atris 3.82.22 → 3.82.24

package/FOR_AGENTS.md

@@ -55,6 +55,17 @@ atris log "an idea for later"
 # or headless: atris wish "an idea" --json --no-mission
 ```
 
+Talk to the rest of the team, on any computer, with the sign-in you already have:
+
+```bash
+atris channel                              # what's new in every channel
+atris channel general "hello from <you>"   # post
+atris channel claim <task-key>             # then: atris channel done <task-key> "summary"
+```
+
+Pick the business with `--business <slug>` or `ATRIS_BUSINESS=<slug>`. Post as
+yourself, not your owner, with `--as <member>` or `ATRIS_AGENT=<member>`.
+
 **Never** `atris task accept` unless a human approved. That's their gate, not yours.
 
 Every task starts with three plain sentences: what changes, why it matters, and

package/README.md

@@ -359,6 +359,7 @@ atris business record atris/reports/2026-04-12-operator-recap.md --outcome mixed
 | `atris loop` | Refresh wiki health, stale/orphan signals, and next ingest candidates |
 | `atris wiki` | Full wiki namespace: ingest, query, lint, search, log, and loop |
 | `atris receipt` | Save evidence from an agent run |
+| `atris channel` | The team's shared channels across computers: `atris channel <name>` reads, `atris channel <name> "message"` posts, `claim` and `done` take a task (`--business <slug>`, `--as <member>`) |
 | `atris pay` | Pay another Atris account in credits (100 credits = $1); `history`, `show`, `accept`, `cancel` |
 | `atris trust` | See an account's trust and the friends you share; `vouch` or `unvouch` for someone |
 | `atris experiments` | Run small experiments and compare results |

package/bin/atris.js

@@ -153,7 +153,8 @@ const dryRunRequested = updateArgs.includes('--dry-run');
 const skipUpdateCheck = Boolean(process.env.ATRIS_SKIP_UPDATE_CHECK || process.env.NO_UPDATE_NOTIFIER || helpRequested || jsonRequested);
 // Local-only commands make no registry call and start no background install.
 // sentinel prints its own one-line notice at the end of the run instead.
-if (!skipUpdateCheck && (!updateCommand || (updateCommand && !['version', 'update', 'mcp', 'recap', '99', 'sentinel', 'login'].includes(updateCommand)))) {
+// listen is polled by scripts every minute and its stdout is read by them.
+if (!skipUpdateCheck && (!updateCommand || (updateCommand && !['version', 'update', 'mcp', 'recap', '99', 'sentinel', 'login', 'listen'].includes(updateCommand)))) {
   updateCheckPromise = checkForUpdates()
     .then((updateInfo) => {
       if (updateInfo) {
@@ -787,6 +788,8 @@ function showHelpAll() {
   console.log('  hire       - Hire an agent in one step: name, job, inbox, allowance, nightly work loop');
   console.log('  hires      - Morning check-in: one line per hire (mail, spend, last run)');
   console.log('  mail       - Your agents\' own inboxes: list, read, send (not Gmail)');
+  console.log('  channel    - The team\'s shared channels: read, post, claim, done (atris channel <name>)');
+  console.log('  listen     - A team member\'s inbox: what was sent to it, then mark it handled (atris listen --as <member>)');
   console.log('  design     - Extract a site design system, check brand adherence, search brands');
   console.log('  mcp        - Run the atris MCP server (stdio) for Claude Desktop and Cursor');
   console.log('');
@@ -2580,6 +2583,16 @@ if (command === 'guide') {
   Promise.resolve().then(() => require('../commands/mail').mailCommand(process.argv.slice(3)))
     .then((code) => exitAfterStdoutDrain(typeof code === 'number' ? code : 0))
     .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'channel') {
+  // The team's shared channels on the hosted server: read, post, claim, report by name.
+  Promise.resolve().then(() => require('../commands/channel').channelCommand(process.argv.slice(3)))
+    .then((code) => exitAfterStdoutDrain(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'listen') {
+  // A team member's inbox on the team board. Exits 0 new, 1 nothing new, 2 error.
+  Promise.resolve().then(() => require('../commands/listen').listenCommand(process.argv.slice(3)))
+    .then((code) => exitAfterStdoutDrain(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(2); });
 } else if (command === 'transactions') {
   Promise.resolve().then(() => require('../commands/transactions').transactionsCommand(process.argv.slice(3)))
     .then((code) => exitAfterStdoutDrain(typeof code === 'number' ? code : 0))

package/commands/channel.js

@@ -0,0 +1,223 @@
+'use strict';
+
+// atris channel: the team's shared channels on the hosted Atris server.
+// Agents on any computer read, post, claim, and report by channel name, with
+// the sign-in they already have. Backend: /api/swarlo/{business}/... (the
+// business may be its slug or its id; the server takes both).
+
+const { apiRequestJson } = require('../utils/api');
+const { NOT_LOGGED_IN } = require('../lib/developer-api');
+const { parseArgs, loginToken, relativeTime, clip } = require('../lib/business-target');
+const { resolveChannelBusiness, boardWhy, memberName, lookupMember } = require('../lib/team-board');
+
+// Words that are verbs here, so no channel can be called one of them.
+const REPORTS = ['done', 'failed', 'blocked'];
+const VERBS = new Set(['list', 'claim', ...REPORTS]);
+const FLAGS = { switches: ['new'], values: ['channel', 'limit', 'task', 'as'] };
+const OVERVIEW_PER_CHANNEL = 3;
+// The server reads the newest limit x 3 posts of the whole business and then
+// keeps one channel's, so a small limit hides a quiet channel's older posts.
+// Always ask for its most (50) and trim here.
+const SERVER_MAX = 50;
+
+function channelHelp(log = console.log) {
+  log(`usage: atris channel                                   what's new in every channel
+       atris channel <name>                            read a channel, newest last
+       atris channel <name> "message"                  post to it
+       atris channel <name> "what to do" --task <key>  post a task others can claim
+       atris channel claim <task-key> ["note"]         claim a task
+       atris channel done <task-key> "summary"         report it done (also: failed, blocked)
+       atris channel list                              channel names only
+
+options:
+  --business <slug>   which business (else ATRIS_BUSINESS, this folder's business, or your only one)
+  --as <member>       post, claim, and report as that team member (else ATRIS_AGENT, else you)
+  --channel <name>    for claim and done: skip the search for the task's channel
+  --limit <n>         posts to read, 1 to 50 (default 20)
+  --new               post to a channel that does not exist yet
+  --json              raw replies from the server
+
+the team's channels on the hosted Atris server, shared by every agent on every
+computer. uses your existing sign-in (atris login).`);
+}
+
+function postLine(post, now, width = 400) {
+  const who = clip(post.member_name || 'someone', 18);
+  const when = relativeTime(post.created_at, now) || '';
+  const key = post.task_key ? String(post.task_key) : '';
+  let tag = key ? `[${key}] ` : '';
+  if (post.kind === 'claim') tag = `claimed ${key}: `;
+  else if (post.kind === 'result') tag = `done ${key}: `;
+  else if (post.kind === 'failed') tag = `${post.status || 'failed'} ${key}: `;
+  return `${who.padEnd(12)}  ${when.padEnd(11)}  ${clip(`${tag}${post.content || ''}`, width)}`;
+}
+
+function closest(name, channels) {
+  const n = name.toLowerCase();
+  return channels.find((c) => c.toLowerCase().startsWith(n.slice(0, 3))) || null;
+}
+
+async function channelCommand(args = [], deps = {}) {
+  let secret = '';
+  const hide = (line) => (secret ? String(line).split(secret).join('[hidden]') : String(line));
+  const log = (line) => (deps.log || console.log)(hide(line));
+  const err = (line) => (deps.err || console.error)(hide(line));
+  const now = deps.now ? deps.now() : Date.now();
+
+  const { flags, pos, error } = parseArgs(args, FLAGS);
+  if (flags.help || pos[0] === 'help') { channelHelp(log); return 0; }
+  if (error) { err(`${error}. see: atris channel --help`); return 1; }
+
+  const verb = VERBS.has(pos[0]) ? pos[0] : null;
+  const name = verb ? null : (pos[0] ? pos[0].replace(/^#/, '') : null);
+  const taskKey = verb && verb !== 'list' ? pos[1] : null;
+  const text = verb ? pos.slice(2).join(' ').trim() : pos.slice(1).join(' ').trim();
+  if (verb && verb !== 'list' && !taskKey) { err(`${verb} needs a task key, like: atris channel ${verb} <task-key>${verb === 'claim' ? '' : ' "summary"'}`); return 1; }
+  if (REPORTS.includes(verb) && !text) { err(`${verb} needs a summary, like: atris channel ${verb} ${taskKey} "what happened"`); return 1; }
+  if (verb === 'list' && pos.length > 1) { err('atris channel list takes no other words'); return 1; }
+  if (name === '') { err('give a channel name, like: atris channel general'); return 1; }
+  const limit = flags.limit == null ? 20 : Number(flags.limit);
+  if (!Number.isInteger(limit) || limit < 1 || limit > 50) { err('--limit takes a whole number from 1 to 50'); return 1; }
+
+  const business = resolveChannelBusiness(flags, deps);
+  if (business.error) { err(business.error); return 1; }
+  const token = await loginToken(deps);
+  if (!token) { err(NOT_LOGGED_IN); return 1; }
+  secret = token;
+
+  const request = deps.apiRequestJson || apiRequestJson;
+  const base = `/swarlo/${encodeURIComponent(business.id)}`;
+  const call = (route, options = {}) => request(`${base}${route}`, { method: 'GET', ...options, token });
+  const why = (res) => boardWhy(res, business);
+  const say = (res) => log(JSON.stringify(res.data));
+  const channelList = async () => {
+    const res = await call('/channels');
+    if (!res || !res.ok) { err(`could not list ${business.slug}'s channels: ${why(res)}`); return null; }
+    return Array.isArray(res.data && res.data.channels) ? res.data.channels.map(String) : [];
+  };
+  const readPosts = async (channel, n) => {
+    const res = await call(`/channels/${encodeURIComponent(channel)}/posts?limit=${SERVER_MAX}`);
+    if (res && res.ok && res.data && Array.isArray(res.data.posts)) {
+      const posts = res.data.posts.slice(0, n);
+      return { ...res, data: { ...res.data, count: posts.length, posts } };
+    }
+    return res;
+  };
+  const unknownChannel = (channel, channels) => {
+    const near = closest(channel, channels);
+    err(`no channel named "${channel}" in ${business.slug}.${near ? ` did you mean ${near}?` : ''} channels: ${channels.join(', ') || 'none yet'}`);
+  };
+
+  // Find where a task lives: --channel, then an open claim, then any post carrying the key.
+  const findTaskChannel = async (key, useClaims) => {
+    if (typeof flags.channel === 'string') return { channel: flags.channel.replace(/^#/, '') };
+    if (useClaims) {
+      const res = await call('/claims');
+      if (!res || !res.ok) return { failed: `could not check open claims: ${why(res)}` };
+      const hit = ((res.data && res.data.claims) || []).find((c) => c.task_key === key && c.channel);
+      if (hit) return { channel: hit.channel };
+    }
+    const channels = await channelList();
+    if (!channels) return { failed: 'shown' };
+    const reads = await Promise.all(channels.map((c) => readPosts(c, SERVER_MAX)));
+    let best = null;
+    reads.forEach((res, i) => {
+      if (!res || !res.ok) return;
+      for (const p of (res.data && res.data.posts) || []) {
+        if (p.task_key !== key) continue;
+        if (!best || String(p.created_at || '') > String(best.created_at || '')) best = { ...p, channel: p.channel || channels[i] };
+      }
+    });
+    if (best) return { channel: best.channel };
+    return { failed: `no channel has a task called "${key}" in ${business.slug}. check the key with: atris channel, or start it in one with --channel <name>` };
+  };
+
+  // Writes go out as a team member when one is named (--as, else ATRIS_AGENT),
+  // so a member's post reads as that member, not as the signed-in person. A
+  // member that cannot be found stops the write; it never falls back to you.
+  const writes = (verb && verb !== 'list') || (name && text);
+  const env = deps.env || process.env;
+  const asWho = memberName(flags, env);
+  let member = null;
+  if (writes && asWho) {
+    const found = await lookupMember(request, business, asWho, token);
+    if (found.missing) { err(`no member called "${asWho}" in ${business.slug}, so nothing was sent. check the name, or leave off --as to post as yourself`); return 1; }
+    if (found.failed !== undefined) { err(`could not look up member "${asWho}", so nothing was sent: ${why(found.failed)}`); return 1; }
+    if (found.noId) { err(`member "${asWho}" in ${business.slug} has no agent id, so nothing was sent`); return 1; }
+    member = found.member;
+  }
+  const signed = (body) => (member ? { ...body, agent_id: member.id } : body);
+  const byline = member ? ` as ${member.name}` : '';
+
+  if (verb === 'claim' || REPORTS.includes(verb)) {
+    const found = await findTaskChannel(taskKey, verb !== 'claim');
+    if (found.failed) { if (found.failed !== 'shown') err(found.failed); return 1; }
+    const channel = found.channel;
+    const res = verb === 'claim'
+      ? await call(`/channels/${encodeURIComponent(channel)}/claim`, { method: 'POST', body: signed({ task_key: taskKey, content: text || `claimed ${taskKey}` }) })
+      : await call(`/channels/${encodeURIComponent(channel)}/report`, { method: 'POST', body: signed({ task_key: taskKey, status: verb, content: text }) });
+    if (!res || !res.ok) { err(`could not ${verb === 'claim' ? 'claim' : 'report'} ${taskKey} in #${channel}: ${why(res)}`); return 1; }
+    if (flags.json) say(res);
+    else log(verb === 'claim' ? `claimed ${taskKey} in #${channel}${byline}` : `${taskKey} is ${verb} in #${channel}${byline}`);
+    return 0;
+  }
+
+  if (verb === 'list') {
+    const channels = await channelList();
+    if (!channels) return 1;
+    log(flags.json ? JSON.stringify({ channels }) : channels.map((c) => `#${c}`).join('\n'));
+    return 0;
+  }
+
+  if (name && text) {
+    const channels = await channelList();
+    if (!channels) return 1;
+    if (!channels.includes(name) && !flags.new) { unknownChannel(name, channels); err(`to start #${name}, add --new`); return 1; }
+    const body = signed(typeof flags.task === 'string' ? { content: text, task_key: flags.task } : { content: text });
+    const res = await call(`/channels/${encodeURIComponent(name)}/posts`, { method: 'POST', body });
+    if (!res || !res.ok) { err(`could not post to #${name}: ${why(res)}`); return 1; }
+    if (flags.json) say(res);
+    else log(body.task_key ? `posted task ${body.task_key} to #${name}${byline}. claim it: atris channel claim ${body.task_key}` : `posted to #${name}${byline}`);
+    return 0;
+  }
+
+  if (name) {
+    const res = await readPosts(name, limit);
+    if (!res || !res.ok) { err(`could not read #${name}: ${why(res)}`); return 1; }
+    const posts = (res.data && res.data.posts) || [];
+    if (!posts.length) {
+      const channels = await channelList();
+      if (channels && !channels.includes(name)) { unknownChannel(name, channels); return 1; }
+    }
+    if (flags.json) { say(res); return 0; }
+    if (!posts.length) { log(`#${name} has no posts yet. post one: atris channel ${name} "hello"`); return 0; }
+    log(`#${name}`);
+    for (const p of posts.slice().reverse()) log(`  ${postLine(p, now)}`);
+    return 0;
+  }
+
+  // No name: the latest few posts in every channel, busiest-most-recent first.
+  const channels = await channelList();
+  if (!channels) return 1;
+  const reads = await Promise.all(channels.map((c) => readPosts(c, OVERVIEW_PER_CHANNEL)));
+  const failed = reads.map((r, i) => (r && r.ok ? null : `#${channels[i]}: ${why(r)}`)).filter(Boolean);
+  const rows = channels.map((c, i) => ({ channel: c, posts: (reads[i] && reads[i].ok && reads[i].data && reads[i].data.posts) || [] }));
+  if (flags.json) {
+    log(JSON.stringify({ business: business.slug, channels: rows }));
+  } else {
+    const active = rows.filter((r) => r.posts.length)
+      .sort((a, b) => String(b.posts[0].created_at || '').localeCompare(String(a.posts[0].created_at || '')));
+    const quiet = rows.filter((r) => !r.posts.length).map((r) => `#${r.channel}`);
+    if (!active.length) log(`no posts yet in ${business.slug}'s channels.`);
+    active.forEach((r, i) => {
+      if (i) log('');
+      log(`#${r.channel}`);
+      for (const p of r.posts.slice().reverse()) log(`  ${postLine(p, now, 140)}`);
+    });
+    if (quiet.length) { log(''); log(`quiet: ${quiet.join(', ')}`); }
+  }
+  for (const f of failed) err(`could not read ${f}`);
+  return failed.length === channels.length && channels.length ? 1 : 0;
+}
+
+module.exports = { channelCommand, resolveChannelBusiness };

package/commands/listen.js

@@ -0,0 +1,196 @@
+'use strict';
+
+// atris listen: a team member's inbox on the team board. Shows what was sent
+// to that member (mentions, replies, tasks) that it has not marked handled.
+// Backend: GET /api/swarlo/{business}/inbox and POST .../inbox/ack.
+//
+// Exit codes are for scripts: 0 something new, 1 nothing new, 2 error.
+//   if atris listen --as walsh --json > new.json; then ...; fi
+
+const { apiRequestJson } = require('../utils/api');
+const { NOT_LOGGED_IN, oneLine } = require('../lib/developer-api');
+const { parseArgs, relativeTime, clip } = require('../lib/business-target');
+const { resolveChannelBusiness, boardWhy, memberName, lookupMember } = require('../lib/team-board');
+
+const FLAGS = { switches: ['watch'], values: ['as', 'limit', 'ack'] };
+const NEW = 0;
+const NOTHING = 1;
+const FAILED = 2;
+const WATCH_MS = 30000;
+const SERVER_MAX = 50;
+// Scripts run this every minute: each request gives up after 10 seconds and
+// is never retried, so one run cannot outlast the next.
+const QUICK = { timeoutMs: 10000, retries: 0 };
+const WHOLE = /^[1-9]\d*$/;
+
+// The sign-in token, or { error }. A token from ATRIS_TOKEN or one that is
+// not near expiry is used as is: the inbox request's own 401 is the check,
+// which saves a round trip per run. Anything else (expired, unknown expiry,
+// an agent client) goes through the full check. When that check fails for a
+// reason other than "never signed in", say the real reason.
+async function listenToken(deps, request) {
+  if (deps.token) return { token: deps.token };
+  if (!deps.ensureCredentials) {
+    const auth = require('../utils/auth');
+    const { isAgentClientCredential } = require('../utils/agent-client');
+    const creds = auth.readActiveCredentials();
+    const fresh = creds && creds.token && !isAgentClientCredential(creds)
+      && (creds.source === 'env' || (auth.getTokenExpiryEpochSeconds(creds.token) && !auth.shouldRefreshToken(creds.token)));
+    if (fresh) return { token: creds.token };
+  }
+  const ensure = deps.ensureCredentials
+    || (() => require('../utils/auth').ensureValidCredentials((p, o = {}) => request(p, { ...o, ...QUICK })));
+  let auth;
+  try { auth = await ensure(); } catch (e) { return { error: `could not check your sign-in: ${oneLine((e && e.message) || e)}` }; }
+  if (auth && !auth.error && auth.credentials && auth.credentials.token) return { token: auth.credentials.token };
+  if (!auth || auth.error === 'not_logged_in') return { error: NOT_LOGGED_IN };
+  return { error: `could not check your sign-in: ${oneLine(auth.detail || auth.error)}. if this keeps happening, run: atris login` };
+}
+
+function listenHelp(log = console.log) {
+  log(`usage: atris listen --as <member>                 what was sent to that member, oldest first
+       atris listen --as <member> --ack <number>  mark everything up to that number handled
+       atris listen --as <member> --watch         keep checking every 30 seconds (Ctrl-C to stop)
+
+options:
+  --as <member>       whose inbox (else ATRIS_AGENT)
+  --business <slug>   which business (else ATRIS_BUSINESS, this folder's business, or your only one)
+  --limit <n>         how many to show, 1 to 50 (default 20)
+  --json              the server's reply as is
+
+exits 0 when something is new, 1 when nothing is, 2 on an error, so a script
+can run: if atris listen --as walsh --json > new.json; then ...; fi
+--watch never marks anything handled. uses your existing sign-in (atris login).`);
+}
+
+// Oldest first, whatever order the server sent.
+function bySeq(items) {
+  return items.slice().sort((a, b) => Number(a.seq) - Number(b.seq));
+}
+
+function itemLines(items, now) {
+  const rows = items.map((it) => ({
+    channel: `#${clip(it.channel || '?', 20)}`,
+    who: clip(it.author_name || it.author_id || 'someone', 18),
+    when: relativeTime(it.created_at, now) || '',
+    text: `[${it.reason || 'note'}] ${clip(it.content || '', 200)}`,
+  }));
+  const w = (key) => Math.max(...rows.map((r) => r[key].length));
+  const wc = w('channel'); const ww = w('who'); const wt = w('when');
+  return rows.map((r) => `${r.channel.padEnd(wc)}  ${r.who.padEnd(ww)}  ${r.when.padEnd(wt)}  ${r.text}`);
+}
+
+async function listenCommand(args = [], deps = {}) {
+  let secret = '';
+  const hide = (line) => (secret ? String(line).split(secret).join('[hidden]') : String(line));
+  const log = (line) => (deps.log || console.log)(hide(line));
+  const err = (line) => (deps.err || console.error)(hide(line));
+  const clock = () => (deps.now ? deps.now() : Date.now());
+  const env = deps.env || process.env;
+
+  const { flags, pos, error } = parseArgs(args, FLAGS);
+  if (flags.help || pos[0] === 'help') { listenHelp(log); return 0; }
+  if (error) { err(`${error}. see: atris listen --help`); return FAILED; }
+  if (pos.length) { err(`atris listen takes no other words. to name the member: atris listen --as ${pos[0].replace(/^@/, '')}`); return FAILED; }
+
+  const who = memberName(flags, env);
+  if (!who) { err('say who is listening: atris listen --as <member>'); return FAILED; }
+  const limit = flags.limit == null ? 20 : (WHOLE.test(flags.limit) ? Number(flags.limit) : NaN);
+  if (!(limit >= 1 && limit <= SERVER_MAX)) { err('--limit takes a whole number from 1 to 50'); return FAILED; }
+  const ack = flags.ack == null ? null : (WHOLE.test(flags.ack) ? Number(flags.ack) : NaN);
+  if (ack !== null && !Number.isSafeInteger(ack)) { err(`--ack takes the number shown on the last line, like: atris listen --as ${who} --ack 42`); return FAILED; }
+  if (ack !== null && flags.watch) { err('--ack and --watch do not go together: --watch never marks anything handled'); return FAILED; }
+
+  const business = resolveChannelBusiness(flags, deps);
+  if (business.error) { err(business.error); return FAILED; }
+  const raw = deps.apiRequestJson || apiRequestJson;
+  const request = (p, o = {}) => raw(p, { ...o, ...QUICK });
+  const signIn = await listenToken(deps, raw);
+  if (signIn.error) { err(signIn.error); return FAILED; }
+  const token = signIn.token;
+  secret = token;
+
+  const why = (res) => boardWhy(res, business);
+  const found = await lookupMember(request, business, who, token);
+  if (found.missing) { err(`no member called "${who}" in ${business.slug}, so nothing was checked. check the spelling of the name`); return FAILED; }
+  if (found.failed !== undefined) { err(`could not look up member "${who}": ${why(found.failed)}`); return FAILED; }
+  if (found.noId) { err(`member "${who}" in ${business.slug} has no agent id, so it has no inbox`); return FAILED; }
+  const member = found.member;
+
+  const base = `/swarlo/${encodeURIComponent(business.id)}/inbox`;
+  const inboxWhy = (res) => (res && res.status === 404 && res.data && res.data.detail === 'Not Found'
+    ? 'this server has no inboxes yet; the update may still be rolling out'
+    : why(res));
+  // The same command again, so the hint is copyable as is.
+  const again = `atris listen --as ${who}${Object.prototype.hasOwnProperty.call(flags, 'business') ? ` --business ${business.slug}` : ''}`;
+
+  if (ack !== null) {
+    const res = await request(`${base}/ack`, { method: 'POST', token, body: { agent_id: member.id, seq: ack } });
+    if (!res || !res.ok) { err(`could not mark ${member.name}'s inbox handled: ${inboxWhy(res)}`); return FAILED; }
+    if (flags.json) { log(JSON.stringify(res.data)); return 0; }
+    const upTo = Number(res.data && res.data.read_up_to);
+    if (Number.isFinite(upTo) && upTo > ack) log(`${member.name}'s inbox was already handled up to ${upTo}; nothing changed.`);
+    else log(`marked handled for ${member.name}, up to ${Number.isFinite(upTo) ? upTo : ack}.`);
+    return 0;
+  }
+
+  const fetchInbox = async () => {
+    // --watch asks for the most the server gives, since it never marks
+    // anything handled and would otherwise keep seeing the same oldest few.
+    const n = flags.watch ? SERVER_MAX : limit;
+    const res = await request(`${base}?agent_id=${encodeURIComponent(member.id)}&limit=${n}`, { method: 'GET', token });
+    if (!res || !res.ok) return { failed: inboxWhy(res), res };
+    if (!res.data || !Array.isArray(res.data.items)) return { failed: 'the server answered without an items list' };
+    return { data: res.data, items: bySeq(res.data.items) };
+  };
+
+  if (!flags.watch) {
+    const got = await fetchInbox();
+    if (got.failed) { err(`could not read ${member.name}'s inbox: ${got.failed}`); return FAILED; }
+    if (flags.json) { log(JSON.stringify(got.data)); return got.items.length ? NEW : NOTHING; }
+    if (!got.items.length) { log(`nothing new for ${member.name}.`); return NOTHING; }
+    for (const line of itemLines(got.items, clock())) log(line);
+    if (got.items.length >= limit) log(`showing the oldest ${got.items.length}; more are waiting after these are handled.`);
+    log(`mark handled: ${again} --ack ${got.items[got.items.length - 1].seq}`);
+    return NEW;
+  }
+
+  // --watch: for a person at a terminal. Prints only items it has not shown
+  // yet and never marks anything handled. Errors that retrying cannot fix
+  // (sign-in, access, no such business) stop it; the rest wait for the next round.
+  const sleep = deps.sleep || ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const keepGoing = deps.keepGoing || (() => true);
+  // stderr, so --watch --json leaves nothing but items on stdout.
+  if (!deps.sleep) process.once('SIGINT', () => { (deps.err || console.error)('stopped listening.'); process.exit(0); });
+  if (!flags.json) log(`listening for ${member.name} in ${business.slug}. checks every 30 seconds; Ctrl-C to stop.`);
+  let shown = -Infinity;
+  let first = true;
+  let full = false;
+  for (;;) {
+    const got = await fetchInbox();
+    if (got.failed) {
+      err(`could not read ${member.name}'s inbox: ${got.failed}`);
+      if (got.res && [401, 403, 404].includes(got.res.status)) return FAILED;
+    } else {
+      const fresh = got.items.filter((it) => Number(it.seq) > shown);
+      if (fresh.length) {
+        if (flags.json) for (const it of fresh) log(JSON.stringify(it));
+        else for (const line of itemLines(fresh, clock())) log(line);
+        shown = Math.max(shown, ...fresh.map((it) => Number(it.seq)));
+        if (!flags.json) log(`mark handled: ${again} --ack ${shown}`);
+      } else if (first && !flags.json) {
+        log(`nothing new for ${member.name} yet.`);
+      }
+      // The server gives the oldest 50 unhandled; newer ones stay hidden
+      // until some are marked handled. Say so once, not every round.
+      const nowFull = got.items.length >= SERVER_MAX;
+      if (nowFull && !full) (flags.json ? err : log)(`${SERVER_MAX}+ waiting for ${member.name}; newer ones show after these are marked handled: ${again} --ack ${shown}`);
+      full = nowFull;
+    }
+    first = false;
+    if (!keepGoing()) return 0;
+    await sleep(deps.intervalMs || WATCH_MS);
+  }
+}
+
+module.exports = { listenCommand };

package/lib/known-commands.js

@@ -4,7 +4,7 @@ const knownCommands = ['init', 'guide', 'doctor', 'doc-health', 'install', 'work
                        'activate', '_activate', 'agent', 'team', 'chat', 'fast', 'ax', 'console', 'serve', 'login', 'logout', 'whoami', 'switch', 'use', 'accounts', '_resolve', '_profile-email', '_switch-session', 'shell-init', 'update', 'upgrade', 'version', 'help', 'next', 'atris',
                        'clean', 'close', 'harvest', 'verify', 'recover', 'search', 'scout', 'skill', 'member', 'codex-goal', 'app', 'apps', 'learn', 'lesson', 'taste', 'teach', 'plugin', 'experiments', 'bench', 'router', 'tree', 'receipt', 'proof', 'openclaw', 'pull', 'push', 'watch', 'cloud', 'live', 'align', 'terminal', 'computer', 'diff', 'business', 'sync', 'youtube', 'x-search',
                        'ingest', 'query', 'lint', 'loop', 'pulse', 'task', 'mission', 'decide', 'campaign', 'agents', 'probe', 'worktree', 'land', 'caretaker', 'autoland', 'drive', 'aeo', 'slop', 'voice', 'strings', 'write', 'security-review', 'secure', 'sentinel', 'deck', 'site', 'theme', 'card', 'reel', 'improve', 'study', 'rainmaker', 'xp', 'play', 'gm', 'game', 'x', 'recap', 'report', 'signup', 'clarity', 'interview', 'meet', 'moves', 'unknowns', 'avail', 'scoreboard', 'growth', 'scorecard', 'rating', 'sync-checkout', 'zen',
-                       'ci', 'github', 'vercel', 'supabase', 'linear', 'stripe', 'memory', 'balance', 'film', 'usage', 'spend', 'api-key', 'agent-client', 'topup', 'buy', 'transactions', 'hire', 'hires', 'mail', 'design', 'mcp', 'gmail', 'google', 'calendar', 'twitter', 'slack', 'imessage', 'integrations', 'setup', 'clean-workspace', 'cw',
+                       'ci', 'github', 'vercel', 'supabase', 'linear', 'stripe', 'memory', 'balance', 'film', 'usage', 'spend', 'api-key', 'agent-client', 'topup', 'buy', 'transactions', 'hire', 'hires', 'mail', 'channel', 'listen', 'design', 'mcp', 'gmail', 'google', 'calendar', 'twitter', 'slack', 'imessage', 'integrations', 'setup', 'clean-workspace', 'cw',
                        'fork', 'browse', 'publish', 'pack', 'sleep', 'wake', 'feedback', 'errors', 'wiki', 'code-review', 'cr', 'soul', 'fleet', 'fleet-report', 'loops', 'self-improve', 'compile', 'spaceship', 'truth', 'sign', 'engine', 'engines', 'link', 'playbook', 'feed', 'brief', 'social', 'host', 'people', 'follow', 'unfollow', 'friends', 'msg', 'inbox', 'invite', 'join', 'rsi', 'pay', 'trust'];
 
 // Damerau-Levenshtein edit distance between two short strings. Counts an

package/lib/roster-swap.js

@@ -174,11 +174,15 @@ function jobScope(state, key) {
   return state.machine && state.machine.path ? 'machine' : 'project';
 }
 
+// A member belongs to one project, so a member no file names yet goes in that
+// project's own atris/ROSTER.md when it has one; only a project without one
+// falls back to the all-projects roster.
 function teamScope(state, member) {
   for (const scope of reg.ROSTER_LAYERS) {
     const team = state[scope] && Array.isArray(state[scope].team) ? state[scope].team : [];
     if (team.some((line) => line.member === member)) return scope;
   }
+  if (state.project && state.project.format === 'markdown') return 'project';
   return state.machine && state.machine.path ? 'machine' : 'project';
 }
 

package/lib/team-board.js

@@ -0,0 +1,97 @@
+'use strict';
+
+// Shared plumbing for the team board on the hosted server (`atris channel`,
+// `atris listen`): which business, the plain reason a request failed, and the
+// member name -> agent id lookup. HTTP client only; routes live in the backend.
+
+const fs = require('fs');
+const path = require('path');
+const { oneLine } = require('./developer-api');
+const { stateHome } = require('./state-home');
+
+function readJson(file) {
+  try { return JSON.parse(fs.readFileSync(file, 'utf8')); } catch { return null; }
+}
+
+function registeredBusinesses(homeDir) {
+  const raw = readJson(path.join(homeDir, '.atris', 'businesses.json'));
+  if (!raw || typeof raw !== 'object') return [];
+  return Object.entries(raw)
+    .filter(([, b]) => b && typeof b === 'object' && b.business_id)
+    .map(([key, b]) => ({ id: String(b.business_id), slug: String(b.slug || key), name: String(b.name || b.slug || key) }));
+}
+
+function boundBusiness(startDir) {
+  let dir = path.resolve(startDir);
+  for (;;) {
+    const parsed = readJson(path.join(dir, '.atris', 'business.json'));
+    if (parsed && parsed.business_id) {
+      const slug = String(parsed.slug || parsed.name || parsed.business_id);
+      return { id: String(parsed.business_id), slug, name: String(parsed.name || slug) };
+    }
+    const up = path.dirname(dir);
+    if (up === dir) return null;
+    dir = up;
+  }
+}
+
+const PICK = 'add --business <slug>, set ATRIS_BUSINESS=<slug>, or run inside a business folder';
+
+// Which business, in order: --business, ATRIS_BUSINESS, the nearest
+// .atris/business.json, then the only one in ~/.atris/businesses.json.
+// A slug is looked up locally; one this computer does not know goes to the
+// server as is. Returns { id, slug, name } or { error }.
+function resolveChannelBusiness(flags = {}, deps = {}) {
+  const env = deps.env || process.env;
+  const known = registeredBusinesses(deps.homeDir || stateHome());
+  const lookup = (value) => known.find((b) => b.slug === value || b.id === value)
+    || { id: value, slug: value, name: value };
+
+  if (Object.prototype.hasOwnProperty.call(flags, 'business')) {
+    const given = typeof flags.business === 'string' ? flags.business.trim() : '';
+    if (!given) return { error: '--business needs a business slug' };
+    return lookup(given);
+  }
+  const fromEnv = String(env.ATRIS_BUSINESS || '').trim();
+  if (fromEnv) return lookup(fromEnv);
+  const bound = boundBusiness(deps.cwd || process.cwd());
+  if (bound) return bound;
+  if (known.length === 1) return known[0];
+  if (!known.length) return { error: `no business picked: ${PICK}.` };
+  const names = known.map((b) => b.slug);
+  const shown = names.length > 8 ? `${names.slice(0, 8).join(', ')}, and ${names.length - 8} more` : names.join(', ');
+  return { error: `more than one business on this computer (${shown}): ${PICK}.` };
+}
+
+// One plain line on why a board request failed.
+function boardWhy(res, business) {
+  if (!res) return 'no answer from the server';
+  const detail = res.data && (res.data.detail || res.data.error);
+  if (res.status === 401) return 'your sign-in was refused. run: atris login';
+  if (res.status === 403) return `you are not on ${business.slug}'s team`;
+  if (res.status === 404 && detail === 'Business not found') return `no business called "${business.slug}"`;
+  return oneLine(detail || res.error || `request failed (${res.status})`);
+}
+
+// The member named by --as, else ATRIS_AGENT: lowercased, no leading @.
+function memberName(flags = {}, env = process.env) {
+  return String((typeof flags.as === 'string' ? flags.as : env.ATRIS_AGENT) || '').trim().replace(/^@/, '').toLowerCase();
+}
+
+// The server's words for "no such member" ("Agent not found: walsh"). Any
+// other 404, like "Business not found", is a different problem.
+const MEMBER_MISSING = /\b(agent|member) not found\b/i;
+
+// Member name -> { member: { id, name } }, or { missing: true }, { failed: res },
+// or { noId: true }. The caller words the error for its own command.
+// `options` adds request settings, like a shorter timeout.
+async function lookupMember(request, business, name, token, options = {}) {
+  const res = await request(`/business/${encodeURIComponent(business.id)}/team/${encodeURIComponent(name)}`, { method: 'GET', ...options, token });
+  const detail = res && res.data && (res.data.detail || res.data.error);
+  if (res && res.status === 404 && MEMBER_MISSING.test(String(detail || ''))) return { missing: true };
+  if (!res || !res.ok) return { failed: res };
+  if (!res.data || !res.data.agent_id) return { noId: true };
+  return { member: { id: String(res.data.agent_id), name: String(res.data.name || name) } };
+}
+
+module.exports = { resolveChannelBusiness, boardWhy, memberName, lookupMember };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "3.82.22",
+  "version": "3.82.24",
   "description": "you say what you want in plain words. atris builds it, checks it, and shows you proof. project memory your coding agents share across sessions.",
   "mcpName": "io.github.atrislabs/atris",
   "main": "bin/atris.js",