@team-agent/installer 0.5.102 → 0.5.104

package/crates/team-agent/src/lifecycle/tests/grok_require_explicit_model_red.rs

@@ -27,11 +27,10 @@ use serial_test::serial;
 use team_agent::lifecycle::quick_start_with_transport_in_workspace;
 use team_agent::transport::test_support::OfflineTransport;
 
-/// 1. grok 角色缺 model ⇒ 启动被拒，错误含 "model" 与「内建默认 / 隐式来源」。
-///    40e91fba 上会成功启动（有 overlay / 有 spawn）⇒ 本条红。
+/// An omitted Grok role model preserves the provider-native default.
 #[test]
 #[serial(env)]
-fn grok_role_missing_model_refuses_to_start() {
+fn grok_role_missing_model_uses_provider_default() {
     let ws = tmp_dir("grok-no-model");
     let home = tmp_dir("grok-no-model-home");
     seed_grok_home(&home, Some(&ws));
@@ -46,51 +45,19 @@ fn grok_role_missing_model_refuses_to_start() {
     );
     let transport = OfflineTransport::new();
 
-    let result = quick_start_with_transport_in_workspace(
+    quick_start_with_transport_in_workspace(
         &ws,
         &team,
         None,
         true,
         Some("grokteam"),
         &transport,
-    );
-
-    let err = match result {
-        Ok(report) => panic!(
-            "grok role without model must refuse to start; a built-in default \
-             would silently pick the model; report={report:?}"
-        ),
-        Err(error) => error.to_string(),
-    };
-    let lower = err.to_ascii_lowercase();
-    assert!(
-        lower.contains("model"),
-        "error must name the missing field; err={err}"
-    );
-    assert!(
-        lower.contains("built-in") || lower.contains("builtin") || err.contains("内建"),
-        "error must name the built-in default the framework would fill; err={err}"
-    );
-    assert!(
-        lower.contains("implicit") || err.contains("隐式"),
-        "error must reject every implicit source, not just one fallback; err={err}"
-    );
-    assert!(
-        err.contains("model: grok-4.6") || err.contains("model: grok-4"),
-        "error must show how to write the field; err={err}"
-    );
-    assert!(
-        !err.to_ascii_lowercase().contains("worktree") && !err.contains("then retry"),
-        "must not promise a remedy this version cannot honor; err={err}"
-    );
-    assert!(
-        transport.spawn_records().is_empty(),
-        "refusal must happen before spawn; records={:?}",
-        transport.spawn_records()
-    );
+    )
+    .expect("Grok may use its provider-native model default");
+    let argv = first_spawn_argv(&transport);
     assert!(
-        !ws.join(".grok").join("config.toml").exists(),
-        "must refuse before writing grok overlay; leftover .grok/config.toml means the seat started"
+        !argv.iter().any(|arg| arg == "--model"),
+        "an omitted model must not fabricate a --model argument: {argv:?}"
     );
 }
 

package/crates/team-agent/src/lifecycle/tests/pi_compiler_red.rs

@@ -86,7 +86,8 @@ fn pi_role_ignores_tools_and_preserves_provider_defaults() {
 
     let defaults = valid_role_with("")
         .replace("model: team-agent/qwen3.8-27b\n", "")
-        .replace("effort: medium\n", "");
+        .replace("effort: medium\n", "")
+        .replace("dangerously_skip_permissions: true\n", "");
     let team_meta = Value::Map(vec![
         (
             "provider_models".to_string(),
@@ -105,16 +106,21 @@ fn pi_role_ignores_tools_and_preserves_provider_defaults() {
         ),
     ]);
     let compiled = compile_pi_role_with_team(&defaults, &team_meta)
-        .expect("Pi model and effort may use provider defaults");
+        .expect("omitted model and effort preserve provider-native defaults");
     assert_eq!(
         compiled.agent.get("model"),
-        Some(&Value::Str("openai-codex/gpt-6-luna".to_string())),
-        "omitted Pi model uses the Luna default rather than team metadata"
+        Some(&Value::Null),
+        "omitted Pi model stays unset rather than using team metadata"
     );
     assert_eq!(
         compiled.agent.get("effort"),
-        Some(&Value::Str("max".to_string())),
-        "omitted Pi effort uses the global max default rather than team metadata"
+        None,
+        "omitted Pi effort stays unset rather than using team metadata"
+    );
+    assert_eq!(
+        compiled.agent.get("dangerously_skip_permissions"),
+        Some(&Value::Bool(false)),
+        "omitted Pi bypass defaults to safe false"
     );
 
     let models = parse_pi_list_models_table(CATALOG).expect("catalog fixture");
@@ -162,10 +168,10 @@ fn pi_role_uses_standard_bypass_field_without_fabricating_argv() {
 
     let missing_ack = valid_role_with("").replace("dangerously_skip_permissions: true\n", "");
     let compiled = compile_pi_role(&missing_ack)
-        .expect("omitted bypass metadata defaults to true");
+        .expect("omitted bypass metadata defaults to false");
     assert_eq!(
         compiled.agent.get("dangerously_skip_permissions"),
-        Some(&Value::Bool(true))
+        Some(&Value::Bool(false))
     );
 }
 

package/crates/team-agent/src/lifecycle/tests/pi_dual_entry_red.rs

@@ -216,18 +216,22 @@ fn pi_leader_and_teammate_body(hermetic: &HermeticTestEnv) {
 
     std::fs::write(
         &role,
-        "---\nname: worker-a\nrole: developer\nprovider: pi\nauth_mode: subscription\ntools:\n  - mcp_team\ndangerously_skip_permissions: true\n---\nworker contract\n",
+        "---\nname: worker-a\nrole: developer\nprovider: pi\nauth_mode: subscription\ntools:\n  - mcp_team\n---\nworker contract\n",
     )
     .expect("write provider-default teammate role");
     let defaults = compile_role_agent(&role, &Value::Map(Vec::new()), "/workspace")
-        .expect("provider: pi teammate may use Pi model and effort defaults");
+        .expect("provider: pi teammate may preserve provider-native defaults");
     assert_eq!(
         defaults.agent.get("model"),
-        Some(&Value::Str("openai-codex/gpt-6-luna".to_string()))
+        Some(&Value::Null)
     );
     assert_eq!(
         defaults.agent.get("effort"),
-        Some(&Value::Str("max".to_string()))
+        None
+    );
+    assert_eq!(
+        defaults.agent.get("dangerously_skip_permissions"),
+        Some(&Value::Bool(false))
     );
     std::fs::remove_dir_all(root).expect("remove role fixture");
 

package/crates/team-agent/src/lifecycle/worker_command_context.rs

@@ -58,7 +58,7 @@ pub(crate) struct WorkerCommandAgent {
     system_prompt_file: Option<String>,
     output_contract_format: Option<String>,
     communication_mode: CommunicationMode,
-    /// Missing `dangerously_skip_permissions` defaults to true; an explicit false remains respected.
+    /// Missing `dangerously_skip_permissions` defaults to false; only explicit true enables bypass.
     dangerously_skip_permissions: bool,
 }
 
@@ -110,9 +110,9 @@ impl WorkerCommandAgent {
                     .get("communication_mode")
                     .and_then(crate::model::yaml::Value::as_str),
             )?,
-            dangerously_skip_permissions: !matches!(
+            dangerously_skip_permissions: matches!(
                 agent.get("dangerously_skip_permissions"),
-                Some(crate::model::yaml::Value::Bool(false))
+                Some(crate::model::yaml::Value::Bool(true))
             ),
         })
     }
@@ -167,7 +167,7 @@ impl WorkerCommandAgent {
             dangerously_skip_permissions: agent
                 .get("dangerously_skip_permissions")
                 .and_then(serde_json::Value::as_bool)
-                .unwrap_or(true),
+                .unwrap_or(false),
         })
     }
 }

package/crates/team-agent/src/messaging/results.rs

@@ -1046,25 +1046,6 @@ fn leader_result_presentation(task_id: &str) -> super::presentation::Presentatio
     )
 }
 
-const LEADER_NOTIFICATION_LIMIT_BYTES: usize = 160;
-
-fn truncate_utf8(text: &str, max_bytes: usize) -> String {
-    if text.len() <= max_bytes {
-        return text.to_string();
-    }
-    let suffix = "...";
-    let budget = max_bytes.saturating_sub(suffix.len());
-    let mut end = 0;
-    for (index, ch) in text.char_indices() {
-        let next = index + ch.len_utf8();
-        if next > budget {
-            break;
-        }
-        end = next;
-    }
-    format!("{}{}", &text[..end], suffix)
-}
-
 fn format_report_result_leader_summary(
     result_id: &str,
     task_id: &str,
@@ -1075,19 +1056,8 @@ fn format_report_result_leader_summary(
     let summary = envelope
         .get("summary")
         .and_then(serde_json::Value::as_str)
-        .unwrap_or("")
-        .lines()
-        .next()
-        .unwrap_or("")
-        .chars()
-        .filter(|ch| !ch.is_control())
-        .collect::<String>();
-    truncate_utf8(
-        &format!(
-            "Task {task_id} reported {status} from {agent_id}: {summary}; Result id: {result_id}"
-        ),
-        LEADER_NOTIFICATION_LIMIT_BYTES,
-    )
+        .unwrap_or("");
+    format!("Task {task_id} reported {status} from {agent_id}: {summary}; Result id: {result_id}")
 }
 
 fn auto_finalize_result(
@@ -1441,18 +1411,17 @@ mod tests {
     }
 
     #[test]
-    fn leader_result_summary_is_single_line_and_byte_bounded() {
-        let envelope = serde_json::json!({"summary": "中".repeat(4096)});
+    fn leader_result_summary_preserves_long_multiline_text_verbatim() {
+        let source = format!("首行\nbranch: fix/keyboard-receive-and-compose\ncommit: {}", "a1b2c3d4e5f67890".repeat(24));
+        let envelope = serde_json::json!({"summary": source});
         let summary = super::format_report_result_leader_summary(
-            "res-1",
-            "task-1",
-            "worker",
-            "success",
-            &envelope,
+            "res-1", "task-1", "worker", "success", &envelope,
         );
-        assert!(summary.len() <= 160);
-        assert!(!summary.contains('\n'));
-        assert!(summary.ends_with("..."));
+        let source = envelope["summary"].as_str().unwrap();
+        assert_eq!(summary, format!("Task task-1 reported success from worker: {source}; Result id: res-1"));
+        assert!(summary.len() > 160);
+        assert!(summary.contains("\nbranch: fix/keyboard-receive-and-compose\ncommit: "));
+        assert!(summary.contains("a1b2c3d4e5f67890".repeat(24).as_str()));
     }
 
     #[test]

package/crates/team-agent/src/model/enums.rs

@@ -213,15 +213,6 @@ pub enum Backend {
     Pty,
 }
 
-/// agent permission mode(schema `agent.permission_mode`;compiler 恒发 `restricted`)。
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
-#[serde(rename_all = "snake_case")]
-pub enum PermissionMode {
-    Restricted,
-    Ask,
-    Trusted,
-}
-
 /// tmux pane 存活态(`state.py:336-341`)。**`Unknown` 既不可当 dead 也不可当 live**
 /// (owner-gate `state.py:382` 用 `!= LIVE`)—— 穷尽 match,不 fallthrough(§11)。
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]

package/crates/team-agent/src/model/spec.rs

@@ -1136,7 +1136,7 @@ mod tests {
     }
 
     // 0.5.66 bypass 单源 §4.1:7 个生命周期入口共享编译后的 spec。
-    // 缺失 role frontmatter 值时由编译器注入 true；此处锁定公共编译入口的默认结果。
+    // 缺失 role frontmatter 值时编译为安全默认 false；此处锁定公共编译入口的结果。
     #[test]
     fn test_all_7_triggers_use_compiled_default_bypass() {
         let team = std::env::temp_dir().join(format!(
@@ -1165,7 +1165,7 @@ mod tests {
             .expect("compiled spec has a worker");
         assert_eq!(
             agent.get("dangerously_skip_permissions"),
-            Some(&Yaml::Bool(true))
+            Some(&Yaml::Bool(false))
         );
         let _ = std::fs::remove_dir_all(&team);
     }

package/crates/team-agent/src/provider/adapters/cursor_agent.rs

@@ -11,9 +11,9 @@
 //! maturity: wired
 //! ---
 //!
-//! Cursor `agent` CLI（与 `cursor-agent` 同二进制）。主路径与
-//! `.team/scripts/cursor_seat.sh` 实测一致：
-//!   `--trust --sandbox disabled --workspace <物理路径> [--force] [--model]`
+//! Cursor `agent` CLI（与 `cursor-agent` 同二进制）。默认不跳过信任或沙箱设置。
+//! 显式 bypass 时才使用 `.team/scripts/cursor_seat.sh` 的 trusted/unsandboxed 选项：
+//!   `--workspace <物理路径> [--trust --sandbox disabled --force] [--model]`
 //! Role 不入 argv，写 `<workspace>/.cursor/rules/*.mdc` + `alwaysApply: true`。
 //! MCP 无 `--mcp-config`；身份必须写进 `.cursor/mcp.json` 的 env 表
 //! （cursor 不把父进程 TEAM_AGENT_* 传给 MCP 子进程）。
@@ -57,14 +57,13 @@ pub(crate) fn cursor_agent_base_command(
     effort: Option<crate::model::enums::ProviderEffort>,
 ) -> Result<Vec<String>, ProviderError> {
     let mut argv = vec!["agent".to_string()];
-    // --trust 跳过 Workspace Trust 闸（已实测）。无此 flag 会停在 Do you trust。
-    argv.push("--trust".to_string());
     if dangerously_skip_permissions {
+        // Explicit bypass also opts into Cursor's trusted, unsandboxed launch.
+        argv.push("--trust".to_string());
+        argv.push("--sandbox".to_string());
+        argv.push("disabled".to_string());
         argv.push("--force".to_string());
     }
-    // 与 cursor_seat.sh 主路径一致。沙箱实际隔离面未再拆，但 flag 本身已实测。
-    argv.push("--sandbox".to_string());
-    argv.push("disabled".to_string());
     if let Some(model) = model {
         argv.push("--model".to_string());
         argv.push(model.to_string());

package/crates/team-agent/src/provider/adapters/grok.rs

@@ -1,7 +1,7 @@
 //!
 //! purpose: Grok CLI argv + permission deny 映射；MCP 不走 CLI flag
 //! contract: launch 写 `<cwd>/.grok/config.toml`；未登录 / 目录未信任必须拒绝启动。
-//!   角色缺 model 必须拒绝启动（禁止内建 / team / CLI 任何隐式默认）。
+//!   未指定 model 时不注入 `--model`，由 Grok CLI 使用原生默认。
 //!   未知工具映射记成 Unsupported，不发明 deny 名
 //! mcp_injection: dir_scoped —— 每席必须独立工作目录；同 cwd 多席会静默串台，故拒绝。
 //!   对照 claude/codex 是 argv 作用域（`--mcp-config`），同目录多席没有这个问题。
@@ -71,23 +71,10 @@ pub(crate) fn grok_base_command(
     if dangerously_skip_permissions {
         argv.push("--always-approve".to_string());
     }
-    let model = match model.map(str::trim).filter(|value| !value.is_empty()) {
-        Some(model) => model,
-        None => {
-            return Err(ProviderError::Command(
-                "grok launch requires an explicit model. \
-Without an explicit model the framework fills a built-in default (grok-4 for grok), \
-so the seat silently gets a model and context window that are not in the role file, \
-while argv still looks normal. The role file must name the model itself; \
-built-in defaults, team-level defaults, and the Grok CLI global default are all implicit sources. \
-Set the role front-matter field, for example:\n\
-model: grok-4.6"
-                    .to_string(),
-            ));
-        }
-    };
-    argv.push("--model".to_string());
-    argv.push(model.to_string());
+    if let Some(model) = model.map(str::trim).filter(|value| !value.is_empty()) {
+        argv.push("--model".to_string());
+        argv.push(model.to_string());
+    }
     if let Some(effort) = effort {
         // Grok accepts `--effort` as alias for `--reasoning-effort`.
         argv.push("--effort".to_string());

package/crates/team-agent/src/provider/mod.rs

@@ -51,6 +51,7 @@ pub(crate) mod adapters;
 pub mod approvals;
 pub mod classify;
 pub mod faults;
+pub mod model_catalog;
 pub mod session;
 pub mod session_scan;
 pub mod startup_prompt;