bothouse-dsh 0.1.0 → 0.1.41

package/collab/gate-context.mjs

@@ -0,0 +1,80 @@
+// Per-turn wiki pages and task board for DSH-native members, from the local gate's
+// POST /context (bridge/contrib/gate/gate.py -> ctxsvc.context): the same source and the same
+// block the bridge puts before a bot's turn (bridge/core/gate.go turnContext). The gate's port
+// comes from GATE_PORT, which bothouse sets on the `dsh web` it starts to the port it runs the
+// gate on (core/gate_proc.go gatePort); without it, or with the gate down, a turn goes out as before.
+
+// Same as the bridge's wait for /context (core/gate.go turnContext: 2s).
+export const GATE_CONTEXT_TIMEOUT_MS = 2_000;
+
+export class GateContext {
+  /**
+   * @param options - { port?: gate port (default process.env.GATE_PORT), timeoutMs?, fetch?, logger? }.
+   */
+  constructor({ port = process.env.GATE_PORT, timeoutMs = GATE_CONTEXT_TIMEOUT_MS, fetch: fetchFn = globalThis.fetch, logger } = {}) {
+    this.port = String(port ?? '').trim();
+    this.timeoutMs = timeoutMs;
+    this.fetch = fetchFn;
+    this.logger = logger;
+    /** `${member}\0${room}` -> { session, paths: Set } : pages already in that conversation's context. */
+    this.sent = new Map();
+  }
+
+  /**
+   * The block of pages this (member, room) conversation has not been given yet, and a commit()
+   * that records them as given (call it once the prompt is handed to the agent). The bridge keeps
+   * one list per session (core/gate.go UpdateTurnCtx); here a new `session` starts the list over.
+   * @returns {Promise<{ block: string, commit: () => void }>} block is '' when there is nothing new.
+   */
+  async turn({ member, room, session, text }) {
+    const none = { block: '', commit: () => {} };
+    if (!this.port || typeof this.fetch !== 'function') return none;
+    let out;
+    try {
+      const res = await this.fetch(`http://127.0.0.1:${this.port}/context`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        // bot = dsh:<member id>: the gate finds the kind "dsh" team entry with that id (lead.member),
+        // apart from the bridge bots' keys, which may be the same word.
+        body: JSON.stringify({ key: `dsh:${member}:${room}`, text: text ?? '', bot: `dsh:${member}` }),
+        signal: AbortSignal.timeout(this.timeoutMs),
+      });
+      if (!res.ok) throw new Error(`status ${res.status}`);
+      out = await res.json();
+    } catch (error) {
+      this.logger?.debug?.('collab: gate context fetch failed: %s', error?.message ?? error);
+      return none;
+    }
+    const key = `${member}\u0000${room}`;
+    let entry = this.sent.get(key);
+    if (entry !== undefined && entry.session !== session) entry = undefined;
+    const known = entry?.paths ?? new Set();
+    const fresh = (Array.isArray(out?.wiki) ? out.wiki : [])
+      .filter(w => w && typeof w.path === 'string' && !known.has(w.path));
+    if (fresh.length === 0) return none;
+    const block = '（可能相关的 wiki 页，需要时去读）' + fresh.map(w => `\n- ${w.path} — ${w.desc ?? ''}`).join('');
+    return {
+      block,
+      commit: () => {
+        let cur = this.sent.get(key);
+        if (cur === undefined || cur.session !== session) { cur = { session, paths: new Set() }; this.sent.set(key, cur); }
+        for (const w of fresh) cur.paths.add(w.path);
+      },
+    };
+  }
+
+  /** /new for a (member, room) whose session key does not change (a local CLI member): start it over. */
+  reset(member, room) {
+    this.sent.delete(`${member}\u0000${room}`);
+  }
+
+  /** This member's conversation in room lost its context (a CLI session that could not be resumed): give it again. */
+  forget(member, room) {
+    this.sent.delete(`${member}\u0000${room}`);
+  }
+
+  /** A released workspace starts its conversations over: give every page again. */
+  resetRoom(room) {
+    for (const key of this.sent.keys()) if (key.endsWith(`\u0000${room}`)) this.sent.delete(key);
+  }
+}

package/collab/handoff-rules.mjs

@@ -0,0 +1,122 @@
+// Handoff checks driven by handoff-rules.json, the single copy of the rules (its source is
+// bridge/contrib/lead/handoff-rules.json; the bridge copies it next to this file when it unpacks or
+// refreshes the DSH plugin, core/setup_dsh_embed.go). ws-handoff runs the same rules in Python
+// (contrib/lead/_handoff_rules.py); contrib/lead/test_handoff_rules.py runs both on one set of fixtures.
+// No section names, patterns or messages live here. A missing or broken rules file throws: a handoff is
+// refused, never let through unchecked.
+import { existsSync, readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+const HERE = new URL('./', import.meta.url);
+// Installed: next to this file. The repo paths are for running from a checkout (dsh/collab and the
+// bundle copy bridge/core/dsh_bundle/collab); an installed plugin has no checkout around it.
+const CANDIDATES = ['handoff-rules.json', '../../bridge/contrib/lead/handoff-rules.json', '../../../contrib/lead/handoff-rules.json']
+  .map(p => fileURLToPath(new URL(p, HERE)));
+
+export class HandoffRulesError extends Error {}
+
+/** Reads the rules (every call, so an edited file applies without a restart). */
+export function loadRules(path) {
+  const file = path ?? CANDIDATES.find(p => existsSync(p));
+  if (file === undefined) throw new HandoffRulesError(`交接规则文件读不到：${CANDIDATES[0]}（重新运行 bothouse 让它解包 DSH 插件）`);
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'));
+  } catch (e) {
+    throw new HandoffRulesError(`交接规则文件读不到：${file}（${e.message}）`);
+  }
+}
+
+const head = l => l.trimStart().startsWith('#');
+const stripLead = (l, lead) => { let i = 0; while (i < l.length && lead.includes(l[i])) i++; return l.slice(i); };
+// Python's s.rsplit(':', 1)[0]: the whole string when it has no colon.
+const beforeColon = s => (s.includes(':') ? s.slice(0, s.lastIndexOf(':')) : s);
+const escape = s => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+
+function sections(lines, name, lead, inline = false) {
+  const out = [];
+  lines.forEach((l, i) => {
+    if (!((head(l) && l.includes(name)) || (inline && stripLead(l, lead).startsWith(name)))) return;
+    const seg = [l];
+    for (const x of lines.slice(i + 1)) { if (head(x)) break; seg.push(x); }
+    out.push(seg);
+  });
+  return out;
+}
+
+const missing = (c, names) => c.msg.replaceAll('{missing}', names.map(n => (c.item ?? '{}').replace('{}', n)).join(c.sep ?? '、'));
+const captures = (segs, rx, lead) => segs.flatMap(seg => seg.slice(1)).map(x => rx.exec(stripLead(x, lead))?.[1]).filter(v => v !== undefined);
+
+function run(c, lines, lead, key = 'msg') {
+  switch (c.type) {
+    case 'headings': {
+      const miss = c.names.filter(n => !lines.some(l => head(l) && l.includes(n)));
+      return miss.length ? missing(c, miss) : null;
+    }
+    case 'ref': {
+      const none = new RegExp(c.none_re), path = new RegExp(c.path_re);
+      for (const seg of sections(lines, c.section, lead, Boolean(c.inline))) {
+        if (seg.some(x => none.test(x))) return null;
+        if (seg.some(x => [...x.matchAll(new RegExp(c.ref_re, 'g'))].some(m => path.test(beforeColon(m[0]))))) return null;
+      }
+      return c[key];
+    }
+    case 'kinds': {
+      const found = captures(sections(lines, c.section, lead), new RegExp(c.line_re), lead);
+      const got = new Set(found);
+      const miss = c.need.filter(k => !got.has(k));
+      return miss.length ? missing(c, miss) : null;
+    }
+    case 'values': {
+      const ok = new RegExp(c.ok_re), alt = new RegExp(c.or_re);
+      const vals = captures(sections(lines, c.section, lead), new RegExp(c.line_re), lead).map(v => v.trim());
+      if (!vals.length) return c.msg;
+      return vals.some(v => !ok.test(v) && !alt.test(v)) ? c.bad_msg : null;
+    }
+    case 'heading_needs_field': {
+      if (!lines.some(l => head(l) && c.headings.some(h => l.includes(h)))) return null;
+      const rx = new RegExp(`^${escape(c.field)}\\s*[:：]\\s*\\S`);
+      return lines.some(l => rx.test(stripLead(l, lead))) ? null : c[key];
+    }
+    default: throw new HandoffRulesError(`交接规则文件里有不认识的检查类型：${c.type}`);
+  }
+}
+
+// Same lines as Python's str.splitlines for \n, \r\n and \r (no trailing empty line).
+const split = text => { const a = String(text ?? '').split(/\r\n|\r|\n/); if (a.at(-1) === '') a.pop(); return a; };
+
+/** A full handoff body (ws-handoff file, workspace handoff reason): the first failing check's message, or null. */
+export function checkHandoff(text, rules = loadRules()) {
+  const lines = split(text);
+  for (const c of rules.checks) {
+    const err = run(c, lines, rules.lead);
+    if (err) return err;
+  }
+  return null;
+}
+
+/**
+ * A field-only dispatch (/tasks: title, ref, base): the fields become a small handoff (title as its
+ * heading, ref as the reference section, base as the base-branch line) and only the checks listed in
+ * rules.dispatch.checks run, with their dispatch_msg.
+ */
+export function checkDispatch(fields, rules = loadRules()) {
+  const byId = new Map(rules.checks.map(c => [c.id, c]));
+  const lines = [`# ${String(fields.title ?? '').trim()}`];
+  for (const [id, field] of Object.entries(rules.dispatch.fields)) {
+    const c = byId.get(id), v = String(fields[field] ?? '').trim();
+    if (c?.type === 'ref') lines.push(`## ${c.section}`, ...(v ? split(v) : []));
+    else if (c?.type === 'heading_needs_field' && v) lines.push(`${c.field}：${v}`);
+  }
+  for (const id of rules.dispatch.checks) {
+    const c = byId.get(id);
+    if (c === undefined) throw new HandoffRulesError(`交接规则文件 dispatch 里的检查不存在：${id}`);
+    const err = run(c, lines, rules.lead, 'dispatch_msg');
+    if (err) return err;
+  }
+  return null;
+}
+
+/** Section names a handoff must carry, in order, for prompts that tell a member how to write one. */
+export function requiredSections(rules = loadRules()) {
+  return rules.checks.flatMap(c => (c.type === 'headings' ? c.names : c.type === 'ref' ? [c.section] : []));
+}

package/collab/hub.mjs

@@ -24,6 +24,13 @@ export class Hub {
 
   memberList() { return [...this.members.values()]; }
 
+  membersInRoom(roomId) {
+    const channel = this.store.settingsRoom(roomId);
+    return this.memberList().filter(m => !m.rooms?.length || m.rooms.includes(channel));
+  }
+
+  routableIn(roomId) { return this.membersInRoom(roomId).filter(m => m.kind !== 'human'); }
+
   /** Members whose @-forms are parsed in channel text (agents only; humans are not routed). */
   routable() { return this.memberList().filter(m => m.kind !== 'human'); }
 
@@ -34,6 +41,13 @@ export class Hub {
     return member !== undefined && member.kind !== 'human' ? member : undefined;
   }
 
+  /** Channel selection, inherited by workspaces; only unset channels use the legacy global choice. */
+  primaryIn(roomId) {
+    const id = this.store.leadId(roomId);
+    const member = id === null ? this.selectedPrimaryMember() : this.members.get(id);
+    return member && this.routableIn(roomId).some(m => m.id === member.id) ? member : undefined;
+  }
+
   /** UI-only fallback; callers that route messages must use selectedPrimaryMember(). */
   primaryMember() {
     const fallback = this.fallbackLead === '' ? undefined : this.members.get(this.fallbackLead);
@@ -41,6 +55,7 @@ export class Hub {
   }
 
   setMember(member) {
+    if (member.avatar?.startsWith('upload:')) member.avatarVersion = Math.random().toString(36).slice(2);
     this.members.set(member.id, member);
     this.emit({ type: 'members', members: this.memberView() });
   }
@@ -76,9 +91,9 @@ export class Hub {
   }
 
   memberView() {
-    return this.memberList().map(({ id, name, kind, online, model, cli, persona, avatar, source, error }) => ({
-      id, name, kind, online: online !== false && !error, ...(error ? { error } : {}), ...(avatar ? { avatar } : {}),
-      ...(kind === 'dsh' ? { model: model ?? null, ...(cli ? { cli } : {}), persona: persona ?? '', editable: source === 'ui' } : {}),
+    return this.memberList().map(({ id, name, kind, online, model, cli, permissionPreset, persona, nameCustomized, avatar, avatarVersion, source, error, rooms }) => ({
+      id, name, kind, ...(rooms ? { rooms } : {}), online: online !== false && !error, ...(error ? { error } : {}), ...(avatar ? { avatar, ...(avatarVersion ? { avatarVersion } : {}) } : {}),
+      ...(kind === 'dsh' ? { model: model ?? null, ...(cli ? { cli, ...(permissionPreset ? { permissionPreset } : {}) } : {}), ...(nameCustomized === undefined ? {} : { nameCustomized }), persona: persona ?? '', editable: source === 'ui' } : {}),
     }));
   }
 
@@ -93,7 +108,7 @@ export class Hub {
     if (msg.reply_to == null || msg.author_kind !== 'user') return null;
     const ref = this.store.message(msg.reply_to);
     const refAgent = ref !== undefined && ref.room_id === msg.room_id && ref.author_kind === 'role' ? ref.author : undefined;
-    const explicit = mentions(msg.text, this.routable());
+    const explicit = mentions(msg.text, this.routableIn(msg.room_id));
     if (explicit.size > 0) return refAgent === undefined ? explicit : new Set([...explicit, refAgent]);
     if (ref === undefined || ref.room_id !== msg.room_id) return new Set();
     if (refAgent !== undefined) return new Set([refAgent]);
@@ -201,6 +216,10 @@ export class Hub {
   }
 
   emit(event) {
+    if (event.type === 'rooms') event = { ...event, rooms: event.rooms.map(room => ({ ...room,
+      lead_id: this.store.leadId(room.id), effective_lead_id: this.primaryIn(room.id)?.id ?? null,
+      workspace_path: this.store.workspacePath(room.id, this.workspacePath),
+    })) };
     for (const s of this.subscribers) {
       try { s(event); } catch (error) { this.logger.warn('collab: subscriber failed: %s', error?.message ?? error); }
     }

package/collab/later.mjs

@@ -0,0 +1,146 @@
+// Durable one-shot wakes for every channel member. Registration goes through the
+// plugin's HTTP route and is bound to (member, room) by an HMAC ticket the plugin
+// hands each member with its prompt; the plugin owns delivery through the member routers.
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { closeSync, fsyncSync, openSync, readFileSync, renameSync, unlinkSync, writeSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { CollabError } from './store.mjs';
+
+function schema(db) {
+  db.exec(`CREATE TABLE IF NOT EXISTS member_later (
+    id INTEGER PRIMARY KEY, member_id TEXT NOT NULL, room_id INTEGER NOT NULL,
+    due_at INTEGER NOT NULL, title TEXT NOT NULL, todo TEXT NOT NULL,
+    message_id INTEGER, announced INTEGER NOT NULL DEFAULT 0, delivered INTEGER NOT NULL DEFAULT 0)`);
+}
+export function registerLater(db, { member, room, delay, title, todo }, now = Date.now()) {
+  const match = /^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$/.exec(String(delay));
+  const ms = match && ((Number(match[1] ?? 0) * 3600 + Number(match[2] ?? 0) * 60 + Number(match[3] ?? 0)) * 1000);
+  if (!ms || !Number.isSafeInteger(now + ms) || typeof member !== 'string' || !member.trim() ||
+      typeof title !== 'string' || !title.trim() || typeof todo !== 'string' || !todo.trim() ||
+      !Number.isSafeInteger(room) || !db.prepare('SELECT id FROM rooms WHERE id = ?').get(room)) {
+    throw new CollabError('invalid', 'later requires member, room, positive delay (10m/1h30m), title and todo');
+  }
+  schema(db);
+  return db.prepare('INSERT INTO member_later (member_id, room_id, due_at, title, todo) VALUES (?, ?, ?, ?, ?) RETURNING *')
+    .get(member, room, now + ms, title.trim(), todo.trim());
+}
+/**
+ * Load the plugin's ticket key, creating it (0600) when missing; ':memory:' stores get a per-process key.
+ * A key file that does not decode to 32 bytes (empty, truncated, garbage) is replaced atomically
+ * (temp 0600 -> fsync -> rename) and re-read, so racing processes settle on the renamed file.
+ * Never falls back to an empty key: an unreadable result throws.
+ */
+function loadKey(file) {
+  if (!file) return randomBytes(32);
+  const read = () => {
+    try { const key = Buffer.from(readFileSync(file, 'utf8').trim(), 'hex'); return key.length === 32 ? key : undefined; } catch (error) { if (error.code === 'ENOENT') return undefined; throw error; }
+  };
+  const existing = read();
+  if (existing) return existing;
+  const tmp = `${file}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`;
+  try {
+    const fd = openSync(tmp, 'wx', 0o600);
+    try { writeSync(fd, randomBytes(32).toString('hex')); fsyncSync(fd); } finally { closeSync(fd); }
+    renameSync(tmp, file);
+  } catch (error) { try { unlinkSync(tmp); } catch {} throw error; }
+  const key = read();
+  if (!key) throw new Error(`later: ticket key ${file} is not 32 bytes after regeneration`);
+  return key;
+}
+const b64 = value => Buffer.from(value).toString('base64url');
+/** Unverified decode, for the local command to find the room; the plugin verifies. */
+export function ticketClaims(ticket) {
+  try { const [payload] = String(ticket).split('.'); const claims = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8')); return claims && typeof claims === 'object' ? claims : undefined; } catch { return undefined; }
+}
+export class Later {
+  constructor(hub, filename, wake, { now = Date.now, start = true, keyFile = filename === ':memory:' ? undefined : join(dirname(filename), 'later.key') } = {}) {
+    this.hub = hub; this.db = hub.store.db; this.filename = filename; this.wake = wake; this.now = now;
+    this.key = loadKey(keyFile);
+    /** Local origin of the DSH web server, learned from the first request the plugin serves. */
+    this.origin = undefined;
+    schema(this.db);
+    if (start) this.start();
+  }
+  start() {
+    this.tick();
+    this.timer = setInterval(() => this.tick(), 1000);
+    this.timer.unref();
+  }
+  sign(payload) { return createHmac('sha256', this.key).update(payload).digest('base64url'); }
+  /** Ticket binding one member to one room: base64url({m, r}).HMAC. */
+  ticket(member, room) {
+    const payload = b64(JSON.stringify({ m: String(member), r: Number(room) }));
+    return `${payload}.${this.sign(payload)}`;
+  }
+  /** Verified (member, room) of a ticket, or undefined; constant-time signature check. */
+  verify(ticket) {
+    if (typeof ticket !== 'string') return undefined;
+    const [payload, mac, extra] = ticket.split('.');
+    if (!payload || !mac || extra !== undefined) return undefined;
+    const want = Buffer.from(this.sign(payload)); const got = Buffer.from(mac);
+    if (want.length !== got.length || !timingSafeEqual(want, got)) return undefined;
+    const claims = ticketClaims(ticket);
+    if (typeof claims?.m !== 'string' || !Number.isSafeInteger(claims.r)) return undefined;
+    return { member: claims.m, room: claims.r };
+  }
+  instructions(member, room) {
+    const quote = value => "'" + String(value).replaceAll("'", "'\\''") + "'";
+    const ticket = this.ticket(member, room);
+    const local = this.origin ? `用本机命令登记（重启后仍触发）：\n${quote(process.execPath)} ${quote(fileURLToPath(import.meta.url))} ${quote(this.origin)} ${quote(ticket)} 10m '事情' '到点要做什么'\n` : '';
+    return `\n【一次性回查】要过会儿回来，${local}或 POST /collab/api/rooms/${room}/later（头 X-Later-Ticket: ${ticket}，JSON: delay, title, todo）。凭据只对你和本房间有效。登记成功才说已挂；到点在原房间唤醒你。\n`;
+  }
+  /**
+   * #597 G24: how a DSH member opens a workspace and hands work to it (one call: workspace, task,
+   * ten-minute watch, wake). Only DSH members get this (dsh-member.mjs); bridge bots use
+   * `bothouse workspace new`, so it stays out of instructions().
+   */
+  workspaceInstructions(member, room) {
+    const quote = value => "'" + String(value).replaceAll("'", "'\\''") + "'";
+    const ticket = this.ticket(member, room);
+    const local = this.origin ? `首选本机命令（直接复制，改后三个参数）：\n${quote(process.execPath)} ${quote(fileURLToPath(import.meta.url))} workspace ${quote(this.origin)} ${quote(ticket)} '任务标题' '接活人id（空串=你自己）' '交接说明'\n` : '';
+    // #597 G26: a member once sent the ticket to /tasks and gave up on the 401; spell out the one call.
+    const url = `${this.origin ?? 'http://<本机 DSH 地址>'}/collab/api/rooms/${room}/workspaces`;
+    const curl = `curl -sS -X POST ${quote(url)} -H 'content-type: application/json' -H ${quote(`X-Later-Ticket: ${ticket}`)} -d '{"title":"任务标题","owner":"接活人id（省略=你自己）","reason":"交接说明"}'`;
+    return `\n【开工作区】整块活要交出去时，建工作区=这一条，任务和十分钟看门会自动开，不要另调 /tasks（它不认票据）。${local}或等价的接口 POST /collab/api/rooms/${room}/workspaces：\n${curl}\n一步建好工作区、开任务、挂十分钟看门并叫醒接活人；不要再在频道里 @ 同一件活。返回不是 200 就把返回原样告诉用户，不要悄悄自己做。工作区里的接活人是新会话，只看得到交接说明：里面要写清用户原话、参照的现成实现、以哪个分支为底、验收标准。\n`;
+  }
+  tick() {
+    for (const row of this.db.prepare('SELECT * FROM member_later WHERE announced = 0').all()) {
+      this.hub.post(row.room_id, { authorKind: 'system', author: 'system', name: '回查登记',
+        clientKey: `member-later-${row.id}-registered`,
+        text: `${row.member_id}「${row.title}」：下次看 ${new Date(row.due_at).toISOString()}，到点：${row.todo}` });
+      this.db.prepare('UPDATE member_later SET announced = 1 WHERE id = ?').run(row.id);
+    }
+    for (const row of this.db.prepare('SELECT * FROM member_later WHERE delivered = 0 AND due_at <= ? ORDER BY id').all(this.now())) {
+      if (this.hub.quota?.cooling(row.member_id)) continue;
+      let message;
+      if (row.message_id === null) {
+        // A stable client key makes a crash before receipt persistence reuse the same message.
+        message = this.hub.post(row.room_id, { authorKind: 'system', author: 'system', name: '回查提醒',
+          clientKey: `member-later-${row.id}`, text: `【later 到点】${row.title}：${row.todo}` }).message;
+        this.db.prepare('UPDATE member_later SET message_id = ? WHERE id = ?').run(message.id, row.id);
+      } else message = this.hub.store.message(row.message_id);
+      if (message && this.wake(row.member_id, message)) this.db.prepare('UPDATE member_later SET delivered = 1 WHERE id = ?').run(row.id);
+    }
+  }
+  close() { clearInterval(this.timer); }
+}
+if (process.argv[1] === fileURLToPath(import.meta.url) && process.argv[2] === 'workspace') {
+  const [origin, ticket, title, owner, reason] = process.argv.slice(3);
+  const room = ticketClaims(ticket)?.r;
+  if (!origin || !Number.isSafeInteger(room) || !title) { console.error('usage: later.mjs workspace <origin> <ticket> <title> [owner] [reason] (ticket from your prompt; owner \'\' = yourself)'); process.exit(2); }
+  const res = await fetch(new URL(`/collab/api/rooms/${room}/workspaces`, origin), { method: 'POST',
+    headers: { 'content-type': 'application/json', 'x-later-ticket': ticket }, body: JSON.stringify({ title, ...(owner ? { owner } : {}), ...(reason ? { reason } : {}) }) });
+  const body = await res.text();
+  if (!res.ok) { console.error(`workspace: ${res.status} ${body}`); process.exit(1); }
+  console.log(body);
+} else if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  const [origin, ticket, delay, title, todo] = process.argv.slice(2);
+  const room = ticketClaims(ticket)?.r;
+  if (!origin || !Number.isSafeInteger(room)) { console.error('usage: later.mjs <origin> <ticket> <delay> <title> <todo> (ticket from your prompt)'); process.exit(2); }
+  const res = await fetch(new URL(`/collab/api/rooms/${room}/later`, origin), { method: 'POST',
+    headers: { 'content-type': 'application/json', 'x-later-ticket': ticket }, body: JSON.stringify({ delay, title, todo }) });
+  const body = await res.text();
+  if (!res.ok) { console.error(`later: ${res.status} ${body}`); process.exit(1); }
+  console.log(body);
+}

package/collab/memory-index.mjs

@@ -0,0 +1,61 @@
+// A DSH member's own wiki index on the first turn of each conversation, as the bridge gives a role
+// its MEMORY.md (bridge/core/memoryindex.go memoryBlock, project option memory_index): same head line,
+// same once-per-fresh-context rule. The member's wiki is <BOTHOUSE_DATA_DIR>/roles/<member id>/wiki,
+// where bothouse makes it (bridge/core/setup_dsh_wiki.go). No wiki, no block.
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+// bridge/core/memoryindex.go memoryIndexHead
+export const MEMORY_INDEX_HEAD = '（你的记忆 wiki 目录页';
+
+export class MemoryIndex {
+  /** @param options - { dataDir?: bothouse data dir (default process.env.BOTHOUSE_DATA_DIR), home? }. */
+  constructor({ dataDir = process.env.BOTHOUSE_DATA_DIR, home = homedir() } = {}) {
+    this.dataDir = String(dataDir ?? '').trim();
+    this.home = home;
+    /** `${member}\0${room}` -> session the index was given in (undefined for a local CLI member). */
+    this.given = new Map();
+  }
+
+  /** The member's MEMORY.md path ('' when there is no data dir). */
+  path(member) {
+    return this.dataDir ? join(this.dataDir, 'roles', String(member), 'wiki', 'MEMORY.md') : '';
+  }
+
+  /**
+   * The index block when this (member, room) conversation has not had it (a new `session` is a fresh
+   * context and gets it again), and a commit() that records it as given once the prompt is handed over.
+   * @returns {{ block: string, commit: () => void }}
+   */
+  turn({ member, room, session }) {
+    const none = { block: '', commit: () => {} };
+    const key = `${member}\u0000${room}`;
+    if (this.given.has(key) && this.given.get(key) === session) return none;
+    const file = this.path(member);
+    if (!file) return none;
+    let body;
+    try { body = readFileSync(file, 'utf8').trim(); } catch { return none; }
+    if (!body) return none;
+    const shown = this.home && file.startsWith(this.home + '/') ? '~' + file.slice(this.home.length) : file;
+    return {
+      block: `${MEMORY_INDEX_HEAD} ${shown}，新会话系统自动附上，不用回应）\n${body}`,
+      commit: () => { this.given.set(key, session); },
+    };
+  }
+
+  /** /new for a (member, room) whose session key does not change (a local CLI member): start it over. */
+  reset(member, room) {
+    this.given.delete(`${member}\u0000${room}`);
+  }
+
+  /** This member's conversation in room lost its context (a CLI session that could not be resumed): give it again. */
+  forget(member, room) {
+    this.given.delete(`${member}\u0000${room}`);
+  }
+
+  /** A released workspace starts its conversations over: give the index again. */
+  resetRoom(room) {
+    for (const key of this.given.keys()) if (key.endsWith(`\u0000${room}`)) this.given.delete(key);
+  }
+}

package/collab/mentions.mjs

@@ -44,6 +44,14 @@ export function mentions(text, members) {
   return new Set(split(text, members).map(([, id]) => id).filter(Boolean));
 }
 
+/** text with the @-mentions (and blanks) it opens with taken out. */
+export function withoutLeadingMentions(text, members) {
+  const parts = split(text, members);
+  let i = 0;
+  while (i < parts.length && (parts[i][1] !== null || !parts[i][0].trim())) i++;
+  return parts.slice(i).map(([seg]) => seg).join('').trimStart();
+}
+
 /** Stored/displayed form: every mention becomes @name. */
 export function forDisplay(text, members) {
   const byId = new Map(members.map(m => [m.id, m]));

package/collab/page.html

@@ -31,6 +31,7 @@
   .card { border-left: 4px solid var(--accent); background: var(--side); padding: 6px 10px; border-radius: 4px; margin-top: 2px; }
   .card.completed { border-color: var(--ok); } .card.failed { border-color: #f23f43; }
   .card .title { font-weight: 600; font-size: 13px; }
+  .card .actions { display: flex; gap: 6px; margin-top: 6px; } .card .actions button { padding: 3px 10px; border-radius: 4px; border: 1px solid #ccc; cursor: pointer; }
   form { padding: 0 16px 20px; }
   textarea { width: 100%; resize: none; border: 0; border-radius: 8px; padding: 11px 14px; background: var(--input); color: var(--text); font: inherit; max-height: 40vh; }
   textarea:focus { outline: 2px solid var(--accent); }
@@ -57,6 +58,13 @@
 <script>
 const state = { me: 'owner', rooms: [], members: [], thinking: {}, room: null, synced: 0, mode: 'mixed' };
 const $ = id => document.getElementById(id);
+// crypto.randomUUID only exists in secure contexts (https/localhost); plain-http LAN/Tailscale pages fall back to getRandomValues.
+const uuid = () => {
+  if (typeof crypto.randomUUID === 'function') return crypto.randomUUID();
+  const b = crypto.getRandomValues(new Uint8Array(16)); b[6] = (b[6] & 15) | 64; b[8] = (b[8] & 63) | 128;
+  const h = Array.from(b, x => x.toString(16).padStart(2, '0')).join('');
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+};
 const el = (tag, cls, text) => { const n = document.createElement(tag); if (cls) n.className = cls; if (text != null) n.textContent = text; return n; };
 const palette = ['#5865f2', '#eb459e', '#3ba55c', '#faa61a', '#ed4245', '#00a8fc', '#9b59b6', '#e67e22'];
 const color = id => palette[[...id].reduce((h, c) => (h * 31 + c.charCodeAt(0)) >>> 0, 7) % palette.length];
@@ -85,7 +93,10 @@ function renderRooms() {
 
 function renderMembers() {
   const busy = new Set(state.thinking[state.room] || []);
-  const groups = [['Agent', state.members.filter(m => m.kind !== 'human')], ['真人', state.members.filter(m => m.kind === 'human')]];
+  const room = state.rooms.find(r => r.id === state.room);
+  const channel = room?.parent_id ?? room?.id;
+  const visible = state.members.filter(m => !m.rooms?.length || m.rooms.includes(channel));
+  const groups = [['Agent', visible.filter(m => m.kind !== 'human')], ['真人', visible.filter(m => m.kind === 'human')]];
   const nodes = [];
   for (const [title, list] of groups) {
     if (!list.length) continue;
@@ -102,7 +113,7 @@ function renderMembers() {
     }
   }
   $('members').replaceChildren(...nodes);
-  const names = [...busy].map(id => (state.members.find(m => m.id === id) || { name: id }).name);
+  const names = visible.filter(m => busy.has(m.id)).map(m => m.name);
   $('thinking').textContent = names.length ? `${names.join('、')} 正在处理…` : '';
 }
 
@@ -120,6 +131,16 @@ function messageNode(m) {
     let meta = {}; try { meta = JSON.parse(m.card); } catch {}
     const card = el('div', 'card ' + (meta.state || ''));
     card.append(el('div', 'title', meta.title || ''), el('div', 'body', m.text));
+    // Pending permission card: one button per action, posting the decision (same route as a text reply).
+    if (meta.kind === 'permission' && meta.state === 'pending' && Array.isArray(meta.actions)) {
+      const bar = el('div', 'actions');
+      for (const a of meta.actions) {
+        const b = el('button', '', a.label);
+        b.onclick = () => { bar.querySelectorAll('button').forEach(x => { x.disabled = true; }); api(`/collab/api/messages/${m.id}/permission`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ decision: a.decision }) }); };
+        bar.append(b);
+      }
+      card.append(bar);
+    }
     col.append(card);
   } else col.append(el('div', 'body', m.text));
   row.append(col);
@@ -206,7 +227,7 @@ $('form').addEventListener('submit', async (e) => {
   try {
     const { message } = await api(`/collab/api/rooms/${state.room}/messages`, {
       method: 'POST', headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ text, client_key: crypto.randomUUID() }),
+      body: JSON.stringify({ text, client_key: uuid() }),
     });
     upsert(message);
   } catch (err) { $('input').value = text; alert('发送失败：' + err.message); }

package/collab/personas.mjs

@@ -0,0 +1,4 @@
+// Generated from bridge/core/persona_presets.go; verified by TestDSHPersonaCatalog.
+import { readFileSync } from 'node:fs';
+const catalog = JSON.parse(readFileSync(new URL('./personas.json', import.meta.url), 'utf8'));
+export function personaLibrary(lang) { return catalog[lang.toLowerCase().startsWith('zh') ? 'zh' : 'en']; }