@wowyuarm/dsh-agent-team 0.1.11 → 0.1.13

package/packages/client-agent-team/lib/types/client/team-changes.d.ts

@@ -1,8 +1,6 @@
-import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
-import type { AgentTeamChangeScope, AgentTeamChangesRequest, AgentTeamChangesResult } from '@wowyuarm/dsh-agent-team/types';
-/** One poll observes one scope, or every Team change when the scope is omitted. */
+import type { ClientRemote } from '@deepseek-ai/dsh-api-gateway/client';
+import type { AgentTeamChangeScope } from '@wowyuarm/dsh-agent-team/types';
 export type TeamChangeScope = AgentTeamChangeScope | undefined;
-/** One invalidation delivered to every surface subscribed to one scope. */
 export type TeamChangeUpdate = {
     readonly type: 'changed';
     readonly version: number;
@@ -11,30 +9,23 @@ export type TeamChangeUpdate = {
     readonly message: string;
 };
 export type TeamChangeListener = (update: TeamChangeUpdate) => void;
-type ChangesFn = (request: AgentTeamChangesRequest, signal?: AbortSignal) => Promise<RemoteResult<AgentTeamChangesResult>>;
-/**
- * One long-poll per change scope, shared by every listening surface: panels
- * and pages never open parallel `changes` requests for the same scope, and
- * the poll is aborted as soon as the last subscriber leaves.
- *
- * Each poll keeps its own cursor, and a cursor only means something inside the
- * scope it was issued for: the Host answers a presence scope from a
- * process-local wake epoch and every other scope from a durable ledger
- * position.
- */
+/** One logical stream per scope per page; Harness owns the shared transport and recovery. */
 export declare class TeamChangeStream {
-    private readonly changes;
-    private readonly polls;
+    private readonly remote;
+    private readonly subscriptions;
+    constructor(remote: Pick<ClientRemote, '$stream' | 'agentTeam'>);
+    subscribe(scope: TeamChangeScope, listener: TeamChangeListener): () => void;
     /**
-     * The last version each scope key answered with, kept after that scope's poll
-     * is torn down: a commit landing while no poll exists is otherwise folded into
-     * the replacement poll's opening sample, which reports nothing.
+     * Reopen every scope whose stream already ended for good. The Harness resumes a
+     * live generation across reconnects, but a terminated one is gone for good: a new
+     * Host generation is the moment the scope was waiting for can come back, and the
+     * listeners keep their seats, so only the stream is replaced.
      */
-    private readonly observed;
-    constructor(changes: ChangesFn);
-    subscribe(scope: TeamChangeScope, listener: TeamChangeListener): () => void;
-    private run;
+    recover(): void;
+    private open;
+    dispose(): Promise<void>;
     private fail;
+    private run;
 }
 /**
  * The Host's `changes` stream never wakes on a Thread read — a read advances
@@ -49,5 +40,4 @@ export declare class TeamReadStream {
     bump(): void;
     subscribe(listener: () => void): () => void;
 }
-export {};
 //# sourceMappingURL=team-changes.d.ts.map

package/packages/client-agent-team/lib/types/client/team-changes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team-changes.d.ts","sourceRoot":"","sources":["../../../src/client/team-changes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAE3H,mFAAmF;AACnF,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,SAAS,CAAA;AAE9D,2EAA2E;AAC3E,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAA;AAEnE,KAAK,SAAS,GAAG,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAA;AAiB1H;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IASf,OAAO,CAAC,QAAQ,CAAC,OAAO;IARpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IACrD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;gBAExB,OAAO,EAAE,SAAS;IAE/C,SAAS,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,GAAG,MAAM,IAAI;YAmB7D,GAAG;IA2CjB,OAAO,CAAC,IAAI;CAKb;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAI;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAElD,IAAI,IAAI,IAAI;IAKZ,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAI5C"}
+{"version":3,"file":"team-changes.d.ts","sourceRoot":"","sources":["../../../src/client/team-changes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,qCAAqC,CAAA;AAErF,OAAO,KAAK,EAAE,oBAAoB,EAA0B,MAAM,gCAAgC,CAAA;AAElG,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,SAAS,CAAA;AAE9D,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAA;AAiBnE,6FAA6F;AAC7F,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;gBAExC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,WAAW,CAAC;IAEhF,SAAS,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAmB3E;;;;;OAKG;IACH,OAAO,IAAI,IAAI;IAYf,OAAO,CAAC,IAAI;IAiBN,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B,OAAO,CAAC,IAAI;YAOE,GAAG;CAclB;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAI;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAElD,IAAI,IAAI,IAAI;IAKZ,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAI5C"}

package/packages/client-agent-team/lib/types/client/team-changes.js

@@ -1,3 +1,4 @@
+import { RemoteStreamCarrierError } from '@deepseek-ai/dsh-api-gateway/client';
 function scopeKey(scope) {
     return scope === undefined ? 'all'
         : scope.kind === 'workspace' ? `workspace:${scope.workspaceId}`
@@ -5,99 +6,100 @@ function scopeKey(scope) {
                 : scope.kind === 'presence' ? `presence:${scope.workspaceId}`
                     : `thread:${scope.threadRef}`;
 }
-/**
- * One long-poll per change scope, shared by every listening surface: panels
- * and pages never open parallel `changes` requests for the same scope, and
- * the poll is aborted as soon as the last subscriber leaves.
- *
- * Each poll keeps its own cursor, and a cursor only means something inside the
- * scope it was issued for: the Host answers a presence scope from a
- * process-local wake epoch and every other scope from a durable ledger
- * position.
- */
+/** One logical stream per scope per page; Harness owns the shared transport and recovery. */
 export class TeamChangeStream {
-    changes;
-    polls = new Map();
-    /**
-     * The last version each scope key answered with, kept after that scope's poll
-     * is torn down: a commit landing while no poll exists is otherwise folded into
-     * the replacement poll's opening sample, which reports nothing.
-     */
-    observed = new Map();
-    constructor(changes) {
-        this.changes = changes;
+    remote;
+    subscriptions = new Map();
+    constructor(remote) {
+        this.remote = remote;
     }
     subscribe(scope, listener) {
         const key = scopeKey(scope);
-        let poll = this.polls.get(key);
-        if (poll === undefined) {
-            poll = { controller: new AbortController(), listeners: new Set(), resumeFrom: this.observed.get(key) };
-            this.polls.set(key, poll);
-            void this.run(key, scope, poll);
+        let subscription = this.subscriptions.get(key);
+        if (subscription === undefined) {
+            subscription = this.open(scope, new Set([listener]));
+            this.subscriptions.set(key, subscription);
+            void this.run(key, subscription);
+        }
+        else {
+            subscription.listeners.add(listener);
+            if (subscription.failure !== undefined)
+                listener({ type: 'failed', message: subscription.failure });
         }
-        poll.listeners.add(listener);
+        const owned = subscription;
         return () => {
-            const current = this.polls.get(key);
-            if (current === undefined || !current.listeners.delete(listener))
+            if (!owned.listeners.delete(listener) || owned.listeners.size !== 0)
                 return;
-            if (current.listeners.size === 0) {
-                this.polls.delete(key);
-                current.controller.abort();
-            }
+            if (this.subscriptions.get(key) === owned)
+                this.subscriptions.delete(key);
+            void owned.stream.dispose();
         };
     }
-    async run(key, scope, poll) {
-        const { signal } = poll.controller;
-        const request = (afterVersion) => ({ afterVersion, ...(scope === undefined ? {} : { scope }) });
-        let version = poll.resumeFrom;
-        if (version === undefined) {
-            // Nothing has been observed for this scope yet, so there is no cursor to
-            // resume from: sample the current version silently, because the
-            // subscribers just fetched their initial projection and an immediate wake
-            // would double-fetch. This leaves one named gap — a commit landing between
-            // that initial fetch being processed and this sample being answered is
-            // missed until the next commit in the scope — which resuming from a known
-            // version closes for every later subscription.
-            const probe = await this.changes(request(0), signal);
-            if (signal.aborted)
-                return;
-            if (!probe.ok) {
-                this.fail(key, poll, probe.error.message);
-                return;
-            }
-            version = probe.value.version;
-            this.observed.set(key, version);
-        }
-        while (!signal.aborted) {
-            const result = await this.changes(request(version), signal);
-            if (signal.aborted)
-                return;
-            if (!result.ok) {
-                this.fail(key, poll, result.error.message);
-                return;
-            }
-            this.observed.set(key, result.value.version);
-            // Any difference is a resolution in this scope's own cursor domain —
-            // normally growth, but a cursor left over from another domain (the two
-            // scopes count different things) or from an earlier Host lifetime can sit
-            // ahead of the domain value. Re-anchoring on difference instead of only
-            // on growth keeps such a subscription observable rather than silently
-            // parked, and the Host never answers a request whose cursor already
-            // equals the domain value, so this cannot spin.
-            if (result.value.version !== version) {
-                version = result.value.version;
-                for (const listener of poll.listeners)
-                    listener({ type: 'changed', version });
-            }
+    /**
+     * Reopen every scope whose stream already ended for good. The Harness resumes a
+     * live generation across reconnects, but a terminated one is gone for good: a new
+     * Host generation is the moment the scope was waiting for can come back, and the
+     * listeners keep their seats, so only the stream is replaced.
+     */
+    recover() {
+        // Replacing an existing key's value is safe during Map iteration: the entry keeps
+        // its place, and a scope that never failed is left untouched.
+        for (const [key, subscription] of this.subscriptions) {
+            if (subscription.failure === undefined)
+                continue;
+            const replacement = this.open(subscription.scope, subscription.listeners);
+            this.subscriptions.set(key, replacement);
+            void subscription.stream.dispose();
+            void this.run(key, replacement);
         }
     }
-    fail(key, poll, message) {
-        // A dead poll must not stay registered: the next subscriber restarts it.
-        if (this.polls.get(key) === poll)
-            this.polls.delete(key);
-        for (const listener of poll.listeners)
+    open(scope, listeners) {
+        const key = scopeKey(scope);
+        const stream = this.remote.$stream({
+            name: `Team changes ${key}`,
+            open: signal => this.remote.agentTeam.changes(scope === undefined ? {} : { scope }, signal),
+            // A normal end after the baseline is an outage, not a verdict: the Harness
+            // retries a carrier loss and reports it through `carrierFailed`, while every
+            // other error stays terminal. Only an end before the opening baseline is a
+            // protocol violation — this stream never yields nothing before it ends.
+            ended: accepted => accepted
+                ? new RemoteStreamCarrierError('Team change subscription ended without a terminal result')
+                : new Error('Team change subscription ended before its opening baseline'),
+            carrierFailed: error => this.fail(key, error.message),
+        });
+        return { scope, stream, listeners, failure: undefined };
+    }
+    async dispose() {
+        const subscriptions = [...this.subscriptions.values()];
+        this.subscriptions.clear();
+        await Promise.all(subscriptions.map(subscription => subscription.stream.dispose()));
+    }
+    fail(key, message) {
+        const subscription = this.subscriptions.get(key);
+        if (subscription === undefined || subscription.failure !== undefined)
+            return;
+        subscription.failure = message;
+        for (const listener of subscription.listeners)
             listener({ type: 'failed', message });
     }
+    async run(key, subscription) {
+        try {
+            for await (const item of subscription.stream) {
+                if (this.subscriptions.get(key) !== subscription)
+                    return;
+                item.accept();
+                subscription.failure = undefined;
+                // Every opening baseline invalidates too: this closes the initial-read
+                // race and recovers failed reads even when nothing changed while offline.
+                for (const listener of subscription.listeners)
+                    listener({ type: 'changed', version: item.value.version });
+            }
+        }
+        catch (error) {
+            if (this.subscriptions.get(key) === subscription)
+                this.fail(key, error instanceof Error ? error.message : String(error));
+        }
+    }
 }
 /**
  * The Host's `changes` stream never wakes on a Thread read — a read advances

package/packages/client-agent-team/lib/types/client/team-formatters.d.ts

@@ -1,4 +1,4 @@
-import type { AgentTeamActivity, AgentTeamClaim, AgentTeamMemberId, AgentTeamTask, AgentTeamTaskRef } from '@wowyuarm/dsh-agent-team/types';
+import type { AgentTeamActivity, AgentTeamClaim, AgentTeamClientMemberStatus, AgentTeamMemberId, AgentTeamTask, AgentTeamTaskRef } from '@wowyuarm/dsh-agent-team/types';
 import type { TeamConversationProps } from './slots.ts';
 import type { TeamStateDotState } from './TeamStateDot.tsx';
 export declare function formatTaskStatus(status: AgentTeamTask['status'], t: TeamConversationProps['t']): string;
@@ -42,18 +42,50 @@ export interface MentionSegment {
     readonly name?: string;
 }
 /**
- * Locate one Message's structured mention names inside its literal body. A
- * name matches case-insensitively with an optional leading '@' on Unicode word
- * boundaries, and longer names win at the same position. Mention segments
- * render the canonical `@Handle`; names absent from the body come back
- * unmatched so the consumer can append them as a fallback chip row.
+ * Locate one Message's delivered mention names inside its literal body. Matching
+ * is the shared Host delivery scan — an authored `@`, case-insensitive on Unicode
+ * word boundaries, longest handle first, code quoted rather than called — so a chip
+ * never lands where delivery would not reach. Mention segments render the canonical
+ * `@Handle`; names absent from the body come back unmatched so the consumer can
+ * append them as a fallback chip row.
  */
 export declare function splitMentionNames(text: string, names: readonly string[]): {
     segments: MentionSegment[];
     unmatched: readonly string[];
 };
+/**
+ * Whether one draft spells a handle as an authored `@mention`: the shared
+ * delivery scan, so the composer's recipient prune and will-notify preview agree
+ * with the Host on what the draft actually calls.
+ */
+export declare function containsMention(body: string, handle: string): boolean;
+/** Whether one draft carries the `@all` marker the mention menu expands. */
+export declare function containsAllMention(body: string): boolean;
+/**
+ * Every Member the mention menu's `@all` row stands for: the roster this
+ * composer was handed minus Members who cannot take a Message right now — the
+ * same filter the per-handle rows apply, so the expansion and the menu agree.
+ */
+export declare function allMentionMembers(members: readonly AgentTeamClientMemberStatus[]): readonly AgentTeamClientMemberStatus[];
+/**
+ * Member ids one draft asks to notify by text alone: the Client's preview of
+ * the Host's own body mention resolution, so a hand-typed `@Handle` reports
+ * exactly like a pick from the mention menu. `@all` stands for the menu's
+ * expansion; a written handle counts whenever its Member can still take a
+ * Message — state decides, not presence, because an offline Member is notified
+ * and reads it later.
+ *
+ * The result is preview-only. Only picked recipients travel as explicit
+ * recipients, where a name the Channel cannot reach would be a rejected target
+ * rather than the prose the Host reads.
+ */
+export declare function mentionedMemberIds(body: string, members: readonly AgentTeamClientMemberStatus[]): readonly AgentTeamMemberId[];
 /** Canonical chip handles for one Message's structured mention refs. */
 export declare function mentionNamesOf(mentions: readonly AgentTeamMemberId[], handles: ReadonlyMap<AgentTeamMemberId, string>): string[];
+/** Accessible label for one "who is on this work" stack: its owners' handles, comma-separated. */
+export declare function claimersLabel(owners: ReadonlyArray<{
+    readonly name: string;
+}>, t: TeamConversationProps['t']): string;
 /**
  * Whether an Agent body survives literal rendering unchanged: no fences,
  * inline code, emphasis markers, links, images, tables, or block constructs.
@@ -70,10 +102,13 @@ export declare function formatAbsoluteTime(occurredAt: string): string;
  */
 export declare function formatMessageTime(occurredAt: string, now?: Date): string;
 /**
- * Queue label for one Inbox row's newest mention. The mention queue scans by
- * recency, so the two days a reader reasons about by name are named ("今天" /
- * "昨天") while everything older keeps the Message date form, so the row and
- * the Thread it opens agree about the same instant.
+ * Recency label for one Inbox row's newest fact, shared with the Channel feed's
+ * entry line so the two agree about the same instant. Today is a bare clock time
+ * — the reader is in today, and 「今天」 printed down every row spends the label's
+ * first word on the one segment that never varies, while `HH:mm` alone still
+ * reads as a clock because it is exactly one. The first day that is not today is
+ * the fact the reader has to be told, so it keeps its word; everything older
+ * keeps the Message date form, so the row and the Thread it opens agree.
  */
 export declare function formatInboxTime(occurredAt: string, t: TeamConversationProps['t'], now?: Date): string;
 export declare function formatActivity(activity: AgentTeamActivity, options: {

package/packages/client-agent-team/lib/types/client/team-formatters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team-formatters.d.ts","sourceRoot":"","sources":["../../../src/client/team-formatters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAC3I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,MAAM,CAQvG;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,MAAM,CAMtG;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAEhF;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACtB;AAgBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAWpE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAMD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAwBtI;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAMhI;AAKD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAID,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,MAAM,CAO9E;AAWD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,OAAa,GAAG,MAAM,CAQ3G;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE;IACnE,QAAQ,CAAC,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,MAAM,CAAA;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C,GAAG,MAAM,CAkBT;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAEzC,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;AAEjE,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,8GAA8G;IAC9G,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAA;IACtD,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IACrD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B,GAAG,kBAAkB,CA6BrB"}
+{"version":3,"file":"team-formatters.d.ts","sourceRoot":"","sources":["../../../src/client/team-formatters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAExK,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,MAAM,CAQvG;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,MAAM,CAMtG;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAEhF;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACtB;AAgBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAWpE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAatI;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAErE;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,GAAG,SAAS,2BAA2B,EAAE,CAEzH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,2BAA2B,EAAE,GAAG,SAAS,iBAAiB,EAAE,CAS9H;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAMhI;AAED,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,MAAM,CAErH;AAKD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAID,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,MAAM,CAO9E;AAWD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,OAAa,GAAG,MAAM,CAO3G;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE;IACnE,QAAQ,CAAC,CAAC,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,MAAM,CAAA;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C,GAAG,MAAM,CAkBT;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAEzC,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;AAEjE,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,8GAA8G;IAC9G,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAA;IACtD,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IACrD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B,GAAG,kBAAkB,CA6BrB"}

package/packages/client-agent-team/lib/types/client/team-formatters.js

@@ -1,3 +1,4 @@
+import { hasAllMarker, resolveBodyMentions, scanBodyHandles } from '@wowyuarm/dsh-agent-team/mentions';
 export function formatTaskStatus(status, t) {
     return t({
         todo: 'taskStatusTodo',
@@ -81,42 +82,74 @@ export function isSingleBrandedRef(text) {
     const matches = [...trimmed.matchAll(BRANDED_REF_PATTERN)];
     return matches.length === 1 && matches[0][0] === trimmed;
 }
-function escapeRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
 /**
- * Locate one Message's structured mention names inside its literal body. A
- * name matches case-insensitively with an optional leading '@' on Unicode word
- * boundaries, and longer names win at the same position. Mention segments
- * render the canonical `@Handle`; names absent from the body come back
- * unmatched so the consumer can append them as a fallback chip row.
+ * Locate one Message's delivered mention names inside its literal body. Matching
+ * is the shared Host delivery scan — an authored `@`, case-insensitive on Unicode
+ * word boundaries, longest handle first, code quoted rather than called — so a chip
+ * never lands where delivery would not reach. Mention segments render the canonical
+ * `@Handle`; names absent from the body come back unmatched so the consumer can
+ * append them as a fallback chip row.
  */
 export function splitMentionNames(text, names) {
     if (names.length === 0)
         return { segments: [{ text, mention: false }], unmatched: [] };
-    const ordered = [...names].sort((left, right) => right.length - left.length);
-    // The lookbehind keeps the optional '@' from consuming the separator of an
-    // email-like occurrence: the character before the name (or before its '@')
-    // must not be a letter, digit, underscore, or another '@'.
-    const pattern = new RegExp(`(?<![\\p{L}\\p{N}_@])@?(?:${ordered.map(name => `(${escapeRegExp(name)})`).join('|')})(?=$|[^\\p{L}\\p{N}_])`, 'giu');
     const segments = [];
     const matched = new Set();
     let cursor = 0;
-    for (const match of text.matchAll(pattern)) {
-        const groupIndex = match.findIndex((group, index) => index >= 1 && group !== undefined);
-        if (groupIndex < 1)
-            continue;
-        if (match.index > cursor)
-            segments.push({ text: text.slice(cursor, match.index), mention: false });
-        const name = ordered[groupIndex - 1];
-        segments.push({ text: `@${name}`, mention: true, name });
-        matched.add(name.toLowerCase());
-        cursor = match.index + match[0].length;
+    for (const match of scanBodyHandles(text, names)) {
+        if (match.start > cursor)
+            segments.push({ text: text.slice(cursor, match.start), mention: false });
+        segments.push({ text: `@${match.handle}`, mention: true, name: match.handle });
+        matched.add(match.handle.toLowerCase());
+        cursor = match.end;
     }
     if (cursor < text.length)
         segments.push({ text: text.slice(cursor), mention: false });
     return { segments, unmatched: names.filter(name => !matched.has(name.toLowerCase())) };
 }
+/**
+ * Whether one draft spells a handle as an authored `@mention`: the shared
+ * delivery scan, so the composer's recipient prune and will-notify preview agree
+ * with the Host on what the draft actually calls.
+ */
+export function containsMention(body, handle) {
+    return scanBodyHandles(body, [handle]).length > 0;
+}
+/** Whether one draft carries the `@all` marker the mention menu expands. */
+export function containsAllMention(body) {
+    return hasAllMarker(body);
+}
+/**
+ * Every Member the mention menu's `@all` row stands for: the roster this
+ * composer was handed minus Members who cannot take a Message right now — the
+ * same filter the per-handle rows apply, so the expansion and the menu agree.
+ */
+export function allMentionMembers(members) {
+    return members.filter(status => status.presence !== 'unavailable' && status.member.state !== 'inactive' && status.member.state !== 'archived');
+}
+/**
+ * Member ids one draft asks to notify by text alone: the Client's preview of
+ * the Host's own body mention resolution, so a hand-typed `@Handle` reports
+ * exactly like a pick from the mention menu. `@all` stands for the menu's
+ * expansion; a written handle counts whenever its Member can still take a
+ * Message — state decides, not presence, because an offline Member is notified
+ * and reads it later.
+ *
+ * The result is preview-only. Only picked recipients travel as explicit
+ * recipients, where a name the Channel cannot reach would be a rejected target
+ * rather than the prose the Host reads.
+ */
+export function mentionedMemberIds(body, members) {
+    if (hasAllMarker(body))
+        return allMentionMembers(members).map(status => status.member.memberId);
+    const candidates = members
+        .filter(status => status.member.state !== 'inactive' && status.member.state !== 'archived')
+        .map(status => ({ memberId: status.member.memberId, handle: status.member.handle }));
+    // The draft's author is the Human reader, and a Message never mentions its
+    // own author: resolving with that sender drops a self-call exactly where
+    // delivery would.
+    return resolveBodyMentions(body, candidates, 'member:human').memberIds;
+}
 /** Canonical chip handles for one Message's structured mention refs. */
 export function mentionNamesOf(mentions, handles) {
     return mentions
@@ -125,6 +158,10 @@ export function mentionNamesOf(mentions, handles) {
         .map(memberId => memberId === 'member:human' ? 'human' : handles.get(memberId))
         .filter((name) => name !== undefined);
 }
+/** Accessible label for one "who is on this work" stack: its owners' handles, comma-separated. */
+export function claimersLabel(owners, t) {
+    return t('claimers', { names: owners.map(owner => `@${owner.name}`).join(', ') });
+}
 const MARKDOWN_BLOCK_CONSTRUCT = /(^|\n)[ \t]{0,3}(?:#{1,6}[ \t]|>[ \t]|[-*+][ \t]|\d+[.)][ \t])|^[ \t]*\|.+\|/m;
 const MARKDOWN_INLINE_CONSTRUCT = /[`*_[\]!]|~~~|```/;
 /**
@@ -168,19 +205,23 @@ function calendarDayDelta(at, now) {
     return Math.round((midnight(now) - midnight(at)) / 86_400_000);
 }
 /**
- * Queue label for one Inbox row's newest mention. The mention queue scans by
- * recency, so the two days a reader reasons about by name are named ("今天" /
- * "昨天") while everything older keeps the Message date form, so the row and
- * the Thread it opens agree about the same instant.
+ * Recency label for one Inbox row's newest fact, shared with the Channel feed's
+ * entry line so the two agree about the same instant. Today is a bare clock time
+ * — the reader is in today, and 「今天」 printed down every row spends the label's
+ * first word on the one segment that never varies, while `HH:mm` alone still
+ * reads as a clock because it is exactly one. The first day that is not today is
+ * the fact the reader has to be told, so it keeps its word; everything older
+ * keeps the Message date form, so the row and the Thread it opens agree.
  */
 export function formatInboxTime(occurredAt, t, now = new Date()) {
     const at = new Date(occurredAt);
     if (Number.isNaN(at.getTime()))
         return '';
     const days = calendarDayDelta(at, now);
-    if (days === 0 || days === 1) {
-        return `${t(days === 0 ? 'inboxTimeToday' : 'inboxTimeYesterday')} ${pad(at.getHours())}:${pad(at.getMinutes())}`;
-    }
+    if (days === 0)
+        return `${pad(at.getHours())}:${pad(at.getMinutes())}`;
+    if (days === 1)
+        return `${t('inboxTimeYesterday')} ${pad(at.getHours())}:${pad(at.getMinutes())}`;
     return formatMessageTime(occurredAt, now);
 }
 export function formatActivity(activity, options) {

package/packages/tool-agent-team/README.md

@@ -7,7 +7,7 @@ Model-facing tools for Agent Team Members. The package registers tools in the ca
 ## Tools
 
 - `team_inbox` lists bounded unread Thread summaries for the calling Member, ordered by direct work and then recency; Task standing appears only where the Thread has a real Task overlay. The header states total unread/direct counts and the number of Threads shown (with a truncation conclusion when unread work lies beyond the bounded list); each item shows its exact unread/direct counts, Channel ref, and Task standing. The footer routes reading to `team_thread read`; the render carries no revision and no write token.
-- `team_thread` reads a Thread, pages history, follows, or unfollows. `threadRef` is primary; a `taskRef` is a Host alias only for released task-only Clients. The five actions render separately: `status`/`follow`/`unfollow` answer only the Attention question in one line; `read` renders outcome, Thread identity, orientation (full anchor when Host-supplied background is present, bounded anchor subject otherwise, never a duplicate of an in-facts anchor), active Claims only, the chronological facts with inline unread/direct markers, and a read-through/remaining-unread footer; `history` renders a historical page with the full anchor on a first page and the bounded subject on continuation pages, never current Claims or advice. `read` advances the durable watermark and is the only read-side source of a next-write token — rendered only when no unread remains; your own committed public mutations hand off a fresh token as well. A read with nothing unread for the caller advances nothing, writes no operation, and renders `Read — no unread updates …` instead of claiming a commit, still answering from the current projection. Activity facts render structured — actor, Task ref, and the Claim refs each activity claimed, completed, accepted, or released. A read that acknowledges an unread acceptance of a still-done Task carries one `contextAdvice` block (usage, route budgets, the `min(128_000, handoffAt)` Task-boundary threshold, and one keep/rollover/handoff-now action); it is advisory only and degrades to an explicit `unavailable` line when measurement fails.
+- `team_thread` reads a Thread, pages history, follows, or unfollows. `threadRef` is primary; a `taskRef` is a Host alias only for released task-only Clients. The five actions render separately: `status`/`follow`/`unfollow` answer only the Attention question in one line; `read` renders outcome, Thread identity, orientation (full anchor when Host-supplied background is present, bounded anchor subject otherwise — and no background at all for a Member re-entering a Thread it has already read, so its orientation there is that subject plus this batch — never a duplicate of an in-facts anchor), active Claims only, the chronological facts with inline unread/direct markers, and a read-through/remaining-unread footer that also states how many Thread facts precede the watermark whenever the read left any behind; `history` renders a historical page with the full anchor on a first page and the bounded subject on continuation pages, never current Claims or advice. `read` advances the durable watermark and is the only read-side source of a next-write token — rendered only when no unread remains; your own committed public mutations hand off a fresh token as well. A read with nothing unread for the caller advances nothing, writes no operation, and renders `Read — no unread updates …` instead of claiming a commit, still answering from the current projection. Activity facts render structured — actor, Task ref, and the Claim refs each activity claimed, completed, accepted, or released. A read that acknowledges an unread acceptance of a still-done Task carries one `contextAdvice` block (usage, route budgets, the `min(128_000, handoffAt)` Task-boundary threshold, and one keep/rollover/handoff-now action); it is advisory only and degrades to an explicit `unavailable` line when measurement fails.
 - `team_message` starts a top-level Thread, replies to an existing Thread, or sends a DM. It defaults to a taskless Thread; pass `asTask: true` for atomic Task creation. A committed start/reply renders one committed-verb outcome (Thread created / reply added) with the Message, Thread, and optional Task refs, and exactly one next-write token hand-off. Replies reject unread work before checking token freshness. Typed rejections begin `Not committed`, keep the structured refs and counts needed to reread and retry, and render no numeric revision or write token — recovery is read-and-reconsider. DMs distinguish `Delivered` from `Recorded, not delivered` (with the delivery note and a no-blind-duplicate warning).
 - `team_claim` lists or mutates the calling Member's Direction Claims through `list`, `claim`, `done`, and `release`; it applies only to real Tasks. `list` renders the Task/Thread identity with active Claims only (the collision surface) and no write token. A committed mutation names its action (Claim created/completed/released), renders the authoritative affected Claim first, and hands off one next-write token. Rejections share the message rejection form. Direction exclusion uses Unicode NFKC normalization, trim, whitespace compression, and deterministic case folding.
 - `team_view` is the address book: bounded, membership-authorized Channel, top-level Thread, and Member summaries — current addresses, not a work queue. Threads are the sole paginated catalog: newest-first rows carrying threadRef, Channel ref, a bounded anchor subject, and Task standing inline (never a second Task index, never revision or message count). The cursor pages Thread rows only; continuation pages render Threads alone, and paging reaches every authorized top-level Thread, including taskless and off-page taskful ones.
@@ -15,11 +15,11 @@ Model-facing tools for Agent Team Members. The package registers tools in the ca
 - `context_checkpoint` records one named checkpoint of the calling Member's current context. The durable checkpoint is the successful `tool/call`+`tool/result` pair the Session projection folds; the returned ref is deterministic from the Member Session identity plus the tool call id. It performs no lifecycle side effect in the tool body and concludes the turn: a checkpoint resolves at its containing turn's end, so the model records it as its final action of a completed unit of work.
 - `context_timeline` returns one bounded structural view of the Member's context generations across the current Session and its archived ancestor lineage: recorded checkpoints and handoff/Team/compaction boundaries, with restorability reasons where a return cannot be proven safe. Structural only — no transcript content. A fresh `context_rollover` never requires consulting the timeline first.
 
-An Agent cannot silently enroll an unfollowed Agent through a mention; the Host returns `member_not_following`. Human confirmation is a separate Host/Client flow. Closed Tasks reject replies, Claims, and new Attention until a Human reopens them; taskless Threads have no Claim or Task-resolution mutation path.
+Mentions are authored in the Message body, as `@Handle` (the `@` is required, matching ignores case, and `@all` reaches the Channel); there is no recipient parameter. An Agent cannot silently enroll an uninvited Member: naming one this Thread has never carried commits the Message, delivers nothing to that Member, and reports them as undelivered. Human confirmation is a separate Host/Client flow. Closed Tasks reject replies, Claims, and new Attention until a Human reopens them; taskless Threads have no Claim or Task-resolution mutation path.
 
 Every agent-facing render carries absolute event instants in the fixed Team coordination zone UTC+8 with an explicit offset (`2026-09-08T17:00:00+08:00`): `team_thread` fact lines and anchors stamp each fact with its committing operation's instant, `team_inbox` rows carry `newestOccurredAt`, `team_view` Thread rows carry `lastActivityAt`, notifications state `Occurred at:`, and committed mutations render `Committed at:` from the receipt. The same stored instant renders byte-identically on every reread path; only absolute timestamps are rendered, never relative text, and sequence and revision — not wall-clock time — remain the ordering authority.
 
-Canonical results expose stable refs, optional Task status, Thread revision, Claim history, Attention, and unread facts as structured fields. The model-visible renders follow the action decision surface: the write token appears only on a fully drained `team_thread read` and a committed public mutation; browsing results (`team_view`, `team_inbox`, status/follow/unfollow, `history`, `team_claim list`) and all typed rejections render no revision and no token. Typed `unread_required` and `stale_revision` results keep the structured fields needed to reread and retry deliberately. Tool execution resolves the exact live `exec.agent`; arguments cannot select or impersonate the actor or Workspace. Write request identity derives from sessionId plus tool callId. `context_rollover` and `context_checkpoint` conclude the Agent turn (a rollover must not be followed by old-generation work, and a checkpoint resolves at its containing turn's end); every other Team tool returns to the model loop.
+Canonical results expose stable refs, optional Task status, Thread revision, Claim history, Attention, and unread facts as structured fields. The model-visible renders follow the action decision surface: the write token appears only on a fully drained `team_thread read` and a committed public mutation; browsing results (`team_view`, `team_inbox`, status/follow/unfollow, `history`, `team_claim list`) and all typed rejections render no revision and no token. Typed `unread_required` and `stale_revision` results keep the structured fields needed to reread and retry deliberately. Tool execution resolves the exact live `exec.agent`; arguments cannot select or impersonate the actor, and the optional `workspace` selector can only pick among that actor's participated Workspaces. Write request identity derives from sessionId plus tool callId. `context_rollover` and `context_checkpoint` conclude the Agent turn (a rollover must not be followed by old-generation work, and a checkpoint resolves at its containing turn's end); every other Team tool returns to the model loop.
 
 The complete implemented protocol is documented in [`../../docs/team-collaboration.md`](../../docs/team-collaboration.md).
 

package/packages/tool-agent-team/README.zh.md

@@ -7,7 +7,7 @@
 ## 工具
 
 - `team_inbox` 列出调用方 Member 的有界未读 Thread 摘要，先按 direct work、再按最近活动排序；只有 Thread 存在真实 Task overlay 时才出现 Task standing。header 给出 unread/direct 总数与展示的 Threads 数（有界列表之外仍有未读时给出截断结论）；每个条目显示精确的 unread/direct 计数、Channel ref 与 Task standing。页脚把阅读指向 `team_thread read`；渲染不携带 revision 与写令牌。
-- `team_thread` 读取 Thread、分页历史、follow 或 unfollow。`threadRef` 是主身份；`taskRef` 只对 released task-only Client 是 Host alias。五个 action 分开渲染：`status`/`follow`/`unfollow` 一行只回答 Attention 问题；`read` 渲染结果、Thread 身份、导向（有 Host 提供的 background 时给 full anchor，否则给 bounded anchor subject，anchor 已在 facts 中时绝不重复）、只含 active Claims、带行内 unread/direct 标记的按时间 facts、read-through/剩余未读页脚；`history` 渲染历史页（首页 full anchor、continuation 页 bounded subject，绝无当前 Claims 或 advice）。`read` 推进持久 watermark，是 next-write token 的读侧唯一来源——仅在未读清零时渲染；你自己的已提交 public mutation 也会回传一份新 token。一次对调用者没有未读的 read 什么都不推进、不写任何 operation，渲染也不再声称提交（`Read — no unread updates …`），画面仍来自当前 projection。Activity facts 结构化渲染——actor、Task ref，以及每条 activity claim、完成、接受或 release 的 Claim refs。确认仍为 done 状态 Task 的未读验收的那次 read 附带一段 `contextAdvice`（用量、路由预算、`min(128_000, handoffAt)` 任务边界阈值、keep/rollover/handoff-now 唯一动作）；它只是建议，测量失败时降级为显式 `unavailable` 文案。
+- `team_thread` 读取 Thread、分页历史、follow 或 unfollow。`threadRef` 是主身份；`taskRef` 只对 released task-only Client 是 Host alias。五个 action 分开渲染：`status`/`follow`/`unfollow` 一行只回答 Attention 问题；`read` 渲染结果、Thread 身份、导向（有 Host 提供的 background 时给 full anchor，否则给 bounded anchor subject——重新进入自己读过的 Thread 的 Member 完全没有 background，它在那里的定位就是该 subject 加本次 batch——anchor 已在 facts 中时绝不重复）、只含 active Claims、带行内 unread/direct 标记的按时间 facts、read-through/剩余未读页脚（只要这次 read 身后留有 Thread facts，页脚同时给出那些 facts 的数量）；`history` 渲染历史页（首页 full anchor、continuation 页 bounded subject，绝无当前 Claims 或 advice）。`read` 推进持久 watermark，是 next-write token 的读侧唯一来源——仅在未读清零时渲染；你自己的已提交 public mutation 也会回传一份新 token。一次对调用者没有未读的 read 什么都不推进、不写任何 operation，渲染也不再声称提交（`Read — no unread updates …`），画面仍来自当前 projection。Activity facts 结构化渲染——actor、Task ref，以及每条 activity claim、完成、接受或 release 的 Claim refs。确认仍为 done 状态 Task 的未读验收的那次 read 附带一段 `contextAdvice`（用量、路由预算、`min(128_000, handoffAt)` 任务边界阈值、keep/rollover/handoff-now 唯一动作）；它只是建议，测量失败时降级为显式 `unavailable` 文案。
 - `team_message` 创建顶层 Thread、回复既有 Thread 或发送 DM。默认创建 taskless Thread；传入 `asTask: true` 才原子创建 Task。commit 的 start/reply 渲染一个 committed-verb 结果（Thread created / reply added），携带 Message、Thread 与可选 Task refs，以及恰好一个 next-write token hand-off。Reply 在检查令牌新鲜度前先拒绝未读工作。类型化拒绝以 `Not committed` 开头，保留重读与审慎重试所需的结构化 refs 与计数，不渲染数字 revision 或写令牌——恢复路径是 read-and-reconsider。DM 区分 `Delivered` 与 `Recorded, not delivered`（携带 delivery note 与禁止盲目重发的警告）。
 - `team_claim` 通过 `list`、`claim`、`done`、`release` 读取或修改调用方 Member 的 Direction Claim；它只适用于真实 Task。`list` 渲染 Task/Thread 身份与只有 active Claims 的 collision surface，且无写令牌。commit 的 mutation 点名动作（Claim created/completed/released），先渲染权威的受影响 Claim，再 hand-off 一个 next-write token。拒绝与 message 拒绝共享同一形式。Direction 互斥键执行 Unicode NFKC normalization、trim、空白压缩和确定性大小写折叠。
 - `team_view` 是 address book：有界、按 membership 授权的 Channel、顶层 Thread 与 Member 摘要——是当前的地址簿，不是工作队列。Threads 是唯一分页目录：newest-first 行携带 threadRef、Channel ref、bounded anchor subject 与行内 Task standing（绝无第二个 Task 索引，也不渲染 revision 或消息数）。cursor 只延续 Thread 行；continuation 页只渲染 Threads，翻页可达全部获授权的顶层 Threads，包括 taskless 与不在首页的 taskful。
@@ -15,11 +15,11 @@
 - `context_checkpoint` 为调用的 Member 记录一个命名的当前上下文 checkpoint。durable checkpoint 就是 Session projection 折叠的成功 `tool/call`+`tool/result` 对；返回的 ref 由 Member Session 身份加 tool call id 确定性派生。工具体不做 lifecycle 副作用，但会结束 turn：checkpoint 在其所属 turn 结束时 resolve，因此模型把它作为一个完整工作单元的最后动作来记录。
 - `context_timeline` 返回该 Member 跨当前 Session 与已归档祖先 lineage 的上下文代际有界结构视图：已记录的 checkpoints 与 handoff/Team/compaction 边界，无法证明可安全回返的条目携带拒绝原因。仅结构信息——不含任何 transcript 正文。fresh 的 `context_rollover` 从不需要先查 timeline。
 
-Agent 不能通过 mention 静默把另一个 unfollowed Agent 加入 Thread；Host 返回 `member_not_following`。Human confirmation 属于单独的 Host/Client 流程。Closed Task 在 Human reopen 前拒绝 reply、Claim 和新的 Attention；taskless Thread 没有 Claim 或 Task resolution mutation path。
+mention 在 Message 正文里撰写，形如 `@Handle`（`@` 必需、大小写不敏感，`@all` 触达整个 Channel）；不存在收件人参数。Agent 无法静默加入未被邀请的 Member：mention 一个该 Thread 从未承载过的 Member 时 Message 照常提交，但不向其送达，并在结果里报告为未送达。Human confirmation 属于单独的 Host/Client 流程。Closed Task 在 Human reopen 前拒绝 reply、Claim 和新的 Attention；taskless Thread 没有 Claim 或 Task resolution mutation path。
 
 所有 agent-facing 渲染都在固定的 Team 协调时区 UTC+8 下携带带显式偏移的绝对事件时刻（`2026-09-08T17:00:00+08:00`）：`team_thread` 的 fact 行与 anchor 为每条 fact 标注其提交 operation 的时刻，`team_inbox` 行携带 `newestOccurredAt`，`team_view` 的 Thread 行携带 `lastActivityAt`，通知给出 `Occurred at:`，已提交变更从 receipt 渲染 `Committed at:`。同一存储时刻在任何重读路径中渲染完全一致；只渲染绝对 timestamp，绝不出现相对时间文案，且 sequence 与 revision——而非 wall-clock 时间——仍是顺序 authority。
 
-Canonical result 以结构化字段暴露稳定 refs、可选 Task status、Thread revision、Claim history、Attention 和未读 facts。模型可见的渲染遵循 action decision surface：写令牌只出现在未读清零的 `team_thread read` 与一次已提交的 public mutation 上；浏览类结果（`team_view`、`team_inbox`、status/follow/unfollow、`history`、`team_claim list`）与所有类型化拒绝都不渲染 revision 与令牌。类型化的 `unread_required` 与 `stale_revision` 结果保留重新读取和审慎重试所需的结构化字段。工具执行通过准确的 live `exec.agent` 解析 actor；参数不能选择或冒充 actor 或 Workspace。写操作的 request identity 由 sessionId 与 tool callId 派生。`context_rollover` 与 `context_checkpoint` 结束 Agent turn；其余 Team tools 将结果返回模型循环，不主动结束 turn。
+Canonical result 以结构化字段暴露稳定 refs、可选 Task status、Thread revision、Claim history、Attention 和未读 facts。模型可见的渲染遵循 action decision surface：写令牌只出现在未读清零的 `team_thread read` 与一次已提交的 public mutation 上；浏览类结果（`team_view`、`team_inbox`、status/follow/unfollow、`history`、`team_claim list`）与所有类型化拒绝都不渲染 revision 与令牌。类型化的 `unread_required` 与 `stale_revision` 结果保留重新读取和审慎重试所需的结构化字段。工具执行通过准确的 live `exec.agent` 解析 actor；参数不能选择或冒充 actor，可选的 `workspace` 选择器只能在该 actor 已参与的 Workspace 中选择。写操作的 request identity 由 sessionId 与 tool callId 派生。`context_rollover` 与 `context_checkpoint` 结束 Agent turn；其余 Team tools 将结果返回模型循环，不主动结束 turn。
 
 完整的已实现协议见 [`../../docs/team-collaboration.md`](../../docs/team-collaboration.md)。
 

package/packages/tool-agent-team/lib/host-access.js

@@ -18,3 +18,22 @@ export function member(agent) {
         throw new Error('team tool requires an active Team Member');
     return current;
 }
+/** A collaboration address, never a cwd or Session switch. */
+export const workspaceParam = {
+    type: 'string',
+    description: 'Target Workspace id exactly as listed in your participation context or team_view. Required when you participate in more than one Workspace; only a sole participation can be inferred. This does not change your Session cwd.',
+};
+/** Reject ambiguous routing before a tool reads facts or attempts a mutation. */
+export function workspaceOf(args, agent) {
+    const workspaces = service(agent).workspacesForAgent(agent);
+    const choices = workspaces.map(workspace => workspace.workspaceId).join(', ');
+    if (args.workspace === undefined) {
+        if (workspaces.length !== 1)
+            throw new Error(`workspace is required when participating in multiple Workspaces. Choose: ${choices}`);
+        return workspaces[0].workspaceId;
+    }
+    const selected = workspaces.find(workspace => workspace.workspaceId === args.workspace);
+    if (selected === undefined)
+        throw new Error(`Not participating in Workspace '${args.workspace}'. Choose: ${choices}`);
+    return selected.workspaceId;
+}