@team-agent/installer 0.5.51 → 0.5.53

package/crates/team-agent/src/tmux_backend/tests.rs

@@ -12,7 +12,9 @@ use std::os::unix::net::UnixListener;
 use std::path::Path;
 use std::sync::{Arc, Mutex};
 
-use super::{CommandOutput, CommandRunner, RealCommandRunner, TmuxBackend};
+use super::{
+    CommandOutput, CommandRunner, RealCommandRunner, TmuxBackend, PANE_BINDING_NONCE_METADATA_KEY,
+};
 use crate::model::enums::PaneLiveness;
 use crate::transport::{
     normalize_capture, tmux_capture_argv, tmux_query_argv, tmux_send_keys_argv, tmux_spawn_argv,
@@ -395,10 +397,7 @@ fn spawn_first_frames_via_new_session_builder_and_parses_pane_id() {
     let pane_inventory = "%3\tteamsess\t0\tw1\t0\t/dev/ttys003\tnode\t1\t/work/dir\t1\t0\t123\n";
     let (be, rec) = backend_with(
         MockResp::Out(ok("")),
-        vec![
-            MockResp::Out(ok("%3\n")),
-            MockResp::Out(ok(pane_inventory)),
-        ],
+        vec![MockResp::Out(ok("%3\n")), MockResp::Out(ok(pane_inventory))],
     );
     let s = SessionName::new("teamsess");
     let w = WindowName::new("w1");
@@ -443,10 +442,7 @@ fn spawn_into_frames_via_new_window_builder() {
     let pane_inventory = "%4\tteamsess\t1\tw2\t0\t/dev/ttys004\tnode\t1\t/work/dir\t1\t0\t124\n";
     let (be, rec) = backend_with(
         MockResp::Out(ok("")),
-        vec![
-            MockResp::Out(ok("%4\n")),
-            MockResp::Out(ok(pane_inventory)),
-        ],
+        vec![MockResp::Out(ok("%4\n")), MockResp::Out(ok(pane_inventory))],
     );
     let s = SessionName::new("teamsess");
     let w = WindowName::new("w2");
@@ -518,10 +514,7 @@ fn spawn_with_command_refuses_and_rolls_back_spawn_pane_owned_by_other_window()
     let pane_inventory = "%5\tteamsess\t1\tw2\t0\t/dev/ttys005\tnode\t1\t/work/dir\t1\t0\t125\n";
     let (be, rec) = backend_with(
         MockResp::Out(ok("")),
-        vec![
-            MockResp::Out(ok("%5\n")),
-            MockResp::Out(ok(pane_inventory)),
-        ],
+        vec![MockResp::Out(ok("%5\n")), MockResp::Out(ok(pane_inventory))],
     );
     let err = be
         .spawn_into(
@@ -1791,9 +1784,9 @@ fn query_single_field_argv_and_nonzero_maps_to_none() {
 // display-message N+1 fallback is gone). leader_env stays the reverse-env real-machine bit.
 #[test]
 fn list_targets_argv_and_parses_tmux_pane_format() {
-    const FMT: &str = "#{pane_id}__TA_FIELD__#{session_name}__TA_FIELD__#{window_index}__TA_FIELD__#{window_name}__TA_FIELD__#{pane_index}__TA_FIELD__#{pane_tty}__TA_FIELD__#{pane_current_command}__TA_FIELD__#{pane_active}__TA_FIELD__#{pane_current_path}__TA_FIELD__#{session_attached}__TA_FIELD__#{pane_in_mode}__TA_FIELD__#{pane_pid}";
-    let stdout = "%7__TA_FIELD__team-x__TA_FIELD__0__TA_FIELD__win0__TA_FIELD__0__TA_FIELD__/dev/ttys003__TA_FIELD__codex__TA_FIELD__1__TA_FIELD__/Users/me/work__TA_FIELD__1__TA_FIELD__0__TA_FIELD__41001\n\
-                      %8__TA_FIELD__team-x__TA_FIELD__1__TA_FIELD__win1__TA_FIELD__0__TA_FIELD__/dev/ttys004__TA_FIELD__node__TA_FIELD__0__TA_FIELD__/Users/me/other__TA_FIELD__0__TA_FIELD__0__TA_FIELD__41002\n";
+    const FMT: &str = "#{pane_id}__TA_FIELD__#{session_name}__TA_FIELD__#{window_index}__TA_FIELD__#{window_name}__TA_FIELD__#{pane_index}__TA_FIELD__#{pane_tty}__TA_FIELD__#{pane_current_command}__TA_FIELD__#{pane_active}__TA_FIELD__#{pane_current_path}__TA_FIELD__#{session_attached}__TA_FIELD__#{pane_in_mode}__TA_FIELD__#{pane_pid}__TA_FIELD__#{@team_agent_pane_binding_nonce}";
+    let stdout = "%7__TA_FIELD__team-x__TA_FIELD__0__TA_FIELD__win0__TA_FIELD__0__TA_FIELD__/dev/ttys003__TA_FIELD__codex__TA_FIELD__1__TA_FIELD__/Users/me/work__TA_FIELD__1__TA_FIELD__0__TA_FIELD__41001__TA_FIELD__nonce-7\n\
+                      %8__TA_FIELD__team-x__TA_FIELD__1__TA_FIELD__win1__TA_FIELD__0__TA_FIELD__/dev/ttys004__TA_FIELD__node__TA_FIELD__0__TA_FIELD__/Users/me/other__TA_FIELD__0__TA_FIELD__0__TA_FIELD__41002__TA_FIELD__\n";
     let (be, rec) = backend_with(MockResp::Out(ok(stdout)), vec![]);
     let panes = be.list_targets().expect("list_targets ok");
     assert_eq!(
@@ -1845,6 +1838,19 @@ fn list_targets_argv_and_parses_tmux_pane_format() {
         Some(41002),
         "field[11] -> pane_pid (second pane)"
     );
+    assert_eq!(
+        p.leader_env
+            .get(PANE_BINDING_NONCE_METADATA_KEY)
+            .map(String::as_str),
+        Some("nonce-7"),
+        "field[12] pane option -> pane-instance binding metadata"
+    );
+    assert!(
+        !panes[1]
+            .leader_env
+            .contains_key(PANE_BINDING_NONCE_METADATA_KEY),
+        "an empty pane option must remain absent"
+    );
 
     // nonzero exit -> empty vec (golden returncode != 0 -> []).
     let (be, _r) = backend_with(
@@ -1859,6 +1865,35 @@ fn list_targets_argv_and_parses_tmux_pane_format() {
     );
 }
 
+#[test]
+fn set_pane_binding_nonce_is_socket_scoped_and_pane_local() {
+    let rec = Arc::new(Mutex::new(Vec::new()));
+    let runner = MockCommandRunner {
+        recorded: Arc::clone(&rec),
+        stdin_recorded: Arc::new(Mutex::new(Vec::new())),
+        queue: Mutex::new(VecDeque::new()),
+        default: MockResp::Out(ok("")),
+    };
+    let be =
+        TmuxBackend::with_runner_for_tmux_endpoint(Box::new(runner), "/tmp/ta-pane-binding.sock");
+    be.set_pane_binding_nonce(&PaneId::new("%7"), "nonce-7")
+        .expect("set pane binding nonce");
+    assert_eq!(
+        rec.lock().unwrap()[0],
+        svec(&[
+            "tmux",
+            "-S",
+            "/tmp/ta-pane-binding.sock",
+            "set-option",
+            "-p",
+            "-t",
+            "%7",
+            "@team_agent_pane_binding_nonce",
+            "nonce-7",
+        ])
+    );
+}
+
 // ── 12. attach_session (TRANSPORT TRIO) — `tmux attach-session -t <s>` -> Attached ──────────────
 // Golden tmux attach is `tmux attach-session -t <session>`; a successful attach -> AttachOutcome::
 // Attached. RED today: attach_session is unimplemented!() -> PANIC. The in-process lock asserts the

package/crates/team-agent/src/tmux_backend.rs

@@ -40,6 +40,9 @@ use crate::transport::{
     TransportError, TurnVerification, WindowName,
 };
 
+pub const PANE_BINDING_NONCE_METADATA_KEY: &str = "TEAM_AGENT_PANE_BINDING_NONCE";
+const TMUX_PANE_BINDING_NONCE_OPTION: &str = "@team_agent_pane_binding_nonce";
+
 /// Result of running an external command — the typed output of the OS edge.
 #[derive(Debug, Clone)]
 pub struct CommandOutput {
@@ -279,6 +282,23 @@ impl TmuxBackend {
         }
     }
 
+    pub(crate) fn set_pane_binding_nonce(
+        &self,
+        pane: &PaneId,
+        nonce: &str,
+    ) -> Result<(), TransportError> {
+        let argv = [
+            "tmux".to_string(),
+            "set-option".to_string(),
+            "-p".to_string(),
+            "-t".to_string(),
+            pane.as_str().to_string(),
+            TMUX_PANE_BINDING_NONCE_OPTION.to_string(),
+            nonce.to_string(),
+        ];
+        self.run_ok(&argv)
+    }
+
     /// Backend with an injected runner (tests: canned/recording tmux output). Shared default socket.
     pub fn with_runner(runner: Box<dyn CommandRunner>) -> Self {
         Self {
@@ -2340,7 +2360,7 @@ impl Transport for TmuxBackend {
         // killing the per-pane display-message N+1 fallback.
         // Use a printable sentinel so the 12-field frame stays explicit in argv/log evidence;
         // `parse_pane_info_line` retains compatibility with legacy tab-delimited output.
-        const TMUX_PANE_FORMAT: &str = "#{pane_id}__TA_FIELD__#{session_name}__TA_FIELD__#{window_index}__TA_FIELD__#{window_name}__TA_FIELD__#{pane_index}__TA_FIELD__#{pane_tty}__TA_FIELD__#{pane_current_command}__TA_FIELD__#{pane_active}__TA_FIELD__#{pane_current_path}__TA_FIELD__#{session_attached}__TA_FIELD__#{pane_in_mode}__TA_FIELD__#{pane_pid}";
+        const TMUX_PANE_FORMAT: &str = "#{pane_id}__TA_FIELD__#{session_name}__TA_FIELD__#{window_index}__TA_FIELD__#{window_name}__TA_FIELD__#{pane_index}__TA_FIELD__#{pane_tty}__TA_FIELD__#{pane_current_command}__TA_FIELD__#{pane_active}__TA_FIELD__#{pane_current_path}__TA_FIELD__#{session_attached}__TA_FIELD__#{pane_in_mode}__TA_FIELD__#{pane_pid}__TA_FIELD__#{@team_agent_pane_binding_nonce}";
         let argv = self.tmux_argv(&[
             "tmux".to_string(),
             "list-panes".to_string(),
@@ -2544,6 +2564,13 @@ fn parse_pane_info_line(line: &str) -> Option<PaneInfo> {
     if fields.len() < 11 {
         return None;
     }
+    let mut leader_env = BTreeMap::new();
+    if let Some(nonce) = fields.get(12).and_then(|raw| non_empty(raw)) {
+        leader_env.insert(
+            PANE_BINDING_NONCE_METADATA_KEY.to_string(),
+            nonce.to_string(),
+        );
+    }
     Some(PaneInfo {
         pane_id: PaneId::new(fields[0]),
         session: SessionName::new(fields[1]),
@@ -2555,7 +2582,7 @@ fn parse_pane_info_line(line: &str) -> Option<PaneInfo> {
         active: fields[7] == "1",
         current_path: non_empty(fields[8]).map(PathBuf::from),
         pane_pid: fields.get(11).and_then(|raw| parse_optional_u32(raw)),
-        leader_env: BTreeMap::new(),
+        leader_env,
     })
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-agent/installer",
-  "version": "0.5.51",
+  "version": "0.5.53",
   "description": "npx installer for Team Agent",
   "keywords": [
     "codex",
@@ -20,9 +20,9 @@
     "team-agent-installer": "npm/install.mjs"
   },
   "optionalDependencies": {
-    "@team-agent/cli-darwin-arm64": "0.5.51",
-    "@team-agent/cli-darwin-x64": "0.5.51",
-    "@team-agent/cli-linux-x64": "0.5.51"
+    "@team-agent/cli-darwin-arm64": "0.5.53",
+    "@team-agent/cli-darwin-x64": "0.5.53",
+    "@team-agent/cli-linux-x64": "0.5.53"
   },
   "scripts": {
     "postinstall": "node npm/bincheck.mjs",

package/skills/team-agent/SKILL.md

@@ -87,15 +87,15 @@ Use `team-agent attach-leader` / `team-agent claim-leader` to bind the leader pa
 
 | Provider | Resume | Turn-state detection | Per-worker model override | Native session fork |
 |---|---|---|---|---|
-| `claude` / `claude_code` | yes (`--resume <id>`, transcript-verified) | yes (JSONL stream) | yes (role `model` overrides `provider_models`) | yes (`--fork-session` + new `--session-id`) |
+| `claude` / `claude_code` | yes (`--resume <id>`, transcript-verified) | yes (JSONL stream) | yes (role `model` overrides `provider_models`) | yes (snapshot copy + only `--resume <snapshot-id>`) |
 | `codex` | yes (`codex resume <id>`, session-store-verified) | yes (turn JSONL) | yes (role `model`) | yes (`codex fork`) |
-| `copilot` | yes (`copilot --resume <id|name>`, sqlite `sessions` row) | not yet (phase 1: `provider.classify.unsupported` event) | yes (role `model`) | **no — `CapabilityUnsupported`** |
+| `copilot` | yes (`copilot --resume <id|name>`, sqlite `sessions` row) | not yet (phase 1: `provider.classify.unsupported` event) | yes (role `model`) | yes (isolated `COPILOT_HOME` store fork) |
 | `gemini_cli` | no | no | yes | no |
 | `fake` (testing only) | no | no | n/a | no |
 
 Notes:
 - Per-worker model override means a role-doc `model:` value wins over `TEAM.md` `provider_models.<provider>`; subscription defaults still fill blanks.
-- Copilot's `caps.fork=false` is a hard refusal in 0.3.7 — `team-agent fork-agent` against a Copilot worker returns a structured `CapabilityUnsupported` error instead of falling back to a fresh spawn (honest by design).
+- Copilot fork copies the source session into an isolated `COPILOT_HOME` and rekeys its SQLite session references atomically. Missing or incomplete backing fails closed; it never falls back to a fresh spawn.
 - Copilot phase-1 idle/turn detection is intentionally Unknown; tick emits a single explicit `provider.classify.unsupported` event per state change (P4 dedup), never a silent default.
 
 ## Provider Prep
@@ -213,10 +213,15 @@ team-agent add-agent reviewer --role-file .team/current/agents/reviewer.md --wor
 Semantic distinction:
 
 - `team-agent add-agent <agent> --role-file <file>` — add a **new** worker not yet in team state.
+- `team-agent clone-agent <source> --as <new>` — reread the source worker's latest role file and start a fresh provider seat. It never copies conversation context. Success is initially honest `capture_state: pending_first_turn` with `session_id`, `new_session_id`, and `backing_path` all null; after the first turn, canonical capture changes the state to `captured` and fills the backing tuple.
+- `team-agent fork-agent <source> --as <new>` — reread the same latest role file and create a distinct, verified provider session that forks the source context. If the provider backing cannot be verified, the command fails and rolls back instead of silently cloning fresh.
 - `team-agent start-agent <agent>` — (re)launch a worker that **already exists** in team state but whose window is missing.
+- `team-agent reset-agent <agent> --discard-session` — keep the same seat and deliberately start it with fresh context.
 - `team-agent restart .` — resume a fully **stopped** team from stored worker sessions.
 - `team-agent quick-start <dir>` — first-time team creation from role docs; for existing teams use `restart`, and use `restart --allow-fresh` only after explicit user consent to discard context.
 
+Clone/fork names are always explicit: run concurrent calls with a different `--as` value for each new seat. Fork success includes a verified new `session_id` and independent backing; a tmux window alone is not fork success. Clone success uses the honest `pending_first_turn` state above until first-turn capture, never a fabricated verified tuple. Updating the source role file affects the next clone/fork without requiring a full-team rebuild. Automatic knowledge write-back from a clone/fork into the source role file is not provided.
+
 Removing a worker at runtime is the symmetric `team-agent remove-agent <agent> --workspace . --confirm`.
 
 ## Worker Protocol