@team-agent/installer 0.3.29 → 0.3.30

package/Cargo.lock

@@ -566,7 +566,7 @@ dependencies = [
 
 [[package]]
 name = "team-agent"
-version = "0.3.29"
+version = "0.3.30"
 dependencies = [
  "anyhow",
  "chrono",

package/Cargo.toml

@@ -9,7 +9,7 @@ members = ["crates/team-agent"]
 
 [workspace.package]
 edition = "2021"
-version = "0.3.29"
+version = "0.3.30"
 license = "AGPL-3.0"
 rust-version = "1.95"
 

package/crates/team-agent/src/lifecycle/profile_launch.rs

@@ -157,9 +157,7 @@ fn prepare_profile_launch(
     let mut claude_projects_root = None;
     let mut managed_mcp_config = false;
 
-    if matches!(agent.provider, Provider::Claude | Provider::ClaudeCode)
-        && agent.auth_mode == AuthMode::CompatibleApi
-    {
+    if matches!(agent.provider, Provider::Claude | Provider::ClaudeCode) {
         let dir = compatible_claude_config_dir(workspace, &agent.id)?;
         if let Some(config) = mcp_config {
             ensure_compatible_claude_mcp_config(&dir, workspace, config)?;

package/crates/team-agent/src/messaging/delivery.rs

@@ -382,13 +382,13 @@ pub fn deliver_pending_message(
     };
     let submit_verified = inject_submit_verified(&inject_report);
     let readback_verified = pane_readback_verified(&inject_report);
-    // Worker panes run provider TUIs, so delivery needs both submit consumption
-    // and pane readback. The leader pane is a human-facing receiver: no provider
-    // consumes the token, so readback is the delivery proof.
+    // Leader pane: inject success is delivery proof. Worker pane: post-submit
+    // evidence is the delivery proof; stale Phase-1 readback must not veto it
+    // and cannot independently prove the current Enter submitted.
     let verified = if is_leader_recipient {
         true
     } else {
-        submit_verified && readback_verified
+        submit_verified
     };
     if !verified {
         let reason = if !readback_verified {
@@ -507,13 +507,9 @@ pub(crate) fn inject_submit_verified(report: &InjectReport) -> bool {
     }
 }
 
-/// U1 #7 step-2: pane-readback gate. The submit may report verified (a key was sent)
-/// while the pasted token never actually landed in the pane — `inject()` step-1 now
-/// surfaces that as `InjectVerification::CaptureMissingToken`. A delivery is only truly
-/// verified when BOTH the submit succeeded AND the token was read back as visible.
-/// `CaptureMissingToken` → readback failed → not delivered (degraded/unverified). All
-/// other inject_verification variants (incl. token-less payloads, empty sends, new
-/// pasted-content prompt) are not readback-negative and pass this gate.
+/// U1 #7 step-2: pane-readback gate. `CaptureMissingToken` is negative readback
+/// evidence, but 0.3.30 submit evidence can supersede it: consumption or
+/// post-submit token observation proves the message reached the pane.
 /// 0.3.27: promoted to pub(crate) for leader_receiver.rs verification gate.
 pub(crate) fn pane_readback_verified(report: &InjectReport) -> bool {
     !matches!(

package/crates/team-agent/src/messaging/leader_receiver.rs

@@ -393,17 +393,12 @@ pub fn deliver_to_leader_fallback_pane(
 
     match inject_result {
         Ok(report) => {
-            // 0.3.27 P0: leader_receiver verification gate. The pre-fix path
-            // marked every inject Ok as delivered regardless of whether the
-            // submit was actually verified. Apply the same two-gate check that
-            // deliver_pending_message uses (delivery.rs:376-381):
-            //   (a) inject_submit_verified — Enter was accepted by the TUI
-            //   (b) pane_readback_verified — token was visible in the pane
-            // Both must pass to mark delivered; otherwise degrade to
-            // submitted_unverified (loud, not silent).
+            // 0.3.30: submit verification is enough for fallback-pane
+            // delivery. Readback is retained for diagnostics when submit
+            // itself is unverified.
             let submit_ok = super::delivery::inject_submit_verified(&report);
             let readback_ok = super::delivery::pane_readback_verified(&report);
-            if submit_ok && readback_ok {
+            if submit_ok {
                 store.mark(message_id, "delivered", None)?;
                 event_log.write(
                     "leader_receiver.fallback_pane_submitted",

package/crates/team-agent/src/messaging/tests/e23.rs

@@ -6,6 +6,11 @@ fn e23_fallback_pane_has_single_shared_noisy_surface() {
     assert!(leader_receiver.contains("leader_receiver.fallback_pane_submitted"));
     assert!(leader_receiver.contains("leader_receiver.fallback_pane_failed"));
     assert!(leader_receiver.contains("delivered_via=fallback_pane"));
+    assert!(
+        leader_receiver.contains("if submit_ok {")
+            && !leader_receiver.contains("submit_ok && readback_ok"),
+        "fallback pane delivery must accept submit_ok alone; stale readback must not veto it"
+    );
     assert!(
         leader_receiver.find("if primary_ok").unwrap()
             < leader_receiver

package/crates/team-agent/src/messaging/tests/runtime.rs

@@ -1269,7 +1269,9 @@ fn fire_due_scheduled_events_fires_each_scheduled_kind() {
     );
 }
 
-struct UnverifiedInjectTransport;
+struct UnverifiedInjectTransport {
+    readback_visible: bool,
+}
 impl Transport for UnverifiedInjectTransport {
     fn kind(&self) -> BackendKind {
         BackendKind::Tmux
@@ -1303,7 +1305,11 @@ impl Transport for UnverifiedInjectTransport {
     ) -> Result<InjectReport, TransportError> {
         Ok(InjectReport {
             stage_reached: crate::transport::InjectStage::Submit,
-            inject_verification: crate::transport::InjectVerification::CaptureContainsToken,
+            inject_verification: if self.readback_visible {
+                crate::transport::InjectVerification::CaptureContainsToken
+            } else {
+                crate::transport::InjectVerification::CaptureMissingToken
+            },
             submit_verification:
                 crate::transport::SubmitVerification::PastedContentPromptStillPresentAfterSubmit,
             turn_verification: crate::transport::TurnVerification::NotYetObserved,
@@ -1441,12 +1447,8 @@ impl Transport for FailingInjectTransport {
     }
 }
 
-// U1 #7 step-2 (RED→GREEN) — pane-readback gate: a token payload whose token was NOT
-// read back as visible in the pane (`InjectVerification::CaptureMissingToken`, surfaced by
-// the step-1 tmux_backend readback) must NOT be counted delivered, even when the SUBMIT
-// itself verified. Today the delivery gate only consulted submit_verification → a silent
-// paste-drop reported delivered (false green). This transport returns a verified submit
-// (KeySentAfterVisibleToken) but a missing-token readback.
+// 0.3.30: submit evidence supersedes stale readback. This transport returns a
+// verified submit but a missing-token readback.
 struct ReadbackMissingTransport;
 impl Transport for ReadbackMissingTransport {
     fn kind(&self) -> BackendKind {
@@ -1507,7 +1509,7 @@ impl Transport for ReadbackMissingTransport {
 }
 
 #[test]
-fn deliver_pending_readback_missing_token_is_not_delivered() {
+fn deliver_pending_submit_verified_overrides_missing_readback() {
     let ws = tmp_ws("readbackmiss");
     let store = store_for(&ws);
     let log = EventLog::new(&ws);
@@ -1532,23 +1534,47 @@ fn deliver_pending_readback_missing_token_is_not_delivered() {
     .unwrap();
 
     assert!(
-        !out.ok,
-        "U1 #7: a submit-verified inject whose token was NOT read back (CaptureMissingToken) \
-must NOT be delivered — readback gate catches the silent paste drop"
+        out.ok,
+        "0.3.30: submit-verified delivery must not be vetoed by stale CaptureMissingToken readback"
     );
-    assert_ne!(
+    assert_eq!(
         out.message_status.0, "delivered",
-        "U1 #7: readback-missing must not mark the message delivered (false green)"
+        "0.3.30: submit evidence is stronger than readback"
     );
-    let events = log.tail(0).unwrap();
+}
+
+#[test]
+fn deliver_pending_submit_unverified_is_not_saved_by_readback() {
+    let ws = tmp_ws("readbacksaves");
+    let store = store_for(&ws);
+    let log = EventLog::new(&ws);
+    let state = serde_json::json!({
+        "session_name": "team-readbacksaves",
+        "leader_receiver": {"pane_id": "%leader"},
+        "agents": {"w1": {"provider": "fake", "pane_id": "%1"}}
+    });
+    crate::state::persist::save_runtime_state(&ws, &state).unwrap();
+    let message_id = store
+        .create_message(None, "leader", "w1", "ping", None, false, None)
+        .unwrap();
+
+    let out = deliver_pending_message(
+        &ws,
+        &store,
+        &UnverifiedInjectTransport {
+            readback_visible: true,
+        },
+        &message_id,
+        &log,
+        &state,
+    )
+    .unwrap();
+
     assert!(
-        events.iter().any(|event| event
-            .get("reason")
-            .and_then(serde_json::Value::as_str)
-            .map(|r| r.contains("pane_readback_unverified"))
-            .unwrap_or(false)),
-        "U1 #7: the failure reason must name pane_readback_unverified (loud, not silent); got {events:?}"
+        !out.ok,
+        "0.3.30: positive readback alone must not mark delivered when submit is unverified"
     );
+    assert_ne!(out.message_status.0, "delivered");
 }
 
 #[test]
@@ -1569,7 +1595,9 @@ fn deliver_pending_exhausted_unverified_send_emits_failed_event() {
     let out = deliver_pending_message(
         &ws,
         &store,
-        &UnverifiedInjectTransport,
+        &UnverifiedInjectTransport {
+            readback_visible: false,
+        },
         &message_id,
         &log,
         &state,

package/crates/team-agent/src/tmux_backend/tests.rs

@@ -623,21 +623,11 @@ CaptureMissingToken, not the static CaptureContainsToken false-positive"
     // no longer in the bottom 5 lines of the pane = composer cleared).
     // ═════════════════════════════════════════════════════════════════════════════
 
-    /// **E46 RED-1 (核心假阳)**: token-bearing Text + Enter + bracketed paste.
-    /// Token is visible in the pane after submit AND remains in the bottom of
-    /// the pane (input region — consumption was NOT observed). Submit must
-    /// report `SubmitConsumptionUnverified`, NOT
-    /// `EnterSentWithoutPlaceholderCheck`. Otherwise delivery emits delivered
-    /// + message.delivered (假阳) even though the worker never consumed it.
-    /// 0.3.28-final E55 truth source: grace fallback DELETED.
-    /// `consumed=Some(false)` (token still in bottom 5 after all retries)
-    /// MUST report SubmitConsumptionUnverified unconditionally. Pre-final
-    /// returned EnterSentWithoutPlaceholderCheck when Phase-1 saw the token
-    /// at all (token_visible_for_report=Some(true)) — but Phase-1 visibility
-    /// only proves the paste LANDED, not that the provider CONSUMED it.
-    /// That masked E55 busy-agent false positives as delivered=true.
+    /// 0.3.30 false-negative fix: token seen during post-submit consumption
+    /// polling proves the paste landed after Enter was sent. If it never
+    /// scrolls away, that is slow provider output, not transport failure.
     #[test]
-    fn e46_inject_text_with_token_visible_but_unconsumed_reports_unverified() {
+    fn e46_post_submit_matched_token_without_scroll_is_verified() {
         let token_text = "Team Agent message from leader:\n\nhi\n\n[team-agent-token:msg_red1]";
         let (be, _rec) = backend_with(MockResp::Out(ok(token_text)), vec![]);
         let report = be
@@ -648,19 +638,19 @@ CaptureMissingToken, not the static CaptureContainsToken false-positive"
                 true,
             )
             .expect("inject runs");
-        // 0.3.28-final: no grace fallback. Token visible + not consumed →
-        // SubmitConsumptionUnverified (delivery treats as not delivered).
         assert_eq!(
             report.submit_verification,
-            SubmitVerification::SubmitConsumptionUnverified,
-            "0.3.28-final: when token still in bottom 5 after all retries, \
-             MUST be SubmitConsumptionUnverified — grace fallback masking \
-             this as EnterSentWithoutPlaceholderCheck caused E55 false \
-             positives (paste landed but busy agent never consumed). \
-             Got {:?}",
+            SubmitVerification::EnterSentWithoutPlaceholderCheck,
+            "0.3.30: post-submit matched=true is delivery proof even when \
+             the token stays in the bottom capture window. Got {:?}",
             report.submit_verification
         );
         assert_eq!(report.turn_verification, TurnVerification::NotYetObserved);
+        let diagnostics = report.submit_diagnostics.expect("diagnostics");
+        assert!(
+            diagnostics.attempts_detail.iter().any(|obs| obs.matched),
+            "the positive verdict must be backed by a post-submit matched observation"
+        );
     }
 
     #[test]

package/crates/team-agent/src/tmux_backend.rs

@@ -1492,6 +1492,7 @@ impl Transport for TmuxBackend {
                 let mut consumption_attempts: u32 = 0;
                 let mut consumed: Option<bool> = None;
                 let mut attempts_detail: Vec<SubmitAttemptObservation> = Vec::new();
+                let mut any_attempt_matched = false;
 
                 let poll_consumption = !payload.skip_consumption_poll();
                 if !poll_consumption {
@@ -1511,12 +1512,16 @@ impl Transport for TmuxBackend {
                     if attempt > 0 {
                         if let Some(m) = marker {
                             if let Ok(cap) = self.capture(target, CaptureRange::Tail(40)) {
-                                attempts_detail.push(submit_attempt_observation(
+                                let obs = submit_attempt_observation(
                                     attempt_index,
                                     &cap,
                                     marker,
                                     attempt_start.elapsed().as_millis() as u64,
-                                ));
+                                );
+                                if obs.matched {
+                                    any_attempt_matched = true;
+                                }
+                                attempts_detail.push(obs);
                                 if !token_in_bottom_n(&cap.text, m, 15) {
                                     consumed = Some(true);
                                     break;
@@ -1561,12 +1566,16 @@ impl Transport for TmuxBackend {
                             std::thread::sleep(Duration::from_millis(100));
                             match self.capture(target, CaptureRange::Tail(40)) {
                                 Ok(cap) => {
-                                    attempts_detail.push(submit_attempt_observation(
+                                    let obs = submit_attempt_observation(
                                         attempt_index,
                                         &cap,
                                         marker,
                                         attempt_start.elapsed().as_millis() as u64,
-                                    ));
+                                    );
+                                    if obs.matched {
+                                        any_attempt_matched = true;
+                                    }
+                                    attempts_detail.push(obs);
                                     if !token_in_bottom_n(&cap.text, m, 15) {
                                         found_consumed = true;
                                         break;
@@ -1592,45 +1601,40 @@ impl Transport for TmuxBackend {
 
                 let submit_verification = match consumed {
                     Some(true) => SubmitVerification::EnterSentWithoutPlaceholderCheck,
-                    // 0.3.28-final (E55 truth source): consumed=Some(false)
-                    // means we ran ALL retries and the token never left
-                    // bottom 15 lines. That is a genuine consumption failure
-                    // unless a provider busy marker proves the TUI is already
-                    // processing the turn and simply has not scrolled yet;
-                    // it MUST NOT be masked. Pre-final used a grace fallback
-                    // that returned EnterSentWithoutPlaceholderCheck whenever
-                    // token_visible_for_report=Some(true) — but Phase-1 token
-                    // visibility only proves the paste landed, NOT that the
-                    // provider consumed it. The fallback caused
-                    // delivered=true under E55 (busy-agent paste-landed-not-
-                    // consumed false positive). Do not restore that grace
-                    // fallback; only a live busy-state signal upgrades this to
-                    // EnterSentWithoutPlaceholderCheck.
-                    Some(false) => match self.capture(target, CaptureRange::Tail(15)) {
-                        Ok(cap) => {
-                            attempts_detail.push(submit_attempt_observation(
-                                consumption_attempts.max(1),
-                                &cap,
-                                marker,
-                                inject_start.elapsed().as_millis() as u64,
-                            ));
-                            let busy = provider_busy_signal_in_tail(&cap.text);
+                    Some(false) => {
+                        if any_attempt_matched {
                             eprintln!(
-                                "team-agent submit consumption fallback: consumed=false busy_state={busy}"
+                                "team-agent submit consumption: consumed=false any_attempt_matched=true -> verified"
                             );
-                            if busy {
-                                SubmitVerification::EnterSentWithoutPlaceholderCheck
-                            } else {
-                                SubmitVerification::SubmitConsumptionUnverified
+                            SubmitVerification::EnterSentWithoutPlaceholderCheck
+                        } else {
+                            match self.capture(target, CaptureRange::Tail(15)) {
+                                Ok(cap) => {
+                                    attempts_detail.push(submit_attempt_observation(
+                                        consumption_attempts.max(1),
+                                        &cap,
+                                        marker,
+                                        inject_start.elapsed().as_millis() as u64,
+                                    ));
+                                    let busy = provider_busy_signal_in_tail(&cap.text);
+                                    eprintln!(
+                                        "team-agent submit consumption fallback: consumed=false any_attempt_matched=false busy_state={busy}"
+                                    );
+                                    if busy {
+                                        SubmitVerification::EnterSentWithoutPlaceholderCheck
+                                    } else {
+                                        SubmitVerification::SubmitConsumptionUnverified
+                                    }
+                                }
+                                Err(err) => {
+                                    eprintln!(
+                                        "team-agent submit consumption fallback: consumed=false busy_capture_error={err}"
+                                    );
+                                    SubmitVerification::SubmitConsumptionUnverified
+                                }
                             }
                         }
-                        Err(err) => {
-                            eprintln!(
-                                "team-agent submit consumption fallback: consumed=false busy_capture_error={err}"
-                            );
-                            SubmitVerification::SubmitConsumptionUnverified
-                        }
-                    },
+                    }
                     None => submit_verification_for_key(submit),
                 };
                 let total_elapsed_ms = inject_start.elapsed().as_millis() as u64;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-agent/installer",
-  "version": "0.3.29",
+  "version": "0.3.30",
   "description": "npx installer for Team Agent",
   "keywords": [
     "codex",
@@ -20,9 +20,9 @@
     "team-agent-installer": "npm/install.mjs"
   },
   "optionalDependencies": {
-    "@team-agent/cli-darwin-arm64": "0.3.29",
-    "@team-agent/cli-darwin-x64": "0.3.29",
-    "@team-agent/cli-linux-x64": "0.3.29"
+    "@team-agent/cli-darwin-arm64": "0.3.30",
+    "@team-agent/cli-darwin-x64": "0.3.30",
+    "@team-agent/cli-linux-x64": "0.3.30"
   },
   "scripts": {
     "postinstall": "node npm/bincheck.mjs",