安装前请在 [npm 版本列表](https://www.npmjs.com/package/@nanmicoder/dsh-agent-teams?activeTab=versions) 确认发布状态。精确范围见 [compatibility.json](./compatibility.json)，验收范围见[迁移记录](./docs/harness-0.2.1-rc.1/README.md)。
 
 ## 为什么需要 AgentTeams？
 
@@ -54,33 +54,33 @@
 
 ## 安装与版本选择
 
-**推荐组合：DeepSeek Harness `0.2.0-rc.2` + AgentTeams `0.1.23`。宿主仍为 RC 版本。**
+**推荐组合：DeepSeek Harness `0.2.1-rc.1` + AgentTeams `0.1.24-rc.1`。宿主仍为 RC 版本。**
 
 | 使用场景 | DeepSeek Harness | AgentTeams 插件 |
 | --- | --- | --- |
-| **推荐版本** | **`0.2.0-rc.2`** | **`0.1.23`** |
-| 上一推荐 RC | `0.1.7-rc.2` | `0.1.23` |
-| 保留旧 RC | `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3` | `0.1.23` |
-| 保留旧 RC | `0.1.2-rc.1` | `0.1.23` |
-| 开发者测试 Alpha | `0.1.2-alpha.5` | `0.1.23` |
-| 保留旧 Alpha | `0.1.2-alpha.2` | `0.1.23` |
+| **推荐版本** | **`0.2.1-rc.1`** | **`0.1.24-rc.1`** |
+| 上一推荐 RC | `0.2.0-rc.2`, `0.1.7-rc.2` | `0.1.24-rc.1` |
+| 保留旧 RC | `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.5-rc.3` | `0.1.24-rc.1` |
+| 保留旧 RC | `0.1.2-rc.1` | `0.1.24-rc.1` |
+| 开发者测试 Alpha | `0.1.2-alpha.5` | `0.1.24-rc.1` |
+| 保留旧 Alpha | `0.1.2-alpha.2` | `0.1.24-rc.1` |
 
 ### 桌面端
 
 在应用侧栏打开「插件 → 添加插件」，输入 npm 包名和版本：
 
 ```text
-@nanmicoder/dsh-agent-teams@0.1.23
+@nanmicoder/dsh-agent-teams@0.1.24-rc.1
 ```
 
 安装完成后点击「立即启用」；宿主提示需要重启时，重启桌面应用。发布版请使用上面的包名，npm 或 GitHub 网页链接与 npm 包名不是同一种安装来源。从 Git 安装时，请选用包含下方所述已验证构建产物的提交。
 
-桌面端自带 Harness 内核与包管理器，升级全局 CLI 不会升级桌面端；普通独立 CLI 不能管理桌面 profile，桌面端自带的 CLI carrier 在此版本可以管理。当前精确目标是已发布的 `0.2.0-rc.2`，仍属于 RC；此前源码预测的 `0.2.0` 已退出支持声明。详见[迁移验收记录](./docs/harness-0.2.0-rc.2/README.md)。
+桌面端自带 Harness 内核与包管理器，升级全局 CLI 不会升级桌面端；普通独立 CLI 不能管理桌面 profile，桌面端自带的 CLI carrier 在此版本可以管理。当前精确目标是已发布的 `0.2.1-rc.1`，仍属于 RC；此前源码预测的 `0.2.0` 已退出支持声明。详见[迁移验收记录](./docs/harness-0.2.1-rc.1/README.md)。
 
 ### CLI / Web：1. 安装 DeepSeek Harness
 
 ```sh
-npm install --global @deepseek-ai/dsh@0.2.0-rc.2
+npm install --global @deepseek-ai/dsh@0.2.1-rc.1
 dsh --version
 ```
 
@@ -88,10 +88,10 @@ dsh --version
 
 ### CLI / Web：2. 安装 AgentTeams 插件
 
-从 npm 安装或升级插件（命令锁定本次 `latest` 正式版）：
+此版本发布后，从 npm 安装或升级插件（锁定精确预发布版本）：
 
 ```sh
-dsh plugin --profile web add --save-exact @nanmicoder/dsh-agent-teams@0.1.23
+dsh plugin --profile web add --save-exact @nanmicoder/dsh-agent-teams@0.1.24-rc.1
 ```
 
 CLI 管理的安装可将 `web` 换成实际使用的 CLI profile。**安装后，停止并重新启动该 profile 的 Harness 进程，再刷新浏览器。** 安装插件不会自动升级宿主；Harness 的 `latest` 与插件的 `latest` 是两个独立渠道。

package/compatibility.json

@@ -1,12 +1,16 @@
 {
   "schemaVersion": 1,
-  "recommendedHost": "0.2.0-rc.2",
+  "recommendedHost": "0.2.1-rc.1",
   "previewTag": "next",
   "supportedHosts": [
     {
-      "version": "0.2.0-rc.2",
+      "version": "0.2.1-rc.1",
       "track": "recommended"
     },
+    {
+      "version": "0.2.0-rc.2",
+      "track": "legacy"
+    },
     {
       "version": "0.1.7-rc.2",
       "track": "legacy"

package/lib/git-artifact-stamp.json

@@ -1,5 +1,5 @@
 {
   "schema": 1,
-  "source": "0ed6e725cf32de96d7927305ca0b630626441504cce32a3c7641c5fb6d9a0896",
-  "output": "83a84431b6c1d130d8920286abfe4888c09a22b0f3ebf454edf8ed2a456086bf"
+  "source": "983fb392dfa483a3095fd1e7ad67bfd5786d467c77244865d22e7ca7b046e2ad",
+  "output": "bb2031aa6d907a929ad81d99ab74f6f2c2136ce1f3a1e9bb68006453bff43908"
 }

package/lib/harness-compat.js

@@ -13,6 +13,52 @@ const hostPromptQueue = Symbol.for('dsh.subagent.queuePrompt');
 // 0.1.5 keeps queueHostSubagentPrompt but replaces its symbol with this
 // delivery-mode-aware implementation (packages/subagent/subagent/src/internal.ts).
 const hostPromptDeliver = Symbol.for('dsh.subagent.deliverPrompt');
+export function usesManagedActivations(runtime) {
+    return typeof runtime.startActivation === 'function';
+}
+export async function startMember(runtime, spec) {
+    const host = runtime;
+    if (typeof host.startActivation === 'function') {
+        const { persona: _persona, toolFilter: _filter, ...request } = spec.request;
+        const activation = await host.startActivation.call(runtime, { ...spec, request, delivery: 'parent' });
+        // Preserve native settlement as the missing-report/error fallback on both
+        // fresh and resumed activations. mailbox.ts deduplicates successful reports.
+        void activation.result.catch(() => undefined);
+        return activation;
+    }
+    if (typeof host.startContinuable !== 'function')
+        return unsupported('missing member creation API');
+    return host.startContinuable.call(runtime, spec);
+}
+/** Wrap every available creation API, restoring only this plugin's own methods. */
+export function guardSubagentCreation(ctx, check) {
+    const runtime = ctx.subagents;
+    ctx.effect(() => {
+        const disposers = [];
+        for (const key of ['start', 'startContinuable', 'startActivation']) {
+            const original = runtime[key];
+            if (typeof original !== 'function')
+                continue;
+            const descriptor = Object.getOwnPropertyDescriptor(runtime, key);
+            const guarded = async (...args) => {
+                const request = key === 'start' ? args[1] : args[0].request;
+                check(request.parent);
+                return Reflect.apply(original, ctx.subagents, args);
+            };
+            Object.defineProperty(runtime, key, { value: guarded, writable: true, configurable: true });
+            disposers.push(() => {
+                if (Object.getOwnPropertyDescriptor(runtime, key)?.value !== guarded)
+                    return;
+                if (descriptor === undefined)
+                    Reflect.deleteProperty(runtime, key);
+                else
+                    Object.defineProperty(runtime, key, descriptor);
+            });
+        }
+        return () => { for (const dispose of disposers)
+            dispose(); };
+    }, 'agent-teams: member delegation budget');
+}
 function boundary(runtime) {
     return runtime;
 }
@@ -101,7 +147,7 @@ export function installContinuableMemberSetup(ctx, setup) {
     const installed = new WeakSet();
     const active = new Set();
     ctx.effect(() => {
-        const stop = onAgentReady(ctx, (agent, vetoable) => {
+        const attach = (agent, vetoable) => {
             if (installed.has(agent))
                 return;
             // Deliberately synchronous: awaiting here loses the first-request race.
@@ -139,12 +185,24 @@ export function installContinuableMemberSetup(ctx, setup) {
                 dispose();
                 throw error;
             }
-        });
-        return () => {
+        };
+        const stop = onAgentReady(ctx, attach);
+        const cleanup = () => {
             stop();
             for (const dispose of [...active])
                 dispose();
         };
+        try {
+            // Reloads keep Agents alive but dispose the previous plugin's setup.
+            // Subscribe first, then hydrate the live registry; attach is idempotent.
+            for (const agent of ctx.agents.list())
+                attach(agent, false);
+        }
+        catch (error) {
+            cleanup();
+            throw error;
+        }
+        return cleanup;
     }, 'agent-teams: member lifecycle compatibility');
 }
 /** Queue a distinct host-authored turn; never substitute model-message steer. */
@@ -349,3 +407,11 @@ export async function startMemberWithLenientFilter(start, filter, relaxableDeny
         }
     }
 }
+/** Targeted recursive cancellation renamed with the unified activation manager. */
+export async function drainMemberChildren(runtime, parent, ids) {
+    const host = runtime;
+    const drain = host.drainChildren ?? host.drainContinuableChildren;
+    if (typeof drain !== 'function')
+        return unsupported('missing targeted child drain');
+    await drain.call(runtime, parent, ids);
+}

package/lib/members.js

@@ -16,7 +16,7 @@ import { installModelSelection } from '@deepseek-ai/dsh-agent';
 import { foldSubagentDescriptor } from '@deepseek-ai/dsh-subagent';
 import { createUserMessage, LlmError, ReasoningEffortId } from '@deepseek-ai/dsh-llm';
 import { join } from 'node:path';
-import { guardSubagentDelivery, installContinuableMemberSetup, memberToolFilter, queueMemberPrompt, restrictableToolNames, startMemberWithLenientFilter, steerMemberPrompt, sessionOwnEvents } from "./harness-compat.js";
+import { guardSubagentCreation, startMember, usesManagedActivations, guardSubagentDelivery, installContinuableMemberSetup, memberToolFilter, queueMemberPrompt, restrictableToolNames, startMemberWithLenientFilter, steerMemberPrompt, sessionOwnEvents } from "./harness-compat.js";
 import { markMailboxDelivered, appendMailbox, CAPTAIN_KEY, createMessage, readRetiredMemberIds, readTeamSync, readTeam, releaseMailboxDelivery, withTeamLock, writeTeam } from "./state.js";
 import { mailboxPrompt } from "./mailbox.js";
 import { nearestLiveLead } from "./lineage.js";
@@ -478,6 +478,7 @@ function describeMemberRouteFailure(provider, model, error) {
  */
 export function installMemberSelectionRuntime(ctx, stateDir, onFailureSettled) {
     const pending = new Map();
+    const pendingSetup = new Map();
     installContinuableMemberSetup(ctx, (childCtx, child) => {
         const descriptor = foldSubagentDescriptor(sessionOwnEvents(child.session));
         if (descriptor?.mode !== 'continuable' || !descriptor.label.startsWith(MEMBER_LABEL_PREFIX)) {
@@ -510,11 +511,47 @@ export function installMemberSelectionRuntime(ctx, stateDir, onFailureSettled) {
                 return { kind: 'reject' };
             return next();
         });
+        // New activations no longer persist persona/toolFilter in host descriptors.
+        // Install them before the first request, and restore the exact saved values
+        // after a cold resume. Historical descriptors remain owned by Harness.
+        const savedTeam = pending.has(key) ? undefined : readTeamSync(stateRoot, teamId);
+        const savedMember = savedTeam?.captainSessionId === parentSessionId
+            ? savedTeam.members.find(member => member.id === child.id && member.name === memberName)
+            : undefined;
+        const setup = pendingSetup.get(key) ?? savedMember?.runtimeSetup;
+        if (usesManagedActivations(ctx.subagents) && savedMember !== undefined
+            && setup === undefined && descriptor.toolFilter === undefined) {
+            disposeAdmission();
+            throw new Error('agent-teams: saved member runtime setup is missing; refusing an unrestricted resume');
+        }
+        let disposeSetup = () => undefined;
+        if (usesManagedActivations(ctx.subagents) && setup !== undefined) {
+            try {
+                const stopFilter = childCtx.tools.restrict(setup.toolFilter);
+                try {
+                    const stopPersona = childCtx.systemPrompt.section({
+                        name: 'deployment:persona-prefix',
+                        order: childCtx.systemPrompt.getSectionOrder('DEPLOYMENT_PERSONA_PREFIX'),
+                        text: setup.persona,
+                    });
+                    disposeSetup = () => { stopPersona(); stopFilter(); };
+                }
+                catch (error) {
+                    stopFilter();
+                    throw error;
+                }
+            }
+            catch (error) {
+                disposeAdmission();
+                throw error;
+            }
+        }
+        const cleanupAdmission = () => { disposeSetup(); disposeAdmission(); };
         let selection = pending.get(key);
         if (selection === undefined) {
             const team = readTeamSync(stateRoot, teamId);
             if (team?.captainSessionId !== parentSessionId)
-                return disposeAdmission;
+                return cleanupAdmission;
             const durableMember = team.members.find(member => member.name === memberName);
             selection = selectionFromMember(durableMember);
             if (selection !== undefined && (descriptor.agentProvider !== durableMember?.provider || descriptor.agentModel !== durableMember?.model)) {
@@ -571,7 +608,7 @@ export function installMemberSelectionRuntime(ctx, stateDir, onFailureSettled) {
         });
         // Legacy teams still need failure reporting even without a saved route.
         if (selection === undefined)
-            return () => { disposeFailure(); disposeAdmission(); };
+            return () => { disposeFailure(); cleanupAdmission(); };
         const selectionRef = { current: modelSelection(selection), assembled: undefined };
         const disposeSelection = installModelSelection(childCtx, selectionRef);
         const fallback = selection.fallback;
@@ -601,7 +638,7 @@ export function installMemberSelectionRuntime(ctx, stateDir, onFailureSettled) {
             disposeFallback();
             disposeSelection();
             disposeFailure();
-            disposeAdmission();
+            cleanupAdmission();
         };
     });
     return {
@@ -611,17 +648,20 @@ export function installMemberSelectionRuntime(ctx, stateDir, onFailureSettled) {
             return parent !== undefined && descriptor?.mode === 'continuable'
                 && pending.has(pendingSelectionKey(parent, descriptor.label));
         },
-        async withPending(parentSessionId, label, selection, operation) {
+        async withPending(parentSessionId, label, selection, operation, setup) {
             const key = pendingSelectionKey(parentSessionId, label);
             if (pending.has(key)) {
                 throw new Error(`member model selection is already pending for "${label}"`);
             }
             pending.set(key, selection);
+            if (setup !== undefined)
+                pendingSetup.set(key, setup);
             try {
                 return await operation();
             }
             finally {
                 pending.delete(key);
+                pendingSetup.delete(key);
             }
         },
     };
@@ -729,10 +769,11 @@ export async function spawnMember(ctx, config, selections, llmSelection, captain
     if (provider.prepareContinuable === undefined) {
         throw new Error(`agent-teams: provider "${config.provider}" does not support continuable members`);
     }
-    if (!provider.capabilities.persona) {
+    const legacyCapabilities = provider.capabilities;
+    if (!usesManagedActivations(ctx.subagents) && !legacyCapabilities.persona) {
         throw new Error(`agent-teams: provider "${config.provider}" cannot apply a member persona`);
     }
-    if (!provider.capabilities.toolFilter) {
+    if (!usesManagedActivations(ctx.subagents) && !legacyCapabilities.toolFilter) {
         throw new Error(`agent-teams: provider "${config.provider}" cannot restrict captain-only tools for members`);
     }
     const label = `${MEMBER_LABEL_PREFIX}${team.id}:${member.name}`;
@@ -740,11 +781,12 @@ export async function spawnMember(ctx, config, selections, llmSelection, captain
     // captain-only deny list plus the depth entries this host registers.
     const requestedFilter = resolvedFilter ?? memberToolFilter(config.maxDepth, restrictableToolNames(captain));
     // The lenient retry may drop names this host reports unknown; keep the exact
-    // filter the host accepted so team.json and the child descriptor agree.
+    // filter the host accepted for the durable member setup.
     let acceptedFilter = requestedFilter;
-    const start = await selections.withPending(captain.id, label, llmSelection, () => (startMemberWithLenientFilter(toolFilter => {
+    const start = await startMemberWithLenientFilter(toolFilter => {
         acceptedFilter = toolFilter;
-        return ctx.subagents.startContinuable({
+        const setup = { persona: memberPersona(team, member, stateDir, config.executionPrompt), toolFilter };
+        return selections.withPending(captain.id, label, llmSelection, () => startMember(ctx.subagents, {
             provider: config.provider,
             label,
             request: {
@@ -769,12 +811,15 @@ export async function spawnMember(ctx, config, selections, llmSelection, captain
                 // the configured member-relative descendant budget instead.
             },
             signal,
-        });
-    }, requestedFilter, relaxableDeny)));
+        }), setup);
+    }, requestedFilter, relaxableDeny);
     member.id = start.childId;
+    if (usesManagedActivations(ctx.subagents)) {
+        member.runtimeSetup = { persona: memberPersona(team, member, stateDir, config.executionPrompt), toolFilter: acceptedFilter };
+    }
     // Only a policy member carries a persisted filter snapshot; a member without
-    // a policy keeps the previous record shape and behavior. The descriptor, not
-    // this snapshot, is what reapplies the filter on a cold resume.
+    // a policy keeps its public record shape. Legacy descriptors or runtimeSetup
+    // restore the filter on cold resume, depending on the host generation.
     if (member.toolFilter !== undefined)
         member.toolFilter = { ...acceptedFilter };
 }
@@ -844,7 +889,6 @@ export function installRetiredMemberGuard(ctx, stateDir) {
 }
 /** Bound all descendant creation, including renamed tools and code-runtime calls. */
 export function installMemberDelegationGuard(ctx, stateDir, maxDepth) {
-    const runtime = ctx.subagents;
     let active = true;
     const check = (parent) => {
         if (!active)
@@ -878,27 +922,8 @@ export function installMemberDelegationGuard(ctx, stateDir, maxDepth) {
             depth++;
         }
     };
-    ctx.effect(() => {
-        const start = runtime.start;
-        const continuable = runtime.startContinuable;
-        const startDescriptor = Object.getOwnPropertyDescriptor(runtime, 'start');
-        const continuableDescriptor = Object.getOwnPropertyDescriptor(runtime, 'startContinuable');
-        const guardedStart = async (name, request) => { check(request.parent); return start.call(runtime, name, request); };
-        const guardedContinuable = async (spec) => { check(spec.request.parent); return continuable.call(runtime, spec); };
-        runtime.start = guardedStart;
-        runtime.startContinuable = guardedContinuable;
-        return () => {
-            active = false;
-            for (const [key, fn, descriptor] of [['start', guardedStart, startDescriptor], ['startContinuable', guardedContinuable, continuableDescriptor]]) {
-                if (Object.getOwnPropertyDescriptor(runtime, key)?.value !== fn)
-                    continue;
-                if (descriptor === undefined)
-                    Reflect.deleteProperty(runtime, key);
-                else
-                    Object.defineProperty(runtime, key, descriptor);
-            }
-        };
-    }, 'agent-teams: member delegation budget');
+    guardSubagentCreation(ctx, check);
+    ctx.effect(() => () => { active = false; }, 'agent-teams: delegation guard lifetime');
 }
 /**
  * Snapshot the real driver activity for durable member ids.

package/lib/state.js

@@ -665,6 +665,9 @@ function isTeamMember(value) {
         // A member without a policy keeps the legacy shape: both fields stay absent.
         && isOptionalNonBlankString(value['toolPolicy'])
         && (value['toolFilter'] === undefined || isMemberToolFilter(value['toolFilter']))
+        && (value['runtimeSetup'] === undefined || (isRecord(value['runtimeSetup'])
+            && typeof value['runtimeSetup']['persona'] === 'string'
+            && isMemberToolFilter(value['runtimeSetup']['toolFilter'])))
         && isFiniteNumber(value['joinedAt'])
         && (value['status'] === 'idle' || value['status'] === 'working' || value['status'] === 'removed');
 }

package/lib/tools.js

@@ -1,13 +1,4 @@
-/**
- * The `agent_teams_*` model-facing tools.
- *
- * The captain (the agent that created the team) orchestrates: members are
- * continuable subagents it spawns and wakes. Members share the same tools and
- * drive their own task state, mirroring the Claude Code AgentTeams flow:
- * create team → add members → create tasks with dependencies → claim/assign →
- * work → report → status → delete.
- * @module dsh-agent-teams/tools
- */
+import { drainMemberChildren } from "./harness-compat.js";
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
 import { defineTool } from '@deepseek-ai/dsh-tools';
 import { join } from 'node:path';
@@ -373,7 +364,7 @@ async function stopTeamMemberActivations(ctx, captain, members, signal) {
     // Every supported exact host has targeted recursive drain. Unlike interrupt,
     // it closes admission and clears queued work before awaiting descendants.
     signal?.throwIfAborted();
-    await ctx.subagents.drainContinuableChildren(captain, memberIds);
+    await drainMemberChildren(ctx.subagents, captain, memberIds);
 }
 export async function haltTeamWork(input) {
     const halted = await withTeamLock(teamLockKey(input.stateRoot, input.teamId), async () => {
@@ -480,7 +471,6 @@ export function registerAgentTeamsTools(ctx, config) {
     installMemberDelegationGuard(ctx, config.stateDir, config.memberMaxDepth ?? 0);
     installMailboxAdmission(ctx, config.stateDir);
     const scheduler = installTeamScheduler(ctx, { stateDir: config.stateDir, executionPrompt: config.executionPrompt, dispatch: dispatchMember });
-    const memberSelections = installMemberSelectionRuntime(ctx, config.stateDir, (workspace, teamId, memberName) => (scheduler.kickMember(workspace, teamId, memberName)));
     async function dispatchMember(captain, teamId, memberName, text, signal, mode, attemptId) {
         const root = stateRootOf(workspaceOf(captain), config);
         // Record why a member never started. The scheduler treats a failed dispatch as
@@ -765,14 +755,6 @@ export function registerAgentTeamsTools(ctx, config) {
         captain.cancel({ kind: 'user' }, { keepInbox: true });
         return { teamId: discarded.teamId };
     };
-    const runtime = {
-        isPendingMember: memberSelections.isPendingMember,
-        updateStagedPlan,
-        updateStagedPlanBatch,
-        approveStagedTeam,
-        continueStagedPlanning,
-        discardStagedTeam,
-    };
     ctx.tools.register(defineTool({
         name: 'agent_teams_create',
         description: 'Create a team. Use approval=required for a two-phase plan: members and tasks remain unspawned/unclaimed until the user reviews the Web plan and explicitly approves it. Optional profiles expand their configured roster; seed profiles also expand template tasks, while captain profiles leave the graph for the Captain to design. approval=automatic preserves the legacy immediate-execution path.',
@@ -2381,6 +2363,16 @@ export function registerAgentTeamsTools(ctx, config) {
             return { deleted: true, team_name: team.name };
         },
     }));
+    // Live-member hydration validates saved filters against registered tools.
+    const memberSelections = installMemberSelectionRuntime(ctx, config.stateDir, (workspace, teamId, memberName) => (scheduler.kickMember(workspace, teamId, memberName)));
+    const runtime = {
+        isPendingMember: memberSelections.isPendingMember,
+        updateStagedPlan,
+        updateStagedPlanBatch,
+        approveStagedTeam,
+        continueStagedPlanning,
+        discardStagedTeam,
+    };
     return runtime;
 }
 async function initializeProfileTeam(input) {

package/lib/types/harness-compat.d.ts

@@ -8,11 +8,30 @@
  * sendMessage instead steers a running Agent and must never carry team jobs.
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Agent } from '@deepseek-ai/dsh-agent';
+import type { Agent, AgentOptions } from '@deepseek-ai/dsh-agent';
 import type { ContentBlock, MessageId, MessageSource } from '@deepseek-ai/dsh-llm';
 import type { Session, SessionEvent, SessionId } from '@deepseek-ai/dsh-session';
 import { type MemberToolFilter } from './tool-policies.ts';
 type Setup = (childCtx: Context, child: Agent) => () => void;
+/** Version-independent creation contract; legacy-only options stay at this seam. */
+export interface MemberStartSpec {
+    provider: string;
+    label: string;
+    request: {
+        parent: Agent;
+        prompt: ContentBlock[];
+        agentOptions?: AgentOptions;
+        persona?: string;
+        toolFilter?: MemberToolFilter;
+    };
+    signal: AbortSignal;
+}
+export declare function usesManagedActivations(runtime: Context['subagents']): boolean;
+export declare function startMember(runtime: Context['subagents'], spec: MemberStartSpec): Promise<{
+    childId: SessionId;
+}>;
+/** Wrap every available creation API, restoring only this plugin's own methods. */
+export declare function guardSubagentCreation(ctx: Context, check: (parent: Agent) => void): void;
 declare module '@deepseek-ai/dsh-llm' {
     interface MessageSourceMap {
         'agent-teams': {
@@ -121,4 +140,6 @@ export declare function memberToolFilter(maxDepth: number | undefined, knownTool
  * @returns the started member.
  */
 export declare function startMemberWithLenientFilter<T>(start: (filter: MemberToolFilter) => Promise<T>, filter: MemberToolFilter, relaxableDeny?: readonly string[]): Promise<T>;
+/** Targeted recursive cancellation renamed with the unified activation manager. */
+export declare function drainMemberChildren(runtime: Context['subagents'], parent: Agent, ids: readonly SessionId[]): Promise<void>;
 export {};

package/lib/types/members.d.ts

@@ -108,7 +108,7 @@ export interface MemberSelectionRuntime {
     /** Trusted fresh-child admission, before the durable member id is written. */
     isPendingMember(agent: Agent): boolean;
     /** Make one selection visible while Harness materializes the fresh child. */
-    withPending<T>(parentSessionId: string, label: string, selection: MemberLlmSelection, operation: () => Promise<T>): Promise<T>;
+    withPending<T>(parentSessionId: string, label: string, selection: MemberLlmSelection, operation: () => Promise<T>, setup?: TeamMember['runtimeSetup']): Promise<T>;
 }
 /**
  * Validate a resolved roster against every provider catalog before any child

package/lib/types/types.d.ts

@@ -252,6 +252,11 @@ export interface TeamMember {
      * authority that reapplies the filter to a cold-resumed child.
      */
     toolFilter?: MemberToolFilter;
+    /** Exact child-scoped setup restored on hosts with managed activations. */
+    runtimeSetup?: {
+        persona: string;
+        toolFilter: MemberToolFilter;
+    };
     joinedAt: number;
     status: MemberStatus;
     /** Execution admission is closed while a failed/pending handoff is drained. */