fuli-context 0.10.0 → 0.11.1

package/dist/web/index.html

@@ -9,26 +9,24 @@
     />
     <link rel="icon" type="image/png" href="/assets/fuli-logo-ER1wQ8Kk.png" />
     <title>复利 · Context Graph</title>
-    <script type="module" crossorigin src="/assets/index-ulISYH02.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/i18n-D2CJkEYK.js">
-    <link rel="modulepreload" crossorigin href="/assets/client-B2cRl-7c.js">
-    <link rel="modulepreload" crossorigin href="/assets/console-BtPqo79j.js">
+    <script type="module" crossorigin src="/assets/index-D1OHIz4c.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/i18n-b14l2pQA.js">
     <link rel="modulepreload" crossorigin href="/assets/_plugin-vue_export-helper-BDNMzG2s.js">
-    <link rel="modulepreload" crossorigin href="/assets/GrowthLoading-KTjE2e50.js">
-    <link rel="modulepreload" crossorigin href="/assets/useApi-CROJJdhE-BtFMXFjw.js">
-    <link rel="modulepreload" crossorigin href="/assets/vue-router-DkaTtPn0.js">
+    <link rel="modulepreload" crossorigin href="/assets/client-DLS5FZBI.js">
+    <link rel="modulepreload" crossorigin href="/assets/console-CqzwSo7a.js">
+    <link rel="modulepreload" crossorigin href="/assets/UiDialog-Q7fsJUoO.js">
+    <link rel="modulepreload" crossorigin href="/assets/useApi-CROJJdhE-CEQAEuug.js">
+    <link rel="modulepreload" crossorigin href="/assets/vue-router-B6ZjK-Br.js">
     <link rel="modulepreload" crossorigin href="/assets/fuli-logo-Bu9WBuQe.js">
-    <link rel="modulepreload" crossorigin href="/assets/copy-D2LqwtPZ.js">
-    <link rel="modulepreload" crossorigin href="/assets/catalog-DN72452f.js">
-    <link rel="modulepreload" crossorigin href="/assets/attention-store-Dk-_P4Oi.js">
-    <link rel="modulepreload" crossorigin href="/assets/AgentHand-eGsXoGSq.js">
-    <link rel="modulepreload" crossorigin href="/assets/profile-model-BQO4zNs9.js">
-    <link rel="modulepreload" crossorigin href="/assets/useModalDialog-D8tiJfbc.js">
-    <link rel="modulepreload" crossorigin href="/assets/UiDisclosure-CWlC91Zt.js">
+    <link rel="modulepreload" crossorigin href="/assets/UiSelect-DcGpPQQo.js">
+    <link rel="modulepreload" crossorigin href="/assets/attention-store-D-qIFRIb.js">
+    <link rel="modulepreload" crossorigin href="/assets/AgentHand-DkyF4vgk.js">
+    <link rel="modulepreload" crossorigin href="/assets/UiDisclosure-BS-muK5j.js">
     <link rel="modulepreload" crossorigin href="/assets/paths-CDREouhi.js">
-    <link rel="stylesheet" crossorigin href="/assets/GrowthLoading-CIuQ1icy.css">
+    <link rel="stylesheet" crossorigin href="/assets/client-CIuQ1icy.css">
+    <link rel="stylesheet" crossorigin href="/assets/UiSelect-Bv6R0yr1.css">
     <link rel="stylesheet" crossorigin href="/assets/AgentHand-Y83Oo36U.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-CNp0tRNp.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-kPB0Cf8Q.css">
   </head>
   <body>
     <div id="app"></div>

package/docs/agent-conversations-and-collaboration.md

@@ -7,15 +7,15 @@ Neo4j Provider 的独立日志中；工作记忆继续保存经过整理的决
 
 | 设置 | 默认 | 含义 |
 | --- | --- | --- |
-| 不活跃归档 | 7 天 | 按最后一条新事件计算；重试不延长活跃期 |
-| 自动恢复预算 | 2000 UTF-8 字节 | 保守内容上限，不是计费 token；可配 512–16000 |
+| 压缩阈值 | 64 KB | 未折叠的消息原文超过阈值时，较早的消息折叠进摘要；可配 8–1024 |
+| 自动恢复预算 | 4000 UTF-8 字节 | 保守内容上限，不是计费 token；可配 512–16000 |
 | 自动恢复 | 摘要 + 最近消息 | 新 chat 恢复同一 Agent、同一项目的最近上下文 |
-| 归档恢复 | 摘要 | 原始记录仍在数据库，可分页补读 |
-| 原始记录保存 | gzip 压缩 | 归档不删除原文，也不调用模型生成摘要 |
+| 摘要内容 | 最近 12 个任务结果 + 最近 40 条请求要点 | 请求要点取每条用户消息的首行 |
+| 原始记录保存 | gzip 压缩 | 压缩不删除原文，也不调用模型生成摘要 |
 
-7 天内已成功采集的记录保持可读，不把 7 天的原文全部塞进每次提示词。摘要复用任务结束时
-已经生成的工作结果；工具输出不自动注入恢复上下文。没有提交摘要的历史明确保留
-空摘要，需要时补读，不生成虚构摘要。当前任务提示及宿主可见消息各有来源记录。
+压缩只看对话量，不看时间：闲置多久都不会丢失上下文。每个任务结束时的工作结果写入摘要；
+工具输出不自动注入恢复上下文。折叠后的原文仍在数据库，需要细节时用
+`read_agent_conversation` 分页补读，不生成虚构摘要。当前任务提示及宿主可见消息各有来源记录。
 敏感凭据命中检测时整条内容替换为省略标记，因此“原始记录”是已过滤的可见记录。
 
 入口中的偏好保留完整指令，去掉重复证据包装。长期记忆只返回预览；更新前必须
@@ -120,7 +120,7 @@ JSONL transcript。只支持各适配器明确识别的可见文本、工具调
 ## 界面
 
 默认突出负责人、状态和当前工作；对话按需展开。执行器、路由、学习和技术明细
-收在高级区域。记忆设置提供归档天数、恢复预算及采集开关，读取失败可重试。
+收在高级区域。记忆设置提供压缩阈值、恢复预算及采集开关，读取失败可重试。
 
 ## 设计参考与验证
 
@@ -128,5 +128,5 @@ JSONL transcript。只支持各适配器明确识别的可见文本、工具调
 - [Letta Agent File](https://github.com/letta-ai/agent-file)：分开历史记录与送入模型的上下文。
 - [OpenHands event store](https://github.com/OpenHands/software-agent-sdk/blob/main/openhands-sdk/openhands/sdk/conversation/event_store.py)：事件日志与恢复。
 
-当前实现的 7 天、字节预算、能力档位、两次失败和 15 秒期限是产品配置选择，
+当前实现的压缩阈值、字节预算、能力档位、两次失败和 15 秒期限是产品配置选择，
 不是以上项目的默认配置。数据库集成测试只使用一次性本机数据库和合成数据。

package/docs/agent-roundtable.md

@@ -0,0 +1,77 @@
+# Agent Roundtable · 圆桌
+
+Agents talk to each other directly, the way a lead asks a teammate or a sub-agent.
+A Codex Agent can ask the Agent behind a specific Claude Code conversation, a Claude
+Code Agent can ask a FULI Agent that has never run yet, and so on. Nobody creates a
+room or invites anyone: an Agent sends a message, the recipient answers, and Fuli
+records the exchange.
+
+## How Agents use it
+
+All tools are on the normal `fuli` MCP server.
+
+| Tool | Purpose |
+| --- | --- |
+| `find_agents` | Active FULI Agents, their clients and recent Claude Code / Codex conversations |
+| `message_agent` | Ask an Agent; returns its answer, or queues the message |
+| `read_agent_messages` | Messages waiting for the current task's Agent |
+| `reply_agent_message` | Answer one of them |
+| `read_agent_thread` | Every message of one thread |
+
+`message_agent` takes `to` (Agent ID, exact name, or employee number such as
+`FLA 000001`), `body`, the caller's
+`taskContextToken`, `projectPath` (the current directory), and optionally `threadId`
+to continue a thread or `conversation` to choose which of the recipient's
+conversations answers (`auto` by default, `new`, or a session ID from `find_agents`).
+
+Each Fuli Agent (FLA) has a permanent employee number within its personal space.
+Numbers start at `000001`, expand beyond six digits when needed, and are never
+reused after archival. Moving between projects or clients preserves the number;
+existing IDs and profile links remain valid. `find_agents` can search by number.
+
+Every project has one accountable lead. User requests for a member go through
+that lead. A recorded lead-to-member roundtable delivery restores the member's
+own isolated context and returns its answer to the lead for the final report.
+Changing, deactivating, or archiving a project lead requires a handoff first.
+Delivery requires an active task context. The Provider issues a short-lived
+capability that Fuli passes only to the receiving process, binds to its session,
+and revokes after each attempt. Public message headers do not grant access.
+An answer is attributed to the recipient only after that session redeems the
+capability. Members send their results through the project lead.
+
+## Delivery
+
+1. **Wake.** By default Fuli wakes the recipient in its own client, headlessly and
+   read-only, and waits for its final answer (default 5 minutes, at most 15):
+   - Claude Code resumes the conversation with `--resume <id> --fork-session`, so the
+     answer has that conversation's full context while the original stays untouched.
+   - Codex runs `codex exec resume <id>` with a read-only sandbox. The question and
+     answer are recorded in that conversation, so it shows up there next time it is
+     opened. Codex refuses while the conversation is open in the app; Fuli then asks
+     the same Agent in a new session instead.
+   - Without a resumable conversation, Fuli starts a new session in the caller's
+     project directory with `@{agent}`, which loads that Agent's memory and role.
+   - If that client is not installed or not logged in on this machine, Fuli tries the
+     Agent's next allowed client. A timeout stops there instead of starting another run.
+2. **Inbox.** If no allowed client can answer (none installed or logged in, or the
+   wake timed out), the message waits. The next time that Agent starts a task,
+   task entry includes it under `agent_messages`, and the Agent answers with
+   `reply_agent_message`.
+
+A thread holds at most 24 messages and at most 3 asks may be waiting on each other
+inside one thread, so Agents cannot loop forever. Woken Agents run read-only.
+
+## What people see
+
+The console's **圆桌 / Roundtable** page lists every thread with its participants and
+shows the full timeline: who asked whom, through which client, the exact message and
+answer, and how it was delivered. People watch; they do not need to act.
+
+Threads are stored locally in `agent-roundtable.sqlite` in the Fuli data directory.
+
+## Clients
+
+Waking needs the client's CLI on this machine: `claude` for Claude Code, and `codex`
+(or the CLI bundled with the Codex app) for Codex. Override the paths with
+`FULI_CLAUDE_BIN` / `FULI_CODEX_BIN`. A recipient is only woken in clients its Agent
+profile allows.

package/docs/employee-agents.md

@@ -1,10 +1,10 @@
 # Specialist Agents
 
-An employee template is a reusable role with an optional FULI-hosted or native workbench. Recruitment reuses the existing durable Project Agent identity and assignment model. The built-in specialists are **Jefa**, the project manager, and **Bole**, the fixed system HR Agent. Bole is created with every personal space, cannot be archived or replaced by another `hr` identity, and does not require a separate runtime package.
+An employee template is a reusable role with an optional FULI-hosted or native workbench. Recruitment reuses the existing durable Project Agent identity and assignment model. Two roles are fixed: **Jefa**, the project manager, and **Bole**, the HR Agent. Both exist in every personal space from the start, manage all projects by default, cannot be archived or replaced by another coordinator or `hr` identity, and are never offered for hire. Neither requires a separate runtime package.
 
 ## User flow
 
-Open **Project Agents → Hire an Agent**, select a template and its responsibility policy, then hire. The custom project picker supports multiple selection, individual exclusions, search, and **Invert selection**. A newly recruited Jefa defaults to **All projects**, including future active projects unless explicitly excluded. **Selected projects** keeps a fixed selection; selecting none in that mode hires without a project. The Agent directory reflects the persistent identity; **Specialist Agents → Jefa** in the sidebar opens its installed board directly. Hiring alone does not create a project. Register a lasting project from the personal-project directory, or explicitly coordinate a one-off task to use the temporary scope described below.
+Open **Project Agents → Hire an Agent**, select a template and its responsibility policy, then hire. Only non-fixed templates appear there; to narrow what Jefa or Bole manage, use **Manage assigned projects** on their card. The custom project picker supports multiple selection, individual exclusions, search, and **Invert selection**. **All projects** includes future active projects unless explicitly excluded. **Selected projects** keeps a fixed selection; selecting none in that mode hires without a project. The Agent directory reflects the persistent identity; **Specialist Agents → Jefa** in the sidebar opens its installed board directly. Hiring alone does not create a project. Register a lasting project from the personal-project directory, or explicitly coordinate a one-off task to use the temporary scope described below.
 
 Specialist workspaces use a compact host toolbar rather than the generic console heading. They keep the workspace's own navigation and content, plus the host's project switcher and responsibility editor. The selected project is reflected in the URL; an unauthorized explicit deep link is never silently redirected to a different project. Empty assignments, unavailable templates and catalog errors each have an actionable state. The `employee` CLI/API/manifest names are unchanged for compatibility.
 

package/docs/project-agent-memory.md

@@ -128,7 +128,7 @@ MCP 上下文有长度上限。被截断时必须显式补读完整记忆后再
 `FULI_TEST_NEO4J_URI`。这些测试全部使用合成角色和数据；协议测试、真实数据库测试
 与真实模型客户端验收属于不同证据，不能互相替代。
 
-可见对话的 7 天归档、跨客户端接续、借调与验证升级见
+可见对话的按量压缩、跨客户端接续、借调与验证升级见
 [对话与协作](agent-conversations-and-collaboration.md)。
 
 ## 必需的回复身份回执

package/graph-provider/fuli_graph/agent_conversation_models.py

@@ -6,10 +6,19 @@ from .model_validation import reject_credentials
 
 
 class ConversationPolicy(StrictModel):
-    idle_days: int = Field(default=7, ge=1, le=365)
-    context_budget: int = Field(default=2000, ge=512, le=16000)
+    # Fold older messages into the digest once this much unfolded text accumulates.
+    compact_after_kb: int = Field(default=64, ge=8, le=1024)
+    context_budget: int = Field(default=4000, ge=512, le=16000)
     enabled: bool = True
 
+    @model_validator(mode='before')
+    @classmethod
+    def drop_retired_idle_days(cls, value):
+        # Policies saved before size-based compaction carried an inactivity window.
+        if isinstance(value, dict) and 'idle_days' in value:
+            value = {key: item for key, item in value.items() if key != 'idle_days'}
+        return value
+
 
 class ConversationScope(StrictModel):
     personal_space_id: str = Field(min_length=1, max_length=128)

package/graph-provider/fuli_graph/conversation_context.py

@@ -1,12 +1,43 @@
-"""Deterministic recovery: no model calls, conservative UTF-8 byte accounting."""
+"""Deterministic conversation compaction and recovery: no model calls.
+
+Older messages fold into a bounded digest once the unfolded text passes a size
+threshold; raw events are always retained. Sizes are conservative UTF-8 bytes.
+"""
 import json
-from datetime import datetime, timezone
+
+DIGEST_TASKS = 12
+DIGEST_NOTES = 40
+NOTE_CHARS = 160
+
+
+def message_bytes(event):
+    if event['role'] not in ('user', 'assistant') or event.get('kind', 'message') != 'message':
+        return 0
+    return len(event['content'].encode())
+
+
+def request_note(content):
+    """The first line of a user request, bounded; enough to recall what was asked."""
+    line = next((part.strip() for part in content.splitlines() if part.strip()), '')
+    return line if len(line) <= NOTE_CHARS else line[:NOTE_CHARS - 1] + '…'
+
+
+def add_task_result(digest, at, status, summary):
+    tasks = [*digest.get('tasks', []), {'at': at, 'status': status, 'summary': summary}]
+    return {**digest, 'tasks': tasks[-DIGEST_TASKS:]}
+
+
+def fold_messages(digest, events):
+    notes = [request_note(event['content']) for event in events
+             if event['role'] == 'user' and event.get('kind', 'message') == 'message']
+    return {**digest, 'notes': [*digest.get('notes', []), *filter(None, notes)][-DIGEST_NOTES:]}
 
 
-def archived(last_activity, idle_days, *, now=None):
-    current = datetime.fromisoformat(now) if now else datetime.now(timezone.utc)
-    previous = datetime.fromisoformat(last_activity)
-    return (current - previous).total_seconds() >= idle_days * 86400
+def render_digest(digest):
+    lines = [f"[{task['at'][:10]} {task['status']}] {task['summary']}" for task in digest.get('tasks', [])]
+    if digest.get('notes'):
+        lines += ['Earlier requests:', *(f'- {note}' for note in digest['notes'])]
+    return '\n'.join(lines)
 
 
 def pack_context(summary, events, budget):
@@ -14,12 +45,12 @@ def pack_context(summary, events, budget):
     def size():
         return len(json.dumps(result, ensure_ascii=False, separators=(',', ':')).encode())
     result['summary'] = summary or ''
-    # Reserve half for recent messages; Unicode slicing never splits codepoints.
+    # Reserve half for recent messages; keep the newest digest lines.
     while len(result['summary'].encode()) > budget // 2:
-        result['summary'] = result['summary'][:max(0, len(result['summary']) - 64)]
+        result['summary'] = result['summary'][64:]
         result['truncated'] = True
     for event in reversed(events):
-        if event['role'] not in ('user', 'assistant') or event.get('kind', 'message') != 'message':
+        if not message_bytes(event):
             continue
         item = {'role': event['role'], 'content': event['content']}
         result['messages'].insert(0, item)

package/graph-provider/fuli_graph/default_project_lead.py

@@ -0,0 +1,88 @@
+"""Every task in a registered project gets a FULI Agent.
+
+When a project has no team lead, Bole hires one through an ordinary staffing
+task. The recruitment stays auditable and the new lead joins the project team.
+"""
+
+from fastapi import HTTPException
+from pydantic import Field
+
+from .model_base import StrictModel
+from .models import SourceApplication
+from .project_agent_context_models import ProjectAgentContextResolution
+from .project_agent_models import ProjectAgentProfile
+from .project_agent_task_models import ProjectAgentTaskActivityCreate, ProjectAgentTaskSubmit
+
+
+class DefaultProjectLeadRequest(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    personal_project_id: str = Field(min_length=1, max_length=128)
+    source_application: SourceApplication = 'other'
+
+
+def default_lead_profile(project_name):
+    return ProjectAgentProfile(
+        name=f'{project_name} 负责人'[:160],
+        responsibility=f'负责 {project_name} 的开发、修复、测试与交付，并延续项目上下文。'[:4096],
+        work_kinds=['implementation', 'project_context', 'code_review', 'test_validation', 'architecture'],
+        capabilities=['代码实现', '问题修复', '测试验证', '代码审查', '项目上下文'],
+        initial_preferences=['先理解现有实现与约定，再修改。', '结论附带可复现的验证证据。'],
+    )
+
+
+class StoreDefaultProjectLead:
+    async def staff_default_project_lead(self, actor, request: DefaultProjectLeadRequest):
+        self._require_personal()
+        project = await self.get_personal_project(
+            actor, request.personal_space_id, request.personal_project_id,
+        )
+        policy = await self.get_project_agent_coordination_policy(
+            actor, request.personal_space_id, request.personal_project_id,
+        )
+        if policy.team_lead_agent_id:
+            # An existing lead that could not take this task is a user decision.
+            return ProjectAgentContextResolution(status='unassigned', reason='team_lead_unavailable')
+        submit = ProjectAgentTaskSubmit(
+            personal_space_id=request.personal_space_id,
+            personal_project_id=request.personal_project_id,
+            idempotency_key=f'default-lead:{request.personal_project_id}:{policy.updated_at or "initial"}',
+            title='接任项目负责人',
+            objective='为项目配置默认负责人，承接后续任务并延续项目上下文。',
+            work_kind='project_context',
+            duration='one_off',
+            staffing_intent='default_lead',
+            source_application=request.source_application,
+            routing_reason='Every task needs a FULI Agent; this project had no team lead.',
+            recruitment_profile=default_lead_profile(project.profile.name),
+        )
+        routed = await self.submit_project_agent_task(actor, submit)
+        lead = routed.assigned_agent
+        if not lead:
+            return ProjectAgentContextResolution(
+                status='unassigned', reason=routed.task.routing_reason or 'staffing_unavailable',
+            )
+        task = routed.task
+        for status, summary in (('running', '接任项目负责人'), ('completed', f'{lead.profile.name} 已接任项目负责人')):
+            if task.status in {'completed', 'cancelled', 'failed'}:
+                break
+            try:
+                task = await self.record_project_agent_task_activity(actor, ProjectAgentTaskActivityCreate(
+                    personal_space_id=request.personal_space_id,
+                    personal_project_id=request.personal_project_id,
+                    task_id=task.task_id,
+                    idempotency_key=f'{submit.idempotency_key}:{status}',
+                    status=status,
+                    summary=summary,
+                    agent_id=lead.agent_id,
+                    source_application=request.source_application,
+                ))
+            except HTTPException as error:
+                # The hire already succeeded; a closed staffing record is cosmetic.
+                if error.status_code != 409:
+                    raise
+                break
+        return ProjectAgentContextResolution(
+            status='ready', reason='default_project_lead',
+            match_basis=['HR hired the project lead for its first task'],
+            candidate_count=1, agent=lead,
+        )

package/graph-provider/fuli_graph/project_agent_context_models.py

@@ -1,4 +1,4 @@
-"""Read-only task-entry selection; never submits a task or spawns a worker."""
+"""Task-entry selection and optional invocation claim; never spawns a worker."""
 
 from typing import Literal
 
@@ -13,6 +13,8 @@ class ProjectAgentContextRequest(StrictModel):
     personal_space_id: str = Field(min_length=1, max_length=128)
     personal_project_id: str = Field(min_length=1, max_length=128)
     agent_id: str | None = Field(default=None, min_length=1, max_length=128)
+    delegation_token: str | None = Field(default=None, min_length=32, max_length=128)
+    delegation_session_id: str | None = Field(default=None, min_length=1, max_length=256)
     session_id: str | None = Field(default=None, min_length=1, max_length=256)
     turn_id: str | None = Field(default=None, min_length=1, max_length=256)
     work_kind: str = Field(default='project_context', min_length=1, max_length=128)
@@ -26,4 +28,6 @@ class ProjectAgentContextResolution(StrictModel):
     match_basis: list[str] = Field(default_factory=list)
     candidate_count: int = 0
     agent: ProjectAgentRecord | None = None
+    requested_agent_id: str | None = None
+    reporting_lead_agent_id: str | None = None
     worker_started: Literal[False] = False

package/graph-provider/fuli_graph/project_agent_delegations.py

@@ -0,0 +1,118 @@
+"""Short-lived, session-bound capabilities for a real roundtable invocation."""
+
+from hashlib import sha256
+from secrets import token_urlsafe
+
+from fastapi import HTTPException
+from pydantic import Field
+
+from .models import SourceApplication, StrictModel
+from .personal_project_access import authorize_personal_project
+
+
+class AgentDelegationIssue(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    task_context_token: str = Field(min_length=1, max_length=256)
+    source_application: SourceApplication
+    agent_id: str = Field(min_length=1, max_length=128)
+    target_application: SourceApplication
+    target_session_id: str | None = Field(default=None, min_length=1, max_length=256)
+    lifetime_seconds: int = Field(default=300, ge=30, le=900)
+
+
+class AgentDelegationCheck(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    token: str = Field(min_length=32, max_length=128)
+    session_id: str | None = Field(default=None, min_length=1, max_length=256)
+
+
+def token_hash(token):
+    return sha256(token.encode()).hexdigest()
+
+
+class StoreAgentDelegations:
+    async def issue_agent_delegation(self, actor, request):
+        self._require_personal()
+        space = await self.authorize(actor, request.personal_space_id, 'maintainer')
+        context = await self.get_task_context(actor, request.personal_space_id,
+                                             request.task_context_token, request.source_application)
+        project_id = context.get('personal_project_id')
+        if not project_id or (context.get('checkpoint') or {}).get('phase') == 'complete':
+            raise HTTPException(409, 'Delegation requires an active project task')
+        await authorize_personal_project(self, actor, space, project_id)
+        policy = await self.get_project_agent_coordination_policy(actor, request.personal_space_id, project_id)
+        lead = policy.team_lead_agent_id
+        sender = context.get('project_agent_id')
+        if not lead or not sender or (sender != lead and request.agent_id != lead):
+            raise HTTPException(403, 'Members must communicate through the project lead')
+        target = await self.get_project_agent(actor, request.personal_space_id, project_id, request.agent_id)
+        if (target.profile.status != 'active'
+                or request.target_application not in target.profile.allowed_clients):
+            raise HTTPException(403, 'The receiving Agent is unavailable in this client')
+        token = token_urlsafe(32)
+        # Only hashes are stored. A crash leaves a bounded lifetime, never a
+        # reusable authority derived from a public message or thread identifier.
+        await self.runtime.driver.execute_query(
+            '''MATCH (old:FuliAgentDelegation {space_id: $space_id})
+               WHERE old.expires_at <= datetime() DELETE old''', space_id=request.personal_space_id)
+        await self.runtime.driver.execute_query(
+            '''CREATE (:FuliAgentDelegation {token_hash: $token_hash, space_id: $space_id,
+                 project_id: $project_id, agent_id: $agent_id, source_application: $application,
+                 session_id: $session_id, sender_token: $sender_token, lead_agent_id: $lead,
+                 expires_at: datetime() + duration({seconds: $lifetime}), redeemed: false})''',
+            token_hash=token_hash(token), space_id=request.personal_space_id, project_id=project_id,
+            agent_id=request.agent_id, application=request.target_application,
+            session_id=request.target_session_id, sender_token=request.task_context_token,
+            lead=lead, lifetime=request.lifetime_seconds)
+        return {'token': token}
+
+    async def redeem_agent_delegation(self, request, lead):
+        if not request.delegation_token or not request.delegation_session_id or not request.agent_id:
+            return False
+        # Lock before reading the session binding: two different sessions cannot
+        # both claim a fresh capability. Same-session hook/MCP retries are safe.
+        rows, _, _ = await self.runtime.driver.execute_query(
+            '''MATCH (:FuliSpace {id: $space_id})-[:CONTAINS_PROJECT]->
+                  (:FuliPersonalProject {project_id: $project_id})-
+                  [:HAS_PROJECT_AGENT_COORDINATION_POLICY]->(policy:FuliProjectAgentCoordinationPolicy)
+               SET policy._fuli_write_lock = true
+               REMOVE policy._fuli_write_lock
+               WITH policy WHERE policy.team_lead_agent_id = $lead
+               MATCH (grant:FuliAgentDelegation {token_hash: $token_hash, space_id: $space_id,
+                  project_id: $project_id, agent_id: $agent_id, source_application: $application,
+                  lead_agent_id: $lead})
+               SET grant.write_serial = coalesce(grant.write_serial, 0) + 1
+               WITH grant
+               WHERE grant.expires_at > datetime()
+                 AND (grant.session_id IS NULL OR grant.session_id = $session_id)
+               MATCH (session:FuliTaskContextSession)-[:HAS_CONTEXT]->(task:FuliTaskContext)
+               WHERE task.token = grant.sender_token AND session.current_token = task.token
+                 AND NOT task.completed AND task.personal_space_id = grant.space_id
+                 AND task.personal_project_id = grant.project_id
+                 AND (task.project_agent_id = grant.lead_agent_id OR grant.agent_id = grant.lead_agent_id)
+               SET grant.session_id = $session_id, grant.redeemed = true
+               RETURN grant.token_hash AS token_hash''',
+            token_hash=token_hash(request.delegation_token), space_id=request.personal_space_id,
+            project_id=request.personal_project_id, agent_id=request.agent_id,
+            application=request.source_application, lead=lead, session_id=request.delegation_session_id)
+        return bool(rows)
+
+    async def verify_agent_delegation(self, actor, request):
+        self._require_personal()
+        await self.authorize(actor, request.personal_space_id, 'reader')
+        rows, _, _ = await self.runtime.driver.execute_query(
+            '''MATCH (grant:FuliAgentDelegation {token_hash: $token_hash, space_id: $space_id,
+                  session_id: $session_id, redeemed: true})
+               WHERE grant.expires_at > datetime()
+               RETURN grant.token_hash AS token_hash''',
+            token_hash=token_hash(request.token), space_id=request.personal_space_id,
+            session_id=request.session_id)
+        return {'redeemed': bool(rows)}
+
+    async def revoke_agent_delegation(self, actor, request):
+        self._require_personal()
+        await self.authorize(actor, request.personal_space_id, 'maintainer')
+        await self.runtime.driver.execute_query(
+            '''MATCH (grant:FuliAgentDelegation {token_hash: $token_hash, space_id: $space_id})
+               DELETE grant''', token_hash=token_hash(request.token), space_id=request.personal_space_id)
+        return {'revoked': True}

package/graph-provider/fuli_graph/project_agent_employee_numbers.py

@@ -0,0 +1,41 @@
+"""Space-wide FLA employee numbers, assigned in the identity write transaction.
+
+Both identity creation paths take the space lock before touching an Agent.
+The high-water mark survives archives and identity aliases; numbers are never
+reused. Existing identities are backfilled in creation order on upgrade.
+"""
+
+EMPLOYEE_NUMBER_LOCK = '''
+    SET space._employee_number_lock = true
+    REMOVE space._employee_number_lock
+    WITH space
+'''
+
+# Keep outer variables (notably ``agent``) intact. The subquery always returns
+# one row, including when the space has no missing numbers.
+ASSIGN_EMPLOYEE_NUMBERS = '''
+    WITH space, agent
+    CALL {
+      WITH space
+      MATCH (space)-[:HAS_PROJECT_AGENT_IDENTITY]->(employee:FuliProjectAgent)
+      WITH DISTINCT space, employee
+      ORDER BY employee.created_at, employee.agent_id
+      WITH space, collect(employee) AS employees
+      WITH space, employees,
+           [employee IN employees WHERE employee.employee_number IS NULL] AS missing,
+           reduce(high = coalesce(space.fla_employee_sequence, 0), employee IN employees |
+             CASE WHEN coalesce(employee.employee_number, 0) > high
+               THEN employee.employee_number ELSE high END) AS high
+      SET space.fla_employee_sequence = high + size(missing)
+      FOREACH (index IN range(0, size(missing) - 1) |
+        FOREACH (employee IN [missing[index]] |
+          SET employee.employee_number = high + index + 1))
+      FOREACH (employee IN [item IN employees WHERE item.employee_number_space_id IS NULL] |
+        SET employee.employee_number_space_id = space.id)
+      RETURN space.fla_employee_sequence AS employee_sequence
+    }
+'''
+
+
+def employee_number_label(number: int | None) -> str | None:
+    return f'{number:06d}' if number is not None else None

package/graph-provider/fuli_graph/project_agent_memory_routes.py

@@ -13,7 +13,9 @@ from .project_agent_context_models import (
     ProjectAgentContextRequest, ProjectAgentContextResolution,
 )
 from .agent_conversation_routes import register_agent_conversation_routes
+from .default_project_lead import DefaultProjectLeadRequest
 from .task_context_routes import register_task_context_routes
+from .project_agent_delegations import AgentDelegationIssue, AgentDelegationCheck
 
 
 def register_project_agent_memory_routes(application, store, Actor):
@@ -25,6 +27,24 @@ def register_project_agent_memory_routes(application, store, Actor):
     async def resolve_context(request: ProjectAgentContextRequest, actor: Actor):
         return await store.resolve_project_agent_context(actor, request)
 
+    @application.post('/v1/project-agent-context/delegations')
+    async def issue_delegation(request: AgentDelegationIssue, actor: Actor):
+        return await store.issue_agent_delegation(actor, request)
+
+    @application.post('/v1/project-agent-context/delegations/verify')
+    async def verify_delegation(request: AgentDelegationCheck, actor: Actor):
+        return await store.verify_agent_delegation(actor, request)
+
+    @application.post('/v1/project-agent-context/delegations/revoke')
+    async def revoke_delegation(request: AgentDelegationCheck, actor: Actor):
+        return await store.revoke_agent_delegation(actor, request)
+
+    @application.post(
+        '/v1/project-agent-context/default-lead', response_model=ProjectAgentContextResolution,
+    )
+    async def staff_default_lead(request: DefaultProjectLeadRequest, actor: Actor):
+        return await store.staff_default_project_lead(actor, request)
+
     @application.get(
         '/v1/project-agents/{agent_id}/memory', response_model=ProjectAgentMemoryView,
     )

package/graph-provider/fuli_graph/project_agent_models.py

@@ -277,6 +277,7 @@ class ProjectAgentAssignmentReplaceResult(StrictModel):
 
 class ProjectAgentRecord(StrictModel):
     agent_id: str
+    employee_number: str | None = None
     legacy_agent_ids: list[str] = Field(default_factory=list)
     personal_space_id: str
     personal_project_id: str | None = None

package/graph-provider/fuli_graph/project_agent_task_models.py

@@ -20,6 +20,9 @@ from .project_agent_models import (
 ProjectAgentTaskDuration = Literal['ongoing', 'one_off']
 ProjectAgentStaffingIntent = Literal[
     'reuse_preferred',
+    # Like reuse_preferred, but a project without a team lead hires its first
+    # lead through HR without waiting for confirmation.
+    'default_lead',
     'new_durable',
     'temporary',
     'unassigned',

package/graph-provider/fuli_graph/project_agent_team_growth.py

@@ -33,8 +33,8 @@ async def enroll_recruited_team_member(store, recruitment, profile):
              policy.team_lead_agent_id IS NULL AS needs_lead,
              coalesce(policy.team_lead_agent_id = agent.agent_id, false)
                OR agent.agent_id IN members AS already_member
-        WITH *, enabled AND NOT already_member
-                  AND (needs_lead OR size(members) < 32) AS changed
+        WITH *, NOT already_member
+                  AND (needs_lead OR (enabled AND size(members) < 32)) AS changed
         FOREACH (_ IN CASE WHEN changed THEN [1] ELSE [] END |
           SET policy.team_lead_agent_id = CASE WHEN needs_lead
                 THEN agent.agent_id ELSE policy.team_lead_agent_id END,