@team-agent/installer 0.5.109 → 0.5.110

package/Cargo.lock

@@ -581,7 +581,7 @@ dependencies = [
 
 [[package]]
 name = "team-agent"
-version = "0.5.109"
+version = "0.5.110"
 dependencies = [
  "anyhow",
  "chrono",

package/Cargo.toml

@@ -9,7 +9,7 @@ members = ["crates/team-agent", "crates/win-conpty-phase0", "crates/conpty-trans
 
 [workspace.package]
 edition = "2021"
-version = "0.5.109"
+version = "0.5.110"
 license = "AGPL-3.0"
 rust-version = "1.95"
 

package/README.md

@@ -66,6 +66,39 @@ The lead and each teammate independently choose which CLI to use:
 
 In other words: let Claude be the lead for planning and review, let Codex teammates handle bulk implementation. Mix and match whatever subscriptions you have.
 
+## Native CLI argv routing (opt-in)
+
+Configure literal startup arguments globally, separately for each provider, from any directory:
+
+```sh
+team-agent route set pi -- --mode rpc
+team-agent route enable
+team-agent route status --json
+team-agent route show pi --json
+team-agent route add pi -- --verbose
+team-agent route clear pi
+team-agent route disable
+```
+
+The default is OFF. `~/.team-agent/argv-routing.json` stores the switch and mappings;
+`TEAM_AGENT_CLI_ARGV_ROUTING=1|true|on` or `0|false|off` overrides the persisted switch
+(case-insensitive, surrounding whitespace accepted). Invalid overrides safely disable routing.
+`enable`/`disable` preserve mappings; `set` replaces, `add` appends, and `clear` removes one mapping.
+Commands report both persisted and effective states, including an active environment override.
+
+Provider keys: `claude`, `codex`, `copilot`, `gemini_cli`, `grok`, `cursor_agent`, `pi`.
+Claude/Claude Code share one mapping; `claude_code`/`claude-code` and `agent`/`cursor` are accepted aliases.
+Everything after the first `--` is literal argv data, including `--help`, `--json`, empty strings
+and `{workspace}`; no shell expansion is performed. Arguments are inserted immediately after
+the native executable, before its original arguments. Do not store secrets or override framework-managed
+session/MCP/permission arguments; routing does not bypass existing identity or authentication checks.
+
+Only the next actual native Leader/worker launch uses the current mapping, including restart,
+start/reset/add/clone, Pi new-seat fork and remove rollback. Running/attached processes, dry runs,
+model/version/auth probes and other helper processes are unchanged. Enabled invalid configuration
+fails before native spawn; `TEAM_AGENT_CLI_ARGV_ROUTING=off` is an emergency override, not a file repair.
+Pi `--mode rpc` is passed through as startup argv; it does **not** create an RPC host or change Team Agent's transport.
+
 ## FAQ
 
 **What do I need?**

package/README.zh.md

@@ -66,6 +66,36 @@ team-agent claude
 
 也就是说:你可以让 Claude 当队长出方案、做评审,让 Codex 队友批量干实现。你手上有哪几家的订阅,就能怎么搭着用。
 
+## 原生 CLI 参数路由（默认关闭）
+
+在任意目录按 Provider 全局配置字面启动参数，无需工作区或已登录的 CLI：
+
+```sh
+team-agent route set pi -- --mode rpc
+team-agent route enable
+team-agent route status --json
+team-agent route show pi --json
+team-agent route add pi -- --verbose
+team-agent route clear pi
+team-agent route disable
+```
+
+默认 OFF；开关与映射保存于 `~/.team-agent/argv-routing.json`。
+环境变量 `TEAM_AGENT_CLI_ARGV_ROUTING=1|true|on` 或 `0|false|off` 优先于持久化开关
+（忽略大小写和两侧空白），无效值安全关闭。`enable/disable` 不清映射，`set` 精确替换、
+`add` 按序追加、`clear` 删除一个映射。结果同时报告持久化态、实际有效态与环境覆盖。
+
+Provider 键为 `claude`、`codex`、`copilot`、`gemini_cli`、`grok`、`cursor_agent`、`pi`。
+Claude/Claude Code 共用映射；支持 `claude_code/claude-code` 和 `agent/cursor` 别名。
+第一个 `--` 后全部是字面 argv，包括 `--help`、`--json`、空字符串、`{workspace}`，不会二次 shell 展开。
+注入位置为原生 executable 之后、原有参数之前。不要保存密码/token，或覆盖框架管理的
+session/MCP/权限参数；既有身份、认证与安全检查不变。
+
+下一次真实 Leader/worker 启动读取当前配置，包括 restart、start/reset/add/clone、Pi 新席 fork
+及 remove 失败回滚复活。运行中或仅 attach 的进程、dry-run、model/version/auth 探测与其他辅助进程不变。
+已开启但无效的配置会在原生 spawn 前报错；可用 `TEAM_AGENT_CLI_ARGV_ROUTING=off` 紧急停用，
+但这不会修复坏文件。Pi `--mode rpc` 只是启动参数，不会自动建立 RPC 宿主或改变 Team Agent 的传输。
+
 ## 常见问题
 
 **需要什么前提?**

package/crates/team-agent/src/cli/emit.rs

@@ -56,6 +56,9 @@ pub fn run(argv: &[String], cwd: &Path) -> ExitCode {
     let Some(command) = argv.first().map(String::as_str) else {
         return emit_missing_subcommand_usage();
     };
+    if command == "route" {
+        return super::route::run(&argv[1..]);
+    }
     if is_leader_passthrough_command(command) {
         return match cmd_leader_passthrough(command, &argv[1..], cwd) {
             Ok(result) => emit_result(result),
@@ -115,7 +118,7 @@ fn emit_status_cli_error(error: &CliError) -> ExitCode {
 
 /// Print a handler's CmdResult to stdout (emit formats json/human), then surface its exit code.
 /// (parser.py: `print(emit(result, as_json))` then the ok→exit mapping.)
-fn emit_result(r: CmdResult) -> ExitCode {
+pub(super) fn emit_result(r: CmdResult) -> ExitCode {
     let persisted_message_id = match &r.output {
         CmdOutput::Json(value) => value
             .get("message_id")
@@ -160,6 +163,9 @@ pub(crate) fn __test_dispatch(
 }
 
 fn dispatch(command: &str, args: &[String], cwd: &Path) -> Result<ExitCode, CliError> {
+    if command == "route" {
+        return Ok(super::route::run(args));
+    }
     // Keep the removed flag harmless for older scripts and persisted command
     // lines; the default tmux backend is already the only runtime path.
     let filtered_args: Vec<String> = args
@@ -341,6 +347,7 @@ fn command_help(command: Option<&str>) -> String {
         .to_string(),
         Some("allow-peer-talk") => "usage: team-agent allow-peer-talk A B [--workspace WORKSPACE] [--json]".to_string(),
         Some("status") => "usage: team-agent status [AGENT] [--workspace WORKSPACE] [--team TEAM] [--summary|--json] [--detail]\n\n输出九字段：name/provider/model/effort/runtime_status/activity/health/session_name/tmux_command；人读与 --json 使用同一投影字段（多节点人读紧凑显示 tmux_command）。--json 始终保留每节点完整可复制的 tmux_command；人读单节点保留完整旧格式，多节点按(socket, tmux session)显示每组一次共享 attach 模板，ATTACH列为<group>:<window>.<pane>，模板中的 <target> 替换为其 window.pane 部分。model/effort 为已接受启动配置，未设置为 null，不猜 provider 默认值；缺少可靠定位或原生 tmux/process 采样时显示 unknown，不推导attach信息。--summary/--detail 仅保留兼容性，不增加诊断字段。".to_string(),
+        Some("route") => super::route::HELP.to_string(),
         Some("models") => "usage: team-agent models [--provider pi|cursor_agent|codex|claude|claude_code|grok] [QUERY|--search TEXT] [--json]\n\nLists exact provider model ids with case-insensitive multi-word search across provider, vendor, id, display name, and source aliases. Uses each provider's native catalog; Cursor uses `agent --list-models`, Codex uses `codex debug models`, Claude uses SDK stream-json initialize, and Grok uses the PATH-first `grok models` command.".to_string(),
         Some("leaders") => "usage: team-agent leaders [QUERY|--search TEXT] [--all|--stale] [--json] | --prune [--dry-run] [--json]\n\nLists LIVE leaders by default. Use --all to include retained STALE entries, --stale to inspect only STALE entries, QUERY or --search TEXT to match workspace/team/name fields, and --prune to remove only entries proven terminal by canonical state. --dry-run is valid only with --prune.".to_string(),
         Some("shutdown") => "usage: team-agent shutdown [--workspace WORKSPACE] [--team TEAM] [--keep-logs] [--json]".to_string(),

package/crates/team-agent/src/cli/mod.rs

@@ -58,11 +58,12 @@ pub mod attach_app_server_leader;
 pub mod diagnose;
 pub mod emit;
 pub mod helpers;
-pub mod models;
 pub mod leader;
 pub mod leaders;
+pub mod models;
 pub mod named_address;
 pub mod profile;
+pub(crate) mod route;
 pub mod send;
 pub(crate) mod spec;
 pub mod status;

package/crates/team-agent/src/cli/route.rs

@@ -0,0 +1,207 @@
+//! Host-global route management: raw argv, no workspace selection or error log.
+
+use super::{CmdOutput, CmdResult, ExitCode};
+use crate::provider::argv_route::{self, Config, Mutation, Override, RouteError};
+use crate::provider::Provider;
+use serde_json::{json, Value};
+
+pub(crate) const HELP: &str = "usage: team-agent route [status] [--json]\n       team-agent route enable|disable [--json]\n       team-agent route show [PROVIDER] [--json]\n       team-agent route set|add PROVIDER [--json] -- ARG [ARG ...]\n       team-agent route clear PROVIDER [--json]\n\nGlobal config: ~/.team-agent/argv-routing.json (default OFF).\nTEAM_AGENT_CLI_ARGV_ROUTING overrides the persisted switch.\nEverything after -- is literal argv data; routing affects the next native Agent launch only.";
+
+struct Request {
+    operation: String,
+    provider: Option<Provider>,
+    tokens: Vec<String>,
+    json: bool,
+}
+
+fn usage() -> RouteError {
+    RouteError {
+        error: "invalid route arguments".to_string(),
+        reason: "argv_route_usage",
+        action: "run `team-agent route --help`; set/add require PROVIDER -- ARG [ARG ...]"
+            .to_string(),
+        config_path: None,
+    }
+}
+
+fn parse(args: &[String], delimiter: usize) -> Result<Request, RouteError> {
+    let mut json = false;
+    let mut positionals = Vec::new();
+    for token in &args[..delimiter] {
+        if token == "--json" {
+            if json {
+                return Err(usage());
+            }
+            json = true;
+        } else if token.starts_with('-') {
+            return Err(usage());
+        } else {
+            positionals.push(token.as_str());
+        }
+    }
+    let operation = positionals.first().copied().unwrap_or("status");
+    let provider_required = matches!(operation, "set" | "add" | "clear");
+    let provider_allowed = provider_required || operation == "show";
+    if !matches!(
+        operation,
+        "status" | "enable" | "disable" | "show" | "set" | "add" | "clear"
+    ) || positionals.len() > if provider_allowed { 2 } else { 1 }
+        || (provider_required && positionals.len() != 2)
+    {
+        return Err(usage());
+    }
+    let provider = positionals
+        .get(1)
+        .map(|raw| argv_route::parse_route_provider(raw).ok_or_else(usage))
+        .transpose()?;
+    let tokens = if matches!(operation, "set" | "add") {
+        if delimiter == args.len() || delimiter + 1 == args.len() {
+            return Err(usage());
+        }
+        let tokens = args[delimiter + 1..].to_vec();
+        if !argv_route::valid_tokens(&tokens) {
+            return Err(usage());
+        }
+        tokens
+    } else {
+        if delimiter != args.len() {
+            return Err(usage());
+        }
+        Vec::new()
+    };
+    Ok(Request {
+        operation: operation.to_string(),
+        provider,
+        tokens,
+        json,
+    })
+}
+
+fn switch_fields(
+    path: Option<&std::path::Path>,
+    persisted: Option<bool>,
+    present: bool,
+    override_state: Override,
+) -> Value {
+    json!({
+        "config_path": path,
+        "persisted_enabled": persisted,
+        "effective_enabled": override_state.effective(persisted.unwrap_or(false)),
+        "enabled_source": override_state.source(present),
+        "override_status": override_state.status(),
+    })
+}
+
+fn execute(request: &Request) -> Result<Value, RouteError> {
+    let path = argv_route::config_path()?;
+    let (config, present) = match request.operation.as_str() {
+        "enable" => argv_route::mutate(&path, Mutation::Enable(true))?,
+        "disable" => argv_route::mutate(&path, Mutation::Enable(false))?,
+        "set" | "add" | "clear" => {
+            let provider = request.provider.ok_or_else(usage)?;
+            let mutation = match request.operation.as_str() {
+                "set" => Mutation::Set(provider, request.tokens.clone()),
+                "add" => Mutation::Add(provider, request.tokens.clone()),
+                _ => Mutation::Clear(provider),
+            };
+            argv_route::mutate(&path, mutation)?
+        }
+        _ => argv_route::read_config(&path)?,
+    };
+    let override_state = Override::current();
+    let mut value = switch_fields(Some(&path), Some(config.enabled), present, override_state);
+    value["ok"] = json!(true);
+    value["operation"] = json!(request.operation);
+    if let Some(provider) = request.provider {
+        add_provider_fields(&mut value, &config, provider);
+    } else if request.operation == "show" {
+        value["providers"] = json!(config.providers);
+    }
+    if override_state != Override::Unset {
+        value["notice"] = json!(format!(
+            "effective switch is overridden by {} ({})",
+            argv_route::ENV_NAME,
+            override_state.status()
+        ));
+    }
+    Ok(value)
+}
+
+fn add_provider_fields(value: &mut Value, config: &Config, provider: Provider) {
+    if let Some(key) = argv_route::route_key(provider) {
+        value["provider"] = json!(key);
+        value["configured"] = json!(config.providers.contains_key(key));
+        value["argv"] = json!(config.providers.get(key).cloned().unwrap_or_default());
+    }
+}
+
+/// Route-only error renderer: reuse redaction/formatting, never cwd log policy.
+fn emit_error(error: RouteError, args: &[String], delimiter: usize, as_json: bool) -> ExitCode {
+    let is_usage = error.reason == "argv_route_usage";
+    let mut value = json!({
+        "ok": false, "error": error.error, "reason": error.reason,
+        "action": error.action, "config_path": error.config_path,
+    });
+    if !is_usage {
+        // Best-effort switch observation even when strict management read fails.
+        // No config content or invalid argv is included in the error channel.
+        let path = error.config_path.as_deref();
+        let loose = path
+            .and_then(|path| std::fs::read(path).ok())
+            .and_then(|bytes| serde_json::from_slice::<Value>(&bytes).ok());
+        let persisted = loose
+            .as_ref()
+            .and_then(|v| v.get("enabled"))
+            .and_then(Value::as_bool);
+        let fields = switch_fields(
+            path,
+            persisted,
+            path.is_some_and(std::path::Path::exists),
+            Override::current(),
+        );
+        if let (Some(target), Some(fields)) = (value.as_object_mut(), fields.as_object()) {
+            target.extend(fields.clone());
+        }
+        value["operation"] = json!(args[..delimiter]
+            .iter()
+            .find(|arg| !arg.starts_with('-'))
+            .map(String::as_str)
+            .unwrap_or("status"));
+    }
+    if let Some(text) = super::emit(&CmdOutput::Json(value), as_json) {
+        if as_json {
+            println!("{text}");
+        } else {
+            eprintln!("{text}");
+        }
+    }
+    if is_usage {
+        ExitCode::Usage
+    } else {
+        ExitCode::Error
+    }
+}
+
+pub(crate) fn run(args: &[String]) -> ExitCode {
+    let delimiter = args
+        .iter()
+        .position(|arg| arg == "--")
+        .unwrap_or(args.len());
+    // Help and output-format controls stop at the first delimiter. Neither
+    // generic help scanning nor the old --no-display compatibility filter runs.
+    if args[..delimiter]
+        .iter()
+        .any(|arg| matches!(arg.as_str(), "--help" | "-h"))
+    {
+        println!("{HELP}");
+        return ExitCode::Ok;
+    }
+    let as_json = args[..delimiter].iter().any(|arg| arg == "--json");
+    match parse(args, delimiter) {
+        Ok(request) => match execute(&request) {
+            Ok(value) => super::emit::emit_result(CmdResult::from_json(value, request.json)),
+            Err(error) => emit_error(error, args, delimiter, as_json),
+        },
+        Err(error) => emit_error(error, args, delimiter, as_json),
+    }
+}

package/crates/team-agent/src/cli/spec.rs

@@ -74,6 +74,7 @@ pub(crate) enum DispatchKind {
     Peek,
     Coordinator,
     Models,
+    Route,
 }
 
 pub(crate) const ALL_DISPATCH_KINDS: &[DispatchKind] = &[
@@ -112,6 +113,7 @@ pub(crate) const ALL_DISPATCH_KINDS: &[DispatchKind] = &[
     DispatchKind::Peek,
     DispatchKind::Coordinator,
     DispatchKind::Models,
+    DispatchKind::Route,
 ];
 
 #[derive(Clone, Copy, Debug, Eq, PartialEq)]
@@ -175,6 +177,7 @@ pub(crate) const COMMAND_SPECS: &[CommandSpec] = &[
     CommandSpec { name: "clone-agent", tier: CommandTier::Secondary, category: CommandCategory::WorkerLifecycle, kind: CommandKind::Dispatch(DispatchKind::CloneAgent), summary: "clone a worker role into a fresh session", usage: "usage: team-agent clone-agent SOURCE_AGENT --as AGENT [--label LABEL] [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::Conditional, sunset: None, action: None, governance: None },
     CommandSpec { name: "allow-peer-talk", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::AllowPeerTalk), summary: "allow direct worker peer talk", usage: "usage: team-agent allow-peer-talk A B [--workspace WORKSPACE] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "capability/config surface" }) },
     CommandSpec { name: "approvals", tier: CommandTier::Secondary, category: CommandCategory::Observe, kind: CommandKind::Dispatch(DispatchKind::Approvals), summary: "inspect provider approval state", usage: "usage: team-agent approvals [AGENT] [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "approval diagnostics" }) },
+    CommandSpec { name: "route", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::Route), summary: "manage global native CLI argv routing", usage: "usage: team-agent route [status|enable|disable|show|set|add|clear] [PROVIDER] [--json] [-- ARG ...]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "opt-in host-global provider argv setup" }) },
     CommandSpec { name: "profile", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::Profile), summary: "manage provider profiles", usage: "usage: team-agent profile COMMAND NAME [--workspace WORKSPACE] [--team TEAM] [--auth-mode MODE] [--proxy-mode direct|inherit] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "provider/profile setup" }) },
     CommandSpec { name: "install-skill", tier: CommandTier::Secondary, category: CommandCategory::Setup, kind: CommandKind::Dispatch(DispatchKind::InstallSkill), summary: "install or uninstall Team Agent skills", usage: "usage: team-agent install-skill (--source DIR | --uninstall) [--target codex|claude|copilot|all] [--dest DIR] [--dry-run] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, sunset: None, action: None, governance: Some(GovernanceNote { decision: "secondary", reason: "capability setup" }) },
     CommandSpec { name: "inbox", tier: CommandTier::Secondary, category: CommandCategory::Observe, kind: CommandKind::Dispatch(DispatchKind::Inbox), summary: "inspect recent message summaries", usage: "usage: team-agent inbox AGENT [-n N|--limit N] [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: false, command_help: true, suggestion_index: false, token_usage: TokenUsage::No, sunset: None, action: None, governance: None },

package/crates/team-agent/src/leader/start.rs

@@ -291,7 +291,7 @@ fn leader_start_plan_with_ambient_authority(
         ),
         _ => None,
     };
-    let provider_argv = if provider == Provider::Pi && mode != LeaderStartMode::AttachExisting {
+    let mut provider_argv = if provider == Provider::Pi && mode != LeaderStartMode::AttachExisting {
         let parsed = crate::lifecycle::launch::pi_mcp::parse_pi_leader_args(provider_args)
             .map_err(|error| LeaderError::Start(error.to_string()))?;
         let mcp_config = adapter
@@ -329,6 +329,10 @@ fn leader_start_plan_with_ambient_authority(
     } else {
         provider_command_argv(provider, provider_args)
     };
+    if mode != LeaderStartMode::AttachExisting {
+        crate::provider::argv_route::apply(provider, &mut provider_argv)
+            .map_err(|error| LeaderError::Start(error.to_string()))?;
+    }
     let argv = start_argv(
         mode,
         provider,

package/crates/team-agent/src/lifecycle/launch/spawn.rs

@@ -330,6 +330,8 @@ pub(super) fn spawn_agents(
             ensure_grok_login_and_folder_trust(workspace)?;
             apply_grok_mcp_overlay(workspace, &mcp_config)?;
         }
+        crate::provider::argv_route::apply(provider, &mut plan.argv)
+            .map_err(|error| LifecycleError::Provider(error.to_string()))?;
         let spawn_epoch = u64::try_from(started.len()).unwrap_or(u64::MAX);
         let spawned_at = spawn_timestamp_for_agent(u32::try_from(spawn_epoch).unwrap_or(u32::MAX));
         // E6 层1 实证3 + 诊断留痕:落最终 worker argv(spawn 前的真实形态)。

package/crates/team-agent/src/lifecycle/restart/common.rs

@@ -516,6 +516,8 @@ pub(super) fn spawn_agent_window(
     // Keep the launcher-known typed provider independent from inherited
     // LEADER_* identity. The tmux wrapper binds pane/socket at invocation time.
     crate::layout::worker_env::inject_current_caller_provider(&mut env, provider);
+    crate::provider::argv_route::apply(provider, &mut plan.argv)
+        .map_err(|error| LifecycleError::Provider(error.to_string()))?;
 
     // 0.4.6 Stage 2: write actual spawn plan event BEFORE invoking the
     // transport spawn. Mirrors `launch.rs:359-380` (the reference impl)