V2 shared conversations: mention pills, agent activity lines, generated documents and media (0.261.255)

[Paul Lizer (paullizer)]

Summary

• Mentions as pills and chips. In a shared conversation, a message shows the agent that was asked and the people it was addressed to as pills above its text, instead of repeating @Name in the sentence. A name used to address someone takes its comma with it, so "Sam Smoot (@sam), start with the route." reads "Start with the route." Picking from the @ menu adds removable chips above the message box: any number of people, and one model or agent (a second agent replaces the first). The names are still sent in front of the message, so the server, the classic client and the assistant read mentions exactly as before. Reply quotes read the same way and drop markdown markers.
• Agent activity lines. Every running AI request shows as one slim line at the end of the thread, for every participant: which agent, who asked, how long it has been running, and what it is doing in plain words ("Looking up order status", "Asking Data Analyst", "Writing the answer"). Several can run at once, and the line replaces the large "Thinking" bubble in shared conversations. Steps never include plugin, function or model names, arguments or timings.
• Generated documents and media in the Documents drawer. The drawer lists the documents agents generated in the conversation, with a Markdown preview and a download that follows the workspace's own download rules for the reader. It also gathers every image, video and audio clip the thread shows, including signed links from remote services.

Server side: CollaborationAiActivity (route_backend_collaboration.py) publishes collaboration.ai.started, progress and finished on the conversation's event stream. finished always fires, from a finally block, and publishing never raises. functions_collaboration_ai_activity.py describes each step in plain words. Two new routes for accepted participants list and download generated documents (functions_collaboration_generated_documents.py): a group document needs Owner, Admin or DocumentManager plus the group's download settings, and a personal document only its owner.

Stacked on #1637. The Media list skips messages that a workflow reply replaced (isSupersededByWorkflowReply, added in #1637), so this branch is built on it. Until #1637 merges, its commit shows here as well.

Exercised on a SimpleChat POC deployment: four people and twelve agent requests in one shared conversation.

Linked issue

None.

Release Notes & Latest Features

• New Feature
• Bug Fix
• UI Enhancement
• Breaking Change
• Internal only

Is this visible to end users?

• Yes
• No

Is this admin-facing (Admin Settings, governance, deployment, config)?

• Yes
• No

Should this become a Latest Feature card?

• Yes
• No
• Already added

Screenshot needed for the card?

• Yes
• No
• Attached

Version bump

• application/single_app/config.py VERSION third segment bumped: 0.261.255, after Show a workflow's reply once in the conversation it created (0.261.253) #1637's 0.261.253 and Shared map server core: persistent, phase-tagged maps for agents (Phase 1, 0.261.254) #1638's 0.261.254. Renumber on merge if the order changes.
• deployers/version.txt not needed; deployers/ was not changed

Testing / validation

• python functional_tests/test_collaboration_ai_activity_events.py (6), test_collaboration_generated_documents.py (4), test_workflow_reply_replaces_agent_posted_message.py (10)
• node functional_tests/test_v2_collaboration_mention_pills_logic.mjs (9), test_v2_collaboration_ai_activity_logic.mjs (6), test_v2_drawer_media_logic.mjs, test_v2_shared_conversation_logic.mjs (51)
• Prompt tests the chips touch: test_v2_prompt_attachment_persistence.py (84), test_v2_prompt_composer_card.py (11), test_v2_prompts_workbench.py (22)
• Route policy tests (12, 7, 2), test_docs_site_quality.py (6), test_docs_app_surface_coverage.py (7), and scripts/check_broken_access_control.py on the changed Python files
• npm --prefix application/v2_ui run build (type check and build)
• ui_tests/test_v2_collaboration_ux.py (4) and the 19 other V2 UI test files that mount the message list, composer or drawer: 255 passed in one session. Three files hit Playwright's "Sync API inside the asyncio loop" only when run in that same session and pass on their own (56, 33, 5). test_v2_orchestration_composer.py and test_v2_orchestration_pending_approval_resume.py pass through their own runners (6/6, 5/5).

Documentation

• Release notes updated, or not needed (not added yet)
• Feature documentation updated, or not needed: docs/explanation/features/V2_COLLABORATION_UX.md, docs/reference/chat-controls.md
• Fix documentation updated, or not needed

Security checklist

• New Flask routes include @swagger_route(security=get_auth_security())
• Settings sent to non-admin frontends use sanitize_settings_for_user() (the new routes send no settings)
• Browser JavaScript is served from local SimpleChat static assets only; no CDN-hosted JS
• No secrets, keys, connection strings, or local-only artifacts are included