@team-agent/installer 0.5.41 → 0.5.42

package/Cargo.lock

@@ -575,7 +575,7 @@ dependencies = [
 
 [[package]]
 name = "team-agent"
-version = "0.5.41"
+version = "0.5.42"
 dependencies = [
  "anyhow",
  "chrono",

package/Cargo.toml

@@ -9,7 +9,7 @@ members = ["crates/team-agent", "crates/win-conpty-phase0", "crates/conpty-trans
 
 [workspace.package]
 edition = "2021"
-version = "0.5.41"
+version = "0.5.42"
 license = "AGPL-3.0"
 rust-version = "1.95"
 

package/crates/team-agent/src/coordinator/tick.rs

@@ -424,7 +424,25 @@ impl Coordinator {
         let saved = match &self.save_hook {
             Some(hook) => hook(&self.workspace, &state),
             None => {
-                crate::state::projection::save_team_scoped_state(self.workspace.as_path(), &state)
+                // 0.5.42 S1b (s1b-writer-cluster-locate.md §3.2 /
+                // §4.4): the daemon tick's single terminal save
+                // routes through `StateRepository` with the
+                // `CoordinatorTick` intent. Repository dispatch is
+                // byte-identical to the old `save_team_scoped_state`
+                // helper (see `state/repository.rs:CoordinatorTick =>
+                // helper_write_team_scoped`), so persist/merge/lock/
+                // atomic-rename semantics and degraded-mapping stay
+                // unchanged. No cached repository, no extra load, no
+                // retry — the caller still owns the `Value` and
+                // failure still returns `TickReport{PersistenceDegraded}`
+                // via the `saved.is_err()` branch below.
+                let team_key = crate::state::projection::team_state_key(&state);
+                crate::state::repository::StateRepository::new(self.workspace.as_path()).save(
+                    crate::state::repository::StateWriteIntent::CoordinatorTick {
+                        team_key: team_key.as_str(),
+                    },
+                    &state,
+                )
             }
         };
         if saved.is_err() {

package/crates/team-agent/src/leader/lease.rs

@@ -1750,7 +1750,25 @@ fn state_owner(state: &Value) -> Option<TeamOwner> {
 /// name for 0.5.x call-site stability. The B0 legacy snapshot is
 /// diagnostic-only via `lifecycle::save_team_runtime_snapshot`.
 pub fn write_lease_dual_state(workspace: &Path, state: &Value) -> Result<(), LeaderError> {
-    crate::state::persist::save_runtime_state(workspace, state)?;
+    // 0.5.42 S1b (s1b-writer-cluster-locate.md §4.4): terminal root
+    // save routes through `StateRepository` with the `ClaimLeader`
+    // intent. Dispatch is byte-identical to the old
+    // `save_runtime_state` helper (see
+    // `state/repository.rs:ClaimLeader => helper_write_root`), so the
+    // full lease writer cluster (attach_leader / attach_app_server /
+    // attach_leader_to_state / claim_lease_no_incident_with_target /
+    // rediscover) keeps its persist/merge/CAS/readback semantics.
+    // Public signature/error mapping preserved for caller stability.
+    // Repository does NOT compute owner_epoch, re-run convergence,
+    // emit ownership events, or acquire a second lease lock — the
+    // caller still owns all of that.
+    let team_key = canonical_owner_write_key(state);
+    crate::state::repository::StateRepository::new(workspace).save(
+        crate::state::repository::StateWriteIntent::ClaimLeader {
+            team_key: team_key.as_str(),
+        },
+        state,
+    )?;
     Ok(())
 }
 
@@ -1838,7 +1856,16 @@ fn save_claim_team_scoped_state(workspace: &Path, state: &Value, target_key: &st
         writes_endpoint_convergence,
     );
     merged.insert("teams".to_string(), Value::Object(teams));
-    crate::state::persist::save_runtime_state(workspace, &Value::Object(merged))?;
+    // 0.5.42 S1b (s1b-writer-cluster-locate.md §4.4): only the
+    // terminal save routes through `StateRepository`; the entire
+    // load/merge/compact block above stays in place — repository is a
+    // writer facade, not a projection assembler.
+    crate::state::repository::StateRepository::new(workspace).save(
+        crate::state::repository::StateWriteIntent::ClaimLeader {
+            team_key: target_key,
+        },
+        &Value::Object(merged),
+    )?;
     Ok(())
 }
 

package/crates/team-agent/src/state/repository.rs

@@ -1,17 +1,32 @@
-//! S1a StateRepository facade.
+//! StateRepository facade.
 //!
-//! Ref: `.team/artifacts/s1a-state-repository-design.md`
+//! Ref:
+//! - `.team/artifacts/s1a-state-repository-design.md` (skeleton)
+//! - `.team/artifacts/s1b-writer-cluster-locate.md` (0.5.42 first
+//!   writer-cluster migration: `CoordinatorTick` + `ClaimLeader`)
 //!
-//! S1a is a **skeleton + governance** slice. `StateRepository` is a thin write
-//! facade that dispatches every write to the existing helper family without
-//! changing helper behavior, merge policy, or on-disk layout. The value it adds
-//! is that every write now carries a `StateWriteIntent`, so S1b can migrate
-//! writer clusters one semantic at a time.
+//! `StateRepository` is a thin write facade that dispatches every write
+//! to the existing helper family without changing helper behavior,
+//! merge policy, or on-disk layout. The value it adds is that every
+//! write now carries a `StateWriteIntent`, so writer clusters migrate
+//! one semantic at a time.
 //!
-//! Non-goals in S1a (see design section 11): no schema rewrite, no path
-//! layout change, no writer migration, no helper deletion. Every existing
-//! caller keeps calling the raw helpers behind the S1a allowlist; only new
-//! direct callsites are governed.
+//! 0.5.42 status: first real consumers are the daemon `Coordinator::
+//! tick` production save (`CoordinatorTick`) and the lease/claim
+//! writer cluster's two terminal saves (`ClaimLeader`) —
+//! `write_lease_dual_state` + `save_claim_team_scoped_state`.
+//! Post-S1b, the direct-save allowlist drops from 73 to 70; the three
+//! migrated sites have no allowlist row and every future direct save
+//! must either enter through `StateRepository` or claim an explicit
+//! new allowlist row (fail-closed).
+//!
+//! Non-goals kept from S1a (design §11) + reasserted by
+//! s1b-writer-cluster-locate.md §7: no schema rewrite, no path layout
+//! change, no helper deletion, no epoch computation in the repository,
+//! no retry / reload / event emission, no reinterpretation of
+//! `owner_epoch` / `topology_convergence` / readback proof — the
+//! caller still owns the whole `Value`, and repository dispatches to
+//! the same existing persist helper the direct edge used to hit.
 
 #![deny(clippy::unwrap_used, clippy::expect_used, clippy::panic)]
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-agent/installer",
-  "version": "0.5.41",
+  "version": "0.5.42",
   "description": "npx installer for Team Agent",
   "keywords": [
     "codex",
@@ -20,9 +20,9 @@
     "team-agent-installer": "npm/install.mjs"
   },
   "optionalDependencies": {
-    "@team-agent/cli-darwin-arm64": "0.5.41",
-    "@team-agent/cli-darwin-x64": "0.5.41",
-    "@team-agent/cli-linux-x64": "0.5.41"
+    "@team-agent/cli-darwin-arm64": "0.5.42",
+    "@team-agent/cli-darwin-x64": "0.5.42",
+    "@team-agent/cli-linux-x64": "0.5.42"
   },
   "scripts": {
     "postinstall": "node npm/bincheck.mjs",