feat(web): rewrite subagent conversations for FIFO activation

packages/client/ui-subagent/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-subagent/README.md
-README.md: c69211bd6f84b6e09760ff47d5a319b1ef2ce28c
-README.zh.md: 43776fbc32a5bd369e837779787cdc82ceb0f749
+README.md: 7399681265a9905f12fa0cbaf621528fb86562a3
+README.zh.md: f9a507336058920835745c3882fc3b9fe83c5ab0

packages/client/ui-subagent/README.md

@@ -2,11 +2,11 @@
 
 English | [中文](README.zh.md)
 
-Web subagent feature owner: contributes the lazily expandable catalog tree to `conversation.session.header.actions`, the unavailable-parent replacement to the conversation composer chain, and the existing `@` reference source to `ctx.slash`.
+Web subagent feature owner: contributes the lazily expandable catalog tree to `conversation.session.header.actions`, reason-specific read-only replacements to the conversation composer chain, and the existing `@` reference source to `ctx.slash`.
 
-The header action reads `subagentsByParent` and session summaries through the standard `useSessions` hook. After a non-empty catalog arrives it shows the healthy direct-child count and a compact tree in service order. Each healthy row combines its durable label, `running`/`inactive` activity (rendered as `正在处理`/`已完成`), optional log-backed title, and session-summary activity time; corrupt, unsupported, or unavailable rows remain readable but disabled. Expanding a row lazily opens that child's direct catalog and reports every visible branch to the runtime so membership frames cause a debounced refresh only where the tree is being consumed. Selecting any depth calls `SessionsService.openSubagent()` with the row's exact `{parentSessionId, childSessionId}` address. Component-local state owns tree visibility, expanded branches, and keyboard focus. ArrowRight/ArrowLeft expand and collapse branches; ArrowUp/ArrowDown, Home, End, and Escape navigate or close the tree; closing returns focus to the trigger. Styling uses tokens only.
+The header action reads `subagentsByParent` and session summaries through the standard `useSessions` hook. After a non-empty catalog arrives it shows the healthy direct-child count and a compact tree in service order. Continuable and one-shot rows display mode plus `running`/`inactive` activity, an optional log-backed title, and session-summary activity time; an unlabeled one-shot row falls back to its session id. Corrupt, unsupported, or unavailable rows remain readable but disabled. Expanding a row lazily opens that child's direct catalog and reports every visible branch to the runtime so membership frames cause a debounced refresh only where the tree is being consumed. Selecting any depth calls `SessionsService.openSubagent()` with the row's exact `{parentSessionId, childSessionId, mode}` address. Component-local state owns tree visibility, expanded branches, and keyboard focus. ArrowRight/ArrowLeft expand and collapse branches; ArrowUp/ArrowDown, Home, End, and Escape navigate or close the tree; closing returns focus to the trigger. Styling uses tokens only.
 
-An addressed child with no exact live parent elects the read-only composer entry and explains the recovery path. A child with a live parent keeps the ordinary input chrome, whose Session routes through `subagent.prompt`; this package never receives host context or calls a model-facing tool. The catalog and composer behavior are specified by the [Web subagent conversations Agent Note](../../../.agents/notes/implemented/feature/2026-07-27-web-subagent-conversations.md).
+A one-shot child always elects a read-only composer that identifies the transcript as a completed execution record. A continuable child does so only when its exact parent is unavailable, with copy explaining the recovery path. A continuable child with a live parent keeps the ordinary input chrome, whose Session routes through `subagent.prompt`; running input remains Send because every follow-up joins the child's FIFO inbox, and addressed sessions never expose Stop. This package never receives host context or calls a model-facing tool. The catalog and composer behavior are specified by the [Web subagent conversations Agent Note](../../../.agents/notes/implemented/feature/2026-07-27-web-subagent-conversations.md).
 
 Subagent-origin Session rows are omitted from the ordinary sidebar, so the parent header catalog is their navigation entry point. Ordinary forks remain in the sidebar.
 
@@ -18,7 +18,7 @@ The `@` source remains deliberately separate and inert. Candidates are zero-RPC
 
 #### What the model sees
 
-Only the legacy `@` reference source affects model input: a picked candidate reaches the ordinary user message as literal `@label`, without a dedicated block or host-side resolution. Catalog browsing, child navigation, persisted transcript viewing, and human continuation UI add no prompt section; continuation content becomes a normal user-role event through the host subagent adapter.
+Only the legacy `@` reference source affects model input: a picked candidate reaches the ordinary user message as literal `@label`, without a dedicated block or host-side resolution. Catalog browsing, child navigation, and persisted transcript viewing add no prompt section; accepted continuation content becomes a normal FIFO user message through the host subagent adapter.
 
 #### Token effect
 
@@ -30,5 +30,5 @@ Append-only. This package never edits earlier request tokens.
 
 ## Known Limitations and Deferred Work
 
-- **The catalog has coarse liveness only** — it cannot show durable outcome, elapsed time, exact Activation state, or a correct cancel button.
+- **The catalog has coarse activity only** — it cannot show durable outcome, elapsed time, Activation identity, or an authority-safe cancel button.
 - **`@` references remain display-title text** — duplicate or renamed labels are ambiguous, so they intentionally do not acquire continuation semantics.

packages/client/ui-subagent/README.zh.md

@@ -2,11 +2,11 @@
 
 [English](README.md) | 中文
 
-Web subagent 功能 owner：向 `conversation.session.header.actions` 贡献可懒加载展开的目录树，向会话编辑器链贡献 parent 不可用时的替代呈现，并保留注册到 `ctx.slash` 的既有 `@` 引用 source。
+Web subagent 功能 owner：向 `conversation.session.header.actions` 贡献可懒加载展开的目录树，向会话编辑器链贡献按原因区分的只读替代呈现，并保留注册到 `ctx.slash` 的既有 `@` 引用 source。
 
-页头操作通过标准 `useSessions` 钩子读取 `subagentsByParent` 与会话摘要。非空目录到达后，它会显示健康的直接 child 数量，并按服务顺序显示一棵紧凑树。每个健康行都组合其持久化 label、`running`／`inactive` 活动状态（分别呈现为「正在处理」／「已完成」）、由日志支撑的可选 title 与会话摘要中的活动时间；损坏、不受支持或不可用的行仍保持可读但禁用。展开某一行时，会懒加载该 child 的直接目录，并向运行时报告每个可见分支，使成员帧只在树正被消费的位置触发去抖动刷新。选择任意深度的条目都会使用该行的确切地址 `{parentSessionId, childSessionId}` 调用 `SessionsService.openSubagent()`。组件局部状态负责树的可见性、已展开分支与键盘焦点。ArrowRight／ArrowLeft 展开和折叠分支；ArrowUp／ArrowDown、Home、End 与 Escape 用于导航或关闭树；关闭后焦点返回触发器。样式只使用 token。
+页头操作通过标准 `useSessions` 钩子读取 `subagentsByParent` 与会话摘要。非空目录到达后，它会显示健康的直接 child 数量，并按服务顺序显示一棵紧凑树。可继续和 one-shot 行会显示 mode、`running`／`inactive` 活动状态、由日志支撑的可选 title 与会话摘要中的活动时间；没有 label 的 one-shot 行会回退到其会话 id。损坏、不受支持或不可用的行仍保持可读但禁用。展开某一行时，会懒加载该 child 的直接目录，并向运行时报告每个可见分支，使成员帧只在树正被消费的位置触发去抖动刷新。选择任意深度的条目都会使用该行的确切地址 `{parentSessionId, childSessionId, mode}` 调用 `SessionsService.openSubagent()`。组件局部状态负责树的可见性、已展开分支与键盘焦点。ArrowRight／ArrowLeft 展开和折叠分支；ArrowUp／ArrowDown、Home、End 与 Escape 用于导航或关闭树；关闭后焦点返回触发器。样式只使用 token。
 
-已寻址 child 没有确切的存活 parent 时，会选中只读编辑器配置项并说明恢复路径。parent 存活时，child 保留普通输入 chrome，其 Session 会通过 `subagent.prompt` 路由；本包绝不接收宿主 context，也不调用面向模型的工具。目录与编辑器行为由 [Web subagent 对话 Agent Note](../../../.agents/notes/implemented/feature/2026-07-27-web-subagent-conversations.md)规定。
+one-shot child 始终选用只读编辑器，并将 transcript（文本记录）说明为已完成的执行记录。可继续 child 仅在其确切 parent 不可用时选用只读编辑器，并以文案说明恢复路径。确切 parent 存活时，可继续 child 保留普通输入 chrome，其 Session 会通过 `subagent.prompt` 路由；child 运行期间，输入操作仍为 Send，因为每条后续消息都会进入 child 的 FIFO inbox，且已寻址会话绝不公开 Stop。本包绝不接收宿主 context，也不调用面向模型的工具。目录与编辑器行为由 [Web subagent 对话 Agent Note](../../../.agents/notes/implemented/feature/2026-07-27-web-subagent-conversations.md)规定。
 
 普通侧边栏会省略带 subagent origin 的 Session 行，因此 parent 页头目录是它们的导航入口。普通 fork 仍保留在侧边栏中。
 
@@ -18,7 +18,7 @@ Web subagent 功能 owner：向 `conversation.session.header.actions` 贡献可
 
 #### 模型看到的内容
 
-只有旧有 `@` 引用 source 会影响模型输入：pick 的候选以字面文本 `@label` 进入普通用户消息，没有专用内容块或宿主侧解析。浏览目录、导航 child、查看持久化 transcript 与用户继续交互 UI 都不会添加提示词 section；继续交互内容会经宿主 subagent 适配器成为普通 user-role 事件。
+只有旧有 `@` 引用 source 会影响模型输入：pick 的候选以字面文本 `@label` 进入普通用户消息，没有专用内容块或宿主侧解析。浏览目录、导航 child 与查看持久化 transcript 都不会添加提示词 section；获准进入的继续交互内容会经宿主 subagent 适配器成为普通 FIFO 用户消息。
 
 #### Token 影响
 
@@ -30,5 +30,5 @@ Web subagent 功能 owner：向 `conversation.session.header.actions` 贡献可
 
 ## 已知限制与暂缓事项
 
-- **目录只有粗粒度存活状态**：它不能显示持久化结果、耗时、确切的 Activation 状态或正确的取消按钮。
+- **目录只有粗粒度活动状态**：它不能显示持久化结果、耗时、Activation 身份或具备安全授权的取消按钮。
 - **`@` 引用仍是显示标题文本**：重复或改名后的 label 会有歧义，因此它们刻意不获得继续执行语义。

packages/client/ui-subagent/src/client/SubagentCatalogAction.tsx

@@ -16,9 +16,9 @@ type Catalogs = SessionListState['subagentsByParent']
 
 /** Business actions supplied by the slot registration. */
 export interface SubagentCatalogInjected {
-  openChild(address: SubagentAddress): void
-  refresh(parentSessionId: SessionId): void
-  setCatalogOpen(parentSessionId: SessionId, open: boolean): void
+  openChild: (address: SubagentAddress) => void
+  refresh: (parentSessionId: SessionId) => void
+  setCatalogOpen: (parentSessionId: SessionId, open: boolean) => void
 }
 
 /** Full props for the session-header catalog action. */
@@ -33,16 +33,16 @@ interface CatalogRowsProps {
   expanded: ReadonlySet<SessionId>
   level: number
   now: number
-  openChild(address: SubagentAddress): void
-  refresh(parentSessionId: SessionId): void
-  toggleBranch(childSessionId: SessionId): void
-  closeCatalog(): void
+  openChild: (address: SubagentAddress) => void
+  refresh: (parentSessionId: SessionId) => void
+  toggleBranch: (childSessionId: SessionId) => void
+  closeCatalog: () => void
 }
 
 function diagnosticReason(entry: Extract<CatalogEntry, { kind: 'diagnostic' }>): string {
   switch (entry.reason) {
     case 'corrupt': return '会话记录损坏'
-    case 'unsupported': return '不是可继续的子代理'
+    case 'unsupported': return '子代理记录版本不受支持'
     case 'unavailable': return '会话记录暂不可用'
   }
 }
@@ -119,11 +119,16 @@ function CatalogRows({
         const isExpanded = expanded.has(entry.id)
         const knownLeaf = childCatalog?.state === 'ready' && childCatalog.entries.length === 0
         const summary = summaries[entry.id]
-        const secondary = summary?.title ?? (entry.activity === 'running' ? '正在处理' : '已完成')
+        const label = entry.label ?? entry.id
+        const mode = entry.mode === 'one-shot' ? '一次性' : '可继续'
+        const activity = entry.activity === 'running' ? '正在运行' : '当前未运行'
+        const secondary = [summary?.title, mode, activity]
+          .filter(value => value !== undefined)
+          .join(' · ')
         const time = relativeTime(summary?.updatedAt, now)
 
         const open = (): void => {
-          openChild({ parentSessionId, childSessionId: entry.id })
+          openChild({ parentSessionId, childSessionId: entry.id, mode: entry.mode })
           closeCatalog()
         }
         const handleKey = (event: KeyboardEvent<HTMLDivElement>): void => {
@@ -131,11 +136,10 @@ function CatalogRows({
             event.preventDefault()
             event.stopPropagation()
             open()
-          } else if (event.key === 'ArrowRight' && !knownLeaf && !isExpanded) {
-            event.preventDefault()
-            event.stopPropagation()
-            toggleBranch(entry.id)
-          } else if (event.key === 'ArrowLeft' && isExpanded) {
+          } else if (
+            (event.key === 'ArrowRight' && !knownLeaf && !isExpanded)
+            || (event.key === 'ArrowLeft' && isExpanded)
+          ) {
             event.preventDefault()
             event.stopPropagation()
             toggleBranch(entry.id)
@@ -153,7 +157,7 @@ function CatalogRows({
               role="treeitem"
               tabIndex={0}
               aria-level={level}
-              aria-label={[entry.label, secondary, time].filter(value => value !== undefined).join(' ')}
+              aria-label={[label, secondary, time].filter(value => value !== undefined).join(' ')}
               {...knownLeaf ? {} : { 'aria-expanded': isExpanded }}
               className={css.row}
               onClick={open}
@@ -166,7 +170,7 @@ function CatalogRows({
                     type="button"
                     tabIndex={-1}
                     className={`${css.disclosure} ${isExpanded ? css.disclosureOpen : ''}`}
-                    aria-label={`${isExpanded ? '收起' : '展开'} ${entry.label} 的下级子代理`}
+                    aria-label={`${isExpanded ? '收起' : '展开'} ${label} 的下级子代理`}
                     onClick={toggle}
                   >
                     <IconChevronRightOutline14 />
@@ -174,7 +178,7 @@ function CatalogRows({
                 )}
               <StateDot state={entry.activity === 'running' ? 'ongoing' : 'done'} />
               <span className={css.content}>
-                <span className={css.label}>{entry.label}</span>
+                <span className={css.label}>{label}</span>
                 <span className={css.summary}>{secondary}</span>
               </span>
               {time !== undefined && <span className={css.time}>{time}</span>}
@@ -341,7 +345,7 @@ export function SubagentCatalogAction({
         <span>{healthy.length} 个子代理</span>
         <IconChevronDownOutline14 className={open ? css.triggerOpen : undefined} />
       </button>
-      {open && catalog !== undefined && (
+      {open && (
         <div className={css.menu} role="tree" aria-label="子代理会话">
           <CatalogRows
             parentSessionId={sessionId}

packages/client/ui-subagent/src/client/SubagentReadOnlyComposer.tsx

@@ -1,20 +1,32 @@
 import type { PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
-import type { ComposerChainProps } from '@deepseek-ai/dsh-client-ui-conversation/client'
 import css from './SubagentReadOnlyComposer.module.css'
 
+/** Why a catalog-addressed conversation cannot accept human input. */
+export interface SubagentReadOnlyMatch {
+  reason: 'one-shot' | 'parent-unavailable'
+}
+
 /** Full chain props after the read-only subagent selector accepts the owner currency. */
 export type SubagentReadOnlyComposerProps =
-  PropsRuntime<'conversation.composer'> & { matched: ComposerChainProps }
+  PropsRuntime<'conversation.composer'> & { matched: SubagentReadOnlyMatch }
 
 /**
- * Explain why the normal composer is unavailable for a parentless child.
+ * Explain why the normal composer is unavailable for an addressed child.
+ * @param props - selector-owned read-only reason plus standard slot props.
  * @returns A read-only composer replacement.
  */
-export function SubagentReadOnlyComposer() {
+export function SubagentReadOnlyComposer({
+  matched,
+}: Pick<SubagentReadOnlyComposerProps, 'matched'>) {
+  const oneShot = matched.reason === 'one-shot'
   return (
     <div className={css.frame} role="status">
-      <strong>此子代理暂时只读</strong>
-      <span>父会话当前不在线，重新打开父会话后即可继续发送消息。</span>
+      <strong>{oneShot ? '一次性子代理记录' : '此子代理暂时只读'}</strong>
+      <span>
+        {oneShot
+          ? '一次性任务不支持后续消息，可在这里查看完整执行记录。'
+          : '父会话当前不在线，重新打开父会话后即可继续发送消息。'}
+      </span>
     </div>
   )
 }

packages/client/ui-subagent/src/client/index.ts

@@ -15,19 +15,26 @@ import type {
 import type { ComposerChainProps } from '@deepseek-ai/dsh-client-ui-conversation/client'
 import type { ClientSessionContext, SlashServiceContract, SlashSource } from '@deepseek-ai/dsh-client-ui-slash/client'
 import { SubagentCatalogAction, type SubagentCatalogInjected } from './SubagentCatalogAction.tsx'
-import { SubagentReadOnlyComposer } from './SubagentReadOnlyComposer.tsx'
+import {
+  SubagentReadOnlyComposer, type SubagentReadOnlyMatch,
+} from './SubagentReadOnlyComposer.tsx'
 
 export type {
   SubagentCatalogActionProps, SubagentCatalogInjected,
 } from './SubagentCatalogAction.tsx'
-export type { SubagentReadOnlyComposerProps } from './SubagentReadOnlyComposer.tsx'
+export type {
+  SubagentReadOnlyComposerProps, SubagentReadOnlyMatch,
+} from './SubagentReadOnlyComposer.tsx'
 
 /** Required services for references, conversation slots, and session navigation. */
 export const inject = ['slash', 'sessions', 'conversation', 'slots']
 
-/** Claim the composer only when an addressed child has no live continuation owner. */
-function selectReadOnlySubagent(owner: ComposerChainProps): ComposerChainProps | null {
-  return owner.subagentReadOnly ? owner : null
+/** Claim the composer for one-shot history or an unavailable continuation owner. */
+function selectReadOnlySubagent(owner: ComposerChainProps): SubagentReadOnlyMatch | null {
+  const subagent = owner.session?.subagent
+  if (subagent === undefined || subagent === null) return null
+  if (subagent.address.mode === 'one-shot') return { reason: 'one-shot' }
+  return subagent.parentAvailable ? null : { reason: 'parent-unavailable' }
 }
 
 /**
@@ -98,9 +105,9 @@ export function apply(ctx: ClientContext): void {
   ctx.effect(
     () => ctx.slots.register({
       name: 'conversation.composer',
-      priority: 10,
+      priority: -10,
       select: selectReadOnlySubagent,
     }, SubagentReadOnlyComposer),
-    'ui-subagent: unavailable-parent composer',
+    'ui-subagent: read-only addressed composer',
   )
 }

packages/client/ui-subagent/tests/conversation-ui.spec.tsx

@@ -18,8 +18,13 @@ const GRANDCHILD = 'grandchild' as SessionId
 function catalog(over: Partial<SubagentCatalogSnapshot> = {}): SubagentCatalogSnapshot {
   return {
     entries: [
-      { kind: 'child', id: CHILD, label: 'worker', activity: 'running' },
-      { kind: 'child', id: 'child-2' as SessionId, label: 'reviewer', activity: 'inactive' },
+      {
+        kind: 'child', id: CHILD, mode: 'continuable', label: 'worker', activity: 'running',
+      },
+      {
+        kind: 'child', id: 'child-2' as SessionId, mode: 'one-shot',
+        label: 'reviewer', activity: 'inactive',
+      },
       { kind: 'diagnostic', id: 'bad' as SessionId, reason: 'corrupt' },
     ],
     parentAvailable: true,
@@ -42,6 +47,7 @@ function props(
         displayTitle: 'worker',
         running: true,
         blank: false,
+        waitingApproval: false,
         updatedAt: Date.now(),
       },
     },
@@ -49,9 +55,12 @@ function props(
     subagentsByParent: value === undefined ? nested : { [PARENT]: value, ...nested },
     currentAddress: undefined,
   } satisfies SessionListState
+  function useSessions<T>(select: (snapshot: SessionListState) => T): T {
+    return select(state)
+  }
   return {
     sessionId: PARENT,
-    useSessions: (<T,>(select: (snapshot: SessionListState) => T) => select(state)),
+    useSessions,
     openChild: vi.fn(),
     refresh: vi.fn(),
     setCatalogOpen: vi.fn(),
@@ -67,14 +76,14 @@ describe('SubagentCatalogAction', () => {
 
     expect(input.setCatalogOpen).toHaveBeenCalledWith(PARENT, true)
     expect(screen.getAllByRole('treeitem')).toHaveLength(3)
-    expect(screen.getByText('正在扫描项目文件')).toBeTruthy()
-    expect(screen.getByText('已完成')).toBeTruthy()
+    expect(screen.getByText('正在扫描项目文件 · 可继续 · 正在运行')).toBeTruthy()
+    expect(screen.getByText('一次性 · 当前未运行')).toBeTruthy()
     const diagnostic = screen.getByRole('treeitem', { name: /会话记录损坏/ })
     expect(diagnostic.getAttribute('aria-disabled')).toBe('true')
 
     fireEvent.click(screen.getByRole('treeitem', { name: /worker/ }))
     expect(input.openChild).toHaveBeenCalledWith({
-      parentSessionId: PARENT, childSessionId: CHILD,
+      parentSessionId: PARENT, childSessionId: CHILD, mode: 'continuable',
     })
     expect(input.setCatalogOpen).toHaveBeenLastCalledWith(PARENT, false)
   })
@@ -102,7 +111,10 @@ describe('SubagentCatalogAction', () => {
   it('lazily expands and collapses descendant catalogs with direct-parent navigation', () => {
     const childCatalog = catalog({
       entries: [
-        { kind: 'child', id: GRANDCHILD, label: 'indexer', activity: 'inactive' },
+        {
+          kind: 'child', id: GRANDCHILD, mode: 'continuable',
+          label: 'indexer', activity: 'inactive',
+        },
       ],
     })
     const grandchildCatalog = catalog({ entries: [] })
@@ -120,7 +132,7 @@ describe('SubagentCatalogAction', () => {
 
     fireEvent.click(nested)
     expect(input.openChild).toHaveBeenCalledWith({
-      parentSessionId: CHILD, childSessionId: GRANDCHILD,
+      parentSessionId: CHILD, childSessionId: GRANDCHILD, mode: 'continuable',
     })
     expect(input.setCatalogOpen).toHaveBeenCalledWith(PARENT, false)
     expect(input.setCatalogOpen).toHaveBeenCalledWith(CHILD, false)
@@ -129,7 +141,10 @@ describe('SubagentCatalogAction', () => {
   it('uses ArrowRight and ArrowLeft for branch disclosure', async () => {
     const input = props(catalog(), {
       [CHILD]: catalog({
-        entries: [{ kind: 'child', id: GRANDCHILD, label: 'indexer', activity: 'running' }],
+        entries: [{
+          kind: 'child', id: GRANDCHILD, mode: 'continuable',
+          label: 'indexer', activity: 'running',
+        }],
       }),
     })
     render(<SubagentCatalogAction {...input} />)
@@ -165,7 +180,10 @@ describe('SubagentCatalogAction', () => {
   it('closes every observed catalog when the root becomes empty', () => {
     const populated = props(catalog(), {
       [CHILD]: catalog({
-        entries: [{ kind: 'child', id: GRANDCHILD, label: 'indexer', activity: 'inactive' }],
+        entries: [{
+          kind: 'child', id: GRANDCHILD, mode: 'continuable',
+          label: 'indexer', activity: 'inactive',
+        }],
       }),
     })
     const view = render(<SubagentCatalogAction {...populated} />)
@@ -182,7 +200,12 @@ describe('SubagentCatalogAction', () => {
 
 describe('SubagentReadOnlyComposer', () => {
   it('explains the exact missing-parent recovery path', () => {
-    render(<SubagentReadOnlyComposer />)
+    render(<SubagentReadOnlyComposer matched={{ reason: 'parent-unavailable' }} />)
     expect(screen.getByRole('status').textContent).toContain('父会话当前不在线')
   })
+
+  it('explains that one-shot histories never accept follow-ups', () => {
+    render(<SubagentReadOnlyComposer matched={{ reason: 'one-shot' }} />)
+    expect(screen.getByRole('status').textContent).toContain('一次性任务不支持后续消息')
+  })
 })