feat(delegation): stop delegated members with acknowledged, settled receipts

apps/presentation/dashboard/src/data/chat.ts

@@ -1108,14 +1108,17 @@ export function readManagedGoalResult(goalId: string, todoId: string) {
   );
 }
 export type DelegationState = "unavailable" | "accepted" | "rejected" | "recovery_required"
-  | "executing" | "validating" | "dispatched" | "unknown";
+  | "stopped" | "executing" | "validating" | "dispatched" | "unknown";
 type DelegationStateFacts = {status: string; worker_active?: boolean; recovery_required: boolean | null};
 // Keep inventory and selected-operation labels consistent; unknown states stay unknown.
-// "executing" and "validating" require an active worker observation, never the stored status alone.
 export function delegationState(row: DelegationStateFacts): DelegationState {
   if (row.status === "unavailable") return "unavailable";
   if (row.status === "accepted") return "accepted";
   if (row.status === "rejected") return "rejected";
+  // A recorded stop precedes recovery: only the separate stop receipt proves
+  // the original execution released its Host group, so the stored status alone
+  // must not be read as work still needing recovery.
+  if (row.status === "stopped") return "stopped";
   if (row.recovery_required) return "recovery_required";
   if (row.status === "running" && row.worker_active) return "executing";
   if (row.status === "turn_returned" && row.worker_active) return "validating";
@@ -1126,6 +1129,7 @@ const DELEGATION_STATE_LABELS: Record<DelegationState, {zh: string; en: string}>
   unavailable: {zh: "无法核验", en: "Unavailable"},
   accepted: {zh: "已通过当前验收", en: "Currently accepted"},
   rejected: {zh: "未通过验收", en: "Rejected"},
+  stopped: {zh: "停止已登记", en: "Stop recorded"},
   recovery_required: {zh: "需要恢复原执行", en: "Original execution needs recovery"},
   executing: {zh: "执行中", en: "Executing"},
   validating: {zh: "正在验收", en: "Validating"},

apps/presentation/dashboard/src/features/personal-workspace/goal-team-work.tsx

@@ -7,19 +7,21 @@ import {DelegationPreflightStatus} from "./delegation-preflight-status";
 
 type Member = {id: string; agent_id: string; todo_id: string};
 type DelegationRecord = DelegationInventory["items"][number];
-type PulseBucket = "executing" | "validating" | "accepted" | "attention" | "dispatched" | "unknown";
+type PulseBucket = "executing" | "validating" | "accepted" | "attention" | "stopped" | "dispatched" | "unknown";
 type CheckTone = "unchecked" | "ready" | "unverified" | "blocked";
 
 const PULSE_BUCKETS: Record<DelegationState, PulseBucket> = {
   executing: "executing", validating: "validating", accepted: "accepted",
   rejected: "attention", recovery_required: "attention", unavailable: "attention",
-  dispatched: "dispatched", unknown: "unknown",
+  // A recorded stop is not proof its Host group released; it is its own bucket.
+  stopped: "stopped", dispatched: "dispatched", unknown: "unknown",
 };
 const PULSE_LABELS: Record<PulseBucket, {zh: string; en: string}> = {
   executing: {zh: "执行中", en: "Executing"},
   validating: {zh: "正在验收", en: "Validating"},
   accepted: {zh: "已通过", en: "Accepted"},
   attention: {zh: "需要处理", en: "Needs attention"},
+  stopped: {zh: "已登记停止", en: "Stop on record"},
   dispatched: {zh: "等待回读", en: "Awaiting readback"},
   unknown: {zh: "状态未知", en: "Unknown"},
 };
@@ -41,6 +43,8 @@ function StateIcon({state}: {state: DelegationState | PulseBucket | CheckTone})
   if (state === "validating") return <Loader2 aria-hidden="true" size={14}/>;
   if (state === "accepted" || state === "ready") return <CheckCircle2 aria-hidden="true" size={14}/>;
   if (state === "dispatched") return <Clock3 aria-hidden="true" size={14}/>;
+  // A recorded stop is an explicit terminal marker, not an unknown to triage.
+  if (state === "stopped") return <CircleDashed aria-hidden="true" size={14}/>;
   if (state === "unverified") return <ShieldCheck aria-hidden="true" size={14}/>;
   if (state === "unchecked") return <CircleDashed aria-hidden="true" size={14}/>;
   if (state === "unknown") return <CircleHelp aria-hidden="true" size={14}/>;
@@ -130,7 +134,7 @@ export function GoalTeamWork({sessionId, members, zh, canMessage, ingress}: {ses
     else unboundRecords.push(row);
   }
   const pulse = items.reduce((counts, row) => {counts[PULSE_BUCKETS[delegationState(row)]] += 1; return counts;},
-    {executing: 0, validating: 0, accepted: 0, attention: 0, dispatched: 0, unknown: 0} as Record<PulseBucket, number>);
+    {executing: 0, validating: 0, accepted: 0, attention: 0, stopped: 0, dispatched: 0, unknown: 0} as Record<PulseBucket, number>);
   const visibleBuckets = (Object.keys(PULSE_LABELS) as PulseBucket[]).filter(bucket => bucket !== "unknown" || pulse.unknown > 0);
 
   function renderRecord(row: DelegationRecord, showAgent: boolean) {

docs/reference/goal-chat-continuation.md

@@ -119,7 +119,10 @@ messages; images use the ordinary conversation after pausing.
   requires the Chat service to be running; stopping it leaves intents pending.
 - To roll back, pause/close the Chat service before installing an older build.
   Disabling mode or deleting a binding does not cancel already admitted children;
-  use their own execution/recovery controls and retain their evidence.
+  stop one with `loopx delegation stop --execute` (or `stop_delegation`), read
+  its receipt, and retain its evidence. Only `settled` proves the worker
+  acknowledged and released its locks and its native host exited; stopped work
+  needs a new operation id.
 
 The ordinary native command path also remains available without delegation:
 
@@ -175,6 +178,8 @@ Turn 保持 `wake_dispatch_pending`；中断派发后仍处于 queued 的 Turn 
 协调员保留只读沙箱，成员权限来自各自执行绑定，不继承管家的扩大权限。
 成员通过验收与协调员报告、整个 Goal 验收分别显示；本模式不直接完成报告 Todo
 或整个 Goal。额度是含历史用量的总量，正在执行的请求可能超额，成员另行计量。
-回滚旧版本前先暂停或关闭 Chat 服务；退出或撤销绑定不自动取消已启动的成员。
+回滚旧版本前先暂停或关闭 Chat 服务；退出或撤销绑定不自动取消已启动的成员，
+用 `loopx delegation stop --execute`（或 `stop_delegation`）停止单个成员并阅读回执：
+只有 `settled` 证明 worker 已确认并释放锁且原生 host 已退出；已停止的工作需要新的 operation id。
 此按钮目前限本机 managed Codex Goal 对话，不宣称 Lark、挂接会话或其他主力
 驱动等价。可用下方示例准备一次隔离的本地 DSH＋云端 Ark 协作。