termdock 1.4.321 → 1.4.324

package/dist/client/sw.js

@@ -1 +1 @@
-if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let r={};const c=e=>n(e,o),d={module:{uri:o},exports:r,require:c};s[o]=Promise.all(i.map(e=>d[e]||c(e))).then(e=>(a(...e),r))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"01b5814f40b4c1508395f92ef3ae26e1"},{url:"assets/app-Bj0N393t.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-B4bEMUyn.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});
+if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let c={};const r=e=>n(e,o),d={module:{uri:o},exports:c,require:r};s[o]=Promise.all(i.map(e=>d[e]||r(e))).then(e=>(a(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"f9b108bacc5daf8e78dac614880ef432"},{url:"assets/app-DCFOZi_L.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-Ctz-IDjR.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});

package/dist/server/agent/collaborationCli.js

@@ -13,13 +13,14 @@ export const COLLAB_HELP = `td collab — durable messages; no agent-specific ho
     [--purpose interactive|automation]（默认 interactive；automation 是独立后台记录，无需用户验收）
   task assign <任务id> --assignee <成员id> --revision <当前版本>
   task report <任务id> --attempt <尝试id> --status ack|working|blocked|complete|failed --content <正文>
+    working/blocked/failed/complete 支持 --summary；正文保留完整证据。
   task ask <任务id> --attempt <尝试id> --content <问题> [--options '["选项一","选项二"]']
   task plan <任务id> --attempt <尝试id> --content <方案>
   task review <任务id> --artifact <交付物id> --verdict pass|changes|blocked --content <独立评审>
   task request-review <任务id> --artifact <版本id> --assignee <评审成员id> --revision <当前版本>
   task comment <任务id> --content <补充说明>
   task revise|close|reopen <任务id> --revision <当前版本> [--content <说明>]
-  task coordinate <目标id> --revision <当前版本> --content <本次协调说明>
+  task coordinate <目标id> --revision <当前版本> [--summary <用户可读进展>] --content <完整协调说明>
   task pause|resume|retry <任务id> --revision <当前版本>
   task create 支持 --managed --coordinator <成员id> --reviewers <成员id,成员id>；子任务用 --work-type read-only|code 分类，代码默认独立目录
   正文支持 --file <文本文件> 或 --stdin；变更支持 --idempotency-key。
@@ -75,6 +76,9 @@ export const COLLAB_HELP = `td collab — durable messages; no agent-specific ho
     不终止 Agent、不重建消失的承载、不自动补键；未知消息历史或操作结果拒绝。
     用 session get 查当前状态；同键回读原操作，重启不自动再启动。
     诊断由管理员 td integration diagnostics <id> 回读，需 session_launch_diagnostics=true。
+    启动代次一致性修复需实际服务1.4.322及agent_launch_generation_consistency=true；只升级CLI不生效。
+    terminal_input_check_diagnostics=true时可查guard捕获/承载解析/队列阶段及target_change.check_phase。
+    TERMINAL_INPUT_TARGET_CHANGED仍拒绝真实换代，不据此自动重试或重复发送正文。
     失败码：SESSION_COLD_RETRY_NATIVE_BOUND/SESSION_COLD_RETRY_NOT_FAILED；
     SESSION_MESSAGE_HISTORY_PRESENT/SESSION_MESSAGE_HISTORY_UNCONFIRMED；
     SESSION_COLD_RETRY_RUNTIME_UNCONFIRMED/SESSION_COLD_RETRY_UNSUPPORTED；

package/dist/server/agent/collaborationGroupRoutes.js

@@ -9,6 +9,21 @@ export function collaborationGroupRoutes(options) {
         res.json({ federationVersion: 1, capabilities: { groupRevision: 1, groupPromotion: 1, groupMove: 1, serverCollaboration: options.save ? 1 : undefined },
             groups: options.store.list(), sessions: options.sessions() });
     });
+    for (const [verb, archived] of [['archive', true], ['unarchive', false]]) {
+        router.post(`/collaboration-groups/:groupId/${verb}`, (req, res) => {
+            try {
+                const body = req.body ?? {};
+                if (Object.keys(body).some(key => !['expectedUpdatedAt', 'idempotencyKey'].includes(key)))
+                    throw new CollaborationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Only expectedUpdatedAt and idempotencyKey are accepted', 400);
+                const result = options.store.setLocalGroupArchived(req.params.groupId, archived, body.expectedUpdatedAt, body.idempotencyKey);
+                res.json(result);
+            }
+            catch (error) {
+                res.status(error instanceof CollaborationError ? error.httpStatus : 500).json({ code: error instanceof CollaborationError ? error.code : 'GROUP_ARCHIVE_FAILED',
+                    ...(error instanceof CollaborationError && error.details ? error.details : {}), error: error instanceof Error ? error.message : 'Group archive operation failed' });
+            }
+        });
+    }
     router.post('/collaboration-groups', async (req, res) => {
         try {
             const body = req.body ?? {};

package/dist/server/agent/collaborationRoutes.js

@@ -163,6 +163,8 @@ export function collaborationRoutes({ store, resolveSession, deliver, rebind, di
     router.get('/capabilities', run((_req, res) => {
         res.json({ protocol_version: 2, server_version: getTermdockVersion(), limits: COLLAB_LIMITS,
             route_diagnostics: !!diagnoseRoute, route_identity_recovery: !!diagnoseRoute, route_identity_recovery_min_version: '1.4.321',
+            agent_launch_generation_consistency: true, agent_launch_generation_consistency_min_version: '1.4.322',
+            terminal_input_check_diagnostics: true,
             task_workflow: { version: 2, command: 'td collab task', single_authority: true, explicit_reports: true,
                 managed_goals: true, automatic_review: true, dependency_dispatch: true, isolated_worktrees: true, encrypted_commit_transfer: true,
                 durable_questions: true, user_acceptance: true, versioned_artifacts: true, independent_reviews: true,

package/dist/server/agent/collaborationStore.js

@@ -82,6 +82,7 @@ export class CollaborationStore {
     historyAvailable = true;
     groupCreationAvailable = true;
     groupRenamesAvailable = true;
+    groupArchivesAvailable = true;
     /** `drawId` is the random source behind newCollaborationId. It is a
      *  constructor seam so tests can force a collision and prove the guard
      *  below actually skips it; production always uses the CSPRNG default. */
@@ -126,6 +127,16 @@ export class CollaborationStore {
                         && typeof value.applied.name === 'string' && !!value.applied.name.trim() && value.applied.name.length <= 256
                         && !COLLAB_NAME_FORBIDDEN.test(value.applied.name) && Number.isSafeInteger(value.applied.updatedAt) && value.applied.updatedAt >= 0));
             this.document.localGroupRenames = this.groupRenamesAvailable ? renames ?? {} : {};
+            const archives = parsed.localGroupArchives;
+            this.groupArchivesAvailable = [1, 2].includes(parsed.version ?? 0) && Array.isArray(parsed.groups)
+                && (parsed.localGroupArchivesComplete === undefined || parsed.localGroupArchivesComplete === true)
+                && (archives === undefined || archives !== null && typeof archives === 'object' && !Array.isArray(archives)
+                    && Object.entries(archives).every(([key, value]) => /^[a-f0-9]{64}$/.test(key) && value && typeof value.hash === 'string' && /^[a-f0-9]{64}$/.test(value.hash)
+                        && value.applied && typeof value.applied.id === 'string' && /^[a-zA-Z0-9._-]{1,80}$/.test(value.applied.id)
+                        && typeof value.applied.name === 'string' && !!value.applied.name.trim() && value.applied.name.length <= 256
+                        && !COLLAB_NAME_FORBIDDEN.test(value.applied.name) && Number.isSafeInteger(value.applied.updatedAt) && value.applied.updatedAt >= 0
+                        && (value.applied.archivedAt === undefined || Number.isSafeInteger(value.applied.archivedAt) && value.applied.archivedAt >= 0)));
+            this.document.localGroupArchives = this.groupArchivesAvailable ? archives ?? {} : {};
             this.document.sequence = Math.max(parsed.sequence ?? 0, this.document.sequence ?? 0);
             this.document.idempotency = parsed.idempotency ?? {};
             this.document.consumers = parsed.consumers ?? {};
@@ -138,10 +149,12 @@ export class CollaborationStore {
             this.historyAvailable = error.code === 'ENOENT';
             this.groupCreationAvailable = this.historyAvailable;
             this.groupRenamesAvailable = this.historyAvailable;
+            this.groupArchivesAvailable = this.historyAvailable;
         }
         this.document.terminalHistoryComplete = this.historyAvailable;
         this.document.localGroupRequestsComplete = this.groupCreationAvailable;
         this.document.localGroupRenamesComplete = this.groupRenamesAvailable;
+        this.document.localGroupArchivesComplete = this.groupArchivesAvailable;
         this.persistedDocument = JSON.stringify(this.document);
     }
     list() {
@@ -248,7 +261,54 @@ export class CollaborationStore {
             throw new CollaborationError('GROUP_NOT_LOCAL', 'Administrator metadata operations require a local group', 409);
         if (!Number.isSafeInteger(group.updatedAt) || group.updatedAt < 0)
             throw new CollaborationError('GROUP_STATE_UNCONFIRMED', 'Group revision is unavailable', 409);
-        return { id: group.id, name: group.name, updatedAt: group.updatedAt };
+        return { id: group.id, name: group.name, updatedAt: group.updatedAt, ...(group.archivedAt !== undefined ? { archivedAt: group.archivedAt } : {}) };
+    }
+    listLocalGroupMetadata(includeArchived = false) {
+        return this.list().filter(group => !group.federated && (includeArchived || group.archivedAt === undefined))
+            .map(group => ({ id: group.id, name: group.name, updatedAt: group.updatedAt,
+            ...(group.archivedAt !== undefined ? { archivedAt: group.archivedAt } : {}) }));
+    }
+    /** Archive is a reversible discovery flag; it never changes membership or message routing. */
+    setLocalGroupArchived(id, archived, expectedUpdatedAt, key) {
+        if (typeof id !== 'string' || !/^[a-zA-Z0-9._-]{1,80}$/.test(id))
+            throw new CollaborationError('INVALID_GROUP_ID', 'An exact group ID is required', 400);
+        if (typeof archived !== 'boolean')
+            throw new CollaborationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Archive state must be explicit', 400);
+        if (!Number.isSafeInteger(expectedUpdatedAt) || expectedUpdatedAt < 0)
+            throw new CollaborationError('INVALID_GROUP_VERSION', 'expected_updated_at must be a non-negative safe integer', 400);
+        const requestKey = localGroupRequestKey(key);
+        if (!this.groupArchivesAvailable)
+            throw new CollaborationError('GROUP_ARCHIVE_STATE_UNCONFIRMED', 'Archive journal is unavailable; reconcile persisted state before changing group visibility', 409);
+        const hash = crypto.createHash('sha256').update(JSON.stringify(['archive-local-group', id, archived, expectedUpdatedAt])).digest('hex');
+        const previous = this.document.localGroupArchives?.[requestKey];
+        if (previous) {
+            if (previous.hash !== hash)
+                throw new CollaborationError('IDEMPOTENCY_CONFLICT', 'This administrator archive key was used with different parameters', 409);
+            const target = this.getGroup(id);
+            if (!target || target.deleted || target.federated)
+                throw new CollaborationError('GROUP_ARCHIVE_TARGET_UNAVAILABLE', 'Original local archive target is unavailable; no replacement is created', 409);
+            const group = this.getLocalGroupMetadata(id);
+            this.persist(true);
+            return { group, applied: { ...previous.applied }, replayed: true };
+        }
+        const current = this.getLocalGroupMetadata(id);
+        if (current.updatedAt !== expectedUpdatedAt)
+            throw new CollaborationError('GROUP_CHANGED', 'Group changed; read its current revision before deciding again', 409, { currentUpdatedAt: current.updatedAt });
+        if (Object.keys(this.document.localGroupArchives ?? {}).length >= 2000)
+            throw new CollaborationError('GROUP_ARCHIVE_LIMIT', 'Administrator archive journal has reached its 2000-record limit', 409);
+        const target = this.getGroup(id);
+        const currentlyArchived = target.archivedAt !== undefined;
+        const changed = currentlyArchived !== archived;
+        const updatedAt = changed ? Math.max(Date.now(), current.updatedAt + 1) : current.updatedAt;
+        if (!Number.isSafeInteger(updatedAt))
+            throw new CollaborationError('GROUP_STATE_UNCONFIRMED', 'Group revision cannot advance safely', 409);
+        const archivedAt = archived ? currentlyArchived ? target.archivedAt : Date.now() : undefined;
+        const applied = { id, name: target.name, updatedAt, ...(archivedAt !== undefined ? { archivedAt } : {}) };
+        this.document = { ...this.document, groups: this.document.groups.map(group => group.id === id
+                ? { ...group, updatedAt, ...(archivedAt !== undefined ? { archivedAt } : { archivedAt: undefined }) } : group),
+            localGroupArchives: { ...this.document.localGroupArchives, [requestKey]: { hash, applied } } };
+        this.persist(true);
+        return { group: { ...applied }, applied: { ...applied }, replayed: false };
     }
     /** Display metadata and its original receipt share a durable commit. */
     renameLocalGroup(id, value, expectedUpdatedAt, key) {
@@ -282,7 +342,8 @@ export class CollaborationStore {
         const updatedAt = name === current.name ? current.updatedAt : Math.max(Date.now(), current.updatedAt + 1);
         if (!Number.isSafeInteger(updatedAt))
             throw new CollaborationError('GROUP_STATE_UNCONFIRMED', 'Group revision cannot advance safely', 409);
-        const applied = { id, name, updatedAt };
+        const target = this.getGroup(id);
+        const applied = { id, name, updatedAt, ...(target.archivedAt !== undefined ? { archivedAt: target.archivedAt } : {}) };
         this.document = { ...this.document, groups: this.document.groups.map(group => group.id === id ? { ...group, name, updatedAt } : group),
             localGroupRenames: { ...this.document.localGroupRenames, [requestKey]: { hash, applied } } };
         this.persist(true);

package/dist/server/agent/collaborationTaskCli.js

@@ -15,7 +15,7 @@ export async function executeTaskCommand(command, request, io) {
         plan: [...bodyOptions, 'attempt', 'evidence'], review: [...bodyOptions, 'artifact', 'evidence', 'verdict'], comment: bodyOptions,
         'request-review': [...bodyOptions, 'artifact', 'assignee', 'revision'],
         revise: [...bodyOptions, 'revision'], close: [...bodyOptions, 'revision'], reopen: [...bodyOptions, 'revision'],
-        coordinate: [...bodyOptions, 'revision'], pause: [...bodyOptions, 'revision'], resume: [...bodyOptions, 'revision'], retry: [...bodyOptions, 'revision'],
+        coordinate: [...bodyOptions, 'revision', 'summary'], pause: [...bodyOptions, 'revision'], resume: [...bodyOptions, 'revision'], retry: [...bodyOptions, 'revision'],
     };
     for (const flag of Object.keys(o))
         if (![...allowed[operation], ...(o.principal ? originOptions : []), 'principal', 'session', 'json', 'jsonl', 'text', 'help'].includes(flag))

package/dist/server/agent/collaborationTaskGuidance.js

@@ -0,0 +1,2 @@
+/** Shared across first dispatch and subsequent coordination wakes. */
+export const GOAL_EXPERIENCE_GUIDE = "用户可理解的拆分与更新：一个用户目标保留一张主卡片，所有执行工作都挂在这个目标下；跟进与返工沿用原目标，不用新的顶层目标表达同一件事。子任务按可验收成果划分，一项有明确产物、负责人、完成标准和必要依赖；标题用简短动词加成果名称，不用角色名、过程日志、ID或‘好的/按计划’。简单问题只安排一个必要执行任务；复杂任务仅在产物或负责人可独立验收时拆分，不为采集、复述、重复汇总制造多份卡片。首次拆分后、范围或依赖变化、明确里程碑或受阻时，用 task coordinate --revision <最新版本> --summary '已完成什么；当前推进什么；下一步或需要用户什么' --content '工作划分、各项产物、依赖顺序和依据' 更新当前目标。摘要面向用户，简短说明变化和下一步，不堆哈希、路径、版本号和验证日志；完整证据保留正文。执行成员用 report --attempt <当前尝试> --status working|blocked|failed --summary '当前明确进展或缺少的条件'；没有新事实不要重复发报告，不报告百分比、预估剩余时间或无法观测的内部活动。只有存在必要的人类决定时用 task ask，普通安排说明不要求用户确认方案。";

package/dist/server/agent/collaborationTaskRoutes.js

@@ -1,6 +1,7 @@
 import { Router } from 'express';
 import { CollaborationError } from './collaborationProtocol.js';
 import { assertPeerRegistrationAuthority } from './collaborationPeerTransport.js';
+import { hasEncryptedServiceAccess } from '../federation/requestContext.js';
 export function collaborationTaskRoutes(options) {
     const router = Router();
     const groupId = (value) => {
@@ -15,8 +16,11 @@ export function collaborationTaskRoutes(options) {
         if (!tasks || !peers)
             throw new CollaborationError('TASK_SERVICE_STARTING', '任务服务正在启动，请稍后重试', 503);
         if (!options.agent) {
+            // Reading the inbox does not register peers or create durable authority.
+            // Open-mode full-service viewers may read; mutations still require admin.
             try {
-                assertPeerRegistrationAuthority(req);
+                if (!(['GET', 'HEAD'].includes(req.method) && hasEncryptedServiceAccess(req)))
+                    assertPeerRegistrationAuthority(req);
             }
             catch {
                 throw new CollaborationError('TASK_PERMISSION_DENIED', '当前连接无权处理协作任务', 403);

package/dist/server/agent/collaborationTaskStore.js

@@ -1,3 +1,4 @@
+import { GOAL_EXPERIENCE_GUIDE } from './collaborationTaskGuidance.js';
 import { randomBytes, createHash } from 'node:crypto';
 import { readFileSync, writeFileSync, mkdirSync, renameSync } from 'node:fs';
 import { dirname } from 'node:path';
@@ -186,15 +187,17 @@ export class CollaborationTaskStore {
             const current = task.attempts.find(a => a.id === task.activeAttemptId);
             const result = task.artifacts.filter(a => a.kind === 'result' && a.attemptId === task.activeAttemptId).at(-1);
             const plan = task.artifacts.filter(a => a.kind === 'plan' && a.attemptId === task.activeAttemptId).at(-1);
-            const reportSummary = current?.report?.content.split(/\n\s*\n/).map(paragraph => paragraph.split('\n').filter(line => !/^#{1,6}\s/.test(line)).join('\n').trim()).find(Boolean)?.slice(0, 512);
+            const reportSummary = (current?.report?.summary || current?.report?.content.split(/\n\s*\n/).map(paragraph => paragraph.split('\n').filter(line => !/^#{1,6}\s/.test(line)).join('\n').trim()).find(Boolean))?.slice(0, 512);
+            const coordination = task.events.filter(e => e.kind === 'coordinate' && e.attemptId === task.activeAttemptId).at(-1);
             const automationIssueSource = task.automationIssue ? current?.report && ['blocked', 'failed'].includes(current.report.status)
                 && task.automationIssue === current.report.content.slice(0, 1000) ? 'member-report' : 'system' : undefined;
-            return { ...task, ...(task.purpose === 'automation' ? { execution: taskExecution(task) } : {}), automationIssueSource, spec: task.spec.slice(0, 512), constraints: '', acceptance: '',
+            return { ...task, ...(task.purpose === 'automation' ? { execution: taskExecution(task) } : {}), automationIssueSource, spec: task.spec.slice(0, 512), constraints: '', acceptance: task.acceptance.slice(0, 512),
                 deliveries: task.deliveries.filter(d => d.attemptId === task.activeAttemptId && d.error).slice(-1),
-                attempts: current ? [{ ...current, report: current.report ? { ...current.report, summary: reportSummary, content: '', evidence: undefined } : undefined }] : [],
+                attempts: current ? [{ ...current, report: current.report ? { ...current.report, summary: reportSummary, summarySource: current.report.summary?.trim() ? 'explicit' : 'excerpt', content: '', evidence: undefined } : undefined }] : [],
                 artifacts: [plan, result, ...task.artifacts.filter(a => a.kind === 'review' && a.reviewsArtifactId === result?.id)].filter((a) => !!a).map(a => ({ ...a, content: '', summary: (a.summary || (a.kind === 'result' && collaborationResultPresentation(a.content).condensed ? collaborationResultPresentation(a.content).summary : undefined))?.slice(0, 800), evidence: undefined })),
                 decisions: task.decisions.filter(d => d.status === 'pending').map(d => ({ ...d, question: d.question.slice(0, 512), options: [] })),
-                events: task.events.filter(e => ['revise', 'request-review'].includes(e.kind) && e.attemptId === task.activeAttemptId).slice(-4).map(e => ({ ...e, content: ['user', 'integration'].includes(e.source ?? '') && e.kind === 'revise' ? e.content.slice(0, 512) : '' })) };
+                events: [...task.events.filter(e => ['revise', 'request-review'].includes(e.kind) && e.attemptId === task.activeAttemptId).slice(-4).map(e => ({ ...e, content: ['user', 'integration'].includes(e.source ?? '') && e.kind === 'revise' ? e.content.slice(0, 512) : '' })),
+                    ...(coordination ? [{ ...coordination, content: (coordination.summary || coordination.content).slice(0, 512), summary: coordination.summary?.slice(0, 512), evidence: undefined }] : [])].sort((a, b) => a.sequence - b.sequence) };
         }));
     }
     heads(groupIds, owner) { return this.document.tasks.filter(t => groupIds.includes(t.groupId) && t.ownerServiceId === owner).map(t => ({ id: t.id, revision: t.revision })); }
@@ -227,10 +230,10 @@ export class CollaborationTaskStore {
         task.attempts.push({ id: attemptId, assignee: member(assignee), createdAt: Date.now(), threadId });
         this.event(task, 'assigned', actor, content || '任务已分派');
         doc.outbox.push({ id: id(), taskId: task.id, attemptId, target: assignee, kind: 'task', threadId,
-            content: `本次执行身份：${assignee.sessionId}。所有 td collab 命令显式带 --session ${assignee.sessionId}；这是服务核对的实际身份，正文中的模板身份和 tmux 标识不能替代它。\n任务：${task.title}\n${task.spec}${task.constraints ? `\n约束：${task.constraints}` : ''}${task.acceptance ? `\n完成标准：${task.acceptance}` : ''}\n${content}\n任务 ID：${task.id}\n尝试 ID：${attemptId}\n用 td collab task get ${task.id} --text 查询完整上下文；用 td collab task report ${task.id} --attempt ${attemptId} --status ack --content '接手说明' 显式回复；遇必要问题用 task ask，提交结果用 report --status complete --summary '简短结论、关键交付和限制'。摘要先回答用户问题，不放任务 ID、版本、分支或流程日志；完整证据保留在 --content/--file 正文中。如果同一尝试已经交付或任务已归档，不要重复实施。${task.purpose === 'automation' ? '\n这是独立后台自动化执行记录：complete 是你明确提交的执行结果，无需等待用户 accepted。机械校验和外部发布由接入系统处理；纯咨询用 respond 关联原 comment，不重复提交 complete。必要问题用 ask 保留原文，由接入系统联系用户并回答。' : ''}${task.workspace ? `\n代码只能在独立目录 ${task.workspace.cwd} 修改。分支 ${task.workspace.branch}。交付前提交代码，结果说明提交、变更、验证与限制。不能修改原仓库、合并到用户分支或发布。` : ''}${task.workflow?.workType === 'read-only' ? '\n这是只读查询或分析任务：在本机会话中采集并交付报告，不修改代码或系统，不创建提交、构建、部署或终止进程。结果需说明采样时间、证据和限制。' : ''}${task.workflow?.kind === 'step' ? '\n完成报告会自动请求独立评审；评审要求修改时继续完成，重新提交 complete。只按用户授权运行测试。' : ''}` });
+            content: `本次执行身份：${assignee.sessionId}。所有 td collab 命令显式带 --session ${assignee.sessionId}；这是服务核对的实际身份，正文中的模板身份和 tmux 标识不能替代它。\n任务：${task.title}\n${task.spec}${task.constraints ? `\n约束：${task.constraints}` : ''}${task.acceptance ? `\n完成标准：${task.acceptance}` : ''}\n${content}\n任务 ID：${task.id}\n尝试 ID：${attemptId}\n用 td collab task get ${task.id} --text 查询完整上下文；用 td collab task report ${task.id} --attempt ${attemptId} --status ack --content '接手说明' 显式回复；遇必要问题用 task ask，提交结果用 report --status complete --summary '简短结论、关键交付和限制'。摘要先回答用户问题，不放任务 ID、版本、分支或流程日志；完整证据保留在 --content/--file 正文中。明确里程碑、交付范围变化或遇到阻塞时，可用 report --status working|blocked|failed --summary '用户能理解的当前进展与下一步' --content '原始说明与证据' 更新，不以终端有输出代替报告，不重复无变化的进展。如果同一尝试已经交付或任务已归档，不要重复实施。${task.purpose === 'automation' ? '\n这是独立后台自动化执行记录：complete 是你明确提交的执行结果，无需等待用户 accepted。机械校验和外部发布由接入系统处理；纯咨询用 respond 关联原 comment，不重复提交 complete。必要问题用 ask 保留原文，由接入系统联系用户并回答。' : ''}${task.workspace ? `\n代码只能在独立目录 ${task.workspace.cwd} 修改。分支 ${task.workspace.branch}。交付前提交代码，结果说明提交、变更、验证与限制。不能修改原仓库、合并到用户分支或发布。` : ''}${task.workflow?.workType === 'read-only' ? '\n这是只读查询或分析任务：在本机会话中采集并交付报告，不修改代码或系统，不创建提交、构建、部署或终止进程。结果需说明采样时间、证据和限制。' : ''}${task.workflow?.kind === 'step' ? '\n完成报告会自动请求独立评审；评审要求修改时继续完成，重新提交 complete。代码交付前运行受影响的测试和必要构建；查询交付核对数据来源、采样时间和限制。未实际验收的路径必须明确说明。' : ''}` });
     }
     goalInstructions(task) {
-        return `${this.baseGoalInstructions(task)}\n启动 Agent 前，读取 task get 返回的 launchProfiles、defaultLaunchProfileId 和 roster.launchProfile。根据用户填写的 notes 判断适用任务；这些是选用建议，不是能力或性能保证。需要另一种模型或参数时，用 td collab spawn ${task.groupId} <agentSlug> --launch-profile <方案id> --cwd <项目目录> --session ${task.coordinator?.sessionId} 创建对应执行成员，再把子任务分派给它。已有成员及其代码执行会话保留创建时的启动方案，不因默认方案变更而更换模型。`;
+        return `${this.baseGoalInstructions(task)}\n${GOAL_EXPERIENCE_GUIDE}\n启动 Agent 前，读取 task get 返回的 launchProfiles、defaultLaunchProfileId 和 roster.launchProfile。根据用户填写的 notes 判断适用任务；这些是选用建议，不是能力或性能保证。需要另一种模型或参数时，用 td collab spawn ${task.groupId} <agentSlug> --launch-profile <方案id> --cwd <项目目录> --session ${task.coordinator?.sessionId} 创建对应执行成员，再把子任务分派给它。已有成员及其代码执行会话保留创建时的启动方案，不因默认方案变更而更换模型。`;
     }
     baseGoalInstructions(task) {
         return `你是此目标的协调者，负责把目标推进到可验收交付，不亲自实施子任务。\n目标：${task.spec}\n约束：${task.constraints || '未补充'}\n完成标准：${task.acceptance || '满足用户目标，说明交付与限制'}\n任务 ID：${task.id}\n当前协调身份：${task.coordinator?.sessionId}；所有命令显式带 --session ${task.coordinator?.sessionId}，不使用 tmux 标识。\n用 td collab task get ${task.id} --json 读取 roster、子任务、完整记录和 revision。\n先报告 ack；拆分为可交付子任务，用 td collab task create --group ${task.groupId} --parent ${task.id} --title '标题' --content '完整要求' --assignee <roster里的成员sessionId> --acceptance '明确标准' --work-type read-only|code。先按目标明确分类：查询、检查、研究、分析用 read-only，复用现有执行成员会话，不创建 Git 目录；修改代码用 code，才创建独立目录。简单问题只建一个必要任务，不为了形式拆成采集、复述、汇总多份任务。子任务继承自动评审与协调者。依赖任务用 --depends-on id,id，服务在依赖评审通过后自动分派。保持分工合理，不根据终端输出推断谁有空。\n每次收到明确更新后读取最新记录，处理失败与交接。服务自动安排独立评审、返工和依赖接续；不要重复请求评审或催促正在等待回复的成员。必要的人类决策用 task ask --attempt <本轮id>；方案需要用户确认时提交 task plan，不把普通回复当授权。\n只有已交付代码任务实际包含相对 base 的提交变化时，才需创建 --work-type code --integration 的最终集成子任务，--depends-on 依赖全部代码实施任务；独立目录会包含依赖的提交。不得在原仓库自动合并或发布。\n结束本次协调用 td collab task coordinate ${task.id} --revision <最新版本> --content '已安排的工作和下一步'；有新事件服务会再次唤起你。所有子任务评审通过后报告 complete --summary '直接回答用户的简短结果和限制'；只读目标直接汇总已核对结果，不创建集成或重复汇总任务。正文保留证据、评审结论和限制，仅代码目标补充目录、分支和提交，等待用户最终验收。任何异常都要留下明确说明，不伪造完成或进度。`;
@@ -354,8 +357,8 @@ export class CollaborationTaskStore {
             taskPurpose(input.purpose);
         const content = text(input.content, '内容');
         const summary = text(input.summary, '结果摘要', 2400);
-        if (summary && (input.kind !== 'report' || input.status !== 'complete'))
-            throw new CollaborationError('INVALID_SUMMARY', '摘要只能随完成结果提交');
+        if (summary && input.kind !== 'coordinate' && (input.kind !== 'report' || !['working', 'blocked', 'failed', 'complete'].includes(input.status ?? '')))
+            throw new CollaborationError('INVALID_SUMMARY', '摘要只能用于进展、阻塞、失败、结果或协调说明');
         if (input.verdict !== undefined && !['pass', 'changes', 'blocked'].includes(input.verdict))
             throw new CollaborationError('INVALID_VERDICT', '评审结论无效');
         if (input.evidence !== undefined && Buffer.byteLength(JSON.stringify(input.evidence)) > 16_384)
@@ -470,10 +473,12 @@ export class CollaborationTaskStore {
                     if (plan && task.approvedPlanArtifactId !== plan.id)
                         throw new CollaborationError('PLAN_PENDING', '方案尚未由用户确认，请先等待决定', 409);
                 }
-                attempt.report = { status: input.status, content, evidence: input.evidence, createdAt: Date.now() };
+                attempt.report = { status: input.status, content, ...(summary ? { summary } : {}), evidence: input.evidence, createdAt: Date.now() };
                 const event = this.event(task, 'report', actor, content, attempt.id);
                 event.reportStatus = input.status;
                 event.evidence = input.evidence;
+                if (summary)
+                    event.summary = summary;
                 if (input.status === 'complete' && attempt.id === task.activeAttemptId && task.status === 'accepted') {
                     task.status = 'open';
                     delete task.acceptedArtifactId;
@@ -631,7 +636,9 @@ export class CollaborationTaskStore {
             else if (input.kind === 'coordinate') {
                 if (task.workflow?.kind !== 'goal' || !sameMember(actor, task.coordinator) || !content)
                     throw new CollaborationError('COORDINATOR_REQUIRED', '请由目标协调者提交本次协调说明', 403);
-                this.event(task, 'coordinate', actor, content);
+                const event = this.event(task, 'coordinate', actor, content);
+                if (summary)
+                    event.summary = summary;
                 task.coordination = { notifiedSequence: task.events.at(-1).sequence, acknowledgedSequence: task.events.at(-1).sequence, notifiedAt: Date.now() };
                 delete task.automationIssue;
             }
@@ -807,7 +814,7 @@ export class CollaborationTaskStore {
                 else if (action === 'wake') {
                     const updates = task.events.filter(e => e.sequence > task.coordination.notifiedSequence && e.kind !== 'coordinate');
                     doc.outbox.push({ id: id(), taskId: task.id, attemptId: task.activeAttemptId, target: task.coordinator, kind: 'message', threadId: task.id,
-                        content: `当前协调身份：${task.coordinator.sessionId}；命令带 --session ${task.coordinator.sessionId}。\n目标「${task.title}」有新的明确事件，请继续协调：\n${updates.slice(-8).map(e => `${new Date(e.createdAt).toISOString()} ${e.content.slice(0, 1200)}`).join('\n')}\n用 td collab task get ${task.id} --json 读取完整上下文与子任务；安排必要下一步后 task coordinate ${task.id} --revision <最新版本> --content '协调说明'。自动评审和依赖已由服务接续，不要重复分派。\n当前流程指南：查询、检查、分析必须 --work-type read-only，复用 roster 现有执行成员；只有修改代码才用 code 和独立目录。只读报告由你直接汇总，不新增仅转述的汇总子任务。已评审且 HEAD 等于 base 的交付没有代码变化，不需要集成；有代码变化才安排必要集成。用户有新要求时继续本目标，交付新版本，不重做已有采样。最终汇总通过评审且无新要求时等待用户验收，不重复提交相同结果。` });
+                        content: `当前协调身份：${task.coordinator.sessionId}；命令带 --session ${task.coordinator.sessionId}。\n目标「${task.title}」有新的明确事件，请继续协调：\n${updates.slice(-8).map(e => `${new Date(e.createdAt).toISOString()} ${e.content.slice(0, 1200)}`).join('\n')}\n用 td collab task get ${task.id} --json 读取完整上下文与子任务；安排必要下一步后 task coordinate ${task.id} --revision <最新版本> --content '协调说明'。自动评审和依赖已由服务接续，不要重复分派。\n当前流程指南：查询、检查、分析必须 --work-type read-only，复用 roster 现有执行成员；只有修改代码才用 code 和独立目录。只读报告由你直接汇总，不新增仅转述的汇总子任务。已评审且 HEAD 等于 base 的交付没有代码变化，不需要集成；有代码变化才安排必要集成。用户有新要求时继续本目标，交付新版本，不重做已有采样。最终汇总通过评审且无新要求时等待用户验收，不重复提交相同结果。\n${GOAL_EXPERIENCE_GUIDE}` });
                     task.coordination.notifiedSequence = task.events.at(-1).sequence;
                     task.coordination.notifiedAt = Date.now();
                 }

package/dist/server/agent/collaborationTmuxDelivery.js

@@ -40,6 +40,7 @@ export function writeCollaborationTmuxPane(run, pane, prompt, stdin, assertCurre
     progress?.('queue_wait');
     return serializeTerminalInput(paneInputKey(pane), () => {
         progress?.('queue_acquired');
+        assertCurrent?.('queue_acquired');
         return writeTmuxPrompt(run, pane, prompt, stdin, assertCurrent, progress);
     });
 }
@@ -47,7 +48,7 @@ async function writeTmuxPrompt(run, pane, prompt,
 /** Body travels on stdin so tmux cannot parse its semicolons/backslashes. */
 stdin, assertCurrent, progress) {
     await assertSamePane(run, pane);
-    assertCurrent?.();
+    assertCurrent?.('before_paste');
     // A fixed pane target is independent of the current window, keyboard focus
     // and browser presence. Delivery goes through a named tmux buffer rather
     // than `send-keys -l`: while a pane is in copy-mode, literal bytes are
@@ -81,7 +82,7 @@ stdin, assertCurrent, progress) {
         progress?.('paste_written');
         await waitForPromptSubmit();
         await assertSamePane(run, pane);
-        assertCurrent?.();
+        assertCurrent?.('before_submit');
         progress?.('submit_attempted');
         await run([
             // The submit key rides outside the paste block: inside it, an editor

package/dist/server/agent/integrationCli.js

@@ -26,6 +26,14 @@ export const INTEGRATION_HELP = `td integration — local scoped integration adm
     GROUP_CHANGED, GROUP_NOT_FOUND, GROUP_NOT_LOCAL, GROUP_STATE_UNCONFIRMED,
     GROUP_RENAME_TARGET_UNAVAILABLE, GROUP_RENAME_STATE_UNCONFIRMED,
     GROUP_RENAME_LIMIT, ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED.
+  group archive|unarchive <exact-group-id> --expected-updated-at <N> --idempotency-key <key>
+    Administrator only; minimum CLI/running service 1.4.323; admin_local_group_archive=true.
+    Reversible discovery metadata only. Default groups list hides archived groups;
+    groups --include-archived lists them. group get always includes archivedAt when set.
+    Membership, principals, sessions, runtime, messages and history are unchanged.
+    Retry uncertain results with the same operation, revision and key; GROUP_CHANGED
+    requires rereading current metadata and choosing a new key. Archive receipts are
+    retained separately from the immutable group-create snapshot.
   group create --name <name> --idempotency-key <key>
     Administrator only; create an empty local group without a terminal source.
     Minimum CLI/running service 1.4.318; admin_local_group_create=true.
@@ -61,6 +69,12 @@ export const INTEGRATION_HELP = `td integration — local scoped integration adm
   diagnostics <TD-session-id> (read stored launch/restore diagnostics; administrator only)
     1.4.314 adds phase/timestamps, paste/submit write facts and target-change
     evidence; no argv/environment/credentials or application readiness claim.
+    1.4.322 adds guard_captured/runtime_resolving/runtime_resolved stages and
+    target_change.check_phase/guard_captured_at/checked_at, launch IDs and route revisions.
+    Check actual server agent_launch_generation_consistency=true (minimum 1.4.322),
+    terminal_input_check_diagnostics=true; upgrading only the CLI does not fix a running service.
+    TERMINAL_INPUT_TARGET_CHANGED still rejects an actually replaced target.
+    create never auto-retries; retry-cold remains a separate, explicitly authorized operation.
     Prior versions cannot reconstruct missing launch evidence retroactively.
   create --file <policy.json> --credential-file <private-output.json>
   update --file <policy.json> (same identity/group; preserves the credential)
@@ -119,29 +133,33 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
             return 0;
         }
         const socketPath = integrationSocketPath(port);
-        if (action === 'group' && ['get', 'rename'].includes(argv[1])) {
+        if (action === 'group' && ['get', 'rename', 'archive', 'unarchive'].includes(argv[1])) {
             const operation = argv[1], id = argv[2], args = {};
-            const usage = 'Usage: td integration group get <exact-id> | group rename <exact-id> --name <name> --expected-updated-at <N> --idempotency-key <key>';
+            const usage = 'Usage: td integration group get <exact-id> | group rename <exact-id> --name <name> --expected-updated-at <N> --idempotency-key <key> | group archive|unarchive <exact-id> --expected-updated-at <N> --idempotency-key <key>';
             if (!id || !/^[a-zA-Z0-9._-]{1,80}$/.test(id))
                 throw new CollaborationError('INVALID_GROUP_ID', usage, 400);
             if (operation === 'get' && argv.length !== 3)
                 throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
-            if (operation === 'rename') {
+            if (operation !== 'get') {
                 for (let i = 3; i < argv.length; i += 2) {
-                    if (!['--name', '--expected-updated-at', '--idempotency-key'].includes(argv[i]) || !argv[i + 1] || Object.hasOwn(args, argv[i]))
-                        throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+                    const allowed = operation === 'rename' ? ['--name', '--expected-updated-at', '--idempotency-key'] : ['--expected-updated-at', '--idempotency-key'];
+                    if (!allowed.includes(argv[i]) || !argv[i + 1] || Object.hasOwn(args, argv[i]))
+                        throw new CollaborationError(operation === 'rename' ? 'INVALID_GROUP_RENAME_REQUEST' : 'INVALID_GROUP_ARCHIVE_REQUEST', usage, 400);
                     args[argv[i]] = argv[i + 1];
                 }
-                if (Object.keys(args).length !== 3 || !args['--name']?.trim() || !args['--idempotency-key']?.trim())
-                    throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+                if (operation === 'rename' ? Object.keys(args).length !== 3 || !args['--name']?.trim() || !args['--idempotency-key']?.trim()
+                    : Object.keys(args).length !== 2 || !args['--idempotency-key']?.trim())
+                    throw new CollaborationError(operation === 'rename' ? 'INVALID_GROUP_RENAME_REQUEST' : 'INVALID_GROUP_ARCHIVE_REQUEST', usage, 400);
                 if (!/^(0|[1-9][0-9]*)$/.test(args['--expected-updated-at']) || !Number.isSafeInteger(Number(args['--expected-updated-at'])))
                     throw new CollaborationError('INVALID_GROUP_VERSION', usage, 400);
             }
             const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
-            if (capabilities.admin_local_group_rename !== true)
-                throw new CollaborationError('ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED', 'CLI and running service must support administrator group metadata operations (minimum 1.4.319)', 409);
-            const body = operation === 'rename' ? { name: args['--name'], expected_updated_at: Number(args['--expected-updated-at']), idempotency_key: args['--idempotency-key'] } : undefined;
-            write(JSON.stringify(parsed(await request(socketPath, body ? 'POST' : 'GET', `/admin/groups/${encodeURIComponent(id)}${body ? '/rename' : ''}`, body, headers(undefined, adminToken)))));
+            const isArchive = operation === 'archive' || operation === 'unarchive';
+            if (capabilities[isArchive ? 'admin_local_group_archive' : 'admin_local_group_rename'] !== true)
+                throw new CollaborationError(isArchive ? 'ADMIN_LOCAL_GROUP_ARCHIVE_UNSUPPORTED' : 'ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED', `CLI and running service must support this operation (minimum 1.4.${isArchive ? '323' : '319'})`, 409);
+            const body = operation === 'get' ? undefined : { ...(operation === 'rename' ? { name: args['--name'] } : {}), expected_updated_at: Number(args['--expected-updated-at']), idempotency_key: args['--idempotency-key'] };
+            const suffix = operation === 'get' ? '' : `/${operation}`;
+            write(JSON.stringify(parsed(await request(socketPath, body ? 'POST' : 'GET', `/admin/groups/${encodeURIComponent(id)}${suffix}`, body, headers(undefined, adminToken)))));
             return 0;
         }
         if (action === 'group') {
@@ -207,16 +225,22 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
             write(JSON.stringify(parsed(await request(socketPath, 'GET', `/admin/sessions/${encodeURIComponent(argv[1])}/restore-diagnostics`, undefined, headers(undefined, adminToken)))));
             return 0;
         }
-        for (let index = 1; index < argv.length; index += 2) {
-            const flag = argv[index];
-            if (!['--file', '--credential-file'].includes(flag) || !argv[index + 1] || options[flag])
-                throw new Error('Invalid integration arguments');
-            options[flag] = argv[index + 1];
-        }
+        if (action !== 'groups' && action !== 'list')
+            for (let index = 1; index < argv.length; index += 2) {
+                const flag = argv[index];
+                if (!['--file', '--credential-file'].includes(flag) || !argv[index + 1] || options[flag])
+                    throw new Error('Invalid integration arguments');
+                options[flag] = argv[index + 1];
+            }
         if (action === 'groups' || action === 'list') {
-            if (argv.length !== 1)
-                throw new Error('Unexpected arguments');
-            write(JSON.stringify(parsed(await request(socketPath, 'GET', action === 'groups' ? '/admin/groups' : '/admin/principals', undefined, headers(undefined, adminToken)))));
+            if (action === 'list' && argv.length !== 1 || action === 'groups' && argv.length > 2 || action === 'groups' && argv.length === 2 && argv[1] !== '--include-archived')
+                throw new Error('Usage: td integration groups [--include-archived] | list');
+            if (action === 'groups' && argv[1] === '--include-archived') {
+                const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
+                if (capabilities.admin_local_group_archive !== true)
+                    throw new CollaborationError('ADMIN_LOCAL_GROUP_ARCHIVE_UNSUPPORTED', 'CLI and running service must support archived group discovery (minimum 1.4.323)', 409);
+            }
+            write(JSON.stringify(parsed(await request(socketPath, 'GET', action === 'groups' ? `/admin/groups${argv[1] ? '?include_archived=true' : ''}` : '/admin/principals', undefined, headers(undefined, adminToken)))));
             return 0;
         }
         if (action === 'update') {

package/dist/server/agent/integrationServer.js

@@ -68,7 +68,7 @@ export class IntegrationRuntime {
             if (!expected.length || given.length !== expected.length || !timingSafeEqual(given, expected))
                 integrationError('INTEGRATION_ADMIN_REQUIRED', 'Local administration credential is required', 401);
         };
-        app.get('/admin/groups', run(req => { admin(req); return { groups: options.messages.list().filter(g => !g.federated).map(g => ({ id: g.id, name: g.name, updatedAt: g.updatedAt })) }; }));
+        app.get('/admin/groups', run(req => { admin(req); return { groups: options.messages.listLocalGroupMetadata(req.query.include_archived === 'true') }; }));
         app.get('/admin/groups/:id', run(req => { admin(req); return { group: options.messages.getLocalGroupMetadata(req.params.id) }; }));
         app.post('/admin/groups/:id/rename', run(req => {
             admin(req);
@@ -78,6 +78,22 @@ export class IntegrationRuntime {
             }
             return options.messages.renameLocalGroup(req.params.id, body.name, body.expected_updated_at, body.idempotency_key);
         }));
+        app.post('/admin/groups/:id/archive', run(req => {
+            admin(req);
+            const body = req.body;
+            if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !['expected_updated_at', 'idempotency_key'].includes(key))) {
+                integrationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Specify only expected_updated_at and idempotency_key');
+            }
+            return options.messages.setLocalGroupArchived(req.params.id, true, body.expected_updated_at, body.idempotency_key);
+        }));
+        app.post('/admin/groups/:id/unarchive', run(req => {
+            admin(req);
+            const body = req.body;
+            if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !['expected_updated_at', 'idempotency_key'].includes(key))) {
+                integrationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Specify only expected_updated_at and idempotency_key');
+            }
+            return options.messages.setLocalGroupArchived(req.params.id, false, body.expected_updated_at, body.idempotency_key);
+        }));
         app.post('/admin/groups', run(req => {
             admin(req);
             const body = req.body;
@@ -246,12 +262,15 @@ export class IntegrationRuntime {
             session_startup_input_clear: true, session_startup_input_clear_min_version: '1.4.310',
             agent_launch_process_check: true, agent_launch_process_check_min_version: '1.4.312',
             terminal_input_runtime_fence: true, terminal_input_runtime_fence_min_version: '1.4.313',
+            agent_launch_generation_consistency: true, agent_launch_generation_consistency_min_version: '1.4.322',
+            terminal_input_check_diagnostics: true,
             session_launch_diagnostics: true, session_launch_diagnostics_min_version: '1.4.314',
             session_cold_retry: true, session_cold_retry_min_version: '1.4.314',
             session_rename: true, session_rename_min_version: '1.4.315',
             session_close: true, session_close_min_version: '1.4.315',
             admin_local_group_create: true, admin_local_group_create_min_version: '1.4.318',
             admin_local_group_rename: true, admin_local_group_rename_min_version: '1.4.319',
+            admin_local_group_archive: true, admin_local_group_archive_min_version: '1.4.323',
             integration_policy_update: true,
             session_restore_diagnostics: true,
             native_identity_linux_flock_owner: process.platform === 'linux',

package/dist/server/agent/promptDelivery.js

@@ -22,12 +22,12 @@ export function writeBracketedPrompt(target, prompt, assertCurrent, progress) {
     progress?.('queue_wait');
     return serializeTerminalInput(target, async () => {
         progress?.('queue_acquired');
-        assertCurrent?.();
+        assertCurrent?.('queue_acquired');
         progress?.('paste_attempted');
         target.write(buildBracketedPasteBytes(prompt));
         progress?.('paste_written');
         await waitForPromptSubmit();
-        assertCurrent?.();
+        assertCurrent?.('before_submit');
         progress?.('submit_attempted');
         target.write('\r');
         progress?.('submit_written');

package/dist/server/agent/sessionLaunchState.js

@@ -0,0 +1,20 @@
+import { TerminalInputTargetChangedError } from './terminalInput.js';
+/** Display/identity metadata may have crossed an await with an old snapshot.
+ * Only the launch lifecycle can change these server-owned control fields. */
+export function mergeSessionLaunchState(candidate, current, change) {
+    if (!change)
+        return current ? { ...candidate,
+            agentLaunchGeneration: current.agentLaunchGeneration ?? null,
+            agentLaunchCheck: current.agentLaunchCheck ?? null,
+        } : candidate;
+    if (!current || (current.agentLaunchGeneration ?? null) !== change.expectedGeneration
+        || (current.agentLaunchCheck?.id ?? null) !== change.expectedCheckId) {
+        throw new TerminalInputTargetChangedError({
+            expected_backend_session_id: candidate.backendSessionId, current_backend_session_id: current?.backendSessionId ?? null,
+            expected_launch_id: change.expectedGeneration, current_launch_id: current?.agentLaunchGeneration ?? null,
+            backend_instance_matches: !!current && candidate.backendSessionId === current.backendSessionId,
+            check_phase: 'launch_state_commit', checked_at: Date.now(),
+        });
+    }
+    return { ...candidate, agentLaunchGeneration: change.generation, agentLaunchCheck: change.check };
+}

package/dist/server/agent/terminalInput.js

@@ -22,6 +22,23 @@ export class TerminalInputTargetChangedError extends Error {
         this.evidence = evidence;
     }
 }
+/** Capture once, including for a launch's own command. Never adopt a newer
+ * generation simply because the physical backend has stayed the same. */
+export function captureRuntimeInputGuard(current, expected = current()) {
+    const capturedAt = Date.now();
+    return (phase = 'guard_capture') => {
+        const actual = current();
+        const matches = actual.backendInstance === expected.backendInstance;
+        if (actual.backendSessionId !== expected.backendSessionId || !matches
+            || actual.launchId !== expected.launchId || actual.routeRevision !== expected.routeRevision) {
+            throw new TerminalInputTargetChangedError({ expected_backend_session_id: expected.backendSessionId,
+                current_backend_session_id: actual.backendSessionId, expected_launch_id: expected.launchId,
+                current_launch_id: actual.launchId, backend_instance_matches: matches, check_phase: phase,
+                guard_captured_at: capturedAt, checked_at: Date.now(), expected_route_revision: expected.routeRevision,
+                current_route_revision: actual.routeRevision });
+        }
+    };
+}
 /** Clearing a one-time launch check does not change the runtime generation. */
 export function captureTerminalInputGuard(current, expected = current()) {
     return () => {