@team-agent/installer 0.5.111 → 0.5.112

package/crates/team-agent/src/coordinator/health.rs

@@ -1,5 +1,5 @@
 //! ---
-//! purpose: coordinator daemon 的健康判定、幂等启停与只读观测面——pid/metadata/schema 三合一健康、spawn 与终止、runtime 路径、以及 team-agent watch 的事件渲染
+//! purpose: coordinator daemon 的健康判定、幂等启停与只读观测面——pid/metadata/schema 三合一健康、spawn 与终止与 runtime 路径
 //! contract:
 //!   provides:
 //!     - name: coordinator_health
@@ -10,12 +10,6 @@
 //!       what: 同上，并把 team_key 以 --team 传给子进程，免得 daemon 自己从 state 推
 //!     - name: stop_coordinator
 //!       what: 终止 daemon 并清 pid/meta；pid 文件缺失时用 ps 扫描发现流浪 coordinator
-//!     - name: collect_watch_lines
-//!       what: 从 events.jsonl 与结果表增量取出可渲染行，并推进 WatchCursor
-//!     - name: render_event_line
-//!       what: 把一条结构化事件渲染成人类可读行，不认识的事件返回 None
-//!     - name: run_watch
-//!       what: team-agent watch 主循环：反复 collect 后输出并 sleep
 //!     - name: coordinator_pid_path
 //!       what: coordinator.pid 的位置
 //!     - name: coordinator_meta_path
@@ -35,29 +29,24 @@
 //!   - 不做 tick 编排，也不投递任何消息
 //!   - 不读 provider 凭据、不碰 .env；身份只取自当前可执行文件与已落盘 metadata
 //!   - 终止进程限定本 workspace：优先按本次判定拿到的精确 pid；pid 文件缺失时的流浪回收会按 ps 命令行匹配「coordinator --workspace <本 ws>」发现目标，仍不做跨 workspace 的 pkill/killall 泛清
-//!   - watch 侧只读：不重放已归档段，rotation 只插一条 marker 并重置 offset
 //! maturity: wired
 //! ---
 //!
-//! coordinator 健康/身份 & 只读可观测面:metadata 身份原语 + coordinator 路径 + watch 实时流。
+//! coordinator 健康/身份 & 只读可观测面:metadata 身份原语 + coordinator 路径。
 
-use std::io::{Read, Seek, SeekFrom};
 #[cfg(unix)]
 use std::os::unix::process::CommandExt;
 use std::path::{Path, PathBuf};
 use std::process::{Command, Stdio};
 use std::time::Duration;
 
-use serde_json::Value;
-use thiserror::Error;
-
 use crate::message_store::MessageStore;
 
 use super::types::{
     CoordinatorBinaryIdentity, CoordinatorBinaryIdentityRelation, CoordinatorHealthStatus,
     CoordinatorMetadata, CoordinatorMetadataMismatchReason, HealthReport, MetadataSource, Pid,
     SchemaError, SchemaHealth, StartError, StartOutcome, StartReport, StopError, StopOutcome,
-    StopReport, WatchCursor, WorkspacePath, PROTOCOL_VERSION, ROTATION_MARKER,
+    StopReport, WorkspacePath, PROTOCOL_VERSION,
 };
 
 // ===========================================================================
@@ -1157,275 +1146,6 @@ pub fn coordinator_log_path(workspace: &WorkspacePath) -> PathBuf {
     crate::model::paths::runtime_dir(workspace.as_path()).join("coordinator.log")
 }
 
-// ===========================================================================
-// watch 实时流(watch/__init__.py)—— `team-agent watch`
-// ===========================================================================
-
-/// `collect_watch_lines`(`watch.py:40`)。tail events.jsonl(过滤 team)+ latest_results,
-/// 渲染人类可读行;处理 log rotation(ROTATION_MARKER + offset 重置,不重放历史段)。
-/// 推进 `cursor`。
-/// ---
-/// purpose: 增量取出自上次游标以来的可渲染 watch 行（事件 + 结果两路）
-/// params:
-///   workspace: workspace 根
-///   cursor: 可变游标，函数会推进 offset、已见结果 id 集合与归档签名
-///   store: 已打开的 message store，用于取结果行
-///   team: 只看这个 team 的事件；None 表示不过滤
-/// returns: 本次新增的渲染行，事件行在前、结果行在后；无新内容时为空 Vec
-/// errors: 读事件文件或查库失败时返回 WatchError
-/// ---
-pub fn collect_watch_lines(
-    workspace: &WorkspacePath,
-    cursor: &mut WatchCursor,
-    store: &MessageStore,
-    team: Option<&str>,
-) -> Result<Vec<String>, WatchError> {
-    let mut lines = collect_event_lines(workspace, cursor, team)?;
-    lines.extend(collect_result_lines(workspace, cursor, store, team)?);
-    Ok(lines)
-}
-
-/// `_collect_event_lines`(`watch.py:66-97`):tail events.jsonl,按 team 过滤。
-fn collect_event_lines(
-    workspace: &WorkspacePath,
-    cursor: &mut WatchCursor,
-    team: Option<&str>,
-) -> Result<Vec<String>, WatchError> {
-    let logs = crate::model::paths::logs_dir(workspace.as_path());
-    let events_path = logs.join("events.jsonl");
-    let archive_path = logs.join("events.jsonl.1");
-    let archive_signature = file_signature(&archive_path)?;
-    let mut lines = Vec::new();
-
-    let size = std::fs::metadata(&events_path)
-        .map(|m| m.len())
-        .unwrap_or(0);
-    let rotated = cursor.initialized
-        && (cursor.archive_signature != archive_signature || cursor.event_offset > size);
-    if rotated {
-        lines.push(ROTATION_MARKER.to_string());
-        cursor.event_offset = 0;
-    }
-    cursor.archive_signature = archive_signature;
-
-    let mut file = match std::fs::File::open(&events_path) {
-        Ok(file) => file,
-        Err(e) if e.kind() == std::io::ErrorKind::NotFound => {
-            cursor.initialized = true;
-            return Ok(lines);
-        }
-        Err(e) => return Err(WatchError::Io(e)),
-    };
-    file.seek(SeekFrom::Start(cursor.event_offset))?;
-    let mut text = String::new();
-    file.read_to_string(&mut text)?;
-    cursor.event_offset = file.stream_position()?;
-    cursor.initialized = true;
-    for line in text.lines() {
-        if let Ok(event) = serde_json::from_str::<Value>(line) {
-            // watch.py:91 — `if team and _event_team_id(event) != team: continue`.
-            if team.is_some() && event_team_id(&event).as_deref() != team {
-                continue;
-            }
-            if let Some(rendered) = render_event_line(&event) {
-                lines.push(rendered);
-            }
-        }
-    }
-    Ok(lines)
-}
-
-/// `_event_team_id`(`watch.py:132-134`)。
-fn event_team_id(event: &Value) -> Option<String> {
-    ["team_id", "owner_team_id", "team"]
-        .iter()
-        .find_map(|key| event.get(*key))
-        .and_then(|value| match value {
-            Value::String(s) if !s.is_empty() => Some(s.clone()),
-            Value::Number(n) => Some(n.to_string()),
-            _ => None,
-        })
-}
-
-/// `_collect_result_lines`(`watch.py:100-112`):store.latest_results(owner_team_id=team)
-/// 出 `result_received: {agent} -> {summary}` 行;按 cursor.seen_result_ids 去重。
-fn collect_result_lines(
-    workspace: &WorkspacePath,
-    cursor: &mut WatchCursor,
-    store: &MessageStore,
-    team: Option<&str>,
-) -> Result<Vec<String>, WatchError> {
-    let db_path = crate::model::paths::runtime_dir(workspace.as_path()).join("team.db");
-    if !db_path.exists() {
-        return Ok(Vec::new());
-    }
-    let mut lines = Vec::new();
-    for row in store.latest_results(20, team)? {
-        let Some(result_id) = row
-            .get("result_id")
-            .and_then(Value::as_str)
-            .filter(|id| !id.is_empty())
-            .map(str::to_string)
-        else {
-            continue;
-        };
-        if !cursor.seen_result_ids.insert(result_id) {
-            continue;
-        }
-        let mut summary = crate::message_store::result_summary_from_row(&row)
-            .unwrap_or_else(|| serde_json::json!({}));
-        if let Some(obj) = summary.as_object_mut() {
-            obj.insert(
-                "event".to_string(),
-                Value::String("result_received".to_string()),
-            );
-        }
-        if let Some(rendered) = render_event_line(&summary) {
-            lines.push(rendered);
-        }
-    }
-    Ok(lines)
-}
-
-/// `render_event_line`(`watch.py:46-63`)。把一条 step 4 事件渲染成人类可读行;非可渲染事件 → `None`。
-/// 消费的事件类型:`result_received` / `leader_receiver.{injected,submitted}` / `send.failed` /
-/// `leader_receiver.rebind_required` / `leader.api_error`(card 表)。
-/// ---
-/// purpose: 把一条结构化事件渲染成一行人类可读文本
-/// params:
-///   event: 事件 JSON 对象；靠其中的 event 字段分派
-/// returns: 已知事件类型返回渲染行，其余一律 None（不猜、不打印原始 JSON）。摘要字段做长度截断
-/// ---
-pub fn render_event_line(event: &Value) -> Option<String> {
-    let event_name = event.get("event").and_then(Value::as_str)?;
-    match event_name {
-        "result_received" => Some(format!(
-            "result_received: {} -> {}",
-            clean_field(event, &["agent_id"], "-"),
-            prefix_chars(&clean_field(event, &["summary"], "-"), 80)
-        )),
-        "leader_receiver.injected" | "leader_receiver.submitted" => {
-            let id = first_field(event, &["message_id", "msg_id"]).unwrap_or("-");
-            let id = prefix_chars(id, 12);
-            Some(format!(
-                "leader_receiver.injected: {} -> {}",
-                id,
-                clean_field(event, &["recipient", "to"], "-")
-            ))
-        }
-        "send.failed" => Some(format!(
-            "send.failed: {} reason={}",
-            clean_field(event, &["recipient", "to", "target"], "-"),
-            clean_field(event, &["reason", "error"], "-")
-        )),
-        "leader_receiver.rebind_required" => Some(format!(
-            "leader_receiver.rebind_required: pane={} reason={}",
-            clean_field(event, &["old_pane_id", "pane_id", "target"], "-"),
-            clean_field(event, &["reason", "rediscovery_status"], "-")
-        )),
-        "leader.api_error" => Some(format!(
-            "leader.api_error: {} provider={} snippet={}",
-            clean_field(event, &["error_class"], "Unknown"),
-            clean_field(event, &["provider"], "-"),
-            clean_field(event, &["matched_pattern_snippet", "snippet"], "-")
-        )),
-        "result_wake.registered" => Some(format!(
-            "result_wake.registered: task={} watcher={}",
-            clean_field(event, &["task_id"], "-"),
-            clean_field(event, &["watcher_id"], "-")
-        )),
-        "result_wake.notified" => Some(format!(
-            "result_wake.notified: task={} result={} watcher={}",
-            clean_field(event, &["task_id"], "-"),
-            clean_field(event, &["result_id"], "-"),
-            clean_field(event, &["watcher_id"], "-")
-        )),
-        "result_wake.notify_failed" => Some(format!(
-            "result_wake.notify_failed: task={} watcher={} reason={}",
-            clean_field(event, &["task_id"], "-"),
-            clean_field(event, &["watcher_id"], "-"),
-            clean_field(event, &["reason", "error"], "-")
-        )),
-        _ => None,
-    }
-}
-
-/// `run_watch`(`watch.py:25`)。`team-agent watch` 主循环:反复 `collect_watch_lines` + 输出 + sleep。
-/// `output`/`sleep` 注入便于测试。§10 返 Result。
-/// ---
-/// purpose: team-agent watch 的主循环：反复增量收集、输出、休眠
-/// params:
-///   workspace: workspace 根
-///   team: 只看这个 team；None 表示不过滤
-///   interval_sec: 轮询间隔；非有限值或非正数时回落到内置默认
-///   output: 输出回调，注入以便测试；本函数自己不写 stdout
-/// returns: 循环结束时为 Ok。这是个长跑循环，正常运行期间不返回
-/// errors: 打开 message store 或某轮收集失败时返回 WatchError
-/// ---
-pub fn run_watch(
-    workspace: &WorkspacePath,
-    team: Option<&str>,
-    interval_sec: f64,
-    output: &mut dyn FnMut(&str),
-) -> Result<(), WatchError> {
-    let store = MessageStore::open(workspace.as_path())?;
-    let mut cursor = WatchCursor::default();
-    let interval = if interval_sec.is_finite() && interval_sec > 0.0 {
-        std::time::Duration::from_secs_f64(interval_sec)
-    } else {
-        std::time::Duration::from_millis(100)
-    };
-    loop {
-        for line in collect_watch_lines(workspace, &mut cursor, &store, team)? {
-            output(&line);
-        }
-        std::thread::sleep(interval);
-    }
-}
-
-/// watch 错误(读 events.jsonl / latest_results)。
-#[derive(Debug, Error)]
-pub enum WatchError {
-    #[error("io: {0}")]
-    Io(#[from] std::io::Error),
-    #[error("message store: {0}")]
-    MessageStore(#[from] crate::message_store::MessageStoreError),
-}
-
-fn file_signature(path: &Path) -> Result<Option<(u64, i128)>, WatchError> {
-    let meta = match std::fs::metadata(path) {
-        Ok(meta) => meta,
-        Err(e) if e.kind() == std::io::ErrorKind::NotFound => return Ok(None),
-        Err(e) => return Err(WatchError::Io(e)),
-    };
-    let modified = meta.modified().ok();
-    let nanos = modified
-        .and_then(|t| t.duration_since(std::time::UNIX_EPOCH).ok())
-        .and_then(|d| i128::try_from(d.as_nanos()).ok())
-        .unwrap_or(0);
-    Ok(Some((meta.len(), nanos)))
-}
-
-fn first_field<'a>(event: &'a Value, keys: &[&str]) -> Option<&'a str> {
-    keys.iter()
-        .find_map(|key| event.get(*key).and_then(Value::as_str))
-}
-
-fn clean_field(event: &Value, keys: &[&str], default: &str) -> String {
-    first_field(event, keys)
-        .map(clean_text)
-        .filter(|s| !s.is_empty())
-        .unwrap_or_else(|| default.to_string())
-}
-
-fn clean_text(text: &str) -> String {
-    text.split_whitespace().collect::<Vec<_>>().join(" ")
-}
-
-fn prefix_chars(text: &str, max: usize) -> String {
-    text.chars().take(max).collect()
-}
-
 #[cfg(all(test, unix))]
 mod tests {
     use super::*;

package/crates/team-agent/src/coordinator/mod.rs

@@ -10,8 +10,6 @@
 //!       what: 幂等启动 daemon 子进程
 //!     - name: stop_coordinator
 //!       what: 停 daemon 并清 pid/meta
-//!     - name: run_watch
-//!       what: team-agent watch 的只读事件流主循环
 //!     - name: detect_whole_team_gone
 //!       what: 不依赖 coordinator 存活的整队消失判定
 //!   depends:
@@ -41,7 +39,6 @@
 //!   - `coordinator/lifecycle.py`    (health / start / stop / tick orchestration + schema health)
 //!   - `coordinator/metadata.py`     (COORDINATOR_PROTOCOL_VERSION=2, pid_is_running, read/write/ok meta)
 //!   - `coordinator/paths.py`        (coordinator.pid / coordinator.json / coordinator.log paths)
-//!   - `watch/__init__.py`           (run_watch / collect_watch_lines / render_event_line / WatchCursor)
 //!   - `abnormal_track.py`           (Gap 32 §4 provider-neutral whole-team-gone detection)
 //!
 //! 职责(card §职责):per-workspace daemon 生命周期 + 单次 tick 编排。tick 按固定顺序把
@@ -70,8 +67,6 @@
 //!     仅 unexpected exit 写 durable marker + 延迟到下条 leader 命令再 escalate。
 //!   - **abnormal track 不读屏/不命名 provider**:只消费结构化 fault fact + 进程身份;
 //!     `(signature, turn_id)` 去重,turn_id 缺失退化为 per-record fingerprint 桶。
-//!   - **watch rotation**:archive_signature 变化或 offset>size 即插 ROTATION_MARKER 并重置 offset,
-//!     不重放历史段。
 //!
 //! ROUND-0:仅类型 + struct/enum + fn/trait/method 签名。所有 body =
 //! `unimplemented!("step12 port: <what>")`。fallible 路径返 `Result`/`Option`(§10 实现层禁

package/crates/team-agent/src/coordinator/tests/basics.rs

@@ -18,15 +18,6 @@ fn default_tick_interval_is_five_seconds() {
     assert_eq!(BACKOFF_MAX_SEC, 60.0);
 }
 
-#[test]
-fn rotation_marker_is_byte_exact() {
-    // watch.py:22 — byte-for-byte (note the U+2014 em dash).
-    assert_eq!(
-        ROTATION_MARKER,
-        "[watch] log rotated; archived segment events.jsonl.1 not replayed — historical replay deferred to a future --replay flag"
-    );
-}
-
 #[test]
 fn status_enums_serialize_to_exact_python_strings() {
     let cases: &[(String, &str)] = &[

package/crates/team-agent/src/coordinator/tests/mod.rs

@@ -293,4 +293,3 @@ mod main_preserved;
 mod spine;
 mod takeover;
 mod tick_core;
-mod watch;

package/crates/team-agent/src/coordinator/tests/tick_core.rs

@@ -235,20 +235,3 @@ fn p2_pid_is_running_false_for_cross_user_pid() {
         );
     }
 }
-
-// P1 — render_event_line(result_received) truncates the summary to 80 chars
-// (watch.py:115-116 `_clean(summary)[:80]`).
-#[test]
-fn p2_render_result_received_truncates_summary_to_80_chars() {
-    let long = "x".repeat(200);
-    let e = serde_json::json!({"event":"result_received","agent_id":"w1","summary": long});
-    let line = render_event_line(&e).expect("renders");
-    assert!(
-        line.contains(&"x".repeat(80)),
-        "first 80 summary chars are kept"
-    );
-    assert!(
-        !line.contains(&"x".repeat(81)),
-        "summary must be truncated to 80 chars"
-    );
-}

package/crates/team-agent/src/coordinator/types.rs

@@ -20,9 +20,8 @@
 //! ---
 //!
 //! coordinator 共享数据面:常量 / newtype / 穷尽 enum / metadata / schema health /
-//! report 结构 / abnormal-track 数据型 / WatchCursor / cross-dep 占位。
+//! report 结构 / abnormal-track 数据型 / cross-dep 占位。
 
-use std::collections::BTreeSet;
 use std::path::{Path, PathBuf};
 
 use serde::{Deserialize, Serialize};
@@ -49,10 +48,6 @@ pub const DEFAULT_TICK_INTERVAL_SEC: f64 = 5.0;
 /// 指数退避封顶(`__main__.py:65` `min(.., 60.0)`)。bug-084 崩溃循环防护。
 pub const BACKOFF_MAX_SEC: f64 = 60.0;
 
-/// watch log rotation marker(`watch.py:22`,字节级一致 —— 测试钉死)。
-pub const ROTATION_MARKER: &str =
-    "[watch] log rotated; archived segment events.jsonl.1 not replayed — historical replay deferred to a future --replay flag";
-
 // ===========================================================================
 // NEWTYPES(§3:Pid / WorkspacePath 不与裸 int/PathBuf 混传)
 // ===========================================================================
@@ -445,21 +440,6 @@ pub struct TeamPresenceSnapshot {
     pub restart_in_progress: bool,
 }
 
-// ===========================================================================
-// WatchCursor(watch/__init__.py)
-// ===========================================================================
-
-/// watch tail 游标(`watch.py:14-19`)。rotation 检测靠 `archive_signature` 变化 + `offset > size`
-/// (`watch.py:73-83`)。`archive_signature = Some((size, mtime_ns))`。
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct WatchCursor {
-    pub event_offset: u64,
-    pub seen_result_ids: BTreeSet<String>,
-    pub initialized: bool,
-    /// `(size, mtime_ns)`;`mtime_ns: i128`(防溢出)。
-    pub archive_signature: Option<(u64, i128)>,
-}
-
 // ===========================================================================
 // CROSS-DEP placeholders(其他并行 lane 拥有真名;leader 集成时 reconcile)
 // ===========================================================================

package/crates/team-agent/src/db/message_store.rs

@@ -830,22 +830,6 @@ impl MessageStore {
         Ok(rows.into_iter().rev().collect())
     }
 
-    /// Allow direct peer messages in both directions. Golden stores `(a,b)` and
-    /// `(b,a)` so either sender/recipient lookup can use a single ordered key.
-    pub fn allow_peer(&self, a: &str, b: &str) -> Result<(), MessageStoreError> {
-        let conn = crate::db::schema::open_db(&self.path)?;
-        let now = now_ts();
-        conn.execute(
-            "insert or ignore into peer_allowlist(a, b, created_at) values (?1, ?2, ?3)",
-            params![a, b, now.as_str()],
-        )?;
-        conn.execute(
-            "insert or ignore into peer_allowlist(a, b, created_at) values (?1, ?2, ?3)",
-            params![b, a, now.as_str()],
-        )?;
-        Ok(())
-    }
-
     /// `claim_leader_notification_delivery` (`leader_notification_log.py:30-101`):
     /// `INSERT OR IGNORE` on PK `(result_id, owner_team_id, owner_epoch)`. rowcount==1
     /// → `claimed_by_you`; else read the existing winner row → `already_notified_by`.
@@ -1421,32 +1405,6 @@ mod tests {
         assert_eq!(legacy_epoch_from_uuid(Some("uuid-BBB")), 122688376);
     }
 
-    #[test]
-    fn allow_peer_inserts_bidirectional_rows_idempotently() {
-        let s = store();
-        s.allow_peer("alice", "bob").unwrap();
-        s.allow_peer("alice", "bob").unwrap();
-
-        let c = read(&s);
-        let mut rows = c
-            .prepare("select a, b from peer_allowlist order by a, b")
-            .unwrap()
-            .query_map([], |row| {
-                Ok((row.get::<_, String>(0)?, row.get::<_, String>(1)?))
-            })
-            .unwrap()
-            .collect::<Result<Vec<_>, _>>()
-            .unwrap();
-        rows.sort();
-        assert_eq!(
-            rows,
-            vec![
-                ("alice".to_string(), "bob".to_string()),
-                ("bob".to_string(), "alice".to_string()),
-            ]
-        );
-    }
-
     // ════════════════════════ FIX-LOOP (wave-1) RED test ════════════════════════
     // B1: mark() error column = coalesce(?, error) — a NEW error overwrites, but a
     // mark WITHOUT an error must PRESERVE the existing error (current impl clobbers

package/crates/team-agent/src/db/migration.rs

@@ -88,7 +88,6 @@ pub const MANAGED_TABLE_LAYOUTS: &[(&str, &[&str])] = &[
             "updated_at",
         ],
     ),
-    ("peer_allowlist", &["a", "b", "created_at"]),
     (
         "result_watchers",
         &[
@@ -129,7 +128,6 @@ const CREATE_TABLE_TEMPLATES: &[(&str, &str)] = &[
     ("scheduled_events", "create table if not exists __TABLE__ (\n          id integer primary key,\n          owner_team_id text,\n          due_at text not null,\n          target text not null,\n          kind text not null,\n          payload_json text not null,\n          status text not null,\n          created_at text not null,\n          fired_at text,\n          result_json text\n        )"),
     ("delivery_tokens", "create table if not exists __TABLE__ (\n          message_id text primary key,\n          unique_token text not null,\n          injected_at text not null,\n          visible_at text,\n          consumed_at text,\n          failed_at text,\n          failure_reason text\n        )"),
     ("agent_health", "create table if not exists __TABLE__ (\n          owner_team_id text,\n          agent_id text not null,\n          status text not null,\n          last_output_at text,\n          context_usage_pct integer,\n          current_task_id text,\n          updated_at text not null,\n          unique(owner_team_id, agent_id)\n        )"),
-    ("peer_allowlist", "create table if not exists __TABLE__ (\n          a text not null,\n          b text not null,\n          created_at text not null,\n          primary key (a, b)\n        )"),
     ("result_watchers", "create table if not exists __TABLE__ (\n          watcher_id text primary key,\n          owner_team_id text,\n          task_id text,\n          agent_id text,\n          message_id text,\n          leader_id text not null,\n          recipient text,\n          status text not null,\n          created_at text not null,\n          completed_at text,\n          result_id text,\n          notified_message_id text,\n          error text\n        )"),
     ("leader_notification_log", "create table if not exists __TABLE__ (\n          result_id text not null,\n          owner_team_id text not null default '',\n          owner_epoch integer not null default 0,\n          leader_session_uuid text,\n          notified_message_id text not null,\n          notified_at text not null,\n          leader_pane_id_at_notify text,\n          envelope_content_hash text,\n          primary key (result_id, owner_team_id, owner_epoch)\n        )"),
 ];
@@ -630,12 +628,12 @@ mod tests {
         let path = temp_db();
         build_legacy(&path);
 
-        // 迁移前:diagnosis = schema_repair_available,全 8 表 diff(4 漂移 + 4 缺失)。
+        // 迁移前:diagnosis = schema_repair_available,全 7 表 diff(4 漂移 + 3 缺失)。
         let before = schema_diagnosis(&path, SCHEMA_VERSION).unwrap();
         assert_eq!(before.status, "schema_repair_available");
         assert!(!before.ok);
         assert_eq!(before.user_version, 1);
-        assert_eq!(before.layout_diffs.len(), 8);
+        assert_eq!(before.layout_diffs.len(), MANAGED_TABLE_LAYOUTS.len());
 
         // initialize_schema 走 ensure_table_layout(rebuild)+ 建表 + user_version=3。
         let conn = crate::db::schema::open_db(&path).unwrap();
@@ -697,6 +695,48 @@ mod tests {
         assert_eq!(d.user_version, SCHEMA_VERSION);
     }
 
+    // A drifted legacy peer table is inert: no diagnosis, rebuild, backup or row loss.
+    #[test]
+    fn legacy_peer_allowlist_is_inert_and_preserved() {
+        let path = temp_db();
+        let conn = crate::db::schema::open_db(&path).unwrap();
+        initialize_schema(&conn, Some(&path)).unwrap();
+        conn.execute_batch(
+            "create table peer_allowlist (created_at text not null, b text not null, a text not null, primary key (a, b));
+             insert into peer_allowlist(a, b, created_at) values ('worker', 'reviewer', 'v4');",
+        )
+        .unwrap();
+        assert!(layout_diffs(&conn).unwrap().is_empty());
+        initialize_schema(&conn, Some(&path)).unwrap();
+        assert_eq!(layout(&conn, "peer_allowlist"), ["created_at", "b", "a"]);
+        let row: (String, String, String) = conn
+            .query_row("select a, b, created_at from peer_allowlist", [], |r| {
+                Ok((r.get(0)?, r.get(1)?, r.get(2)?))
+            })
+            .unwrap();
+        assert_eq!(
+            row,
+            (
+                "worker".to_string(),
+                "reviewer".to_string(),
+                "v4".to_string()
+            )
+        );
+        drop(conn);
+        let diagnosis = schema_diagnosis(&path, SCHEMA_VERSION).unwrap();
+        assert!(
+            diagnosis.ok,
+            "legacy peer table must remain inert: {diagnosis:?}"
+        );
+        assert!(
+            !std::fs::read_dir(path.parent().unwrap())
+                .unwrap()
+                .filter_map(|entry| entry.ok())
+                .any(|entry| entry.file_name().to_string_lossy().contains("pre-migration")),
+            "legacy peer table must not trigger a migration backup"
+        );
+    }
+
     #[test]
     fn diagnosis_missing_db() {
         let path = temp_db(); // 未创建文件
@@ -713,7 +753,7 @@ mod tests {
         build_legacy(&path);
         let conn = crate::db::schema::open_db(&path).unwrap();
         let events1 = ensure_table_layout(&conn, SCHEMA_VERSION, Some(&path)).unwrap();
-        assert_eq!(events1.len(), 8); // 4 漂移 rebuild + 4 缺失建表
+        assert_eq!(events1.len(), MANAGED_TABLE_LAYOUTS.len()); // 4 漂移 rebuild + 3 缺失建表
         for e in &events1 {
             assert_eq!(e.row_count_before, e.row_count_after);
         }
@@ -759,7 +799,7 @@ mod tests {
         build_legacy(&path);
         let conn = crate::db::schema::open_db(&path).unwrap();
         let events = ensure_table_layout(&conn, SCHEMA_VERSION, None).unwrap(); // None 不再 Err
-        assert_eq!(events.len(), 8);
+        assert_eq!(events.len(), MANAGED_TABLE_LAYOUTS.len());
         assert_eq!(
             table_layout(&conn, "messages").unwrap()[..2],
             ["message_id", "owner_team_id"]
@@ -871,7 +911,7 @@ mod tests {
             } => {
                 assert!(diagnosis.ok);
                 assert_eq!(diagnosis.user_version, SCHEMA_VERSION);
-                assert_eq!(rebuilds.len(), 8);
+                assert_eq!(rebuilds.len(), MANAGED_TABLE_LAYOUTS.len());
             }
             other => panic!("expected Fixed, got {other:?}"),
         }
@@ -921,8 +961,8 @@ mod tests {
             .collect();
         assert_eq!(
             rebuilds.len(),
-            8,
-            "8 张 managed 表各一条 schema.layout_rebuild"
+            MANAGED_TABLE_LAYOUTS.len(),
+            "每张 managed 表各一条 schema.layout_rebuild"
         );
         for e in &rebuilds {
             assert_eq!(